What is the malcious pattern on polo domains starting with cheapest?

Viruses and worms
1

See: htxp://whois.polodomains.com/word/CHEAPEST/911.html
See: htxp://zulu.zscaler.com/submission/show/ab4919ba4962aaafea78ce4362b1d7c7-1338738037
and hxtp://hosts-file.net/?s=cheapestcarinsurancenow24.com
Here we have a list of expired domains starting with cheapest, registered for a specific purpose.
Think I found the common malware factor here: https://badwarebusters.org/main/itemview/13371
Consider what I found for the Autonomous System this was on: http://sitevet.com/db/asn/AS35017
…badware? Yes
…Current Events? Yes
So polo domains can be a handy tool to check on URL securitymalicious URLs?

So yes, enjoy this, my good forum friends,

polonus

2

See the results for the term “SCANNER”:
http://whois.polodomains.com/word/SCANNER/1.html

Surprised when I saw scanner.com (parked domains)

3

Hi !Donovan,

I missed the hourly limit there first time. Now I have only 58 pages to go for this first hour, but that can wait ;D
OK, I have booked that one. And you know a good ability to search various sources online is vital for those in malware analysis,
that is what the late searchlore-guru F.RAVIA has taught me, and I profit from these lessons almost every day, 8)

Damian aka polonus