downie
PIRT Handler
Joined: May 19, 2006
Posts: 3970
|
 Posted: Tue May 13, 2008 12:24 am Post subject: [PIRT#825751] eBay on AS21844 70.86.74.178 |
|
|
Phish Alert
Full Report:  /eBay_phish825751.html
Changed status to confirmed phish.The URL accesses an eBay phishing site, active at the time of investigation.
A page fetch was successful.IP Converted: 70.86.74.178
dword = 1180060338
hex1 = 0x46564ab2
hex2 = 0x46.0x56.0x4a.0xb2
oct = 0106.0126.0112.0262
View CIDR AS21844 Report: http://www.cidr-report.org/cgi-bin/as-report?as=21844
"21844 | US | arin | 2001-06-29 | THEPLANET-AS - ThePlanet.com Internet Services, Inc."<br />
Extended information for AS21844:
State/Province: tx
Country: us
Responsible Domain: theplanet.com
Abuse Email: abuse@theplanet.com
*************************
DOMAINSITE:
The wildcard subdomain A record for bcayer.com has been pointed to this hacked phishing site.
Please disable this and take appropriate further action.
*************************Generated and sent email phish alert to respective parties. | Quote: | | http://signin.ebay.com.ws.ebayisapi.dll.signin.usingssl.yes.pagetype.siteid.copartnerid.jkhasduiqeywsmnncbiutrasddghrywasddpoiw.sid.bcayer.com/~fastclss/pictures/cats/.hidden/index.php?SignIn=1&co_partnerId=2&siteid=0&ru=&pp=pass&customerid=&pageType=708XeMWZllWXS3AlBXVShqAhQRfhgTDrf=https://signin.ebay.com/ws/eBayISAPI.dll?SignIn&UsingSSL=1&pUserId=&co_partnerId=2&siteid=0&ru=&pp=&pageType=708&MfcISAPICommand=ConfirmRegistration |
|
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
