Thursday, November 06, 2008

Effort from Tmnet to prevent PHISHING???

Back to my post of Mayback2u PHISHING post on 27 Oct, this morning i received another email


Dear Valued Maybank Customer,

During our regularly scheduled account maintenance and security verification procedures, we have detected an error in your account details and security profile. This might be due to either of the following reasons:

A recent change in your personal information.
Submitting invalid information during the initial security update process.

Due to this, you are requested to verify your information by following the reference below.

http://www.2database-servers.com/Maybank-Online.htm

Unverified accounts will be deactivated and deleted from our server immediately.

Sincerely,

Maybank Berhad

----------------------------------------------------------------------------------------------
The content is almost identical with the previous mail, if u try to access, you will see "The page cannot be displayed"

Indeed, if you use the Proxy server to surf, that PHISHING page is still there,

this FAKE maybank have exactly LOOK & FEEL of the real Maybank site...

BEWARE..BEWARE...


Anyway, now come the question, why we cant access to that URL?
I guessed TMNET done a good job this time by blocking our internet to accessing to it...
How do i know TMNET done a good job? Let us do a simple ping command to www.2database-servers.comResult returned: Request timed out.

In order to know where the packet lost, we need to use tracert command

Like you see, the packets lost in ip 210.187.141.30, just do a query search,
is easy to know it is belonged to TMNET IP Adminstration



Meaning Malaysian who using Tmnet wont be able to access? while others ISP might still allowed? who knows....
If you are using other ISP other than Tmnet, you can try to access www.2database-servers.com,
or following the steps above, maybe you might get a different result and feel free to drop me a comment...