Dynamic DNS Service Providers for APT Command and Control (C&C) - An Analysis

Dear blog readers,

The following is a compilation of dynamic DNS providers in specific ones used by APTs and various other targeted campaign obtained using public sources.

Sample dynamic DNS service provider domains known to have been involved in various malicious software spreading campaigns include:

07726657423zaion[.]no-ip[.]biz
100009755836320[.]no-ip[.]biz
123456789123456789[.]myftp[.]biz
1337ace[.]ddns[.]net
1349874791[.]gnway[.]cc
1488[.]sytes[.]net
14lcolombo[.]ddns[.]net
159asd[.]duckdns[.]org
1756mostacc[.]ddns[.]net
1987omid[.]ddns[.]net
1fon1[.]ddns[.]net
1m4962f897[.]iok[.]la
22134520[.]ddns[.]net
2715729[.]vicp[.]net
45df36[.]dyndns[.]info
4you[.]ddns[.]net
5107b712[.]all123[.]net
5551520[.]no-ip[.]biz
5701c196[.]123nat[.]com
6gh[.]noip[.]me
726627[.]duckdns[.]org
79649759[.]ddns[.]net
7daysky[.]in[.]3322[.]org
96750513[.]ddns[.]net
9949291099[.]hopto[.]org
a1b2c3[.]hopto[.]org
a302a85a[.]ngrok[.]io
aaaa[.]com
aaaaaaaaaabbbbb[.]hopto[.]org
aagaro[.]ddns[.]net
aasxzxdsc12324[.]no-ip[.]biz
abarouter[.]ddns[.]net
abbaass313[.]hopto[.]org
abbaass3132[.]hopto[.]org
abcccabccab[.]ddns[.]net
abderrahmane16[.]hopto[.]org
abdo099[.]ddns[.]net
abdobacha05[.]ddns[.]net
abdou16[.]hopto[.]org
abdouoahmed[.]ddns[.]net
abduls0821[.]myddns[.]me
abedjaradat1177[.]no-ip[.]org
abinova[.]ddns[.]net
abosaoys881[.]duia[.]us
abs3nt[.]ddns[.]net
abusako[.]no-ip[.]biz
achrafzouina[.]zapto[.]org
ad15[.]hopto[.]org
adelxxbx[.]no-ip[.]biz
adesja1337[.]no-ip[.]biz
adlin[.]duckdns[.]org
adobflash[.]hopto[.]org
aerror[.]no-ip[.]biz
ahag3ld1[.]ddns[.]net
ahmdiand-wj3[.]ddns[.]net
ahmed12345[.]hoptp[.]org
ahmed2012[.]dynu[.]com
ahmed90011912[.]ddns[.]net
ahmedmidoegypt[.]hopto[.]org
ahomdalhomd42[.]hopto[.]org
ala6a[.]no-ip[.]biz
alaa-1982[.]no-ip[.]biz
alaajb[.]zapto[.]org
alaauy[.]ddns[.]net
alabama192837[.]no-ip[.]org
alanbkey[.]no-ip[.]org
alarr2012ab[.]myftp[.]biz
albash2222[.]ddns[.]net
aldnkoich11111111[.]no-ip[.]org
alfazaai99[.]ddns[.]net
ali2627[.]ddns[.]net
ali7070[.]ddns[.]net
aliboxboxbox[.]hopto[.]org
alihoseini[.]no-ip[.]biz
aliyusef6[.]no-ip[.]biz
alkingahmed555[.]ddns[.]net
alldebrid[.]duckdns[.]org
allforfree[.]game-host[.]org
alpheron[.]duckdns[.]org
alzintani[.]ddns[.]net
amarok58[.]no-ip[.]biz
amelwafaw[.]ddns[.]net
aminamadani16[.]hopto[.]org
aminbatna31[.]ddns[.]net
aminecity[.]ddns[.]net
aminrahimzadeh[.]no-ip[.]org
amiraliam[.]ddns[.]net
amirhosein0074[.]ddns[.]net
ammaar938[.]ddns[.]net
ampala[.]ddns[.]net
amran-pc[.]no-ip[.]biz
amrozamrozamroz[.]hopto[.]org
amrsamy222[.]ddns[.]net
amsdj[.]hopto[.]org
amujeeb1990[.]ddns[.]net
an[.]droidsuper[.]su
anagliz[.]ddns[.]net
anawebs[.]ddns[.]net
andqip[.]ddns[.]net
andr01d[.]zapto[.]org
andrew999[.]ipnodns[.]ru
andriod91[.]ddns[.]net
andro[.]no-ip[.]biz
andro0161[.]no-ip[.]info
andro123[.]duckdns[.]org
androduck[.]duckdns[.]org
android[.]no-ip[.]org
android1[.]ddns[.]net
android1385[.]ddns[.]net
androidalbums[.]ddns[.]net
androidan[.]ddns[.]net
androidbra[.]duckdns[.]org
androidfdl[.]ddns[.]net
androidplay[.]ddns[.]net
androidrat21[.]ddns[.]net
androidsafe[.]ddns[.]net
androidtest0[.]ddns[.]net
