Home > Computer > Beware of PICS FOR MSN FRIENDS Phishing Websites
Donation Goal
Donate Now Goal amount for this year: 799 USD, Received: 100 USD (13%)
Please donate to help support this website. The funds will be used to purchase owned license of LiteSpeed Web Server Enterprise (2-CPU). It provides superior performance in terms of raw speed, scalability and anti-DDoS capabilities.

Beware of PICS FOR MSN FRIENDS Phishing Websites

Posted By Raymond In Category: Computer

Jun
14
2008

Recently I’ve noticed more and more people sending me offline messages to my Windows Live Messenger that contains only a link and nothing else. The weirdest part was some of the message came from contacts that were really old which I’ve removed from my list long ago. I noticed that most of the link uses .info generic top-level domain name and some of the letters are being replaced with numbers such as number 1 for letter L, number 5 for letter S and etc. The messages are being sent offline and the main page uses indexxx.php file.

Pics for MSN Friends phishing SCAM

Clicking on the link will bring me to a page with a webform that looks like the latest Windows Live Messenger asking me to login with my MSN to continue. It is a phishing site which is supposed to represent “100% real and upcoming Messenger Community Site” called PICS FOR MSN FRIENDS (v1.1c).
Pics for friends phishing

If you got such message from your friends, do not panic because both you and your friends are not being infected by MSN virus. Only your friend’s account has been compromised. Here’s what you should do when you receive such message.


First thing is to tell your friends to change their password. By doing that, the bots can no longer access your friend’s MSN account and spam their contact list.

To change or reset the password for your Windows Live Messenger account, follow these steps:
1. Go to http://login.live.com web page and then click Forgot Your Password.
2. Type in your MSN e-mail address, type the characters that appear in the Picture box, and then click Continue.
3. Click Send yourself a password reset e-mail message.
4. Click Send Message.
5. On the confirmation page, click Done.
6. Sign in to your e-mail account, and then click the link in the e-mail message to reset your password.
7. On the Confirm your e-mail address page, type your e-mail address, and then click Continue.
8. Type your new password two times, and then click Continue.
9. If you want to enter an “alternate” e-mail address, type the address two times, and then click Continue. If you do not want to enter an “alternate” e-mail address, click Skip.
10. When you receive the “You’ve changed your password” message, click Done.

Some examples of the links are the below but please DO NOT enter your MSN email and password! I’m sure there are a whole lot more, so be very careful not to simple enter your MSN login details.

  • username.bl1ng.info
  • username.jumphost.info
  • username.n1cestuff.info
  • checkdiz.info
  • username.awes0me.info
  • username.ther1ng.info
  • username.snapsh0t.info
  • username.da-real-deal.info
  • username.ch33se.info
  • c0ol-th1ng.info
  • imgeshack.info
  • m0bil3.info
  • imageloko.info
  • imagedino.info
  • imagealina.info
  • hostapic.info
  • holyimage.info
  • imagrshak.info
  • get-that-stuff.info
  • coooool.info
  • datsyou.com
  • is-thatt-you.com
  • is-dat-u.com
  • thatzyou.com
  • RealCoolThingz.com
  • yoimgz.com
  • partypartypics.info
  • specialofferforu.info
  • insanethingsforyou.com
  • bakblu.com
  • burnoutpeeps.com
  • picsforparty.info
  • nustuff4u.com
  • my-prime-pics4u.com
  • WOW USERNAME I found this great webpage that is giving away a free Best Buy Gift Card go sign up for yours before they are all gone http://username.colzop.com

    • If you know any other sites that is the same, please leave a comment so I can add it in the list. I am not sure if we can do anything to these websites because it does say that “By logging in you accept the Terms and Conditions”. The terms are “By filling out this form, you authorize TST Management, Inc to spread the word about this 100% real and upcomming Messenger Community Site. By using our service/website you hereby fully authorize TST Management, Inc to send messages
    of a commercial nature via Instant Messages and E-Mails on behalf of third parties via the information
    you provide us.” What we can do is to be cautious and do not simply enter our login information to any websites.

    Note: If you suspect that it might be a virus, try scanning your computer with free Kaspersky Virus Removal Tool or MSN Photo Virus Remover.


    Related posts:
  • BEWARE: Phishing for RapidShare Premium Accounts
  • Firefox Don’t Remember Yahoo Mail and Hotmail Password
  • Automatic Hotmail and MSN Registration
  • Citibank Phishing
  • Protecting yourself from phishing scam
    • Johns Mathew

      It was really helpful. Thank god I didn’t get any such messages till now. Or else I would made a mess with my account. Thanks Raymond

    • Nocturne

      heh i got one of these today i even got the log for ya

      Furosh: http://skuxtaaaron.imgeshack.info

      Deviant: like im really gonna go to a .info site made to look like imageshack…

      Deviant: do i seem that stupid

      he then logs off.

      was pretty stupid really though being that i have about 5 real hackers and about 20 skiddies on my msn, and myself a former hacker now an it pro i always get a giggle out of hem trying to pull the wool over my eyes

    • steve

      thanks for the warning

    • brayden

      thanx raymond i decided to go on my msn account for the first time in about 6 months and i had forgotten how slow it sometimes gets.

    • Daz

      cheers raymond. Shame that the majority of people who would fall for this ploy are probably not signed up to a advanced computer blog :/

    • trinidude

      thanx ray..
      i got this a few times from one person on my messenger…decline it right away..lol…i don’t trust ppl on my messenger you gotta be messenger smart ppl..

    • MUNISH

      WELL RAY !! “I NEED UR URGENT HELP IN MY CASE”

      I AM DAILY GETTING A LOT OF MAILS ON MY BELOW MENTIONED EMAIL IN WHICH I M BEING NOTIFIED TO HAVE WON A LOTTERY OF MILLIONS OF DOLLARS OR PEOPLE DAILY MAIL ME TELLING THAT THEY POSSESS A WEALTH OF MILLIONS OF DOLLARS,,,,
      BUT THEIR LIFE IS IN DANGER SO THEY WANT ME TO HELP THEM IN GETTING THEIR MONEY FROM SECURITY COMPANY AND THEY WANT TO SETTLE IN MY COUNTRY, THEY ARE ALSO PROPOSING ME A GOOD SHARE OUT OF IT…

      I REPLIED SOME MAILS , BUT AS I AM GETTING MAILS DAILY ABOUT THE SAME TOPIC , I REALLY THOUGHT IT OF A SUSPICIOUS ACTIVITY AND I WANT U TO INVESTIGATE ABOUT IT ……

      I WILL BE MUCH THANKFUL TO U!!!

      PLZ REPLY ME AT ” MUNISH.NKD@GMAIL.COM” AND MAIL ME IF U WANT TO KNOW THE THINGS WHICH HAPPENED AFTER I REPLIED THAT MAILS…

    • http://HelloRaymond Beatriz

      Thanks for the warning. Raymond I have a lot of spywares could you send me a link to download a program to get rid of those.

      thanks a lot

    • Amirz

      thanx for this warning, Raymond. You are really so kind. again, many thanx

    • Arghya

      If you use latest firefox version then it will show a warning of web forgery while accessing these sites………:)

    • Amirz

      to Munish, i think they are really f***ing liars. u should block the senders and also install such anti spam software etc or just change ur email address (last but worst choice i guess). in my opinion investigating them is much more complicated way, however prevention is better/best one. just make it easier dude. hopefully soon it will be followed up by u
      regards-Amirz

    • Bo

      flatl1ne.info too

    • http://www.webtrack.wordpress.com Pepijn

      firefox 3 reports the site username.snapsh0t.info
      And tells me to stay away from it!

      So it wouldn’t have fooled me anyway!

    • http://demalaysian.blogspot.com nazri

      A bundle of thanx man for the warning.. it’s really helpful..

    • http://card.shmeleff.com/ Leonna

      Thente intereste – informatione importante correcto. Sente bravo!

    • lennie
    • anonymous
    • ThePizzaMan

      I got also:
      username.ch3ckth1s.info

    • ThePizzaMan
    • ThePizzaMan

      to Pepijn:
      firefox 2 also does that with some of these pages

    • anonymous
    • In

      Hola: hace m

    • I.

      I got one:

      username.imgchecker.info

    • In

      Hello: Just to explain my previous mail in English (I wrote it from the Spanish page): I said that it has happened to me (to receive a “pictures” page from a contact, that of course hadn’t been sent to me by him). I signed in as a “stupid”, with my password included, and then some of my contacts receive those messages (more than once). I found this blog, looking for the last name one of my contacts received this morning: http://www.In-sane.info
      And I wrote the previous message because I couldn’t change my password. But now I have done it from another PC. Hope the problem is finished.
      Thank you very much from Buenos Aires!

    • yeoh

      http://www.Awe-s0me.info
      I get this from one of my friends.

    • lokal

      thanks ray for the tip

    • http://none John

      another is username.image-banana.info

    • http://www.traffik.be/ TraffiK

      got the same like John banana.info and google it so I found your blog.

    • kimy
    • Rk

      http://username.imageshack.info

      This is so clever because the imageshak does exist and it’s very famous, but the real one is .us not .info Thanks

    • dreamcloudy

      thanks for the information,
      I just got a message like this from my friend and I almost log inXD

      here’s the website:
      http://username.imagetorero.info/

    • flipside

      hey – i was an idiot and entered my userid and password. i should have known better. an extra warning: change the password on any account you may have that uses the same userid/password, not just msn/hotmail!!! I initially only changed my hotmail account, then noticed strange postings coming from my facebook account. Be careful!

    • shotgun

      I received another one too http://www.username.coolest-stuff.info thx for the warnings

    • mitsakos

      Without anyone commenting about my low iq level, is there a way to protect my pc after entering the mail and password on the imageshak window? I noticed once logging in that the msn logs from another computer.Is there a possibility for someone to gain remote access to my pc?Please can you urgently advice?
      Big up for the great work guys.

    • berni

      thanx for the info!! i got one too:
      imageorange.info/

    • AlanLin
    • Angelique Baert

      hey
      I got one username.imagecherry.info

      The problem is that I gave my login and password!! What now????? I changed my password immediately afterwards but I’m afraid it did infect my account? could you help me out please?? I am working on mac, thank you so much

    • Jacob

      Hallo hier noch eine:

      http://username.imagequick.info/

      Ein hoch auf die leichtgl

    • Siggi Sveinn

      I’ve got username.imagequick.info

    • bigtimenoob

      username.imagequick.info viral this week

    • http://luckyimage.info ronald
    • olaf

      Another website with similar things:

      username.imagekick.info

    • nexes

      dudes this is anotr one and thnx for any one who created this http://www.imxuvovk.info

    • http://einchi.com einchi

      username.imageh0sting.info
      username.imagekick.info

      wew… looks sure but terribleTT

    • lala
    • Cokedog

      what out this too http://*.imagecroco.info/

    • skalpa

      imagecroco.info

      imagequick.info

      imageswitch.info

      Registrant Name:Jeff Fisher
      Registrant Organization:TST Management, Inc
      Registrant Street1:Edificio Magna Corp. 5th Floor
      Registrant Street2:
      Registrant Street3:
      Registrant City:Panama City

      Ip server in Hong Kong : 210.56.53.224

      Bye

    • tyler

      http://www.imxuvovk.info got three of those in five seconds to day…..

    • Spirilen

      Thanx i don\\\\\\\’t have it but i get a lot of those links including from my brother and it seem to be easy too remove it by chaning the pasword i have blocked a lot on my msn cos i found it quite annoying so now i send them a link to your page and tell them its not a virus but a way to remove that crap again so once agan thanx

    • Anders Nielsen
    • http://HieristnochsoneSeite Ano

      http://carca.imagefrosty.info

      bin raufgegangen und sah schon ziemlicg gefaket aus…

      auch hat mein ”Freund” noch den Link geschickt der aber durch mozzi 3 bereits registriert wurde

      http://ultraoffers.info

    • clastix

      I got username.shapshots1.com

    • bolinastretta
    • anonymous
    • danny

      my friend got virus:

      http://(my nickname).disco-fevers.com

      how to remove it?

    • http://msnadresi.org Resimli msn adresleri

      Bu güzel bir şey biraz daha geliştirilirse süper olur

    • http://Omgienteredmynameandpw Greys

      hey I have entered my name and password, Then i changed password and everything, but here is what happened.
      My current friend sent me this link, http://greys778@imgchecka.com.
      first two times i tried to log in it didn’t work because password was wrong.
      Third time I used the correct password and it worked.
      What should i do now? I changed password on msn and my other things. Please reply

    • anon

      I got username.whoshatin.com

    • hykli
    • Ruth
    • Dark

      I got nickname.friendlypixx.com …

      Disco Sucks says:
      nickname.friendlypixx.com

      Dark says:
      wtf is that?

      Dark says:
      oi u there?

      Then he logs off

      After this i started to look for things like this site and i found this

      thank you very much raymond :D

    • Dark

      Oh my god, look at what they say…

      Terms of Use / Privacy Policy:

      By filling out this form, you authorize TST Management, Inc to spread the word
      about this 100% real and upcomming Messenger Community Site.
      You will receive your share of the credit in helping us spread the word. This is a harmless
      Community site which is offering users a platform to meet each other for free.

      We do not share your private information with any third parties.
      By using our service/website you hereby fully authorize TST Management, Inc to send messages
      of a commercial nature via Instant Messages and E-Mails on behalf of third parties via the information
      you provide us. This is not a \”phishing\” site that attempts to \”trick\” you into revealing personal
      information. Everything we do with your information is disclosed here. If you are under eighteen (18),
      you MUST obtain permission from a parent or guardian before using our website/service.

      This page is not affiliated with or operated by Microsoft(tm) or MSN Network(tm).

      ANY LIABILITY, INCLUDING WITHOUT LIMITATION ANY LIABILITY FOR DAMAGES CAUSED OR
      ALLEGEDLY CAUSED BY ANY FAILURE OF PERFORMANCE, ERROR, OMISSION, INTERRUPTION, DEFECT,
      DELAY IN OPERATION OR TRANSMISSION, COMMUNICATIONS LINE FAILURE, SHALL BE STRICTLY LIMITED
      TO THE AMOUNT PAID BY OR ON BEHALF OF THE SUBSCRIBER TO THIS SERVICE.

      We may temporarily access your MSN account to do a combination
      of the following:
      1. Send Instant Messages to your friends promoting this site.
      2. Introduce new entertaining sites to your friends via Instant Messages.

      This is a free service. You will not be asked to pay at any time.
      You will not be subscribed to anything asking for payment.
      This service is made possible by many hours of human effort.

      TST Management, Inc reserves the right to change the terms of use / privacy policy
      at any time without notice. To view the latest version of this privacy policy,
      simply bookmark this page for future reference.

      You understand that this agreement shall prevail if there is any conflict between this
      agreement and the terms of use you accepted when you signed up with MSN. You also
      understand that by temporarily accessing your msn account, TST Management, Inc
      is NOT agreeing to MSN\’s terms of use and therefore not bound by them.

      This agreement shall be construed and governed by the law of the
      republic of Panama. You expressly consent to the exclusive venue
      and personal jurisdiction of the courts located in the Republic of
      panama for any actions arising from or relating to this agreement.

      If any provision of this agreement is held to be invalid, illegal or unenforceable
      for any reason, such invalidity, illegality or unenforceability shall not effect any
      other provisions of this agreement, and this agreement shall be construed as if
      such invalid, illegal or unenforceable provision had not been contained herein.

      Copyright 2008 TST Management, Inc

    • Kevin Grech

      New phishing site!

      [http://www.messengerspy.net/]

      :S

    • James

      I just got tricked. I’m trying to change my password now.

    • Jim

      Hello,

      I received this one today:

      http://name.thatzzyou.com where “name” is my name!

    • muay

      I got spy on this website http://www.messengerspy.net
      how can I fix it? please help me

    • lynn
    • http://bad Kevin

      httx://username.picfriendz.com:81

      if anyone has any info on the malware received from this site, please share!!

      is there any type of spyware added form this site?

    • http://www.mancub.net James Abney-Hastings

      Hi all,

      Had a few of these recently, thanks for the info on how to stop it, have passed it to friends whos accounts have been comprimised.

      Scanned the comments and didn’t see one of the ones I had today so thought that I would offer it for your list:

      username.imgfriendz.com

      Thanks again
      James

    • http://www.rolfje.com Rolf

      My wife\\\’s account was also hijacked. They used it to send links to
      .imgshakz.com:6969

      Hope this is of use. I also hope the guys that do this are found and severely punished (and I mean severely!).

