[nsp-sec] fake av on AS48841, AS36351, AS13237, AS39823, AS174, AS29073, AS24940

[Niels Provos]

I just sent some of these to another list, but thought this might be
of interest here, too.  These all seem to be fake AVs.

The following ASNs are involved:

AS48841, AS36351, AS13237, AS39823, AS174, AS29073, AS24940

91.212.65.125
AS48841
ukr

proantivirusscanv2.com/
anti-spyware-scan-v1.com/
proantivirusscannerv2.com/
antimalwareonlinescannerv3.com/
antivirus-scanner-v1.com/
antimalware-online-scanv3.com/
antimalware-live-scanv3.com/
antimalwareinternetscannerv3.com/
antimalware-online-scannerv3.com/
antimalwareliveproscanv3.com/
securedonlinecomputerscan.com/
advanedpromalwarescanner.com/
pricelessfinish.cn/
systemsupportnetwork.com/

Server Versions (1)
Apache (100.0%)


69.4.230.204
AS36351 - SOFTLAYER
usa

anti-spyware-scan-v1.com/
malwareliveproscanv1.com/
antvirushelpv1.com/
freeantispywarescan2.com/
premiumlivescanv1.com/
proantivirusscanv2.com/
proantivirusscannerv2.com/
antimalwareonlinescannerv3.com/
antivirusbestscannerv1.com/
antivirus-scanner-v1.com/
fullantispywarescan.com/
safeinternettoolv1.com/
savemypcnowv1.com/
antivirusquickscanv1.com/
malwareliveproscannerv1.com/
proantivirusscanv3.com/
antiviruspremiumscanv2.com/
antimalwareinternetscannerv3.com/
vrusstatuscheck.com/
antimalware-online-scannerv3.com/

Server Versions (1)
Apache (100.0%)


83.133.115.9
AS13237 - LAMBDANET-AS
deu

antvirushelpv1.com/
premiumlivescanv1.com/
proantivirusscannerv2.com/
antimalware-live-scanv3.com/
antimalwareonlinescannerv3.com/
antivirus-scanner-v1.com/
antimalware-online-scanv3.com/
savemypcnowv1.com/
antimalwareinternetscannerv3.com/
antimalware-online-scannerv3.com/
antimalwareliveproscanv3.com/
antimalwareinternetscanv3.com/

Server Versions (1)
Apache (100.0%)


92.62.98.19
AS39823 - COMPIC
est

antimalwareonlinescannerv3.com/
antimalwareinternetscannerv3.com/
antimalware-online-scannerv3.com/
antimalwareinternetscanv3.com/

Server Versions (1)
Apache (100.0%)


38.99.170.9
AS174 - COGENT
can

malwareliveproscanv1.com/
antvirushelpv1.com/
premiumlivescanv1.com/
antiviruslivescanv3.com/
freeantispywarescan2.com/
computerscanv1.com/
antimalware-online-scanv3.com/
antimalware-live-scanv3.com/
fullantispywarescan.com/
safeinternettoolv1.com/
savemypcnowv1.com/
malwareliveproscannerv1.com/
proantivirusscanv3.com/
antimalwareliveproscanv3.com/
antimalwareonlinescannerv3.com/

Server Versions (1)
Apache (100.0%)


93.174.93.34
AS29073 - ECATEL-AS
nld

antimalwareproonlinescanv3.com/
antimalwareliveproscannerv3.com/
antimalware-internet-scanv3.com/
pro-antivirus-scannerv2.com/

Server Versions (1)
Apache (100.0%)


78.47.132.216
24940 - HETZNER-AS
deu

antimalwareproonlinescanv3.com/
antimalwareliveproscannerv3.com/
pro-antivirus-scannerv2.com/
antimalware-internet-scanv3.com/

Server Versions (1)
Apache (100.0%)