See: http://urlquery.net/report.php?id=147633 → http://hosts-file.net/?s=200.74.245.190
flagged as belonging to RBN: http://urlquery.net/report.php?id=147633
See: http://sitevet.com/db/asn/AS27956
On Blackshades Bot → http://maleware.wordpress.com/tag/blackshade-3-4/
Domain also had Win32/Spy.Zbot.UN trojan in the past 2012-05-27 11:08:50
also look at this additional data: http://www.projecthoneypot.org/list_of_ips.php?ctry=PA
polonus
Site has a bad WOT web rep: http://www.mywot.com/en/scorecard/return.domainnamesales.com?utm_source=addon&utm_content=popup-donuts
Site is has an EMD status at hpHosts: http://hosts-file.net/?s=www.doomzco.com
Domain listed here: https://zeustracker.abuse.ch/blocklist.php?download=domainblocklist
(forum member Kwartet! thanks for providing the additional info on this one)…
Blackshades comes with embedded Crypters in the controler to evade detection.
Kudo’s go out to MBAM’s researchers for finding up Blackshades malware back in June of this year
in infections at the Syrian theater…(Syrian activists)
polonus
Here is something more interesting…
A blackhole payload hosting fakeav was blocked here: https://www.virustotal.com/file/98175731aac01bbe223b206e9373ae451273c8760df3c3c16deb51a8e23ce7be/analysis/1346112817/
Not intended to be a copy paste from malwarebytes forum.