Phishing attacks targeted on Indian Banks

Posted by : Blogger Friday, January 21, 2011

STATE BANK OF INDIA

Phishing URL:http://statebankonline.in/retail/login.htm

Whois Information:

Domain ID:D4733251-AFIN
Domain Name:STATEBANKONLINE.IN
Created On:21-Jan-2011 23:45:42 UTC
Last Updated On:21-Jan-2011 23:50:54 UTC
Expiration Date:21-Jan-2012 23:45:42 UTC
Sponsoring Registrar:A to Z Domains Solutions Pvt. Ltd. (R124-AFIN)
Status:CLIENT TRANSFER PROHIBITED
Status:TRANSFER PROHIBITED
Registrant ID:AT_14018295
Registrant Name:kumar sumit
Registrant Organization:-
Registrant Street1:411,G3,R.K.RESIDENCY,KORATTUR
Registrant Street2:Line 2: (Optional)
Registrant Street3:
Registrant City:mumbai
Registrant State/Province:Maharashtra
Registrant Postal Code:40012
Registrant Country:IN
Registrant Phone:+91.9364736373
Registrant Phone Ext.:
Registrant FAX:
Registrant FAX Ext.:
Registrant ***************@gmail.com
Admin ID:AT_14018295
Admin Name:kumar sumit
Admin Organization:-
Admin Street1:411,G3,R.K.RESIDENCY,KORATTUR
Admin Street2:Line 2: (Optional)
Admin Street3:
Admin City:mumbai
Admin State/Province:Maharashtra
Admin Postal Code:40012
Admin Country:IN
Admin Phone:+91.9364736373
Admin Phone Ext.:
Admin FAX:
Admin FAX Ext.:
Admin ***************@gmail.com
Tech ID:AT_14018295
Tech Name:kumar sumit
Tech Organization:-
Tech Street1:411,G3,R.K.RESIDENCY,KORATTUR
Tech Street2:Line 2: (Optional)
Tech Street3:
Tech City:mumbai
Tech State/Province:Maharashtra
Tech Postal Code:40012
Tech Country:IN
Tech Phone:+91.9364736373
Tech Phone Ext.:
Tech FAX:
Tech FAX Ext.:
Tech ***************@gmail.com
Name Server:NS5.999SERVERS.COM
Name Server:NS6.999SERVERS.COM

Email sender :email-alert@statebankonline.in

This Email was sent at Fri, 21 Jan 2011 22:29:52 -0500
from IP address 64.217.131.161
IP Location: United States.


Email Sender: email-alert@statebankonline.in [more info]
IP address: 64.217.131.161
IP address country: United States
IP address state: n/a
IP address city: n/a
IP address latitude: 38.0000
IP address longitude: -97.0000
ISP of this IP: SBC Internet Services
Organization: Bob Buzzi Apprsr

Email Sender:	email-alert@statebankonline.in [more info]
IP address:	64.217.131.161
IP address country:	United States
IP address state:	n/a
IP address city:	n/a
IP address latitude:	38.0000
IP address longitude:	-97.0000
ISP of this IP:	SBC Internet Services
Organization:	Bob Buzzi Apprsr

INDUSLAND BANK

Phishing URL:http://pocketquad.ch/acc/loginbrowser/indusindnew/indusnet.html

Whois Information

Domain name:
pocketquad.ch

Holder of domain name:
BÄRGROUP AG
Bär Oliver
Industriering 1000
CH-5742 Kölliken
Switzerland
Contractual Language: German

Technical contact:
BÄRGROUP AG
Bär Oliver
Industriering 1000
CH-5742 Kölliken
Switzerland

DNSSEC:N

Name servers:
ns67.tophost.ch [194.150.248.127]
ns68.tophost.ch [194.150.249.127]
Email sender :
This Email was sent at Thu, 20 Jan 2011 01:52:35 +0530 from IP address 200.68.122.123.IP Location: Buenos Aires in Argentina.

IP address: 200.68.122.123
IP address country: Argentina
IP address state: Distrito Federal
IP address city: Buenos Aires
IP address latitude: -34.5875
IP address longitude: -58.6725
ISP of this IP: NSS S.A.
Organization: NSS S.A.
Local Time of this IP country: 2011-01-22 04:38

IP address:	200.68.122.123
IP address country:	Argentina
IP address state:	Distrito Federal
IP address city:	Buenos Aires
IP address latitude:	-34.5875
IP address longitude:	-58.6725
ISP of this IP:	NSS S.A.
Organization:	NSS S.A.
Local Time of this IP country:	2011-01-22 04:38