new cryptojacking sigs

cryptojacking_signatures.yar

@@ -27,6 +27,30 @@ rule crypto_jacking_signatures {
       $s10 = "webmine.pro"
       $s11 = "miner.start"
       $s12 = "allfontshere.press"
+      $s13 = "freecontent.bid"
+      $s14 = "freecontent.date"
+      $s15 = "freecontent.faith"
+      $s16 = "freecontent.party"
+      $s17 = "freecontent.science"
+      $s18 = "freecontent.stream"
+      $s19 = "freecontent.trade"
+      $s20 = "hostingcloud.accountant"
+      $s21 = "hostingcloud.bid"
+      $s22 = "hostingcloud.date"
+      $s23 = "hostingcloud.download"
+      $s24 = "hostingcloud.faith"
+      $s25 = "hostingcloud.loan"
+      $s26 = "jshosting.bid"
+      $s27 = "jshosting.date"
+      $s28 = "jshosting.download"
+      $s29 = "jshosting.loan"
+      $s30 = "jshosting.party"
+      $s31 = "jshosting.racing"
+      $s32 = "jshosting.review"
+      $s33 = "jshosting.stream"
+      $s34 = "jshosting.trade"
+      $s35 = "jshosting.win"
+
    condition:
       any of them
 }