my tweets are severely limited by my lack of understanding of what I am doing.
There were SMB exploit remote access trojans pre WannaCry using DoublePulsar, I documented one here: https://doublepulsar.com/eternalpot-lessons-from-building-a-global-nation-state-smb-exploit-honeypot-infrastructure-3f2a0b064ffe …https://twitter.com/allanfriedman/status/878359174035394561 …
Hmm, interesting. The DNS is valid, your ISP or security systems must be mangling it.