{
  "version": 2,
  "rules": [
    {
      "domain_suffix": [
        "antiphishing.nl",
        "antiphishing.ru",
        "cert-gib.com",
        "cert-gib.ru",
        "cybercrimecon.com",
        "f6.dev",
        "f6.ru",
        "f6.security",
        "facct.email",
        "facct.ru",
        "future-cs.ru",
        "g-ib.ae",
        "g-ib.ru",
        "g-ib.sg",
        "g-ib.us",
        "gib-global.com",
        "gib.sg",
        "gibdev.net",
        "gibtds.ru",
        "group-ib.ae",
        "group-ib.co.uk",
        "group-ib.com",
        "group-ib.de",
        "group-ib.eu",
        "group-ib.ru",
        "group-ib.sg",
        "group-ib.us",
        "groupib.ae",
        "groupib.sg",
        "groupib.us"
      ]
    }
  ]
}