Exposing a Currently Active Domain Portfolio of Currently Active High-Profile Cybercriminals Internationally

We’ve decided to use Maltego in combination with WhoisXML API’s integration for the purpose of providing actionable and real-time intelligence on a currently active domain portfolio known to have been operated by known high-profile cybercriminals. We used our own high-profile cybercriminal data set for the purpose of empowering fellow researchers and vendors including organizations with the necessary actionable intelligence to help them stay on the top of their game including to assist vendors and organizations on their way to do a proper cyber-attack attribution in terms of tracking down and responding to these campaigns including to assist U.S Law Enforcement and the U.S Intelligence Community on its way to track down and prosecute the cybercriminals behind these campaigns.

In this article we’ll discuss in-depth and offer practical and actionable threat intelligence on a currently active domain portfolio belonging to high-profile cybercriminals which we obtained using Maltego in combination with WhoisXML API’s integration including to use our own data set of known email addresses known to belong to high-profile cybercriminals internationally.

Related domains known to have been currently registered and in operation courtesy of high-profile cybercriminals internationally which we obtained using our own data set of known email addresses belonging to high-profile cybercriminals:

• girweb[.]net
• cqslj[.]cn
• hztop[.]cn
• yangquanxinwen[.]cn
• zhuomingqiche[.]com
• wzhbn[.]com
• jiulanyizu[.]com
• wxage[.]com
• closeclub[.]pro
• linuxhostingadmin[.]com
• vlmi[.]su
• anti-intruders[.]org
• securelayerseven[.]com
• sandeepkamble[.]com
• teijinfiber[.]com
• hg301[.]com
• eyew[.]com
• topbridal[.]com
• neopes[.]com
• spirrit[.]com
• uscab[.]com
• voonage[.]com
• kanadavatandasligi[.]net
• wordpresshaber[.]net
• bedavaweb[.]gen[.]tr
• greencard724[.]net
• cosmos-nc[.]com
• 53dd[.]com
• spaziotorte[.]com
• finalyearprojects[.]net
• devletmemurlari[.]org
• conspiracyforums[.]us
• toggsport[.]com
• giftmetropolis[.]com
• eeebox[.]com
• blackopszombies[.]net
• rizu[.]net
• cyxt[.]net
• yugu[.]net
• 138a[.]net
• jsjr[.]com
• cnhfjj[.]com
• bernardfaucheux[.]com
• mega-creator[.]com
• nfnf[.]net
• okhbb[.]com
• catalogozara[.]com
• lebu[.]net
• yahe[.]net
• jorgemagano[.]net
• krkr[.]net
• abcadvocacy[.]net
• dapu[.]net
• cntvsc[.]com
• wrwr[.]net
• agendabangkok[.]com
• xqqx[.]net
• cialispharmashop[.]com
• clomid4female[.]com
• celebrexbest[.]com
• ethermywallet[.]com
• buyxenical120[.]com
• ativanmd[.]com
• canadapharmacytrue[.]com
• cialimed[.]com
• crdpro[.]org
• vashikaranonline[.]com
• vashikaranjyotish[.]com
• vashikaranmantra786[.]com
• indianvashikaran[.]com
• getexlover[.]com
• go4infotech[.]com
• sdktmy888[.]com
• cyonyoucatogba[.]org
• tianxiangla[.]com
• tianlaxiang[.]com
• wshlzl[.]com
• difny[.]com
• jinysz[.]com
• dpointsofview[.]com
• techt9[.]com
• interiostreet[.]com
• livebollywoodnews[.]com
• vashikaranpujavidhi[.]com
• pokystreet[.]com
• getquickidea[.]com
• dryskine[.]website
• bit-team[.]com
• werb-ung[.]su
• centurycagecamps[.]com
• airguncorner[.]com
• homegressa[.]com
• uibnto[.]com
• homemawan[.]com
• oh-vanessa[.]net
• klscupboard[.]com
• apartementerbaik[.]com
• pelicanharborcommunity[.]com
• thinkq[.]cn
• jichang[.]us
• q-qq[.]com
• mk00[.]cn
• workee[.]com[.]cn
• 6330200[.]com
• 313g[.]cn
• 140g[.]cn
• 002g[.]cn
• buyambienplus[.]com
• buyclomidvsinfertility[.]com
• buyingventolininhaler[.]com
• buyprednisoneguide[.]com
• fuzhenxin[.]com
• kankanhi[.]com
• jnyunlong[.]com
• mfgtrader[.]com
• mmsecurity[.]net
• lundaolunwen[.]com
• klopresume[.]com
• yiwuzhengxingyy[.]com
• resaresume[.]com
• ccf-ftc[.]com
• homepikan[.]com
• cetinnet[.]com
• mliuliu[.]com
• qzbxhg[.]com
• qqsjf[.]com
• carder[.]su
• crdshop[.]su
• cclub[.]su
• vvgmods[.]net
• uniccshop[.]pw
• unicc[.]ng
• unicc[.]com[.]cm
• unicvvstore[.]com
• 46603[.]cn
• warganning[.]net
• hqcombo[.]com
• garage4hackers[.]com
• good-akk[.]biz
• devilteam[.]biz
• ccsell[.]biz
• wt1shop[.]me
• wt1shop[.]life
• uniccshop-bazar[.]cm
• yuzhoumeinan[.]xyz
• kwardasumsel[.]com
• 59156[.]me
• mangpdkmedis[.]com
• linglk[.]com
• a-q-qq[.]com
• 24lyw[.]net
• limindong[.]com
• watpersbirosdmpoldasumsel[.]com
• q--qq[.]com
• momeawedding[.]com
• pergipergi[.]com
• nesresso[.]com
• bog19[.]com
• laketravisrent[.]com
• isocalc[.]com
• checkmycreditfile[.]com
• devilteam[.]su
• aneantis[.]org
• cadiegolf[.]com
• aneantis[.]info
• raspdiet[.]com
• fr[.]cr
• woodberrywoods[.]com
• tuemites[.]com
• intimplus[.]com
• aneantis[.]mobi
• owneroperatorsconnect[.]com
• cmdbooter[.]org
• susqunhosting[.]org
• tarihtenbugune[.]org
• holigangaming[.]org
• aanhanger[.]net
• gundemde[.]biz
• dollzmania[.]us
• teknorout[.]org
• exoticpetsforsale[.]us
• teknolojirotasi[.]org
• sanjeevbikhchandani[.]com
• centraljerseymutualaid[.]com
• zhoumushui[.]com
• titsandass[.]org
• milseries[.]com
• onyxia[.]hk
• nicmarcfamilydiner[.]com
• moneymaker[.]hk
• fundfairs[.]com
• gogleweblight[.]com
• leyendas[.]net
• portwashington[.]net
• prologic[.]su
• praktijk[.]net
• gummersbach[.]net
• caboolture[.]org
• teen-porn-photos[.]us
• crdpro[.]su
• michaelkorsfactory[.]org
• dereham[.]net
• visaquoctetrungquoc[.]com
• criminalistics[.]us
• changanghiahue[.]com
• workmoney[.]su
• cancersurgery[.]us
• maytinhthanhtung[.]com
• subcenter[.]us
• phienbanmoi[.]com
• gestudio[.]us
• zhf[.]su
• grchildren[.]us
• topurl[.]top
• localfinance[.]us
• obamakids[.]us
• unesco[.]us
• casualscout24[.]us
• coml[.]us
• liveonstage[.]us
• beatcorona[.]us
• hack-sell[.]su
• dboyer[.]us
• legitonlineshopcvv2[.]com
• ccfullzshopcc[.]com
• fe-cc-market[.]com
• skizdumps[.]com
• baokuan188[.]com
• svatakaterina[.]cz
• qinguoxieye[.]com
• vranik[.]cz
• appyyxz[.]com
• windfinder[.]cz
• ln110[.]com[.]cn
• textil-jimy[.]cz
• fotolap[.]cz
• remenapp[.]net
• kartell[.]cz
• zhidazhe[.]com
• kuzry[.]cz
• zhehui123[.]com
• polygot[.]cz
• scanshoes[.]cz
• crackinglords[.]com
• crackingmob[.]com
• imagesmothersday[.]com
• otosecretweapons[.]com
• webcracking[.]com
• hackvip[.]cn
• dreamkafe[.]com
• kzic[.]net
• turksiberguvenlik[.]net
• cposta[.]cz
• gemoeny[.]cz
• hnonline[.]cz
• dwh[.]su
• luxecc[.]su
• averna-solutions[.]com
• boatcarecompare[.]com
• finderskeephers[.]com
• gugeapps[.]com
• kralserver[.]net
• bluecityemlak[.]com
• seslimsevgi[.]com
• xsflashfiles[.]com
• cvvs[.]su
• dstore[.]su
• securityc0de[.]info
• trdbin[.]su
• vendeta[.]su
• wuzzup[.]su
• carderbase[.]su
• kidtoys[.]biz
• mujerescomalt[.]org
• zkfybl[.]com
• trntekstil[.]org
• desihacker[.]net
• bilgikoruma[.]org
• net2park[.]com
• neppal[.]cc
• greencardturkey[.]net
• dancense[.]com
• 024stc[.]com
• vcarders[.]cc
• fotogalerihaber[.]net
• memeler[.]net
• green-kart[.]net
• wordpresstemasi[.]net
• zthg168[.]com
• zsghled[.]com
• zs533[.]com
• dashenkonggu[.]com
• siyahhost[.]org
• zy129[.]com
• just-valid[.]com
• zxftw[.]com
• dumps24[.]net
• zuwaike[.]com
• buy-cc[.]com
• zui001[.]com
• c4rdforallove[.]net
• 51gokoo[.]com
• birazhirs[.]info
• byt3s[.]org
• yerin6[.]org
• xtratachlhit[.]com
• lfjiazhan[.]com
• yuan1994[.]com
• myhack[.]cn
• ioscoderz[.]com
• 99i[.]cn
• az-khaos[.]com
• cnxiazai[.]cn
• xakeroker[.]com
• mubuki[.]com
• cutops[.]com
• exxow[.]com
• center1[.]cc
• pirate[.]bz
• dnswwh[.]biz
• saintsoft[.]rocks
• facility-404[.]net
• lsxhn[.]com
• menke365[.]com
• o495[.]com
• chuanmujia[.]com
• birazhirs[.]org
• tixcf[.]com
• wozhid[.]com
• wuzhid[.]com
• zhuocenmuye[.]com
• hacker[.]inf[.]br
• marinsconsultor[.]com[.]br
• consultoriamarins[.]com[.]br
• odontologiavilamaria[.]com[.]br
• diskalmeida[.]com[.]br
• t-ever[.]cn
• socuteapp[.]cn
• wasgroup[.]cn
• weipind[.]cn
• evil-hack[.]us
• city2013[.]cn
• gxhdr[.]cn
• jizhucewan[.]cn
• gorod-grekhov[.]org
• ringder[.]cn
• falshivie-dengi[.]at
• wedays[.]cn
• xakyd[.]cn
• ids-scheer[.]cn
• xinghuoshiye[.]com
• wnyd[.]cc
• mutlu-aku[.]com
• ramil-sec[.]com
• prmy[.]cc
• dgql[.]cc
• hlsk[.]cc
• rjmy[.]cc
• dgrf[.]cc
• hdds[.]cc
• psmy[.]cc
• dgrp[.]cc
• huijinnaicai[.]com
• durst-china[.]com
• gyjinxin[.]com
• easybaby88[.]com
• bj-xicang[.]com
• eastone-bruecke[.]com
• fenlanliuxue[.]com
• zqhhsc[.]com
• janroad[.]com
• jnxiangao[.]com
• lamarantine[.]com
• zjcxscrew[.]com
• superbigman[.]com
• sz-scw[.]com
• thefundu[.]com
• trhubnet[.]com
• tasters[.]com[.]tw
• peysanmin[.]com
• zpzly[.]com
• secret-zone[.]net
• zdjr7[.]net
• ph-team[.]ir
• zbhkzl[.]com
• 0512tuomao[.]com
• hhncpjyw[.]com
• teshiv[.]net
• hivteam[.]net
• pravosudie[.]online
• entercoal[.]com
• webluca[.]com
• check-in[.]tw
• wydqc[.]com
• libel[.]com[.]tw
• ysztj[.]com
• joco[.]com[.]tw
• woocommerce[.]tw
• ubsd-dist[.]com
• rakthai[.]idv[.]tw
• top105[.]com
• vgnet[.]com[.]tw
• vecjipenis[.]com
• amau[.]com[.]tw
• weareqc[.]com
• wastons[.]com[.]tw
• unicube[.]tw
• gland[.]com[.]tw
• tamashii[.]tw
• tvizleo[.]com
• justnikeit[.]com
• lawyerlowe[.]com
• kooora-now[.]com
• qhhrw[.]com
• englishmp4[.]net
• mp3forfree[.]net
• canaryhealth[.]info
• degreecourse[.]info
• phreaker[.]us
• xfh888888[.]com
• momysbaby[.]com
• wwwpj849[.]com
• xxx982[.]com
• solkies[.]com
• rhodinette[.]com
• xaoduzitie[.]com
• xianjiayou[.]com
• rasionline[.]com
• anarchie[.]mobi
• gzxiusheng[.]com
• mtc-beyret[.]com
• ccshop[.]su
• yongbangjz[.]com
• taxiwalter[.]com
• ytyiber[.]com
• iyd2[.]cn
• canwen188[.]com
• luckygull[.]net
• yxtzu[.]com
• 64hu[.]com
• xhzlovehyx[.]cn
• ddyichu[.]com
• rompop2014[.]com
• szfenxiao[.]com
• guizukali[.]com
• congmobile[.]com
• srchangfang[.]com
• titiyouhui[.]com
• tjbdtg[.]com
• gxzfq[.]net
• qianhuidiy[.]cn
• aheartwedding[.]com
• theanimes[.]us
• sensitiveissues[.]info
• yesnigeria[.]info
• banganigeria[.]info
• ugamablog[.]info
• automatedppc[.]info
• readworldnew[.]info
• shoppingmystical[.]us
• yyb28[.]cn
• ugamasmedia[.]info
• teegeeweb[.]com[.]ng
• wikipedia[.]com[.]ng
• gsmmkwinz[.]com[.]ng
• busyway[.]club
• solarmke[.]com
• sloimages[.]com
• tiporace[.]com
• uspvmc[.]com
• rem-foods[.]com
• scisamurai[.]com
• fz0794[.]cn
• snbzd[.]cn
• jsbike[.]com[.]cn
• 139159[.]cn
• shangyebro[.]cn
• safeskyhacks[.]com
• ddboy[.]cn
• hljxinyu[.]cn
• szsjdtkj[.]cn
• warlegendarys[.]xyz
• dzh2010[.]cn
• diybj[.]cn
• aheen[.]cn
• ckk[.]com[.]cn
• fct[.]com[.]cn
• ztz[.]com[.]cn
• shangwei[.]com[.]cn
• tesu[.]com[.]cn
• zeji[.]com[.]cn
• ziao[.]com[.]cn
• jqz[.]com[.]cn
• jtq[.]com[.]cn
• kcg[.]com[.]cn
• yingchu[.]com[.]cn
• dengtu[.]com[.]cn
• worldcvv[.]su
• ejia360[.]cn
• zunostores[.]su
• sh-crte[.]com
• cardmarket[.]su
• swu[.]ac[.]cn
• fzkjinfo[.]net[.]cn
• majorshops[.]su
• mymarket[.]su
• pvshop[.]su
• yuanmanjiu[.]com
• trump-dmps[.]su
• yiyigo[.]cn
• zxqiche[.]cn
• bkwdcn[.]com
• bxrcym[.]cn
• txlsw[.]cn
• qf360[.]cn
• tstmts[.]cn
• fullz[.]su
• fullzcvv[.]su
• freshbase[.]su
• lampeduza[.]su
• freshstore[.]su
• sdjyxy[.]com
• sz3808[.]com
• vppin[.]com
• angelfire[.]cm
• yiangs[.]com
• culturismoyfitness[.]net
• 04sb[.]org
• xss[.]mk
• minoritybusinessloans[.]us
• mikeranceteam[.]com
• mupvl[.]us
• freesodomie[.]com
• lauxang[.]us
• flex3systems[.]com
• lk21[.]us
• turkrobotu[.]com
• csmonitor[.]cm
• zspaj[.]com
• loanpal[.]us
• textilecad[.]cn
• directautoinsurance[.]us
• tyfzs[.]cn
• routledge[.]cm
• dance-forlife[.]com
• 52crack[.]cn
• 52pojie[.]cn
• globenewswire[.]cm
• viralliberty[.]com
• carderland[.]com
• playit[.]audio
• noi2[.]us
• bet6841[.]com
• cyffy[.]com
• hack8[.]cc
• fjhzx[.]com
• dilifuliao[.]cn
• wangjiakui[.]cn
• shyintong[.]cn
• zdfamen[.]cn
• keeptucompaniavirtual[.]com
• colchonesbuendormir[.]com
• leisuresports[.]com[.]cn
• escueladeyogaprana[.]com
• elitechina[.]cn
• vnsuggest[.]com
• zooomz[.]us
• szom[.]us
• waoom[.]us
• 594sgk[.]win
• wazoom[.]us
• lovell[.]win
• userlane[.]cm
• ccc[.]mn
• tiktokfan[.]us
• gbit[.]cm
• onlineagency[.]us
• shgcx[.]win
• directadmin[.]cm
• yunxiit[.]win
• logomaker[.]cm
• yiyunit[.]win
• mountainwarehouse[.]cm
• hcbylp[.]com
• frfacile[.]com
• hunydon100[.]com
• xcdcf[.]com
• 137451[.]com
• xzyzzx[.]com
• 874525[.]com
• 836414[.]com
• loveradioph[.]com
• obnal-cc[.]com
• xn--n8jl4bi0gra0j6pia37dk673c[.]xyz
• xn--y8jua4mm80s9ohwrznuz[.]xyz
• napchamvl[.]com
• xn--tqqv65cknek3fnmxee8a[.]xyz
• xn--n8j2bm0232e7shjw4a[.]xyz
• xn--premium-o99ps86gyha552dlk4bvkyb[.]xyz
• xn--nckwe0a5db7c7793dzjtazoyyha552dlk4b[.]xyz
• xn--68jyaj2j3a4yd4de8af13ag92bha0874n34k7jl3ytor3v[.]xyz
• xn--n8jvas2hv63op64d[.]xyz
• stmy[.]cc
• rkmy[.]cc
• ezrc[.]wang
• pleasehelp[.]pro
• dump-pin[.]pro
• charitablefoundation[.]pro
• dump-pin[.]su
• blackhatmoney[.]su
• slikroad[.]su
• crdclub[.]pro
• miserable[.]cc
• christiansilbergleit[.]com
• ccputer[.]cc
• descend[.]cc
• pokerca[.]cc
• strengthen[.]cc
• underc0de[.]com
• drmauropiccirillo[.]com
• fisicalshop[.]com
• kali-linux[.]net
• franmenendez[.]com
• gvezzoni[.]com
• drpedroespetxe[.]com
• underc0de[.]net
• xn--n8jaa4ay8a6c8dl6648hdjsazw0d9hr[.]xyz
• institutespi[.]org
• dismiss[.]cc
• aegis-baghdad[.]us
• xn--jh1as52c[.]net
• xn--nck[.]net
• xn--6db[.]net
• xn--5ck[.]net
• dizimax[.]info
• xn--hlry23e[.]net
• canlispor[.]org
• xn--h1aaqhga[.]net
• xn--k8j[.]net
• xn--j9j[.]net
• xn--6oqy10d[.]net
• xn--59j[.]net
• xn--5db[.]net
• xn--5dk[.]net
• web-confiz[.]net
• webfizt[.]net
• magicmoment2[.]cz
• oklahomadogtrainer[.]com
• chibz1[.]com
• aegis-me[.]us
• adult-sexsites[.]us
• truckography[.]com
• airmax-womens[.]us
• wealthgrowing[.]com
• aegisworld-iraq[.]us
• wellnessthailand[.]com
• airsoft-gun[.]us
• all-canada[.]us
• aegis-middleeast[.]us
• america-stresser[.]us
• theinternetgurus[.]com
• youthfuloldage[.]com
• iika[.]net
• louisianaestateplanning[.]com
• all-asami[.]us
• wirelessstreamer[.]com
• aegisworld-uk[.]us
• yourmoneyclub[.]com
• arizona-dui-lawyer[.]us
• stockmarketscreener[.]com
• lendgood[.]com
• tribratanewstrenggalek[.]info
• tribratanewsmalang[.]info
• halodunia[.]info
• guanteroazcuna[.]com
• torbook[.]org
• yarisoyunlari[.]info
• dizihub[.]info
• filmsitesi[.]info
• knpiindramayu[.]org
• daruttaqwa[.]org
• obatjantungkoroner[.]org
• nalorganizer[.]org
• yayasantifamandiri[.]org
• panthermania-pmjr[.]org
• baitur-rizqi[.]org
• insoskaborbyak[.]org
• malakapools[.]org
• bhaknus[.]org
• uniokam[.]org
• gkpb-bandung[.]org
• h22space[.]com
• yqbi1[.]cn
• hnhuizhou[.]com
• xf0794[.]com
• whjgjhj[.]com
• zmxlife[.]com
• zjgyjds[.]com
• fengsukeji[.]com
• 0596jiancai[.]com
• wasatchearthquake[.]com
• darksecarmy[.]com
• alii[.]lol
• psncracker[.]site
• drhirbodmasoumi[.]ir
• shjincheng[.]net
• advemu[.]com
• sadathoseyni[.]com
• iasap[.]org
• binary-zone[.]com
• arabnix[.]com
• mnoor[.]org
• oasismicro[.]biz
• binarysec[.]biz
• heardabout[.]biz
• mainstgrill[.]biz
• buy-vpn[.]xyz
• arkasshipping[.]biz
• arkasdenizcilik[.]biz
• cyber-rog[.]com
• wisconsinrestaurants[.]biz
• buy-vpn1[.]xyz
• ventorhack[.]pro
• buy-vpn2[.]xyz
• v-h[.]su
• footballivept[.]net
• help-for-migraines[.]com
• j-alahkaf[.]com
• pyesappliance[.]us
• dnr-link[.]us
• 50mostpopularwomen[.]us
• spy-on[.]us
• lamarhost[.]com
• salwa-aleryani[.]com
• projecttv[.]us
• arabtmathlat[.]com
• foodstoragesupply[.]us
• shifcosa[.]com
• coronastatus[.]us
• del-mar-ca[.]us
• charts-r[.]us
• chomo[.]us
• buy-health-insurance[.]us
• credit-ratings[.]us
• pulauosi[.]com
• mhm-tools[.]com
• orca-medicare[.]com
• todaymasterpiece[.]com
• malashev[.]team
• ipbfree[.]com
• zipphosting[.]com
• jpg4[.]us
• kurdplus[.]org
• ver-manga[.]net
• kpo-ngo[.]org
• relax-crypto[.]com
• anonymousemail[.]us
• jokconcept[.]com
• maniabets[.]com
• supportsw[.]co
• waraxe[.]us
• supportsw[.]us
• goldenlogisticsltd[.]com
• aramhd[.]com
• fgos[.]su
• ktebdostan[.]org
• wyw[.]su
• fsfwm[.]org
• swsupport[.]co
• techeyes[.]co
• skd-co[.]com
• vqx1[.]com
• xxycsl[.]com
• wgx1[.]com
• zswj027[.]com
• xtxgjxgs[.]com
• zpxinhong[.]com
• gdcqlb[.]com
• ehackerz[.]net
• bitcoinclick[.]net
• binancecrypto[.]us
• mobildiziindir[.]com
• sevketcanaydin[.]com
• filmdizisever[.]com
• top-scripts[.]info
• ecoing[.]net
• anastasiastyle[.]fr
• vk73[.]us
• adobestock[.]fr
• syumor[.]com
• ecommercenation[.]fr
• allforsauna[.]com
• mesanalayses[.]fr
• kaplanser-sam[.]com
• youseemi[.]fr
• eco-print-temirtau[.]com
• samba-bresil[.]fr
• latelepathe[.]com
• eurofinsmesanalyses[.]fr
• ziyorat[.]com
• milkacouture[.]fr
• oksanadanis[.]com
• openfid[.]fr
• intman[.]net
• roofboxer[.]fr
• e-vse[.]net
• samba-riodejaneiro[.]fr
• crdclub[.]su
• nutri17[.]fr
• gippokrat[.]su
• rickc[.]us
• tcbr[.]us
• theavengersmen[.]us
• vmobi[.]us
• dreeporn[.]us
• greatestquotes[.]us
• hypersonicpropulsioncenter[.]us
• tunyclub[.]com
• promocja-lerni[.]us
• tricksplacessblog[.]xyz
• j0ck3rs[.]net
• jockers[.]us
• hansalbers[.]org
• microsoftwindows8key[.]org
• kcfuganda[.]org
• loveua[.]org
• manhattansinfonietta[.]org
• 21fbc[.]org
• andrewmanliguez[.]us
• erotic-stories[.]us
• hackulo[.]us
• datarecoverysoftwares[.]us
• usaprosoft[.]xyz
• wwjnwl[.]com
• yngswgj[.]com
• wkg7[.]com
• ketaminology[.]us
• mardoomak[.]ir
• ktweb[.]ir
• esrefrestaurant[.]com
• lord-team[.]ir
• dz-devloper[.]net
• carding-x[.]com
• cardersnet[.]com
• icarfortifier[.]com
• cardingx[.]com
• assacell-pos[.]com
• pixlogica[.]com
• wikisecure[.]net
• indo-diver[.]org
• leavenworthindiana[.]org
• jocuricumario[.]org
• ironfriend[.]org
• koreanarchitecture[.]org
• ilpercorsodellavita[.]org
• jogos-da-polly[.]org
• braincaffe[.]com
• defconchennai[.]com
• homebrewmakers[.]com
• letmekart[.]com
• letmekart[.]net
• isafilehost[.]net
• isahackers[.]net
• yyxlphs[.]com
• ekalame[.]ir
• zymjmy[.]com
• iryp[.]ir
• zzblsmgs[.]com
• hotelstan[.]ir
• syhuaisi[.]com
• 0918rond[.]ir
• wjjhjgbs[.]com
• decofun[.]ir
• puqiushiye[.]com
• hopoe[.]ir
• ipweixin[.]com
• kouseh[.]ir
• blackhatcracks[.]com
• dsst[.]ir
• sxhhtc[.]com
• 0933rond[.]ir
• wxjzhb[.]com
• 0938rond[.]ir
• zjyongru[.]com
• 0990rond[.]ir
• fzshunxi[.]com
• 0917rond[.]ir
• theprofessionalseo[.]com
• zentrixplus[.]net
• zhk[.]su
• moneytalkers[.]website
• breachps[.]xyz
• consolejuice[.]com
• cnduole[.]com
• rajacapsa[.]us
• cicoser[.]com
• id-pro[.]net
• ztdhome[.]com
• juyingku[.]com
• cfblp[.]com
• pkr4[.]net
• chinavonetour[.]com[.]cn
• idewapoker[.]us
• chwsd666[.]com
• itudomino[.]us
• chuhuikeji[.]com
• pkr88[.]us
