infonet.com.br

[c۞g]

hxxp://next.login.com.nm.ru/login-account.htm
is a FAKE eBay login form as referenced here:
http://www.phishtank.com/phish_detail.p ... _id=794034

The interesting thing is the form variables (username and password) are sent to:
hxxp://www.infonet.com.br/cgi-bin/mailto/comments.exe/msg.txt

Also, infonet.com.br is:
LISTED IN BLACKLIST!
postmaster.rfc-ignorant.org

Please rate RED
Fraud / Scam / PHISH

[red]next.login.com.nm.ru
login.com.nm.ru
com.nm.ru
nm.ru
infonet.com.br[/red]

[Xp54321]

Rated and commented.

Thanks.



—Xp54321

[c۞g]

ftp://marvin.eric:atown546asd@ftp.pochta.ru/1384.html
FAKE eBay login form
listed here:
http://www.phishtank.com/phish_detail.p ... _id=794028

Again, login form username and password are collected and sent as an email from:
http://www.iolfree.ie/cgi-bin/responder
to a miss2spam@gmail.com

Please rate RED
Fraud / Scam / PHISH

[red]ftp.pochta.ru
pochta.ru
iolfree.ie[/red]

[Xp54321]

Rated and commented them as well.

Thanks.



—Xp54321

[cconniejean]

Rated and commented on all.

[iantuttle]

Rated and commented

[Fantozzi]

«Почта России» выкупила pochta.ru у РБК.
http://www.sostav.ru/publication/pochta ... 17085.html

Теперь сайт Pochta.ru принадлежит государственной почтовой службе России.