<commit_before># Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: roamingmantis, xloader, fakespy

# Reference: https://securelist.com/roaming-mantis-uses-dns-hijacking-to-infect-android-smartphones/85178/

haoxingfu01.ddns.net
shaoye11.hopto.org

# Reference: https://securelist.com/roaming-mantis-part-3/88071/

sagawa-otqwt.com
sagawa-polsw.com

# Reference: https://lukasstefanko.com/2018/10/video-analysis-of-android-sms-worm-spying-on-victims.html

sagawa-mama.com

# Reference: https://www.fortinet.com/blog/threat-research/fakespy-comes-back--new-wave-hits-japan.html

sagawa-ba.com
sagawa-wow.com
sagawa-iso.com

# Reference: https://securelist.com/roaming-mantis-part-iv/90332/
# Reference: https://otx.alienvault.com/pulse/5ca537055fe8d2200c37306e
# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/new-version-of-xloader-that-disguises-as-android-apps-and-an-ios-profile-holds-new-links-to-fakespy/
# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/a-look-into-the-connection-between-xloader-and-fakespy-and-their-possible-ties-with-the-yanbian-gang/
# Reference: https://securityaffairs.co/wordpress/83317/breaking-news/xloader-6-twitter.html

apple-icloud.qwq-japan.com
apple-icloud.zqo-japan.com
apple-icloud.qwe-japan.com
ffakecg.com
files.spamo.jp
mailsa-qau.com
mailsa-wqu.com
mailsa-qaw.com
mailsa-qae.com
mailsa-wqq.com
mailsa-qaf.com
mailsa-wqe.com
mailsa-wqp.com
mailsa-wqw.com
mailsa-wqo.com
mailsa-qau.com
mailsa-qaf.com
nttdocomo-qae.com
nttdocomo-qaw.com
nttdocomo-qar.com
nttdocomo-qaq.com
nttdocomo-qat.com
sagawa-mqd.com
sagawa-bz.com
sagawa-mwm.com
sagawa-reg.com
759383.com
711231.com
923525.com
923915.com
975685.com
172.16.17.32:28855
192.168.127.12:8822
192.168.127.12:28855
192.168.127.12:28855
172.16.58.3:28855
172.16.58.3:28855
192.168.3.11:28855
192.168.3.11:28855
172.16.31.10:28833
172.16.31.10:28855
172.16.58.3:28833
172.16.58.3:28844
172.16.58.3:28855
192.168.127.12:28833
192.168.127.12:28844
192.168.127.12:28855
172.16.31.10:28844
192.168.127.12:28855
http://172.16.17.32/xvideo/

# Reference: https://twitter.com/makflwana/status/1087626405075050496

sagawa-ozi.com

# Reference: https://twitter.com/ninoseki/status/1115061669929992192

softbank-b.com
jppost-to.com
nttdocomo-ki.com
id-auone.com

# Reference: https://twitter.com/LukasStefanko/status/1141294968654508033

jppost-ami.com
jppost-ata.com
jppost-be.com

# Reference: https://twitter.com/ninoseki/status/1143354016904044544
# Reference: https://urlscan.io/ip/104.143.94.206

jppost-ka.com
jppost-tu.com

# Reference: https://twitter.com/PhishStats/status/1135473323008253952

jppost-mo.com

# Reference: http://ka-mato-ru.sub.jp/top/?p=30709 (Japanese)

jppost-aka.com
jppost-aki.com
jppost-aku.com
jppost-fu.com
jppost-ga.com
jppost-ge.com
jppost-gi.com
jppost-gu.com
jppost-ha.com
jppost-he.com
jppost-hi.com
jppost-ho.com
jppost-hu.com
jppost-ma.com
jppost-me.com
jppost-mi.com
jppost-no.com
jppost-nu.com
jppost-ra.com
jppost-re.com
jppost-ri.com
jppost-ta.com
jppost-to.com
jppost-tu.com
jppost-wa.com
jppost-ya.com
jppost-yu.com
sagawa-xixi.cn

# Reference: https://twitter.com/naomisuzuki_/status/1087605372829847553

sagawa-qui.com
sagawa-quu.com
sagawa-owo.com
sagawa-ozi.com

# Reference: https://twitter.com/naomisuzuki_/status/1104603448580833281

172.16.31.10:81
sagawa-oge.com
sagawa-ota.com
sagawa-oto.com
sagawa-oyu.com
sagawa-ora.com
sagawa-ozi.com

# Reference: https://urlquery.net/report/b7a23204-1c6d-4989-ac88-589e14f71aea

sagawa-oka.com
sagawa-omi.com
sagawa-ono.com
sagawa-ose.com
sagawa-osu.com
sagawa-ota.com
sagawa-owo.com
sagawa-ozi.com
sagawa-taha.com

# Reference: https://vxcube.com/tools/domain/sagawa-oma.com/relate_iocs

sagawa-baa.com
sagawa-bachi.com
sagawa-bae.com
sagawa-bai.com
sagawa-bak.com
sagawa-baka.com
sagawa-bake.com
sagawa-baki.com
sagawa-bako.com
sagawa-bao.com
sagawa-bas.com
sagawa-basa.com
sagawa-base.com
sagawa-bashi.com
sagawa-baso.com
sagawa-basu.com
sagawa-bat.com
sagawa-bata.com
sagawa-batsu.com
sagawa-bau.com
sagawa-bc.com
sagawa-bn.com
sagawa-bv.com
sagawa-bx.com
sagawa-bz.com
sagawa-efu.com
sagawa-ega.com
sagawa-egi.com
sagawa-ego.com
sagawa-egu.com
sagawa-eha.com
sagawa-ehe.com
sagawa-ehi.com
sagawa-eho.com
sagawa-eka.com
sagawa-eki.com
sagawa-eko.com
sagawa-eku.com
sagawa-ema.com
sagawa-eme.com
sagawa-emi.com
sagawa-emu.com
sagawa-ena.com
sagawa-ene.com
sagawa-eni.com
sagawa-eno.com
sagawa-enu.com
sagawa-ere.com
sagawa-eri.com
sagawa-ero.com
sagawa-esa.com
sagawa-ese.com
sagawa-esi.com
sagawa-eso.com
sagawa-esu.com
sagawa-eta.com
sagawa-ete.com
sagawa-eto.com
sagawa-ewa.com
sagawa-eya.com
sagawa-eyo.com
sagawa-eyu.com
sagawa-eza.com
sagawa-ezu.com
sagawa-hii.com
sagawa-hna.com
sagawa-hnd.com
sagawa-hnf.com
sagawa-hng.com
sagawa-hnh.com
sagawa-hnj.com
sagawa-hnk.com
sagawa-hnl.com
sagawa-hnq.com
sagawa-hns.com
sagawa-ida.com
sagawa-ide.com
sagawa-idi.com
sagawa-ido.com
sagawa-idu.com
sagawa-iga.com
sagawa-ige.com
sagawa-igi.com
sagawa-igj.com
sagawa-igo.com
sagawa-igu.com
sagawa-ihe.com
sagawa-iho.com
sagawa-ihu.com
sagawa-iji.com
sagawa-ima.com
sagawa-ime.com
sagawa-imi.com
sagawa-imo.com
sagawa-imu.com
sagawa-ina.com
sagawa-ine.com
sagawa-ini.com
sagawa-ino.com
sagawa-ipa.com
sagawa-ipe.com
sagawa-ipi.com
sagawa-ipo.com
sagawa-ipu.com
sagawa-ira.com
sagawa-ishi.com
sagawa-iso.com
sagawa-isu.com
sagawa-ite.com
sagawa-ito.com
sagawa-iwa.com
sagawa-iwo.com
sagawa-iye.com
sagawa-iyu.com
sagawa-iza.com
sagawa-ize.com
sagawa-izo.com
sagawa-izu.com
sagawa-kiu.com
sagawa-kua.com
sagawa-mna.com
sagawa-mns.com
sagawa-mnv.com
sagawa-mnx.com
sagawa-mnz.com
sagawa-oba.com
sagawa-obe.com
sagawa-obi.com
sagawa-obu.com
sagawa-oda.com
sagawa-ode.com
sagawa-odi.com
sagawa-odo.com
sagawa-odu.com
sagawa-oga.com
sagawa-oge.com
sagawa-ogi.com
sagawa-ogo.com
sagawa-ogu.com
sagawa-oha.com
sagawa-ohe.com
sagawa-oho.com
sagawa-ohu.com
sagawa-oka.com
sagawa-oke.com
sagawa-oko.com
sagawa-oku.com
sagawa-oma.com
sagawa-ome.com
sagawa-omi.com
sagawa-omo.com
sagawa-omu.com
sagawa-ona.com
sagawa-one.com
sagawa-oni.com
sagawa-ono.com
sagawa-onu.com
sagawa-oo.com
sagawa-opa.com
sagawa-ope.com
sagawa-opi.com
sagawa-opo.com
sagawa-opu.com
sagawa-ora.com
sagawa-ori.com
sagawa-oru.com
sagawa-osa.com
sagawa-ose.com
sagawa-osi.com
sagawa-oso.com
sagawa-osu.com
sagawa-ota.com
sagawa-ote.com
sagawa-oto.com
sagawa-owa.com
sagawa-owo.com
sagawa-oya.com
sagawa-oyo.com
sagawa-oyu.com
sagawa-oza.com
sagawa-oze.com
sagawa-ozi.com
sagawa-ozo.com
sagawa-ozu.com
sagawa-qio.com
sagawa-qwa.com
sagawa-qwd.com
sagawa-qwf.com
sagawa-qwg.com
sagawa-qwh.com
sagawa-qwk.com
sagawa-qwl.com
sagawa-qye.com
sagawa-qyu.com
sagawa-qyy.com
sagawa-rira.com
sagawa-te.com
sagawa-tw.com
sagawa-vza.com
sagawa-vzf.com
sagawa-vzg.com
sagawa-vzj.com
sagawa-vzl.com
sagawa-vzy.com
sagawa-wri.com
sagawa-ynu.com
sagawa-zaa.com
sagawa-zae.com
sagawa-zai.com
sagawa-zak.com
sagawa-zau.com
softbank-ao.com

