# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://threatfox.abuse.ch/browse/malware/win.revstealer/ (# 2026-07-31)

alpha-zone.click
ambergroup.one
amberscreen.lol
apiforge.click
aqua-grid77.xyz
atlasbyte.xyz
autoscope.sbs
avtohisse.az
bench-grid.one
birch-studio29.one
brewtrail.click
brighttempo.lol
calmtexture.click
canvascampus.xyz
cchain-gov.org
cchain.pro
cchaingov.org
ccw.lat
cdnbazaar.xyz
cekpejabat.id
civic-team.xyz
civicblaze.click
clearlens.click
coast-space.lol
coastpilot.lol
common-store.lol
commonsource14.click
commontexture76.one
cove-post.xyz
craftlayer.click
creek-place.one
creekpath.lol
deepclimate.click
dev-kit.click
easttrail5.xyz
everatlas.lol
explore-store.xyz
explorequarter.xyz
frame-quest.lol
frame-works.click
frameai35.xyz
framecove.lol
framerun.click
garden-pixel.one
gentle-weekly.lol
gentleline.click
gentleroom.lol
get-coast.xyz
harvestbazaar.click
hazelkit.one
hazelshelf.xyz
health-ly.lol
hexatecha.com
ivoryboard.lol
ivorytexture.lol
jade-hub.click
jadedock43.monster
kilnteam35.click
kitchencraft.lol
kitchensignal.click
lakepeak.lol
lighttexture18.one
loomweather.one
lunartempo.xyz
madispace.net
maxvault.pics
meadowrhythm.xyz
mentorcreek25.lol
mint-screen.xyz
mintfair.click
modellab84.xyz
motiondepot.one
mycourt33.click
neonhq.xyz
net-weather.lol
nexbu.cloud
node-stock.lol
northform.click
northjournal.one
novagarden.lol
omega-fabric41.lol
omegamanor.lat
pinetile86.click
pixelplaza.click
planden35.click
prime-track.xyz
procrew95.xyz
purestack.lol
roast-core85.click
shorecourt.lol
skypress.click
sodasyat.sa
steadygroup.xyz
stillpath8.one
summerport.click
techreef.one
titanboard.one
topsite.one
travel-scope.lol
valley-north.lol
vibepulse.one
voyagezone.click
wanderwest.one
warm-climate.click
warmtools.one
waveboard.one
wellness-canvas.click
works-rhythm8.click
youthchain.cc
zencourt.lol
admin.avtohisse.az
admin.get-coast.xyz
admin.topsite.one
admin9.planden35.click
alfenix33.top
api.atlasbyte.xyz
api.autoscope.sbs
api.sodasyat.sa
archive.mintfair.click
assets5.frameai35.xyz
audit.techreef.one
beta.dev-kit.click
board8.creekpath.lol
bridge.garden-pixel.one
bridge7.warmtools.one
cache.coastpilot.lol
catalog3.calmtexture.click
check.birch-studio29.one
config.cove-post.xyz
content.lakepeak.lol
cron6.health-ly.lol
dash.craftlayer.click
deploy.works-rhythm8.click
dev2.kitchensignal.click
dns.frame-works.click
dns.jadedock43.monster
dns.maxvault.pics
docs.procrew95.xyz
edge.ivorytexture.lol
edge.kitchencraft.lol
edge1.gentleline.click
elastic.madispace.net
eth.cchain-gov.org
eth.cchain.pro
eth.cchaingov.org
eth.ccw.lat
eth.youthchain.cc
event.wanderwest.one
fastmoneyflux.com
files4.jade-hub.click
gate.steadygroup.xyz
gate.voyagezone.click
guard.warm-climate.click
health.hazelkit.one
health0.pinetile86.click
hw.hexatecha.com
index.gentle-weekly.lol
job.coast-space.lol
lab.loomweather.one
link9.prime-track.xyz
log.neonhq.xyz
lookup.hazelshelf.xyz
main.commontexture76.one
meta.bench-grid.one
meta1.net-weather.lol
metric.mentorcreek25.lol
monitor5.roast-core85.click
monitor9.easttrail5.xyz
node.gentleroom.lol
node3.meadowrhythm.xyz
ops.canvascampus.xyz
panel.summerport.click
ping.node-stock.lol
ping0.aqua-grid77.xyz
portal.framerun.click
portal.wellness-canvas.click
prod.commonsource14.click
proxy.everatlas.lol
pull.alpha-zone.click
pull7.motiondepot.one
push.brewtrail.click
push.pixelplaza.click
push.shorecourt.lol
queue.cdnbazaar.xyz
queue8.vibepulse.one
registry.amberscreen.lol
registry.lighttexture18.one
relay7.apiforge.click
report.clearlens.click
resolve.mint-screen.xyz
route.ambergroup.one
route4.modellab84.xyz
sancamilowebhook.nexbu.cloud
scan.civicblaze.click
scheduler.civic-team.xyz
scheduler2.travel-scope.lol
search.cekpejabat.id
serve0.omega-fabric41.lol
setup.explore-store.xyz
setup.waveboard.one
sso.northjournal.one
stage.explorequarter.xyz
stage.mycourt33.click
stage6.stillpath8.one
status.creek-place.one
status7.skypress.click
store.framecove.lol
store.purestack.lol
store.titanboard.one
sync.northform.click
task.valley-north.lol
test.kilnteam35.click
trace.lunartempo.xyz
trace.novagarden.lol
upload.frame-quest.lol
vault8.brighttempo.lol
watch.common-store.lol
watch.harvestbazaar.click
watch7.deepclimate.click
web.omegamanor.lat
web.zencourt.lol
worker.ivoryboard.lol
