Ongoing analysis of the web infection
Full article650 words · extracted from securelist.com · click to collapse
[redirected_dns]
-affiliate=9;
-DnsServerIp=66.197.152.72;
-DnsServerIp=75.102.22.72;
-DnsServerIp=205.234.236.192;
-FakeDnsServerIp=66.197.152.71;
-FakeDnsServerIp=75.102.22.71;
-FakeDnsServerIp=205.234.236.191;
[redirect_timeouts]
-response_timeout=40000;
-redirect_deactivating_interval=40020;
[reports]
-Version=260;
-host=98.142.243.64/chrome/report.html;
-host_first=209.212.147.141/chrome/report.html;
-check_timeout=10000;
-disable_reports=0;
[AntiRB]
-server=65.98.83.115;
[GUI]
-long_start=0;
[UAC]
-DelayBeforeRun=10;
[redirected_ips]
[redirected_domains]
-www.google.com.=87.125.87.99;
-google.com.=87.125.87.103;
-google.com.au.=87.125.87.104;
-www.google.com.au.=87.125.87.147;
-google.be.=77.125.87.148;
-www.google.be.=77.125.87.149;
-google.com.br.=77.125.87.109;
-www.google.com.br.=77.125.87.150;
-google.ca.=77.125.87.152;
-www.google.ca.=77.125.87.153;
-google.ch.=77.125.87.155;
-www.google.ch.=77.125.87.158;
-google.de.=77.125.87.160;
-www.google.de.=77.125.87.161;
-google.dk.=92.125.87.123;
-www.google.dk.=92.125.87.160;
-google.fr.=92.125.87.154;
-www.google.fr.=92.125.87.134;
-google.ie.=92.125.87.170;
-www.google.ie.=92.125.87.177;
-google.it.=92.125.87.173;
-www.google.it.=92.125.87.147;
-google.co.jp.=92.125.87.103;
-www.google.co.jp.=84.125.87.147;
-google.nl.=84.125.87.103;
-www.google.nl.=84.125.87.147;
-google.no.=84.125.87.103;
-www.google.no.=84.125.87.147;
-google.co.nz.=84.125.87.103;
-www.google.co.nz.=84.125.87.147;
-google.pl.=84.125.87.103;
-www.google.pl.=64.125.87.147;
-google.se.=64.125.87.103;
-www.google.se.=64.125.87.147;
-google.co.uk.=64.125.87.103;
-www.google.co.uk.=64.125.87.147;
-google.co.za.=64.125.87.103;
-www.google.co.za.=64.125.87.147;
-www.google-analytics.com.=64.125.87.101;
-www.bing.com.=92.123.68.97;
-search.yahoo.com.=72.30.186.249;
-www.search.yahoo.com.=72.30.186.249;
-uk.search.yahoo.com.=87.248.112.8;
-ca.search.yahoo.com.=100.6.239.84;
-de.search.yahoo.com.=87.248.112.8;
-fr.search.yahoo.com.=87.248.112.8;
-au.search.yahoo.com.=87.248.112.8;
-ad-emea.doubleclick.net.=64.125.87.101;
-www.statcounter.com.=64.125.87.101;
[redirected_domains_hosts]
-www.google-analytics.com.=64.125.87.101;
-ad-emea.doubleclick.net.=64.125.87.101;
-www.statcounter.com.=64.125.87.101;
Text extracted automatically; images, tables and formatting may be missing. Original: https://securelist.com/ongoing-analysis-of-the-web-infection/31448/