Full criminal run range:
http://www.spamhaus.org/sbl/listings.lasso?isp=uralnet.biz

Botnet C&C:
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL71953

___________________

[91.211.64.47]
NS1.SINGATOURS.COM
DNS3.SYSTEMPROMNS.COM
NS1.MANAGEHOSTDNS.COM
NS1.FREEHOSTNS.COM
NS1.EGUASSEMBLY.COM
NS1.FREEHOSTEDNS.COM
NS1.EUROPEGIGABYTE.COM
NS1.SHERPACOMPANY.COM
_______________________________


91.211.64.31 ns1.clicksredirect.com
91.211.64.31 ns1.hitsredirect.com
91.211.64.31 ns1.hitstransfer.com
91.211.64.31 ns1.internetsecurityexamine.com
91.211.64.31 ns1.netsecuritybureau.com
91.211.64.31 ns1.netsecurityonline.com
91.211.64.31 ns1.stabilityinternetscan.com
91.211.64.31 ns1.theredirect.com
91.211.64.31 ns1.trafficrelocation.com
91.211.64.31 ns1.watchnetprotection.com
91.211.64.31 ns1.webnetworksecurity.com
91.211.64.31 ns1.webpageredirect.com
91.211.64.31 ns1.websafetyguide.com
91.211.64.31 ns1.websecurityexamine.com
91.211.64.31 ns1.websecurityworld.com
91.211.64.32 ns2.clicksredirect.com
91.211.64.32 ns2.hitsredirect.com
91.211.64.32 ns2.hitstransfer.com
91.211.64.32 ns2.internetsecurityexamine.com
91.211.64.32 ns2.netsecuritybureau.com
91.211.64.32 ns2.netsecurityonline.com
91.211.64.32 ns2.stabilityinternetscan.com
91.211.64.32 ns2.theredirect.com
91.211.64.32 ns2.trafficrelocation.com
91.211.64.32 ns2.watchnetprotection.com
91.211.64.32 ns2.webnetworksecurity.com
91.211.64.32 ns2.webpageredirect.com
91.211.64.32 ns2.websafetyguide.com
91.211.64.32 ns2.websecurityexamine.com
91.211.64.32 ns2.websecurityworld.com
91.211.64.36 ns1.microsoft11.info
91.211.64.36 ns1.microsoftcenter2.info
91.211.64.36 ns1.microsofted.info
91.211.64.36 ns2.microsoft11.info
91.211.64.36 ns2.microsoftcenter2.info
91.211.64.36 ns2.microsofted.info
91.211.64.40 ns1.miccas.info
91.211.64.40 ns1.payfpussy.com
91.211.64.40 ns1.salaka.biz
91.211.64.40 ns1.sallo.net
91.211.64.40 ns2.miccas.info
91.211.64.40 ns2.payfpussy.com
91.211.64.40 ns2.salaka.biz
91.211.64.40 ns2.sallo.net
91.211.64.45 ns1.mixthehits.com
91.211.64.45 ns1.safetywebscan.com
91.211.64.46 ns2.mixthehits.com
91.211.64.46 ns2.safetywebscan.com
91.211.64.47 dn3.systempromns.com
91.211.64.47 ns1.airflysupport.com
91.211.64.47 ns1.basicstechnology.com
91.211.64.47 ns1.eguassembly.com
91.211.64.47 ns1.europegigabyte.com
91.211.64.47 ns1.freehostedns.com
91.211.64.47 ns1.freehostns.com
91.211.64.47 ns1.managehostdns.com
91.211.64.47 ns1.prosecuritysoftware.com
91.211.64.47 ns1.securedinternetpayments.com
91.211.64.47 ns1.sherpacompany.com
91.211.64.47 ns1.singatours.com
91.211.64.47 ns1.skycomputingonline.com
91.211.64.50 ns1.ahcieqdgbv.com
91.211.64.51 ns2.ahcieqdgbv.com
91.211.64.70 ns1.esplt.com
91.211.64.70 ns1.spns1.com
91.211.64.70 ns1.trfns.com
91.211.64.71 ns1.ab-outstat.com
91.211.64.71 ns1.ab-outstat.net
91.211.64.71 ns1.aboutmonitoring.com
91.211.64.71 ns1.adclickrotation.com
91.211.64.71 ns1.admediastats.com
91.211.64.71 ns1.adnetserver.com
91.211.64.71 ns1.adtrafficsolution.com
91.211.64.71 ns1.advertpanda.com
91.211.64.71 ns1.clickanalytic.com
91.211.64.71 ns1.extrabigad.com
91.211.64.71 ns1.extrafreead.com
91.211.64.71 ns1.freegreenstats.com
91.211.64.71 ns1.googlesearchingweb.net
91.211.64.71 ns1.greatad.net
91.211.64.71 ns1.ne-wstat.net
91.211.64.71 ns1.of-ficialstat.com
91.211.64.71 ns1.onlinepromostats.com
91.211.64.71 ns1.onlinestatsmanager.com
91.211.64.71 ns1.ourstats-online.com
91.211.64.71 ns1.promorotation.com
91.211.64.71 ns1.s-tatgroup.net
91.211.64.71 ns1.s-tathisranch.com
91.211.64.71 ns1.securityclick.net
91.211.64.71 ns1.st-atgroup.net
91.211.64.71 ns1.st-athome.net
91.211.64.71 ns1.st-aticglobalsources.com
91.211.64.71 ns1.st-ation-appraisals.net
91.211.64.71 ns1.statisticsmanager.com
91.211.64.71 ns1.stats-manager-online.com
91.211.64.71 ns1.statstrackingmanager.com
91.211.64.71 ns1.themonitoring.net
91.211.64.71 ns1.track-your-stats.com
91.211.64.71 ns1.traffic-ad-manager.com
91.211.64.71 ns1.traffic-analytics.com
91.211.64.71 ns1.waytotheprofit.com
91.211.64.71 ns1.whoisadvert.com
91.211.64.71 ns2.esplt.com
91.211.64.71 ns2.spns1.com
91.211.64.71 ns2.trfns.com
91.211.64.72 ns1.interactivesafetyswipe.com
91.211.64.73 ns1.bssyss.com
91.211.64.73 ns1.bsyss.com
91.211.64.85 ns2.interactivesafetyswipe.com
91.211.64.90 ns1.bilodns.com
91.211.64.91 ns2.bilodns.com
91.211.64.92 ns1.down-soft.net
91.211.64.92 ns1.guardpcdownload.com
91.211.64.92 ns2.softspyexe.com
91.211.64.95 ns1.mswindowsxpupd.com
91.211.64.95 ns1.mswinupdate.com
91.211.64.95 ns1.systemadlink.com
91.211.64.95 ns1.windowsxpupd.com
91.211.64.95 ns1.winxpupdate.info
91.211.64.95 ns2.linkadsystem.com
91.211.64.96 ns1.linkadsystem.com
91.211.64.96 ns2.mswindowsxpupd.com
91.211.64.96 ns2.mswinupdate.com
91.211.64.96 ns2.systemadlink.com
91.211.64.96 ns2.windowsxpupd.com
91.211.64.96 ns2.winxpupdate.info
91.211.64.110 ns1.butyrometry.com
91.211.64.110 ns1.startingstream.com
91.211.64.111 ns2.butyrometry.com
91.211.64.111 ns2.startingstream.com
91.211.64.118 ns1.dnsmytruedns.com
91.211.64.120 ns1.abduhost.com
91.211.64.121 ns2.abduhost.com
91.211.64.130 ns1.com-softwareportal.com
91.211.64.130 ns1.drivers2watch2009.com
91.211.64.130 ns1.exefilesdownload2009.com
91.211.64.130 ns1.megaexestoragehere.com
91.211.64.130 ns1.onlinestreamsofware.com
91.211.64.130 ns1.onlinestreasoftware.com
91.211.64.130 ns1.pc-archive-upgrade.com
91.211.64.130 ns1.portalnowsoftwarehere2009.com
91.211.64.130 ns1.softportaldrivvers.com
91.211.64.130 ns1.softwareviewerarchive2009.com
91.211.64.130 ns1.streamsoftware2009.com
91.211.64.130 ns1.tubeportalsoftware2008.com
91.211.64.130 ns1.tubesoftwareviewer2008.com
91.211.64.130 ns1.tubesoftwareviewer2009.com
91.211.64.130 ns1.viewersoftarchive.com
91.211.64.130 ns1.viewersoftportal.com
91.211.64.130 ns1.x-filesstorehere.com
91.211.64.130 ns1.your-soft-archive-4free.com
91.211.64.130 ns2.extrafilesstorage.com
91.211.64.130 ns2.tubeviewer2009.com
91.211.64.131 ns1.extrafilesstorage.com
91.211.64.131 ns1.tubeviewer2009.com
91.211.64.131 ns2.com-softwareportal.com
91.211.64.131 ns2.drivers2watch2009.com
91.211.64.131 ns2.exefilesdownload2009.com
91.211.64.131 ns2.megaexestoragehere.com
91.211.64.131 ns2.onlinestreamsofware.com
91.211.64.131 ns2.onlinestreasoftware.com
91.211.64.131 ns2.pc-archive-upgrade.com
91.211.64.131 ns2.portalnowsoftwarehere2009.com
91.211.64.131 ns2.softportaldrivvers.com
91.211.64.131 ns2.softwareviewerarchive2009.com
91.211.64.131 ns2.streamsoftware2009.com
91.211.64.131 ns2.tubeportalsoftware2008.com
91.211.64.131 ns2.tubesoftwareviewer2008.com
91.211.64.131 ns2.tubesoftwareviewer2009.com
91.211.64.131 ns2.viewersoftportal.com
91.211.64.131 ns2.x-filesstorehere.com
91.211.64.131 ns2.your-soft-archive-4free.com
91.211.64.132 ns2.viewersoftarchive.com
91.211.64.142 ns1.softspyexe.com
91.211.64.142 ns2.down-soft.net
91.211.64.142 ns2.guardpcdownload.com
91.211.64.142 ns2.winiguard.org
91.211.64.144 ns1.winibluesoft.com
91.211.64.144 ns1.winiguard.org
91.211.64.144 ns2.winibluesoft.com
91.211.64.147 ns1.beautytraffic.com
91.211.64.147 ns1.bestdns.biz
91.211.64.147 ns1.bestroom.org
91.211.64.147 ns1.mybussines.biz
91.211.64.147 ns1.pleezbalevit.biz
91.211.64.147 ns1.rawline.biz
91.211.64.147 ns1.showmemoon.com
91.211.64.147 ns1.yourtravelmiles.com
91.211.64.147 ns2.beautytraffic.com
91.211.64.147 ns2.bestdns.biz
91.211.64.147 ns2.bestroom.org
91.211.64.147 ns2.mybussines.biz
91.211.64.147 ns2.pleezbalevit.biz
91.211.64.147 ns2.rawline.biz
91.211.64.147 ns2.showmemoon.com
91.211.64.147 ns2.yourtravelmiles.com
91.211.64.147 ns5.businesscommunity.biz
91.211.64.147 ns6.businesscommunity.biz
91.211.64.149 ns1.powerhost4.com
91.211.64.150 ns2.powerhost4.com
91.211.64.153 ns1.idnska.net
91.211.64.154 ns2.idnska.net
91.211.64.155 ns2.idnska.net
91.211.64.156 ns1.idnska.net
91.211.64.173 ns1.stabilityscan.com
91.211.64.173 ns1.wwwmobileread.com
91.211.64.174 ns2.stabilityscan.com
91.211.64.174 ns2.wwwmobileread.com
91.211.64.184 ns1.ad-globe.com
91.211.64.184 ns1.atlantmedia.net
91.211.64.184 ns1.olympicmedia.net
91.211.64.184 ns2.olympicmedia.net
91.211.64.184 ns3.olympicmedia.net
91.211.64.184 ns4.ad-globe.com
91.211.64.184 ns4.atlantmedia.net
91.211.64.184 ns4.olympicmedia.net
91.211.64.186 ns1.best-rentals.org
91.211.64.187 ns2.best-rentals.org
91.211.64.191 ns1.molotkaovbiz.com
91.211.64.191 ns2.molotkaovbiz.com
91.211.64.203 ns1.2009-film.com
91.211.64.203 ns1.2009-films.com
91.211.64.203 ns1.2009-kino.com
91.211.64.203 ns1.2009-movie.com
91.211.64.203 ns1.2009-serial.com
91.211.64.203 ns1.2009-serials.com
91.211.64.203 ns1.2009-series.com
91.211.64.203 ns1.2009dvdfilm.com
91.211.64.203 ns1.2009dvdfilms.com
91.211.64.203 ns1.2009dvdkino.com
91.211.64.203 ns1.2009dvdmovie.com
91.211.64.203 ns1.2009dvdserial.com
91.211.64.203 ns1.2009dvdseries.com
91.211.64.203 ns1.2009kino.com
91.211.64.203 ns1.2009serial.com
91.211.64.203 ns1.2009series.com
91.211.64.203 ns1.bestdvdkino.com
91.211.64.203 ns1.bestdvdserial.com
91.211.64.203 ns1.classdvdserial.com

