A dump of domains caught by EAL blacklists for September 07 2017 - http://eal-phishing-stats.herokuapp.com/
https://chrome.google.com/webstore/detail/etheraddresslookup/pdknmigbbbhmllnmgdfalmedcmcefdfn
Tool used: https://github.com/eldraco/domain_analyzer
aventus.pro
Analysing domain : aventus.pro
Output directory name: aventus.pro
Output summary file: aventus.pro/aventus.pro.txt
Checking NameServers using system default resolver...
IP: 216.87.152.33 (United States)
HostName: dns2.registrar-servers.com Type: NS
HostName: d33.verisigndns.com Type: PTR
IP: 216.87.155.33 (United States)
HostName: dns1.registrar-servers.com Type: NS
HostName: dns5.registrar-servers.com Type: PTR
Checking MailServers using system default resolver...
IP: 162.255.118.61 (United States)
HostName: eforward1.registrar-servers.com Type: MX
HostName: eforward.web-hosting.com Type: PTR
IP: 162.255.118.62 (United States)
HostName: eforward2.registrar-servers.com Type: MX
HostName: eforward.web-hosting.com Type: PTR
IP: 162.255.118.61 (United States)
HostName: eforward1.registrar-servers.com Type: MX
HostName: eforward.web-hosting.com Type: PTR
HostName: eforward3.registrar-servers.com Type: MX
IP: 162.255.118.62 (United States)
HostName: eforward2.registrar-servers.com Type: MX
HostName: eforward.web-hosting.com Type: PTR
HostName: eforward4.registrar-servers.com Type: MX
IP: 162.255.118.62 (United States)
HostName: eforward2.registrar-servers.com Type: MX
HostName: eforward.web-hosting.com Type: PTR
HostName: eforward4.registrar-servers.com Type: MX
HostName: eforward5.registrar-servers.com Type: MX
Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
No zone transfer found on nameserver 216.87.155.33
No zone transfer found on nameserver 216.87.152.33
Checking SPF record...
Checking SPF record...
WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 38.101.213.192/28, but only the network IP
New IP found: 38.101.213.192
WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 209.105.246.192/28, but only the network IP
New IP found: 209.105.246.192
WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 199.229.254.192/27, but only the network IP
New IP found: 199.229.254.192
WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 198.54.122.192/26, but only the network IP
New IP found: 198.54.122.192
WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 162.255.118.0/26, but only the network IP
New IP found: 162.255.118.0
WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 198.54.122.0/28, but only the network IP
New IP found: 198.54.122.0
WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 162.255.118.240/29, but only the network IP
New IP found: 162.255.118.240
Checking 192 most common hostnames using system default resolver...
IP: 190.115.18.41 (Belize)
HostName: www.aventus.pro Type: A
--Finished--
Summary information for domain aventus.pro
-----------------------------------------
Domain Ips Information:
IP: 216.87.152.33
HostName: dns2.registrar-servers.com Type: NS
HostName: d33.verisigndns.com Type: PTR
Country: United States
IP: 162.255.118.62
HostName: eforward2.registrar-servers.com Type: MX
HostName: eforward.web-hosting.com Type: PTR
HostName: eforward4.registrar-servers.com Type: MX
HostName: eforward5.registrar-servers.com Type: MX
Country: United States
IP: 162.255.118.61
HostName: eforward1.registrar-servers.com Type: MX
HostName: eforward.web-hosting.com Type: PTR
HostName: eforward3.registrar-servers.com Type: MX
Country: United States
IP: 199.229.254.192
Type: SPF
IP: 38.101.213.192
Type: SPF
IP: 162.255.118.240
Type: SPF
IP: 190.115.18.41
HostName: www.aventus.pro Type: A
Country: Belize
IP: 162.255.118.0
Type: SPF
IP: 198.54.122.192
Type: SPF
IP: 216.87.155.33
HostName: dns1.registrar-servers.com Type: NS
HostName: dns5.registrar-servers.com Type: PTR
Country: United States
IP: 198.54.122.0
Type: SPF
IP: 209.105.246.192
Type: SPF
--------------End Summary --------------
-----------------------------------------
herotoken.co
Analysing domain : herotoken.co
Output directory name: herotoken.co
Output summary file: herotoken.co/herotoken.co.txt
Checking NameServers using system default resolver...
IP: 94.250.248.160 (Russian Federation)
HostName: ns2.firstvds.ru Type: NS
HostName: ns2.firstvds.ru Type: PTR
IP: 82.146.43.2 (Russian Federation)
HostName: ns1.firstvds.ru Type: NS
HostName: ns1.firstvds.ru Type: PTR
Checking MailServers using system default resolver...