androidtool[.]ddns[.]net
androidupdate[.]ddns[.]net
androjak[.]myftp[.]org
androjan[.]ddns[.]net
androkhan3100[.]ddns[.]net
androoid[.]ddns[.]net
androrat[.]servegame[.]com
androrat[.]zapto[.]org
androrat1[.]no-ip[.]biz
androrat1226[.]ddns[.]net
androrat143[.]no-ip[.]biz
androrat22[.]ddns[.]net
androratbtas[.]no-ip[.]info
androratttt[.]no-ip[.]org
androratvirgin[.]duckdns[.]org
androtorma[.]ddns[.]net
andver18[.]no-ip[.]biz
anishmishra66[.]ddns[.]net
anito[.]ddns[.]net
anon008[.]ddns[.]net
anondz97[.]ddns[.]net
anonfox[.]no-ip[.]org
anonimousdre180[.]ddns[.]net
anonsa[.]ddns[.]net
anonvirus[.]ddns[.]net
anonymo9s[.]ddns[.]net
anonymous666[.]zapto[.]org
anonymousip[.]ddns[.]net
anonymousip[.]no-ip[.]org
apkhamza[.]ddns[.]net
apolo30[.]no-ip[.]org
applecenikosmos[.]hldns[.]ru
appmarket[.]servehttp[.]com
appsystem[.]ddns[.]net
aqwkdo1[.]no-ip[.]biz
ariaaalikazm[.]ddns[.]net
arman[.]no-ip[.]biz
arondograu[.]ddns[.]net
asadhashmi[.]ddns[.]net
asasasas22[.]ddns[.]net
asdbh11[.]ddns[.]net
asdqqq[.]bounceme[.]net
askinder[.]hopto[.]org
asosha4ed[.]no-ip[.]biz
astro3[.]hopto[.]org
atin[.]ddns[.]net
atsizinoglu[.]duckdns[.]org
auc[.]dlinkddns[.]com
audreysaradin[.]no-ip[.]org
authd[.]ddns[.]net
awir-fb[.]sytes[.]net
axxz2017[.]ddns[.]net
ayadd19[.]no-ip[.]org
ayadd99[.]ddns[.]net
ayham11[.]hopto[.]org
aymen1852[.]ddns[.]net
aymencossassi[.]ddns[.]net
azerboys[.]hopto[.]org
azert123[.]ddns[.]net
azerty[.]hopto[.]org
aziza[.]sytes[.]net
baby[.]webhop[.]me
badguy[.]myq-see[.]com
bahar2017[.]no-ip[.]org
bahoom[.]no-ip[.]biz
bambi[.]no-ip[.]biz
banis[.]hopto[.]org
bannding[.]ddns[.]net
bapforall[.]ddns[.]net
barbari[.]ddns[.]net
barish121[.]no-ip[.]org
bassamzeyad[.]ddns[.]net
batterysaver[.]3utilities[.]com
behnamhack[.]ddns[.]net
beijg[.]3322[.]org
bensphonetracker[.]ddns[.]net
berkani0774[.]no-ip[.]org
bitoandroid[.]no-ip[.]info
bl4ckh0t[.]ddns[.]net
bl4ckhatjoker[.]ddns[.]net
black1990[.]ddns[.]net
blackghostdc[.]duckdns[.]org
blackghostorg[.]ddns[.]net
blind1234[.]ddns[.]net
bmt96[.]noip[.]me
boinserver12[.]no-ip[.]info
bopress[.]ddns[.]net
bostanoo[.]ddns[.]net
boubou271[.]ddns[.]net
box100[.]ddns[.]net
brasilteamop[.]ddns[.]net
brave-hacker[.]no-ip[.]org
brousse16[.]ddns[.]net
bwaleez[.]hopto[.]org
c1[.]no-ip[.]biz
camper92[.]ddns[.]net
canaria[.]no-ip[.]info
carapuce-2015[.]no-ip[.]biz
cardangi[.]no-ip[.]org
cccamd[.]myftp[.]biz
cerdofile[.]ddns[.]net
chabar[.]ddns[.]net
chacal00[.]hopto[.]org
changyu231[.]ddns[.]net
chanks[.]no-ip[.]biz
charifo1310tok[.]no-ip[.]biz
chrisfo[.]no-ip[.]org
city55[.]hopto[.]org
cjbks0u0[.]no-ip[.]org
clashdroid[.]no-ip[.]biz
clayhost[.]hopto[.]org
cnw[.]redirectme[.]net
comet[.]myftp[.]org
comsurogate[.]noip[.]me
coxiamigo[.]myq-see[.]com
craxyvirux[.]ddns[.]net
createmeon[.]zapto[.]org
cricbot[.]no-ip[.]info
crime[.]ddns[.]net
crisprueba[.]ddns[.]net
cyberandro[.]duckdns[.]org
cyberbit[.]ddns[.]net
cyberbwarrior[.]ddns[.]net
cybercrysis[.]ddns[.]net
dadadadadaprivet[.]ddns[.]net
dagohack[.]no-ip[.]me
dalibob12[.]ddns[.]net
damndamn[.]ddns[.]net
dangerlove[.]no-ip[.]biz
danialdelta[.]ddns[.]net
danialmostafaei[.]no-ip[.]biz
daniele3814[.]ddns[.]net
danielrats[.]ddns[.]net
dantehack[.]zapto[.]org
darkshion[.]no-ip[.]org
