2017-11-28 - FAKE NETFLIX LOGIN PAGES FROM PHISHING EMAILS

ASSOCIATED FILES:

 

WEB TRAFFIC BLOCK LIST

Indicators are not a block list.  If you feel the need to block web traffic, I suggest the following domains:

 

EMAILS AND URLS

EMAILS:

 

LINKS FROM THE EMAILS AND REDIRECTS FOR FAKE NETFLIX LOGIN PAGES:

 

IMAGES


Shown above:  Screenshot of the spreadsheet tracker.

 


Shown above:  Screenshot from one of the emails.

 


Shown above:  Example of the fake login pages.

 


Shown above:  After you give up your login credentials, the phishers ask for more info.

 


Shown above:  Traffic from the 2nd run as seen in Fiddler.

 


Shown above:  Traffic from the 1st run as seen in Fiddler.

 

FINAL NOTES

Once again, here are the associated files:

Zip and saz files are password-protected with the standard password.  If you don't know it, look at the "about" page of this website.

Click here to return to the main page.