New coinminer malware domains.

This breaks cryptoloot. it makes websocket connections to those domains. cryptoloot has obfuscated their js file on github. and it only took me 4 seconds to reverse engineer it. Really guys?
Marfjeh · Jul 5, 2018 · e146a91 · e146a91
1 parent 93650c7
commit e146a91
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/domains b/domains
@@ -4651,3 +4651,8 @@ graftpool.ovh
 cryptaloot.pro
 google.gus.host
 googleanalytcs.com
+sea2.directprimal.com
+rock2.directprimal.com
+stone2.directprimal.com
+sass2.directprimal.com
+directprimal.com