Malicious sites opening on opensubtitles.org
Posted: Thu May 25, 2017 2:21 pm
Hi
I have been observing opening suspicious sites when clicking links on opensubtitles.org. When I click on links on the top bar (upload, request,..) i first get redirected to https://paclitor.com an then quscamadviser.comickly to another suspicious site (gomediaz.com, videostripe.com, coreplays.com...). Most of the sites are marked at least suspicious, some even malicious by scamadviser.com. I was trying from a new machine, so I think I can rule out malware as a culprit for these redirections. It also seems, that one link only redirects once per source IP. I'm installing a fresh windows 10 vm, to confirm these redirects are not client side malware related.
Screenshots from a windows machine:
Screenshots from android phone:
These sites are dangerous, since there are reports of users who practically got ripped off after entering credit card details. Is there anything that can be done on your side?
Best regards
I have been observing opening suspicious sites when clicking links on opensubtitles.org. When I click on links on the top bar (upload, request,..) i first get redirected to https://paclitor.com an then quscamadviser.comickly to another suspicious site (gomediaz.com, videostripe.com, coreplays.com...). Most of the sites are marked at least suspicious, some even malicious by scamadviser.com. I was trying from a new machine, so I think I can rule out malware as a culprit for these redirections. It also seems, that one link only redirects once per source IP. I'm installing a fresh windows 10 vm, to confirm these redirects are not client side malware related.
Screenshots from a windows machine:
Screenshots from android phone:
These sites are dangerous, since there are reports of users who practically got ripped off after entering credit card details. Is there anything that can be done on your side?
Best regards