Don't have Telegram yet? Try it now!
http://blog.davidvassallo.me/2017/04/04/threat-hunting-using-dns-indicators/
Threat hunting using DNS indicators