{"iocs": [{"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.238.186.0/24"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "hicam.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-painter.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "njalla.no"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "bitdomain.biz"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "topdns.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "ititch.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "realhosters.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "orangewebsite.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "porkbun.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "qhoster.net"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "easydns.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "site-dns.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "serverastra.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "cloudns.net"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "dnspod.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "smoothdns.com"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.100.84.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "141.136.44.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.141.63.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.165.169.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.82.126.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.86.149.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.86.150.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.214.30.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.235.207.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.84.100.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "23.163.0.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.86.148.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "23.227.192.0/20"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "209.205.192.0/19"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "23.247.50.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.158.196.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.48.100.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.19.136.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.28.200.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.39.217.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "76.74.176.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "66.36.240.0/20"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "78.142.19.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "79.124.49.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "80.255.0.0/20"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "80.83.112.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "81.17.16.0/20"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "82.118.242.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.80.148.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.219.236.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "95.215.47.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.203.117.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.144.156.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.203.118.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.205.210.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.227.110.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.203.119.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.213.160.0/20"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.37.212.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.113.34.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.219.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "64.251.26.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.149.252.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "79.141.174.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.217.171.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.92.128.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "92.119.115.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "94.156.35.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "94.156.189.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.216.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.216.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.218.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.217.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.220.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.221.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.222.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "84.38.130.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "84.38.132.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.183.223.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "84.38.134.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "84.38.135.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "109.248.147.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "109.248.148.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "109.248.149.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "152.89.161.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.144.82.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.206.224.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.216.35.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.243.215.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.181.102.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.37.255.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "195.12.50.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.149.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.105.9.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.238.128.0/18"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "93.177.75.0/24"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsapi.info"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "hostinger.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "001www.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "2mydns.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "16-b.it"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "2waky.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "3-a.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "3d-game.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "32-b.it"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "3utilities.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "25u.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "4irc.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "4pu.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "4dq.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "64-b.it"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "almostmy.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "acmetoy.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "americanunfinished.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "as19557.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "at-band-camp.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ath.cx"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "authorizeddns.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "authorizeddns.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "authorizeddns.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "b0ne.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "b0tnet.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "barrel-of-knowledge.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "barrell-of-knowledge.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "bbsindex.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "better-than.tv"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "bigmoney.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "blogdns.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "blogdns.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "blogdns.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "bounceme.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "brasilia.me"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "blogsite.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "boldlygoingnowhere.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "blogsyte.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "broke-it.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "cechire.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "buyshouses.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "cable-modem.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "changeip.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "changeip.co"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "changeip.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "changeip.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "changeip.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "chatnook.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "cleansite.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "cleansite.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ciscofreak.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "collegefan.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "cleansite.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "couchpotatofries.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "crafting.xyz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "damnserver.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "darktech.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddns.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddns.me"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddns.mobi"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddns.ms"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddns.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddns.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddnsking.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ddnslive.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "deaftone.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dhcp.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ditchyourip.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dns-dns.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dns-report.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dns-stuff.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dns04.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dns05.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dns1.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dns2.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsalias.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsalias.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsalias.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsdojo.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsdojo.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsdojo.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsfailover.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsdyn.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsfor.me"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsiskinky.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsking.ch"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnset.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsrd.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dnsup.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "does-it.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "doesntexist.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "doesntexist.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dontexist.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dontexist.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "doomdns.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dontexist.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "doomdns.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dsmtp.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dsmtp.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dubya.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dtdns.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dubya.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dubya.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dumb1.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dubya.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dvrcam.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dvrdns.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyn-o-saur.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynalias.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynalias.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynalias.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynamicdns.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynathome.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-at-home.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-at-work.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-free.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-blog.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-home.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-ip.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-pics.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-office.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-web.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-mail.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-wiki.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-work.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-remote.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns-server.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns.tv"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynns.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynserv.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynssl.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "eating-organic.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynip.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "edns.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "effers.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dyndns.ws"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "endofinternet.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "endofinternet.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "endoftheinternet.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "est-a-la-maison.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "esmtp.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "est-a-la-masion.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "est-mon-blogueur.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "est-le-patron.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "etowns.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "etowns.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ezua.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "fantasyleague.cc"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "for-better.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "fartit.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "for-more.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "for-some.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "for-the.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "for-our.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "faqserv.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "forgot.her.name"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "flnet.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "forumz.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "forgot.his.name"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "freeddns.uk"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "freeddns.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "freeddns.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "freewww.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "freewww.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "freetcp.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ak.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-al.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ar.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ca.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-az.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-co.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-dc.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-de.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ct.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-fl.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ga.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-hi.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ia.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-il.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-id.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-in.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ks.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ky.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-la.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-mn.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ma.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-md.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-mo.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-mt.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-me.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ms.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-nc.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-mi.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-nd.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ne.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-nh.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-nj.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-nm.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-nv.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ny.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ok.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-pa.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-pr.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-or.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ri.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-oh.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-sd.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-sc.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-tn.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-ut.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-va.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-tx.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-vt.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-wa.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-wi.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-wv.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "from-wy.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ftpserver.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ftp1.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "fuettertdasnetz.de"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "game-host.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ftpaccess.cc"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "game-server.cc"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "geekgalaxy.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "getmyip.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "gets-it.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "gettrials.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "go.dyndns.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "gotdns.ch"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "got-game.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "gotgeeks.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "gr8name.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "gotdns.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "gr8domain.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "gotdns.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "groks-the.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "groks-this.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ham-radio-op.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "golffan.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "health-carereform.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "here-for-more.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "hobby-site.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "hobby-site.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homedns.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homeftp.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homeftp.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homeip.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homelinux.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homelinux.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "home.dyndns.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homelinux.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homesecuritymac.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homesecuritypc.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homeunix.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homeunix.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homingbeacon.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homeunix.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "hopto.me"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "hopto.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "https443.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "https443.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "iamallama.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ikwb.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "in-the-band.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "instanthq.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "iownyour.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ilovecollege.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "iownyour.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-anarchist.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-blogger.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-bookkeeper.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-bruinsfan.