# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/ScumBots/status/1047543566594179073

queda2122.ddns.net

# Reference: https://twitter.com/ScumBots/status/1047422769712046080

trotokolenigers.onthewifi.com

# Reference: https://twitter.com/ScumBots/status/1046815013401501701

mdformo1.ddns.net

# Reference: https://twitter.com/ScumBots/status/1041469793625407489

farida.ddns.net

# Reference: https://twitter.com/ScumBots/status/1037351538732294145

zxcvbn123456.ddns.net

# Reference: https://twitter.com/ScumBots/status/1038158542736445441

mondns.myftp.biz

# Reference: https://twitter.com/ScumBots/status/1040311939073826816

morfey.hldns.ru

# Reference: https://twitter.com/ScumBots/status/1050046306016747521

office365update.duckdns.org
systen32.ddns.net

# Reference: https://twitter.com/ScumBots/status/1052526398924095488

quedabesouro.ddns.net

# Reference: https://twitter.com/ScumBots/status/1053262497673891841

seekers.hopto.org

# Reference: https://twitter.com/ScumBots/status/1054081645400260608

duckdate.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1063996828516012033

morfey.myftp.org

# Reference: https://twitter.com/ScumBots/status/1064254932528832512

itachituff.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1067565492322410497

farida.ddns.net

# Reference: https://twitter.com/ScumBots/status/1069517101654777857

updatefacebook.ddns.net

# Reference: https://twitter.com/ScumBots/status/1080998862574309377

vivivi.myftp.org

# Reference: https://twitter.com/ScumBots/status/1081317358206156800

nerv7.ddns.net

# Reference: https://twitter.com/ScumBots/status/1081378115526582273

mondns.myftp.biz

# Reference: https://twitter.com/ScumBots/status/1082132730715037696

queda212.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1089336859912744960

microsoftsecure.myq-see.com

# Reference: https://twitter.com/ScumBots/status/1090260035312275456

498408.ddns.net
olhomagicocdt.duckdns.org
systenfailued.ddns.com.br

# Reference: https://twitter.com/ScumBots/status/1090736985315201025

helloweenhagga.ddns.net
helloweenhagga1.ddns.net
helloweenhagga2.ddns.net
helloweenhagga3.ddns.net

# Reference: https://twitter.com/ScumBots/status/1095149123517534208

helloweenhagga4.ddns.net

# Reference: https://twitter.com/ScumBots/status/1095760026923352066

updatesystem.linkpc.net

# Reference: https://twitter.com/ScumBots/status/1097587061329154055

easykill.servebeer.com
easykill1.servepics.com
easykill2.servepics.com
easykill3.servebeer.com

# Reference: https://twitter.com/ScumBots/status/1098145754185633793

haggasinger.ddns.net
haggasinger1.ddns.net
haggasinger2.ddns.net

# Reference: https://twitter.com/ScumBots/status/1101890548661698560

rat24695.ddns.net

# Reference: https://twitter.com/ScumBots/status/1102445323417542658

mastermana1.serveirc.com
mastermana2.serveirc.com
mastermana3.serveirc.com
mastermana4.serveirc.com

# Reference: https://twitter.com/ScumBots/status/1103351296768331776

seskoal7rbe.ddns.net

# Reference: https://twitter.com/ScumBots/status/1103751431318892546

fouirux-59789.portmap.io

81.106.30.119:4444

# Reference: https://twitter.com/ScumBots/status/1104736674087665665

173.46.85.160:5555

# Reference: https://twitter.com/James_inthe_box/status/1107686616624037890
# Reference: https://twitter.com/JAMESWT_MHT/status/1107682800134750211

nobody120.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1108802212543848450

