# Copyright (c) 2014-2018 Miroslav Stampar (@stamparm)
# See the file 'LICENSE' for copying permission

# Reference: https://securelist.com/roaming-mantis-uses-dns-hijacking-to-infect-android-smartphones/85178/

haoxingfu01.ddns.net
shaoye11.hopto.org

# Reference: https://securelist.com/roaming-mantis-part-3/88071/

sagawa-otqwt.com
sagawa-polsw.com

# Reference: https://lukasstefanko.com/2018/10/video-analysis-of-android-sms-worm-spying-on-victims.html

sagawa-mama.com

# Reference: https://www.fortinet.com/blog/threat-research/fakespy-comes-back--new-wave-hits-japan.html

sagawa-ba.com
sagawa-wow.com
sagawa-iso.com