[PIRT#823089] BoA on AS29691 217.150.244.72

CastleCops -> PIRT Fried Phish Reports

Author: downie PostPosted: Sun May 11, 2008 12:54 am    Post subject: [PIRT#823089] BoA on AS29691 217.150.244.72

Phish Alert
 
 Full Report: CastleCops Link/Bank_of_America_phish823089.html
 
 Consumed following related reports:

[823017] http://rubycon.ch/cgi-bin/www.bankofamerica.com/login-secure/do.php?cmd=3DValidate
[823018] http://rubycon.ch/cgi-bin/www.bankofamerica.com/login-secure/do.php?cmd
The URL accesses a Bank of America phishing site, active at the time of investigation.
A page fetch was successful.Changed status to confirmed phish.IP Converted: 217.150.244.72

dword = 3650548808
hex1 = 0xd996f448
hex2 = 0xd9.0x96.0xf4.0x48
oct = 0331.0226.0364.0110
View CIDR AS29691 Report: http://www.cidr-report.org/cgi-bin/as-report?as=29691

"29691 | CH | ripencc | 2003-11-13 | NINE Nine Internet Solutions AG"<br />
Extended information for AS29691:
State/Province:
Country: ch
Responsible Domain: nine.ch
Abuse Email: noc@nine.ch
Generated and sent email phish alert to respective parties.
Quote:
http://rubycon.ch/cgi-bin/www.bankofamerica.com/login-secure/do.php?cmd=Validate



CastleCops -> PIRT Fried Phish Reports

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group