# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.proofpoint.com/us/threat-insight/post/new-whiteshadow-downloader-uses-microsoft-sql-retrieve-malware
# Reference: https://otx.alienvault.com/pulse/5d8d2b97a81bf6b66dae5541

5214zz.com
antinio.mssql.somee.com
bilbord.site
bytesdata.mssql.somee.com
fabancho.mssql.somee.com
halwachi50.mymediapc.net
jasoncarlosscot.dynu.net
mundial2018.duckdns.org
naddyto.warzonedns.com
robinmmadi.servehumour.com
scaker.com
tslserv.duckdns.org
wortexpharma.com
