Check Website
Inclusion Status
It is currently Tue Jun 25, 2019 1:25 am

All times are UTC




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 338 posts ]  Go to page Previous  1 ... 30, 31, 32, 33, 34  Next
Author Message
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sat Apr 30, 2016 1:48 pm 
Offline
Site Admin

Joined: Thu May 28, 2009 10:25 am
Posts: 6018
Cheers (sorry for missing this)

_________________
Regards
Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Wed May 11, 2016 12:12 am 
Offline

Joined: Wed May 11, 2016 12:06 am
Posts: 3
Lets see how much you care.

Website Name: droidviews.com

Malware File 1: hxxp://cdn.droidviews.com/wp-content/uploads/2015/03/Odin_v3.10.0.zip
Virus Total: hxxps://www.virustotal.com/en/file/279f268428d02cfa82f2fb447eef6426dea69cda199497fb11cd6399b0398309/analysis/
Found: Trojan.Agent.rhi


Last edited by NickVini on Wed May 11, 2016 3:41 pm, edited 1 time in total.
Disabled live links



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Wed May 11, 2016 12:19 am 
Offline

Joined: Wed May 11, 2016 12:06 am
Posts: 3
Website: droidviews.com
File 2: hxxp://cdn.droidviews.com/wp-content/uploads/2015/03/Odin_v1.85.zip
Virus Total: hxxps://www.virustotal.com/en/file/514bd66f97d65b2c3396733b35d65de3744be1c24d7b34b954399e889dd1b54c/analysis/
Found: Riskware ( 0040eff71 )


Last edited by NickVini on Wed May 11, 2016 3:41 pm, edited 1 time in total.
Disabled live links



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Wed May 11, 2016 12:24 am 
Offline

Joined: Wed May 11, 2016 12:06 am
Posts: 3
Website Name: odindownload.com
Engaged in distributing malware files.
File Name: http://odindownload.com/download/Odin_3.10.0.zip
Virus Total: https://www.virustotal.com/en/file/b7e1f351c999413ff93a5d5ccaf1d4609c409131f01ac457d268564e725d091e/analysis/
Found: Trojan.Agent.rhi
My Wot: https://www.mywot.com/en/scorecard/odindownload.com


Last edited by NickVini on Wed May 11, 2016 3:40 pm, edited 1 time in total.
Disabled live links



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Wed May 11, 2016 10:03 pm 
Offline

Joined: Wed May 11, 2016 9:41 pm
Posts: 1
All ATS
Code:
admedo.com

example http://www.theregister.co.uk/
Code:
dap.digitalgov.gov

example https://collegescorecard.ed.gov/
Code:
toplist.cz
pixel.watch
hipersushiads.com
carambo.la
ads2.opensubtitles.org

example http://www.opensubtitles.org/en/subtitles/6622102/the-flash-the-runaway-dinosaur-pb
Code:
analytics.vodafone.co.uk
levexis.com
monetate.net

example http://www.vodafone.co.uk/
Code:
rqtrk.eu
sematext.com

example http://www.hotukdeals.com/search?action=search&keywords=test



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Thu May 12, 2016 1:59 am 
Offline
Site Admin

Joined: Thu May 28, 2009 10:25 am
Posts: 6018
Cheers guys (sorry for the delay)

_________________
Regards
Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Mon May 16, 2016 1:00 pm 
Offline

Joined: Sat Jun 06, 2015 11:58 am
Posts: 114
freesteam-games.org

More fake referal spam for steam money.

GRM | HFS | MMT



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Tue May 17, 2016 5:58 am 
Offline
Site Admin

Joined: Thu May 28, 2009 10:25 am
Posts: 6018
Cheers.

_________________
Regards
Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Wed May 18, 2016 12:33 pm 
Offline

Joined: Sat Jun 06, 2015 11:58 am
Posts: 114
Short version:
Domain: gamespof.com
Page: http://www.gamespof.com/xbox-live-price-to-increase-in-some-countries/ Its a fake version of gamespot.com.
classification: GRM | HFS | MMT or maybe more.

Long Version:
Found a weird domain just now: gamespof.com Not to be confused with gamespot.com which is a well known website about videogames. The domain is also only 8 hours old, or owned by the current owner for that long maybe.
if you just go to gamespof.com it will just redirect you to gamestop.com which is a retailer that also has a similar name to gamespot.

Found it on reddit, it was linked to this page: http://www.gamespof.com/xbox-live-price-to-increase-in-some-countries/ Archive if it goes down: https://archive.is/S8lE5
This is not a redirect, it has seemingly lifted this news article from the real website but I have no idea why..

That big image is hosted on chownk.com, the site also has a wordpress login page that references that site: http://www.gamespof.com/wp-login.php.
It has a wordpress plugin called "youtube-subscribe-jacker" which seems shady.

If this is a phishing or malware site then it is not very obvious, I guess it is possible? At the very least it is trying to act like a another website and maybe runs its own ads and steals youtube subscribers.



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Wed May 18, 2016 2:15 pm 
Offline
Site Admin

Joined: Thu May 28, 2009 10:25 am
Posts: 6018
Much appreciated, cheers :)

_________________
Regards
Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!



IP:
top
Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 338 posts ]  Go to page Previous  1 ... 30, 31, 32, 33, 34  Next

All times are UTC


Who is online

Users browsing this forum: Bing [Bot] and 4 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
hpHosts and hpHosts Online are copyright © Malwarebytes Corp - All Rights Reserved

Powered by phpBB © 2000-2009 phpBB Group