Date: Thu, 21 Mar 2013 03:01:59 -0500 [04:01:59 EDT]The malicious payload is at [donotclick]hillairusbomges.ru:8080/forum/links/column.php (report here) hosted on:
From: LinkedIn Email Confirmation [emailconfirm@linkedin.com]
Subject: Re: Changelog Oct.
Good morning,
as prmised updated changelog - View
L. LOYD
50.22.0.2 (Softlayer / Monday Sessions Media, US)
66.249.23.64 (Endurance International Group, US)
188.165.202.204 (OVH, France)
Blocklist:
50.22.0.2
66.249.23.64
188.165.202.204
gxnaika.ru
hentaimusika.ru
forumla.ru
gulivaerinf.ru
foruminanki.ru
heelicotper.ru
forumny.ru
hillairusbomges.ru
hillaryklinton.ru
hinpoka.ru
hifnsiiip.ru
No comments:
Post a Comment