Check Website
Inclusion Status
It is currently Wed Nov 22, 2017 9:08 am

All times are UTC




Post new topic Reply to topic  [ 913 posts ]  Go to page Previous  1 ... 84, 85, 86, 87, 88, 89, 90 ... 92  Next
Author Message
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sat Nov 11, 2017 3:02 pm 
Offline
User avatar

Joined: Sun May 31, 2009 7:17 am
Posts: 141
Location: Phx. AZ
leofelix wrote:
TeMerc wrote:
Thanks for these, I was on PhishTank all morning without issues


Thank you for you reply. It was a temporary glitch i presume.

PSH [Fake Facebook log in pages]

http://advert-support-notify.info/safe/ ... login.html
http://advert-support-notify.info/fb1/r ... login.html

Thanks we'll check these out.

_________________
Malwarebytes Web Research Labs Analyst
Malwarebytes


TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals


IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sat Nov 11, 2017 3:04 pm 
Offline
User avatar

Joined: Sun May 31, 2009 7:17 am
Posts: 141
Location: Phx. AZ
shazza wrote:
Tech Support Scam
fixcomputerguide.com
malwareremovals.net
mobi-reward066.date/1942/main4
pcfixguides.com
removemalwares.com
removerdesinstalacao.com
scanforvirus.org
spyware-removal.org
trojan-protection.com
urgenthelpforpcmac.com
wiebisdeinstallieren.com

Counterfeit Goods
sunglassesv.com
ubestboots.com

Thanks, we'll get to these

_________________
Malwarebytes Web Research Labs Analyst
Malwarebytes


TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals


IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sat Nov 11, 2017 3:04 pm 
Offline
User avatar

Joined: Sun May 31, 2009 7:17 am
Posts: 141
Location: Phx. AZ
Mandrake09 wrote:
Wells Fargo PHISH

castingpress.com/user/Admin.online/home/eac55728ea99f4808a0b9fa5c0bee350/fcc.php?LOB=53026&reason=&portal=&dltoken=

Got it, thanks.

_________________
Malwarebytes Web Research Labs Analyst
Malwarebytes


TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals


IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sat Nov 11, 2017 3:05 pm 
Offline
User avatar

Joined: Sun May 31, 2009 7:17 am
Posts: 141
Location: Phx. AZ
Mandrake09 wrote:
csdxa.cf/Chase/home/
csdxa.cf

Chase Bank PHISH

Got it

_________________
Malwarebytes Web Research Labs Analyst
Malwarebytes


TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals


IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sat Nov 11, 2017 3:05 pm 
Offline
User avatar

Joined: Sun May 31, 2009 7:17 am
Posts: 141
Location: Phx. AZ
Mandrake09 wrote:
webtakework.ru

Canadian Pharmacy is an illegal Pharmacy Operated/Promoted by Criminals)

Thanks, I got this one too on Friday.

_________________
Malwarebytes Web Research Labs Analyst
Malwarebytes


TeMerc Internet Countermeasures
Remember, you can NEVER be OVERPROTECTED!!!
Proud Member of the Alliance of Security Analysis Professionals


IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sat Nov 11, 2017 3:21 pm 
Offline

Joined: Tue Aug 16, 2016 12:49 pm
Posts: 196
buycheapuggs.com/?AF
buycheapuggs.com

UGG PHISH



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sat Nov 11, 2017 9:30 pm 
Offline
User avatar

Joined: Fri Apr 17, 2015 12:21 am
Posts: 220
Location: Italy
FSA [Counterfeit products / Spammers]

http://folin.aaar.trade/index/279.php?M=14143738!N=284!L=279!F=H
http://michaelkorstops.com/

[edit to add]

FSA [selling and providing "free" e-mail address lists for "marketing purposes" aka SPAM]

http://www.email-list.info

same as

http://hosts-file.net/?s=emaildownload.org



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Sun Nov 12, 2017 10:54 am 
Offline

