Update: 950 Euro transfer to Intesa Sanpaolo

New Hostile URLs observed on April 5, 2013:

 

hxxp://www.freerider.it/info1.html
hxxp://heartmecouture.com/info1.html
hxxp://www.milservice.pl/info1.html
hxxp://moneysystem.50webs.com/info1.html
hxxp://www.schmerbachskeller.de/info1.html
hxxp://svdnet.com/info1.html
hxxp://elima-docs-tpr.narod.ru/info1.html
hxxp://gesfi.com/info1.html
hxxp://www.padcacweb.pwp.blueyonder.co.uk/info1.html
hxxp://50.63.26.224/info1.html
hxxp://www.pon-vonbohlmannsland.de/info1.html
hxxp://ferret.perm.ru/info1.html
hxxp://www.mtetv.it/info1.html
hxxp://www.kkwalberberg.mynetcologne.de/info1.html
hxxp://w0e2fj2b3.homepage.t-online.de/info1.html
hxxp://personal.nbnet.nb.ca/info1.html
hxxp://valleylabel.net/info1.html
hxxp://nightfox.republika.pl/info1.html
hxxp://troop228.info/info1.html
hxxp://matpol.cba.pl/info1.html
hxxp://www.gianlucaboezio.it/info1.html
hxxp://www.wittmann-praxis.de/info1.html
hxxp://champwrestlinginfo.tripod.com/info1.html
hxxp://spiritoftheage.org.uk/info1.html
hxxp://www.stock-marketfair.com/info1.html
hxxp://www.magna4.com.br/info1.html
hxxp://biancas-scrapseite.pytalhost.de/info1.html
hxxp://ostunivilla.com/info1.html
hxxp://papagai.de/info1.html
hxxp://www.stahlvolleyballa.homepage.t-online.de/info1.html
hxxp://www.cyted.com/info1.html
hxxp://sttrni.com.br/info1.html
hxxp://wabostudios.com/info1.html
hxxp://www.ceccatobassano.it/info1.html
hxxp://www.sitkarymowanie.republika.pl/info1.html
hxxp://dokutainment.square7.ch/info1.html
hxxp://www.biglife.de/info1.html
hxxp://www.advmorais.com.br/info1.html
hxxp://www.chenilleawardletters.net/info1.html
hxxp://jkatinc.com/info1.html
hxxp://lawsonprinters.com/info1.html
hxxp://pianowithchris.com/info1.html
hxxp://prod1-imagesvu.integra.fr/info1.html
hxxp://qmbit.de/info1.html

 

This page contain an encoded script which is used to redirect to a Blackhole exploit kit v 2.x at hxxp://bangpleasure.com/news/wanting_book_switch.php. This BH kit is hosted at IP address 97.107.142.157 at the time of this writing.

 

 

 

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: