android_tgtoxic.txt

# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: toxicpanda

# Reference: https://hatching.io/blog/triage-insights-ep3/
# Reference: https://tria.ge/241028-gwyy4azmbr/behavioral1
# Reference: https://tria.ge/241015-scg21s1ajd/behavioral2
# Reference: https://app.validin.com/detail?find=185.10.16.111&type=ip4&ref_id=66dfba0e124#tab=resolutions

99spedmart.me
atnp.lol
bnwu.lol
brwd.lol
cgtp.lol
ckysp.top
dblpap1.top
dblpap3.top
dbltest.top
dbltest6.top
dbltest8.top
dksu.top
dpds.lol
dpkpt.top
gfpms.top
kmpct.top
mixcom.one
msdwq.top
mwscg.top
skhgd.top
ctrl.dksu.top
ctrl.freebasic.cn
ctrl.mixcom.one
d.99spedmart.me
d.atnp.lol
d.bnwu.lol
d.brwd.lol
d.ckysp.top
d.dblpap1.top
d.dblpap3.top
d.dbltest.top
d.dbltest6.top
d.dbltest8.top
d.dpkpt.top
d.gfpms.top
d.kmpct.top
d.marubeni.biz
d.msdwq.top
d.mwscg.top
d.skhgd.top
s.99spedmart.me
s.atnp.lol
s.bnwu.lol
s.brwd.lol
s.cgtp.lol
s.ckysp.top
s.dblpap1.top
s.dblpap3.top
s.dbltest.top
s.dbltest6.top
s.dbltest8.top
s.dpds.lol
s.dpkpt.top
s.gfpms.top
s.kmpct.top
s.msdwq.top
s.mwscg.top
s.skhgd.top
sg.dksu.top

# Reference: https://www.cleafy.com/cleafy-labs/toxicpanda-a-new-banking-trojan-from-asia-hit-europe-and-latam

cpt.lol
dblpap2.top
dblxz.lol
fgta.lol
kmpct.top
unk.lol

# Reference: https://app.validin.com/detail?find=38.60.220.205&type=ip4&ref_id=67e47cf037c#tab=resolutions

adx.lol
agp.lol
amq.lol
asm.lol
cch.lol
cdf.lol
cpt.lol
dvn.lol
efv.one
qtm.lol
sgk.lol
shz.lol
srt.lol
szd.lol
unk.lol
vte.lol
vtp.lol
wed.lol
wma.lol
xip.lol
ybz.lol
ytw.lol
d.agp.lol
d.asm.lol
d.cch.lol
d.cdf.lol
d.cpt.lol
d.efv.one
d.qtm.lol
d.sgk.lol
d.shz.lol
d.srt.lol
d.vte.lol
d.vtp.lol
d.wed.lol
d.wma.lol
d.xip.lol
d.ytw.lol
s.agp.lol
s.asm.lol
s.cch.lol
s.cdf.lol
s.cpt.lol
s.efv.one
s.qtm.lol
s.sgk.lol
s.shz.lol
s.srt.lol
s.vte.lol
s.vtp.lol
s.wed.lol
s.wma.lol
s.xip.lol
s.ytw.lol

# Reference: https://app.validin.com/detail?find=38.54.61.108&type=ip4&ref_id=5bcd6ce1533#tab=resolutions

anmgov.one
bfw.lol
btcgov.lat
btcgov.one
cfm.lol
ddcngov.one
dddtgov.lol
dmh.lat
dsv.lat
dvp.lol
egd.lol
fct.lat
gat.lol
gsy.lol
gvw.lat
kmk.lat
kpg.lat
kwa.lol
mqf.lol
mvd.lol
myt.lol
nvf.lol
pbv.lol
pkm.lol
pse.lol
pth.lol
qsm.lol
sapn.one
sfd.lol
sfp.lol
shm.lol
shopeepro.lol
twk.lat
uew.lol
ute.lol
vfq.lol
wkh.lol
wmg.lat
ybt.lol
ymc.lat
d.anmgov.one
d.bfw.lol
d.btcgov.lat
d.btcgov.one
d.cek.lat
d.cfm.lol
d.ddcngov.one
d.dddtgov.lol
d.dmh.lat
d.dsv.lat
d.dvp.lol
d.egd.lol
d.fct.lat
d.gat.lol
d.gsy.lol
d.gvw.lat
d.kmk.lat
d.kpg.lat
d.kwa.lol
d.mqf.lol
d.mvd.lol
d.myt.lol
d.nvf.lol
d.pbv.lol
d.pkm.lol
d.pse.lol
d.pth.lol
d.qsm.lol
d.sapn.one
d.sfd.lol
d.sfp.lol
d.shm.lol
d.shopeepro.lol
d.twk.lat
d.uew.lol
d.ute.lol
d.vfq.lol
d.wkh.lol
d.wmg.lat
d.ybt.lol
d.ymc.lat
s.bfw.lol
s.btcgov.lat
s.btcgov.one
s.cek.lat
s.cfm.lol
s.ddcngov.one
s.dddtgov.lol
s.dmh.lat
s.dsv.lat
s.dvp.lol
s.egd.lol
s.fct.lat
s.gat.lol
s.gsy.lol
s.gvw.lat
s.kmk.lat
s.kpg.lat
s.kwa.lol
s.mqf.lol
s.mvd.lol
s.myt.lol
s.nvf.lol
s.pbv.lol
s.pkm.lol
s.pse.lol
s.pth.lol
s.qsm.lol
s.sapn.one
s.sfd.lol
s.sfp.lol
s.shm.lol
s.shopeepro.lol
s.twk.lat
s.uew.lol
s.ute.lol
s.vfq.lol
s.wkh.lol
s.wmg.lat
s.ybt.lol
s.ymc.lat

