https://raw.githubusercontent.com/Neo23x0/signature-base/master/iocs/c2-iocs.txt
Domains that did not resolve;
002562066559681.r3u8.com
031168053846049.r3u8.com
1.gadskysun.com
19518473326.r3u8.com
1960445709311199.r3u8.com
2014.zzux.com
202017845.r3u8.com
2139465544784.r3u8.com
2789203959848958.r3u8.com
3q.wubangta.info
3q.wubangtu.info
5590428449750026.r3u8.com
5q.niushenghuo.info
9gowg.tech
a.wubangtu.info
a1.suibian2010.info
abcd100621.3322.org
abcd120719.6600.org
abcd120807.3322.org
acc.emailfound.info
acc.lehigtapp.com
acsocietyy.com
ad.getfond.info
adobe-us-updatefiles.digital
afci-newsoft.fr
aimsecurity.net
amxil.opmuert.org
androidmusicapp.onmypc.us
angeldonationblog.com
anvprn.com
anycal1.com
anydeskupdates.com
aotuo.9966.org
apec.qtsofta.com
api.microsofed.com
api.officeonlinetool.com
apollo-crypto.org.shilaerc20.com
app.centralgoogle.com
app.lehigtapp.com
app.tstartel.org
appeal.ml
apple.cmdnetview.com
apple.defensewar.org
appleimages.longmusic.com
appleimages.organiccrap.com
applemirror.organiccrap.com
applemusic.itemdb.com
applemusic.wikaba.com
applemusic.zzux.com
apples.sytes.net
appleupdate.itemdb.com
appleupdateurl.2waky.com
architectisusa.com
army.xxuz.com
art.p6p6.net
asq.swhw71un.pw
availab.wikaba.com
avgfree.us
azecofarm.az
azuredeploystore.com
azureonlinestorage.com
b.support.outlook-microsoft.net
baby.macforlinux.net
baby.myie12.com
baby.usmirocomney.net
bak.ignorelist.com
balance1.wikaba.com
balk.n7go.com
banana.cmdnetview.com
barrybaker.3322.org
barrybaker.6600.org
belowto.com
bk56.twilightparadox.com
blog.defensewar.org
bqcpu.com
bridgeluxlightmadness.com
businesssalaries.com
ca.minexmr.com
cabbage.iownyour.biz
cao.p6p6.net
cata.qtsofta.com
catholicmmb.com
cbdnewsandreviews.net
cbppnews.com
ccfchrist.com
cdn-chrome.com
cdn.incloud-go.com
cdnverify.net
centralgoogle.com
cgei493860.r3u8.com
chibashiri.com
childrenstow.com
cia.ezua.com
ciaoci.chickenkiller.com
ckusshani.com
cloud-kingl.com
cloud-maste.com
club.personanddog.info
cms.sindeali.com
cnnews.mylflv.com
cnnews.mylftv.com
codevexillium.org
collector.centralgoogle.com
companieshousesearch.com
contactus.onmypc.us
content.centralgoogle.com
content.pcmsar.net
contractus.qpoe.com
contractus.zzux.com
coreck.suayay.com
cpu.4pu.com
ctdl.windowsupdate.nsatcdns.com
ctldl.windowsupdate.authorizeddns.us
ctldl.windowsupdate.nsatcdns.com
curvefinances.com
cwiinatonal.com
daddy.gostudyantivirus.com
dcc.jimingroup.com
de.minexmr.com
dear.loveddos.com
dedydns.ns01.us
derbox.centralgoogle.com
desktopweatheralerts02.desktopweatheralerts00.desktopweatheralerts.com
dev.kinopoisksu.com
dfgwerzc.3322.org
dick.ccfchrist.com
dll.freshdns.org
dns.snakesearch.info
dns.undpus.com
dnspoddwg.authorizeddns.org
docs.microsoft-support.net
document.methoder.com
download.windowsupdate.dedgesuite.net
download.windowsupdate.nsatcdns.com
drives.methoder.com
drivres-update.info
dst.1dumb.com
duosay.com
dutchbros.apps.playnetwork.com
