Jun 4, 2012 12:54 PM
(This post was last modified: Jun 4, 2012 04:31 PM by Omniscient.)
DO NOT VISIT THE FOLLOWING SITE AND INPUT INFORMATION.
Content deleted to prevent possible harm to our members. -Staff
Avoid this site.
EDIT: It does not apear to have a JDB.
https://www.virustotal.com/url/91d27056b...338839649/
EDIT2: No malicious scripts either. All scripts are being pulled straight from cdn2.hackforums.net
The only thing malicious are the Base64 encoded advertisements, which are monetizing off of omni's work and the login forms.
EDIT3:
Confirmed phishing site:
Content deleted to prevent possible harm to our members. -Staff
Avoid this site.
EDIT: It does not apear to have a JDB.
https://www.virustotal.com/url/91d27056b...338839649/
EDIT2: No malicious scripts either. All scripts are being pulled straight from cdn2.hackforums.net
The only thing malicious are the Base64 encoded advertisements, which are monetizing off of omni's work and the login forms.
EDIT3:
Confirmed phishing site:
Code
<form method="post" action="member.php"><input name="action" type="hidden" value="do_login"><input name="url" type="hidden" value="http://www.louisvuittonpurses4.com/"><input name="quick_login" type="hidden" value="1"><input name="quick_username" id="quick_login_username" type="text" value="Username/Email" class="textbox" onfocus="if(this.value == 'Username/Email') { this.value=''; }" onblur="if(this.value == '') { this.value='Username/Email'; }"> <input name="quick_password" id="quick_login_password" type="password" value="Password" class="textbox" onfocus="if(this.value == 'Password') { this.value=''; }" onblur="if(this.value == '') { this.value='Password'; }"> <input name="submit" type="submit" value="Login" class="button"><span class="remember_me"><input name="quick_remember" id="quick_login_remember" type="checkbox" value="yes" class="checkbox" checked="checked"><label for="quick_login_remember"> Remember me</label></span> — <a href="https://hackforums.net/member.php?action=lostpw">Lost Password?</a> — <a href="https://hackforums.net/member.php?action=register">Register</a></form>


![[Image: NmoOIdi.gif]](https://i.imgur.com/NmoOIdi.gif)
![[Image: 2PjRx.gif]](https://i.imgur.com/2PjRx.gif)
