downie
PIRT Handler
Joined: May 19, 2006
Posts: 3970
|
 Posted: Fri May 09, 2008 5:01 pm Post subject: [PIRT#818678] eBay on AS31034 66.71.188.5 |
|
|
Phish Alert
Full Report:  /eBay_phish818678.html
Changed status to confirmed phish.The URL accesses an eBay phishing site, active at the time of investigation.
A page fetch was successful.
*****************************************
DOMAINSITE:
The wildcard subdomain A record for aymiejay.com has been pointed to this hacked phishing site.
Please disable this and take appropriate further action.
*****************************************IP Converted: 66.71.188.5
dword = 1111997445
hex1 = 0x4247bc05
hex2 = 0x42.0x47.0xbc.0x5
oct = 0102.0107.0274.05
View CIDR AS31034 Report: http://www.cidr-report.org/cgi-bin/as-report?as=31034
"31034 | IT | ripencc | 2004-02-12 | ARUBA-ASN Aruba.it Network"<br />
Extended information for AS31034:
State/Province:
Country:
Responsible Domain: technorail.com
Abuse Email: abuse@technorail.com
Generated and sent email phish alert to respective parties.aymiejay.com deleted | Quote: | | http://signin.ebay.com.ws.ebayisapi.dll.signin.usingssl.yes.pagetype.siteid.copartnerid.jkhasduiqeywsmnncbiutrasddghrywasddpoiw.sid.aymiejay.com/~cooproge/images/progetto/allegati/index.php?SignIn=1&co_partnerId=2&siteid=0&ru=&pp=pass&customerid=&pageType=708XeMWZllWXS3AlBXVShqAhQRfhgTDrf=https://signin.ebay.com/ws/eBayISAPI.dll?SignIn&UsingSSL=1&pUserId=&co_partnerId=2&siteid=0&ru=&pp=&pageType=708&MfcISAPICommand=ConfirmRegistration |
|
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
