This is a warning not to use the apps from Hawkeye Hosting. If this is the wrong section for this, let me know.
hawkeyehostingllc.com sells an app that has live TV and has an additional app called HawkVision. It is a reskin of a piracy app FlixVision version 2.9.3. They did not bother to remove the botnet, or just update FlixVision to the newest version. After installing the app, it makes DNS requests to several hundred weird domains. (foreign banks, foreign airline ticks, foreign ISPs, etc)
*Hawk Hosting’s live TV service was just a reskin of theclearchoicetv.com
The new live TV uses an IPTV stream that calls out to both st.vp1.uk and www.laceylou.lol - Made with https://apksto.re/
216.16.84.97 is the IP resolved by www.laceylou.lol It redirects to a cancer website to hide it’s true nature. Port 826 is where the stream comes from.
IPTV player hosted by https://xtream-ui.org/
http://89.187.179.148:826/get.php?username=MarHerazo&password=MarHerazo112818&type=m3u
The operators have commenting disabled on the YouTube page, and comments on Facebook are moderated.
The links provided do not contain malware. After purchasing the app they send out a Dropbox link with an .apk that requires a password to use.
This is the infected FlixVision. I do not have a copy of the .apk
https://www.virustotal.com/gui/file/cc92feb851a815faa1105749c28c47327263bfcb101ff86ed31fd9dfd5be21e9