Javascript malware on this site or just a phish?

[polonus]

See: http://www.virustotal.com/url-scan/report.html?id=946d8cdd6ef2482a8e6c3c05ba47672a-1324650794
and nothing detected here:
http://www.virustotal.com/file-scan/report.html?id=13e5579c29e239cb6a26cdc060713709b192324884c383f060b0815dddb11666-1324654512
unknown_html_RFI_eval according to VW, is a known phish site: http://www.phishtank.com/phish_detail.php?phish_id=1327082
See: http://urlquery.net/report.php?id=13279
Tracking can be evalueted here: http://jsunpack.jeek.org/?report=eeba80d45e1bdc296f31bab8f25d4bf65de84d88
Latter link for security aware users only, with script protection active and in a VM,
wep rep OK: http://www.webutation.net/go/review/heudnwn.edenvale.info

polonus

[system]

where can i find the link to the site can u PM me that?

I have Defence+ here so i can afford to investigate…

[Pondus]

where can i find the link to the site can u PM me that?

I have Defence+ here so i can afford to investigate…

If you cant find it after all the info he posted : … then i think you should stay away from that site ;D

@Polonus
The site is listed at PhishThank

[Donovan]

@true indian post:2

where can i find the link to the site can u PM me that?

I have Defence+ here so i can afford to investigate…

Hope this helps. ;D

[Asyn]

@Pondus post:3

where can i find the link to the site can u PM me that?

I have Defence+ here so i can afford to investigate…

If you cant find it after all the info he posted : … then i think you should stay away from that site ;D

+1 ;D

[polonus]

Hi forum friends,

I think it is a good policy not to post direct links to a suspicious or malware or adware laden site if this could be avoided. Some crawlers do a little better job than true indian here , and the related SEO clickfraud and tracking schemes are advanced enough. Good to repeat that here again. If necessary give a link as non-click-through (wxw etc. hxtp etc or -http etc.,) this also for analyzing links with code that avast will alert to. We do not like to annoy the unaware, do we.
If you want to link to code post in the form of an image so it cannot do harm. I also take a proggie like PhotoFiltre for instance to work on an image to take out identifiable data or info we do not want to share with the world. See how Donovansrb10 did that in his posting. We should always have at the back of our minds that malversants are constantly looking over our shoulders, abd we do not want to help our adversaries. Try and help to improve avast detection. That is why we do all this, isn’t it, folks,

polonus

[Donovan]

@polonus post:6

Hi forum friends,

I think it is a good policy not to post direct links to a suspicious or malware or adware laden site if this could be avoided. Some crawlers do a little better job than true indian here , and the related SEO clickfraud and tracking schemes are advanced enough. Good to repeat that here again. If necessary give a link as non-click-through (wxw etc. hxtp etc or -http etc.,) this also for analyzing links with code that avast will alert to. We do not like to annoy the unaware, do we.
If you want to link to code post in the form of an image so it cannot do harm. I also take a proggie like PhotoFiltre for instance to work on an image to take out identifiable data or info we do not want to share with the world. See how Donovansrb10 did that in his posting. We should always have at the back of our minds that malversants are constantly looking over our shoulders, abd we do not want to help our adversaries. Try and help to improve avast detection. That is why we do all this, isn’t it, folks,

polonus

+1

I use mspaint.

[Asyn]

Excellent statement pol…!!
Merry Christmas,
Asyn

[system]

true indian says merry christmas to all the members of the avast forum ;D