Domains that are included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/apt_kimsuky.txt

1213rt.atwebpages.com
account.daum.unikftc.kr
account.daum.unikortv.com
account.grnail-signin.ga
accountcheck.net
accounting-microsofft.epizy.com
accounts.grnail-signin.ga
accounts.grnail-signing.work
admin.claum.ml
admin.daum-or.ml
admin.naver-in.ml
ahn-lab.cf
alarm.naver-in.ml
alive-user.work
all200.mireene.com
alone-service.work
alyssalove.getenjoyment.net
amberalexander.ghtdev.com
app-house.online
app-support.site
asia-studies.net
atene.myartsonline.com
atooi.ga
attachchosun.atwebpages.com
auth.daum-or.ml
baboivan.scienceontheweb.net
bascetball.atwebpages.com
beast.16mb.com
beilksa.scienceontheweb.net
bigfile-naver.servepics.com
bigfile.pe.hu
bkl-co.ml
bnmvg.cf
c-naver.com
check.kisa-security.cf
chollian.ml
claum.ml
cloudmail.cloud
clouds.scienceontheweb.net
com-main.work
com-vps.work
confirm-main.work
conm.ga
connectter.atwebpages.com
cooper.center
csnaver.com
cuinm.huikm.kro.kr
daom.ml
daum-login-protect.hol.es
daum-or.ml
daum.unikortv.com
daumcleaner.mywebcommunity.org
daums.cf
daumusercenter.web.app
dnhji.bnmvg.cf
doc-view.work
dongguk.kro.kr
dovvn-mail.com
download.riseknite.life
drog-service.com
dubai-1.com
eastsea.or.kr
eland.ml
email.dongyang.ml
email.jnuac.ml
email.koreapetroleum.ml
email.nepa.cf
esmec.ml
eucie09111.myartsonline.com
exchange.uni-tuebingen.buzz
ext.imperial.fit
fabre.myartsonline.com
filer1.1apps.com
filer2.1apps.com
finale-jack.esy.es
finalist.org-help.com
first-state.work
flagguarder.site
follcdn.myartsonline.com
foxhunter.getenjoyment.net
foxonline123.atwebpages.com
ftcpark59.getenjoyment.net
gbxhd.org-help.com
general-second.org-help.com
genexine.member-info.net
glow.flagguarder.site
goldbin.myartsonline.com
gommi.ml
gotoclean.com.co
greatname.000webhostapp.com
grnail-login.ml
grnail-signin.ga
grnail-signing.work
gwmail.deuac.ml
gwmail.pancon.ml
gyjmc.com
hanlight.mygamesonline.org
heehorse.com
help.unikoreas.kr
helpnaver.com
imperial.fit
itamaraty.net
its.jbnu.ml
jbnu.info
jbnu.ml
joelwisian.com
jongjin.000webhostapp.com
jupit.getenjoyment.net
kaist.krfa.ml
kakaoo.ml
kccworld.ml
kimshan600000.blogspot.com
kisa-security.cf
korea.getenjoyment.net
kr2959.atwebpages.com
krfa.ml
kt1kreate.cf
kuku675.site11.com
kuku79.herobo.com
kumb.cf
leeko.ml
letterpaper.press
lieon.mypressonline.com
live-sign.ml
loadmanager07.com
login-confirm.work
login-use.com
login.daum.unikortv.com
login.live-sign.ml
logins-yahoo.com
logins.daom.ml
lovelovelove.atwebpages.com
lovemoney.mypressonline.com
maeil.ml
maii-daum-net.atwebpages.com
mail-customer-safety-center.hol.es
mail-down.com
mail-kinu.hol.es
mail.bkl-co.ml
mail.daums.cf
mail.esmec.ml
mail.kakaoo.ml
mail.kccworld.ml
mail.leeko.ml
mail.maeil.ml
mail.miraeasset.ml
mail.naver-in.ml
mail.naver.comuf.com
mail.naver.srl
mail.nh-amundi.ml
mail.onestorecorp.ml
mail.outlookin.ml
mail.s-food.ml
mail.sejonggroup.ml
mail.sogang.ml
