Malware Related > Eurohost LLC

91.212.65.140

(1/1)

MysteryFCM:
winpc-antivirus09.com

CkreM:

--- Code: ---Win-pc-antivirus-2009.com
--- End code ---

and the fake payment site:

--- Code: ---securebillingpayment.com/pp/
--- End code ---

Malware-Web-Threats:

--- Code: ---winpcantivirus2010.com/pp/id=
winpcantivirus2010.com/install.exe

--- End code ---
VirusTotal - 22/40 (55.00%)
ThreatExpert

Malware-Web-Threats:
Rogue AV:

--- Code: ---hxxp://personaldeluxeguard.com

--- End code ---

NS for malware domain:
ns1.wdnska.cn [91.212.65.139]
ns2.wdnska.cn [91.212.65.140]

Malware-Web-Threats:
Fraudulent payment page for rogue:

--- Code: ---xpdeluxeprotector.com/pp/

--- End code ---

Navigation

[0] Message Index