WinLocker Redirects

HTTP Request Method = GET
HTTP Unique Fields = “zeipn=*” OR “&hhykx=*” OR “&vzrga=*” OR “&otxfp=”
Examples:
hxxp://us.alscraft.org/in.cgi?3&zeipn=1&hhykx=1&otxfp=3437300170&ur=1&HTTP_REFERER=http%3A%2F%2Fwww%2Edeccanherald%2Ecom%2F
hxxp://trans.reciferesiste.org/in.cgi?3&zeipn=0&hhykx=0&vzrga=1&otxfp=0
hxxp://trance.nixcoin.com/in.cgi?3&zeipn=1&hhykx=1&otxfp=2117621980&ur=1&HTTP_REFERER=http%3A%2F%2Fwww%2Edeccanherald%2Ecom%2Fcontents%2F71%2Fstate%2Ehtml
hxxp://torent.istologio.org/in.cgi?3&zeipn=0&hhykx=0&vzrga=1&otxfp=0
hxxp://porshe.istologio.org/in.cgi?3&zeipn=1&hhykx=1&otxfp=2610161478&ur=1&HTTP_REFERER=http%3A%2F%2Fads6%2Ekompasads%2Ecom%2Fnew%2Fwww%2Fdelivery%2Fafr%2Ephp%3Fzoneid%3D1473%26cb%3DINSERT%5FRANDOM%5FNUMBER%5FHERE
hxxp://none.reciferesiste.org/in.cgi?3&zeipn=0&hhykx=0&vzrga=1&otxfp=0
hxxp://herald.istologio.org/in.cgi?4&zeipn=1&hhykx=1&otxfp=1516845560&ur=1&HTTP_REFERER=http%3A%2F%2Fwww%2Ebassresource%2Ecom%2Fbass%2Dfishing%2Dforums%2Findex%2Ephp%3Fapp%3Dcore%26module%3Dsearch%26do%3Duser%5Factivity%26mid%3D22462
hxxp://deccan.istologio.org/in.cgi?4&zeipn=1&hhykx=1&otxfp=3357508003&ur=1&HTTP_REFERER=http%3A%2F%2Fwww%2Edeccanherald%2Ecom%2Fcontent%2F290222%2Fobama%2Dromney%2Dset%2Dphoto%2Dfinish%2Ehtml

Comments are closed.