 |  |
The URL that Chrome loaded was this, which is sneaky. Repeat visits to this URL do not change the page being returned. Obviously it is Base64 so the decoded form is below.
It decodes into HTML of which contains the bad URL in the iframe tag below:
Some tips for reporting badware, malware, phishing sites, and sending email submissions.
Remember suspicious emails and attachments should be sent as a saved message, not forwarded as it will lose the originator's details.
- VirusTotal - File or URL
- Google - Report Malware - URL only
- Google - Phishing - URL only
- Action Fraud and report@phishing.gov.uk
- Microsoft - Malware Protection Center - File only
- BitDefender - File or URL
- Symantec Norton - Phishing Site - File or URL
- Avira - File or URL
- F-Secure - File or URL
- Kaspersky - URL only
- Malwarebytes
- Comodo - File only
- ClamAV - File only
- eScanAV - File only
- reportphishing@apple.com and abuse@icloud.com see more info here
- phish@fb.com
- phishing-report@us-cert.gov
- virus_research@mcafee.com - must be in password-protected ZIP with 'infected' as password
- submit@virus.avast.com - subject "Undetected Malware" - as a single zip
- Others on Web of Trust (WOT)
- Spam texts, calls, emails - follow the steps on Which and the ICO
