Malware domains by name servers

 
Domain found using *.dnsexit.com as name server (Latest 50 additions - Please register to see the full list)
Domain
Name servers / IPs
Network Name
Description
Listing date
sysrevbsmmu.org ns2.dnsexit.com => 199.115.231.162
ns1.dnsexit.com => 199.255.159.226
ns3.dnsexit.com => 209.160.33.82
ns4.dnsexit.com => 198.204.224.146
 
(AS24323) AAMRA-NETWORKS-AS-AP Trojan  2018-04-22
zjxhqd.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 104.219.19.52
 
(AS16276) OVH AgentTesla botnet controller  2017-10-02
konyadasatiliktarla.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 104.219.19.52
 
(AS56611) REBACOM-AS Trojan  2017-02-25
winemaniacs.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 104.219.19.52
ns3.dnsexit.com => 173.208.189.26
ns4.dnsexit.com => 198.204.224.146
 
(AS10796) RRMA Trojan JS/HTML  2017-01-15
investbks.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 104.219.19.52
ns3.dnsexit.com => 173.208.189.26
ns4.dnsexit.com => 198.204.224.146
 
(AS55053) COLOWAREHOUSEONTARIO Fake site / scam  2016-10-28
standardcbks.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 104.219.19.52
ns3.dnsexit.com => 173.208.189.26
ns4.dnsexit.com => 198.204.224.146
 
(AS55053) COLOWAREHOUSEONTARIO Fake site / scam  2016-10-28
sberbkonline.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 104.219.19.52
ns3.dnsexit.com => 173.208.189.26
ns4.dnsexit.com => 198.204.224.146
 
(AS55053) COLOWAREHOUSEONTARIO Fake site / scam  2016-10-28
carnegieprivatebk.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 104.219.19.52
ns3.dnsexit.com => 173.208.189.26
ns4.dnsexit.com => 198.204.224.146
 
(AS55053) COLOWAREHOUSEONTARIO Fake site / scam  2016-10-28
choicepbks.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 69.30.236.138
ns3.dnsexit.com => 209.160.33.82
ns4.dnsexit.com => 66.85.182.220
 
(AS55053) COLOWAREHOUSEONTARIO Fake site / scam  2016-10-16
esnexpress.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 104.219.19.52
ns3.dnsexit.com => 209.160.33.82
ns4.dnsexit.com => 66.85.182.220
 
(AS8100) IPTELLIGENT Fake site / scam  2016-10-02
blog.xiesland.net ns4.dnsexit.com => 198.204.224.146
ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 199.115.231.162
ns3.dnsexit.com => 209.160.33.82
 
(AS7922) COMCAST-7922 Trojan JS/HTML  2016-09-21
knxreview.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 192.151.149.92
ns3.dnsexit.com => 209.160.33.82
ns4.dnsexit.com => 66.85.182.220
 
(AS14576) HOSTING-SOLUTIONS Virus  2017-03-23
itunesm4a.mobi ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 104.219.19.52
ns3.dnsexit.com => 209.160.33.82
ns4.dnsexit.com => 66.85.182.220
 
(AS36024) COLO4 Phishing  2016-09-16
blackh0le.org ns2.dnsexit.com => 192.151.149.92
ns1.dnsexit.com => 199.255.159.226
ns3.dnsexit.com => 209.160.33.82
ns4.dnsexit.com => 66.85.182.220
 
(AS7922) COMCAST-7922 Trojan Waledac.C  2017-04-02
demo.masterchefvenice.com ns3.dnsexit.com => 209.160.33.82
ns4.dnsexit.com => 198.204.224.146
ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 199.115.231.162
 
(AS42244) ESERVER Phishing  2016-08-02
reforca.com.br ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 69.30.236.138
ns3.dnsexit.com => 173.208.189.26
ns4.dnsexit.com => 66.85.182.220
 