# Reference: http://vxcube.com/tools/domain/jppost-aka.com/relate_iocs

jppost-ji.com
jppost-asi.com
jppost-ase.com

# Reference: http://vxcube.com/tools/domain/jppost-asi.com/relate_iocs

jppost-ani.com
jppost-asa.com
jppost-aso.com
jppost-asu.com
jppost-ate.com
jppost-ati.com
jppost-ato.com

# Reference: http://vxcube.com/tools/domain/mailsa-qau.com/relate_iocs (related similar domains only)

mailsa-qaa.com
mailsa-qag.com
mailsa-qap.com
mailsa-qaw.com
mailsa-wqu.com
sagawa-ebu.com
sagawa-eda.com
sagawa-edo.com
sagawa-mqd.com
sagawa-uda.com
sagawa-udu.com
sagawa-uhe.com
sagawa-uka.com
sagawa-uke.com
sagawa-uki.com
sagawa-ume.com
sagawa-umu.com
sagawa-une.com
sagawa-upi.com
sagawa-uro.com
sagawa-uto.com
sagawa-utu.com
sagawa-uyo.com
sagawa-uze.com

# Reference: http://vxcube.com/tools/domain/nttdocomo-ki.com/relate_iocs

softbank-c.com

# Reference: http://vxcube.com/tools/domain/softbank-c.com/relate_iocs

a-sagawa.com

# Reference: http://vxcube.com/tools/domain/a-sagawa.com/relate_iocs

sagawa-qic.com
sagawa-qim.com
sagawa-qiv.com
sagawa-una.com

# Reference: http://vxcube.com/tools/domain/sagawa-una.com/relate_iocs

sagawa-ebi.com
sagawa-eda.com
sagawa-ede.com
sagawa-epu.com
sagawa-unu.com
sagawa-usi.com
sagawa-ute.com

# Reference: http://vxcube.com/tools/domain/sagawa-ebi.com/relate_iocs

sagawa-ebo.com
sagawa-edu.com
sagawa-eke.com
sagawa-era.com

# Reference: http://vxcube.com/tools/domain/kuroekoyamato.com/relate_iocs

sagawa-edi.com
sagawa-ns.com
sagawa-uga.com
sagawa-ugu.com
sagawa-uji.com
sagawa-uko.com
sagawa-uku.com
sagawa-usa.com
sagawa-uso.com
sagawa-uzo.com

# Reference: https://twitter.com/JayTHL/status/1145181603259387904
# Reference: https://twitter.com/NaomiSuzuki_/status/1144905331337768961
# Reference: https://www.virustotal.com/gui/ip-address/172.16.17.32/relations
# Reference: https://www.virustotal.com/gui/ip-address/192.168.127.12/relations
# Reference: https://www.virustotal.com/gui/ip-address/192.168.3.11/relations
# Reference: https://twitter.com/NaomiSuzuki_/status/1145172884379193344
# Reference: https://www.virustotal.com/gui/ip-address/192.168.127.126/relations
# Reference: https://www.virustotal.com/gui/ip-address/192.168.3.11/relations
# Reference: https://twitter.com/NaomiSuzuki_/status/1144461927193513985

