Author Topic: chilljump.cn  (Read 7092 times)

0 Members and 1 Guest are viewing this topic.

June 13, 2008, 01:05:37 pm
Read 7092 times

sowhat-x

  • Guest
Quote
hxxp://chilljump.cn/patch/xset.txt
hxxp://chilljump.cn/patch/setup.txt
hxxp://chilljump.cn/patch/config.txt
hxxp://chilljump.cn/patch/bars.txt
hxxp://chilljump.cn/patch/atools.txt

June 13, 2008, 02:42:11 pm
Reply #1

sowhat-x

  • Guest
And a Pinch as well...
Quote
hxxp://redrum1999.freehostia.com/

PS:Lol,that's kinda funny - should I assume it's the same guy here?  :D
http://www.myspace.com/redrum1999

June 13, 2008, 03:11:00 pm
Reply #2

sowhat-x

  • Guest
And more Pinches as well...

Quote
hxxp://35627275.freehostia.com/
hxxp://444442242.freehostia.com/gate/
hxxp://foxyfog.freehostia.com/gate/gate.php
hxxp://uins-shop.1gb.in/gate/
hxxp://worldaroundus.info/gate/
hxxp://www.exprogs.ru/gate/gate.php
hxxp://www.muhamed.cn/GOOD/gate.php
hxxp://www.roknroll.890m.com/php/filelist.php
hxxp://www.surok.tu1.ru/gate/gate.php
hxxp://www.vano43.1gb.in/beerka/gate.php
hxxp://xyu-vam.jino-net.ru/gate/gate.php

Try stepping one dir above (directly into the 'gate' directories),
and have fun exploring misconfigured skiddie servers...

June 13, 2008, 03:43:35 pm
Reply #3

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964
Thank you.

June 13, 2008, 04:00:06 pm
Reply #4

sowhat-x

  • Guest
Quote
hxxp://gost.freehostia.com/gate/
hxxp://shad0w.onlinehoster.net/gate/gate.php
hxxp://www.novatorsmebel.ru/gate/gate.php

...During latest couple of weeks,in almost every skiddie forum out there,
I see people talking about/suggesting freehostia.ru for hosting malware...
Meaning,that we should probably expect more pinch/zeus malware sites hosted over there...

June 14, 2008, 11:38:37 am
Reply #5

sowhat-x

  • Guest
Quote
hxxp://bit.us.to/affiliate/549683/ad.php
hxxp://softportalfree.com/software/id/3913139/lsmagazine/required+to+download/
hxxp://209.160.23.165/forum/load.php?xpl=mdac
hxxp://gogodownnn.com/exe2/3913139.exe
hxxp://gogodownnn.com/exe2/3913568.exe
hxxp://gogodownnn.com/get/1xxx3913555/Patch.exe
hxxp://gogodownnn.com/get/2xxx3913555/Keygen.exe
hxxp://ilovethatdownload.com/get/2xxx3913555/Keygen.exe
hxxp://nadsam0.info/173.exe
hxxp://wever.biz/173.exe
hxxp://wever.biz/planet.exe
hxxp://www.nadsam0.info/is.exe
hxxp://www.nadsam0.info/xxx.exe

And also...
Quote
hxxp://66.11.114.16/~nextdoor/ -> various crap
hxxp://66.11.114.16/~nextdoor/old/ -> various crap with newer timestamps

June 14, 2008, 07:38:53 pm
Reply #6

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

June 16, 2008, 02:57:29 pm
Reply #7

sowhat-x

  • Guest
Quote
hxxp://www.w-32.com/ -> xmlhttp / looks like a cookiestealer
hxxp://www.w-32.com/i/zlaets.php
hxxp://www.w-32.com/The__One.exe -> 10/33 (30.31%) at VirusTotal