Help - Search - Members - Calendar
Full Version: Bad Websites
B.I.S.S. Forums > Bluetack Software > HOSTS Section > Host Submissions
Pages: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11
Kimberly
Thanks r00ted, i'll look up that page with the jpg image, maybe some more hide into the source code.

I'll add them to the HOSTS file and I don't think anyone is gonna contest the tracker.affistats biggrin.gif

Kim
r00ted
good deal.
coq
Hello members;
I have found Host entries which may be of use from the Zeropaid Community Forums.
I have requested and obtained their consent to transfer this list.
I wish I could filter it for you to correspond with the host list you update and present to members -but I lack the required knowledge for what seems a time laboring job.

Hope it serves your needs to weed out such scam sites from the internet.
coqauvin

127.0.0.1 gamedownloadcentral.com
127.0.0.1 247downloads.com
127.0.0.1 americamp3network.com
127.0.0.1 aresgalaxy.com
127.0.0.1 bolton-heaton.freeserve.co.uk/kazaa.htm
127.0.0.1 charliespiano.com/downloadable_music.php
127.0.0.1 compareshopsave.com/moviesites
127.0.0.1 completemovies.com/index2.html
127.0.0.1 download-central.com
127.0.0.1 download-central.mp3u.com
127.0.0.1 download-mp3-music.com
127.0.0.1 download-mp3-now.com
127.0.0.1 downloadshield.com
127.0.0.1 downloadsociety.com
127.0.0.1 downloads-unlimited.com
127.0.0.1 easymusicdownload.com
127.0.0.1 emp3downloadhq.com
127.0.0.1 emule.biz
127.0.0.1 fileminer.com
127.0.0.1 filesharingfriends.com
127.0.0.1 filmgimp.org
127.0.0.1 findanymusic.com
127.0.0.1 flicksunlimited.com
127.0.0.1 flixs.net
127.0.0.1 freeality.com/emusic.htm
127.0.0.1 freemovieserver.com
127.0.0.1 free-mp3-music-player-downloads.com
127.0.0.1 freewebhosting.hostdepartment.com/k/kazaalitetk
127.0.0.1 gamedownloadcentral.com
127.0.0.1 gettingmovies.com/Movies.html
127.0.0.1 hqmovies.net
127.0.0.1 ikazaa.net
127.0.0.1 imovieshare.com
127.0.0.1 imusicshare.com
127.0.0.1 kaaza.com
127.0.0.1 kaza.com
127.0.0.1 kazaa.co.kr
127.0.0.1 kazaa.de
127.0.0.1 kazaa.freakin.nl
127.0.0.1 kazaa.ishareit.com
127.0.0.1 kazaa-download.de
127.0.0.1 kazaa-file-sharing-downloads.com
127.0.0.1 kazaagold.com
127.0.0.1 kazaa-gold.com
127.0.0.1 kazaalite.com
127.0.0.1 kazaalite.com
127.0.0.1 kazaa-lite.com
127.0.0.1 kazaalite.de
127.0.0.1 kazaalite.nl
127.0.0.1 kazaa-lite.tk
127.0.0.1 kazaam8.tk
127.0.0.1 kazaamedia.com
127.0.0.1 kazaaplatinum.com
127.0.0.1 kazaa-plus.net
127.0.0.1 kazza.com
127.0.0.1 kazza.com
127.0.0.1 klite.tk
127.0.0.1 k-lite.tk
127.0.0.1 k-lite-legal.com
127.0.0.1 klitesite.com
127.0.0.1 k-litetk.com
127.0.0.1 kl-kpp.net
127.0.0.1 litetk.com
127.0.0.1 madeformusic.com
127.0.0.1 monstershare.com
127.0.0.1 morpheusultra.com
127.0.0.1 moviedownloadcity.com
127.0.0.1 mp3.abandonware.nu
127.0.0.1 mp333.com
127.0.0.1 mp3advance.com
127.0.0.1 mp3advance.com
127.0.0.1 mp3downloadcity.com
127.0.0.1 mp3downloadhq.com
127.0.0.1 mp3ebook.com
127.0.0.1 mp3grandcentral.net
127.0.0.1 mp3high.com
127.0.0.1 mp3madeeasy.com
127.0.0.1 mp3musicworld.com
127.0.0.1 mp3musiczone.com
127.0.0.1 mp3-network.com
127.0.0.1 mp3perfect.com
127.0.0.1 mp3rocks.net
127.0.0.1 mp3shock.net
127.0.0.1 mp3specialty.com
127.0.0.1 mp3u.com
127.0.0.1 mp3u.com
127.0.0.1 mp3university.com
127.0.0.1 mp3yes.com
127.0.0.1 musicdownloadcentral.com
127.0.0.1 music-download-network.com
127.0.0.1 music-download-world.com
127.0.0.1 my-free-music.com
127.0.0.1 mymusicinc.com
127.0.0.1 ondemandmp3.com
127.0.0.1 poilet.com
127.0.0.1 sharaza.com
127.0.0.1 slsk.org
127.0.0.1 song-download-world.com
127.0.0.1 songfly.com
127.0.0.1 songs4free.com
127.0.0.1 supernova.org
127.0.0.1 symynet.com/educational_software/kazaa_light.htm
127.0.0.1 unlimitedshock.com
127.0.0.1 winmx-download-winmx.com
127.0.0.1 www328.ws1.internetservice.com
127.0.0.1 xvidmovies.com
Kimberly
Hi coq,

Thanks, i'll sort them out, np smile.gif

Just a detail, entries that contain references to directories or webpages are not allowed in a HOSTS file.

127.0.0.1 bolton-heaton.freeserve.co.uk/kazaa.htm
127.0.0.1 charliespiano.com/downloadable_music.php
127.0.0.1 compareshopsave.com/moviesites
127.0.0.1 completemovies.com/index2.html
127.0.0.1 freeality.com/emusic.htm
127.0.0.1 freewebhosting.hostdepartment.com/k/kazaalitetk
127.0.0.1 gettingmovies.com/Movies.html
127.0.0.1 symynet.com/educational_software/kazaa_light.htm

Kim
Samurai V
A couple of new baddies:

my.freeze.com ("free" screensavers/browser hijacker, reported at Mozillazine)
ads.freeze.com
Kimberly
@r00ted

I went to the page with the image, I didn't get any of the links you did post, although I'm gonna add those anyway. They might be random, I did find the following in the source code of the page and that's enough for me too. Left out the tags of course.

Casale Media 2004 ©
Ad Format: Pop Under
Domain(s): imageshack.us

a bunch of var that refer to date, time, hostname, ip
hxxp://as.casalemedia.com

Casale Media 2004

Their advertise link points to hxxp://reg.imageshack.us/adr/adrevenue/


@Samurai V

Thanks, added. smile.gif

Kim
r00ted
reg.imageshack.us is the registration address to create an uploader account @ imageshack.us I believe wink.gif
Kimberly
Not really, it's used for different purposes laugh.gif
Paypal, ebay, slide, advertising...

hxxp://reg.imageshack.us/adr/adrevenue/
QUOTE
Welcome to ImageShack Corp.

Menu ImageShack Advertising Network

Login The ImageShack Advertising Network provides advertisers with a simple and intuitive way of displaying advertisements on ImageShack's pages.

Registration Please register and create an advertisement to see the current price schedule.

Advertisers Please visit an example page of where advertisements will appear.

Help

FAQ
Terms
Contact Us

Copyright © 2005 ImageShack Corp.

Powered by AdRevenue © 2005 W3matter LLC

Report Abuse or Request Deletion | Customer Service | Marketing Opportunities
Link to Us | Advertise | Transloader | Syndication | Sidebar
r00ted
ok. I see what you're coming from now.

I was looking at the http://reg.imageshack.us/register.php page.

CODE
Register with ImageShack to receive personalized service!

Benefits of Registration:
Keep track of all the images you ever upload.
Get image code for your images with the click of a button.
View statistics for all your images, such as image size and time uploaded.
Access your images from anywhere in the world.
Easy, user-friendly interface.
Have the ability to delete and undelete your images!
Upload batch multiple images, with the ability to resize them upon upload!
Switch from list view or thumbnail view, depending on your preference.
Registration is absolutely free!
Please use a valid email address as we will send you a confirmation email with your activation link. We will never sell or reveal your email address.

NOTE: Your email provider MAY accidentally place your ImageShack Activation Email into your Junk Mail Folder. Please check that folder if you do not receive your Activation Email within 15 minutes of registration.

IMPORTANT NOTICE REGARDING INABILITY TO LOGIN:

If you ever accidentally lose your activation link, simply enter the same email address as before into the email fields located below and click the "Register" button.

Another email will be sent out with your activation link.

Clicking the activation link in your email will log you into the system.

In order that you do not lose your activation link, make sure to BOOKMARK your Images Panel by clicking "Bookmark" in your Images Panel. Also, make sure to read the email that is sent upon registration, as it contains VERY IMPORTANT information regarding your account.


Email Address

Email Address again (to verify)


Either way, registration isn't "necessary" at that page, so it probably won't hurt to be blocked.
Samurai V
Major new bad site, reported today at isc.sans.org:

googkle.com
www.googkle.com (do not click!)

Common typo of "google," installs a lot of malware and offers links to fake antivirus remover sites mad.gif
Kimberly
Thanks Samurai V, added.

They should be blocked by the Spyware list also. It's a well known CWS IP

Kim
Samurai V
A lot of malware sites related to the Googkle exploit, reported at isc.sans.org and http://www.f-secure.com/v-descs/googkle.shtml :

127.0.0.1 msnm.com
127.0.0.1 gfoogle.com
127.0.0.1 ghoogle.com
127.0.0.1 googfle.com
127.0.0.1 msn1.com
127.0.0.1 passpport.com
127.0.0.1 xcnn.com
127.0.0.1 www.msnm.com
127.0.0.1 www.gfoogle.com
127.0.0.1 www.ghoogle.com
127.0.0.1 www.googfle.com
127.0.0.1 www.luycos.com
127.0.0.1 www.msn1.com
127.0.0.1 www.passpport.com
127.0.0.1 wwww.xcnn.com
127.0.0.1 luycos.com
127.0.0.1 sturfajtn.com
127.0.0.1 www.sturfajtn.com
127.0.0.1 pillz.info
127.0.0.1 www.pillz.info
127.0.0.1 topantivirus.biz
127.0.0.1 www.topantivirus.biz
Kimberly
Thanks Samurai V, I'll add them.

ntsearch.com is part of the game again and that's a well known coolwebsearch site.

Kim
Samurai V
During a routine Google search, I found what appeared to be a scam antispyware site:

spyware-search.urlmax.org

All of the links there pointed to the domain:

paysefeed.com
www.paysefeed.com

Needless to say, I did not click those links biggrin.gif
Samurai V
Banner ad servers:

img.bbchat.tv
ad.jp.ap.valuecommerce.com
Kimberly
Thanks Samurai V, all added, plus a few extra's biggrin.gif

spyware-search.urlmax.org : 80.77.80.145

Same IP
spyware-uninstaler.urlmax.org
tibs-spyware-removal.urlmax.org

spyware-sletteportal.urlmax.org : 69.31.132.52

paysefeed.com
www.paysefeed.com
Listed as CrapHijackers in IE-SPYAD

Kim
MaKaVeLi
An ad server:

ad.mediabiz.de
MaKaVeLi
This site reviewed rogue or used to be rogue spyware apps and recommended them:

www.anti-spyware-reviews.net
anti-spyware-reviews.net

This one reviewed one rogue spyware app and recommened it:

www.alcatrazsecurity.net
alcatrazsecurity.net

Rogue anti-spyware apps:

www.doctor-alex.com
doctor-alex.com
www.spykilier.com
spykilier.com

Ad server:

rcm-images.amazon.com

These 2 say file not found but they are just domains registered by spyspotter:

e.spyspotter.com
c.spyspotter.com
r00ted
hxxp://www.pcper.com/article.php?aid=127
has some ads on there site:

127.0.0.1 ads.pcper.com
Kimberly
Thanks MaKaVeLi & r00ted. Added smile.gif

Kim
MaKaVeLi
Rouge spyware app:

www.adware-toolbox.com
adware-toolbox.com
MaKaVeLi
Google, what would you do without it? laugh.gif

Rouge spyware apps:

www.adawareinfo.com
adawareinfo.com
www.adwaredeluxe.com
adwaredeluxe.com

Offers knockoff spyware domain names:

www.adwareplatinum.com
adwareplatinum.com
www.addetect.com
addetect.com
www.adwaregold.com
adwaregold.com
www.adwarerepair.com
adwarerepair.com
www.antispyadvanced.com
antispyadvanced.com
www.antispygold.com
antispygold.com
www.bugcrusher.com
bugcrusher.com
www.pestdefender.com
pestdefender.com
www.pesteraser.com
pesteraser.com
www.pestwasher.com
pestwasher.com
www.spyadvanced.com
spyadvanced.com
www.spywarecommander.com
spywarecommander.com
www.spywareplatinum.com
spywareplatinum.com
www.spywarexp.com
spywarexp.com
www.virusnuke.com
virusnuke.com
www.adsniffer.com
adaniffer.com
www.adwareplatinum.com
adwareplatinum.com
www.adwareultra.com
adwareultra.com
www.antispycenter.com
antispycenter.com
www.antispyplus.com
antispyplus.com
www.bugdestroyer.com
bugdestroyer.com
www.pestdestroyer.com
pestdestroyer.com
www.pestguardian.com
pestguardian.com
www.proadware.com
proadware.com
www.spyrepair.com
spyrepair.com
www.spywaredeluxe.com
spywaredeluxe.com
www.spywarepremium.com
spywarepremium.com
www.spyxp.com
spyxp.com
www.adwarecommander.com
adwarecommander.com
www.adwarepremium.com
adwarepremium.com
www.adwarexp.com
adwarexp.com
www.antispydeluxe.com
antispydeluxe.com
www.antispywarexp.com
antispywarexp.com
www.pestblaster.com
pestblaster.com
www.pestdetect.com
pestdetect.com
www.pestwash.com
pestwash.com
www.spyadvance.com
spyadvance.com
www.spysniffer.com
spysniffer.com
www.spywaregold.com
spywaregold.com
www.spywareultra.com
spywareultra.com
www.viruscrusher.com
viruscrusher.com
www.adwaretools.com
adwaretools.com
Kimberly
Thanks MaKaVeLi, added smile.gif

Just corrected a small typo wink.gif

www.adsniffer.com
adaniffer.com = adsniffer.com

Kim
MaKaVeLi
Looks like I didn't catch that. wink.gif

Rogue spyware apps:

www.3mo.org
3mo.org
www.1spywareremoval.com
1spywareremoval.com

Recommended rogue spyware apps in the review section:

www.build-a-web-site.co.uk
build-a-web-site.co.uk
Kimberly
Hi MaKaVeLi,

www.build-a-web-site.co.uk
build-a-web-site.co.uk

Sorry, can't block a whole website because they just host a review of a "bad application".


www.3mo.org
3mo.org
www.1spywareremoval.com
1spywareremoval.com

Added, although (www.)3mo.org is redirected and that doesn't lead to anything for me (404 error page)

Kim
MaKaVeLi
QUOTE (Kimberly @ May 3 2005, 05:45 PM)
Hi MaKaVeLi,

www.build-a-web-site.co.uk
build-a-web-site.co.uk

Sorry, can't block a whole website because they just host a review of a "bad application".

Yeah after checking the site again it turned out to be a legit site but I couldn't edit my post. sad.gif

Rogue spyware apps and links lead to hop.clickbank.net:

www.adware-free-download.com
adware-free-download.com
www.adware-real-free-scan.com
adware-real-free-scan.com
www.adwarealert.com
adwarealert.com
www.freenoadware.com
freenoadware.com

hop.clickbank.net/noadware links:

www.ddoughty1.noadware.hop.clickbank.net
ddoughty1.noadware.hop.clickbank.net
Kimberly
Thanks MaKaVeLi, added smile.gif
r00ted
I noticed a Time Warner Telecom blocked by PW while surfing dnsstuff.com so I delved into the Source code of the page, and noticed some text ads that weren't loading from http://nshost.dnsstuff.com/astracker/ast.php

Which resolves to 206.169.164.158

So nshost.dnsstuff.com can probably be added to the HOSTS file.

And, these are some domains at that IP address as well. These might be HOSTS file candidates as well.

206.169.164.158 - IP hosts 181 Total Domains ...
Showing 1 - 50 out of 181

Domain Name
1 702HOMELOANS.COM.
2 ABBYANDSETH.COM.
3 ACTIVEBABYBOOMERS.COM.
4 AEROBICTOTALBODYFITNESS.COM.
5 AFFILIATE-BONUS.COM.
6 AFGE1367.ORG.
7 ALIASWATER.COM.
8 ALLABOUTLATINAS.COM.
9 ALLVESPANW.COM.
10 AMERICAN-SUMMER-CAMPS.COM.
11 AMERICANSUMMERCAMP.ORG.
12 ANCIENTHILLHOMES.COM.
13 ANDYYORK.NET.
14 ANTIBLAND.COM.
15 ARIZALIADAM.COM.
16 ASCBASEBALL.COM.
17 ASCCAMP.COM.
18 ASCCAMPS.COM.
19 ASCCHEERLEADING.COM.
20 ASCDANCE.COM.
21 ATTICUSDENTON.COM.
22 AUSBDSM.COM.
23 AUSRHPA.COM.
24 AYAGROUP.COM.
25 BAKEDBEANS.INFO.
26 BASE2GROUP.COM.
27 BETMATH.COM.
28 BRADCONGERDESIGN.COM.
29 BRAVEHEARTS4CHRIST.COM.
30 BREATHEBODYWORK.COM.
31 BRIANSCOLARO.COM.
32 BUILDALTARS.COM.
33 BURNSTEIN.COM.
34 BUYERFSBO.COM.
35 CAINSPECTIONS.COM.
36 CANTHAVE.COM.
37 CASADOCUCO.COM.
38 CASASAGRADA.COM.
39 CASCADAVERDE.NET.
40 CEDARSDIGITAL.COM.
41 CHICAGOSJOYTOYZ.COM.
42 CJENCYCLOPEDIA.COM.
43 CLOSERPOKER.COM.
44 CLRAUSTIN.NET.
45 COLLEGETAPE.COM.
46 CONSERVATIVEAPPEAL.COM.
47 CUSTOMFENCES.COM.
48 CYRENEPUCCIO.COM.
49 DADDYZINE.COM.
50 DALOIAHANDBERG.COM.
51 DANWAGSTAFF.COM.
52 DARWINTODAY.COM.
53 DATANDO.ORG.
54 DDYOUNG.COM.
55 DEBBIEBAXTERPHOTO.COM.
56 DECQS.COM.
57 DEKALBEVENTCENTER.COM.
58 DGINK.COM.
59 DODGYWORLD.COM.
60 DOMINUSFRAMES.COM.
61 DOUBLE-DEAL.COM.
62 DRUMMONDESIGNS.COM.
63 EASTLAKEHIGH.INFO.
64 ECKMANART.COM.
65 ELITEWHOLESALECOLLECTION.COM.
66 EPGEMS.COM.
67 EQUALLOGICTEST.COM.
68 ESITSCALE.COM.
69 EVOLVESMG.COM.
70 FERVENTNETWORKING.COM.
71 FONTESLABOY.COM.
72 FONTESLABOYLAW.COM.
73 FOUNDFLORIST.COM.
74 FRANK-LUCHS.COM.
75 FUELSHED.COM.
76 FWICHURCH.ORG.
77 GALLOSPERUANOS.COM.
78 GAMBLERSHOPE.COM.
79 GAOSHANYANGZHI.COM.
80 GODSOFINIQUITY.COM.
81 GOODWEBPAGE.COM.
82 GRACESFANE.COM.
83 GRAPHICENTRAL.COM.
84 GRAPHICKS.COM.
85 GREEKROMS.NET.
86 GYMRECORD.COM.
87 HANDAPPLIQUE.COM.
88 HILLEARYFORSENATE.NET.
89 HONGKONGARTGALLERY.COM.
90 HOPECARPENTER.COM.
91 HP-F.COM.
92 HPEACHEY.COM.
93 HUMMINGBIRDNEEDLES.COM.
94 HYPNOTICMARKETINGINSTITUTE.COM.
95 ITDYNAMO.COM.
96 IVEYCLAN.COM.
97 JCSP.NET.
98 JEWISHMEDIATIONSERVICE.COM.
99 JSABBAGH.NET.
100 KELVINMANN.COM.
101 KIRKLASALLE.COM.
102 LACASASAGRADA.COM.
103 LAKELANDREALTY.COM.
104 LAMANOMAGICA.COM.
105 LEFTBALL.COM.
106 LIFEBOSS.COM.
107 LIFEBOSS.ORG.
108 LOUGOMES.COM.
109 LVSPR.COM.
110 MACADAMIAS.INFO.
111 MAKIKODESIGN.COM.
112 MARCOSMALLWARES.COM.
113 MASSILLONWEB.COM.
114 MEOBONG.COM.
115 METAREASON.COM.
116 METSTATION.COM.
117 MORE-THAN-CONQUERORS.ORG.
118 MYCANAAN.ORG.
119 MYPOOLSUPPLIES.COM.
120 MZPENGUIN.COM.
121 NEWJERSEYPERSONALINJURYLAWYER.COM.
122 NICKYFALKENHAYN.COM.
123 NO-NEPHEWS.COM.
124 NORTHERNRIUNAP5067.ORG.
125 NOTEBOOKPARCALARI.COM.
126 NSLAHOME.COM.
127 ORNELAS.ORG.
128 OTTERCARDS.COM.
129 OTTOMULLER.COM.
130 OUTDOORNUDITY.ORG.
131 PAPOOSECUP.NET.
132 PAULAWINICUR.COM.
133 PGPMEDIATION.COM.
134 PHILAY77.COM.
135 PJSGRAFX.COM.
136 PPPICS.NET.
137 PRECISIONAUDIOVIDEO.COM.
138 PRISTINESERVICESINC.COM.
139 PROJECTSMART.ORG.
140 PSPWIKI.ORG.
141 PSYCHOLOGYSTUDENTS.COM.
142 PUPPYMACHINE.COM.
143 QLDJUSTICE.COM.
144 QUEHEE.COM.
145 RAYMONDSIPOS.COM.
146 RESNEXUS.COM.
147 RESOLUTECOS.COM.
148 ROBERTORTEGA.COM.
149 ROBERTSON-NSW.COM.
150 RONNIEALLEVA.ORG.
151 RUBENARISPE.COM.
152 SANSSOUCISERVICE.COM.
153 SECURE-PLAN.COM.
154 SELFRIDGEFAMILY.COM.
155 SIMPLETAX.INFO.
156 SITINH.ORG.
157 SIVALL.COM.
158 SOLIMANCOP.NET.
159 SPORTSGRAFX.COM.
160 SPORTSRECORDING.COM.
161 STALGROUP.COM.
162 STONEYBROOKKENNEL.COM.
163 SYNERGY-PROPERTIES.COM.
164 T3-STUDIO.COM.
165 TACOPRISA.COM.
166 TEXTPATTERNSTUDIO.COM.
167 THEDODGYBROS.COM.
168 THESUGARBEAR.COM.
169 TIENGNOINGUOIDAN.COM.
170 TRIERRA.ORG.
171 TURISBC.COM.
172 UA140.COM.
173 URBANETC.COM.
174 USLUPIRE.COM.
175 UTRON.ORG.
176 VOIDTAVERN.COM.
177 VSCOOT.COM.
178 WEBLIQUIDGROUP.COM.
179 ZAPPKUMANDA.COM.
180 ZIKSA.NET.
181 ZOAFILMS.COM.
Samurai V
Malware downloader site, reported today at isc.sans.org:

tgp.la
www.tgp.la
Kimberly
@r00ted

http://nshost.dnsstuff.com/astracker/ast.php is a php script that loads random ads from pagead2.googlesyndication.com. Adding nshost.dnsstuff.com to the HOSTS file, does not have any side effects from what I can see. smile.gif

@Samurai V

Added smile.gif
MaKaVeLi
Rogue spyware apps:

www.noadware-free-trial.com
noadware-free-trial.com
www.no-adware.us
no-adware.us
www.removespywareforever.com
removespywareforever.com
www.noadware1.cjb.net
noadware1.cjb.net
www.free-spyware-check.com
free-spyware-check.com
www.thespywareremover.com
thespywareremover.com
www.adwareagent.say-it-now.com
adwareagent.say-it-now.com
www.spyware.1000recursos.com
spyware.1000recursos.com
www.stopitblockit.com
stopitblockit.com

Links are broken and don't work/useless website:

www.spyware.computerrecover.com
spyware.computerrecover.com

clickbank website:

www.cbcashback.com
cbcashback.com

Adserver:

images.ientrymail.com
MaKaVeLi
Adservers:

images.content.streamray.com
ad.kino.de
mtvad.smartforad.com
Kimberly
Thanks MaKaVeLi, added.

Kim
MaKaVeLi
Adservers and 1x1 gifs:

www.ad2flash.com
ad2flash.com
www.linkads.de
linkads.de
img.mscracks.com
banners.babylonbucks.com
www.text-link-ads.com
text-link-ads.com
Kimberly
Added smile.gif
marklusty
hey kimberly,
look at what i posted here,
http://www.bluetack.co.uk/forums/index.php?showtopic=8002
are they any use ?

always eager to help
Kimberly
Thanks marklusty, I'll have a look at your post smile.gif

Kim
MaKaVeLi
Rogue spyware apps:

www.spy-crusher.com
spy-crusher.com
www.noadware.ws
noadware.ws
www.no-spy.com
no-spy.com
www.sin-espias.com
sin-espias.com
www.spionfrei.de
spionfrei.de
www.sansespions.com
sansespions.com

This site can be accessed with or without the www. but the one without the www. redirects you to the one with the www. so the one without the www. is there too. Can you understand that? It's also a rogue spyware app. Here it is:

www.zzztech.com
zzztech.com
Kimberly
QUOTE
This site can be accessed with or without the www. but the one without the www. redirects you to the one with the www. so the one without the www. is there too. Can you understand that?

Yes laugh.gif

Thanks, all added.

Kim
r00ted
127.0.0.1 ads.revsci.net

This ad was found on an imageshack pichosting server.
MaKaVeLi
I downloaded this because I was curious and checked it out but it doesn't have a EULA or FAQ. It looks shady to me:

www.searchbar.us
searchbar.us

Spylog:

u1096.00.spylog.com

Adserver/1x1 gifs:

img.thebugs.ws
Kimberly
Thanks, added smile.gif

searchbar.us = [ 69.31.87.222 ]
OrgName: Pilosoft Inc.
OrgID: PILOS
Address: 55 Broad St 3rd Fl
NetRange: 69.31.80.0 - 69.31.87.255

Billing Contact ID: A110582545694241
Billing Contact Name: Serguei Charikov
Billing Contact Organization: Legato Ltd
Billing Contact Address1: POBox 11123
Billing Contact Address2:
Billing Contact City: Samara
Billing Contact State/Province: Samara
Billing Contact Postal Code: 443001
Billing Contact Country: Russian Federation
Billing Contact Country Code: RU
Billing Contact Phone Number: 7.8462604282
Billing Contact Facsimile Number: 7.8462604282
Billing Contact Email: info@regtime.net

Kim
MaKaVeLi
Rouge spyware apps:

www.spyferret.net
spyferret.net
www.free-scanner.com
free-scanner.com
www.spywaremaster.net
spywaremaster.net
www.xoftspy.com
xoftspy.com
www.spydestroy.com
spydestroy.com
www.thespywaredetective.com
thespywaredetective.com
www.fastlink2.com
fastlink2.com
Kimberly
Thanks MaKaVeLi, added smile.gif

Kim
Samurai V
This anonymous proxy randomly tried to redirect me to a porn page on several occasions:

www.vcamo.com

The porn page in this case was www.pornosphere.com
Samurai V
New banner ad domain:

adserver.ad-space.net
MaKaVeLi
Adserver:

ads.dotregistrar.com
Kimberly
Thanks Samurai V & MaKaVeLi, added.

Kim
r00ted
I was browsing through http://www.whois.sc/reverse-ip/66.151.179.147 and whois.webhosting.info/66.151.179.147

and judging by the hostnames on those results, they could probably be added to the HOSTS file.
Kimberly
Hi r00ted,

http://www.whois.sc/66.151.179.147
Reverse IP: Web server hosts 6406 websites

You'd better add the IP to the Restricted Internet Zone, block it in your router or block it with Protowall. 6406 sites (eventually 12812 if www. is needed). A few IP's like that and the HOSTS file will be far too big imo.

Kim
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2012 Invision Power Services, Inc.