MalwareMustDie

#MalwareMustDie! Monitoring INTERNET.BS base Kelihos Domain

Aug 6th, 2013
861
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. // MalwareMustDie | @unixfreaxjp
  2. // extracting INTERNET.BS database to check possibilities of further Kelihos used domains
  3. //
  4. // From today moving backwards / August 2013...
  5. // With grep formula of Kelihos payload domain:
  6. // "\][a-z]\{7\}\."
  7.  
  8. 8/5
  9. 8/4
  10. 8/3
  11. [61]cedarfx.com
  12. [107]gmailyr.com
  13. [179]poxitan.com
  14.  
  15. 8/2
  16. [185]liwuzan.com
  17.  
  18. 8/1
  19. [128]ebooksh.com
  20. [206]kozvain.com
  21.  
  22. 7/31
  23. [108]cmayson.com
  24. [114]cuntala.com
  25. [178]harmoza.com
  26.  
  27. 7/30
  28. [34]abizaga.com
  29. [38]adelska.com
  30. [56]baikept.com
  31. [96]chagabi.com
  32.  
  33. 7/29
  34. [22]arcoiro.com
  35. [32]beebibl.com
  36. [80]garonda.com
  37.  
  38. 7/28
  39. 7/27
  40. [23]aakawir.com
  41. [39]buyitny.com
  42. [147]narotek.com
  43.  
  44. 7/26
  45. [137]exocant.com
  46. [197]jptubes.com
  47.  
  48. 7/25
  49. [64]bendoze.com
  50. [72]bitopup.com
  51. [74]borless.com
  52. [186]fxplain.com
  53. [212]hjfglcq.com
  54.  
  55. 7/24
  56. [51]betelcj.com
  57. [159]johress.com
  58. [171]kingdls.com
  59. [173]kloessl.com
  60. [197]lousich.com
  61.  
  62. 7/23
  63. [34]allnero.com
  64. [124]dadiego.com
  65. [194]hosttox.com
  66. [202]ingdelo.com
  67.  
  68. 7/22
  69. [80]claryum.com
  70. [112]digisrc.com
  71. [118]dumaxtv.com
  72. [152]gdogsoi.com
  73. [160]goodtor.com
  74. [174]herotor.com
  75.  
  76. 7/21
  77. [29]apexacs.com
  78.  
  79. 7/20
  80. [127]kasiras.com
  81. [191]pohydet.com
  82.  
  83. 7/19
  84. [50]appstrk.com
  85. [60]autooan.com
  86. [176]domkran.com
  87.  
  88. 7/18
  89. [62]badvets.com
  90. [140]dvdmvie.com
  91. [196]javdivx.com
  92. [200]jenbuys.com
  93.  
  94. 7/17
  95. [97]gmailor.com
  96. [99]golwins.com
  97.  
  98. 7/16
  99. [147]msutown.com
  100.  
  101. 7/15
  102. [47]aoiyume.com
  103. [107]btcmbay.com
  104. [119]caffema.com
  105. [155]combpen.com
  106. [199]dwnlder.com
  107.  
  108. 7/14
  109. [23]apptrkz.com
  110. [171]joancat.com
  111. [205]mqclick.com
  112.  
  113. 7/13
  114. [32]arbitrs.com
  115. [100]lebrend.com
  116.  
  117. 7/12
  118. [39]amtrakm.com
  119. [109]coopcer.com
  120. [137]evohack.com
  121. [171]hanetta.com
  122.  
  123. 7/11
  124. [42]babdior.com
  125. [50]birauto.com
  126. [54]bizraye.com
  127. [80]chalyng.com
  128. [96]donalld.com
  129. [188]jinable.com
  130. [194]juniorm.com
  131.  
  132. 7/10
  133. [51]babllon.com
  134. [53]baixyng.com
  135. [55]bayxing.com
  136. [57]belinug.com
  137. [165]makroob.com
  138. [167]maktoon.com
  139. [199]msktoob.com
  140.  
  141. 7/09
  142. [57]ecucare.com
  143. [63]foodliy.com
  144. [69]googlss.com
  145. [199]tdguide.com
  146.  
  147. 7/08
  148. [43]bamamei.com
  149. [69]corseco.com
  150. [95]flixerr.com
  151. [103]googelr.com
  152. [201]skinpks.com
  153.  
  154. 7/07
  155. [106]ahmshea.com
  156. [118]aisleme.com
  157.  
  158. 7/06
  159. [19]adcoves.com
  160. [91]ektobly.com
  161. [139]musbeat.com
  162. [181]seoytao.com
  163.  
  164. 7/05
  165. [31]bbfindr.com
  166. [153]gtecltd.com
  167. [171]janethi.com
  168.  
  169. 7/04
  170. [61]beoking.com
  171. [145]esyfany.com
  172. [147]evoldar.com
  173. [155]femixil.com
  174. [185]hkotels.com
  175. [187]hobplus.com
  176. [191]hoctels.com
  177. [193]hoktels.com
  178. [197]hotcels.com
  179. [199]hotuels.com
  180.  
  181. 7/03
  182. [106]diyidun.com
  183. [188]itaxico.com
  184.  
  185. 7/02
  186. 7/01
  187. [36]awcream.com
  188. [54]bluesjy.com
  189. [98]ddhjxgs.com
  190. [212]lcclove.com
  191.  
