API tools faq
paste
Advertisement
DhiaLite

Compromised GoDaddy domains - Nov 18, 2013

DhiaLite
Nov 18th, 2013
368
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.31 KB | None | 0 0
raw download clone embed print report
  1. Mon, Nov 18, 2013
  2. #DhiaLite - Suspicious subdomains hosted on 144.76.137.23 injected under compromised GoDaddy domains.
  3.  
  4. Similar campaign has been on contiguous IP 144.76.137.24, http://pastebin.com/PFJP9WEa
  5.  
  6. Traffic surge then it dies out.
  7.  
  8. EK to confirm ?
  9.  
  10. Subdomains have been resolving to 144.76.137.23 for the past few days, and more subdomains will very likely still appear on this IP.
  11.  
  12. #Sample compromised 2LDs:
  13.  
  14. altoutdoors.com
  15. amazinggrippick.com
  16. bjeocinc.org
  17. boatingpage.com
  18. brssdwatch.com
  19. cancunresortonline.com
  20. careerchoicesgps.net
  21. collegefunded.com
  22. cyclonehosting.com
  23. diehardhunter.com
  24. floridagolfresort.net
  25. hunterspal.com
  26. hyperiongate.com
  27. icompi.com
  28. incitebrewing.com
  29. londonwebsite.info
  30. moutaintopwholeness.net
  31. myfriendsworldwide.com
  32. panamaeasy.com
  33. powerbook.co
  34. racersweepstakes.com
  35. racingindustry.org
  36. rockthisboat.com
  37. rumson-roofing.com
  38. shorttrackusa.com
  39. sistersofsaintlouis.com
  40. springbreaktime.net
  41. tcaelectric.ca
  42. the1it.com
  43. the1t.com
  44. therubyjacks.com
  45. timeofconcentration.ca
  46. triangularadvocacy.org
  47. upandonline.net
  48. vaune.com
  49.  
  50. #Sample subdomains on 144.76.137.23:
  51.  
  52. verskeurslykgate.tcaelectric.ca
  53. untroddenarwakhi.powerbook.co
  54. tepide.bjeocinc.org
  55. skilde.panamaeasy.com
  56. sambitgetnetbyaddr.bjeocinc.org
  57. pskmodulated-telegrafiste.bjeocinc.org
  58. pasnalinecaducities.powerbook.co
  59. mesturino-twosample.bjeocinc.org
  60. luthersegsidepoikavasat.bjeocinc.org
  61. longboard.bjeocinc.org
  62. infrasound.bjeocinc.org
  63. erpicturing-bevattingsvermogen.bjeocinc.org
  64. cimbrearhuolettoman.powerbook.co
  65. bilderbeck.powerbook.co
  66. tichauereffilais.tcaelectric.ca
  67. ylityspaikkaan.cyclonehosting.com
  68. webmakinapproviandeerden.collegefunded.com
  69. vrhtvll-suezette.tcaelectric.ca
  70. verstaendigeren.myfriendsworldwide.com
  71. verkehrsvereines.cancunresortonline.com
  72. veertigerspaddyblast.altoutdoors.com
  73. upolitycznieniu.hunterspal.com
  74. triskaidekaphobia.collegefunded.com
  75. trigraphs-joderig.springbreaktime.net
  76. suouconnunnavigability.amazinggrippick.com
  77. suillinewendekreisen.cyclonehosting.com
  78. studiumsslumpy.collegefunded.com
  79. sprovodi1-esittytyi.floridagolfresort.net
  80. sonderhouse.myfriendsworldwide.com
  81. sitoutumattomuuteen.rumson-roofing.com
  82. saintbonchamois0.myfriendsworldwide.com
  83. rybskiheterotype.diehardhunter.com
  84. reaverschild.floridagolfresort.net
  85. rainbelt-cranioclasm.upandonline.net
  86. puutokset.boatingpage.com
  87. praia.cancunresortonline.com
  88. parumperqueunbeschriebenes.hunterspal.com
  89. orbitalnet.boatingpage.com
  90. onderdanbipedospassigere.upandonline.net
  91. odlingsb.timeofconcentration.ca
  92. oberflaechliches.collegefunded.com
  93. nuottien.rumson-roofing.com
  94. namsrv.diehardhunter.com
  95. motaimasnewspost.hunterspal.com
  96. moninkertaisista.cyclonehosting.com
  97. medjunarodnoj6houndmarked.rumson-roofing.com
  98. mdewey-murskaavat.altoutdoors.com
  99. mcgrachanjuridiction.hunterspal.com
  100. maxvalsztrekketting.collegefunded.com
  101. maitham.tcaelectric.ca
  102. maagisenazalog.tcaelectric.ca
  103. m4ga.myfriendsworldwide.com
  104. lightharnessstaller.hunterspal.com
  105. liebesszenenririsi.cyclonehosting.com
  106. lapsabilsemrow-hartwig.cancunresortonline.com
  107. landingstroepe.floridagolfresort.net
  108. kvartetin.rumson-roofing.com
  109. kulkeneet.altoutdoors.com
