Author Topic: Hong Kong website location with PHISHING alert and Identity Threat...  (Read 981 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33916
  • malware fighter
See Pony detected: https://www.virustotal.com/gui/ip-address/45.122.138.182
10+ detect: https://www.virustotal.com/gui/ip-address/45.122.138.182/relations
Re: https://sitecheck.sucuri.net/results/zsmsbcn.com/Panel/admin.php
Threat name detection:
Location:-http://zsmsbcn.com/panel/gate.php
Server info proliferation with Bind bugs: https://www.shodan.io/host/45.122.138.182
on 9.11.4-P2-RedHat-9.11.4-9.P2.el7.
Over the last three hours 6 more engines to detect: https://www.virustotal.com/gui/url/9af330079341cf074962f3315db7f9f3a6fcabdbb6ad85df531959f72ba6f4e4/detection

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33916
  • malware fighter
Re: Hong Kong website location with PHISHING alert and Identity Threat...
« Reply #1 on: October 12, 2019, 05:15:14 PM »
webbug request returned on cgi:

 
Quote
   You must verify that your hosting provider has the correct IP address configured for your Apache settings and DNS records. A restart of Apache may be required for new settings to take effect.
                            </div>
                        </li>
                        <li>
                            <div class="info-image">
                                <img src="/img-sys/server_moved.png"/>
                            </div>
                            <span class="heading-text">
                                The site may have moved to a different server.
                            </span>
                            <div class="description">
                                The URL for this domain may have changed or the hosting provider may have moved the account to a different server.
                            </div>
                        </li>
                    </ul>
                </div>
            </div>
        </section>
        <footer>
            <div class="container">
                <a href="hxtp://cpanel.com/?utm_source=
-cpanelwhm&utm_medium=cplogo&utm_content=logolink&utm_campaign=cpanelwhmreferral" target="cpanel" title="cPanel, L.L.C.">
                    <img src="/img-sys/powered_by_cpanel.svg" height="20" alt="cPanel, L.L.C." />
                    <div class="copyright">Copyright © 2019 cPanel, L.L.C.</div>
                </a>
            </div>
        </footer>
    </body>
</html>
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!