{blocked}on.com/ur.php

 Analysis by: Luisa Villasabas

 URL BLOCKING DATE/TIME: 25 Mar 2011 11:25:00 PM GMT-8
 RATING: HIGH
 DOMAIN: lizamoon.com/
 CATEGORY: Disease Vector
 DESCRIPTION: This URL is related to a mass compromise. When a user accesses a compromised website, the user is redirected to this URL, which hosts the malware TROJ_FAKEAV.BBK. Other URLs that are related to the same mass compromise are the following:
  • {BLOCKED}ooks.com/ur.php
  • {BLOCKED}ane.com/ur.php
  • {BLOCKED}arter.com/ur.php