Vertex & other Botnet sites not flagged?

Viruses and worms
1

See: https://www.virustotal.com/nl/url/95282c88dcdc59894fd6873c1424bb79283ae9e968d5950a981cbc4673a439c6/analysis/
Read about this malicious botnet: http://blogs.mcafee.com/mcafee-labs/vertexnet-botnet-hides-behind-autoit
on the malscript: http://www.autoitscript.com/forum/topic/99412-run-binary/
link article author = Hardik Shah
No IDS alerts given: http://urlquery.net/report.php?id=1396471264151
Delegation error: http://dnscheck.pingdom.com/?domain=rhns.org&timestamp=1396471310&view=1
Too few IPv4 name servers (1).

pol

2

C24 botnet site not flagged, well Bitdefender TrafficLight detects: https://www.virustotal.com/nl/url/382c26fd22f8d63cbc07bfe02bde9d8628cdf2e4ff3bad85a45e184fb96f18b1/analysis/
Read here on botnet: http://www.exposedbotnets.com/search/label/c24%20stealer
Malware active and up: circleread-view dot com.mocha2003.mochahost dot com,198.38.82.49,Criminals, (acc. to kraken’s virus tracker info)
Badness history: http://support.clean-mx.de/clean-mx/phishing.php?id=3482443
& on IP: https://www.virustotal.com/nl/ip-address/198.38.82.49/information/
See: https://zeustracker.abuse.ch/monitor.php?ipaddress=198.38.82.49
avast detects as Win32:Zbot-NRC [Trj]

pol

3

Betabot site here: https://www.virustotal.com/nl/url/9c48f3f8059957e445e8429c207506488c3b38618a7805bc57b0e187b59a6dbd/analysis/1396540340/

Virus Tracker verdict: p.aresital dot com,188.226.192.197,Criminals,

Nothing detected here: http://urlquery.net/report.php?id=1396540484416

Historcal badness see attached image.

Also consider: http://dnscheck.pingdom.com/?domain=p.aresital.com&timestamp=1396540990&view=1

pol

4

Cybercrime site Type IceIX: https://www.virustotal.com/nl/url/be39144fd7a5e718278aec3d2780fce09650293f6ba21819883b0d533287f8df/analysis/
ywo flag it.
Bot or Trojan IPs # of Connections First Identified Last Seen Threat Danger Level
95.128.157.163 1 2 hours ago 9 min ago AlienVault 3

Virus Tracker classification: wwXw.decoagua dot com,95.128.157.163,Criminals,
See: http://myip.ms/info/whois/95.128.157.163/k/2242815044/website/decoagua.com
Listed here: https://zeustracker.abuse.ch/monitor.php?ipaddress=95.128.157.163

pol