Domains that are included from https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/suspicious/web_shells.txt

c99php.com
cmd.pl
localroot.net
perlbot.pl
r57.biz
r57.gen.tr
r57c99.com
telnet.pl
xshellz.com