[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20040215182812.SEMF83660.fep01-mail.bloor.is.net.cable.rogers.com@BillDell>
From: full-disclosure at royds.net (Bill Royds)
Subject: http://federalpolice.com:article872@...5686747
They are both phishing type lines to obscured URL.
The first is standard one (that no longer works with patched IE) so the
phisher has used the second which uses octal codes for the IP address to
disguise it.
Here is a Sam Spade decode of the second address
02/15/04 13:22:57 dns http://0100.035.0255.0133
Address 0100.035.0255.0133 is 64.29.173.91
nslookup 64.29.173.91
Canonical name: arpa-173.091.atl-001.abraxis.com
Addresses:
64.29.173.91
The first (as decimal IP) gets the same host so you know who to complain to
(abraxis.com)
Organization:
Abraxis Networks, Inc.
Jeff Euton
2800 Simpson Circle NW
Norcross GA 30071
United States
Phone: 770-729-9699
Fax: 770-729-9247
support@...axis.com
Registrar Name: addresscreation.com
Registrar Whois: whois.addresscreation.com
Registrar Homepage: http://addresscreation.com
Domain Name: abraxis.com
Created on: 10/22/1995
Expires on: 10/21/2004
Record Last Updated on: 10/13/2003
Administrative Contact:
Abraxis Networks, Inc.
Jeff Euton
2800 Simpson Circle NW
Norcross GA 30071
United States
Phone: 770-729-9699
Fax: 770-729-9247
support@...axis.com
Billing Contact:
Abraxis Networks, Inc.
Jeff Euton
2800 Simpson Circle NW
Norcross GA 30071
United States
Phone: 770-729-9699
Fax: 770-729-9247
support@...axis.com
Technical Contact:
Abraxis Networks, Inc.
Jeff Euton
2800 Simpson Circle NW
Norcross GA 30071
United States
Phone: 770-729-9699
Fax: 770-729-9247
support@...axis.com
-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Lee
Sent: February 15, 2004 11:46 AM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] http://federalpolice.com:article872@...5686747
I have been getting the below mail from numerous email sources all day, can
anyone else confirm this mail is flying around?
Regards
----------------------------------------------------------------------------
----
>From : emerson@...enze.linux.it
It has come to my attention that you are being under the police
investigation.
Is that true? Have you really commited such crimes?
Please read the following article located at:
http://federalpolice.com:article872@...5686747
or at:
http://0100.035.0255.0133
Sincerely,
Your old friend
----------------------------------------------------------------------------
----
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Powered by blists - more mailing lists