Asprox has awaken again.
I have not tried to follow it this time.
But a quick look gave me this one (from bfk.de):

The domain thingre.com lived happily side by side with other domains "attributed" to the newly wakened Asprox botnet.
(bannerdriven.ru, adsyndication.ru, adtcp.ru, adbnr.ru, siteanalitycs.ru, htmlads.ru, ads-t.ru, bannert.ru).
But if you do a quick search for thingre. com, this domain has been tied to Waledac.
So again, you find an overlap between the two botnets.
I don't have the brains to add anything else meaningful to that.
Thought I should only mention a couple of domains that I so far cannot see have been tied to Waledac, but have been seen on the botnet:
specipa.com and rascop.com.
siteanalitycs.ru does not seem to fit quite into either of them after a quick look.
But can be tied to infections, mule scams and drug sites.
I am a bit sceptical regarding the domain ml3.ru.
A domain with no website, but e-mail hosting on google.
Which e-mailaddresses you can find glued to suspicious activity.
For all I know, it can be a provider of free e-mailaddresses. But ........
Recent comments
41 weeks 3 days ago
41 weeks 6 days ago
42 weeks 2 days ago
42 weeks 3 days ago
43 weeks 5 days ago
1 year 22 weeks ago
1 year 22 weeks ago
1 year 24 weeks ago
1 year 25 weeks ago
1 year 26 weeks ago