One website is opening without my concern. Windows Defender hasn't found any viruses, Task Manager hasn't have any abnormal tasks. What to do now?
Hello, I process phishing URL's, I have recently come across URL's that make use of a BLOB: syntax on the URL: blob:https://bolig.botik.dk/16c8c011-0fa5-4ba0-a10f-ed76… (funda kabanzi)
Hello,
I process phishing URL's,
I have recently come across URL's that make use of a BLOB: syntax on the URL:
blob:https://bolig.botik.dk/16c8c011-0fa5-4ba0-a10f-ed7675055cc6
You can see an example of the Phishing URL in this PhishTank entry:
https://phishtank.com/phish_detail.php?phish_id=9118779
That URL then re-directs to the above "BLOB" URL.
My understanding is that it is "locally" generating the phishing website, similar to an old fashioned about: syntax, however it's not clear what the significance of bolig.botik.dk URL is - loading that URL without the BLOB: prefix causes an error
Can someone explain:
1) What is the BLOB: syntax, and 2) what would be reported to have the phishing URL removed in the above example?
