# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/DynamicAnalysis/status/1034828121126723584
# Reference: https://twitter.com/James_inthe_box/status/1034829960647593984
# Reference: https://pastebin.com/MgAd0CzR

syscore.duckdns.org
watchdogdns.duckdns.org

# Reference: https://twitter.com/ViriBack/status/1044187140626796545

nhatquang.club

# Reference: https://twitter.com/Racco42/status/1050763535888867328

lagos042.ddns.net
manuel3.publicvm.com

# Reference: https://threatvector.cylance.com/en_us/home/threat-spotlight-menupass-quasarrat-backdoor.html

195.54.163.74:443

# Reference: https://twitter.com/silascutler/status/1154137754051239936
# Reference: https://pastebin.com/s6pkzu0z
# Reference: https://otx.alienvault.com/pulse/5d39d3634b2ef4d157a1f8ae

hostzsz.ddns.net
rkr003.ddns.net
131454.ddns.net
609574.ddns.net
928hafa7.ddns.net
abcdhacked.ddns.net
acidos-44965.portmap.host
adiwax.duckdns.org
afdafadfdfdfaa.ddns.net
agoraadn.ddns.net
akaimpk.ddns.net
alexrobin.hopto.org
alibabajob.duckdns.org
allurbase.warzonedns.com
alphamission.ooguy.com
altsyst3m.servegame.com
aminaqi-32028.portmap.io
androidshegaon.ddns.net
apina123.duckdns.org
apo.myddns.me
argoogle.ddns.net
asdasdjla.ddns.net
ausliandns.ddns.net
auw8duii3j5.gotdns.ch
aziziyehack.duckdns.org
babagee.ddns.net
bebe228855.hopto.org
bigpouley.ddns.net
blacklji.ddns.net
blackslight29.duckdns.org
bonsaichiled.freedynamicdns.org
boooing.hotpo.org
broly.mywire.org
bugido.ddns.net
carbonhdspeed.ddns.net
carelesspineapple.ddns.net
cerberus1980.hopto.org
chad3eboz.ddns.net
chrome.fagdns.com
ckleins.ddns.net
colinmdu78.freemyip.com
cryptoeverwin.ddns.net
cryptoslayer22.ddns.net
csphagah.servegame.com
dancen.ddns.net
dankmemes.ddns.net
darkhorse777.ddns.net
darkkutjood.ddns.net
darkslazz9988.ddns.net
dcgame.ddns.net
ddsess.ddns.net
deaznam.ddns.net
dertanion.ddns.net
dexter1234.duckdns.org
dfssdfds3422344.ddns.net
dnsinass.hopto.org
dracia321.no-ip.biz
dragonslayer22.ddns.net
drdep.ddns.net
drhack.hopto.org
drkcmtt.duckdns.org
dschndr.ddns.net
dupal13.ddns.net
dzchackteam.duckdns.org
ededwdwdwd.hopto.org
eduardorouter.ddns.net
eznecum.duckdns.org
faded.hopto.org
fahd2010.ddns.net
fahd20101.ddns.net
fgeha777.ddns.net
fluffyunicornsftw.sytes.net
forst5ns3a45gpnz.onion.ws
fortnitelol.kozow.com
fromnvpns.theworkpc.com
galacto17.hopto.org
galrov2.ddns.net
gargamel.duckdns.org
ghostisreal.ddns.net
gingles.ddns.net
google64.sytes.net
googlead3321.ddns.net
googleisp.ddns.net
googlessh1.ddns.net
grundle.ddns.net
gsmboxupdates.ddns.net
guccigangyesxddddddd.duckdns.org
gud.ddns.net
hackmee.ddns.net
hackportals.ddns.net
hackprova.ddnsking.com
havocplays.duckdns.org
haxerjack.ddns.net
helloworldhere.ddns.net
hellsharion.myftp.org
henripizio.ddns.net
henripizzio.ddns.net
heros108.ddns.net
holydns.warzonedns.com
host420.ddns.net
hostestreitr.ddns.net
hostvertice.hopto.org
icecreem.hopto.org
icmsecurity.ddns.net
ignuxas64.ddns.net
ilsk-56205.portmap.io
imjustdoingmyjob.ddns.net
internimus.ddns.net
ipointer1604.sytes.net
ivaiva.ddns.net
jacobjones965895-53801.portmap.io
javaupd.ddns.net
javvaa.accesscam.org
jercky.ddns.net
jonreg.ddns.net
justdoitfast.myvnc.com
k1nngurr.myftp.org
