CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Fried Phish Mar 28: Jardines @ OVH (FR)

 
Post new topic   Reply to topic       All -> FavForums -> PIRT Fried Phish Reports [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Oldfrog

Special Response Team


Joined: Jun 27, 2004
Posts: 8576
Location: Deep in the Heart of Texas
Moderators MVP Premium SRT

PostPosted: Tue Mar 28, 2006 5:11 pm    Post subject: Fried Phish Mar 28: Jardines @ OVH (FR)
Reply with quote

Phish Alert
 
 Full Report: CastleCops Link/modules.php?name=Fried_Phish&fp=phish&id=291&in=1
 
 The email hyperlink directs to a French server hosting an imitation Jardines login screen. The site was active at the time of investigation and the URL was on the Netcraft blacklist.


View CIDR AS16276 Report: http://www.cidr-report.org/cgi-bin/as-report?as=16276

"16276 | FR | ripencc | 2001-02-15 | OVH OVH"<br />

Quote:
Delivery-date: Mon, 27 Mar 2006 18:10:42 +0100
Received: from [209.87.239.70] (helo=smtp.storm.ca)
by tantalus.ancilenetworks.net with esmtp (Exim 4.52)
id 1FNvEn-0003fm-VX
for ; Mon, 27 Mar 2006 18:10:42 +0100
Received: from localhost (localhost [127.0.0.1])
by smtp.storm.ca (8.13.6+Sun/8.13.6) with ESMTP id k2RHB8lP029209
for <>; Mon, 27 Mar 2006 12:11:08 -0500 (EST)
Received: from smtp.storm.ca ([127.0.0.1])
by localhost (smtp [127.0.0.1]) (amavisd-new, port 10024) with LMTP
id 28878-03 for <>;
Mon, 27 Mar 2006 12:11:08 -0500 (EST)
Received: from d0013d3bfdb7b (ds194-50.ipowerweb.com [66.235.194.50] (may be forged))
by smtp.storm.ca (8.13.6+Sun/8.13.6/Submit) wit

Back to top
View users profile Send private message Send email Visit posters website MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> PIRT Fried Phish Reports All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer