Possible EK domains - Nov 16, 2013

Sat, Nov 16 2013
#DhiaLite - Suspicious subdomains appeared yesterday and today on
80.243.177.153
80.243.177.154
80.243.177.155
80.243.177.156

Possibly Styx EK

Confirmed Styx thanks to @MalwareSigs

Subdomains are under the 2LDs below that are all registered on Nov 15th and Nov 16th 2013

quali-ave.info 2013-11-16
snowbo-de.info 2013-11-16
apo-des.info 2013-11-16
la-marqu.info 2013-11-16
unive-de.info 2013-11-16
t-couvre.info 2013-11-16
missi-is.info 2013-11-16
organizati-its.info 2013-11-16
regio-intergov.info 2013-11-16
may-asa.info 2013-11-16
establish-on.info 2013-11-16
ap-was.info 2013-11-16
productivi-organizat.info 2013-11-16
th-asia.info 2013-11-16
wit-thsep.info 2013-11-16
info-affilia.info 2013-11-16
an-servic.info 2013-11-16
chapter-event.info 2013-11-16
pled-manua.info 2013-11-16
faq-bylaw.info 2013-11-16
oat-an.info 2013-11-16
on-tsco.info 2013-11-16
fraterni-bas.info 2013-11-16
nation-servi.info 2013-11-16
cook-allreci.info 2013-11-15
of-hom.info 2013-11-15
b-milli.info 2013-11-15
an-revie.info 2013-11-15
al-rate.info 2013-11-15
foo-video.info 2013-11-15
ho-t.info 2013-11-15
tip-an.info 2013-11-15
recipe-cookin.info 2013-11-15
plac-for.info 2013-11-15

#Sample domains on
80.243.177.153
80.243.177.154
80.243.177.155
80.243.177.156

info-affilia.info
fraterni-bas.info
on-tsco.info
oat-an.info
ho-t.info
unive-de.info
chapter-event.info
organizati-its.info
regio-intergov.info
foo-video.info
la-marqu.info
b-milli.info
t-couvre.info
pled-manua.info
th-asia.info
ap-was.info
apo-des.info
an-servic.info
faq-bylaw.info
recipe-cookin.info
al-rate.info
missi-is.info
tip-an.info
productivi-organizat.info
snowbo-de.info
may-asa.info
cook-allreci.info
wit-thsep.info
nation-servi.info
of-hom.info
quali-ave.info
an-revie.info
establish-on.info
plac-for.info

END