Wednesday, 25 September 2013
6rf.net and something evil on 198.50.225.121, 85.25.108.10 and 178.33.208.211
Posted on 07:40 by Unknown
Here are a couple of IPs serving exploit kits.. the case in question is a legitimate site that loads code from 6rf.net and this in turn loads an exploit kit from [donotclick]yandex.ru.sgtfnregsnet.ru and [donotclick]l451l.witnessvacant.biz.
The .biz domain in this case is hosted on 198.50.225.121 (OVH, Canada) along with subdomains of the following (more here):
witnessvacant.biz
Subscribe to:
Post Comments (Atom)
0 comments:
Post a Comment