[SURBL-Discuss] phishing attempt

Jeff Chan jeffc at surbl.org
Fri Dec 24 01:13:43 CET 2004


On Thursday, December 23, 2004, 6:26:40 AM, Mariano Absatz wrote:
> Hi David et al.

> Just got this phishing attempt referencing:
> http://211.235.248.74:280/index.php?Ihwt=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&eml=MANGLED@EXAMPLE.COM&Tt=

> Cc-ing SURBL just FYI.

> The complete message is at the bottom.

The phishing host is now on PH and WS:

/web/antispam/multi.domains.summed:74.248.235.211       127.0.0.12      900    B
locked, 74.248.235.211 on lists [ws][ph], See: http://www.surbl.org/lists.html

You can check these at:

  http://www.rulesemporium.com/cgi-bin/uribl.cgi

It's probably a lot more important to report phishing
to the other addresses you used than here....  (I'm
not saying this as criticism, just a comment.)

Jeff C.
--
"If it appears in hams, then don't list it."



More information about the Discuss mailing list