# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.alienvault.com/open-threat-exchange/blog/cve-2012-0158-tibet-targeted-attacks-and-so-on

1.test.3322.org.cn
2.test.3322.org.cn
3.test.3322.org.cn
4.test.3322.org.cn
123ewqasdcxz.xicp.net
hoop-america.oicp.net

# Reference: https://www.virustotal.com/gui/file/0d2ee9ade24163613772fdda201af985d852ab506e3d3e7f07fb3fa8b0853560/detection
# Reference: https://citizenlab.ca/2019/09/poison-carp-tibetan-groups-targeted-with-1-click-mobile-exploits/
# Reference: https://github.com/citizenlab/malware-indicators/blob/master/201909_MissingLink/iocs.csv
# Reference: https://twitter.com/craiu/status/1176437943369703424
# Reference: https://otx.alienvault.com/pulse/5d89e04cea5c55ee87a6aa05

43.251.16.87:5000
45.76.149.154:5000
66.42.58.59:9078
antmoving.online
beemail.online
bf.mk
energy-mail.org
gmailapp.me
gmail.isooncloud.com
izelense.com
mailanalysis.services
mailcontactanalysis.online
mailnotes.online
mon7am.tk
mon7am.000webhostapp.com
msap.services
news.cmitcsubs.tk
polarismail.services
rf.mk
walkingnote.online

# Reference: https://otx.alienvault.com/pulse/5d9c9101d569bf434dbc9385

client-user-id.com