kanat26.duckdns.org
katrol1.ddns.net
kekhaxim.duckdns.org
keremabi.duckdns.org
kleur4.ddns.net
kurban187.duckdns.org
lab-wired-kvvgzjkkdr.dynamic-m.com
lancelord88.ddns.net
larofagol-50266.portmap.io
leghost.ddns.net
lekee.duckdns.org
letmeinpls.ddns.net
levinx.duckdns.org
lfjdslkjfslkjf.bounceme.net
m1ngs1.ddns.net
marcirat.ddns.net
marjoserver.ddns.net
martinou.ddns.net
maximazorreguieta.ddns.net
maximazorreguieta.no-ip.info
maxwilly4142-45474.portmap.io
mecanic.freeddns.org
mehack.ddns.net
mertens.mynetgear.com
miseri.duckdns.org
mlks.ddns.net
morokko.duckdns.org
mumbai.webhop.me
myhostdown.ddns.net
myportnotblock.001www.com
nanorat.ddns.net
naskopv.hopto.org
nattawut.ddns.net
neg4tif.duckdns.org
negatifrat.duckdns.org
nemesis423.ddns.net
neoxyne.myvnc.com
new.windowsupdate.live
nezaki-backups.ddns.net
nhk123.ddns.net
nicereverse.ooguy.com
niggerlovers69.hopto.org
nmahnsk1.dynu.net
noipkrutoy.ddns.net
okapia99.ddns.net
omikronium.ddns.net
omka11.duckdns.org
omniserver.redirectme.net
oofed.ddns.net
oofed.sytes.net
oogboog.ddns.net
opstatun.sytes.net
orcabot.ddns.net
p6solutions.hopto.org
paintedwolf.ddns.net
pass2233.ddns.net
pass2233.dzuboks.fun
perdunelo.ddns.net
pigeon143.ddns.net
pingvinic1998.dynu.net
plasty-48256.portmap.host
ppupsekovich.hldns.ru
ptpftp.mypi.co
pusheax.asuscomm.com
q196vbd21.dynu.net
qq529879477.mynetgear.com
quasarandroid.ddns.net
quasarcengo.duckdns.org
quasarez331.duckdns.org
quasarrat.ddns.net
quasarsaiiut.ddns.net
quasartest1.warzonedns.com
qwerty1.ddns.net
qwertyasd.hopto.org
randomhost.ownip.net
rat.bcn-pool.us
rat555.duckdns.org
rat80.ddns.net
rdexter01-50242.portmap.host
recel.duckdns.org
ref12dert6789hty.ddns.net
remoteadmintool.webhop.me
ricardobola.duckdns.org
rizacomet.duckdns.org
russiansecurity.ddns.net
sandshoe.duckdns.org
sclrtlol.gotdns.ch
sezzer93.dynu.net
shadowfriend.ddns.net
shtumichael-40213.portmap.host
simoalal.nerdpol.ovh
sissnemomdesiss.ddns.net
skills.sytes.net
skullman.duckdns.org
skywalker12.ddns.net
soc123.ddns.net
soulnomad.ddns.net
srw-1.noip.me
stealer123.ddns.net
stickygreen666.ddns.net
suckmydick.urown.cloud
suus.ddns.net
svchostddns.ddns.net
tannmistann-31237.portmap.host
test.killwaf.com
testerhousing.ddns.net
testinghouse.ddns.net
testocertificazione.ddns.net
testtesta1.ddns.net
thefatrat23.ddns.net
theprohd-59801.portmap.io
thewayofthemagic.ddns.net
tivict.duckdns.org
tomwahl.duckdns.org
tvariamxuy8.hopto.org
umutgokmn.duckdns.org
unknowhost.ddns.net
urx.myvnc.com
usermata-64665.portmap.host
wareztech.ddns.net
welmer2018.ddns.net
windowsbrowser.ddns.net
windowshabitat.serveirc.com
windowsupdate.asuscomm.com
windowsupdatereap.ddns.net
wsad1122.dynu.net
wuenx1.duckdns.org
wuenx2.duckdns.org
xcorpitx.ddns.net
xeroxhaxor18.duckdns.org
xtremepwned.dynu.net
xtrhost.sytes.net
xylem.duckdns.org
y33tmasters.ddns.net
yaplonkod.duckdns.org
yawani.ddns.net
yesdatpls.duckdns.org
yesps.myvnc.com
youdontknow.ddns.net
youknow.duckdns.org
zeroherecompany-64861.portmap.host
zotrix.ddns.net

# Reference: https://twitter.com/Arkbird_SOLG/status/1157319751238131717

195.12.50.172:46405

# Reference: https://twitter.com/JayTHL/status/1188498558653206528

82.146.51.150:1604