Joined: Wed Oct 21, 2015 5:46 pm
Posts: 179
Thanks a lot for the links! :)



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Tue Nov 14, 2017 7:44 pm 
Offline
User avatar

Joined: Fri Apr 17, 2015 12:21 am
Posts: 220
Location: Italy
PSH [Phishing sites can be seen displayed only from Italy]

Fake Amazon, an unusual phishing site: you are asked to upload a "bill" then your "Identity card" to a remote server, once done you'll be redirected to the real Amazon Italy site.

http://amazon-veriica.dynamic-dns.net/verify

redirects me from Italy to

http://http-www-securez-amazon-verification.dynamic-dns.net/verifica/1/

sites sit on 77.73.68.50 that redirects me from to a fake "Poste Italiane" log in page (you have to use an italian ip address to see it displayed, I attached some screenshots)

http://http-wwwp-posteitaiane-bpol-poste.dynamic-dns.net/agg/sicurezza/fcc-authentication.html

I reported them to google, netcraft, ESET and Microsoft hours ago with no avail

e-mail headers (their italian is funny :lol: ):

Quote:
Return-Path: <masu18hideki@masu18hideki.ec-net.jp>
Original-Recipient: rfc822;abusep@alice.it
Received: from smtp119.alice.it (10.192.86.34) by cpms-21a2.cp.alice.it (8.6.142)
id 5A05888B005D3AFB for abuse@alice.it; Tue, 14 Nov 2017 16:05:54 +0100
Received: from masu18hideki.ec-net.jp (60.43.253.248) by smtp119.alice.it (8.6.060.43)
id 597F24171B17C0FF for abuse@alice.it; Tue, 14 Nov 2017 16:05:54 +0100
Received: by masu18hideki.ec-net.jp (Postfix, from userid 5091)
id 2162512308317; Tue, 14 Nov 2017 23:32:10 +0900 (JST)
To: abuse@alice.it
Subject: Verifica dell'identità !
X-PHP-Originating-Script: 5091:trimite.php
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: Secure Amazon Account <support@amazon.it>
Message-Id: <20171114143210.2162512308317@masu18hideki.ec-net.jp>
Date: Tue, 14 Nov 2017 23:32:10 +0900 (JST)

Caro cliente ti abbiamo inviato questa e-mail perché abbiamo ragioni forti per credere che il tuo account sia ben utilizzato per essere qualcun altro. Per evitare qualsiasi attività fraudolenta , Per proteggere il tuo account devi caricare i seguenti documenti (una bolletta ed carta d’identità ho passaporto)


Per poter usufruire dei servizi online di Amazon, occorre prima identificarsi al seguente link
http://ow.ly/WOub30gxqmr





La ringraziamo della Sua certa collaborazione,


Amazon.it

Condizioni generali di uso e vendita
Informativa sulla privacy
Area legale
Cookie e Pubblicità su Internet

© 2010-2017, Amazon.com, Inc. o società affiliate.


Attachments:
File comment: Fake Poste
fposte.jpg
fposte.jpg [ 178.58 KiB | Viewed 43 times ]
File comment: Fake Amazon
famazon.jpg
famazon.jpg [ 105.76 KiB | Viewed 43 times ]

IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: Please submit sites to be added to hpHosts, to this thre
PostPosted: Wed Nov 15, 2017 9:28 am 
Offline

Joined: Tue Aug 16, 2016 12:49 pm
Posts: 196
topsaleplus.ru

Canadian Pharmacy is an illegal Pharmacy Operated/Promoted by Criminals)



IP:
top
Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 913 posts ]  Go to page Previous  1 ... 84, 85, 86, 87, 88, 89, 90 ... 92  Next

All times are UTC


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
hpHosts and hpHosts Online are copyright © Malwarebytes Corp - All Rights Reserved

Powered by phpBB © 2000-2009 phpBB Group