Phish Alert
 
 Full Report: /CitiBank_phish826735.html
 
 Consumed following related reports:

[826941] http://lythia.us/space/sponsor.php?email_from=3Dchrisgrumley@tampabay.rr.com&QJfgVMu9D5e22vHwgd0mjJxlpuKVdLF2yhX5mEN2Kp8xbIMgnUF7ARVdJW1AqfNr1sb4KkgFdz3r3yJQZvmhAoJmNjGAQZ9zw3X7EGo5DZM94wkUodz&f26VRj339FKPbtEFqmdbVBrm4RbN4qjAu8qrUoOin2u3tndzWlnm2I1
[827140] http://lythia.us/space/sponsor.php?email_from=3Dlynnellerbrock@hotmail.com&JyRqvLWeMG2yiY6nFN3Lq9ycIjhoVG8F8xec2MX5ewrhtMzJb5Cj6UnJCsMMFao7qWHrOytmqO6qfLuO8wFzkHOFaIkoSo5y36CP7oZ4JbcWdYveQv1&V27CoNJmITHRkgw7JOTuvvKp9vgkbCEyqg0OKTPEKTZO9iphR8zVupM
Changed status to confirmed phish.The URL redirects to a Citibank phishing site at http://worlddancecentre.com/images/space/index.php
, active at the time of investigation.
(worked as /CitiBank_phish827405.html)
A page fetch was successful.IP Converted: 75.127.104.17

dword = 1266640913
hex1 = 0x4b7f6811
hex2 = 0x4b.0x7f.0x68.0x11
oct = 0113.0177.0150.021
View CIDR AS16626 Report: http://www.cidr-report.org/cgi-bin/as-report?as=16626

"16626 | US | arin | 2000-05-30 | GNAXNET-AS - Global Net Access, LLC"<br />
Extended information for AS16626:
State/Province: ga
Country: us
Responsible Domain: dv2.com
Abuse Email: abuse@dv2.net
***************************************************

WARNING THERE IS MALWARE ON THIS SITE

****************************************************Generated and sent email phish alert to respective parties.

All times are GMT