ALERT: Please treat content from extrabanner.com with extreme caution
Regular readers will recognize the domains t.banner09092.com and blackwater-cuprumworks.net – they were the domains used to attempt infection of computers via various security exploits:
http://msmvps.com/blogs/spywaresucks/archive/2009/09/12/1722754.aspx
Luckily, the domain blackwater-cuprumworks.net is not responding at the moment.
extrabanner.com
ICANN Registrar: Godaddy.com, Inc
Created 30 July 2009
NS47.DOMAINCONTROL.COM
NS48.DOMAINCONTROL.COM
IP: 68.178.232.100 - Arizona, Scottsdale, Godaddy.com, Inc (shares IP with 11,081,675 other sites)
Registar:
Domain Owner (trafficbuyer@gmail.com - the same as pussbanner769.info)
15156 SW 5th
Scottsdale, Arizona 85260
US
*****
dullnessfrequenting.info
ICANN Registrar: Godaddy.com, Inc
Created 17 September 2009
NS57.DOMAINCONTROL.COM
NS58.DOMAINCONTROL.COM
IP: 68.178.232.100 - same as extrabanner.com
Registrant:
Domain Owner (trafficbuyer@gmail.com)
15156 SW 5th
Scottsdale, Arizona 85260
US
*****
t.banner09092.com
ICANN Registrar: Godaddy.com, Inc
Created 18 September 2009
NS57.DOMAINCONTROL.COM
NS58.DOMAINCONTROL.COM
IP: 68.178.232.100 (again)
Registrant:
Domain Owner (trafficbuyer@gmail.com)
15156 SW 5th
Scottsdale, Arizona 85260
US
*****
blackwater-cuprumworks.net
ICANN Registrar: DIRECTI (Registration service "Domain Names Registrar Reg.Ru Ltd")
Created 7 September 2009
NS1.EVERYDNS.NET
NS2.EVERYDNS.NET
IP: 213.155.2.112 - Namibia, Grinvich3, Vladimir Gubarenko
Shares IP with the domains amateursex-hert.com, aw-work.net, awirons-work.com, blackwater-ironworks.com, blackwater-ironworks.net, blackwater-metalworks.net, blackwater-metalworks.net, sexamateur-hartcore.com and sleazy-dreamers.net
Registrant:
Eduard Skobelev (eddiscobbi3@gmail.com)
ul. Starinskaya, d.1, kv. 92
g. Moskva
g. Moskva, 107009
RU
Tel: +7 4952243948