# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://threatfox.abuse.ch/browse/malware/win.revstealer/ (# 2026-07-31)

adukonten.id
all-moon.store
alpha-zone.click
ambergroup.one
amberreport.one
amberscreen.lol
apiforge.click
aqua-grid77.xyz
aquadisplay.lol
atlasbyte.xyz
autoscope.sbs
avtohisse.az
bench-grid.one
birch-studio29.one
brewtrail.click
brighttempo.lol
calmshelf67.xyz
calmtexture.click
canvascampus.xyz
cchain-gov.org
cchain.pro
cchaingov.org
ccw.lat
cdnbazaar.xyz
cdndock.click
cekpejabat.id
civic-team.xyz
civicblaze.click
clearlens.click
coachdesk.click
coast-space.lol
coastpilot.lol
common-store.lol
commonsource14.click
commontexture76.one
commonup.click
coralfabric.one
coralpark.xyz
cove-post.xyz
craft-hq19.one
craftlayer.click
creek-place.one
creekpath.lol
data-square.click
deepclimate.click
deltapress.one
dev-kit.click
duskpoint27.click
eastbox.lol
easttrail5.xyz
eliastec.top
everatlas.lol
explore-store.xyz
explorequarter.xyz
featness.app
flexisoftwarebd.com
frame-quest.lol
frame-works.click
frameai35.xyz
framecove.lol
framerun.click
garden-pixel.one
gentle-weekly.lol
gentleline.click
gentleroom.lol
get-coast.xyz
go-tools.click
harborcoast.xyz
harvestbazaar.click
hazelkit.one
hazelshelf.xyz
health-ly.lol
hexatecha.com
ivoryboard.lol
ivorytexture.lol
jade-hub.click
jadedock43.monster
journalfleet.lol
journey-pattern.lol
kilnteam35.click
kitchencraft.lol
kitchensignal.click
lakepeak.lol
lighttexture18.one
local-screen.click
loomweather.one
lunartempo.xyz
madispace.net
maxvault.pics
meadowrhythm.xyz
mentorcreek25.lol
mint-screen.xyz
mintfair.click
modellab84.xyz
motiondepot.one
mycourt33.click
myp0rtal.com
neonhq.xyz
net-weather.lol
nexbu.cloud
nextland18.lol
node-stock.lol
northform.click
northjournal.one
novagarden.lol
oak-den84.one
omega-fabric41.lol
omegamanor.lat
pantryly83.one
pinetile86.click
pinmediahub.com
pixelplaza.click
planden35.click
prime-track.xyz
procrew95.xyz
purestack.lol
reefapp.lol
ridgefield.lol
roast-core85.click
runmanor.click
sciencepulse.net
shorecourt.lol
sigmacoast.one
skypress.click
smartcore.click
sodasyat.sa
steadygroup.xyz
stillpath8.one
summerport.click
techreef.one
titanboard.one
topsite.one
travel-scope.lol
travel-track.xyz
valley-north.lol
valley-screen.click
vibedisplay32.one
vibepulse.one
viberun.lol
voyagezone.click
wanderwest.one
warm-climate.click
warmtools.one
waveboard.one
wellness-canvas.click
works-rhythm8.click
youthchain.cc
zencourt.lol
admin.avtohisse.az
admin.get-coast.xyz
admin.topsite.one
admin9.planden35.click
alfenix33.top
api.atlasbyte.xyz
api.autoscope.sbs
api.featness.app
api.flexisoftwarebd.com
api.pinmediahub.com
api.sodasyat.sa
archive.mintfair.click
assets5.frameai35.xyz
audit.techreef.one
auth.commonup.click
azergold.myp0rtal.com
beta.dev-kit.click
beta.local-screen.click
beta.oak-den84.one
beta.smartcore.click
beta9.coralfabric.one
board8.creekpath.lol
bridge.garden-pixel.one
bridge7.warmtools.one
cache.coastpilot.lol
catalog3.calmtexture.click
cdn.deltapress.one
check.birch-studio29.one
config.cove-post.xyz
content.lakepeak.lol
core.adukonten.id
core.coachdesk.click
core2.craft-hq19.one
cron6.health-ly.lol
dash.craftlayer.click
deploy.works-rhythm8.click
dev2.kitchensignal.click
dns.frame-works.click
dns.jadedock43.monster
dns.maxvault.pics
docs.journey-pattern.lol
docs.procrew95.xyz
edge.amberreport.one
edge.ivorytexture.lol
edge.kitchencraft.lol
edge1.gentleline.click
elastic.madispace.net
eth.cchain-gov.org
eth.cchain.pro
eth.cchaingov.org
eth.ccw.lat
eth.youthchain.cc
event.wanderwest.one
fastmoneyflux.com
files4.jade-hub.click
gate.runmanor.click
gate.steadygroup.xyz
gate.voyagezone.click
guard.warm-climate.click
health.duskpoint27.click
health.harborcoast.xyz
health.hazelkit.one
health.sigmacoast.one
health0.pinetile86.click
hub4.cdndock.click
hw.hexatecha.com
index.gentle-weekly.lol
index.ridgefield.lol
job.coast-space.lol
lab.loomweather.one
link9.prime-track.xyz
log.neonhq.xyz
lookup.hazelshelf.xyz
main.commontexture76.one
meta.bench-grid.one
meta.calmshelf67.xyz
meta1.net-weather.lol
meta2.go-tools.click
metric.mentorcreek25.lol
metric3.viberun.lol
monitor5.roast-core85.click
monitor9.easttrail5.xyz
node.gentleroom.lol
node3.meadowrhythm.xyz
ops.canvascampus.xyz
ops4.coralpark.xyz
panel.summerport.click
ping.node-stock.lol
ping0.aqua-grid77.xyz
pool8.reefapp.lol
portal.framerun.click
portal.wellness-canvas.click
prod.commonsource14.click
prod5.data-square.click
proxy.everatlas.lol
pull.alpha-zone.click
pull.valley-screen.click
pull7.motiondepot.one
push.brewtrail.click
push.pixelplaza.click
push.shorecourt.lol
queue.cdnbazaar.xyz
queue8.vibepulse.one
registry.amberscreen.lol
registry.lighttexture18.one
relay0.aquadisplay.lol
relay7.apiforge.click
report.clearlens.click
resolve.mint-screen.xyz
route.ambergroup.one
route4.modellab84.xyz
sancamilowebhook.nexbu.cloud
scan.civicblaze.click
scan.journalfleet.lol
scheduler.civic-team.xyz
scheduler2.travel-scope.lol
search.cekpejabat.id
serve0.omega-fabric41.lol
setup.explore-store.xyz
setup.waveboard.one
sfr.all-moon.store
sso.northjournal.one
sso.travel-track.xyz
stage.explorequarter.xyz
stage.mycourt33.click
stage.vibedisplay32.one
stage6.stillpath8.one
status.creek-place.one
status7.skypress.click
store.framecove.lol
store.purestack.lol
store.titanboard.one
sync.northform.click
task.nextland18.lol
task.pantryly83.one
task.valley-north.lol
test.kilnteam35.click
trace.eastbox.lol
trace.lunartempo.xyz
trace.novagarden.lol
upload.frame-quest.lol
vault8.brighttempo.lol
watch.common-store.lol
watch.harvestbazaar.click
watch7.deepclimate.click
web.omegamanor.lat
web.zencourt.lol
worker.ivoryboard.lol