# Reference: https://app.validin.com/detail?find=38.60.146.78&type=ip4&ref_id=5bcd6ce1533#tab=resolutions

anmgov.one
s.anmgov.one

# Reference: https://app.validin.com/detail?find=38.60.220.205&type=ip4&ref_id=5bcd6ce1533#tab=resolutions

ter.lol

# Reference: https://app.validin.com/detail?find=38.54.89.76&type=ip4&ref_id=03fd728e199#tab=resolutions

atu.lol
aut.lol
bng.lol
cek.lat
cen.lol
covid19gov.one
dde.lol
dvcgov.lol
dwx.lol
fzg.lol
gcd.lol
gdt.lol
gdtgou.life
gdtgov.asia
gdtgov.cam
gdtgov.cfd
gdtgov.fun
gdtgov.life
gdtgov.lol
gdtgov.sbs
gdtgov.site
hav.lol
hcw.lol
hhy.lol
isu.lol
jee.lol
jkg.lol
juk.lol
kpp.lol
kyy.lol
mte.lol
niy.lol
nvn.lol
nwm.lol
nxz.lol
ooq.lol
ote.lol
ovg.lol
ovn.lol
pbb.lol
pcd.lol
pcn.lol
phi.lol
phv.lol
pii.lol
pnd.lol
psw.lol
pyd.lol
qen.lol
qey.lol
qnm.lol
qsc.lol
qwd.lol
sapn.lol
skc.lol
so6.lol
spg.lol
tae.lol
tey.lol
tua.lol
tus.lol
tvn.lol
v2n.lol
vdt.lol
vn9.lol
vnn.lol
vno.lol
vnt.lol
vnv.lol
vnw.lol
vvt.lol
wac.lol
weo.lol
wtk.lol
zbj.lol
znm.lol
zzb.lol
d.adx.lol
d.amq.lol
d.atu.lol
d.aut.lol
d.bng.lol
d.cen.lol
d.covid19gov.one
d.dde.lol
d.dvcgov.lol
d.dvn.lol
d.dwx.lol
d.fzg.lol
d.gcd.lol
d.gdt.lol
d.gdtgou.life
d.gdtgov.asia
d.gdtgov.cam
d.gdtgov.cfd
d.gdtgov.fun
d.gdtgov.life
d.gdtgov.lol
d.gdtgov.sbs
d.gdtgov.site
d.hav.lol
d.hcw.lol
d.hhy.lol
d.isu.lol
d.jee.lol
d.jkg.lol
d.juk.lol
d.kpp.lol
d.kyy.lol
d.mte.lol
d.niy.lol
d.nvn.lol
d.nwm.lol
d.nxz.lol
d.ooq.lol
d.ote.lol
d.ovg.lol
d.ovn.lol
d.pbb.lol
d.pcd.lol
d.pcn.lol
d.phi.lol
d.phv.lol
d.pii.lol
d.pnd.lol
d.psw.lol
d.pyd.lol
d.qen.lol
d.qey.lol
d.qnm.lol
d.qsc.lol
d.qwd.lol
d.sapn.lol
d.skc.lol
d.so6.lol
d.spg.lol
d.szd.lol
d.tae.lol
d.ter.lol
d.tey.lol
d.tua.lol
d.tus.lol
d.tvn.lol
d.unk.lol
d.v2n.lol
d.vdt.lol
d.vn9.lol
d.vnn.lol
d.vno.lol
d.vnt.lol
d.vnv.lol
d.vnw.lol
d.vvt.lol
d.wac.lol
d.weo.lol
d.wtk.lol
d.ybz.lol
d.zbj.lol
d.znm.lol
d.zzb.lol
s.adx.lol
s.amq.lol
s.aut.lol
s.covid19gov.one
s.dde.lol
s.dvcgov.lol
s.dvn.lol
s.dwx.lol
s.fzg.lol
s.gdt.lol
s.gdtgov.cam
s.gdtgov.fun
s.gdtgov.sbs
s.gdtgov.site
s.hav.lol
s.hcw.lol
s.hhy.lol
s.isu.lol
s.jkg.lol
s.juk.lol
s.kpp.lol
s.kyy.lol
s.mte.lol
s.nvn.lol
s.nwm.lol
s.nxz.lol
s.ooq.lol
s.ote.lol
s.ovg.lol
s.ovn.lol
s.pbb.lol
s.pcn.lol
s.phv.lol
s.pii.lol
s.psw.lol
s.pyd.lol
s.qey.lol
s.qnm.lol
s.qsc.lol
s.sapn.lol
s.spg.lol
s.szd.lol
s.tae.lol
s.ter.lol
s.tey.lol
s.tua.lol
s.tus.lol
s.tvn.lol
s.v2n.lol
s.vdt.lol
s.vn9.lol
s.vnn.lol
s.vno.lol
s.vnt.lol
s.vnv.lol
s.vnw.lol
s.vvt.lol
s.wac.lol
s.weo.lol
s.wtk.lol
s.ybz.lol
s.zbj.lol
s.znm.lol
s.zzb.lol

# Reference: https://x.com/karol_paciorek/status/1876658861051932874
# Reference: https://pilot.validin.com/detail?type=ip&find=217.156.67.219#tab=resolutions

aykn.top
ayte.top
bauw.top
bingx.sbs
daraz.asia
daraz.digital
ewjh.top
fbr.digital
jpnapp.com
kadb.top
kaet.top
kaqp.top
kmba.top
msda.top
mvfa.top
patm.top
qhte.top
sajw.top
sakd.top
saywe.top
smet.top
smuw.top
tbva.top
vfam.top
d.aykn.top
d.ayte.top
d.bauw.top
d.bingx.sbs
d.daraz.asia
d.daraz.digital
d.ewjh.top
d.fbr.digital
d.jpnapp.com
d.kadb.top
d.kaet.top
d.kaqp.top
d.kmba.top
d.msda.top
d.mvfa.top
d.patm.top
d.qhte.top
d.sajw.top
d.sakd.top
d.saywe.top
d.smet.top
d.smuw.top
d.tbva.top
d.vfam.top
s.aykn.top
s.ayte.top
s.bauw.top
s.bingx.sbs
s.daraz.asia
s.daraz.digital
s.ewjh.top
s.fbr.digital
s.jpnapp.com
s.kadb.top
s.kaet.top
s.kaqp.top
s.kmba.top
s.msda.top
s.mvfa.top
s.patm.top
s.qhte.top
s.sajw.top
s.sakd.top
s.saywe.top
s.smet.top
s.smuw.top
s.tbva.top
s.vfam.top

# Reference: https://x.com/JAMESWT_MHT/status/1866807305951457302

cuenta-ntflx.com