This was inspired by another thread and it contains a long list I didn't want buried on a second page.
eventually you will et a redirect to shadexover.com or officialer.com to download a file named: flash_player_v10.exe which is a Trojan, view VirusTotal scan
Example DL URL's:
hxxp://shadexover.com/download/6d552b752b773d3d34c3bc5120090701/flash_player_v10.exe
and
hxxp://officialer.com/player/flash_player_v10.exe
First, all sites may be rated as Adult Content since many are pornographic in nature; they also need to be rated for Malicious Content since they will eventually lead to Trojans, Exploits ot Fake Codecs.
The list:
(I have removed those domains I found that have been deleted and are available again, though I may have missed a couple)
uxporntube.com
tubeanalporn.com
1searchwww.com
shadexover.com
213.163.66.241
castoholder.com
yescrome.com
ns1.shadexover.com
ns2.shadexover.com
officialer.com
80.233.221.253
mail.officialer.com
pherm.com
sightwest.com
66.197.165.55
66-197-165-55.hostnoc.net
64.191.91.200
66.197.165.50
64-191-91-200.hostnoc.net
66-197-165-50.hostnoc.net
ns1.adultns.net
ns2.adultns.net
ns1.pisi.tv
ns2.pisi.tv
ns2.sexkladez.com
pisi.tv
1rek.com
adultns.net
amateuractive.com
amateurcustom.com
amateurmy.com
besttoysex.com
cams-girls.com
camsmodels.com
cekcfoto.net
cityamateur.com
collectionamateur.com
corsicaferry.net
devoknet.com
ejevika.com
erolika.com
eropictures.net
escort-service.com.ua
fastsexphoneonline.com
fetish-dvdvideo.com
goldenchange.com
kexparty.com
lbuv.com
magnatus.net
mirporno.net
pornobase.net
quicktechno.com
rusypusy.com
scolacd.com
sexidrunk.com
superbestxshop.com
teensexphone.com
ukr-porno.com
ukrainian-escort.com
vandersexnet.com
varnat.com
xfilmsx.com
xxx-people-base.com
xxx-ukr.com
xxx-womans.com
xxxadultland.com
xxxua.com
znakom.com.ua
sexkladez.com
66.197.165.41
f-menow.com
220-centurion.adultns.net
66-197-165-41.hostnoc.net
pisi.tv
pornobase.net
smserotika.ru
angelo-o-o4ki.ru
sexulya.com
u128.org
62.149.28.197
1tubexxx.com
colo28-197.users.colocall.net
mail.1tubexxx.com
68.169.72.12
milfuploads.com
sisterreunion.com
teengfs.com
Thanks g7w
Sat 04 Jul 2009 04:01:49 AM UTC — shazzaGot them all!
Rated and commented
Sat 04 Jul 2009 12:16:34 PM UTC — cconniejeanRated and commented
Done
Sat 04 Jul 2009 12:37:47 PM UTC — phantazmThe weekend started quite red... ;-)
Also
Sat 04 Jul 2009 01:04:12 PM UTC — Athloniterated and commented . Thanks for the help g7w.
Athlonite.
Your help is always needed.
Also +1
Sat 04 Jul 2009 01:33:20 PM UTC — cotojoRated and commented :-)
Colin
http://freepcsecurity.co.uk
"If you have knowledge, let others light their candles with it" - Winston Churchill
+2
Sat 04 Jul 2009 04:21:06 PM UTC — Xp54321Rated and commented.
Thanks.
:-)