aa-ek.top
aa-ep.top
aa-es.top
aa-et.top
aa-eu.top
aa-ex.top
aa-ey.top
aa-qa.top
aa-qk.top
aa-qm.top
aa-qu.top
aa-qx.top
aa-qy.top
aa-tb.top
aa-td.top
aa-te.top
aa-tg.top
aa-tm.top
aa-tp.top
aa-tu.top
aa-tw.top
aa-tx.top
aa-tz.top
aa-wa.top
aa-wb.top
aa-wc.top
aa-wd.top
aa-we.top
aa-wf.top
aa-wk.top
aa-wm.top
aa-wn.top
aa-wp.top
aa-wq.top
aa-wr.top
aa-ws.top
aa-wu.top
aa-ww.top
aa-wx.top
aa-wz.top
bt-ca.top
bt-cc.top
bt-ce.top
bt-cf.top
bt-cg.top
bt-cj.top
bt-cm.top
bt-cn.top
bt-cp.top
bt-cq.top
bt-cs.top
bt-cu.top
bt-cv.top
bt-cw.top
bt-cy.top
bt-cz.top
bt-dd.top
bt-dj.top
bt-dp.top
bt-dq.top
bt-dr.top
bt-dt.top
bt-dw.top
bt-dx.top
bt-dy.top
bt-ee.top
bt-eh.top
bt-en.top
bt-er.top
bt-et.top
bt-ev.top
bt-ew.top
bt-ka.top
bt-kb.top
bt-kc.top
bt-kd.top
bt-kf.top
bt-kg.top
bt-kh.top
bt-kk.top
bt-km.top
bt-kn.top
bt-kp.top
bt-kq.top
bt-kr.top
bt-ks.top
bt-kt.top
bt-ku.top
bt-kw.top
bt-kx.top
bt-ky.top
bt-kz.top
bt-mh.top
bt-nb.top
bt-nd.top
bt-ne.top
bt-nh.top
bt-nm.top
bt-np.top
bt-nr.top
bt-ns.top
bt-nu.top
bt-nw.top
bt-ny.top
bt-nz.top
bt-qd.top
bt-qe.top
bt-qp.top
bt-qq.top
bt-qt.top
bt-qy.top
bt-qz.top
bt-wf.top
bt-wp.top
bt-wr.top
bt-wt.top
bt-ww.top
bt-xr.top
bt-xt.top
bt-ya.top
bt-yc.top
bt-yd.top
bt-ye.top
bt-yf.top
bt-yg.top
bt-yk.top
bt-ym.top
bt-yn.top
bt-yu.top
bt-yw.top
bt-yx.top
bt-yy.top
bt-yz.top
bt-zb.top
bt-zc.top
bt-zd.top
bt-ze.top
bt-zg.top
bt-zh.top
bt-zp.top
bt-zq.top
bt-zr.top
bt-zs.top
bt-zt.top
bt-zu.top
bt-zx.top
dj-ge.top
dj-gi.top
dj-gq.top
dj-gr.top
dj-gt.top
dj-gu.top
dj-gy.top
dj-ja.top
dj-jd.top
dj-je.top
dj-jf.top
dj-jg.top
dj-jh.top
dj-ji.top
dj-jk.top
dj-jl.top
dj-jo.top
dj-jp.top
dj-jr.top
dj-jt.top
dj-ju.top
dj-jw.top
dj-jx.top
dj-jy.top
dj-jz.top
dj-qd.top
dj-qh.top
dj-qs.top
jppost-aha.com
jppost-aki.com
jppost-aku.com
jppost-asa.com
jppost-be.com
jppost-go.com
jppost-gu.com
jppost-ka.top
jppost-ke.top
jppost-ki.top
jppost-ko.top
jppost-ku.top
jppost-me.top
jppost-mi.com
jppost-mi.top
jppost-mo.top
jppost-mu.top
jppost-ro.com
jppost-sa.top
jppost-se.top
jppost-si.top
jppost-so.top
jppost-su.top
jppost-ta.com
jppost-wo.com
172.16.31.10:81
192.168.3.11:81
172.16.58.3:81
172.16.31.10:81<commit_msg>Update android_roamingmantis.txt<commit_after># Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: roamingmantis, xloader, fakespy

# Reference: https://securelist.com/roaming-mantis-uses-dns-hijacking-to-infect-android-smartphones/85178/

haoxingfu01.ddns.net
shaoye11.hopto.org

# Reference: https://securelist.com/roaming-mantis-part-3/88071/

sagawa-otqwt.com
sagawa-polsw.com

# Reference: https://lukasstefanko.com/2018/10/video-analysis-of-android-sms-worm-spying-on-victims.html

sagawa-mama.com

# Reference: https://www.fortinet.com/blog/threat-research/fakespy-comes-back--new-wave-hits-japan.html

sagawa-ba.com
sagawa-wow.com
sagawa-iso.com

# Reference: https://securelist.com/roaming-mantis-part-iv/90332/
# Reference: https://otx.alienvault.com/pulse/5ca537055fe8d2200c37306e
# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/new-version-of-xloader-that-disguises-as-android-apps-and-an-ios-profile-holds-new-links-to-fakespy/
# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/a-look-into-the-connection-between-xloader-and-fakespy-and-their-possible-ties-with-the-yanbian-gang/
# Reference: https://securityaffairs.co/wordpress/83317/breaking-news/xloader-6-twitter.html

apple-icloud.qwq-japan.com
apple-icloud.zqo-japan.com
apple-icloud.qwe-japan.com
ffakecg.com
files.spamo.jp
mailsa-qau.com
mailsa-wqu.com
mailsa-qaw.com
mailsa-qae.com
mailsa-wqq.com
mailsa-qaf.com
mailsa-wqe.com
mailsa-wqp.com
mailsa-wqw.com
mailsa-wqo.com
mailsa-qau.com
mailsa-qaf.com
nttdocomo-qae.com
nttdocomo-qaw.com
nttdocomo-qar.com
nttdocomo-qaq.com
nttdocomo-qat.com
sagawa-mqd.com
sagawa-bz.com
sagawa-mwm.com
sagawa-reg.com
759383.com
711231.com
923525.com
923915.com
975685.com
172.16.17.32:28855
192.168.127.12:8822
192.168.127.12:28855
192.168.127.12:28855
172.16.58.3:28855
172.16.58.3:28855
192.168.3.11:28855
192.168.3.11:28855
172.16.31.10:28833
172.16.31.10:28855
172.16.58.3:28833
172.16.58.3:28844
172.16.58.3:28855
192.168.127.12:28833
192.168.127.12:28844
192.168.127.12:28855
172.16.31.10:28844
192.168.127.12:28855
http://172.16.17.32/xvideo/

# Reference: https://twitter.com/makflwana/status/1087626405075050496

sagawa-ozi.com

# Reference: https://twitter.com/ninoseki/status/1115061669929992192

softbank-b.com
jppost-to.com
nttdocomo-ki.com
id-auone.com

# Reference: https://twitter.com/LukasStefanko/status/1141294968654508033

jppost-ami.com
jppost-ata.com
jppost-be.com

# Reference: https://twitter.com/ninoseki/status/1143354016904044544
# Reference: https://urlscan.io/ip/104.143.94.206

jppost-ka.com
jppost-tu.com

# Reference: https://twitter.com/PhishStats/status/1135473323008253952

jppost-mo.com

# Reference: http://ka-mato-ru.sub.jp/top/?p=30709 (Japanese)

jppost-aka.com
jppost-aki.com
jppost-aku.com
jppost-fu.com
jppost-ga.com
jppost-ge.com
jppost-gi.com
jppost-gu.com
jppost-ha.com
jppost-he.com
jppost-hi.com
jppost-ho.com
jppost-hu.com
jppost-ma.com
jppost-me.com
jppost-mi.com
jppost-no.com
jppost-nu.com
jppost-ra.com
jppost-re.com
jppost-ri.com
jppost-ta.com
jppost-to.com
jppost-tu.com
jppost-wa.com
jppost-ya.com
jppost-yu.com
sagawa-xixi.cn

# Reference: https://twitter.com/naomisuzuki_/status/1087605372829847553

sagawa-qui.com
sagawa-quu.com
sagawa-owo.com
sagawa-ozi.com

# Reference: https://twitter.com/naomisuzuki_/status/1104603448580833281

172.16.31.10:81
sagawa-oge.com
sagawa-ota.com
sagawa-oto.com
sagawa-oyu.com
sagawa-ora.com
sagawa-ozi.com

# Reference: https://urlquery.net/report/b7a23204-1c6d-4989-ac88-589e14f71aea

sagawa-oka.com
sagawa-omi.com
sagawa-ono.com
sagawa-ose.com
sagawa-osu.com
sagawa-ota.com
sagawa-owo.com
sagawa-ozi.com
sagawa-taha.com

# Reference: https://vxcube.com/tools/domain/sagawa-oma.com/relate_iocs

sagawa-baa.com
sagawa-bachi.com
sagawa-bae.com
sagawa-bai.com
sagawa-bak.com
sagawa-baka.com
sagawa-bake.com
sagawa-baki.com
sagawa-bako.com
sagawa-bao.com
sagawa-bas.com
sagawa-basa.com
sagawa-base.com
sagawa-bashi.com
sagawa-baso.com
sagawa-basu.com
sagawa-bat.com
sagawa-bata.com
sagawa-batsu.com
sagawa-bau.com
sagawa-bc.com
sagawa-bn.com
sagawa-bv.com
sagawa-bx.com
sagawa-bz.com
sagawa-efu.com
sagawa-ega.com
sagawa-egi.com
sagawa-ego.com
sagawa-egu.com
sagawa-eha.com
sagawa-ehe.com
sagawa-ehi.com
sagawa-eho.com
sagawa-eka.com
sagawa-eki.com
sagawa-eko.com
sagawa-eku.com
sagawa-ema.com
sagawa-eme.com
sagawa-emi.com
sagawa-emu.com
sagawa-ena.com
sagawa-ene.com
sagawa-eni.com
sagawa-eno.com
sagawa-enu.com
sagawa-ere.com
sagawa-eri.com
sagawa-ero.com
sagawa-esa.com
sagawa-ese.com
sagawa-esi.com
sagawa-eso.com
sagawa-esu.com
sagawa-eta.com
sagawa-ete.com
sagawa-eto.com
sagawa-ewa.com
sagawa-eya.com
sagawa-eyo.com
sagawa-eyu.com
sagawa-eza.com
sagawa-ezu.com
sagawa-hii.com
sagawa-hna.com
sagawa-hnd.com
sagawa-hnf.com
sagawa-hng.com
sagawa-hnh.com
sagawa-hnj.com
sagawa-hnk.com
sagawa-hnl.com
sagawa-hnq.com
sagawa-hns.com
sagawa-ida.com
sagawa-ide.com
sagawa-idi.com
sagawa-ido.com
sagawa-idu.com
sagawa-iga.com
sagawa-ige.com
sagawa-igi.com
sagawa-igj.com
sagawa-igo.com
sagawa-igu.com
sagawa-ihe.com
sagawa-iho.com
sagawa-ihu.com
sagawa-iji.com
sagawa-ima.com
sagawa-ime.com
sagawa-imi.com
sagawa-imo.com
sagawa-imu.com
sagawa-ina.com
sagawa-ine.com
sagawa-ini.com
sagawa-ino.com
sagawa-ipa.com
sagawa-ipe.com
sagawa-ipi.com
sagawa-ipo.com
sagawa-ipu.com
sagawa-ira.com
sagawa-ishi.com
sagawa-iso.com
sagawa-isu.com
sagawa-ite.com
sagawa-ito.com
sagawa-iwa.com
sagawa-iwo.com
sagawa-iye.com
sagawa-iyu.com
sagawa-iza.com
sagawa-ize.com
sagawa-izo.com
sagawa-izu.com
sagawa-kiu.com
sagawa-kua.com
sagawa-mna.com
sagawa-mns.com
sagawa-mnv.com
sagawa-mnx.com
sagawa-mnz.com
sagawa-oba.com
sagawa-obe.com
sagawa-obi.com
sagawa-obu.com
sagawa-oda.com
sagawa-ode.com
sagawa-odi.com
sagawa-odo.com
sagawa-odu.com
sagawa-oga.com
sagawa-oge.com
sagawa-ogi.com
sagawa-ogo.com
sagawa-ogu.com
sagawa-oha.com
sagawa-ohe.com
sagawa-oho.com
sagawa-ohu.com
sagawa-oka.com
sagawa-oke.com
sagawa-oko.com
sagawa-oku.com
sagawa-oma.com
sagawa-ome.com
sagawa-omi.com
sagawa-omo.com
sagawa-omu.com
sagawa-ona.com
sagawa-one.com
sagawa-oni.com
sagawa-ono.com
sagawa-onu.com
sagawa-oo.com
sagawa-opa.com
sagawa-ope.com
sagawa-opi.com
sagawa-opo.com
sagawa-opu.com
sagawa-ora.com
sagawa-ori.com
sagawa-oru.com
sagawa-osa.com
sagawa-ose.com
sagawa-osi.com
sagawa-oso.com
sagawa-osu.com
sagawa-ota.com
sagawa-ote.com
sagawa-oto.com
sagawa-owa.com
sagawa-owo.com
sagawa-oya.com
sagawa-oyo.com
sagawa-oyu.com
sagawa-oza.com
sagawa-oze.com
sagawa-ozi.com
sagawa-ozo.com
sagawa-ozu.com
sagawa-qio.com
sagawa-qwa.com
sagawa-qwd.com
sagawa-qwf.com
sagawa-qwg.com
sagawa-qwh.com
sagawa-qwk.com
sagawa-qwl.com
sagawa-qye.com
sagawa-qyu.com
sagawa-qyy.com
sagawa-rira.com
sagawa-te.com
sagawa-tw.com
sagawa-vza.com
sagawa-vzf.com
sagawa-vzg.com
sagawa-vzj.com
sagawa-vzl.com
sagawa-vzy.com
sagawa-wri.com
sagawa-ynu.com
sagawa-zaa.com
sagawa-zae.com
sagawa-zai.com
sagawa-zak.com
sagawa-zau.com
softbank-ao.com