dyncojinf.6600.org
dynsbluecheck.7766.org
edgar.ccfchrist.com
emergencystreet.com
eric-averyanov.wha.la
essashi.com
eu.acmetoy.com
eu.wha.la
ewe.toshste.com
ewms.6600.org
f068v.site
fabian.ccfchrist.com
fcztqbg.zj.r3u8.com
file.zzux.com
files.architectisusa.com
firefoxcomt.arkouowi.com
fish.toh.info
fjs.wikaba.com
flea.poulsenv.com
flowershop22.110mb.com
flynews.edns.biz
foal.wchildress.com
follow.wha.la
fr.minexmr.com
fr.wikaba.com
friendlysupport.giize.com
ftp.architectisusa.com
ftp.cvnx.zyns.com
ftp.eric-averyanov.wha.la
ftp.eu.wha.la
ftp.goldtoyota.com
ftp.moscowdic.trickip.org
ftp.windowsupdate.authorizeddns.us
fu.chromeenter.com
fuckmm.8800.org
fukuoka.cloud-maste.com
funding-exchange.org
g3ypf.online
gavin.ccfchrist.com
geetkculture.net
gensuzuki.6600.org
globalnews.wikaba.com
gmail.com.mailsserver.com
gmpcw.com
go-gga.com
gold.polopurple.com
goldtoyota.com
goodsampjp.com
google.macforlinux.net
google.usrobothome.com
googlegemail.com
googlemeail.com
gotourisma.com
gt4study.com
gtsofta.com
hackqz.f3322.org
hamiltion.catholicmmb.com
hanproud.com
happy.workerisgood.com
helpus.ddns.info
helshellfucde.8866.org
hg8fmv.racing
hk-china.485445bd7ac73d726fd60eef9f7f1044.pw
hk-china.d8a4d1bc0af4b49721b10b7a6cb6bb29.pw
hk.cmdnetview.com
hk.loveddos.com
hkhzhz.com
holdmem.dbhubspi.com
home.trickip.org
hotma11.com
hotma11.net
hotmai.info
hotmail.com.mailsserver.com
hukuoka.cloud-maste.com
ibmmsg.strangled.net
icfeds.cf
ideasofbusiness.com
idpmus.hostport9.net
ie.update-windows-microsoft.com
ijica.in
image.laoscript.org
images.defexpoindia14.com
images.thedomais.info
images.tokyo-gojp.com
images.tyoto-go-jp.com
imap.architectisusa.com
img.microtoo.info
img.station155.com
inbox.webmailgoogle.com
incloud-go.com
incloud-obert.com
ingemar.catholicmmb.com
innocent-isayev.sexidude.com
intelnetservice.com
intelsupport.net
iphone.vizvaz.com
ipv4.windowsupdate.authorizeddns.us
ipv4.windowsupdate.nsatcdns.com
itunesdownload.jkub.com
itunesdownload.vizvaz.com
itunesdownload.wikaba.com
itunesimages.itemdb.com
itunesimages.itsaol.com
itunesimages.qpoe.com
itunesmirror.fartit.com
itunesmirror.itsaol.com
itunesmusic.jetos.com
itunesmusic.jkub.com
itunesupdate.itsaol.com
itunesupdates.organiccrap.com
ixrayeye.com
james.tffghelth.com
jap.japanmusicinfo.com
japan.fuckanti.com
japan.linuxforover.com
japan.loveddos.com
japanfst.japanteam.org
japanteam.org
jd978.com
jepsen.r3u8.com
jica-go-jp.bike
jimin-jp.biz
jimin.jimindaddy.com
jimintokoy.com
jmuroran.com
jp.rakutenmusic.com
jp.serveuser.com
jp.virhub.biz
jxsuyuisyahooapis.com
kaka.lehigtapp.com
kawasaki.cloud-maste.com
kbjr.zvgkbjj.com
kennedy.tffghelth.com
key.zzux.com
kmd.crabdance.com
koala.acsocietyy.com
ktgmktanxgvn.r3u8.com
kxsbwappupdate.dhcp.biz
last.p6p6.net
latestnews.organiccrap.com
leedong.longmusic.com
leimeng.com.tw
lennon.fftpoor.com
lianhuaxinwen.com
library.cpgcorp.org
lion.wchildress.com
lizard.poulsenv.com
