[Dshield] Just received

Axel Pettinger api at worldonline.de
Thu Feb 2 23:11:19 GMT 2006


Aaron Lewis wrote:
> 
> Phishing attempt for Town North Bank in Texas. I received an email 
> linking me to a site asking for all the account information. I'm not 
> a customer there but the URL I was lead to is
> 
> http://200.93.202.10/~almost/www.tnbonlinebanking.com/signon.html

Obviously not the only phishing attempt ...

"Chase Online" Phishing Site:
http://200.93.202.10/~almost/chaseonline.chase.com/prospect/usr/index.htm

"USF Federal Credit Union" Phishing Site:
http://200.93.202.10/~almost/creditunion/index.htm

----------------------------------------------------
 IP range     :    200.93.192.0 - 200.93.223.255
 Infos        :    Telconet S.A
 Infos        :    Kennedy Norte MZ, 109,
 Infos        :    59342 - Guayaquil -
 Country      :    Ecuador (EC)
 Abuse E-mail :    hostmaster at telconet.net
 Source       :    LACNIC
----------------------------------------------------

http://200.93.202.10/~almost/ = http://athos.tuecuador.com/~almost/

----------------------------------------------------
Registrant:
   NETFREE
   Plaza Quil of 2
   Guayaquil, GUAYAS 000
   Ecuador

   Registered through: GoDaddy.com
   Domain Name: TUECUADOR.COM
      Created on: 21-Dec-99
      Expires on: 21-Dec-06
      Last Updated on: 07-Dec-05

   Administrative Contact:
      Orrantia, Antonio  orrant_a at bellsouth.net
      7921 N.W. 67 Street
      Miami, Florida 33166
      United States
      305-594-3394      Fax -- 305-594-3394
   Technical Contact:
      Orrantia, Antonio  orrant_a at bellsouth.net
      7921 N.W. 67 Street
      Miami, Florida 33166
      United States
      305-594-3394      Fax -- 305-594-3394

   Domain servers in listed order:
      ATHOS.TUECUADOR.COM
      PORTHOS.TUECUADOR.COM
----------------------------------------------------


Regards,
Axel Pettinger


More information about the list mailing list