低信誉网站托管服务清单
一些黑灰产网站出于监管和成本考虑,常会使用一些特定供应商的服务,作为其网络资产的组成。检测这些特定的、可疑的服务信息,可以帮助防御者建立信誉度检测系统,以及辅助人工的威胁研判。
以下就是整理一些黑灰产常利用的网站托管相关服务(主要整理自WebOas.is提供的"How To Host Questionable Websites"[1]一文)。
目录
- 低信誉网站托管服务清单
- 目录
- 顶级域名
- 反向代理
- 域名注册商
- Fast-flux服务
- DNS服务
- IRC服务
- 电子邮件转发
- Tor主机
- 主机供应商
- Costa Rica|哥斯达黎加
- Estonia|爱沙尼亚
- Hungary|匈牙利
- Iceland|冰岛
- Kazakhstan|哈萨克斯坦
- Latvia|拉脱维亚
- Moldova|摩尔达维亚
- Macedonia|马其顿
- Netherlands|荷兰
- Bangladesh|孟加拉国
- Vietnam|越南
- Taiwan|中国台湾
- Bosnia|波斯尼亚
- Lithuania|立陶宛
- Croatia|克罗地亚
- Panama|巴拿马
- Russia|俄罗斯
- Serbia|塞尔维亚
- Sweden|瑞典
- Switzerland|瑞士
- Ukraine|乌克兰
- USA|美国
- Turkey|土耳其
- Romania|罗马尼亚
- Iran|伊朗
- 其他
- References
顶级域名
- .am - 亚美尼亚
- .cr - 哥斯达黎加国家及地区
- .ec -厄瓜多尔
- .is - 冰岛
- .lt - 立陶宛
- .mu - 毛里求斯
- .rs - 塞尔维亚
- .si - 斯洛文尼亚
- .st - 圣多美和普林西比
- .su - 前苏联
- .top - 中国
- .tw - 中国台湾
反向代理
- https://ddos-guard.net
- https://www.cloudflare.com
- https://www.stackpath.com/products/ddos-protection/
- https://bitmitigate.com
- https://blazingfast.io/ddos
- https://www.geniusguard.com
- https://www.x4b.net https://javapipe.com/ddos/
- https://www.hyperfilter.com
- https://www.ovh.com/world/ssl-gateway/
- https://sucuri.net
- https://stormwall.network
- https://www.siberdc.com/en/firewall-service/
- https://www.imperva.com
- https://www.voxility.com/anti-ddos
- https://www.gigsgigscdn.com
- https://shovl.io
- https://coinshost.com/en/ddos-protection
- https://versaweb.com/ddosprotection.php
- https://qrator.net/en
- https://vsys.host/ddos-protection
- https://variti.com
- https://www.nooder.net
- https://vanwa.tech
- https://proxy.is
- https://cloud-shield.ru
- https://fluxcdn.com
- https://projectshield.withgoogle.com
- https://koddos.net
- https://www.reblaze.com
- https://bytefend.com
- https://pro-managed.com/en/
- https://hi-load.biz
域名注册商
中国香港
- https://now.top
- https://cnobin.com
俄罗斯
- https://xuid.ru/domains.php
- https://cheapprivacy.ru
- https://ru-tld.ru
- https://ahnames.com
其他
- https://njal.la - Sweden & Nevis
- https://flokinet.is - Iceland & Seychelles
- https://nicevps.net - Dominica
- https://www.epik.com - Free Speech USA!
- https://www.bitdomain.biz - Unknown
- https://regery.com - Ukraine
- https://sarek.fi - Finland
Fast-flux服务
注:Fast-flux技术是指不断改变域名和IP地址映射关系的一种技术,攻击者可以将多个IP地址的集合链接到某个特定的域名,并将新的地址从DNS记录中换入换出,用于回避检测
- https://xuid.ru
- https://www.privatealps.net
DNS服务
- https://dns.he.net
- https://www.1984hosting.com
- https://www.cloudns.net
- https://www.dnspod.com
- https://misaka.io/dns/
IRC服务
注:IRC 是一种基于文本的应用层通信协议,常用于安全的群组、一对一通讯
- https://sisrv.net/ircd/
- https://www.xzibition.com/ircds.php
- https://evolution-host.com/ircdhost.php
电子邮件转发
- https://forwardemail.net/en
- https://improvmx.com
- https://www.33mail.com
- https://anonaddy.com
Tor主机
注:Tor是用于匿名通讯的开源软件,用户可透过Tor接达由全球志愿者免费提供的覆盖网络,常用于隐藏用户真实地址、避免网络监控及流量分析
- https://onehostcloud.hosting
- https://impreza.host/en/
- https://ablative.hosting
- https://hosting.danwin1210.me
主机供应商
Costa Rica|哥斯达黎加
-
https://www.racknation.cr
-
https://www.navegalo.com/datacenter/
- http://www.crservers.com
Estonia|爱沙尼亚
- https://iphosten.net
- https://ugb.ee
Hungary|匈牙利
- https://www.mikrovps.net/en
- https://serverastra.com
- https://xethost.com
- https://rackforest.com/en/
- https://vps4you.hu/en/
Iceland|冰岛
- https://www.1984hosting.com
- https://www.orangewebsite.com
- https://flokinet.is
Kazakhstan|哈萨克斯坦
- http://idhost.kz/site/index/lang/en/
- https://gohost.kz/?language=english
- https://www.ps.kz
- https://goodhost.kz
Latvia|拉脱维亚
- https://garmtech.lv
- https://serveria.com
- https://www.dataclub.eu
- https://2cloud.eu/en
- https://www.virsma.com
- https://www.yourserver.se
- https://firsthost.lv/en
Moldova|摩尔达维亚
- https://alexhost.com
- https://www.stephost.md
- https://www.trabia.com
- https://innovahosting.net
- https://amplica.net
- https://gnt.md
- https://ihost.md/en/
Macedonia|马其顿
- https://qhost.mk/en/
- https://en.telesmart.mk
- https://unet.com.mk
Netherlands|荷兰
- https://nicevps.net
- https://www.nforce.com
- https://anonymously.io
- https://bladeservers.eu
- https://www.seedvps.com
- https://www.maple-hosting.com
- https://spectraip.net
- https://skb-enterprise.com
- https://infiumhost.com/en/
- https://libertyvps.net
- http://novogara.com
- https://elkupi.com
- https://xor.sc
- https://dmzhost.co
- https://antagonist.nl
- https://liteserver.nl
- https://finalhosting.nl
- https://www.tilaa.com/en/
- https://yisp.nl https://hostslick.com
- https://www.hostkey.com
- https://www.hostslim.eu
- https://www.weservit.nl/en/
- https://www.worldstream.com/en/
- https://koddos.net
- https://whattheserver.me
- https://lyrahosting.com
- https://www.snel.com
- https://www.privatehost.com
- https://www.estoxy.com
- https://peenq.nl
- https://lunarvps.com
- https://deltahost.com
- https://www.cloud-layer.net
Bangladesh|孟加拉国
- https://www.xeonbd.com
- https://alpha.net.bd
- https://www.hifiserver.com
- https://gotipath.com
Vietnam|越南
- https://en.tnd.vn
- https://vinahost.vn/en
- https://www.pavietnam.vn/en/
- https://vietserver.vn
- https://www.bkns.vn
- https://123host.vn/en/
Taiwan|中国台湾
- https://serverfield.com.tw
- https://hostinginside.com
Bosnia|波斯尼亚
- https://www.qsscloud.ba/?lang=en
- https://www.centohost.com
- https://netsaap.com
Lithuania|立陶宛
- https://www.hostika.lt/en/
- https://serveroffer.lt
- https://www.hostens.com
- https://www.time4vps.com
Croatia|克罗地亚
- https://www.maxko-hosting.com
- https://mydataknox.com
- https://www.croweb.host
Panama|巴拿马
- https://offshoreracks.com
- https://panamaserver.com
- https://www.ccihosting.com
Russia|俄罗斯
- https://intersect.host
- https://profitserver.ru/en/
- https://www.it-sakh.net/en/
- https://veesp.com/en/
- https://vscale.io/en/
- https://vdsina.ru
- https://ruvds.com/en-usd
- https://flops.ru/en/
- https://team-host.ru
- https://cloud-shield.ru
- https://ddos-guard.net
- https://justhost.ru
- https://theideahosting.com
- https://pw-service.com
- https://ihor.online
- https://sshvps.net/ru
- https://flowspec.ru/en/
- https://ipserver.su/en
- https://pinvds.com/eng_pinvds_home
- https://eliteteam.to
- https://pro-managed.com/en/
- https://www.reg.ru
- https://powervps.ru/en.html
- https://en.datacheap.ru
- https://eng.netrack.ru
- https://www.justg.com
- http://infiumhost.com
Serbia|塞尔维亚
- https://www.mcloud.rs/en
- https://ninet.rs/en
- https://unlimited.rs/en
- https://www.bits.rs/active/en/home.html
Sweden|瑞典
- https://icmenet.com
- https://www.binero.cloud/en
- http://www.portlane.com/en/
- https://svea.net
- https://prq.se
- https://vps.keff.org
- https://bahnhof.net
- https://www.yourserver.se
- https://tranquillity.se
Switzerland|瑞士
- https://www.cloudscale.ch/en/
- http://privatelayer.com
- https://datacenterlight.ch
- https://www.pihost.ch
- https://www.securebit.ch
- https://exohop.net
- https://swiss-vps.com
- https://store-host.com
- https://coin.host
- https://www.marbell.com
- https://solarcom.ch/en
- https://en.datasource.ch
- https://exoscale.com
- https://swissmade.host/en/
- https://www.fsit.com
Ukraine|乌克兰
- https://hostfory.com
- https://server.ua/en
- https://hostpro.ua/en/
- https://0x2a.com.ua/en/
- https://besthosting.ua/en
- https://www.atomohost.com/en/
- https://mirohost.net/en
- https://vsys.host
- https://hyperhost.ua/en
- https://www.urdn.com.ua
- https://uavps.net/en
- https://www.colocall.net/en/
- https://vikhost.com
- https://netengi.com
- https://deltahost.com
- https://host.ua
- https://xserver.ua/en/
USA|美国
- https://buyvm.net
- https://spartanhost.org
- https://sporestack.com
- https://nearlyfreespeech.net
- https://1776hosting.com
- https://www.epik.com
- https://capsul.org
- https://bitvps.com
- https://skysilk.com
- https://bithost.io
- https://billing.cnservers.com/
Turkey|土耳其
- https://www.spd.net.tr/en/
- https://www.hosthink.net
- https://hostigger.com
- https://www.venois.com
- https://www.digiturunc.com
- https://www.meric.net.tr
Romania|罗马尼亚
- https://intovps.com
- https://hostsolutions.ro
- https://www.voxility.com/dedicated-server
- https://cockbox.org
- https://cryptoho.st
- https://www.alistaro.ro
- https://www.virtono.com
- https://hostmaze.com
- https://www.ch-center.com
- https://www.layerbridge.com
- https://www.host-expert.eu
Iran|伊朗
- https://www.ouriran.com
- https://parsvds.com
- https://pars.host/en/
- https://asiatech.cloud
- https://www.parsdata.com/en-US/
- https://server.ir
- https://iranhost.com
- https://www.day.ir
- https://www.diakoweb.com
- https://www.faraso.org
- https://talashnet.com/en/vps/
其他
- https://www.qhoster.com - Many Locations
- https://magicnethosting.com - Many Locations
- https://aminserve.com - Many Locations
- https://www.superbithost.com - Many Locations
- https://www.shinjiru.com - Many Locations
- https://bp-servers.com - Many Locations
- https://www.trilightzone.org - Many Locations
- https://www.altushost.com - Many Locations
- https://dedi.al - Many Locations
- https://abcvg.net - Many Locations
- https://danama.ru - Many Locations
- https://www.privex.io - Many Locations
- https://www.internoc24.host - Many Locations
- https://1gbits.com - Many Locations
- https://www.99stack.com - Many Locations
- https://hosthatch.com - Many Locations
- https://4server.su - Many Locations
- https://wolfisp.com/en/ - Many Locations
- https://www.mvps.net - Many Locations
- https://monovm.com - Many Locations
- https://www.routerhosting.com - Many Locations
- https://exservers.net - Many Locations https://bpw.sc - Many Locations
- https://www.hostzealot.com - Many Locations
- https://fullvpsserver.com - Many Locations
- https://hostin.energy/en/ - Many Locations
- https://wavelayer.com - Many Locations
- https://www.hostzealot.com - Many Locations
- https://legionbox.com - Many Locations
- https://itldc.com/en/ - Many Locations
- https://abusehosting.net/index_en.html - Many Locations
- https://www.hostplay.com - Many Locations
- https://dedic.store - Many Locations
- https://seven.network - Many Locations
- https://hostroyale.com - Many Locations
- https://www.w3space.net - Bangladesh, Hungary, Romania
- https://ialgo.com -Belarus
- https://theonionhost.com - Bulgaria & Netherlands
- https://www.blueangelhost.com - Bulgaria & Russia & Netherlands
- https://www.ctclouds.com - China / Hong Kong (Crazy Expensive)
- https://www.opencloud.cl - Chile
- https://infofractual.io/en/ - Chile
- https://skylonhost.com - Czech Republic
- https://finaltek.com - Czech Republic
- https://www.citynethost.com - Egypt
- https://www.yatadatacenter.com - Egypt
- https://cloud9.ge - Georgia
- https://web.senang.online - India
- https://earthlink.iq - Iraq
- http://angani.co - Kenya
- https://illyhosting.com - Kosovo
- https://laodc.com - Laos
- https://idmweb.net - Lebanon
- https://datapacket.ma - Morocco
- https://hostsailor.com - Netherlands & Romania
- https://pq.hosting/en/ - Netherlands & Russia & Moldova
- https://www.king-servers.com/en/ - Netherlands & Russia
- https://prohoster.info/en/ - Netherlands & Russia
- https://speedhost247.com - Netherlands & Russia
- https://offshorededi.com - Netherlands & Ukraine & Bulgaria
- https://webcare360.com - Netherlands & Ukraine & Bulgaria
- https://zomro.net - Netherlands & Ukraine
- https://www.blix.com - Norway
- https://www.obhost.net - Pakistan
- https://www.neoserv.si - Slovienia
- https://ginernet.com/en/ - Spain
- https://sibyl.li - Switzerland & Netherlands & Norway
- https://www.aplushosting.asia - Thailand
- https://zomro.net - Ukraine & Netherlands
- http://offshoreevps.org
- http://cryto.net/~joepie91/bitcoinvps.html
- https://www.getmonero.org/community/merchants/#hosting
- https://offshore.tools
- https://bitcoin-vps.com
References
[1] How To Host Questionable Websites, WebOas.is, https://weboas.is/media/host.pdf