# Reference: http://vxcube.com/tools/domain/jppost-aka.com/relate_iocs

jppost-ji.com
jppost-asi.com
jppost-ase.com

# Reference: http://vxcube.com/tools/domain/jppost-asi.com/relate_iocs

jppost-ani.com
jppost-asa.com
jppost-aso.com
jppost-asu.com
jppost-ate.com
jppost-ati.com
jppost-ato.com

# Reference: http://vxcube.com/tools/domain/mailsa-qau.com/relate_iocs (related similar domains only)

mailsa-qaa.com
mailsa-qag.com
mailsa-qap.com
mailsa-qaw.com
mailsa-wqu.com
sagawa-ebu.com
sagawa-eda.com
sagawa-edo.com
sagawa-mqd.com
sagawa-uda.com
sagawa-udu.com
sagawa-uhe.com
sagawa-uka.com
sagawa-uke.com
sagawa-uki.com
sagawa-ume.com
sagawa-umu.com
sagawa-une.com
sagawa-upi.com
sagawa-uro.com
sagawa-uto.com
sagawa-utu.com
sagawa-uyo.com
sagawa-uze.com

# Reference: http://vxcube.com/tools/domain/nttdocomo-ki.com/relate_iocs

softbank-c.com

# Reference: http://vxcube.com/tools/domain/softbank-c.com/relate_iocs

a-sagawa.com

# Reference: http://vxcube.com/tools/domain/a-sagawa.com/relate_iocs

sagawa-qic.com
sagawa-qim.com
sagawa-qiv.com
sagawa-una.com

# Reference: http://vxcube.com/tools/domain/sagawa-una.com/relate_iocs

sagawa-ebi.com
sagawa-eda.com
sagawa-ede.com
sagawa-epu.com
sagawa-unu.com
sagawa-usi.com
sagawa-ute.com

# Reference: http://vxcube.com/tools/domain/sagawa-ebi.com/relate_iocs

sagawa-ebo.com
sagawa-edu.com
sagawa-eke.com
sagawa-era.com

# Reference: http://vxcube.com/tools/domain/kuroekoyamato.com/relate_iocs

sagawa-edi.com
sagawa-ns.com
sagawa-uga.com
sagawa-ugu.com
sagawa-uji.com
sagawa-uko.com
sagawa-uku.com
sagawa-usa.com
sagawa-uso.com
sagawa-uzo.com

# Reference: https://twitter.com/JayTHL/status/1145181603259387904
# Reference: https://twitter.com/NaomiSuzuki_/status/1144905331337768961
# Reference: https://www.virustotal.com/gui/ip-address/172.16.17.32/relations
# Reference: https://www.virustotal.com/gui/ip-address/192.168.127.12/relations
# Reference: https://www.virustotal.com/gui/ip-address/192.168.3.11/relations
# Reference: https://twitter.com/NaomiSuzuki_/status/1145172884379193344
# Reference: https://www.virustotal.com/gui/ip-address/104.194.219.46/relations
# Reference: https://www.virustotal.com/gui/ip-address/192.168.3.11/relations
# Reference: https://twitter.com/NaomiSuzuki_/status/1144461927193513985
# Reference: https://www.virustotal.com/gui/ip-address/172.16.58.3/relations
# Reference: https://www.virustotal.com/gui/ip-address/172.16.31.10/relations
# Reference: https://www.virustotal.com/gui/ip-address/192.168.127.12/relations

