............................................________
....................................,.-'"...................``~.,
.............................,.-"..................................."-.,
.........................,/...............................................":,
.....................,?......................................................,
.................../...........................................................,}
................./......................................................,:`^`..}
.............../...................................................,:"........./
..............?.....__.........................................:`.........../
............./__.(....."~-,_..............................,:`........../
.........../(_...."~,_........"~,_....................,:`........_/
..........{.._$;_......"=,_......."-,_.......,.-~-,},.~";/....}
...........((.....*~_......."=-._......";,,./`..../"............../
...,,,___.`~,......"~.,....................`.....}............../
............(....`=-,,.......`........................(......;_,,-"
............/.`~,......`-...................................../
.............`~.*-,.....................................|,./.....,__
,,_..........}.>-._...................................|..............`=~-,
.....`=~-,__......`,.................................
...................`=~-,,.,...............................
................................`:,,...........................`..............__
.....................................`=-,...................,%`>--==``
........................................_..........._,-%.......`
...................................,
Hello security community. I’ve compiled the following information for your viewing pleasure. I hope this isn’t as misconstrued as http://www.secureworks.com/research/threats/htran/. This information is by no means the result of a singular analysis of a public Chinese hacking utility. At least three distinct threat groups were profiled in Joe Stewart’s analysis; however, no distinction was paid to the actual actors themselves as each was identified by a single means. I’m not going to pay homage to the other two actors, as I’m sure the US government and other private entities will have enough problems recovering from this singular data exposure. My motivation is purely selfless in nature and I only wish the security community to improve upon what has already been done in this realm. Most of the security community is a fraud and continues to subsist on half-assed analyses and bogus data. All information was compiled from open sources and leaked information; no customer-based data was used for the analysis. My sincerest apologies go out to those with ongoing monitoring operations on any of the IP addresses involved. These attacks have targeted US and Canadian companies almost exclusively for at least five years; the tools, tactics, and procedures have changed very little during that timeframe and continue to be extremely effective.
Several private companies currently monitor several of these IP addresses for the purpose of supplying stolen information back to the affected companies. Stolen data is effectively held hostage for the price of doing business with the company in the know. On the other hand if you’re lucky, the government will notify you of a breach within six months or less. The more likely scenario though is that you will never hear a thing from anyone unless your business is of significant financial importance or you can afford to pay the exorbitant price of the private companies. Currently the FBI, AF OSI, and NCIS may provide these ‘notifications’ to affected companies. In recent years each branch has become significantly more segmented and isolated as such the overall quality of the information provided to the affected companies has degraded. Private entities continue to prosper off of this information to the tune of millions of dollars annually and the affected companies continue to leak money and data to the attackers. I’m not of the mindset to define the attacker or their motivations; however, it’s easy to gleam that the interests are economic in nature and purely financial in motivation. If your company is one outlined in the list below chances are you’re doing business in the Peoples’ Republic of China or plan to shortly. Negotiations are a common target for economically motivated hackers and hence email and other relevant information pertaining to contract negotiation data will be taken. If you currently conduct business with the PRC chances are that your organization has knowingly or unknowingly been compromised.
The domains presented below represent only a small fraction of those that are currently active and reflect only the activities of a singular group of individuals. The data has not been truncated and reflects several months of monitoring; non-routable IP addresses and google/yahoo domains are normal for inactive domains. If you don’t know what to do with the information provide in this leak you deserve to continue to get fucked as you already have been, and you probably will be once again as tactics change. This should not be construed as the totality of ongoing activity only a harbinger of what’s to come. I have no allegiances, I make no money, I am not legion.
-RSA Employee #15666
----------------Begin Data----------------
08elec.purpledaily.com 64.233.169.147
09back.purpledaily.com 127.0.0.1
33bees.servebeer.com 220.128.105.177
3ml.infosupports.com 255.255.255.255
7cback.afraid.org 67.215.65.132
a-af.arrowservice.net 64.233.169.147
a-bne.arrowservice.net 64.233.163.104
a-if.arrowservice.net 64.233.169.147
aam.businessconsults.net 74.125.95.147
aar.bigdepression.net 12.14.129.91
aar.bigdepression.net 64.255.101.100
acli-mail.businessconsults.net 64.233.169.147
acu.businessconsults.net 150.176.164.6
adb.businessconsults.net 208.185.233.163
add.infosupports.com 255.255.255.255
addr.infosupports.com 255.255.255.255
admin.arrowservice.net 165.165.38.19
admin.softsolutionbox.net 74.125.93.105
adt.businessconsults.net 12.185.222.8
adtkl.newsonet.net 72.14.204.147
adtlk.bigish.net 74.14.204.147
aes.infosupports.com 216.15.210.68
aes.infosupports.com 74.93.92.50
af.arrowservice.net 207.46.17.125
afda.businessconsults.net 12.185.222.8
afw.globalowa.com 64.233.169.147
agl.softsolutionbox.net 64.233.169.147
ago.businessconsults.net 63.134.215.218
agru.qpoe.com 68.96.31.136
alarm.arrowservice.net 209.85.227.104
alcan.arrowservice.net 127.0.0.1
alion.businessconsults.net 208.44.242.11
amne.purpledaily.com 64.233.169.147
anglo.arrowservice.net 12.185.222.8
anglo.arrowservice.net 66.102.9.104
aol.arrowservice.net 208.69.32.230
aol.softsolutionbox.net 64.233.169.147
apa.infosupports.com 63.195.112.159
apa.newsonet.net 64.184.2.11
apa.newsonet.net 64.233.169.147
apa.safalife.com 66.228.132.20
apejack.bigish.net 64.233.169.104
apekl.newsonet.net 64.233.169.104
apple.blackcake.net 127.0.0.1
apple.infosupports.com 255.255.255.255
aps.bigdepression.net 255.255.255.255
apss.newsonet.net 64.233.169.147
ara.blackcake.net 208.37.108.211
ara.blackcake.net 255.255.255.255
ara.blackcake.net 64.26.31.5
ara.infosupports.com 208.37.108.211
ara.infosupports.com 255.255.255.255
ara.infosupports.com 64.26.31.5
ara2.blackcake.net 255.255.255.255
ara2.infosupports.com 255.255.255.255
arainfo.bigdepression.net 64.26.31.5
arainfo.infosupports.com 255.255.255.255
argsafhq.blackberrycluter.com 64.233.169.147
armi.arrowservice.net 216.45.6.3
asis.newsonet.net 69.147.76.15
asiv.softsolutionbox.net 12.185.222.8
asp.softsolutionbox.net 74.125.71.105
ass.globalowa.com 64.233.169.147
astone.newsonet.net 74.125.115.147
ati.arrowservice.net 63.134.215.150
ati.globalowa.com 127.0.0.12
ati2.globalowa.com 127.0.0.12
att.infosupports.com 208.44.242.32
att.infosupports.com 64.26.31.5
ausi.businessconsults.net 212.84.113.22
avph.earthsolution.org 209.172.51.139
bab.infosupports.com 255.255.255.255
back.earthsolution.org 127.0.0.1
back.worthhummer.net 127.0.0.18
backup.infosupports.com 255.255.255.255
bah.safalife.com 212.125.200.204
bah.safalife.com 66.162.37.179
bah001.blackcake.net 212.125.200.204
ball.dnsweb.org 127.0.0.1
bat.bigdepression.net 255.255.255.255
bat.blackcake.net 255.255.255.255
bat.infosupports.com 255.255.255.255
bbc.blackcake.net 255.255.255.255
bbh.dnsweb.org 209.172.51.139
bcc.blackberrycluter.com 64.233.169.147
bda.arrowservice.net 208.185.233.163
bee.businessconsults.net 12.38.236.21
bhbt.newsonet.net 64.221.131.174
bksy.businessconsults.net 161.58.177.111
bll.dnsweb.org 127.0.0.1
blue.infosupports.com 255.255.255.255
bmms07.bm.ust.hk 143.89.35.7
bob.dnsweb.org 12.14.129.91
bobo.buisnessconsults.net 127.0.0.1
bot.bigdepression.net 255.255.255.255
bphb.arrowservice.net 127.0.0.60
bswt.purpledaily.com 67.195.160.76
built.arrowservice.net 72.14.254.104
business.chileexe77.com 209.136.47.214
business.infosupports.com 255.255.255.255
buyer.arrowservice.net 127.0.0.1
buz.businessconsults.net 127.0.0.18
caaid.newsonet.net 143.89.56.207
