Thanks to this guy for the sample
Resolved : [t7v4d.com] To [108.170.24.42]
Server: t7v4d.com:4040
Now talking in ##tnt
Topic is ‘!np hxxp://3rbcool.net/g1.exe DF37A37D9E33FB9904235855863AA5D5 -r’
hosting infos:
http://whois.domaintools.com/108.170.24.42