# Copyright (c) 2014-2024 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://unit42.paloaltonetworks.com/snipbot-romcom-malware-variant/
# Reference: https://app.validin.com/detail?find=185.225.74.94&type=ip4&ref_id=65ec9bcbe4c#tab=resolutions

certifysop.com
cethernet.com
cloudcreative.digital
dns-msn.com
docstorage.link
drv2ms.com
drvmcprotect.com
fastshare.click
fileshare.direct
ilogicflow.com
linedrv.com
mcprotect.cloud
olminx.com
publicshare.link
sitepanel.top
webtimeapi.com
xeontime.com
1drv.fileshare.direct
adobe.cloudcreative.digital
