View Single Post
Old 27-01-2007, 05:40 PM   #5
horrorist
Newbie

 
Join Date: Jan 2007
Location: ,
Posts: 21
Default

Very obvious what happens: The link directs to a multimedia ressource which turns out to be a executable. Maybe it' some dialer or even a trojan.

After tracing that domain these are the last 7 IP- Numbers:

205.234.205.241
64.202.110.14
205.234.205.98
64.202.104.41
66.225.245.26
64.28.176.1
85.255.119.213 - dildo-pleasure.info

That's the Whois information:

Domain: dildo-pleasure.info ,D16203811-LRMS
Created: 23-01-07
Expires: 23-01-08
ID: DI_5338525
Registrant: Arte Novo (really surprized that it is not Ondrej Muncinsky... :blink: )
Adress: Caseros 1021, 4400 Salta, AR, +54-3784311845
e-mail: kv9999e6dgeneral@gmail.com

For anybody who's interested.
horrorist is offline                         Send a private message to horrorist