Check Website
Inclusion Status
It is currently Fri Oct 20, 2017 1:11 am

All times are UTC




Post new topic Reply to topic  [ 766 posts ]  Go to page Previous  1 ... 67, 68, 69, 70, 71, 72, 73 ... 77  Next
Author Message
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sat Sep 16, 2017 2:37 pm 
Offline
User avatar

Joined: Sun May 31, 2009 7:17 am
Posts: 97
Location: Phx. AZ
Mandrake09 wrote:
zh-yc.com
17lexing.com
17lexing.com/wp-content/themes/attitude/library/functions/sitemap.html
zh-yc.com/wp-content/themes/raptor/admin/js/sitemap.html

Thanks for submitting

_________________
Malwarebytes Web Research Labs Analyst
Malwarebytes


TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals


IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sat Sep 16, 2017 4:51 pm 
Offline

Joined: Tue Aug 16, 2016 12:49 pm
Posts: 138
projetosaofrancisco.com.br
projetosaofrancisco.com.br/wp-content/plugins/js_composer/assets/less/shortcodes/sitemap.html

Canadian Pharmacy is an illegal Pharmacy Operated/Promoted by Criminals)


Last edited by Mandrake09 on Sun Sep 17, 2017 12:28 am, edited 1 time in total.


IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sat Sep 16, 2017 5:26 pm 
Offline
User avatar

Joined: Sun May 31, 2009 7:17 am
Posts: 97
Location: Phx. AZ
Mandrake09 wrote:
projetosaofrancisco.com.brl
projetosaofrancisco.com.br/wp-content/plugins/js_composer/assets/less/shortcodes/sitemap.html

Canadian Pharmacy is an illegal Pharmacy Operated/Promoted by Criminals)

Got it, thanks!

_________________
Malwarebytes Web Research Labs Analyst
Malwarebytes


TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals


IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sun Sep 17, 2017 12:27 am 
Offline

Joined: Tue Aug 16, 2016 12:49 pm
Posts: 138
healthylifeth17.com
healthylifeth17.com/wp-content/plugins/Ultimate_VC_Addons/assets/images/sitemap.html

Canadian Pharmacy is an illegal Pharmacy Operated/Promoted by Criminals)



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sun Sep 17, 2017 3:22 am 
Offline
User avatar

Joined: Sun May 31, 2009 7:17 am
Posts: 97
Location: Phx. AZ
Mandrake09 wrote:
healthylifeth17.com
healthylifeth17.com/wp-content/plugins/Ultimate_VC_Addons/assets/images/sitemap.html

Canadian Pharmacy is an illegal Pharmacy Operated/Promoted by Criminals)

We'll check it out, thx.

_________________
Malwarebytes Web Research Labs Analyst
Malwarebytes


TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals


IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sun Sep 17, 2017 8:43 am 
Offline

Joined: Tue Aug 16, 2016 12:49 pm
Posts: 138
Bank of America PHISH

jumeirah.ru/sgdsipfjd.php
jumeirah.ru
beach.nocdirect.com
beach.nocdirect.com/beach.nocdirect.com/~umr/themes/default/assets/css/fonts/online/Bank-account/bankofamerica/login/en/?62656163682e6e6f636469726563742e636f6d



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sun Sep 17, 2017 2:56 pm 
Offline
User avatar

Joined: Sun May 31, 2009 7:17 am
Posts: 97
Location: Phx. AZ
Mandrake09 wrote:
Bank of America PHISH

jumeirah.ru/sgdsipfjd.php
jumeirah.ru
beach.nocdirect.com
beach.nocdirect.com/beach.nocdirect.com/~umr/themes/default/assets/css/fonts/online/Bank-account/bankofamerica/login/en/?62656163682e6e6f636469726563742e636f6d

Thx!

_________________
Malwarebytes Web Research Labs Analyst
Malwarebytes


TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals


IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Mon Sep 18, 2017 10:07 am 
Offline

Joined: Tue Aug 16, 2016 12:49 pm
Posts: 138
zabory-khabarovsk.ru
zabory-khabarovsk.ru/media/editors/tinymce/plugins/save/sitemap.html

Canadian Pharmacy is an illegal Pharmacy Operated/Promoted by Criminals)



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Mon Sep 18, 2017 11:55 am 
Offline

Joined: Sat Jun 06, 2015 11:58 am
Posts: 59
Looks like there was some infection spread with ccleaner recently, looks it used some domains and IP's to do bad stuff. Might as well block them.

Here they are:

DGA Domains
ab6d54340c1a[.]com
aba9a949bc1d[.]com
ab2da3d400c20[.]com
ab3520430c23[.]com
ab1c403220c27[.]com
ab1abad1d0c2a[.]com
ab8cee60c2d[.]com
ab1145b758c30[.]com
ab890e964c34[.]com
ab3d685a0c37[.]com
ab70a139cc3a[.]com

IP Addresses
216[.]126[.]225[.]148

Here is the source of that list with more info: http://blog.talosintelligence.com/2017/ ... lware.html (don't block)
More info from piriform: https://www.piriform.com/news/blog/2017 ... dows-users (again, don't block)

EDIT: looks like the domains already are blocked, but not the IP address. Sould have checked the domains, sorry.



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Mon Sep 18, 2017 12:55 pm 
Offline
User avatar

Joined: Sun May 31, 2009 7:17 am
Posts: 97
Location: Phx. AZ
Mandrake09 wrote:
zabory-khabarovsk.ru
zabory-khabarovsk.ru/media/editors/tinymce/plugins/save/sitemap.html

Canadian Pharmacy is an illegal Pharmacy Operated/Promoted by Criminals)

Thank you.

_________________
Malwarebytes Web Research Labs Analyst
Malwarebytes


TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals


IP:
top
Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 766 posts ]  Go to page Previous  1 ... 67, 68, 69, 70, 71, 72, 73 ... 77  Next

All times are UTC


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
hpHosts and hpHosts Online are copyright © Malwarebytes Corp - All Rights Reserved

Powered by phpBB © 2000-2009 phpBB Group