• Announcements

    • Budfred

      IE 11 copy/paste problem

      It has come to our attention that people using Internet Explorer 11 (IE 11) are having trouble with copy/paste to the forum. If you encounter this problem, using a different browser like Firefox or Chrome seems to get around the problem. We do not know what the problem is, but it seems to be specific to IE 11 and we are hopeful that Microsoft will eventually fix it.
Sign in to follow this  
Followers 0
webhelper

Webhelper: Updated Sites List 5/26/04

7 posts in this topic

The following is an update of all the sites I investigate and monitor

 

**********

Transponder Sites and IP Addresses

63.99.224.18 mail.thinkingmedia.net

63.99.224.19 Amazingmerchants.com

63.99.224.20 thinkingmedia.net

63.99.224.21 Direct-Revenue.com

63.99.224.34 mail.clickalchemy.com

63.99.224.37 stop-popup-ads-now.com

63.99.224.37 clickalchemy.com

63.99.224.47 cleangetaway.biz

63.99.224.47 mypanicbutton.com

63.99.224.57 Twain-tech.com

63.99.224.57 mx-targeting.com

63.99.209.59 Ipinsight.com

63.99.224.62 mail.msview.cc

63.99.224.65 msview.cc

63.99.224.65 www.freephone.cc

63.240.11.56 disk11.com

64.66.168.38 EC16.com

64.191.159.9 mail.hostpool.net

64.191.159.9 mail.direct-revenue.com

64.191.159.120 xadx.offeroptimizer.com

64.191.159.120 xads.offeroptimizer.com

64.191.159.123 ximages.offeroptimizer.com

64.191.159.125 reports.offeroptimizer.com

64.191.159.132 c.abetterinternet.com

64.191.159.133 s.abetterinternet.com

64.191.159.133 update.stop-popup-ads-now.com

64.202.165.92 mail.mypctuneup.com

64.41.114.15 tps108.org

64.41.111.75 truedata.org

65.61.130.193 server.ipinsight.net

65.255.32.5 www.offeroptimizer.biz

65.255.32.5 top10sites.com

65.255.32.5 skinhead.com

65.255.32.5 letssearch.com

65.255.32.8 Quicklaunch.com

65.255.32.70 offeroptimizer.biz

65.255.32.70 mail.www.offeroptimizer.biz

65.255.32.70 mail.offeroptimizer.biz

66.113.176.180 Bestoffers.bz

66.113.176.180 mail.bestoffers.bz

66.216.73.161 sentrymon.ipinsight.net

66.199.187.168 munky.com

66.199.187.168 NameAdministration.com

66.199.187.168 15X.NET

66.199.187.168 pantyland.com

66.199.187.168 steelwool.com

66.199.187.175 adblock.linkz.com

66.199.187.175 smartcasual.com

66.199.187.175 linkz.com

66.199.187.175 hostpool.com

66.199.187.175 adblock.com

66.199.187.175 nameadmininc.com

66.216.73.160 belt.abetterinternet.com/bi/servlet/Belt?StubName=Belt

66.216.73.160 stubmon.ipinsight.net

66.216.86.121 download.ipinsight.net

69.20.5.14 cr.stop-popup-ads-now.com

69.20.5.14 mail.stop-popup-ads-now.com

69.20.5.39 69.20.5.39/download/cabs/BI5101/

69.20.5.39 69.20.5.39/download/cabs/BILATEST/

69.28.158.21 static.abetterinternet.com

69.28.158.21 xlime.offeroptimizer.com

69.90.32.70 Get.freephone.cc

69.90.32.140 download.abetterinternet.com

69.90.32.140 download2.abetterinternet.com

69.90.32.141 thinstall.abetterinternet.com

69.28.146.21 xlime.offeroptimizer.com

207.217.96.41 sohodigital.net

207.246.105.39 test.disk11.com

207.246.105.49 Celticfestival.org

207.246.124.10 vx2.cc

207.246.124.61 z1.vx2.cc

207.246.124.90 internal.vx2.cc

207.246.124.101 ads.vx2.cc

207.246.124.105 download.vx2.cc

207.246.124.113 checkin.clickalchemy.com

207.246.124.113 ctl.twain-tech.com

207.246.124.113 transctl.vx2.cc

207.246.124.116 www.offeroptimizer.com

207.246.124.116 cliks.org

207.246.124.120 xads.offeroptimizer.com

207.246.124.120 xadso.offeroptimizer.com

207.246.124.130 mail.tps108.org

207.217.96.43 sohodigital.net

216.110.36.129 ipinsight.net

216.110.36.129 mypctuneup.com

216.187.118.218 OPTINEMAILSERVICES.Com

216.187.118.221 Hostpool.net

216.254.144.14 n69.com

216.254.144.15 bc777.com

216.254.144.15 N69.com

216.254.144.41 DigitalRooster.com

216.254.144.41 WebDream.com

 

