[PIRT#873055] PayPal on AS16397 / 200.219.239.86

CastleCops -> PIRT Fried Phish Reports

Author: moike PostPosted: Fri Jun 20, 2008 8:34 pm    Post subject: [PIRT#873055] PayPal on AS16397 / 200.219.239.86

Phish Alert
 
 Full Report: CastleCops Link/PayPal_phish873055.html
 
 Consumed following related reports:

[848706] http://200.219.239.86/icons/bancoposta/bpol/formslogin/
[865185] http://200.219.239.86/icons/it/cgi-bin/webscr-cmd/webscr.php?cmd=LogIn
[865501] http://200.219.239.86/icons/it/cgi-bin/webscr-cmd/webscr.php
[873836] http://200.219.239.86/%20/.update/.info/webscr.php
Phish was active at time of investigation as a fake PayPal siteChanged status to confirmed phish.IP Converted: 200.219.239.86

dword = 3369856854
hex1 = 0xc8dbef56
hex2 = 0xc8.0xdb.0xef.0x56
oct = 0310.0333.0357.0126
View CIDR AS16397 Report: http://www.cidr-report.org/cgi-bin/as-report?as=16397

"16397 | BR | lacnic | 2000-04-25 | Comdominio SA"<br />
Extended information for AS16397:
State/Province:
Country: br
Responsible Domain: comdominio.com.br
Abuse Email: postmaster@comdominio.com.br
Quote:
http://200.219.239.86/%20/.update/.info/webscr.php?cmd=LogIn



CastleCops -> PIRT Fried Phish Reports

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group