# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://raw.githubusercontent.com/Insikt-Group/Research/9571bd788b9ca122ffa8078a3e562da0ebe566b1/RedAlpha%20-%20June%202022/RedAlpha%20June%202022%20Indicators.txt
# Reference: https://go.recordedfuture.com/hubfs/reports/ta-2022-0816.pdf
# Reference: https://otx.alienvault.com/pulse/62fce38c1455a7d74ea783dd

1driv.online
1drv-ms.live
1dve.live
a02ed-yahoo.space
a26edc-google.link
a2ec6e-google.link
a6e0c-google.link
a6e2c-yahoo.space
acem3q-live.online
active-yahoo.com
active-yahoo.net
activity-mail.online
activity-yahoo.com
activity-yahoo.link
adjustment-yahoo.com
amcham.link
amcham.space
amcham.work
amchamdrive.work
ams-live.online
attachment-google.link
attachment-live.online
attachment-nic.online
audit-yahoo.com
auth-yahoo.us
basis-services.online
behavior-mail.online
c2ae6w-yahoo.link
c301e-ms.live
c6ab2e-live.online
c6ae0w-yahoo.link
cc-microsoft.com
cc-yahoo-core.com
check-rfa.link
cloud-amcham.link
cloud-merics.live
cloud-nic.online
continue-google.link
credit-information.online
d2ac0e-yahoo.link
d2ecl-live.online
direct-yahoo.us
dl-attachment-0o-usercontent.online
docs-fidh.space
docs-google.link
docs-ms-drive.live
documents-google.link
done-yahoo.online
down-o0-usercontent-live.online
dppmail.download
drive-amcham.live
drive-attachment-usercontent.live
drive-fidh.space
drive-files-live.online
drive-google.download
drive-gov.link
drive-merics.online
drive-mofa-vn.online
drive-mofa.com
drive-ms.link
drive-ms.live
drive-nic.online
drive-protonmail.link
drive-purdue.live
drive-rfa.link
drive-rfa.online
drive-rfa.org
drive-yahoo.com
drive-yahoo.link
e-drive.link
e-files.download
e-mailru.online
e-rfa.link
e-rfa.us
edit-google.link
edit-live.link
edit-mail.com
edit-mail.link
edit-microsoft.live
edit-yahoo.cc
edit-yahoo.space
edit-yahoo.work
eid-drive.link
eid-yahoo.link
email-gov.online
evarchiv-dena.link
ex-files.download
exg-cloud.site
exg-drive.site
exg-secure.site
exg-settings.com
fidh-services.online
files-ait.link
files-ait.org
files-amcham-tw.link
files-amcham.link
files-amnesty.space
files-ankara.online
files-attachement-ms02-live.online
files-attachment-live.link
files-attachment-mail.online
files-cier-edu.link
files-cier.link
files-ciu.online
files-dena.link
files-dpp.org
files-dpp.space
files-dsi-go-th.link
files-dsi-go.space
files-fidh.online
files-fidh.org
files-google.link
files-gov.link
files-itamaraty-gov.space
files-mac.link
files-mail-amcham.link
files-mail-indsr.link
files-mail-merics.live
files-mail.link
files-mail.online
files-merics.de
files-merics.live
files-mfa.link
files-mne.online
files-mne.space
files-mofa.com
files-mofa.link
files-mofa.space
files-ms.live
files-ms.space
files-nationalawakening.online
files-ndc.link
files-nic.link
files-nic.online
files-nic.space
files-protonmail.com
files-protonmail.link
files-rfa.link
files-rfa.online
files-rfa.org
files-rfa.space
files-taitra.org
files-tgchambers.link
files-trade-gov.link
files-trade-tw.live
files-trade.link
files-web.online
files-yahoo.link
filesmofa-gov.com
gmailcontent.online
gshort.site
handle-yahoo.com
hdrive.live
help-rfa.link
inbox-live.online
inform-live.online
inform-mail.com
init-login.space
intl-mail.link
intl-yahoo.com
issue-yahoo.com
itamaraty-gov.com
iwkuaq-live.online
je8e61f0dm.live
ldrv.live
linkid-live.online
m-edit.link
m-goog.online
m-yahoo.link
mail-apps.online
mail-drive.link
mail-gov-files.online
mail2000-cloud.com
mailfiles.download
mdrive-live.com
medit-live.online
medit-mail.link
medit-ms.live
medit-yahoo.com
mer1cs.de
merics.link
merlcs.org
mg-12.site
mg02-ymail.online
mg12-login.space
mg12-mail.link
mg23-edit.link
microsoftauthorization.com
mil-files.download
milfiles.download
modify-yahoo.com
moea.site
mofa-gov.site
mofa-vn.online
mofasec.site
mp-yahoo.com
mpz2puz-yahoo.online
ms-live.link
ms-live.online
msauth-live.online
mscloud.live
msdocs.live
msdr-file.live
msdri.live
msdrive.live
msdrive.online
msdrv.com
msdrv.link
msdrv.live
msec.live
msec.site
msft-live.link
