ZeroHour
Kaspersky Securelistpublished ()ingested @Securelist

Ongoing analysis of the web infection

lowIndustryimportance 30
Full article650 words · extracted from securelist.com · click to collapse

[redirected_dns]

-affiliate=9;

-DnsServerIp=66.197.152.72;

-DnsServerIp=75.102.22.72;

-DnsServerIp=205.234.236.192;

-FakeDnsServerIp=66.197.152.71;

-FakeDnsServerIp=75.102.22.71;

-FakeDnsServerIp=205.234.236.191;

[redirect_timeouts]

-response_timeout=40000;

-redirect_deactivating_interval=40020;

[reports]

-Version=260;

-host=98.142.243.64/chrome/report.html;

-host_first=209.212.147.141/chrome/report.html;

-check_timeout=10000;

-disable_reports=0;

[AntiRB]

-server=65.98.83.115;

[GUI]

-long_start=0;

[UAC]

-DelayBeforeRun=10;

[redirected_ips]

[redirected_domains]

-www.google.com.=87.125.87.99;

-google.com.=87.125.87.103;

-google.com.au.=87.125.87.104;

-www.google.com.au.=87.125.87.147;

-google.be.=77.125.87.148;

-www.google.be.=77.125.87.149;

-google.com.br.=77.125.87.109;

-www.google.com.br.=77.125.87.150;

-google.ca.=77.125.87.152;

-www.google.ca.=77.125.87.153;

-google.ch.=77.125.87.155;

-www.google.ch.=77.125.87.158;

-google.de.=77.125.87.160;

-www.google.de.=77.125.87.161;

-google.dk.=92.125.87.123;

-www.google.dk.=92.125.87.160;

-google.fr.=92.125.87.154;

-www.google.fr.=92.125.87.134;

-google.ie.=92.125.87.170;

-www.google.ie.=92.125.87.177;

-google.it.=92.125.87.173;

-www.google.it.=92.125.87.147;

-google.co.jp.=92.125.87.103;

-www.google.co.jp.=84.125.87.147;

-google.nl.=84.125.87.103;

-www.google.nl.=84.125.87.147;

-google.no.=84.125.87.103;

-www.google.no.=84.125.87.147;

-google.co.nz.=84.125.87.103;

-www.google.co.nz.=84.125.87.147;

-google.pl.=84.125.87.103;

-www.google.pl.=64.125.87.147;

-google.se.=64.125.87.103;

-www.google.se.=64.125.87.147;

-google.co.uk.=64.125.87.103;

-www.google.co.uk.=64.125.87.147;

-google.co.za.=64.125.87.103;

-www.google.co.za.=64.125.87.147;

-www.google-analytics.com.=64.125.87.101;

-www.bing.com.=92.123.68.97;

-search.yahoo.com.=72.30.186.249;

-www.search.yahoo.com.=72.30.186.249;

-uk.search.yahoo.com.=87.248.112.8;

-ca.search.yahoo.com.=100.6.239.84;

-de.search.yahoo.com.=87.248.112.8;

-fr.search.yahoo.com.=87.248.112.8;

-au.search.yahoo.com.=87.248.112.8;

-ad-emea.doubleclick.net.=64.125.87.101;

-www.statcounter.com.=64.125.87.101;

[redirected_domains_hosts]

-www.google-analytics.com.=64.125.87.101;

-ad-emea.doubleclick.net.=64.125.87.101;

-www.statcounter.com.=64.125.87.101;

Text extracted automatically; images, tables and formatting may be missing. Original: https://securelist.com/ongoing-analysis-of-the-web-infection/31448/