DhiaLite

DhiaLite's Pastebin

14,463 45,699 0 12 years ago
Name / Title Added Expires Hits Comments Syntax  
New Browlock on OVH range Mar 19, 2014 Mar 19th, 2014 Never 393 0 None -
Current and next Nuclear EK IPs - Feb 26, 2014 Feb 26th, 2014 Never 496 0 None -
Suspicious .pw, .com, .nl on 212.83.164.151-153 Feb 24th, 2014 Never 357 0 None -
Predicted next Nuclear IPs - Feb 22, 2014 Feb 22nd, 2014 Never 452 0 None -
NuclearPack back to OVH and changed strategy - Feb 22, 2014 Feb 22nd, 2014 Never 374 0 None -
NuclearPack EK domains - Feb 12, 2014 Feb 12th, 2014 Never 719 0 None -
New Suspicious .pl subdomain on Virut CnC IP - Feb 5, 2014 Feb 5th, 2014 Never 541 0 None -
New Browlock under compromised Godaddy doms - Feb 1, 2014 Feb 1st, 2014 Never 431 0 None -
New Browlock under compromised Godaddy doms - Jan 18, 2014 Jan 18th, 2014 Never 493 0 None -
PayPal Phishing on 80.86.93.101 - Jan 15, 2014 Jan 15th, 2014 Never 370 0 None -
New Browlock domains - Jan 8, 2014 Jan 8th, 2014 Never 333 0 None -
Suspicious .pl short lived subdomains - Jan 8, 2014 Jan 8th, 2014 Never 327 0 None -
Suspicious domains on 89.144.60.123-126 - Jan 04, 2014 Jan 4th, 2014 Never 321 0 None -
Styx EK domains on 80.243.181.162-165 - Jan 04, 2014 Jan 4th, 2014 Never 322 0 None -
Suspicious domains on 89.144.60.110 - Dec 19, 2013 Dec 19th, 2013 Never 311 0 None -
NuclearPack EK domains - Dec 17, 2013 Dec 17th, 2013 Never 314 0 None -
NuclearPack EK domains - Dec 15, 2013 Dec 15th, 2013 Never 306 0 None -
Casino domains on 178.33.132.80 - Dec 15, 2013 Dec 15th, 2013 Never 290 0 None -
Phishing & Spam on 198.27.111.96-127 - Dec 15, 2013 Dec 14th, 2013 Never 664 0 None -
NuclearPack EK domains - Dec 13, 2013 Dec 13th, 2013 Never 294 0 None -
Compromised GoDaddy domains - Dec 2, 2013 Dec 2nd, 2013 Never 404 0 None -
Possible EK domains - Dec 1, 2013 Dec 2nd, 2013 Never 351 0 None -
FakeAV domains on 109.236.86.172 - Nov 30, 2013 Nov 30th, 2013 Never 425 0 None -
Suspicious .pl short lived subdomains - Nov 30, 2013 Nov 30th, 2013 Never 303 0 None -
Compromised GoDaddy domains II - Nov 29, 2013 Nov 29th, 2013 Never 340 0 None -
Compromised GoDaddy domains - Nov 29, 2013 Nov 29th, 2013 Never 314 0 None -
Compromised GoDaddy domains - Nov 23, 2013 Nov 24th, 2013 Never 300 0 None -
NuclearPack EK domains - Nov 23, 2013 Nov 23rd, 2013 Never 286 0 None -
NuclearPack EK domains - Nov 21, 2013 Nov 21st, 2013 Never 386 0 None -
Compromised GoDaddy domains - Nov 21, 2013 Nov 21st, 2013 Never 299 0 None -
Malware shares infrastructure w/ Cryptolocker - Nov 20, 2013 Nov 20th, 2013 Never 477 0 None -
NuclearPack EK domains - Nov 19, 2013 Nov 19th, 2013 Never 361 0 None -
Suspicious .pl short lived subdomains - Nov 18, 2013 Nov 18th, 2013 Never 350 0 None -
Compromised GoDaddy domains - Nov 18, 2013 Nov 18th, 2013 Never 477 0 None -
Possible EK domains - Nov 16, 2013 Nov 16th, 2013 Never 332 0 None -
Suspicious .pl short lived subdomains - Nov 15, 2013 Nov 15th, 2013 Never 325 0 None -
Possible EK domains II - Nov 15, 2013 Nov 15th, 2013 Never 283 0 None -
Possible EK domains - Nov 15, 2013 Nov 15th, 2013 Never 382 0 None -
Compromised GoDaddy domains, Angler EK - Nov 15, 2013 Nov 15th, 2013 Never 370 0 None -
NuclearPack EK domains - Nov 15, 2013 Nov 15th, 2013 Never 343 0 None -
New Browlock domains - Nov 14, 2013 Nov 15th, 2013 Never 387 0 None -
Suspicious .pl short lived subdomains II - Nov 14, 2013 Nov 14th, 2013 Never 330 0 None -
NuclearPack EK domains - Nov 14, 2013 Nov 14th, 2013 Never 325 0 None -
Suspicious .pl short lived subdomains - Nov 14, 2013 Nov 14th, 2013 Never 372 0 None -
Compromised GoDaddy domains - Nov 14, 2013 Nov 14th, 2013 Never 373 0 None -
Suspicious .pl short lived subdomains II - Nov 13, 2013 Nov 13th, 2013 Never 337 0 None -
Suspicious domains on 212.83.155.218 - Nov 13, 2013 Nov 13th, 2013 Never 357 0 None -
Suspicious .pl short lived subdomains - Nov 12, 2013 Nov 13th, 2013 Never 409 0 None -
Possible EK domains - Nov 10, 2013 Nov 10th, 2013 Never 312 0 None -
Compromised GoDaddy domains - Nov 10, 2013 Nov 10th, 2013 Never 453 0 None -
Compromised GoDaddy domains - Nov 5, 2013 Nov 5th, 2013 Never 427 0 None -
Compromised GoDaddy domains part 2 - Nov 2, 2013 Nov 2nd, 2013 Never 359 0 None -
Compromised GoDaddy domains - Nov 2, 2013 Nov 2nd, 2013 Never 414 0 None -
New malicious campaign on 62.122.73.200-254 - Nov 1, 2013 Nov 2nd, 2013 Never 1,805 7 None -
Compromised GoDaddy domains 2 - Oct 31, 2013 Oct 31st, 2013 Never 367 0 None -
New NuclearPack domains on 142.4.194.1 - Oct 31, 2013 Oct 31st, 2013 Never 742 0 None -
Compromised GoDaddy domains - Oct 31, 2013 Oct 31st, 2013 Never 321 0 None -
New malware domains on 5.254.101.32 - Oct 30, 2013 Oct 30th, 2013 Never 337 0 None -
Suspicious new domains on 144.76.207.226 - Oct 29, 2013 Oct 30th, 2013 Never 329 0 None -
Compromised GoDaddy domains - Oct 29, 2013 Oct 29th, 2013 Never 341 0 None -
New NuclearPack domains on 142.4.194.0 - Oct 29, 2013 Oct 29th, 2013 Never 919 0 None -
Suspicious new domains on 212.83.148.75 - Oct 27, 2013 Oct 27th, 2013 Never 352 0 None -
Suspicious new domains on 212.83.148.185 - Oct 25, 2013 Oct 25th, 2013 Never 401 0 None -
Neutrino EK domains on 62.210.209.190 - Oct 25, 2013 Oct 25th, 2013 Never 305 0 None -
NuclearPack EK domains on 198.50.235.204 - Oct 25, 2013 Oct 25th, 2013 Never 262 0 None -