daroedkak[.]no-ip[.]biz
darweshfis[.]no-ip[.]org
datadownloader[.]ddns[.]net
dddeee[.]ddns[.]net
ddns[.]net
deep1234[.]ddns[.]net
dellearm[.]ddns[.]net
dendroid[.]hopto[.]org
denishul[.]hldns[.]ru
detlef-gmbh[.]tk
dexonic[.]duckdns[.]org
diceedicee[.]ddns[.]net
didi03[.]duckdns[.]org
diener123[.]ddns[.]net
dionis[.]ddns[.]net
dj[.]shop[.]tm
dj123[.]no-ip[.]org
djack1[.]zapto[.]org
dkms[.]ddns[.]net
dltelegram[.]ddns[.]net
dnsdynamic[.]org
dodee97dodee[.]ddns[.]net
dodotototata[.]publicvm[.]com
dogecoinspeed[.]zapto[.]org
domeer-android[.]ddns[.]net
domira[.]ddns[.]net
draagon[.]ddns[.]net
dragonhkr1[.]myftp[.]biz
drdamar[.]hopto[.]org
drhack[.]hopto[.]org
driodrac[.]ddns[.]net
dro[.]soxx[.]us
droid[.]deutsche-db-bank[.]ru
droid[.]fagdns[.]com
droid[.]freedynamicdns[.]org
droid[.]servehttp[.]com
droid[.]serverhttp[.]com
droidcraftismelmao[.]ddns[.]net
droidge[.]ddns[.]net
droidhost[.]zapto[.]org
droidjaack[.]zapto[.]org
droidjack[.]hopto[.]org
droidjack1[.]sytes[.]net
droidjack121[.]ddns[.]net
droidjack2137[.]hopto[.]org
droidjack228[.]ddns[.]net
droidjack2333[.]ddns[.]net
droidjack258[.]bounceme[.]net
droidjack33[.]no-ip[.]biz
droidjackdns[.]duckdns[.]org
droidjackiam[.]ddnsking[.]com
droidjackisgodly[.]ddns[.]net
droidjackkk[.]sytes[.]net
droidjackv5[.]ddns[.]net
droidjock[.]myftp[.]biz
droidmosa[.]ddns[.]net
droidnigga[.]zapto[.]org
droidrat[.]hopto[.]org
droidspy[.]zapto[.]org
droidss[.]noip[.]me
droy[.]zapto[.]org
drrazikhan[.]no-ip[.]info
dsf[.]no-ip[.]org
duckdns[.]org
duckem[.]duckdns[.]org
ducmanhhoangtran[.]ddns[.]net
duke5010[.]duckdns[.]org
duyguseliberkay[.]no-ip[.]biz
dzhacker16[.]ddns[.]net
e777kx47[.]ddns[.]net
egytiger[.]myftp[.]org
ehsanmaali[.]ddns[.]net
ehsanmaali3[.]ddns[.]net
eldiablo[.]no-ip[.]biz
elgen1[.]no-ip[.]biz
elisou19[.]ddns[.]net
elvis2015[.]ddns[.]net
emme[.]no-ip[.]biz
engnngns[.]duckdns[.]org
engrid[.]no-ip[.]biz
equisde[.]ddns[.]net
erikatersptra[.]ddns[.]net
esharj[.]ddns[.]net
eslam87[.]hopto[.]org
essalhi2047[.]hopto[.]org
euquerotchu[.]ddns[.]net
evilcasper[.]ddns[.]net
explosif[.]zapto[.]org
facbookserver[.]ddns[.]net
facebooh[.]zapto[.]org
facebook2ww290[.]ddns[.]net
facrbook[.]redirectme[.]net
fadisesubaih[.]ddns[.]net
fairylow[.]no-ip[.]biz
fakaelite[.]no-ip[.]org
farzan[.]ddns[.]net
fateh2017[.]ddns[.]net
fati43030[.]no-ip[.]biz
fatiha29[.]ddns[.]net
fazoro66[.]ddns[.]net
fenon158[.]ddns[.]net
ferzo1881[.]duckdns[.]org
fifi147fifi[.]no-ip[.]biz
firsthost[.]ddns[.]net
flashplayerxx[.]no-ip[.]org
florian-pc[.]ksueyuj0mtxpt6gn[.]myfritz[.]net
forcehackinglove[.]ddns[.]net
foxfeline[.]no-ip[.]org
free1[.]neiwangtong[.]com
freeann[.]sytes[.]net
freeeeeeeeee[.]no-ip[.]info
freepalestine[.]ddns[.]net
fruby[.]zapto[.]org
fsocfsoc[.]ddns[.]net
fukeyou12[.]myftp[.]biz
futurasky[.]no-ip[.]biz
gaabar[.]hopto[.]org
galau[.]ddns[.]net
gcafegood[.]noip[.]me
gcafegood2[.]noip[.]me
gemini85[.]hopto[.]org
gentel901[.]no-ip[.]org
geocheats2[.]eu
gert44[.]duckdns[.]org
get[.]ph
ggwasgeht[.]ddns[.]net
ghanim2017[.]ddns[.]net
ghanou1603[.]no-ip[.]info
ghfx1[.]ddns[.]net
ghghghghetrezw[.]no-ip[.]org
glaive24[.]no-ip[.]biz
gmailss11[.]hopto[.]org
gogaggg[.]ddns[.]net
goggle[.]sytes[.]net
gold5000[.]ddns[.]net
goldeneagle1112[.]ddns[.]net
gooboom[.]no-ip[.]biz
good[.]myddns[.]me
goog2[.]no-ip[.]biz
googlead[.]publicvm[.]com
googles[.]servemp3[.]com
googleweb[.]ddns[.]net
gooogleplay[.]ddns[.]net
gorr[.]hopto[.]org
goshasb[.]ddns[.]net
grandeamore[.]ddns[.]net
great-support[.]com
greatkeyboard[.]hopto[.]org
gta5hacking12[.]duckdns[.]org
guru123[.]ddns[.]net
gusui1[.]ddns[.]net
haa7aah[.]no-ip[.]biz
habbo[.]no-ip[.]org
habib1376[.]ddns[.]net
habib556[.]ddns[.]net
hac123k[.]hopto[.]org
hachim07reg[.]no-ip[.]info
hack-iraq[.]no-ip[.]info
hack1111[.]noip[.]me
hack155[.]vicp[.]net
hackcam[.]zapto[.]org
hackdeam[.]no-ip[.]info
hacked2001[.]hopto[.]org
hackedona[.]ddns[.]net
hacker-321[.]no-ip[.]biz
hacker-81[.]no-ip[.]biz
hacker2[.]hopto[.]org
hacker421[.]hopto[.]org
hackermoqtada[.]no-ip[.]biz
hackertn123[.]no-ip[.]biz
hackhack2016[.]no-ip[.]info
hackhamer[.]zapto[.]org
hackinroll[.]ddns[.]net
hackme[.]no-ip[.]org
hacksd20[.]ddns[.]net
hacksyria2[.]myftp[.]biz
hadsurvey[.]ddns[.]net
hahalol[.]ddns[.]net
hahalol[.]no-ip[.]biz
haiderhacer12[.]no-ip[.]biz
hajeeeee[.]hopto[.]org
hakedpc0000[.]myftp[.]biz
hakeerali2[.]ddns[.]net
haker-2119[.]ddns[.]net
haker10[.]ddns[.]net
haker33sadekgafer[.]no-ip[.]biz
hakosiken[.]duckdns[.]org
hakunamatata007[.]ddns[.]net
hala222[.]hopto[.]org
halo12[.]duckdns[.]org
hamadagentel[.]ddns[.]net
hamed1993[.]ddns[.]net
hamidoranis[.]no-ip[.]biz
hamidos1342[.]ddns[.]net
hamker[.]ddns[.]net
hamo55[.]hopto[.]org
hamza19991[.]hopto[.]org
hamzaelcb[.]ddns[.]net
hananox[.]ddns[.]net
hardik[.]no-ip[.]info
hardstyleraver[.]no-ip[.]org
haroune12[.]myddns[.]me
hash0r[.]no-ip[.]biz
hasha[.]hopto[.]org
hasn9999[.]ddns[.]net
hassan100[.]ddns[.]net
hassanabd1233[.]ddns[.]net
hatam[.]no-ip[.]org
havij[.]ddns[.]net
hax[.]no-ip[.]info
haxor[.]hopto[.]org
haxorjib[.]no-ip[.]org
hazem123[.]no-ip[.]biz
hazhar77[.]no-ip[.]biz
hdkhanh123[.]no-ip[.]org
hedr78[.]ddns[.]net
heemoana[.]hopto[.]org
hegazy5753[.]ddns[.]net
hehe[.]duckdns[.]org
heikechenmo[.]3322[.]org
heilbronn[.]duckdns[.]org
hell2066[.]zapto[.]org
helloandroid[.]no-ip[.]org
hero400[.]ddns[.]net
heroeschargehacked[.]ddns[.]net
hhamokcha[.]ddns[.]net
hhhhhfhf[.]ddns[.]net
hmt1985[.]ddns[.]net
hobi[.]3utilities[.]com
hoho121292[.]ddns[.]net
hoho39[.]ddnc[.]net
hohoangpmy[.]ddns[.]net
hooman8219[.]servecounterstrike[.]com
hopto[.]org
horcheni123[.]ddns[.]net
hoseenoori2277kh[.]ddns[.]net
hossam3030[.]ddns[.]net
hossar[.]ddns[.]net
hosteng123[.]hopto[.]org
hosthack25[.]ddns[.]net
houaribey4[.]ddns[.]net
houaribey4[.]no-ip[.]org
housam[.]linkpc[.]net
houssmes[.]zapto[.]org
howie96[.]jios[.]org
hpwdza47o8huc1xj[.]myfritz[.]net
hqn[.]ddns[.]net
htmp[.]sytes[.]net
httpdssh[.]ddns[.]net
huhuhuya[.]ddns[.]net
huntergold[.]no-ip[.]biz
hussein1889[.]no-ip[.]biz
husseinali5698[.]ddns[.]net
husshacka[.]hopto[.]org
i1993[.]ddns[.]net
ignoredhost[.]no-ip[.]biz
imad2001bo[.]hopto[.]org
indusv00[.]duckdns[.]org
info[.]bounceme[.]net
injectman[.]ddns[.]net
injectman[.]no-ip[.]info
inteljet[.]ddns[.]net
intelresol[.]ddns[.]net
invisibleghost[.]no-ip[.]biz
ipv445[.]hopto[.]org
iqram85spy[.]ddns[.]net
iran0513[.]ddns[.]net
iraqn6777[.]ddns[.]net
isamdonita[.]no-ip[.]org
islam2020libya[.]no-ip[.]biz
