infonet.com.br

[c۞g]

[url=http://www.mywot.com/en/scorecard/next.login.com.nm.ru t=_self]hxxp://next.login.com.nm.ru/login-account.htm[/url]
is a FAKE eBay login form as referenced here:
[url=http://www.phishtank.com/phish_detail.php?phish_id=794034 t=_self]http://www.phishtank.com/phish_detail.php?phish_id=794034[/url]

The interesting thing is the form variables (username and password) are sent to:
[url=http://www.mywot.com/en/scorecard/infonet.com.br t=_self]hxxp://www.infonet.com.br/cgi-bin/mailto/comments.exe/msg.txt[/url]

Also, infonet.com.br is:
LISTED IN BLACKLIST!
[url=http://www.rfc-ignorant.org/tools/lookup.php?domain=infonet.com.br t=_self]postmaster.rfc-ignorant.org[/url]

Please rate RED
Fraud / Scam / PHISH

next.login.com.nm.ru
login.com.nm.ru
com.nm.ru
nm.ru
infonet.com.br

[Xp54321]

Rated and commented.

Thanks.



—Xp54321

[c۞g]

[url=http://www.mywot.com/en/scorecard/ftp.pochta.ru t=_self]ftp://marvin.eric:atown546asd@ftp.pochta.ru/1384.html[/url]
FAKE eBay login form
listed here:
[url=http://www.phishtank.com/phish_detail.php?phish_id=794028 t=_self]http://www.phishtank.com/phish_detail.php?phish_id=794028[/url]

Again, login form username and password are collected and sent as an email from:
[url=http://www.mywot.com/en/scorecard/iolfree.ie t=_self]http://www.iolfree.ie/cgi-bin/responder[/url]
to a miss2spam@gmail.com

Please rate RED
Fraud / Scam / PHISH

ftp.pochta.ru
pochta.ru
iolfree.ie

[Xp54321]

Rated and commented them as well.

Thanks.



—Xp54321

[cconniejean]

Rated and commented on all.

[iantuttle]

Rated and commented

[Fantozzi]

«Почта России» выкупила pochta.ru у РБК.
http://www.sostav.ru/publication/pochta-rossii-gotovit-k-zapusku-novyj-sajt-17085.html

Теперь сайт Pochta.ru принадлежит государственной почтовой службе России.