msftsec.live
msrc-live.online
msrv-live.online
msta2e-ms.live
msv-live.online
msykrq-live.online
mtp-live.online
my-ait.link
my-amnesty.link
my-attachment-o02-drive.online
my-disk.work
my-dpp.org
my-drive.link
my-edit.info
my-edit.link
my-files.live
my-files.uk
my-google.link
my-gov.online
my-gov.site
my-gov.tw
my-hinet.net
my-hinet.online
my-live.link
my-mail.link
my-merics.link
my-merics.org
my-mofa.space
my-ms.live
my-msdrive.online
my-protonmail.com
my-purdue.com
my-rfa.link
my-rfa.online
my-rfa.org
my-security.link
my-security.live
my-settings.link
my-sso.live
my-tgchambers.link
my-yahoo.link
my-yahoo.pw
my-yahoo.work
myactive-live.online
myamcham.work
myauth-ms.live
mycloud-amcham.live
mycloud-fidh.link
mycloud-gov.link
mycloud-live.online
mycloud-ms.live
mycloud-ndc.link
mycloud-rfa.link
mycreditcard-ssl.online
mydocs-google.link
mydocs-rfa.online
mydri.site
mydri.work
mydrive-0a-files-outlook.link
mydrive-0a-ms.live
mydrive-0a-outlook.link
mydrive-docs-google.com
mydrive-docs-googleusercontent.link
mydrive-docs-ms.live
mydrive-docs-usercontent.link
mydrive-fidh.space
mydrive-file-usercontent-attachment.online
mydrive-google.link
mydrive-google.online
mydrive-mail.link
mydrive-mne-pt.space
mydrive-mofa.space
mydrive-ms.online
mydrive-nic.com
mydrive-nic.online
mydrive-nic.space
mydrive-o0-usercontent-files.online
mydrive-office.link
mydrive-rfa.online
mydrive-rfa.org
mydrive-ru.link
mydrive-taitra.link
mydrive-usercontent-0a-gmail.link
mydrive-usercontent-o02-files.online
mydrive-userfiles0a-google.com
mydrive-yahoo.link
mydrive-yahoo.space
mydrv.live
mydrv.xyz
myedit-live.online
myedit-yahoo.com
myedit-yahoo.space
myfiles-amcham.link
myfiles-content-0d-rfa.link
myfiles-dpp.link
myfiles-fidh.space
myfiles-google.link
myfiles-gov-tw.site
myfiles-ms.live
myfiles-nic.space
myfiles.live
myfiles.work
myid-ms.live
myprivate-drive.online
myprofile-ms.live
mysettings-yahoo.com
mysettings-yahoo.pw
mysettings.live
myshort.site
mysrv-yahoo.online
mysso-ms.live
nextcloud-rfa.org
nic-files.download
notification-ms.live
notifications-google.com
notifications-mail.live
ondrv.live
onedrive-merics.link
outlook-usercontent-attachment.online
outlookfiles.download
owa-files-purdue.online
owa-files.link
owa-live.online
owa-ms.live
ownfiles-fidh.pw
personalinfo-yahoo.com
personalinfo-yahoo.net
pnykrr5hrq-live.online
pri-drive.online
profile-live.link
profile-yahoo.net
prompt-yahoo.com
protection-yahoo-inc.com
qtmda-live.online
r-live.online
r3e2c6a-yahoo.online
ra-live.online
re-ms.live
redir-live.online
referrer-yahoo.online
reurl-live.online
rev-live.online
rfasec.site
rfs-yahoo.online
rs-live.online
rs-ms.online
rts-live.online
ryanvlzlw-yahoo.online
safety-yahoo.com
sec-nic.online
secure-amcham.live
secure-amnesty.online
secure-fidh-org.online
secure-fidh.link
secure-fidh.org
secure-fidh.space
secure-google.link
secure-gov.space
secure-lrs.site
secure-mail.link
secure-merics.link
secure-merics.online
secure-merics.org
secure-ms.live
secure-nic.online
secure-profile.space
secure-rfa.link
secure-rfa.online
secure-rfa.org
secure-yahoo.link
secure-yahoo.space
security-mail.link
security-merics.org
security-ms.live
security-rfa.link
security-rfa.org
setting-live.online
setting-ms.live
settings-center.live
settings-hinet.net
settings-mail.link
settings-mofavn.online
settings-ms.live
settings-office365.com
settings-purdue.space
settings-rfa.org
settings-yahoo.net
sft-live.online
share-google.link
short-yahoo.link
sid-yahoo.link
sign-fidh.online
signin-live.online
srf-live.link
ssl-login.space
sso-live.link
sso-ms.live
sso-ms.space
sso-rfa.online
sso-secure.live
sso-yahoo.link
sso-yahoo.work
staff-rfa.org
t-yahoo.online
tgchannbers.com
topic-live.online
tr-live.online
untreated.work
up-mail.work
up-merics.live
usercontent-mydrive.download
userfiles-fidh.space
uts-live.online
vzfxaw-ms.online
w-ymail.link
wdrive.live
web-hinet.site
webmailfiles.download
wrfa.live
ym-mail.online
ymshort.site
ysec.site
yset.site
yshort.site
zlqvmu5r-live.online