91.211.65.15 ns.eztv399ukt3.com
91.211.65.15 ns.zdorcaf.com
91.211.65.16 ns1.eztv399ukt3.com
91.211.65.16 ns1.zdorcaf.com
91.211.65.18 ns1.rrreiekkdns.com
91.211.65.18 ns2.rrreiekkdns.com
91.211.65.21 ns1.filedownloaddirect.com
91.211.65.21 ns1.protectedfiledownload.com
91.211.65.21 ns1.protectedfiletransfer.com
91.211.65.21 ns1.safesoftwaretransfer.com
91.211.65.21 ns1.securecrtdownload.com
91.211.65.21 ns1.securedownloadsoftware.com
91.211.65.21 ns1.securefastdownloads.com
91.211.65.21 ns1.securefileget.com
91.211.65.21 ns1.secureshelldownload.com
91.211.65.21 ns1.securetransferdirect.com
91.211.65.21 ns1.securetransferonline.com
91.211.65.21 ns1.securewinsoftwaredownload.com
91.211.65.21 ns1.theprotecteddownload.com
91.211.65.21 ns1.thesecuredownload.com
91.211.65.21 ns1.thesecurefile.com
91.211.65.21 ns1.thesecuretransfer.com
91.211.65.22 ns2.filedownloaddirect.com
91.211.65.22 ns2.protectedfiledownload.com
91.211.65.22 ns2.protectedfiletransfer.com
91.211.65.22 ns2.safesoftwaretransfer.com
91.211.65.22 ns2.securecrtdownload.com
91.211.65.22 ns2.securedownloadsoftware.com
91.211.65.22 ns2.securefastdownloads.com
91.211.65.22 ns2.securefileget.com
91.211.65.22 ns2.secureshelldownload.com
91.211.65.22 ns2.securetransferdirect.com
91.211.65.22 ns2.securetransferonline.com
91.211.65.22 ns2.securewinsoftwaredownload.com
91.211.65.22 ns2.theprotecteddownload.com
91.211.65.22 ns2.thesecuredownload.com
91.211.65.22 ns2.thesecurefile.com
91.211.65.22 ns2.thesecuretransfer.com
91.211.65.23 ns1.addded.com
91.211.65.23 ns1.australianpornomovies.com
91.211.65.23 ns1.crowstep.info
91.211.65.23 ns1.dirges.info
91.211.65.23 ns1.englandpornmovies.com
91.211.65.23 ns1.euectic.info
91.211.65.23 ns1.italianpornmovie.com
91.211.65.23 ns1.italypornvideos.com
91.211.65.23 ns1.mossie.info
91.211.65.23 ns1.mywwwblog.com
91.211.65.23 ns1.palesmart.info
91.211.65.23 ns1.phloxes.info
91.211.65.23 ns1.shellpay.com
91.211.65.23 ns1.sugaryblog.com
91.211.65.23 ns1.tatnefteproduct.com
91.211.65.23 ns1.tatnp.com
91.211.65.23 ns1.thespecialvideolibrary.com
91.211.65.23 ns2.mioforum.com
91.211.65.23 ns2.rubezone.com
91.211.65.23 ns2.runfish.info
91.211.65.24 ns2.addded.com
91.211.65.24 ns2.australianpornomovies.com
91.211.65.24 ns2.crowstep.info
91.211.65.24 ns2.englandpornmovies.com
91.211.65.24 ns2.euectic.info
91.211.65.24 ns2.italianpornmovie.com
91.211.65.24 ns2.italypornvideos.com
91.211.65.24 ns2.mossie.info
91.211.65.24 ns2.mywwwblog.com
91.211.65.24 ns2.palesmart.info
91.211.65.24 ns2.phloxes.info
91.211.65.24 ns2.shellpay.com
91.211.65.24 ns2.tatnefteproduct.com
91.211.65.24 ns2.tatnp.com
91.211.65.24 ns2.thespecialvideolibrary.com
91.211.65.24 ns3.mioforum.com
91.211.65.24 ns3.rubezone.com
91.211.65.30 ns1.startingstream.com
91.211.65.31 ns2.startingstream.com
91.211.65.48 ns1.firstprueba.com
91.211.65.48 ns2.firstprueba.com
91.211.65.50 ns1.5avscan.com
91.211.65.50 ns1.av-scan-pro.com
91.211.65.50 ns1.av1scan.com
91.211.65.50 ns1.avscan1.com
91.211.65.50 ns1.avscan7.com
91.211.65.50 ns1.caltasa.com
91.211.65.50 ns1.coklas.com
91.211.65.50 ns1.gowwwscan.com
91.211.65.50 ns1.iapayment-pro.com
91.211.65.50 ns1.iklasa.com
91.211.65.50 ns1.in1is.com
91.211.65.50 ns1.in1sk.com
91.211.65.50 ns1.in4is.com
91.211.65.50 ns1.inaltak.com
91.211.65.50 ns1.inspred.com
91.211.65.50 ns1.internet-antivirus-2008.com
91.211.65.50 ns1.internet-antivirus-pro.com
91.211.65.50 ns1.internetantivirus-pro.com
91.211.65.50 ns1.new4scan.com
91.211.65.50 ns1.scan-web.com
91.211.65.50 ns1.scan4best.com
91.211.65.50 ns1.scan4live.com
91.211.65.50 ns1.scan4new.com
91.211.65.50 ns1.scan4plus.com
91.211.65.50 ns1.scan5new.com
91.211.65.50 ns1.scan6new.com
91.211.65.50 ns1.scan6plus.com
91.211.65.50 ns1.scanav4.com
91.211.65.50 ns1.stkasa.com
91.211.65.50 ns1.uralsnsx.net
91.211.65.50 ns1.web-antivirus.com
91.211.65.50 ns1.webz-scan.com
91.211.65.51 ns1.edik-cert123.com
91.211.65.52 ns2.edik-cert123.com
91.211.65.52 ns2.uralsnsx.net
91.211.65.53 ns1.2009-film.com
91.211.65.53 ns1.2009-films.com
91.211.65.53 ns1.2009-kino.com
91.211.65.53 ns1.2009-movie.com
91.211.65.53 ns1.2009-serial.com
91.211.65.53 ns1.2009-serials.com
91.211.65.53 ns1.2009-series.com
91.211.65.53 ns1.2009dvdfilm.com
91.211.65.53 ns1.2009dvdfilms.com
91.211.65.53 ns1.2009dvdkino.com
91.211.65.53 ns1.2009dvdmovie.com
91.211.65.53 ns1.2009dvdserial.com
91.211.65.53 ns1.2009dvdseries.com
91.211.65.53 ns1.2009serial.com
91.211.65.53 ns1.2009series.com
91.211.65.53 ns1.bestdvdkino.com
91.211.65.53 ns1.bestdvdserial.com
91.211.65.53 ns3.antimalwareguard-plus.com
91.211.65.53 ns3.antimalwareguardplus.com
91.211.65.53 ns3.antispywareexpert-plus.com
91.211.65.53 ns3.antispywareexpertplus.com
91.211.65.53 ns3.best-secureexpertcleaner.com
91.211.65.53 ns3.bestvirusremover2009.com
