Fraudulent Web Site Found on Server (http://217.108.248.234/local_bdnoe/bbx/index.html) [BBV20100904(3)]

Antiphishing antiphishing at s21sec.com
Thu Sep 9 03:47:43 UTC 2010


 To Whom It May Concern,

 
<http://www.s21sec.com/servicios.aspx?sec=52&apr=54&HIVEDATA=dW2z6ApWhngR9FW
UgvEY10RqCHWnVY0lTdLS%2FaGjop%2FvfsfiJElKFRxQoLWWZ0mNDnqO3aXWaOJT720m%2BvWsG
kb9wO%2F%2BFfuTN5uRiEmtYmrvoPnNGHhh7ARq6qMOCCXD> S21sec has been informed
that there is currently a website hosted by your company that is involved in
a phishing scheme to obtain personal account information from the customers
of BBVA.
<http://www.s21sec.com/servicios.aspx?sec=52&apr=54&HIVEDATA=dW2z6ApWhngR9FW
UgvEY10RqCHWnVY0lTdLS%2FaGjop%2FvfsfiJElKFRxQoLWWZ0mNDnqO3aXWaOJT720m%2BvWsG
kb9wO%2F%2BFfuTN5uRiEmtYmrvoPnNGHhh7ARq6qMOCCXD> S21sec has received
numerous complaints and e-mails regarding the Web site listed below:

http://217.108.248.234/local_bdnoe/bbx/index.html


We enclose below the legitimate url for BBVA:
 <http://www.bbva.es> http://www.bbva.es

According to published WHOIS and DNS data, the Web Site involved is owned
and hosted by:

Address lookup


lookup failed

217.108.248.234


 

Could not find a domain name corresponding to this IP address.

Domain Whois record

Don't have a domain name for which to get a record

Network Whois record

Queried whois.ripe.net with "-B 217.108.248.234"...

% Information related to '217.108.248.232 - 217.108.248.239'

 

inetnum:        217.108.248.232 - 217.108.248.239

netname:        FR-LA-RESERVE-A-RAMATUELLE

country:        FR

descr:          Interconnection with RAEI backbone

admin-c:        VD1393-RIPE

tech-c:         VD1393-RIPE

status:         ASSIGNED PA

mnt-by:         RAIN-TRANSPAC

changed:        gestip.rain at orange-ftgroup.com 20091009

source:         RIPE

 

person:         Vincent DG

address:        CHEMDE LA QUESSINE   83350  RAMATUELLE

phone:          +33 494791428

e-mail:         vincent.dg at lareserve-ramatuelle.com

nic-hdl:        VD1393-RIPE

mnt-by:         RAIN-TRANSPAC

changed:        gestip.rain at orange-ftgroup.com 20091009

source:         RIPE                          

 

% Information related to '217.108.0.0/16AS3215'

 

route:          217.108.0.0/16

descr:          RAIN

descr:          Reseaux d'Acces a l'INternet

remarks:        -------------------------------------------

remarks:        For Hacking, Spamming or Security problems

remarks:        send mail abuse at orange-business.com

remarks:        -------------------------------------------

origin:         AS3215

mnt-by:         RAIN-TRANSPAC

changed:        gestip.rain at orange-ftgroup.com 20070910

source:         RIPE

-- end --



On behalf of BBVA,
<http://www.s21sec.com/servicios.aspx?sec=52&apr=54&HIVEDATA=dW2z6ApWhngR9FW
UgvEY10RqCHWnVY0lTdLS%2FaGjop%2FvfsfiJElKFRxQoLWWZ0mNDnqO3aXWaOJT720m%2BvWsG
kb9wO%2F%2BFfuTN5uRiEmtYmrvoPnNGHhh7ARq6qMOCCXD> S21sec requests that the
Web site(s) listed above be deactivated and the domain name removed from
your servers. BBVA would like you to provide
<http://www.s21sec.com/servicios.aspx?sec=52&apr=54&HIVEDATA=dW2z6ApWhngR9FW
UgvEY10RqCHWnVY0lTdLS%2FaGjop%2FvfsfiJElKFRxQoLWWZ0mNDnqO3aXWaOJT720m%2BvWsG
kb9wO%2F%2BFfuTN5uRiEmtYmrvoPnNGHhh7ARq6qMOCCXD> S21sec with the source
code, including any data collected, of this Web site for analysis to help
prevent further phishing schemes.  If any customer data has been collected,
it will be forwarded to BBVA so that they may notify their customers
regarding this issue and take other appropriate actions as needed.

 
<http://www.s21sec.com/servicios.aspx?sec=52&apr=54&HIVEDATA=dW2z6ApWhngR9FW
UgvEY10RqCHWnVY0lTdLS%2FaGjop%2FvfsfiJElKFRxQoLWWZ0mNDnqO3aXWaOJT720m%2BvWsG
kb9wO%2F%2BFfuTN5uRiEmtYmrvoPnNGHhh7ARq6qMOCCXD> S21sec is the leading
company specialized in computer security services. It was founded in 2000
with the aim of preventing and managing organization risks and people in the
digital world. 

Please contact us if any further information is required to expedite the
process of removing this Web site from service.  If needed, forward this
e-mail and request to the appropriate contact that is able to deactivate
this site.

-- 
Security Operations Center (S.O.C.) 
e-mail:  <mailto:antiphishing at s21sec.com> antiphishing at s21sec.com
Phone number: +34914903747
 <http://www.s21sec.com> www.s21sec.com


cid:935331513 at 22112007-0CC1

 


Security Operations Center (S.O.C.) 

Tlf: 902 111 521
 <http://www.s21sec.com/> www.s21sec.com

logo S21sec

La información contenida en este mail, así como los archivos adjuntos, es
CONFIDENCIAL.
Grupo S21sec Gestión, S.A. garantiza la adopción de las medidas necesarias
para asegurar el tratamiento 
confidencial de los datos de carácter personal. En el caso de que el
destinatario del correo no sea usted, 
le rogamos envíe una notificación al remitente y lo destruya de forma
inmediata.

La lectura y/o manipulación de esta información en la situación señalada
anteriormente será considerada ilegal, 
permitiendo a la empresa remitente realizar acciones legales de diferente
envergadura.

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/websites/attachments/20100909/93bc5b4b/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 24112 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/websites/attachments/20100909/93bc5b4b/attachment.jpg>


More information about the websites mailing list