 MGDPremium,MVM join:2002-07-31 kudos:9 | I see Phish submit 42363:»/phishtrack?pi···3&urls=1 is for the same NYUGEWN.BE fraud domain, while Phish submit 42364:»/phishtrack?pi···4&urls=1 is for a fraud domain YHNBAM.CO.IM
The fraudulently registered NYUGEWN.BE per ICANN regulations is eligible for immediate revocation:
=================================== Domain Name NYUGEWN.BE Status REGISTERED Registered December 1, 2009 Last update December 1, 2009 1:57 PM
Licensee Name: Tom McCarthy Organisation: Tom McCarthy
Language English
Address: 13895 Keiber Rd., 48838 Antwerp Belgium
Phone +32.7812713
Email rickys36246@hotmail.com
Agent technical contacts:
Name Active 24 ASA - Registry Department Organisation Active 24 ASA
Language English:
Address Pilestredet 75C P.O. box 5198 Majorstua N-0302 Oslo Norway Phone +47.21933000 Fax +47.21933001 Email registry[@]registry.active24.com
Agent Organisation Active 24 ASA
Website www.active24.be/ Nameservers
ns1.davies-estates.com ns1.pandachine.com =================================== File: registry[@]registry.active24.com & »www.dns.be/public/whois/FileComp···=nyugewn
The fraudulent registration listing as being in Antwerp, Belgium., belongs to this individual / business:
Outdoor Optic Shop
Tom McCarthy 13895 Keiber Rd. Greenville, Mi 48838 616-754-5530
»www.armedforcesjournal.com/black···irectory
Not sure if the owner's card data was used for payment.
The DNS servers domains are the best targets, since these phish viri spams are bot mailed, and bot hosted. Also likely to be fast flux dns.
MGD |