[PIRT#868419] Abbey Bank,PayPal on AS32392 76.162.14.17

CastleCops -> PIRT Fried Phish Reports

Author: downie PostPosted: Fri Jun 20, 2008 6:05 pm    Post subject: [PIRT#868419] Abbey Bank,PayPal on AS32392 76.162.14.17

Phish Alert
 
 Full Report: CastleCops Link/Abbey_Bank_PayPal_phish868419.html
 
 The URL accesses an Abbey Bank phishing site, active at the time of investigation.
A page fetch was successful.Changed status to confirmed phish.IP Converted: 76.162.14.17

dword = 1285688849
hex1 = 0x4ca20e11
hex2 = 0x4c.0xa2.0xe.0x11
oct = 0114.0242.016.021
View CIDR AS32392 Report: http://www.cidr-report.org/cgi-bin/as-report?as=32392

"32392 | US | arin | 2004-04-26 | OPENTRANSFER-ECOMMERCE - Ecommerce Corporation"<br />
Extended information for AS32392:
State/Province: ky
Country: us
Responsible Domain: ecommerce.com
Abuse Email: abuse@ecommerce.com
There is a PayPal phish at
http://www.alhodahospital.com/ktmlpro/images/uploads/PayPal.Com(T)/webscr.php?cmd=_login-run&dispatch=ec5f165cfdbd1483eb61bb29a4a26bc4ec5f165cfdbd1483eb61bb29a4a26bc4WARNING THERE IS MALWARE ON THIS SITE!Generated and sent email phish alert to respective parties.
Quote:
http://www.alhodahospital.com/ktmlpro/images/uploads/abbey/submit.php?cmd=validate



CastleCops -> PIRT Fried Phish Reports

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group