mail.tlbu.ml
mail.unifsc.com
mail.wonik.ml
mail.yncc.ml
mail.zdnet.ga
main-service.site
majar.medianewsonline.com
manager.naver-in.ml
mantc.getenjoyment.net
matmiho.com
may3.cf
member-info.net
member-service.work
member.daum.unikortv.com
message-inbox.work
microsoft-office.us
midsecurity.org
minia.ml
minner.work
miraeasset.ml
movie.youtoboo.kro.kr
myaccount.google.nkaac.net
myaccount.grnail-security.work
myaccount.grnail-signin.ga
myaccount.grnail-signing.work
myaccounts-gmail.autho.co
myaccounts.grnail-signin.ga
myetherwallet.co.in
myetherwallet.com.mx
myprivacy.work
nate-on.bug3.com
nate-on.ml
naver-in.ml
naver.co.in
naver.com.de
naver.com.ec
naver.com.mx
naver.com.se
naver.koreagov.com
naver.pw
naver.serveblog.net
naver.servehttp.com
naver.srl
navercheck.kro.kr
naverdns.co
navor.ml
net-policies.work
netsecurityservice.com
nh-amundi.ml
nhpurumy.mireene.com
nid-mail.pe.hu
nid-nav.navor.ml
nid.naver.com.se
nid.naver.onektx.com
nid.naver.unicrefia.com
nid2-naver-com.medianewsonline.com
nidlogin.naver.srl
nidlogin.navercheck.kro.kr
nidnaver.email
nidnaver.net
nids.navor.ml
nmail.exaemc.ml
ns.onekorea.me
ns1.microsoft-office.us
ns2.microsoft-office.us
nytimes.onekma.com
obser.mygamesonline.org
onestorecorp.ml
online---shop.atwebpages.com
online-support.work
onono.ml
open-auth.work
options.work
org-vip.work
outlookin.ml
pagelock.host
part.bigfile.pe.hu
pcjindustries.com
pcsecucheck.scienceontheweb.net
ping.requests.p-e.kr
pingball.mygamesonline.org
pingguo5.atwebpages.com
policy.webofknowledg.com
pootball.getenjoyment.net
pootball.medianewsonline.com
portable.epizy.com
ppahjcz.tigerwood.tech
pro-navor.com
profile-setting.work
protect-yahoo-teeam.000webhostapp.com
protect.grnail-signin.ga
quarez.atwebpages.com
qygbn.xdtgh.ga
ranso.myartsonline.com
read.tongilmoney.com
requests.p-e.kr
resetprofile.com
resultview.com
rhwkdlaktm.atwebpages.com
riseknite.life
s-food.ml
saemaeul.mireene.com
samsoding.homm7.gethompy.com
sec-line.work
sec-live.com
security-confirm.bmail-org.com
security-mail-daum.000webhostapp.com
securitycounci1report.org
sejonggroup.ml
seoul.lastpark.life
seoulhobi.biz
set-login.com
setting-main.work
sgmedia.mireene.com
short-line.work
sign-in.work
signin.chollian.ml
signin.grnail-login.ml
sima.atspace.tv
smalldeal.mypressonline.com
sms.kt1kreate.cf
smtper.cz
smtper.org
smyun0272.blogspot.com
sogang.ml
ssltop.work
texts.letterpaper.press
tigerwood.tech
tlbu.ml
top.naver.onekda.com
uefa2018.000webhostapp.com
uhuioo.cf
uni-tuebingen.buzz
upgradesrv.890m.com
usamilitarysavings.webofknowledg.com
user-manage-cenier.nol.es
user.naver-in.ml
usernaver.com
vnext.mireene.com
wbg0909.scienceontheweb.net
weak-online.work
web-info.work
web-rain.work
web-store.work
webmail.naver.srl
webmail.pcjindustries.com
webofknowledg.com
webrnail-kinu.hol.es
webuserinfo.com
wonik.ml
workcrafter.mywebcommunity.org
worldinfocontact.club
xdtgh.ga
yah00.work
yncc.ml
youtoboo.kro.kr
zdnet.ga