IP: 213.159.210.213 (Russian Federation)
HostName: mail.herotoken.co Type: MX
HostName: herotoken.co Type: PTR
IP: 213.159.210.213 (Russian Federation)
HostName: mail.herotoken.co Type: MX
HostName: herotoken.co Type: PTR
HostName: mail.herotoken.co Type: MX
Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
No zone transfer found on nameserver 82.146.43.2
No zone transfer found on nameserver 94.250.248.160
Checking SPF record...
Checking 192 most common hostnames using system default resolver...
IP: 213.159.210.213 (Russian Federation)
HostName: mail.herotoken.co Type: MX
HostName: herotoken.co Type: PTR
HostName: mail.herotoken.co Type: MX
Type: SPF
HostName: www.herotoken.co Type: A
IP: 213.159.210.213 (Russian Federation)
HostName: mail.herotoken.co Type: MX
HostName: herotoken.co Type: PTR
HostName: mail.herotoken.co Type: MX
Type: SPF
HostName: www.herotoken.co Type: A
HostName: ftp.herotoken.co Type: A
IP: 213.159.210.213 (Russian Federation)
HostName: mail.herotoken.co Type: MX
HostName: herotoken.co Type: PTR
HostName: mail.herotoken.co Type: MX
Type: SPF
HostName: www.herotoken.co Type: A
HostName: ftp.herotoken.co Type: A
HostName: mail.herotoken.co Type: A
IP: 213.159.210.213 (Russian Federation)
HostName: mail.herotoken.co Type: MX
HostName: herotoken.co Type: PTR
HostName: mail.herotoken.co Type: MX
Type: SPF
HostName: www.herotoken.co Type: A
HostName: ftp.herotoken.co Type: A
HostName: mail.herotoken.co Type: A
HostName: smtp.herotoken.co Type: A
IP: 213.159.210.213 (Russian Federation)
HostName: mail.herotoken.co Type: MX
HostName: herotoken.co Type: PTR
HostName: mail.herotoken.co Type: MX
Type: SPF
HostName: www.herotoken.co Type: A
HostName: ftp.herotoken.co Type: A
HostName: mail.herotoken.co Type: A
HostName: smtp.herotoken.co Type: A
HostName: pop.herotoken.co Type: A
--Finished--
Summary information for domain herotoken.co
-----------------------------------------
Domain Ips Information:
IP: 82.146.43.2
HostName: ns1.firstvds.ru Type: NS
HostName: ns1.firstvds.ru Type: PTR
Country: Russian Federation
IP: 94.250.248.160
HostName: ns2.firstvds.ru Type: NS
HostName: ns2.firstvds.ru Type: PTR
Country: Russian Federation
IP: 213.159.210.213
HostName: mail.herotoken.co Type: MX
HostName: herotoken.co Type: PTR
HostName: mail.herotoken.co Type: MX
Type: SPF
HostName: www.herotoken.co Type: A
HostName: ftp.herotoken.co Type: A
HostName: mail.herotoken.co Type: A
HostName: smtp.herotoken.co Type: A
HostName: pop.herotoken.co Type: A
Country: Russian Federation
--------------End Summary --------------
-----------------------------------------
myethernwallet.com
Analysing domain : myethernwallet.com
Output directory name: myethernwallet.com
Output summary file: myethernwallet.com/myethernwallet.com.txt
Checking NameServers using system default resolver...
IP: 80.82.77.87 (Netherlands)
HostName: ns3.libertyvps.net Type: NS
HostName: shark2.libertyvps.net Type: PTR
IP: 80.82.77.88 (Netherlands)
HostName: ns4.libertyvps.net Type: NS
Checking MailServers using system default resolver...
IP: 80.82.77.87 (Netherlands)
HostName: ns3.libertyvps.net Type: NS
HostName: shark2.libertyvps.net Type: PTR
HostName: myethernwallet.com Type: MX
Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
No zone transfer found on nameserver 80.82.77.88
No zone transfer found on nameserver 80.82.77.87
Checking SPF record...
No SPF record
Checking 192 most common hostnames using system default resolver...
