A real, live, phishing site for you to play with!

[~BD~]

hxxp://pharmacyrxdrugoutlet.com/

[David H. Lipman]

From: "~BD~" <~BD~@nomail.afraid.org>

| hxxp://pharmacyrxdrugoutlet.com/

How is this a "phishing" site as compared to any other Russian created pharmaceutical site
?

How is this "spyware" related ?

--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp

[~BD~]

David H. Lipman wrote:
> From: "~BD~"<~BD~@nomail.afraid.org>
>
> | hxxp://pharmacyrxdrugoutlet.com/
>
> How is this a "phishing" site as compared to any other Russian created pharmaceutical site
> ?

This is what I see http://i55.tinypic.com/o045jp.jpg

> How is this "spyware" related ?

I've no idea what malware such a site may host. Do you know?

[~BD~]

ASCII wrote:
> ~BD~ wrote:
>> hxxp://pharmacyrxdrugoutlet.com/
>
> Opera v10.70 with phishing detection security enabled gives:
> http://bit.ly/dxGWcU
> Fear not it's only a jpeg

I see the same thing as you when using Opera.

[David H. Lipman]

From: "~BD~" <~BD~@nomail.afraid.org>

| David H. Lipman wrote:
>> From: "~BD~"<~BD~@nomail.afraid.org>

>> | hxxp://pharmacyrxdrugoutlet.com/

>> How is this a "phishing" site as compared to any other Russian created pharmaceutical
>> site
>> ?

| This is what I see http://i55.tinypic.com/o045jp.jpg

>> How is this "spyware" related ?

| I've no idea what malware such a site may host. Do you know?


Just because you get a Pop-Up on the site, does NOT mean it is what the Pop-Up says. In
this case a "phishing site".

I saw no malicious scripts on the site serving up malware nor scripts redirecting to site
hosting malware.

As for "phishing site" I see no evidence it is a phishing site. It may be a criminal
fraud site such as you pay for pharma products and you never receive any or they use the
PII a customer provided for purposes not expressed by the intent of a customer's chosen
purchase.

To be a "phishing site", it would have to be a web site doing one thing and making believe
it is another.

For example (faked information for the purpose of discussion)...
Site: webhost.comcast.net/users/~franklin

was hosting content that purports to be Bank of America (BoA) through the URL
webhost.comcast.net/users/~franklin/bankofamerica.html

So when you pull up the above URL it looks like a BoA account logon page.

The above example is demonstrative a user on Comcast who fakes a web page purporting to
being the BoA account login page. That would be a "phishing site".

--
Dave
Multi-AV Scanning Tool - http://www.pctipp.ch/downloads/dl/35905.asp

[Buffalo]

~BD~ wrote:
> hxxp://pharmacyrxdrugoutlet.com/
When I used FF3.6.12 it said:
"Firefox 3 or later contains built-in Phishing and Malware Protection to
help keep you safe online. These features will warn you when a page you
visit has been reported as a Web Forgery of a legitimate site (sometimes
called "phishing" pages) or as an Attack Site designed to harm your computer
(otherwise known as malware)."
Buffalo

[Buffalo]

Buffalo wrote:
> ~BD~ wrote:
>> hxxp://pharmacyrxdrugoutlet.com/
> When I used FF3.6.12 it said:
> "Firefox 3 or later contains built-in Phishing and Malware Protection
> to help keep you safe online. These features will warn you when a
> page you visit has been reported as a Web Forgery of a legitimate
> site (sometimes called "phishing" pages) or as an Attack Site
> designed to harm your computer (otherwise known as malware)."
> Buffalo

PS: When using IE 6, the page loads and neither SAS paid or Free Anti-Vir
detects anything amiss.

[~BD~]

Buffalo wrote:
> Buffalo wrote:
>> ~BD~ wrote:
>>> hxxp://pharmacyrxdrugoutlet.com/
>> When I used FF3.6.12 it said:
>> "Firefox 3 or later contains built-in Phishing and Malware Protection
>> to help keep you safe online. These features will warn you when a
>> page you visit has been reported as a Web Forgery of a legitimate
>> site (sometimes called "phishing" pages) or as an Attack Site
>> designed to harm your computer (otherwise known as malware)."
>> Buffalo
>
> PS: When using IE 6, the page loads and neither SAS paid or Free Anti-Vir
> detects anything amiss.
>
>

Is your point that you *did* get a warning using Firefox?

It's hardly surprising that IE6 carried on regardless! I don't
understand why you are still using it - what reason do you have?

IE6

<q/p>

This version of Internet Explorer is widely derided for its security
issues and lack of support for modern web standards, making frequent
appearances in "worst tech products of all time" lists, with some
publications labeling it as the "least secure software on the planet."

<p>

Ref: http://en.wikipedia.org/wiki/Internet_Explorer_6

[Beauregard T. Shagnasty]

~BD~ wrote:

> Buffalo wrote:
>> Buffalo wrote:
>>> ~BD~ wrote:
>>>> hxxp://pharmacyrxdrugoutlet.com/
>>> When I used FF3.6.12 it said:
>>> "Firefox 3 or later contains built-in Phishing and Malware
>>> Protection to help keep you safe online. These features will warn
>>> you when a page you visit has been reported as a Web Forgery of a
>>> legitimate site (sometimes called "phishing" pages) or as an Attack
>>> Site designed to harm your computer (otherwise known as malware)."
>>> Buffalo
>
> Is your point that you *did* get a warning using Firefox?

Perhaps his point is to make you aware that the message *also* says
" or as an Attack Site designed to harm your computer "

Whereas you got to the phrase about "phishing" and made your post
without further thought. It is *not* a phishing site. It isn't even a
"malware" site. It is a pharmaceutical scam site, created only a couple
weeks ago.

whois pharmacyrxdrugoutlet.com:
Creation Date: 25-oct-2010
Expiration Date: 25-oct-2011

If you were to respond to the spam that contained the link and purchase
some drugs, you would likely find an Attack on your credit balance.

But as usual, you were just hoping someone else would do your work for
you.

--
-bts
-Four wheels carry the body; two wheels move the soul

[StevieO]

LOL which you did.


"Beauregard T. Shagnasty" <a.nony.mous@example.invalid> wrote in message
news:iboq98$268$1@news.eternal-september.org...

Perhaps his point is to make you aware that the message *also* says
" or as an Attack Site designed to harm your computer "

Whereas you got to the phrase about "phishing" and made your post
without further thought. It is *not* a phishing site. It isn't even a
"malware" site. It is a pharmaceutical scam site, created only a couple
weeks ago.

whois pharmacyrxdrugoutlet.com:
Creation Date: 25-oct-2010
Expiration Date: 25-oct-2011

If you were to respond to the spam that contained the link and purchase
some drugs, you would likely find an Attack on your credit balance.

But as usual, you were just hoping someone else would do your work for
you.

--
-bts
-Four wheels carry the body; two wheels move the soul