CastleCops® Trojan Malware

whois

at 10 Jun, 2008 @ 17:14:45

GeekTools Whois Proxy v5.0.4 Ready.
Checking access for CastleCops MIRT... ok.

Checking server [whois.domain-registry.nl]
Results:
   Domain name:
      dinekeluring.nl

Status: active

Registrant:
      DIN001456-ESSEN
      Dinekeluring
      Drentselaan 94
      9501BW  STADSKANAAL
      Netherlands

Administrative contact:
      LUR000054-ESSEN
      M Luring
      +31 (0)599621457
      postmaster@dinekeluring.nl

Registrar:
      Ziggo zakelijk
      Winschoterdiep 60
      9723AB  GRONINGEN
      Netherlands

Technical contact(s):
      OPE000906-ESSEN
      Ziggo  Zakelijk Klantenservice
      +31 (0)8000620
      jurrien.oostland@office.ziggo.nl

Domain nameservers:
      ns3.essentkabel.com
      ns5.essentkabel.com

Date registered: 11-07-2002
   Record last updated: 19-05-2008

Record maintained by: NL Domain Registry

Copyright notice
   No part of this publication may be reproduced, published, stored in a
   retrieval system, or transmitted, in any form or by any means, electronic,
   mechanical, recording, or otherwise, without prior permission of the
   Foundation for Internet Domain Registration in the Netherlands (SIDN).
   Registrars are bound by these restrictions without any limitations,
   except in case of reasonable and necessary reproductions or publications
   and solely for those business activities as mentioned in the regulations
   for registrars.

Any use of this material to target advertising, commercial speech or
   similar activities is explicitly forbidden and will be prosecuted. The
   Stichting Internet Domeinregistratie Nederland requests to be notified
   of any such activities or suspicions thereof.
   Copyright (c) The Foundation for Internet Domain Registration
   in the Netherlands (SIDN).

dig any

at 10 Jun, 2008 @ 17:14:42

fetched page

at 10 Jun, 2008 @ 17:14:24
MD5 Fingerprint: cf17003bc928f3ed701d0bad8791271b
SHA1 Fingerprint: 67e37ad96fabb2fd6ee84f45950a1c3fd3367855

Corresponding BGP Origin ASN

at 10 Jun, 2008 @ 21:23:16
AS | BGP Prefix | CC | Registry | Allocated

Possible BGP peer ASNs one AS hop away from BGP Origin ASN

at 10 Jun, 2008 @ 21:23:16
AS Peers | BGP Prefix | CC | Registry | Allocated

AS Description of a given BGP ASN

at 10 Jun, 2008 @ 21:23:44
AS | CC | Registry | Allocated | AS Name

MIRT^(TM)

Malware Incident Reporting and Termination^(TM) Squad

status: confirmed malware

Report for at 10 Jun, 2008 @ 17:14:19

whois

dig any

host

fetched page

Corresponding BGP Origin ASN

Possible BGP peer ASNs one AS hop away from BGP Origin ASN

AS Description of a given BGP ASN


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 108ppm 2.353s (2.242s) Making cybercriminals unhappy since 2002*

MIRT(TM)

Malware Incident Reporting and Termination(TM) Squad

status: confirmed malware

Report for at 10 Jun, 2008 @ 17:14:19

whois

dig any

host

fetched page

Corresponding BGP Origin ASN

Possible BGP peer ASNs one AS hop away from BGP Origin ASN

AS Description of a given BGP ASN

MIRT^(TM)

Malware Incident Reporting and Termination^(TM) Squad