# Copyright (c) 2014-2023 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://resecurity.com/blog/article/evilproxy-phishing-as-a-service-with-mfa-bypass-emerged-in-dark-web
# Reference: https://otx.alienvault.com/pulse/63175332703dcba6367c4087

evilproxy.pro
msdnmail.net
pua75npooc4ekrkkppdglaleftn5mi2hxsunz5uuup6uxqmen4deepyd.onion
rproxy.io
top-cyber.club
usd0182738s80.click
cpanel.evilproxy.pro
cpanel.pua75npooc4ekrkkppdglaleftn5mi2hxsunz5uuup6uxqmen4deepyd.onion
gw1.usd0182738s80.click
gw2.usd0182738s80.click
login-live.rproxy.io

# Reference: https://twitter.com/idclickthat/status/1585074008634294272
# Reference: https://twitter.com/1ZRR4H/status/1585078166292672512
# Reference: https://twitter.com/1ZRR4H/status/1585079705715474433

amountdue001.com
docxx2pdff.online
domain4invoice.com
fergusoncoinvoicing.com
hodlranch.org
invoic3online.com
invoice1domain.com
invoicedueonline.com
onedrivebusiness.com
yourbrand-18274.kxcdn.com