Feed

block teacherslounge.cn, mg0b.info, cnn-bcc2.com

Posted on September 17th, 2009 in 0day, New Domains by dglosser

Please add teacherslounge .cn and  mg0b .info to your blocklists as soon as possible.

Thanks to the “JoshMeister” :

This Google search…
www.google.com/search?q=poll+skinner+won+america’s+got+talent

…brings up this link on the first page of results (which on the surface looks like a legit site that may have been hacked, but who knows)…
www.bgbc .org/wp-content/themes/arras-theme/css/blueprint/blue.php?kevin-skinner-wins-america-s-got-talent

…which redirects to  mg0b .info/go2.php?s=x243

…which redirects to
teacherslounge .cn/go.php?id=2031&key=6c2039a17&p=1

…which as of this moment isn’t redirecting anywhere for me, but is hosted on the same IP as tons of other malware domains (94.102.48 .29).  Presumably this URL will soon redirect to a fake virus scan or something else malicious.

Update: Josh reports a brand new domain to block: cnn-bcc2  .com

Comments are closed.