Thursday, September 5, 2013

LinkedIn DGA names Possible Phishing

This ASN is probably being used for Linkedin Phishing.

Earlier LinkedIn Phishing Flux activity   on 64.74.98.80

64.74.96.0/20
AS 19024
INTERNAP-BLK5 - Internap Network 64.74.98.0/24
AS 40793

LINKEDIN - LinkedIn Corporation 86400


Linkedin fixed this by dropping AS19024 and moved to   AS 10912



Looking better again :

KNOWN DOMAINS HOSTED BY 216.52.242.86

blackflipper.com careers.linkedin.com linkedin.be linkedin.ca linkedin.co.uk linkedin.com linkedin.com.ar linkedin.com.br linkedin.dk linkedin.fr linkedin.it linkedin.nl linkedin.ru lnkd.in news.linkedin.com redirect.linkedin.com www.linkedin.be www.linkedin.ca www.linkedin.co.id www.linkedin.co.uk www.linkedin.com.au www.linkedin.com.br www.linkedin.cz www.linkedin.de www.linkedin.dk www.linkedin.fr www.linkedin.it www.linkedin.nl www.linkedin.ru www.thesmallbiznation.com feedera.com linkedin.ch linkedin.com.au linkedin.de linkedin.es linkedin.no thesmallbiznation.com today.linkedin.com www.linkedin.at www.linkedin.com.ar www.linkedin.com.pe www.linkedin.es www.linkedin.pt linkedin.rs www.linkedin.lu www.linkedin.no linkedin.ua linkedin.at linkedin.cz linkedin.vn www.linkedin.co.nz www.linkedin.com.co linkedin.pt www.linkedin.ch linkedin.fi linkedin.lu www.linkedin.com.mx www.linkedin.fi linkedin.ph linkedin.com.pe linkedin.co.id linkedin.co.nz paymon.com www.linkedin.ua www.linkedin.com.ve connectme.cc linkedinresearch.com linkedin.sg www.linkedin.ph linkedin.jp www.linkedin.bg

No comments:

Post a Comment