Please confirm if the URL below is a phising site

[shriprem]

I was looking for a Microsoft tool to run legacy programs with elevated
privileges in an LUA desktop setting. The Google search returned one of
the links that for all its appearance looks like MSDN TechNet site.

Here is the link, if it is still running:
http://thesource.ofallevil.com/technet/prodtechnol/windows2000serv/downloads/epal.mspx

The funny thing is if I substitute "thesource.ofallevil" part of the
URL with "www.microsoft", I get an exact replica of the page in my
browser. I am more than 90% sure that the above link is a phishing site
and should be avoided if you are looking to download the genuine EPAL
tool from Microsoft.

 

[Elendil]

Did you open the link? If you did, visit the Comprehensive Malware Removal
Instructions on the Detailed Malware Removal page of my website:
www.stopmalware.tk (Freewebs is now cooperating!). This should remove at
least 99% of all malware on your computer.

 

[Steven L Umbach]

I don't think it is phishing but appears some joker was able to get to get
thesource.ofallevil.com to resolve to at least one Microsoft IP address. You
can try this. Ping thesource.ofallevil.com and then plug the IP address it
returns into a website that does whois. This is what I found for instance.
Phishing attempts to get you to go to a bogus website that looks like the
real thing mostly for the purpose of tricking you into entering sensitive
data like user name, password, social security number, credit card number,
etc. Having said that go to Microsoft.com and search for EPAL to get
Microsoft.com to show in your address bar. --- Steve


D:\Documents and Settings\Steve>ping thesource.ofallevil.com

Pinging lb1.www.ms.akadns.net [207.46.19.60] with 32 bytes of data:

WHOIS Record For
207.46.19.60
Record Type: IP Address


OrgName: Microsoft Corp
OrgID: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US

NetRange: 207.46.0.0 - 207.46.255.255
CIDR: 207.46.0.0/16
NetName: MICROSOFT-GLOBAL-NET