pahfyhfi.ru - MalwareURL

MalwareURL Listing Report

Entry matching pahfyhfi.ru was found in our database.

1265 other active domains were found on 410 IP(s) for AS36114 (RDTL)

Show the report for AS36114 (RDTL)

Domain:	pahfyhfi.ru
URL(s):	/links/1.php?rf=2w:31:1l:1l:1m&ae=1j:1n:1m:1l:1m:2w:31:1j:1m:1g&b=1f&sy=q&oe=n /links/1.php?pf=33:1j:1m:1k:1l&qe=1j:1n:1m:1l:1m:2w:31:1j:1m:1g&w=1f&ob=u&dq=f /links/1.php?rf=1k:2w:30:32:1g&te=1j:1n:1m:1l:1m:2w:31:1j:1m:1g&w=1f&xh=z&xk=i /links/1.php?xf=32:1i:1l:30:1j&ze=1j:1n:1m:1l:1m:2w:31:1j:1m:1g&r=1f&rz=x&if=x /links/1.php?kf=32:1i:33:1m:1m&te=1j:1n:1m:1l:1m:2w:31:1j:1m:1g&e=1f&en=x&nw=y /links/1.php?wf=1o:1g:30:31:1j&ge=1j:1n:1m:1l:1m:2w:31:1j:1m:1g&u=1f&kr=q&yi=q /links/1.php?wf=32:1n:1g:1m:32&de=1j:1n:1m:1l:1m:2w:31:1j:1m:1g&o=1f&qm=a&qs=e

Category:	Waledac botnet

ASN:	AS36114 (RDTL proxy aut-num for Red Rock Colo by MZIMA)
IP:	72.46.155.52
Country:	United States
Reverse IP:	72-46-155.unassigned.userdns.com

Name Servers:	ns1.boomsco.com => 94.228.30.154 101 domains listed using this name server ns2.boomsco.com => 46.214.198.182 101 domains listed using this name server ns3.boomsco.com => 46.126.75.190 101 domains listed using this name server ns4.boomsco.com => 128.65.111.129 101 domains listed using this name server ns5.boomsco.com => 46.214.198.182 101 domains listed using this name server ns6.boomsco.com => 46.214.198.182 101 domains listed using this name server