Re: Interesting phished domain name.

[Yet Another Ninja]

On 6/19/2009 12:28 AM, Benny Pedersen wrote:

On Fri, June 19, 2009 00:22, Yet Another Ninja wrote:

w-crook.com.ar.multi.uribl.com has address 127.0.0.2
w-crook.com.ar.multi.surbl.org has address 127.0.0.46

it now make sense with ttl in 300 sec :)

I've been told it was detected on 2009-06-17 15:34:06 GMT