 

Transponder Gangs Affiliates and Partners

 

powweb.com:66.152.97.130

foobar.com:66.152.98.18

ipowerweb.com:216.69.226.50

wincognito.com:69.2.200.232

flashtalk.com:216.93.179.220

 

Scam Ads - Direct clients of OfferOptimizer.com

yourdvdplayer.com:208.48.182.44

expertsavings.com:208.48.182.44

 

Traffix Gang Sites

AAVALUE.COM 64.5.217.241

atlasautomotivegroup.com 64.5.217.241

atlascreditgroup.com 64.5.217.241

atlasincomebuilder.com 64.5.217.241

clearflow.com 64.5.217.223

DataOffers.com 64.5.201.170

entertainmentrewards.com 64.5.230.188

GROUPCONFIRM.COM 64.5.201.208 (TRAFFIX AUTORESPONDER SYSTEM)

grouplotto.com 64.5.217.241

Infiknowledge.com:64.5.217.223

INFINAMES.COM (No IP)

JEWELCLAIMCENTER.COM 64.5.217.76

PICKOFTHEWEB.COM 64.5.217.53

prizeamerica.com 64.5.217.241

prizecade.com 64.5.230.150

QUINTEL.com 63.250.32.194

supernamehosts.com (No IP)

takeoneentertainment.com 64.5.217.241

thanksmuch.com 128.242.83.52

thebargainspot.com:64.5.217.241

***************************

 

Mindset Interactive/Addictivetechnologies

 

1000funnyvideos.com:207.182.241.238

addictivetechnologies.com:207.182.237.210

addictiveplay.com:207.182.241.238

(addictiveplay.com Goes to skilljam.com:12.129.204.208 owned by eUniverse)

at-games.com:66.98.229.16

 

at-offers.com:207.182.241.238

Skinnable Interface

Programmable Countdown Timer

Programmable Alarm

Access To Hundreds of Games

Adware Supported

 

AT-Talk.com (Not yet started as of 5/26/2004)

F1Organizer.com:207.182.241.228

F1Organizer.net:207.182.241.228

MINDSETI.COM:207.182.237.210

MINDSETINTERACTIVE.COM:207.182.237.210

NetpalNow.com:207.182.237.210

netpaloffers.net:64.202.167.192(Now parked)

NetPalGames.com:66.98.229.16

 

 

Affiliates and partners

 

free-windows-games.com:67.18.119.91

(installs adware for free games)

http://free-windows-games.com/privacy.html

 

The Favoriteman im64.dll code shows direct affiliations

 

gamehouse.com:216.127.40.150

(NetPal shows gamehouse.com is a direct partner affiliate)

Folder=AT-Games

Link=http://www.gamehouse.com/affiliates/template.jsp?AID=2226

Name=Gamehouse Games

 

FlyorDie.com:128.121.241.246

(NetPal affiliate and direct partner)

[AddF3]

Folder=AT-Games

Link=http://www.regnow.com/softsell/visitor.cgi?affiliate=24998&action=site&vendor=7834

Name=FlyorDie Games

 

incredifind.com:12.129.205.105 of eUniverse (see eUniverse section below)

regnow.com:208.197.4.115 (DigitalRiver.com - Main affiliate program)

 

 

******************

eUniverse Sites

euniverse.com:12.129.204.158

expage.com:12.129.204.15

thunderdownloads.com:12.129.204.204

flowgo.com:12.129.204.125

crazymates.com:12.129.204.46

popups.ad-logics.com:12.129.205.120

ad-logics.com:12.129.204.65

skilljam.com:12.129.204.208

partner2profit.com:12.129.204.122

myfunstart.com:12.129.205.206

ads.euniverseads.com:12.129.204.160

euniverseads.com:216.35.114.145

Mycoolscreen.com:12.129.204.219

gamerival.com:12.129.204.107

sirsearch.com:12.129.205.102

incredifind.com:12.129.205.105

increaseyourhealth.com:12.129.204.183

Gamecity.net: 12.129.204.107

femaleadvantage.com:12.129.204.47

ecommercetransactionsllc.com:12.129.204.99

dietingplans.com:12.129.205.162

cupidjunction.com:66.48.37.81

 

