[nsp-sec] Credential dump worth exploring.

[Scott A. McIntyre]

Hi all,

http://demo.zeeroq.com/email/

Might be worth people taking a look and, where possible, action - quite 
a few domains there for email hosting domains (it seems).

demo.zeeroq.com has address 185.67.1.42

AS      | IP               | AS Name
196645  | 185.67.1.42      | HOSTPRO-AS, UA


Domains involved below.


126.com
163.com
abv.bg
adelphia.net
aim.com
alice.it
aol.co.uk
aol.com
arcor.de
asu.edu
att.net
austin.rr.com
azet.sk
bellsouth.net
berkeley.edu
bk.ru
bluewin.ch
blueyonder.co.uk
bol.com.br
btinternet.com
buziaczek.pl
bvt.bvt
cableone.net
carolina.rr.com
centrum.cz
centurylink.net
centurytel.net
cfl.rr.com
charter.net
chegg.com
citromail.hu
cogeco.ca
comcast.net
cox.net
cs.com
earthlink.net
eircom.net
email.com
email.cz
embarqmail.com
eteamz.com
excite.com
fastscreeens.org
free.fr
freemail.hu
freenet.de
frontier.com
frontiernet.net
fsmail.net
fuse.net
gamil.com
gma.zip
gmail.com
gmx.at
gmx.ch
gmx.com
gmx.de
gmx.net
google.com
googlemail.com
hanmail.net
hetnet.nl
home.nl
hotmai.com
hotmail.ca
hotmail.co.nz
hotmail.co.uk
hotmail.com
hotmail.com.ar
hotmail.com.br
hotmail.con
hotmail.de
hotmail.es
hotmail.fr
hotmail.it
hotmail.nl
hotmail.se
hotmil.com
hughes.net
icloud.com
ig.com.br
iinet.net.au
inbox.lv
inbox.ru
insightbb.com
interia.eu
interia.pl
juno.com
kent.edu
laposte.net
libero.it
list.ru
live.ca
live.cl
live.co.uk
live.com
live.com.ar
live.com.au
live.com.mx
live.de
live.dk
live.fr
live.it
live.nl
live.no
live.se
luukku.com
lycos.com
mac.com
mail.com
mail.ru
mailinator.com
mailspirit.info
mchsi.com
me.com
mindspring.com
msn.com
msu.edu
mynet.com
nate.com
naver.com
nc.rr.com
netscape.net
netzero.com
netzero.net
neuf.fr
ntlworld.com
o2.pl
onet.eu
onet.pl
online.de
online.no
op.pl
optonline.net
optusnet.com.au
orange.fr
osu.edu
outlook.com
outlook.de
outlook.es
outlook.fr
pacbell.net
pd.com
peoplepc.com
planet.nl
poczta.fm
poczta.onet.pl
prodigy.net
psu.edu
ptd.net
purdue.edu
q.com
qq.com
rambl.cu.cc
rambler.ru
rediffmail.com
ro.ru
roadrunner.com
rochester.rr.com
rocketmail.com
rogers.com
sapo.pt
sasktel.net
sbcglobal.net
seznam.cz
sfr.fr
shaw.ca
sina.com
sky.com
skynet.be
suddenlink.net
sympatico.ca
t-online.de
talktalk.net
tampabay.rr.com
tds.net
telenet.be
telia.com
telus.net
terra.com.br
test.com
tiscali.co.uk
tiscali.it
tlen.pl
ufl.edu
uga.edu
ukr.net
umich.edu
umn.edu
uol.com.br
us.army.mil
vasyapupkin.com
verizon.net
videotron.ca
virgilio.it
virginmedia.com
vp.pl
vt.edu
walla.co.il
walla.com
wanadoo.fr
web.de
wi.rr.com
windowslive.com
windstream.net
wowway.com
wp.pl
xtra.co.nz
y7mail.com
ya.ru
yahoo.ca
yahoo.co.id
yahoo.co.in
yahoo.co.jp
yahoo.co.uk
yahoo.com
yahoo.com.ar
yahoo.com.au
yahoo.com.br
yahoo.com.cn
yahoo.com.hk
yahoo.com.mx
yahoo.com.my
yahoo.com.ph
yahoo.com.sg
yahoo.com.tw
yahoo.com.vn
yahoo.con
yahoo.de
yahoo.es
yahoo.fr
yahoo.gr
yahoo.ie
yahoo.in
yahoo.it
yandex.ru
ymail.com
yopmail.com
ziggo.nl
zoominternet.net

Regards,

Scott




---
Scott A. McIntyre
Chief Security Specialist
Telstra Cyber Security