Black hole

[boston]

xttp://safenesscontent.ru/s4one/index.php -> xttp://paybucksinternet.ru/allow.php?page=ce7e6bb7d9eb6c7a -> xttp://paybucksinternet.ru/w.php?f=84&e=2
xttp://payment-glonas.in/position/index.php -> xttp://office-electronic.in/allow.php?page=19909cd93a1a78f6 ->  xttp://office-electronic.in/w.php?f=84&e=2
http://urlquery.net/report.php?id=6456
http://urlquery.net/report.php?id=6459
http://www.virustotal.com/file-scan/report.html?id=51e506e83218b276675622ce81d59c4356aa39738bd0c0c39bfaabb1839bd054-1319819808

[boston]

xttp://safenesscontent.ru/s4one/index.php -> xttp://activation-card.ru/allow.php?page=ce7e6bb7d9eb6c7a(already listed) -> xttp://activation-card.ru/w.php?f=84&e=2

http://urlquery.net/report.php?id=7094
http://r.virscan.org/report/658f9d78a2d0519a7d584ce16a92e8f8.html

[boston]

xttp://editions-hydromel.com/Scripts/swfobject_modified.js -> xttp://safenesscontent.ru/s4one/index.php -> xttp://deposit-consulting.ru/allow.php?page=19909cd93a1a78f6 ->  xttp://deposit-consulting.ru/w.php?f=130&e=2
http://urlquery.net/report.php?id=7449
http://www.virustotal.com/file-scan/report.html?id=48d28c89f010c87c1949f612d238f1bff0c078def3a9de1d95ea7a741bd7de32-1320517408

[boston]

xttp://editions-hydromel.com/Scripts/swfobject_modified.js -> xttp://safenesscontent.ru/s4one/index.php -> xttp://certificatecontroller.ru/allow.php?page=19909cd93a1a78f6 -> xttp://certificatecontroller.ru/w.php?f=130&e=2
http://urlquery.net/report.php?id=7498
http://r.virscan.org/report/30469c8f287335f133a927b5ad0cac3c.html

[boston]

xttp://advertisingteaser.ru/allow.php?page=19909cd93a1a78f6 -> xttp://advertisingteaser.ru/w.php?f=130&e=2
http://urlquery.net/report.php?id=7655
http://www.virustotal.com/file-scan/report.html?id=7ae1deace2b5e18a46b7b90e81208c1eb5629810bb81679ec348f80a2b6e42a8-1320707140

[boston]

xttp://teaser-network.ru/allow.php?page=19909cd93a1a78f6 -> xttp://teaser-network.ru/w.php?f=130&e=2
http://urlquery.net/report.php?id=7710
http://r.virscan.org/report/634553ef22b1a381358daecf4d20da49.html

[DnlMrx]

Did somebody have Infos about the version of these Blackhole exploitkits?

[boston]

the urlquery-results provide information about the version.
*
xttp://protect-holes.ru/allow.php?page=bf5de6c328ce79e3 -> xttp://protect-holes.ru/w.php?f=130&e=2
http://urlquery.net/report.php?id=8080
http://www.virustotal.com/file-scan/report.html?id=8eb5ce720ee51f916c84b247ec4e495ae54cbe6a3b28a6410a282bf5ff028af1-1320948771

[boston]

xttp://holesprotect.ru/allow.php?page=bf5de6c328ce79e3 -> xttp://holesprotect.ru/w.php?f=141&e=2
http://urlquery.net/report.php?id=8235
http://www.virustotal.com/file-scan/report.html?id=c3aafae4fdfd9967249fec02ee7757bf0f078f89559d696f15cd908478e23137-1321044456

[boston]

xttp://protectwindows.ru/allow.php?page=bf5de6c328ce79e3 -> xttp://protectwindows.ru/w.php?f=141&e=2
http://urlquery.net/report.php?id=8263
http://www.virustotal.com/file-scan/report.html?id=a282598686a6e7d917bfd7688e87b8f40ac974a6573b030e412ce707eed7308d-1321131629

[boston]

xttp://propaintball.pl -> xttp://speedpiramid.in/liman/index.php -> xttp://grammaticsupport.in/allow.php?page=14b02962aeac3888
-> xttp://grammaticsupport.in/w.php?f=141&e=2

xttp://grammatic.in/allow.php?page=14b02962aeac3888 -> xttp://grammatic.in/w.php?f=141&e=2

http://urlquery.net/report.php?id=9055
http://urlquery.net/report.php?id=9056
http://www.virustotal.com/file-scan/report.html?id=e531543a6077cceb6a1c6dd4ad26d11ce0a3f5c83bf60d5f46ea01fe9ee24e00-1321718270

[boston]

xttp://plugandgrow.co.uk -> xttp://fruityboom.info/dason/index.php -> xttp://miss-aurora.info/allow.php?page=14b02962aeac3888
-> xttp://miss-aurora.info/w.php?f=141&e=2
http://urlquery.net/report.php?id=9138
http://www.virustotal.com/file-scan/report.html?id=e3403b6b148058f038ddb2727cc8b5da6094efaeed0dec67634490681da0395e-1321808668

[boston]

xttp://misscaptivitymovie.info/allow.php?page=14b02962aeac3888 -> xttp://misscaptivitymovie.info/w.php?f=141&e=2
http://urlquery.net/report.php?id=9153

[boston]

xttp://nightmare.org -> xttp://dndelectric.info/jero/index.php -> xttp://tahit.info/www.php?page=b5af6db59003531d
-> xttp://tahit.info/w.php?f=153&e=2
http://urlquery.net/report.php?id=9512
http://www.virustotal.com/file-scan/report.html?id=d9ad58c63c3d6651359510a9d571274907e84a1f83326877ddbeff109e19cd45-1322069669

[boston]

xttp://comptechgrp.info/gizm/index.php -> xttp://androidpanties.info/www.php?page=b5af6db59003531d
-> xttp://androidpanties.info/w.php?f=153&e=8
http://wepawet.cs.ucsb.edu/view.php?hash=c0f2caa853915b1bb646484ba3e215cb&t=1322150145&type=js
http://www.virustotal.com/file-scan/report.html?id=c34b0634124716bb2007648e661c3fea1feb6baed13319c5a8c9233131f323f0-1322149739