cac.bigdepression.net 24.96.236.181
cac.worthhummer.net 161.58.182.205
caci.blackcake.net 127.0.0.1
caci.businessconsults.net 212.125.200.204
caci.infosupports.com 212.125.200.204
caci.infosupports.com 216.249.111.232
caci.safalife.com 66.162.37.179
caci2.infosupports.com 212.125.200.204
cacq.bigdepression.net 209.172.51.139
cadfait.softsolutionbox.net 66.249.91.104
cais.blackcake.net 255.255.255.255
car1.bigdepression.net 66.228.132.129
carpgallery.longmusic.com 174.36.200.35
carvin.infosupports.com 209.85.229.103
catalog.earthsolution.org 72.167.34.54
cbc.purpledaily.com 64.233.169.147
ccb.blackberrycluter.com 127.0.0.1
ccsukl.purpledaily.com 194.106.162.203
ccsukl.purpledaily.com 72.14.204.104
cdc01.hugesoft.org 64.233.169.1
cdc01.hugesoft.org 64.233.169.147
cdcd.newsonet.net 64.233.169.147
cdd.purpledaily.com 64.233.169.147
center.arrowservice.net 64.233.163.99
center.infosupports.com 255.255.255.255
ceros.buisnessconsults.net 68.96.31.136
chamus.gmailboxes.com 143.89.132.99
chamus.gmailboxes.com 194.106.162.203
chamus.gmailboxes.com 63.162.42.46
chamus.gmailboxes.com 64.233.169.104
chamus.gmailboxes.com 70.90.53.170
chq.newsonet.net 127.0.0.1
cib.businessconsults.net 63.134.215.129
cibuc.blackcake.net 255.255.255.255
citrix.globalowa.com 127.0.0.10
climate.newsonet.net 127.0.0.8
clin.earthsolution.org 161.58.177.111
cman.blackcake.net 66.228.132.20
coco.purpledaily.com 127.0.0.1
cok.purpledaily.com 64.233.169.147
comfile.softsolutionbox.net 61.9.147.196
contact.arrowservice.net 127.0.0.120
contact.ignorelist.com 72.14.213.147
contact.purpledaily.com 12.185.222.8
control.arrowservice.net 208.48.53.218
control.blackberrycluter.com 74.125.77.104
cook.globalowa.com 63.134.215.150
cool.newsonet.net 216.55.83.12
copierexpert.com 207.225.36.69
corp.purpledaily.com 208.44.242.11
count.blackcake.net 255.255.255.255
cov.arrowservice.net 204.100.63.18
covclient.arrowservice.net 204.100.63.18
cow.arrowservice.net 127.0.0.16
cowboy.bigish.net 64.233.169.104
crab.arrowservice.net 203.170.198.56
crazycow.homenet.org 143.89.132.99
crazycow.homenet.org 64.233.169.104
create301.dyndns.info 204.45.228.140
csba.bigdepression.net 255.255.255.255
csc.businessconsults.net 161.58.182.205
csch.infosupports.com 216.47.214.42
csupp.bigish.net 64.126.12.3
ctch.earthsolution.org 209.172.51.139
ctcn.dns2.us 66.192.230.86
ctcn.purpledaily.com 68.96.31.136
ctcs.bigdepression.net 127.0.0.1
ctisk.purpledaily.com 194.106.162.203
ctx.safalife.com 72.14.213.147
culture.chileexe77.com 24.207.42.66
daa.bigdepression.net 12.14.129.91
daa.bigdepression.net 66.228.132.16
date.gmailboxes.com 140.112.19.195
dcs.ygto.com 127.0.0.1
dcs.ygto.com 74.93.92.50
default.arrowservice.net 74.125.87.147
den.blackcake.net 255.255.255.255
denel.businessconsults.net 127.0.0.1
des.blackcake.net 255.255.255.255
des.infosupports.com 216.15.210.68
des.infosupports.com 255.255.255.255
dev.teamattire.com 68.166.53.102
dfait-kl.worthhummer.net 66.249.91.104
dgih.dnsweb.org 72.240.45.65
dias.globalowa.com 64.233.169.147
dns.chileexe77.com 70.108.241.36
dns.issnbgkit.net 66.118.61.226
dnsg.bigdepression.net 127.0.0.1
doa.bigdepression.net 12.14.129.91
doa.bigdepression.net 212.125.200.204
doa.bigdepression.net 66.228.132.16
dod.dnsweb.org 66.111.37.26
domain.arrowservice.net 74.125.87.147
dotnet.safalife.com 66.250.218.2
dove.blackcake.net 208.37.108.211
dove.blackcake.net 255.255.255.255
dove.blackcake.net 64.26.31.5
down.safalife.com 66.228.132.16
drs.infosupports.com 66.228.132.20
drs.safalife.com 127.0.0.1
dsh.newsonet.net 68.165.211.181
dsw.blackcake.net 255.255.255.255
dsw.blackcake.net 64.26.31.5
dvid.blackcake.net 255.255.255.255
dvid.blackcake.net 64.26.31.5
dvid.infosupports.com 255.255.255.255
dvid.infosupports.com 64.26.31.5
dvn.newsonet.net 64.233.169.147
dyn.newsonet.net 64.14.81.30
dyns.infosupports.com 127.0.0.1
ecc.bigdepression.net 127.0.0.1
ecc.safalife.com 66.228.132.53
eds1.infosupports.com 255.255.255.255
eds1.infosupports.com 64.26.31.5
egcc.bigdepression.net 127.0.0.1
email.hugesoft.org 208.185.233.163
email.hugesoft.org 64.126.12.3
engineer2010.mynumber.org 12.38.236.41
epi.newsonet.net 209.85.227.103
epi.newsonet.net 64.8.114.124
epi.purpledaily.com 64.233.169.147
epic.purpledaily.com 64.4.21.91
epod.businessconsults.net 127.0.0.1
ever.arrowservice.net 74.125.79.99
explorer.pcanywhere.net 98.137.149.56
eye.businessconsults.net 127.0.0.1
fed.purpledaily.com 127.0.0.1
ffej.newsonet.net 127.0.0.1
ffej.purpledaily.com 64.233.169.147
fher.bigish.net 74.12.204.147