login.cdn-chrome.com
logon.had-one-job.com
lzf550.r3u8.com
m.necemarket.com
mac.goldtoyota.com
mac.methoder.com
macfee.mrface.com
macforlinux.net
mail.architectisusa.com
mail.cbppnews.com
mail.macforlinux.net
mail.tstartel.org
mail.upgoogle.com
mailcarriage.co.uk
mailj.hostport9.net
mailowl.jkub.com
mailserever.com
mailvserver.com
malcolm.fftpoor.com
manager.architectisusa.com
maofajapa.3322.org
mb.glbaitech.com
mbaby.macforlinux.net
mcafeea.cf
me.scieron.com
medexplor.thedomais.info
meibubaker.3322.org
meiji-ac-jp.com
meltegorniesto.com
mesjm.emailfound.info
message.emailfound.info
message.p6p6.net
messagea.emailfound.info
mf.ddns.info
micoosofts.com
microcnmlgb.3322.org
microdef.2288.org
microhotmail.com
microsofed.com
microsoft-support.net
microsoften.com
microsoftimages.organiccrap.com
microsoftmirror.mrbasic.com
microsoftmusic.itemdb.com
microsoftmusic.mrbasic.com
microsoftstores.itemdb.com
microsoftupdate.mrbasic.com
microsoftupdates.vizvaz.com
mmofoojap.2288.org
mocha.100fanwen.com
mod.jetos.com
mofa-go-jp.com
mofa.dynamic-dns.net
mofa.strangled.net
mongoles.3322.org
monkey.windowsupdate.nsatcdns.com
moscowdic.trickip.org
ms.ecc.u-tokyo-ac-jp.com
msboxonline.com
msedgepackageinfo.com
msedgeupdate.net
mseupdate.ourhobby.com
msg.ezua.com
msn.incloud-go.com
mtonline0416.dyndns.org
muller.exprenum.com
mx.yetrula.eu
mynutrition2go.orderlunchesatwork.com
myphpwebsite.itsaol.com
mytodaynews.publicvm.com
myurinikoreaaps.ninth.biz
nasa.xxuz.com
newminigolf.com
news.100fanwen.com
news.japanteam.org
news.turkceil.tk
news.voanews.hk
newsdata.jkub.com
newsplacec.com
newstepsco.com
nk10.belowto.com
nk20.belowto.com
node.mofaess.com
nodns2.qipian.org
nokia1umia.com
ns.glbaitech.com
ns1.belowto.com
ns1.pickcars.net
ns1.tlchs2.ml
ns2.belowto.com
ns21.belowto.com
ns22.belowto.com
ns4.belowto.com
ns5.belowto.com
nxmnv.site
oipbl.com
oldbmwy.com
oms.sindeali.com
oop.jumpingcrab.com
openmofa.8866.org
opsonew3org.sg
os.microsoft-support.net
osaka-jpgo.com
osce-press.org
outlook.sindeali.com
p6p6.net
paramerat.com
pcmsar.net
pic.nicklockluckydog.org
points.mofaess.com
polopurple.com
pool.minexmr.com
pop.architectisusa.com
pop.loveddos.com
portal.mrface.com
poulsenv.com
premium.redforlinux.com
procore.orderlunchesatwork.com
products.almostmy.com
products.serveuser.com
prrmes4019.r3u8.com
q6.niushenghuo.info
qtds1979.3322.org
qtds1979.gicp.net
quick.oldbmwy.com
rain.orctldl.windowsupdate.authorizeddns.us
rdns-4.infoproduto1.tk
record.hostport9.net
record.webssl9.info
registration2.instanthq.com
report.perrydale.com
reports.tomorrowforgood.com
rg197.win
rlbeiydn.hi.r3u8.com
rpt.perrydale.com
rtg.jrwr.space
saiyo.exprenum.com
sappore.cloud-maste.com
sapporo.cloud-maste.com
sapporot.com
sat.suayay.com
sb.iffymonkey.com
sbuudd.webssl9.info
sc.weboot.info
scholz-versand.com
scorpion.poulsenv.com
scrlk.exprenum.com
secmicrosooo.6600.org
secnetshit.com
secure.orderlunchesatwork.com
