Monday, May 11, 2009

Phishing / Rouge High Reputation Antivirus Security Vendors

Wow...not sure other security vendor aware about the phishing website that claimed sell few high profile Antivirus Vendor such as Symantec, McAfee, Bitdefender, AVG and etc. You may easily find out this fake site by resolve their domain name.

Example:

C:\>nslookup -qt=ns www.norton.outlet.com
Server: xxx.xxx.xxx.xxx
Address: 2xx.1xx.xxx.2xx

outlet.com
primary name server = dns1.name-services.com
responsible mail addr = info.name-services.com
serial = 2002050701
refresh = 10001 (2 hours 46 mins 41 secs)
retry = 1801 (30 mins 1 sec)
expire = 604801 (7 days 1 sec)
default TTL = 181 (3 mins 1 sec)

C:\>nslookup -qt=ns symantec.com
Server: xxx.xxx.xxx.xxx
Address: 2xx.1xx.xxx.2xx

Non-authoritative answer:
symantec.com nameserver = ns2.symantec.com
symantec.com nameserver = ns4.symantec.com
symantec.com nameserver = ns1.symantec.com













Site:
http://new-antivirus-download.com/
http://www.bitdefendersecurity2009.com/
http://www.norton-outlet.com/B/norton-all-products.asp?
http://www.free-download-place.net/kaspersky/index.php?ovid=OVIZA&source=CCN-CD33-YAH0065-kaspersky-01&OVRAW=Kaspersky%20Anti%20Virus&OVKEY=kaspersky%20anti%20virus&OVMTC=standard&OVADID=52033425011&OVKWID=328989753511


It will entice users buy through online by displaying some advertise PC Magazine Editor's Choice Image. Don't ever disclosing any credit card info or personal information to this website.

Note:If you think the information benefit to you, click on advertisement to support me for domain fees.

0 comments: