mediamate malvertizements - several samples
I received three separate samples of a mediamate malvertizement today, all with different names.
First sample
This time it hit googiesindication.com - IP: 217.150.254.47
Registrar: TLDS, LLC DBA SRSPLUS
Creation date - 26 November 2007
Registrant, administrative and billing contact: Jon Lod (mail@googiesindication.com)
domains sharing nameservers (there are some old names here - all known bad actors)
aboutstat.com
adlbrite.com
akamahi.net
entrerrenglonadura.com
newstat.net
officialstat.com
quinquecahue.com
stat-diagnostic-imaging.net
statetstr.com
stathisranch.net
stathome.net
staticglobalsources.com
staticglobalsources.net
station-appraisals.com
station-appraisals.net
statnation.net
statsla.net
statworld.net
thetechnorati.com
vozemiliogaranon.com
Second sample
This one hits officialstat.net - IP: 92.62.100.7
Registrar: COMMUNIGAL COMMUNICATIONS LTD
Creation date - 1 February 2008
Registrant, administrative, technical and billing contact: Serg Moon (moon.serg@gmail.com)
Third sample:
This one hit staticglobalsources.com - IP: 92.62.100.14
Registrar: COMMUNIGAL COMMUNICATIONS LTD
Creation date - 1 February 2008
Registrant, administrative, technical and billing contact: Serg Moon (moon.serg@gmail.com)