Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
##Don't click on these
https://l.facebook .com/l.php?u=http%3A%2F%2Ftranslate.google.com%2Ftranslate%3Fhl%26sl%3Den%26tl%3Dde%26u%3Dhttp%253A%252F%252F8975742554367748.manifo.com%252F%253F100010127562456&h=ATNCgcoh8laPmA70j0x1BMtuAfKrcPFoS9IpgW2gRJ8BNbnFXN7JpUWVgYysRSVIlowF-Xe2aWdYKoNVBQobxyDFaAkEGDzy-Fl7SFfET9lYhyChyB5_OgWVMj6ioZyhbbQ3nqkIlaQ&s=1
http://8975742554367748.manifo .com/?100010127562456&h=ATNCgcoh8laPmA70j0x1BMtuAfKrcPFoS9IpgW2gRJ8BNbnFXN7JpUWVgYysRSVIlowF-Xe2aWdYKoNVBQobxyDFaAkEGDzy-Fl7SFfET9lYhyChyB5_OgWVMj6ioZyhbbQ3nqkIlaQ&s=1
@byeskille
Copy link
Author

byeskille commented Mar 13, 2017

interesting
contains a script like this (do not follow):

<script type="text/javascript"> </script>

@byeskille
Copy link
Author

byeskille commented Mar 13, 2017

Seems to have been used to spread some kind of phish claiming to have a video of the victim - then asks for credentials for their Facebook account in order to view the video.

@byeskille
Copy link
Author

byeskille commented Mar 13, 2017

Redirects to (do not click):
http://srgrey. xyz/app/facebook.com/?lang=en&key=1POYxSTrrhCP2G2R8XPQ6PrPNfzk8WL0qd4sbxpWsjIytUcMoB1vEDSsyahU2ewiXWXozax2KqMbBb3YSNihui3UIuF5nvOHqVE0eonz4GqGh4aPJJQ0ukKCmfXYI7nyrVDOFqIfDGy9DBhZ0OjjDJUWKy5ccAVkV5Yx49lv8b10RjQVCHEsCgLL0rhHOSlLe8wYNjVQ

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment