91.212.41.111

[SysAdMini]

redirects to Luckysploit

Code: [Select]

autoperformspec.com/in.cgi?17&private4=nonadultexe
redirects to fake av

Code: [Select]

gje.stakeshouse.cn/in.cgi?9
autoperformspec.com/in.cgi?9http://wepawet.cs.ucsb.edu/view.php?hash=cbeeb1718124521feea7c70a20ef0084&t=1242852849&type=js

[Malware-Web-Threats]

redirects to the same luckysploit at updateserversoftware[.]com served by hikimounttrail[.]com

example:
Wepawet
Wepawet

Code: [Select]

apprecearlyrock.com/in.cgi?17&private3=adultexe
autoperformspec.com/in.cgi?17&private3=adultexe
bankinggolf.cn/in.cgi?17&private3=adultexe
clubmillionswow.cn/in.cgi?17&private3=adultexe
dayindigo.cn/in.cgi?17&private3=adultexe
designroots.cn/in.cgi?17&private3=adultexe
drawingstyle.cn/in.cgi?17&private3=adultexe
dreamlitediamond.cn/in.cgi?17&private3=adultexe
greenhistory.cn/in.cgi?17&private3=adultexe
financeimprove.cn/in.cgi?17&private3=adultexe
heartdomainer.cn/in.cgi?17&private3=adultexe
housedomainname.cn/in.cgi?17&private3=adultexe
housevisual.cn/in.cgi?17&private3=adultexe
islandtravet.cn/in.cgi?17&private3=adultexe
kaktotak.net/in.cgi?17&private3=adultexe
lifenaming.cn/in.cgi?17&private3=adultexe
liteauction.cn/in.cgi?17&private3=adultexe
litefront.cn/in.cgi?17&private3=adultexe
melodynew.cn/in.cgi?17&private3=adultexe
moulitehat.cn/in.cgi?17&private3=adultexe
musicdomainer.cn/in.cgi?17&private3=adultexe
newtransfer.cn/in.cgi?17&private3=adultexe
nextfreedollar.com/in.cgi?17&private3=adultexe
nicescores.cn/in.cgi?17&private3=adultexe
oceandealer.cn/in.cgi?17&private3=adultexe
palaceyou.cn/in.cgi?17&private3=adultexe
partsocean.cn/in.cgi?17&private3=adultexe
peopleopera.cn/in.cgi?17&private3=adultexe
rainfinish.cn/in.cgi?17&private3=adultexe
rainjukebox.cn/in.cgi?17&private3=adultexe
resorttravet.cn/in.cgi?17&private3=adultexe
roomsme.cn/in.cgi?17&private3=adultexe
roselambda.cn/in.cgi?17&private3=adultexe
schoolh.cn/in.cgi?17&private3=adultexe
seamodern.cn/in.cgi?17&private3=adultexe
smilecasino.cn/in.cgi?17&private3=adultexe
soulmosp.cn/in.cgi?17&private3=adultexe
symphonygold.cn/in.cgi?17&private3=adultexe
stakeshouse.cn/in.cgi?17&private3=adultexe
startgetaways.cn/in.cgi?17&private3=adultexe
teamwows.cn/in.cgi?17&private3=adultexe
travetbeach.cn/in.cgi?17&private3=adultexe
travets.cn/in.cgi?17&private3=adultexe
use-sena.cn/in.cgi?17&private3=adultexe
vilasse.cn/in.cgi?17&private3=adultexe
vilihood.cn/in.cgi?17&private3=adultexe
vitamingood.cn/in.cgi?17&private3=adultexe
websiteflower.cn/in.cgi?17&private3=adultexe
weekendtravet.cn/in.cgi?17&private3=adultexe
worksean.cn/in.cgi?17&private3=adultexe
workfuse.cn/in.cgi?17&private3=adultexe
wowregister.cn/in.cgi?17&private3=adultexe
xuyxuyxuy.cn/in.cgi?17&private3=adultexe
youbonusnew.cn/in.cgi?17&private3=adultexe
yrapyatnica.com/in.cgi?17&private3=adultexe
zyne4ka.com/in.cgi?17&private3=adultexe