  192. 6/30
  193. [29]ahzixuz.com
  194. [49]bydilig.com
  195. [55]ciqunim.com
  196. [79]erkyfzu.com
  197. [105]ggzuche.com
  198. [107]gipopef.com
  199. [121]hosukak.com
  200. [123]hyciqeg.com
  201. [143]ijyhteh.com
  202. [145]ikaoxun.com
  203. [195]kawkyik.com
  204. [203]kyilbyb.com
  205. [211]lodopif.com
  206.  
  207. 6/29
  208. [157]mufuzhu.com
  209. [197]ravepvp.com
  210.  
  211. 6/28
  212. [180]gmailex.com
  213.  
  214. 6/27
  215. [128]coupago.com
  216. [130]coupalo.com
  217. [138]dallenk.com
  218. [178]factler.com
  219. [202]gwokart.com
  220.  
  221. 6/26
  222. [58]bamonef.com
  223. [72]bysymsy.com
  224. [120]driplix.com
  225. [126]ebonnet.com
  226. [182]hostgix.com
  227. [198]inkoweb.com
  228.  
  229. 6/25
  230. [56]apptiss.com
  231.  
  232. 6/24
  233. [33]aeclick.com
  234. [41]amaraly.com
  235. [57]avtoneo.com
  236. [65]bewacht.com
  237. [73]bnpimap.com
  238. [101]cefothe.com
  239. [133]cqzgedu.com
  240.  
  241. 6/23
  242. [56]askword.com
  243. [80]canbids.com
  244. [122]derment.com
  245. [124]dhampus.com
  246. [136]dramaaz.com
  247. [202]hotjave.com
  248.  
  249. 6/22
  250. [87]diezzie.com
  251. [197]mrrhelp.com
  252.  
  253. 6/21
  254. [40]asicgen.com
  255. [50]barkwiz.com
  256. [172]hubroma.com
  257.  
  258. 6/20
  259. [90]celebko.com
  260. [208]hanouty.com
  261.  
  262. 6/19
  263. [39]bibiker.com
  264. [75]convors.com
  265. [91]disneyt.com
  266. [141]goosoma.com
  267. [145]guialou.com
  268. [207]myracom.com
  269.  
  270. 6/18
  271. [57]amygoal.com
  272. [113]bunskus.com
  273. [167]cutpoem.com
  274. [183]davujuz.com
  275.  
  276. 6/17
  277. [115]anwarix.com
  278. [123]appicat.com
  279. [127]appidog.com
  280. [137]arcshit.com
  281. [153]aryncis.com
  282. [185]axecash.com
  283. [187]axubsyz.com
  284.  
  285. 6/16
  286. [34]acnenew.com
  287. [102]aulabox.com
  288. [158]bokehon.com
  289.  
  290. 6/15
  291. [49]bigunol.com
  292. [55]bopokon.com
  293. [95]cubcuyl.com
  294. [109]dijjuvi.com
  295. [113]docibix.com
  296. [119]ehnexuk.com
  297. [121]eletmop.com
  298. [123]elmiraj.com
  299. [135]exsoczu.com
  300. [143]filodit.com
  301. [149]fobgieh.com
  302. [151]focadic.com
  303. [155]gogmyyw.com
  304. [159]gridnon.com
  305. [169]helpcsm.com
  306. [175]huditqa.com
  307. [185]ipwodir.com
  308. [187]irhetpy.com
  309. [191]jufafyz.com
  310. [193]kavrihu.com
  311. [199]legupsi.com
  312. [203]lilozyz.com
  313. [209]lorishy.com
  314. [211]lupafol.com
  315.  
  316. 6/14
  317. [64]cantail.com
  318. [140]framino.com
  319. [144]gamsers.com
  320.  
  321. 6/13
  322. [94]btweetn.com
  323. [96]bylucia.com
  324. [186]dopedil.com
  325.  
  326. 6/12
  327. 6/11
  328. 6/10
  329. 6/09
  330. [18]mathevo.com
  331.  
  332. 6/08
  333. 6/07
  334. [126]cehinsa.com
  335.  
  336. 6/06
  337. [84]beuhnim.com <==== UNSPOTTED KELIHOS DOMAIN #1
  338. [138]dusseva.com <===== UNSPOTTED KELIHOS DOMAIN #2
  339. [144]enygnaq.com <===== UNSPOTTED KELIHOS DOMAIN #3
  340. [192]gulfkat.com <===== UNSPOTTED KELIHOS DOMAIN #4
  341.  
  342. 6/05
  343. [108]cvdpics.com
  344. [120]dvdsden.com
  345. [142]gmailup.com
  346. [178]ipiante.com
  347. [180]jangust.com
  348. [212]logusea.com
  349.  
  350. 6/04
  351. [136]cltrack.com
  352.  
  353. 6/03
  354. [62]ahonele.com
  355. [70]aulinas.com
  356. [122]credimy.com
  357. [166]gbgdoha.com
  358. [170]gibooks.com
  359. [182]hbsldzs.com
  360. [212]ivaness.com
  361.  
  362. 6/02
  363. [106]achievu.com
  364. [108]achrnew.com
  365. [126]adtview.com
  366. [128]adtvtoc.com
  367. [142]aflover.com
  368. [168]alepocp.com
  369. [182]allouet.com
  370.  
  371. 6/01
  372. [57]buytors.com
  373. [95]fitserk.com
  374. [111]helprrg.com
  375. [143]mirzabd.com
  376. [171]mytilac.com
  377. [183]nsphone.com
  378.  
  379. ---
  380. #MalwareMustDie!
  381. @unixfreaxjp bash-3.2$ date
  382. Tue Aug 6 20:25:55 JST 2013
RAW Paste Data