NuclearPack EK domains on 198.50.235.203 - Oct 24, 2013 Oct 24th, 2013 Never 302 0 None -
Compromised GoDaddy domains - Oct 23, 2013 Oct 24th, 2013 Never 322 0 None -
Compromised GoDaddy domains - Oct 22, 2013 Oct 22nd, 2013 Never 399 0 None -
NuclearPack EK domains sliding on IPs- Oct 22, 2013 Oct 22nd, 2013 Never 609 0 None -
NuclearPack EK domains - Oct 16, 2013 Oct 17th, 2013 Never 560 0 None -
CIDRs of Ukrainian IP space - Oct 14 2013 Oct 14th, 2013 Never 347 0 None -
Canadian pharmacy sites - Oct 12, 2013 Oct 12th, 2013 Never 325 0 None -
Recent EK domains - Oct 11, 2013 Oct 11th, 2013 Never 338 0 None -
.pl short lived subdomains - Oct 3, 2013 Oct 3rd, 2013 Never 323 0 None -
Recent EK domains - Sep 29, 2013 Sep 29th, 2013 Never 369 0 None -
Recent EK domains - Sep 26, 2013 Sep 26th, 2013 Never 402 0 None -
Recent EK domains - Sep 24, 2013 Sep 24th, 2013 Never 284 0 None -
Recent EK domains - Sep 22, 2013 Sep 22nd, 2013 Never 904 0 None -
Domain on 216.172.60.55 - Sep 22, 2013 Sep 22nd, 2013 Never 268 0 None -
Domains on 216.172.63.243 - Sep 22, 2013 Sep 22nd, 2013 Never 317 0 None -
Domains on 216.172.63.141 & 216.172.63.149 - Sep 21, 2013 Sep 21st, 2013 Never 387 0 None -
Domains on 216.172.63.137 - Sep 21, 2013 Sep 21st, 2013 Never 375 0 None -
Domains on 5.254.101.114 - part 2 Sep 17, 2013 Sep 18th, 2013 Never 280 0 None -
Domains on 5.254.101.114 - Sep 17, 2013 Sep 17th, 2013 Never 261 0 None -
Domains on 95.169.186.139 - Sep 16, 2013 Sep 17th, 2013 Never 336 0 None -
Domains on 188.190.120.43 - Sep 16, 2013 Sep 17th, 2013 Never 312 0 None -
Suspicious domains - Revoyem related Sep 16, 2013 Sep 16th, 2013 Never 269 0 None -
Suspicious domains - Revoyem related Sep 12, 2013 Sep 12th, 2013 Never 2,432 0 None -
#DhiaLite - OSINT on 37.58.73.42/95.156.228.69/195.210.43.42 Sep 11th, 2013 Never 801 0 None -
New Police scam domains Sep 10, 2013 Sep 10th, 2013 Never 840 0 None -
#DhiaLite- Suspicious domains Sep 9th, 2013 Sep 9th, 2013 Never 325 0 None -
#DhiaLite- Suspicious domains Sep 8th part 2, 2013 Sep 8th, 2013 Never 258 0 None -
#DhiaLite- Suspicious domains Sep 8th, 2013 Sep 8th, 2013 Never 256 0 None -
#DhiaLite- Suspicious domains Sep 5th, 2013 Sep 5th, 2013 Never 321 0 None -
#DhiaLite- Suspicious domains Sep 4th part 2, 2013 Sep 5th, 2013 Never 265 0 None -
#DhiaLite- Suspicious domains Sep 4th, 2013 Sep 4th, 2013 Never 248 0 None -
#DhiaLite- Suspicious domains Sep 3rd, 2013 Sep 3rd, 2013 Never 262 0 None -
#DhiaLite- Suspicious domains Sep 3rd, 2013 Sep 3rd, 2013 Never 271 0 None -
#DhiaLite- Callbacks used to host Kelihos doms Sep 2nd, 2013 Sep 2nd, 2013 Never 358 0 None -
#DhiaLite- Police scam domains and other Sep 2nd, 2013 Sep 2nd, 2013 Never 299 0 None -