IP: 80.82.77.87 (Netherlands)
HostName: ns3.libertyvps.net Type: NS
HostName: shark2.libertyvps.net Type: PTR
HostName: myethernwallet.com Type: MX
HostName: www.myethernwallet.com Type: A
IP: 80.82.77.87 (Netherlands)
HostName: ns3.libertyvps.net Type: NS
HostName: shark2.libertyvps.net Type: PTR
HostName: myethernwallet.com Type: MX
HostName: www.myethernwallet.com Type: A
HostName: ftp.myethernwallet.com Type: A
IP: 80.82.77.87 (Netherlands)
HostName: ns3.libertyvps.net Type: NS
HostName: shark2.libertyvps.net Type: PTR
HostName: myethernwallet.com Type: MX
HostName: www.myethernwallet.com Type: A
HostName: ftp.myethernwallet.com Type: A
HostName: mail.myethernwallet.com Type: A
IP: 80.82.77.87 (Netherlands)
HostName: ns3.libertyvps.net Type: NS
HostName: shark2.libertyvps.net Type: PTR
HostName: myethernwallet.com Type: MX
HostName: www.myethernwallet.com Type: A
HostName: ftp.myethernwallet.com Type: A
HostName: mail.myethernwallet.com Type: A
HostName: webmail.myethernwallet.com Type: A
--Finished--
Summary information for domain myethernwallet.com
-----------------------------------------
Domain Ips Information:
IP: 80.82.77.88
HostName: ns4.libertyvps.net Type: NS
Country: Netherlands
IP: 80.82.77.87
HostName: ns3.libertyvps.net Type: NS
HostName: shark2.libertyvps.net Type: PTR
HostName: myethernwallet.com Type: MX
HostName: www.myethernwallet.com Type: A
HostName: ftp.myethernwallet.com Type: A
HostName: mail.myethernwallet.com Type: A
HostName: webmail.myethernwallet.com Type: A
Country: Netherlands
--------------End Summary --------------
-----------------------------------------
myetherwaltet.com
Analysing domain : myetherwaltet.com
Output directory name: myetherwaltet.com
Output summary file: myetherwaltet.com/myetherwaltet.com.txt
Checking NameServers using system default resolver...
IP: 80.82.77.88 (Netherlands)
HostName: ns4.libertyvps.net Type: NS
IP: 80.82.77.87 (Netherlands)
HostName: ns3.libertyvps.net Type: NS
HostName: shark2.libertyvps.net Type: PTR
Checking MailServers using system default resolver...
IP: 80.82.77.87 (Netherlands)
HostName: ns3.libertyvps.net Type: NS
HostName: shark2.libertyvps.net Type: PTR
HostName: myetherwaltet.com Type: MX
Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
No zone transfer found on nameserver 80.82.77.88
No zone transfer found on nameserver 80.82.77.87
Checking SPF record...
No SPF record
Checking 192 most common hostnames using system default resolver...
IP: 80.82.77.87 (Netherlands)
HostName: ns3.libertyvps.net Type: NS
HostName: shark2.libertyvps.net Type: PTR
HostName: myetherwaltet.com Type: MX
HostName: www.myetherwaltet.com Type: A
IP: 80.82.77.87 (Netherlands)
HostName: ns3.libertyvps.net Type: NS
HostName: shark2.libertyvps.net Type: PTR
HostName: myetherwaltet.com Type: MX
HostName: www.myetherwaltet.com Type: A
HostName: ftp.myetherwaltet.com Type: A
IP: 80.82.77.87 (Netherlands)
HostName: ns3.libertyvps.net Type: NS
HostName: shark2.libertyvps.net Type: PTR
HostName: myetherwaltet.com Type: MX
HostName: www.myetherwaltet.com Type: A
HostName: ftp.myetherwaltet.com Type: A
HostName: mail.myetherwaltet.com Type: A
IP: 80.82.77.87 (Netherlands)
HostName: ns3.libertyvps.net Type: NS
HostName: shark2.libertyvps.net Type: PTR
HostName: myetherwaltet.com Type: MX
HostName: www.myetherwaltet.com Type: A
HostName: ftp.myetherwaltet.com Type: A
HostName: mail.myetherwaltet.com Type: A
HostName: webmail.myetherwaltet.com Type: A
--Finished--
Summary information for domain myetherwaltet.com
-----------------------------------------
Domain Ips Information:
IP: 80.82.77.88
HostName: ns4.libertyvps.net Type: NS
Country: Netherlands
IP: 80.82.77.87
HostName: ns3.libertyvps.net Type: NS
HostName: shark2.libertyvps.net Type: PTR
HostName: myetherwaltet.com Type: MX
HostName: www.myetherwaltet.com Type: A
HostName: ftp.myetherwaltet.com Type: A
HostName: mail.myetherwaltet.com Type: A
HostName: webmail.myetherwaltet.com Type: A
Country: Netherlands
--------------End Summary --------------
-----------------------------------------
myethterwallet.co
Analysing domain : myethterwallet.co
Output directory name: myethterwallet.co
Output summary file: myethterwallet.co/myethterwallet.co.txt
Checking NameServers using system default resolver...
IP: 216.87.155.33 (United States)
HostName: dns1.registrar-servers.com Type: NS
HostName: dns1.namecheaphosting.com Type: PTR
IP: 216.87.152.33 (United States)
HostName: dns2.registrar-servers.com Type: NS
HostName: dns4.registrar-servers.com Type: PTR
Checking MailServers using system default resolver...
