Malware Domain List

Malware Related => Malicious Domains => Eurohost LLC => Topic started by: MysteryFCM on May 18, 2009, 11:03:45 pm

Title: 91.212.65.140
Post by: MysteryFCM on May 18, 2009, 11:03:45 pm

winpc-antivirus09.com

Title: Re: 91.212.65.140
Post by: CkreM on May 18, 2009, 11:06:36 pm

Code: [Select]

Win-pc-antivirus-2009.com
and the fake payment site:

Code: [Select]

securebillingpayment.com/pp/

Title: Re: 91.212.65.140
Post by: Malware-Web-Threats on May 28, 2009, 11:14:39 pm

Code: [Select]

winpcantivirus2010.com/pp/id=
winpcantivirus2010.com/install.exe
VirusTotal (http://www.virustotal.com/analisis/b728526d5a37b6cca828dc4e230bc852483d9fd9105bc8bbc2283a8781cd6f4e-1243500694) - 22/40 (55.00%)
ThreatExpert (http://www.threatexpert.com/report.aspx?md5=b7988ab565829049f9640c7cc00395a4)

Title: Re: 91.212.65.140
Post by: Malware-Web-Threats on June 11, 2009, 10:55:59 am

Rogue AV:

Code: [Select]

hxxp://personaldeluxeguard.com

NS for malware domain:
ns1.wdnska.cn [91.212.65.139]
ns2.wdnska.cn [91.212.65.140]

Title: Re: 91.212.65.140
Post by: Malware-Web-Threats on June 12, 2009, 10:05:34 pm

Fraudulent payment page for rogue:

Code: [Select]

xpdeluxeprotector.com/pp/