aa-ek.top
aa-ep.top
aa-es.top
aa-et.top
aa-eu.top
aa-ex.top
aa-ey.top
aa-qa.top
aa-qc.top
aa-qg.top
aa-qk.top
aa-qm.top
aa-qp.top
aa-qu.top
aa-qw.top
aa-qx.top
aa-qy.top
aa-qz.top
aa-tb.top
aa-td.top
aa-te.top
aa-tg.top
aa-tm.top
aa-tp.top
aa-tu.top
aa-tw.top
aa-tx.top
aa-tz.top
aa-wa.top
aa-wb.top
aa-wc.top
aa-wd.top
aa-we.top
aa-wf.top
aa-wh.top
aa-wk.top
aa-wm.top
aa-wn.top
aa-wp.top
aa-wq.top
aa-wr.top
aa-ws.top
aa-wt.top
aa-wu.top
aa-ww.top
aa-wx.top
aa-wz.top
bt-ca.top
bt-cc.top
bt-ce.top
bt-cf.top
bt-cg.top
bt-cj.top
bt-cm.top
bt-cn.top
bt-cp.top
bt-cq.top
bt-cs.top
bt-cu.top
bt-cv.top
bt-cw.top
bt-cy.top
bt-cz.top
bt-dd.top
bt-dj.top
bt-dp.top
bt-dq.top
bt-dr.top
bt-dt.top
bt-dw.top
bt-dx.top
bt-dy.top
bt-ee.top
bt-eh.top
bt-en.top
bt-er.top
bt-et.top
bt-ev.top
bt-ew.top
bt-ka.top
bt-kb.top
bt-kc.top
bt-kd.top
bt-kf.top
bt-kg.top
bt-kh.top
bt-kk.top
bt-km.top
bt-kn.top
bt-kp.top
bt-kq.top
bt-kr.top
bt-ks.top
bt-kt.top
bt-ku.top
bt-kw.top
bt-kx.top
bt-ky.top
bt-kz.top
bt-mh.top
bt-nb.top
bt-nd.top
bt-ne.top
bt-nh.top
bt-nm.top
bt-np.top
bt-nr.top
bt-ns.top
bt-nu.top
bt-nw.top
bt-ny.top
bt-nz.top
bt-qd.top
bt-qe.top
bt-qp.top
bt-qq.top
bt-qt.top
bt-qy.top
bt-qz.top
bt-wf.top
bt-wp.top
bt-wr.top
bt-wt.top
bt-ww.top
bt-xr.top
bt-xt.top
bt-ya.top
bt-yc.top
bt-yd.top
bt-ye.top
bt-yf.top
bt-yg.top
bt-yk.top
bt-ym.top
bt-yn.top
bt-yu.top
bt-yw.top
bt-yx.top
bt-yy.top
bt-yz.top
bt-zb.top
bt-zc.top
bt-zd.top
bt-ze.top
bt-zg.top
bt-zh.top
bt-zp.top
bt-zq.top
bt-zr.top
bt-zs.top
bt-zt.top
bt-zu.top
bt-zx.top
dj-ge.top
dj-gi.top
dj-gq.top
dj-gr.top
dj-gt.top
dj-gu.top
dj-gy.top
dj-ja.top
dj-jd.top
dj-je.top
dj-jf.top
dj-jg.top
dj-jh.top
dj-ji.top
dj-jk.top
dj-jl.top
dj-jo.top
dj-jp.top
dj-jr.top
dj-jt.top
dj-ju.top
dj-jw.top
dj-jx.top
dj-jy.top
dj-jz.top
dj-qd.top
dj-qh.top
dj-qs.top
jppost-aha.com
jppost-aki.com
jppost-aku.com
jppost-ama.com
jppost-ame.com
jppost-ami.com
jppost-asa.com
jppost-be.com
jppost-go.com
jppost-gu.com
jppost-hu.com
jppost-ka.com
jppost-ka.top
jppost-ke.com
jppost-ke.top
jppost-ki.com
jppost-ki.top
jppost-ko.top
jppost-ku.top
jppost-me.top
jppost-mi.com
jppost-mi.top
jppost-mo.top
jppost-mu.top
jppost-no.com
jppost-ro.com
jppost-sa.top
jppost-se.top
jppost-si.top
jppost-so.top
jppost-su.top
jppost-ta.com
jppost-ti.com
jppost-to.com
jppost-tu.com
jppost-wo.com
jppost-ya.com
172.16.31.10:81
192.168.127.12:81
172.16.31.10:81
192.168.3.11:81
172.16.58.3:81
172.16.58.3:81
192.168.3.11:81
172.16.31.10:81
{'fraction_non_alphanumeric': 0.15364283582725838, 'fraction_numerical': 0.06326469710534169, 'mean_word_length': 3.817827069213391, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 61, 'lorem ipsum': 0, 'www.': 15, 'xml': 0}, 'pii_count': 67, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1077955', 'n_tokens_mistral': 13246, 'n_tokens_neox': 12182, 'n_words': 1413}