Hosts: xHelper domains (+ips)

Created on 18 Apr 2020  Β·  3Comments  Β·  Source: StevenBlack/hosts

Hi @StevenBlack,

Just want to add this for your reference regarding the xhelper malware thingy.

https://securelist.com/unkillable-xhelper-and-a-trojan-matryoshka/96487/

from above link:
lp.cooktracking[.]com/v1/ls/get www.koapkmobi[.]com:8081 45.79.110.191 45.33.9.178 23.239.4.169 172.104.215.170 172.​104.​208.​241 172.​104.​212.​184 45.​33.​117.​188 172.​104.​216.​43 172.​104.​218.​166 104.​200.​16.​77 198.​58.​123.​253 172.​104.​211.​160 172.​104.​210.​184 162.​216.​18.​240 172.​104.​212.​4 172.​104.​214.​199 172.​104.​212.​202 172.​104.​209.​55 172.​104.​219.​210 172.​104.​218.​146 45.​79.​177.​230 45.​33.​0.​123 45.​79.​77.​161 45.​33.​120.​75 45.​79.​171.​160 172.​104.​210.​193 45.​33.​0.​176 45.​79.​146.​48 ddl.​okyesmobi[.​]com 45.​79.​151.​241 172.​104.​213.​65 172.​104.​211.​117 ddl.​okgoodmobi[.​]com

Would love to have those (hostnames) on your list :D
Do close whenever you see fit.

All 3 comments

Already present inside my list
https://github.com/scafroglia93/blocklists

Hi Laicurè @Laicure, I added these. IP addresses are ignored by hosts file mechanisms.

0.0.0.0 lp.cooktracking.com
0.0.0.0 www.koapkmobi.com:ddl.​okyesmobi.​com
0.0.0.0 ddl.​okgoodmobi.​com

Closing.

Thanks @StevenBlack!

Was this page helpful?
0 / 5 - 0 ratings