• ahyuanhetang[.]com
• bj11185[.]com
• bibibk[.]com
• andhrahackers[.]com
• infopokerclub88[.]com
• pkr88[.]me
• dominoll[.]net
• jorapps[.]com
• zawjni[.]com
• zawjne[.]com
• shokufeh-amanollahi[.]ir
• vb4arb[.]com
• security7[.]ir
• bastachic[.]com
• eve-arch[.]ir
• dryaseenkhudair[.]com
• v4jo[.]com
• jorads[.]com
• toxicunderground[.]org
• demoncode[.]info
• toxic-underground[.]net
• toxichosting[.]org
• elite-boyz[.]info
• petratunnel[.]com
• group-javeid[.]com
• mailelektronik[.]com
• osymsinavtakvimi[.]com
• hepsitemizleme[.]com
• basvurutarihi[.]com
• cvvshops[.]su
• cop[.]su
• akasyahaliyikama[.]com
• hepsiperdeyikama[.]com
• hepsihaliyikama[.]com
• genclerleelele[.]net
• jumpthebroom[.]xyz
• tampabrideguide[.]co
• orlandobrideguide[.]co
• thismuthafucka[.]org
• americanwedding[.]info
• virginiaweddings[.]info
• lhf[.]su
• portsmouth[.]pictures
• headshotzphotography[.]us
• floridaweddingphotography[.]xyz
• sumthingblu[.]info
• ktmstore[.]su
• monogo[.]su
• myfeshop[.]su
• sky-fraud[.]su
• dogshops[.]su
• dumpsvendor[.]su
• godtor[.]su
• infraud[.]su
• thel33ts[.]com
• badmuthafuckastudios[.]info
• badmuthafuckafilms[.]info
• unidumps[.]su
• load-file[.]su
• blackservice[.]su
• muslimloyalty[.]com
• poolmall[.]org
• wtc-int[.]org
• malukuinstitute[.]org
• ubtransaction[.]com
• wsdn2016[.]org
• desa-arjasari[.]org
• sptibakan[.]org
• apjatelnas[.]org
• tb3semarang[.]org
• anshorussunnahbatam[.]org
• mailsfda[.]org
• zelenogorsk[.]su
• zaraysk[.]su
• zvezda[.]su
• zr[.]su
• z6[.]su
• ys[.]su
• yy[.]su
• yp[.]su
• zx[.]su
• darknet[.]su
• y8[.]su
• xo[.]su
• seomutarevic[.]com
• anonclan-stresser[.]net
• trteam[.]net
• smileyzen[.]com
• porte-pvc-aluminium[.]fr
• peo-solution[.]com
• web-wonders[.]fr
• refer-madness[.]com
• noms-de-domaines[.]fr
• purelivingair[.]com
• team-again[.]fr
• therandonneur[.]com
• tryboostx[.]com
• zen-equus[.]com
• caterinrivera[.]com
• vikingdaggers[.]com
• websiteenhancement[.]com
• royalsproduct[.]com
• prosecurityalarms[.]com
• printandbook[.]com
• annuaires-fr[.]fr
• soredgear[.]com
• offre-prive[.]fr
• grnwym[.]cn
• by-tel[.]fr
• redwineimport[.]com
• thantham[.]net
• zimmerton[.]su
• zimbabwe[.]su
• cendoljammer[.]com
• loginblockchain[.]su
• loginlive[.]su
• rozfa[.]com
• rozblog[.]com
• rzb[.]ir
• rackz[.]su
• rbcrewards[.]su
• softsportal[.]su
• xiheiufisd[.]su
• loads[.]su
• menorukis[.]su
• mertonera[.]su
• plpanaifheaighai[.]su
• albadawiyafoundation[.]org
• findwithme[.]org
• digitamobile[.]org
• digitamobile[.]info
• hacksden[.]space
• noviprena[.]com
• boveda[.]cc
• unmobile[.]ir
• rizone[.]ir
• iedb[.]ir
• viprasys[.]com
• krvk[.]cc
• decompile[.]us
• hairstylesinspiration[.]com
• nativerange[.]us
• playerscup[.]us
• samuelmarsh[.]us
• sec-advisor[.]org
• mega-download[.]ir
• rb-news[.]ir
• azcloob[.]ir
• shkamali[.]ir
• palasi[.]ir
• r-ashghana[.]ir
• world-sport[.]ir
• yakh-pop[.]ir
• hzakani[.]ir
• poisonsec[.]org
• fatehgar[.]com
• fatehgar[.]net
• stf[.]st
• easypc[.]ir
• shop-yasuj[.]ir
• mersadent[.]ir
• chenjie0602[.]com
• 1-xm[.]com
• bimyb[.]com
• shunxinly[.]com
• descargasmsmovil[.]info
• bestlifeinsurancequote[.]info
• fastspeeddate[.]info
• 3nvc[.]com
• hongxingjituan[.]com
• shedwzhs[.]com
• tdrhyy[.]com
• nblxwl[.]net
• rentinns[.]com
• aria-security[.]com
• chinakh114[.]com
• irist[.]ir
• kali-linux[.]co
• bgpeterson[.]us
• signaturegrace[.]us
• wavelane[.]us
• billythekidd[.]us
• crackback[.]us
• kardian[.]us
• bachmeier[.]us
• interviewwithgod[.]us
• investforexmarket[.]us
• vuthanhlai[.]org
• mahoa[.]biz
• scamlog[.]org
• xosotoanquoc[.]org
• ddz9598[.]com
• depolethe[.]com
• sqebd[.]com
• blazzter[.]net
• seotoolpro[.]net
• jaketkulitpullupnew[.]com
• windows8vb[.]com
• hi7ob[.]com
• gulfupp[.]com
• rajacovermotor[.]com
• familydebtcounseling[.]org
• freeunlimitedsms[.]org
• galaxy-updates[.]org
• admarksms[.]org
• datetarah[.]info
• nmanationalhealthsummit[.]org
• rihealthdepartment[.]org
• healthanbar[.]org
• healthyrecipesdiary[.]org
• dryrich[.]com
• dyskz[.]com
• ebeled[.]com
• jiachigroup[.]com
• dasmetoi[.]com
• dggah[.]com
• ddz3654[.]com
• dongezu[.]com
• od6s[.]cn
• indocybers[.]com

Related domains known to have been currently registered and in operation courtesy of high-profile cybercriminals internationally which we obtained using our own data set of known email addresses belonging to high-profile cybercriminals:

• hivteam[.]net
• dihatimu[.]org
• doktermata[.]org
• hivreview[.]net
• laporhiv[.]com
• teshiv[.]net
• cegahims[.]com
• thispaddedcell[.]com
• bl4ckhatsecurity[.]net
• anonymous-sec[.]org
• fvelayatmharam[.]com
• thehackerscrib[.]com
• warlegendarys[.]xyz
• hackercity[.]org
• kurdforums[.]co
• hamdb[.]com
• janekvind[.]com
• group-javeid[.]com
• dxdb[.]com
• emperor-team[.]org
• waraxe[.]us
• ziba-choob[.]com
• iransec[.]net
• xhackx[.]net
• bloguluicoco[.]com
• drbagus[.]com
• dihatimu[.]net
• slimslick[.]com
• security7[.]ir
• phpaxe[.]com
• janekvind[.]name
• userguidenow[.]com
• waraxe[.]com
• biosaxe[.]com
• gamecheaters[.]us
• shokufeh-amanollahi[.]ir
• sqlaxe[.]com
• razeilangel[.]ir
• drexlerism[.]com
• desvendei[.]com[.]br
• mamaebr[.]com[.]br
• diskalmeida[.]com[.]br
• heapoverflow[.]com
• hacker[.]inf[.]br
• m8gtc[.]com
• odontologiaesteticasp[.]com[.]br
• thesciencereader[.]com
• marinsconsultor[.]com[.]br
• consultoriamarins[.]com[.]br
• odontologiavilamaria[.]com[.]br
• guardiran[.]org
• class101[.]org
• isearch[.]ninja
• pulses[.]xyz
• tekr[.]net
• omegaforums[.]org
• clinicaoralsp[.]com[.]br
• rateconcursos[.]com[.]br
• feelmynepal[.]com
• dentistacarrao[.]com[.]br
• educationrays[.]com
• dentistasapopemba[.]com[.]br
• ar-sup[.]com
• ebook-bazar[.]com
• xen0x[.]org
• crackingfire[.]net
• ns-rp[.]net
• nulled[.]cat
• xen0x[.]cat
• xn----8sbk0abr6c[.]xn--p1acf
• olly-arb[.]com
• carderlife[.]com
• old-hack[.]pro
• siberfrm[.]net
• kkli[.]ir
• song-dl[.]ir
• hacking[.]cab
• nulled[.]wtf
• megarp[.]com
• itleech[.]net
• xn--instagrm-fza[.]com
• walkingplayersrp[.]com
• sec4all[.]org
• playit[.]audio
• noi2[.]us
• hackyard[.]net
• comandoneinmobiliaria[.]com
• escueladeyogaprana[.]com
• ps-axl[.]net
• x-linkpay[.]com
• topogan[.]com
• whereubrain[.]xyz
• info-hack[.]com
• biztalks[.]net
• vlmi[.]su
• shunxinly[.]com
• rentinns[.]com
• chinakh114[.]com
• tdrhyy[.]com
• antaiyq[.]com
• dropshipmagazine[.]com
• a0915[.]com
• fgos[.]su
• 51zdw[.]com
• wyw[.]su
• 10107337[.]com
• nebraskabiketrails[.]com
• bnzufang[.]com
• zipphosting[.]com
• bhzm[.]net
• jpg4[.]us
• buyermoon[.]com
• affiliatewebbuilder[.]com
• bsj-ebike[.]com
• ver-manga[.]net
• sjump[.]net
• clintonctfire[.]com
• windptc[.]com
• ipbfree[.]com
• softsportal[.]su
• kayabahasa[.]org
• zimbabwe[.]su
• sayafundraiser[.]org
• cbr250club[.]org
• apssd[.]org
• loginlive[.]su
• loads[.]su
• plpanaifheaighai[.]su
• rackz[.]su
• tolakincinerator[.]org
• napchamvl[.]com
• azsrv[.]org
• icamimia[.]org
• inla-indonesia[.]org
• b3research[.]org
• gempar[.]org
• kphyogyakarta[.]org
• accvip[.]net
• kafilahdakwah[.]org
• afeifieuuufufufuf[.]su
• menorukis[.]su
• eoufaoeuhoauengi[.]su
• fafhoafouehfufh[.]su
• zimmerton[.]su
• delkijembu2[.]su
• gvezzoni[.]com
• centromedico-f[.]com
• unmobile[.]ir
• rizone[.]ir
• iedb[.]ir
• fisicalshop[.]com
• tiarajoyeria[.]com
• mvezzoni[.]com
• colchonesbuendormir[.]com
• underc0de[.]net
• tcct[.]us
• zerpens[.]com
• decompile[.]us
• rapisocio[.]com
• drmauropiccirillo[.]com
• shop-yasuj[.]ir
• mersadent[.]ir
• easypc[.]ir
• worldofhacker[.]com
• indianbakchod[.]com
• zhealthy[.]com
• ihindustan[.]com
• hihindustan[.]com
• limitsizhost[.]org
• iayurved[.]com
• edunoob[.]com
• indiabakchod[.]com
• cvvs[.]su
• dstore[.]su
• payctc[.]com
• bolohi[.]com
• codercv[.]com
• document[.]run
• dreamkafe[.]com
• gundemde[.]biz
• mengenlezzeti[.]com
• hertelden[.]biz
• akasyahaliyikama[.]com
• teknorout[.]org
• uydumerkezi[.]com
• susqunhosting[.]org
• osymsinavtakvimi[.]com
• tarihtenbugune[.]org
• hepsitemizleme[.]com
• morametin2[.]org
• basvurutarihi[.]com
• holigangaming[.]org
• rotekelektronik[.]com
• teknolojirotasi[.]org
• hepsiperdeyikama[.]com
• silverhackteam[.]org
• ozdalogluhaliyikama[.]com
• turkishsecurity[.]org
• genclerleelele[.]net
• cmdbooter[.]org
• alboraaq[.]com
• crd[.]cash
• alligator[.]cash
• atnteam[.]com
• altenen[.]com
• cr1mer-fox[.]com
• luxecc[.]su
• pmrcraft[.]com
• trdbin[.]su
• vysotatkd[.]info
• vendeta[.]su
• nyanhack[.]su
• wuzzup[.]su
• carderbase[.]su
• facility-404[.]net
• theblackdeck[.]net
• saintsoft[.]rocks
• workmoney[.]su
• xakeroker[.]com
• xakeroker[.]xyz
• kilerru[.]com
• alkrsan[.]net
• amjadaljazeera[.]com
• yaf3[.]com
• krsan[.]net
• almsabi[.]com
• thegioingam[.]org
• premium4m[.]com
• stoneheight[.]com
• crackcommunity[.]com
• aww25[.]com
• 7lel[.]net
• arab-photos[.]net
• alrewad[.]com
• pvc-altantheem[.]com
• 1f33[.]com
• alkrsan[.]com
• mbtgarissawomen[.]us
• pondokcantik[.]com
• komik[.]us
• crsupport[.]us
• banten[.]us
• tangerang[.]us
• lowongan[.]us
• presiden[.]us
• 6828393[.]net
• aquaomega[.]net
• adidasoriginalsnmd[.]us
• theflatlakefestival[.]com
• haberguncel[.]net
• crackingpro[.]com
• emlakpratik[.]com
• temiztemiz[.]com
• greencardturkiye[.]com
• youtubevideoindirme[.]com
• moradam[.]net
• moradam[.]com
• greencardfirmalari[.]com
• yazzar[.]com
• biopharmacysciences[.]com
• chibi-cyber[.]com
• ejurnal-unsri[.]com
• onlineuppmfkunsri[.]com
• msstoci[.]net
• unsrittr[.]com
• indodl[.]com
• anacalypsismedicina[.]com
• hkvteam[.]us
• holistikamediciana[.]com
• wt1[.]biz
• monster-hack[.]su
• wt1shop[.]info
• wt1shop[.]gdn
• wt1shop[.]me
• wt1shop[.]life
• dhruvseth[.]com
• greencardturkey[.]net
• green-kart[.]net
• wordpresstemasi[.]net
• sridownload[.]com
• uxt[.]ooo
• wikunamu[.]com
• wt1[.]club
• seo50free[.]com
• wt1shop[.]pro
• wadakaruwan[.]com
• wt1shop[.]xyz
• wt1shop[.]top
• convert-x[.]click
• turkish-restaurants[.]us
• true-grit[.]us
• ucpa[.]us
• tured[.]us
• x-up[.]us
• worshiplive[.]us
• yogafor[.]us
• policewatch[.]us
• video-porn[.]us
• unitedcontractors[.]us
• xstat[.]us
• xtremesolutions[.]us
• pakbugs[.]com
• hackingcash[.]com
• coml[.]us
• cendoljammer[.]com
• cendolelizabethbogor[.]com
• kshowindo[.]net
• eptsmp[.]net
• euphoriau[.]net
• mishacker[.]net
• escendolelizabethbogor[.]com
• kozzi[.]us
• matematika[.]us
• americantoyco[.]us
• sec-advisor[.]org
• dboyer[.]us
• grchildren[.]us
• criminalistics[.]us
• cancersurgery[.]us
• lastgeneration[.]us
• clipinteractive[.]us
• churchmember[.]us
• liveonstage[.]us
• cdpyt[.]com
• 222bbin[.]com
• 3456km[.]com
• 3toget[.]com
• szslhy[.]com
• dzh2010[.]cn
• yyb28[.]cn
• pr1v8[.]org
• jsbike[.]com[.]cn
• 139159[.]cn
• diybj[.]cn
• governmentsecurity[.]org
• szsjdtkj[.]cn
• hljxinyu[.]cn
• hainan531[.]com
• 029bole[.]com
• 0a01[.]com
• 21ivy[.]com
• gszsbj[.]com
• gzslhyy[.]com
• h5mm[.]com
• fantasycommissioner[.]net
• xuexizy[.]com
• baniyatravels[.]com
• danielarellano[.]com
• trelawneyhotel[.]com
• trfcn1[.]com
• volynmediacamp[.]com
• wcag-tv33[.]com
• webcracking[.]com
• syworld8[.]com
• cinnamonhillhoney[.]com
• paydayadvancesanfrancisco[.]com
• tjbdtg[.]com
• sanfranciscoinstantloans[.]com
• xhzlovehyx[.]cn
• bb7[.]net
• 64hu[.]com
• instantloanssanfrancisco[.]com
• luckygull[.]net
• paydayadvanceloansnewyork[.]com
• qianhuidiy[.]cn
• paydayadvanceloansdallas[.]com
• iyd2[.]cn
• paydayloanlongbeach[.]com
• srchangfang[.]com
• paydayadvanceloaninchicago[.]com
• canwen188[.]com
• treasure-box2007[.]com
• trimsii[.]com
• instantloanslongbeach[.]com
• cat08[.]com
• orlandohomeinsurance[.]net
• ytyiber[.]com
• cashloansinlosangeles[.]com
• titiyouhui[.]com
• sandiegoinstantloans[.]com
• rompop2014[.]com
• vashikaranjyotish[.]com
• stormedu[.]com
• teijinfiber[.]com
• easywazifa[.]com
• aghorvashikaran[.]com
• lostlove786[.]com
• wiccan786[.]com
• cosmos-nc[.]com
• eyew[.]com
• 53dd[.]com
• spaziotorte[.]com
• pandadiy[.]com
• hg301[.]com
• solidaritycapital[.]com
• topbridal[.]com
• 0512tuomao[.]com
• ddyichu[.]com
• qizhi6[.]com
• secret-zone[.]net
• psychic666[.]com
• islamicwazifa[.]com
• quranic786[.]com
• karmakandapuja[.]com
• game0ver[.]xyz
• islamicwitchcraft[.]com
• newsfirst[.]xyz
• lovevashikaranonline[.]com
• muslimvashikaranmantra[.]com
