[url=http://www.mywot.com/en/scorecard/next.login.com.nm.ru t=_self]hxxp://next.login.com.nm.ru/login-account.htm[/url]
is a FAKE eBay login form as referenced here:
[url=http://www.phishtank.com/phish_detail.php?phish_id=794034 t=_self]http://www.phishtank.com/phish_detail.php?phish_id=794034[/url]
The interesting thing is the form variables (username and password) are sent to:
[url=http://www.mywot.com/en/scorecard/infonet.com.br t=_self]hxxp://www.infonet.com.br/cgi-bin/mailto/comments.exe/msg.txt[/url]
Also, infonet.com.br is:
LISTED IN BLACKLIST!
[url=http://www.rfc-ignorant.org/tools/lookup.php?domain=infonet.com.br t=_self]postmaster.rfc-ignorant.org[/url]
Please rate RED
Fraud / Scam / PHISH
next.login.com.nm.ru
login.com.nm.ru
com.nm.ru
nm.ru
infonet.com.br
infonet.com.br
Another
[url=http://www.mywot.com/en/scorecard/ftp.pochta.ru t=_self]ftp://marvin.eric:atown546asd@ftp.pochta.ru/1384.html[/url]
FAKE eBay login form
listed here:
[url=http://www.phishtank.com/phish_detail.php?phish_id=794028 t=_self]http://www.phishtank.com/phish_detail.php?phish_id=794028[/url]
Again, login form username and password are collected and sent as an email from:
[url=http://www.mywot.com/en/scorecard/iolfree.ie t=_self]http://www.iolfree.ie/cgi-bin/responder[/url]
to a miss2spam@gmail.com
Please rate RED
Fraud / Scam / PHISH
ftp.pochta.ru
pochta.ru
iolfree.ie
FAKE eBay login form
listed here:
[url=http://www.phishtank.com/phish_detail.php?phish_id=794028 t=_self]http://www.phishtank.com/phish_detail.php?phish_id=794028[/url]
Again, login form username and password are collected and sent as an email from:
[url=http://www.mywot.com/en/scorecard/iolfree.ie t=_self]http://www.iolfree.ie/cgi-bin/responder[/url]
to a miss2spam@gmail.com
Please rate RED
Fraud / Scam / PHISH
ftp.pochta.ru
pochta.ru
iolfree.ie
-
- Posts: 696
- Joined: Sun Jul 13, 2008 12:16 pm
Rated and commented on all.
Rated and commented on all.
Who is online
Users browsing this forum: No registered users and 4 guests