Facebook scam not flagged - Is this phishing?

See: http://www.virustotal.com/url-scan/report.html?id=090e6b91a8b534cd25b54573ca61564c-1320242674
See: http://www.virustotal.com/file-scan/report.html?id=72b2ec3bde298291801c6ea72e2e76070524a4ab0ac39f4d614b04518bf7f1b2-1320246276
See: http://siteinspector.comodo.com/public/reports/563457
See: http://urlquery.net/queued.php?id=7047 (status safe)
Website Antivirus warning found here: http://www.webutation.net/go/review/futurejobstodayb.com
Qualified as dangerous here: http://www.urlvoid.com/scan/futurejobstodayb.com
(but the only scanner there still flagging is TrendMicro’s),

polonus

Note
Scanning site with: Norton SafeWeb DETECTED
and when you go to http://safeweb.norton.com/report/show?url=futurejobstodayb.com
It’s clean.

Hi Left123,

Yes, that is my problem also. I have experienced that a lot, and if you keep an eye out on for the latest VirusWatch reports you would quite understand what I talk about. Scanners based on lists give outdated results because of malware mitigation and other reasons.

At urlvoid you always should also check the separate scanners - real results may differ from given. To-day’s unmasked parasites scan can be outdated to-morrow.

That is why I use a whole range of sources to distill the real results from and then often I have to go like spg SCOTT does go to my own version of the malzilla browser and check on the actual code or check via jsunpack.

Malware urls often soon are being terminated, go dead, are been taken down, and the malcreants mitigate to another corner of the WWW to continue launching their goodies. Some are so cleverly organised that iit is hard to keep up detection.

I have found that using more scanners to scan with will eventually close the blind spots of others, so DrWeb’s online url checker + Bitdefender TrafficLight are good companions to get a fuller picture of then online threat landscape. Comodo’s Siteinspector has a lot, but also misses a lot of detections out.

At ore.carnivore. they have a lot of recent malware from VT, Anubis, etc. -www.abuse.ch has a lot as has “cl3@n-mx” with the accompanying url. Venturing out there is only for the more security aware and those that know what to paste and copy, click and not to click under specific given circumstances and how to work a virtual surroundings and script protection where to do this from.

But my final conclusion is that real time protection or the best next thing it needs a lot of effort put into it, to be able to come even a bit close to the desired results - full protection against malicious and suspicious url’s as best as we can do,

polonus