# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: zipline

# Reference: https://research.checkpoint.com/2025/zipline-phishing-campaign/

atriocrm.com
caultonconsulting.com
chipmanconsulting.com
crmforretailers.com
crosleyconsulting.com
hancockconsulting.com
humcrm.com
kgmstrategy.com
kprocurement.com
lamyconsulting.com
lvprocurement.com
tollcrm.com
trilineconsulting.com
vnrsales.com
zappiercrm.com
clear-sign-e69444a8e4ea.herokuapp.com
collab-sign-8e36fa762841.herokuapp.com
docsign-hub-3295a03470c3.herokuapp.com
docvault-share-665d141177ca.herokuapp.com
john-deer-apple-0c6f34d9c276.herokuapp.com
legal-sign-8ec8b9f1edb2.herokuapp.com
mail-serve-9a5d4f13e3a7.herokuapp.com
sharespace-link-360b265f3942.herokuapp.com
signcentral-7df32454744c.herokuapp.com
signcentral-vault-33ce0aff08dc.herokuapp.com
signflow-e15eda21396d.herokuapp.com
signforge-a61a5975a04b.herokuapp.com
signhub-view-09a16562134b.herokuapp.com
signlink-portal-37c581992418.herokuapp.com
signstream-docs-de3fa399b173.herokuapp.com
signtrack-docs-6a96b334b140.herokuapp.com
viewshare-4a47630892e1.herokuapp.com
webmailapp-0e6cff4089a4.herokuapp.com

# Reference: https://www.virustotal.com/gui/ip-address/172.210.58.69/relations

crunchberrycrm.com
