http://secure.fundsxpress.imtmotors.com/start/C2WSBLI/ http://secure.fundsxpress.vcash.ph/start/C2WSBLI
The first one is redirecting to http://netflow.mozcom.com/start/C2WSBLI/ as of an hour ago or so. $ curl -I http://secure.fundsxpress.imtmotors.com/start/C2WSBLI HTTP/1.1 301 Moved Permanently Date: Sat, 17 Feb 2007 01:18:56 GMT Server: Apache/1.3.28 (Unix) PHP/4.3.7 Location: http://netflow.mozcom.com/start/C2WSBLI/ Content-Type: text/html; charset=iso-8859-1 _______________________________________________ phishing mailing list [email protected] http://www.whitestar.linuxbox.org/mailman/listinfo/phishing
