diff --git a/README.md b/README.md
index c743a24..35fa70c 100644
--- a/README.md
+++ b/README.md
@@ -382,6 +382,12 @@ A certain amount of (domain- or business-specific) analysis is necessary to crea
             The emphasis of ThreatMiner isn't just about indicators of compromise (IoC) but also to provide analysts with contextual information related to the IoC they are looking at.
         </td>
     </tr>
+    <tr>
+        <td>
+            <a href="https://raw.githubusercontent.com/WSTNPHX/scripts-n-tools/master/malware-email-addresses.txt">WSTNPHX Malware Email Addresses</a>
+        </td>
+        <td>Email addresses used by malware collected by VVestron Phoronix (WSTNPHX)</td>
+    </tr>
     <tr>
         <td>
             <a href="https://virusshare.com/" target="_blank">VirusShare</a>