Suspected fakeshop detected or FP?

Viruses and worms
1

Re: https://urlscan.io/result/732a482c-382e-454f-98d4-046c496aa22e/
Google Safebrowsing approved?

Now

Netcraft blocks as Suspected Fake Shop This page has been blocked by the Netcraft Extension.

Blocked URL: hxxp://www.sliponsdk.com/

But consider: https://aw-snap.info/file-viewer/?protocol=not-secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=d3d3LnNsW3BdbnMjay5eXW0%3D~enc

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)

2

Another apparent fakesite exploiting unsub.php → see screenshot here: https://urlscan.io/result/c4ed6e70-6e19-4b6d-bd12-8c625cae2aa8/ website uses HTML 4.01 Transitional DTD. Not secure - do not give in any sensitive information.

About that form of SQL injection: https://vulners.com/osvdb/OSVDB:24242
combined with jQuery UI Core, headers - 1.11.4 7.3 vulnerable.
Abuse at https://www.shodan.io/host/217.78.247.81

polonus

3

Hey @polonus,

I landed on a URL and Avast protection kicked in showing me the URL is of a FakeShop. Thanks.

I was wondering though how to mark URLs as FakeShop in case I land on a suspicious site?

What is the process?

Thanks for your help