# Copyright (c) 2014-2024 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://threatrecon.nshc.net/2019/01/30/operation-kitty-phishing/

acount-qooqle.pe.hu
ago2.co.kr
ahnniab.esy.es
aiyac-updaite.hol.es
daum-safety-team.esy.es
gyjmc.com
jejuseongahn.org
jundosase.cafe24.com
kuku675.site11.com
kuku79.herobo.com
mail-service.pe.hu
mail-support.esy.es
myacccounts-goggle.hol.es
myaccounnts-goggle.esy.es
my-homework.890m.com
nav-mail.hol.es
nid-mail.esy.es
nid-naver.hol.es
qqoqle-centering.esy.es
safe-naver-mail.pe.hu
suppcrt-seourity.esy.es

# Reference: http://download.ahnlab.com/kr/site/library/%5BAnalysis_Report%5DOperation_Kabar_Cobra.pdf

acount-qooqle.pe.hu
aiyac-updaite.hol.es
daum-settting.hol.es
ms-performance.hol.es
msperformance.hol.es
my-homework.890m.com
myprofileacc.pe.hu
nav-mail.hol.es
navem-rnail.hol.es
need-nver.hol.es
nid-mail.hol.es
nid-mail.pe.hu
nid-naver.hol.es
nid-never.pe.hu
rnyacount-jpadmin.hol.es
/bbs/data/board.php
/bbs/data/tmp/D.php
/bbs/data/tmp/fileupload.php
/bbs/data/tmp/Ping.php