>From: Tom [mailto:[EMAIL PROTECTED] > They are gone.
Crap. Not enough sleep :) I managed to mangle the first one, it should be http://sip.bpcs.net/secure.fundsxpress.com/start/C2WSBLI/index.html $ curl http://sip.bpcs.net/secure.fundsxpress.com/start/C2WSBLI/index.html <html><head><!-- pile:fxstart page:redirect --><title>West Suburban Bank</title> --snip-- >http://secure.fundsxpress.wires.cc/start/C2WSBLI/ This one is a dns round robin of 3 ip's $ host secure.fundsxpress.wires.cc secure.fundsxpress.wires.cc has address 210.202.16.43 secure.fundsxpress.wires.cc has address 210.255.70.249 secure.fundsxpress.wires.cc has address 205.150.148.99 210.255.70.249 seems to have been taken down but the other two are still up: $ curl 210.202.16.43/start/C2WSBLI/ <html><head><!-- pile:fxstart page:redirect --><title>West Suburban Bank</title> --snip-- $ curl 205.150.148.99/start/C2WSBLI/ <html><head><!-- pile:fxstart page:redirect --><title>West Suburban Bank</title> --snip-- > -----Original Message----- > From: Tom [mailto:[EMAIL PROTECTED] > Sent: Friday, February 16, 2007 5:46 PM > To: Avery Buffington; [email protected] > Subject: Re: [phishing] More West Suburban Bank phish > > At 5:36 PM -0600 2/16/07, Avery Buffington wrote: > >http://sip.bpcs.net/piles/fxweb.pile/fx?iid=C2WSBLI > > > >http://secure.fundsxpress.wires.cc/start/C2WSBLI/ > > They are gone. > > Tom > -- > > Tom Shaw - Chief Engineer, OITC > <[EMAIL PROTECTED]>, http://www.oitc.com/ > US Phone Numbers: 321-984-3714, 321-729-6258(fax), > 321-258-2475(cell/voice mail,pager) Text Paging: > http://www.oitc.com/Pager/sendmessage.html > AIM/iChat: [EMAIL PROTECTED] > Google Talk: [EMAIL PROTECTED] > skype: trshaw > _______________________________________________ phishing mailing list [email protected] http://www.whitestar.linuxbox.org/mailman/listinfo/phishing