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-candidate.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-bulls-fan.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-celticsfan.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-caterer.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-chef.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-chef.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-conservative.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-cpa.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-chef.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-cubicle-slave.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-designer.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-democrat.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-doctor.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-geek.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-financialadvisor.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-green.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-geek.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-guru.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-hard-worker.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-geek.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-hunter.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-knight.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-landscaper.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-liberal.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-linux-user.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-lawyer.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-llama.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-libertarian.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-musician.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-nascarfan.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-nurse.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-patsfan.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-personaltrainer.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-player.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-photographer.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-socialist.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-soxfan.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-republican.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-student.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-teacher.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-techie.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-therapist.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-a-rockstar.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-an-accountant.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-an-actor.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-an-actress.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-an-anarchist.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-an-artist.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-an-engineer.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-an-entertainer.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-by.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-certified.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-found.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-gone.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-into-anime.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-into-cartoons.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-into-cars.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-into-games.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-leet.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-lost.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-not-certified.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-saved.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-slick.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-uberleet.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-very-bad.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-very-good.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-very-sweet.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-very-evil.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "isa-geek.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "isa-geek.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "isa-hockeynut.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "isa-geek.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-very-nice.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "is-with-theband.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "isasecret.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "isteingeek.de"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "issmarterthanyou.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "istmein.de"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "itemdb.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "itsaol.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "jetos.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "jungleheart.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "justdied.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "jkub.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "kicks-ass.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "kicks-ass.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "knowsitall.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "land-4-sale.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "lebtimnetz.de"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "leitungsen.de"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.64.104.0/22"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "lflinkup.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "likes-pie.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "likescandy.com"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "213.252.244.0/22"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "lflinkup.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "lflink.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "loginto.me"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "longmusic.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mefound.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "merseine.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "merseine.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "lflinkup.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "misconfused.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "misecure.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mine.nu"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mlbfan.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mmafan.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "moneyhome.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mrbasic.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mrbonus.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mrslove.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mrface.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mydad.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "my03.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "myactivedirectory.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "myddns.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mydissent.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "myftp.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "myeffect.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "myftp.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "myftp.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "myiphost.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mylftv.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mymediapc.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mymom.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mynetav.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mynetav.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mynetav.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mynumber.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mypets.ws"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "myphotos.cc"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mypi.co"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mypop3.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mypop3.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mypicture.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mypsx.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mysecondarydns.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mysecuritycamera.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mysecuritycamera.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "myvnc.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "myz.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mywww.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "neat-url.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mysecuritycamera.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "nflfan.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "nhlfan.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ninth.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "no-ip.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "no-ip.ca"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "no-ip.co.uk"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "net-freaks.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "no-ip.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "no-ip.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "no-ip.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "noip.me"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "n4t.co"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "noip.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "now-dns.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "nowddns.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns01.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns01.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns01.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "now-dns.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns02.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns02.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "now-dns.top"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns02.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns1.name"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns2.name"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ns3.name"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ocry.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "onedumb.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "onmypc.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ntdll.top"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "onmypc.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "office-on-the.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "onmypc.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "onmypc.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "onmypc.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "on-the-web.tv"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "onthewifi.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "otzo.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "organiccrap.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ownip.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ourhobby.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "pgafan.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "podzone.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "point2this.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "pointto.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "podzone.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "port25.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "privatizehealthinsurance.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "proxydns.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "quicksytes.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "qhigh.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "readmyblog.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "rebatesrule.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "remotecam.nu"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "redirectme.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "read-books.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "saves-the-whales.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "scieron.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "scrapper-site.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "qpoe.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "scrapping.cc"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "securitytactics.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "selfip.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "selfip.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "selfip.com"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".site"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "selfip.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "sells-for-less.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "selfip.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "sells-it.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "sellsyourhome.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "sells-for-u.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "sendsmtp.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servebbs.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servebbs.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servebbs.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveblog.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servebeer.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servecounterstrike.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveftp.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveexchange.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveftp.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveftp.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servegame.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servegame.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servehalflife.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servehttp.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servehumour.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveirc.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servemp3.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servepics.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servesarcasm.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveuser.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servep2p.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveusers.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "sexidude.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "serveminecraft.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "sexxxy.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "shacknet.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "servequake.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "shaqnet.nu"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "soundcast.me"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "sixth.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "slyip.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "slyip.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "space-to-rent.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "shacknet.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "squirly.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ssmailer.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ssl443.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "simple-url.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "stuff-4-sale.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "stufftoread.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "sytes.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "tftpd.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "suroot.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "tcp4.me"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "thruhere.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "stuff-4-sale.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "toh.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "toshibanetcam.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "toythieves.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "trickip.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "traeumtgerade.de"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "teaches-yoga.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "trickip.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ufcfan.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "webhop.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "unusualperson.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "webhop.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "vpndns.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "webhop.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "webhop.me"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "webhop.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "wikaba.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "wifizone.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "vizvaz.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "workisboring.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "worse-than.tv"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "writesthisblog.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "x24hr.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "www1.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "x443.pw"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "wwwhost.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "xxxy.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "xxuz.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "xxxy.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ygto.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "yourtrap.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "youdontcare.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "zyns.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "zapto.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "wwwhost.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "zzux.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "openprovider.nl"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.132.194.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.206.160.0/20"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.206.164.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.206.160.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.206.168.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.206.172.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.206.240.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.119.160.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.119.168.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.119.171.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.119.170.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.119.174.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.119.175.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.216.163.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.25.48.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.177.150.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.32.223.0/24"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mooo.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "uk.to"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ignorelist.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "strangled.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "us.to"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "chickenkiller.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "crabdance.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "jumpingcrab.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "privatedns.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "twilightparadox.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "my.to"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "yao.cl"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ftp.sh"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "now.im"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mine.bz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "undo.it"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "bot.nu"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "minecraftnoob.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "info.gf"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "allowed.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "dynet.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ro.lt"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "3dxtras.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "home.kg"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "69.mu"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "minecraftr.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "fr.to"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "root.sx"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "farted.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "spacetechnology.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "nav.co.id"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "port0.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "1337.cx"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "gw.lt"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "serverpit.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mooo.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "happyforever.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "nx.tc"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "epicgamer.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "evils.in"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "h4ck.me"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "soon.it"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "verymad.