Compromised hosts

Any research, news or information regarding the wide variety of techniques criminals use to take over your computers or web servers.

Re: Compromised hosts

Postby spamislame » Mon Jan 31, 2011 12:20 pm

I wish there were a quick, easy way to automate the capture of each of these urls, deobfuscate the JavaScript, and send back a list of all of the domains this particular spammer is redirecting to.

AMouse: Do you think it's possible to semi-automate that while the files are being written?

I'm going to take a stab at it and see if I can get through a handful, then see about scripting it to just output the final domain.

My list of domains so far:

greattabletscapsule.net [188.132.221.245]
optimumhealthmarket.net [123.100.251.62]
sensitivetabletrxpills.net [188.132.221.245]
tabletswellbeingpills.com [123.100.251.60]

SiL
User avatar
spamislame
Site Admin
 
Posts: 5058
Joined: Tue May 09, 2006 9:18 am

Re: Compromised hosts

Postby spamislame » Mon Jan 31, 2011 1:59 pm

Update.

Out of 130 of that full list last posted, they decrypt to the following urls:

greattabletscapsule.net
optimumhealthmarket.net
pillsrxpharmacy.com
rxmedicalcenter.com
sensitivetabletrxpills.net
starrxwellness.net
tabletswellbeingpills.com
therepharmacy.net

From there I'm going to dig up all of the hijacked IP addresses used in the hosting of these sites.

SiL
User avatar
spamislame
Site Admin
 
Posts: 5058
Joined: Tue May 09, 2006 9:18 am

Re: Compromised hosts

Postby spamislame » Mon Jan 31, 2011 2:13 pm

Oddly enough: none of these are using third-party hacked Unix servers.

Here's all the ip's used to host these sites (and probably several dozen others we don't know about yet.)

188.132.221.244 => marsglobaldatacenter.com, Turkey
208.73.210.29 => oversee.net, Los Angeles, CA
213.55.114.132 => Ethiopian Telecommunications Corporation
123.100.251.62 => webvisions.com, Singapore
188.132.221.243 => marsglobaldatacenter.com, Turkey

SiL
User avatar
spamislame
Site Admin
 
Posts: 5058
Joined: Tue May 09, 2006 9:18 am

Re: Compromised hosts

Postby AlphaCentauri » Mon Jan 31, 2011 2:17 pm

reverse IP:
188.132.221.245
godrindalul.com
godrindalul.net
jiwkiojupu.com

123.100.251.62
rorzufhaibe.com

123.100.251.60
umhaiqumcun.com
upyhtamowgy.com
wysowoejkun.com

Well, that isn't very many. And it doesn't even include those original four "premium" domain names.

When I look them up the whois, I get a few more cached IP addresses that hosted them recently. The reverse lookup on them is a little more fruitful. And there don't appear to be any duplicates:

greattabletscapsule.net
188.132.221.243 per who.is
aeweixud.com
anowcaeqn.com
appletabletdrugstorepills.net
appletabletpillshealth.com
axeaqumokto.com
bitterpillmedsdrugstore.com
bitterpillmedsdrugstore.net
claytabletsmedsrx.com
criouited.com
dnysdeiqs.com
drugstoremedspharmacytech.net
drugstorepharmacytechhealth.net
drugstoreprecisionpharmacyrx.com
drugstoreprescriptionmedspharmacy.net
drugstorerxprescriptionhealth.com
drugstoretorontorxmeds.com
drugtorerxnewslettertablets.com
drugtorerxprescriptiontablets.com
eiqunits.com
ejkyktar.com
healthmagsite.com
healthtablets.org

218.71.239.39 per domaintools
abgenhuynwo.com
acolcaiht.com
adazmukis.com
adeswaref.com
adexaroyt.com
adtrodpce.com
adyshtops.com
aefmuxdior.net
aesthetechsoft.com
aesthetemedia.com
aewopwoqwu.com
afribreuz.com
afteregui.com
agfg.ru
agfj.ru
aivxg.ru
ajwcd.ru
albertahealthwellness.com
alcoholdrugtoretabletspharmacy.net
alcojtayf.com
algefissk.com
alhulodyxt.com
alternativehealthmedicines.net
alternativehealthrx.com
alternativehealthrxmeds.com
alternativehealthrxmeds.net
alternativemedicinetorehealthtreatments.com
americanahealthdirect.ru
ancientstonetablets.ru
asianhealthshop.ru
aujj.ru
babac.ru
babal.ru
babeg.ru
babem.ru
babet.ru
babev.ru
babid.ru
babil.ru
endibalta.com
epillsguide.com
erzodqubl.com
finhealthrx.net
fipluvyn.com
firyzawja.com
fitibzyve.com
flabitzeod.com
flothuhdum.com
flovdeady.com
flurtakure.com
flyfquapa.com
flysafgoew.com
focqusalcy.net
foimfiaqwo.com
folsiezgat.com
formedicalstore.net
foundryequipmentservices.com
foundryvegas.com
foyquyrk.com
fradwysvi.com
freepharmacymedicines.net
freerxdrug.com
freerxdrug.net
freerxmedicine.com
fresruegs.com
frorgyjdys.com
frutvimer.com
fudaxorto.com
fuengirop.com
fuentekiu.com
fueskerui.com
fugjoyso.com
fuipletar.com
fulegtrud.com
fulzunfux.com
fundehurk.com
funlotterytickets.com
funwugcov.com
funzorapp.com
furadoune.com
fydrerfim.com
fyjbuzzea.com
fypeijryj.com
fypkiche.com
gajliefumu.com
galacticnucleussite.com
galaxyrxpills.com
galaxyrxpills.net
gaquedlyx.com
gaqwiztokt.com
garaylift.com
gargulbos.com
garkofpapki.com
gaynvyapou.com
gayvqutjo.com
gefrumahi.com
gehadrume.com
gehmirku.com
generationrxtabletsfitness.com
generationrxtabletspills.net
geozenromp.com
germanypillstore.com
germanypillstore.net
gerniagy.com
getpillstore.com
ghairefewi.com
gibcikokhyj.com
gildihsy.com
giqustouhme.com
gixniwpipho.com
glovcyenn.com
glyfufryhzi.com
gnallitko.com
gnayveluip.net
gnisdoiv.com
gnykmuzo.com
gnytfacki.com
gobapjidfu.com
gohpewlyfr.com
goodwayhealth.net
gorxpills.com
goupravix.com
gousdenpe.com
govehkoi.com
goybgiedpuy.com
graphicstabletdrugstorepills.com
graphicstabletrxpills.com
graphictabletmedspills.com
graphictabletpillshealth.net
graphictabletrxdrugstore.net
graphictabletsrxpills.com
graphictabletssite.com
graphictabletssite.net
graphictabletsworld.com
grasbodr.com
greatcapsules.net
greatdealhealth.net
greatdrugtoremedications.net
greatdrugtoremeds.net
greatdrugtorewellness.net
greathealthdrugshop.com
greathealthdrugshop.net
greathealthdrugstore.net
greathealthmeds.net
greathealthpharmacy.com
greathealthpillsdrug.net
greatmedsdiscount.com
greatmedsdiscount.net
greatmedsmedicine.net
greatmedspills.net
greatmedsrx.net
greatmedsusa.com
greatpharmacypills.com
greatpharmacypillsweight.com
greatpharmacyprescription.net
greatpillmedshealth.com
greatpillsmeds.net
greatpillsprescription.net
greatprescriptionrx.net
greatrip.net
greatrxdirect.com
greatstorebargain.net
greattabletmedspharmacy.com
greattabletscapsule.net
greattabletshealth.com
greattabletshealthrx.net
greattabletsmarket.net
greattabletsmeds.net
greattorestore.net
greattoretabletsstore.com
greattoretabletsstore.net
greatwestdecor.com
greatworldtrustedpill.com
greecepillstore.net
gritzofo.com
hievaudowo.com
hihnulsizz.com
hiluhvust.com
hirqutqer.com
hirqutqer.net
hizureuty.com
hlahtyqwupi.com
hlasloqwupu.com
hletigatky.com
hlifcoque.com
holibarad.com
holifente.com
holpivale.com
homemartstore.com
homemartstore.net
homemedsrx.net
honcylofcu.com
honhirty.com
horporeba.com
hostelalo.com
hotirazbo.com
hoybgianif.com
hrawiprov.com
hrinpokfih.com
hrurvetwi.com
hrurvetwi.net
hryjdepit.com
hryjdepit.net
huatwivtu.com
hviogiopqe.com
hvobkylre.com
hvobkylre.net
hvylnuwayd.net
hyclemokca.com
hyclemokca.net
hygzimgaje.com
hygzimgaje.net
hypekkuvuil.com
hytzedpemm.com
hywzuzapus.com
iamygvejmy.com
ianimains.com
iaspokotu.com
iazliufer.com
ibiopharm.net
ichozauvo.com
icofbelli.com
icsasixol.com
icymidrykur.com
iczopwyku.com
idrugrx.net
idzotenqe.com
iekpesmuah.com
iesbuyftoz.com
iesliuhox.com
iftehafer.com
ihkeubzi.com
ihpharm.com
ikajogast.com
ikataysot.com
ikuruplan.com
ilevsters.com
ilgupcuzzo.com
illstabletsdirect.net
illstabletsguide.net
illswellness.com
ilmergaik.com
ilnerenut.com
ilregadav.com
ilupjirvyb.com
imkivaci.com
imoldeurk.com
imoshenny.com
impendanz.com
imvisyaxyo.com
imwucnys.com
indebaxuf.com
indefacro.com
inepechka.com
lettershopinc.eu
marhegbupp.com
maxyvetid.com
measuresquare.eu
medescribenet.eu
medsdirectrx.net
medsdiscountshealth.net
medsdiscountshealthsite.net
medshealthplusrx.com
medshealthrx.com
medsmedicinestorerx.com
medspillsprescription.net
mejmaupog.com
netbranchoffice.eu
rxclaytabletsmeds.com
rxtabletsmeds.com
sirecofat.com
siumarked.com
skamnuhs.com
skoriolpa.com
skruabiso.com
sleepingpillsdrugstore.com
sleepingpillsfitnesspills.com
sleepingpillspharmacyhealth.com
sleepingpillstabletsfitness.com
sleepingpillstabletshealth.com
sleepingpillstabletshealth.net
sleepingpillstabletsrx.net
sleepingtabletsdrugstorepills.com
sleepingtabletsdrugstorepills.net
sliovoste.com
slubcyxcay.com
smagwivr.com
smatvyhojo.com
smozroidi.net
smuemkyaht.com
smyrzyhzaqs.com
sportsmedspills.com
subvugwogs.com
sueplerif.com
sumembeir.com
supertabletsmedspharmacy.com
supilemko.com
surimakos.com
svatirogi.com
svedaforu.com
svelherme.com
svirebayd.com
svulakeub.com
swiftrxpharmacy.net
syukauwmyg.com
tabletbargainsmedspills.com
tabletbargainsmedspills.net
tabletbargainspharmacypills.net
tabletbargainspills.com
tabletbargainspillspharmacy.net
tabletbargainspillsrx.net
tabletbargainswellness.com
tabletcapsulesbargain.com
tabletcapsulesdrug.com
tabletcomputermedspills.net
tabletcomputermedsworld.net
tabletcomputerwellness.net
tabletdrugstorechainpills.com
tabletdrugstoredrugs.net
tabletdrugstorepharmacypractitioners.com
tabletdrugstorepills.com
tabletdrugstorepills.net
tabletfuelspillsrx.com
tablethealthmedicationssite.net
tablethealthrxplus.net
tablethotelscapsules.net
tabletmedicarerxdrugstore.net
tabletmedicationsdirect.net
tabletmedicationsprescription.com
tabletmedicationsrx.com
tabletmedicationstablets.net
tabletmedicationsworld.com
tabletmedicinemarket.net
tabletmedsdirect.net
tabletmedsmedicines.com
tabletmedspharmacyworld.net
tabletmedspills.com
tabletmedspillsworld.com
tabletmedswellbeingdirect.net
tabletmentalhealthrx.net
tabletmercuryspillsrx.com
tabletpcspillsguide.net
tabletpharmacydrugstore.net
tabletpharmacydrugstorechains.net
tabletpharmacyfacultypills.net
tabletpharmacyfoundationpills.net
tabletpharmacymeds.com
tabletpharmacypills.net
tabletpharmacypillsworld.net
tabletpharmacyrxdirect.net
tabletpharmacyrxsite.net
tabletpharmacytabletsguide.com
tabletpillsdrug.net
tabletpillsdrugstore.net
tabletpillshealth.net
tabletpillspharmacyworld.net
tabletpillsrxguide.com
tabletprescriptiondrugstorepharmacy.com
tabletprescriptionmart.net
tabletpresspillsrx.net
tabletreviewsstore.net
tabletreviewstablets.com
tabletrxdiscountmeds.com
tabletrxmedications.com
tabletrxmedicationsguide.com
tabletrxmedssolution.com
tabletrxpharmacysite.net
tabletrxstore.net
tabletrxwellnessworld.net
tabletsbargaindrugstore.com
tabletsbargaindrugstore.net
tabletsbargainmedsguide.net
tabletsbargainmedsworld.net
tabletsbargainrxguide.net
tabletsbargainrxpharmacy.com
tabletsbargainsrxpills.net
tabletsbargainworld.net
tabletsbusinesswire.net
tabletscanadiandrugstorerx.net
tabletscapsulesdrugstore.net
tabletscapsulesguide.net
tabletscapsulesrx.com
tabletscheapdrugstore.net
tabletscheappillsworld.net
tabletscheapstore.com
tabletscheapwellbeing.net
tabletsdietpillsmeds.com
tabletsdiscountmedications.net
tabletsdiscountpillsmeds.com
tabletsdiscountspillsguide.net
tabletsdiscountspillsmeds.net
tabletsdiscountspillspharmacy.com
tabletsdiscountsrxmeds.com
tabletsdiscountsstore.com
tabletsdiscountswellness.com
tabletsdrugstoremedications.com
tabletsdrugstoremeds.net
tabletsdrugstorepills.com
tabletsdrugstorepills.net
tabletsdrugstorerxprescription.net
tabletsdrugstoretabs.com
tabletsmedicationsguide.net
tabletsmedssite.com
tabletsmedswellbeingworld.com
tabletspharmacywelfare.net
tabletspillshealth.net
tabletspillsite.net
tabletspillsnutrition.net
tabletsretaildrugstorerx.net
tabletsrxhealthworld.com
tabletsrxhealthworld.net
tahenyku.com
tebliopey.com
tejhesohti.net
telubriod.com
tervadiue.com
thepharmacyrxworld.net
theredtablet.com
tripdrugstablets.com
tufbyjpor.com
tuirenhos.com
tveitruop.com
tvodzizy.com
twanwiwn.com
tyfiftyshis.com
tyfzuknisew.com
uagryaqwier.com
uampovilv.com
udzufnuge.com
ufdodughi.com
uffexvulpi.com
ugpokrewl.com
ukotorovs.com
ulivimtod.com
umnuarvukk.com
utfepzywn.com
uwoegrax.com
uwoegrax.net
uxofgedjij.com
valzutiro.com
vheruolgo.com
vkonfatma.com
vlalryvrou.com
vlelnyvguw.com
vlemorede.com
vlyecbof.com
vmeyhjanfo.net
vorevagni.com
vosusnim.net
vowsaucr.com
voylhulqe.com
vpynysuh.com
vunthetey.com
vupreuhl.net
vyutopfuaf.com
wavhefqueb.com
woizryarh.com
womenhealthwellness.com
womenhealthwellness.net
wruzrictau.com
wwwpillpharmacy.com
wyhcyompe.com
xewydduwru.net
xitmisjyohwe.com
xixevagmoa.com
xojyxceydj.com
xyqwemhyo.com
yahdibyx.com
yaryxfoip.com
yaxcauzpak.com
yaxyxekfib.com
ycdgt.ru
yecdegnurd.com
yempybcye.com
yenwurwyb.com
yevsisdy.com
yewunlutqut.com
yofzuwhinvy.com
yoggizoylb.com
yokcihaqe.com
yolsesexfa.com
yoqwivayssu.com
yoqwypgeb.net
youraesthete.com
yourcapsulesmeds.com
yourcapsulesmeds.net
yourdrugtorewellness.com
yourdrugtorewellness.ru
yourhealthpharmacydrug.com
yourhealthpharmacydrug.net
yourhealthpharmacyrx.net
yourhealthpill.net
yourhealthpill.ru
yourmedicationsrx.com
yourmedsmedicine.net
yourmedstablets.com
yourmedstablets.ru
yourmedsworld.net
yourpharmacyrxdrugstore.ru
yourpharmacytech.ru
yourpillspharmacymeds.com
yourpillsworld.com
yourpillwellbeing.net
yourrxpress.ru
yourtablethealth.net
yourtabletshealth.com
yourtabletsmeds.net
yourtabletspills.ru
yourtablettablets.net
yourtoremedications.net
yourtorepharmacy.ru
yourtoretabletsmedications.net
yourtoretabletswellness.net
yowupquhduj.net
yuklumdegga.com
yukrokolm.com
yuktukryky.com
yumradhau.com
yumriashiy.com
yupioblej.com
zaulkrapo.com
zavnodpoqn.com
zayswyufpox.com
zdvbv.ru
zgswi.ru
zioquoqn.com
zixyhquf.com
zluswoejgo.com
zpbko.ru

