Silent noise - about spam, trojans and other nasty stuff

Or maybe I did?
I got the "activation code":

Of course I didn't buy this malware.
They were a bit sloppy this time.
And I suspect that their payment system is down.

I ended up at this one from:

h||p://getpaymentsystem. com/MA==_MQ==_MQ==/bXNhczIwMDk=
which automatically redirected to:
h||ps://secure.mpsjoin. com/[lots of stuff snipped, check for yourself]

Mostly meant as a note to myself.
Take it as it is. And dig a bit around for yourself if you are interested.

Related to Google is your friend? (internal link, see the attachment)

Maybe also related to Going for the Microsoft reward (internal link)

Domain Name: PRIVATESECUREDPAYMENTS.COM
   Registrar: TODAYNIC.COM, INC.
   Whois Server: whois.todaynic.com
   Referral URL: http://www.NOW.CN
   Name Server: 66217.EARTH.ORDERBOX-DNS.COM

antiterrornetwork.com, not seen it mentioned earlier.
The usual fake Reuters news, "At least 12 people have been killed and more than 40 wounded in a bomb blast near market in Tromsø", etc. Social engineering via locating me via my IP address to my actual city.

Maybe some other new ones too, later.

The words "terror" and "fear" are apparently the trendy one:

Sort of kicking myself in the ass. As a starter, to get something written.

I have thought about writing about this one for some time now.
A bit outdated, but at the same time maybe still a bit interesting.
The domain setx.in is gone now, but I think the rest of the chain of info is intact.

There will be a lot of the usual "maybes" and tiny connections. And some connections that are easy to verify. The value of it? I don't know.

For now, I settle with an old screenshot from Googles cache from November last year (thanks to robtex.com):

Twitter accounts have been hacked and used for spamming a link to chatwebcamfree.com.

chatwebcamfree.com contains an iframe which contains a signup form to
http:||wow.eroticagateway. com/track/NzcwNDc6MzoyMQ/join

Note the similarity to two earlier postings from October last year (internal links on this blog):

clickthisnow.info

im here now - Brand0n says

Sistemnet at the top as of March 03, Spamhaus' The 10 Worst Spam Service ISPs:
http://www.spamhaus.org/statistics/networks.lasso

And I find a few other listings interesting too, cogentco is one example:
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL73326

I steal most of the content from that listing: