CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

[PIRT#986103] Scotia Bank on scotlabank.tk --> www.ipzp.n

 
Post new topic   Reply to topic       All -> FavForums -> PIRT Fried Phish Reports [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
LoPhatPhuud

Security Expert
Microsoft MVP

Joined: Mar 09, 2002
Posts: 2232

MVP Phishing Squad Premium Security Experts

PostPosted: Mon Oct 06, 2008 4:44 pm    Post subject: [PIRT#986103] Scotia Bank on scotlabank.tk --> www.ipzp.n
Reply with quote

Phish Alert
 
 Full Report: CastleCops Link/Scotia_Bank_phish986103.html
 
 
This Phish was active at the time of this report.IP Converted: 217.119.57.22

dword = 3648469270
hex1 = 0xd9773916
hex2 = 0xd9.0x77.0x39.0x16
oct = 0331.0167.071.026
View CIDR AS31100 Report: http://www.cidr-report.org/cgi-bin/as-report?as=31100

"31100 | DE | ripencc | 2004-02-26 | SYNNET-WE synergetic AG"<br />
Extended information for AS31100:
State/Province:
Country: de
Responsible Domain: synergetic.de
Abuse Email: aygan@synergetic.de
IP Converted: 85.90.206.110

dword = 1432014446
hex1 = 0x555ace6e
hex2 = 0x55.0x5a.0xce.0x6e
oct = 0125.0132.0316.0156
URL http://scotlabank.tk/
redirects to
URL http://www.ipzp.net/.www.scotiabank.com/Source for URL http://scotlabank.tk/


<html>
<head>
<title>scotlabank.tk</title>
<meta name="description" content="scotlabank.tk">
<meta name="keywords" content="scotlabank.tk">
</head>
<frameset rows="*,0" framespacing="0" border="0" frameborder="NO">
<frame src="http://www.ipzp.net/.www.scotiabank.com/" name="dot_tk_frame_content" scrolling="auto" noresize>
</frameset>
<noframes>
<body>
</body>
</noframes>

</html>
Changed status to confirmed phish.View CIDR AS34248 Report: http://www.cidr-report.org/cgi-bin/as-report?as=34248

"34248 | UA | ripencc | 2004-11-26 | VELTON-TC-AS Company group _Velton.Telecom_"<br />
Extended information for AS34248:
State/Province:
Country: ua
Responsible Domain: rocket.kharkov.ua
Abuse Email: rvv@rocket.kharkov.ua

Quote:
http://scotlabank.tk/

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> PIRT Fried Phish Reports All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer