#DhiaLite- Suspicious domains Sep 5th, 2013

Thu, Sep 5th 2013
#DhiaLite - Suspicious resolving subdomains using same infrastructure as BHEK.
Sorted in descending order by current volume of traffic.
Their resolution is unstable: A records come and go, and could change.
Some might be already confirmed BHEK malicious. Did not check yet.
Potentially malicious in the future, watch for them.
Registered in the past month or last couple days.

#domains
inappiosbased.biz
arizonaalex.biz
inheritingcollaborative.biz
cellsnotyetstated.biz
smartsectorenough.biz
fxpfhkjkqsvirtualized.biz
softquadsregarding.biz
harvesteddoppelganger.biz
boostcrisper.biz
deniedatomtoms.biz
activematrixconsolidation.biz
rechargedprecompiled.biz
abiltyrichly.biz
teenageefaxs.biz
autopostvulnerability.biz
ns1.competitionswhole.com
downuntiltopic.biz
ns2.competitionswhole.com
birthdateunread.biz
tracehelpthat.biz
configurablefolderstry.biz
allotsmoreincluding.biz
ns2.copingintuos.com
ns1.copingintuos.com
regeditoutpace.biz
headphoneshrink.biz
pioneeredabbreviations.biz
ws2.rulerflorallike.com
ws1.rulerflorallike.com
ns2.msnfortune.com
blockablerightclicks.biz
nns4.msnfortune.com
actualitydug.biz
zs2.makethisonlol.com
zs1.makethisonlol.com
ptcyclic.biz
ns2.ranpaints.com
ns1.ranpaints.com
finasteride-1mg.org
fairmarketfilenames.biz
printerteachers.biz
ns2.janesvm.com
ns1.janesvm.com
viperdirectives.biz
ss2.fortunamens.com

END