hphosts: Updated 29-07-2012

I am happy to report, the hpHosts server is now back online, and I've just finished updating the server and mirrors (all except one, due to a technical error, currently being worked on), with the new files (were meant to be out earlier this week, but obviously had to be delayed).

The hpHOSTS Hosts file has been updated. There is now a total of 171,879 listed hostsnames.If you are NOT using the

Read More

Info: hpHosts downtime

For those wondering, hpHosts has been suffering a dDos attack for the past ~48 hours. Steps are being taken to mitigate it and identify those responsible. Once done, hphosts will be back online.

Sorry for the inconvenience.

Read More

Called by 03339009119?

I recently handled a call my family received, from the following number;


0333 9009 119


The chap on the phone had an Indian accent (surprise surprise), and asked for my brother. When told he wasn't in, I asked who it was, and the chap immediately hung up.


I did a little digging, and it appears this number, has quite the history of cold-calling, and spamming on websites (dating back to 2009

Read More

Alert: Olympics 2012 malware

Criminals are very predictable;

1. Disaster occurs
2. Serve malware by exploiting [1]

1. News occurs
2. Serve malware by exploiting [1]

1. Someone dies
2. Serve malware by exploiting [1]

As usual, they're also predictable in how they do it;

1. Drive-by's
2. Exploits
3. Phishing
4. Social engineering

In this case, it's all about the Olympics (don't see why everyone is so fussed about it

Read More

vURL server

Just an FYI folks, the servers are going through the routine Windows Updates, so will be down for a few mins or so. fspamlist.com server has already been done, and the vURL server is going through its reboot as I write this.

Read More

ICANN’ failure

One of the biggest issues facing those that fight cybercrime, and perhaps “fight” sounds wrong, but it’s what we do, is arguing with hosts, registrars and AS’s, to get domains and servers, taken offline, whether it’s a single IP/server/domain or hundreds of thousands of them, as was the case with a fake meds case last year.

Usually, all we have to do, is send a report with the evidence, to a

Read More