Monday, April 03, 2006

The French Phisherman returns!

Some people just won't quit.
I just received another spoof email from the "French Phisherman"
This clown won't go away quietly. Time to make it hurt.
First thing I did was enterhis url into PhishFighting.com
The URL for this clown is the same as last week:
http://1342912795/intranet/forum/templates/subSilver/images/wsbleh/ebay/index.html
This resolves to 80.11.57.27
Same server in France. Will someone email them in French and shut this scammer down?
Here is the info from DNS Stuff: (http://www.dnsstuff.com/tools/ipall.ch?domain=80.11.57.27)
IP address:                     80.11.57.27
Reverse DNS: laubervilliers-151-13-20-27.w80-11.abo.wanadoo.fr.
Reverse DNS authenticity: [Verified]
ASN: 3215
ASN Name: AS3215 (France Telecom Transpac)
IP range connectivity: 1
Registrar (per ASN): RIPE
Country (per IP registrar): FR [France]
Country Currency: EUR [euros]
Country IP Range: 80.8.0.0 to 80.15.255.255
Country fraud profile: Normal

MFRCHAMPAGNE-LORRAINE.NET is the server hosting this scammer. Somebody shut him down, now!

City (per outside source): Paris, Ile-De-France

0 Comments:

Post a Comment

<< Home