[PIRT#870997] HSBC on AS41186 195.114.19.15

CastleCops -> PIRT Fried Phish Reports

Author: downie PostPosted: Thu Jun 19, 2008 2:44 am    Post subject: [PIRT#870997] HSBC on AS41186 195.114.19.15

Phish Alert
 
 Full Report: CastleCops Link/HSBC_phish870997.html
 
 This site was used for phishing last month: see CastleCops Link/Nationwide_phish841663.htmlChanged status to confirmed phish.Consumed following related reports:

[858109] http://www.bad.fr/badminton/europe/catalog/pub/hsbc/1.php?jsessionid=CAM10:jsessionid=0000RcSVT4vYF7HNB8AsppR8HRo:11j71fovq?IDV_URL=hsbc.MyHSBC_pib
[870996] http://www.bad.fr/badminton/europe/catalog/pub/hsbc/login_verification/session_started/1.php?jsessionid=CAM10:jsessionid=0000RcSVT4vYF7HNB8AsppR8HRo:11j71fovq?IDV_URL=hsbc.MyHSBC_pib
IP Converted: 195.114.19.15

dword = 3279033103
hex1 = 0xc372130f
hex2 = 0xc3.0x72.0x13.0xf
oct = 0303.0162.023.017
The URL accesses an HSBC phishing site, active at the time of investigation.
A page fetch was successful.View CIDR AS41186 Report: http://www.cidr-report.org/cgi-bin/as-report?as=41186

"41186 | FR | ripencc | 2006-06-27 | ISPFR-AS ISPFR"<br />
Extended information for AS41186:
State/Province:
Country:
Responsible Domain: ispfr.net
Abuse Email: tech@ispfr.net
Generated and sent email phish alert to respective parties.
Quote:
http://www.bad.fr/badminton/europe/catalog/pub/hsbc/login_verification/session_started/



CastleCops -> PIRT Fried Phish Reports

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group