Broadband Tech > Security > Scam and Phishbusters > Rock phish information - continued

reply to nwrickert

Rock phish report Dec 14, 2008

33695 NXDOMAIN          companies.bankofamerica.serverdemobank.com
 

serverdemobank.com BIZCN.COM            12/09/2008 (suspended)

Rock phish report Dec 15, 2008

33702 dns_temp_fail     treas-mgt.frostbank.com.md-021.cz
33708 24.34.244.95(7)   treas-mgt.frostbank.com.id-x02.cz
 

id-x02.cz       REG-GANDI               12/13/2008
md-021.cz       REG-GANDI               12/13/2008

santamores.net  REGISTER.COM            12/10/2008
sekprovision.com REGISTER.COM           12/03/2008
stereogreen.net REGISTER.COM            12/08/2008

Rock phish report Dec 16, 2008

33723 NXDOMAIN          treas-mgt.frostbank.com.pt017.es
33726 NXDOMAIN          treas-mgt.frostbank.com.pt078.es
 

pt017.es        REG-GANDI               12/13/2008
pt078.es        REG-GANDI               12/13/2008

Rock phish report Dec 17, 2008

33749 phish_is_down     businessaccess.citibank.citigroup.com.identify-1.cz
 

identify-1.cz   REG-GANDI               12/10/2008

sekprovision.com REGISTER.COM           12/03/2008 (suspended)

Rock phish report Dec 18, 2008

33775 phish_is_down     treas-mgt.frostbank.com.mdrt.tk
 

mdrt.tk         unknown                 12/15/2008? (cancelled?)

Rock phish report Dec 19, 2008

33810 24.136.214.30(5)  video.classmates.disbursements.user-u7bjv9c42.invitationclassmates.com
33811 24.136.214.30(5)  video.classmates.content.user-e35i54e9a.windowsplaeyraddons.com
33812 24.136.214.30(5)  video.classmates.subject.user-y0d09onxw.invitationclassmates.com
 

invitationclassmates.com BIZCN.COM      12/19/2008
windowsplaeyraddons.com BIZCN.COM       12/19/2008

changjon.com    BIZCN.COM               12/19/2008

Rock phish report Dec 20, 2008

33816 69.150.74.91(5)   video.classmates.corporate.user-ntejh6bbj.windowsplaeyraddons.com
33817 69.150.74.91(5)   video.classmates.accessservlet.user-ffvjrzdok.addonsforadobeflash.com
33822 62.31.247.147(5)  video.classmates.mixed.user-8rxm6agzj.highdemoplayer.com
33823 62.31.247.147(5)  video.classmates.cebmainservlet.user-6btcsg25m.flashadobeplayer9.com
33825 62.31.247.147(5)  video.classmates.securedocuments.user-qdadyjzzp.downloadkodek.com
33826 24.148.132.49(5)  video.classmates.onlineservlet.user-l09eq2wrp.downloadkodek.com
33828 24.148.132.49(5)  video.classmates.mixed.user-6eiczvl8n.downloadkodek.com
33829 24.148.132.49(5)  video.classmates.cebmainservlet.user-dclei6sls.updateyourplayer.com
33830 24.148.132.49(5)  video.classmates.cebmainservlet.user-1krb5srfl.adobedemoversion.com
33831 24.148.132.49(5)  video.classmates.authentication.user-9i50arjv7.flashadobeplayer9.com
 

addonsforadobeflash.com BIZCN.COM       12/19/2008
adobedemoversion.com BIZCN.COM          12/12/2008
downloadkodek.com BIZCN.COM             12/12/2008
flashadobeplayer9.com BIZCN.COM         12/12/2008
highdemoplayer.com BIZCN.COM            12/12/2008
updateyourplayer.com BIZCN.COM          12/12/2008
windowsplaeyraddons.com BIZCN.COM       12/19/2008

changjon.com    BIZCN.COM               12/19/2008
spledids.com    BIZCN.COM               12/12/2008

