360netlab / DGA

Suspicious DGA from PDNS and Sandbox.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

From VT: A length of 9-14, a-z, tlds: [com], the fifth new seed of FakeAV?

suqitian opened this issue · comments

All domains, 194 in total.
babisotot.com
bafihamuxav.com
bakubuniho.com
bapyrejecak.com
basydiduwahaw.com
baxivenom.com
bebozasuk.com
betakywaxekof.com
bigoxefyfaluh.com
bipakypusiby.com
bisyvoqyxymyqi.com
bucoqypynynej.com
bytypupecex.com
cacirowec.com
cagolasevaj.com
cajikohinele.com
capurasaf.com
cilybodyd.com
cudokopipi.com
cuneqyqetyroj.com
cygogonabeq.com
cynyhafyzetov.com
cytisenuworyr.com
dajacejobiqen.com
debecyzedap.com
dehozykato.com
dihisalyh.com
dowemawema.com
duvexofejox.com
dytebyhekaqa.com
fakovuhuju.com
fifotojylahe.com
fohohovugoredo.com
fojexojup.com
foqadobyve.com
fujoresaw.com
fymumiviku.com
gasicekymas.com
gavorydigejizy.com
geduhijykes.com
gidewuboler.com
gilebifabusexa.com
gilodivere.com
giwomylywokof.com
guxirysynyges.com
hebypudukotih.com
hevahubaketa.com
hifoqaxinaj.com
hydajerenagy.com
hyvinusys.com
jacumegekij.com
jocusacegir.com
johunyniv.com
jojevijehajyx.com
josigyhyt.com
jukecoruvut.com
jupuqeqej.com
juqupybocuto.com
jusywiruseqoda.com
jywujodocivine.com
kiguqejonodul.com
kilumixefiki.com
kirovulot.com
kovyrecanyvi.com
kyqegovujug.com
kyxagojibiwude.com
lagisipiweso.com
lajusinajoz.com
lavifopihune.com
leducivudadyj.com
lemotukes.com
luqotazih.com
lysocoharogyg.com
lywicoxyvuby.com
marihuqavigyt.com
mecaqyvupi.com
meqijuxosomov.com
mexigawarynode.com
mezibehab.com
mufobapix.com
myhemilymucy.com
mywitojojitug.com
nabubymepicizu.com
nicynajomypy.com
nihedimes.com
nixecynuho.com
nodihykyhopyz.com
norupawetud.com
nosesusucuqiro.com
nupecehededave.com
nymemuhoseran.com
pigymemukux.com
pimerypomike.com
pipugodupexug.com
podojykofogu.com
poqacelufeq.com
potasajic.com
pozefybop.com
pulirutugeqaf.com
punanufawenyk.com
puvepydilaj.com
pywocajypice.com
qamezeqyce.com
qamuvidobihu.com
qatijoxuna.com
qazomequguca.com
qikawykytapysy.com
qixaxyrujuqici.com
qovukezur.com
qozohyhobuci.com
qukocacilogoti.com
qumomulyr.com
qyfimeluxeqok.com
ranamujesu.com
recabikixyse.com
relyfehazoz.com
requzunigiver.com
rerumejid.com
ricogodobekax.com
rinepigelowot.com
ronadosim.com
ruvahekamefan.com
rydoryxowokic.com
sagizunilyqos.com
salysymyp.com
sapypokupyhaky.com
sasoxizyriw.com
savicypacy.com
semuvajako.com
sixihyqecyfuku.com
sobudajib.com
sonycojaqowik.com
suzyvupukunepu.com
syfurojoxereku.com
symihyceqemexo.com
takywegywejesy.com
tedowuveqakej.com
tikytudububy.com
tinocusebawu.com
togizypad.com
tumevamusytoc.com
tupasupihel.com
turezidejuzok.com
tutupeqyrar.com
tuwifotiju.com
tycalinumijotu.com
tyripipehibap.com
tytunajilac.com
vadyrokufubu.com
valanofajo.com
vavuragol.com
vefyqylepahuga.com
vegylaheraf.com
vehepumac.com
vekoxarotucev.com
vepizujefewa.com
vikitarurepuq.com
vilifeqimysu.com
vivasidasaves.com
vovyjaryguwu.com
vuqigajab.com
vuviwuwufi.com
vywobohexinipa.com
waginujiwoha.com
wedytatuxug.com
wenomepodipiby.com
weriloxoro.com
wihoraqite.com
wiqesidavevod.com
wirybidyzufij.com
wokikywalonez.com
wokykevob.com
woranyrypylu.com
woxijaquhiqal.com
wyfymabijahiw.com
xajizukoxo.com
xeruraxagum.com
xifuzakotyk.com
ximeqeteporaco.com
xisebozenaj.com
xisohyrydily.com
xymasehyfi.com
xynixucujeduru.com
zelabuhib.com
zelokovixoqe.com
zepihacil.com
ziwuconogeces.com
zizudadidura.com
zizyhaqizod.com
zopyralor.com
zymaqamusowibu.com
zytijywyqexula.com
zywufoqovy.com
zyzupalotem.com

All the similar samples, 28 in total.

6c0cba02eae7085934b6f5f7e08d0a3a
ac41872e32967aa9bdce36b9b2467dfa
ba04d3aed541c5ab1364672a97bfc5a3
ba95d431141c128670f128a7fc0418b1
c623029c21af21df326ce7f0a081a9eb
550f5cf5a967c2054c15f2a1bef32706
7578a1430ed524feea9079a4ad7a3c6f
921127e21b116358adfcd4ceed452f71
f723e06edaac904f30b51674dbc50f77
18d294ecdf3142acb454de212a7d98b9
4eab8efd9b724cb8dade8c2c3bf45c84
965f90f2b34fe290e0eebc49cdb3a6ed
bf2ad5914a54b18d06c5901296303011
bfdb4403200a2f65092832c4574b9028
e1bcb639693cf876e899151d2bd1defb
e4ab419680149e7351f54f7bed11c8ae
33d6893fa758376b0192be63f2286b27
66c0e1e1d8c26f7e90c753c18c3c68db
202bcba7948c059549d70315eb892456
ae79f7207604e0e257efbe3ccde5dfad
b2aed40ba19ffc015144f60b9543b25e
b72878980c73a29b5f1cd4c709c891b1
c4bac606e7f0783bd9a828eb5a6f5d19
7df5da7a97cee9481d7f6519a7dde50f
8bac052594f7bae9ddadf7dda4c703b9
248c897beeb5032c96520e9446e5c93d
c09bbcbaaf57e6016d14f3699ed7e718
fb4c111ddf3fdc6a5b7ffe7073816562

Not DGA.