They are both phishing type lines to obscured URL. The first is standard one (that no longer works with patched IE) so the phisher has used the second which uses octal codes for the IP address to disguise it. Here is a Sam Spade decode of the second address 02/15/04 13:22:57 dns http://0100.035.0255.0133 Address 0100.035.0255.0133 is 64.29.173.91 nslookup 64.29.173.91 Canonical name: arpa-173.091.atl-001.abraxis.com Addresses: 64.29.173.91
The first (as decimal IP) gets the same host so you know who to complain to (abraxis.com) Organization: Abraxis Networks, Inc. Jeff Euton 2800 Simpson Circle NW Norcross GA 30071 United States Phone: 770-729-9699 Fax: 770-729-9247 [EMAIL PROTECTED] Registrar Name: addresscreation.com Registrar Whois: whois.addresscreation.com Registrar Homepage: http://addresscreation.com Domain Name: abraxis.com Created on: 10/22/1995 Expires on: 10/21/2004 Record Last Updated on: 10/13/2003 Administrative Contact: Abraxis Networks, Inc. Jeff Euton 2800 Simpson Circle NW Norcross GA 30071 United States Phone: 770-729-9699 Fax: 770-729-9247 [EMAIL PROTECTED] Billing Contact: Abraxis Networks, Inc. Jeff Euton 2800 Simpson Circle NW Norcross GA 30071 United States Phone: 770-729-9699 Fax: 770-729-9247 [EMAIL PROTECTED] Technical Contact: Abraxis Networks, Inc. Jeff Euton 2800 Simpson Circle NW Norcross GA 30071 United States Phone: 770-729-9699 Fax: 770-729-9247 [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lee Sent: February 15, 2004 11:46 AM To: [EMAIL PROTECTED] Subject: [Full-Disclosure] http://federalpolice.com:[EMAIL PROTECTED] I have been getting the below mail from numerous email sources all day, can anyone else confirm this mail is flying around? Regards ---------------------------------------------------------------------------- ---- >From : [EMAIL PROTECTED] It has come to my attention that you are being under the police investigation. Is that true? Have you really commited such crimes? Please read the following article located at: http://federalpolice.com:[EMAIL PROTECTED] or at: http://0100.035.0255.0133 Sincerely, Your old friend ---------------------------------------------------------------------------- ---- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
