jottedmaintains.net (Citadel banking malware hosted by linkup.ua)

Resolved jottedmaintains.net to 176.119.2.93

Server:  jottedmaintains.net
Gate file:  /xerox/file.php
Config file:  /xerox/gate.php

Hosting infos: http://whois.domaintools.com/176.119.2.93

Related md5s (Search on malwr.com to download samples)
Citadel:
19d04a8e094f5fe2b171cf5eed677c30

Categories: Uncategorized