Author Topic: Website with error or malware - PHISH? ? (Read 1619 times)

polonus · « **on:** February 26, 2015, 11:25:27 PM »

See: https://www.virustotal.com/nl/url/c50f8279e791df1df4a777dbba024080aee0d220fa09bb872e9d9a62744064db/analysis/1424988379/
Detected HTTP redirection to http://error.hostinger.eu/403.php?.
PHP vulnerable: http://www.cvedetails.com/version/106044/PHP-PHP-5.2.17.html

Quote

<html>
<head>
<title>Error 404 - Page Not Found</title>
<meta http-equiv="Refresh" content="0;url=htxp://www.hostinger.de/fehler_404?" />
</head>
<body>
</body>
</html>

Re: http://www.dnsinspect.com/hostinger.de/1424989102
See: https://www.virustotal.com/nl/ip-address/31.170.165.185/information/
Blocked as a PHISH? Ghosted site.
Launches pop-up ads with this code

Quote

<div id="visas_style_div" class="popup" style="left: 351px; position: absolute; top: 70.5px; z-index: 9999;">
<a class="close bClose" href=""></a>
<div class="///ikuruzkrauti">
<a href="htxp://www.hostinger.co.uk">
<img border="0" src="htxp://www.hostinger.co.uk/banners/uk/hostinger-600x400-2.gif">
</a>
</div>
</div>

polonus