This time hosted by HopOne, a legitimate hosting company but with lax procedures that mean that it's a haven for scammers, spammers and malware pushers.

It'll be interesting to see how long these sites are up for.. I suspect that HopOne won't take any timely action.
Conrad Longmore | Homepage | 11.07.06 - 4:32 am | #

"...It'll be interesting to see how long these sites are up for..."

I have been watching the vxgame sites since they first began with vxiframe.biz in Jan 2005 and each time they change their IP addresses, I always doument the changes.

Right now the oldest to be in the HopOne IP range is traff5all.biz which changed from the Russian IP 217.107.217.184 in April 2006 to 209.160.64.135 of Hopone in June of 2006. So these sites and over 75% of all sites belonging to the Cactus - Vxgame group have been using Hopone for over 6 months now.

Date: 4/21/2006
IP:66.235.181.40
Site: traff5all.biz
HopOne IP Ranges
66.235.160.0 - 66.235.191.255
209.160.0.0 - 209.160.79.255


History of the Vxgame sites that run the vxgame infections

4/21/2006 217.107.217.184 traff5all.biz
6/1/2006 66.235.180.23 traff5all.biz
6/14/2006 209.160.64.135 traff5all.biz
10/21/2006 66.235.181.40 traff5all.biz
Patrick Jordan | Homepage | 11.07.06 - 9:01 am | #