Author Topic: 91.212.65.140  (Read 11522 times)

0 Members and 1 Guest are viewing this topic.

May 18, 2009, 11:03:45 pm
Read 11522 times

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
winpc-antivirus09.com
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

May 18, 2009, 11:06:36 pm
Reply #1

CkreM

  • Special Access
  • Hero Member

  • Offline
  • *

  • 567
Code: [Select]
Win-pc-antivirus-2009.com
and the fake payment site:
Code: [Select]
securebillingpayment.com/pp/
Mal-Aware

May 28, 2009, 11:14:39 pm
Reply #2

Malware-Web-Threats

  • Special Members
  • Hero Member

  • Offline
  • *

  • 354
    • MalwareURL
Code: [Select]
winpcantivirus2010.com/pp/id=
winpcantivirus2010.com/install.exe
VirusTotal - 22/40 (55.00%)
ThreatExpert

June 11, 2009, 10:55:59 am
Reply #3

Malware-Web-Threats

  • Special Members
  • Hero Member

  • Offline
  • *

  • 354
    • MalwareURL
Rogue AV:
Code: [Select]
hxxp://personaldeluxeguard.com

NS for malware domain:
ns1.wdnska.cn [91.212.65.139]
ns2.wdnska.cn [91.212.65.140]

June 12, 2009, 10:05:34 pm
Reply #4

Malware-Web-Threats

  • Special Members
  • Hero Member

  • Offline
  • *

  • 354
    • MalwareURL
Fraudulent payment page for rogue:
Code: [Select]
xpdeluxeprotector.com/pp/