Advertisement
DhiaLite

Compromised GoDaddy domains part 2 - Nov 2, 2013

Nov 2nd, 2013
268
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.08 KB | None | 0 0
  1. Sat, Nov 2, 2013
  2. #DhiaLite - Another new campaign of malicious subdomains hosted on 93.170.137.9 injected under compromised GoDaddy domains.
  3.  
  4. Subdomains have been resolving to 93.170.137.9 for the past 5 days and still going. It is likley to see more subdomains pop on this IP.
  5.  
  6. Possible Neutrino EK.
  7. http://urlquery.net/report.php?id=7306260
  8.  
  9. #Compromised 2LDs:
  10.  
  11. 1972emerald.com
  12. aerogifts.mobi
  13. aerometropolis.com
  14. aeroonline.us
  15. allergyzapper.com
  16. angelsrelief.org
  17. aviationyellowpages.mobi
  18. closdelafortune.com
  19. creativeinteriorsolutions.us
  20. cumswallowers.info
  21. faygomobile.com
  22. freeorslave.org
  23. ifthejackbootfits.com
  24. nightingaleforgovernor.net
  25. passaicarea.com
  26. pawntiquisale.com
  27. petertimm.com
  28. preciousantiquetreasurechest.com
  29. preciousantiquetreasures.com
  30. prymesecurity.com
  31. prymesurveillance.com
  32. robertspinelli.com
  33. scienceequipmentwholesale.com
  34. scientificequipmentwholesale.com
  35. seasandsun.mobi
  36. securetronsystems.com
  37. tigerwest.info
  38. truckstrailersandequipmentsales.com
  39. zumoz.biz
  40.  
  41. #Sample subdomains on 93.170.137.9:
  42.  
  43. mentionerstroikan.ifthejackbootfits.com
  44. guadelope.ifthejackbootfits.com
  45. gedoseerd.ifthejackbootfits.com
  46. autorecancrinitesyenite.petertimm.com
  47. zederdrone0.closdelafortune.com
  48. widthmodulation.creativeinteriorsolutions.us
  49. valopydll.creativeinteriorsolutions.us
  50. valoisampaanisntperhettn.cumswallowers.info
  51. unexplainably.closdelafortune.com
  52. umewapaglucagon.closdelafortune.com
  53. sishallhon.creativeinteriorsolutions.us
  54. shamaaneja-takaimam.creativeinteriorsolutions.us
  55. rehbergverschoenernden.zumoz.biz
  56. rechtsdrehung.creativeinteriorsolutions.us
  57. prohaste-inndq.closdelafortune.com
  58. ladrerie-virtaviivaiselle.closdelafortune.com
  59. intervjua-kokswerk.cumswallowers.info
  60. fruitierstragicoh.creativeinteriorsolutions.us
  61. entzweigehen.cumswallowers.info
  62. curvedness.zumoz.biz
  63. chelimskybrdbakk.creativeinteriorsolutions.us
  64. cataphoric.closdelafortune.com
  65. auslandslieferanten.cumswallowers.info
  66. asteriidbcsystems8.zumoz.biz
  67. asciimonunnatuerlicheren.cumswallowers.info
  68. alinderrozliczac.closdelafortune.com
  69. 0they-intelligenetics.cumswallowers.info
  70. fortashb.tigerwest.info
  71. zoutpanwardsback.tigerwest.info
  72. wasterfaksiesdassitu.tigerwest.info
  73. vincireoddawano.aviationyellowpages.mobi
  74. vierailevillegonnabeentjie.seasandsun.mobi
  75. undigestifyable.aerogifts.mobi
  76. tetrachical-disgelo.tigerwest.info
  77. symboliksi-einschreitender.aerogifts.mobi
  78. sixnationsuburban.aerogifts.mobi
  79. retorqueeseinsame.aviationyellowpages.mobi
  80. reprobaoikeustaistelun.aviationyellowpages.mobi
  81. niekompletne-uitgespoelden.aerogifts.mobi
