MALICIOUS ADs: download.fromdoctopdf.com risking with Adware.MyWebSearch White Plains, NEW YORK (UNITED STATES)

FOR WEBMASTERS

If you own a Website or a Blog and are affiliated with Google AdSense, in order to your own Reputation, should block the Domain download.fromdoctopdf.com in your AdSense Dashboard. The Site lets your Visitors download and install persistant ADWARE. See the following Report:

MALICIOUS ADs: Adware.MyWebSearch.15

MALICIOUS CONTENT & DOWNLOADS:

http://www.googleadservices.com/pagead/aclk?sa=L&ai=CZ5u950M9U8H1Goiu7Qbw7YDgCMWmg7oEza6d5Fmwtc3fUBABII7AlCNQq8iQnAZguwOgAbuLoeMDyAECqAMByAPBBKoEkwFP0INx3GRxGmf75YJHVfg23Y1q0faoAWwxpSI0eW2lAjrO4iGtdTPCH5e2qE0-OJYs2Nzy3PwLsVBURyZQBdBqSuU3c8rON3dh9vA-8VLjBuUDUefI0r3rD9eSIrC-NykRnoCC_TyV-EAoBCDuoqT7Gs-hxBakOM0ZIuWaQx0i1lofQlAkWFG6zz51lD0laNJkf-uIBgGgBgKAB6303hw&num=1&cid=5Gi0szH0G6npQc1zBwu_So85&sig=AOD64_1k0A5LtYUiNxfDGsHRhrPeLa_gQA&client=ca-pub-5585202032329389&adurl=http://download.fromdoctopdf.com/index.jhtml%3Fpartner%3DY6xdm010&nm=1&mb=2&bg=!A0S2nPCfVMrd2QIAAAA3UgAAABgqAOEAYGl_c7TMnCDOZeuOQ1tdwMlTc5AjqsfXe6qIrAw64KouboiusTyHanPQBv1xwPq5aJtvphicS2RfNGWeczY_j68aSMS7YgI5crzlya6a1oHsBSRE3bjLecUvRnaNGRi2UveY9oI91rKvISEK3gSPdHKAZ9We2D12U3d-N6nskV2jobsjRJYY1P0-R2Utrg-kJcArZtz9bURG1mslSipysYp8n3u3rGyh40WBX4gqJJkgGqYahbw9-wnY3eF4A2ooAG4_smQYaM9C0Iu5FwVm1Us5ddKk2NOcgoOoqeDV7KE

ANALYSIS VT:

• https://www.virustotal.com/de/url/09f26ddc5338a53ab3d8161f9694c23b876736809c779d59ccd0265bfac9d423/analysis/1396524292/

URL AFTER REDIRECT:

http://download.fromdoctopdf.com/index.jhtml?partner=Y6xdm010&gclid=CPOus7OaxL0CFaw-Mgod8FAA7A

• https://www.virustotal.com/de/url/f47d656744a326f0c31554124e28cfed59e6417e1f2f19a907478fb0aa437522/analysis/

IP:

http://74.113.233.180/

• https://www.virustotal.com/de/url/54b4d071b1897bce1af782c969f0510bd2744190d95d92e4bae7d9758a033bb3/analysis/1396460279/

• https://www.virustotal.com/de/ip-address/74.113.233.180/information/

Fwd/Rev DNS Match: NO

• http://www.senderbase.org/lookup/?search_string=74.113.233.180

SCREENSHOT AT URLQuery: https://urlquery.net/screenshot.php?id=1396456860485

CLICK TO DOWNLOAD & INSTALL:

Adware.MyWebSearch.15

• https://www.virustotal.com/de/file/3861f4259af68b4ba6ea7cdff84d9ce2deddcf4f5056685d00997d12fdcd4593/analysis/1396524664/

MALICIOUS ADs: www.mapsgalaxy.com risking with Adware.MyWebSearch White Plains, NEW YORK (UNITED STATES)

FOR WEBMASTERS

If you own a Website or a Blog and are affiliated with Google AdSense, in order to your own Reputation, should block the Domain www.mapsgalaxy.com in your AdSense Dashboard. The Site lets your Visitors download and install persistant ADWARE. See the following Report:

MALICIOUS GOOGLE AD: Adware.MyWebSearch.47

MALICIOUS CONTENT & DOWNLOADS:

http://googleads.g.doubleclick.net/aclk?sa=l&ai=CnEVeQDc8U-upIeel7QahnoDQCund95AHodCfgp4BtNjNkjsQASCOwJQjUOX47tf9_____wFguwOgAY-N4MsDyAECqAMByAPBBKoEiwFP0MESvZ_isD1TrzMOPDJ1o7Ufq5dre3IjKnqqYo-zjs39xY_t30Lip57ow-ldZoz2GU26VWAho6A9Zfx_82_n7YwdODV1nM_hOiWndJ9Ur_0KCBr2cVNXHqUbYh6rHuuZw6vVy-t87Bu9AdYWDGHkkkxPd-td_QvjgH9bq3ZYt0sk6iXBAIerka9uoAYCgAfZ8p80&num=1&sig=AOD64_0IYB2aEpKbXMiR0DfT4GK6wEbtjg&client=ca-pub-5585202032329389&adurl=http://www.mapsgalaxy.com/index.jhtml%3Fspu%3Dtrue%26partner%3DUXxdm063&nm=1&mb=2&bg=!A0Qka6E9cikknAIAAAAoUgAAABAqAOF3LAxbRwhN4BN-FCwOxvTpAJVAY9WiyoU86eSLNpX7oIu11_DHmjdhLtRJxnOsZ2ZRyxI1gmGBT5wpOWh-io87KnZHpVUxySq_sLVnszay-jesA7PsUY1GadC8jU80U8gmgzyt23KO5wCm_3kKPipcR-wmYUFGqhG3IF3DU6V5F_dft6JJcBuz8QGIoYwpzwmmdFstwcCSDxhbRT_gPOHJnI0rgkFGl8V_gcGC8067tK2mZXJ6J3RpV9c3FljPkMmJqBIAk27NWoNXPFLAtzCXuxRLD6Wx9O3OyjxViucvt-M

ANALYSIS VT:

• https://www.virustotal.com/de/url/a92a922529b7b83d95cac0b4cc8d93e8e2370088c4084e86866279241bd5bcad/analysis/

URL AFTER REDIRECT:

http://www.mapsgalaxy.com/index.jhtml?spu=true&partner=UXxdm063&gclid=CI32lZabwr0CFYhaMgodVmQAAQ

• https://www.virustotal.com/de/url/21b8b9a8349d7ddde85e4ca86b43d2e76552e689dcc3e80a9a38d4e49517a1bb/analysis/

IP:

http://74.113.233.180/

• https://www.virustotal.com/de/url/54b4d071b1897bce1af782c969f0510bd2744190d95d92e4bae7d9758a033bb3/analysis/1396460279/

• https://www.virustotal.com/de/ip-address/74.113.233.180/information/

Fwd/Rev DNS Match: NO

• http://www.senderbase.org/lookup/?search_string=74.113.233.180

SCREENSHOT AT URLQuery: https://urlquery.net/screenshot.php?id=1396456860485

Own Screenshot

CLICK TO DOWNLOAD & INSTALL:

Adware.MyWebSearch.47

• https://www.virustotal.com/de/file/68ae70b9cd962e0b44215c1e3b9909aec214ce508ce812876d0e2f0b798ad23a/analysis/1396457127/

OTHER MALICIOUS LINKS CONNECTED:

http://ak.imgfarm.com/images/download/spokesperson/spokesperson.js

• https://www.virustotal.com/de/url/b08c15078bb414e7a8a5b00bfdd6cf39932a31b55d078bde87713ad4baa38ef9/analysis/

• https://www.virustotal.com/de/file/dccc8d765c3a166c8fa79a0ad9358f1b6571cf0e411245a03950f1d9fc2e9d04/analysis/1396456474/

http://ak.imgfarm.com/images/anx/anemone-1.2.7.js

• https://www.virustotal.com/de/url/02be3e7f50f96b17100f9298b452272ec2eda7aa02cf2f47acd56d168c83c2ae/analysis/

• https://www.virustotal.com/de/file/b61f1dc82835d8bc3b6332443358eb5b9c41a5f4b0672497cdf06ac0a8bbfdfa/analysis/1394482504/

SEE ALSO:
http://wepawet.iseclab.org/view.php?hash=75d2310bc0fb8f44448a4ca37b09586c&t=1396455295&type=js

NEW YORK Online Child Predators 2012: Samuel Fanelli Sentenced to 15 Years in Prison for Possession of 10.000+ Images of Child Pornography

On March 8th, 2012, Samuel J. Fanelli, 23, of White Plains, New York, got sentenced to 15 years in prison by U.S. District Judge Cathy Seibel in White Plains federal court on charges of possessing, receiving, and distributing child pornography. Fanelli will also have to register as a sex offender.

Judge Cathy Seibel

Fanelli was arrested on January 28th, 2011 by FBI agents and pleaded guilty on July 5th, 2011, where he stated:

"I had some child pornography on my hard drive and I made it available through a peer-to-peer network."

Fanelli, who was working as a babysitter for several Westchester families, also admitted to molesting at least one child he babysat for in his plea agreement. During a search of Fanelli’s residence prior to his arrest, his computer was seized and was found to have more than 10.000 images as well as videos of child pornography.

The slight, monocled Fanelli, looking younger than his 22 years at the time, said he was a college graduate when questioned by Judge Cathy Seibel in White Plains. Seibel asked Fanelli if he knew that his activity on the filesharing network was illegal. "You understood by doing that other people were going to have access to it and be able to download it to their computer via the Internet ?" she asked.

Fanelli answered in the same polite tone he used throughout the hearing:

"Yes, ma'am,"

Fanelli also mentioned that he had been under a psychiatrist's care for about six weeks before his arrest.

The investigation began September 1st, 2010, when an FBI Undercover Agent took over the peer network account of another child pornography user who was online friends with Fanelli. Through that account, the agent accessed Fanelli's computer and downloaded the disastrous files.

U.S. Attorney Preet Bharara

After the Conviction U.S. Attorney Preet Bharara stated:

“Samuel Fanelli victimized children by trafficking in child pornography and, in one case, by sexually abusing a child entrusted to his care. With today’s sentence there will be one less child predator on the street.”