Author Topic: ponmocup redirects  (Read 7413 times)

0 Members and 1 Guest are viewing this topic.

January 20, 2012, 10:57:47 pm
Read 7413 times

dsl

  • Jr. Member

  • Offline
  • **

  • 10
ponmocup redirections - first domain in uri is devil downloader , second domain in uri is infected host site
snort sid (et) 2013181

 http://watchingsquare.com/cgi-bin/r.cgi?p=10003&i=cc2a6dfa&j=332&m=fcc75ba27c025590b494af1a1edb13a9&h=www.crercc.com&u=/documents/143.html&q=&t=20120117102400

http://philosophymercer.com/cgi-bin/r.cgi?p=10003&i=1ec75caf&j=340&m=0e8d30ab7e31d7b186598f8100e719a4&h=www.actabio.pwr.wroc.pl&u=/Vol10No2/7.pdf&q=&t=20120120230055

http://virtualmapping.org/cgi-bin/r.cgi?p=10003&i=a9694d47&j=321&m=0c7ebdff51e46e084cdee0f6ec53499e&h=www.fitnessdestinations.com&u=/p90x-review-day-3-shoulders-and-arms/&q=&t=20120118181411

http://earlyanswered.com/cgi-bin/r.cgi?p=10003&i=0a0028f2&j=333&m=0097630a123b691d2feed6fb93e8a084&h=www.bcwaterpolo.com&u=/pages/events/results.htm&q=&t=20120118184921

http://severalcamp.com/cgi-bin/r.cgi?p=10003&i=29769566&j=331&m=3378b491e261e957bd88dc229ad1c5d0&h=www.indulgeliving.com&u=/products/t/512.jpg&q=&t=20120118124823