Compromised GoDaddy domains - Oct 22, 2013

Tue, Oct 22 2013
#DhiaLite - New campaign of malicious subdomains hosted on 144.76.161.251 injected under compromised GoDaddy domains.
Active since Oct 20th

#Sample subdomains on 144.76.161.251

impetravissimus.pointecapital.org
hayforks.pointecapital.org
dispreading-dmos.pointecapital.us
teletypistsautumnale.pointecapitalllc.com
voimapolitiikalla.ring-a-shrink.com
vispoel.autoinsurancerateshopper.com
tidsdelningssystem.yourhealthinsurancebroker.com
tegenlic1marrara.scan-o-magic.com
sretrauqalkylcyanide.ptecap.com
shuukyoumesseji.globalmobiletopup.net
schauhaeuservoorkeurrecht.insuranceratechecker.com
planeettojen-guineer.ptecapfoundation.com
pixwinwidth.67400.net
motorhead.scan-o-matic.com
monipuolisuutta.pointecapllc.com
moheganm.ring-a-shrink.com
lucratievergeschermutseld.speedfitnessusa.com
kamosidaportendo.yinglunkezhan.net
isopelle.yinglunkezhan.net
fuheikoutrekkplaster.maryperrymedia.com
fleuves.ringashrink.com
extralarge.pointellc.com
excessiefst-wspolpracujacych.newportpoetry.com
datensprmanipulerer.maryperrymedia.com
chiudermiimagefield.scan-o-matic.com
abgezehrthandlungsfreiheit.pointefund.com
9esquivel-lpikulkukaupunki.pointellc.com
moskovaakintristem.dastechsolutions.com
kodaka1soprassede.dastechsolutions.com
ineenkro.fantasyrundown.com
familienzuschuesse.canineclassicboulder.org
dnatsswe.penatzer.com
depreciatifsportanzugs.makerealcashrealfast.com
4valedecache.gwinnettcountyhomebuyer.com
1mustaff.proudhomes.com

END