Ok thanks, here's some more then :)

Regions:
http://interactsession-8963122316.regions.com.udll.tw/ibsregions/cmserve
r/iform.cfm/
http://interactsession-6582748.regions.com.libuser.tw/ibsregions/cmserve
r/iform.cfm/

National:
http://session-603229.nationalcity.com.userpro.tw/corporate/onlineservic
es/TreasuryMgmt/


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, 5 June 2007 6:18 AM
To: Mark Hora
Cc: [email protected]
Subject: Re: [SA SPAM] [phishing] Multiple Phish


The short answer is:  yes.  :)

The rockphish are being tracked .. not only the banks currently being
hit, but the domains/hosts.  So .. keep submitting 'em.  I'm probably
not going to give a 'reported' message to each one, but they're going
in.

Tnx.

On 4 Jun 2007 at 10:43, Mark Hora wrote:

>   Most phish I'm getting now are rockphish, has anyone
>   looked into these domains which keep coming up? National City Phish:
>   http://session-654950275.nationalcity.com.unit7.tw/corporate/onlines
>   ervi ces/TreasuryMgmt/
>   http://session-3873994.nationalcity.com.directories.io/corporate/onl
>   ines ervices/TreasuryMgmt/
>   http://session-55209785.nationalcity.com.directories.io/corporate/on
>   line services/TreasuryMgmt/
>   http://session-0552318579.nationalcity.com.userpro.io/corporate/onli
>   nese rvices/TreasuryMgmt/
>   http://session-1260103.nationalcity.com.userpro.io/corporate/onlines
>   ervi ces/TreasuryMgmt/ [...]

_______________________________________________
phishing mailing list
[email protected]
http://www.whitestar.linuxbox.org/mailman/listinfo/phishing

Reply via email to