• hausalegit[.]com
• xvideo5[.]com
• loanpal[.]us
• lauxang[.]us
• hay3x[.]net
• haynhat[.]net
• clarin[.]net
• iu88[.]net
• snbzd[.]cn
• blackhatteam[.]com
• ksdny[.]cn
• fz0794[.]cn
• shangyebro[.]cn
• globenewswire[.]cm
• viralliberty[.]com
• aheen[.]cn
• bjdgkj[.]com
• callowellsbulldogs[.]com
• forever21maternity[.]com
• freewritingcenter[.]com
• finalyearprojects[.]net
• wqoi[.]com
• chaoweipower[.]com
• marielouisesundqvist[.]com
• xuyidc[.]com
• appeven[.]net
• zububaojian[.]com
• isamini[.]net
• highabilitytalentcenter[.]com
• atlantamortgagehelp[.]com
• shenrongsanbianbao[.]com
• sichuanrexian[.]com
• jockers[.]us
• rnsmaden[.]com
• turkworm[.]com
• globalbilisimteknikservis[.]com
• globalceptelefonu[.]com
• j0ck3rs[.]net
• yoncaetiket[.]com
• jockers[.]me
• darbeturk[.]com
• c0deprophets[.]com
• rns[.]com[.]tr
• 0user[.]net
• gsmforumserver[.]com
• l33thacking[.]com
• crackingvault[.]com
• a[.]nf
• attacker-team[.]org
• vnsuggest[.]com
• hirudadoma[.]com
• civanoglukuyumculuk[.]com
• tulayyalcinkaya[.]com
• muratyalcinkaya[.]net
• cineparkcinema[.]com
• meta-logistik[.]com
• fotografie-michel[.]com
• e-vse[.]net
• crdclub[.]su
• allforsauna[.]com
• kaplanser-sam[.]com
• intman[.]net
• web-site-vc[.]com
• oksanadanis[.]com
• dnypf[.]com
• fabanlv[.]com
• zpzly[.]com
• jxyxch[.]com
• gippokrat[.]su
• ftsdhh[.]com
• eco-print-temirtau[.]com
• zdjr7[.]net
• latelepathe[.]com
• anheiba[.]com
• ziyorat[.]com
• crabhousedetroit[.]net
• dcgen[.]net
• redbutt[.]net
• dreniq[.]com
• simplesuccess[.]us
• vikingdaggers[.]com
• where2lodge[.]com
• prosecurityalarms[.]com
• euroskank[.]com
• flexinno[.]com
• yed8[.]com
• skythewoodtl[.]com
• grayhat-hosting[.]com
• crdpro[.]biz
• carding[.]info
• thieves-team[.]com
• crdpro[.]org
• dumps4your[.]biz
• crdclub[.]biz
• hackteach[.]net
• hackteach[.]org
• rustworld[.]net
• libertyreserveos[.]com
• pinpaiyi[.]com
• walkingcivics[.]com
• remaijingxuan[.]com
• retirewithwayne[.]com
• remaituijian[.]com
• homemawan[.]com
• shidapinpai[.]net
• pakistantodays[.]com
• thedeevolutionofman[.]com
• usaprosoft[.]xyz
• pelicanharborcommunity[.]com
• degitalgate[.]com
• homegressa[.]com
• zhekouphb[.]com
• darkstuff[.]ws
• dianpuyouhuiquan[.]com
• cardersforum[.]ws
• remaiphb[.]com
• verifiedcarder[.]ws
• ln110[.]com[.]cn
• resaresume[.]com
• shidapaihangbang[.]com
• homepikan[.]com
• zhegou123[.]com
• maidongxi[.]net
• blackstuff[.]ws
• pianyita[.]com
• privatehackers[.]com
• securelayerseven[.]com
• elhacker[.]org
• garage4hacker[.]com
• forohack[.]com
• f9pix[.]com
• eljuega[.]com
• sandeepkamble[.]com
• egiaitri[.]com
• logdomain[.]com
• kelasmedia[.]com
• ssndob[.]org
• downloadnow[.]biz
• noithat[.]xyz
• lauxanh[.]xyz
• hackhaber[.]xyz
• ajanlar[.]org
• sewate[.]net
• esrefrestaurant[.]com
• cuhenna[.]com
• leakings[.]org
• csboosts[.]com
• eternalhonour[.]com
• turkiyesunucum[.]com
• linuxhostingadmin[.]com
• securelayer7[.]org
• anti-intruders[.]org
• hasanarslanotomotiv[.]com
• gedzac[.]com
• getdevelop[.]com
• glassguardindia[.]com
• dark-market[.]com
• true-carders[.]com
• eessirsa[.]com
• crisscrossconsultants[.]com
• firangeetadka[.]com
• eagleeyesecuritysirsa[.]com
• darksters[.]cc
• lhgpanel[.]net
• bnhns[.]org
• lhgns[.]org
• wavelane[.]us
• billythekidd[.]us
• crackback[.]us
• nativerange[.]us
• j-alahkaf[.]com
• bgpeterson[.]us
• investforexmarket[.]us
• kardian[.]us
• signaturegrace[.]us
• playerscup[.]us
• samuelmarsh[.]us
• lezrweb[.]com
• taqnyplus[.]com
• sofraa[.]net
• intmoneypost[.]com
• arabtmathlat[.]com
• interviewwithgod[.]us
• shifcosa[.]com
• aaresearch[.]us
• bazaarynet[.]com
• haradm[.]com
• alaktiar[.]com
• xahoithongtin[.]net
• starprofile[.]net
• fanphim[.]net
• phongtrovn[.]com
• poisonsec[.]org
• trungtingroup[.]com
• vands[.]net
• chuyentiep[.]net
• yahoo-vn[.]com
• hososao[.]net
• hanbaohanh[.]com
• hostsinhvien[.]com
• hososao[.]com
• 05gt[.]com
• ecoventmenfez[.]com
• localtpcash[.]com
• blogdq[.]com
• hungrycurious[.]com
• asuntmachine[.]com
• bbunltd[.]com
• nakatakenji[.]net
• syr2015[.]com
• scrlar[.]com
• cndgsss[.]com
• aqua-pj[.]com
• styleshort[.]com
• 21homeskitchen[.]com
• goostyles[.]com
• mostfamoustools[.]blog
• hairstylesinspiration[.]com
• mostpopulartools[.]com
• topmenhairstyles[.]com
• goshorthairstyles[.]com
• duniasantai[.]com
• wowhairstyles[.]com
• livingroomin[.]com
• topfixloans[.]com
• wereviewsin[.]com
• boqyw[.]com
• getloansall[.]com
• idaudua[.]com
• cracker-world[.]net
• gruenerblog[.]com
• thetwitterbot[.]com
• hairstylespopular[.]com
• sadizthemes[.]com
• kuealmondcrispy[.]com
• rohmatulumam[.]com
• igniteds[.]net
• wuaipojie[.]com
• pixlogica[.]com
• 52crack[.]cn
• chargetori[.]ir
• cyber-guard[.]org
• ph-team[.]ir
• bet5625[.]com
• myvoxapp[.]com
• world-dev[.]com
• rem-foods[.]com
• zarinroid[.]ir
• 52pojie[.]cn
• wikisecure[.]net
• ylgzzz[.]com
• 594sgk[.]win
• yunxiit[.]com
• shgcx[.]org
• tolur[.]org
• lovell[.]win
• shgcx[.]win
• yunxiit[.]win
• ugworld[.]biz
• yiyunit[.]win
• oneweb[.]su
• v-h[.]su
• ventorhack[.]pro
• handsteamsys[.]com
• rhodinette[.]com
• fatehgarhost[.]ir
• fatehgar[.]org
• fatehgarhost[.]com
• fatehgar[.]com
• sloimages[.]com
• solkies[.]com
• fatehgar[.]net
• eloufir[.]net
• tuto-mks[.]com
• cardingx[.]com
• xn--5dk[.]net
• hljoi[.]com
• cardingx[.]net
• carding-x[.]com
• cardersnet[.]com
• palembanghackerlink[.]com
• imisumsel[.]com
• netcrackiing[.]com
• palembangmitsubishi[.]com
• chileancrack[.]com
• watpersbirosdmpoldasumsel[.]com
• ug-asia[.]org
• entrenamientos-96[.]com
• acuragames[.]com
• wozila[.]com
• culturismoyfitness[.]net
• americanonlineinc[.]com
• dijinshi[.]com
• level23hacktools[.]com
• xn--flw[.]net
• laiyini[.]com
• xn--h1aaqhga[.]net
• hbltx[.]com
• xn--j9j[.]net
• importance[.]us
• xn--jh1as52c[.]net
• trojanvirus[.]cn
• xn--59j[.]net
• iebug[.]cn
• xn--80ahc[.]net
• juyunshi[.]com
• xn--7hv548f[.]net
• revsp[.]com
• xn--g2xn9l[.]net
• tzzle[.]com
• xn--hlry23e[.]net
• cqslj[.]cn
• mosdeux[.]com
• saintsahag[.]com
• rajacovermotor[.]com
• crackinglords[.]com
• crackitindonesia[.]com
• bit-group[.]com
• advmsnry[.]com
• miyako-mfg[.]com
