Malware Domain List

Malware Related => Malicious Domains => Topic started by: ammo_1 on September 29, 2011, 03:30:23 pm

Title: bethelcconline.org Authorize.net Phishing
Post by: ammo_1 on September 29, 2011, 03:30:23 pm

Another domain using the same Earthlink web server (66.175.58.9) as joecroninfishing.com and ttouchequine.com.

Appears that hackers are looking for Earthlink hosted sites with weak or default security settings.

http://bethelcconline.org/account.authorize.net.yAKHwLZIjr4xVllpswKn7NWpLMeuIzJTgiVp1OsKODFUZ90e8N85Av8e7VO8V0em88NVJFHSsclll/

Phishing Email was routed through mail.aidsthai.net, located in Thailand via 88.208.216.223 located in the UK.

Title: Re: bethelcconline.org Authorize.net Phishing
Post by: michajp on September 30, 2011, 02:59:23 am

Site seems to have been cleaned.