616design.info (Pony loader and Zeus banking malware hosted by fastit.net)

Resolved 616design.info to 80.82.222.106

Pony
Server:  616design.info
Gate file:  /forum/pony/gate.php

This is by the same guy as this winlocker and andromeda bot. The server seems to be down at the moment, most likely due to zeus tracker posting the zeus bot I located on the same ip.

Zeus
Server:  oppspeedy.co.ua
Gate file:  /forum/33/gate.php
Config file:  /forum/33/config.bin

Hosting infos: http://whois.domaintools.com/80.82.222.106

Categories: Uncategorized