Oldfrog
Special Response Team
Joined: Jun 27, 2004
Posts: 8576
Location: Deep in the Heart of Texas
|
 Posted: Tue Mar 28, 2006 5:28 am Post subject: Fried Phish Mar 28: Chase @ Chinanet (CN) |
|
|
Phish Alert
Full Report:  /modules.php?name=Fried_Phish&fp=phish&id=401&in=1
The email hyperlink directs to a Chinese server hosting an imitation Chase online survey page. The site was active at the time of investigation and the URL was on the Netcraft blacklist.
View CIDR AS23724 Report: http://www.cidr-report.org/cgi-bin/as-report?as=23724
"23724 | CN | apnic | 2003-04-22 | CHINANET-IDC-BJ-AP IDC, China Telecommunications Corporation"<br />
| Quote: | From Mon Mar 27 19:04:23 2006
Received: from gwind.pair.com (gwind.pair.com [209.68.1.157])
by bugsbunny.castlecops.com (8.13.6/8.13.6) with SMTP id k2S04NDa018385
for <>; Mon, 27 Mar 2006 19:04:23 -0500
Received: (qmail 54014 invoked by uid 3333); 28 Mar 2006 00:04:35 -0000
Resent-Message-ID: <>
Delivered-To: notyou-darryl:
X-Envelope-To:
Received: (qmail 58445 invoked from network); 20 Mar 2006 02:37:21 -0000
Received: from mailwash6.pair.com (66.39.2.6)
by gwind.pair.com with SMTP; 20 Mar 2006 02:37:21 -0000
Received: from localhost (localhost [127.0.0.1])
by mailwash6.pair.com (Postfix) with SMTP id 2CF08A324A
for <>; Sun, 19 Mar 2006 21:37:21 -0500 (EST)
X-Spam-Check-By: mailwash6.pair.com
X-Spam-Status: Yes, |
|
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
