Malicious Domains by Lelenina

[lelenina]

Code: [Select]

http://pihrbu.net.in/scaner/?id=02915
Fake scanner page

Code: [Select]

http://pihrbu.net.in/get.php?id=02915
Fake AV

[lelenina]

Code: [Select]

http://zgggrusd.ru/wint2
Redirects to fake scanner page

[lelenina]

Code: [Select]

http://updatenews.cz.cc/firefox-updates/
Fake Firefox update

Code: [Select]

http://updatenews.cz.cc/firefox-updates/ff_secure_upd.exe
Fake AV

Code: [Select]

http://binertug.com/2ajimifr1.php?s=IBBGA
Exploit kit

[lelenina]

Code: [Select]

http://bentrolmy.com/3d8h6j60fll.php?s=IBBGA
Exploit kit

[lelenina]

Code: [Select]

http://djdbttb.co.cc/red.php
Iframe directs to exploit kit

Code: [Select]

http://broundfal.com/dm3rgu.php?s=IBBKB
Exploit kit

[lelenina]

Code: [Select]

http://4frank.cz.cc/c/enasfmdtiwjwkujm1.php
Exploit kit

[lelenina]

Code: [Select]

http://curtyacupt.com/mytds/go.php?s=32
Redirects to fake scanner page

[lelenina]

Code: [Select]

http://myutilitom.com/eoiouo8aa781io/kwgmctgvjrfmcqy.php
Exploit kit

[lelenina]

Code: [Select]

http://webvideocentral.net/xplays.php?id=45031
Directs to trojan

Code: [Select]

http://fileplatz.com/video-plugin.45031.exe
Trojan

Code: [Select]

http://ymedonesalykura.cjb.com/land/maindirectory/adobeflashplayerv10.0.32.20.exe
Trojan

Code: [Select]

http://190.162.24.18:11066/index.html?u=406&t=1
Fake scanner page

[lelenina]

Code: [Select]

http://sungbyuk.com/51ba0qq5x.php?s=IBBGA
Exploit kit

[lelenina]

Code: [Select]

http://bestrecie.com/bjzlmpc779rh.php?s=IBBKB
Exploit kit

Code: [Select]

http://bestrecie.com/yocraqywyoyqe.pdf
http://bestrecie.com/yudrevgpeukrini.pdf
http://bestrecie.com/fpdletxubniuewd.pdf
http://bestrecie.com/crknxwbocphwctf.pdf
Pdf exploits

[lelenina]

Code: [Select]

http://vitaminki.co.cc/
If referrer is google, iframe directs to exploit kit.

Code: [Select]

http://yourqare.com/anawa8h8.php?s=IBBKB
Exploit kit

[lelenina]

Code: [Select]

http://lampasit.com/dx.php?i=91e33396-775d-4b95-81ce-c5084c00a332&a=1091409010&f=0
Tdss

[lelenina]

Code: [Select]

http://availableused.co.cc/red.php
Redirects to exploit kit

[lelenina]

Code: [Select]

http://whitesquarecube.com/1/gqitgzjqhlfph.pdf
http://ujsoltfinl.com/xwgzjmgwyvht.pdf
Pdf exploits
These pdf files are encrypted.  Can Malzilla be used to find the URLS of the payloads they download?  If not, how can the URLS be found?