More Blackhole Kits

[pktguy]

Blackhole serving Zbot

http://y00.sg.tf/2move.php -> http://y00.sg.tf/w.php?f=21&e=10

http://urlquery.net/report.php?id=9954
http://www.virustotal.com/file-scan/report.html?id=2471c69cf5bf154dab1eece4ab24c2648a642e338116e8b4f7f2e53a175986d6-1322571965

[pktguy]

Blackhole serving Cridex

http://bqredret.ru/w.php?f=16&e=3

http://www.virustotal.com/file-scan/report.html?id=d5f68298b81da0d42bbd4cfd517c3610de41c3db53acfbe1ce19c2e41cfc86b9-1322593499

[pktguy]

Blackhole serving unknown malware

http://ucleaned.info/w.php?f=19&e=10

http://www.virustotal.com/file-scan/report.html?id=2d4a6198e070c62649a5cde90c24650edcb0f2b808d414a59c2103f5916c23d8-1322594712

[pktguy]

Blackhole serving fake AV

http://lajhkvnwkqgjkasgoiqrht.c0m.li/w.php?f=17&e=6

http://www.virustotal.com/file-scan/report.html?id=2b259ddbe7b1c8758f129fdc040679653e9b292f8b14240b4b10e2974b5a546c-1322598458

[pktguy]

Blackhole serving fake AV

http://webfaterx.345.pl/w.php?f=28&e=1

http://www.virustotal.com/file-scan/report.html?id=8ce92dd7b1135466df9865d9be1495d95dc4d3d385d5a5711b52335443634d55-1322674139

[pktguy]

Blackhole serving downloader

http://dadrekemufre.in/main.php?page=5c0e7ec144104f94

http://dadrekemufre.in/w.php?f=19&e=0

http://www.virustotal.com/file-scan/report.html?id=2d8a1d452d13acc9e886c2aecf05118826631fdc0335957225e8817522e9dbfe-1322759698

[pktguy]

Blackhole serving downloader

http://ling.luhousing.net/main.php?page=d7e7761fb8451227

http://ling.luhousing.net/w.php?f=94&e=0

http://www.virustotal.com/file-scan/report.html?id=7836fc87f2b67d072d209f480d30cd811134ea7ab80fe7f3f542ca93ffda10f8-1322767169

[pktguy]

Blackhole serving Zero Access
http://trucande.co.cc/main.php?page=9065b71917ffec11
http://trucande.co.cc/w.php?f=18&e=0
http://www.virustotal.com/file-scan/report.html?id=e0ac41f0956561d84994f887dfa1d117b271843dce8f41b7abc5a598d5189a9c-1322841911

Blackhole serving Fake AV
http://caress.the09clinic.net/main.php?page=8ccf35d22df4bc2b
http://caress.the09clinic.net/w.php?f=76&e=0
http://www.virustotal.com/file-scan/report.html?id=fe1b7efdc883c6572134f3df6c13075e962c51116aeaf2f8b975fb90b10eaea8-1322850209

[handball10]

Blackhole serving Downloader:

xttp://facebook-images.net/main.php

--> http://urlquery.net/report.php?id=10527

xttp://facebook-images.net/w.php?f=17&e=2

--> http://www.virustotal.com/file-scan/report.html?id=b8d822eaa147a2b9fabf05627d6800f1a4be5a30d2fc5639edd024047d3eb9e0-1323101395

[pktguy]

Blackhole serving Trojan (likely Cridex)
http://smeliykot.ru/main.php?page=13cdcb8e92b33438
http://smeliykot.ru/w.php?f=17&e=0 HTTP/1.1
http://www.virustotal.com/file-scan/report.html?id=3b8355ace43f7b829277f292999afaafa6b372925c503ea3eefdf5588c605837-1323105531

Blackhole serving ZeroAccess
http://autoinsurancebicentennial.co.cc/main.php?page=9065b71917ffec11
http://autoinsurancebicentennial.co.cc//w.php?f=18&e=0

on same IP
http://autoinsurancebloom.co.cc/main.php?page=9065b71917ffec11
http://autoinsurancecalendaryear.co.cc/main.php?page=0d5ae1fd4dfc5ed6
http://www.virustotal.com/file-scan/report.html?id=94fca69a7c14110f82eafc6700e321b747b001102e921211881a6edd3c64c30a-1323105828

[pktguy]

Blackhole landing

http://kamaaz.in/main.php?page=13cdcb8e92b33438
http://urlquery.net/report.php?id=10740

http://188.247.232.182/main.php?page=70446792e08f4937
http://urlquery.net/report.php?id=10741

[pktguy]

Blackhole serving zero access
http://loplollo.co.cc/main.php?page=0d5ae1fd4dfc5ed6 <- active
http://loplollo.co.cc/w.php?f=19&e=0
http://www.virustotal.com/file-scan/report.html?id=2c143f047e6bc4b98f9efb1209ccb59e49e99111d704ec8e4f04eb44648f6b6f-1323366513

Blackhole serving trojan
http://coredret.ru/main.php?page=1e83fd4c01303f20
http://coredret.ru//w.php?f=16&e=0
http://www.virustotal.com/file-scan/report.html?id=d94cfd18f0cd4154a655072abc8b77605d0a2a2e0870faf32a3da8a1b5e56e98-1323359347

[pktguy]

Blackhole landing
eebmwqtj.servepics.com/main.php?page=322543253660156f
http://urlquery.net/report.php?id=11072

oredasw.cz.cc/main.php?page=95a18305ef2c2d0e
http://urlquery.net/report.php?id=11080

[pktguy]

Blackhole landing


noghered.info/main.php?page=657114e2319417e6
http://urlquery.net/report.php?id=11413

poptrera.co.cc/main.php?page=0d5ae1fd4dfc5ed6
http://urlquery.net/report.php?id=11416

postdafbes.co.cc/main.php?page=9065b71917ffec11
http://urlquery.net/report.php?id=11418

[pktguy]

Blackhole landing

hands.satisfiedwithmyplot.com/main.php?page=3e96fd0795f87f6c
http://urlquery.net/report.php?id=11616

popsebes.co.cc/main.php?page=0d5ae1fd4dfc5ed6
http://urlquery.net/report.php?id=11643