  82. mirtebomezycom.tigerwest.info
  83. maustettuja-widu.zumoz.biz
  84. maish.zumoz.biz
  85. mactas.aviationyellowpages.mobi
  86. machinisme.tigerwest.info
  87. kateketevagarosamente.aviationyellowpages.mobi
  88. gekidani.tigerwest.info
  89. displantedpseudobankruptcy.zumoz.biz
  90. derager.aviationyellowpages.mobi
  91. composterontdesabrida.tigerwest.info
  92. tyrellpbasbengerader.aerometropolis.com
  93. twincitiesfamiliebnd.aerometropolis.com
  94. trimmerbeam-neargrowing.aerometropolis.com
  95. stonavat.aerogifts.mobi
  96. spassverderber-filtersystem.aerogifts.mobi
  97. saas.aerometropolis.com
  98. odrzuconamouerasque.seasandsun.mobi
  99. ichizoku-bevlijtigd.aeroonline.us
  100. gruenliches-misdemean.aerometropolis.com
  101. gevechtsklarepowachac.aeroonline.us
  102. frostbestaendiges.aeroonline.us
  103. ferruccistaffellaufs.aerometropolis.com
  104. drivingpowerjitcpsn.aerometropolis.com
  105. crossref.aeroonline.us
  106. biegroman.allergyzapper.com
  107. naaapsters.truckstrailersandequipmentsales.com
  108. zalvingeheeenzkruisvaan.nightingaleforgovernor.net
  109. unpropitiable-netrcfile.1972emerald.com
  110. recarbonize.nightingaleforgovernor.net
  111. professiondegree.nightingaleforgovernor.net
  112. ophysbystandsraad.1972emerald.com
  113. mandibuliform-begaava.1972emerald.com
  114. helbekkmoenvier.truckstrailersandequipmentsales.com
  115. endopsychic.truckstrailersandequipmentsales.com
  116. dissolv-vestnkin.nightingaleforgovernor.net
  117. bigmaybelle.faygomobile.com
  118. asnblockas-skabrat.1972emerald.com
  119. algoritmicatariefvasstelling.nightingaleforgovernor.net
  120. aferkamanairis-khawley.1972emerald.com
  121. 1khiongoperatically.1972emerald.com
  122. tuk1-inkorttentschang.freeorslave.org
  123. kadig.truckstrailersandequipmentsales.com
  124. zurueckverwandelt.pawntiquisale.com
  125. unpartiz.securetronsystems.com
  126. tweed0tuingieboerenkool.robertspinelli.com
  127. squassasse-kinderzorg.truckstrailersandequipmentsales.com
  128. sininseisiipipari.angelsrelief.org
  129. sewerlik.angelsrelief.org
  130. repetitiously.prymesecurity.com
  131. onaresom.scienceequipmentwholesale.com
  132. naiwekakeskustapoliitikoista.securetronsystems.com
  133. matroosfonteinkuvittelisin.truckstrailersandequipmentsales.com
  134. marcand-kanamaru.preciousantiquetreasurechest.com
  135. littlefoothumoristes.prymesecurity.com
  136. imputovaltionobligaatioiden.pawntiquisale.com
  137. hypogeanpahuuden.angelsrelief.org
  138. etirerezmesmerism.angelsrelief.org
  139. eritteitlistmakers.truckstrailersandequipmentsales.com
  140. dilithiunonpirated.angelsrelief.org
  141. detectordisinfector.scientificequipmentwholesale.com
  142. compurgador.truckstrailersandequipmentsales.com
  143. ciljeve6vandyke.preciousantiquetreasures.com
  144. chorwatow.prymesurveillance.com
  145. chibbarobildungsinvestitionen.passaicarea.com
  146. bleachabba0583siirryt.scienceequipmentwholesale.com
  147. ascophorpljacka1.prymesurveillance.com
  148.  
  149. END
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement