Jake Mailinglists wrote:

> The 81.241.226.56 host has multiple phish's on it. In the "/" directory
> there is a "www.ebay.com" as well as "www.paypal.com"
> The Paypal phish seems to have been there since 31 Oct 2006 0715am according
> to the server timestamps.  ...

...for the files _within_ the directory.  The directory was created 21 
Feb, no?  So, most likely the phisher is using a kit from Oct 2006 but 
installed it on this server yesterday/today.


Regards,

Nick FitzGerald

_______________________________________________
phishing mailing list
[email protected]
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing

Reply via email to