dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
16760

nwrickert
Mod
join:2004-09-04
Geneva, IL

nwrickert

Mod

Rock phish report Jul 17, 2007

The report for Tuesday:
14570 66.67.150.36      onlinetreasurymanager-id936587.suntrust.com.fri.hk
14571 69.230.220.83     nfbconnect-48489970.northforkbank.com.kkl.kg
14572 202.59.198.218    onlinetreasurymanager-id62493.suntrust.com.highpont.hk
 

Domain registration info

   Phish domain         Registrar

fri.hk HKDNR 7/17/2007
highpont.hk HKDNR 7/13/2007 (suspended)
kkl.kg www.domain.kg 7/17/2007


   DNS server domain         Registrar

ghbdtn.hk HKDNR 7/11/2007
jumpmo.com REGISTER.COM 6/21/2007
mainvg.com REGISTER.COM 7/11/2007
nwrickert

nwrickert

Mod

Rock phish report Jul 18, 2007

The report for Wednesday:
14576 24.67.46.85       onlinetreasurymanager-id9038673.suntrust.com.utr.hk
14579 80.98.202.120     onlinetreasurymanager-id211440470.suntrust.com.fri.hk
14596 65.189.145.246    nfbconnect-412736146.northforkbank.com.kkl.kg
14598 80.98.202.120     onlinetreasurymanager-id919860696.suntrust.com.uqq.hk
14605 84.146.155.143    onlinetreasurymanager-id6993091.suntrust.com.uqq.hk
14621 69.87.138.84      nfbconnect-828829356.northforkbank.com.dlo.st
 

Domain registration info

   Phish domain         Registrar

dlo.st ST Registry 7/17/2007
fri.hk HKDNR 7/17/2007
kkl.kg www.domain.kg 7/17/2007
uqq.hk HKDNR 7/17/2007
utr.hk HKDNR 7/17/2007


   DNS server domain         Registrar

jumpmo.com REGISTER.COM 6/21/2007
mainvg.com REGISTER.COM 7/11/2007
nwrickert

nwrickert

Mod

Rock phish report Jul 19, 2007

The Thursday report:
14629 80.133.200.216    nfbconnect-4668489717.northforkbank.com.stack.kg
14632 24.158.75.65      nfbconnect-3475101.northforkbank.com.dlo.st
14634 75.21.240.11      nfbconnect-592669434.northforkbank.com.kkl.kg
 

Domain registration info

   Phish domain         Registrar

dlo.st ST Registry 7/17/2007
kkl.kg www.domain.kg 7/17/2007
stack.kg www.domain.kg 7/16/2006


   DNS server domain         Registrar

jumpmo.com REGISTER.COM 6/21/2007
nwrickert

nwrickert

Mod

Rock phish report Jul 20, 2007

Here is the report for Friday:
14644 NXDOMAIN          userconfirmationform-id620675.ebay.com.cattyl.us
14645 200.101.34.179    nfbconnect-48211832.northforkbank.com.roikevr.info
14648 74.78.114.62      nfbconnect-46000043.northforkbank.com.dlo.st
14651 74.78.114.62      nfbconnect-7894529.northforkbank.com.kkl.kg
14657 70.51.93.93       nfbconnect-1259694.northforkbank.com.dlo.st
14658 70.51.93.93       nfbconnect-95068.northforkbank.com.kkl.kg
 

Domain registration info

   Phish domain         Registrar

cattyl.us REGISTER.COM 7/19/2007 (cancelled)
dlo.st ST Registry 7/17/2007
kkl.kg www.domain.kg 7/17/2007
roikevr.info REGISTER.COM 7/19/2007 (cancelled)


   DNS server domain         Registrar

baroner.com REGISTER.COM 7/19/2007 (cancelled)
hkxeop.com REGISTER.COM 7/19/2007 (cancelled)
jumpmo.com REGISTER.COM 6/21/2007
nwrickert

nwrickert

Mod

Rock phish report Jul 21, 2007

The report for Saturday:
14681 200.47.150.132    nfbconnect.northforkbank.com.web23nebrusf.mimosend.hk
14687 81.215.2.90       userconfirmationform-id759662183.ebay.com.morpas.st
 

Domain registration info

   Phish domain         Registrar

mimosend.hk HKDNR 7/06/2007
morpas.st ST Registry 7/20/2007


   DNS server domain         Registrar

mimoservice.hk HKDNR 7/06/2007
nwrickert

nwrickert

Mod

Rock phish report Jul 22, 2007

It has been a week since we last saw a National City phish. It has been several days since we last saw SunTrust. NorthFork Bank is still being actively targetted. And there have been a couple aimed at eBay.

Here is the Sunday report:
14713 24.217.108.65     nfbconnect-9573475977.northforkbank.com.stack.kg
14714 24.217.108.65     nfbconnect-05017.northforkbank.com.dlo.st
14716 65.189.145.246    nfbconnect-031480.northforkbank.com.stack.kg
14717 81.182.0.3        nfbconnect-924904.northforkbank.com.kkl.kg
14730 24.158.75.65      nfbconnect-196634861.northforkbank.com.kkl.kg
 

Domain registration info

   Phish domain         Registrar

dlo.st ST Registry 7/17/2007
kkl.kg www.domain.kg 7/17/2007
stack.kg www.domain.kg 7/16/2006


DNS server domain         Registrar

jumpmo.com REGISTER.COM 6/21/2007
nwrickert

nwrickert

Mod

Rock phish report Jul 23, 2007

Here is the report for Monday:
14741 65.189.145.246    nfbconnect-88184279.northforkbank.com.kgs.kg
14744 74.78.114.62      nfbconnect-183260.northforkbank.com.stack.kg
14745 74.78.114.62      nfbconnect-777768.northforkbank.com.kkl.kg
14746 NXDOMAIN          userconfirmationform-id74239001.ebay.com.brolok.biz
14747 74.78.114.62      nfbconnect-633034773.northforkbank.com.kkl.kg
14748 200.101.34.179    userconfirmationform-id155702397.ebay.com.mimocorp.hk
14749 74.78.114.62      nfbconnect-60663.northforkbank.com.dlo.st
14750 74.78.114.62      nfbconnect-2259190979.northforkbank.com.kkl.kg
14751 74.78.114.62      nfbconnect-374560081.northforkbank.com.kgs.kg
14752 75.41.15.168      nfbconnect-198985.northforkbank.com.dlo.st
14753 74.78.114.62      moneymanagergps.session-522909647.citizensbank.com.mod.kg
14754 75.41.15.168      nfbconnect-18108.northforkbank.com.stack.kg
14755 75.41.15.168      nfbconnect-166208375.northforkbank.com.stack.kg
14756 75.41.15.168      nfbconnect-43864.northforkbank.com.kkl.kg
14757 75.41.15.168      nfbconnect-8413639406.northforkbank.com.stack.kg
14760 200.101.34.179    webinfocus.id-171723564.mandtbank.com.olfor.hk
14765 phish_is_down     webinfocus.id-83822284.mandtbank.com.lhot.nu
14766 69.230.213.108    moneymanagergps.session-1211213.citizensbank.com.ab.kg
 

Domain registration info

   Phish domain         Registrar

ab.kg www.domain.kg 7/19/2007
brolok.biz unknown 7/19/2007? (cancelled)
dlo.st ST Registry 7/17/2007
kgs.kg www.domain.kg 7/19/2007
kkl.kg www.domain.kg 7/17/2007
lhot.nu www.nunames.nu 7/23/2007
mimocorp.hk HKDNR 7/06/2007
mod.kg www.domain.kg 7/19/2007
olfor.hk HKDNR 7/23/2007
stack.kg www.domain.kg 7/16/2006


DNS server domain         Registrar

bonterson.st ST Registry 7/??/2007 (suspended)
jumpmo.com REGISTER.COM 6/21/2007
mainvg.com REGISTER.COM 7/11/2007
mimoservice.hk HKDNR 7/06/2007
modernid.hk HKDNR 7/18/2007 (suspended)
nwrickert

nwrickert

Mod

Rock phish report Jul 24, 2007

The Tuesday report:
14775 NXDOMAIN          webinfocus.id-615337.mandtbank.com.gfhdmode.hk
14777 NXDOMAIN          webinfocus.id-45999.mandtbank.com.lorii.hk
14780 NXDOMAIN          moneymanagergps.session-748681.citizensbank.com.port.kg
14783 81.203.21.33      nfbconnect-8636715151.northforkbank.com.kgs.kg
14784 81.215.226.34     webinfocus.id-40462.mandtbank.com.hobotid.hk
14785 NXDOMAIN          moneymanagergps.session-722132.citizensbank.com.m1.kg
14786 68.77.160.127     nfbconnect-564788.northforkbank.com.kgs.kg
 

