CastleCops :: View topic - [PIRT#828815] eBay on AS3248 213.235.199.66

[PIRT#828815] eBay on AS3248 213.235.199.66

CastleCops -> PIRT Fried Phish Reports

Author: downie,

Posted: Fri May 16, 2008 3:15 am Post subject: [PIRT#828815] eBay on AS3248 213.235.199.66

Phish Alert

Full Report: CastleCops Link

/eBay_phish828815.html

The URL accesses an eBay phishing site, active at the time of investigation.
A page fetch was successful.
********************************
DOMAINSITE:
The wildcard subdomain A record for emcanear.com has been pointed to this hacked phishing site.
Please disable this and take appropriate further action.
**********************************Changed status to confirmed phish.IP Converted: 213.235.199.66

dword = 3588998978
hex1 = 0xd5ebc742
hex2 = 0xd5.0xeb.0xc7.0x42
oct = 0325.0353.0307.0102
View CIDR AS3248 Report: http://www.cidr-report.org/cgi-bin/as-report?as=3248

"3248 | AT | ripencc | 2004-01-14 | SIL-AT SILVER SERVER GmbH"<br />
Extended information for AS3248:
State/Province:
Country: at
Responsible Domain: sil.at
Abuse Email: abuse@sil.at
Generated and sent email phish alert to respective parties.

Quote:

http://signin.ebay.com.ws.ebayisapi.dll.signin.usingssl.yes.pagetype.siteid.copartnerid.jkhasduiqeywsmnncbiutrasddghrywasddpoiw.sid.emcanear.com/~nr04022/images/startseite/index.php?SignIn=1&co_partnerId=2&siteid=0&ru=&pp=pass&customerid=&pageType=708XeMWZllWXS3AlBXVShqAhQRfhgTDrf=https://signin.ebay.com/ws/eBayISAPI.dll?SignIn&UsingSSL=1&pUserId=&co_partnerId=2&siteid=0&ru=&pp=&pageType=708&MfcISAPICommand=ConfirmRegistration

CastleCops -> PIRT Fried Phish Reports

All times are GMT

Page 1 of 1