Author Topic: Asprox domains  (Read 4496 times)

0 Members and 1 Guest are viewing this topic.

September 27, 2008, 10:53:32 am
Read 4496 times

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
hxxp://mheop.ru/cgi-bin/index.cgi?script
hxxp://xenbv.ru/cgi-bin/index.cgi?script
hxxp://deryv.ru/cgi-bin/index.cgi?script
hxxp://pormce.ru/cgi-bin/index.cgi?script
hxxp://ctiry.ru/cgi-bin/index.cgi?script
hxxp://mentoe.ru/cgi-bin/index.cgi?script
hxxp://vtg43.ru/cgi-bin/index.cgi?script
hxxp://pkseio.ru/cgi-bin/index.cgi?script
hxxp://mnicbre.ru/cgi-bin/index.cgi?script
hxxp://www.mnbenio.ru/script.js
hxxp://h3x.info
Ruining the bad guy's day

October 02, 2008, 05:49:17 pm
Reply #1

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

November 12, 2008, 09:23:00 am
Reply #2

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
hxxp://berjke.ru/cgi-bin/index.cgi?script
hxxp://81dns.ru/cgi-bin/index.cgi?script
Ruining the bad guy's day

January 23, 2009, 05:03:09 pm
Reply #3

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
www.dbrgf.ru/script.js
www.lijg.ru/script.js
www.bnmd.kz/script.js
www.nvepe.ru/script.js
www.mtno.ru/script.js
www.wmpd.ru/script.js
www.msngk6.ru/script.js
www.dft6s.kz/script.js
www.vjhdo.com/script.js
www.aspx37.me/script.js
www.advabnr.com/script.js
fmkopswuzhj.biz/script.js
fnygfr.com/script.js
fuougcdv.org/script.js
fvwugekf.info/script.js
fwkbt.info/script.js
gbrpn.org/script.js
gbxpxugx.org/script.js
ghtileh.biz/script.js
gnyluuxneo.com/script.js

sites have 14 IPs on different networks!!!!

script.js redirects to
Code: [Select]
google-analitycs.lijg.rustyle.js  redirects to
Code: [Select]
google-analitycs.dbrgf.ru
payload analysis:

http://wepawet.cs.ucsb.edu/view.php?hash=c2de7c7c9635729892e5e91d2e3b9ecd&t=1232732326&type=js



Ruining the bad guy's day