See: https://www.virustotal.com/nl/url/bb6907cd78a942b52f681f39c0a72fda07bf35ddce607d1f9c95a664942b121a/analysis/1423753850/
and http://quttera.com/labs-data-url/144.76.15.102
Unable to properly scan your site. Site returning error (40x): HTTP/1.1 403 Forbidden
Android malware: http://www.scumware.org/report/144.76.15.102.html
and https://www.virustotal.com/nl/ip-address/144.76.15.102/information/
polonus
The file being studied is Android related! APK Android file more specifically. The application’s main package name is kr.co.pigcase. The internal version number of the application is 18. The displayed version string of the application is 3.6. The minimum Android API level for the application to run (MinSDKVersion) is 9. The target Android API level for the application to run (TargetSDKVersion) is 20.
Avast should detect (in PUP-mode): https://www.virustotal.com/nl/file/d9c2ae95f335ee9256e57222779eecec9cfe6b93122ed7aa1e649104a238ce76/analysis/
When they arrive from here they are definitely suspect: https://www.mywot.com/en/scorecard/m.downloadatoz.com?utm_source=addon&utm_content=popup
pol