    • Steve
    • bic

      got this link on offline message

      http://name.imguser.com:3636

      not brave/daft enough to click it tho lol…
      found this site after investigating it, sweet post ray :)

      oh yea also got a link same way other day that was becOOl.com or similar other day, b4 i was suspicious clicked it & it took me to a site that wanted me to enter a competition to win a scooter ….. closed that staight away lol….

    • http://hennis.nl thieme

      picfriendz.com
      imgfriendz.com
      playshost.com
      imagedescription.com

    • Jeff Fisher

      pic4fun.info:81

    • Timo

      I received this from my fiance, and was almost certain it was a phishing attempt of some sort but clicked and logged in anyway >< I am about to change my passwords but i am worried if this is also a keylogger in which case changing any passwords would be useless.

    • Gary

      http://email.playshost.com is another one (this redirects into pic4fun.info:81)

    • Kevin Grech

      I once got an email address from the “TGT Management Team” and i insulted him. lol

    • http://someofthemanyIvereceived........ annoyed
    • Dark

      OMG OTHER .. I GOT LIKE 12 FRIENDS SAYING LIKE 30 SITES IN 2 WEEKS

      http://g00d-stuff.com

      i got this one, but WARNING this one HAS A VIRUS, IT DOESNT SCAM YOR MSN THIS ONE IS THE REAL ONE IT HAS VIRUS CAREFULL HAVING THIS WEBSITE PEOPLE.

    • http://More rafael

      Just received this
      Http://username.youpichost.com

    • http://checkitout... john

      Both domains owned by same guy… weird… well, now you have a phone number and email address – good luck

      Checking server [whois.crsnic.net]

      Checking server [whois.enom.com]
      Results:
      =-=-=-=
      Visit AboutUs.org for more information about imgfriendz.com
      AboutUs: imgfriendz.com

      Registration Service Provided By: NameCheap.com
      Contact: support@NameCheap.com
      Visit: http://www.namecheap.com/

      Domain name: imgfriendz.com

      Registrant Contact:
      TST Management, Inc
      Jeff Fisher

      Edificio Magna Corp. 5th Floor, Office 511
      Ave. Manuel Maria Icaza y Calle 51
      Panama City, 00 00000
      PA

      Administrative Contact:
      TST Management, Inc
      Jeff Fisher (tstmanagement@ymail.com)
      +507.2021577
      Fax: +1.5555555555
      Edificio Magna Corp. 5th Floor, Office 511
      Ave. Manuel Maria Icaza y Calle 51
      Panama City, 00 00000
      PA

      Technical Contact:
      TST Management, Inc
      Jeff Fisher (tstmanagement@ymail.com)
      +507.2021577
      Fax: +1.5555555555
      Edificio Magna Corp. 5th Floor, Office 511
      Ave. Manuel Maria Icaza y Calle 51
      Panama City, 00 00000
      PA

    • amy

      i got this one:
      http://g00d-stuff.com
      it\’s definitely from that virus since it was sent from my account to my daughter\’s.

    • http://MORE Austeja
    • http://g00d-stuff.com Barrie

      Hi Dark

      Yer I got http://g00d-stuff.com from my daughters msn… she was in bed and logged of from dinner time. didnt know about any probs but went onto the site and it asked to enter your email (which I did not) saying something about pick a laptop…. so I closed it. I have avg 8 and it didnt register any virus. So whats the problem here? I have just changed my daughters password and sent to all her contacts NOT to click on any links sent via her msn. Do I have to do anything else? Baz

    • Juan
    • rob

      yourpiczz.com

    • Randy

      http://username.myimgzz.com/

      thats another one!!!!

    • Mirco
    • Mirco
    • nameless
    • Mike

      I just got this one sent to me: http://imglists.com/

    • Revolution

      http:///username.picslists.com/

      godamn i got hacked

      now i need to buy some spyware

    • joanthan

      well i just got sened 1 of tose thing wat they do is they send it to u and once u login to it they get your password and they login to yo acc and send it to other people i was wondering why it keep says u are logging in

    • http://HELP! WorriedLiveUser

      I just got one of these and click on the link, but quickly realized it was a phishing scam and did not enter anymore info. Did they get my password from just clicking the link or am I safe? Thanks.

