Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Sat, Dec 14 2013
- #DhiaLite - Facebook live phishing domains on 198.27.111.124
- and entire range 198.27.111.96 to 198.27.111.127 used for phishing and spam
- Currently 80+ phishing domains are on 198.27.111.124
- They are under the .pw 2LDs below all registered between Dec 9th and 15th
- geel3.pw 2013-12-15
- geel2.pw 2013-12-15
- geel1.pw 2013-12-15
- feel3.pw 2013-12-14
- feel2.pw 2013-12-14
- feel1.pw 2013-12-14
- meex5.pw 2013-12-12
- deel2.pw 2013-12-12
- deel1.pw 2013-12-12
- meex3.pw 2013-12-10
- meex2.pw 2013-12-10
- meex1.pw 2013-12-10
- yeel4.pw 2013-12-09
- yeel3.pw 2013-12-09
- yeel2.pw 2013-12-09
- yeel1.pw 2013-12-09
- Furthermore the range 198.27.111.96 to 198.27.111.127 has been hosting spam and phishing domains since Sep 17th 2013.
- Currently 6770+ domains have been hosted on this range under the 2LDs shown below
- One of these 2LD etdht.com has been registered by a registrant with the email greg.oberman@yahoo.com
- That email address is associated with a profile that registered a lot of other spam domains as shown in http://www.spamhaus.org/rokso/evidence/ROK10048/millionairenetwork.com/partner-in-spam-greg-oberman-oel-media
- #List of 2LDs of domains on 198.27.111.96 to 198.27.111.127 registered between Sep 17th and Dec 15th 2013
- 0x7777.info
- 0x8888.info
- accountverifikation.com
- accountverifikation.de
- bdh1.pw
- bvbvb.pw
- cfn1.pw
- chromeserver.us
- cnn-money.pw
- cnn-news.pw
- dbcnetworks.com
- dealnetworker.com
- deel1.pw
- deel2.pw
- disonss.pw
- dmsoms.pw
- easoms.pw
- erere.pw
- ermsos.pw
- esosms.pw
- etdht.com
- fasmos.pw
- fasosc.pw
- fasosm.pw
- fcsmos.pw
- feel1.pw
- feel2.pw
- feel3.pw
- fesmsm.pw
- financial-news09.com
- financial-news9.com
- fox-news.pw
- frabum.com
- ftyhr.pw
- geel1.pw
- geel2.pw
- geel3.pw
- hostingjs.com
- jifmd.pw
- kunden-verifizierungen.de
- masoss.pw
- meex1.pw
- meex2.pw
- meex3.pw
- meex5.pw
- meine-verifizierung.net
- mk2s.pw
- mok2.pw
- no-ip.info
- obfuscationlabs.com
- online-safer.net
- online-verifizierungen.de
- paypal-pruefung.com
- paypal-verifizierungen.de
- ployu.pw
- pruefung-paypal.de
- rasoms.pw
- ricksnetworks.com
- rismso.pw
- samsos.pw
- securecheck-verificationservice.com
- secure-safer.net
- sfr4.pw
- sichererer-paypal.com
- sicherere-zahlung.de
- sicherer-paypal.com
- sicherheit-kunden.com
- starfriend.pw
- utynt.pw
- verifikation-paypal.info
- verifizierungen-paypal.com
- verifizierungen-paypal.de
- vsemso.pw
- vssmos.pw
- web-kundenservice.com
- wmsish.pw
- xfj2.pw
- xsc3.pw
- xsh1.pw
- xsusm.pw
- xusms.pw
- yeel1.pw
- yeel2.pw
- yeel3.pw
- yeel4.pw
- yhruf.pw
- zns2.pw
- zwq1.pw
- #end
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement