Services Let Malware Purveyors Check Their Web Reputation
Summary: Virus writers and botmasters are turning to subscription services like check-crypt.com that, for 20 cents, test whether their malicious sites have been flagged by any of 18 blacklists including Google Safe Browsing, McAfee SiteAdvisor, Spamhaus, SpamCop, SmartScreen, Norton Safe Web, Phishtank, Malwaredomainlist and MalwareURL. The domain's registration was protected by a privacy service, but WHOIS history showed it registered to Oleg Lojko in Rogatin, Ukraine, and an email address tied to that record led to vinni-trinni3.net, which blacklists had flagged for distributing the Zeus Trojan.
What you should know: A 20-cent check against 18 blacklists gives malware operators a cheap way to learn when their domains are burned and move to new ones - and when Krebs tested the service on vinni-trinni3.net, it reported only three of 18 blacklists detecting the site while missing Malwaredomainlist and MalwareURL, which had flagged it since March.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026