Domains that are included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/apt_tortoiseshell.txt

apppure.cf
cc-security-inc.email
ccsecurity-mail-inc.email
ccsecurity-mail-inc.services
datacatch.xyz
dayzim.org
facebookservices.gq
findcareersatusbofa.com
fiservcareers.com
hike.studio
hiremilitaryheroes.com
incognito.today
infoga.cam
jumhuria.com
kaspersky.team
linksbit.com
liveleak.cam
liveuamap.live
lockheedmartinjobs.us
logonexchangeonline.com
logonmicrosoftonline.com
mail2go.live
mail2u.live
mailaccountlive.email
mails.center
metacafe.live
micorsoftonilne.com
micorsoftonline.website
micorsoftonline.xyz
microsoftoffice.systems
mispace.cam
newsl.ink
outlook-services.com
publicsgroupe.net
saudivisions2030.org
securityaccountreply.com
shareae.cf
short-l.link
shrt.rip
shurl.site
smtp2go.club
smtper.center
src-ymlang.link
surl.ist
sxk8xrjtaikv3dxl7hgghw3vptvxpzzxeynrcltu4k3yeecjq3.online
tetra.email
thegardian.ml
thomsonsreuters.email
thomsonsreuters.eu
thomsonsreuters.link
thomsonsreuters.net
tinil.ink
tinylink.pro
tox.cheap
treporter.com
tv-youtube.com
usdailypost.com
usdailypost.net
watch-youtube.com
xyzsitexyz.xyz
ymail-account.support
ymail-security-support.email
ymail-security.support
ymailaccounts.us
ymailsupport.info
zain.network