Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Sun, Nov 10, 2013
- #DhiaLite - New campaign of malicious subdomains hosted on 188.138.70.191 injected under compromised GoDaddy domains.
- Subdomains have been resolving to 188.138.70.191 for the past 5 days and still going as of today. Likely to see more subdomains appear on this IP.
- #Compromised 2LDs:
- aperfectjobsite.com
- bucyrusohrealestate.com
- mywordresume.com
- perfectjobsolution.com
- vibations.com
- vibegear.com
- vibesgear.com
- vibrationgear.com
- vibrationsgear.com
- #Sample subdomains on 188.138.70.191:
- yhnn.bucyrusohrealestate.com
- mjmjg.bucyrusohrealestate.com
- nyufj.aperfectjobsite.com
- nmjhum.mywordresume.com
- bgvtrg.perfectjobsolution.com
- hnmhnm.mywordresume.com
- fbgvfrt.perfectjobsolution.com
- nmuyj.vibrationsgear.com
- hnhgyuj.vibrationsgear.com
- yjnyjn.aperfectjobsite.com
- btyhyt.vibrationgear.com
- ntydjn.vibesgear.com
- muyik.vibegear.com
- nyhtjn.vibesgear.com
- gvre.vibations.com
- umkuj.vibegear.com
- rhtrt.vibations.com
- END
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