*****************

 

OptinRealBig – Scott Richter Gang

AIMPHUCK.COM: 206.161.120.99 installs Bundleware Nictech Networks

allchickswithdicks.com:69.6.21.11

ANALSLAMMERS.COM: 64.202.167.129

AUCTIONSNAP.com: 69.6.21.32

auctionwhiz.com: 69.6.21.18

bashapop.com: 69.6.21.18 bashapop popup killer

bluerocketonline.com:69.6.16.15

c4c01.com: 66.179.100.178

cash4creatives.com:69.6.21.229 redirects to hugermelons.com

CPAEMPIRE.COM: 69.6.21.177

cuterteen.com :69.6.21.11dfmmb.com

DOGEINSTEIN.COM :69.6.21.18

DUSTIN-PARKER.COM

eatmypussyright.com: 69.6.21.11

easycream.com 69.6.21.18

funamateur.com: 69.6.21.11

geekpost.com

GREATCARRATES.com (CPAEmpire.com)

hugermelons.com: 69.6.21.11

imbum.com: 206.161.120.99 installs NetPalOffers imbum.cab/imbum.exe

JOKETRADE.COM: 206.161.120.99 NetPalOffers imbum.cab/imbum.exe

JAYSWEBSERVICE.COM :69.6.21.60

MOOSQ.COM :69.6.21.18 re-directs to ss01.net on submit to unsubscribe

MYSTERYOFTAROT.com (4/1/2004)

netfuncards.com: 66.238.181.67

pillsofpleasure.com 69.6.21.18

realbigcash.com: 69.6.21.18 Adult affiliate program signup site.

realbighosting.com: 69.6.21.18 Godaddy affiliate which re-directs to secureserver.net

realcheapgifts.com: 69.6.21.18 selling laser gunrealgreatgifts.com

redhotwonders.com :69.6.21.11 (porn) Under 18 link: imbum.com

saverealbigdeals.com:69.6.21.50

smallnsexy.com:69.6.21.11

ss01.net: 69.6.21.191

tekmailer.com:69.6.6.252 Unsubscribe page

tomuchdick.com 69.6.21.11

whackapop.com:69.6.21.18 bashapop popup killer

youngerasian.com:69.6.21.11

 

 

TrekData Gang

 

adgoblin.com:38.118.144.187

Blazinglogic.com 38.118.144.180

Bluehavenmedia.com 66.98.130.46

clubpie.com 66.199.187.175 (Now nameadmininc.com)

Em5000.com 66.98.248.9

Gamesource101.com 207.44.198.25 - 207.44.198.27

gigatechsoftware.com 66.117.8.38

GREASYCOW.COM 66.117.8.38

i5interactive.com 63.84.174.254

LEADGREED.COM 216.21.229.209

LionsPrideEnterprises.com 209.234.155.99

Netsource101.com 207.44.198.26

No-pops.com 38.118.144.180

No-pops.net 38.118.144.180

nuker.com:38.118.144.185

popup-nuker.com: (Trekdata) 38.118.144.182

Rankyou.com 207.44.198.27

SEXEBITS.COM(Porn) 207.44.198.26

SoftwareDS.com 66.98.130.46

spamnuker.com:38.118.144.180

spicycomet.com (No IP)

Spyhear.com 38.118.144.180

spywarenuker.com 38.118.144.185

spywarenukerdownload.com 206.114.180.66

Top11.net(Now owned by Ultimate Search, Inc.)

