https://raw.githubusercontent.com/Neo23x0/signature-base/master/iocs/c2-iocs.txt
Domains that did not resolve;
002562066559681.r3u8.com
031168053846049.r3u8.com
1.gadskysun.com
19518473326.r3u8.com
1960445709311199.r3u8.com
2014.zzux.com
202017845.r3u8.com
2139465544784.r3u8.com
2789203959848958.r3u8.com
3q.wubangta.info
3q.wubangtu.info
5590428449750026.r3u8.com
5q.niushenghuo.info
74d6b7b2.app.giftbox4u.com
9gowg.tech
a.wubangtu.info
a1.suibian2010.info
acc.lehigtapp.com
afc.https443.org
anvprn.com
anycal1.com
apec.qtsofta.com
api.microsofed.com
api.officeonlinetool.com
app.lehigtapp.com
apple.cmdnetview.com
apple.defensewar.org
apple.ikwb.com
appleimages.longmusic.com
appleimages.organiccrap.com
applemirror.organiccrap.com
applemusic.itemdb.com
applemusic.wikaba.com
applemusic.zzux.com
apples.sytes.net
appleupdate.itemdb.com
appleupdateurl.2waky.com
architectisusa.com
army.xxuz.com
art.p6p6.net
asq.swhw71un.pw
availab.wikaba.com
azecofarm.az
b.support.outlook-microsoft.net
baby.macforlinux.net
baby.myie12.com
baby.usmirocomney.net
back.jungleheart.com
bak.ignorelist.com
balance1.wikaba.com
banana.cmdnetview.com
bk56.twilightparadox.com
blog.defensewar.org
bqcpu.com
bridgeluxlightmadness.com
businesssalaries.com
ca.minexmr.com
cao.p6p6.net
cata.qtsofta.com
cbdnewsandreviews.net
cbppnews.com
cdn.incloud-go.com
cdn.theyardservice.com
cdnverify.net
cgei493860.r3u8.com
chibashiri.com
cia.ezua.com
cia.toh.info
ciaoci.chickenkiller.com
civilwar123.authorizeddns.org
civilwar520.onmypc.org
ckusshani.com
cloudns.8800.org
club.personanddog.info
cnnews.mylflv.com
cnnews.mylftv.com
companieshousesearch.com
content.pcmsar.net
contractus.qpoe.com
contractus.zzux.com
coreck.suayay.com
cpu.4pu.com
cross-checking.com
daddy.gostudyantivirus.com
dataplane.theyardservice.com
dcc.jimingroup.com
de.minexmr.com
de.onmypc.info
dear.loveddos.com
dedydns.ns01.us
desktopweatheralerts02.desktopweatheralerts00.desktopweatheralerts.com
dev.kinopoisksu.com
dick.ccfchrist.com
dll.freshdns.org
dlmix.ourdvs.com
dns.snakesearch.info
dns.undpus.com
dnspoddwg.authorizeddns.org
docs.microsoft-support.net
document.methoder.com
download.windowsupdate.dedgesuite.net
drives.methoder.com
drivres-update.info
duosay.com
dutchbros.apps.playnetwork.com
dyncojinf.6600.org
dynsbluecheck.7766.org
echange-afrique-insa.fr
edgar.ccfchrist.com
eric-averyanov.wha.la
essashi.com
eu.acmetoy.com
eu.wha.la
ewe.toshste.com
f068v.site
fabian.ccfchrist.com
fcztqbg.zj.r3u8.com
file.zzux.com
files.architectisusa.com
fish.toh.info
fjs.wikaba.com
flowershop22.110mb.com
follow.wha.la
fr.minexmr.com
fr.wikaba.com
friendlysupport.giize.com
ftp.architectisusa.com
ftp.cvnx.zyns.com
ftp.eric-averyanov.wha.la
ftp.eu.wha.la
ftp.goldtoyota.com
fu.chromeenter.com
fuck.ikwb.com
g3ypf.online
gavin.ccfchrist.com
geetkculture.net
giftbox4u.com
globalnews.wikaba.com
go-gga.com
gold.polopurple.com
goldtoyota.com
google.macforlinux.net
google.usrobothome.com
googlegemail.com
gotourisma.com
gtsofta.com
hamiltion.catholicmmb.com
hanproud.com
happy.workerisgood.com
helpus.ddns.info