fher.buisnessconsults.net 74.12.204.147
fher.businessconsults.net 74.12.204.147
fhh.purpledaily.com 74.12.204.147
fim.purpledaily.com 194.106.162.203
fim.purpledaily.com 64.233.169.147
finance.chileexe77.com 212.159.25.242
fine.worthhummer.net 127.0.0.1
fineca.blackberrycluter.com 194.106.162.203
fineca.newsonet.net 194.106.162.203
fineca.newsonet.net 66.249.80.104
finekl.bigish.net 66.249.80.104
finekl.purpledaily.com 64.184.2.11
finekl.worthhummer.net 194.106.162.203
fjod.businessconsults.net 64.233.169.147
flashingaway.otzo.com 174.36.200.35
flucare.worthhummer.net 194.106.162.203
fly.blackcake.net 255.255.255.255
fmcc.businessconsults.net 64.233.169.147
fmp.bigish.net 209.85.147.104
fmp.worthhummer.net 209.85.147.104
fnem.businessconsults.net 72.14.204.104
fnpc.arrowservice.net 64.12.79.57
fnrn.businessconsults.net 173.194.32.104
free.gmailboxes.com 207.173.155.44
friends.arrowservice.net 209.85.173.99
fstl.businessconsults.net 74.125.113.147
fstl.worthhummer.net 67.132.222.230
ftp.freespirit.acmetoy.com 127.0.0.1
ftp.purpledaily.com 209.85.148.105
ftrj.businessconsults.net 64.233.169.147
fwb.blackcake.net 212.125.200.204
fwmo.businessconsults.net 208.185.233.163
fwmo.newsonet.net 70.90.53.170
gaca.newsonet.net 143.89.132.99
gannett.infosupports.com 255.255.255.255
gatu.arrowservice.net 70.90.53.170
gayi.blackcake.net 24.123.243.218
gdaa.ns02.info 72.242.59.164
gdsp.infosupports.com 127.0.0.1
gdtm.earthsolution.org 209.172.51.139
gege.newsonet.net 216.143.158.107
gg.arrowservice.net 64.233.169.147
ghma.earthsolution.org 127.0.0.1
ghma.earthsolution.org 68.96.31.136
gjjr.newsonet.net 207.225.36.69
glj.purpledaily.com 64.233.169.147
global.softsolutionbox.net 70.90.53.170
glx.newsonet.net 209.85.227.103
gmail.bigdepression.net 74.93.92.50
gmail.infosupports.com 212.125.200.197
green.safalife.com 255.255.255.255
ground.earthsolution.org 207.157.116.130
ground.infosupports.com 127.0.0.1
half.earthsolution.org 72.242.59.165
half.infosupports.com 212.125.200.197
happy.arrowservice.net 127.0.0.1
hapyy2010.lflinkup.net 12.38.236.41
hav.earthsolution.org 127.0.0.1
hav.earthsolution.org 68.96.31.136
help.purpledaily.com 12.185.222.8
help.purpledaily.com 74.125.79.99
hill.arrowservice.net 64.233.189.104
home.arrowservice.net 64.233.189.99
host.arrowservice.net 127.0.0.1
host.issnbgkit.net 65.105.157.228
hotel.safalife.com 64.254.247.13
hotel.safalife.com 66.111.37.26
house.globalowa.com 72.14.204.103
house.gmailboxes.com 72.14.204.103
hpd.newsonet.net 64.12.75.1
hrsy.newsonet.net 64.233.169.147
hy.purpledaily.com 64.233.169.147
hy.worthhummer.net 127.0.0.1
iabk.newsonet.net 64.233.169.147
iea.businessconsults.net 127.0.0.1
imgmobile.anxa.com 209.172.51.139
index.arrowservice.net 74.125.155.103
india.arrowservice.net 64.4.21.91
indian.arrowservice.net 64.4.21.91
info.bigish.net 127.0.0.1
info.businessconsults.net 12.38.236.21
info.businessconsults.net 12.38.236.41
info.businessconsults.net 127.0.0.1
info.softsolutionbox.net 127.0.0.1
ins.globalowa.com 64.233.169.147
ins.purpledaily.com 64.233.169.147
intel.infosupports.com 68.96.31.136
inter.earthsolution.org 127.0.0.1
inter.earthsolution.org 212.125.200.197
iri.infosupports.com 127.0.0.1
iri.worthhummer.net 66.228.132.20
irs.businessconsults.net 127.0.0.1
irs.businessconsults.net 66.228.132.8
irsg.newsonet.net 127.0.0.1
iscu.purpledaily.com 64.233.169.147
iswb.softsolutionbox.net 67.195.160.76
itau.businessconsults.net 98.137.149.56
java.earthsolution.org 127.0.0.1
java.earthsolution.org 68.96.31.136
jbei.purpledaily.com 64.233.169.147
jeph.earthsolution.org 209.172.51.139
jfs.newsonet.net 64.184.2.11
jfs.newsonet.net 72.14.201.147
jfs.newsonet.net 72.14.204.147
jhd.newsonet.net 74.125.159.106
jhd.safalife.com 66.228.132.20
johnbell.longmusic.com 76.164.196.3
johntime.myftp.name 64.26.31.5
johntime.myftp.name 76.164.196.3
jr.blackcake.net 255.255.255.255
king-kl.newsonet.net 63.246.147.10
kit.dnsweb.org 208.44.242.32
kit.dnsweb.org 255.255.255.255
kit.infosupports.com 255.255.255.255
kl-care.newsonet.net 194.106.162.203
kl-hqun.newsonet.net 173.194.35.104
kl-knab.newsonet.net 127.0.0.8
kl-mfa.newsonet.net 216.239.61.104
kl-rfc.newsonet.net 64.233.169.104
kl-rio.newsonet.net 209.85.227.105
kl-vfw.globalowa.com 64.233.169.147
klape.globalowa.com 64.233.169.104
klape.globalowa.com 64.233.169.147
klati.newsonet.net 74.125.153.105
klbar.purpledaily.com 64.233.189.104
klbis.globalowa.com 127.0.0.12
klbis.purpledaily.com 74.125.77.104
klecca.newsonet.net 64.233.169.104
klecca.purpledaily.com 63.134.215.218
klenvi.purpledaily.com 194.106.162.203
kliee.newsonet.net 64.233.169.147
kllhd.globalowa.com 64.233.169.147
klmfat.purpledaily.com 64.233.169.147
klnrdc.newsonet.net 194.106.162.203
klnrdc.newsonet.net 64.233.169.147
klnrdc.purpledaily.com 64.233.169.147
klotp.purpledaily.com 72.14.204.104
klpiec.newsonet.net 72.14.204.104
kluscc.newsonet.net 194.106.162.203
klwest.purpledaily.com 194.106.162.203
klwest.purpledaily.com 72.14.204.103
kmhl.mrbonus.com 68.96.31.136
knab.newsonet.net 64.233.169.147
knews.bigdepression.net 207.225.36.69
koa.purpledaily.com 64.233.169.147
ks01.peasoul.com 115.248.236.34
ksap.peasoul.com 207.138.178.142
lawste.purpledaily.com 74.125.113.104
leets.hugesoft.org 208.185.233.163
lhd.globalowa.com 64.233.169.147
life.blackcake.net 255.255.255.255
ln.purpledaily.com 64.233.169.147
lnz.worthhummer.net 127.0.0.1
loading.bigish.net 127.0.0.1
local.dnsweb.org 64.46.45.33
local.dnsweb.org 66.111.37.26
log.bigdepression.net 208.37.108.211
log.infosupports.com 255.255.255.255
log.issnbgkit.net 66.118.61.226
log.issnbgkit.net 67.19.22.82
login.blackcake.net 255.255.255.255
login.businessconsults.net 255.255.255.255
login.safalife.com 127.0.0.1
logs.chileexe77.com 70.108.241.36
logs.issnbgkit.net 202.6.235.83
logs.issnbgkit.net 65.114.195.226
logs.issnbgkit.net 69.65.118.29
logs.pcclubddk.net 66.118.61.226
loper.purpledaily.com 127.0.0.1
love.arrowservice.net 127.0.0.1
lrl.infosupports.com 255.255.255.255
lucie.dnsweb.org 212.125.200.204
lucy.bigdepression.net 212.125.200.204
lucy.bigdepression.net 213.63.187.70
lucy.blackcake.net 212.125.200.204
lucy.businessconsults.net 208.44.242.32
lucy.businessconsults.net 212.125.200.204
lucy2.businessconsults.net 12.152.124.11
lucy2.businessconsults.net 127.0.0.1
lucy2.businessconsults.net 212.125.200.204
lucy2.businessconsults.net 216.249.111.232
lucy2.infosupports.com 212.125.200.204
lw.purpledaily.com 64.233.169.147
mail.arrowservice.net 74.125.95.147
mail.businessconsults.net 69.69.94.3
mail.chileexe77.com 195.22.21.72
mail.infosupports.com 255.255.255.255
mail.newsonet.net 213.63.187.70
mail.safalife.com 127.0.0.1
mail.softsolutionbox.net 66.102.9.147
man001.blackcake.net 66.228.132.20
man001.infosupports.com 127.0.0.1
man001.infosupports.com 216.249.111.232
mantech.blackcake.net 212.125.200.204
max.arrowservice.net 64.233.189.147
mcsc.buisnessconsults.net 161.58.182.205
mcsc.businessconsults.net 161.58.182.205
media.purpledaily.com 64.233.169.147
merax.newsonet.net 74.125.79.147
mfa.globalowa.com 164.106.78.28
mfa.globalowa.com 216.239.61.104
mfc.newsonet.net 72.14.204.99
milk.arrowservice.net 209.85.173.99
mini.arrowservice.net 127.0.0.1
mko.busketball.com 255.255.255.254
mlls.globalowa.com 67.135.235.198
moon.blackcake.net 255.255.255.255
moon.infosupports.com 255.255.255.255
mor.newsonet.net 209.131.36.158
mos.arrowservice.net 74.14.204.147
moto.mefound.com 72.242.59.164
motor.earthsolution.org 72.242.59.163
mpe.arrowservice.net 64.233.169.147
na.bigdepression.net 127.0.0.1
nameless.3322.org 192.168.0.255
nat.bigdepression.net 255.255.255.255
nature.arrowservice.net 64.223.169.99
navi.earthsolution.org 209.172.51.139
nci.bigdepression.net 255.255.255.255
nci.dnsweb.org 127.0.0.1
nci.safalife.com 66.228.132.129
ncih.dnsweb.org 127.0.0.1
ncsc.businessconsults.net 127.0.0.1
ne.hugesoft.org 208.185.233.163
net.infosupports.com 255.255.255.255
new.arrowservice.net 127.0.0.1
new.globalowa.com 64.233.169.147
newport.bigdepression.net 127.0.0.1
newport.infosupports.com 255.255.255.255
newport.safalife.com 127.0.0.1
news.bigdepression.net 127.0.0.1
news.blackcake.net 161.58.182.205
news.businessconsults.net 12.38.236.28
news.businessconsults.net 212.125.200.204
news.busketball.com 12.152.124.11
news.chileexe77.com 70.108.241.36
news.dnsweb.org 208.44.242.32
news.dnsweb.org 255.255.255.255
news.dnsweb.org 64.26.31.5
news.infosupports.com 255.255.255.255
news.issnbgkit.net 66.118.61.226
news.issnbgkit.net 66.129.222.1
news.pcclubddk.net 66.118.61.226
news.softsolutionbox.net 74.12.204.147
newsservice.bouncemet.net 220.128.105.177
ngc.blackcake.net 255.255.255.255
nhc.newsonet.net 64.233.169.147
nhs.newsonet.net 64.233.169.147
nhs1.newsonet.net 64.233.169.147
nhsl.newsonet.net 64.233.169.147
nis.purpledaily.com 64.233.169.147
nousage.arrowservice.net 127.0.0.1
nrfn.newsonet.net 67.195.160.76
nrfn.newsonet.net 67.295.160.76
ns.issnbgkit.net 66.118.61.226
nucor001.purpledaily.com 64.233.169.147
nuk.purpledaily.com 64.233.169.147
num.safalife.com 161.58.182.205
officeudpate.servehttp.com 220.128.105.177
