# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: phantom stealer

# Reference: https://x.com/Fact_Finder03/status/1889533943906533841

phantom.ceo
stealer.phantom.ceo

# Reference: https://x.com/Fact_Finder03/status/1889702965298057339

phantom-crypter.vip

# Reference: https://x.com/solostalking/status/1899178554065354997

phantomservicess.sell.app
phtm.pw
stealer.phtm.pw

# Reference: https://x.com/suyog41/status/1902549568157626672
# Reference: https://www.virustotal.com/gui/file/edbf5b0f2d51a788719d2c38ea765fc9cd52c6d9887ff30d2e98898bda24d2f3/detection

phantomsoftwares.site

# Reference: https://x.com/JAMESWT_WT/status/1951179559799316557
# Reference: https://www.virustotal.com/gui/file/94a8a1c63b652807eadeb970c1682499c3b4747a0ec0f063af531aec9708b963/detection
# Reference: https://www.virustotal.com/gui/file/c18fd74484de9681ac1dc7ecf9786964ac4e7dba20983cd249ee4ce544809834/detection

samc0ndubai.com
server.samc0ndubai.com

# Reference: https://x.com/solostalking/status/1974022633483112833
# Reference: https://www.virustotal.com/gui/file/74198831c9211b33775a6fb0b324731d701c44fd716484715453261252e5d6cb/detection

193.233.113.101:1111

# Reference: https://x.com/mayank_cti/status/2006824190108930523

flood.ink

# Reference: https://x.com/smica83/status/2046662085837308179
# Reference: https://tria.ge/260421-xec83aax6r/behavioral1
# Reference: https://www.virustotal.com/gui/file/c023166a028773efc229e5d4a052fd768d356f7674bc57de91169b9c47bcae55/detection

109.73.128.91:21
109.73.128.91:56944
109.73.128.91:60120
109.73.128.91:62143
109.73.128.91:63263
corella.ro
ftp.corella.ro

# Reference: https://x.com/malwrhunterteam/status/2051396610920177687

194.59.31.192:8443

# Reference: https://x.com/suyog41/status/2051611998287507824
# Reference: https://www.virustotal.com/gui/file/6b59874f170d80afd0a0cf8ebbd4078e1349bdad6375e65065528c9b691e68c5/detection

162.217.248.219:4449
45.62.170.148:4449
sdlxmetal.com
nanejaojmnas.duckdns.org
