himosteg.xyz

[g0d33p3rsec]

Comments

Related to MoneyBadger$ traffic distribution system. See also: Phishing-Database/phishing#492

Wildcard domain records

himosteg.xyz|malicious,phishing,scamming

Sub-Domain records

No response

Hosts (RFC:953) specific records, not used by DNS RPZ firewalls

No response

SeafeSearch records

No response

Screenshots

Screenshot

Links to external sources

https://himosteg.xyz/auth.php 
https://urlscan.io/result/1bb682cd-e9d8-43fa-8222-ba8effe534fa/
https://twitter.com/1ZRR4H/status/1685764738121175040

logs from uBlock Origin

N/A

[g0d33p3rsec]

@spirillen I'm not sure how to best categorize this and the other entries from Phishing-Database/phishing#492. This page is a log in and likely C2 for the traffic distribution system being used to push fake virus notifications.

[spirillen]

Commented in https://kb.mypdns.org/issue/MTX-1162/himosteg.xyz#focus=Comments-4-229.0-0

If you update your profile there, you can get access to hidden issues as well for all mypdns project.

[g0d33p3rsec]

Commented in https://kb.mypdns.org/issue/MTX-1162/himosteg.xyz#focus=Comments-4-229.0-0

If you update your profile there, you can get access to hidden issues as well for all mypdns project.

Cool, thanks. I've signed up with the same display name as this account. It looks like the username appended .wwgj to that.