Malware Domain List

Malware Related => Malicious Domains => Topic started by: cheezer on March 05, 2010, 03:44:42 pm

Title: av-guru.net
Post by: cheezer on March 05, 2010, 03:44:42 pm

av-guru.net is owned by the same guy who made:

avcommand.net
avgroupwebsite.com
softcoregroup.com

http://www.robtex.com/dns/av-guru.net.html#shared

Isn't there some automated way to monitor the registrar and when he enters the next domain we can add it to the list???

Title: Re: av-guru.net
Post by: eoin.miller on March 05, 2010, 09:50:43 pm

These all resolve to the same two IP's and one of them is in the Bigness block that is well known badness from St. Petersburg. All related back in to the RBN.

http://www.malwaredomainlist.com/forums/index.php?board=26.0

Title: Re: av-guru.net
Post by: SysAdMini on March 05, 2010, 10:03:37 pm

Quote from: cheezer on March 05, 2010, 03:44:42 pm

Isn't there some automated way to monitor the registrar and when he enters the next domain we can add it to the list???

You can search for registrants at domaintools.com, but you have to pay for it.

http://www.domaintools.com/registrant-search/