• chadhillman[.]com
• jasakom[.]com
• lammymade[.]com
• tokomahal[.]com
• zzxdfs[.]com
• radio-kencanaonline[.]com
• phreaker[.]pro
• all-shopp[.]com
• phreaker[.]us
• seotoolpro[.]net
• jaketkulitpullupnew[.]com
• smart-gram[.]com
• chacharischa[.]shop
• 1smart[.]link
• blazzter[.]net
• tunyclub[.]com
• vdfno1[.]com
• mangpdkmedis[.]com
• zelguitar[.]com
• zhlibai[.]com
• aihuayiqi[.]com
• ulachi[.]com
• xjmuyitang[.]com
• zgwxbl[.]com
• lwei[.]net
• rfee[.]net
• yqql[.]net
• zwsq[.]net
• ktweb[.]ir
• mardoomak[.]ir
• kishansharma[.]xyz
• cyber-rog[.]com
• jtgp[.]org
• seyilu[.]com
• kanyelu[.]com
• dedezi[.]com
• kan2[.]net
• yaonishe[.]com
• ktvl[.]net
• rrjt[.]org
• pirates-crew[.]org
• zawjni[.]com
• zawjne[.]com
• vb4arb[.]com
• dryaseenkhudair[.]com
• v4jo[.]com
• surabayablackhat[.]org
• jorads[.]com
• jorapps[.]com
• unicvvstore[.]com
• kazaketab[.]com
• carder[.]su
• bastahchic[.]com
• ammanplus[.]com
• bastachic[.]com
• dursuniccan[.]com
• dumpshop[.]net
• uniccshop[.]pw
• unicc[.]ng
• mycarfeed[.]com
• buy-vpn1[.]xyz
• goodevening[.]biz
• cybercode[.]biz
• delihelman-osaka[.]net
• sexvepornolari[.]biz
• mainstgrill[.]biz
• wisconsinrestaurants[.]biz
• football-week[.]net
• buy-vpn2[.]xyz
• space-vm[.]com
• nextvmsite[.]com
• vmsitego2[.]com
• braincaffe[.]com
• braincaffe[.]net
• judi[.]us
• nagacapsa[.]com
• id-pro[.]net
• dominobet-net[.]com
• rajacapsa[.]us
• idewapoker[.]us
• poker-88[.]net
• ituqq[.]us
• thegaminglock[.]com
• pk88[.]us
• pokergalaxi[.]us
• pkr88[.]us
• ginyoton[.]com
• effectiveflushtoday[.]com
• avamarin[.]com
• kids-md[.]com
• 168ebet[.]com
• wangguanhuang[.]com
• simpleandyou[.]com
• cisspdumps[.]com
• juara-poker[.]com
• creative-mode[.]com
• kisssonicboom[.]com
• shellymarket[.]com
• speres[.]com
• append-hc[.]com
• changanghiahue[.]com
• mega-creator[.]com
• phienbanmoi[.]com
• okhbb[.]com
• danger-team[.]org
• pacific-arc[.]com
• ptetraj2016[.]com
• hicook[.]net
• abcadvocacy[.]net
• visaquoctetrungquoc[.]xyz
• cntvsc[.]com
• dvcayxanh[.]com
• jdqw[.]net
• maytinhthanhtung[.]com
• agendabangkok[.]com
• villalalupe[.]com
• kohlerconics[.]com
• biketalkradio[.]com
• jorgemagano[.]net
• xfh888888[.]com
• letmekart[.]net
• isafilehost[.]net
• isahackers[.]net
• lordvideo[.]ir
• soft-gozar[.]ir
• bet6156[.]com
• bet3320[.]com
• oxcamel[.]com
• livewithoutlimits[.]me
• scisamurai[.]com
• nadigarsangam[.]net
• solarmke[.]com
• homebrewmakers[.]net
• tiporace[.]com
• homebrewmakers[.]com
• wwwpj849[.]com
• letmekart[.]com
• tdrgroug[.]com
• letmekart[.]org
• ynownews[.]com
• isahackers[.]co
• zscooltoys[.]com
• homebrewmakers[.]org
• akelcopy[.]com
• defconchennai[.]com
• hunydon100[.]com
• xcdcf[.]com
• 137451[.]com
• 836414[.]com
• hcbylp[.]com
• frfacile[.]com
• crackingmob[.]com
• ghaleb-hemmati[.]ir
• taiocounseling[.]ir
• lord-team[.]ir
• linux-os[.]com
• now-qq[.]com
• 3793111[.]com
• fjhzx[.]com
• avfun88[.]com
• jmm6629[.]com
• satissozlesmesi[.]com
• travis-ganong[.]com
• huynhdegroup[.]net
• 2j2g[.]com
• xn--n8jaw5js74us7jui9afvk[.]xyz
• xn--n8jub9awi4b1i1b8546buyzanzcry1m[.]xyz
• xn--p8j7c819idsci0os3lui9afvk[.]xyz
• officialcardinalsnflshop[.]com
• jizhucewan[.]cn
• zelatone[.]com
• ringder[.]cn
• dpointsofview[.]com
• t-ever[.]cn
• cyonyoucatogba[.]org
• socuteapp[.]cn
• cclub[.]su
• praizeblog[.]com
• city2013[.]cn
• gxhdr[.]cn
• amiloaded[.]com
• vulbox[.]com
• wzdpx[.]com
• freebuf[.]org
• 3001[.]net
• tophant[.]com
• vultest[.]com
• xiaowanwu[.]com
• freebuf[.]com
• xn--tqqv65cknek3fnmxee8a[.]xyz
• xn--n8j2bm0232e7shjw4a[.]xyz
• xn--n8jaa4ay8a6c8dl6648hdjsazw0d9hr[.]xyz
• institutespi[.]org
• riskivy[.]org
• tophant[.]org
• usaceleberties[.]com
• dubaieducatorsacademy[.]com
• healthfitspot[.]com
• feelthewineonline[.]com
• interestingfactx[.]com
• blockqualifier[.]com
• xploitworld[.]net
• prosoftreviews[.]com
• umthostel[.]com
• ids-scheer[.]cn
• xinghuoshiye[.]com
• hackulo[.]us
• wasgroup[.]cn
• crdshop[.]su
• gurusarenna[.]com
• weipind[.]cn
• ccshop[.]su
• onlinefreetools[.]net
• wedays[.]cn
• praizeupdate[.]com
• xakyd[.]cn
• maza[.]cc
• ceslab[.]net
• seniorphotos[.]biz
• thepicturedude[.]com
• 352foto[.]com
• southerngurlli[.]com
• dump-pin[.]pro
• gainesvilleweddings[.]info
• pleasehelp[.]pro
• gainesvilleweddings[.]biz
• blackhat[.]ooo
• floridaseniors[.]biz
• russianelite[.]pro
• floridaseniors[.]xyz
• prettigirls[.]com
• badalligatorfilms[.]com
• one-twelve[.]org
• slikroad[.]su
• babydonate[.]com
• charitablefoundation[.]pro
• crdclub[.]pro
• hushboudoir[.]mobi
• russianelite[.]su
• blackhatmoney[.]su
• capper[.]su
• youthfuloldage[.]com
• yamty[.]com
• energyofchoice[.]com
• dropthediets[.]com
• stockmarketscreener[.]com
• 0x1[.]su
• lendgood[.]com
• zhk[.]su
• theinternetgurus[.]com
• oklahomadogtrainer[.]com
• freebuf[.]net
• riskivy[.]net
• currencydealer[.]net
• iika[.]net
• fpam[.]net
• louisianaestateplanning[.]com
• virtualtourmobileapp[.]com
• casualscout24[.]us
• vpnpinas[.]xyz
• guanteroazcuna[.]com
• devnetworks[.]org
• websec-test[.]com
• ocbhf[.]com
• ioscoderz[.]com
• ccc[.]mn
• embargo[.]cc
• powerkings[.]org
• piratlar[.]com
• ojotaseus[.]us
• myitsseus[.]us
• miniseus[.]us
• padwap[.]com
• australialivetv[.]com
• regenstiefel[.]net
• funchoice[.]net
• knowfibro[.]com
• tyagin[.]com
• jumianigeria[.]com
• tyabv[.]com
• careerpayless[.]com
• dwh[.]su
• raspdiet[.]com
• cyberizm[.]org
• girweb[.]net
• net2park[.]com
• turkerapart[.]org
• siyahhost[.]org
• trntekstil[.]org
• bilgikoruma[.]org
• turkerapart[.]com
• teegeeweb[.]com[.]ng
• wikipedia[.]com[.]ng
• cyberleets[.]com[.]ng
• gsmmkwinz[.]com[.]ng
• ogunseus[.]us
• thatmushinseus[.]us
• wemushinseus[.]us
• hiphopclan[.]com
• cyber-arme[.]com
• darkfilm[.]org
• az-khaos[.]com
• hitithali[.]com
• ramil-sec[.]com
• shoppingmystical[.]us
• hackernucleus[.]com
• safeskyhacks[.]com
• trteam[.]net
• turksiberguvenlik[.]net
• faceaxe[.]com
• panscoffee[.]com
• mp3-spider[.]com
• kzic[.]net
• tribratanewsmalang[.]info
• tx758[.]com
• halodunia[.]info
• wo948[.]com
• tribratanewstrenggalek[.]info
• desihacker[.]net
• cbseprojectwork[.]com
• dicjj[.]com
• ebaoline[.]com
