Suspicious new domains on 144.76.207.226 - Oct 29, 2013

Tue, Oct 29 2013
#DhiaLite - New suspcious domains popped on 144.76.207.226 for the past 2 days beginning on Oct 28th.

Traffic surge, potential EK domains.

Confirmed Magnitude Exploit Kit thanks to @Set_Abominae

2LDS are all registered on Oct 28th and 29th

4togenhaym.info 2013-10-29
3togenhaym.info 2013-10-29
2togenhaym.info 2013-10-29
1togenhaym.info 2013-10-29
14valubin.info 2013-10-28

Sample subdomains on 144.76.207.226. New subdomains will likely keep appearing on this IP.

ycmxdqcyhqgr.1togenhaym.info
xwnhioeoj.1togenhaym.info
xspinzduda.4togenhaym.info
uwvopccrbsc.2togenhaym.info
ujvhcutg.1togenhaym.info
txojznrqui.1togenhaym.info
sprmamivujyo.2togenhaym.info
rrildydcvdwr.3togenhaym.info
qtuowoycg.3togenhaym.info
qlsekukvhdxy.3togenhaym.info
papnehwlz.2togenhaym.info
oywndxmrfujh.3togenhaym.info
mtbrxdewrc.3togenhaym.info
mldocegf.2togenhaym.info
jrukvvvia.1togenhaym.info
jgrmjnqfebm.3togenhaym.info
irmszmesjs.1togenhaym.info
iqzwjlcrpv.2togenhaym.info
iqbellcafxw.2togenhaym.info
igtyacxs.1togenhaym.info
hrbphllyc.3togenhaym.info
hiuyhrhttz.2togenhaym.info
hhiethpj.3togenhaym.info
gxerjhro.2togenhaym.info
gunlxyfazn.3togenhaym.info
egqrxvlgcvw.3togenhaym.info
dxydjbjhz.1togenhaym.info
blnnsmgid.2togenhaym.info
acxreqwl.3togenhaym.info
zygqdbgtv.14valubin.info
yxiqabwn.14valubin.info
xvbajwkx.14valubin.info
wwahfqtjy.14valubin.info
wohuqampjnn.14valubin.info
vdhxavnix.14valubin.info
ufpopalcf.1togenhaym.info
tqdwskqomy.14valubin.info
jwvtkjpldhq.14valubin.info
jrqffkmbw.1togenhaym.info
idwyejnn.14valubin.info
ictqazqevpq.14valubin.info
busebpfwdnuk.14valubin.info
bblulbiyza.14valubin.info

END