knutty

[incident#TKV-307904] Dear Web Host The FraudWatch International Security Operations Centre (www.fraudwatchinternational.com) has received a report of a fraudulent financial web page (illegal phishing content) hosted on your network. IP Address: 64.62.211.131 URL: http://www.damar.co..../dir/index.html Additional URL's: http://www.damar.co..../dir/login.php? http://www.damar.co....dir/index2.html Brand Phished: Damart Legitimate Brand URL's: http://www.damart.co.uk http://www.damart.com http://www.damartusa.com http://www.damart.fr http://www.damart.ch http://www.damart.be http://www.damart.lu http://www.damart.nl http://www.damart.de ************************* On behalf of our client, we would greatly appreciate your assistance in: a) Urgently Cleaning, closing or disallowing access to the site listed above as appropriate. obtaining and providing to us additional information regarding this incident, for example relevant logs or files from the host, ************************* If you are not the correct person to be dealing with this incident, please forward this request to the relevant person. If you are already aware of this matter, we apologise for any inconvenience. If possible, we would still appreciate a copy of any relevant files from the host, including logs and any php files relevant to the phishing site, which may indicate where the stolen login credentials are being sent. This incident has been assigned an Incident Number, found in the subject line. We will be monitoring this incident, and tracking its progress to closure. Please use this incident code in the subject line of all correspondence relating to this Incident. Please contact us should you require any clarification or assistance. We thank you for your urgent consideration of this request. Regards, Jane Security Operations FraudWatch International Tel USA: +1-(415) 200 0621 Tel AUS: +613 9887 6777 Fax: +613 8660 2688 Email: security@fraudwatchinternational.com http://www.fraudwatchinternational.com

URL: http://update011.heliohost.org/optusnet.html Brand Phished: Optus

Was surfing around here just now and found a couple of sites that I am sure would breach AUP or TOS.... http://datingdemo.heliohost.org/www.axisba...etailSignOn.htm http://datingdemo.heliohost.org/www.idbi.com/BANKAWAY.htm They are impersonating the genuine banks in India. Hope you can get them offline quick before too many people get scammed. Thanks