Topeleven.net 66.98.130.46

Trekblue.com 38.118.144.180 - 38.118.144.188

Trekdata.com 38.118.144.180 - 38.118.144.188

TrekEight.com 38.118.144.180 - 38.118.144.188

Trek8.com 38.118.144.180 - 38.118.144.188

TWISTEDHUMOR.COM 207.44.198.26

WAYWEIRD.COM 38.118.144.184

 

Affiliates:

aksoftware.com (Lists spywarenuker and noadware affiliates)

roar.com

spy-ware-nuker.com

 

Lop.com Gang

active-max.com: 66.220.17.70

allaboutsearching.com:66.220.17.200

Ao.lop.com:66.220.17.151

Blackstonedata.com (Was owned by Transponder Gang now Jason Lucas Fl Internet Marketing)

Blackstonedata.net (Was owned by Transponder Gang now Jason Lucas Fl Internet Marketing)

chaostic.com: 205.252.89.53

Crap2.com 216.194.89.113 (Porn Affiliate Program)

cybergirlsex.com: 66.220.17.37 (Fl Internet Marketing Jason Lucas)

ecpm.com: 66.220.17.204

find-quick.com: 66.220.17.206

hadassahyouth.com (Non active)

lop.com: 66.220.17.153

MAXEXP.COM 66.220.17.39

MAXIMUMEXPERIENCE.COM: 66.220.17.39 (Fl Internet Marketing)

mp3heaven.org 66.220.17.35

mp3search.com: 209.50.253.157 (Directs to Lop.com for Uninstall)

mp3sound.com: 209.50.253.158 (Spawnet Limited)

mysearchnow.com: 66.220.17.211

OHYEA.ORG: 66.220.17.213 (Media Live)

searchwebnow.com: 66.220.17.211

Spawnet.com 216.194.67.59

TRINITYACQUISITIONS.COM: 66.220.17.74 (Trinity Acquisitions Inc. Jason Lucas)

warnet.com: 63.218.224.50 (Sells Warnet Free Edition adware detection and removal)

Wrn.net 216.194.89.114 (Non-Porn Affiliate Program)

XCX.COM: 208.231.27.100 (Spawnet Limited) 2001 had cracks and porn

 

Standard redirects and home page for hijacking

aavc.com 66.220.17.152

acjp.com 66.220.17.152

ebdv.com 66.220.17.152

ebdw.com 66.220.17.152

ebjp.com 66.220.17.152

ebkn.com 66.220.17.152

ebky.com 66.220.17.152

eblv.com 66.220.17.152

wbkb.com 66.220.17.152

ebvr.com 66.220.17.152

ecmh.com 66.220.17.152

ecwz.com 66.220.17.152

ecyb.com 66.220.17.152

eduy.com 66.220.17.152

eeev.com 66.220.17.152

farse.com 66.220.17.39

ibmx.com 66.220.17.152

icwb.com 66.220.17.152

icwo.com 66.220.17.152

icwp.com 66.220.17.152

iddh.com 66.220.17.152

idhh.com 66.220.17.152

ifiz.com 66.220.17.152

iguu.com 66.220.17.152

samz.com 66.220.17.152

saoe.com 66.220.17.218

sbee.com 66.220.17.38

sbjr.com 66.220.17.219

sbnl.com 66.220.17.220

sbnt.com 66.220.17.221

sbvr.com 66.220.17.222

scbm.com 66.220.17.152

sckr.com 66.220.17.223

scrk.com 66.220.17.224

sdry.com 66.220.17.152

seld.com 66.220.17.152

sfux.com 66.220.17.228

sheat.com 66.220.17.39

sipo.com 66.220.17.152

smds.com 66.220.17.152

srib.com 66.220.17.152

srox.com 66.220.17.152

srsf.com 66.220.17.152

ssaw.com 66.220.17.152

ssby.com 66.220.17.152

surj.com 66.220.17.152

tbvg.com 66.220.17.152

tdak.com 66.220.17.229

tdmy.com 66.220.17.231

tefs.com 66.220.17.232

tfil.com 66.220.17.233

tjar.com 66.220.17.235

tjaw.com 66.220.17.236

tjgo.com 66.220.17.239

tjem.com 66.220.17.238

torc.com 66.220.17.152

wabu.com 66.220.17.152

wabq.com 66.220.17.152

wfix.com 66.220.17.240

wflu.com 66.220.17.241

 

 

BulletProofSoft (BPS Gang)

 

Activex.us - (Domains by Proxy, Inc.) 216.40.206.208

Adnuker.com - (Domains by Proxy, Inc.) 207.44.200.48

Ads4me.net - (Domains by Proxy, Inc.) 207.44.200.48

Audioshareware.com - (H4Host.com) 216.40.206.208

Audiotools.ws - (H4Host.com) 216.40.206.208

bulletproofsoft.com - (Domains by Proxy, Inc.) 216.40.227.156

bulletproofsoft.info:66.98.154.33

bulletproofsoft.ws:66.98.154.33

Clicknzip.com - (Domains by Proxy, Inc.) 207.44.200.48

Downloadupload.com - (H4Host.com) 216.40.206.208

Esftp.com - (Domains by Proxy, Inc.) 216.40.206.208

File4me.com -(Elbanhawy Investments Now H4Host.com) 216.40.206.208

Filehog.com – (H4Host.com) 207.44.200.48

Fireballftp.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208

Ftpking.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208

Ftpmonster.com -(Elbanhawy Investments Now Domains by Proxy, Inc.) 216.40.206.208

