https://raw.githubusercontent.com/stamparm/maltrail/master/trails/static/suspicious/dns_tunneling_service.txt

Domains that are blocked by oisd;

btunnel.co.in
btunnel.in
localto.net
localtonet.com