Table 1. Results of our geolocalization experiments on fast-flux domains retrieved by the honeypot, which means that their IP addresses were known and could be used for validation (download the raw data here).
Fast-flux Domain | Lon | Lat | Err. Dist. (km) | Total Proxies | Avg. Proxies |
pizdw. antiterrornetwork. com | 8.32 | 47.23 | 586.22 | 193 | 52 |
rovsuu. photoblogsite. com | 19.0 | 47.47 | 691.06 | 198 | 50 |
besthandycap. com | 6.16 | 48.75 | 377.20 | 165 | 54 |
smsclubnet. com | 8.32 | 47.23 | 586.22 | 206 | 66 |
thehandygal. com | 8.53 | 47.38 | 576.74 | 171 | 51 |
iv. antiterrornetwork. com | 19.06 | 47.47 | 691.06 | 190 | 51 |
micoa. smsluogo. com | 2.06 | 48.59 | 444.11 | 168 | 45 |
handyphoneworld. com | 7.36 | 46.75 | 614.48 | 162 | 53 |
miosmsclub. com | 8.53 | 47.38 | 576.74 | 204 | 61 |
superhandycap. com | 8.54 | 47.37 | 577.49 | 166 | 49 |
orldlovelife. com | 11.61 | 49.03 | 406.81 | 178 | 47 |
easyworldnews. com | 8.54 | 47.37 | 577.49 | 191 | 47 |
mweqd. smsinlinea. com | 15.78 | 51.98 | 173.17 | 176 | 46 |
terrorfear. com | 9.91 | 52.84 | 237.71 | 189 | 47 |
Table 2. Results of our geolocalization experiments on fast-flux domains, whose server was unknown (download the raw data here).
Fast-flux Domain | Lon | Lat | Total Proxies | Avg. Proxies | |
smsdiretto. com | 16.93 | 51.1 | 365 | 48 | |
fieopowc. cn | 6.56 | 46.59 | 108 | 34 | |
antiterroralliance. com | 11.23437 | 53.00485 | 252 | 52 | |
yourvalentineday. com | 19.68416 | 49.10418 | 327 | 48 | |
downloadfreesms. com | 19.0622 | 47.4744 | 253 | 50 | |
mobilephotoblog. com | 18.5524 | 47.46357 | 290 | 49 | |
antiterroris. com | 10.70882 | 51.76834 | 194 | 54 | |
greatsalesavailable. com | 8.153546 | 51.27834 | 249 | 52 | |
bestusablog. com | 19.0622 | 47.4744 | 214 | 54 | |
virtualesms. com | 18.067 | 59.3495 | 360 | 48 | |
bestjournalguide. com | 6.623037 | 50.605 | 234 | 50 | |
smspianeta. com | 21.0104 | 52.2207 | 354 | 54 | |
mature-porn-gate. com | 13.725 | 51.026 | 92 | 36 | |
uetrrnmexe. cn | 44.46096 | 5.973663 | 182 | 37 | |
nuovosms. com | 4.494378 | 48.09958 | 293 | 52 | |
butelor. com | 14.3052 | 46.0319 | 57 | 30 | |
cippdgtt. cn | 8.32 | 47.23 | 30 | 29 | |
usabreakingnews. com | 9.619635 | 51.22773 | 319 | 43 | |
boarddiary. com | 16.9946 | 51.1635 | 206 | 54 | |
terrorismfree. com | 8.32 | 47.23 | 347 | 53 | |
freecolorsms. com | 12.95779 | 52.16305 | 269 | 52 | |
freeservesms. com | 16.9165 | 52.4118 | 290 | 57 | |
cum-on-mature. tv | 37.41363 | 4.10883 | 63 | 29 | |
cum-on-virgins. com | 1.466575 | -17.53312 | 47 | 27 | |
sispewtr. cn | -0.62538 | 36.94994 | 145 | 47 | |
urbanfear. com | 11.052 | 47.70604 | 339 | 53 | |
chinamobilesms. com | 8.54513 | 47.3794 | 228 | 56 | |
truitef. com | 14.3052 | 46.0319 | 192 | 41 | |
fearalert. com | 16.93 | 51.1 | 271 | 58 | |
terroralertstatus. com | 1.240312 | 47.98294 | 322 | 45 | |
antiterrornetwork. com | 16.9165 | 52.4118 | 213 | 55 | |
bestblogdirect. com | 13.85345 | 52.43042 | 212 | 52 | |
returnmexie. cn | -35.41772 | 16.34555 | 177 | 43 | |
blogsitedirect. com | 12.04602 | 54.28237 | 192 | 50 | |
photoblogsite. com | 5.379811 | 46.4502 | 316 | 44 | |
globalantiterror. com | 13.94111 | 47.81656 | 236 | 51 | |
iwwmkkdi. cn | 6.56 | 46.59 | 114 | 47 | |
old-and-girl. net | 13.725 | 51.026 | 121 | 32 | |
mature-sperm-lovers. com | 10.59284 | 28.73006 | 127 | 36 | |
blogginhell. com | 14.50167 | 50.52589 | 226 | 58 | |
bestlifeblog. com | 16.9165 | 52.4118 | 191 | 53 |