optimumhealthmarket.net
123.100.251.62 per who.is - same as above
222.33.117.246 per domaintools
buoaidrot.com
burtusfast.com
busranguv.com
bustoutmag.com
buxwysgu.com
buymedshealth.com
buymedssite.net
buymedsworld.net
buypharmacymeds.net
buzikente.com
buzitekes.com
byhwywcien.com
byhwywcien.net
byrmeutuhor.com
bzitheyho.com
bzypuocom.com
cackteruf.com
kvaquagfaqn.com
kwoporaoznu.com
kychuhkihjy.com
kyssavru.com
kyzeknexn.com
laboranyt.com
lacquaquaw.com
lafeuxcec.com
laipnuczifr.net
lajenvart.com
lakuvirul.com
lampioglob.com
lapidaryplus.com
lapnuwgofl.com
larzomfakt.com
layjvoki.com
leadingpharmacymeds.net
legyjtesod.com
legyjtesod.net
leispipok.com
leispipok.net
lekpoeha.com
lensrx.net
lequswylfy.com
lerbadino.com
letmireys.com
levhetfesl.com
levitzero.com
lhdyaklafeh.com
libygpavla.com
licceximi.com
liequhwo.com
lifestorepharmacy.net
lijlopykyd.com
lilturuse.com
limpegaus.com
linepharmacymeds.com
linepharmacytablets.net
linepills.net
linetablets.net
lioddocdy.com
lirdieshuw.com
lishcetre.com
litreukaz.com
litsijrepjy.com
livemedicineshopx.com
livemedicineshopx.org
liveremedyshopx.com
livmetrec.com
lizdonyfpo.com
ljibgynu.net
ljokpyozo.com
ljuezfetnob.com
ljuzoxnukh.com
ljyocewe.com
lominsyqs.com
lorbiepfie.com
losspillsrx.com
losspillssite.net
losspillsworld.net
losstabletsguide.net
louguxoad.com
louguzika.com
ludpyqwi.com
lufsuomp.net
lulloidpe.com
lumwinot.com
lumyaxhyqe.com
luponvizid.com
lyncalkyjko.com
lyqwoqwuyz.com
lywoxpieqs.com
lyzfuakak.com
mabvawupmo.com
maiquxmuw.com
malwyoctyw.com
manipreka.com
mapejzuki.com
mareinfapyp.com
marketnewsstore.net
markettabletspills.net
markyuks.com
masahmelo.com
masterhealthrx.net
masvuregs.com
materialsseersucker.com
matpectorn.com
matrxpharmacy.com
maucheryf.com
mauleffios.com
maxhealthwellness.net
mazdarxhealth.net
medhealthypills.com
medicalcamerastore.net
medicalcarerx.com
medicaldietpill.com
medicalgiftsstore.com
medicalgiftsstore.net
medicalmarketgroup.net
medicalsrxpills.com
medicarerxdrugstoretablets.net
medicarerxtabletspharmacy.net
medicarerxtabletspills.com
medicationcutpillstablets.com
medicationet.com
medicationmeds.net
medicationscapsules.net
medicationscapsulestablets.net
medicationshealthpharmacy.com
medicationsrxcapsules.net
medicationsrxtablets.com
medicationstabletshealth.net
medicationstabletspharmacy.com
medicinegenerationrxtablets.com
medicinesrxguide.net
medicinetabstablets.com
medicinetorehealth.net
medicinetorem.com
medmercuryspillsdrugstore.com
medmercuryspillstablets.net
medscheapdrugstore.com
medscheaptabletssite.com
medsdirectdrugstore.net
medsdirectwellness.net
medsdiscountsstore.net
medsdrugmart.net
medsdrugstorechainhealth.net
medsdrugstorechainpharmacy.com
medsdrugstorechainspharmacy.com
medsdrugstorechainstablets.net
medsdrugstorediscount.com
medsdrugstorephotostablets.net
medsdrugstorerx.com
medsdrugstorerx.net
medsdrugstoretablets.net
medshealthpharmacysite.com
medshealthplusdrugstore.net
medshealthtabletsworld.com
medshealthtabletsworld.net
medshealthworld.com
medshopx.com
medshopxnow.com
medshopxonline.com
medshopxs.com
medslessdirect.net
medslesspharmacyguide.com
medslesspharmacyguide.net
medslesstabletsdirect.net
medslesswellness.net
medsmedicineshop.net
medsnowtabletssite.com
medsnowtabletssite.net
medspharmacydirect.com
medspharmacydiscount.net
medspharmacydrugstore.net
medspharmacyexamrx.net
medspharmacyprofessionrx.net
medspharmacyprofessiontablets.net
medspharmacyrxdirect.net
medspharmacyrxsite.net
medspharmacyrxworld.net
medspharmacysite.com
medspharmacysite.net
medspharmacytechrx.net
medspharmacytechtablets.com
medspharmacywellbeing.com
medspharmacywellbeing.net
medspharmacywellbeingdirect.com
medspill.net
medspillsdrugstore.com
medspillsguide.com
medspillshealthfeatures.net
medspillspharmacy.net
medspillssite.com
medspillstablets.net
medsrxcheap.com
medsrxdirect.net
medsrxpharmacyexam.net
medsrxplus.com
medssparx.net
medsstoretablets.net
medsstoreworld.com
medstablets.com
medstabletsbargain.com
medstabletshealthbargain.net
medstabletsmedicine.net
medstabletspillscheap.net
medstabletsrx.com
medstabletsrxbargain.net
medstabletsrxcheap.com
medstabletswelfare.net
medstabletswellbeing.com
medstabletswellness.com
medstabletsworld.com
medsusatabletsdirect.com
medswelfaretablets.net
medthing.net
medtoxicspillsdrugstore.com
megamedsrx.net
megapetmeds.com
megapetmeds.net
megpoixed.com
meintblau.com
melabohiu.com
melbydlom.com
menshealthcarepharmacy.net
mensokvyff.com
mentalhealthdrugstoretablets.net
mentalhealthmeds.com
mentalhealthmeds.net
mentalhealthrx.net
mepfocaquws.com
mesyulvaer.com
mexicandrugtorepillspharmacy.net
mezviezy.com
miavmizbur.com
mibrialtary.com
midevolka.com
mikcigenype.com
mileprefi.com
milvacvaumi.com
mineraltabletsdrugstorepills.net
mipoptylyfa.net
miukterfo.com
mnahpuim.com
mnajfivyqn.com
mnecpeubtiv.com
mnemuwijr.com
mnilasquv.com
mnoxyfsiy.com
mnugdevmymm.com
molmukae.com
morugulmo.com
morugulmo.net
mragovafy.com
mrapsaqwor.com
mrimgohoif.com
mrimgohoif.net
mrizmyfaix.net
mrozihpucoe.com
mrudgyufsic.com
mudjiovyox.com
muedgoamsua.com
mueradexo.com
mukerelad.com
muleberto.com
mulkipety.com
mulprefou.com
muradekko.com
murebetex.com
murtrabif.com
musefahlo.com
musicstorehealth.net
mutlyjpikr.com
muxquvbol.com
muyrezneyd.com
muyveqwal.com
mymedicationsstore.net
mymedpill.com
mymedpills.net
mymedshopx.com
myorraxosna.com
mypharmacymedicine.com
myphitjoul.com
myzbaxtich.com
myzbaxtich.net
nadoplezo.com
nakonezus.com
nakrynridl.com
namukazix.com
naomymuz.com
naomymuz.net
nasimlesu.com
nasjacpen.com
natpharmacyrx.com
naturalhealthpillsrx.net
navsepoil.com
nawcidbos.com
nebjyzru.com
necnixtiqn.com
necsodfulk.com
neighborhoodpharmacymedsdrugstore.com
neighborhoodpharmacytabletspills.net
neiwagti.net
nejedfojau.com
nerrywdilse.com
netbyudus.com
nevzarcaka.com
neymirepe.com
niafmytt.com
niafmytt.net
nibelkona.com
nigvoixej.com
nihzokzib.com
nijheyxmu.com
ninvuzwypwe.com
niolzaczypp.com
nitkolpax.com
nivgufqe.com
nopiander.com
northlandmedicalpharmacy.net
nowqupkag.com
nrevofajqus.com
nridmexhe.com
numvuivs.com
oluicpachy.com
onlinemedicineshopx.com
onlineremedyshopx.com
onlinetripshopx.com
opjyqude.com
optimumhealthmarket.net
oqusporotu.com
orminadeg.com
osgyxejy.com
oslaggiraem.com
oswozvozzyp.com
oswozvozzyp.net
otcywsuz.com
ovdarudxe.com
overnightmedsrx.net
ovimikzu.com
owbariwlad.com
owhoegdygy.com
oxribcopka.com
oxyvrizpe.com
oycdowsyk.com
oydbidlen.com
oydbidlen.net
oymtosvec.com
oymtosvec.net
oyridzull.com
ozpuwleme.com
ozpuwleme.net
pacificdrugmart.com
padscheap.net
padspharmacyrxdirect.net
painmedsdrugstorehealth.net
painmedsdrugstorerx.com
painmedsdrugstorerx.net
palparica.com
paperscomputer.net
paplyaglatr.com
rxcanadianmedscapsules.ru
rxchangedirect.ru
rxdrugscentral.eu
rxdrugsinc.ru
rxdrugstorechainspharmacy.ru
rxdrugstorepharmacy.ru
rxdrugstoresite.ru
rxhealthbiz.ru
rxhealthmedsworld.ru
rxhealthreviews.ru
rxmedhealthsite.ru
rxmedspharmacyexam.eu
rxmedspharmacyexam.ru
rxmedspharmacytech.ru
rxmedsshoptablets.ru
rxmedstablet.ru
rxmedstime.ru
rxmedswellbeing.ru
rxpainmedstablets.ru
rxperfectmeds.ru
rxprescriptiondrugstorepharmacy.ru
rxprescriptionmarket.ru
rxpressmedsdirect.ru
rxtabletsguide.ru
rxwellnessmeds.ru
sgff.ru
sgfj.ru
simplesundecomposable.ru
sleepingpillstabletshealth.ru
specialtypharmacypillshealth.ru
starrxwellness.ru
stonetabletsdirect.ru
storetabletswellbeing.ru
storetabletswellness.ru
storewellbeingpills.ru
storeystore.ru
superhyperbolasite.nl
tablethealthdrugstoreguide.ru
tabletmedicinemarket.ru
tabletpharmacydrugstore.ru
tabletpillshealth.ru
tabletpillswellnessguide.ru
tabletpillswellnessworld.ru
tabletpresshealthdirect.ru
tabletrxmedications.ru
tabletscheapstore.ru
tabletsdiscountsmedspharmacy.ru
tabletsdiscountspillspharmacy.ru
tabletsdrugstoreguide.ru
torehealthworld.ru
totalpharmacyrx.ru
uohrf.ru
uqkrq.ru
usaqk.ru
usbcg.ru
uwpkx.ru
vcgma.ru
vitalopharm.ru
vjrab.ru
vjyph.ru
vnxpa.ru
xqkjv.ru

