Is this malicious and phishing site being blocked? HTML/Phishing.Google.J trojan

Viruses and worms
1

Re: http://urlquery.net/report.php?id=1489755946612
8 to flag: https://www.virustotal.com/pl/url/0cbd6f2237ab3bc6edb88d8d42e8deaffa7ef90d6a00b97a657971fcbcd8fa78/analysis/1489762881/
It is a site that hacks your e-mail: HTML/Phishing.Google.J trojan → https://www.scumware.org/report/108.160.157.114.html
a beta JSON blob analysis: https://urlscan.io/result/14c32b48-6deb-4262-9753-796e435b2b5b/jsonview/
and look here: https://urlscan.io/result/9b551498-6146-488e-b347-8d2b667c4846#summary

AVG has it as JS/Phish - does avast detect this in PUP-mode?

There were 2 malicious sites contacted according to Google Safe Browsing!

polonus (volunteer website security analyst and website error-hunter)

2

In line with the alert for this website to be a PHISHING site, we add the following links for reference.

Interesting read for us on the background of the threat:
https://techhelplist.com/pastes/1109-phishing-sites-and-php-kits-march-2017-part-1

An additional specific scan to perform in such a case -and see all the other scan resources given there as well.
Re: https://scanurl.net/u/elyseemodel-com-br-

enjoy scanning, my good friends,

pol

P.S. More specific VT scans for that mentioned at start of the topic, were presented to me by Pondus:
using the exact full url listed at scumware then we find something like this

https://virustotal.com/nb/url/fa543668152f2299aaa483f074f8288bf6095be9870273f0e0c7e03972b84966/analysis/1489764546/

and file
https://virustotal.com/nb/file/8dc294fcf6c0e1fbf8a45b851becdc3c3a81eb98996bd448270fce830c2c5807/analysis/1489761767/

Thanks go out to my forum friend, Pondus, for demonstrating and further explaining this to us :wink:

Damian