Malicious Domains by Lelenina

[lelenina]

Code: [Select]

http://makeithappen2ce.info/madeit/index.php?dd64feb7318e7f06a42aec888d85154e
Exploit kit

[lelenina]

Code: [Select]

http://wwwlilltlnu.co.cc/8j14renk/?5
Exploit kit

[lelenina]

Code: [Select]

http://takipu4.co.cc/notfound/inkujrgzk.php?n=setup174
Exploit kit

[lelenina]

Code: [Select]

http://bso3.co.cc/imgurl.php?hl=8da6357d55217c4b
Exploit kit.

[lelenina]

Code: [Select]

http://varapay01.co.cc/pp/jrfqysknxrdubucnjpbm.php?ID=15798
Exploit kit.

[lelenina]

Code: [Select]

http://wwwdilifiq.co.cc/m0td5iuo/?6
Exploit kit.
Would I find the payload of this the same way I would if it were a Phoenix Exploit Kit?

[SysAdMini]

Code: [Select]

http://wwwdilifiq.co.cc/m0td5iuo/?6
Exploit kit.
Would I find the payload of this the same way I would if it were a Phoenix Exploit Kit?

The url of this kit are being generated dynamically and work only once. For the same reason I don't list a payload url for these kits.

[lelenina]

Code: [Select]

http://wwwdilifiq.co.cc/m0td5iuo/?6
Exploit kit.
Would I find the payload of this the same way I would if it were a Phoenix Exploit Kit?

The url of this kit are being generated dynamically and work only once. For the same reason I don't list a payload url for these kits.

Just out of curiosity though, what is the payload URL for this particular exploit kit?  Thanks.

[lelenina]

Code: [Select]

http://vwi6.co.cc/catalog.php?one=d4474f74ed5e5acd
Exploit kit.

Code: [Select]

http://vwi6.co.cc/games/javaobe.jar
Java exploit.

[lelenina]

Code: [Select]

http://gsgwet52ysy.co.cc/QQkFBg0AAQ0MBA0DEkcJBQYNAA0NBAQFDA==
Exploit kit?

[lelenina]

Code: [Select]

http://4sex.cz.cc/
Fake porn site leads to fake AV.

[lelenina]

Code: [Select]

http://188.127.229.180/tds/nc.php
Redirects to fake scanner page.

[lelenina]

Code: [Select]

http://vwi8.co.cc/catalog.php?one=50b3cb8ecb2d58f3
Exploit kit

[lelenina]

Code: [Select]

http://vwi9.co.cc/catalog.php?one=6b2b857c90eacb53
Exploit kit

[lelenina]

Code: [Select]

http://2314.in/1297575843.php
Exploit kit