Le site secure-zone.cx.cc est-il sûr ?

Scam look-alike and squatted domains at ***** [Querying whois.ripe.net] [whois.ripe.net] % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See ***** % Note: this output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '***** - *****' inetnum: 62.116.143.0 - 62.116.143.255 netname: PARKINGCREW-NET descr: Team Internet GmbH descr: Lindwurmstr. 25 descr: 80337 / Muenchen descr: Germany country: DE remarks: --------------------------------------- remarks: Please send all Abuse, Spam, Scans and remarks: Illegal Activity complaints to: remarks: ***** remarks: --------------------------------------- admin-c: MW5092-RIPE tech-c: MW5092-RIPE status: ASSIGNED PA mnt-by: IX1-MNT mnt-lower: IX1-MNT mnt-routes: IX1-MNT source: RIPE # Filtered person: Mario Witte address: Team Internet AG address: Lindwurmstr. 25 address: 80337 / Muenchen address: Germany phone: ***** fax-no: ***** nic-hdl: MW5092-RIPE source: RIPE # Filtered mnt-by: IX1-MNT % Information related to '*****AS15456' route: 62.116.128.0/19 descr: INTERNETX-MUC-2 origin: AS15456 mnt-by: IX1-MNT source: RIPE # Filtered % This query was served by the RIPE Database Query Service version ***** (WHOIS1) Host 11.143.116.62.in-addr.arpa. not found: 3(NXDOMAIN)

This host has been delisted at MalwareDomainList and ***** / HostsFile.org. It is dead on ***** UTC. This shows why for the really bad malware hosts like this a reputation based way of assessing it is useless. It came and went in less than a month. Since the count of hosts in this domain is actually double what it is in the ".cn" domain at MDL (MalwareDomainList) I am adding a rule against the domain commented out in my PAC filter. Since the PAC filter is constructed for English and French speaking people I can get away with the ".cn" domain. I have no such luck with the ".cc" domain. Most of the stuff in the ".cc" domain is English oriented. I will advise people to activate the ".cc" rule and add white-list rules for those domains in this TLD (".cc") that they want to go to or live dangerously. The Chinese people have the same problem. They cannot block their ".cn" domain, and for them it is no more than the equivalent of the ".com" domain. It is just that for non-Chinese, usually all you see is these miscreants from the US, Ukraine, Russia, and China abusing the ".cn" domain. It is just that the problem is even worse for the ".cc" domain right now and will continue to be this way for either some time to come or forever.