[PIRT#835926] HSBC on AS32613 72.55.186.29

CastleCops -> PIRT Fried Phish Reports

Author: downie PostPosted: Thu May 22, 2008 2:53 am    Post subject: [PIRT#835926] HSBC on AS32613 72.55.186.29

Phish Alert
 
 Full Report: CastleCops Link/HSBC_phish835926.html
 
 Consumed following related reports:

[835941] https://my.secure-ssl.net/soluciona.net.mx/hsbc.co.uk/1.php?jsessionid=3DCAM10:jsessionid=3D0000RcSVT4vYF7HNB8AsppR8HRo:11j71fovq?IDV_URL=3Dhsbc.MyHSBC_pib
[835942] https://my.secure-ssl.net/soluciona.net.mx/hsbc.co.uk/1.php?jsessionid=3D
[835943] https://my.secure-ssl.net/soluciona.net.mx/hsbc.co.uk/1.php?jsessionid
The URL accesses an HSBC phishing site, active at the time of investigation.
A page fetch was successful.Changed status to confirmed phish.IP Converted: 72.55.186.29

dword = 1211611677
hex1 = 0x4837ba1d
hex2 = 0x48.0x37.0xba.0x1d
oct = 0110.067.0272.035
View CIDR AS32613 Report: http://www.cidr-report.org/cgi-bin/as-report?as=32613

"32613 | CA | arin | 2004-06-15 | IWEB-AS - Groupe iWeb Technologies inc."<br />
Extended information for AS32613:
State/Province: qc
Country: ca
Responsible Domain: iweb.ca
Abuse Email: abuse@iweb.ca
Generated and sent email phish alert to respective parties.
Quote:
https://my.secure-ssl.net/soluciona.net.mx/hsbc.co.uk/1.php?jsessionid=CAM10:jsessionid=0000RcSVT4vYF7HNB8AsppR8HRo:11j71fovq?IDV_URL=hsbc.MyHSBC_pib



CastleCops -> PIRT Fried Phish Reports

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group