Sure something going on here, see this report: http://www.solvedns.com/http://dimeracid.net/
see: http://www.solvedns.com/http://62.109.10.78
and for htxp://rosarms.info/rgh.php → http://www.solvedns.com/http://rosarms.info/rgh.php (where is the other MC record? - at least two are needed -
could be on another AS)
A baddie on that same IP: http://urlquery.net/report.php?id=8491
with 35 instances of this IDS alert: ET CURRENT_EVENTS HTTP Request to a *.tk domain - I get a poor web rep warning from WOT and a Bitdefender TrafficLight warning for malicious website. => https://www.virustotal.com/nl/url/8486e5948588dd44155837f42ad0bcc829a0bea0b1ab87bccd9b5acdeba30d9f/analysis/
detected here however: http://hosts-file.net/?s=allmobi.tk EMD Classification means High Risk Malware Site…
polonus