hs.2-216.zlkon.lv -(94.247.2.216)

[MysteryFCM]

ns2.pubilcnameserver7.com

Code: [Select]

Domain name: pubilcnameserver7.com

Registrant Contact:
   Koromodo
   ben Smith (jclark980e@gmail.com)
   2702570544 fax: 2702570544
   3073 Broaddus Avenue
   McDerrriou McDerrriou 40152
   ug

Administrative Contact:
   ben Smith (jclark980e@gmail.com)
   2702570544 fax: 2702570544
   3073 Broaddus Avenue
   McDerrriou McDerrriou 40152
   ug

Technical Contact:
   ben Smith (jclark980e@gmail.com)
   2702570544 fax: 2702570544
   3073 Broaddus Avenue
   McDerrriou McDerrriou 40152
   ug

Billing Contact:
   ben Smith (jclark980e@gmail.com)
   2702570544 fax: 2702570544
   3073 Broaddus Avenue
   McDerrriou McDerrriou 40152
   ug

DNS:
ns1.pubilcnameserver7.com
ns2.pubilcnameserver7.com

Created: 2009-03-30
Expires: 2010-03-30

searchopt7.com

Code: [Select]

Registration Service Provided By: ERDOMAIN.COM
Contact: +49.3036741521
Website: http://www.erdomain.com

Domain Name: SEARCHOPT7.COM

Registrant:
    PrivacyProtect.org
    Domain Admin (contact@privacyprotect.org)
    P.O. Box 97
    Note - All Postal Mails Rejected, visit Privacyprotect.org
    Moergestel
    null,5066 ZH
    NL
    Tel. +45.36946676

Creation Date: 08-Dec-2008 
Expiration Date: 08-Dec-2009


[SysAdMini]

searchopt7.com/ gives 404. Do you have a complete url ?

[MysteryFCM]

I don't. Just posted it due to;

http://threatinfo.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_FAKEAV.AVS&VSect=T

[SysAdMini]

Found in the Trendmicro article 

Code: [Select]

searchopt7.com/cmd.php
and the result of this url is interesting. Looks like a blocklist (host file).

[CkreM]

Found in the Trendmicro article 

Code: [Select]

searchopt7.com/cmd.php
and the result of this url is interesting. Looks like a blocklist (host file).

seems like many AV fraud there also?

[MysteryFCM]

Found in the Trendmicro article 

Code: [Select]

searchopt7.com/cmd.php
and the result of this url is interesting. Looks like a blocklist (host file).

hehe I'd not noticed that ....