okie.businessconsults.net 127.0.0.1
oliver.arrowservice.net 207.46.17.125
onk.newsonet.net 209.85.229.99
ope.purpledaily.com 64.233.169.104
opp.infosupports.com 255.255.255.255
oppa.bigdepression.net 127.0.0.1
optimizon.com 207.225.36.69
orca.arrowservice.net 207.225.36.69
otp.blackberrycluter.com 127.0.0.18
otps.globalowa.com 64.184.2.11
ou.infosupports.com 216.15.210.68
ou.infosupports.com 255.255.255.255
ou1.blackcake.net 255.255.255.255
ou1.infosupports.com 216.15.210.68
ou1.infosupports.com 255.255.255.255
ou2.infosupports.com 216.15.210.68
ou2.infosupports.com 255.255.255.255
ou3.infosupports.com 216.15.210.68
ou3.infosupports.com 255.255.255.255
ou4.infosupports.com 216.15.210.68
ou4.infosupports.com 255.255.255.255
ou5.infosupports.com 216.15.210.68
ou5.infosupports.com 255.255.255.255
ou5.infosupports.com 66.228.132.53
ou6.infosupports.com 216.15.210.68
ou6.infosupports.com 255.255.255.255
ou7.infosupports.com 216.15.210.68
ou7.infosupports.com 255.255.255.255
ou7.infosupports.com 72.167.34.54
owa.arrowservice.net 12.33.114.224
owa.arrowservice.net 64.233.169.147
owa.businessconsults.net 143.89.56.207
owa.softsolutionbox.net 173.194.35.104
owa.softsolutionbox.net 174.46.11.105
pacific.blackcake.net 255.255.255.255
pacific.worthhummer.net 64.233.169.104
paekl.gmailboxes.com 127.0.0.12
pars.earthsolution.org 127.0.0.1
part.bigdepression.net 72.240.45.65
part.earthsolution.org 209.172.51.139
parth.earthsolution.org 209.172.51.139
pcie.arrowservice.net 207.46.21.123
pdoc.earthsolution.org 72.242.59.163
pear.blackcake.net 127.0.0.1
pear.infosupports.com 255.255.255.255
people.softsolutionbox.net 209.85.148.147
phb.arrowservice.net 127.0.0.120
picture.chileexe77.com 71.8.243.11
pizf.peasoul.com 207.138.26.9
pl0y.peasoul.com 115.248.236.34
pme.worthhummer.net 64.233.169.147
pop.blackcake.net 255.255.255.255
pop.businessconsults.net 12.167.251.83
pop.businessconsults.net 12.38.236.21
pop.businessconsults.net 12.38.236.41
pop.businessconsults.net 127.0.0.1
pop.businessconsults.net 66.228.132.129
pop.businessconsults.net 66.228.132.8
pop.dnsweb.org 208.44.242.32
pop.dnsweb.org 255.255.255.255
pop.dnsweb.org 64.255.101.100
pop.dnsweb.org 64.26.31.5
pop.dnsweb.org 66.55.14.78
pop.infosupports.com 255.255.255.255
pop2.blackcake.net 255.255.255.255
pop2.infosupports.com 255.255.255.255
pop3.blackcake.net 255.255.255.255
pop3.infosupports.com 255.255.255.255
pop4.blackcake.net 255.255.255.255
pop5.blackcake.net 255.255.255.255
pop6.infosupports.com 255.255.255.255
pop9.infosupports.com 255.255.255.255
popw.infosupports.com 255.255.255.255
port.infosupports.com 255.255.255.255
ppt.arrowservice.net 127.0.0.1
prc.newsonet.net 208.185.233.163
priv.dsmtp.com 212.84.113.22
proc.blackberrycluter.com 24.97.91.73
proc.purpledaily.com 74.125.226.84
progress.purpledaily.com 72.14.204.147
protoc.blackcake.net 255.255.255.255
protoc.infosupports.com 255.255.255.255
psu.businessconsults.net 127.0.0.1
psu.worthhummer.net 161.58.182.205
qedh.earthsolution.org 209.172.51.139
qiao1.bigdepression.net 212.125.200.204
qiao1.bigdepression.net 255.255.255.255
qiao2.bigdepression.net 212.125.200.204
qiao2.bigdepression.net 255.255.255.255
qiao3.bigdepression.net 212.125.200.204
qiao3.bigdepression.net 255.255.255.255
qiao4.bigdepression.net 212.125.200.204
qiao4.bigdepression.net 255.255.255.255
qiao5.bigdepression.net 212.125.200.204
qiao5.bigdepression.net 255.255.255.255
qiao6.bigdepression.net 255.255.255.255
qiao7.bigdepression.net 255.255.255.255
qiao8.bigdepression.net 216.15.210.68
qua.businessconsults.net 161.58.182.205
qual.bigdepression.net 255.255.255.255
quick.earthsolution.org 127.0.0.1
quiet.earthsolution.org 127.0.0.1
quiet.earthsolution.org 68.96.31.136
rcs.purpledaily.com 64.233.169.147
red.infosupports.com 255.255.255.255
release.purpledaily.com 127.0.0.1
release.softsolutionbox.net 127.0.0.12
research.purpledaily.com 127.0.0.1
research.softsolutionbox.net 12.185.222.8
research.softsolutionbox.net 63.134.215.218
research.softsolutionbox.net 64.126.12.3
research.softsolutionbox.net 69.11.244.91
research.softsolutionbox.net 74.125.19.103
research.softsolutionbox.net 74.125.91.103
research.softsolutionbox.net 74.125.93.103
rice.bigish.net 64.233.169.104
rj.purpledaily.com 64.8.114.124
roger.buisnessconsults.net 127.0.0.1
rouji.freespirit.acmetoy.com 207.225.36.69
rsut.purpledaily.com 127.0.0.1
saf.blackberrycluter.com 64.233.169.147
saf.globalowa.com 64.233.169.147
safbejn.worthhummer.net 64.233.189.103
sam.blackcake.net 208.37.108.211
