http://www.malwaredomainlist.com/mdl.php MalwareDomainList update. This feed shows the latest urls which have been added to our list. en http://www.rssboard.org/rss-specification RSS Feed Engine admin@malwaredomainlist.com (admin) admin@malwaredomainlist.com (admin) http://www.malwaredomainlist.com/mdl.php?search=streamlinemediaworks.com Host: streamlinemediaworks.com/images/space.gif, IP address: 72.167.131.22, ASN: 26496, Description: zeus/wsnpoem v2 config file 3f3b307c6d998f6a5af5c24338e8db78 http://www.malwaredomainlist.com/mdl.php?search=kokojamba.com Host: kokojamba.com/a/d.php?e=CollabUTIL, IP address: 79.171.22.190, ASN: 44565, Description: trojan 2fcb4cbe4c5476dba915172c20fbbdbd http://www.malwaredomainlist.com/mdl.php?search=kokojamba.com Host: kokojamba.com/a/s/files/ie.swf, IP address: 79.171.22.190, ASN: 44565, Description: flash exploit 0fc4902df5706bd80b20547ab00d69b1 http://www.malwaredomainlist.com/mdl.php?search=kokojamba.com Host: kokojamba.com/a/admin.php, IP address: 79.171.22.190, ASN: 44565, Description: control panel of Liberty exploit kit 8a0b9532b333475bca09878f7f62672d http://www.malwaredomainlist.com/mdl.php?search=lipesnaskom.com Host: lipesnaskom.com/cgi-binn/hitss.php, IP address: 95.143.192.40, ASN: 49770, Description: zeus/wsnpoem v2 drop zone 71e0ec7235b89d371d938a49b822f908 http://www.malwaredomainlist.com/mdl.php?search=842389423478923.com Host: 842389423478923.com/2/l.php?i=6, IP address: 195.88.208.8, ASN: 12695, Description: zeus/wsnpoem v2 trojan ec1c357099ed4517c20e7ac534c20a41 http://www.malwaredomainlist.com/mdl.php?search=842389423478923.com Host: 842389423478923.com/2/statistics.php, IP address: 195.88.208.8, ASN: 12695, Description: control panel of Phoenix exploit kit 51c602b9aff8a027dbe00d0094da126f http://www.malwaredomainlist.com/mdl.php?search=bravetools.net Host: bravetools.net/en/mytools.php, IP address: 74.54.41.82, ASN: 21844, Description: exploit kit 407877ed4b43904d8d95cc8a822aa605 http://www.malwaredomainlist.com/mdl.php?search=qnnualnews.com Host: qnnualnews.com/download/0540f0d2bb566d0ed0d80150e2b728ef/f85b7b377112c272bc87f3e73f10508d/4, IP address: 212.150.147.45, ASN: 1680, Description: trojan FakeSmoke df6f75e39d9d4904c1e4db1791cb39db http://www.malwaredomainlist.com/mdl.php?search=checkliet.com Host: checkliet.com/scn/f7293174e497c1447e298176d78e0ae1/0540f0d2bb566d0ed0d80150e2b728ef/f85b7b377112c272bc87f3e73f10508d, IP address: 98.142.243.10, ASN: 30407, Description: fake online Scanner 380317863c32eecdba0f4acae9a178b1 http://www.malwaredomainlist.com/mdl.php?search=openaskelisto.com Host: openaskelisto.com/main1/view.php, IP address: 85.12.46.22, ASN: 34305, Description: zeus/wsnpoem v2 drop zone bdc33913bee4ecf3df04bd2780912567 http://www.malwaredomainlist.com/mdl.php?search=www.gaddem.net Host: www.gaddem.net/scam/can/li.exe, IP address: 61.4.82.222, ASN: 17964, Description: zeus/wsnpoem v2 trojan 8baac1840d2f68f275304854298445d6 http://www.malwaredomainlist.com/mdl.php?search=ertriuanfhaeritruonceif.com Host: ertriuanfhaeritruonceif.com/barcelona/barccfg9832789/barccfg23084292.bin, IP address: 91.212.220.68, ASN: 49365, Description: zeus/wsnpoem v2 config file 11ee3942f4a1b4482ba95d80be95665a http://www.malwaredomainlist.com/mdl.php?search=countrtds.ru Host: countrtds.ru/cxd/fe.vv, IP address: 91.201.196.102, ASN: 42229, Description: zeus/wsnpoem v2 config file eb1435dbba2f6204f11ebf388f9997e4 http://www.malwaredomainlist.com/mdl.php?search=iiiiiiiiiiiiii.net Host: iiiiiiiiiiiiii.net/games/update.set, IP address: 203.174.83.98, ASN: 38001, Description: zeus/wsnpoem v2 config file 26b2c057ba2a76553913bebed1db80da http://www.malwaredomainlist.com/mdl.php?search=777brabus777.com Host: 777brabus777.com/tmp/404_ca.php, IP address: 94.228.220.66, ASN: 47869, Description: zeus/wsnpoem v2 drop zone 5934b9938e6596b59e035cee818b0cea http://www.malwaredomainlist.com/mdl.php?search=193.105.0.71 Host: -, IP address: 193.105.0.71/yj6revg7.exe, ASN: 50390, Description: zeus/wsnpoem v2 trojan aedfaadb17e6ab88bb2e8f28a13518fe http://www.malwaredomainlist.com/mdl.php?search=777brabus777.com Host: 777brabus777.com/fu/loc.so, IP address: 94.228.220.66, ASN: 47869, Description: zeus/wsnpoem v2 config file 6beae6a862460cdf51830f98c8bd253c http://www.malwaredomainlist.com/mdl.php?search=193.105.0.71 Host: -, IP address: 193.105.0.71/j65g5hh7.php, ASN: 50390, Description: zeus/wsnpoem v2 drop zone 09009950ae84f6819be4c9f2225faacf http://www.malwaredomainlist.com/mdl.php?search=193.105.0.71 Host: -, IP address: 193.105.0.71/allovu.bin, ASN: 50390, Description: zeus/wsnpoem v2 config file 8a77d110cba56c0e585466336cc7a75e http://www.malwaredomainlist.com/mdl.php?search=slavenkad.com Host: slavenkad.com/3/download.php?expid=3&fid=1, IP address: 95.143.192.193, ASN: 49770, Description: zeus/wsnpoem v2 trojan c2572943984430838385d74c93a9d52c http://www.malwaredomainlist.com/mdl.php?search=slavenkad.com Host: slavenkad.com/3/admin.php, IP address: 95.143.192.193, ASN: 49770, Description: control panel of Liberty exploit kit c4325d3efe8e1026f65c65795fe62b2a http://www.malwaredomainlist.com/mdl.php?search=slavenkad.com Host: slavenkad.com/3/index.php, IP address: 95.143.192.193, ASN: 49770, Description: Liberty exploit kit 11ba55019595bebfc1e28cc76a30eac5 http://www.malwaredomainlist.com/mdl.php?search=oooowor.com Host: oooowor.com/stat/load.php?spl=pdf_2012, IP address: 122.115.63.24, ASN: 9803, Description: trojan ad73eb23bc8834e20477b5b9688321ba http://www.malwaredomainlist.com/mdl.php?search=oooowor.com Host: oooowor.com/stat/stat.php, IP address: 122.115.63.24, ASN: 9803, Description: control panel of Eleonore Exploits pack v1.3.2 b142845b89409cacd71d8f87bf951b03 http://www.malwaredomainlist.com/mdl.php?search=oooowor.com Host: oooowor.com/stat/index.php, IP address: 122.115.63.24, ASN: 9803, Description: Eleonore Exploits pack v1.3.2 0499b5d0dbbbf9e35ac13913e200ef15 http://www.malwaredomainlist.com/mdl.php?search=kontroli.ru Host: kontroli.ru/s/load.php?id=&spl=4, IP address: 95.211.4.6, ASN: 16265, Description: trojan d21975ba6a9a65335c8a625c820b8af6 http://www.malwaredomainlist.com/mdl.php?search=kontroli.ru Host: kontroli.ru/s/index.php, IP address: 95.211.4.6, ASN: 16265, Description: exploit kit 086c361505e0dedbbb01c126830db871 http://www.malwaredomainlist.com/mdl.php?search=jl.chura.pl Host: jl.chura.pl/rc/getexe.php?spl=mdac, IP address: 89.187.34.4, ASN: 25129, Description: trojan Virut 8b621cc5b01d9bd3e2b1af24fe3a0c0e http://www.malwaredomainlist.com/mdl.php?search=jl.chura.pl Host: jl.chura.pl/rc/stat.php, IP address: 89.187.34.4, ASN: 25129, Description: control panel of Eleonore Exploits pack v1.2 24ed1641af1441dd0f5ed9ce2fec296e http://www.malwaredomainlist.com/mdl.php?search=jl.chura.pl Host: jl.chura.pl/rc/index.pjp, IP address: 89.187.34.4, ASN: 25129, Description: Eleonore Exploits pack v1.2 d3b0ccd3cce89b1cacfa30e315a3fdd5 http://www.malwaredomainlist.com/mdl.php?search=frondircass.cn Host: frondircass.cn/ee/imho.php, IP address: 95.143.192.193, ASN: 49770, Description: zeus/wsnpoem v2 drop zone a92537b857f116a7edc650a7892670e2 http://www.malwaredomainlist.com/mdl.php?search=frondircass.cn Host: frondircass.cn/ee/ee.txt, IP address: 95.143.192.193, ASN: 49770, Description: zeus/wsnpoem v2 config file ac0ea9e34c2a90a10dc4ad892cbb6ab6 http://www.malwaredomainlist.com/mdl.php?search=brunongino.com Host: brunongino.com/3/download.php?expid=3&fid=1, IP address: 95.143.192.193, ASN: 49770, Description: zeus/wsnpoem v2 trojan c9681d5c72ae273b8f31d711fc990a68 http://www.malwaredomainlist.com/mdl.php?search=brunongino.com Host: brunongino.com/3/admin.php, IP address: 95.143.192.193, ASN: 49770, Description: control panel of Liberty exploit kit a5ebe961cfab124b0ff46be4224e2f32 http://www.malwaredomainlist.com/mdl.php?search=brunongino.com Host: brunongino.com/3/index.php, IP address: 95.143.192.193, ASN: 49770, Description: Liberty exploit kit e2bc91bf820326778c11d633745f36e9 http://www.malwaredomainlist.com/mdl.php?search=test2.salefale.com Host: test2.salefale.com/exe.exe, IP address: 67.141.185.89, ASN: 7029, Description: zeus/wsnpoem v2 trojan f6f2ec14e8cbc29f338e5ed68a6c3218 http://www.malwaredomainlist.com/mdl.php?search=zxfr.salefale.com Host: zxfr.salefale.com/exe.exe, IP address: 67.141.185.89, ASN: 7029, Description: zeus/wsnpoem v2 trojan 0ad42877256d796a2cab9bc4d7e3fea0 http://www.malwaredomainlist.com/mdl.php?search=superlayout.org Host: superlayout.org/ws/g899.php, IP address: 61.4.82.216, ASN: 17964, Description: zeus/wsnpoem v2 drop zone db0dd987189cdacef0111d4701bb9021 http://www.malwaredomainlist.com/mdl.php?search=superlayout.org Host: superlayout.org/125/tyu7.exe, IP address: 61.4.82.216, ASN: 17964, Description: zeus/wsnpoem v2 trojan f5c516f74ee23a34c57323f8a25a1c8f http://www.malwaredomainlist.com/mdl.php?search=superlayout.org Host: superlayout.org/125/gfy6.bin, IP address: 61.4.82.216, ASN: 17964, Description: zeus/wsnpoem v2 config file 776b632a48cc4385c7162e637a1749be http://www.malwaredomainlist.com/mdl.php?search=kokojamba.com Host: kokojamba.com/a/s/files/clb.pdf, IP address: 79.171.22.190, ASN: 44565, Description: pdf exploit 38071ad226051314d9b50cd7c095a017 http://www.malwaredomainlist.com/mdl.php?search=kokojamba.com Host: kokojamba.com/a/s/0.php, IP address: 79.171.22.190, ASN: 44565, Description: Liberty exploit kit 5a48e588c899100ab09044739b5e30fc http://www.malwaredomainlist.com/mdl.php?search=842389423478923.com Host: 842389423478923.com/2/index.php, IP address: 195.88.208.8, ASN: 12695, Description: Phoenix exploit kit 2b967e115ea26543184aa54946e90446 http://www.malwaredomainlist.com/mdl.php?search=www.from-jucar.de Host: www.from-jucar.de/, IP address: 81.169.145.71, ASN: 6724, Description: compromised site directs to exploit kit 682a33f383d01373f3085c1c7ef099f9 http://www.malwaredomainlist.com/mdl.php?search=98.126.17.138 Host: -, IP address: 98.126.17.138/g86f3cbi2.php, ASN: 35908, Description: zeus/wsnpoem v2 drop zone 19e97c3a098bcb73348a616dfa80370f http://www.malwaredomainlist.com/mdl.php?search=inasss.info Host: inasss.info/pt_newold.exe, IP address: 122.115.63.9, ASN: 9803, Description: zeus/wsnpoem v2 trojan b93d292216aac9c9448c1380ccdf0cff http://www.malwaredomainlist.com/mdl.php?search=calvinkleinstuffz.com Host: calvinkleinstuffz.com/calvinklein2/cfg.bin, IP address: 122.115.63.37, ASN: 9803, Description: zeus/wsnpoem v1 config file 9ea0c677a97fb87034c7b1dcc58ca235 http://www.malwaredomainlist.com/mdl.php?search=calvinkleinstuffz.com Host: calvinkleinstuffz.com/calvinklein2/logger.php, IP address: 122.115.63.37, ASN: 9803, Description: zeus/wsnpoem v1 drop zone 75f616b233d4be61ada9f22c5511e57b http://www.malwaredomainlist.com/mdl.php?search=hourbrand.com Host: hourbrand.com/scn/c4f12d4be2e5a718fc0fab8ff0519a17/0540f0d2bb566d0ed0d80150e2b728ef/f85b7b377112c272bc87f3e73f10508d, IP address: 98.142.243.10, ASN: 30407, Description: fake online Scanner fc8ce65ed6e25eb94386f27eab3c45c3 http://www.malwaredomainlist.com/mdl.php?search=zannualnews.com Host: zannualnews.com/download/0540f0d2bb566d0ed0d80150e2b728ef/f85b7b377112c272bc87f3e73f10508d/4, IP address: 91.212.127.144, ASN: 49087, Description: trojan fakeSmoke 10a513b29ac5af744711c604694e3f76 http://www.malwaredomainlist.com/mdl.php?search=www.antivp.com Host: www.antivp.com/asvzgdwebasvzgdweb.htm?get=e0b399bd994a0556517f96487dd3ab29, IP address: 91.212.127.142, ASN: 49087, Description: rogue installer fa91a0efd9416c3ef11c03007cd77ade http://www.malwaredomainlist.com/mdl.php?search=antispyware-comp.com Host: antispyware-comp.com, IP address: 69.4.231.42, ASN: 36351, Description: fake av site deb8d8c7524dc2a464d08e8cf0ea2bd5 http://www.malwaredomainlist.com/mdl.php?search=antivirus-onecare2010.com Host: antivirus-onecare2010.com, IP address: 76.76.102.198, ASN: 21793, Description: fake av site b99f50a6dec40cc1c2117fb39ad498d9 http://www.malwaredomainlist.com/mdl.php?search=pc-carelive.com Host: pc-carelive.com, IP address: 76.76.102.197, ASN: 21793, Description: fake av site 371604d9dc64410df45212a80dd3c771 http://www.malwaredomainlist.com/mdl.php?search=pccare-live.com Host: pccare-live.com, IP address: 76.76.102.195, ASN: 21793, Description: fake av site 010b298e82f262d54818547b919f0eed http://www.malwaredomainlist.com/mdl.php?search=pcguard2010.com Host: pcguard2010.com, IP address: 76.76.102.197, ASN: 21793, Description: fake av site 955f80757d0c16a9c75d5add31c8a63b http://www.malwaredomainlist.com/mdl.php?search=pcguard-2010.com Host: pcguard-2010.com, IP address: 69.4.231.42, ASN: 36351, Description: fake av site e2b4f226d867266c9bbd98f7b5eb62fd http://www.malwaredomainlist.com/mdl.php?search=pc-guard-2010.com Host: pc-guard-2010.com, IP address: 173.192.214.194, ASN: 36351, Description: fake av site f5f8d0ce2244c5c597cd36681187347b