Serious Discussion Habbo phishing scam, infostealer possibility, could someonen do research of this?

[piquiteco]

And so far that link is clean on Virus Total. We'll see how long that will last, a http site?

It is an https website.

 

[ForgottenSeer 116559]

Good on Kaspersky. As of this moment, Kaspersky and SOCRadar are still the only two flagging it on VT.

Avast was silent. Cloudflare Gateway only technically blocked it afterward because I filter the category Newly Seen Domains.

 

[Parkinsond]

Good on Kaspersky. As of this moment, Kaspersky and SOCRadar are still the only two flagging it on VT.

Avast was silent. Cloudflare Gateway only technically blocked it afterward because I filter the category Newly Seen Domains.

 

[piquiteco]

Good on Kaspersky. As of this moment, Kaspersky and SOCRadar are still the only two flagging it on VT.

Avast was silent. Cloudflare Gateway only technically blocked it afterward because I filter the category Newly Seen Domains.

Netcraft also flagged it as malicious.

Spoiler: Netcraft Block Suspected Phishing

 

[Parkinsond]

Security solutions detected and added it to their database in quite short time.

The unlucky who get fooled during the gap between website release and detection.

 

[SeriousHoax]

 

[Parkinsond]

View attachment 295021

Not for me; I wonder why!

 

[ForgottenSeer 116559]

View attachment 295017

Checked again. Avast now blocks it a little over an hour later.

 

[Parkinsond]

Checked again. Avast now blocks it a little over an hour later.

View attachment 295023

All added to database close to each other; it was not detected by any when the threat has started.

 

[Jonny Quest]

FF blocks it. Edit: and now Chrome and Brave are, too. Google Safe Browsing caught up.

 

[SeriousHoax]

Not for me; I wonder why!

View attachment 295022

Check if your DNS is blocking smartscreen or maybe connection issue to smartscreen.

 

[Parkinsond]

Check if your DNS is blocking smartscreen or maybe connection issue to smartscreen.

Changed from ControlD hagezi tif to ControlD native, the same outcome.

 

[SeriousHoax]

Changed from ControlD hagezi tif to ControlD native, the same outcome.

Does it work in terminal?

nslookup smartscreen.microsoft.com

 

[piquiteco]

FF blocks it.

View attachment 295024

I reported it to Google Safe Browsing as soon as Netcraft flagged it as malicious, and now it is blocked by Google Safe Browsing. It seems that the community here is acting faster, as soon as the URL was reported by @Moonhorse in his first post.

 

[Parkinsond]

Check if your DNS is blocking smartscreen or maybe connection issue to smartscreen.

Changed to DNS4EU; no smartscreen warning, but have got this

 

[Parkinsond]

Does it work in terminal?

nslookup smartscreen.microsoft.com

I have used Edge settings; I do not paly with CLI

 

[Jonny Quest]

I reported it to Google Safe Browsing as soon as Netcraft flagged it as malicious, and now it is blocked by Google Safe Browsing. It seems that the community here is acting faster, as soon as the URL was reported by @Moonhorse in his first post.

I really should have that link Bookmarked, thanks for reminding me of that. I did report it to F-Secure, but you and this forum (Google) beat them to it

 

[Parkinsond]

Check if your DNS is blocking smartscreen or maybe connection issue to smartscreen.

With AG public DNS, the same outcome as ControlD both native and hagezi tif.

 

[SeriousHoax]

With AG public DNS, the same outcome as ControlD both native and hagezi tif.

Microsoft hates you and wants you to get phished

 

[Parkinsond]

Microsoft hates you and wants you to get phished

Summary: SmartScreen did not work with all (controld native, controld hagez tif, AG public, and DNS4EU).

Only DNS4EU blocked the website; it is such a disappointment ControlD and AG did not.