{
  "description": "Domains used by automated malware analysis services & security vendors",
  "list": [
    "akana.mobiseclab.org",
    "analyze.intezer.com",
    "anlyz.io",
    "app.any.run",
    "app.sndbox.com",
    "cape.contextis.com",
    "capesandbox.com",
    "carbonblack.com",
    "cuckoosandbox.org",
    "detux.org",
    "emergingthreats.net",
    "filescan.io",
    "firmware.re",
    "hatching.io",
    "hybrid-analysis.com",
    "id-ransomware.malwarehunterteam.com",
    "inquest.net",
    "jevereg.amnpardaz.com",
    "joesandbox.com",
    "jotti.org",
    "koodous.com",
    "malshare.com",
    "malwareanalyser.io",
    "malwr.com",
    "manalyzer.org",
    "mcafee.com",
    "metadefender.opswat.com",
    "networktotal.com",
    "packettotal.com",
    "pdfexaminer.com",
    "polyswarm.network",
    "reverse.it",
    "sandbox.pikker.ee",
    "sanddroid.xjtu.edu.cn",
    "securelist.com",
    "symantec.com",
    "threatgrid.com",
    "tria.ge",
    "undroid.av-comparatives.org",
    "unpac.me",
    "valkyrie.comodo.com",
    "virustotal.com",
    "vmray.com",
    "wildfire.paloaltonetworks.com",
    "www.threatexpert.com",
    "www.vicheck.ca",
    "yomi.yoroi.company"
  ],
  "matching_attributes": [
    "domain",
    "hostname",
    "domain|ip",
    "url"
  ],
  "name": "List of known domains used by automated malware analysis services & security vendors",
  "type": "substring",
  "version": 20260904
}