Fake Tech Support Sites

williKi
Posts: 1038
Joined: Thu Oct 01, 2015 6:52 pm

RE: Fake Tech Support Sites

Post by williKi » Fri Mar 04, 2016 1:46 pm

I had both numbers removed from LinkedIn and most of YouTube. BFeely is correct, it's a crap shoot. Don't know if it's apathy of disorganized administration. LinkedIn acted quickly when given proof, though I have a sneaking suspicion that these scams originate from way out east, if you know what I mean.

williKi
Posts: 1038
Joined: Thu Oct 01, 2015 6:52 pm

RE: Fake Tech Support Sites

Post by williKi » Fri Mar 04, 2016 1:48 pm

I had both numbers removed from LinkedIn and most of YouTube. BFeely is correct, it's a crap shoot. Don't know if it's apathy or disorganized administration. LinkedIn acted quickly when given proof, though. I have a sneaking suspicious that these scams originate from way out east, if you know what I mean.

YUMENEKO
Posts: 30
Joined: Thu Feb 18, 2016 3:08 pm

RE: Fake Tech Support Sites

Post by YUMENEKO » Sat Mar 05, 2016 6:43 pm

cdn(dot)hongkongfeet(dot)com
[url=http://imgur.com/2TXjDVb t=_self][img]http://i.imgur.com/2TXjDVb.jpg[/img][/url]

williKi
Posts: 1038
Joined: Thu Oct 01, 2015 6:52 pm

RE: Fake Tech Support Sites

Post by williKi » Sat Mar 05, 2016 8:01 pm

Yet another number? Why am I not surprised? Well, let's do a Google search:

hxxp://invadedomainsnow.com/propa/ - if Firefox is working properly, pulls up a "Reported Web Forgery" warning.

hxxp://invadedomainsnow.com/dntxtest/ - same. Either they just started using this number, or abandoned it.

Bye the way, there is a live link embedded in the picture. Not sure, but someone might say something about it.

spectre
Posts: 7922
Joined: Sun May 03, 2009 10:43 pm

RE: Fake Tech Support Sites

Post by spectre » Sun Mar 06, 2016 1:55 am

securitybreacherror.com
See https://www.virustotal.com/en/url/6def4fd4091d9fe8d3f2fd3476c0a976668b98873c610c76071be4148a6e44c7/analysis/1457229210/

Site-rater
Posts: 5839
Joined: Tue Sep 15, 2009 7:48 pm

RE: Fake Tech Support Sites

Post by Site-rater » Sun Mar 06, 2016 2:45 pm

timewarner-support.com
Oddly enough, it seems to have to be activated through a popup ad; browsing directly to it just redirects to timewarnercable.com
According to hxxps://who.is/whois/timewarner-support.com it is NOT owned by TWC.

YUMENEKO
Posts: 30
Joined: Thu Feb 18, 2016 3:08 pm

RE: Fake Tech Support Sites

Post by YUMENEKO » Mon Mar 07, 2016 1:12 am

system-virus-alert.com
Please see: https://www.virustotal.com/en/url/74f65ef7504cc0ed7f63681d31f445c497bf4398e7fc53a3a8074f76d7d6ab8e/analysis/1457312919/
treeforyou.com (What an unfortunate web domain name for a tech support scam...)
Please see: https://blog.malwarebytes.org/fraud-scam/2014/11/psa-tech-support-scams-pop-ups-on-the-rise/

williKi
Posts: 1038
Joined: Thu Oct 01, 2015 6:52 pm

RE: Fake Tech Support Sites

Post by williKi » Mon Mar 07, 2016 2:42 pm

<quote user="site-rater">
timewarner-support.com
Oddly enough, it seems to have to be activated through a popup ad; browsing directly to it just redirects to timewarnercable.com
According to hxxps://who.is/whois/timewarner-support.com it is NOT owned by TWC.
[/quote]

Checking the ICAAN page, I strongly suspect that the admin contact is fake:

hxxps://whois.icann.org/en/lookup?name=timewarner-support.com

Apparently the same contact for another site;

hxxps://www.virustotal.com/en/domain/offshorestreaming.com/information/

Registrar is 1api.net (colorful scorecard). This kind of activity appears to be a trend with these people.

williKi
Posts: 1038
Joined: Thu Oct 01, 2015 6:52 pm

RE: Fake Tech Support Sites

Post by williKi » Tue Mar 08, 2016 2:31 pm

<quote user="awarefulness">
system-virus-alert.com
Please see: https://www.virustotal.com/en/url/74f65ef7504cc0ed7f63681d31f445c497bf4398e7fc53a3a8074f76d7d6ab8e/analysis/1457312919/
treeforyou.com (What an unfortunate web domain name for a tech support scam...)
Please see: https://blog.malwarebytes.org/fraud-scam/2014/11/psa-tech-support-scams-pop-ups-on-the-rise/
[/quote]

Before anyone runs over to treeforyou.com for a look, FYI, it has come into the cross hairs of AVG Threat Labs:

hxxp://www.avgthreatlabs.com/us-en/website-safety-reports/domain/treeforyou.com/

spectre
Posts: 7922
Joined: Sun May 03, 2009 10:43 pm

RE: Fake Tech Support Sites

Post by spectre » Wed Mar 09, 2016 10:44 pm

bluescreenalarm.com

See https://www.virustotal.com/en/url/7112f3d3be7cb1f1e520b143822a4401736bd4cc599927afafd90eaffc6ffc92/analysis/1457563376/

Post Reply

Who is online

Users browsing this forum: No registered users and 4 guests