Where? -w7no0miw4l.westemarqannoriwwes dot info,204.11.56.48,ns1626.ztomy dot com,Criminals,
has cleanmx_generic malcode. Kaspersky detects: https://www.virustotal.com/en/url/63c16bee6f2dd0a0ddfdb821d05be512d96d0176e83a46338d3bb3e42b787626/analysis/1426776082/ Site Potentially Harmful. Site likely compromised.
Malware is run from a domain that is for sale: http://whois.domaintools.com/westemarqannoriwwes.info
Output for http://www.dnsinspect.com/w7no0miw4l.westemarqannoriwwes.info/1426776598
: -westemarqannoriwwes.info@8.8.4.4 (Default):
. 20486 IN NS b.root-servers.net.
. 20486 IN NS d.root-servers.net.
. 20486 IN NS k.root-servers.net.
. 20486 IN NS l.root-servers.net.
. 20486 IN NS i.root-servers.net.
. 20486 IN NS e.root-servers.net.
. 20486 IN NS h.root-servers.net.
. 20486 IN NS g.root-servers.net.
. 20486 IN NS m.root-servers.net.
. 20486 IN NS a.root-servers.net.
. 20486 IN NS c.root-servers.net.
. 20486 IN NS j.root-servers.net.
. 20486 IN NS f.root-servers.net.
;; Received 228 bytes from 8.8.4.4#53(8.8.4.4) in 22 ms
info. 172800 IN NS a2.info.afilias-nst.info.
info. 172800 IN NS a0.info.afilias-nst.info.
info. 172800 IN NS b2.info.afilias-nst.org.
info. 172800 IN NS b0.info.afilias-nst.org.
info. 172800 IN NS c0.info.afilias-nst.info.
info. 172800 IN NS d0.info.afilias-nst.org.
;; Received 445 bytes from 192.5.5.241#53(192.5.5.241) in 1144 ms
-westemarqannoriwwes.info. 86400 IN NS ns1626.ztomy.com.
-westemarqannoriwwes.info. 86400 IN NS ns2626.ztomy.com.
;; Received 117 bytes from 199.254.50.1#53(199.254.50.1) in 55 ms
-westemarqannoriwwes.info. 300 IN A 204.11.56.48
;; Received 58 bytes from 204.11.56.26#53(204.11.56.26) in 43 ms
pol