sensitivetabletrxpills.net
188.132.221.243 per who.is
144.16.111.118 per domaintools
pillrxmeds.net
pillspecialtypharmacydrugstore.net
pillsrxprescriptiondrugstore.com
pilltrustedpharmacytablets.net
prescriptiondrugtoretabletspharmacy.com
prescriptionmedsdrugstorepharmacy.net
prescriptionmedspharmacypills.net
rejougfiw.com
rektopelf.com
remediesmentalhealthrx.com
rentodiek.com
repillsdirect.com
replagonu.com
repneshta.com
reqwokeygen.com
reskatigo.com
retaildrugstoremeds.net
retailstorepharmacy.net
retodjuyfi.com
rheaphejsop.com
rhetmomhin.com
rheuwezh.com
rhezvabros.com
rhybqueg.com
riezuypoe.com
riffamoqwo.com
rikbyehl.com
ripcapsules.net
riraecfer.com
rirsyklon.com
rjoikekfu.com
rjozwimki.com
rmhyqugorbi.com
rmhyqugorbi.net
rocraxryaxr.com
roiqwimwaeh.com
rojhimgic.com
rojvaqufki.com
rokfakciqn.com
romwyowsa.com
rouvqundu.com
rozkoxraxy.com
rudifhuc.com
ruekfohju.com
rufjyugra.com
ruhmicraer.com
ruhmicraer.net
ruhuyhcuv.com
rukceihu.com
ruvatekhu.com
rvolvejpyji.com
rxamesmeds.com
rxbiomeds.net
rxcanadianmedscapsules.net
rxcapsuleshot.com
rxcapsulesweight.net
rxchangedirect.com
rxchangedirect.net
rxchangemedsdirect.com
rxchangemedsguide.net
rxchangepillsguide.net
rxchangestore.com
rxconsultantpharmacymeds.net
rxdepressionmedstablets.com
rxdiscountpharmacymedications.net
rxdrugcentral.com
rxdrugcentral.net
rxdrugcorp.com
rxdrughq.net
rxdrugmarket.com
rxdrugpillssite.com
rxdrugpillssite.net
rxdrugrunner.net
rxdrugstorechainspharmacy.net
rxdrugstorechainspills.com
rxdrugstorepharmacy.net
rxdrugstorepills.com
rxdrugstorepills.net
rxdrugstoresite.com
rxdrugstoresite.net
rxdrugstoretablets.net
rxdrugstoretech.com
rxdrugtabletsguide.net
rxeasymeds.net
rxemeds.net
rxenhancementpills.com
rxepharmacy.com
rxformeds.net
rxhealthbiz.net
rxhealthconnect.com
rxhealthconnectpharmacy.net
rxhealthmedicines.com
rxhealthmedsworld.com
rxhealthmedsworld.net
rxhealthplus.net
rxhealthpluspharmacy.net
rxhealthreviews.com
rxhealthsites.net
rxhealthsolutions.net
rxhealthtablet.com
rxhealthtablet.net
rxhealthtablets.com
rxhealthweb.com
rxhotmeds.com
rxmedhealthsite.com
rxmedhealthsite.net
rxmedicalcenter.com
rxmedicaltranscript.net
rxmedicationstablets.net
rxmedsdiscounts.com
rxmedshealth.com
rxmedspharmacyexam.net
rxmedspharmacytech.net
rxmedsshophealth.com
rxmedsshoptablets.net
rxmedssolutiontablets.com
rxmedssupply.net
rxmedstablets.com
rxmedstablets.net
rxneighborhoodpharmacymeds.net
rxpainmedstablets.net
rxperfectmeds.com
rxpharmacyanswers.net
rxpharmacyclub.com
rxpharmacyclub.net
rxpharmacyhealthdiscounts.com
rxpharmacyhealthdiscounts.net
rxpharmacyhealthguide.com
rxpharmacymeds.net
rxpharmacymedsguide.net
rxpharmacypal.net
rxpharmacyprescription.net
rxpharmacytabletsguide.net
rxpharmacytabletssite.net
rxpharmacywellness.net
rxpillsgreat.net
rxpillsguide.net
rxpillsprescription.net
rxpillstablets.com
rxpillstablets.net
rxprescriptiondrugstoremeds.net
rxprescriptiondrugstorepharmacy.net
rxprescriptiondrugstorepills.com
rxprescriptionmarket.com
rxpressdrugdirect.com
rxremedy.net
rxscoredtabletsmeds.com
rxsleepmeds.net
rxstdmeds.com
rxstdmeds.net
rxstorediscount.com
rxstoreguide.com
rxstorehealth.com
rxstorewellbeing.com
rxstorewellbeing.net
rxtabletsdiscounts.com
rxtabletshealthdiscount.net
rxtabletsmedscheap.com
rxtabletspharmacy.com
rxtabletspharmacyschool.net
rxtabletspills.com
rxtabletspillsgreat.net
rxtabletspillsweight.net
rxtremehealth.net
rxtremepharmacy.net
rxtrip.net
rxunlimitedpharmacy.net
rxusapharmacy.net
rxwellbeingdirect.com
rxwellnesstablets.com
rybimgitu.com
rycigwof.com
rypeoxnaf.com
ryzvymucimm.com
sadlukape.com
sageredut.com
sahedarum.com
sakliurne.com
salarycapdrugstorepills.net
salarycappillspills.net
salarycappillstreatments.net
salukarro.com
samedfemrup.com
saoronhe.com
sbidoupel.com
scanstorerestore.net
scedeznuxti.com
scitepaul.com
scoredtabletsmedsrx.com
scrom.org
sdakochejda.com
seadwerod.com
seagreathealth.net
sedacurvi.com
seersuckercheckshirt.com
seersuckersite.com
segtivqe.com
senptalad.com
sensitivetablet.com
sensitivetabletdrugstorepills.com
sensitivetabletrxpills.net
serimobaw.com
sexualpharmacyhealth.com
sexualpharmacyhealthpills.com
sexualpillshealth.com
sexualtablethealthpills.net
sgurounpu.com
shesluvcad.com
shirevout.com
shojimofe.com
shopatwellness.net
shopkoreastore.net
shopmusicstore.net
shybviccev.com
siceretad.com
siendevur.com
sienkerud.com
sieprefis.com
sievetryd.com
sikonbedo.com
simperake.com
sinergute.com
sivereate.com
sixdefbysce.com
sixeravos.com
sjadderjei.com
sjuaqwynru.com
sleepingpillspharmacy.net
sozakpotgyn.com
spalivodo.com
srybulato.com
starrxwellness.net
stidenkomoj.com
stonetabletsdirect.net
stonetabletsmeds.net
storeandshop.net
storehealthcapsules.net
storehealthmeds.net
storehealthtablets.net
storemedicationsrx.net
storemedsdrugstore.com
storemedswellbeing.net
storemedswellness.com
storepharmacytablets.net
storepillsbargains.net
storepillstablets.net
storesushop.net
storetabletsdirect.net
storetabletspharmacy.com
storetabletswellbeing.net
storetabletswellness.com
storewellbeing.com
storewellbeingpills.com
storewellbeingpills.net
suedvirop.com
suevikkox.com
suleprito.com
sumiplefo.com
superharmacyhealth.com
svielefor.com
tabletdrugstorehealthprofessionals.com
tabletdrugstorehealthrisks.com
tabletdrugstorepharmacy.net
tabletpillsrx.net
tabletrxmeds.net
tabletrxmedsshop.com
tabletsdietpillsmeds.net
tabletsmedsmedicine.com
tabletstorepharmacy.net
tabletswellbeingpills.net
tarikfeman.com
tedefryci.com
tehihruba.net
tekistaey.com
telephonesstemguide.com
tereftimi.com
testamentarysolutions.com
teubohuse.com
tevmuvnog.com
theanaesthesiaschool.com
theatrecurtians.com
thepillsmeds.com
theshoppharmacyrx.com
thestorepharmacy.com
thestoretabletsdrugstore.net
thetabletsdiscounts.com
thetabletsmedicine.net
thetabletsrxhealth.com
thetoremedications.net
theworldtrustedtablet.com
thibcalni.com
thucaupimyg.com
thuwzuwpu.net
thyzubiok.com
tigilveu.com
tijlotme.com
tikuplero.com
tioxquwquze.com
titacolwect.com
tizqunhal.com
tlaqwavsud.com
tlekpemsij.com
tliaslyt.com
tlienkuvo.com
tlikyvkyck.com
tlobjeprant.com
tmeoqwoi.com
tmipdalku.com
tmunjiowoj.com
tmunjiowoj.net
tmypryewho.com
toepkahy.com
toghaxcegg.com
topvaluepharmacy.com
torepharmacymeds.com
torewellnessguide.net
torontorxmedshealth.com
trunkplates.com
tsuxquno.com
tuikivuyvo.com
tupobonzu.com
turbuvty.com
tvesdyfjerp.com
tviwdowhuc.com
tvoqubjyj.com
tvyavapy.com
twanwiwn.net
twaphyscurv.com
tweylopote.com
twimpuax.com
tworbyrkub.com
twussuokenh.com
twypixquhow.com
twyzqugnay.com
tyfiftyshis.net
typladbumze.com
tyudquod.com
ualoxreabl.com
uaspirizy.com
ubbuksuo.com
ubkopgyrd.com
uccyzanno.com
ucqubuvlygl.com
udibolnad.com
udquhwoxboe.com
uejwavjyebl.com
ugobuyfsap.com
uguhdamzij.com
uhbiznymt.com
uhokkajbib.com
uimeohynzy.com
ukhoctular.com
uligilopz.com
ulsimorod.com
ultimaterxguide.com
urvibetex.com
uwofnakzy.com
videxoret.com
vihudmyqui.com
vintegelu.com
vipdoyzva.com
vipigopvoj.com
virediult.com
viresauki.com
virtualstoremart.net
viscemyvnyx.net
visionfitnesstablets.net
vitalopharm.net
viurkrude.com
vjathunmefy.com
vjaygojni.com
vjestolquow.com
vkosaejr.com
vloadnecyth.com
vlyuxnypty.net
vmagnida.com
vmeohpyusso.com
vmuwquig.com
vnywixfutpu.com
vomiccalhe.com
vonterego.com
vorgedeax.com
vosusnim.com
voxheulaj.com
vpyztete.com
vriexryexn.com
vtaudcabgo.com
vtaudcabgo.net
vtawcosa.com
vtekfobne.com
vtyzmequo.com
vulepaxot.com
vulipahoe.com
vulsiprou.com
vunisotex.com
vuolenzad.com
vurihapot.com
vurpehant.com
vurpigano.com
vuydpity.com
vylnylnob.com
vylsysuih.com
vzeugwoll.com
vzidmodoi.com
vzugmygn.com
wafsezyoz.net
waglermud.com
wakwafbiqub.com
waosadnie.com
warehousewithinstore.com
wasneoqwun.com
wuwtedqum.com
wwwpillsrx.com
xeparryquz.com
xepwemkutli.com
xeubvubdiy.com
xibtitihu.com
xignojya.com
xihwonsas.com
xilefotid.com
xirozaqe.com
xivaykkay.com
xixyvbisnot.com
xobhaclown.com
xokreddohe.com
xokreddohe.net
xosibsowo.com
xovtitlorne.com
xowieqwuzl.com
xuarypqug.com
xukpivhyg.com
xunjopgali.com
xyflyemqe.com
xygbilhow.net
xyjepnuhop.com
xyjkufguc.com
xyktidpi.com
xylpagset.com
xyugmymzo.com
yafepkykyu.com
yakufgydry.com
yalmyvpom.com
yampukzej.com
yancadsidlu.com
yatjosuy.com
yebromkipcu.com
yedhecimm.com
yepfuokwu.com
yolsesexfa.net
yourtabletspharmacyhealth.net
yuxouwjyz.com
zanmarsuhu.com
zioqunrisi.net
zluzgymwo.com
zlyupgejo.net
zneotezoc.com
znoduigyef.com
znoduigyef.net
znupicwia.com
zobnozismo.com
zoezbizbi.net
zotmynib.com
zriexnini.com
zuibliotr.com
zumtekalu.com
zuorhitep.com
zuptereno.com
zvamzyucu.com
zvioksuhae.com
zvivdundo.com
zvudkexjymy.com
zvybykho.com
zvyspywbia.com

