GBATemp Phishing Clones?

[Joom]

By random chance, I've come across some domains that are running clones of the board. The domains are entirely irrelevant to the site as well, but I assume that they were hijacked.

http://cornerstoneleather.net/forums/
http://web1lv.com/forums/
http://heartannsoulllc.com/forums/
http://buycialishnonline.com/forums/
http://jlf.fr/forums/

They also seem to be pushing a Usenet service. It's probably safe to assume that some phishing is taking place as well. I'm also wondering if this site has been compromised, or if the content is just being mirrored.

 

[Scarlet]

I think these have been brought up in the past, and were assumed to just be mirroring our content for countries that don't have such easy access to the site. Could be remembering it slightly wrong though.

 

[Joom]

That would make sense. It just seems illegitimate to me since there's banners on every thread for a Usenet service.

 

[Tom Bombadildo]

https://gbatemp.net/threads/what-is-this-http-gbatemp-gukovo-org.397344/

As mentioned by Costello in this thread, these are most likely just proxy sites for locations that may have GBATemp blocked, or doesn't accept HTTPS.

 

[Joom]

https://gbatemp.net/threads/what-is-this-http-gbatemp-gukovo-org.397344/

As mentioned by Costello in this thread, these are most likely just proxy sites for locations that may have GBATemp blocked, or doesn't accept HTTPS.

Why do they use such sketchy domains then? I mean, it's not hard to come up with something that bypasses regex lists without seeming like something from spam mail.

 

[OKAYYYYYY]

I searched SKILZER to find a person on the site and got COUNTLESS PHISH CLONE DOMAINS

 

[Plazorn]

I searched SKILZER to find a person on the site and got COUNTLESS PHISH CLONE DOMAINS

You know you are commenting in a four year old thread right?