Dynamoo's Blog

This list replaces this one , and mostly contains domains and IPs connected with this gang . The list starts with IPs and web hosts, follo...

These IPs and domains belong to this gang and this list follows on from the one I made last week . 5.39.14.148 (OVH, France) 5.231.57.2...

These sites and IPs are associated with this gang , and are either currently in use or they have been in use recently. The list has indivi...

These malicious domains and IPs are associated with this prolific gang .  As usual, I've listed IPs with hosts first and then a plain ...

This is a refresh of this list of domains and IPs controlled by what I call the " Amerika " gang, and it follows on from this B...

These domains and IP addresses are connected to this malware spam run and belong to a group I call the " Amerika " gang (becaus...

This fake Newegg.com spam leads to malware: Date:      Fri, 17 May 2013 10:29:20 -0600 [12:29:20 EDT] From:      Newegg [info@newegg.c...

This Boston Marathon themed spam leads to malware on thesecondincomee.com : Example 1: Date:      Wed, 17 Apr 2013 10:32:18 -0600 [12...

Another BBB spam run today, although this time not an RU:8080 spam we saw earlier but an "Amerika" spam run instead. Interesti...

These domains and IPs are currently acting as C&C and distribution servers for Zbot. I would advise blocking these IPs and domains if ...

This fake Intuit spam leads to malware on mailmergesfinger.org : Date:      Mon, 16 Jul 2012 18:10:26 +0000 From:      "Intuit P...