islamway[.]no-ip[.]info
ivon9393[.]no-ip[.]org
jackdroid[.]systes[.]net
jackdroid1337[.]ddns[.]net
jafarman[.]ddns[.]net
jalal123[.]hopto[.]org
jalldomain[.]ddns[.]net
jas7ser[.]hopto[.]org
jassair[.]hopto[.]org
jastn[.]ddns[.]net
jirawat01[.]ddns[.]net
jkgytgasjg12[.]serveftp[.]com
jnkey[.]ddns[.]net
jockerhackerxnxx[.]ddns[.]net
johnharim004[.]ddns[.]net
jojomo[.]ddns[.]net
jokerbabel[.]no-ip[.]biz
jomo[.]zapto[.]org
josewaldo[.]ddns[.]net
juanblackhak[.]ddns[.]net
juliocoelhodesa[.]hopto[.]org
jun[.]dynu[.]com
justarat[.]noip[.]me
k0k0wawa[.]hopto[.]org
kaddress[.]ddns[.]net
kaedalsh[.]ddns[.]net
kaizen00[.]ddns[.]net
kakashi[.]ddns[.]net
kaliheh[.]no-ip[.]biz
kalinne[.]ddns[.]net
kalinus[.]ddns[.]net
kalizinho[.]no-ip[.]org
kalljo[.]dvrdns[.]org
kamlabhai123[.]no-ip[.]biz
kararkarar0780[.]ddns[.]net
karasqlee9[.]no-ip[.]org
karenchik19[.]hopto[.]org
karrarhuseein82[.]ddns[.]net
kaskw[.]myftp[.]biz
kaskw[.]zapto[.]org
kasofe123123aa[.]no-ip[.]biz
kasper[.]ddns[.]net
keskes02122002[.]ddns[.]net
kevte26[.]zapto[.]org
khaleel0[.]zapto[.]org
khalid-2016[.]noip[.]me
khantac[.]ddns[.]net
kheridla[.]hopto[.]org
kilasx[.]ddns[.]net
kingdom[.]no-ip[.]biz
kinggg[.]ddns[.]net
kjgjgkhffh[.]sytes[.]net
kka163[.]ddns[.]net
kkarox90[.]no-ip[.]org
kmessi[.]myddns[.]me
komplevit-rat[.]ddns[.]net
kontolanime[.]no-ip[.]biz
korelev[.]no-ip[.]org
korg600[.]no-ip[.]biz
krem111[.]ddns[.]net
krlol[.]ddns[.]net
ksbozo[.]ddns[.]net
kskdt[.]ddns[.]net
kuraist[.]zapto[.]org
kurd-kar[.]ddns[.]net
kusleratnt[.]duckdns[.]org
lahyarhmo[.]hopto[.]org
lamorash[.]ddns[.]net
laze22[.]hopto[.]org
lbossn[.]ddns[.]net
learnxea[.]duckdns[.]org
led5526[.]ddns[.]net
likerrdd[.]myftp[.]biz
linonymousami[.]no-ip[.]org
liquidixen[.]ddns[.]net
liquidstone[.]ddns[.]net
lizdlezozifpo[.]ddns[.]net
local1232[.]ddns[.]net
locolocoloco[.]ddns[.]net
lolman[.]ddns[.]net
lomo[.]com
lordxxx[.]myq-see[.]com
losever2[.]no-ip[.]biz
love2014[.]ddns[.]net
loveubaby[.]3utilities[.]com
lputyr[.]myq-see[.]com
luxuriaecu[.]ddns[.]net
madblack0[.]sytes[.]net
madov-matrix25[.]no-ip[.]org
magemankoktelam[.]ddns[.]net
mahamadmahmod[.]ddns[.]net
mahasiswa[.]no-ip[.]biz
mahdi1379[.]ddns[.]net
mahdi3141[.]ddns[.]net
mahdibaba123[.]ddns[.]net
majed111111[.]myq-see[.]com
majod98m[.]ddns[.]net
makarand[.]no-ip[.]org
malakatef09[.]ddns[.]net
mamal9921[.]ddns[.]net
mami5255[.]duckdns[.]org
mar020one[.]hopto[.]org
marcsil[.]ddns[.]net
mariorossi2013[.]homepc[.]it
marknetz[.]hopto[.]org
marocmaroc[.]hopto[.]org
martin123456[.]no-ip[.]org
masafat[.]ddns[.]net
maskaralama[.]ddns[.]net
masterat[.]myftp[.]org
matgio[.]duckdns[.]org
matin[.]ddns[.]net
matrix-teste[.]ddns[.]net
mayyaha[.]no-ip[.]info
mazenttr2[.]hopto[.]org
mazxor[.]zapto[.]org
me512[.]zapto[.]org
medo7911[.]ddns[.]net
medoahmed3[.]ddns[.]net
medx321[.]ddns[.]net
mee2008[.]zapto[.]org
megalol[.]chickenkiller[.]com
mehost[.]ddns[.]net
mehtab123[.]ddns[.]net
memeaimen10[.]hopto[.]org
memexmama[.]ddns[.]net
mezoo32[.]no-ip[.]biz
mghorbani78[.]ddns[.]net
mhoammedtty[.]hopto[.]org
mht3[.]ddns[.]net
micro-soft[.]no-ip[.]biz
microsoft-office[.]ddns[.]net
mido28[.]hopto[.]org
migo2018[.]zapto[.]org
miioolinase[.]ddns[.]net
mikaniki[.]ddns[.]net
mikestar[.]no-ip[.]biz
miltin2[.]no-ip[.]org
minou555[.]hopto[.]org
misterx94[.]ddns[.]net
misty255[.]no-ip[.]org
mixtape2016[.]ddns[.]net
mjhooollltuuu[.]no-ip[.]biz
mmdjj212[.]myftp[.]biz
mobdro[.]hopto[.]org
mobiles0ft[.]no-ip[.]org
moein1369[.]no-ip[.]biz
moep004[.]no-ip[.]org
mogahed[.]ddns[.]net
moha55[.]no-ip[.]biz
mohamed11[.]ddns[.]net
mohamed46565656[.]no-ip[.]biz
mohamed4dz[.]ddns[.]net
mohamedamine[.]ddns[.]net
mohamedhg[.]no-ip[.]org
mohamednjrat111[.]no-ip[.]biz
mohammad2002[.]no-ip[.]biz
mohammadhk[.]ddns[.]net
mohammed22468[.]no-ip[.]biz
mohammed93mahdi[.]ddns[.]net
mohammedwasib[.]ddns[.]net
mohfort[.]ddns[.]net
mohmad[.]myftp[.]biz
mohmdnor[.]ddns[.]net
mohsanali79355[.]ddns[.]net
mohsenfaz[.]ddns[.]net
moji1936[.]ddns[.]net
mokhter222029[.]ddns[.]net
moktarpicaasrinabil[.]zapto[.]org
momen-swesi[.]no-ip[.]biz
momo2015[.]duckdns[.]org
mon009[.]no-ip[.]biz
monitoring007[.]zapto[.]org
moonmar10[.]no-ip[.]biz
moosio[.]no-ip[.]biz
moslim[.]ddns[.]net
mostafaafroto0[.]ddns[.]net
motoshi[.]zapto[.]org
moussa-hak[.]no-ip[.]biz
mphp[.]hopto[.]org
mpt1969[.]ddns[.]net
mrblacklife[.]ddns[.]net
mrclone97[.]ddns[.]net
mrgnet[.]ddns[.]net
mrkriper3331[.]zapto[.]org
mrm2[.]ddns[.]net
mrreda98[.]ddns[.]net
msficecream[.]ddns[.]net
msn-web[.]ddnsking[.]com
msn79[.]ddns[.]net
mstar[.]ddns[.]net
mster0102[.]no-ip[.]biz
mstfa10[.]ddns[.]net
msupdate[.]myvnc[.]com
murryapplicazione[.]no-ip[.]org
muxamilu[.]hopto[.]org
mwanika[.]no-ip[.]biz
myaw[.]no-ip[.]biz
myfreerat[.]ddns[.]net
myfrenid2x[.]zapto[.]org
myhost123[.]myftp[.]biz
myillusion02[.]hopto[.]org
myonline[.]no-ip[.]biz
mypy23[.]ddns[.]net
mzgerges[.]no-ip[.]biz
nademhack[.]no-ip[.]org
nadineemma[.]servegame[.]com
namandroidk63[.]zapto[.]org
napaixonado[.]ddns[.]net
nassahsliman[.]ddns[.]net
nemesis2017[.]zapto[.]org
netflix-ip[.]hopto[.]org
new777[.]ddns[.]net
newword[.]serveblog[.]net
newxor2[.]no-ip[.]org
nexmopro830[.]ddns[.]net
ninabounita[.]ddns[.]net
ninjabird29[.]myvnc[.]com
nirajpawar1997[.]ddns[.]net
njesra[.]ddns[.]net
nododg[.]ddns[.]net
nohacker[.]ddns[.]net
noiphackk[.]ddns[.]net
noipjajaja[.]ddns[.]net
noussa[.]no-ip[.]biz
nowgirlas[.]ddns[.]net
noxrr[.]ddns[.]net
nulldoesnotexist[.]duckdns[.]org
oday1995[.]zapto[.]org
oko[.]gotdns[.]ch
omar[.]no-ip[.]biz
oneriakosa[.]ddns[.]net
opt91[.]ddns[.]net
orihacker[.]ddns[.]net
osamarizk[.]ddns[.]net
osammer0asmam3a[.]ddns[.]net
osmsalem[.]ddns[.]net
ospr[.]publicvm[.]com
oussama1997[.]ddns[.]net
oussamadj1997[.]ddns[.]net
ovirus[.]ddns[.]net
owsen[.]ddns[.]net
paaradowx[.]hopto[.]org
papasystem[.]no-ip[.]org
parrot01[.]hopto[.]org
pars[.]ddns[.]net
persir[.]no-ip[.]biz
petermohsenvi2[.]hopto[.]org
pfijsp[.]noip[.]me
phantom94[.]ddns[.]net
photoeditor[.]ddns[.]net
photofix[.]hopto[.]org
pianotiles2[.]ddns[.]net
pimpdaddy[.]myq-see[.]com
pippo86[.]no-ip[.]biz
playstore[.]ddns[.]net
portmeim[.]ddns[.]net
premium007[.]zapto[.]org
priyakumari[.]ddns[.]net
profmilf[.]zapto[.]org
prohacker[.]freedynamicdns[.]org
projectp[.]ddns[.]net
proview[.]ddns[.]net
pruebasernesto[.]ddns[.]net
puplicdsl[.]ddns[.]net
qq376552030[.]ddns[.]net
qwerty1212[.]ddns[.]net
r00t[.]myftp[.]biz
r3cxw[.]ddns[.]net
r90[.]no-ip[.]biz
