Coolwebsearch/Trafficadvance malware department have moved to a new hoster.
They all seem reside under 85.249.23.x now, again in St.Petersburg, Russia. If you prefer to block their domains, here’s a list. All of the indicated domain names end in .biz.
traffsale1 traffweb toolbarweb toolbarsale iframecash traffcool toolbarcool traffbucks toolbarbucks traffdollars toolbardollars traffbest toolbarbest traffnew toolbarnew traffmoney toolbarmoney vip01
Read how to block domains.
Thanks to Sans.org
