Rock phish report Jul 26, 2007

Author

All Replies

nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL
kudos:7

Reviews:

·AT&T U-Verse

1 edit

reply to nwrickert

The Thursday report:

14814 81.215.226.34     userconfirmationform-id6704444956.ebay.com.tryret.biz
14816 81.215.226.34     moneymanagergps.session-96724.citizensbank.com.klinher.com
14827 NXDOMAIN          moneymanagergps.session-90070080.citizensbank.com.port.kg
14828 NXDOMAIN          moneymanagergps.session-2964757.citizensbank.com.m1.kg
14829 phish_is_down     moneymanagergps.session-658687.citizensbank.com.buhank.ws
14830 NXDOMAIN          moneymanagergps.session-36755.citizensbank.com.kolobokid.hk
14831 NXDOMAIN          moneymanagergps.session-78063.citizensbank.com.pachuser.hk
14832 NXDOMAIN          moneymanagergps.session-488675.citizensbank.com.cordchi.cc
14833 NXDOMAIN          moneymanagergps.session-569906917.citizensbank.com.floher.biz
14834 24.137.123.184    nfbconnect-34938890.northforkbank.com.kgs.kg
14835 NXDOMAIN          moneymanagergps.session-261913669.citizensbank.com.cordchi.cc
14836 NXDOMAIN          userconfirmationform-id91705.ebay.com.buhank.info
14837 NXDOMAIN          moneymanagergps.session-86544808.citizensbank.com.toptenret.us
14840 81.215.226.34     moneymanagergps.session-216458.citizensbank.com.troniek.com
14842 24.137.123.184    nfbconnect-07219.northforkbank.com.stack.kg
14852 202.158.89.132    moneymanagergps.session-313159.citizensbank.com.mulity.st
14853 NXDOMAIN          moneymanagergps.session-97701488.citizensbank.com.toptenret.us
14855 200.109.61.147    moneymanagergps.session-70782.citizensbank.com.mulity.st

Domain registration info

Phish domain Registrar


buhank.info     REGISTER.COM            7/25/2007 (cancelled)
buhank.ws       unknown                 7/25/2007 (suspended)
cordchi.cc      eNom                    7/24/2007 (suspended)
floher.biz      GKG.NET                 7/25/2007 (suspended)
kgs.kg          www.domain.kg           7/19/2007
klinher.com     REGISTER.COM            7/25/2007
kolobokid.hk    HKDNR                   7/24/2007 (suspended)
m1.kg           www.domain.kg           7/19/2007 (suspended)
mulity.st       ST Registry             7/26/2006
pachuser.hk     HKDNR                   7/24/2007 (suspended)
port.kg         www.domain.kg           7/19/2007 (suspended)
stack.kg        www.domain.kg           7/16/2006
toptenret.us    unknown                 7/??/2007
troniek.com     REGISTER.COM            7/25/2007
tryret.biz      REGISTER.COM            7/25/2007

DNS server domain Registrar


jumpmo.com      REGISTER.COM            6/21/2007
mainvg.com      REGISTER.COM            7/11/2007
nsduit.com      REGISTER.COM            7/25/2007? (cancelled)
sertwer.com     GKG.NET                 7/25/2007 (suspended)
troniek.com     REGISTER.COM            7/25/2007

--
AT&T dsl; Westell 2200 modem/router; SuSE 10.1; firefox 2.0.0.5

to forum · permalink · 2007-07-26 23:39:42 · (locked)

Broadband Tech > Security > Scam and Phishbusters > Rock phish information

Rock phish report Jul 26, 2007