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "csproject.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "404.mn"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "punked.us"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "tru.io"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "zanity.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mm.my"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "120v.ac"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "madhacker.biz"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "d-n-s.name"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "r-o-o-t.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "star.is"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homelinuxserver.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "24-7.ro"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "ohbah.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "fedea.com.ar"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "h-o-s-t.name"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "kir22.ru"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "psybnc.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "abuser.eu"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "routemehome.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "bad.mn"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "hackquest.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "iiiii.info"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "raspberryip.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "fairuse.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "cloudwatch.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "photo-frame.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "hs.vc"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "hpc.tw"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "nard.ca"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "agropeople.ru"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "uk.ms"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "crackedsidewalks.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "pii.at"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mindhackers.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "stfu-kthx.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "host2go.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "awiki.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "surfnet.ca"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "mcsoft.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "xpresit.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "silksky.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "hbmc.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "netlord.de"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "688.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "homeplex.org"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "good.one.pl"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "linkpc.net"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "sellclassics.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "publicvm.com"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".club"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".xyz"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".win"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".online"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".news"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".top"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".tech"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".buzz"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".ms"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".best"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".faith"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".download"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".cloud"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".today"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".tk"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".ml"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".ga"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".gq"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".cf"}, {"type": "snort", "tag": "spyware", "tlp": "white", "value": "alert tcp $EXTERNAL_NET any -> $HOME_NET any (content:\"|00 00 00 20 61 6e 64 72 6f 69 64 70 61 79 6c 6f 61 64 2e 73 74 61 67 65  2e 4d 65 74 65 72 70 72 65 74 65|\"; offset:0; msg:\"Android Meterpreter stager\"; sid:1000001; rev:001;)"}, {"type": "snort", "tag": "cybercrime", "tlp": "white", "value": "alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:\"Cryptominer (Stratum job) - Rule from the CERT-EU\"; flow:established,to_client; content:\"|22|job|22 3A 7B 22|blob|22 3A 22|\"; classtype:trojan-activity; sid:1000002; rev:1;)"}, {"type": "snort", "tag": "cybercrime", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:\"Cryptominer (Stratum job result) - Rule from the CERT-EU\"; flow:established,to_server; content:\"|22|method|22 3A| |22|submit|22 2C| |22|params|22 3A| |7B 22|id|22|\"; classtype:trojan-activity; sid:1000003; rev:1;)"}, {"type": "snort", "tag": "cybercrime", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:\"Cryptominer (Stratum login) - Rule from the CERT-EU\"; flow:established,to_server; content:\"|22|method|22 3A| |22|login|22 2C| |22|params|22 3A| |7B 22|login|22|\"; classtype:trojan-activity; sid:1000004; rev:1;)"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "146.185.253.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.161.208.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.162.235.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.202.0.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.119.113.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.20.186.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.8.176.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.111.152.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.20.184.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.236.76.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.253.219.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.36.188.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.38.55.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "212.80.216.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.1.200.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.1.216.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.252.14.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.67.231.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.67.228.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.249.32.0/19"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.249.59.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.178.64.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.255.64.0/19"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.255.94.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.45.64.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.45.72.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.45.76.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.61.48.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.56.133.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.61.56.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.239.35.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "85.239.42.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "87.236.212.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.218.16.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "88.218.17.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.221.69.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "93.158.200.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "93.158.200.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "93.158.208.0/20"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "104.250.174.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "104.250.190.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "158.255.208.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "152.89.160.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "158.255.215.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "172.111.147.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "109.70.236.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "172.111.250.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "172.94.53.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "172.94.87.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.104.185.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.120.144.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.128.24.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.128.27.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.156.173.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.156.172.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.156.174.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.156.175.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.158.248.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.158.250.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.160.24.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.172.112.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.189.112.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.189.114.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.195.200.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.200.116.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.206.225.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.206.227.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.210.217.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.210.219.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.212.170.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.230.124.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.236.201.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.236.202.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.236.203.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.242.4.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.242.6.0/24"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "spdns.org"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.244.212.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.106.120.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.244.213.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.245.84.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.117.72.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.106.122.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.117.74.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.117.75.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.117.73.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.141.24.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.141.25.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.245.85.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.90.60.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.141.26.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.141.27.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.94.188.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.94.189.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.94.192.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.72.103.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.183.96.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.94.193.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.183.97.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.72.115.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "192.121.82.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "192.145.125.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.148.16.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.148.18.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.183.217.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.183.98.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.198.56.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.183.99.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.239.84.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.239.85.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.27.14.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.9.114.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.9.115.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.124.34.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.198.57.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.156.231.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.156.228.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.187.249.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.198.58.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.198.59.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.244.149.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.244.150.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.187.251.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.59.249.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.244.151.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.45.192.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.68.26.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.45.193.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.82.200.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.82.202.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.68.27.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.68.44.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.99.105.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "195.206.106.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "195.206.105.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.138.196.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.82.203.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.138.199.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.116.36.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.138.200.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.36.189.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.36.188.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.138.205.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.151.96.0/20"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.36.190.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.64.113.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.64.114.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.10.71.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.36.191.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "212.8.251.0/24"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "openprovider.be"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "217.64.127.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.129.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.140.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.145.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.146.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.153.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.193.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.198.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.203.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.205.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.120.217.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.221.113.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.221.114.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.221.115.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "38.132.111.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "38.132.126.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "38.132.99.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "38.95.111.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.11.0.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.11.180.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.11.2.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.12.221.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.12.222.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.133.180.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.141.152.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.66.134.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.67.53.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.74.36.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.74.62.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.88.42.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.89.175.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.9.250.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.93.216.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "45.90.142.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.102.153.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.243.147.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.243.149.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.183.100.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "46.243.223.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.61.60.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.253.205.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "77.81.109.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "77.81.98.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "77.81.110.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "79.110.52.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "81.90.189.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "82.102.16.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "81.92.200.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "82.102.17.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "82.102.19.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "82.102.23.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "83.97.20.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "84.247.51.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.106.20.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.249.65.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.249.66.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.33.246.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.38.225.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.41.26.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.44.9.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.45.4.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.46.100.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.102.64.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.132.136.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.132.138.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.132.139.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "91.207.174.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "92.118.45.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "92.119.178.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "93.119.178.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "94.198.40.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "95.174.65.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "95.174.66.0/24"}, {"type": "snort", "tag": "suspect", "tlp": "white", "value": "alert tcp any any -> $EXTERNAL_NET [20,21,990,989] (msg:\"Your device is communicating with FTP(s) ports\"; sid:1000005; rev:001;)"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".icu"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".cab"}, {"type": "domain", "tag": "cybercrime", "tlp": "white", "value": "hawkshaw-cae48.firebaseio.com"}, {"type": "domain", "tag": "cybercrime", "tlp": "white", "value": "bald-panel.firebaseio.com"}, {"type": "domain", "tag": "cybercrime", "tlp": "white", "value": "spitfirepanel.firebaseio.com"}, {"type": "domain", "tag": "cybercrime", "tlp": "white", "value": "phoenix-panel.firebaseio.com"}, {"type": "domain", "tag": "apt", "tlp": "white", "value": "googleservicesforar.com"}, {"type": "domain", "tag": "apt", "tlp": "white", "value": "googleassisstants.com"}, {"type": "domain", "tag": "apt", "tlp": "white", "value": "androidsystemswebview.com"}, {"type": "domain", "tag": "apt", "tlp": "white", "value": "firmwaresystemupdate.com"}, {"type": "freedns", "tag": "suspect", "tlp": "white", "value": "000webhostapp.com"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "80.209.224.0/20"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "176.123.8.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.206.147.0/24"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "monovm.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "njalla.fo"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "openprovider.eu"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "njalla.in"}, {"type": "domain", "tag": "spyware", "tlp": "white", "value": "api.mainrepo.org"}, {"type": "domain", "tag": "spyware", "tlp": "white", "value": "mainrepo.org"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".app"}, {"type": "domain", "tag": "suspect", "tlp": "white", "value": "mobilespy.net"}, {"type": "domain", "tag": "spyware", "tlp": "white", "value": "mypro-b3435.firebaseio.com"}, {"type": "domain", "tag": "spyware", "tlp": "white", "value": "licences.website"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "ns3.thcservers.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "ns1.thcservers.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "ns4.thcservers.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "ns2.thcservers.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "dnsowl.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "epik.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "1984.is"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "afraid.org"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "1984hosting.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "orderbox-dns.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "mivocloud.com"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "flokinet.net"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "managedns.org"}, {"type": "ns", "tag": "suspect", "tlp": "white", "value": "panamaserver.com"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".space"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".bond"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".website"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".wtf"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".lol"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".live"}, {"type": "tld", "tag": "suspect", "tlp": "white", "value": ".cyou"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.181.156.