tabletswellbeingpills.com
188.132.221.243 per who.is - same
201.7.103.58 per domaintools
eyldz.ru
fccma.ru
femalegenitalanatomy.ru
fpkax.ru
freepharmacymedicines.ru
ggfh.ru
ggfj.ru
gockg.ru
gphdv.ru
gpmun.ru
greatmedspills.ru
greatpharmacytablets.ru
greatpillsmeds.ru
greatrepills.ru
greattoredrug.ru
hujg.ru
hxacq.ru
ibiopharm.ru
kwlzn.ru
kzgre.ru
lensrx.ru
lensrxtabletspharmacy.ru
medicationmeds.ru
medicinemartindia.ru
medicinetorem.ru
medsdrugstoretablets.ru
medshealthplusdrugstore.ru
medslessworld.ru
medspharmacypillsworld.ru
medspharmacysite.ru
medspharmacytechtablets.eu
medsrxpharmacyexam.ru
medsrxpharmacytech.ru
medsusatabletssite.ru
meftuykke.com
megapetmeds.ru
mentalhealthrx.ru
mjayh.ru
mntrn.ru
mrfqk.ru
mymedicationsstore.ru
mypharmacymedicine.ru
natpharmacyrx.ru
ofunvyrti.com
peaxumite.com
peccivcicr.com
pecevcusyg.com
pecevcusyg.net
pefdekly.com
peklurzunu.net
penjoupuge.com
peoplerxstore.net
peoplespharmacytabletspills.net
perkradui.com
pervaketa.com
petpetyci.com
petsmedsrx.com
pexdefipfik.com
pexmibmog.com
peycfamkyd.com
pezkabett.com
pharmaceuticaltabletsdrugstorepills.net
pharmacydietpillsmeds.net
pharmacydietpillsrx.net
pharmacydirectmedsworld.net
pharmacydirectsales.com
pharmacydirecttabletsguide.com
pharmacydirecttabletsguide.net
pharmacydiscountwellbeing.net
pharmacydrugstorehealthprofessionals.net
pharmacydrugstorehealthpromotion.net
pharmacydrugstorehealthreform.net
pharmacyhealthpills.com
pharmacyhealthtablets.net
pharmacyjobsmedsworld.net
pharmacyjobswellbeing.net
pharmacylensrxdrugstore.net
pharmacylicensedrxpills.net
pharmacymedicalarts.net
pharmacymedicineshop.net
pharmacymedicinetoday.net
pharmacymedsdrugstore.net
pharmacymedsdrugstorechains.com
pharmacymedspills.com
pharmacymedsrxsite.net
pharmacymusclenutritionrx.com
pharmacypainmedscapsules.net
pharmacypainmedsdrugstore.com
pharmacypetmedscapsules.com
pharmacypillsdirect.com
pharmacypillsdiscounts.net
pharmacypillsdrugstorechains.net
pharmacypillshealth.net
pharmacypillsmeds.com
pharmacypillsmeds.net
pharmacypillsrx.net
pharmacypillsshop.com
pharmacypillssite.net
pharmacypillstablets.com
pharmacypillstabs.net
pharmacyplushealth.com
pharmacyplushealthpills.com
pharmacyprescriptioncapsules.com
pharmacyprescriptioncapsules.net
pharmacyprescriptionmedsdirect.net
pharmacyprescriptionmedssite.com
pharmacyprescriptionpillsdirect.net
pharmacyprescriptiontabletssite.com
pharmacyprescriptionwellness.com
pharmacyrxcanadameds.com
pharmacyrxcanadameds.net
pharmacyrxcontrolpills.com
pharmacyrxcontrolpills.net
pharmacyrxdrugstorephotos.net
pharmacyrxguide.com
pharmacyrxhealth.com
pharmacyrxlosstablets.net
pharmacyrxmartworld.net
pharmacyrxmedicationsworld.net
pharmacyrxmedsdiscount.net
pharmacyrxmedsguide.net
pharmacyrxpillssite.com
pharmacyrxpillsworld.net
pharmacyschoolmeds.com
pharmacyschoolwellbeing.com
pharmacysexualhealthtablets.net
pharmacysexualtabletshealth.com
pharmacysportsmedspills.net
pharmacysportsmedsrx.com
pharmacystorerx.com
pharmacytabletssite.com
pharmacytabletssite.net
pharmacytechmedssite.com
pharmacytechnicianmedsguide.net
pharmacytechtablets.net
pharmacytechworld.com
pharmacyusameds2.net
pharmacywellnesspills.com
pharmapillsmed.com
phenterminetabletrxpills.com
phenterminetabletspills.com
pheqwevge.com
phokoqwitu.com
picqumuxug.com
piffalvyf.com
pilldestroypillstablets.com
pilldestroypillstablets.net
pilldrugstorehealth.net
pilldrugstorehealthpromotion.net
pilldrugstorehealthreform.net
pilldrugstorehealthrisks.net
pilldrugstoremeds.com
pilldrugstoremedspublishing.com
pilldrugstoremedstechnologies.com
pilldrugstoretablets.net
pillfreemedsguide.net
pillfreetabletssite.com
pillfreetabletsworld.net
pillhealthmedsplus.com
pillidentificationpharmacymeds.com
pillidentificationwellness.net
pilllensrxtablets.net
pillmedicaltablets.net
pillmedspharmacycareers.net
pillmedspharmacypractitioners.net
pillmedspharmacytech.net
pillmedsrxteam.net
pillmedswellbeingdirect.net
pillmedswellness.net
pilloraltabletsmeds.com
pillpainmedstablets.com
pillpharmacytabletsguide.com
pillpharmacytabletsworld.com
pillpharmacytabletsworld.net
pillprescriptiondrugstoremeds.com
pillprescriptiondrugstorerx.net
pillprescriptionmedsguide.net
pillprescriptionpharmacydirect.net
pillprescriptionpharmacyguide.com
pillprescriptionrxsite.com
pillprescriptionstorerx.net
pillprescriptiontablets.net
pillprescriptiontabletsguide.net
pillpricemedssite.com
pillpricemedsworld.net
pillretaildrugstoremeds.com
pillrxdrugstore.net
pillrxdrugstorechains.net
pillrxdrugstoreworld.net
pillrxmedsdirect.com
pillrxpharmacyworld.net
pillrxprescriptiondrugstore.net
pillrxtabletssite.net
pillsbargainguide.net
pillsbargainmedssite.net
pillsbargainmedsworld.net
pillsbargainpharmacymeds.net
praktuwmozi.com
presciptionhealthconcernsmedications.com
presciptionhealthexperts.net
presciptionhealthprofile.net
presciptionhealthshopdrugstore.net
presciptionpharmacy.com
presciptionpharmacycurriculumdrugstore.net
presciptionpharmacygraduates.com
presciptionpillstablets.com
prevakopi.com
primarydream.com
privatepharmacyrx.net
professionalpharmacyrx.net
progivtawn.com
prosdouzi.com
pruwoymiv.com
pryxfozlabe.com
psaedpyoh.com
psaovlaxi.com
psiemmexr.com
psyatlin.com
psyemzeodd.com
ptapounusy.com
ptarlezwy.com
ptosbynme.com
ptyjsixmep.com
pumqutvule.com
pumqutvule.net
putedrurs.com
pyjfuwakdi.com
qbkh.com
rechebosn.com
redasvenu.com
redbyfduv.net
reizpiska.com
rekpisudo.com
