Malware Domain List

Malware Related => Malicious Domains => Eurohost LLC => Topic started by: MysteryFCM on May 18, 2009, 11:03:45 pm

Title: 91.212.65.140
Post by: MysteryFCM on May 18, 2009, 11:03:45 pm
winpc-antivirus09.com
Title: Re: 91.212.65.140
Post by: CkreM on May 18, 2009, 11:06:36 pm
Code: [Select]
Win-pc-antivirus-2009.com
and the fake payment site:
Code: [Select]
securebillingpayment.com/pp/
Title: Re: 91.212.65.140
Post by: Malware-Web-Threats on May 28, 2009, 11:14:39 pm
Code: [Select]
winpcantivirus2010.com/pp/id=
winpcantivirus2010.com/install.exe
VirusTotal (http://www.virustotal.com/analisis/b728526d5a37b6cca828dc4e230bc852483d9fd9105bc8bbc2283a8781cd6f4e-1243500694) - 22/40 (55.00%)
ThreatExpert (http://www.threatexpert.com/report.aspx?md5=b7988ab565829049f9640c7cc00395a4)
Title: Re: 91.212.65.140
Post by: Malware-Web-Threats on June 11, 2009, 10:55:59 am
Rogue AV:
Code: [Select]
hxxp://personaldeluxeguard.com

NS for malware domain:
ns1.wdnska.cn [91.212.65.139]
ns2.wdnska.cn [91.212.65.140]
Title: Re: 91.212.65.140
Post by: Malware-Web-Threats on June 12, 2009, 10:05:34 pm
Fraudulent payment page for rogue:
Code: [Select]
xpdeluxeprotector.com/pp/