Saturday, December 12, 2020

Exposing a Diverse Portfolio of Malicious and Fraudulent Name Servers - An Analysis

Dear blog readers,

In this post I've decided to share a diverse portfolio of fraudulent and malicious name servers circa 2008 that are known to have participated in various rogue and malicious software serving campaigns. 

Sample portfolio of rogue fraudulent and malicious name servers known to have participated in rogue and malicious campaigns circa 2008:

ns0.adesuikintandefunhandesun.com

ns0.ahfywbz.com

ns0.bcrqhro.com

ns0.ckjdtybz.com

ns0.cnogaira.com

ns0.fyukbz.com

ns0.kerunhandgunfandesikuntun.com

ns0.rehogonro.com

ns0.uthvfybz.com 

ns0.wkakekod.com 

ns1.52352a0c60a9c29.com

ns1.6309a46.com 

ns1.adns2008.com 

ns1.b546ec5a89.com 

ns1.bestairusa.com

ns1.betotallyclear.com

ns1.callcityusa.com

ns1.chongdns99.com 

ns1.devinavy.com

ns1.dnsreal.com

ns1.docdns2008.com

ns1.fatiloquent.com 

ns1.fuscadns.com

ns1.holdsurface.com

ns1.img111dns.com  

ns1.kozel-soft.com  

ns1.krdns555.com 

ns1.laga-soft.com  

ns1.liabilityzul.com

ns1.metdns101.com

ns1.metdns99.com

ns1.mgrsu.com 

ns1.mycandydns.com  

ns1.mywowdns.com 

ns1.ns-martian.com

ns1.osel-soft.com 

ns1.penunmaimed.com

ns1.piradns.com

ns1.poertodas.com  

ns1.rokodns2008.com  

ns1.serbicephalous.com 

ns1.sobaka-soft.com

ns1.stardecagon.com

ns1.stookvol.com 

ns2.52352a0c60a9c29.com

ns2.6309a46.com

ns2.adns2008.com

ns2.b546ec5a89.com  

ns2.bestairusa.com

ns2.betotallyclear.com  

ns2.caccytoo.com 

ns2.callcityusa.com 

ns2.chongdns102.com  

ns2.chongdns99.com

ns2.dnsreal.com 

ns2.docdns2008.com

ns2.fatiloquent.com  

ns2.freesecondaryns.com 

ns2.fuscadns.com 

ns2.holdsurface.com 

ns2.img111dns.com

ns2.jaeb6mee.com  

ns2.kaihooho.com

ns2.kninuti.com 

ns2.kozel-soft.com 

ns2.krdns555.com

ns2.laga-soft.com 

ns2.metdns101.com 

ns2.metdns2008.com 

ns2.mgrsu.com 

ns2.mycandydns.com

ns2.mywowdns.com 

ns2.ns-martian.com 

ns2.palmyxer.com  

ns2.piradns.com  

ns2.rokodns2008.com 

ns2.sobaka-soft.com 

ns2.stookvol.com 

ns2.tantrarure.com  

ns3.52352a0c60a9c29.com 

ns3.6309a46.com  

ns3.b546ec5a89.com 

ns3.kninuti.com  

ns3.metdns101.com 

ns3.metdns2008.com 

ns3.metdns99.com  

ns3.mycandydns.com  

ns4.52352a0c60a9c29.com  

ns4.b546ec5a89.com 

ns4.kninuti.com  

ns4.metdns101.com 

ns4.metdns2008.com 

ns4.metdns99.com 

ns5.b546ec5a89.com 

ns5.mycandydns.com  

ns5.mywowdns.com

ns6.mywowdns.com 

ns7.mywowdns.com

ns5.icegifted.com

ns6.icegifted.com

ns3.maxigreat.com

ns4.maxigreat.com

ns1.savetangy.com

ns2.savetangy.com

a1.aromalucky.com

a1.aromasheer.com

a1.base-dns.com

a1.buyzest.com

a1.chicprize.com

a1.movercoy.com

a1.newfull.com

a1.treatzap.com

b2.alerttan.com

b2.aromalucky.com

b2.buyzest.com

b2.chicprize.com

b2.eageraware.com

b2.newfull.com

b2.peakchic.com

b2.spicyeager.com

b2.treatzap.com

c3.alerttan.com

c3.aromalucky.com

c3.awarewise.com

c3.buyzest.com

c3.modelenjoy.com

c3.spicyeager.com

c3.whizfab.com

d4.aromalucky.com

d4.newfull.com

d4.treatzap.com

dns1.advocacylife.com

dns1.believingunsurpassed.com

dns1.carryslip.com

dns1.colonysing.com

dns1.considerfeet.com

