COVID-19 scam and malware sites

[NotBuyingIt]

Alex Jones's Inforwars has been issued a warning letter: "Unapproved and Misbranded Products Related to Coronavirus Disease 2019 (COVID-19)".
infowars.com
infowarsstore.com
freespeechsystems.com

Interested readers can find the warning letter at
https://www.fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters/free-speech-systems-llc-dba-infowarscom-605802-04092020

See also, the Wired article "Google Bans Infowars Android App Over Coronavirus Claims" at
https://www.wired.com/story/google-bans-infowars-android-app-alex-jones-coronavirus/

Cross-reference: See the "Rumour, Gossip and Fake News Sites" discussion thread at
https://forum.mywot.com/reputation-discussions-f5/rumour-gossip-and-fake-news-sites-t71902-s80.html#p264982

[spectre]

'COVID-19 PROTECT'



Fake sender / message source unavailable
carsoho.com

Chinese group with US phone number - (201) 565-0031
Several of their sites currently show as 'closed'
EG: careforunow.com - 'company' mentioned in spam

[spectre]

Spammed the forum promoting another one of their sites earlier firstrankseoservices.com

micsupport.us
micsupport.com

[NotBuyingIt]

The USA government has taken legal actions against part of the MMS cabal, long considered loons or scoundrels by some influential WoT community members.

g2voice.is
genesis2church.ch
genesis2church.com
genesis2church.is
genesis2chile.cl
g2churchnews.org
mmstestimonials.co
officialg2churchmembership.org
[Edit: Add] mmsnews.is

See
https://arstechnica.com/tech-policy/2020/04/church-of-bleach-ordered-to-stop-selling-bleach-as-covid-19-cure/

[NotBuyingIt]

about-coronavirus2019.com reportedly promotes online pharmacy scams. See the Krebs-on-Security article at
https://krebsonsecurity.com/2020/04/unproven-coronavirus-therapy-proves-cash-cow-for-shadow-pharmacies/#more-51316

[spectre]

Scam
best-coronavirus-mask.com
trustrends.com/SafeBreathPro

Non Approved / Price Gouging
coronavirusapproved.co.uk
indigo.co/Item/bes_coronavirus_mask
protectu.co.uk/Item/3m-8835-particulate-respirator-ffp3d

[spectre]

covid19internet-support.com
Data Harvesting, asking for Credit Card info etc.

[Dr-Flay]

I forgot to share this resource here.
A project by the SANS InfoSec site.
Covid19 Domain Classifier
hxxps://isc.sans.edu/forums/diary/Covid19+Domain+Classifier/25958

Starting in February, domain name registrations using keywords related to the "Covid19/Coronoavirus" crisis have exploded. Earlier this week, Domaintools made a file with related domain names available. The vast majority of these domains are not actively used or currently display benign "Parked Domain" content. Some are used for legitimate purposes. But there are a few that are used for scams and other illegal activity. We are trying to enlist as many volunteers as possible to help us classify the domains collected by Domaintools.

If you would like to contribute in classifying registered domains, you should use a VM or spare PC to test each before rating.

[spectre]

covid-19challengecoin.com
New Wix site with no details of owner, no contact address, privacy policy, TOS etc, claiming to sell 'Frontline Challenge Coins'.

[NotBuyingIt]

A 'COVID-19 Unemployment & Impact Fund' HTML form gathers personal and financial data at
un-impactfund.com
gardenia-violet-xwdj.squarespace.com