INTERNET WEATHER REPORT ☁️☀️
AS399979 (49.3 Networking LLC) has just been added to ASN watchlist.
This autonomous system currently originates one IPv4 prefix:
That sole prefix, 45.139.104.0/24, currently shows 95 reported IPs and 18,639 total reports on
AbuseIPDB.
A review of passive DNS tied to this /24 suggests what appears to be large-scale phishing-themed infrastructure spanning financial accounts, streaming subscriptions, health portals, tolling, government services, and parcel/logistics impersonation.
After filtering out obvious Plesk placeholder hostnames, wildcard junk, duplicate www variants, and generic filler entries, the following 100 domains stood out as the strongest phishing-related examples visible in passive DNS for this block:
Financial / account access / identity
- luxtrust-dossieroppo.com
- icloud-user-support.com
- banka-365.com
- ucet-365.com
- paypai.websapps.de
- paypai-sicheren.de
- paypai.validierung.me
- paypal.de-helfen.me
- pay-pal-myapp.com
- connect-payment.net
- servicecustomerbilling.com
- mycns-account.com
- myfiix-bill.com
- pay.pal-nachrichten.com
- mypay.pal-nachrichten.com
Streaming / subscription / Netflix-themed
- noreply-neftlixaccount.com
- ntlfixaccntservice.com
- ntfxregis.com
- pay-netflx.com
- netflxpay.com
- netflix-cancelled.com
- netflix-update-account.com
- netflixrenouvellement.com
- netflixrenouvellement.fr
- netflix-subskriptions.de
- netflix-subskription.net
- netflix-helfen.net
- netflix-hilfe.de
- monthlyntflx.com
- ntfxmonthly.com
Health / social services / Vitale / Ameli / Doctolib-themed
- macartesante-vitalefrance.com
- cartevitalefrance.com
- macartevitale-sante.com
- nouvelle-carte-vitale.com
- carte-santevitale.com
- assurance-maladie-cpam.com
- support-cpam.com
- ameli-compte.info
- info-ameli-assurance.com
- info-ameli-vitale.com
- renouvellement-sante-maladie.com
- mes-demarches-vitale.com
- carte-vitale-suivi.com
- mon-espace-ameli.com
- mon-espace-sante-ameli.com
- renouvellementameli2025.com
- ameli-service-public.com
- vitale-support.com
- doctolib-mise-a-jour.info
- doctolib-app.com
Government / fines / tolls / transport-themed
- peageauto-regularisation.com
- ulysfrance.com
- service-ulys.com
- ulys-autoroutes.com
- ulys-autoroutes.net
- telepeage-facture.com
- paybadge-relance.com
- impaye-ulys.com
- peage-ulys.org
- contravention-regularisation.com
- info-amendesgouv.com
- amendes-regulariser-paiement.com
- dossier-infraction.com
- antai.antsdemarches.com
- ants-demarches.com
Parcel / logistics / delivery-themed
- mydhl-kw-t.com
- mydhl-kuwait.com
- trackship-dhl.com
- dhl-infos.de
- delivery-upsworld.com
- upstrackpackages.com
- globaldelivery-connect.com
- auspost-packageonhold.com
- auspost-customsprccs.com
- assistance-package-delivery.info
- hometrack-assistance-package.info
- track-pakpost.com
- infosuivicolissimo.com
- mon-suivi-colissimo.com
- info-suivi-laposte.com
- suivi-colis-colissimo.com
- colissimo-info-colis.com
- relay-colis-retour.info
- livraisoncolis-mondialrelay.com
- mondialrelay-statutcolis.com
- track-my-mondialrelay.com
- colis-mondialrelay-suivi.com
- clients-mondialrelay.com
- mondialrelay-livraisoncolis.com
- mondialrelay-maj-colis.com
- retour-mondialrelay.com
- reprogramme-mon-colis.com
- service-mondiaireiay.com
- infocolis-suivi.com
- suivicolissimo-info.com
- locker-mondialrelayy.com
- mondial-points-relais.info
- mrelay-distri.com
- livraison-mon-relay.info
- monrelay-suivi.com
Drop It Like It’s Hot.
Latest updates to the ASN watchlist posted here:
https://internetweather.net/asn-watchlist/
Leave a Reply