(AS30083) SERVER4YOU Phishing  2016-07-20
ssdsoluint.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 69.30.236.138
ns3.dnsexit.com => 173.208.189.26
ns4.dnsexit.com => 66.85.182.220
 
(AS24961) FIBREONE-AS Fake site / scam  2016-06-23
greatengland.co.uk ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 104.219.19.52
ns3.dnsexit.com => 209.160.33.82
ns4.dnsexit.com => 198.204.224.146
 
(AS2856) BT Trojan JS/HTML  2016-06-11
asopadresangloamericano.org ns2.dnsexit.com => 69.30.236.138
ns1.dnsexit.com => 199.255.159.226
ns3.dnsexit.com => 209.160.33.82
ns4.dnsexit.com => 198.204.224.146
 
(AS22878) ASACENET1 Trojan JS/HTML  2016-06-10
clydbi.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 69.30.236.138
ns3.dnsexit.com => 173.208.189.26
ns4.dnsexit.com => 198.204.224.146
 
(AS24961) FIBREONE-AS Fake site / scam  2016-05-26
stbgrp.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 69.30.236.138
ns3.dnsexit.com => 173.208.189.26
ns4.dnsexit.com => 198.204.224.146
 
(AS24961) FIBREONE-AS Fake site / scam  2016-05-26
asnbnli.nl ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 69.30.236.138
ns3.dnsexit.com => 173.208.189.26
ns4.dnsexit.com => 198.204.224.146
 
(AS24961) FIBREONE-AS Fake site / scam  2016-05-26
costarcsitl.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 69.30.236.138
ns3.dnsexit.com => 173.208.189.26
ns4.dnsexit.com => 198.204.224.146
 
(AS24961) FIBREONE-AS Fake site / scam  2016-05-26
globalssdchemical.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 69.30.236.138
ns3.dnsexit.com => 173.208.189.26
ns4.dnsexit.com => 198.204.224.146
 
(AS24961) FIBREONE-AS Fake site / scam  2016-05-26
costarcsint.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 69.30.236.138
ns3.dnsexit.com => 209.160.33.82
ns4.dnsexit.com => 198.204.224.146
 
(AS24961) FIBREONE-AS Fake site / scam  2016-05-17
mahalalel.com ns1.dnsexit.com => 199.255.159.226
ns2.dnsexit.com => 69.30.236.138
ns3.dnsexit.com => 173.208.189.26
ns4.dnsexit.com => 66.85.182.220
 
(AS9116) GOLDENLINES Phishing  2016-04-18
psdumps.info ns1.dnsexit.com => 173.208.189.26
ns2.dnsexit.com => 69.30.236.138
ns3.dnsexit.com => 209.160.33.82
ns4.dnsexit.com => 198.204.224.146
 
(AS197226) SPRINT-SDC Resell credit card / Bank dumps  2015-09-24
usaexpresslogistic.com ns1.dnsexit.com => 173.208.189.26
ns2.dnsexit.com => 69.30.236.138
ns3.dnsexit.com => 209.160.33.82
ns4.dnsexit.com => 64.85.164.212
 
(AS52469) Offshore Fake site / scam  2015-06-16
globalfast4wardfreight.com ns1.dnsexit.com => 173.208.189.26
ns2.dnsexit.com => 69.30.236.138
 
(AS16637) MTNNS Fake site / scam  2015-05-27
paracetamols.net ns1.dnsexit.com => 63.141.226.226
ns2.dnsexit.com => 199.115.231.167
ns3.dnsexit.com => 209.160.33.82
ns4.dnsexit.com => 66.85.182.220
 
(AS43343) ARYASAT Trojan Zbot  2014-11-25
dev-live.com ns1.dnsexit.com => 63.141.226.226
ns2.dnsexit.com => 199.115.231.167
 
(AS26496) PAH-INC Adware  2014-10-28
delta-chemical.net ns1.dnsexit.com => 63.141.226.226
ns2.dnsexit.com => 199.115.231.167
ns3.dnsexit.com => 209.160.33.82
ns4.dnsexit.com => 64.85.164.212
 