IP: 162.255.118.61 (United States)
HostName: eforward1.registrar-servers.com Type: MX
HostName: eforward.web-hosting.com Type: PTR
IP: 162.255.118.62 (United States)
HostName: eforward4.registrar-servers.com Type: MX
HostName: eforward.web-hosting.com Type: PTR
IP: 162.255.118.62 (United States)
HostName: eforward4.registrar-servers.com Type: MX
HostName: eforward.web-hosting.com Type: PTR
HostName: eforward2.registrar-servers.com Type: MX
IP: 162.255.118.62 (United States)
HostName: eforward4.registrar-servers.com Type: MX
HostName: eforward.web-hosting.com Type: PTR
HostName: eforward2.registrar-servers.com Type: MX
HostName: eforward5.registrar-servers.com Type: MX
IP: 162.255.118.61 (United States)
HostName: eforward1.registrar-servers.com Type: MX
HostName: eforward.web-hosting.com Type: PTR
HostName: eforward3.registrar-servers.com Type: MX
Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
No zone transfer found on nameserver 216.87.155.33
No zone transfer found on nameserver 216.87.152.33
Checking SPF record...
Checking SPF record...
WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 38.101.213.192/28, but only the network IP
New IP found: 38.101.213.192
WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 209.105.246.192/28, but only the network IP
New IP found: 209.105.246.192
WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 199.229.254.192/27, but only the network IP
New IP found: 199.229.254.192
WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 198.54.122.192/26, but only the network IP
New IP found: 198.54.122.192
WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 162.255.118.0/26, but only the network IP
New IP found: 162.255.118.0
WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 198.54.122.0/28, but only the network IP
New IP found: 198.54.122.0
WARNING! SPF record allows an entire network to send mails. Probably an ISP network. We are not going to check the entire network by now: 162.255.118.240/29, but only the network IP
New IP found: 162.255.118.240
Checking 192 most common hostnames using system default resolver...
--Finished--
Summary information for domain myethterwallet.co
-----------------------------------------
Domain Ips Information:
IP: 216.87.152.33
HostName: dns2.registrar-servers.com Type: NS
HostName: dns4.registrar-servers.com Type: PTR
Country: United States
IP: 162.255.118.62
HostName: eforward4.registrar-servers.com Type: MX
HostName: eforward.web-hosting.com Type: PTR
HostName: eforward2.registrar-servers.com Type: MX
HostName: eforward5.registrar-servers.com Type: MX
Country: United States
IP: 162.255.118.61
HostName: eforward1.registrar-servers.com Type: MX
HostName: eforward.web-hosting.com Type: PTR
HostName: eforward3.registrar-servers.com Type: MX
Country: United States
IP: 199.229.254.192
Type: SPF
IP: 38.101.213.192
Type: SPF
IP: 162.255.118.240
Type: SPF
IP: 162.255.118.0
Type: SPF
IP: 198.54.122.192
Type: SPF
IP: 216.87.155.33
HostName: dns1.registrar-servers.com Type: NS
HostName: dns1.namecheaphosting.com Type: PTR
Country: United States
IP: 198.54.122.0
Type: SPF
IP: 209.105.246.192
Type: SPF
--------------End Summary --------------
-----------------------------------------
kirkik.com
Analysing domain : kirkik.com
Output directory name: kirkik.com
Output summary file: kirkik.com/kirkik.com.txt
Checking NameServers using system default resolver...
HostName: ns1.rivalhost.com Type: NS
HostName: ns2.rivalhost.com Type: NS
HostName: la10g001.rivalserver.com Type: PTR
Checking MailServers using system default resolver...
HostName: kirkik.com Type: MX
Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
No zone transfer found on nameserver 191.101.26.67
No zone transfer found on nameserver 45.63.62.195
Checking SPF record...
New IP found: 181.215.235.4
Checking 192 most common hostnames using system default resolver...
HostName: kirkik.com Type: MX
Type: SPF
HostName: www.kirkik.com Type: A
HostName: kirkik.com Type: MX
Type: SPF
HostName: www.kirkik.com Type: A
HostName: ftp.kirkik.com Type: A
HostName: kirkik.com Type: MX
Type: SPF
HostName: www.kirkik.com Type: A
HostName: ftp.kirkik.com Type: A
HostName: mail.kirkik.com Type: A
--Finished--
Summary information for domain kirkik.com
-----------------------------------------
Domain Ips Information:
IP: 191.101.26.67
HostName: ns1.rivalhost.com Type: NS
IP: 45.63.62.195
HostName: ns2.rivalhost.com Type: NS
HostName: la10g001.rivalserver.com Type: PTR
IP: 181.215.235.240
HostName: kirkik.com Type: MX
Type: SPF
HostName: www.kirkik.com Type: A
HostName: ftp.kirkik.com Type: A
HostName: mail.kirkik.com Type: A
IP: 181.215.235.4
Type: SPF
--------------End Summary --------------
-----------------------------------------
statustoken.im