Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

HF phishing site

DO NOT VISIT THE FOLLOWING SITE AND INPUT INFORMATION.

Content deleted to prevent possible harm to our members. -Staff

Avoid this site.

EDIT: It does not apear to have a JDB.
https://www.virustotal.com/url/91d27056b...338839649/

EDIT2: No malicious scripts either. All scripts are being pulled straight from cdn2.hackforums.net
The only thing malicious are the Base64 encoded advertisements, which are monetizing off of omni's work and the login forms.

EDIT3:
Confirmed phishing site:
Code
<form method="post" action="member.php"><input name="action" type="hidden" value="do_login"><input name="url" type="hidden" value="http://www.louisvuittonpurses4.com/"><input name="quick_login" type="hidden" value="1"><input name="quick_username" id="quick_login_username" type="text" value="Username/Email" class="textbox" onfocus="if(this.value == 'Username/Email') { this.value=''; }" onblur="if(this.value == '') { this.value='Username/Email'; }">&nbsp;<input name="quick_password" id="quick_login_password" type="password" value="Password" class="textbox" onfocus="if(this.value == 'Password') { this.value=''; }" onblur="if(this.value == '') { this.value='Password'; }">&nbsp;<input name="submit" type="submit" value="Login" class="button"><span class="remember_me"><input name="quick_remember" id="quick_login_remember" type="checkbox" value="yes" class="checkbox" checked="checked"><label for="quick_login_remember"> Remember me</label></span> — <a href="https://hackforums.net/member.php?action=lostpw">Lost Password?</a> — <a href="https://hackforums.net/member.php?action=register">Register</a></form>
I doubt anyone would visit that website.
However thanks op!
Hahaha that's a fag thing for someone to do
That is quite interesting I'd be surprised if anyone fell for that though.
Thanks for the heads up man. Much thanks
I'd hope nobody falls for that... Thanks for the heads up though.
High.
(Jun 4, 2012 12:55 PM)Minnesota Nice Wrote:  That is quite interesting I'd be surprised if anyone fell for that though.

If someone were to get infected, and their hosts file were changed...
hackforums.net = phishing site.
There'd be now way to tell the difference.
yeah if anyone seriously accidentally trys to login to that -___- that would be an epic fail lolz.
[Image: NmoOIdi.gif]
its weird though the ip is 1 diget off the same as hfs, and all the threads are the same there.
I have to say thats quite an impressive fake.

Either way doubt many are stupid enough to fall for it.

Oats
Wait, is it updating the same time this site is updating? Nobody will fall for it of course, the URL alone isnt anything like it lol. But still... how the fuck?
[Image: 2PjRx.gif]
Just the website name makes me laugh.
It'd be a shame if a user goes there and forgets about it then logs in.
For anyone who uses xerotic's scripts, they would notice that the added links at the top of the page are missing.
It doesn't matter how long your life is. Just how much you did with it.
(Jun 4, 2012 01:00 PM)Oats‌‌‌ Wrote:  I have to say thats quite an impressive fake.

Either way doubt many are stupid enough to fall for it.

Oats
^This. Using the informative servers... Not bad. Gotta learn dis trick.
I dont understand the URL and what its saying


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Feedback] by ESaltiSep 16, 2016 01:31 PM 1 298 Sep 16, 2016 01:31 PM
Last Post: Gary
by skilshotzFeb 12, 2014 01:05 PM 22 1,069 Feb 12, 2014 01:05 PM
Last Post: Omniscient
by CrоssAug 9, 2012 10:28 PM 24 660 Aug 9, 2012 10:28 PM
Last Post: Paradoxum