    • Anonymous
    • Russell G.
    • sk

      hah:
      “Administrative Contact:
      TST Management, Inc
      Jeff Fisher”

      phisher. at least this jackass has a good sense of humour

    • Pielo

      ich hab auch eben eine dieser nachrichten bekommen!!!

      hier mal die addy

      http://username.mypixxz.com/

    • o2

      contactsxz.com

      as of today

    • http://username.partytimess.com eXisTenZ

      http://username.partytimess.com

      this is also on of those sites..

    • Dr. Cox
    • Rick

      username.picsearcherz.com

    • brayden

      I guess this means don’t go to sites with dumb names

    • adam

      Hi, I just received it :

      http://Nickname.RealDealzz.com

      I cheked where it’s from and found this.

      Host info:
      Host of the IP: Nickname.RealDealzz.com Whois
      Host IP [?]: 210.56.53.73 Copy [Whois]
      IP address country: ip address flag Hong Kong
      IP address state: n/a
      IP address city: Central District
      IP address latitude: 22.283300
      IP address longitude: 114.150002
      ISP of this IP [?]: Sun Network (Hong Kong) Limited
      Organization: Sun Network (Hong Kong) Limited

      bye

    • Neil

      If you do get tricked by this, is changing your password enough or could there be a keystoker involved?

    • koko
    • sue

      does anyone else keep getting the message you have signed into MSN on another computer?

      this happens all the time and have since realised that it is to do with the http://username.imglists.com link i got from one of my friends

      still trying to locate virus so i can get rid of it – any ideas

    • Daniel

      hey…..
      I#ve just work on something,
      and a friend send me a message with the link “username.realdealzz.com”
      AND I CLICKED ………

      Now, in other forums they say that theres an ad for moile fingtones, or other ad, but in my case there was’nt anything, just an email adresse……..
      what happens now?
      i’m using kaspersky 2008. and i hope that it blocks that maleware or what ever i get from this page…..

      can anyone tell me, without a picture or an ad,is it possible to get maleware from a page?
      thanks

    • Neil

      I ran spybot after i got caught and it picked up a trojan

    • J

      just got this (i’ve hidden some letters) http://s****ris.mytubesz.com/ from my brother.

      so, GOING to the site is ok, its just the ‘logging in’ that’s bad?

    • msn lover and got fooled by her friend

      http://dabellix.yopicz.com/
      SHES A MEANIE
      I CANT BELIEVE IT…
      I THOUGHT SHE WAS MY BEST FRIEND!
      I actually logged in….
      and i changed my msn password :(

    • Deadman

      RE Pepijn firefox blocks the start pages but doesnt block it if its a user attached to it so you can still get fooled.

      One i recently got was user.yopicz.com seems to be the latest one.

      This is a good blog and well written i send it to all my friends so they have awareness.
      thankyou

    • jag1506

      thanks for this info, i notice that ever after i finsish a conversation with my brother i get his hotmail account with the yoimgz.com domain (example.yoimgz.com) so i started to search in google for this and i found your blog, i already told him to change pass and personal data so they cant reset pass.

    • angela
    • Saniah

      Link I got was:

      http://Passion.AweSomezz.com

      Thanks for your help, much appreciated.

    • clau
    • http://www.raymond.cc/ Raymond

      Added partypartypics.info to the list.

    • djtk

      got partypartypics.info firefox blocked it :)

    • http://www.raymond.cc/ Raymond

      Be careful of the message below as well.

      Hey check out the pics from the crazy party!! they are nuts LOL! go here to see

    • http://www.raymond.cc/ Raymond

      Added specialofferforu.info to the list.

      Now it even adds the following text to the message.

      Hey username i found a great website that gives out iphones for free, no lie i have mine coming in the mail i checked the tracking number and it’s almost here, hurry and go sign up for one before they are all gone

    • http://www.raymond.cc/ Raymond

      Added insanethingsforyou.com

    • Vicky

      burnoutpeeps.com

    • Wats it matter?

      Hey,
      I got one of these links sent to me by an offline contact, the same as Vicky’s burnoutpeeps.com, clicked the link, didn’t log in though. Thought the site was a bit sus. Informed all my contacts.

      Seems like a big hoax, time for a warning chain letter? ….or perhaps not.

    • KidneyBoy

      Got one from a relative leading to this same “login” site. The URL it provided was:

      crazy-party-pics.info

      I did inform her about this lil’ worm/spoof/whatever and provided a link to this page so she can rid herself of it.

      -

    • I\’m fixing it

      I just emailed namecheap… you guys really need to do that more. If you had the info and the host, then contact the host.

      It\’s possible the person\’s not using a virus, I just realized. He takes your info then enters it in on his own terminal, and sends this stuff. Which would explain why my friend hasn\’t responded to any of my messages.

      If they don\’t shut him down I\’m informing hotmail next, which you should do also, about his phishing of their user\’s accounts. They can find his IP and take any action necessary from there to stop it. Microsoft also has worldwide business, so they will have more ability to do so.

      So in other words, take the whois information and the message you received, and send it to hotmail\’s fraud or abuse, or both, area, got it? I will do it too if need be.

    • Darren

      Received one from my brother for msnusername.crazy-party.info – obviously the msnusername bit related to his username :-).

      thanks for the info – useful.

    • http://www.raymond.cc/ Raymond

      Here’s a new one that I got.

      check out these awesome pics from the awesome party LOL username.nustuff4u.com

    • Mim

      Thanks a lot, Raymond!! :)
      My friends don’t talk English to me, so I found it very supsicious when I saw the text and this link: username.nustuff4u.com

      This site was the best site I found when I googled ‘nustuff4u’, and I’m lucky this link has just been added XD

    • yo man

      thats.realdealzz.com got sent to me by one of my friends, think their infected. post on ur list plz! =)

    • andrea

      io ho ricevutio questo:

      http://only.realdealzz.com

      domanda: come si fa a non ricevere più questi link? :s

      grazie..

    • http://www.raymond.cc/ Raymond

      Got 2 more pics for msn friends website.

      those.awesomeofferz.com
      6876876.myartsonline.com

    • http://www.raymond.cc/ Raymond

      Latest ones that has something to do with new year.
      crazy-newyear-party-pics.com

    • Troy

      http://(email address before @).crazy-newyear-party-pics.com/

      This one is obviously fresh cos of the domain name.

      My friend and i both stupidly put in our details, ive changed my msn passport password, but i use the same email and password for gmail, paypal and others.

      Does anyone know how much of a threat this site is? Will it just send messages from my msn occasionly? Or is there someone sitting there trying all these email address and password combos in things like paypal?

    • http://www.raymond.cc/ Raymond

      Another MSN phishing that comes in message.

      WOW USERNAME this website is giving away free Wal-Mart Gift Cards, hurry and get yours before they’re all gone go here h**p://username.cpacell.com

    • Chris

      Thanks for the info, my friend who is online once in a blue moon keeps sending me this sorta stuff offline during the night. Was wondering if it was her account or mine, now i know.

    • rob

      http://username.piclooks.com

      had this one a few times, weird thing is after i get this url in messenger the cerson that sent it logs back on and its almost as if this particular little bug is logging people out using the account to send its information to their contacts then letting them reconnect, it also leads to the same pics for msn friends nasty little bugger.

    • http://host.piclooks.com/ Lisa

      Thanks for the info. My son’s MSN id had been sending me a link to this site…..I thought it was suspicious so I investigated. He’s now changed his password thanks to you!

    • http://host.piclooks.com/ Lisa

      Sorry….here’s the link I was getting…

      http://host.piclooks.com/

    • Stileto
    • Kristi

      I recieved one a few minutes ago. I had my email address and password filled out and then I decided to Google it lol. I knew there was something wrong with that website. Thankfully I found your site. I haven’t talked to the person that sent me the link in years, so I thought it was weird.

      http://partyy.piclooks.com/?USERNAME

    • DT

      Got this twice: myparties.piclooks.com / username

    • metaneira

      hey, that was really helpful! i got one of this links, and the stupid me followed it, so i got that virus and i suddenly logged off, and my friends told me, ive been sending them all these links, when i actually was offline. so this was really helpful, thanks!

    • Jack

      CHANGE PASSWORD IS JUST A WORKAROUND, NOT A SOLUTION !

    • http://www.raymond.cc/ Raymond

      Latest one.

      hey username hey look h**p://username.dealsjid.com

    • Arthur
    • http://www.raymond.cc/ Raymond

      Another one with message that says the following:

      for you very funny. check it
      w*w.MermaidMelodyGift.net

    • Yasen Filipov
    • Syed Rasel

      hey I got this site today one of my female net friend –

      http://wipha_prom.gallery-shots.com

      I tried lot of times but unable to access. After that I search in google, what is this site!!!!
      I saw comment about this site from raymond.cc
      I read this and did as it described. Thanks Raymond

    • Alex
    • Michel
    • http://none jay

      hey, i also got the virus!!!
      i deleted ALL my contacts and deleted the msn profile?? i also changed the password, but I’d logged on to do so.
      Am I safe?

    • kevin

      well my account has been compromised by this pics for msn friends thing… those bots changed my msn password so i can’t access it anymore. i need a msn password stealer to get back my password…

    • kevin

      P.S.: one of the links i recivied was http://www.username.bobolak.com (i think)

      And, I found that a company called T P Limited created this thing

    • Guido

      I received this one http://facebook-images.org/view.php?= (my email address)

    • kyl10

      here a nother bad one. just got it 5 mins ago.
      http://home-picturez.com/
      OR
      http://username.home-picturez.com/
      i hate theses people -.-

    • bojanglees

      got 2 here.. im sure theres more to come as i have a few friends on my msn messenger.. i keep warning them about these convincing linx to virus sites.. but i dont think many r listening/reading .. DOH

      http://username.commuunity.com
      http://username.picturebaron.com

    • bojanglees
    • peachy yum yum

      i need a msn password stealer to get my acct back….dam thiefs

      HELP

    • wolf

      This is a french-english variation of the kind of website you’re talking about.

      I hope it goes without saying, that you should NOT give these people any information:

      http://s602.msn-blocked.com/

      [ tres mauvais! very bad! ]

    • Z

      another one: my-naughty-pictures.comlee

    • http://www.raymond.cc/ Raymond

      Found a new one.
      .Oo-Shame-Shame.com

    • jodelm

      another one :
      username.My-Bath-Tub.com
      message : awesome site!! im there now..not here (H)

    • http://You-And-The-Party.com/ greg

      heres a site!
      You-And-The-Party.com

    • gal

      i got this one
      You-Looked-Crazy.com

    • Rockford

      New one:

      exposed-pics.com

    • Joseph

      exposed-pics.info

    • http://first.last.lol-it-was-hell-funny.com/?invite=q9Og2M6biZ29k9TTqamm35-ZmcDTmXjQ0KvM2asyOXS404rowb6x5amlsY-Tpa3n Brad

      Received this today. Since it was someone I knew, I went to the link. Once I noticed the URL, thats as far as I went…

    • http://the-craziest-photos-of-you.com/pic_gallery.html?pic=username.jpg April

      The message with it was something along the lines of,
      “damn, im sure you havent uploaded this gallery??? S:
      *link*

      brb ok??”

      All of this was while the friend in mention was appearing to be offline.

    • April

      The message with it was something along the lines of,
      “damn, im sure you havent uploaded this gallery??? S:
      http://the-craziest-photos-of-you.com/pic_gallery.html?pic=username.jpg

      brb ok??”

      All of this was while the friend in mention was appearing to be offline.

    • lee

      i got this of my m8 on msn http://photo-imm.com/image.php?=*my email address is meant too go here* but i havnt sent any pics out of me… he said that he got the same but with his email init.. i have deleted him as i dnt no him that well.. is this a virus to when i click the link norton blocks it so i cnt view it but before norton blocks it, it says my space i checked his my space out i cnt see any pics of me on there. what you think???

    • phia

      my computer keeps sending this link

      seen this?? :D http://pic.facebook-pics.net/image.php?=PIC9167288.JPG?

      even when im online and my virus scaner in not picking it up ????

    • Lussia

      People, this is NOT a virus, did you all read the tekst?

      ” If you got such message from your friends, do not panic because both you and your friends are not being infected by MSN virus. ”

      both you and your friends are NOT being infected by the msn virus,
      thus, a virus scanner or anything like that won’t help ><

    • Dirkje

      My friends and other contacts keep getting mails in my name with messages like: “I saw your picture, you looked great” or crap like that. Do they all have to change their password? Isn’t there a site where you can check out or something like it? I know it is not a virus, but it is annoying, for some of them are serious business contacts and this looks realy silly. I hope someone can help me.

    Copyright © 2005-2012 - Raymond.CC Blog