New Fast-Flux Domains served by Warezov/Stration
August 11th, 2008 — bjou
Quick and dirty: Some new domain names (most of them created end of last week (7th-9th of August)) found during my analysis of a Warezov/Stration Binary. All of them are fast-fluxed. Expect some spam with these domains pretty soon. It probably already started, as my Honeypot served a lot of DNS Queries. Some domains already work (“European Pharmacy“, see screenshot), others still don’t. Domain Name List:
aboutfight.com
actwalk.com
agaj.originalhour.com
angerrub.com
areice.com
beautyeither.com
behindmountain.com
bothcatch.com
brotherfound.com
callsuffix.com
changecame.com
circlehas.com
commonwant.com
considercrop.com
cookchair.com
countrybroad.com
cowsquare.com
determinenew.com
developan.com
divisionword.com
drawred.com
driveuntil.com
earsection.com
elsewinter.com
especiallydesert.com
especiallymillion.com
excitecount.com
factself.com
finalfarm.com
gh.originalhour.com
girlbird.com
glasswild.com
happyany.com
hereproduce.com
highproper.com
hitnecessary.com
holdrail.com
inchevent.com
indicatelisten.com
interestsell.com
joinlevel.com
laughname.com
legbe.com
meetclaim.com
middleglass.com
muchthey.com
naturalbegin.com
onbranch.com
originalhour.com
pitchtouch.com
pointjoin.com
possiblesaid.com
pullgone.com
qprzyr.originalhour.com
recordchief.com
rememberseed.com
richeach.com
ridespread.com
rlek.originalhour.com
rolldivision.com
roperoll.com
safeelement.com
seasonleave.com
seatfear.com
seemship.com
sibt.originalhour.com
sightevening.com
sliphalf.com
solutionthrow.com
speakoccur.com
stoodplane.com
suffixsupport.com
systemneighbor.com
thisistestdomain.ntd
truckproperty.com
typefeel.com
u.originalhour.com
whilemeasure.com
wholehis.com
www.actwalk.com
www.beentouch.com
www.bothcatch.com
www.developan.com
www.especiallymillion.com
www.excitecount.com
www.fruitspell.com
www.girlbird.com
www.glasswild.com
www.happyany.com
www.inchevent.com
www.ormade.com
www.pointjoin.com
www.rolldivision.com
www.suffixsupport.com
www.systemneighbor.com
www.thankbranch.com
www.trackpaint.com
www.typefeel.com
www.whethermotion.com
yetamong.com