radouan123[.]hopto[.]org
rafkin85[.]ddns[.]net
rahimtrx[.]hopto[.]org
raliphesus[.]ddns[.]net
rameezmaster[.]ddns[.]net
randsnaira[.]dnsdynamic[.]com
rarwindow[.]no-ip[.]biz
rat[.]capsulelab[.]us
ratforandroid[.]ddns[.]net
rds11[.]ddns[.]net
recycled[.]no-ip[.]org
redckard[.]ddns[.]net
redcode[.]ddns[.]net
reddemon[.]ddns[.]net
refsa[.]duckdns[.]org
reich666[.]ddns[.]net
reich777[.]ddns[.]net
remoteip999[.]ddns[.]net
replace[.]duckdns[.]org
rinalditeam[.]ddns[.]net
rmk133[.]hopto[.]org
rmx2121[.]ddns[.]net
rockrock[.]ddns[.]net
rok13198666[.]no-ip[.]biz
ron1372[.]ddns[.]net
royalhacker[.]zapto[.]org
rpshowpick[.]ddns[.]net
rpswlrkgkarp[.]p-e[.]kr
rumpelztinzkin[.]sytes[.]net
rustyash[.]no-ip[.]biz
rzra51126[.]ddns[.]net
s[.]ddns[.]net
s[.]leas[.]im
s3b4s[.]noip[.]me
s3rv3randr0id[.]no-ip[.]biz
sabbah[.]duckdns[.]org
sadaq[.]ddns[.]net
saiber-far68[.]ddns[.]net
saighinissou[.]ddns[.]net
sajadianh[.]ddns[.]net
sajjad1994[.]ddns[.]net
sajjadnassar3[.]no-ip[.]biz
salah067[.]hopto[.]org
salarkalat[.]ddns[.]net
salemaziz[.]hopto[.]org
samdzbba[.]ddns[.]net
samersamerz[.]no-ip[.]biz
samira[.]no-ip[.]biz
sammuiyer[.]ddns[.]net
samoomalik[.]no-ip[.]biz
samsung[.]apps[.]linkpc[.]net
samuseucu[.]ddns[.]net
samy777[.]no-ip[.]biz
sandhusim001[.]ddns[.]net
sara17911[.]no-ip[.]org
sara19918[.]ddns[.]net
sarahwygan[.]no-ip[.]biz
saraia[.]ddns[.]net
sarasisi[.]no-ip[.]org
sasi546454[.]hopto[.]org
satahezub[.]no-ip[.]info
sava33[.]ddns[.]net
sazan765[.]ddns[.]net
scropion20078[.]no-ip[.]biz
secureline2244[.]ddns[.]net
securepurpose[.]no-ip[.]info
securitytests[.]ddns[.]net
securitytestt[.]ddns[.]net
sersaisa[.]ddns[.]net
server4update[.]serveftp[.]com
service[.]zosys[.]net
servidor23[.]ddns[.]net
servr[.]hopto[.]org
sesizkal32[.]no-ip[.]biz
setts[.]no-ip[.]org
seven1[.]ddns[.]net
seyf2017[.]linkpc[.]net
shabbushah[.]duckdns[.]org
shahabhacker[.]ddns[.]net
shahidsajan[.]no-ip[.]biz
shakaky[.]ddns[.]net
shanks[.]no-ip[.]biz
sharawy74[.]hopto[.]org
sharmayash[.]no-ip[.]biz
sheamusking34[.]no-ip[.]biz
sherlockholmes[.]duckdns[.]org
shgt[.]tk
shoo2018[.]no-ip[.]org
shop10[.]ddns[.]net
shosh[.]ddns[.]net
showj[.]f3322[.]net
silenthunter3021[.]no-ip[.]org
simbabweratte[.]hopto[.]org
skinchanger[.]hopto[.]org
skipy[.]ddns[.]net
skituljko[.]mooo[.]com
skylex123[.]hopto[.]org
slavikkalinovskiy[.]ddns[.]net
slayslay[.]duckdns[.]org
smiix2012[.]ddns[.]net
smk22[.]jkt[.]net
snaider[.]hopto[.]org
sniper-f[.]ddns[.]net
sniperviruse3[.]hopto[.]org
sniperyakub[.]ddns[.]net
snopi[.]no-ip[.]biz
socialplus[.]ddns[.]net
sofemm[.]no-ip[.]biz
somenormalguy[.]duckdns[.]org
sondres1[.]ddns[.]net
sonkar412[.]duckdns[.]org
sorry[.]duckdns[.]org
sosg77[.]ddns[.]net
soso[.]noip[.]us
spicymemes[.]duckdns[.]org
spiel007[.]ddns[.]org
spofy[.]ddns[.]net
spynote-web[.]dynu[.]com
sramic[.]ddns[.]net
ssjf[.]myftp[.]biz
ssxdswe[.]no-ip[.]org
standby1537[.]duckdns[.]org
storing[.]hopto[.]org
strateg[.]ddns[.]net
stux0net[.]no-ip[.]org
suckmordecock[.]duckdns[.]org
superlegitratvirus[.]ddns[.]net
svn-01[.]ddns[.]net
sweetman2020[.]no-ip[.]biz
system32[.]com
taha100iq[.]hopto[.]org
taherhacker[.]hopto[.]org
tak[.]no-ip[.]info
takpar67[.]no-ip[.]biz
taras1928[.]ddns[.]net
targi01[.]hopto[.]org
