#DhiaLite- Suspicious domains Sep 3rd, 2013

Tue, Sep 3rd 2013
#DhiaLite - Suspicious domains, possibly BHEK that have resolved or are resolving to 46.4.150.122, 192.241.221.74, 216.240.163.157
IPs spotted by @VriesHd
Some domains have switched to 188.93.211.218.
All are registered in July 2013 or on Sep 2nd and Sep 3rd.

#domains
cs2.executingmaiden.com
gexetoravuz.com
hagnaezsw.com
harshnesspresentations.biz
ht1okkc5o.com
kqik7zagmlzz7v.com
ns1.vastlush.biz
ns2.vastlush.biz
satariispecimen.biz
v7r3aebr.com
www.gexetoravuz.com
www.harshnesspresentations.biz

END