sam.blackcake.net 255.255.255.255
sam.blackcake.net 64.26.31.5
sam.infosupports.com 208.37.108.211
sam.infosupports.com 255.255.255.255
sam.infosupports.com 64.26.31.5
sav.safalife.com 161.58.182.205
sbh.businessconsults.net 127.0.0.1
scc.globalowa.com 64.233.169.147
scc.purpledaily.com 194.106.162.203
scc.purpledaily.com 216.239.61.104
sea.arrowservice.net 127.0.0.1
sea001.arrowservice.net 64.126.12.3
search.blackcake.net 255.255.255.255
send.issnbgkit.net 69.65.118.29
servf.zyns.com 209.172.51.139
service.arrowservice.net 127.0.0.1
service.issnbgkit.net 71.16.27.212
service.issnbgkit.net 74.94.16.166
sfn.globalowa.com 127.0.0.18
shot.buisnessconsults.net 12.38.236.41
shot.businessconsults.net 12.38.236.41
sifcc.arrowservice.net 67.215.65.132
sip.businessconsults.net 64.233.169.147
sisc.purpledaily.com 194.106.162.203
sky.safalife.com 161.58.182.205
sllaw.hugesoft.org 64.233.169.147
slnoa.hugesoft.org 64.233.169.147
slnoa.newsonet.net 207.225.36.69
slrfc.newsonet.net 194.106.162.203
slrj.softsolutionbox.net 63.134.215.84
slrouji.infosupports.com 255.255.255.255
sls.purpledaily.com 64.233.169.147
slutc.globalowa.com 64.233.169.147
smooth.newsonet.net 127.0.0.1
smtp.infosupports.com 255.255.255.255
smtp.safalife.com 12.51.6.132
smtp.safalife.com 207.157.116.134
smtp.safalife.com 255.255.255.255
snoopy.safalife.com 207.157.116.134
snoot.earthsolution.org 216.47.214.42
soler.buisnessconsults.net 127.0.0.1
sona.arrowservice.net 64.233.169.147
sope.purpledaily.com 127.0.0.1
sos.businessconsults.net 207.225.36.69
sotp.purpledaily.com 127.0.0.1
spah.earthsolution.org 66.192.230.86
spahi.dnsweb.org 212.144.56.102
sports.businessconsults.net 12.152.124.11
sports.businessconsults.net 127.0.0.1
sports.businessconsults.net 208.44.242.32
sports.businessconsults.net 212.125.200.204
sports.businessconsults.net 216.249.111.232
sports.businessconsults.net 255.255.255.255
sports.chileexe77.com 203.43.78.194
sports3.earthsolution.org 150.176.164.6
sports3.earthsolution.org 216.47.214.42
sports3.earthsolution.org 72.240.45.65
spte.bigdepression.net 255.255.255.255
srs.businessconsults.net 255.255.255.255
srs.dnsweb.org 212.125.200.204
srs.infosupports.com 212.125.200.204
ssa.businessconsults.net 12.38.236.21
ssa.businessconsults.net 12.38.236.41
ssa.businessconsults.net 127.0.0.1
sslsrv1.infosupports.com 255.255.255.255
sslsrv2.infosupports.com 255.255.255.255
sslsrv5.infosupports.com 255.255.255.255
sslsrv6.infosupports.com 24.96.236.180
sslsrv6.infosupports.com 255.255.255.255
ssun.arrowservice.net 64.233.169.103
stell.purpledaily.com 74.125.230.147
stk.blackcake.net 208.37.108.211
stk.blackcake.net 255.255.255.255
stk.blackcake.net 64.26.31.5
stk.infosupports.com 208.37.108.211
stk.infosupports.com 255.255.255.255
stk.infosupports.com 64.26.31.5
stock.bigish.net 127.0.0.1
stulaw.bigish.net 164.106.78.28
stulaw.bigish.net 70.90.53.170
stulaw.bigish.net 74.125.113.104
stuwal.newsonet.net 164.106.78.28
stuwal.newsonet.net 74.125.113.104
sun.arrowservice.net 64.233.169.103
sunnysaf.allowed.org 143.89.132.99
sunnysaf.allowed.org 64.233.169.104
sute.newsonet.net 64.233.169.147
sw.hugesoft.org 63.134.215.150
sword.bigish.net 66.249.80.104
syn.arrowservice.net 66.228.132.20
sys.businessconsults.net 12.38.236.41
tape.businessconsults.net 127.0.0.1
tape.dnsweb.org 67.95.180.138
tape.purpledaily.com 204.14.142.210
tclient.arrowservice.net 204.100.63.18
test.chileexe77.com 65.114.195.226
test.chileexe77.com 74.86.197.56
test.issnbgkit.net 67.135.214.92
test.newsonet.net 127.0.0.1
texc.arrowservice.net 64.233.169.147
think.arrowservice.net 127.0.0.1
think.purpledaily.com 74.125.77.99
time.issnbgkit.net 74.219.234.130
tod.newsonet.net 127.0.0.1
tra.softsolutionbox.net 127.0.0.1
train.newsonet.net 127.0.0.1
trb.arrowservice.net 207.225.36.69
trip.arrowservice.net 74.125.45.103
tx.businessconsults.net 66.228.132.20
ug-aaon.hugesoft.org 72.14.204.104
ug-aeai.hugesoft.org 74.125.230.83
ug-ag.hugesoft.org 72.14.204.104
ug-asg.hugesoft.org 72.14.204.104
ug-ati.hugesoft.org 66.102.1.147
ug-bdai.hugesoft.org 127.0.0.1
ug-bdfa.hugesoft.org 209.85.229.103
ug-bpd.hugesoft.org 66.102.9.137
ug-cccc.hugesoft.org 74.125.113.103
ug-ccr.hugesoft.org 72.14.204.104
ug-co.hugesoft.org 127.0.0.1
ug-cono.hugesoft.org 64.12.79.57
ug-cti.hugesoft.org 72.14.204.147
ug-dfait.hugesoft.org 173.194.43.104
ug-dfait.hugesoft.org 173.94.43.104
ug-dfait.hugesoft.org 208.185.233.163
ug-enrc.hugesoft.org 74.125.226.82
ug-ga.hugesoft.org 74.125.224.16
ug-hst.hugesoft.org 70.254.245.250
ug-irpf.hugesoft.org 72.14.204.99
ug-kfc.hugesoft.org 64.233.169.104
ug-man.hugesoft.org 74.125.93.104
ug-mbi.hugesoft.org 64.12.244.203
ug-nema.hugesoft.org 64.233.169.99
ug-opm.hugesoft.org 72.14.204.104
ug-piec.hugesoft.org 64.233.169.147
ug-pmet.hugesoft.org 66.249.80.104
ug-pnl.hugesoft.org 74.125.127.105
ug-rev.hugesoft.org 127.0.0.1
ug-rj.arrowservice.net 127.0.0.1
ug-rj.hugesoft.org 127.0.0.1
ug-sbig.hugesoft.org 66.249.80.104
ug-tree.hugesoft.org 69.39.133.114
ug-tta.hugesoft.org 74.125.95.106
ug-volpe.hugesoft.org 72.14.204.104
unifh.earthsolution.org 209.172.51.139
up.safalife.com 66.228.132.8
update.dnsweb.org 66.228.132.160
update.safalife.com 255.255.255.255
url.blackcake.net 127.0.0.1
url.infosupports.com 127.0.0.1
us.issnbgkit.net 69.152.184.182
usc.dnsweb.org 255.255.255.255
usc.newsonet.net 203.208.37.99
utc.bigdepression.net 255.255.255.255
utc.dnsweb.org 127.0.0.1
utc.dnsweb.org 255.255.255.255
utex.earthsolution.org 68.96.31.136
value.arrowservice.net 64.233.163.99
velp.earthsolution.org 216.47.214.42
via.blackcake.net 208.37.108.211
via.blackcake.net 208.44.242.32
via.blackcake.net 255.255.255.255
via.infosupports.com 208.37.108.211
via.infosupports.com 208.44.242.32
via.infosupports.com 255.255.255.255
vip.issnbgkit.net 69.84.35.40
vip.pcclubddk.net 72.52.208.103
visco.infosupports.com 72.245.176.82
visual.earthsolution.org 68.96.31.136
vol.infosupports.com 212.125.200.197
vop.earthsolution.org 127.0.0.1
vop.earthsolution.org 68.96.31.136
vope.purpledaily.com 68.96.31.136
vopm.earthsolution.org 209.172.51.139
vopm.earthsolution.org 72.242.59.163
vpn.globalowa.com 64.233.169.147
vpn.softsolutionbox.net 63.134.216.239
vpn.softsolutionbox.net 70.254.245.250
vsec.bigdepression.net 209.172.51.139
vseh.earthsolution.org 209.172.51.139
walk.bigish.net 63.246.147.10
wapi.businessconsults.net 64.233.169.147
was.arrowservice.net 127.0.0.1
wcov.businessconsults.net 205.188.186.167
wdeh.businessconsults.net 66.102.11.104
we.trickip.org 64.26.31.5
we.trickip.org 76.164.196.3
weather.chileexe77.com 207.200.138.198
web.arrowservice.net 74.125.71.147
web.bigdepression.net 127.0.0.1
web.infosupports.com 127.0.0.1
weblog.bigish.net 127.0.0.1
webmail.arrowservice.net 216.239.61.104
webmail.blackcake.net 255.255.255.255
webmail.businessconsults.net 64.233.169.103
webmail.newsonet.net 64.233.169.103
webmail.softsolutionbox.net 12.33.114.224
webmail.softsolutionbox.net 174.46.11.105
wed5.blackcake.net 255.255.255.255
wed5.infosupports.com 255.255.255.255
westkl.blackberrycluter.com 72.14.204.103
westkl.worthhummer.net 72.14.204.103
wff.businessconsults.net 143.89.132.99
what.arrowservice.net 66.102.1.103
wmp.businessconsults.net 64.184.2.11
wmp.businessconsults.net 74.125.230.81
wnam.businessconsults.net 64.12.79.57
wnew.businessconsults.net 64.12.79.57
wopec.businessconsults.net 127.0.0.1
workstation.arrowservice.net 127.0.0.1
world.businessconsults.net 74.125.226.48
wpcs.businessconsults.net 143.89.132.99
wpcs.businessconsults.net 64.12.75.1
wpcs.businessconsults.net 64.8.114.124
wpcs.businessconsults.net 67.109.132.202
wpcs.businessconsults.net 70.254.245.250
wpot.arrowservice.net 64.12.79.57
wpot.businessconsults.net 64.12.79.57
wpvn.businessconsults.net 64.233.169.147
wpvn.softsolutionbox.net 64.233.169.147
wrim.businessconsults.net 64.233.169.147
wsyggfw.newsonet.net 64.233.169.147
wwab.purpledaily.com 127.0.0.1
wwt.blackcake.net 255.255.255.255
www-conoco.businessconsults.net 138.32.32.8
www.arrowservice.net 64.74.223.48
www.blackcake.net 255.255.255.255
www.dnsweb.org 216.146.47.52
www.freespirit.acmetoy.com 127.0.0.1
www.globalowa.com 63.134.229.138
www.newsonet.net 127.0.0.1
www.purpledaily.com 208.69.32.231
www.worthhummer.net 216.146.47.52
www1.bigdepression.net 255.255.255.255
www1.earthsolution.org 12.38.236.22
www1.infosupports.com 64.52.255.20
www2.bigdepression.net 255.255.255.255
www2.wikaba.com 72.167.34.54
wwwi.earthsolution.org 64.15.155.113
wwwt.infosupports.com 64.15.155.113
wwww.arrowservice.net 127.0.0.1
xawh.earthsolution.org 209.172.51.139
xmer.businessconsults.net 74.125.79.147
xtap.newsonet.net 127.0.0.10
yahoo.infosupports.com 66.228.132.129
yahoo.newsonet.net 127.0.0.1
yang.bigdepression.net 255.255.255.255
yang.infosupports.com 255.255.255.255
yang1.infosupports.com 216.15.210.68
yang1.infosupports.com 255.255.255.255
yang2.infosupports.com 216.15.210.68
yang2.infosupports.com 255.255.255.255
yard.earthsolution.org 66.192.230.86
ysb.purpledaily.com 64.233.169.147
----------------End Data----------------