Ftpright.net - (Domains by Proxy, Inc.) 216.40.206.208

getridspyware.com: (H4Host.com 66.98.154.33

h4host.com - (Domains by Proxy, Inc.) 216.40.227.9

IMAGINEER-WEB.com 216.40.227.154

Job4middleeast.com -

(Boston Executive Limousine Now Domains by Proxy, Inc.) 216.40.206.208

Jobbid.ws - (H4Host.com) 216.40.206.208

Jobbid4me.com -(Boston Executive Limousine Now Domains by Proxy, Inc.) 216.40.206.208

mawaqit.com 216.40.227.9

Mediatools.ws - (H4Host.com) 216.40.206.208

Monsterzip.com - (Domains by Proxy, Inc.) 216.40.206.208

noadware.com: - (Domains by Proxy, Inc.) 66.98.154.33

bulletproofsoft.info:66.98.154.33

bulletproofsoft.ws:66.98.154.33

Onestopsoft.com - (Domains by Proxy, Inc.) 216.40.206.208

popupshield.net -(Domains by Proxy, Inc.) 216.40.206.208

popupsnuker.com: (Godaddy) 216.40.206.172 (installs ebates and navecel)

Robust.ws - (H4Host.com) 216.40.206.208

Robustftp.com - (Domains by Proxy, Inc.) 216.40.206.208

Royalftp.com - (Domains by Proxy, Inc.) 216.40.206.208

Sharewaredepo.com - (H4Host.com) 216.40.206.208

Sharewarepile.com - (H4Host.com) 216.40.206.208

Softdepo.com - (H4Host.com) 216.40.206.208

Softwareclub.ws - (Domains by Proxy, Inc.) 216.40.206.208

Softwaredepo.com - (H4Host.com) 216.40.206.208

Softwarepile.com - (Domains by Proxy, Inc.) 216.40.206.208

soundindepth.com – (Domains by Proxy) 216.40.206.208

spaminnihilator.com – (Domains by Proxy) 216.40.206.208

Spamnullifier.com - (Domains by Proxy, Inc) 216.40.206.208

spywarezapper.com (Domains by Proxy, Inc) 66.98.154.33

Spider.ws - (Chia Lor) 216.40.206.208

Tbel.net - (Boston Executive Limousine) 216.40.206.208

Traceremover.com - (Elbanhawy Investments) 216.40.206.208

Tracezapper.com - (Elbanhawy Investments) 216.40.206.208

Trackscrubber.com - (Elbanhawy Investments) 216.40.206.208

Trackzapper.com - (Elbanhawy Investments) 216.40.206.208

Windowscleanser.com - (Domains by Proxy, Inc.) 216.40.206.208

Windowsclenser.com - (H4Host.com) 216.40.206.208

Zillaftp.com - (Domains by Proxy, Inc.) 216.40.206.208

Zillasoft.ws - (H4Host.com) 216.40.206.208

 

Cloned Download Sites Linked to the BPS

digitalriver.com 209.87.182.60

RegSoft.net:208.248.77.64

regnow.com:208.197.4.115 (This is used by NetPalOffers)

topdownloads.com 209.87.178.244

tdwebhost.com 64.246.54.50

pigeons-news.com 64.246.54.50

Convertdvd.info:64.246.54.50

VAN-OPSTAL.COM:64.246.54.50

WALLPAPERS.ORG:64.246.54.50

adaware.info 64.246.54.50 (download comes from realclicks.com)

uploadnet.com 64.246.54.50

startpage2000.com:64.246.54.50

spycleaner.net:64.246.54.50

realclicks.com:207.44.194.97

freeware.cc:207.44.194.97

freeware2000.com:207.44.194.97

herder.net 64.45.60.40 (Herder, J.N, jorrit)

enova.nl 62.148.166.3

topdownloads.net:66.98.178.22

topdownloadsnetworks.com 66.98.178.22

PIGEONS.NET:66.98.178.22

subloads.com:66.98.178.22

downloadsnet.com:66.98.178.22

supportmail.info:216.168.224.63

rizalsoftware.com:207.44.194.97

backupdvd.info:207.44.194.97

 

 

Sites of the Adware

topmoxie.com 66.220.2.164

ebates.com 63.236.57.90

navexcel.com 128.121.212.181

 

 

CyberHeat:

 

ADULTCAMS.COM

ADWAREREMOVERGOLD.COM

BESTMOVIES.COM

CARTOON69.COM

CYBERHEATINC.COM

DATASHREDDERGOLD.COM

DISCOUNTREALITYSITES.COM

EMAILSPAMBLOCK.COM

EVIDENCECLEANERGOLD.COM

EMAILSPAMBLOCK.COM

EUROTEENSXXX.COM

EVIDENCECLEANERGOLD.COM

FREEHOTPICS.COM

GAYMATUREXXX.COM

GIRLSGETCRAZY.COM

HISFIRSTGAYSEX.COM

HOW2ENLARGEPENIS.COM

HOW2PICKUPGIRLS.COM

HOW2PLEASEHER.COM

INTERRACIALJOY.COM

MODEMSPEEDBOOSTER.COM

PCSPEEDBOOSTER.COM

PRIMENETWORK.NET

SEEKIO.COM

SPORTEROTICA.COM

SURFERSUITESOFTWARE.COM

TOPBUCKS.COM

TOPCASH.COM

UPAYPERVIEW.COM

 

 

NicTech Networks

 

101h.com:216.219.239.247

nictechnetworks.com:207.36.117.38

LOOK2ME2.COM:69.20.20.161

LOOK2ME.COM:69.20.20.161

bundleware.com:69.20.20.162 (Produces the software bundle installers)

zestyfind.com: 69.20.20.164 (New addition: used in the hijacking)

admedian.com:69.20.20.165

CuttestStudents.com:207.36.117.38

flashmyass.com:207.36.117.38

greekorgeek.com: 207.36.117.38

Hotteststudents.com:207.36.117.38

similarsingles.com:207.36.117.38 (Date and Rate porn)

SpotOnNews.com:207.36.117.38 (Desktop news that really isn’t)

spyban.net (out of action but still has live files) (spywarekilla and noadware clone)

studylater.com:207.36.117.38

thindivide.com:207.36.117.38 (P2P File sharing)

ThirdEyeCon.com:207.36.117.38

(Affiliated with Nictech Networks)

Rdestiny LLC

ZeroTrace.com

 

 

Ad Shooter

ADSHOOTER.COM - This looks to be the server that the installation files come from.

www.adshooter.com resolves to 66.115.182.10

MARKETINGX.COM This is tjheir marketing site

CUSTOMERSUPPORTHELP.COM

PLATINUMBUCKS.COM This is the porn Affiliate program site

 

 

AIM Icon Buddy Sites

 

IMBum.com (Major install site for NetPalOffers and Bundleware) They have a link titled Joketrade.com (NetpalOffers)

Aimphuck.com (Bundleware)

DollSpot.com

Jensicons.com

Originalicons.com

buddyicon.info

aimdolls.com (NetpalOffers)

DollChick.com Wild Media

dollrock.com Wild Media

aimtop100.com Various Rotational Adware

 

 

SCREEN SAVERS /WALLPAPER / MUSIC/GAME SITES

123greetings.com

absolutelyric.com

altogames.com

artistdesktopthemes.com

altoentertainment.com

Colonize.com

dailymp3.com

fancube.com

Freeze.com

g-sistah.com

jenniferlopez.com

lyricsmansion.com

pathison.com

playminigolf.com

popularscreensavers.com

plyrics.com

sara-freder.com

Screensaver.com|

tabpower.com

Wallpapers4u.com

x-wallpapers.com (xxxtoolbar.com)

fabuloussavers.com

screensaverheaven

1001celebrities.com

ezthemes.com

play2enter.com (surf control)

 

 

Known Windows CHM Help Exploit using the Windows Media Player

 

SMARTBOTPRO.NET 205.236.189.50

MCPROMOTIONS.COM 209.217.54.210

www.server224.smartbotpro.net 209.50.251.164

passthison.com 209.50.251.195

SPYKILLERPRO.COM 69.59.138.155

DEFAULT-HOMEPAGE-NETWORK.COM

69.36.129.75

69.36.129.71

69.36.129.70

69.36.129.69

69.36.129.67

 

**********************

Scam Cloneware

 

http://www.webhelper4u.com/clones/noadware.html

(screen shots and profile of the author of the softwares)

 

Noadware.net:69.20.71.82 Bilal Ahmed

noadware.us:64.202.167.129 Bilal Ahmed

no-adware.net:64.202.167.129 Bilal Ahmed (Redirects to noadware.net)

spywarekilla.com 207.44.208.34 Bilal Ahmed

spyware-cop.com:207.44.208.34 Bilal Ahmed

 

scanspyware.net:12.30.241.242

PC Security Center

Bilal Ahmed

9th Street APL 15L

Brooklyn, New York 11215 US

+1.7187682154

102519@whois.gkg.net

 

*****************

palso.com:64.15.205.202

aksoftware.com (Lists spywarenuker and noadware affiliates)

 

*****************

 

loud Marketing CDT Inc.

Bridge.dll is a new adware program that stealth-downloads and runs on system startup. It acts as a search page hijacker taking you to one of four possible servers. This may be a variant of SearchBarCash but at the time of this writing, little detail is available

 

http://www.pestpatrol.com/pestinfo/l/loudmarketing.asp

 

scanspyware.com 69.28.208.77

flingstone.com:69.28.208.77

skoobidoo.com:69.28.208.77

searchbrowser.com:69.28.208.77

cdtnet.net:69.28.208.77

blazefind.com:69.28.208.77

searchbarcash.com:69.28.208.77

public.searchbarcash.com:69.28.208.77

mail.loudmarketing.com:69.28.208.71

stephanie.cdtnet.net:69.28.208.71

MY-INTERNET.INFO (No IP)

imashare.com (No IP)

 

 

 

 

SJB Enterprises, Inc.

SJBCORP.COM - Marketing

NETSHAGG.COM 205.134.161.89 (Installs 3rd party adware)

mypcdownload.com 205.134.161.89

mynetprotector.com 205.134.161.89

mynetcompanion.com 205.134.161.89

 

 

More Scamware

Onlinepcfix.com:128.121.194.10 (spyferret)

Spyferret.com:199.239.233.2

 

CPM Media

2nd-thought.com:69.28.210.140

 

WhenU.com

whenusearch.com:209.11.45.139

spweather.whenu.com:216.200.68.6

 

***************

 

Le WEB (WEBJC-DOM) (Astology Readings)

109 rue du GL de Gaulle

RAMBOUILLET 78120 FR

Domain Name: WEBJC.COM

 

sara-freder.com:62.210.164.83

pasqualina.com:62.210.164.84

***********

 

IBIS

websearch.com:146.82.109.220

weblizer.com:208.185.247.157

download.websearch.com:146.82.109.210

 

 

************

180Solutions

 

180Solutions.com 216.74.27.20

zango.com:216.74.27.20

captioncity.com:216.74.57.131

*************************

MyGeek.com

 

MyGeek.com:12.47.196.48

 

searchcentrix.com:12.47.196.49

downloads.searchcentrix.com:216.133.67.109

 

***************

DirtyDuckets

clicktracking.info:66.55.162.59

 

 

*********

peopleonpage, inc

Kent Ertugrul

26, Avenue Kleber

Paris, 75006 FR

peopleonpage.com:207.44.142.4

download.peopleonpage.com:66.98.188.54

 

************

 

7adpower.com:66.194.37.33 (Porn dialers)

 

************

adelphia.net:68.168.78.26

adtomi.com:216.127.80.113

 

*********

mediacharger.com:209.132.205.222

download.mediacharger.com:209.132.205.222

swimsuitnetwork.cab (ActiveInstall.dll)

 

*******************************8

Ad Scams

 

ClickNVote.com (Owned by known Spammer)

clicknvote.com:69.59.175.148

Vote2004Today.com:64.202.163.162

 

Webhelper

Share this post


Link to post
Share on other sites

Thank you very much!!. You do fantastic & greatly appreciated work and that was a great Block list update.

 

Be Well

 

CES

Share this post


Link to post
Share on other sites

You may wish to add the new Outhost hijacker (CWS.HackerDefender is what I call it - Merijn may have a different name) to the list.

 

*.outhost.info (requires a subdomain to even see anything on the site)

 

IP address is:

 

213.159.117.194

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0