Dear blog readers,
In my most recent analysis I decided to take
a deeper look inside some of the domains which belong to members of the XSS forum are known to have been used as
malicious software phone back C&C (command and control) domains.
Here’s the compilation:
| 206.su | 740d9cd8ea165302aa3cd7e6f198ea4c |
| 23fefvdfmbhty5ouihksdfs.com | c2a10312a002ad7de56237d9a419f2f8 |
| adwords-limon.biz | 7e2c95f6297d372820df8bea6ec10c42 |
| astfv43kol.com | c5d8a48579e8bc4a2ff1ac229d7da4bb |
| auto-key.org | 17b35854c20ef15916bb6191d9018f33 |
| bduioronebmemo.in | dcdd3063d89e813d72c8312280d21a81 |
| bookdeel.in | d4e9c7625f679a432eb4f7ce3e1bf3f8 |
| bsdhveroorihrh.in | cfadd31220c21a81abafc39dd0426653 |
| c0p1.com | 4ee484759d7484ecf828eff059c5555a |
| c0p1.com | a664d2c1fe26cf7c54cc8d926614ced6 |
| caribecunb.com | 868e416b34a1ef25e62c3a02a11b624e |
| clfrev.us | e562e5fe01744834ff603418d879a240 |
| cnbravard.com | 348b2ccf7d90a3c468a94838dce6c801 |
| cpro.moscow | 80707d363ee1068c2e14bde81831ef51 |
| crysis5.info | 83966b7e9cbe4491a4330ad755fabf3d |
| devilz.co | 4e3f1de1b82030db5e1f3f0f2552efd0 |
| elcrazyfrog.com | 52598dff416eb8c050ad214ba1728073 |
| flurred.com | 5f7fef40dffcab695e74fcdfbe14b84a |
| forestfire.me | a9e26a987720d7d7be4d28c635026bbf |
| ggvruxovlbrm.com | f2a4ae0cb148e19d5c7dbce2c2be5143 |
| guliverialand.asia | 96122bed38044a7670f88e7c0a8f6005 |
| headover.me | ad49f064e234b5b6ce584054587cd362 |
| hyperboot.su | f358b0fa7c5961a72dfebc2cf26ae4fd |
| ibcbbgggowdg.com | 87a52fdccc7ed7f7e6321e795fb5f82f |
| infosearchresults.com | 61cf47b9e315441ce20bb92665891103 |
| ituneshack.com | ee5b8493d37177b015b3bb65352148d3 |
| jsmarkating.com | 46532f5480a0bc454ecfdb9ad1fcecda |
| khardamok.com | 8cbadb2055081e2c1cc07f976d4efa27 |
| kinosezon.site | d08482bb992c8155471a21260f7c940b |
| lucaname.net | 16ca0886d3d23f0270cc11580767edde |
| mashka.in | c21b3634644c442266443f4705f802af |
| mastrio87.asia | 93059d28724c37f4c416765c9216b038 |
| maxho.ru | 7682dfb7d6aea87094aef38ebe1b6458 |
| micyberclub.com |