hg8fmv.racing
hk-china.485445bd7ac73d726fd60eef9f7f1044.pw
hk-china.d8a4d1bc0af4b49721b10b7a6cb6bb29.pw
hk.cmdnetview.com
hk.loveddos.com
hkhzhz.com
holdmem.dbhubspi.com
hotma11.net
hotmai.info
ibmmsg.strangled.net
icfeds.cf
idpmus.hostport9.net
ie.update-windows-microsoft.com
ijica.in
images.tokyo-gojp.com
imap.architectisusa.com
img.station155.com
inbox.webmailgoogle.com
incloud-go.com
incloud-obert.com
ingemar.catholicmmb.com
innocent-isayev.sexidude.com
inspgon.re26.com
intelnetservice.com
intelsupport.net
iphone.vizvaz.com
itunesdownload.jkub.com
itunesdownload.vizvaz.com
itunesdownload.wikaba.com
itunesimages.itemdb.com
itunesimages.itsaol.com
itunesimages.qpoe.com
itunesmirror.fartit.com
itunesmirror.itsaol.com
itunesmusic.ikwb.com
itunesmusic.jetos.com
itunesmusic.jkub.com
itunesupdate.itsaol.com
itunesupdates.organiccrap.com
ixrayeye.com
jap.japanmusicinfo.com
japan.fuckanti.com
japan.linuxforover.com
japan.loveddos.com
japanfst.japanteam.org
japanteam.org
jepsen.r3u8.com
jica-go-jp.bike
jimin.mymom.info
jimintokoy.com
jmuroran.com
jp.rakutenmusic.com
jp.serveuser.com
jp.virhub.biz
jxsuyuisyahooapis.com
kaka.lehigtapp.com
kbjr.zvgkbjj.com
key.zzux.com
kmd.crabdance.com
ktgmktanxgvn.r3u8.com
last.p6p6.net
latestnews.organiccrap.com
leedong.longmusic.com
leimeng.com.tw
lianhuaxinwen.com
library.cpgcorp.org
logon.had-one-job.com
lzf550.r3u8.com
mac.goldtoyota.com
mac.methoder.com
macfee.mrface.com
macforlinux.net
mail.architectisusa.com
mail.cbppnews.com
mail.macforlinux.net
mailcarriage.co.uk
mailj.hostport9.net
mailowl.jkub.com
mailserever.com
mailvserver.com
malware.dsmtp.com
manager.architectisusa.com
mbaby.macforlinux.net
mcafeea.cf
me.scieron.com
meltegorniesto.com
message.p6p6.net
mf.ddns.info
micoosofts.com
microdef.2288.org
microhotmail.com
microsofed.com
microsoftimages.organiccrap.com
microsoftmirror.mrbasic.com
microsoftmusic.itemdb.com
microsoftmusic.mrbasic.com
microsoftstores.itemdb.com
microsoftupdate.mrbasic.com
microsoftupdates.vizvaz.com
mmy.ddns.us
mocha.100fanwen.com
mod.jetos.com
mofa.dynamic-dns.net
mofa.ns01.info
mofa.strangled.net
ms.ecc.u-tokyo-ac-jp.com
mseupdate.ourhobby.com
msg.ezua.com
msn.incloud-go.com
mtonline0416.dyndns.org
musicfile.ikwb.com
mx.yetrula.eu
myhomemusic.com
mynutrition2go.orderlunchesatwork.com
myphpwebsite.itsaol.com
myurinikoreaaps.ninth.biz
na.americanunfinished.com
na.onmypc.org
nasa.xxuz.com
newminigolf.com
news.100fanwen.com
news.japanteam.org
news.turkceil.tk
news.voanews.hk
newsdata.jkub.com
newsplacec.com
no.authorizeddns.org
node.mofaess.com
nodns2.qipian.org
nokia1umia.com
ns1.pickcars.net
ns1.tlchs2.ml
nunluck.re26.com
oipbl.com
oldbmwy.com
oop.jumpingcrab.com
opsonew3org.sg
oracleupdate.dns04.com
os.microsoft-support.net
osaka-jpgo.com
osce-press.org
p6p6.net
paramerat.com
pcmsar.net
pic.nicklockluckydog.org
points.mofaess.com
polopurple.com
pool.minexmr.com
pop.architectisusa.com
pop.loveddos.com
portal.mrface.com
praskovya-matveyeva.mefound.com
praskovya-ulyanova.dumb1.com
procore.orderlunchesatwork.com
products.almostmy.com
products.cleansite.us
products.serveuser.com
prrmes4019.r3u8.com
q6.niushenghuo.info
qtds1979.3322.org
qtds1979.gicp.net
quick.oldbmwy.com
rdns-4.infoproduto1.tk
recent.dns-stuff.com
record.hostport9.net
referred.gr8domain.biz
registration2.instanthq.com
report.perrydale.com
rg197.win
rlbeiydn.hi.r3u8.com
rpt.perrydale.com
rtg.jrwr.space
sapporot.com
sat.suayay.com
saverd.re26.com
sb.iffymonkey.com
sc.weboot.info
scholz-versand.com
sdmsg.onmypc.org
secnetshit.com
secure.orderlunchesatwork.com
secure2.sophosrv.com
sell.mofaess.com
sema.linuxsofta.com
sendmsg.jumpingcrab.com
senseye.ikwb.com
seraphim-yurieva.justdied.com
serv.justdied.com
server1.micoosofts.com
severeweatheralerts02.severeweatheralerts.net
severeweatheralerts02.severeweatheralerts00.severeweatheralerts.net
seyesb.acmetoy.com
sg.minexmr.com
sh.chromeenter.com
shoppingcentre.station155.com
shrimp.bdoncloud.com
shrimp.usffunicef.com
shugiin.jkub.com
signup.l3p95.net
singed.otzo.com
siteinit.info
sky.oldbmwy.com
skypecommunications.net
smartmediaconverter02.smartmediaconverter00.smartmediaconverter.com
smo.gadskysun.com
smtp.architectisusa.com
smtp.macforlinux.net
smtp2.theyardservice.com
smtp230.toldweb.com
softupdates.info
somthing.re26.com
sstday.jkub.com
st.kinopoisksu.com
start.usrobothome.com
static.theyardservice.com
stockmarketon.com
stone.jumpincrab.com
stone.jumpingcrab.com
store.outlook-microsoft.net
style.u-tokyo-ac-jp.com
support.f--secure.com
support1.mrface.com
supportus.mefound.com
svc.dynssl.com
synssl.dnset.com
tacomanewspaper.com
techiefly.com
tendonsof.com
test.usyahooapis.com
theyardservice.com
tokyo-gojp.com
tor-projects.org
toya.7766.org
transferwiser.io
travel.tripmans.com
trendignews.com
tv.goldtoyota.com
twnic.ignorelist.com
u1.haoyujd.info
un.ddns.info
un.dnsrd.com
unspa.hostport9.net
update.micrdsoft.com
update.nfkllyuisyahooapis.com
updates.itsaol.com
ups.improvejpese.com
us-west.minexmr.com
usa.itsaol.com
usa.japanteam.org
usbage.gicp.net
uu.logon-live.com
uu.niushenghuo.info
ux.niushenghuo.info
v4.windowsupdate.dedgesuite.net
veryhuai.info
video.today-nytimes.com
vscue.com
wdsupdates.com
web.dpp.rrims.org
web.paramerat.com
webjz.9966.org
websqlnewsmanager.ninth.biz
webwxjz.3322.org
well.mrbasic.com
whale.toshste.com
whois.nictr.info
whyis.haoyujd.info
windowfile.itemdb.com
windowsimages.itemdb.com
windowsstores.gettrials.com
windowsupdate.2waky.com
windowsupdate.acmetoy.com
windowsupdate.authorizeddns.org
windowsupdate.com.mwcname.com
windowsupdate.dedgesuite.net
windowsupdate.ezua.com
windowsupdate.gettrials.com
windowsupdate.itsaol.com
windowsupdate.wcwname.com
windowsupdate.x24hr.com
windowsupdates.dnset.com
windowsupdates.ikwb.com
windowsupdates.proxydns.com
worldhomeoutlet.com
woyaofanwen.com
xc.chromeenter.com
xmr.f2pool.com
xread10821.9966.org
xsince.tk
xyrn998754.2288.org
yacooll.com
yah000rg.com
yahoo.incloud-go.com
yahooadmin.net
yahooip.net
yahoorigist.com
yallago.cu.cc
yeap1.jumpingcrab.com
yz.chromeenter.com
zabbix.servercontrols.pw
zebra.bdoncloud.com
zebra.incloud-go.com
zebra.usffunicef.com