Undetected phishing attempt

Denis Beauchemin Denis.Beauchemin at USherbrooke.ca
Mon Sep 25 20:09:52 IST 2006


Hello all,

One of our users has forwarded me the following email (addresses 
obfuscated for obvious reasons):
http://pages.usherbrooke.ca/dbeauchemin/tmp/phish2.txt

None of the links have been detected as phishing attempts, even though 
they clearly are.

Is there anything we can do about these?  They seem to use a clever 
redirect that goes undetected by MS.

Their domain is registered to:
$ whois zt03.net
<--snip-->

   Registrant:
      Parkpace Entertainment Group
      Ramesh Gopal
      12842, Valley View St. #204
      Garden Grove, CA 92845
      US
      Email: noc at zustek.com

   Registrar Name....: REGISTER.COM, INC.
   Registrar Whois...: whois.register.com
   Registrar Homepage: www.register.com

   Domain Name: zt03.net

      Created on..............: Mon, Apr 28, 2003
      Expires on..............: Mon, Apr 28, 2008
      Record last updated on..: Tue, Nov 01, 2005

   Administrative Contact:
      Zustek Corporation
      Ajay Shah
      12842, Valley View St #204
      Garden Grove, CA 92845
      US
      Phone: 714-404-2314
      Email: noc at zustek.com

   Technical Contact:
      Zustek Corporation
      Nalini Chand Jasti
      12842, Valley View St #204
      Garden Grove, CA 92845
      US
      Phone: 714-373-3006
      Email: noc at zustek.com

   DNS Servers:

   ns1.bigdns.net
   ns2.bigdns.net

I couldn't see any web site at zt03.net or zustek.com...

Denis

-- 
   _
  °v°   Denis Beauchemin, analyste
 /(_)\  Université de Sherbrooke, S.T.I.
  ^ ^   T: 819.821.8000x62252 F: 819.821.8045


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3595 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060925/4f8570de/smime.bin


More information about the MailScanner mailing list