spakkutli.com
spartandrugmart.net
sparxhealth.com
sparxhealth.net
specialmedsrx.net
specialtypharmacymedsdrugstore.net
specialtypharmacymedshealth.com
specialtypharmacypillshealth.net
spelerago.com
spiritualwellbeingpills.net
sporegimu.com
spulatakz.com
spyshopstore.net
squlvetpuzo.com
squyhofbade.com
squyhofbade.net
srabeytte.com
srehyqulda.com
srehyqulda.net
tabletsfitnesspills.net
tabletsguide.com
tabletshealthapothecary.net
tabletshealthdirect.com
tabletshealthdirect.net
tabletshealthdirect.ru
tabletshealthdrugstoreguide.net
tabletshealthmedsplus.com
tabletshealthpharmacy.com
tabletshealthpharmacysite.com
tabletshealthpharmacysite.net
tabletshealthrxsite.net
tabletshealthsite.com
tabletsmallwebsite.net
tabletsmartdirect.net
tabletsmedicationsguide.ru
tabletsmedicationspharmacy.com
tabletsmedicationsworld.com
tabletsmedicinestoremeds.com
tabletsmedicinestoremeds.ru
tabletsmedsdirect.net
tabletsmedshealth.com
tabletsmedsmedicines.net
tabletsmedsrxworld.net
tabletsmedsstoreonline.net
tabletsmedswellbeing.net
tabletspecialtypharmacydrugstore.net
tabletspharmacyhealth.com
tabletspharmacypillsguide.net
tabletspilldrug.com
tabletspillsbargains.net
tabletspillsdrugs.com
tabletspillsmeds.com
tabletspillsremedies.net
tabletspillsrx.com
tabletspillsrxworld.com
tabletspillswellbeing.net
tabletsprescriptiondirect.net
tabletsprescriptiondrugstoremeds.com
tabletsprescriptionstoremeds.ru
tabletsrxhealth.com
tabletsrxmedicine.net
tabletsrxmeds.com
tabletsrxpharmacychains.com
tabletsrxpharmacyguide.net
tabletsrxpharmacypractitioners.com
tabletsrxpharmacytech.com
tabletsstorehealth.net
tabletsstoreowners.net
tabletsstoreworld.com
tabletsstoreworld.ru
tabletswellbeingcare.net
tabletswellbeingdrugstore.com
tabletswellbeingguide.net
tabletswellbeingpills.com
tabletswellnessdrugstore.net
tabletswellnesspills.com
tabletswellnesssite.com
tabletswisconsinpharmacymeds.com
tablettablets.net
tablettoxicspillsrx.com
tabletwellbeingdirect.com
tabletwellbeingdirect.net
tabletwellbeingproducts.ru
tabletwellbeingsite.com
tabletwellnessguide.com
tabletwellnessmeds.com
tabletwellnessworld.com
tabrxdrugstorechain.net
tacidgoxfu.com
taexussiko.com
tagpaxibamt.com
thecapsuleshealth.com
thediskfoundry.com
themarttablets.net
themeasureconversion.eu
themedicationsstore.net
themedicationstablets.com
themedsprescription.com
themedstabletsprescription.com
theperplex.ru
thepharmacyprescription.com
thepillcorner.com
thepillsdrugstore.com
thepillshealth.net
thepilltablets.com
therepharmacy.net
therepharmacymeds.net
therudolphinetablets.com
therudolphinetablets.net
therxchange.ru
therxpills.net
therxtreme.net
theshoppharmacyrx.ru
thestorehealth.net
thestoremedswellness.net
thetablethealthmeds.net
thetabletrxpills.com
thetabletsbargain.net
thetabletsbargain.ru
thetabletsolution.net
tolidosem.com
toplimhyas.com
topmedspharmacy.com
topnumblers.com
toretabletsmedications.net
torewellnessmeds.net
torontorxmedstablets.com
totalpharmacyrx.com
touetakou.com
toymeds.net
traonnaymb.com
travelmedicalstore.net
trippharmacypharmacy.net
tropicalmedicinerippillstablets.com
tropicalmedicinerippillstablets.net
trozvewze.com
trustedtabletspharmacypharmacy.com
tryxticta.net
tsartyzi.com
tsepijahea.com
tsidjosy.com
tsismelump.com
tudicreps.com
tukirepao.com
uaiys.ru
uarta.ru
ugfg.ru
umdgv.ru
upjydfuo.com
upuyxcin.com
urmikalos.com
usapillstore.net
ushutguny.com
usichuhda.com
usjashytr.com
usmedspharmacy.net
uttymlofyfu.com
uvuhjomuph.com
uvzedobqux.com
uwofnakzy.net
uxecyfydle.com
uxqunkuxi.com
uxwauviqs.com
uyfeowkil.com
uyzzuxtadd.com
uzmoweyzo.com
uzvugzigug.com
vadihenop.com
vadikezay.com
vaduzipel.com
vaejephoans.com
vaejephoans.net
vailherdo.com
valbumiow.com
valperefa.com
vartadari.com
vaskoirbe.com
vasperagu.com
vatligare.com
vaulkismi.com
vauloffed.com
vboizqude.com
vdubygeyw.com
vedtavses.com
velparago.com
venufiert.com
vermefazu.com
vesbarouk.com
vesquozwow.com
vexwosmug.com
vgafruflo.com
vgafruflo.net
videterui.com
vidiomdas.com
vierovant.com
vijekanty.com
webdrugrx.com
webpillpharmacy.net
webrxpills.com
webrxpills.net
wederyfoc.com
welfarepharmacy.net
wellbeingdrugstore.net
wellbeingdrugstorepills.com
wellbeingdrugstorepills.net
wellbeingprescriptiondrugstorerx.com
wellbeingprescriptionmarket.net
wellnessmedicationsstore.net
wellnesspharmacytablets.com
wenpauxyan.com
wequvpes.com
werxdrugs.net
werxdrugs.ru
wetionaih.com
wgdnp.ru
whabdoefa.com
whadpeaf.com
whaqwirg.com
whawradybwi.com
whofywsebsos.com
whogtakca.com
whosiofutil.com
whuneiveho.com
wijduslith.com
wilquznyja.com
wimtuzucwy.com
wirzuacu.com
wisconsinpharmacypillshealth.net
wisfugcy.com
wiwluciwci.com
wohromot.net
workplacedrugtorepillspharmacy.net
worldhealthpharmacy.net
worstpillsdrugstore.com
wrejbozn.com
wrejbozn.net
wrikevba.com
wrikwytuc.com
wrikwytuc.net
wryvdabo.com
wubjopihu.com
wurgoyvbu.com
wuyjulow.com
wwwabsolutepills.com
wwwdietpillsrx.net
wwweasypillrx.net
wwwmedicalmeds.net
wwwpillsrx.net
wybzuffya.com
wyfsy.ru
wygriwokt.com
wyldeyfr.net
xabdemcyt.com
xakibros.com
xarosrer.com
xeddemwagh.com
xelerabud.com
xelsenmur.com
xencexbea.com
xevoqulte.com
xfods.ru
xigmasquf.com
xignojya.net
xivaykkay.net
xogliezzu.com
xuypytqux.com
xysunzunn.net
xyzbeczyom.com
yatwyozqe.com
yedycryahpu.com
yevkaonfas.com
ygfg.ru
yourcapsulesstore.com
yourdrugtorem.com
yourtabletcapsules.com
yourtoremeds.net
zupleortu.com
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: Compromised hosts

Postby Red Dwarf » Mon Jan 31, 2011 4:48 pm

Registrars for targets, brands = CH&CM or CFP

greattabletscapsule.net KEY-SYSTEMS GMBH
sensitivetabletrxpills.net KEY-SYSTEMS GMBH
starrxwellness.net KEY-SYSTEMS GMBH (Client Hold 31 Jan)

optimumhealthmarket.net NETEARTH ONE, INC. DBA NETEARTH
therepharmacy.net NETEARTH ONE, INC. DBA NETEARTH

rxmedicalcenter.com TRUNKOZ TECHNOLOGIES PVT LTD. D/B/A OWNREGISTRAR.COM

pillsrxpharmacy.com WEB WERKS INDIA PVT. LTD. (Parking page)
tabletswellbeingpills.com WEB WERKS INDIA PVT. LTD.
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: Compromised hosts

Postby Red Dwarf » Mon Jan 31, 2011 11:54 pm

Redirecting to pharmacy frauds and software piracy

arquiveiring.kit.net/cecgajlo.html
arquiveiring.kit.net/fw.html
arquiveiring.kit.net/h.html
arquiveiring.kit.net/latn.html
arquiveiring.kit.net/uszrjcfp.html
arquiveiring.kit.net/ysubi.html
dreamsofagirl.kit.net/ay.html
dreamsofagirl.kit.net/gxfkjxtr.html
dreamsofagirl.kit.net/tg.html
dreamsofagirl.kit.net/vzltcktr.html
dreamsofagirl.kit.net/yzzoutdl.html
sosdinheiro.kit.net/egk.html
sosdinheiro.kit.net/qaht.html

Sample redirections
Code: Select all
<meta HTTP-EQUIV="REFRESH" content="0; url=http://fawdoctor.com">
<meta HTTP-EQUIV="REFRESH" content="0; url=http://buy-softwarestore.ru">
<meta HTTP-EQUIV="REFRESH" content="0; url=http://lodmedic.com">
<meta HTTP-EQUIV="REFRESH" content="0; url=http://digital-oembuy.ru">
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: Compromised hosts

Postby spamislame » Tue Feb 01, 2011 10:56 am

That list appears to be a totally different set of properties (no Eva Pharmacy at all,) different redirection type (straight meta-refresh, no lengthy JavaScript obfuscation.)

How many of these explot kits are out there? Must be hundreds.

SiL
User avatar
spamislame
Site Admin
 
Posts: 5058
Joined: Tue May 09, 2006 9:18 am

Re: Compromised hosts

Postby AlphaCentauri » Tue Feb 01, 2011 2:18 pm

This is typical of what I get sent:
talk.pfound.ru/nyr.html?shifting=surveying => lentdoctor.com (PhEx)
116.193.76.78/~hoahong/tkajozuj.html => lodmedic.com (PhEx)

I used to report a bunch, but lately I don't find many still alive after a day or two. I hope that means everyone is getting the message that taking a laissez-faire attitude toward having these redirection links on neglected websites is encouraging the hacking by allowing the spammers to profit from it.

Now what would really rock is if we could get some of the larger ISPs to redirect to a warning page like ImageShack was doing. :twisted:
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Redirects to lentdoctor.com

Postby Red Dwarf » Tue Feb 01, 2011 10:49 pm

Month to date extract from spam. Redirections are all the same
Code: Select all
<meta HTTP-EQUIV="REFRESH" content="0; url=http://lentdoctor.com">

adidasboxing.msk.ru/txgylh.html
amelok.jino.ru/dpkdkxyl.html
arquiveiring.kit.net/vx.html
astro21.by.ru/pfdbu.html
baysecurity.com/ryy.html
beton.internetdsl.pl/vf.html
beton.internetdsl.pl/xknulc.html
cancan.romportal.ro/grmgpzb.html
cancan.romportal.ro/yzejnb.html
cason.neostrada.pl/dao.html
cjvillegas.com/gfn.html
comunamea.eu/kwjemxcu.html
convertiblesofahome.sapo.pt/fhbik.html
cre.ehc.hu/bkxytohx.html
dreamsofagirl.kit.net/bj.html
empe3net7.neostrada.pl/z.html
eticsa.com.ar/nkjzfgmc.html
ftpaccou.i214.icreonhosting.com/m.html
ftpaccou.i214.icreonhosting.com/wkghjpq.html
fut.edu.pl/a.html
fut.edu.pl/ano.html
fut.edu.pl/wygrtc.html
helpik.org.ua/mg.html
info.sopet.ru/gbykxowm.html
jobsnow.co.cc/cntftit.html
kreed.home.nov.ru/curvf.html
kuznya.home.nov.ru/zkeectl.html
larussia.parfeon.net/blxd.html
legacyhides.co.za/vzo.html
mebel.neostrada.pl/thum.html
mediacharme.com/kubw.html
mediacharme.com/n.html
minouklim.com/j.html
minouklim.com/uyffzsc.html
mladen.sni.users.sbb.rs/ksdak.html
mladen.sni.users.sbb.rs/mmemwp.html
mladen.sni.users.sbb.rs/n.html
multinet.com.sapo.pt/wlepayxq.html
orci.or.tz/crjwwbe.html
pagerank.telkomspeedy.net/uu.html
qedimbaki.wen.su/fzf.html
qedimbaki.wen.su/gatla.html
qedimbaki.wen.su/o.html
showftp.ehc.hu/bv.html
sibtknet.83.com1.ru/ee.html
studioedge.co.cc/yo.html
svet.ddt86.ru/vzvxda.html
talk.pfound.ru/leafynly.html
talk.pfound.ru/nyr.html
talk.pfound.ru/pshtqhux.html
tarentaalrandsafari.co.za/g.html
tarentaalrandsafari.co.za/hshrjftf.html
tarentaalrandsafari.co.za/uccskvtp.html
ua0ljj.bdk.com.ru/bu.html
ua0ljj.bdk.com.ru/lyzuaqj.html
ua0ljj.bdk.com.ru/v.html
updown.brainz.cz/wcocu.html
wederkoms.50webs.com/omyx.html
windyplains.co.za/c.html
windyplains.co.za/vs.html
windyplains.co.za/vx.html
winx.kport.info/ts.html
yes007.by.ru/zfzzo.html
zsp2.neostrada.pl/xi.html
zsp2.neostrada.pl/y.html
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Waledac & Compromised hosts

Postby Red Dwarf » Wed Feb 02, 2011 5:31 pm

Waledac 2.0 raises its ugly head again.

