PUA.Phishing.Bank @ www.sinaafra.com PHISHING URLs FROM Sanayi, TURKEY (IP: 212.68.50.31)

PHISHING LINKS: 
PUA (PHISHBANK)

DOMAIN:

http://www.sinaafra.com/

• https://www.virustotal.com/de/url/918c5ec31a6f15e91d44cd1aa9cd40efa5b93e44dac77b212f4faf471d9f8894/analysis/1397667269/

PHISHING URLs:

1)

http://www.sinaafra.com/detroit-ve-istanbul-aslinda-birbirine-cok-yakin

• https://www.virustotal.com/de/url/7ffa8b6b95e71ee3cac62063009b0d0f70c9f0f1770070208d9e8fa772895682/analysis/1397667413/

PUA.Phishing.Bank

• https://www.virustotal.com/de/file/b0be1f8cf908f6ac5e508c4d1a0386c890193655bd419c4b88a74cfbda37f483/analysis/1397666858/

• http://virusscan.jotti.org/de/scanresult/f439c8d1c4cdf2efb3ae8c6b4448ed0175c1f538

2)

http://www.sinaafra.com/sosyal-ticaretin-kirilma-noktasi-daha-ufukta-gozukmuyor

• https://www.virustotal.com/de/url/e40dd9a4b165bd4a8e274017f30c18141289ca4d5aec039424874af6788a490d/analysis/1397667642/

PUA.Phishing.Bank

• https://www.virustotal.com/de/file/d60d5d52ffbd6bf038b5dc5ba8b6ef004a4914a68dd6d2b9f7928f3880af1e09/analysis/1397667089/

• http://virusscan.jotti.org/de/scanresult/1904fa37af41fe728a89a251a6097700ffc3e3d7

IP:

http://212.68.50.31/  (Sanayi, TURKEY)

• https://www.virustotal.com/de/url/8741b7d59e97bedf742d7fe933fa278819d651ba8d295931f093146c3a8f5e6e/analysis/1397668079/

• https://www.virustotal.com/de/ip-address/212.68.50.31/information/

www.ensemble-berlin.de infected with SEO SPAM (Viagra & Co.) ROGUE MEDICATIONS PHISHING IP: 80.67.31.164 & 5.61.42.211 GERMANY

MALICIOUS RUSSIAN PILLS PHISHING URL:
TDS URL pattern

http://www.ensemble-berlin.de/

• https://www.virustotal.com/de/url/fa621d60d52c535f849c29fe9327a46e2248dedcc24fbe3ccf58388cad5c5c85/analysis/1397567841/

http://www.ensemble-berlin.de/viagra-rezeptfrei-lander.html

• https://www.virustotal.com/de/url/c516b883ef52e0fef2b2884bcad2b97ecb7db4c9cd1037a847e1d082523cc5a7/analysis/1397566470/

TDS URL pattern

• https://urlquery.net/report.php?id=1397566888166

• https://urlquery.net/report.php?id=1397566887262

• https://urlquery.net/report.php?id=1397566892018

---->

http://tds.cigarettescheap.net/

• https://www.virustotal.com/de/url/108ea225a2cbc221f9a087fbcc49495921fa191d9fb0358385673df27b0a805d/analysis/1397567431/

TDS URL pattern

• https://urlquery.net/report.php?id=1397567579389

----->

http://apharmshop.com/

• https://www.virustotal.com/de/url/a0cf825561616bba65374be8a7b676cbfeb2964a47b08a7a566c186b4d511158/analysis/1397567650/

------>

http://edapotek.eu/

• https://www.virustotal.com/de/url/796f23f603e37c30c96323a5a17e9240452213df055795e53fc2d94b4965c37c/analysis/1397567302/