Threat hXXp://46.105.248/ads.php?sid=1911 any help?
This is a so-called dga threat, aka domain generation algorithms in stealthy malware: read: https://www.damballa.com/domain-generation-algorithms-dga-in-stealthy-malware/
Instead of relying upon a static list of preconfigured domain names that corresponded to the location of the badguys C&C servers, it used an algorithm to calculate candidate domain names. Our forum friend !Donovan described this type of malware domain generation and he found a way to predict the candidate domains. A domain generation algorithm (DGA) is a computer program that creates slightly different variations of a given domain name.
What we deal with here is such a form of malware, example: http://urlquery.net/report.php?id=1425842682317
IDS for this. It might long have been changed for a newer algoritm driven domain name, here a four-quad.
polonus