Author Topic: Possible new domain, can someone look at this www.isharefun.com  (Read 3035 times)

0 Members and 1 Guest are viewing this topic.

May 05, 2010, 03:15:20 pm
Read 3035 times

cr4shm0ney

  • Jr. Member

  • Offline
  • **

  • 27
Code: [Select]
www.isharefun.com/files/5.php
www.isharefun.com/files/__5.swf
www.isharefun.com/files/index.php?id=5&campaignid=5&in_external
(The site linked above appears to return some type of encoded information, any clues what this string is?

I can not find much information about this site but it looks very suspcious to me, any help is appreciated.

Thanks,

cr4shmoney

May 12, 2010, 01:30:36 am
Reply #1

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Haven't looked in any detail yet, but analysis of the swf shows a connection to;

Code: [Select]
127.0.0.1/flashstuffer/test/a.php?
Which is curious ....
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

May 12, 2010, 01:12:15 pm
Reply #2

cr4shm0ney

  • Jr. Member

  • Offline
  • **

  • 27
Please let me know if you find anything, I am extremely interested in understanding what is behind this site.
Thank you