91.211.65.53 ns3.cleaner2009solution.com
91.211.65.53 ns3.info-for-control.com
91.211.65.53 ns3.mycleaner2009.com
91.211.65.53 ns3.pc-virusremover2008.com
91.211.65.53 ns3.pcprivacycleaner-plus.com
91.211.65.53 ns3.pcprivacycleanerplus.com
91.211.65.53 ns3.quickdownloadtool.com
91.211.65.53 ns3.quickinstallpackpro.com
91.211.65.53 ns3.redirect-forutoo.com
91.211.65.53 ns3.redirectfor-me.com
91.211.65.53 ns3.redirectforme.com
91.211.65.53 ns3.redirectforutoo.com
91.211.65.53 ns3.registrydoctor2008pro.com
91.211.65.53 ns3.registrydoctor2008scan.com
91.211.65.53 ns3.secureexpertcleanerpro.com
91.211.65.53 ns3.softhoz.net
91.211.65.53 ns3.spywareremover2009plus.com
91.211.65.53 ns3.systemprotectioncenter.com
91.211.65.53 ns3.topregistrydoctor2008.com
91.211.65.53 ns3.traff2money.com
91.211.65.53 ns3.virusremover2008-offer.com
91.211.65.53 ns3.webstatsmaster.com
91.211.65.53 ns3.xpboosterpro.com
91.211.65.57 ns1.238594.biz
91.211.65.57 ns1.238594.info
91.211.65.57 ns1.pe2pe.biz
91.211.65.57 ns1.pe2pe.info
91.211.65.57 ns1.pe2pe.net
91.211.65.57 ns1.pp2pp.biz
91.211.65.57 ns1.pp2pp.info
91.211.65.57 ns2.238594.biz
91.211.65.57 ns2.238594.info
91.211.65.57 ns2.pe2pe.biz
91.211.65.57 ns2.pe2pe.info
91.211.65.57 ns2.pe2pe.net
91.211.65.57 ns2.pp2pp.biz
91.211.65.57 ns2.pp2pp.info
91.211.65.72 b.estdomains.com
91.211.65.72 c.estdomains.com
91.211.65.74 ns1.pornocrab.com
91.211.65.76 ns1.nscyb.org
91.211.65.77 ns2.nscyb.org
91.211.65.80 ns1.total-defender.com
91.211.65.81 ns2.total-defender.com
91.211.65.82 ns1.individualpeople.biz
91.211.65.82 ns1.individualpeople.info
91.211.65.82 ns1.individualpeople.net
91.211.65.83 ns2.individualpeople.biz
91.211.65.83 ns2.individualpeople.info
91.211.65.83 ns2.individualpeople.net
91.211.65.87 ns1.browseredirect.com
91.211.65.87 ns1.clickssends.com
91.211.65.87 ns1.hitssends.com
91.211.65.87 ns1.internetexamine.com
91.211.65.87 ns1.onlinestabilityscan.com
91.211.65.87 ns1.redirectmysite.com
91.211.65.87 ns1.safetyinternetscan.com
91.211.65.87 ns1.safetyread.com
91.211.65.87 ns1.scanstability.com
91.211.65.87 ns1.scanworldonline.com
91.211.65.87 ns1.securewebscan.com
91.211.65.87 ns1.securithyonsite.com
91.211.65.87 ns1.stabilityskim.com
91.211.65.87 ns1.theonlyclicks.com
91.211.65.87 ns1.thesmartclick.com
91.211.65.87 ns1.theworldtraffic.com
91.211.65.87 ns1.wwwscanonline.com
91.211.65.88 ns2.browseredirect.com
91.211.65.88 ns2.clickssends.com
91.211.65.88 ns2.hitssends.com
91.211.65.88 ns2.internetexamine.com
91.211.65.88 ns2.onlinestabilityscan.com
91.211.65.88 ns2.redirectmysite.com
91.211.65.88 ns2.safetyinternetscan.com
91.211.65.88 ns2.safetyread.com
91.211.65.88 ns2.scanstability.com
91.211.65.88 ns2.scanworldonline.com
91.211.65.88 ns2.securewebscan.com
91.211.65.88 ns2.securithyonsite.com
91.211.65.88 ns2.stabilityskim.com
91.211.65.88 ns2.theonlyclicks.com
91.211.65.88 ns2.thesmartclick.com
91.211.65.88 ns2.theworldtraffic.com
91.211.65.88 ns2.wwwscanonline.com
91.211.65.99 ns1.uansbiz.biz
91.211.65.100 ns2.uansbiz.biz
91.211.65.101 ns1.online2150.com
91.211.65.101 ns1.online2155.com
91.211.65.102 ns2.online2150.com
91.211.65.102 ns2.online2155.com
91.211.65.103 ns1.ad-globe.com
91.211.65.103 ns2.ad-globe.com
91.211.65.103 ns2.atlantmedia.net
91.211.65.103 ns2.olympicmedia.net
91.211.65.103 ns3.ad-globe.com
91.211.65.103 ns4.ad-globe.com
91.211.65.110 ns1.scanstabilityonline.com
91.211.65.110 ns1.stabilityinternetglobalonline.com
91.211.65.110 ns1.stabilityinternetworld.com
91.211.65.110 ns1.stabilityread.com
91.211.65.110 ns1.stabilityscanonline.com
91.211.65.110 ns1.stabilitytrace.com
91.211.65.110 ns1.stabilitytraceonline.com
91.211.65.110 ns1.webreadon.com
91.211.65.111 ns2.scanstabilityonline.com
91.211.65.111 ns2.stabilityinternetglobalonline.com
91.211.65.111 ns2.stabilityinternetworld.com
91.211.65.111 ns2.stabilityread.com
91.211.65.111 ns2.stabilityscanonline.com
91.211.65.111 ns2.stabilitytrace.com
91.211.65.111 ns2.stabilitytraceonline.com
91.211.65.111 ns2.webreadon.com
91.211.65.114 ns1.acorus-group.com
91.211.65.114 ns2.acorus-group.com
91.211.65.118 ns1.aserv.biz
91.211.65.119 ns2.aserv.biz
91.211.65.130 ns1.bookinternetread.com
91.211.65.130 ns1.greatstabilityscanonline.com
91.211.65.130 ns1.internetskim.com
91.211.65.130 ns1.scanstabilityavailable.com
91.211.65.130 ns1.stabilityinternetearthguide.com
91.211.65.130 ns1.stabilityseeonline.com
91.211.65.131 ns2.bookinternetread.com
91.211.65.131 ns2.greatstabilityscanonline.com
91.211.65.131 ns2.internetskim.com
91.211.65.131 ns2.scanstabilityavailable.com
91.211.65.131 ns2.stabilityinternetearthguide.com
91.211.65.131 ns2.stabilityseeonline.com
91.211.65.181 ns2.pserver.biz
91.211.65.182 ns1.pserver.biz
91.211.65.183 ns1.sserverv.net
91.211.65.184 ns2.sserverv.net
91.211.65.185 ns1.abunsx.net
91.211.65.186 ns2.abunsx.net

91.211.66.10 ns2.5avscan.com
91.211.66.10 ns2.av-scan-pro.com
91.211.66.10 ns2.av1scan.com
91.211.66.10 ns2.avscan1.com
91.211.66.10 ns2.avscan7.com
91.211.66.10 ns2.caltasa.com
91.211.66.10 ns2.coklas.com
91.211.66.10 ns2.gowwwscan.com
91.211.66.10 ns2.iapayment-pro.com
91.211.66.10 ns2.iklasa.com
91.211.66.10 ns2.in1is.com
91.211.66.10 ns2.in1sk.com
91.211.66.10 ns2.in4is.com
91.211.66.10 ns2.inaltak.com
91.211.66.10 ns2.inspred.com
91.211.66.10 ns2.internet-antivirus-2008.com
91.211.66.10 ns2.internet-antivirus-pro.com
91.211.66.10 ns2.internetantivirus-pro.com
91.211.66.10 ns2.new4scan.com
91.211.66.10 ns2.scan-web.com
91.211.66.10 ns2.scan4best.com
91.211.66.10 ns2.scan4live.com
91.211.66.10 ns2.scan4new.com
91.211.66.10 ns2.scan4plus.com
91.211.66.10 ns2.scan5new.com
91.211.66.10 ns2.scan6new.com
91.211.66.10 ns2.scan6plus.com
91.211.66.10 ns2.scanav4.com
91.211.66.10 ns2.stkasa.com
91.211.66.10 ns2.web-antivirus.com
91.211.66.10 ns2.webz-scan.com
91.211.66.14 ns1.viewformex.com
91.211.66.14 ns1.viewmyworldx.com
91.211.66.14 ns2.viewformex.com
91.211.66.14 ns2.viewmyworldx.com
91.211.66.15 ns1.viewformex.com
91.211.66.15 ns2.viewformex.com
91.211.66.40 ns1.atlantmedia.net
91.211.66.40 ns2.atlantmedia.net
91.211.66.40 ns3.ad-globe.com
91.211.66.40 ns3.atlantmedia.net
91.211.66.40 ns3.olympicmedia.net
91.211.66.40 ns4.atlantmedia.net

___________________________________________

- POST activity to 91.211.64.61, no user-agent, unknown content/payload;
- hxxp://91.211.65.10/files/winzip%2012%20activation%20code-key.exe
- hxxp://antivirus-powerful-scan.com/360/1/en/_freescan.php?sid=77083610
hxxp://antivirus-powerful-scan.com/360/1/en/freescan.php?sid=77083610
hxxp://antivirus-powerful-scan.com/360/1/freescan.php?nu=77083610
hxxp://antivirus-powerful-scan.com/_download.php?sid=77083610&dlth=18
hxxp://antivirus-powerful-scan.com/download/trial/InstallAVv_77083610.exe

- http://bigsellstaff.cn/burn.html
bigsellstaff.cn/burn.html ->
giklosjilo.com/in.cgi?pipka3 302 ->
korienado.com/cache6000/0index.html ->
index.php (fake 404)
giklosjilo.com/page.html ->
ciklop.cn/tool/tool2/in.cgi?baggi2 302 ->
exploits at korienado.com/cache6000/index.php,
korienado.com/cache6000/pdf.php (Collab.collectEmailInfo())
binary at hxxp://korienado.com/cache6000/load.php (12/37 VT)

__________________________

[94.103.5.50]
korienado.com
NS1.RRREIKKEDNS.COM
NS2.RRREIKKEDNS.COM

[94.247.2.225]
NS1.MANAGEHOSTDNS.COM
DNS1.SYSTEMPROMNS.COM

[78.46.205.70]
NS2.MANAGEHOSTDNS.COM

@NS2.MANAGEHOSTDNS.COM
advanced-scanner.com
advancedproscan.com
allpowerclicks.com
anti-viruspcscanner.com
anti-virusrapid-scanner.com
antivirus-fast-scan.com
antivirus-online-proscan.com
antivirus-powerful-scan.com
antivirus-powerful-scanner.com
antivirus-quickscan.com
antivirus-rapid-scan.com
antivirus-rapid-scanner.com
antivirus-rapidscan.com
antivirusfastscan.com
antiviruspowerfulscan.com
antiviruspowerfulscanner.com
antivirusquickscan.com
antivirusrapid-scan.com
antivirusrapid-scanner.com
converter-stats.com
delightfullinternet.com
gotowwwpoint.com
infohelp-security.com
infohelpsecurity.com
internetprosystemclicks.com
internetprotectionsystem.com
live-protected-payments.com
liveprotectedpayments.com
managehostdns.com
noway-clicks.com
online-antivirusscan.com
online-antivirusscanner.com
online-securityscan.com
online-securityscanner.com
onlineantivirus-scan.com
onlineantivirus-scanner.com
onlinemalwarescanner.com
onlinesecurity-scan.com
onlinesecurity-scanner.com
onlinesecurityscanner.com
onlinevirus-scanner.com
onlinevirusbuster.com
power-antivirus-scanner.com
powerantivirusscan.com
powerantivirusscanner.com
premium-world-payments.com
pro-anti-virus-scan.com
pro-antivirus-scanner.com
pro-antivirusscan.com
pro-antivirusscanner.com
pro-security-scanner.com
proantivirusscan.com
proantivirusscanner.com
prosecurityclicks.com
prosecurityscanner.com
protected-clicks-system.com
protected-online-payments.com
protectedgoclicks.com
protection-audit-scan.com
protection-fast-scanner.com
protection-updatessecurity.com
protectionclicksinfo.com
protectiondownloadsserver.com
protectionfast-scanner.com
protectionfastscanner.com
protectionquickscanner.com
protectionuodaterserver.com
protectionupdateserver.com
protectionupdateslive.com
protectionupdatessecurity.com
rapid-scanner.com
scanner-report.com
secured-update-download.com
secured-updates-server.com
security-audit-scanner.com
security-www-clicks.com
securityauditscan.com
securityauditscanner.com
securitywwwclicks.com
supported-clicks.com
systmesecureclicks.com
trusted-live-clicks.com
trusted-liveclicks.com
trustedlive-clicks.com
update-securitysoftware.com
updatesecuritysoftware.com
yourdeliciousinternet.com
yourhomenetworkinet.com
yourprivatewebspace.com
yoursecuredinternet.com

@NS2.SSERVERV.NET
hzkkanta.com
rjupanta.com
sserverv.net
yqlaanta.com
zdlpanta.com
zjslo.com
___________________________________________

Malware droppers seen:

hxxp://238594.biz:80/web/gate/r.php?[...]
hxxp://91.211.65.10:80/files/code%20voucher%20route%2066-key.exe
hxxp://91.211.65.10:80/files/site%20like%20zootube.365-key.exe
hxxp://91.211.65.10:80/files/www.tamil%20actress%20nude.com-key.exe
hxxp://91.211.65.10:80/seriall/driver_detective_key.exe
hxxp://bigsellstaff.cn:80/doors.html
hxxp://bigsellstaff.cn:80/feedback.html?
hxxp://bigsellstaff.cn:80/galler.html
hxxp://bigsellstaff.cn:80/goustebook.html
hxxp://bigsellstaff.cn:80/login/index.php
hxxp://bigsellstaff.cn:80/login/object_rtsp
hxxp://bigsellstaff.cn:80/login/pdf.php?id=20179
hxxp://bigsellstaff.cn:80/login/pdf.php?id=20179&vis=1
hxxp://coklas.com:80/cki.php?uid=167
hxxp://coklas.com:80/cki.php?uid=172
hxxp://ddtfff.ru:80/fidel/conf.bin
hxxp://domainauditorlive.ru:80/spl/index.php
hxxp://download.dailykeys.com:80/favicon.ico
hxxp://download.dailykeys.com:80/files/dreamweaver%20cs3.exe
hxxp://easywebsiteauditor.ru:80/spl/index.php
hxxp://ffseik.com:80/25/2/
hxxp://ffseik.com:80/25/2/getexe.php?h=12
hxxp://ffseik.com:80/25/2/getfile.php?f=pdf
hxxp://ffseik.com:80/25/2/getfile.php?f=vispdf
hxxp://ffseik.com:80/25/3/
hxxp://ffseik.com:80/25/3/getfile.php?f=pdf
hxxp://ffseik.com:80/25/3/getfile.php?f=vispdf
hxxp://ffseik.com:80/sss/in.cgi?2
hxxp://ffseik.com:80/sss/in.cgi?4
hxxp://ffseik.com:80/sss/in.cgi?6
hxxp://ffseik.com:80/sss/in.cgi?7
hxxp://ffseik.com:80/sss/in.cgi?8
hxxp://files.ss.ru:80/download/add/sacred_2_full_activation_code.txt.exe
hxxp://freshsoap.cn:80/leon/i.cfg
hxxp://helinking.cn:80/nt/pdf.php?id=1065
hxxp://helinking.cn:80/nt/pdf.php?id=1970
hxxp://helinking.cn:80/nt/pdf.php?id=2541
hxxp://iapaymentpro.com:80/presale.php?[...]
hxxp://internet-antivirus-2008.com:80/updates/updateloadlist.ini
hxxp://ipimpstuff.cn:80/default.cgi
hxxp://ipimpstuff.cn:80/in.cgi?3
hxxp://itspos5285z.com:80/cfg.bin
hxxp://karasing.cn:80/mu/index.php
hxxp://pavelmoous.ru:80/pavel/conf.bin
hxxp://pavelmoous.ru:80/pavel/conf2.php?zip=[...]
hxxp://powercheckip.ru:80/ip.php
hxxp://reservpptppp20.ru:80/pavel.bin
hxxp://www.helinking.cn:80/nt/
hxxp://www.helinking.cn:80/nt/index.php
hxxp://www.helinking.cn:80/nt/index.php?xml=1
hxxp://www.internet-antivirus-pro.com:80/support.php?[...]
hxxp://yqlaanta.com:80/dl/AcroIEHelpe3.dll
___________________________________________

ns1.revolutionsystems.ru A 91.211.65.29
ns2.revolutionsystems.ru A 91.211.65.29
ns1.domainauditorlive.ru A 91.211.65.29
ns2.domainauditorlive.ru A 91.211.65.29
ns1.easywebsiteauditor.ru A 91.211.65.29
ns2.easywebsiteauditor.ru A 91.211.65.29
mail.pavelmoous.ru A 91.211.65.29
mail.reservpptppp20.ru A 91.211.65.29
mail.bmwx6foreva.ru A 91.211.65.29
mail.ddtfff.ru A 91.211.65.29
domainauditorlive.ru A 91.211.65.29
easywebsiteauditor.ru A 91.211.65.29
ddtfff.ru A 91.211.65.29
ns1.ddtfff.ru A 91.211.65.29
ns2.ddtfff.ru A 91.211.65.29
igorhhasy.ru A 91.211.65.29
ns1.igorhhasy.ru A 91.211.65.29
ns2.igorhhasy.ru A 91.211.65.29
ns1.pavelmoous.ru A 91.211.65.29
ns2.pavelmoous.ru A 91.211.65.29
pavelmoous.ru A 91.211.65.29
ns1.reservpptppp20.ru A 91.211.65.29
ns2.reservpptppp20.ru A 91.211.65.29
reservpptppp20.ru A 91.211.65.29
elenahysd.ru A 91.211.65.29
ns1.elenahysd.ru A 91.211.65.29
ns2.elenahysd.ru A 91.211.65.29
bmwx6foreva.ru A 91.211.65.29
ns1.bmwx6foreva.ru A 91.211.65.29
ns2.bmwx6foreva.ru A 91.211.65.29

238594.biz A 91.211.65.57
238594.info A 91.211.65.57
abduhost.com A 91.211.64.120
bigsellstaff.cn A 91.211.64.155
bmwx6foreva.ru A 91.211.65.29
businesscommunity.biz A 91.211.64.147
cntotalizator.cn A 91.211.64.155
cokien.com A 91.211.65.50
coklas.com A 91.211.65.60
coklas.com A 91.211.66.15
d.theserials.com A 91.211.65.10
ddtfff.ru A 91.211.65.29
download.dailykeys.com A 91.211.65.10
egyptgood.cn A 91.211.64.155
elenahysd.ru A 91.211.65.29
fasterr.com A 91.211.64.155
ffseik.com A 91.211.64.118
files.seriall.com A 91.211.65.10
files.ss.ru A 91.211.65.10
foxholter.ru A 91.211.64.155
fresh-best-movies.cn A 91.211.64.155
godhey.com A 91.211.64.155
igorhhasy.ru A 91.211.65.29
iklasa.com A 91.211.65.60
iklasa.com A 91.211.66.15
internet-antivirus-2008.com A 91.211.65.60
internet-antivirus-pro.com A 91.211.65.60
ipimpstuff.cn A 91.211.64.155
itspos5285z.com A 91.211.64.157
keys.thekeys.ws A 91.211.65.10
loonser.cn A 91.211.64.153
name.keygen.name A 91.211.65.10
ns1.238594.biz A 91.211.65.57
ns1.238594.info A 91.211.65.57
ns1.abduhost.com A 91.211.64.120
ns1.bmwx6foreva.ru A 91.211.65.29
ns1.coklas.com A 91.211.65.50
ns1.ddtfff.ru A 91.211.65.29
ns1.dnsmytruedns.com A 91.211.64.118
ns1.elenahysd.ru A 91.211.65.29
ns1.genseo.cn A 91.211.64.156
ns1.idnska.net A 91.211.64.153
ns1.igorhhasy.ru A 91.211.65.29
ns1.iklasa.com A 91.211.65.50
ns1.internet-antivirus-2008.com A 91.211.65.50
ns1.internet-antivirus-pro.com A 91.211.65.50
ns1.oxdnski.cn A 91.211.64.153
ns1.pavelmoous.ru A 91.211.65.29
ns1.reservpptppp20.ru A 91.211.65.29
ns1.scan-web.com A 91.211.65.50
ns2.238594.biz A 91.211.65.57
ns2.238594.info A 91.211.65.57
ns2.abduhost.com A 91.211.64.121
ns2.bmwx6foreva.ru A 91.211.65.29
ns2.coklas.com A 91.211.66.10
ns2.ddtfff.ru A 91.211.65.29
ns2.elenahysd.ru A 91.211.65.29
ns2.genseo.cn A 91.211.64.157
ns2.idnska.net A 91.211.64.155
ns2.igorhhasy.ru A 91.211.65.29
ns2.iklasa.com A 91.211.66.10
ns2.internet-antivirus-2008.com A 91.211.66.10
ns2.internet-antivirus-pro.com A 91.211.66.10
ns2.oxdnski.cn A 91.211.64.155
ns2.pavelmoous.ru A 91.211.65.29
ns2.reservpptppp20.ru A 91.211.65.29
ns2.scan-web.com A 91.211.66.10
ns5.businesscommunity.biz A 91.211.64.147
ns6.businesscommunity.biz A 91.211.64.147
pavelmoous.ru A 91.211.65.29
razorindahouse.ru A 91.211.64.155
reservpptppp20.ru A 91.211.65.29
scan-web.com A 91.211.65.60
scan-web.com A 91.211.66.15
storage.ss.ru A 91.211.65.10
trafiks.cn A 91.211.64.155
wolfcuco.info A 91.211.64.155
www.fasterr.com A 91.211.64.155
www.firstslash.cn A 91.211.64.153
www.freshsoap.cn A 91.211.64.157
www.internet-antivirus-2008.com A 91.211.65.60

___________________________________________

inetnum: 91.211.64.0 - 91.211.67.255
netname: Ural-NET
descr: Ural Industrial Limited Company
country: RU
org: ORG-UICL2-RIPE
admin-c: UIM1-RIPE
tech-c: UIM1-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-HM-PI-MNT
mnt-lower: RIPE-NCC-HM-PI-MNT
mnt-by: URALCOMP-MNT
mnt-routes: URALCOMP-MNT
mnt-domains: URALCOMP-MNT
source: RIPE # Filtered

organisation: ORG-UICL2-RIPE
org-name: Ural Industrial Company
org-type: OTHER
address: Russia, 620240 Ekaterinburg, Sofia Kovalevsaja st.
admin-c: AP10609-RIPE
mnt-ref: URALCOMP-MNT
mnt-by: URALCOMP-MNT
source: RIPE # Filtered

role: UralNet IP Master
address: Ukraine, 69078 Kiev, Luteranskaya 28 st.
phone: +38 050 577 65 61
abuse-mailbox: abuse@uralnet.biz
admin-c: AP10609-RIPE
tech-c: AP10609-RIPE
nic-hdl: UIM1-RIPE
source: RIPE # Filtered

% Information related to '91.211.64.0/22AS48511'

route: 91.211.64.0/22
descr: UralNet aggregated block
remarks: uralnet route object for ukrainian customers
origin: AS48511
mnt-by: URALCOMP-MNT
source: RIPE # Filtered
____________________________________________________

aut-num: AS48511
as-name: UralComp-as
descr: Ural Industrial Company LTD
org: ORG-UICL2-RIPE
import: from AS5563 accept ANY
export: to AS5563 announce AS48511
import: from AS28947 accept ANY
export: to AS28947 announce AS48511
admin-c: AP10609-RIPE
tech-c: AP10609-RIPE
mnt-by: URALCOMP-MNT
mnt-routes: URALCOMP-MNT
source: RIPE # Filtered

organisation: ORG-UICL2-RIPE
org-name: Ural Industrial Company
org-type: OTHER
address: Russia, 620240 Ekaterinburg, Sofia Kovalevsaja st.
admin-c: AP10609-RIPE
mnt-ref: URALCOMP-MNT
mnt-by: URALCOMP-MNT
source: RIPE # Filtered

person: Alexander Ponayotov
address: Russia, 620240 Ekaterinburg, Sofia Kovalevsaja st.
phone: +734338354931
nic-hdl: AP10609-RIPE
mnt-by: URALCOMP-MNT
source: RIPE # Filtered
____________________________________________________

