Phishing site: all4gift.ru - tries to steal eBay login data

Post Reply
vovkss
Posts: 28
Joined: Fri Apr 19, 2013 11:02 am

Phishing site: all4gift.ru - tries to steal eBay login data

Post by vovkss » Thu May 02, 2013 6:41 pm

Today I've received a mail from a "would-be-customer" who stated that he had bought "THIS ITEM" on ebay.de with link to:
(CAUTION: PHISHING)
httpXXX://all4gift.ru/js/65652839720/Willkommen.htm

The page is an imitation of ebay.de login, so it was definitely an attempt to steal eBay login/password.

I've already rated the site on WOT and reported it to Google (http://www.google.com/safebrowsing/report_phish/).

P. S. Main page of the site looks like the site is a kind of online-shop, but if the site contains deep pages like the one I've posted, then the chances are that the whole "shop" is an attempt to get credit card data only.

Amobirius
Posts: 1190
Joined: Sun May 13, 2012 1:09 pm

RE: Phishing site: all4gift.ru - tries to steal eBay login data

Post by Amobirius » Thu May 02, 2013 6:53 pm

Rated
I would recommend you change http to hxxp so people will not click on the link by mistake.

Guest

RE: Phishing site: all4gift.ru - tries to steal eBay login data

Post by Guest » Thu May 02, 2013 7:29 pm

Thank you
see: https://www.phishtank.com/phish_detail.php?phish_id=1815776

KoolerTheFirst
Posts: 262
Joined: Thu Sep 20, 2012 2:08 am

RE: Phishing site: all4gift.ru - tries to steal eBay login data

Post by KoolerTheFirst » Thu May 02, 2013 10:02 pm

Rated.

Guest

RE: Phishing site: all4gift.ru - tries to steal eBay login data

Post by Guest » Sun May 05, 2013 5:43 pm

update
phish is offline
see: https://www.phishtank.com/phish_detail.php?phish_id=1815776
Furthermore it seems that site has been taken down:
see: http://www.downforeveryoneorjustme.com/http://all4gift.ru

I'm going to remove my rating and comment

c۞g
Posts: 21225
Joined: Mon Jan 05, 2009 4:02 am

RE: Phishing site: all4gift.ru - tries to steal eBay login data

Post by c۞g » Sun May 05, 2013 7:03 pm

<quote user="leofelix">I'm going to remove my rating and comment[/quote]
.ru whois does not report if a domain is on Registrar Hold; there is a difference between a registrar hold and DNS failure. The domain resides on IP: 5.9.81.117 as is still identified by the server, ex: http://www.bfk.de/bfk_dnslogger.html?query=5.9.81.117

this domain was registered on: 23 January 2012
as was paid through 23 Jan 2014

IMO, ratings and comments should at least last as long as the registration period.



oksankafox
Posts: 8
Joined: Mon Feb 17, 2014 2:18 pm

RE: Phishing site: all4gift.ru - tries to steal eBay login data

Post by oksankafox » Mon Feb 17, 2014 3:06 pm

This problem was resolved. The malicious script was removed.

Guest

RE: Phishing site: all4gift.ru - tries to steal eBay login data

Post by Guest » Mon Feb 17, 2014 3:09 pm

<quote user="oksankafox">
This problem was resolved. The malicious script was removed.
[/quote]

No is not, your site remains black listed
http://hosts-file.net/?s=all4gift.ru

Guest

RE: Phishing site: all4gift.ru - tries to steal eBay login data

Post by Guest » Mon Feb 17, 2014 3:12 pm

The site owner has begun a request
https://www.mywot.com/en/forum/44078-all4gift-ru
please continue there
Thank you

oksankafox
Posts: 8
Joined: Mon Feb 17, 2014 2:18 pm

RE: Phishing site: all4gift.ru - tries to steal eBay login data

Post by oksankafox » Wed Feb 19, 2014 9:43 am

<quote user="superhero58">
No is not, your site remains black listed
http://hosts-file.net/?s=all4gift.ru
[/quote]

hi. thanks for you message.

The site has been re-checked and removed from hpHosts
http://hosts-file.net/?s=all4gift.ru

Post Reply

Who is online

Users browsing this forum: No registered users and 4 guests