User Help!

[Corey]

Everyone is always offering to help so I figured this would be a great opportunity for those people. One of the new features that is launching with x10 v3 is a scanner that checks for phishing sites.

I have setup a test site that you can input the URL of the phishing site and it will give you a true or false and a score. Anything 10 and above will return true.

What I need for you to do is go to:
http://phishingtest.x10hosting.com/

Then go to:
http://www.phishtank.com

Paste in the URLs of known phishing sites and see if the scanner returns true or false. If the scanner returns false and it is a phishing site please post it here so I may examine it and add it in to be caught next time.

When pasting in the URLs do not include http:// This is added in automatically.

Thanks!

 

[daman371]

True
www.bay-invest.com/tmpl_c/
modellize.co.jp/test/index.html

False without a number
list.ns.corp-tech.com.au/.ws/
1881666.bestala.com/freegame2.html

False
mail.spindeleye.com/postinfo.html
www.ranarojo.com/images/akb/

 

[Zenax]

I just tested it out for you Corey, and I got an error, so I don't know if your working on it not?!?

Warning: fopen() [function.fopen]: php_network_getaddresses: getaddrinfo failed: Name or service not known in /home/develop/public_html/current/custom/siteActivity.php on line 191

Warning: fopen(http://http://barclays.co.uk.procedureid777844.idistart.hk/client.html) [function.fopen]: failed to open stream: Success in /home/develop/public_html/current/custom/siteActivity.php on line 191
1

 

[Fedlerner]

I just tested it out for you Corey, and I got an error, so I don't know if your working on it not?!?

Warning: fopen() [function.fopen]: php_network_getaddresses: getaddrinfo failed: Name or service not known in /home/develop/public_html/current/custom/siteActivity.php on line 191

Warning: fopen(http://http://barclays.co.uk.procedureid777844.idistart.hk/client.html) [function.fopen]: failed to open stream: Success in /home/develop/public_html/current/custom/siteActivity.php on line 191
1

You get that error when you include http://
DO NOT PUT http:// that's included automatically.

FALSE:
http://www.BlueMail.us
http://urbannow.com/ibc/logon.html

 

[Dub_Dude]

True: 15
www.hawaiiusafcuhs.com/cgi/index.htm

False: 1
www.immortalnite.net/get/

False: 8
www.maybank2u.com.my/

False: 4
www.ranarojo.com/images/akb/

True: 19
www.epoznan.pl/kalendarium/index.php

 

[Zenax]

oooh my bad! sorry totally forgot bout that!

Edit: Perhaps an idea, to include multiple query boxes?

Warning: fopen(http://barclays.co.uk.procedureid777844.idistart.hk/client.html) [function.fopen]: failed to open stream: Connection timed out in /home/develop/public_html/current/custom/siteActivity.php on line 191
1

Now thats an error I get without including the http!

 

[Livewire]

oooh my bad! sorry totally forgot bout that!

Edit: Perhaps an idea, to include multiple query boxes?

Warning: fopen(http://barclays.co.uk.procedureid777844.idistart.hk/client.html) [function.fopen]: failed to open stream: Connection timed out in /home/develop/public_html/current/custom/siteActivity.php on line 191
1

Now thats an error I get without including the http!

Try it again later, its just a connection timed out.

Which basically amounts to "could not find server 404", but that might be because either the server's down or the site no longer exists.

 

[Zenax]

im a noob at php so I have no idea what it meant. Thanks for clarifying!

 

[Livewire]

im a noob at php so I have no idea what it meant. Thanks for clarifying!

All I saw was "Connection Timed Out." I've gotten that one on firefox way too many times, and most of the time refreshing fixes it

The one thing I hate about php errors is that it doesn't go "line number, error, file causing problem," it goes "warning/error: file is causing error on line number". Which means you scroll all the way over to see it :S

 

[Spartan Erik]

False 6
chaseonline.chase.com.ecred.org/.chsweb

False 6
chaseonline.chase.com.snigworks.com/onlineManagement

False 6
chaseonline.chase.com.scalawagtu.com/SecurityMeasures

And now the server timed out! I'll do more when it starts working again:

Warning: fopen(http://barclays.co.uk.procedureid321910.lokiz.hk/client.html) [function.fopen]: failed to open stream: Connection timed out in /home/develop/public_html/current/custom/siteActivity.php on line 191
1
barclays.co.uk.procedureid321910.lokiz.hk/client.html

 

[Derek]

Very nice site checking some now..

 

[Bazor]

False: 6
urbannow.com/ibc/logon[1].php

False: "No Number"
www.combine.internetcommons.net/math/ .www.azfcu.org /profile.html?ssl=1
I didn't use the http part, only the url after that.

False: 4
siedlce.xon.pl/czat/bot/programe/view.php

False: 9
art.inel.ru/modules/4nAlbum/public/www.tnbonlinebanking.com/index.html

False: 1
70.95.88.179/programs/webfilebrowser/login/cmd=_login-run.html

False: 1
prghost.prgsi.com/images/boa.html

False: 6
payinginpain.com/awstats/cgi-bin/paypal/

False: 6
payinginpain.com/awstats/cgi-bin/paypal/?cmd=b0pjkj019f7cfsfb45e0bq8jr50o5rcg13zkm0lupr75kmfoqux

False: "No Number"
savelink.phpnet.us/service/aolISAPI.dll=&SignIn&pUserId=&co_partnaolISAPI.dll=&SignIn&pUserId=&co_partn/securaol/aolISAPI.dll=&SignIn&pUserId=&co_partn/update/index.html

All of these are verified phishes on the site you gave. This is a great thing you are doing and will help many users out.

 

[Starshine]

False:9
www.paypalchristmas.co.uk/

False:1
www.messengerchecker.nl/

False:
tastegrass.com/t/k24-c2ykc/16374

 

[Corey]

Should be updated with all of these! A few were real sites so I didn't add them

-Corey

 

[t2t2t]

Timed out:
portal.fsah-mis.com/icons/developer/ /aspx.html

Nothing (literally)
7663451.methposs.com/laptop0.html

http://www.php.net/manual/en/function.strpos.php
Add it for users who like to add http (check for http://)

 

[Chris S]

slightly hard to test with a suspended site eh?

 

[nol888]

slightly hard to test with a suspended site eh?

Yeah, autosuspended for high resource usage. It seems quite a few people were trying to test...:biggrin:

 

[Corey]

haha, oops. it's unsuspended.

-Corey

 

[nol888]

Heh:

• True: 30 -- www.paypal.com
• True: 15 -- www.ebay.com
• True: 19 -- www.commerceonline.com

 

[Corey]

Those should all be true. Unless Paypal or eBay decides to come host with us