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.180.174.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.252.177.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.252.179.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.252.176.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "5.252.178.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "94.158.246.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "94.158.247.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.163.44.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.180.191.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "94.158.244.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "94.158.245.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.225.16.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.180.157.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.180.158.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "101.99.64.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "101.99.74.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "101.99.77.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "101.99.72.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "101.99.75.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "101.99.79.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "101.99.80.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "101.99.88.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "101.99.90.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.128.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "103.155.93.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "103.155.92.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "101.99.93.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "101.99.92.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "101.99.78.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.136.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.136.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.137.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.138.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.140.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.142.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.142.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.144.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.144.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.145.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.146.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.147.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.148.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.149.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.150.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.151.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.152.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "111.90.158.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "124.217.224.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "124.217.233.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "124.217.234.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "124.217.235.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "124.217.236.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "124.217.240.0/20"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.44.201.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.40.181.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.36.224.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.40.71.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.40.40.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.36.76.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.36.78.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.40.183.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.106.132.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.106.121.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.106.103.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.106.90.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.106.87.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.106.74.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.106.31.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.105.25.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.33.8.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.40.182.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.106.136.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.106.137.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.106.143.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.107.21.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.107.55.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "86.107.104.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "212.103.51.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "194.59.248.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.176.84.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.176.85.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "193.176.87.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.213.34.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.213.242.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.214.106.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.214.122.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.214.125.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.214.143.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.214.152.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "188.214.158.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.252.220.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.120.17.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.104.184.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.104.184.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.104.186.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.104.187.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.93.181.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.93.182.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.93.183.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.94.188.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.94.190.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.94.192.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.94.194.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.45.12.0/23"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.45.14.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.45.15.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "176.121.96.0/21"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "176.124.176.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "176.124.180.0/22"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "176.125.228.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "176.125.229.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "176.125.230.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "176.125.231.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "149.154.157.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "149.154.158.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "149.154.159.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "151.236.15.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "151.236.16.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "151.236.17.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "151.236.18.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "151.236.20.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "151.236.21.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "151.236.22.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "151.236.25.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "37.235.48.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "185.26.239.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "158.255.213.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "158.255.214.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.31.120.0/24"}, {"type": "cidr", "tag": "suspect", "tlp": "white", "value": "89.31.121.0/24"}, {"type": "ip4addr", "tag": "doh", "tlp": "white", "value": "1.1.1.1"}, {"type": "ip4addr", "tag": "doh", "tlp": "white", "value": "8.8.4.4"}, {"type": "ip4addr", "tag": "doh", "tlp": "white", "value": "1.0.0.1"}, {"type": "ip4addr", "tag": "doh", "tlp": "white", "value": "8.8.8.8"}, {"type": "ip4addr", "tag": "doh", "tlp": "white", "value": "149.112.112.112"}, {"type": "ip4addr", "tag": "doh", "tlp": "white", "value": "9.9.9.9"}, {"type": "domain", "tag": "doh", "tlp": "white", "value": "cloudflare-dns.com"}, {"type": "domain", "tag": "doh", "tlp": "white", "value": "dns.nextdns.io"}, {"type": "domain", "tag": "doh", "tlp": "white", "value": "dns.alidns.com"}, {"type": "domain", "tag": "doh", "tlp": "white", "value": "dns.google"}, {"type": "ip6addr", "tag": "doh", "tlp": "white", "value": "2620:fe::fe"}, {"type": "ip6addr", "tag": "doh", "tlp": "white", "value": "2620:fe::9"}, {"type": "domain", "tag": "dual", "tlp": "white", "value": "api.dropboxapi.com"}, {"type": "domain", "tag": "dual", "tlp": "white", "value": "firebase.io"}, {"type": "domain", "tag": "dual", "tlp": "white", "value": "api.trello.com"}, {"type": "domain", "tag": "dual", "tlp": "white", "value": "api.telegram.org"}, {"type": "snort", "tag": "spyware", "tlp": "white", "value": "alert tcp $EXTERNAL_NET any -> $HOME_NET any (flow: from_server, established;content:\"|35 00 70 6f 69 6e 67|\";startswith;msg:\"Detects Android SpyNote C2 answer\";sid:1000006;dsize:7;rev:001;threshold: type limit, track by_src, seconds 500, count 1;)"}, {"type": "snort", "tag": "spyware", "tlp": "white", "value": "alert tcp $HOME_NET any -> $EXTERNAL_NET any (flow: from_client, established;content:\"/socket.io/?EIO=3&release=\";msg:\"Detects XploitSPY android implant beacon\";sid:1000007; rev:001;threshold: type limit, track by_src, seconds 500, count 1;)"}, {"type": "snort", "tag": "cybercrime", "tlp": "white", "value": "alert tcp $EXTERNAL_NET any -> $HOME_NET any (flow: from_server, established;content:\"|6a 73 6f 6e 72 70 63 a3 32 2e 30 a6 6d 65 74 68 6f 64 ad 67 65 74 50 68 6f 6e 65 53 74 61 74 65 a2 69 64 |\";msg:\"Roaming Mantis getPhoneState command\";sid:1000008;threshold: type limit, track by_src, seconds 500, count 1;rev:001;)"}, {"type": "snort", "tag": "cybercrime", "tlp": "white", "value": "alert tcp $EXTERNAL_NET any -> $HOME_NET any (flow: from_server, established;content:\"|6a 73 6f 6e 72 70 63 a3 32 2e 30 a6 6d 65 74 68 6f 64 a8 73 68 6f 77 48 6f 6d 65 a2 69 64|\";msg:\"Roaming Mantis showHome command\";sid:1000009;threshold: type limit, track by_src, seconds 500, count 1;rev:001;)"}, {"type": "snort", "tag": "cybercrime", "tlp": "white", "value": "alert tcp $EXTERNAL_NET any -> $HOME_NET any (flow: from_server, established;content:\"|6a 73 6f 6e 72 70 63 a3 32 2e 30 a6 6d 65 74 68 6f 64 a7 73 65 6e 64 53 6d 73 a2 69 64|\";msg:\"Roaming Mantis sendSms command\";sid:1000010;threshold: type limit, track by_src, seconds 500, count 1;rev:001;)"}]}