• fangjiaohui[.]cn
• sweetbaby-z[.]com
• gzrx-hr[.]com
• brandvalueadvisors[.]com
• rccssc[.]com
• stagnescatholic[.]com
• ipweixin[.]com
• blackhatcracks[.]com
• techeyes[.]co
• wxjzhb[.]com
• yarigatv[.]com
• zjyongru[.]com
• utvhawler[.]net
• fzshunxi[.]com
• puqiushiye[.]com
• auidible[.]com
• kubachi[.]org
• owneroperatorsconnect[.]com
• zaem[.]biz
• deppweb[.]com
• vendors[.]su
• destinationdebt[.]com
• imagesmothersday[.]com
• sexjav[.]net
• sorryso[.]com
• zymjmy[.]com
• zzblsmgs[.]com
• kurdplus[.]org
• syhuaisi[.]com
• fsfwm[.]org
• sxhhtc[.]com
• wjjhjgbs[.]com
• yyxlphs[.]com
• sukienseo[.]com
• proclub[.]su
• dnifc[.]com
• currentedtech[.]com
• dive-hoian[.]com
• dvngroups[.]com
• a-systems[.]pro
• merahputihbatik[.]com
• posisigogreen[.]com
• petshopindonesia[.]com
• offensivecomputing[.]net
• cialis-tadalafil-cheapestprice[.]mobi
• nfcmarket[.]info
• wallartsideas[.]info
• netproofz[.]org
• hotberita24h[.]info
• cheapest-price100mg-doxycycline[.]mobi
• offensiveforensics[.]com
• cheapest-pricetadalafil-cialis[.]mobi
• ruhack[.]su
• ikill[.]su
• hack[.]org[.]za
• darkpid[.]com
• wt1shop[.]biz
• hack-tool[.]org
• wt1[.]pw
• evil-hack[.]us
• breakinto[.]us
• wt1shop[.]us
• antiwhitehat[.]com
• thantham[.]net
• thantham[.]com
• lifelaw[.]com[.]tw
• wastons[.]com[.]tw
• check-in[.]tw
• libel[.]com[.]tw
• twentyonesoundbar[.]com
• specialcarders[.]com
• gimll[.]com
• vgnet[.]com[.]tw
• chinaairline[.]com[.]tw
• winsoftfull[.]com
• ddlpass[.]com
• tamashii[.]tw
• anon-team[.]xyz
• s-soccer[.]com
• sweethearvideo[.]com
• saxyvideos[.]com
• fullz-mart[.]com
• korovka[.]cc
• krvk[.]cc
• whjdcw[.]com
• shlqfs[.]com
• tx-dlx[.]com
• floh[.]org
• demolish[.]org
• zippy4share[.]com
• ximage[.]pw
• pieseautoady[.]com
• crackingpass[.]com
• stealer[.]top
• dark-time[.]com
• readingbears[.]org
• cezve[.]org
• portadesentinel[.]com
• uretkazan[.]com
• dovizcenter[.]com
• dizihub[.]info
• filmsitesi[.]info
• dizimax[.]info
• canlispor[.]org
• entercoal[.]com
• pravosudie[.]online
• 1liga[.]su
• evoteam[.]su
• topurl[.]top
• obnal-center[.]us
• traffik-manager[.]top
• public-server[.]com[.]ua
• hack-sell[.]su
• tartisma[.]org
• anlam[.]org
• tisort[.]org
• wkg7[.]com
• vavilon[.]cc
• vavilon[.]co
• chnltsy[.]com
• gzyue-an[.]com
• ccsell[.]biz
• bestmodels[.]info
• lenosys[.]com
• theanimes[.]us
• mobilescommunity[.]com
• onlinecollegespath[.]com
• adsensemasters[.]com
• apkcode[.]net
• nulledblog[.]com
• fhack[.]pro
• base4you[.]pro
• upskins[.]pro
• good-akk[.]biz
• devilteam[.]biz
• materialvpn[.]biz
• allhealthy[.]net
• nursemedicine[.]com
• seslimsevgi[.]com
• loveradioph[.]com
• sifreciler[.]net
• androidcribs[.]com
• sifreciler[.]org
• zyberph[.]com
• bluecityemlak[.]com
• androidcyanogen[.]com
• smartcatdisk[.]com
• cop[.]su
• closeclub[.]pro
• obnal-cc[.]com
• funtube[.]us
• memefun[.]us
• websiteworth[.]us
• bitcoinforums[.]org
• kalitesex[.]com
• sexomanyak[.]com
• kralserver[.]com
• kralserver[.]net
• atosporos[.]com
• sexomanyak[.]net
• andhrahackers[.]com
• chinavonetour[.]com[.]cn
• zhenpinwo[.]com
• yizhouzhizao[.]com
• chaoyipack[.]com
• werb-ung[.]su
• boveda[.]cc
• milkacouture[.]fr
• nutri17[.]fr
• youseemi[.]fr
• samba-bresil[.]fr
• eurofinsmesanalyses[.]fr
• cicoser[.]com
• cnduole[.]com
• ztdhome[.]com
• jbh8[.]com
• imsecure[.]org
• jhrmgx[.]com
• chwsd666[.]com
• cyt0771[.]com
• faydayok[.]com
• zyngapokerforum[.]com
• soft-advertise[.]com
• vidivodu[.]com
• m2forum[.]com
• inboxfacebook[.]com
• cryptosuite[.]org
• mutlu-aku[.]com
• inbox-facebook[.]com
• m2frm[.]com
• ustata[.]us
• cryptosuite[.]net
• grnwym[.]cn
• ashikratnani[.]com
• hungry-hackers[.]com
• instakhabr[.]com
• predatorhost[.]net
• expreserial[.]com
• bgworm[.]info
• bgworm[.]com
• topyoutubecomments[.]com
• best-shows[.]com
• mhusaenterprise[.]com
• caperide[.]com
• contrerassl[.]com
• silgercreations[.]com
• skidarmory[.]com
• skidhacker[.]com
• houstonmilitia[.]com
• peo-solution[.]com
• purelivingair[.]com
• printandbook[.]com
• soredgear[.]com
• linuxadda[.]com
• roseleeforrep[.]com
• tryboostx[.]com
• caterinrivera[.]com
• smileyzen[.]com
• ecommercenation[.]fr
• openfid[.]fr
• roofboxer[.]fr
• samba-riodejaneiro[.]fr
• anastasiastyle[.]fr
• adobestock[.]fr
• mesanalayses[.]fr
• toxic-underground[.]net
• elite-boyz[.]info
• toxictube[.]org
• team-ghf[.]org
• bluedemons[.]xyz
• hellclan[.]us
• grayhatforums[.]org
• toxicunderground[.]org
• anonspace[.]org
• demoncode[.]info
• mortalteam[.]com
• mortaldl[.]com
• mortalvb[.]com
• mortalserver[.]com
• rkoteam[.]com
• soltanzadeschool[.]com
• m0rtalkombat[.]com
• leilajoon[.]com
• hacksden[.]com
• dallasplace[.]com
• hacksden[.]space
• expresstek[.]org
• wasatchearthquake[.]com
• sahras-gallery[.]com
• anarchie[.]biz
• anarchie[.]mobi
• dallasplace[.]biz
• cafeandgrillshack[.]com
• itech-us[.]com
• joshv06[.]com
• skidvapes[.]com
• satelliteallservice[.]net
• xxxda-developers[.]com
• approved-xxx[.]su
• buycvv[.]su
• cvvshops[.]su
• godtor[.]su
• bphosting[.]su
• dl4hack[.]com
• dumpsvendor[.]su
• infraud[.]su
• load-file[.]su
• ktmstore[.]su
• monogo[.]su
• myfeshop[.]su
• unidumps[.]su
• fuyujt[.]com
• fjwlcsc[.]com
• wwjnwl[.]com
• xtxgjxgs[.]com
• zkabcn[.]com
• yywl886[.]com
• center-club[.]ws
• zhugangfhc[.]com
• zjleiyang[.]com
• zpxinhong[.]com
• vqx1[.]com
• wgx1[.]com
• ehackerz[.]net
• soft-babez2[.]website
• soft-babez[.]cc
• tausendme[.]us
• rlpass[.]com
• streamporn[.]co
• soft-babez[.]com
• pornzddl[.]com
• theoneu[.]us
• qsertongx[.]cn
• sdlhjs[.]net
• aibinbing[.]cn
• gorod-grekhov[.]info
• zmxlife[.]com
• top-obnal[.]su
• chidaowei[.]com
• falshivie-dengi[.]at
• tengdagl[.]com
• nanpingjie[.]net
• sunyuphotos[.]com
• black-bank[.]biz
• dunianghao[.]com
• gorod-grekhov[.]org
• whjialan[.]com
• piratia[.]org
• whjgjhj[.]com
• black-obnal[.]su
• limbsoftware[.]com
• icaiasn[.]org
• theprofessionalseo[.]com
• zentrixplus[.]net
• stdtestkithome[.]com
• the-seo-service[.]com
• mriganka[.]com

We’ll continue monitoring the campaign including to look for new domain registrations and will post updates as soon as new developments take place.