# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://blog.netlab.360.com/orchard-dga/
# Reference: https://otx.alienvault.com/pulse/62ecea54201d22e433bfcac8

45.61.187.7:7733
48b2137f.com
48b2137f.net
48b2137f.org
91ac64d2.com
91ac64d2.net
91ac64d2.org
9f78281a.com
9f78281a.net
9f78281a.org
d802f446.com
d802f446.net
d802f446.org
05orchardmaster.duckdns.org
2022-08-02ojena.duckdns.org
48b2137f.duckdns.org
91ac64d2.duckdns.org
9f78281a.duckdns.org
d802f446.duckdns.org
ojena.duckdns.org
orchardmaster.duckdns.org
vgzero.duckdns.org
victorynicholas.duckdns.org

# Reference: https://twitter.com/Jane_0stin/status/1599882460271374336
# Reference: https://app.any.run/tasks/966b7684-8134-406e-bc40-d371d5dfc3d2/

195.201.179.206:25654
2b5244ef.com
2b5244ef.net
2b5244ef.org
2b5244ef.duckdns.org

# Reference: https://twitter.com/James_inthe_box/status/1599884044942336000
# Reference: https://www.virustotal.com/gui/file/03157e630dee942d1320d15e9a5e489ec9aee644c6203f9292dd6af911f6a435/detection

195.201.179.206:25654
45.61.185.231:25654
45.61.185.231:2929
45.61.187.7:2606
0c3a73cd.com
0c3a73cd.net
0c3a73cd.org
0c3a73cd.duckdns.org
b59967d0.duckdns.org

# Reference: https://www.virustotal.com/gui/file/0653de251cbe8e45819c77cdd909bd29bb946273f88e792984dfcecde021f9f5/detection

249be78d.com
249be78d.net
249be78d.org
249be78d.duckdns.org
ef51c534.duckdns.org

# Reference: https://www.virustotal.com/gui/file/f8d54a87ab6119f02ffd47737c320f46df4b01d1116586aeb42a940a46070162/detection

1733ef1a.com
1733ef1a.duckdns.org
1733ef1a.net
1733ef1a.org
1d7cd416.com
1d7cd416.duckdns.org
1d7cd416.net
1d7cd416.org
30a3b5d7.com
30a3b5d7.duckdns.org
30a3b5d7.net
30a3b5d7.org
607bee89.com
607bee89.duckdns.org
607bee89.net
607bee89.org
668550a3.com
668550a3.duckdns.org
668550a3.net
668550a3.org
9624df31.com
9624df31.duckdns.org
9624df31.net
9624df31.org
b9a43040.com
b9a43040.duckdns.org
b9a43040.net
b9a43040.org
c7ad905a.com
c7ad905a.duckdns.org
c7ad905a.net
c7ad905a.org

# Reference: https://www.virustotal.com/gui/file/f85a3df5be21e3cdd6b628c92b6d33c4805fea305cadc613dc498cb5a5cfc488/detection

e33be650.com
e33be650.duckdns.org
e33be650.net
e33be650.org

# Reference: https://www.virustotal.com/gui/file/f4aabc6795134eca0ffae7654f1273e81b4bd534a95029a50110848f5fa36eb8/detection

07a2254b.com
07a2254b.duckdns.org
07a2254b.net
07a2254b.org
0e3c2d5e.com
0e3c2d5e.duckdns.org
0e3c2d5e.net
0e3c2d5e.org
2c49d61d.com
2c49d61d.duckdns.org
2c49d61d.net
2c49d61d.org
4984afae.com
4984afae.duckdns.org
4984afae.net
4984afae.org
4ad54143.com
4ad54143.duckdns.org
4ad54143.net
4ad54143.org
527866c3.com
527866c3.duckdns.org
527866c3.net
527866c3.org
8e2d8aab.com
8e2d8aab.duckdns.org
8e2d8aab.net
8e2d8aab.org
a69b6bf3.com
a69b6bf3.duckdns.org
a69b6bf3.net
a69b6bf3.org
a7477c24.com
a7477c24.duckdns.org
a7477c24.net
a7477c24.org
aa56f50a.com
aa56f50a.duckdns.org
aa56f50a.net
aa56f50a.org
ba9e6400.com
ba9e6400.duckdns.org
ba9e6400.net
ba9e6400.org
e805b006.com
e805b006.duckdns.org
e805b006.net
e805b006.org

# Reference: https://www.virustotal.com/gui/file/ee23e5693b3cda1b3564c186422bdd72a12e25ae5eb398ac51dedc3d32ede27d/detection

43901f77.com
43901f77.duckdns.org
43901f77.net
43901f77.org
45cd1f79.com
45cd1f79.duckdns.org
45cd1f79.net
45cd1f79.org
8b20c257.com
8b20c257.duckdns.org
8b20c257.net
8b20c257.org
8c5d2339.com
8c5d2339.duckdns.org
8c5d2339.net
8c5d2339.org
9d441a46.com
9d441a46.duckdns.org
9d441a46.net
9d441a46.org
a5e4b37e.com
a5e4b37e.duckdns.org
a5e4b37e.net
a5e4b37e.org
d152bd32.com
d152bd32.duckdns.org
d152bd32.net
d152bd32.org
de9f14b3.com
de9f14b3.duckdns.org
de9f14b3.net
de9f14b3.org