secure2.sophosrv.com
sell.mofaess.com
sema.linuxsofta.com
sendmsg.jumpingcrab.com
server1.micoosofts.com
severeweatheralerts02.severeweatheralerts.net
severeweatheralerts02.severeweatheralerts00.severeweatheralerts.net
seyesb.acmetoy.com
sg.minexmr.com
sh.chromeenter.com
shoppingcentre.station155.com
shrimp.usffunicef.com
shugiin.jkub.com
signup.l3p95.net
sindeali.com
singed.otzo.com
siteinit.info
sky.oldbmwy.com
skypecommunications.net
sma.jimindaddy.com
smartmediaconverter02.smartmediaconverter00.smartmediaconverter.com
smo.gadskysun.com
smtp.architectisusa.com
smtp.macforlinux.net
smtp2.theyardservice.com
smtp230.toldweb.com
snn1.mhysl.org
snn2.mhysl.org
snn3.mhysl.org
softupdates.info
sstday.jkub.com
st.kinopoisksu.com
start.usrobothome.com
static.mhysl.org
stockmarketon.com
stone.jumpincrab.com
stone.jumpingcrab.com
stonecrestnews.com
store.outlook-microsoft.net
style.u-tokyo-ac-jp.com
support.f--secure.com
support1.mrface.com
sz.thedomais.info
tacomanewspaper.com
teachingdrive.com
techiefly.com
tendonsof.com
test.usyahooapis.com
thinkofnews.com
tokyo-gojp.com
tor-projects.org
toya.7766.org
transferwiser.io
travel.tripmans.com
trendignews.com
trout.belowto.com
tstartel.org
tv.goldtoyota.com
twnic.ignorelist.com
u1.haoyujd.info
ui.hdcdui.com
ukuoka.cloud-maste.com
un.ddns.info
unspa.hostport9.net
upd488.windowservicecemter.com
update.arkouowi.com
update.dnsqaz.com
update.kaspernsky.com
update.micrdsoft.com
update.nfkllyuisyahooapis.com
updates.itsaol.com
updateservicecenter.com
ups.improvejpese.com
urearapetsu.com
us-west.minexmr.com
usa.itsaol.com
usa.japanteam.org
usbage.gicp.net
ut-portal-u-tokyo-ac-jp.tyoto-go-jp.com
uu.logon-live.com
uu.niushenghuo.info
ux.niushenghuo.info
v4.windowsupdate.dedgesuite.net
v4.windowsupdate.nsatcdns.com
veryhuai.info
video.today-nytimes.com
vscue.com
wbmail.city-library.com
wchildress.com
wdsupdates.com
web.dpp.rrims.org
web.paramerat.com
webjz.9966.org
webmail.tstartel.org
websqlnewsmanager.ninth.biz
webwxjz.3322.org
well.mrbasic.com
whale.toshste.com
whois.nictr.info
whyis.haoyujd.info
windowcsupdates.com
windowfile.itemdb.com
windowservicecentar.com
windowsimages.itemdb.com
windowsstores.gettrials.com
windowsupdate.2waky.com
windowsupdate.acmetoy.com
windowsupdate.authorizeddns.us
windowsupdate.dedgesuite.net
windowsupdate.ezua.com
windowsupdate.itsaol.com
windowsupdate.nsatcdns.com
windowsupdate.wcwname.com
windowsupdate.x24hr.com
windowsupdates.dnset.com
windowsupdates.ikwb.com
windowsupdates.proxydns.com
winserverupdates.com
woyaofanwen.com
www-meti-go-jp.tyoto-go-jp.com
xc.chromeenter.com
xmr.f2pool.com
xread10821.9966.org
xsince.tk
xyrn998754.2288.org
yacooll.com
yah000rg.com
yahoo.incloud-go.com
yahooip.net
yahoorigist.com
yallago.cu.cc
yeahyeahyeahs.3322.org
yeap1.jumpingcrab.com
yugoogless.3322.org
yz.chromeenter.com
zabbix.servercontrols.pw
zafronecromien.com
zccw.cc
zebra.incloud-go.com
zebra.usffunicef.com
zhousafe.com