New home for Coolwebsearch / Trafficadvance

Coolwebsearch/Trafficadvance malware department have moved to a new hoster.
They all seem reside under 85.249.23.x now, again in St.Petersburg, Russia. If you prefer to block their domains, here’s a list. All of the indicated domain names end in .biz.

traffsale1 traffweb toolbarweb toolbarsale iframecash traffcool toolbarcool traffbucks toolbarbucks traffdollars toolbardollars traffbest toolbarbest traffnew toolbarnew traffmoney toolbarmoney vip01

Read how to block domains.

Thanks to Sans.org