  110. kompilatornlettuceopium.diehardhunter.com
  111. kirjansa.upandonline.net
  112. kirjamaailmaaespanjalaisen.upandonline.net
  113. keskeisiksikodkod.cyclonehosting.com
  114. katsastaisivatpa.altoutdoors.com
  115. karsinomeohjattaisiin.cancunresortonline.com
  116. imnettelesescorisa.tcaelectric.ca
  117. iinformatique.rumson-roofing.com
  118. ibsunvesttoimistossa.cyclonehosting.com
  119. hsombathelyistroopnagels.diehardhunter.com
  120. hokemawatakuja.boatingpage.com
  121. hemodrometerpulpeta.floridagolfresort.net
  122. hardhoutenreisegeschwindigkeit.upandonline.net
  123. haeufleinsptryckningar.diehardhunter.com
  124. gratiolesthermactor.rumson-roofing.com
  125. gossiperstinosi.boatingpage.com
  126. gelykgolf.hunterspal.com
  127. finsawhbhgurdilo.cancunresortonline.com
  128. findmemrecptr.boatingpage.com
  129. erleidetlardtype.rumson-roofing.com
  130. epihippuschilien.hunterspal.com
  131. elttiksriceseedbody.cancunresortonline.com
  132. doylebramhall.floridagolfresort.net
  133. douglasmartineinkassierender.upandonline.net
  134. destandardfedwritingmachine.collegefunded.com
  135. delphinium.hunterspal.com
  136. dactylographieras.diehardhunter.com
  137. cotoyezsimuleturque.triangularadvocacy.org
  138. conconullyrampslagoffers.tcaelectric.ca
  139. claudiebant.rumson-roofing.com
  140. chamarwabedauerl.cancunresortonline.com
  141. brae.boatingpage.com
  142. boavistaveeboten.upandonline.net
  143. bezwladnosc2nd1.diehardhunter.com
  144. backpacksgradjanska4.myfriendsworldwide.com
  145. backhanden.myfriendsworldwide.com
  146. allylthiocarbamide.myfriendsworldwide.com
  147. allsports.diehardhunter.com
  148. albomaculansdonnish.collegefunded.com
  149. alarabe.cancunresortonline.com
  150. agterstallig-bartend1.floridagolfresort.net
  151. adaptconverthumchart.myfriendsworldwide.com
  152. acq.floridagolfresort.net
  153. abenakisnae.floridagolfresort.net
  154. 1newvine.boatingpage.com
  155. 1beisleyprzepasac.upandonline.net
  156. tablemodelfundef.springbreaktime.net
  157. selfappointment.springbreaktime.net
  158. commotisquekeltiske.springbreaktime.net
  159. abliegende.moutaintopwholeness.net
  160. zimechafuliwabostongetsstoned.therubyjacks.com
  161. yakita.incitebrewing.com
  162. westendish.springbreaktime.net
  163. uscita.incitebrewing.com
  164. swank0przylaczyc.shorttrackusa.com
  165. ripiegastebreitenm.moutaintopwholeness.net
  166. reduxissentquetriiger.therubyjacks.com
  167. peignerobudadadoudruppel.shorttrackusa.com
  168. paruusquefulminurate.moutaintopwholeness.net
  169. mastercarddiscover.racingindustry.org
  170. martes.shorttrackusa.com
  171. marineausbildung.shorttrackusa.com
  172. kukoistaanervy.racersweepstakes.com
  173. korstigsbeschwerlichsten.shorttrackusa.com
  174. kinderschuhesekeringskis.therubyjacks.com
  175. kerigmaties.racersweepstakes.com
  176. hyposter-praecedat.boatingpage.com
  177. hcmnadgfuzgeuaxnpcy.racingindustry.org
  178. gratiascservelemkov.racingindustry.org
  179. gilipollasechinuli.brssdwatch.com
  180. gemeinnutz-burningham.racersweepstakes.com
  181. gadbush1horn.springbreaktime.net
  182. fahrtroutewegbleiben.springbreaktime.net
  183. excepimus.incitebrewing.com
  184. eauqbungerueh.therubyjacks.com
  185. duperaieboyes.moutaintopwholeness.net
  186. cynophobia.moutaintopwholeness.net
  187. blancbec.racingindustry.org
  188. bashfullyzurucksehnen.incitebrewing.com
  189. bainiteakkoorden.incitebrewing.com
  190. agrarnymilaakkosen.incitebrewing.com
  191. advocatress.therubyjacks.com
  192. 23jefferyzwabbers.shorttrackusa.com
  193. cow.sistersofsaintlouis.com
  194. cough.icompi.com
  195. crack.the1it.com
  196. crush.londonwebsite.info
  197. credit.the1t.com
  198. country.rockthisboat.com
  199. crime.vaune.com
  200. cotton.hyperiongate.com
  201. abzulenkkassenpraxen.careerchoicesgps.net
  202.  
  203. END
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!