[memoryinmotion]

I've gotten three MSN IMs from a friend today, that only say:

memoryinmotion.megaimgx.com When you click the link, you're to enter your MSN username/password combo.

I've never heard of this thing, nor is there any info via google - which is suspicious.

Moreover, the whois info shows the site was created today

http://samspade.org/whois/megaimgx.com

This reeks of a phishing expedition to harvest MSN/Hotmail/Live information, doesn't it?

[Cookiegal]

I wouldn't touch it with a 10' pole.

BTW, please don't post links to questionable sites as we don't want anyone clicking on it and potentially getting scammed. I'ved edited your post to show the domain but not as a clickable link.

[memoryinmotion]

My apologies. I actually DO know better than that, but that was posted on a break from putting up hurricane shutters (I'm in SW Florida), so my brain was elsewhere.

Is there any way to submit something like this to the major A/V Teams? I'd like to be able to advise this person (close friend) without causing undue panic if it's nothing more than something silly she subscribed to.

[Cookiegal]

Someone would have to download samples to see what infection they may be loading and then submit the files for analysis. Or I believe you can report phishing scams to the government as well for investgiation.

[memoryinmotion]

Well, it is the weekend, and maybe it's just a coincidence, but I got the message from the same friend again. This time I set up an MSN un/pw just for the occasion.

It does nothing, but insists "login failed" so it appears to just collect un/pw combos at this point. I will be monitoring this address that I've set up to see it it collects spam.

[jsparky77]

When i tested this link, neither Firefox 3 or Kaspersky let it load so i put a big red mark on it saying SCAM!