Author Topic: Malicious Domains by Lelenina  (Read 81961 times)

0 Members and 1 Guest are viewing this topic.

December 17, 2010, 10:07:15 pm
Reply #225

lelenina

  • Sr. Member

  • Offline
  • ****

  • 239
Code: [Select]
http://makeithappen2ce.info/madeit/index.php?dd64feb7318e7f06a42aec888d85154e
Exploit kit

January 09, 2011, 07:28:52 am
Reply #226

lelenina

  • Sr. Member

  • Offline
  • ****

  • 239
Code: [Select]
http://wwwlilltlnu.co.cc/8j14renk/?5
Exploit kit

January 25, 2011, 06:44:12 pm
Reply #227

lelenina

  • Sr. Member

  • Offline
  • ****

  • 239
Code: [Select]
http://takipu4.co.cc/notfound/inkujrgzk.php?n=setup174
Exploit kit

January 26, 2011, 11:38:16 pm
Reply #228

lelenina

  • Sr. Member

  • Offline
  • ****

  • 239
Code: [Select]
http://bso3.co.cc/imgurl.php?hl=8da6357d55217c4b
Exploit kit.

January 27, 2011, 04:37:19 am
Reply #229

lelenina

  • Sr. Member

  • Offline
  • ****

  • 239
Code: [Select]
http://varapay01.co.cc/pp/jrfqysknxrdubucnjpbm.php?ID=15798
Exploit kit.

January 30, 2011, 06:23:55 am
Reply #230

lelenina

  • Sr. Member

  • Offline
  • ****

  • 239
Code: [Select]
http://wwwdilifiq.co.cc/m0td5iuo/?6
Exploit kit.
Would I find the payload of this the same way I would if it were a Phoenix Exploit Kit?

January 30, 2011, 02:04:47 pm
Reply #231

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
http://wwwdilifiq.co.cc/m0td5iuo/?6
Exploit kit.
Would I find the payload of this the same way I would if it were a Phoenix Exploit Kit?

The url of this kit are being generated dynamically and work only once. For the same reason I don't list a payload url for these kits.
Ruining the bad guy's day

January 30, 2011, 05:38:46 pm
Reply #232

lelenina

  • Sr. Member

  • Offline
  • ****

  • 239
Code: [Select]
http://wwwdilifiq.co.cc/m0td5iuo/?6
Exploit kit.
Would I find the payload of this the same way I would if it were a Phoenix Exploit Kit?

The url of this kit are being generated dynamically and work only once. For the same reason I don't list a payload url for these kits.
Just out of curiosity though, what is the payload URL for this particular exploit kit?  Thanks.

January 30, 2011, 09:56:07 pm
Reply #233

lelenina

  • Sr. Member

  • Offline
  • ****

  • 239
Code: [Select]
http://vwi6.co.cc/catalog.php?one=d4474f74ed5e5acd
Exploit kit.
Code: [Select]
http://vwi6.co.cc/games/javaobe.jar
Java exploit.

February 01, 2011, 07:48:14 pm
Reply #234

lelenina

  • Sr. Member

  • Offline
  • ****

  • 239
Code: [Select]
http://gsgwet52ysy.co.cc/QQkFBg0AAQ0MBA0DEkcJBQYNAA0NBAQFDA==
Exploit kit?

February 01, 2011, 07:51:58 pm
Reply #235

lelenina

  • Sr. Member

  • Offline
  • ****

  • 239
Code: [Select]
http://4sex.cz.cc/
Fake porn site leads to fake AV.

February 07, 2011, 12:28:55 am
Reply #236

lelenina

  • Sr. Member

  • Offline
  • ****

  • 239
Code: [Select]
http://188.127.229.180/tds/nc.php
Redirects to fake scanner page.

February 07, 2011, 09:00:48 pm
Reply #237

lelenina

  • Sr. Member

  • Offline
  • ****

  • 239
Code: [Select]
http://vwi8.co.cc/catalog.php?one=50b3cb8ecb2d58f3
Exploit kit

February 08, 2011, 10:42:43 pm
Reply #238

lelenina

  • Sr. Member

  • Offline
  • ****

  • 239
Code: [Select]
http://vwi9.co.cc/catalog.php?one=6b2b857c90eacb53
Exploit kit

February 13, 2011, 04:49:51 am
Reply #239

lelenina

  • Sr. Member

  • Offline
  • ****

  • 239
Code: [Select]
http://2314.in/1297575843.php
Exploit kit