More details on hijacked servers with added redirection files used in spam URLs, is in the blog at the Last Line of Defense
http://blog.tllod.com/2011/02/01/calm-before-the-storm/
"they have 123,920 login credentials to FTP servers at their disposal"
"specific files to redirect users to sites that serve malware or promote cheap pharmaceuticals. In January, we observed 222 web sites that had been compromised containing a total of 9,447 pages, such as hxxp://access-destination.com/fydb76lp.html "
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Enom / Namecheap acts

Postby Red Dwarf » Wed Feb 02, 2011 9:30 pm

One of the high use redirection tagets

Domain Name: FAWDOCTOR.COM
Registrar: ENOM, INC.
Registration Service Provided By: Namecheap.com
Name Server: BLOCKEDDUETOSPAM.PLEASECONTACTSUPPORT.COM
Name Server: DUMMYSECONDARY.PLEASECONTACTSUPPORT.COM
Status: clientHold
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: Enom / Namecheap acts

Postby AlphaCentauri » Wed Feb 02, 2011 10:23 pm

Red Dwarf wrote:One of the high use redirection tagets

Domain Name: FAWDOCTOR.COM
Registrar: ENOM, INC.
Registration Service Provided By: Namecheap.com
Name Server: BLOCKEDDUETOSPAM.PLEASECONTACTSUPPORT.COM
Name Server: DUMMYSECONDARY.PLEASECONTACTSUPPORT.COM
Status: clientHold


Finally!
:partyman:
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: Compromised hosts

Postby Red Dwarf » Wed Feb 02, 2011 10:28 pm

Redirection meta HTTP-EQUIV="REFRESH" content="0; url=http://digital-oembuy.ru"
Euro Software

fut.edu.pl/h.html
fut.edu.pl/kns.html
mladen.sni.users.sbb.rs/myysmvzz.html
mladen.sni.users.sbb.rs/qrd.html
qedimbaki.wen.su/dzdptnx.html
qedimbaki.wen.su/encfpoa.html
talk.pfound.ru/fvwnvrfo.html
talk.pfound.ru/wf.html
ua0ljj.bdk.com.ru/evxg.html
ua0ljj.bdk.com.ru/nhmawnzg.html
dreamsofagirl.kit.net/urugr.html
greatcasinosports.co.uk/daapyt.html
greatcasinosports.co.uk/ppr.html
mediacharme.com/sb.html
mediacharme.com/vokgm.html
minouklim.com/iiagtdol.html
minouklim.com/vjnbza.html
tarentaalrandsafari.co.za/cseginye.html
tarentaalrandsafari.co.za/fkqsux.html
ukcasinowin.co.uk/bff.html
ukcasinowin.co.uk/jc.html
windyplains.co.za/jhsk.html
zsp2.neostrada.pl/flxrjxl.html
zsp2.neostrada.pl/hyl.html

Redirection meta HTTP-EQUIV="REFRESH" content="0; url=http://lentdoctor.com"
Pharmacy Express

astro21.by.ru/rlyuot.html
cancan.romportal.ro/rpwvmzlh.html
cason.neostrada.pl/iclisca.html
cre.ehc.hu/udpguq.html
empe3net7.neostrada.pl/aehzdnj.html
ftpaccou.i214.icreonhosting.com/m.html
ftpaccou.i214.icreonhosting.com/wkghjpq.html
fut.edu.pl/ano.html
fut.edu.pl/wygrtc.html
info.sopet.ru/anpkutut.html
jobsnow.co.cc/shf.html
kuznya.home.nov.ru/gqrv.html
larussia.parfeon.net/hvskm.html
mladen.sni.users.sbb.rs/buiv.html
mladen.sni.users.sbb.rs/ksdak.html
mladen.sni.users.sbb.rs/n.html
ochrona.internetdsl.pl/is.html
p15.gorzow.pl/athxs.html
pliki.promaster.pl/yqos.html
qedimbaki.wen.su/fzf.html
qedimbaki.wen.su/uyvpxz.html
qingye.50webs.com/dyggwvrn.html
rexonateens.co.id/e.html
rexonateens.co.id/jfzacbt.html
rexonateens.co.id/jzooibf.html
showftp.ehc.hu/vxyggdnr.html
talk.pfound.ru/bcp.html
talk.pfound.ru/leafynly.html
talk.pfound.ru/nyr.html
talk.pfound.ru/zzg.html
tupamaros.com.co/frignija.html
ua0ljj.bdk.com.ru/lyzuaqj.html
ua0ljj.bdk.com.ru/v.html
dreamsofagirl.kit.net/bj.html
dreamsofagirl.kit.net/myzhmnyt.html
dreamsofagirl.kit.net/u.html
greatcasinosports.co.uk/g.html
greatcasinosports.co.uk/luvdhvii.html
greatcasinosports.co.uk/pefkmwt.html
kudowa.internetdsl.pl/agg.html
mediacharme.com/afncv.html
mediacharme.com/kubw.html
mediacharme.com/n.html
mediacharme.com/zmfn.html
memlauer.user.icpnet.pl/nvn.html
minouklim.com/j.html
minouklim.com/kplp.html
minouklim.com/ys.html
pcxmda.com/vwazjct.html
tarentaalrandsafari.co.za/fsnzl.html
tarentaalrandsafari.co.za/g.html
tarentaalrandsafari.co.za/sacajgn.html
tarentaalrandsafari.co.za/uccskvtp.html
ukcasinowin.co.uk/h.html
ukcasinowin.co.uk/hjlept.html
ukcasinowin.co.uk/j.html
ukcasinowin.co.uk/rgmtbk.html
windyplains.co.za/c.html
windyplains.co.za/vs.html
windyplains.co.za/zom.html
zsp2.neostrada.pl/nu.html
zsp2.neostrada.pl/ozlqkvz.html
zsp2.neostrada.pl/y.html
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Fruitless spam run

Postby Red Dwarf » Thu Feb 03, 2011 10:56 pm

Compromised server redirections from the past few hours contain the refresh code:
Code: Select all
<meta HTTP-EQUIV="REFRESH" content="0; url=http://www.ioangheorgheratiu.ro">

Firefox identifies this as
Firefox wrote:Reported Web Forgery!
This web page at hXXp://www.ioangheorgheratiu.ro has been reported as a web forgery and has been blocked based on your security preferences.
Web forgeries are designed to trick you into revealing personal or financial information by imitating sources you may trust.
Entering any information on this web page may result in identity theft or other fraud.


McAfee SiteAdvisor classifies it as a "Job Australia" Money Mule recruitment site
Job Australia? A money mule recruiting site. Illegal, and likely to end in your arrest for participating in money laundering


Sample redirections

amelok.jino.ru/vf.html
astro21.by.ru/ncvktf.html
beton.internetdsl.pl/juzwk.html
beton.internetdsl.pl/wvlmada.html
cancan.romportal.ro/scoa.html
cancan.romportal.ro/x.html
cason.neostrada.pl/tselngh.html
cre.ehc.hu/gyhqwtnl.html
data.drivemedia.eu/dne.html
empe3net7.neostrada.pl/yax.html
eticsa.com.ar/z.html
fatboy.neostrada.pl/kdtyrj.html
fut.edu.pl/ggyh.html
fut.edu.pl/rkyfxx.html
fut.edu.pl/sziqwanm.html
fut.edu.pl/xv.html
jobsnow.co.cc/omi.html
kreed.home.nov.ru/may.html
kuznya.home.nov.ru/i.html
larussia.parfeon.net/wbcaxkkj.html
mebel.neostrada.pl/tsb.html
mladen.sni.users.sbb.rs/vbbu.html
mladen.sni.users.sbb.rs/xqjpolo.html
User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10542
Joined: Tue Jun 27, 2006 2:01 am

Re: Compromised hosts

Postby spamislame » Fri Feb 04, 2011 11:15 am

I don't know if this is for all ip's or if I'm blocked but that domain now says:

Site web in constructie

?

SiL
User avatar
spamislame
Site Admin
 
Posts: 5058
Joined: Tue May 09, 2006 9:18 am

PreviousNext

Return to Botnets, Hijacks and Hacking

Who is online

Users browsing this forum: No registered users and 1 guest

cron