[PIRT#826046] EPPICard Redirect on AS36890, AS9499

CastleCops -> PIRT Fried Phish Reports

Author: s0tet PostPosted: Tue May 13, 2008 2:28 am    Post subject: [PIRT#826046] EPPICard Redirect on AS36890, AS9499

Phish Alert
 
 Full Report: CastleCops Link/EPPICard_phish826046.html
 
 IP Converted: 196.44.250.193

dword = 3291282113
hex1 = 0xc42cfac1
hex2 = 0xc4.0x2c.0xfa.0xc1
oct = 0304.054.0372.0301
View CIDR AS36890 Report: http://www.cidr-report.org/cgi-bin/as-report?as=36890

"36890 | RW | afrinic | 2006-02-06 | MTNRW-ASN"<br />
Extended information for AS36890:
State/Province: gauteng
Country: za
Responsible Domain: afrinic.net
Abuse Email: abusepoc@afrinic.net
IP Converted: 202.130.195.51

dword = 3397567283
hex1 = 0xca82c333
hex2 = 0xca.0x82.0xc3.0x33
oct = 0312.0202.0303.063
View CIDR AS9499 Report: http://www.cidr-report.org/cgi-bin/as-report?as=9499

"9499 | AU | apnic | 2003-10-03 | AP-AUST-AU-AS Access Providers"<br />
Extended information for AS9499:
State/Province:
Country: au
Responsible Domain: accessproviders.com.au
Abuse Email: abuse@accessproviders.com.au
Changed status to confirmed phish.http://196.44.250.193/online/login/hash/index.php currently redirects to this URL (hosting an EPPICard phishing site)
http://www.ademcosalesandsupport.com/epic/inlog/online/index.php
Quote:
http://196.44.250.193/online/login/hash/index.php



CastleCops -> PIRT Fried Phish Reports

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group