http://www.malwaredomainlist.com/mdl.php?search=pcguard20-10.com Host: pcguard20-10.com, IP address: 69.4.231.43, ASN: 36351, Description: fake av site 9d9e052b423e1d0827f65a5c59f6bb2b http://www.malwaredomainlist.com/mdl.php?search=pc-guard-20-10.com Host: pc-guard-20-10.com, IP address: 173.192.214.194, ASN: 36351, Description: fake av site db9f972a681cd6d4282c82e5cefb96d6 http://www.malwaredomainlist.com/mdl.php?search=pcwindowslive.com Host: pcwindowslive.com, IP address: 69.4.231.40, ASN: 36351, Description: fake av site 44b2469215637f309fedaa52ac99ea51 http://www.malwaredomainlist.com/mdl.php?search=pc-windowslive.com Host: pc-windowslive.com, IP address: 69.4.231.43, ASN: 36351, Description: fake av site 2f27d453db0bb5288fea5e6933717617 http://www.malwaredomainlist.com/mdl.php?search=pcwindows-live.com Host: pcwindows-live.com, IP address: 69.4.231.41, ASN: 36351, Description: fake av site 61d6bc065e5dea37a88c027e328919b4 http://www.malwaredomainlist.com/mdl.php?search=pc-windows-live.com Host: pc-windows-live.com, IP address: 173.192.214.192, ASN: 36351, Description: fake av site c9029332e265b63ab6f0a2f48bceaaf2 http://www.malwaredomainlist.com/mdl.php?search=pcwinlive.com Host: pcwinlive.com, IP address: 173.83.26.46, ASN: 32392, Description: fake av site e9d29bb25214e34bd5c81a3c4a3d8c2f http://www.malwaredomainlist.com/mdl.php?search=pc-winlive.com Host: pc-winlive.com, IP address: 173.83.26.44, ASN: 32392, Description: fake av site b58798cbbbdc88454786ba81974bc42b http://www.malwaredomainlist.com/mdl.php?search=pcwin-live.com Host: pcwin-live.com, IP address: 76.76.102.196, ASN: 21793, Description: fake av site fc88a3c0255968c11b3e71a6de83b1a2 http://www.malwaredomainlist.com/mdl.php?search=pc-win-live.com Host: pc-win-live.com, IP address: 69.4.231.41, ASN: 36351, Description: fake av site df7b03f35dadf9782eb751f48b7f3a93 http://www.malwaredomainlist.com/mdl.php?search=pcwinlive2010.com Host: pcwinlive2010.com, IP address: 173.192.214.193, ASN: 36351, Description: fake av site 0c823dc0b7925b53db99f50d5cd9d24c http://www.malwaredomainlist.com/mdl.php?search=pc-winlive2010.com Host: pc-winlive2010.com, IP address: 69.4.231.42, ASN: 36351, Description: fake av site 12abfac748e16510676c723184833d91 http://www.malwaredomainlist.com/mdl.php?search=pcwinlive-2010.com Host: pcwinlive-2010.com, IP address: 173.83.26.44, ASN: 32392, Description: fake av site 4de5304abfc116a3d5fd61188abb598f http://www.malwaredomainlist.com/mdl.php?search=pc-win-live-2010.com Host: pc-win-live-2010.com, IP address: 173.83.26.45, ASN: 32392, Description: fake av site 6e4577c62f4e3ea5af19591e27e66b8c http://www.malwaredomainlist.com/mdl.php?search=spyware-destroyerone.com Host: spyware-destroyerone.com, IP address: 69.4.231.41, ASN: 36351, Description: fake av site 3cb7eadecfa80dc518166db9d3609224 http://www.malwaredomainlist.com/mdl.php?search=tragicapple.com Host: tragicapple.com, IP address: 76.76.98.196, ASN: 21793, Description: fake av site 1ca4db26462df0aa5c8d23a13f63d1ca http://www.malwaredomainlist.com/mdl.php?search=windef2010.com Host: windef2010.com, IP address: 69.4.231.43, ASN: 36351, Description: fake av site e0e4b1ed474267ac74eeabfdadc27a71 http://www.malwaredomainlist.com/mdl.php?search=win-defender10.com Host: win-defender10.com, IP address: 69.4.231.40, ASN: 36351, Description: fake av site e86f6f3de0e2cfdd751755e0ba7cd2e9 http://www.malwaredomainlist.com/mdl.php?search=windefender-10.com Host: windefender-10.com, IP address: 69.4.231.41, ASN: 36351, Description: fake av site 55085b6c3c242452a90dc2e39ada73c5 http://www.malwaredomainlist.com/mdl.php?search=win-defender-10.com Host: win-defender-10.com, IP address: 69.4.231.42, ASN: 36351, Description: fake av site f331a8634542d16bbe008ff62fbdeaf6 http://www.malwaredomainlist.com/mdl.php?search=windowsdefender10.com Host: windowsdefender10.com, IP address: 69.4.231.40, ASN: 36351, Description: fake av site 34c940817f7b733cafc2b3f41a6d6307 http://www.malwaredomainlist.com/mdl.php?search=windows-defender10.com Host: windows-defender10.com, IP address: 69.4.231.41, ASN: 36351, Description: fake av site de5ed833627b253d407055bffd50c16c http://www.malwaredomainlist.com/mdl.php?search=windowsdefender-10.com Host: windowsdefender-10.com, IP address: 69.4.231.42, ASN: 36351, Description: fake av site bc7de811b9a25e7ea62d9b97b3363c2f http://www.malwaredomainlist.com/mdl.php?search=windows-defender-10.com Host: windows-defender-10.com, IP address: 69.4.231.43, ASN: 36351, Description: fake av site 2448402bdad1803d33eed8969bdd500a http://www.malwaredomainlist.com/mdl.php?search=yes-exploit-system.ru Host: yes-exploit-system.ru, IP address: 91.212.198.156, ASN: 49314, Description: YES exploit kit advertisement e83b92c7090517c50c2b8f36d86c5022 http://www.malwaredomainlist.com/mdl.php?search=stroimvmeste.in Host: stroimvmeste.in/affiliate/index.php?b=b, IP address: 77.222.56.35, ASN: 44112, Description: YES exploit kit 5100cb7542d769b0ae10c29452486e33 http://www.malwaredomainlist.com/mdl.php?search=stroimvmeste.in Host: stroimvmeste.in/affiliate/admin, IP address: 77.222.56.35, ASN: 44112, Description: control panel of YES exploit kit 985378cef1dce7b45750846aee0ddf5d http://www.malwaredomainlist.com/mdl.php?search=stroimvmeste.in Host: stroimvmeste.in/affiliate/cache/PDF.php?st=Internet, IP address: 77.222.56.35, ASN: 44112, Description: Explorer 6.0 782e8aac483e0e8e72d6929cfe904973 http://www.malwaredomainlist.com/mdl.php?search=stroimvmeste.in Host: stroimvmeste.in/affiliate/load.php?a=a&e=4, IP address: 77.222.56.35, ASN: 44112, Description: rootkit TDSS aa45a5badbed7d98ce3b16388a5a8c3c http://www.malwaredomainlist.com/mdl.php?search=foreinternet.com Host: foreinternet.com/sys/index.php, IP address: 91.210.173.2, ASN: 48588, Description: YES exploit kit 2646b955d1b7f597bc03bf44ffd9bcc8 http://www.malwaredomainlist.com/mdl.php?search=foreinternet.com Host: foreinternet.com/sys/admin, IP address: 91.210.173.2, ASN: 48588, Description: control panel of YES exploit kit 22e7f5ed95bf1ec2f7454ed7cb126a68 http://www.malwaredomainlist.com/mdl.php?search=foreinternet.com Host: foreinternet.com/sys/load.php?a=a&e=4, IP address: 91.210.173.2, ASN: 48588, Description: trojan Oficla/Sasfis 8079ff11c93b0c3afe4151174a0a35da http://www.malwaredomainlist.com/mdl.php?search=antiviruspc-update.com Host: antiviruspc-update.com/mavzoley/bb.php?v=200&id=554905388&b=ze-us&tm=3, IP address: 91.210.173.25, ASN: 48588, Description: Oficla/Sasfis C&C c6686338e60f9b4c12e2baaf78ab4d51 http://www.malwaredomainlist.com/mdl.php?search=yougoodvideo.net Host: yougoodvideo.net/forum/exe/file.exe, IP address: 122.115.63.24, ASN: 9803, Description: rootkit TDSS 8e6c6abe8b33b44d9a5a0c2eecfda8ef http://www.malwaredomainlist.com/mdl.php?search=diaiscjdthr.com Host: diaiscjdthr.com/nte/INDEPHANDLER, IP address: 66.135.37.211, ASN: 13768, Description: NeoSploit, payload Zeus 73e21f3a3a6d4ffd8080c77d7d5b475b http://www.malwaredomainlist.com/mdl.php?search=diaiscjdthr.com Host: diaiscjdthr.com/nte/INDEPHANDLER/eU8ea8ef33Hdfd932d2V0100f070006R00000000102T944f9e0c201l0409K08d80105320, IP address: 66.135.37.211, ASN: 13768, Description: zeus/wsnpoem v2 trojan 4ea86434af7d9d850f947ad1b32efe25 http://www.malwaredomainlist.com/mdl.php?search=www.youporn8.net Host: www.youporn8.net/yama.exe, IP address: 174.120.148.154, ASN: 21844, Description: trojan StartPage cd4b76a27a8547594de596e0a938b036 http://www.malwaredomainlist.com/mdl.php?search=trastlifer.hk Host: trastlifer.hk/vmxts.exe, IP address: 91.212.220.10, ASN: 49365, Description: zeus/wsnpoem v2 trojan c8847b0e44e148e62ed5361ae97f0ebc http://www.malwaredomainlist.com/mdl.php?search=trastlifer.hk Host: trastlifer.hk/ribbn.tar, IP address: 91.212.220.10, ASN: 49365, Description: zeus/wsnpoem v2 config file fedb81f5f44a87f46973b7f09c2d8a18 http://www.malwaredomainlist.com/mdl.php?search=trastlifer.hk Host: trastlifer.hk/index1.php, IP address: 91.212.220.10, ASN: 49365, Description: zeus/wsnpoem v2 drop zone 774c36d928f305659d134e4db41b2e42 http://www.malwaredomainlist.com/mdl.php?search=gerbalaif.com Host: gerbalaif.com/account, IP address: 91.213.174.9, ASN: 29106, Description: control panel of botnet C&C 9bfbae143a2fc6d455a1f752cdb5b5de http://www.malwaredomainlist.com/mdl.php?search=arriviertes.com Host: arriviertes.com/rihBeufAQU917Xa.php?id=1&magic=405940736, IP address: 91.213.174.3, ASN: 29106, Description: malware calls home 73b71d1a3b701b2b660a08b10bdc1b57 http://www.malwaredomainlist.com/mdl.php?search=whydaddy.biz Host: whydaddy.biz/, IP address: 91.213.174.9, ASN: 29106, Description: redirects to botnet control panel e934583abf4353d4b4c0f412ceaff9a7 http://www.malwaredomainlist.com/mdl.php?search=dogshowonline.info Host: dogshowonline.info/ldr/mdply3d.exe, IP address: 94.228.219.189, ASN: 47869, Description: trojan 9dd77387eda6c7a6b04ce845a31734ac http://www.malwaredomainlist.com/mdl.php?search=dogshowonline.info Host: dogshowonline.info/ldr/pod.exe, IP address: 94.228.219.189, ASN: 47869, Description: trojan 8088b234a99d1db6b3537dce9398e9c0 http://www.malwaredomainlist.com/mdl.php?search=skyfleck.com Host: skyfleck.com/perfmonss.bin, IP address: 218.8.245.123, ASN: 4837, Description: trojan Refpron b527487b2b68f8d8d9b68473c9cb8bb2 http://www.malwaredomainlist.com/mdl.php?search=195.242.161.111 Host: -, IP address: 195.242.161.111/~chetir/chet/n.php, ASN: 47434, Description: zeus/wsnpoem v2 drop zone 97f7c5248e2f5c6650ee89fea57a8610 http://www.malwaredomainlist.com/mdl.php?search=95.143.192.35 Host: -, IP address: 95.143.192.35/~clients/version.php, ASN: 49770, Description: zeus/wsnpoem v2 drop zone 4e5dfb7449dda40f3d260af37f9320c9 http://www.malwaredomainlist.com/mdl.php?search=img95.lmagebucket.com Host: img95.lmagebucket.com/img/acomsw.jpg, IP address: 112.121.163.174, ASN: 45753, Description: trojan 104e9b46a664f49f0d85bd9d92f9bf08 http://www.malwaredomainlist.com/mdl.php?search=gerbalaif.com Host: gerbalaif.com/knok.php?id=SYSTEM!82536A52D9654DB!083C3353&ver=3&up=2732&, IP address: 91.213.174.9, ASN: 29106, Description: botnet C&C dfff9a8eec8cc8e1103ac3a967d139a4 http://www.malwaredomainlist.com/mdl.php?search=milzvortex.info Host: milzvortex.info/config.bin, IP address: 69.175.66.34, ASN: 32475, Description: zeus/wsnpoem v2 config file e88cbdbc7dddab97db7e88728cabaff5 http://www.malwaredomainlist.com/mdl.php?search=milzvortex.info Host: milzvortex.info/bot.exe, IP address: 69.175.66.34, ASN: 32475, Description: zeus/wsnpoem v2 trojan e699cbd0e5bcca9d0de469ab4b4b8e7e http://www.malwaredomainlist.com/mdl.php?search=milzvortex.info Host: milzvortex.info/gate.php, IP address: 69.175.66.34, ASN: 32475, Description: zeus/wsnpoem v2 drop zone e7f2b8c967a0134464a7a78badb6514e http://www.malwaredomainlist.com/mdl.php?search=papindos.info Host: papindos.info/checkVersions/database.dat, IP address: 85.12.46.7, ASN: 34305, Description: zeus/wsnpoem v2 config file a501e28e4ded3b980fd5b9b07599654b http://www.malwaredomainlist.com/mdl.php?search=papindos.info Host: papindos.info/expertAds/FileMirror.php, IP address: 85.12.46.7, ASN: 34305, Description: zeus/wsnpoem v2 drop zone f3ff8298b02d47da68965504d3f04445 http://www.malwaredomainlist.com/mdl.php?search=bestreportwas142.in Host: bestreportwas142.in/urrla/c1.bin, IP address: 188.124.3.225, ASN: 44565, Description: zeus/wsnpoem v2 config file 8a07f6fd645639bc2e5a5b28a87be1c8 http://www.malwaredomainlist.com/mdl.php?search=bestreportwas142.in Host: bestreportwas142.in/urrla/hey.php, IP address: 188.124.3.225, ASN: 44565, Description: zeus/wsnpoem v2 drop zone 1b1adb7ea08ed5f5042ef544fb110d5d http://www.malwaredomainlist.com/mdl.php?search=193.105.0.211 Host: -, IP address: 193.105.0.211/royalkingston.bin, ASN: 50390, Description: zeus/wsnpoem v2 config file 243da4cfdb0c8a146b312c915b15f855 http://www.malwaredomainlist.com/mdl.php?search=193.105.0.211 Host: -, IP address: 193.105.0.211/rtr89i7uyt.exe, ASN: 50390, Description: zeus/wsnpoem v2 trojan 301a3e9db0bde5830115c24d3ce3839a http://www.malwaredomainlist.com/mdl.php?search=193.105.0.211 Host: -, IP address: 193.105.0.211/njtrefg67i7.php, ASN: 50390, Description: zeus/wsnpoem v2 drop zone 4acbbc143d0290516c4a0ce175d90600 http://www.malwaredomainlist.com/mdl.php?search=usworldcast.com Host: usworldcast.com/100/cfg33.bin, IP address: 188.124.5.106, ASN: 44565, Description: zeus/wsnpoem v2 config file 92ff494d3710063aac40b58a02386dc7 http://www.malwaredomainlist.com/mdl.php?search=manyafa.com Host: manyafa.com/m0933/stat1.php, IP address: 188.124.5.118, ASN: 44565, Description: zeus/wsnpoem v2 drop zone 3fa90e26116d87d99b62c2c70554e356 http://www.malwaredomainlist.com/mdl.php?search=salebogs.com Host: salebogs.com/scn/022e0c0781be117a248ab0dd5002e7bd/0540f0d2bb566d0ed0d80150e2b728ef/f85b7b377112c272bc87f3e73f10508d, IP address: 213.163.65.2, ASN: 49544, Description: fake online Scanner 2b6d42a71bd0356af0448bf7668c749b http://www.malwaredomainlist.com/mdl.php?search=chephall.com Host: chephall.com/download/0540f0d2bb566d0ed0d80150e2b728ef/f85b7b377112c272bc87f3e73f10508d/4, IP address: 91.212.127.144, ASN: 49087, Description: trojan FakeSmoke 46bbaa9573b1201a1656ccebb8819956 http://www.malwaredomainlist.com/mdl.php?search=openaskelisto.com Host: openaskelisto.com/main1/open.gif, IP address: 85.12.46.22, ASN: 34305, Description: zeus/wsnpoem v2 config file 6eeb79325d0dc90a79a362c62968661b http://www.malwaredomainlist.com/mdl.php?search=podmena.us Host: podmena.us/1100_0005.exe, IP address: 69.65.40.26, ASN: 32181, Description: fake av 1c74b41e8f5ab4a3ce8b8ed1781a2412 http://www.malwaredomainlist.com/mdl.php?search=catsshow2online.info Host: catsshow2online.info/cln/?i_date=08-03-2010&aff_id=1&downloaded=&build_ver=2&os_ver=WIN_XP&debug=&fetches=0&cid=0xA594B3E11767F21050DE03DCB481E088, IP address: 94.228.219.189, ASN: 47869, Description: malware calls home b7a760c70fa850b956df5ce6f0fb0607 http://www.malwaredomainlist.com/mdl.php?search=www.cfdnf.com Host: www.cfdnf.com/md.exe, IP address: 61.147.99.83, ASN: 4134, Description: trojan c8f4c22b8e769d94620b52904b2e65cb http://www.malwaredomainlist.com/mdl.php?search=dwlmorss.dw.funpic.de Host: dwlmorss.dw.funpic.de/probot.exe, IP address: 213.202.225.53, ASN: 13301, Description: trojan Killav 8d147975dd8e36fff886f92e758e539f http://www.malwaredomainlist.com/mdl.php?search=saleotu.com Host: saleotu.com/get.php?id=1, IP address: 62.122.75.42, ASN: 5577, Description: trojan 84fc2e97e8a06f14e734a3d255e6cafc http://www.malwaredomainlist.com/mdl.php?search=www.978cf.com Host: www.978cf.com/fkz/yuyanzhe.exe, IP address: 61.155.170.30, ASN: 4134, Description: backdoor 81d51f669b4f6023349d9f78721a8c02 http://www.malwaredomainlist.com/mdl.php?search=www.scanerwhatever.cn Host: www.scanerwhatever.cn/page2/setup01, IP address: 91.212.132.8, ASN: 49091, Description: trojan TDSS b58641ff1a2b71c62bb7ecf1d49b24ec http://www.malwaredomainlist.com/mdl.php?search=gotsick.cn Host: gotsick.cn/css/_void/crcmds/main, IP address: 91.212.132.7, ASN: 49091, Description: malware calls home 0a6c229b1b3cf6bdc0d2496d5b24069d http://www.malwaredomainlist.com/mdl.php?search=gotsick.cn Host: gotsick.cn/css/_void/knock.php, IP address: 91.212.132.7, ASN: 49091, Description: malware calls home 5a73e0c655b29f86cf5270654f6be794 http://www.malwaredomainlist.com/mdl.php?search=gotsick.cn Host: gotsick.cn/css/_void/srcr.dat, IP address: 91.212.132.7, ASN: 49091, Description: malware calls home a39b1fc9b42448ae4eb012e352cbf3d3 http://www.malwaredomainlist.com/mdl.php?search=gotsick.cn Host: gotsick.cn/css/_void/crcmds/install, IP address: 91.212.132.7, ASN: 49091, Description: malware calls home d98c245c4a100a83ec49be9b44a31b56 http://www.malwaredomainlist.com/mdl.php?search=gotsick.cn Host: gotsick.cn/css/_void/crfiles/serf, IP address: 91.212.132.7, ASN: 49091, Description: malware calls home 3c5d9c667e45e7c7a6fffe2e27f8cc8b http://www.malwaredomainlist.com/mdl.php?search=gotsick.cn Host: gotsick.cn/css/_void/crcmds/builds/bbr, IP address: 91.212.132.7, ASN: 49091, Description: malware calls home 50e60fd9dcaef3e8b77c0e01f0fe05cf http://www.malwaredomainlist.com/mdl.php?search=gotsick.cn Host: gotsick.cn/css/_void/crfiles/bbr, IP address: 91.212.132.7, ASN: 49091, Description: malware calls home fb176a77f547a9e960cccb69f3a68d49 http://www.malwaredomainlist.com/mdl.php?search=gotsick.cn Host: gotsick.cn/css/_void/crcmds/extra, IP address: 91.212.132.7, ASN: 49091, Description: malware calls home e3ebec2389ceab2a4d86deb5e96dec0d http://www.malwaredomainlist.com/mdl.php?search=ackstone.com Host: ackstone.com/.sys/?getexe=v2captcha21.exe, IP address: 12.46.124.221, ASN: 7018, Description: Koobface f48c98cb0fd9bfcfe75c371f5620b8b3 http://www.malwaredomainlist.com/mdl.php?search=asiandvdtime.com Host: asiandvdtime.com/.sys/?getexe=v2captcha21.exe, IP address: 72.52.191.187, ASN: 32244, Description: Koobface 56bfe75eccf5fc5e0a250963664c2c01 http://www.malwaredomainlist.com/mdl.php?search=beautiteen.hostmaniacs.com Host: beautiteen.hostmaniacs.com/.sys/?getexe=v2captcha21.exe, IP address: 88.85.75.140, ASN: 35415, Description: Koobface 6ee3478ccf5730daddb6f671720c7e14 http://www.malwaredomainlist.com/mdl.php?search=cedelevator.com Host: cedelevator.com/.sys/?getexe=v2captcha21.exe, IP address: 64.71.33.74, ASN: 20401, Description: Koobface 3cd43d6055458d4fd78bccddcb56fd87 http://www.malwaredomainlist.com/mdl.php?search=comunicat-de-presa.ro Host: comunicat-de-presa.ro/.sys/?getexe=hosts2.exe, IP address: 89.42.216.60, ASN: 5606, Description: Koobface 535a9cdaf9838651b71ed5a44382d998 http://www.malwaredomainlist.com/mdl.php?search=ctsrmspos.com Host: ctsrmspos.com/.sys/?getexe=v2captcha21.exe, IP address: 216.177.193.194, ASN: 22364, Description: Koobface 77f3f0af587259e12d65caed3009b4e9 http://www.malwaredomainlist.com/mdl.php?search=daveshieldsphotography.com Host: daveshieldsphotography.com/.sys/?getexe=v2captcha21.exe, IP address: 64.71.33.197, ASN: 20401, Description: Koobface 93b884b67422ee64e50eacbbcca032e2 http://www.malwaredomainlist.com/mdl.php?search=derekmohr.com Host: derekmohr.com/.sys/?getexe=v2prx.exe, IP address: 207.150.212.89, ASN: 20401, Description: Koobface 469f326bff570878caea3ad464ac88b6 http://www.malwaredomainlist.com/mdl.php?search=dorothycooley.com Host: dorothycooley.com/.sys/?getexe=v2captcha21.exe, IP address: 67.139.134.203, ASN: 7385, Description: Koobface 0989a640a23e20009aad9cdb9a8402ef http://www.malwaredomainlist.com/mdl.php?search=elenailyina.com Host: elenailyina.com/.sys/?getexe=v2captcha21.exe, IP address: 213.189.197.30, ASN: 6903, Description: Koobface 7cf051da1101cd369ad03dd457409cd8 http://www.malwaredomainlist.com/mdl.php?search=fjdc.edu.pk Host: fjdc.edu.pk/.sys/?getexe=v2bloggerjs.exe, IP address: 208.93.192.2, ASN: 46562, Description: Koobface 2dba821e5177823607a27d2b920a9cb9 http://www.malwaredomainlist.com/mdl.php?search=fjdc.edu.pk Host: fjdc.edu.pk/.sys/?getexe=v2captcha21.exe, IP address: 208.93.192.2, ASN: 46562, Description: Koobface 89568034743d79dd45786578e7120480 http://www.malwaredomainlist.com/mdl.php?search=fjdc.edu.pk Host: fjdc.edu.pk/.sys/?getexe=v2newblogger.exe, IP address: 208.93.192.2, ASN: 46562, Description: Koobface 815b856b3d5e8c025b7b431909cb61c5 http://www.malwaredomainlist.com/mdl.php?search=frigologistics.nl Host: frigologistics.nl/.sys/?getexe=pp.14.exe, IP address: 193.93.174.152, ASN: 39700, Description: Koobface ba2f846da3a8d50035d812aab82e94dc http://www.malwaredomainlist.com/mdl.php?search=frigologistics.nl Host: frigologistics.nl/.sys/?getexe=v2captcha21.exe, IP address: 193.93.174.152, ASN: 39700, Description: Koobface 018721c13911ba377f9ac1af0306f82e http://www.malwaredomainlist.com/mdl.php?search=goldmaniac.com Host: goldmaniac.com/.sys/?getexe=v2bloggerjs.exe, IP address: 65.36.242.101, ASN: 20021, Description: Koobface f044adff7a400eebb3148d40ee085ebb http://www.malwaredomainlist.com/mdl.php?search=goldmaniac.com Host: goldmaniac.com/.sys/?getexe=v2captcha21.exe, IP address: 65.36.242.101, ASN: 20021, Description: Koobface 04a36c63de726bc4f1799e433a74136d http://www.malwaredomainlist.com/mdl.php?search=goldmaniac.com Host: goldmaniac.com/.sys/?getexe=v2newblogger.exe, IP address: 65.36.242.101, ASN: 20021, Description: Koobface d0ea0e3af3e9679d4c3ba7358befb8ba http://www.malwaredomainlist.com/mdl.php?search=goninja.fastlearningbrain.com Host: goninja.fastlearningbrain.com/.sys/?getexe=v2captcha21.exe, IP address: 174.137.158.10, ASN: 27257, Description: Koobface c7b176dc09354f0bb7e22aecb9b6d6b5 http://www.malwaredomainlist.com/mdl.php?search=greystoneofellijay.com Host: greystoneofellijay.com/.sys/?getexe=v2captcha21.exe, IP address: 198.92.147.210, ASN: 3356, Description: Koobface 2b3331ed282f8b3490ee0877a109b503 http://www.malwaredomainlist.com/mdl.php?search=inartdesigns.com Host: inartdesigns.com/.sys/?getexe=v2captcha21.exe, IP address: 67.227.177.47, ASN: 32244, Description: Koobface 07268bb9f33ec66b8f89e0f327cbc0e7 http://www.malwaredomainlist.com/mdl.php?search=internethosting.sg Host: internethosting.sg/.sys/?getexe=v2captcha21.exe, IP address: 203.211.140.165, ASN: 17547, Description: Koobface f70b69b8d7b169fc338dbf73a4218e84 http://www.malwaredomainlist.com/mdl.php?search=keeplan.com Host: keeplan.com/.sys/?getexe=v2captcha21.exe, IP address: 64.71.33.35, ASN: 20401, Description: Koobface 591b60bae495e4053f8ec97324fbe44d http://www.malwaredomainlist.com/mdl.php?search=leonardandself.com Host: leonardandself.com/.sys/?getexe=v2captcha21.exe, IP address: 216.180.225.10, ASN: 3595, Description: Koobface 6cef931e929b5780977a0d4f189051f6 http://www.malwaredomainlist.com/mdl.php?search=leonardandself.com Host: leonardandself.com/.sys/?getexe=v2captcha21.exe, IP address: 216.180.225.10, ASN: 3595, Description: Koobface 6cef931e929b5780977a0d4f189051f6 http://www.malwaredomainlist.com/mdl.php?search=mad-i-bevaegelse.dk Host: mad-i-bevaegelse.dk/.sys/?getexe=pp.14.exe, IP address: 194.192.14.146, ASN: 3292, Description: Koobface 5d110f2fae1f2918d50cf6e909c7c442 http://www.malwaredomainlist.com/mdl.php?search=mad-i-bevaegelse.dk Host: mad-i-bevaegelse.dk/.sys/?getexe=v2bloggerjs.exe, IP address: 194.192.14.146, ASN: 3292, Description: Koobface 25c6e26afb180acb2de8cc8c8073e1b5 http://www.malwaredomainlist.com/mdl.php?search=mad-i-bevaegelse.dk Host: mad-i-bevaegelse.dk/.sys/?getexe=v2captcha21.exe, IP address: 194.192.14.146, ASN: 3292, Description: Koobface 51b9251d103f5c2550e2b585785937de http://www.malwaredomainlist.com/mdl.php?search=mad-i-bevaegelse.dk Host: mad-i-bevaegelse.dk/.sys/?getexe=v2newblogger.exe, IP address: 194.192.14.146, ASN: 3292, Description: Koobface a9509124f2be93dadfb4f54da570ccca http://www.malwaredomainlist.com/mdl.php?search=mahjongmuseum.com Host: mahjongmuseum.com/.sys/?getexe=v2captcha21.exe, IP address: 207.217.125.50, ASN: 4355, Description: Koobface ad2f13826ce3013d7d021c67796d4e8d http://www.malwaredomainlist.com/mdl.php?search=mkmohanty.com Host: mkmohanty.com/.sys/?getexe=v2captcha21.exe, IP address: 174.37.216.1, ASN: 36351, Description: Koobface 63d2e7fd1a1156592c3b608a70a6e828 http://www.malwaredomainlist.com/mdl.php?search=mohammedistechnologies.com Host: mohammedistechnologies.com/.sys/?getexe=v2captcha21.exe, IP address: 91.186.25.40, ASN: 29550, Description: Koobface 78242fb6f45b1ed6dd276a1291d4880d http://www.malwaredomainlist.com/mdl.php?search=musthaveitjewelry.com.mytempweb.com Host: musthaveitjewelry.com.mytempweb.com/.sys/?getexe=v2captcha21.exe, IP address: 66.252.239.235, ASN: 14519, Description: Koobface 89cc3b066d8b897ac842a2d52cb217b4 http://www.malwaredomainlist.com/mdl.php?search=mycleveridea.co.za Host: mycleveridea.co.za/.sys/?getexe=v2captcha21.exe, IP address: 72.9.250.162, ASN: 3595, Description: Koobface 9fa78e083c5805d5171249353a24def9 http://www.malwaredomainlist.com/mdl.php?search=qatar-business-guide.net Host: qatar-business-guide.net/.sys/?getexe=v2captcha21.exe, IP address: 94.102.219.71, ASN: 41078, Description: Koobface 7c4bc2263cb7239dd30630bef0b6a123 http://www.malwaredomainlist.com/mdl.php?search=reishus.de Host: reishus.de/.sys/?getexe=loader.exe, IP address: 212.12.112.25, ASN: 12595, Description: Koobface 863dbf1a27652b43e349c893ba58f26a http://www.malwaredomainlist.com/mdl.php?search=reishus.de Host: reishus.de/.sys/?getexe=v2captcha21.exe, IP address: 212.12.112.25, ASN: 12595, Description: Koobface f6ecf4fc91de69b7bb58bf4ca13e7fe3 http://www.malwaredomainlist.com/mdl.php?search=ritmotours.com.tr Host: ritmotours.com.tr/.sys/?getexe=v2captcha21.exe, IP address: 89.106.12.55, ASN: 39582, Description: Koobface e45bc1c77d73908eed9dc22477a5ce2b http://www.malwaredomainlist.com/mdl.php?search=roomservicedesign.com.au Host: roomservicedesign.com.au/.sys/?getexe=pp.14.exe, IP address: 122.201.80.95, ASN: 9512, Description: Koobface 486d8edca3b7aea85b66166013057904 http://www.malwaredomainlist.com/mdl.php?search=roomservicedesign.com.au Host: roomservicedesign.com.au/.sys/?getexe=pp.14.exe, IP address: 122.201.80.95, ASN: 9512, Description: Koobface 486d8edca3b7aea85b66166013057904 http://www.malwaredomainlist.com/mdl.php?search=roomservicedesign.com.au Host: roomservicedesign.com.au/.sys/?getexe=v2captcha21.exe, IP address: 122.201.80.95, ASN: 9512, Description: Koobface 5ed02eba3aac63c711891db44e9da2c7 http://www.malwaredomainlist.com/mdl.php?search=skybluephoto.com Host: skybluephoto.com/.sys/?getexe=loader.exe, IP address: 8.21.33.134, ASN: 14112, Description: Koobface 7a4817dea601f4c155925fd853688140 http://www.malwaredomainlist.com/mdl.php?search=skybluephoto.com Host: skybluephoto.com/.sys/?getexe=v2captcha21.exe, IP address: 8.21.33.134, ASN: 14112, Description: Koobface 7d82a782ebb23e732f5f875c8da0c42c http://www.malwaredomainlist.com/mdl.php?search=skybluephoto.com Host: skybluephoto.com/.sys/?getexe=v2captcha21.exe, IP address: 8.21.33.134, ASN: 14112, Description: Koobface 7d82a782ebb23e732f5f875c8da0c42c http://www.malwaredomainlist.com/mdl.php?search=strictlydetail.co.uk Host: strictlydetail.co.uk/.sys/?getexe=pp.14.exe, IP address: 88.208.252.192, ASN: 15418, Description: Koobface 552a7e4f115a642c25ed892ca0014f7a http://www.malwaredomainlist.com/mdl.php?search=strictlydetail.co.uk Host: strictlydetail.co.uk/.sys/?getexe=v2captcha21.exe, IP address: 88.208.252.192, ASN: 15418, Description: Koobface 5c60c73f197a7293d6e387a7e94c34aa http://www.malwaredomainlist.com/mdl.php?search=tinytanks.net Host: tinytanks.net/.sys/?getexe=pp.14.exe, IP address: 66.7.206.75, ASN: 33182, Description: Koobface 1b753247a3cee6e35e8c6a697784c0ec http://www.malwaredomainlist.com/mdl.php?search=tinytanks.net Host: tinytanks.net/.sys/?getexe=v2captcha21.exe, IP address: 66.7.206.75, ASN: 33182, Description: Koobface 020c97c080686701533d051fbbaa41b7 http://www.malwaredomainlist.com/mdl.php?search=tinytanks.net Host: tinytanks.net/.sys/?getexe=v2prx.exe, IP address: 66.7.206.75, ASN: 33182, Description: Koobface 0cc0bea8119ba7368a2b23087796f5f3 http://www.malwaredomainlist.com/mdl.php?search=troytabor.com Host: troytabor.com/.sys/?getexe=v2captcha21.exe, IP address: 66.96.146.81, ASN: 29873, Description: Koobface f3c15645ba66337ed00b2a7cdafb3554 http://www.malwaredomainlist.com/mdl.php?search=troytabor.com Host: troytabor.com/.sys/?getexe=v2prx.exe, IP address: 66.96.146.81, ASN: 29873, Description: Koobface f929af8a7b3c0ec9bacb151940c16df3 http://www.malwaredomainlist.com/mdl.php?search=undercoversquilting.com Host: undercoversquilting.com/.sys/?getexe=pp.14.exe, IP address: 209.132.201.41, ASN: 36066, Description: Koobface e7805a94f893039e2690fd6127ce8a58 http://www.malwaredomainlist.com/mdl.php?search=undercoversquilting.com Host: undercoversquilting.com/.sys/?getexe=v2bloggerjs.exe, IP address: 209.132.201.41, ASN: 36066, Description: Koobface d98e19d32a63a444d6665cf5868a2a19 http://www.malwaredomainlist.com/mdl.php?search=undercoversquilting.com Host: undercoversquilting.com/.sys/?getexe=v2captcha21.exe, IP address: 209.132.201.41, ASN: 36066, Description: Koobface ab5065b32ea4d891aa97e3b59792606b http://www.malwaredomainlist.com/mdl.php?search=undercoversquilting.com Host: undercoversquilting.com/.sys/?getexe=v2newblogger.exe, IP address: 209.132.201.41, ASN: 36066, Description: Koobface 69de6d6d53efe2fddb9313f82081c1f2 http://www.malwaredomainlist.com/mdl.php?search=vivicohen.com.ar Host: vivicohen.com.ar/.sys/?getexe=v2captcha21.exe, IP address: 200.62.54.122, ASN: 18747, Description: Koobface ae6e63fc7523054583ddb31f942587bc http://www.malwaredomainlist.com/mdl.php?search=whyviral.com Host: whyviral.com/.sys/?getexe=v2captcha21.exe, IP address: 12.68.140.207, ASN: 46549, Description: Koobface 1395117de23f49783465dea27cc30bb5 http://www.malwaredomainlist.com/mdl.php?search=www.bastakigroup.com Host: www.bastakigroup.com/.sys/?getexe=v2captcha21.exe, IP address: 66.223.111.166, ASN: 11305, Description: Koobface b7c516d02c5ace8333377e7ea201cf88 http://www.malwaredomainlist.com/mdl.php?search=www.chateaudecoisse.com Host: www.chateaudecoisse.com/.sys/?getexe=v2captcha21.exe, IP address: 207.150.212.12, ASN: 20401, Description: Koobface 1a1676bf7017ff48a1d636b4ffaac5d3 http://www.malwaredomainlist.com/mdl.php?search=www.comunicat-de-presa.ro Host: www.comunicat-de-presa.ro/.sys/?getexe=v2captcha21.exe, IP address: 89.42.216.60, ASN: 5606, Description: Koobface d8dc57b41c1d0af4cb712b7fc27be0cb http://www.malwaredomainlist.com/mdl.php?search=www.derekmohr.com Host: www.derekmohr.com/.sys/?getexe=v2captcha21.exe, IP address: 207.150.212.89, ASN: 20401, Description: Koobface 60c8fb0e0b5ad81bd17e2d5c2fc542b2 http://www.malwaredomainlist.com/mdl.php?search=www.eom.it Host: www.eom.it/.sys/?getexe=v2captcha21.exe, IP address: 195.225.236.90, ASN: 31239, Description: Koobface 455d57cb7a60f5eb3ccc8d61e03de2ee http://www.malwaredomainlist.com/mdl.php?search=www.fivestar.ch Host: www.fivestar.ch/.sys/?getexe=v2captcha21.exe, IP address: 77.72.71.43, ASN: 8404, Description: Koobface 509af3e1ed8935694671111e6d77e077 http://www.malwaredomainlist.com/mdl.php?search=www.its-email.co.uk Host: www.its-email.co.uk/.sys/?getexe=v2bloggerjs.exe, IP address: 81.201.129.126, ASN: 8553, Description: Koobface 2c18d2dfd84489e438fae7cea2059307 http://www.malwaredomainlist.com/mdl.php?search=www.its-email.co.uk Host: www.its-email.co.uk/.sys/?getexe=v2captcha21.exe, IP address: 81.201.129.126, ASN: 8553, Description: Koobface e0252bbf95972ba52152ddd84dbb6f02 http://www.malwaredomainlist.com/mdl.php?search=www.nautiqa.com.sg Host: www.nautiqa.com.sg/.sys/?getexe=v2bloggerjs.exe, IP address: 203.116.95.196, ASN: 4657, Description: Koobface e1b7bb9d58fd3c2a2d541dd263e2ca09 http://www.malwaredomainlist.com/mdl.php?search=www.nautiqa.com.sg Host: www.nautiqa.com.sg/.sys/?getexe=v2captcha21.exe, IP address: 203.116.95.196, ASN: 4657, Description: Koobface 2046ac4eac4e7ac41a9f66083f2601c8 http://www.malwaredomainlist.com/mdl.php?search=www.pwsd1pc.org Host: www.pwsd1pc.org/.sys/?getexe=v2captcha21.exe, IP address: 207.192.234.27, ASN: 33165, Description: Koobface 894da9de959ce8dea904c6c32b007713 http://www.malwaredomainlist.com/mdl.php?search=www.vallesina.tv Host: www.vallesina.tv/.sys/?getexe=v2captcha21.exe, IP address: 195.225.168.238, ASN: 31034, Description: Koobface 50cba9e6f0c80ac4de3f5cceeacab93e http://www.malwaredomainlist.com/mdl.php?search=zihabit.com Host: zihabit.com/.sys/?getexe=v2captcha21.exe, IP address: 208.87.242.66, ASN: 40676, Description: Koobface 96c3f99d52dfe6cfd7faf95740c8bc9e http://www.malwaredomainlist.com/mdl.php?search=aa419.ru Host: aa419.ru/doc2.doc, IP address: 85.12.24.16, ASN: 34305, Description: zeus/wsnpoem v2 config file d28ca29d37a65631c665b6c8dfed52e0 http://www.malwaredomainlist.com/mdl.php?search=austinme.com Host: austinme.com/media/23/cfg.bin, IP address: 74.208.10.2, ASN: 8560, Description: zeus/wsnpoem v2 config file b06938924619971de7b655ce983e5c9a http://www.malwaredomainlist.com/mdl.php?search=www.grahamscaner.cn Host: www.grahamscaner.cn/page2/setup01, IP address: 193.169.234.31, ASN: 32181, Description: trojan TDSS b03c6a7b9d52846143df3acd32d035a0 http://www.malwaredomainlist.com/mdl.php?search=www.grahamscaner.cn Host: www.grahamscaner.cn/page2/setup, IP address: 193.169.234.31, ASN: 32181, Description: trojan TDSS 3b91dc0115c6d729ae05443e7ce156fd http://www.malwaredomainlist.com/mdl.php?search=www.stationsecurity.com Host: www.stationsecurity.com/page2/setup01, IP address: 91.212.127.86, ASN: 49087, Description: trojan TDSS 5bc46bcc55d3010c6301d238fc86fb73 http://www.malwaredomainlist.com/mdl.php?search=findreliable.org Host: findreliable.org/css/_void/crcmds/main, IP address: 92.48.91.147, ASN: 29550, Description: malware calls home 650957b76e2fcf2db98a7367bab5252c http://www.malwaredomainlist.com/mdl.php?search=greatuk.org Host: greatuk.org/tt/cfg/config.bin, IP address: 193.104.22.100, ASN: 34305, Description: zeus/wsnpoem v2 config file 4fdf9d90fcf353d8d7334e3fe11faacd http://www.malwaredomainlist.com/mdl.php?search=www.stationsecurity.com Host: www.stationsecurity.com/page2/setup, IP address: 91.212.127.86, ASN: 49087, Description: trojan TDSS a4e2b3b396bbbec30f942a4e7b08c667 http://www.malwaredomainlist.com/mdl.php?search=thundhack7.ref-host.com Host: thundhack7.ref-host.com/cfg.bin, IP address: 93.174.93.11, ASN: 29073, Description: zeus/wsnpoem v2 config file 604a6362cd085c780606969adca5e4c2 http://www.malwaredomainlist.com/mdl.php?search=thundhack7.ref-host.com Host: thundhack7.ref-host.com/gate.php, IP address: 93.174.93.11, ASN: 29073, Description: zeus/wsnpoem v2 drop zone 587644f555578dc718a8db6dbc47ad12 http://www.malwaredomainlist.com/mdl.php?search=thundhack7.ref-host.com Host: thundhack7.ref-host.com/bt.exe, IP address: 93.174.93.11, ASN: 29073, Description: zeus/wsnpoem v2 trojan e3345e16de67ad617e5e44012684a48e http://www.malwaredomainlist.com/mdl.php?search=195.242.161.111 Host: -, IP address: 195.242.161.111/~chetir/chet/bm.png, ASN: 47434, Description: zeus/wsnpoem v2 config file ebcccb1051c5fc3b0a3d8e0d59b9715c http://www.malwaredomainlist.com/mdl.php?search=91.201.196.37 Host: -, IP address: 91.201.196.37/ahGi5E.weoG3e, ASN: 42229, Description: zeus/wsnpoem v2 config file 50e0d2e3a0a58334b3ae65831918feda http://www.malwaredomainlist.com/mdl.php?search=91.201.196.37 Host: -, IP address: 91.201.196.37/mai9Oo.exe, ASN: 42229, Description: zeus/wsnpoem v2 trojan 166ff645b520ab955c3abca17a058f2f http://www.malwaredomainlist.com/mdl.php?search=91.201.196.38 Host: -, IP address: 91.201.196.38/ahGi5E.weoG3e, ASN: 42229, Description: zeus/wsnpoem v2 config file 698df27c557f9e5b83937767e6431c50 http://www.malwaredomainlist.com/mdl.php?search=91.201.196.76 Host: -, IP address: 91.201.196.76/eiH8zi.Nai9ee, ASN: 42229, Description: zeus/wsnpoem v2 config file 8fd7fcb36c1f81bf7a677eb0a9450f5b http://www.malwaredomainlist.com/mdl.php?search=91.201.196.76 Host: -, IP address: 91.201.196.76/Hoo0Ae.exe, ASN: 42229, Description: zeus/wsnpoem v2 trojan 9893baa7fefdd541d80339baf00e1589 http://www.malwaredomainlist.com/mdl.php?search=91.201.196.76 Host: -, IP address: 91.201.196.76/Iet4uh.exe, ASN: 42229, Description: zeus/wsnpoem v2 trojan c4ca211863a00f258d09d66339f271b0 http://www.malwaredomainlist.com/mdl.php?search=91.201.196.76 Host: -, IP address: 91.201.196.76/IWool8.OoN7ze, ASN: 42229, Description: zeus/wsnpoem v2 config file d2f637234c29d9daed4f09e0fc69002e http://www.malwaredomainlist.com/mdl.php?search=91.201.196.76 Host: -, IP address: 91.201.196.76/kee3aC.aey5Ch, ASN: 42229, Description: zeus/wsnpoem v2 config file a9513a73ff3f3ca0a5b6288632f980ba http://www.malwaredomainlist.com/mdl.php?search=91.201.196.76 Host: -, IP address: 91.201.196.76/Kohke1.exe, ASN: 42229, Description: zeus/wsnpoem v2 trojan d5708b10dff2ebae2c2c44fb4a94636f http://www.malwaredomainlist.com/mdl.php?search=91.201.196.77 Host: -, IP address: 91.201.196.77/eiH8zi.Nai9ee, ASN: 42229, Description: zeus/wsnpoem v2 config file 00c11eee6c27369d377f296db5351330 http://www.malwaredomainlist.com/mdl.php?search=91.201.196.77 Host: -, IP address: 91.201.196.77/IWool8.OoN7ze, ASN: 42229, Description: zeus/wsnpoem v2 config file 77701924c32988b0be9763e228a025dc http://www.malwaredomainlist.com/mdl.php?search=91.201.196.77 Host: -, IP address: 91.201.196.77/kee3aC.aey5Ch, ASN: 42229, Description: zeus/wsnpoem v2 config file 4b242ad00935b50dd77fd5ba1671745d http://www.malwaredomainlist.com/mdl.php?search=95.143.192.35 Host: -, IP address: 95.143.192.35/~clients/c/o/compliteOS.bin, ASN: 49770, Description: zeus/wsnpoem v2 config file c60a8278fefb0a3e39327dc9617ca34e http://www.malwaredomainlist.com/mdl.php?search=95.143.192.35 Host: -, IP address: 95.143.192.35/~clients/m/s/msi32.exe, ASN: 49770, Description: zeus/wsnpoem v2 trojan 288433251187f5fc606063e3d0f7ad27 http://www.malwaredomainlist.com/mdl.php?search=aaa419.com Host: aaa419.com/vv12218/calc.exe, IP address: 61.4.82.249, ASN: 17964, Description: zeus/wsnpoem v2 trojan 5f257930225076b877530dd5cd3d7bac http://www.malwaredomainlist.com/mdl.php?search=blacktraf.su Host: blacktraf.su/zevs/bot.exe, IP address: 122.115.63.24, ASN: 9803, Description: zeus/wsnpoem v2 trojan e748b0ad48b799b290d2d9b644e2a13c http://www.malwaredomainlist.com/mdl.php?search=blacktraf.su Host: blacktraf.su/zevs/cfg.bin, IP address: 122.115.63.24, ASN: 9803, Description: zeus/wsnpoem v2 config file f2b503605351a7fbca23a5edc40c2635 http://www.malwaredomainlist.com/mdl.php?search=cargounioninc.com Host: cargounioninc.com/digit_alianse/ttt_makkopolo/GXzinExUBZDA8.bin, IP address: 59.53.91.102, ASN: 4134, Description: zeus/wsnpoem v2 config file 39084a6a5fe34e9d0aa5e43979a6c64c http://www.malwaredomainlist.com/mdl.php?search=centryfag.com Host: centryfag.com/error/header.png, IP address: 216.12.207.250, ASN: 21844, Description: zeus/wsnpoem v2 config file e35155cff56b5d19458c6b433b07b521 http://www.malwaredomainlist.com/mdl.php?search=ioretiop.com Host: ioretiop.com/oy/o/vs.bin, IP address: 122.115.63.30, ASN: 9803, Description: zeus/wsnpoem v2 config file 4e01370c95df322471dce10ffeafe116 http://www.malwaredomainlist.com/mdl.php?search=logislat.com Host: logislat.com/zs/bot.exe, IP address: 115.100.250.105, ASN: 9803, Description: zeus/wsnpoem v2 trojan d5e55db3566ebe7f21a081918a431dd3 http://www.malwaredomainlist.com/mdl.php?search=lopokerasandco.hk Host: lopokerasandco.hk/files/a.out, IP address: 91.212.41.89, ASN: 29371, Description: zeus/wsnpoem v2 config file 10d907c8c9681136f528f988f45923c8 http://www.malwaredomainlist.com/mdl.php?search=narkyl.com Host: narkyl.com/404/db_arch_01.exe, IP address: 198.66.210.22, ASN: 2914, Description: zeus/wsnpoem v2 trojan aa84eb8164c60c1e7b4e9b79872af977 http://www.malwaredomainlist.com/mdl.php?search=narkyl.com Host: narkyl.com/404/header.png, IP address: 198.66.210.22, ASN: 2914, Description: zeus/wsnpoem v2 config file 9fe2aef0072bb217cb6dc234c45a63cb http://www.malwaredomainlist.com/mdl.php?search=olypoos.com Host: olypoos.com/123/cgi-bin/config.bin, IP address: 115.100.250.105, ASN: 9803, Description: zeus/wsnpoem v2 config file 52a400899b67ae69ecaf521ac916c6a2 http://www.malwaredomainlist.com/mdl.php?search=socks5.real-host.ru Host: socks5.real-host.ru/admins/535345345435535.bin, IP address: 92.60.176.41, ASN: 15772, Description: zeus/wsnpoem v2 config file 3dc6bcdb2796975d9306a505de242915 http://www.malwaredomainlist.com/mdl.php?search=socks5.real-host.ru Host: socks5.real-host.ru/admins/update.exe, IP address: 92.60.176.41, ASN: 15772, Description: zeus/wsnpoem v2 trojan 53af1e1f25a1a1d01dffa73961df0158 http://www.malwaredomainlist.com/mdl.php?search=umor.sumy.ua Host: umor.sumy.ua/lx.cfg, IP address: 66.197.160.245, ASN: 21788, Description: zeus/wsnpoem v2 config file d5d85ca8314914d1b96b4cf3a516504d http://www.malwaredomainlist.com/mdl.php?search=www.google-statistics-uk.com Host: www.google-statistics-uk.com/Y5v20t6Fdw7t3uT.bin, IP address: 61.4.82.216, ASN: 17964, Description: zeus/wsnpoem v2 config file c5046c3430ca53503902e1a26600b337 http://www.malwaredomainlist.com/mdl.php?search=z.sunbon.net Host: z.sunbon.net/gate.php, IP address: 119.42.150.43, ASN: 45753, Description: zeus/wsnpoem v2 drop zone e391e2bf96e38cb3e9ac5d2eca1a0c1b http://www.malwaredomainlist.com/mdl.php?search=z.sunbon.net Host: z.sunbon.net/z.exe, IP address: 119.42.150.43, ASN: 45753, Description: zeus/wsnpoem v2 trojan fabfae5f7f67d57446b00f094e383949 http://www.malwaredomainlist.com/mdl.php?search=z.sunbon.net Host: z.sunbon.net/z/cfg.bin, IP address: 119.42.150.43, ASN: 45753, Description: zeus/wsnpoem v2 config file 34714f73d5344ac95cfbe112dfacd3ea http://www.malwaredomainlist.com/mdl.php?search=findreliable.org Host: findreliable.org/css/_void/knock.php, IP address: 92.48.91.147, ASN: 29550, Description: malware calls home ef1882402f2be1473477fc1ca85ce71a http://www.malwaredomainlist.com/mdl.php?search=findreliable.org Host: findreliable.org/css/_void/srcr.dat, IP address: 92.48.91.147, ASN: 29550, Description: malware calls home c566c0fee983212ed2a696b639826f8f http://www.malwaredomainlist.com/mdl.php?search=findreliable.org Host: findreliable.org/css/_void/crcmds/install, IP address: 92.48.91.147, ASN: 29550, Description: malware calls home 69b0427bf7b073025b9bb349990937d6 http://www.malwaredomainlist.com/mdl.php?search=findreliable.org Host: findreliable.org/css/_void/crfiles/serf, IP address: 92.48.91.147, ASN: 29550, Description: malware calls home 19bde751a2bc653437fd05be807372ed http://www.malwaredomainlist.com/mdl.php?search=findreliable.org Host: findreliable.org/css/_void/crcmds/builds/bbr, IP address: 92.48.91.147, ASN: 29550, Description: malware calls home f678df6796d2cc52cc3525e5eb8f8776 http://www.malwaredomainlist.com/mdl.php?search=findreliable.org Host: findreliable.org/css/_void/crfiles/bbr, IP address: 92.48.91.147, ASN: 29550, Description: malware calls home d6e331f1596c0a9293d4e57d6982233e http://www.malwaredomainlist.com/mdl.php?search=findreliable.org Host: findreliable.org/css/_void/crcmds/extra, IP address: 92.48.91.147, ASN: 29550, Description: malware calls home 971552675c7f828b31fae14e352adaad http://www.malwaredomainlist.com/mdl.php?search=188.124.15.228 Host: -, IP address: 188.124.15.228/sw/8654/03010/0/4b9b3fc6-c42b-3fc6-3fc6-36710fa08b69/e6bb2271-a00e-4d35-b148-2c503fd58837/x.dat, ASN: 44565, Description: - b42db8bbf4080dcd4944ddd1ba1bf104 http://www.malwaredomainlist.com/mdl.php?search=abc.ispesk.com Host: abc.ispesk.com/a3.exe, IP address: 98.126.132.252, ASN: 4213, Description: Adware Cinmus bc6ae38b063032112324806e0a067ee4 http://www.malwaredomainlist.com/mdl.php?search=abc.ispesk.com Host: abc.ispesk.com/a4.exe, IP address: 98.126.132.252, ASN: 4213, Description: Adware Cinmus 81e295c7772d367434eab31f8150cf53 http://www.malwaredomainlist.com/mdl.php?search=abc.ispesk.com Host: abc.ispesk.com/a5.exe, IP address: 98.126.132.252, ASN: 4213, Description: trojan db8156e823393cd175b15c388cb544c7 http://www.malwaredomainlist.com/mdl.php?search=abc.ispesk.com Host: abc.ispesk.com/a7.exe, IP address: 98.126.132.252, ASN: 4213, Description: trojan downloader Saffle ac4f4ed6b0a4dac2896a5e2303b6b2c7 http://www.malwaredomainlist.com/mdl.php?search=abc.ispesk.com Host: abc.ispesk.com/a8.exe, IP address: 98.126.132.252, ASN: 4213, Description: trojan OnlinesGames 03c9e223646f685f070604c4867b1a6f http://www.malwaredomainlist.com/mdl.php?search=abc.ispesk.com Host: abc.ispesk.com/a9.exe, IP address: 98.126.132.252, ASN: 4213, Description: Adware Rugo d1a226f487b9bb67af896a0904454209 http://www.malwaredomainlist.com/mdl.php?search=abc.ispesk.com Host: abc.ispesk.com/a10.exe, IP address: 98.126.132.252, ASN: 4213, Description: trojan 1d2aa6378c3c87a57ce843372580af53 http://www.malwaredomainlist.com/mdl.php?search=abc.ispesk.com Host: abc.ispesk.com/a11.exe, IP address: 98.126.132.252, ASN: 4213, Description: trojan OnlinesGames 04e41166dac419d1a2f10a37e4504898 http://www.malwaredomainlist.com/mdl.php?search=abc.ispesk.com Host: abc.ispesk.com/a12.exe, IP address: 98.126.132.252, ASN: 4213, Description: trojan downloader b9561c7815a0f3fb246d680613b97229 http://www.malwaredomainlist.com/mdl.php?search=abc.ispesk.com Host: abc.ispesk.com/tjn/2.exe, IP address: 98.126.132.252, ASN: 4213, Description: backdoor 1a5d63f24ce9d03e163976437c0dccde http://www.malwaredomainlist.com/mdl.php?search=dd6s.zhuhc.cn:62518 Host: dd6s.zhuhc.cn:62518/jqk8.exe, IP address: 219.235.3.13, ASN: 4812, Description: trojan dropper Wansrog 5339e01f4137060a4217e15e0f6ee41a http://www.malwaredomainlist.com/mdl.php?search=dd6s.zhuhc.cn:62518 Host: dd6s.zhuhc.cn:62518/ken12.exe, IP address: 219.235.3.13, ASN: 4812, Description: trojan downloader Liwak c0a20a15ec5bcd3ca774a3c533a35cb5 http://www.malwaredomainlist.com/mdl.php?search=ceffincf.com Host: ceffincf.com/fuama/show.php, IP address: 93.186.127.211, ASN: 44565, Description: Fragus exploit kit c535771f2978896ed3afc017dd8e905e http://www.malwaredomainlist.com/mdl.php?search=ceffincf.com Host: ceffincf.com/fuama/admin.php, IP address: 93.186.127.211, ASN: 44565, Description: control panel of Fragus exploit kit 902ae4c5e8c70e87bb6878c1476acb16 http://www.malwaredomainlist.com/mdl.php?search=ceffincf.com Host: ceffincf.com/fuama/load.php?e=1, IP address: 93.186.127.211, ASN: 44565, Description: bot 1710168818e94c675f168892b5513f9b http://www.malwaredomainlist.com/mdl.php?search=mennlyndy.com Host: mennlyndy.com/mendus/gate.php?magic=103410350001&ox=2-5-1-2600&tm=5&id=55167822&cache=2835167791&N=0, IP address: 93.186.127.238, ASN: 44565, Description: malware calls home 9f2f3c56a2ef53730cb302a9c09fa608 http://www.malwaredomainlist.com/mdl.php?search=adpool-3.com Host: adpool-3.com/cgi-bin/npr/web/t_new.cgi?magic=103457470000;ox=2-5-1-2600;tm=60&id=-1&cache=1334208256, IP address: 93.190.137.98, ASN: 49981, Description: malware calls home f5f8f8a6b05b11ab3504a0b76ed23252 http://www.malwaredomainlist.com/mdl.php?search=globalhead.net Host: globalhead.net/besvchst.exe, IP address: 74.127.7.8, ASN: 7393, Description: trojan d389e410b62669f1cbc4d7bad76eb9d4 http://www.malwaredomainlist.com/mdl.php?search=clipplaces.com Host: clipplaces.com/file.exe, IP address: 91.201.28.58, ASN: 44107, Description: trojan 3449a4f246f88d5c5a5f19084010a004 http://www.malwaredomainlist.com/mdl.php?search=horovod.in Host: horovod.in/soft/exe/severa.exe, IP address: 188.124.16.18, ASN: 44565, Description: fake av downloader 6c517251cdcb9561ba99a47d74d61967 http://www.malwaredomainlist.com/mdl.php?search=95.143.192.161 Host: -, IP address: 95.143.192.161/phpen_hfkqkepaa.exe, ASN: 49770, Description: fake av ffa5258ab6637bdb6ea0bfe8db5f118e http://www.malwaredomainlist.com/mdl.php?search=i-want-u.ru Host: i-want-u.ru/cgi-bin/click, IP address: 68.232.188.180, ASN: 20473, Description: NeoSploit 5011faff0c4ef4c0b12108ab31c68cf4 http://www.malwaredomainlist.com/mdl.php?search=rezervzv.ru Host: rezervzv.ru/ele/index.php, IP address: 193.200.255.10, ASN: 25456, Description: Eleonore Exploits pack v1.2 2110c123c5dda951ff96d07d5ed355ed http://www.malwaredomainlist.com/mdl.php?search=rezervzv.ru Host: rezervzv.ru/ele/stat.php, IP address: 193.200.255.10, ASN: 25456, Description: control panel of Eleonore Exploits pack v1.2 e7712796ccacf89ad61bec1a44212fce http://www.malwaredomainlist.com/mdl.php?search=rezervzv.ru Host: rezervzv.ru/ele/getexe.php?spl=mdac, IP address: 193.200.255.10, ASN: 25456, Description: zeus/wsnpoem v2 trojan 3726a04375c7cf400a69405b9bdf6de7 http://www.malwaredomainlist.com/mdl.php?search=tagbuckets.com Host: tagbuckets.com/qwerty.exe, IP address: 91.201.28.58, ASN: 44107, Description: trojan 7d0b6241243d9086ec901a1d75f2d8de http://www.malwaredomainlist.com/mdl.php?search=unlockers122.info Host: unlockers122.info/ata.exe, IP address: 74.208.210.240, ASN: 8560, Description: zeus/wsnpoem v2 trojan 5e512cca5dbd50e2613de81346689d5b http://www.malwaredomainlist.com/mdl.php?search=www.google-statistics-uk.com Host: www.google-statistics-uk.com/jhtcd6u52nmTGHNQ25MUAym23GSajt2835JMhgsHJ735he.php, IP address: 61.4.82.216, ASN: 17964, Description: zeus/wsnpoem v2 drop zone 64b76fd8474614d2f9c372ac15127c4e http://www.malwaredomainlist.com/mdl.php?search=aaa419.com Host: aaa419.com/vv12218/mmmi1871.php, IP address: 61.4.82.249, ASN: 17964, Description: zeus/wsnpoem v2 drop zone 93721354c3936aac162a885dc2fa5f8b http://www.malwaredomainlist.com/mdl.php?search=socks5.real-host.ru Host: socks5.real-host.ru/admins/index1.php, IP address: 92.60.176.41, ASN: 15772, Description: zeus/wsnpoem v2 drop zone 8838758c0b5975a33277c0647d3381f3 http://www.malwaredomainlist.com/mdl.php?search=www.gaddem.net Host: www.gaddem.net/scam/gat.php, IP address: 61.4.82.222, ASN: 17964, Description: zeus/wsnpoem v2 drop zone 6ec043af17c3fd1912657dd4b6395535 http://www.malwaredomainlist.com/mdl.php?search=logislat.com Host: logislat.com/zs/gate.php, IP address: 115.100.250.105, ASN: 9803, Description: zeus/wsnpoem v2 drop zone bfd8e5f773fcba391f999f5f5a2258c2 http://www.malwaredomainlist.com/mdl.php?search=nordrilskre.com Host: nordrilskre.com/cgi-binn/hitss.php, IP address: 124.217.239.158, ASN: 45420, Description: zeus/wsnpoem v2 drop zone 898ccac47a49521c44d05e5a14c6e5b2 http://www.malwaredomainlist.com/mdl.php?search=blacktraf.su Host: blacktraf.su/zevs/gate.php, IP address: 122.115.63.24, ASN: 9803, Description: zeus/wsnpoem v2 drop zone 1e46123b6b8e61f6ecd7264e03ecaebd http://www.malwaredomainlist.com/mdl.php?search=cam.rubberduck.ws Host: cam.rubberduck.ws/z28/access.php, IP address: 188.124.15.180, ASN: 44565, Description: zeus/wsnpoem v2 drop zone 1e50240802f4b51835addcab68458a1d http://www.malwaredomainlist.com/mdl.php?search=centryfag.com Host: centryfag.com/error/404.php, IP address: 216.12.207.250, ASN: 21844, Description: zeus/wsnpoem v2 drop zone 8f19f47a303dd2c9ba223669982bb4ab http://www.malwaredomainlist.com/mdl.php?search=narkyl.com Host: narkyl.com/404/error.php, IP address: 198.66.210.22, ASN: 2914, Description: zeus/wsnpoem v2 drop zone 596432d78a5fd2b29448f95f458da5f1 http://www.malwaredomainlist.com/mdl.php?search=ddknet.biz Host: ddknet.biz/hi/grate.php, IP address: 61.4.82.249, ASN: 17964, Description: zeus/wsnpoem v2 drop zone 37ae1566ffbefe840cb47f0d704cce38 http://www.malwaredomainlist.com/mdl.php?search=olypoos.com Host: olypoos.com/123/cgi-bin/gate.php, IP address: 115.100.250.105, ASN: 9803, Description: zeus/wsnpoem v2 drop zone 992a4f67206d54cc853a7d0d4ff5b1c3 http://www.malwaredomainlist.com/mdl.php?search=193.105.0.23 Host: -, IP address: 193.105.0.23/gairichi.bin, ASN: 50390, Description: zeus/wsnpoem v2 config file 1e29bc229ad8d7b4ef48e8ef1de78a77 http://www.malwaredomainlist.com/mdl.php?search=193.105.0.23 Host: -, IP address: 193.105.0.23/juytrert5h6.php, ASN: 50390, Description: zeus/wsnpoem v2 drop zone c7e389cf031144c000a5850f50a86f16 http://www.malwaredomainlist.com/mdl.php?search=193.105.0.23 Host: -, IP address: 193.105.0.23/ynbhgbj65r.exe, ASN: 50390, Description: zeus/wsnpoem v2 trojan 76f40192220d48153ad8bf9908cd3d81 http://www.malwaredomainlist.com/mdl.php?search=193.105.0.202 Host: -, IP address: 193.105.0.202/sandyx.bin, ASN: 50390, Description: zeus/wsnpoem v2 config file 2996ed47d830c1b5565c901d7ad5cbe9 http://www.malwaredomainlist.com/mdl.php?search=193.105.0.202 Host: -, IP address: 193.105.0.202/ryjhtr78u.exe, ASN: 50390, Description: zeus/wsnpoem v2 trojan 4fb663e0bcdd802c32df5a069435dedf http://www.malwaredomainlist.com/mdl.php?search=193.105.0.202 Host: -, IP address: 193.105.0.202/23iuyt.php, ASN: 50390, Description: zeus/wsnpoem v2 drop zone 4569131a7a80ae3ca07dd207963fbb80 http://www.malwaredomainlist.com/mdl.php?search=193.105.0.96 Host: -, IP address: 193.105.0.96/olimp.bin, ASN: 50390, Description: zeus/wsnpoem v2 config file 427a1bfa821c657615b88b51357929c4 http://www.malwaredomainlist.com/mdl.php?search=193.105.0.96 Host: -, IP address: 193.105.0.96/dfgerg46hh.exe, ASN: 50390, Description: zeus/wsnpoem v2 trojan 67fbfed7b02c868b7487b66e1a8fa194 http://www.malwaredomainlist.com/mdl.php?search=193.105.0.96 Host: -, IP address: 193.105.0.96/rth4554ght.php, ASN: 50390, Description: zeus/wsnpoem v2 drop zone e6e17757c123b53d02c1c56363c3deb1 http://www.malwaredomainlist.com/mdl.php?search=92.60.177.232 Host: -, IP address: 92.60.177.232/crypt_Rapport.exe, ASN: 15772, Description: trojan ecef30fdb71ed8578bcad88923001ba7 http://www.malwaredomainlist.com/mdl.php?search=analitocs.com Host: analitocs.com/, IP address: 188.124.9.69, ASN: 44565, Description: SEO Sploit pack f7d4b9c6d392954826cd1c4bd68327cd http://www.malwaredomainlist.com/mdl.php?search=analitocs.com Host: analitocs.com/admin.php, IP address: 188.124.9.69, ASN: 44565, Description: control panel of SEO Sploit pack 4d3bb42f7c34c471d8444318e87194fd http://www.malwaredomainlist.com/mdl.php?search=analitocs.com Host: analitocs.com/mdac.php, IP address: 188.124.9.69, ASN: 44565, Description: directs to mdac exploit ce869ff3429591333d767c6a78faf168 http://www.malwaredomainlist.com/mdl.php?search=analitocs.com Host: analitocs.com/newload.php?ids=MDAC, IP address: 188.124.9.69, ASN: 44565, Description: dropper for several malware, e.g. Zeus c7d853803ae9f8eb800a3303fd99df38 http://www.malwaredomainlist.com/mdl.php?search=analitocs.com Host: analitocs.com/pdfadmnplay.php, IP address: 188.124.9.69, ASN: 44565, Description: directs to pdf exploits fb3768babbfca7bb3afa55d7d4318342 http://www.malwaredomainlist.com/mdl.php?search=analitocs.com Host: analitocs.com/files/jivegood.pdf, IP address: 188.124.9.69, ASN: 44565, Description: pdf exploit 8c9f63119e8e1d9d16a923ce9512800f http://www.malwaredomainlist.com/mdl.php?search=analitocs.com Host: analitocs.com/files/suckcat.pdf, IP address: 188.124.9.69, ASN: 44565, Description: pdf exploit 62f4e4d0373a347e17e869cd7cb4680e http://www.malwaredomainlist.com/mdl.php?search=analitocs.com Host: analitocs.com/konec.php, IP address: 188.124.9.69, ASN: 44565, Description: directs to java exploit f1b81ca19063143f023d81ff89225002 http://www.malwaredomainlist.com/mdl.php?search=analitocs.com Host: analitocs.com/files/common.jar, IP address: 188.124.9.69, ASN: 44565, Description: java exploit dc27b5b7b32ce0f9bfb64f4eeb3ad111 http://www.malwaredomainlist.com/mdl.php?search=n1ews.hermison.com Host: n1ews.hermison.com/, IP address: 200.63.44.247, ASN: 27716, Description: exploit kit a73912014d75b3f5b883ea05a113fdbb http://www.malwaredomainlist.com/mdl.php?search=n1ews.hermison.com Host: n1ews.hermison.com/pdf.php, IP address: 200.63.44.247, ASN: 27716, Description: pdf exploit fc43c1a635da82842047d38ca2e4a3f3 http://www.malwaredomainlist.com/mdl.php?search=n1ews.hermison.com Host: n1ews.hermison.com/nc.jar, IP address: 200.63.44.247, ASN: 27716, Description: java exploit 9bc698080d18455ff534492fa6ea7fef http://www.malwaredomainlist.com/mdl.php?search=n1ews.hermison.com Host: n1ews.hermison.com/exe.php?spl=MDAC, IP address: 200.63.44.247, ASN: 27716, Description: trojan downloader 026a5a47000fde60493157645dae99a9 http://www.malwaredomainlist.com/mdl.php?search=n1ews.hermison.com Host: n1ews.hermison.com/exe.php?spl=java, IP address: 200.63.44.247, ASN: 27716, Description: trojan downloader bc51c8091977338e0c8f06fe4c435564 http://www.malwaredomainlist.com/mdl.php?search=greatarray.com Host: greatarray.com/, IP address: 188.124.9.69, ASN: 44565, Description: SEO Sploit pack 22b661444aff15bcbce2090a59b732f6 http://www.malwaredomainlist.com/mdl.php?search=greatarray.com Host: greatarray.com/mdac.php, IP address: 188.124.9.69, ASN: 44565, Description: MDAC exploit c69865a013edb6bd8cda79395a752350 http://www.malwaredomainlist.com/mdl.php?search=greatarray.com Host: greatarray.com/newload.php?ids=MDAC, IP address: 188.124.9.69, ASN: 44565, Description: dropper for several malware, e.g. Zeus 39292cb06da9754799d66b9442efe808 http://www.malwaredomainlist.com/mdl.php?search=greatarray.com Host: greatarray.com/pdfadmnplay.php, IP address: 188.124.9.69, ASN: 44565, Description: directs to pdf exploit 035e465079f3bc14b6c6aec6062350ca http://www.malwaredomainlist.com/mdl.php?search=greatarray.com Host: greatarray.com/files/grindgrub.pdf, IP address: 188.124.9.69, ASN: 44565, Description: pdf exploit e44d486a1b7b0883b3e1552c4eb6440f http://www.malwaredomainlist.com/mdl.php?search=greatarray.com Host: greatarray.com/files/contrivenotconvergefusty.pdf, IP address: 188.124.9.69, ASN: 44565, Description: pdf exploit 86c4a7495372e88d1672c60e1b542f40 http://www.malwaredomainlist.com/mdl.php?search=greatarray.com Host: greatarray.com/loadpdf.php, IP address: 188.124.9.69, ASN: 44565, Description: dropper for several malware, e.g. Zeus 091a8e53cf133e11c5e004fe1574b414 http://www.malwaredomainlist.com/mdl.php?search=greatarray.com Host: greatarray.com/konec.php, IP address: 188.124.9.69, ASN: 44565, Description: directs to java exploit fa719e783c38f2270b9695ff6195fdee http://www.malwaredomainlist.com/mdl.php?search=greatarray.com Host: greatarray.com/files/gsb50.jar, IP address: 188.124.9.69, ASN: 44565, Description: java exploit 1de1ea38ee42ebfcea420c60172e5171 http://www.malwaredomainlist.com/mdl.php?search=greatarray.com Host: greatarray.com/files/common.jar, IP address: 188.124.9.69, ASN: 44565, Description: java exploit 31ea3ff0f337ff3d3fa82cb898ec63f8 http://www.malwaredomainlist.com/mdl.php?search=greatarray.com Host: greatarray.com/loadjavad.php, IP address: 188.124.9.69, ASN: 44565, Description: dropper for several malware, e.g. Zeus 9a1594c181214498256f08eb26f2acd8 http://www.malwaredomainlist.com/mdl.php?search=www.scanerwhatever.cn Host: www.scanerwhatever.cn/page2/setup, IP address: 91.212.132.8, ASN: 49091, Description: fake av 50302f59ad47bb23674ab8b29b69d363 http://www.malwaredomainlist.com/mdl.php?search=fhjslk21.org Host: fhjslk21.org/b/cfg275.bin, IP address: 61.61.20.134, ASN: 9918, Description: zeus/wsnpoem v2 config file e949d94069973edc32e9539c04c583ee http://www.malwaredomainlist.com/mdl.php?search=fhjslk21.org Host: fhjslk21.org/75/e.php, IP address: 61.61.20.134, ASN: 9918, Description: zeus/wsnpoem v2 drop zone 4d25931efdb326ef49ef0ea3f5ff6c6d http://www.malwaredomainlist.com/mdl.php?search=salebotw.com Host: salebotw.com/scn/7a3f4f13e300335dd0260efc4514fb1c/0540f0d2bb566d0ed0d80150e2b728ef/f85b7b377112c272bc87f3e73f10508d, IP address: 194.54.83.163, ASN: 41671, Description: fake online Scanner c7402c662aab9746a2c79fa4348d3d6e http://www.malwaredomainlist.com/mdl.php?search=ottalfight.com Host: ottalfight.com/scn/0e65e06120d6c118331cbb7a896e7e5a/0540f0d2bb566d0ed0d80150e2b728ef/f85b7b377112c272bc87f3e73f10508d, IP address: 194.54.83.163, ASN: 41671, Description: fake online Scanner e3680b1838b35fe2172b5348ecd7de44 http://www.malwaredomainlist.com/mdl.php?search=cheaphgall.com Host: cheaphgall.com/download/0540f0d2bb566d0ed0d80150e2b728ef/f85b7b377112c272bc87f3e73f10508d/4, IP address: 91.212.127.144, ASN: 49087, Description: trojan FakeSmoke b832d051eeb32ebe699c9a8704e7ae7f http://www.malwaredomainlist.com/mdl.php?search=lettsoiol.com Host: lettsoiol.com/download/0540f0d2bb566d0ed0d80150e2b728ef/f85b7b377112c272bc87f3e73f10508d/4, IP address: 91.212.127.144, ASN: 49087, Description: trojan FakeSmoke e27d28ac2bd57836a424b14b61f15c53 http://www.malwaredomainlist.com/mdl.php?search=trstcam.com Host: trstcam.com/download/0540f0d2bb566d0ed0d80150e2b728ef/f85b7b377112c272bc87f3e73f10508d/4, IP address: 91.212.127.144, ASN: 49087, Description: trojan FakeSmoke e0282084f7bf61f58833d2c5f7348235 http://www.malwaredomainlist.com/mdl.php?search=www.antivpc.com Host: www.antivpc.com/agaz17mgxagaz17mgx.htm?get=e0b399bd994a0556517f96487dd3ab29, IP address: 212.150.147.46, ASN: 1680, Description: rogue av 2c3c170d86e13dfa5ce428aa4c1558f5 http://www.malwaredomainlist.com/mdl.php?search=www.pcs-av.com Host: www.pcs-av.com/asvzgdwebasvzgdweb.htm?get=e0b399bd994a0556517f96487dd3ab29, IP address: 212.150.147.46, ASN: 1680, Description: rogue av 1b5c84d8d5d7a6f696c532e31c4a93d7 http://www.malwaredomainlist.com/mdl.php?search=solaruploader.com Host: solaruploader.com/46.exe, IP address: 188.124.9.56, ASN: 44565, Description: trojan dropper b3056a214ef8003f47985df1cb62e1fd http://www.malwaredomainlist.com/mdl.php?search=mioanali.com Host: mioanali.com/, IP address: 188.124.9.69, ASN: 44565, Description: SEO Sploit kit 66a37c09b1a8d49d3f09db9c5698a205 http://www.malwaredomainlist.com/mdl.php?search=mioanali.com Host: mioanali.com/stat.php, IP address: 188.124.9.69, ASN: 44565, Description: control panel of SEO Sploit kit 6aa56b6eb00435d55a40bdb3671cc264 http://www.malwaredomainlist.com/mdl.php?search=mioanali.com Host: mioanali.com/mdac.php, IP address: 188.124.9.69, ASN: 44565, Description: mdac exploit 2cbea6a55d65fbaab7e73a863bf8bab0 http://www.malwaredomainlist.com/mdl.php?search=mioanali.com Host: mioanali.com/newload.php?ids=MDAC, IP address: 188.124.9.69, ASN: 44565, Description: dropper for several malware, e.g. Zeus e22aefd17a42e4b6db3bd1e5364b069e http://www.malwaredomainlist.com/mdl.php?search=mioanali.com Host: mioanali.com/pdfadmnplay.php, IP address: 188.124.9.69, ASN: 44565, Description: directs to pdf exploits 703c411c1cc501a53b310ef36a81d443 http://www.malwaredomainlist.com/mdl.php?search=mioanali.com Host: mioanali.com/files/itisnogoclear.pdf, IP address: 188.124.9.69, ASN: 44565, Description: pdf exploit 6c8f254b22999982f274b77a46b728b0 http://www.malwaredomainlist.com/mdl.php?search=mioanali.com Host: mioanali.com/files/hardworkbreasts.pdf, IP address: 188.124.9.69, ASN: 44565, Description: pdf exploit 9da560bd3e9b5b74721caa0240b650e1 http://www.malwaredomainlist.com/mdl.php?search=mioanali.com Host: mioanali.com/loadpdf.php, IP address: 188.124.9.69, ASN: 44565, Description: dropper for several malware, e.g. Zeus b6af9c318e5e4c79d12dcebef52db9ea http://www.malwaredomainlist.com/mdl.php?search=mioanali.com Host: mioanali.com/konec.php, IP address: 188.124.9.69, ASN: 44565, Description: directs to java exploit 6d66910a53c08903d39c7f59f20db563 http://www.malwaredomainlist.com/mdl.php?search=mioanali.com Host: mioanali.com/files/common.jar, IP address: 188.124.9.69, ASN: 44565, Description: java exploit 6b56e50fd22128cdc9219e329fd13766 http://www.malwaredomainlist.com/mdl.php?search=mioanali.com Host: mioanali.com/loadjavad.php?page=1, IP address: 188.124.9.69, ASN: 44565, Description: dropper for several malware, e.g. Zeus de3575b2847fc6cd4f639a002c96fc49 http://www.malwaredomainlist.com/mdl.php?search=arraysaw.net Host: arraysaw.net/, IP address: 188.124.9.69, ASN: 44565, Description: SEO Sploit kit 17e76495f1bb4d55f85859a9d4e715cd http://www.malwaredomainlist.com/mdl.php?search=arraysaw.net Host: arraysaw.net/stat.php, IP address: 188.124.9.69, ASN: 44565, Description: control panel of SEO Sploit kit 454a488b7e22fa8ac2f8200846ad70ec http://www.malwaredomainlist.com/mdl.php?search=arraysaw.net Host: arraysaw.net/mdac.php, IP address: 188.124.9.69, ASN: 44565, Description: mdac exploit 8a53a94fa46ae12bffabf3f84a738cf1 http://www.malwaredomainlist.com/mdl.php?search=arraysaw.net Host: arraysaw.net/newload.php?ids=MDAC, IP address: 188.124.9.69, ASN: 44565, Description: dropper for several malware, e.g. Zeus 693f50df3ec720623b1601f885f82ad5 http://www.malwaredomainlist.com/mdl.php?search=arraysaw.net Host: arraysaw.net/pdfadmnplay.php, IP address: 188.124.9.69, ASN: 44565, Description: directs to pdf exploits b5e0202cbe9f3c6aa2c6c3ab908dbd11 http://www.malwaredomainlist.com/mdl.php?search=arraysaw.net Host: arraysaw.net/files/heardthatpolice.pdf, IP address: 188.124.9.69, ASN: 44565, Description: pdf exploit 8c92eea37f864d98bb123cb369323423 http://www.malwaredomainlist.com/mdl.php?search=arraysaw.net Host: arraysaw.net/files/goofybeautiful.pdf, IP address: 188.124.9.69, ASN: 44565, Description: pdf exploit fd5646e05af446ef645be6c342aff8f7 http://www.malwaredomainlist.com/mdl.php?search=arraysaw.net Host: arraysaw.net/loadpdf.php, IP address: 188.124.9.69, ASN: 44565, Description: dropper for several malware, e.g. Zeus 209c1e2ae366f6452cf9833045dcd2cf http://www.malwaredomainlist.com/mdl.php?search=arraysaw.net Host: arraysaw.net/konec.php, IP address: 188.124.9.69, ASN: 44565, Description: directs to java exploit dce956cabad29f9b98f36f59966f8aec http://www.malwaredomainlist.com/mdl.php?search=arraysaw.net Host: arraysaw.net/files/common.jar, IP address: 188.124.9.69, ASN: 44565, Description: java exploit 165e4bcae0eeb45c1ec73785f4d73a20 http://www.malwaredomainlist.com/mdl.php?search=arraysaw.net Host: arraysaw.net/loadjavad.php?page=1, IP address: 188.124.9.69, ASN: 44565, Description: dropper for several malware, e.g. Zeus e0f49e01b18b865ce02e41f00280cac3 http://www.malwaredomainlist.com/mdl.php?search=kornoval.in Host: kornoval.in/counter/, IP address: 188.124.16.18, ASN: 44565, Description: exploit kit 211d65af7e07df98440a1b0727763222 http://www.malwaredomainlist.com/mdl.php?search=kornoval.in Host: kornoval.in/counter/jar.jar, IP address: 188.124.16.18, ASN: 44565, Description: java exploit 30b50e8ae0cf47f89773fb8bdbfa21c2 http://www.malwaredomainlist.com/mdl.php?search=kornoval.in Host: kornoval.in/counter/exe.php?src=&x=jas, IP address: 188.124.16.18, ASN: 44565, Description: trojan b11c37925d6cbe02182624203a7a8104 http://www.malwaredomainlist.com/mdl.php?search=kornoval.in Host: kornoval.in/counter/pdf.php?src=, IP address: 188.124.16.18, ASN: 44565, Description: pdf exploit f3b3fbf2fea3907f08ea1625a1e06a7c http://www.malwaredomainlist.com/mdl.php?search=kornoval.in Host: kornoval.in/counter/exe.php?src=&x=mdac, IP address: 188.124.16.18, ASN: 44565, Description: trojan 2ef2359fbb82bb41a467a4391b2d9b94 http://www.malwaredomainlist.com/mdl.php?search=kornoval.in Host: kornoval.in/counter/exe.php?src=&x=snap, IP address: 188.124.16.18, ASN: 44565, Description: trojan 80c8ebc222f165398f8347d0b275abd9 http://www.malwaredomainlist.com/mdl.php?search=horovod.in Host: horovod.in/soft/load.php?id=CNwdYyWTfvsmxDY&src=&requestID=sHVSkgmfwI, IP address: 188.124.16.18, ASN: 44565, Description: trojan Hiloti 4a49b21386a5535ec8c8fb630b9fec19 http://www.malwaredomainlist.com/mdl.php?search=horovod.in Host: horovod.in/soft/load.php?id=CNwdYyWTfvsmxDY&src=&requestID=tzrLKzfWDY, IP address: 188.124.16.18, ASN: 44565, Description: fake av downloader ca6479a763ee396ab4b8256b79606337 http://www.malwaredomainlist.com/mdl.php?search=horovod.in Host: horovod.in/soft/load.php?id=CNwdYyWTfvsmxDY&src=&requestID=fdJhxQSJOF, IP address: 188.124.16.18, ASN: 44565, Description: trojan TDSS ca8a0b27ec3256ded69f8af581d42390 http://www.malwaredomainlist.com/mdl.php?search=ad0ra8ili7y.com Host: ad0ra8ili7y.com/index.php?s=3e5cf2bce9808386868aa6270d6a7877, IP address: 91.213.174.22, ASN: 29106, Description: Eleonore Exploits pack v1.3.2 02bb27b25e66fa94c2dcc6e70e6827be http://www.malwaredomainlist.com/mdl.php?search=ad0ra8ili7y.com Host: ad0ra8ili7y.com/stat.php, IP address: 91.213.174.22, ASN: 29106, Description: control panel of Eleonore Exploits pack v1.3.2 1929f365bae12892ff0bcb1b826eb6f3 http://www.malwaredomainlist.com/mdl.php?search=ad0ra8ili7y.com Host: ad0ra8ili7y.com/UT1Wf-l.php/2aaaa5cb544cf49656cb609d48407c88?spl=pdf_2022, IP address: 91.213.174.22, ASN: 29106, Description: bot, C&C at volosanka.cn a004a2c291d300d0a30495a03f644e74 http://www.malwaredomainlist.com/mdl.php?search=aciraee.com Host: aciraee.com/index.php?s=5ca68bcfbc2ecbdef4c1890bf1711876, IP address: 91.213.174.14, ASN: 29106, Description: Eleonore Exploits pack v1.3.2 adb27a82959dbe420d4d99ef973adb50 http://www.malwaredomainlist.com/mdl.php?search=aciraee.com Host: aciraee.com/stat.php, IP address: 91.213.174.14, ASN: 29106, Description: Eleonore Exploits pack v1.3.2 e725a840bddbcab774b1c235493d5f8f http://www.malwaredomainlist.com/mdl.php?search=adidasmikey.com Host: adidasmikey.com/index.php?s=3e5cf2bce9808386868aa6270d6a7877, IP address: 91.213.174.22, ASN: 29106, Description: - 8a68823c0ecf3987a0726c4c5ed3be38 http://www.malwaredomainlist.com/mdl.php?search=adidasmikey.com Host: adidasmikey.com/stat.php, IP address: 91.213.174.22, ASN: 29106, Description: control panel of Eleonore Exploits pack v1.3.2 39abe841ca4e204285c6ce167f0ce714 http://www.malwaredomainlist.com/mdl.php?search=www.ucheba.ru Host: www.ucheba.ru, IP address: 85.192.36.173, ASN: 12695, Description: iframe directs to exploit kit d509628888e4b74c51087ef35dbb3ef1 http://www.malwaredomainlist.com/mdl.php?search=aylmershotgun.com Host: aylmershotgun.com/index.php?s=1b9e7bf762c6f459848ec04d4390a33a, IP address: 91.213.174.22, ASN: 29106, Description: Eleonore Exploits pack v1.3.2 3863bdd012588733078fd99fb1f1b3aa http://www.malwaredomainlist.com/mdl.php?search=aylmershotgun.com Host: aylmershotgun.com/stat.php, IP address: 91.213.174.22, ASN: 29106, Description: control panel of Eleonore Exploits pack v1.3.2 34d37b282c92c98fb2b6c1f7d3012d2a http://www.malwaredomainlist.com/mdl.php?search=193.105.0.101 Host: -, IP address: 193.105.0.101/hgbvfe5yju.exe, ASN: 50390, Description: zeus/wsnpoem v2 trojan f8ed9870d632ac37c01faef7c78ac241 http://www.malwaredomainlist.com/mdl.php?search=193.105.0.101 Host: -, IP address: 193.105.0.101/kaspers.bin, ASN: 50390, Description: zeus/wsnpoem v2 config file 7b59497326085490cfad498df3746aee http://www.malwaredomainlist.com/mdl.php?search=193.105.0.101 Host: -, IP address: 193.105.0.101/dfghnybtvj.php, ASN: 50390, Description: zeus/wsnpoem v2 drop zone 4661a7193730f90bfc2c64dc5f0c0e31 http://www.malwaredomainlist.com/mdl.php?search=www.iiiiiiiiiiiiii.net Host: www.iiiiiiiiiiiiii.net/games/update.set, IP address: 203.174.83.98, ASN: 38001, Description: zeus/wsnpoem v2 config file 83d5ab6c4acc8a7427ad89a27b44e31b http://www.malwaredomainlist.com/mdl.php?search=www.iiiiiiiiiiiiii.net Host: www.iiiiiiiiiiiiii.net//games/update.php, IP address: 203.174.83.98, ASN: 38001, Description: zeus/wsnpoem v2 drop zone a2ada7336d875e45c179532be5f7ee63 http://www.malwaredomainlist.com/mdl.php?search=cpaos.com Host: cpaos.com/new/viewtopic.php?s=7b5c3dff46, IP address: 85.17.90.206, ASN: 16265, Description: NULLED/Fragus exploit kit b316bc197e63584b0c4d5db3037c59ef http://www.malwaredomainlist.com/mdl.php?search=cpaos.com Host: cpaos.com/new/admin.php, IP address: 85.17.90.206, ASN: 16265, Description: control panel of NULLED/Fragus exploit kit fa04a2d617f29080fad0e936e094c22a http://www.malwaredomainlist.com/mdl.php?search=cpaos.com Host: cpaos.com/new/post.php, IP address: 85.17.90.206, ASN: 16265, Description: trojan Oficla/Sasfis 441e67fb20fe9c4fa107cb78ff283e38 http://www.malwaredomainlist.com/mdl.php?search=aafoocgv.cn Host: aafoocgv.cn/el2/index.php, IP address: 91.212.41.87, ASN: 29371, Description: Eleonore Exploits pack v1.3.3 e8873a8b6e949de3144d70b49e55c383 http://www.malwaredomainlist.com/mdl.php?search=aafoocgv.cn Host: aafoocgv.cn/el2/stat.php, IP address: 91.212.41.87, ASN: 29371, Description: control panel of Eleonore Exploits pack v1.3.3 4b47d2a8d82c1ce1ec8d01b4c9ed758a http://www.malwaredomainlist.com/mdl.php?search=aafoocgv.cn Host: aafoocgv.cn/el2/load/load.exe, IP address: 91.212.41.87, ASN: 29371, Description: trojan 2f00c725f3a1cafa0992b7719c405969 http://www.malwaredomainlist.com/mdl.php?search=autotradersuk.net Host: autotradersuk.net/arc/bb.php?v=200&id=554905388&b=0306les&tm=3, IP address: 85.17.90.206, ASN: 16265, Description: Oficla/Sasfis C&C 21805dab65534c7e13e93f3ac4e77868 http://www.malwaredomainlist.com/mdl.php?search=topesuna.com Host: topesuna.com/v2/out/flash_10_10.exe, IP address: 85.17.87.159, ASN: 16265, Description: trojan downloader 101df833c7d148e19de3b487d47806fe http://www.malwaredomainlist.com/mdl.php?search=rlosswe.com Host: rlosswe.com/win32.exe, IP address: 61.4.82.216, ASN: 17964, Description: trojan Kobcka 89171ca4b95081191bb8d78e1b64db36 http://www.malwaredomainlist.com/mdl.php?search=tieos.com Host: tieos.com/new/show.php, IP address: 85.17.90.206, ASN: 16265, Description: NULLED/Fragus exploit kit 89e5f318c05dba129365c9fcc65adf69 http://www.malwaredomainlist.com/mdl.php?search=tieos.com Host: tieos.com/new/admin.php, IP address: 85.17.90.206, ASN: 16265, Description: control panel of NULLED/Fragus exploit kit 48a9e3e057b89982f2f9341449d8c20d http://www.malwaredomainlist.com/mdl.php?search=tieos.com Host: tieos.com/new/post.php, IP address: 85.17.90.206, ASN: 16265, Description: zeus/wsnpoem v2 trojan 45602163ed63bd41ccd24ec0c753e801 http://www.malwaredomainlist.com/mdl.php?search=vcipo.info Host: vcipo.info/cgi-bin/login.htm, IP address: 74.118.192.166, ASN: 46664, Description: NeoSploit, payload fake av 05b33984ac63b3398496305b536314e6 http://www.malwaredomainlist.com/mdl.php?search=herewereytinj.com Host: herewereytinj.com/tera/sv777/, IP address: 58.23.64.240, ASN: 4837, Description: Eleonore Exploits pack v1.3.2 73722911e16bdfd0f3ef86fb671f8af7 http://www.malwaredomainlist.com/mdl.php?search=herewereytinj.com Host: herewereytinj.com/tera/sv777/stat.php, IP address: 58.23.64.240, ASN: 4837, Description: control panel of Eleonore Exploits pack v1.3.2 1432ced483fe8bc063fda804c6f1c594 http://www.malwaredomainlist.com/mdl.php?search=herewereytinj.com Host: herewereytinj.com/tera/sv777/load.php?spl=pdf_pack, IP address: 58.23.64.240, ASN: 4837, Description: backdoor Hodprot b8cf49b0cb243b87b44eb1b3e5fcdcb4 http://www.malwaredomainlist.com/mdl.php?search=tomorrrrow.cn Host: tomorrrrow.cn/loader/bb.php?v=200&id=636608811&b=0196019827&tm=2, IP address: 122.115.63.57, ASN: 9803, Description: Oficla/Sasfis C&C 2463dcb7868dcff77ce5f37165ad77e6 http://www.malwaredomainlist.com/mdl.php?search=cargoworldexchange.com Host: cargoworldexchange.com/trendi_duglas/iojfiowejfio/tytorials.bin, IP address: 91.212.41.88, ASN: 29371, Description: zeus/wsnpoem v2 config file 2108aabc6f1aa10dba021c98aff4ea4e http://www.malwaredomainlist.com/mdl.php?search=video-info.info Host: video-info.info/show.php, IP address: 91.212.41.88, ASN: 29371, Description: directs to trojan 963da159a954fe9bd9e4db74ce936d3e http://www.malwaredomainlist.com/mdl.php?search=tubetechltd.com Host: tubetechltd.com/xplay.php?id=40018, IP address: 66.45.255.226, ASN: 19318, Description: directs to trojan 0bfd20628a4c1a5bcd86bc123ceb12ae http://www.malwaredomainlist.com/mdl.php?search=greatmultimediaservices.com Host: greatmultimediaservices.com/video-plugin.40018.exe, IP address: 1.1.1.1, ASN: 36561, Description: trojan e7cc09d3db9c01f4b98e2dd49c6878c6 http://www.malwaredomainlist.com/mdl.php?search=www.greatuk.org Host: www.greatuk.org/tt/cfg/config.bin, IP address: 193.104.22.100, ASN: 34305, Description: zeus/wsnpoem v2 config file 45b075b7a161ee3a2662439fc3334669 http://www.malwaredomainlist.com/mdl.php?search=www.greatuk.org Host: www.greatuk.org/tt/bot/bot.exe, IP address: 193.104.22.100, ASN: 34305, Description: zeus/wsnpoem v2 trojan e50fb7c0e59c085d791b4d7b9a7146fc http://www.malwaredomainlist.com/mdl.php?search=www.greatuk.org Host: www.greatuk.org/tt/gt.php, IP address: 193.104.22.100, ASN: 34305, Description: zeus/wsnpoem v2 drop zone 2c304d4ba418ae991b311ef1755b1f2a http://www.malwaredomainlist.com/mdl.php?search=122.115.63.32 Host: -, IP address: 122.115.63.32/gus/td, ASN: 9803, Description: zeus/wsnpoem v2 config file 5b0700940252c21470b1c0b25091d634 http://www.malwaredomainlist.com/mdl.php?search=122.115.63.32 Host: -, IP address: 122.115.63.32/gus/windir.exe, ASN: 9803, Description: zeus/wsnpoem v2 trojan 3bce8a95b0a2aa4045badccbf1a5d4f8 http://www.malwaredomainlist.com/mdl.php?search=124.217.230.39 Host: -, IP address: 124.217.230.39/~ddusa/7tImddbTH8HY.php, ASN: 45839, Description: zeus/wsnpoem v2 drop zone e5360956083d343d7178d607c8bb8443 http://www.malwaredomainlist.com/mdl.php?search=abouttraffic.net Host: abouttraffic.net/news/dim.exe, IP address: 95.143.192.59, ASN: 49770, Description: zeus/wsnpoem v2 trojan de1aea96ef2c1885ac938a6459797534 http://www.malwaredomainlist.com/mdl.php?search=ioretiop.com Host: ioretiop.com/r/a/upd5.bin, IP address: 122.115.63.30, ASN: 9803, Description: zeus/wsnpoem v2 config file 266086ee1e63140bf750d89c93093659 http://www.malwaredomainlist.com/mdl.php?search=www.doctormiler.com Host: www.doctormiler.com/imagesflash/index.php, IP address: 91.212.41.14, ASN: 29371, Description: zeus/wsnpoem v2 drop zone 4db3e4e92d8fb08f9a6a09b2ee9d4400 http://www.malwaredomainlist.com/mdl.php?search=ioretiop.com Host: ioretiop.com/eet/eoeo/o.php, IP address: 122.115.63.30, ASN: 9803, Description: zeus/wsnpoem v2 drop zone 127751063a44854cdfd52fa2d86fe9b7 http://www.malwaredomainlist.com/mdl.php?search=gamevery1.ru Host: gamevery1.ru/s3/, IP address: 217.23.8.72, ASN: 49981, Description: exploit kit b22ee7b658b743e435edc344649ccc7c http://www.malwaredomainlist.com/mdl.php?search=gamevery1.ru Host: gamevery1.ru/s3/file.php?spl=00md, IP address: 217.23.8.72, ASN: 49981, Description: bot, C&C located on volosanka.cn 96c78f03902a1209b2b51b273d6940a3 http://www.malwaredomainlist.com/mdl.php?search=gamevery1.ru Host: gamevery1.ru/s2/, IP address: 217.23.8.72, ASN: 49981, Description: exploit kit af2730a8dd1f7c28c913ce372734cb03 http://www.malwaredomainlist.com/mdl.php?search=gamevery1.ru Host: gamevery1.ru/s2/file.php?spl=00md, IP address: 217.23.8.72, ASN: 49981, Description: bot, C&C located on volosanka.cn 621bdebf6e29006de39b098b63afce60 http://www.malwaredomainlist.com/mdl.php?search=romms.in Host: romms.in/2/load/player_update.exe, IP address: 188.124.9.38, ASN: 44565, Description: rootkit TDSS e641a1ed0c46db140e0740c3beb0eb76 http://www.malwaredomainlist.com/mdl.php?search=nordrilskre.com Host: nordrilskre.com/cgi-binn/kisme.bin, IP address: 124.217.239.158, ASN: 45420, Description: zeus/wsnpoem v2 config file f153dcdd6adb2dc841bbd0a30b0a2bbe http://www.malwaredomainlist.com/mdl.php?search=motoavto.limewebs.com Host: motoavto.limewebs.com/serv/web/cn/config.bin, IP address: 64.90.182.181, ASN: 11403, Description: zeus/wsnpoem v2 config file 2b8e1888ef38e9104a8c04808ad5734e http://www.malwaredomainlist.com/mdl.php?search=motoavto.limewebs.com Host: motoavto.limewebs.com/serv/web/gate.php, IP address: 64.90.182.181, ASN: 11403, Description: zeus/wsnpoem v2 drop zone f65bfbf8c6a0a38a107e130f873aa974 http://www.malwaredomainlist.com/mdl.php?search=zeussave.comuv.com Host: zeussave.comuv.com/cn/config.bin, IP address: 216.108.235.169, ASN: 26277, Description: zeus/wsnpoem v2 config file e67725d44bf46e6d21ecc02655849bc1 http://www.malwaredomainlist.com/mdl.php?search=eurosport.ueuo.com Host: eurosport.ueuo.com/web/cn/config.bin, IP address: 216.245.218.246, ASN: 46475, Description: zeus/wsnpoem v2 config file cd96e31cfda65758b8d0a7b760b6a2fd http://www.malwaredomainlist.com/mdl.php?search=bombozzz.com Host: bombozzz.com/bugaga/buga.exe, IP address: 122.115.63.8, ASN: 9803, Description: zeus/wsnpoem v2 trojan a42f7ca374a2f904541a4a9e1560dd44 http://www.malwaredomainlist.com/mdl.php?search=bombozzz.com Host: bombozzz.com/newstart/botopriem.php, IP address: 122.115.63.8, ASN: 9803, Description: zeus/wsnpoem v2 drop zone 38d6e658b8b026160663e4d488447ccb http://www.malwaredomainlist.com/mdl.php?search=bombozzz.com Host: bombozzz.com/bugaga/bugaga.bin, IP address: 122.115.63.8, ASN: 9803, Description: zeus/wsnpoem v2 config file dc9f8f462d7f714b4a28a9eb7102e7da http://www.malwaredomainlist.com/mdl.php?search=fiwzv.net Host: fiwzv.net/cms/cfg2.bin, IP address: 89.187.37.30, ASN: 25129, Description: zeus/wsnpoem v2 config file ecb27ab5b5b3dcb98f9d8af6abc8c7f7 http://www.malwaredomainlist.com/mdl.php?search=fiwzv.net Host: fiwzv.net/cms/gate.php, IP address: 89.187.37.30, ASN: 25129, Description: zeus/wsnpoem v2 drop zone 94b9214c443a6774b5ac424daf39e0ec http://www.malwaredomainlist.com/mdl.php?search=tttbbbttt.ru Host: tttbbbttt.ru/z/config.bin, IP address: 95.31.234.3, ASN: 8402, Description: zeus/wsnpoem v2 config file 685bc244cb0de6cf824c68c15dda1cb6 http://www.malwaredomainlist.com/mdl.php?search=tttbbbttt.ru Host: tttbbbttt.ru/z/svhost.exe, IP address: 95.31.234.3, ASN: 8402, Description: zeus/wsnpoem v2 trojan 681a607e2a6e21463a721a2c9c724ca3 http://www.malwaredomainlist.com/mdl.php?search=tttbbbttt.ru Host: tttbbbttt.ru/z/gate.php, IP address: 95.31.234.3, ASN: 8402, Description: zeus/wsnpoem v2 drop zone 3d9ff58f937346a1e7a8b10e0e4ff33b http://www.malwaredomainlist.com/mdl.php?search=www.austinme.com Host: www.austinme.com/media/23/cfg.bin, IP address: 74.208.10.2, ASN: 8560, Description: zeus/wsnpoem v2 config file 8010af94127782079ae3039e468ffce2 http://www.malwaredomainlist.com/mdl.php?search=www.austinme.com Host: www.austinme.com/media/23/setup.exe, IP address: 74.208.10.2, ASN: 8560, Description: zeus/wsnpoem v2 trojan 0d9c30de53fcb751e03af4911d21fb28 http://www.malwaredomainlist.com/mdl.php?search=www.freedose.info Host: www.freedose.info/webbinder/binder2.bin, IP address: 88.191.17.26, ASN: 12322, Description: zeus/wsnpoem v2 config file dd3e8631edf9588381f4437d187fad26 http://www.malwaredomainlist.com/mdl.php?search=www.sicha-linna.com Host: www.sicha-linna.com/brigus_saloma/prts.exe, IP address: 61.235.117.77, ASN: 9394, Description: zeus/wsnpoem v1 trojan f86829bd173d2df527bde2ac1ed49508 http://www.malwaredomainlist.com/mdl.php?search=www.sicha-linna.com Host: www.sicha-linna.com/brigus_saloma/s.php, IP address: 61.235.117.77, ASN: 9394, Description: zeus/wsnpoem v1 drop zone 83e0424f87de7e0af454fd5849252ae6 http://www.malwaredomainlist.com/mdl.php?search=ygyg.net Host: ygyg.net/cc/cfg.bin, IP address: 70.84.62.194, ASN: 21844, Description: zeus/wsnpoem v1 config file 3ae348cbcb9787e9a62bc159fe945de8 http://www.malwaredomainlist.com/mdl.php?search=samsonite-shop.cz Host: samsonite-shop.cz/photos/images/0.exe, IP address: 88.146.119.130, ASN: 6706, Description: zeus/wsnpoem v2 trojan b673934b959407d7ce9d42204987ff89 http://www.malwaredomainlist.com/mdl.php?search=inroyal.info Host: inroyal.info/fps/bb.php?v=200&id=482651473&b=semen&tm=5, IP address: 122.115.63.35, ASN: 9803, Description: Oficla/Sasfis C&C da820f76baac32eb0d6cdea99046a36b http://www.malwaredomainlist.com/mdl.php?search=puthere.info Host: puthere.info/fps/bb.php?v=200&id=482651443&b=semen&tm=5, IP address: 122.115.63.35, ASN: 9803, Description: Oficla/Sasfis C&C 78dc77d8d924278fbc91c1124a58a0ef http://www.malwaredomainlist.com/mdl.php?search=castellanasportsclub.com Host: castellanasportsclub.com/modules/mod_poll/5/in.php, IP address: 74.55.38.242, ASN: 21844, Description: exploit kit 8004251b1c6b70b27005435caf4dca82 http://www.malwaredomainlist.com/mdl.php?search=castellanasportsclub.com Host: castellanasportsclub.com/modules/mod_poll/5/pdfNode.php, IP address: 74.55.38.242, ASN: 21844, Description: pdf exploit b43f22c9644b97080ff948cba049d02b http://www.malwaredomainlist.com/mdl.php?search=castellanasportsclub.com Host: castellanasportsclub.com/modules/mod_poll/5/load.php?id=1, IP address: 74.55.38.242, ASN: 21844, Description: zeus/wsnpoem v2 trojan e6d63e0d88f54af69e8848b7ca684134 http://www.malwaredomainlist.com/mdl.php?search=grepsync.com Host: grepsync.com/, IP address: 86.57.246.177, ASN: 6697, Description: ftp drop zone for stolen documents c17469b3c079c0411a6e6418d832af7b http://www.malwaredomainlist.com/mdl.php?search=wrapp.info Host: wrapp.info/setup_build13401.php?cmd=getFile&counter=1&data=MigHWF5yDVUgETFIU6Rtbzdd8x9KMFBwb01vAlh7UyVyUyOxpUHX3gPSaD4AMfk%3D, IP address: 193.169.235.5, ASN: 32181, Description: fake av ff289d1e8a814e894397dec9f1011ccd http://www.malwaredomainlist.com/mdl.php?search=cargounioninc.com Host: cargounioninc.com/digit_alianse/gigager/morstils.php, IP address: 59.53.91.102, ASN: 4134, Description: zeus/wsnpoem v2 drop zone 16cdcaed79e2b3727091f3e0d01d4e15 http://www.malwaredomainlist.com/mdl.php?search=cargounioninc.com Host: cargounioninc.com/digit_alianse/ttt_makkopolo/yJaILxquGyq3jeP.exe, IP address: 59.53.91.102, ASN: 4134, Description: zeus/wsnpoem v2 trojan 47a309294f69c3b303d94451aabdc91d http://www.malwaredomainlist.com/mdl.php?search=cargoworldexchange.com Host: cargoworldexchange.com/trendi_duglas/mama_geras/babilon.php, IP address: 91.212.41.88, ASN: 29371, Description: zeus/wsnpoem v2 drop zone 104b16972edcf11f0a4a3aa3ea72d160 http://www.malwaredomainlist.com/mdl.php?search=193.105.0.85 Host: -, IP address: 193.105.0.85/uj65vrev.exe, ASN: 50390, Description: zeus/wsnpoem v2 trojan 45d4b8783624db7a146af2f60b07285c http://www.malwaredomainlist.com/mdl.php?search=193.105.0.85 Host: -, IP address: 193.105.0.85/scratkey.bin, ASN: 50390, Description: zeus/wsnpoem v2 config file 5d33cb6b4a89960e0b6fd803422841cc http://www.malwaredomainlist.com/mdl.php?search=193.105.0.85 Host: -, IP address: 193.105.0.85/dfh7445.php, ASN: 50390, Description: zeus/wsnpoem v2 drop zone 9e8c6ff30248955649a6300d780b3e45 http://www.malwaredomainlist.com/mdl.php?search=usworldcast.com Host: usworldcast.com/100/cfg3.bin, IP address: 188.124.5.106, ASN: 44565, Description: zeus/wsnpoem v2 config file ac9e45eafcb4cae5eb8ad07de0327449 http://www.malwaredomainlist.com/mdl.php?search=promolistings.net Host: promolistings.net/nulled/help.txt, IP address: 61.4.82.249, ASN: 17964, Description: zeus/wsnpoem v2 config file 1957d428cf4c01d08cd0d0d4f2a686c7 http://www.malwaredomainlist.com/mdl.php?search=promolistings.net Host: promolistings.net/nulled/game.exe, IP address: 61.4.82.249, ASN: 17964, Description: zeus/wsnpoem v2 trojan 52899c8d9725487bdaf1b6884a209c54 http://www.malwaredomainlist.com/mdl.php?search=promolistings.net Host: promolistings.net/nulled/gate.php, IP address: 61.4.82.249, ASN: 17964, Description: zeus/wsnpoem v2 drop zone d5aad7d060e1676e4a4c3f25e5924cfb http://www.malwaredomainlist.com/mdl.php?search=aeroninc.com Host: aeroninc.com/tytorials.bin, IP address: 115.100.250.105, ASN: 9803, Description: zeus/wsnpoem v2 config file a792ab23dfc493fe24d59db90c3f1266 http://www.malwaredomainlist.com/mdl.php?search=secline999.net Host: secline999.net/999.exe, IP address: 195.78.108.70, ASN: 49544, Description: zeus/wsnpoem v2 trojan 80a0b415bcd62ff18dbb4289fb4b2269 http://www.malwaredomainlist.com/mdl.php?search=inasss.info Host: inasss.info/_etc/pt.php, IP address: 122.115.63.9, ASN: 9803, Description: zeus/wsnpoem v2 drop zone 88f186da59348971c545a9293b80f55d http://www.malwaredomainlist.com/mdl.php?search=www.whoismak.net Host: www.whoismak.net/whois/index.php, IP address: 91.212.41.13, ASN: 29371, Description: zeus/wsnpoem v2 drop zone 6b62384830623b147a9c260471eecf81 http://www.malwaredomainlist.com/mdl.php?search=shop.ccomp.cz Host: shop.ccomp.cz/images/zs/brama.php, IP address: 80.95.108.218, ASN: 21435, Description: zeus/wsnpoem v2 drop zone 2c166c89c5301b501e2fca8b885387ec http://www.malwaredomainlist.com/mdl.php?search=193.105.0.210 Host: -, IP address: 193.105.0.210/revoltver.bin, ASN: 50390, Description: zeus/wsnpoem v2 config file 74300efb7d97806ffe1706d179de1c0d http://www.malwaredomainlist.com/mdl.php?search=193.105.0.210 Host: -, IP address: 193.105.0.210/antweprer.exe, ASN: 50390, Description: zeus/wsnpoem v2 trojan 70f98c678bee28e068e82850600f6379 http://www.malwaredomainlist.com/mdl.php?search=193.105.0.210 Host: -, IP address: 193.105.0.210/huizhu.php, ASN: 50390, Description: zeus/wsnpoem v2 drop zone 320413e29e85da57be312240a557ce99 http://www.malwaredomainlist.com/mdl.php?search=nsboxdownblodmids.com Host: nsboxdownblodmids.com/s/gate.php?magic=105910600001&ox=2-5-1-2600&tm=1&id=91723646&cache=1971623625&N=0, IP address: 188.124.7.243, ASN: 44565, Description: malware calls home ed607c9305f3c993aa5d2f4eea8b3763 http://www.malwaredomainlist.com/mdl.php?search=updatesupportsystem.com Host: updatesupportsystem.com/update/gate.php?magic=103310350001&ox=2-5-1-2600&tm=2&id=1907106991&cache=&N=0, IP address: 188.124.5.10, ASN: 44565, Description: malware calls home af05dc2da0b6a0035ea045dba41cdc3c http://www.malwaredomainlist.com/mdl.php?search=89.149.254.182 Host: -, IP address: 89.149.254.182/cache/anime6/cl.exe, ASN: 28753, Description: backdoor Hupigon, C&C 89.149.244.208/wm.php 2da103859de375efeb4018597a486d89 http://www.malwaredomainlist.com/mdl.php?search=antiviruspc-update.com Host: antiviruspc-update.com/setup1.exe, IP address: 91.210.173.25, ASN: 48588, Description: fake av bee568994bfba87de5eabfbc4767e273 http://www.malwaredomainlist.com/mdl.php?search=mydevnet.ca Host: mydevnet.ca/zTw6Q50392.exe, IP address: 216.157.148.192, ASN: 16557, Description: trojan Hiloti 9eb1058169f86ddf95f23ba40196a832 http://www.malwaredomainlist.com/mdl.php?search=yougoodvideo.net Host: yougoodvideo.net/exe/change.exe, IP address: 122.115.63.24, ASN: 9803, Description: trojan Alureon 404af3c19d53a1123a28633a9e2b3e85 http://www.malwaredomainlist.com/mdl.php?search=92.60.177.238 Host: -, IP address: 92.60.177.238/file.exe, ASN: 15772, Description: trojan Oficla/Sasfis 8239bb2cdec86a5d5b5fcdaf0ead0b60 http://www.malwaredomainlist.com/mdl.php?search=adobeserverupdate.com Host: adobeserverupdate.com/ezik.bin, IP address: 64.20.52.218, ASN: 19318, Description: zeus/wsnpoem v2 config file 24d4ec53d6f8da936e3fc1a55544a86b http://www.malwaredomainlist.com/mdl.php?search=adobeserverupdate.com Host: adobeserverupdate.com/gate.php, IP address: 64.20.52.218, ASN: 19318, Description: zeus/wsnpoem v2 drop zone 40c7e36e69cfe6fba1e111aee0de6bc1 http://www.malwaredomainlist.com/mdl.php?search=ablegang.com Host: ablegang.com/master/bb.php?id=465538349&v=200&tm=2&b=ruslann, IP address: 91.207.192.23, ASN: 9269, Description: Oficla/Sasfis C&C 2c7c906e59d9da91694a34b7ea7b510c http://www.malwaredomainlist.com/mdl.php?search=av-guru.net Host: av-guru.net, IP address: 79.135.152.5, ASN: 2588, Description: Rogue AV 1855e13e4d1af51fdc07655edb154ea5 http://www.malwaredomainlist.com/mdl.php?search=avcommand.net Host: avcommand.net, IP address: 79.135.152.5, ASN: 2588, Description: Rogue AV 876c92f874d78251a4d0ef765d8f603f http://www.malwaredomainlist.com/mdl.php?search=softcoregroup.com Host: softcoregroup.com, IP address: 79.135.152.5, ASN: 2588, Description: Rogue AV 2f61c04b5661279ab92b45a5de87f176