Domain registration info

   Phish domain         Registrar

gfhdmode.hk HKDNR 7/18/2007 (suspended)
hobotid.hk HKDNR 7/24/2007
kgs.kg www.domain.kg 7/19/2007
lorii.hk HKDNR 7/23/2007 (suspended)
m1.kg www.domain.kg 7/19/2007 (suspended)
port.kg www.domain.kg 7/19/2007 (suspended)


DNS server domain         Registrar

jumpmo.com REGISTER.COM 6/21/2007
mainvg.com REGISTER.COM 7/11/2007
mimoservice.hk HKDNR 7/06/2007 (suspended)
nwrickert

nwrickert

Mod

Rock phish report Jul 25, 2007

The report for Wednesday:
14790 phish_is_down     webinfocus.id-957478063.mandtbank.com.hrugor.ws
14810 NXDOMAIN          userconfirmationform-id413322394.ebay.com.cordet.cc
14811 81.215.226.34     moneymanagergps.session-8834908.citizensbank.com.tyhsa.us
14812 NXDOMAIN          moneymanagergps.session-4056925555.citizensbank.com.cordet.cc
14813 NXDOMAIN          moneymanagergps.session-50380.citizensbank.com.cordet.cc
 

Domain registration info

   Phish domain         Registrar

cordet.cc eNom 7/24/2007 (suspended)
hrugor.ws unknown 7/??/2007 (cancelled?)
tyhsa.us REGISTER.COM 7/25/2007


DNS server domain         Registrar

cordchi.cc eNom 7/24/2007 (suspended)
laninform.com REGISTER.COM 7/25/2007
nwrickert

1 edit

nwrickert

Mod

Rock phish report Jul 26, 2007

The Thursday report:
14814 81.215.226.34     userconfirmationform-id6704444956.ebay.com.tryret.biz
14816 81.215.226.34     moneymanagergps.session-96724.citizensbank.com.klinher.com
14827 NXDOMAIN          moneymanagergps.session-90070080.citizensbank.com.port.kg
14828 NXDOMAIN          moneymanagergps.session-2964757.citizensbank.com.m1.kg
14829 phish_is_down     moneymanagergps.session-658687.citizensbank.com.buhank.ws
14830 NXDOMAIN          moneymanagergps.session-36755.citizensbank.com.kolobokid.hk
14831 NXDOMAIN          moneymanagergps.session-78063.citizensbank.com.pachuser.hk
14832 NXDOMAIN          moneymanagergps.session-488675.citizensbank.com.cordchi.cc
14833 NXDOMAIN          moneymanagergps.session-569906917.citizensbank.com.floher.biz
14834 24.137.123.184    nfbconnect-34938890.northforkbank.com.kgs.kg
14835 NXDOMAIN          moneymanagergps.session-261913669.citizensbank.com.cordchi.cc
14836 NXDOMAIN          userconfirmationform-id91705.ebay.com.buhank.info
14837 NXDOMAIN          moneymanagergps.session-86544808.citizensbank.com.toptenret.us
14840 81.215.226.34     moneymanagergps.session-216458.citizensbank.com.troniek.com
14842 24.137.123.184    nfbconnect-07219.northforkbank.com.stack.kg
14852 202.158.89.132    moneymanagergps.session-313159.citizensbank.com.mulity.st
14853 NXDOMAIN          moneymanagergps.session-97701488.citizensbank.com.toptenret.us
14855 200.109.61.147    moneymanagergps.session-70782.citizensbank.com.mulity.st
 

Domain registration info

   Phish domain         Registrar

buhank.info REGISTER.COM 7/25/2007 (cancelled)
buhank.ws unknown 7/25/2007 (suspended)
cordchi.cc eNom 7/24/2007 (suspended)
floher.biz GKG.NET 7/25/2007 (suspended)
kgs.kg www.domain.kg 7/19/2007
klinher.com REGISTER.COM 7/25/2007
kolobokid.hk HKDNR 7/24/2007 (suspended)
m1.kg www.domain.kg 7/19/2007 (suspended)
mulity.st ST Registry 7/26/2006
pachuser.hk HKDNR 7/24/2007 (suspended)
port.kg www.domain.kg 7/19/2007 (suspended)
stack.kg www.domain.kg 7/16/2006
toptenret.us unknown 7/??/2007
troniek.com REGISTER.COM 7/25/2007
tryret.biz REGISTER.COM 7/25/2007


DNS server domain         Registrar

jumpmo.com REGISTER.COM 6/21/2007
mainvg.com REGISTER.COM 7/11/2007
nsduit.com REGISTER.COM 7/25/2007? (cancelled)
sertwer.com GKG.NET 7/25/2007 (suspended)
troniek.com REGISTER.COM 7/25/2007