Tuesday, September 14. 2004
They must have just been taking a break
We're back to the CitiBank phishing again, and it doesn't even appear that it's any different, so the dropoff in instances must have just been a fluke. Interestingly, this one came through today. It was stopped by my SPAM filters on my own box, but on GMail, where I copied all my mail, it came through.
The phish is on a server called beastie.nameserve.org. NAMESERVE.ORG is registered by:
Registrant ID:GODA-01573882
Registrant Name:Registration Private
Registrant Organization:Domains by Proxy, Inc.
Registrant Street1:15111 N Hayden Rd., Suite 160
Registrant Street2:PMB353
Registrant City:Scottsdale
Registrant State/Province:Arizona
Registrant Postal Code:85260
Registrant Country:US
Registrant Phone:+1.4806242599
Registrant Email:NAMESERVE.ORG@domainsbyproxy.com
The webpage at beastie.nameserve.org is a uninitialized cPanel site. Could be a hacked server, or it could be the owner.
Trackbacks
Trackback specific URI for this entry
No Trackbacks