proxylegitconnect.com (Reverse proxy malware hosted by ecatel.net)

Resolved dq.proxylegitconnect.com to 89.248.172.174
Resolved bren.proxylegitconnect.com to 89.248.172.145

Servers:  dq.proxylegitconnect.com, bren.proxylegitconnect.com
Port:  8800

Based on the port and subdomains, this is the same guy as this previous post.

Hosting infos:  http://whois.domaintools.com/89.248.172.174
Hosting infos:  http://whois.domaintools.com/89.248.172.175

Categories: Uncategorized