# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: http://www.symantec.com/security_response/writeup.jsp?docid=2010-011922-2056-99&tabid=2

rmnzerobased.com
awecerybtuitbyatr.com
awrcaverybrstuktdybstr.com
qwevrbyitntbyjdtyhvsdtrhr.com
yeiolertxwerh.com
ytioghfdghvcfgbgvdf.com

# Reference: https://web.archive.org/web/20120106212034/http://amada.abuse.ch/blocklist.php?download=domainblocklist

awecerybtuitbyatr.com
fget-career.com
nagwa.mooo.com
poopthree.com
zahlung.name

# Reference: https://research.checkpoint.com/ramnits-network-proxy-servers/

k0ntuero.com
oaifpapl.com
vupkimcu.com
nkootxbt.com
ramilhgme.com
havonolwc.com
anulwyqw.com
mtankfqv.com

# Reference: https://www.proofpoint.com/us/threat-insight/post/sload-and-ramnit-pairing-sustained-campaigns-against-uk-and-italy

xohrikvjhiu.eu

# Reference: https://www.virustotal.com/#/file/66699ca374cf3e41ed56559ca5849b432733f6698af0d7ca069c50716b8c014a/behavior

stromoliks.com
promoliks.com
pornoliks.com

# Reference: https://totalhash.cymru.com/analysis/?ad13a92a6b2d5dc85276d86c9536767386dba37e

abbyycommunity.com

# Reference: https://twitter.com/VK_Intel/status/1092554468497989632

newrendomainnext.com

# Reference: https://twitter.com/VK_Intel/status/1045340516559278081

net-info.info

# Reference: https://twitter.com/pollo290987/status/1110189491728334849

supnewdmn.com

# Reference: https://twitter.com/VK_Intel/status/1115533117467627520
# Reference: https://github.com/k-vitali/ramnit-re/blob/master/2019-04-09-ramnit_client_botnet_dga.txt

firstcrypttestingfree.com
awxmyvbdep.com
yinhbygrm.com
rfoghyrpkljtmaf.com
bwwtnkysunpa.com
aqwmiphorpa.com
udmyjkkbye.com
jqqfiiuajow.com
bfopeafbutexacmdk.com
sucxshtffgitu.com
suadurtto.com
aidylvvhmwpnip.com
glwkxqjjutyccmax.com
fduaxbnjgntk.com
ciytmtvarkucn.com
xjchwlvxhakebv.com
enovvejrmghen.com
pilwocpaj.com
evqtjqbkpffhhnyp.com
gsciljwcjwwtnvjflh.com
nylpscgnkglaosv.com
kugmjxfea.com
xfbgthmvyvw.com
nmwprnfbryifxebapxf.com
sxvhjgui.com
byschplxmorfeee.com
xshwkvppmwtsbld.com
fvhqcwetlpnpm.com
hqsdywcg.com
quvnfxgmwe.com
kgpigdehnulwyvdoxpt.com
jfnwxxircwx.com
muahfvjsvr.com
dgooodsqe.com
vxvxwwiefignkacrvq.com
hvyxqwda.com
estxikwflqyiuwu.com
lwnlwalvrwt.com
cehfkwweq.com
edvdnudrmiuansfht.com
jhfqsdntkbvpe.com
qxssoxhj.com
hafjuglmoqyjnvdcd.com
ixgwkuqtydvmeiuo.com
oibwiqayyy.com
nhrnuqncnlvmlmc.com
lbqgkgutngeks.com
kcjudtmwvdbel.com
dbooojfb.com
ixvrjrgyqmgeaxgxl.com
ugwbusodliwg.com
