Suspicious helpdesk addresses...watch out for these PHISHES!

Viruses and worms
1

Listed at Badmalweb live -
613853 2012-08-18 norton-helpdesk net 199.79.62.207 40034 htxp://norton-helpdesk.net
613852 2012-08-18 norton-helpdesk com 199.79.62.207 40034 htxp://norton-helpdesk.com
613851 2012-08-18 mcafee-helpdesk net 199.79.62.207 40034 htxp://mcafee-helpdesk.net
613850 2012-08-18 mcafee-helpdesk com 199.79.62.207 40034 htxp://mcafee-helpdesk.com
613848 2012-08-18 avast-helpdesk net 199.79.62.207 40034 htxp://avast-helpdesk.net

See: http://urlquery.net/report.php?id=136915
This is a misused server for contact abuse…
List of the PHISHES http://hosts-file.net/?s=199.79.62.207&view=matches
Also see: http://wepawet.cs.ucsb.edu/view.php?hash=99515b276470e6e434a946e1fb66cda8&t=1345309458&type=js
Reported to virus AT avast dot com,

polonus

2

nothing at PhishTank :-\

3

Hi Pondus,

No, it seems to be rather new… http://www.ipvoid.com/scan/199.79.62.207/
So new they did not even checked it: http://www.urlvoid.com/scan/nortonhelpdesk.com
About the hoster: http://www.mywot.com/en/scorecard/confluence-networks.com?utm_source=addon&utm_content=popup-donuts
No presents for XMas for this AS----
AS Name: CONFLUENCE-NETWORK-INC - Confluence Networks Inc
IPs allocated: 4864
Blacklisted URLs: 393

Hosts…
…malicious URLs? Yes
…badware? Yes
…exploit servers? Yes
…Current Events? Yes

pol

P.S. Pondus, thanks for reporting to PhishTank…

D