tatacall[.]servebeer[.]com
tataline[.]hopto[.]org
teda11[.]zapto[.]org
tedy1993[.]ddns[.]net
telegram-stickers[.]noip[.]me
telegram-tools[.]no-ip[.]biz
teolandia[.]no-ip[.]biz
test[.]no-ip[.]org
test[.]pagez[.]kr
test145[.]ddns[.]net
test29[.]ddns[.]net
testan[.]ddns[.]net
testandro[.]ddns[.]net
testapkk[.]hopto[.]org
testkps[.]ddns[.]net
testsr[.]ddns[.]net
testsss[.]ddns[.]net
testtwo2[.]ddns[.]net
testxy[.]ddns[.]net
th3expert[.]3utilities[.]com
thaer[.]no-ip[.]biz
theblack16[.]ddns[.]net
thedroidjack[.]ddns[.]net
thegangsterrap[.]noip[.]me
thegod2[.]ddns[.]net
thekillers[.]ddns[.]net
thelostan[.]ddns[.]net
themayhen23[.]no-ip[.]org
tnaxin[.]msns[.]cn
tobytori18[.]myftp[.]org
tom928[.]no-ip[.]biz
tomyyk[.]ddns[.]net
tonyjony[.]ddns[.]net
topmax[.]myq-see[.]com
toyman6699[.]no-ip[.]info
trythelast[.]no-ip[.]org
ttn10[.]no-ip[.]org
tunisvista[.]3utilities[.]com
udown[.]ddns[.]net
ufologlyly[.]ddns[.]net
umar14344[.]ddns[.]net
unknownuser[.]no-ip[.]biz
updater[.]myftp[.]org
updatesystem[.]dynu[.]com
updatexxx[.]hopto[.]org
usa[.]myftp[.]biz
usa20002015[.]ddns[.]net
usa2222[.]ddns[.]net
userframer[.]sytes[.]net
usernamegopro1[.]ddns[.]net
usmh[.]myq-see[.]com
uzzal619[.]viewdns[.]net
vajausing[.]dynu[.]com
vb[.]blogsyte[.]com
vego[.]ddns[.]net
vetalamator1[.]ddns[.]net
viagra[.]jumpingcrab[.]com
victim[.]no-ip[.]org
vigo[.]hopto[.]org
vikas[.]no-ip[.]biz
villevalo[.]chickenkiller[.]com
vipmustafa[.]no-ip[.]info
voda[.]no-ip[.]org
volnado[.]sytes[.]net
vpn0[.]ddns[.]net
vwelxv[.]ddns[.]net
w0rm32[.]ddns[.]net
war10ck[.]serveftp[.]com
warl10ck[.]ddns[.]net
warrirrs[.]no-ip[.]org
wasawalid[.]hopto[.]org
wassam100[.]ddns[.]net
wasxmrtdub[.]ddns[.]net
watzeb[.]ddns[.]net
wcvwcv[.]picp[.]net
webhack2017[.]ddns[.]net
webi7[.]ddns[.]info
weedforlifehacker[.]ddns[.]net
welcomeheretomept[.]ddns[.]net
whatsradar[.]no-ip[.]biz
wildu[.]ddns[.]net
williettinger[.]cc
win32[.]ddns[.]net
windows12345[.]ddns[.]net
windows7trojan[.]ddns[.]net
winlogen[.]duckdns[.]org
winserver[.]dlinkddns[.]com
woaisue[.]3322[.]org
wogusnb[.]no-ip[.]info
wombocombo[.]mooo[.]com
wtfwtf[.]duckdns[.]org
www[.]177mu[.]cn
wxf2009817[.]f3322[.]net
x300x300xx[.]no-ip[.]org
x64-windows[.]ddns[.]net
xa1newold[.]hopto[.]org
xatar12[.]ddns[.]net
xilto[.]duckdns[.]org
xingyuekeji[.]f3322[.]net
xmohcine[.]ddns[.]net
xmppegy[.]com
xnxx123[.]publicvm[.]com
xomro[.]no-ip[.]biz
xos1982[.]ddns[.]net
xtiger007[.]ddns[.]net
xyz2145[.]ddns[.]net
xzoro2016[.]no-ip[.]info
yamsohe[.]ddns[.]net
yangweb[.]f3322[.]net
yassinescaleo[.]ddns[.]net
yelp01[.]f3322[.]org
yorkiepet[.]ddns[.]net
yossf2014[.]no-ip[.]biz
you[.]duckdns[.]org
younix[.]ddns[.]net
yousefehab11[.]ddns[.]net
youseffathii[.]ddns[.]net
youssef-1234[.]hopto[.]org
yuosaf1993[.]ddns[.]net
yurimacedo1[.]ddns[.]net
za3blawy[.]ddns[.]net
zaboza2020[.]ddns[.]net
zadehasan1[.]ddns[.]net
zaheerkhan786[.]ddns[.]net
zakifr[.]no-ip[.]biz
zakoo1[.]zapto[.]org
zal75zk[.]ddns[.]net
zaliminxx[.]duckdns[.]org
zaqatala[.]dynu[.]com
zecovpnhasan1123[.]ddns[.]net
zennone[.]ddns[.]net
zero228[.]ddns[.]net
zoheirdroidjack[.]zapto[.]org
zokor-zokor[.]ddns[.]net
zola123[.]no-ip[.]biz
zongkahani[.]no-ip[.]biz
zouhr9[.]hopto[.]org
zxczxczxc[.]ddns[.]net