Checking server [whois.neulevel.biz]
Results:
Domain Name: URALNET.BIZ
Domain ID: D28526995-BIZ
Sponsoring Registrar: UK2 GROUP LTD.
Sponsoring Registrar IANA ID: 84
Domain Status: clientTransferProhibited
Registrant ID: DI_9096913
Registrant Name: Petr I. Smirovn
Registrant Organization: UralNET
Registrant Address1: Sofia Kovalevsaja st. 25
Registrant City: Ekaterinburg
Registrant Postal Code: 620240
Registrant Country: Russian Federation
Registrant Country Code: RU
Registrant Phone Number: +7.3432848
Registrant Email: mail@uralnet.biz
Administrative Contact ID: DI_9096913
Administrative Contact Name: Petr I. Smirovn
Administrative Contact Organization: UralNET
Administrative Contact Address1: Sofia Kovalevsaja st. 25
Administrative Contact City: Ekaterinburg
Administrative Contact Postal Code: 620240
Administrative Contact Country: Russian Federation
Administrative Contact Country Code: RU
Administrative Contact Phone Number: +7.3432848
Administrative Contact Email: mail@uralnet.biz
Billing Contact ID: DI_9096913
Billing Contact Name: Petr I. Smirovn
Billing Contact Organization: UralNET
Billing Contact Address1: Sofia Kovalevsaja st. 25
Billing Contact City: Ekaterinburg
Billing Contact Postal Code: 620240
Billing Contact Country: Russian Federation
Billing Contact Country Code: RU
Billing Contact Phone Number: +7.3432848
Billing Contact Email: mail@uralnet.biz
Technical Contact ID: DI_9096913
Technical Contact Name: Petr I. Smirovn
Technical Contact Organization: UralNET
Technical Contact Address1: Sofia Kovalevsaja st. 25
Technical Contact City: Ekaterinburg
Technical Contact Postal Code: 620240
Technical Contact Country: Russian Federation
Technical Contact Country Code: RU
Technical Contact Phone Number: +7.3432848
Technical Contact Email: mail@uralnet.biz
Name Server: NS1.NETANGELS.RU
Name Server: NS2.NETANGELS.RU
Created by Registrar: UK2 GROUP LTD.
Last Updated by Registrar: UK2 GROUP LTD.
Domain Registration Date: Wed Dec 03 11:31:26 GMT 2008
Domain Expiration Date: Wed Dec 02 23:59:59 GMT 2009
Domain Last Updated Date: Sat Dec 13 09:56:53 GMT 2008
__________________________________

[78.46.205.70]
NS2.MANAGEHOSTDNS.COM

[94.247.2.225]
NS1.MANAGEHOSTDNS.COM
DNS1.SYSTEMPROMNS.COM

________________________________

@NS2.MANAGEHOSTDNS.COM
advanced-scanner.com
advancedproscan.com
allpowerclicks.com
anti-viruspcscanner.com
anti-virusrapid-scanner.com
antivirus-fast-scan.com
antivirus-online-proscan.com
antivirus-powerful-scan.com
antivirus-powerful-scanner.com
antivirus-quickscan.com
antivirus-rapid-scan.com
antivirus-rapid-scanner.com
antivirus-rapidscan.com
antivirusfastscan.com
antiviruspowerfulscan.com
antiviruspowerfulscanner.com
antivirusquickscan.com
antivirusrapid-scan.com
antivirusrapid-scanner.com
converter-stats.com
delightfullinternet.com
gotowwwpoint.com
infohelp-security.com
infohelpsecurity.com
internetprosystemclicks.com
internetprotectionsystem.com
live-protected-payments.com
liveprotectedpayments.com
managehostdns.com
noway-clicks.com
online-antivirusscan.com
online-antivirusscanner.com
online-securityscan.com
online-securityscanner.com
onlineantivirus-scan.com
onlineantivirus-scanner.com
onlinemalwarescanner.com
onlinesecurity-scan.com
onlinesecurity-scanner.com
onlinesecurityscanner.com
onlinevirus-scanner.com
onlinevirusbuster.com
power-antivirus-scanner.com
powerantivirusscan.com
powerantivirusscanner.com
premium-world-payments.com
pro-anti-virus-scan.com
pro-antivirus-scanner.com
pro-antivirusscan.com
pro-antivirusscanner.com
pro-security-scanner.com
proantivirusscan.com
proantivirusscanner.com
prosecurityclicks.com
prosecurityscanner.com
protected-clicks-system.com
protected-online-payments.com
protectedgoclicks.com
protection-audit-scan.com
protection-fast-scanner.com
protection-updatessecurity.com
protectionclicksinfo.com
protectiondownloadsserver.com
protectionfast-scanner.com
protectionfastscanner.com
protectionquickscanner.com
protectionuodaterserver.com
protectionupdateserver.com
protectionupdateslive.com
protectionupdatessecurity.com
rapid-scanner.com
scanner-report.com
secured-update-download.com
secured-updates-server.com
security-audit-scanner.com
security-www-clicks.com
securityauditscan.com
securityauditscanner.com
securitywwwclicks.com
supported-clicks.com
systmesecureclicks.com
trusted-live-clicks.com
trusted-liveclicks.com
trustedlive-clicks.com
update-securitysoftware.com
updatesecuritysoftware.com
yourdeliciousinternet.com
yourhomenetworkinet.com
yourprivatewebspace.com
yoursecuredinternet.com

_______________________________

@NS2.SSERVERV.NET
hzkkanta.com
rjupanta.com
sserverv.net
yqlaanta.com
zdlpanta.com
zjslo.com

_________________________________

To have record SBL70438 (91.211.64.0/22) removed from the SBL, the Abuse/Security representative of RIPE (or the Internet Service Provider responsible for supplying connectivity to 91.211.64.0/22) needs to contact the SBL Team by email (use this link) to explain how the spam problem has been terminated (we need to know exactly how the issue has been dealt with and that this spam problem is fully terminated). If the spam problem that caused this listing has been terminated we will normally remove the listing from the SBL without delay.

It is essential that emails to the SBL Team about this SBL listing include this exact ticket information in the email Subject:

If you are a representative of RIPE, you also need to see: Current Live RIPE SBL Listings