DhiaLite

DhiaLite's Pastebin

14,039 33,572 0 10 years ago
Name / Title Added Expires Hits Comments Syntax  
New Browlock on OVH range Mar 19, 2014 Mar 19th, 2014 Never 289 0 None -
Current and next Nuclear EK IPs - Feb 26, 2014 Feb 26th, 2014 Never 380 0 None -
Suspicious .pw, .com, .nl on 212.83.164.151-153 Feb 24th, 2014 Never 260 0 None -
Predicted next Nuclear IPs - Feb 22, 2014 Feb 22nd, 2014 Never 356 0 None -
NuclearPack back to OVH and changed strategy - Feb 22, 2014 Feb 22nd, 2014 Never 279 0 None -
NuclearPack EK domains - Feb 12, 2014 Feb 12th, 2014 Never 580 0 None -
New Suspicious .pl subdomain on Virut CnC IP - Feb 5, 2014 Feb 5th, 2014 Never 440 0 None -
New Browlock under compromised Godaddy doms - Feb 1, 2014 Feb 1st, 2014 Never 327 0 None -
New Browlock under compromised Godaddy doms - Jan 18, 2014 Jan 18th, 2014 Never 327 0 None -
PayPal Phishing on 80.86.93.101 - Jan 15, 2014 Jan 15th, 2014 Never 270 0 None -
New Browlock domains - Jan 8, 2014 Jan 8th, 2014 Never 209 0 None -
Suspicious .pl short lived subdomains - Jan 8, 2014 Jan 8th, 2014 Never 232 0 None -
Suspicious domains on 89.144.60.123-126 - Jan 04, 2014 Jan 4th, 2014 Never 213 0 None -
Styx EK domains on 80.243.181.162-165 - Jan 04, 2014 Jan 4th, 2014 Never 227 0 None -
Suspicious domains on 89.144.60.110 - Dec 19, 2013 Dec 19th, 2013 Never 215 0 None -
NuclearPack EK domains - Dec 17, 2013 Dec 17th, 2013 Never 204 0 None -
NuclearPack EK domains - Dec 15, 2013 Dec 15th, 2013 Never 204 0 None -
Casino domains on 178.33.132.80 - Dec 15, 2013 Dec 15th, 2013 Never 190 0 None -
Phishing & Spam on 198.27.111.96-127 - Dec 15, 2013 Dec 14th, 2013 Never 557 0 None -
NuclearPack EK domains - Dec 13, 2013 Dec 13th, 2013 Never 191 0 None -
Compromised GoDaddy domains - Dec 2, 2013 Dec 2nd, 2013 Never 286 0 None -
Possible EK domains - Dec 1, 2013 Dec 2nd, 2013 Never 238 0 None -
FakeAV domains on 109.236.86.172 - Nov 30, 2013 Nov 30th, 2013 Never 316 0 None -
Suspicious .pl short lived subdomains - Nov 30, 2013 Nov 30th, 2013 Never 217 0 None -
Compromised GoDaddy domains II - Nov 29, 2013 Nov 29th, 2013 Never 241 0 None -
Compromised GoDaddy domains - Nov 29, 2013 Nov 29th, 2013 Never 202 0 None -
Compromised GoDaddy domains - Nov 23, 2013 Nov 24th, 2013 Never 195 0 None -
NuclearPack EK domains - Nov 23, 2013 Nov 23rd, 2013 Never 190 0 None -
NuclearPack EK domains - Nov 21, 2013 Nov 21st, 2013 Never 284 0 None -
Compromised GoDaddy domains - Nov 21, 2013 Nov 21st, 2013 Never 202 0 None -
Malware shares infrastructure w/ Cryptolocker - Nov 20, 2013 Nov 20th, 2013 Never 364 0 None -
NuclearPack EK domains - Nov 19, 2013 Nov 19th, 2013 Never 223 0 None -
Suspicious .pl short lived subdomains - Nov 18, 2013 Nov 18th, 2013 Never 255 0 None -
Compromised GoDaddy domains - Nov 18, 2013 Nov 18th, 2013 Never 369 0 None -
Possible EK domains - Nov 16, 2013 Nov 16th, 2013 Never 236 0 None -
Suspicious .pl short lived subdomains - Nov 15, 2013 Nov 15th, 2013 Never 206 0 None -
Possible EK domains II - Nov 15, 2013 Nov 15th, 2013 Never 173 0 None -
Possible EK domains - Nov 15, 2013 Nov 15th, 2013 Never 244 0 None -
Compromised GoDaddy domains, Angler EK - Nov 15, 2013 Nov 15th, 2013 Never 286 0 None -
NuclearPack EK domains - Nov 15, 2013 Nov 15th, 2013 Never 238 0 None -
New Browlock domains - Nov 14, 2013 Nov 15th, 2013 Never 281 0 None -
Suspicious .pl short lived subdomains II - Nov 14, 2013 Nov 14th, 2013 Never 220 0 None -
NuclearPack EK domains - Nov 14, 2013 Nov 14th, 2013 Never 231 0 None -
Suspicious .pl short lived subdomains - Nov 14, 2013 Nov 14th, 2013 Never 267 0 None -
Compromised GoDaddy domains - Nov 14, 2013 Nov 14th, 2013 Never 257 0 None -
Suspicious .pl short lived subdomains II - Nov 13, 2013 Nov 13th, 2013 Never 242 0 None -
Suspicious domains on 212.83.155.218 - Nov 13, 2013 Nov 13th, 2013 Never 248 0 None -
Suspicious .pl short lived subdomains - Nov 12, 2013 Nov 13th, 2013 Never 217 0 None -
Possible EK domains - Nov 10, 2013 Nov 10th, 2013 Never 209 0 None -
Compromised GoDaddy domains - Nov 10, 2013 Nov 10th, 2013 Never 357 0 None -
Compromised GoDaddy domains - Nov 5, 2013 Nov 5th, 2013 Never 337 0 None -
Compromised GoDaddy domains part 2 - Nov 2, 2013 Nov 2nd, 2013 Never 266 0 None -
Compromised GoDaddy domains - Nov 2, 2013 Nov 2nd, 2013 Never 321 0 None -
New malicious campaign on 62.122.73.200-254 - Nov 1, 2013 Nov 2nd, 2013 Never 1,386 0 None -
Compromised GoDaddy domains 2 - Oct 31, 2013 Oct 31st, 2013 Never 284 0 None -
New NuclearPack domains on 142.4.194.1 - Oct 31, 2013 Oct 31st, 2013 Never 623 0 None -
Compromised GoDaddy domains - Oct 31, 2013 Oct 31st, 2013 Never 231 0 None -
New malware domains on 5.254.101.32 - Oct 30, 2013 Oct 30th, 2013 Never 244 0 None -
Suspicious new domains on 144.76.207.226 - Oct 29, 2013 Oct 30th, 2013 Never 234 0 None -
Compromised GoDaddy domains - Oct 29, 2013 Oct 29th, 2013 Never 239 0 None -
New NuclearPack domains on 142.4.194.0 - Oct 29, 2013 Oct 29th, 2013 Never 785 0 None -
Suspicious new domains on 212.83.148.75 - Oct 27, 2013 Oct 27th, 2013 Never 265 0 None -
Suspicious new domains on 212.83.148.185 - Oct 25, 2013 Oct 25th, 2013 Never 317 0 None -
Neutrino EK domains on 62.210.209.190 - Oct 25, 2013 Oct 25th, 2013 Never 214 0 None -
NuclearPack EK domains on 198.50.235.204 - Oct 25, 2013 Oct 25th, 2013 Never 169 0 None -
NuclearPack EK domains on 198.50.235.203 - Oct 24, 2013 Oct 24th, 2013 Never 207 0 None -
Compromised GoDaddy domains - Oct 23, 2013 Oct 24th, 2013 Never 229 0 None -
Compromised GoDaddy domains - Oct 22, 2013 Oct 22nd, 2013 Never 303 0 None -
NuclearPack EK domains sliding on IPs- Oct 22, 2013 Oct 22nd, 2013 Never 489 0 None -
NuclearPack EK domains - Oct 16, 2013 Oct 17th, 2013 Never 317 0 None -
CIDRs of Ukrainian IP space - Oct 14 2013 Oct 14th, 2013 Never 247 0 None -
Canadian pharmacy sites - Oct 12, 2013 Oct 12th, 2013 Never 227 0 None -
Recent EK domains - Oct 11, 2013 Oct 11th, 2013 Never 215 0 None -
.pl short lived subdomains - Oct 3, 2013 Oct 3rd, 2013 Never 240 0 None -
Recent EK domains - Sep 29, 2013 Sep 29th, 2013 Never 259 0 None -
Recent EK domains - Sep 26, 2013 Sep 26th, 2013 Never 295 0 None -
Recent EK domains - Sep 24, 2013 Sep 24th, 2013 Never 183 0 None -
Recent EK domains - Sep 22, 2013 Sep 22nd, 2013 Never 796 0 None -
Domain on 216.172.60.55 - Sep 22, 2013 Sep 22nd, 2013 Never 196 0 None -
Domains on 216.172.63.243 - Sep 22, 2013 Sep 22nd, 2013 Never 226 0 None -
Domains on 216.172.63.141 & 216.172.63.149 - Sep 21, 2013 Sep 21st, 2013 Never 219 0 None -
Domains on 216.172.63.137 - Sep 21, 2013 Sep 21st, 2013 Never 285 0 None -
Domains on 5.254.101.114 - part 2 Sep 17, 2013 Sep 18th, 2013 Never 179 0 None -
Domains on 5.254.101.114 - Sep 17, 2013 Sep 17th, 2013 Never 175 0 None -
Domains on 95.169.186.139 - Sep 16, 2013 Sep 17th, 2013 Never 235 0 None -
Domains on 188.190.120.43 - Sep 16, 2013 Sep 17th, 2013 Never 217 0 None -
Suspicious domains - Revoyem related Sep 16, 2013 Sep 16th, 2013 Never 178 0 None -
Suspicious domains - Revoyem related Sep 12, 2013 Sep 12th, 2013 Never 2,010 0 None -
#DhiaLite - OSINT on 37.58.73.42/95.156.228.69/195.210.43.42 Sep 11th, 2013 Never 711 0 None -
New Police scam domains Sep 10, 2013 Sep 10th, 2013 Never 701 0 None -
#DhiaLite- Suspicious domains Sep 9th, 2013 Sep 9th, 2013 Never 226 0 None -
#DhiaLite- Suspicious domains Sep 8th part 2, 2013 Sep 8th, 2013 Never 162 0 None -
#DhiaLite- Suspicious domains Sep 8th, 2013 Sep 8th, 2013 Never 170 0 None -
#DhiaLite- Suspicious domains Sep 5th, 2013 Sep 5th, 2013 Never 224 0 None -
#DhiaLite- Suspicious domains Sep 4th part 2, 2013 Sep 5th, 2013 Never 171 0 None -
#DhiaLite- Suspicious domains Sep 4th, 2013 Sep 4th, 2013 Never 168 0 None -
#DhiaLite- Suspicious domains Sep 3rd, 2013 Sep 3rd, 2013 Never 176 0 None -
#DhiaLite- Suspicious domains Sep 3rd, 2013 Sep 3rd, 2013 Never 172 0 None -
#DhiaLite- Callbacks used to host Kelihos doms Sep 2nd, 2013 Sep 2nd, 2013 Never 254 0 None -
#DhiaLite- Police scam domains and other Sep 2nd, 2013 Sep 2nd, 2013 Never 202 0 None -