Phish Alert
 
 Full Report: /Abbey_Bank_Rock_Phish_phish971244.html
 
 Consumed following related reports:

[971884] http://ww9.commerceonline.com.5offset.bz/corporatebankingweb/confirm.aspx?app=3D20jcsclhmFFCDabczyOkhb
[971885] http://ww9.commerceonline.com.5offset.bz/corporatebankingweb/confirm.aspx?app=20jcsclhmFFCDabczyOkhb
Changed status to confirmed phish.IP Converted: 98.228.7.48

dword = 1659111216
hex1 = 0x62e40730
hex2 = 0x62.0xe4.0x7.0x30
oct = 0142.0344.07.060
View CIDR AS33491 Report: http://www.cidr-report.org/cgi-bin/as-report?as=33491

"33491 | US | arin | 2004-12-30 | DNEO-OSP7 - Comcast Cable Communications, Inc."<br />
Extended information for AS33491:
State/Province: nj
Country: us
Responsible Domain: comcast.net
Abuse Email: abuse@comcast.net
IP Converted: 99.171.161.207

dword = 1672192463
hex1 = 0x63aba1cf
hex2 = 0x63.0xab.0xa1.0xcf
oct = 0143.0253.0241.0317
View CIDR AS7132 Report: http://www.cidr-report.org/cgi-bin/as-report?as=7132

"7132 | US | arin | 1996-09-13 | SBIS-AS - AT&T Internet Services"<br />
Extended information for AS7132:
State/Province: tx
Country: us
Responsible Domain: swbell.net
Abuse Email: abuse@swbell.net
The URL accesses a phishing site hosted on a bot net.
IP addresses 190.146.206.190, 196.31.33.6, 200.84.206.69, 211.56.236.93, 212.89.22.177, 68.57.249.121, 69.152.221.193, 83.21.217.43, 84.157.215.6, 84.255.206.105, 93.136.50.237, 94.189.157.83, 98.228.7.48, 99.144.90.102, 99.171.161.207 were active at Fri, 26 Sep 2008 18:03:12 +0000 (GMT).
Nameservers
NS1.5OFFSET.BZ [66.235.4.129] response 190.146.206.190, 196.31.33.6, 200.84.206.69, 211.56.236.93, 212.89.22.177, 68.57.249.121, 69.152.221.193, 83.21.217.43, 84.157.215.6, 84.255.206.105, 93.136.50.237, 94.189.157.83, 98.228.7.48, 99.144.90.102, 99.171.161.207 in 125 mSec
NS2.5OFFSET.BZ [69.62.229.141] response 190.146.206.190, 196.31.33.6, 200.84.206.69, 211.56.236.93, 212.89.22.177, 68.57.249.121, 69.152.221.193, 83.21.217.43, 84.157.215.6, 84.255.206.105, 93.136.50.237, 94.189.157.83, 98.228.7.48, 99.144.90.102, 99.171.161.207 in 96 mSec
NS3.5OFFSET.BZ [75.13.66.128] response 190.146.206.190, 196.31.33.6, 200.84.206.69, 211.56.236.93, 212.89.22.177, 68.57.249.121, 69.152.221.193, 83.21.217.43, 84.157.215.6, 84.255.206.105, 93.136.50.237, 94.189.157.83, 98.228.7.48, 99.144.90.102, 99.171.161.207 in 79 mSec
were active at the same time
=================================
REGISTRAR Moniker Online Services:
Domain 5OFFSET.BZ has been registered with Moniker Online Services- for fraudulent purposes.
It is part of a network of phishing sites hosted on a bot net.
Please suspend this domain immediately to prevent further criminal activity.
Please also check for any domains registered using the same (stolen) identity and credit card details, or the same email address.
=================================