dns1.coolcontain.com

dns1.courageslave.com

dns1.directwit.com

dns1.feltverb.com

dns1.fingersame.com

dns1.fivebuild.com

dns1.hurrystring.com

dns1.instrumentinvent.com

dns1.legacyice.com

dns1.moleculetrain.com

dns1.namenear.com

dns1.ohpush.com

dns1.operatedefinition.com

dns1.otherinstrument.com

dns1.positionbusy.com

dns1.probableout.com

dns1.quickbefore.com

dns1.rowknow.com

dns1.shinefull.com

dns1.spendlift.com

dns1.substancelost.com

dns1.suddenyet.com

dns1.tenaciousscores.com

dns1.tenbusy.com

dns1.therereflection.com

dns1.thickcondition.com

dns1.thishe.com

dns1.triangleelse.com

dns1.vowelsimple.com

dns1.washfar.com

dns12.repentantdetached.com

dns2.advocacylife.com

dns2.appreciationseed.com

dns2.arespoke.com

dns2.considerfeet.com

dns2.coolcontain.com

dns2.courageslave.com

dns2.directwit.com

dns2.feltverb.com

dns2.fivebuild.com

dns2.foodwhy.com

dns2.headarrange.com

dns2.heardrest.com

dns2.hurrystring.com

dns2.instrumentinvent.com

dns2.ohpush.com

dns2.operatedefinition.com

dns2.operatelet.com

dns2.optimismdance.com

dns2.otherinstrument.com

dns2.positionbusy.com

dns2.quickbefore.com

dns2.shinefull.com

dns2.spendlift.com

dns2.substancelost.com

dns2.suddenyet.com

dns2.tenaciousscores.com

dns2.triangleelse.com

dns2.verycome.com

dns2.waitspirituality.com

dns2.whoachievement.com

dns2.windevery.com

dns21.aglowgreat.com

dns21.fearlesshelp.com

pt3.maxiultra.com

pt1.agreeextra.com

ns5.icegifted.com

ns3.prizekind.com

ns3.tansure.com

ns3.loftysure.com

pt3.piouswarm.com

ns3.greatwarm.com

ns3.primesheer.com

ns5.rollsheer.com

pt5.fossdns.com

pt5.upssdns.com

pt3.loyalbeats.com

ns3.maxigreat.com

pt3.adoresweet.com

pt3.eagersweet.com

ns3.spicyrest.com

ns3.kindhardy.com

ns3.lovetangy.com

pt3.tangytangy.com

63q00.speedultra.com   

m3h20.speedultra.com   

mvt20.speedultra.com   

lyg50.speedultra.com   

txq60.speedultra.com   

atrb0.speedultra.com   

lptb0.speedultra.com   

eepc0.speedultra.com   

sqwc0.speedultra.com   

y0od0.speedultra.com   

jzrf0.speedultra.com   

aavf0.speedultra.com   

zgcg0.speedultra.com   

vwxg0.speedultra.com   

xwal0.speedultra.com   

m01m0.speedultra.com   

711m0.speedultra.com   

xpbm0.speedultra.com   

rpqp0.speedultra.com   

umkq0.speedultra.com   

vvzs0.speedultra.com   

fyzs0.speedultra.com   

tkjt0.speedultra.com   

xkdu0.speedultra.com   

ac4x0.speedultra.com   

tchy0.speedultra.com   

qxbz0.speedultra.com   

twm21.speedultra.com   

xqh61.speedultra.com   

g1a1.speedultra.com   

dmza1.speedultra.com   

4pqb1.speedultra.com   

iumd1.speedultra.com   

ni2g1.speedultra.com   

jdxi1.speedultra.com   

w81j1.speedultra.com   

4hwm1.speedultra.com   

7rnq1.speedultra.com   

nskr1.speedultra.com   

0ltu1.speedultra.com   

gmyy1.speedultra.com   

4tiz1.speedultra.com   

cuf42.speedultra.com   

gtn92.speedultra.com   

difa2.speedultra.com   

mo2f2.speedultra.com   

psgf2.speedultra.com   

svvh2.speedultra.com   

pfjk2.speedultra.com   

oiwk2.speedultra.com   

guds2.speedultra.com   

ybwv2.speedultra.com   

opvw2.speedultra.com   

ryvw2.speedultra.com   

ixoy2.speedultra.com   

kzz2.speedultra.com   

7a083.speedultra.com   

0rz83.speedultra.com   

es93.speedultra.com   

zpta3.speedultra.com   

sygb3.speedultra.com   

2ezc3.speedultra.com   

zwqh3.speedultra.com   

m3ym3.speedultra.com   

ccwo3.speedultra.com   

zdgp3.speedultra.com   

0pqs3.speedultra.com   

dg5v3.speedultra.com   

o58x3.speedultra.com   

pyx3.speedultra.com   

vpp84.speedultra.com   

wcxb4.speedultra.com   

z7li4.speedultra.com   

hwfm4.speedultra.com   

wocr4.speedultra.com   

zwjr4.speedultra.com   

9fcx4.speedultra.com   

bnox4.speedultra.com   

snw15.speedultra.com   

wgg35.speedultra.com   

j6yf5.speedultra.com   

xqig5.speedultra.com   

cqh5.speedultra.com   

sukk5.speedultra.com   

9iml5.speedultra.com   

2tq5.speedultra.com   

tmnr5.speedultra.com   

nxgs5.speedultra.com   

yhft5.speedultra.com   

r4uv5.speedultra.com   

vw5.speedultra.com   

kvo06.speedultra.com   

wey36.speedultra.com   

wn456.speedultra.com   

lj186.speedultra.com   

1ta6.speedultra.com   

jqwa6.speedultra.com   

caid6.speedultra.com   

zh4e6.speedultra.com   

pt1g6.speedultra.com   

c0fg6.speedultra.com   

764n6.speedultra.com   

fhen6.speedultra.com   

imos6.speedultra.com   

seu6.speedultra.com   

nezu6.speedultra.com   

6m5w6.speedultra.com   

j3jw6.speedultra.com   

p7fy6.speedultra.com   

eks07.speedultra.com   

dyi17.speedultra.com   

rqra7.speedultra.com   

z41b7.speedultra.com   

i5me7.speedultra.com   

1rcj7.speedultra.com   

z0dm7.speedultra.com   

vom7.speedultra.com   

oi1q7.speedultra.com   

yhrt7.speedultra.com   

hwxu7.speedultra.com   

epuv7.speedultra.com   

t27w7.speedultra.com   

0tby7.speedultra.com   

yuj18.speedultra.com   

ifj28.speedultra.com   

xh368.speedultra.com   

4nt78.speedultra.com   

kj2e8.speedultra.com   

zoe8.speedultra.com   

ji3f8.speedultra.com   

sm0n8.speedultra.com   

yowq8.speedultra.com   

8fzq8.speedultra.com   

r0cu8.speedultra.com   

ho2w8.speedultra.com   

irlz8.speedultra.com   

dvt09.speedultra.com   

qgh19.speedultra.com   

5ez19.speedultra.com   

hto89.speedultra.com   

qay89.speedultra.com   

c0ua9.speedultra.com   

nwab9.speedultra.com   

oqb9.speedultra.com   

wu8c9.speedultra.com   

fjmd9.speedultra.com   

cfte9.speedultra.com   

shrf9.speedultra.com   

4ndi9.speedultra.com   

dakj9.speedultra.com   

azlj9.speedultra.com   

a4fk9.speedultra.com   

1ogk9.speedultra.com   

j2hv9.speedultra.com   

42tx9.speedultra.com   

2cg0a.speedultra.com   

8qvaa.speedultra.com   

u1jba.speedultra.com   

k46da.speedultra.com   

tjcea.speedultra.com   

bqiea.speedultra.com   

vwhfa.speedultra.com   

fq9ga.speedultra.com   

rksga.speedultra.com   

nkdha.speedultra.com   

h8oia.speedultra.com   

skka.speedultra.com   

lorla.speedultra.com   

wzcna.speedultra.com   

t4dna.speedultra.com   

6uvna.speedultra.com   

mb4oa.speedultra.com   

jhyoa.speedultra.com   

vbzra.speedultra.com   

y01sa.speedultra.com   

0ugsa.speedultra.com   

uxmsa.speedultra.com   

0v1ta.speedultra.com   

ptpta.speedultra.com   

bg5ua.speedultra.com   

tfhva.speedultra.com   

miva.speedultra.com   

yaixa.speedultra.com   

vkxa.speedultra.com

Stay tuned!

No comments:

Post a Comment