(AS16276) OVH Citadel config file  2014-08-27
dio-kr.com ns1.dnsexit.com => 63.141.226.226
ns2.dnsexit.com => 199.115.231.167
ns3.dnsexit.com => 199.192.200.41
ns4.dnsexit.com => 66.85.182.220
 
(AS60751) SERVEBYTE Citadel config file  2014-08-01
spamwatchs.info ns1.dnsexit.com => 63.141.226.226
ns2.dnsexit.com => 199.115.231.167
ns3.dnsexit.com => 199.192.200.41
ns4.dnsexit.com => 64.85.164.212
 
(AS54718) SYNAPTICA-NA Citadel config file  2014-07-24
peralos.com ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 199.115.231.167
ns3.dnsexit.com => 199.192.200.41
ns4.dnsexit.com => 66.85.182.220
 
(AS54718) SYNAPTICA-NA Citadel config file  2014-06-15
spamheros.info ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 199.115.231.167
ns3.dnsexit.com => 199.192.200.41
ns4.dnsexit.com => 64.85.164.212
 
(AS54718) SYNAPTICA-NA Citadel config file  2014-06-06
iscaleos.com ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 199.115.231.167
ns3.dnsexit.com => 199.192.200.41
ns4.dnsexit.com => 66.85.182.220
 
(AS54718) SYNAPTICA-NA Trojan Zbot  2014-02-22
gps-freight.co.uk ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 199.115.231.167
ns3.dnsexit.com => 199.192.200.41
ns4.dnsexit.com => 66.85.182.220
 
(AS43449) DIMLINE-AS Fake site / scam  2014-01-11
eaglelogisticus.com ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 199.115.231.167
ns3.dnsexit.com => 199.192.200.41
ns4.dnsexit.com => 66.85.182.220
 
(AS50669) COOLVDS Fake site / scam  2014-01-10
overseaforwarding.com ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 199.115.231.167
 
(AS8972) PLUSSERVER Fake site / scam  2013-12-04
surveytrade.com ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 64.182.105.7
 
(AS39743) VOXILITY-AS Fake site / scam  2013-09-23
gulargos-nagas.com ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 64.182.105.7
 
(AS57682) HVDS-AS Trojan JS BlacoleRef.G  2013-09-18
boolsec.com ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 64.182.105.7
ns3.dnsexit.com => 199.192.200.41
ns4.dnsexit.com => 66.85.182.220
 
(AS47434) FORTUNE Citadel config file  2013-07-14
topcanadianneighborpharmacy.com ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 64.182.105.7
 
(AS39743) VOXILITY-AS Fraud / Scam  2013-07-01
newcanadianfamilypharmacy.com ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 64.182.105.7
 
(AS39743) VOXILITY-AS Fraud / Scam  2013-07-01
bestmycanadianpharmacy.com ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 64.182.105.7
 
(AS39743) VOXILITY-AS Fraud / Scam  2013-07-01
thewikipharmacy.com ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 64.182.105.7
 
(AS39743) VOXILITY-AS Fraud / Scam  2013-05-30
newcanadianneighborpharmacy.com ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 64.182.105.7
 
(AS39743) VOXILITY-AS Fraud / Scam  2013-05-30
brigetrack.com ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 64.182.105.7
ns3.dnsexit.com => 199.192.200.41
ns4.dnsexit.com => 198.204.230.19
 
(AS20857) TRANSIP Citadel domain  2013-05-22
mimsia.co.in ns1.dnsexit.com => 67.214.171.77
ns2.dnsexit.com => 64.182.105.7
ns3.dnsexit.com => 199.192.200.41
ns4.dnsexit.com => 198.204.230.19
 
(AS57230) ARIAWEBCO-AS Trojan Zbot config file  2013-05-22