diff --git a/lists/automated-malware-analysis/list.json b/lists/automated-malware-analysis/list.json
index 2501fd6..ebab319 100644
--- a/lists/automated-malware-analysis/list.json
+++ b/lists/automated-malware-analysis/list.json
@@ -1,6 +1,6 @@
 {
   "name": "List of known domains used by automated malware analysis services & security vendors",
-  "version": 4,
+  "version": 5,
   "description": "Domains used by automated malware analysis services & security vendors",
   "type": "substring",
   "matching_attributes": [
@@ -27,6 +27,12 @@
     "securelist.com",
     "carbonblack.com",
     "app.any.run",
-    "cape.contextis.com"
+    "cape.contextis.com",
+    "tria.ge",
+    "koodous.com",
+    "undroid.av-comparatives.org",
+    "sanddroid.xjtu.edu.cn",
+    "jevereg.amnpardaz.com",
+    "analyze.intezer.com"
   ]
 }