# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: romcom, void rabisu, storm-0978, cigar, nebulous mantis, tropical scorpius

# Reference: https://www.proofpoint.com/us/blog/threat-insight/10-things-i-hate-about-attribution-romcom-vs-transferloader

1day.live
1dcloud.live
1drive-work.online
1drive.bio
1drive.expert
1drive.pub
1drive.social
1drive.works
1drivecloud.click
1drivecloud.live
1drivems.expert
1drivems.works
1drv-storage.pub
1drv-team.works
1drv.biz
1drv.eu.com
1drv.me
1drv.site
1drv.world
1drv.zone
1drv365.live
1drv365.online
1drvcloud.online
1drvfiles.online
1drvms.space
1drw.live
1dv.online
1dv365.live
1dvstorage.com
1share.limited
365drv.live
365msdrv.live
365work.chat
cloud-pdf.online
cloud1dv.com
clouderive.com
cloudlive.pub
cloudly.live
consvcprivacy.com
d1rv.social
data-dv.live
datadrv1.com
deliverycitylife.com
diskstorage.click
documentapproved.click
dr365.live
drive-share.pub
drivedefend.com
drivehost.live
drivehub.live
drivenc.pub
drivepoint.pub
drivepublic.live
driveshare.pub
drivestorage.online
drshare.online
drsync.click
dvcloud.live
dvfilesync.pub
file-acess.live
file-cloud.company
file-share.works
gdl-cloud.works
gdrive-share.online
gdrvdocs.online
gworkspace.social
healthfy.bio
journalctl.website
lauradream.com
livestorage.click
mngersrv.com
ms.share-onedr.com
mspdf.live
msvhost.com
my-356drv.online
my-drive365.pub
my1drv.live
my1drv.online
mydrv1.live
myonedrive365.live
ondrve.live
ondv.live
onedr.expert
onedrivecloud.click
onedrivecloud.expert
onedrivecloud.live
onedrivecloud.net
onedrivems.cloud
onedrivems.works
onedrweb.live
onefile.social
onelivedrv.com
onestorelink.live
onlinedrive.click
opendnsapi.net
pdf-share.pub
pdf-storage.pub
pdfshare.click
share-doc.live
share-pdf.live
sharedrive.pub
sharepdf.limited
site-staff.sale
storage-hub.pub
storagedrive.pub
supportcausems.com
workspace-doc.live