5.9.171.235:333

# Reference: https://twitter.com/ScumBots/status/1110489582494203904

91.192.100.5:1604

# Reference: https://twitter.com/Racco42/status/1112628162872119296

82.223.9.232:98

# Reference: https://twitter.com/TweeterCyber/status/1112919582635745281

kronozzz2.duckdns.org

# Reference: https://twitter.com/F_kZ_/status/1047054463570186241

37.187.155.228:85
nojjdjamel.hopto.org
nojjdjamel2251.hopto.org

# Reference: https://twitter.com/malware_traffic/status/935703820889358336

oamentyga.duckdns.org

# Reference: https://twitter.com/Racco42/status/884324767809056768

37.187.92.171:621

# Reference: https://twitter.com/Racco42/status/882123509350236160

hagroonayazabiiiiii.com
82.165.147.250:621

# Reference: https://twitter.com/luc4m/status/1113433242689052672

oldmandnsch.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1117986483196055552

95.213.251.165:7070

# Reference: https://unit42.paloaltonetworks.com/aggah-campaign-bit-ly-blogspot-and-pastebin-used-for-c2-in-large-scale-campaign

frankmana.duckdns.org
workfine11.duckdns.org
oldmandnsch.duckdns.org
blackhagga.duckdns.org
skyrocket1.duckdns.org
kronoz.duckdns.org
oldmandnsch.duckdns.org
kronozzz2.duckdns.org
lulla.duckdns.org
decent.myvnc.com
decent5.myvnc.com
jayztools1.ddns.net
jayztools2.ddns.net
jayztools3.ddns.net
totallol.duckdns.org
totallol1.duckdns.org
totallol2.duckdns.org
totallol3.duckdns.org
decent2.myvnc.com
decent3.myvnc.com
decent1.myvnc.com
decent4.myvnc.com
jordanchen736.sytes.net
jordanchen7361.sytes.net
jordanchen7362.sytes.net
jordanchen7363.sytes.net
lalacious1.serveftp.com
lalacious2.serveftp.com
lalacious3.serveftp.com
lalacious4.serveftp.com
mastermana1.serveirc.com
mastermana2.serveirc.com
mastermana3.serveirc.com
mastermana4.serveirc.com
mastermana5.serveirc.com
lullikhao.ddns.net
lullikhao1.ddns.net
lullikhao2.ddns.net
bullol.duckdns.org
cocomo.ddns.net
haggasinger2.ddns.net
haggasinger.ddns.net
haggasinger1.ddns.net
loramer1.ddnsking.com
easykill.servebeer.com
easykill3.servebeer.com
easykill2.servepics.com
easykill1.servepics.com
easykill3.servepics.com
helloweenhagga.ddns.net
helloweenhagga3.ddns.net
helloweenhagga4.ddns.net
helloweenhagga2.ddns.net
revengerx211.sytes.net
revengerx212.sytes.net
revengerx213.sytes.net
revengerx214.sytes.net
revengerx215.sytes.net
revengerx216.sytes.net
revengerx217.sytes.net
revengerx218.sytes.net
revengerx219.sytes.net
revengerx210.sytes.net
office365update.duckdns.org
systen32.ddns.net
bhenchood.ddns.net
emmanuelstevo.ddns.net
zinderhola1.ddns.net
zinderhola.ddns.net
myownlogs.duckdns.org
cocomo1.ddns.net
cocomo10.serveblog.net
cocomo2.ddns.net
cocomo2.serveblog.net
cocomo3.serveblog.net
cocomo4.serveblog.net
cocomo5.serveblog.net
cocomo6.serveblog.net
cocomo7.serveblog.net
cocomo8.serveblog.net
cocomo9.serveblog.net
mrcode.hopto.org
mrcode1.hopto.org
mrcode2.hopto.org
pussi2442.ddns.net

# Reference: https://twitter.com/malwrhunterteam/status/1076166793054556160

presentationx.sytes.net

# Reference: https://twitter.com/ScumBots/status/1121497114532618246

5.9.171.229:777

# Reference: https://twitter.com/illegalFawn/status/1122767858126266368

jorenimo55.hopto.org
