#DhiaLite- Suspicious domains Aug 28th part 2, 2013

Wed, Aug 28th 2013
#DhiaLite - Follow-up, suspicious domains spotted a few days ago hosted on same IP as GongDa EK domains from http://urlquery.net/report.php?id=4799229

fokolokork.org
issuetunerstypes.biz
nestiafillserrnos.info

are hosting Fiesta EK, seem still active
http://urlquery.net/report.php?id=4811525
http://urlquery.net/report.php?id=4811578
http://urlquery.net/report.php?id=4811589

domainswestingnews.biz
fokolokork.org
issuetunerstypes.biz
mailmergeparagon.biz
nestiafillserrnos.info
orbverios.biz
ovalsdonald.biz
sharepointxdegrees.net
ttuewdzk.myddns.com