Malware Domain List

Malware Related => Malicious Domains => Topic started by: Edgar Bangkok on January 13, 2008, 04:16:30 am

Title: Change the number change the rogue malware page
Post by: Edgar Bangkok on January 13, 2008, 04:16:30 am

The site scanner.malwarealarms.com is hosted same domain spyshredderscanner.com

When site load in browser url change follow this rule

Quote

hxxp://scanner.malwarealarm.com/  key number

  /   

If you change the key number  whit 3 4 5 6  8 ........ 10 .... 13 you load different rogue application pages some with malware also.

Example:

Quote

hXXp://scanner.malwarealarm.com/8/

  or

Quote

hXXp://scanner.malwarealarm.com/5/

  or ........

I used Dirbuster software for find different key number sites and this is report:

DirBuster 0.9.9 - Report
http://www.sittinglittleduck.com
Report produced on Sun Jan 13 10:58:02 ICT 2008
--------------------------------

Quote

hXXp://scanner.malwarealarm.com:80

--------------------------------
Directories found during testing:

Dirs found with a 302 response:

/
/3/
/4/
/8/

Dirs found with a 200 response:

/5/
/9/
/10/
/11/
/12/
/13/


Edgar    ;)

http://edetools.blogspot.com/

Title: Re: Change the number change the rogue malware page
Post by: JohnC on January 13, 2008, 02:04:35 pm

Thanks for the hint at finding new malware. :)