Author Topic: Potential problems leads to this being a PHISH?  (Read 88 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast √úberevangelist
  • Maybe Bot
  • *****
  • Posts: 29563
  • malware fighter
Potential problems leads to this being a PHISH?
« on: September 13, 2017, 01:15:38 PM »
The problematic code:

1 ->
2 -> /index.html
3 -> /methodt.html
4 -> /paymentf.html
5 -> /distributions.html
6 -> /info/important/index.html

The scan has detected some potential problems in these files. First scroll down through the code listed out after the list of links, this is the code returned by the request for the URL you entered and check for any problems. Next, these link(s) will open the individual URL(s) in this tool, check through the code that is returned, compare the code being returned to a know clean copy, etc.

https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=www.jpnice999.com%2Fproducts%2Fn1%2Findex.html&ref_sel=GSP2&ua_sel=ff&fs=1

URLs that redirect found in: -http://www.jpnice999.com/products/n1/index.html

1: -http://img.users.51.la/17729535.asp -> -http://web.users.51.la/go.asp?svid=4&id=17729535&style=0&vpage=&68667.7.gif

Flagged here: https://urlquery.net/report/febd80d4-5851-41c6-8800-8bf9c5a0131b

Not flagged here: https://www.virustotal.com/#/url/eb7bb36dfa6b4a91fd0d91ebcc4548ad6b4e75512e898748c23d1de14a1e2f40/details

avast does not detect...http://toolbar.netcraft.com/site_report?url=http://www.jpnice999.com

2 warnings: https://asafaweb.com/Scan?Url=www.jpnice999.com

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!