Oldfrog
Special Response Team
 Joined: Jun 27, 2004 Posts: 8576 Location: Deep in the Heart of Texas
|
Posted: Sun Mar 26, 2006 4:51 pm Post subject: Fried Phish Mar 26: Chase @ Yahoo (multiple A records) |
|
|
Phish Alert Full Report: /modules.php?name=Fried_Phish&fp=phish&id=202&in=1 The URL directs to a US server hosting an imitation Chase login screen. The domain has six different DNS A records, all hosted by Yahoo. URL follows: http://www.chaseonline.chase.com.y3-cgi.com/start.htm?cmd=LogIn
IP addresses appearing in A records include 216.39.58.42 through 216.39.58.47
| Quote: | | http://www.chaseonline.chase.com.y3-cgi.com/start.htm?cmd=LogIn |
| Description: |
|
| Filesize: |
77.87 KB |
| Viewed: |
32 Time(s) |

|
_________________
MS MVP Security 2006-2008
|
|