Rock phish report Dec 21, 2008

33834 24.136.176.91(5)  video.classmates.serveronline.user-nh231yfvz.downloadkodek.com
33835 24.136.176.91(5)  video.classmates.multipart.user-ek5cty6m8.flashadobeplayer9.com
33836 24.136.176.91(5)  video.classmates.emberuiweb.user-lgdq6o5cv.highdemoplayer.com
33837 24.136.176.91(5)  video.classmates.version.user-773n3xynb.adobedemoversion.com
33838 24.136.176.91(5)  video.classmates.logon.user-0bpagtisf.highdemoplayer.com
 

adobedemoversion.com BIZCN.COM          12/12/2008
downloadkodek.com BIZCN.COM             12/12/2008
flashadobeplayer9.com BIZCN.COM         12/12/2008
highdemoplayer.com BIZCN.COM            12/12/2008

spledids.com    BIZCN.COM               12/12/2008

Rock phish report Dec 22, 2008

33843 24.2.38.159(5)    video.classmates.cashmanagement.user-grn1awl6e.classmatesupdates.com
33844 24.2.38.159(5)    video.classmates.arekeninginfo.user-wsssmhgyj.classmatesupdates.com
33845 24.2.38.159(5)    video.classmates.content.user-a8pqsl2ac.player10foradobe.com
33846 24.2.38.159(5)    video.classmates.servlet.user-t287duyo7.classmatesupdates.com
33847 24.2.38.159(5)    video.classmates.accessservlet.user-tg33xawdu.adobeflashclassmates.com
33849 24.2.38.159(5)    video.classmates.filetime.user-gxk5gtqsx.downloadupdateadobe10.com
33857 24.2.38.159(5)    video.classmates.version.user-446do4wep.classmatesupdates.com
 

adobeflashclassmates.com BIZCN.COM      12/22/2008
classmatesupdates.com BIZCN.COM         12/22/2008
downloadupdateadobe10.com BIZCN.COM     12/22/2008
player10foradobe.com BIZCN.COM          12/22/2008

licenseforsmarts.com BIZCN.COM          12/22/2008

Rock phish report Dec 23, 2008

33867 phish_is_down     video.classmates.profile.user-2h218mbhg.player10foradobe.com
33869 phish_is_down     video.classmates.logon.user-szxuewty0.adobeflashclassmates.com
33870 NXDOMAIN          video.classmates.ibsweb.user-1qu0z5wbn.downloadupdateadobe10.com
33871 NXDOMAIN          video.classmates.secureconnection.user-07zbxstk7.meetingclassmaterss.com
33872 phish_is_down     video.classmates.serveronline.user-zxqhqv9m5.adobeflashclassmates.com
33875 NXDOMAIN          ebanking-services.citizensbanking.com.id-r117.com
33877 12.202.1.12(15)   ebanking-services.citizensbanking.com.file-id011.com
33878 12.202.1.12(15)   ebanking-services.citizensbanking.com.file-id017.co.in
33879 12.202.1.12(5)    video.classmates.ibsweb.user-szbxaikz5.restartplayers.com
 

adobeflashclassmates.com BIZCN.COM      12/22/2008
downloadupdateadobe10.com BIZCN.COM     12/22/2008 (cancelled)
file-id011.com  INFO AVENUE             12/22/2008
file-id017.co.in DIRECTI INFORMATION    12/22/2008
id-r117.com     INFO AVENUE             12/22/2008 (suspended)
meetingclassmaterss.com BIZCN.COM       12/22/2008 (cancelled)
player10foradobe.com BIZCN.COM          12/22/2008
restartplayers.com TODAYNIC.COM         12/23/2008

brekpost.net    REGISTER.COM            12/12/2008
licenseforsmarts.com BIZCN.COM          12/22/2008 (cancelled)
verygoodhosts.com BIZCN.COM             12/22/2008

Rock phish report Dec 24, 2008

33883 NXDOMAIN          video.classmates.management.user-h1vv1yu1.newflashadobe.com
33884 NXDOMAIN          video.classmates.cebmainservlet.user-entganjfj.newklassmates.com
33885 NXDOMAIN          video.classmates.accountverify.user-wdeymstct.reunionclassmates.com
33886 NXDOMAIN          video.classmates.management.user-y1co1ic1.newflashadobe.com
33887 NXDOMAIN          video.classmates.usermanage.user-1iigrh6sb.newklassmates.com
33902 12.202.7.201(5)   video.classmates.interstitialcontrol.user-o3dasz3vf.newyearclassmatess.com
33903 12.202.7.201(5)   video.classmates.verification.user-li3rz7rh2.getinstallations.com
33904 12.202.7.201(5)   video.classmates.logon.user-k1jp1mc1.installplayerss.com
33905 12.202.7.201(5)   video.classmates.statement.user-p82louvda.merrychristmassclass.com
33906 12.202.7.201(5)   video.classmates.cebmainservlet.user-lueiwbr5k.installplayerss.com
33907 12.202.7.201(5)   video.classmates.boundary.user-rvb1yk5a0.getinstallations.com
33908 12.202.7.201(5)   video.classmates.type.user-4q39etm9g.updtatedclassmates.com
33909 12.202.7.201(5)   video.classmates.forms.user-ont2sxst0.newyearclassmatess.com
33910 NXDOMAIN          video.classmates.cebmainservlet.user-x1fy1ds1.newklassmates.com
 

getinstallations.com TODAYNIC.COM       12/24/2008
installplayerss.com TODAYNIC.COM        12/24/2008
merrychristmassclass.com TODAYNIC.COM   12/24/2008
newflashadobe.com unknown               12/22/2008? (cancelled?)
newklassmates.com unknown               12/22/2008? (cancelled?)
newyearclassmatess.com TODAYNIC.COM     12/24/2008
reunionclassmates.com unknown           12/22/2008? (cancelled?)
updtatedclassmates.com TODAYNIC.COM     12/24/2008

happyhostings.com BIZCN.COM             12/24/2008

Rock phish report Dec 25, 2008

33913 NXDOMAIN          video.classmates.logininter.user-c1ou1pc1.newyearclassmatess.com
33914 NXDOMAIN          video.classmates.asp.user-z1hl1lz1.updtatedclassmates.com
33915 NXDOMAIN          video.classmates.logininter.user-l1wx1qu1.updtatedclassmates.com
33916 NXDOMAIN          video.classmates.content.user-g1ri1zh1.getinstallations.com
33917 NXDOMAIN          video.classmates.cookies.user-w1mr1cn1.installplayerss.com
33918 NXDOMAIN          video.classmates.type.user-n1mu1mv1.getinstallations.com
 

getinstallations.com TODAYNIC.COM       12/24/2008 (cancelled)
installplayerss.com TODAYNIC.COM        12/24/2008 (cancelled)
newyearclassmatess.com TODAYNIC.COM     12/24/2008 (suspended)
updtatedclassmates.com TODAYNIC.COM     12/24/2008 (suspended)

happyhostings.com BIZCN.COM             12/24/2008 (suspended)

Rock phish report Dec 26, 2008

33925 NXDOMAIN          video.classmates.forms.user-t1is1nh1.updtatedclassmates.com
33928 24.148.132.49(15) chaseonline.chase.com.idr-to7.us
 

idr-to7.us      INFO AVENUE             12/23/2008
updtatedclassmates.com TODAYNIC.COM     12/24/2008 (suspended)

fredooms.net    REGISTER.COM            12/13/2008
happyhostings.com BIZCN.COM             12/24/2008 (suspended)

Rock phish report Dec 27, 2008

33930 24.136.176.91(15) chaseonline.chase.com.dll-isapi.com
33935 12.202.1.12(5)    video.classmates.cashmanagement.user-5ayklagxy.startinstallflash.com
33936 12.202.1.12(5)    video.classmates.multipart.user-7j7l8yrhg.startinstallflash.com
33939 12.202.1.12(5)    video.classmates.securedocuments.user-iy03l6a01.installationsadobeflash10.com
33940 12.202.1.12(5)    video.classmates.emberuiweb.user-c1ai1tq1.happynewyearclassmates.com
33941 12.202.1.12(5)    video.classmates.launchpad.user-w1tb1rx1.reunionclassmates2009.com
33942 12.202.1.12(5)    video.classmates.authentication.user-88ul8ssmb.reunionclassmates2009.com
33943 12.202.1.12(5)    video.classmates.logon.user-rxg1qk9wn.happynewyearclassmates.com
33944 12.202.1.12(5)    video.classmates.filetime.user-2x23vpoup.startinstallflash.com
33946 12.202.1.12(5)    video.classmates.referencenumber.user-r1lw1jq1.happynewyearclassmates.com
33947 12.202.1.12(5)    video.classmates.cashmanagement.user-g1aw1qa1.reunionclassmates2009.com
33948 12.202.1.12(5)    video.classmates.version.user-d1pb1ue1.reunionclassmates2009.com
33952 12.202.1.12(5)    video.classmates.forms.user-m1ni1zc1.happynewyearclassmates.com
33954 12.202.1.12(5)    video.classmates.logininter.user-vbluvb7np.installationsadobeflash10.com
 

dll-isapi.com   INFO AVENUE             12/22/2008
happynewyearclassmates.com BIZCN.COM    12/26/2008
installationsadobeflash10.com BIZCN.COM 12/26/2008
reunionclassmates2009.com BIZCN.COM     12/26/2008
startinstallflash.com BIZCN.COM         12/26/2008

happynewyearhost.com BIZCN.COM          12/26/2008
hardandself.net REG-GANDI               12/19/2008

Rock phish report Dec 28, 2008

33956 NXDOMAIN          chaseonline.chase.com.dlls-to.mn
 

dlls-to.mn      DIRECTI INFORMATION     12/23/2008 (suspended)

Rock phish report Dec 30, 2008

33968 67.172.60.164(5)  video.classmates.priority.user-i7hu5g8gg.reinstallflash.com
33969 67.172.60.164(5)  video.classmates.businesslogin.user-h1cy1at1.indexguideclassmates.com
33970 67.172.60.164(5)  video.classmates.boundary.user-diwfr75kx.reinstallflash.com
33971 67.172.60.164(5)  video.classmates.management.user-f1ye1au1.newclasshost.com
33972 67.172.60.164(5)  video.classmates.mixed.user-t1xg1qb1.indexguideclassmates.com
33981 67.172.60.164(5)  video.classmates.accessservlet.user-w1mz1ai1.renewclassmates.com
33982 67.172.60.164(5)  video.classmates.cashmanagement.user-r1ix1yb1.classmatersunion.com
33983 67.172.60.164(5)  video.classmates.processlogon.user-14xysjbt6.reinstallflash.com
33984 67.172.60.164(5)  video.classmates.cebmainservlet.user-nf3vt6jh8.reinstallflash.com
33987 67.172.60.164(5)  video.classmates.secureconnection.user-hw5u056am.reinstallflash.com
33988 67.172.60.164(5)  video.classmates.management.user-zr9ugr1cx.newclasshost.com
33989 67.172.60.164(5)  video.classmates.privacy.user-hizh6tk0c.classmatersunion.com
33991 67.172.60.164(5)  video.classmates.accountverify.user-4mb92d21m.reinstallflash.com
33992 67.172.60.164(5)  video.classmates.serveronline.user-8erbnj73j.classmatersunion.com
33993 67.172.60.164(5)  video.classmates.version.user-q1qs1ox1.reinstallflash.com
33994 67.172.60.164(5)  video.classmates.logon.user-zf7t8y333.classmatersunion.com
33995 67.172.60.164(5)  video.classmates.content.user-m1hz1yg1.classmatersunion.com
 

classmatersunion.com BIZCN.COM          12/28/2008
indexguideclassmates.com BIZCN.COM      12/28/2008
newclasshost.com BIZCN.COM              12/28/2008
reinstallflash.com BIZCN.COM            12/28/2008
renewclassmates.com BIZCN.COM           12/28/2008

goodnewyearhosting.com BIZCN.COM        12/28/2008