« previous next »
Pages: [1]   Go Down

Author Topic: SpyEye being closed from here? [SOLVED]  (Read 1711 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34060
  • malware fighter
SpyEye being closed from here? [SOLVED]
« on: August 01, 2012, 12:57:24 AM »
I get a  502 Bad Gatewaybad  here, see: http://urlquery.net/report.php?id=109807
One detection given here: https://www.virustotal.com/url/f1d8ef3d354b48a5887050c81728774b3f634ac6fa69cb2ce7bba2949d3d2663/analysis/
see: https://spyeyetracker.abuse.ch/monitor.php?host=oklemoh.com
Most malware on the IP domains were been taken down after between one half and seven hrs time of being active,

polonus
« Last Edit: August 21, 2012, 04:25:47 PM by polonus »
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34060
  • malware fighter
Re: SpyEye being closed from here? [SOLVED]
« Reply #1 on: August 21, 2012, 04:25:24 PM »
We now have and had for quite some time  detection via avast Network Shield URL:Mal detected: http://zulu.zscaler.com/submission/show/4f2ff5a3e03d55deda46f62b502ed4d1-1345557835
Sinkholed: https://spyeyetracker.abuse.ch/monitor.php?host=oklemoh.com
urlQuery does not alert SpyEye: http://urlquery.net/report.php?id=139868

But anyway the avast user is being protected by the avast Network Shield,

polonus
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37699
Re: SpyEye being closed from here? [SOLVED]
« Reply #2 on: August 21, 2012, 05:15:01 PM »
Quote
urlQuery does not alert SpyEye: http://urlquery.net/report.php?id=139868
Sucuricata filter is alerting.  ;)
Logged
Pages: [1]   Go Up
« previous next »