https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/suspicious/dns_tunneling_service.txt

Domains that did not resolve;

btunnel.co.in
btunnel.in
dnstunnel.run
packetriot.net
pktriot.net