Tuesday, 11 September 2012

Phishing Hunting

Received this mail Saturday:

The link lead on http://www.idcompte.com/m/ro.php - 108.163.201.23
Who redirect you to phishing pages, once the page become blacklisted they create new pages.


kmlklkkmkkm79878787976JGGgjghgjg.jpg:

 Phishing page:

"cedf.com.france.particuliers.voter.factur.edf.professionnels.edf.rachete.votre.electricite.edf.rachete.votre.espace.bd8030b84e7e69a63f2aabd8ffc308c3.freebox.belira.info"

"108.163.201.234"

"edf-france.info"

They leaved EDF Sunday and attack SFR users.

"108.163.201.234"


"108.163.201.234"

"idcompte.com"

Fun:
at

2 comments:

  1. unixfreaxjp11 September 2012 at 09:38

    Marvelous Work! We need more disclosure for this kind of threat, thank you, Xylit0l!

    ReplyDelete
  2. PinGaz12 September 2012 at 22:12

    haha, I like phishing cover, funny as hell... Nice work, I give him that... ;-)

    ReplyDelete