Domains that where included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/malware/limerat.txt

0.tcp.ngrok.io
codertricks.zapto.org
doverenewables.watchdogdns.duckdns.org
holydns.warzonedns.com
hustleking.myddns.me
ipcheck.servehttp.com
netpipe.warzonedns.com
newnewlt.duckdns.org
ngrok.dalao.pub
office365update.duckdns.org
oxcds.duckdns.org
projectblackhat.com
xyzass.duckdns.org