Posted by: h4ck@lyst | May 21, 2009

areps.at kirgo.at Phishing attacks on facebook

UPDATE: 0130Hts IST May 25th 2009 Further more about .be domain facebook phishing sites.
0130 Hrs IST, May 23, 2009. More .be sites similar to yesterdays .at site emerge at a new ip. More here

Facebook is currently facing a phishing attack from areps.at and kirgos.at. As per some reports there are some more .at domains that are being used in this attack. Basically they take you to a facebook look alike login page. They even source the css and other resources from the actual facebook site. So these phishing guys are not even using their resources to host the required resources. OpenDNS and Google have already started to block and warn users about areps.at. And the people behind areps.at seem to be pretty quick as well. They have already taken down areps.at. Now its kirgo.at thats taking the traffic. Kirgo.at hasnot been flagged yet by any of the providers to be a phishing site. Google doesn’t warn you about kirgo.at as of 2350 hrs IST on May 21.

The list of sites include fcoder, nutpic and bests [.at], all stationed at the same machine 213.182.197.2.

All the sites hosted on that machine went down all of a sudden at around 0050 hrs IST, may 22nd, 2009.
Sample message that you ll receive in your facebook inbox from one of your contacts

“Check areps.at”
or any other .at site will be listed in there.

Best thing to do is not to click on anyone of the .at site links.

Who.is info for areps.at

domain: areps.at
registrant: AM5009456-NICAT
admin-c: AM5009456-NICAT
tech-c: AM5009456-NICAT
nserver: ns1.everydns.net
nserver: ns2.everydns.net
nserver: ns3.everydns.net
nserver: ns4.everydns.net
changed: 20090515 15:23:47
source: AT-DOM

personname: Andrey Morov
organization:
street address: Schelkovskiy proezd d.11 korp.1 kv.3
postal code: 105425
city: Moscow
country: Russland
phone: +74956211281
fax-no: +74956211281
e-mail: Email Masking biceps@nameclub.at
nic-hdl: AM5009456-NICAT
changed: 20090515 15:23:43
source: AT-DOM

Information Updated: Thu, 21 May 2009 15:11:33 UTC
AREPS.AT SITE INFORMATION
areps.at Thumbnail
IP: 213.182.197.2
IP Location: Riga, Latvia
Website Status: inactive

who.is info for kirgo.at

domain: kirgo.at
registrant: AK5009489-NICAT
admin-c: AK5009489-NICAT
tech-c: AK5009489-NICAT
nserver: ns1.everydns.net
nserver: ns2.everydns.net
nserver: ns3.everydns.net
nserver: ns4.everydns.net
changed: 20090515 15:25:21
source: AT-DOM

personname: Alexander Kalinin
organization:
street address: ulitsa Dolskaya d.10 kv.33
postal code: 115569
city: Moskva
country: Russland
phone: +749573431510
fax-no: +749573431510
e-mail: Email Masking blank@bronzemail.net
nic-hdl: AK5009489-NICAT
changed: 20090515 15:25:19
source: AT-DOM

Information Updated: Thu, 21 May 2009 16:46:47 UTC
KIRGO.AT SITE INFORMATION
kirgo.at Thumbnail
IP: 213.182.197.2
IP Location: Riga, Latvia
Website Status: inactive

And the server seems to be based out of Netherlands

who.is info for 213.182.197.2/

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 213.0.0.0 – 213.255.255.255
CIDR: 213.0.0.0/8
NetName: RIPE-213
NetHandle: NET-213-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: NS3.NIC.FR
NameServer: SUNIC.SUNET.SE
NameServer: SNS-PB.ISC.ORG
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate:
Updated: 2009-03-25

UPDATES from the comments on this post.

The following sites have also been found to be circulating. Though the afoi.ru seems to somewhat dissimilar.

* afoi.ru
* areps.at
* bests.at
* bestspace.be
* brunga.at
* kirgo.at
* nutpic.at
* ponbon.im
* sweeter.be

The who.is entries for the .be urls do point to the same old ip as mentioned earlier in the post but in reality they are being hosted at some other ip. 211.95.78.98. The older ip is down and out cold for about 24 hours now. And the .ru one is on completely separate space.

Posted by: h4ck@lyst | May 21, 2009

mujhko lauta do..

yeh degree bhi le lo…
yeh job bhi le lo…
bhale cheen lo mujhse US ka VISA,
magar mujhko lauta do colg ki canteen,
wo chai ka paani,
wo feekha samosa,
kadi dhoop mei apni gali se nikalna,
woh project ki khatir shehar bhar bhatakna,
woh lecture mei doston ki proxy lagana,
wo aeroplane udana, sir ko chidhana,
woh exams ki raat ko jagna jagana,
wo dusron k assignments ko apna banana………

yeh degree bhi le lo yeh job bhi le lo…
magar mujhko lauta do colg ke wo din…

PS: Flicked from someone’s status msg and improvised a lil..

Posted by: h4ck@lyst | May 20, 2009

Yahoo! Analytics

yahoo-web-analytics-logo

yahoo-web-analytics-logo


Many of you must have heard of Google Analytics. Some of you who are webmasters for any site might have also used it. But have you ever heard of Yahoo! Analytics? Well, Yahoo! Analytics has been in the market for about six months now. Yahoo!, in april 2008, acquired a company called Tensa Kft., a Hungarian company known professionally as IndexTools, which makes marketing analytics tools for the Web. Google on the other hand had acquired urchin in march 2005 and therafter rolled out a public, free version of the web analytics tool.
Anyway, the Yahoo! version of analytics seems to be superior to its google counterpart in the sense that Yahoo! Analytics gives you a realtime update of the stats whereas google analytics gives you access only to 24 hours and older data. Also, the screenshots and some of the reviews that I ve seen about yahoo! analytics make it seem better to me than google analytics.

Also, as per one news piece “Yahoo! Web Analytics Leaps Ahead of Google Analytics for Enterprise Use

Unfortunately my first hand experience of Yahoo! analytics has not been all that great so far! Its acting like windows! I dont know where to go?! So far I haven’t been able to find the JS code that am suppose to put up in order to install it on my site. hmmm. Maybe Yahoo! still relies heavily on its customer support to let the wanton users help use it for their site opposed to Google’s approach to click 1,2,3 approach.

Some of you might ask me to go and RTFM, but here are some of the pages I ve viewed trying to help myself. Just check and see if these pages actually help you to do what you want, namely install Yahoo! analytics.

Then I stumbled upon this page

User Guides having this installation guide.

That too wasn’t of much help as it asked me to “login” to my Yahoo! analytics account. Well, I had already tried to login to the analytics page using my standard Yahoo! credentials and this is what I got

Sorry, there are no Yahoo! Web Analytics services associated with the Yahoo! ID: anshuprateek [AT] ymail [dot] com
What would you like to do now?

* Sign in with a different Yahoo! ID?

Now will someone please tell me how can I create my own Yahoo! analytics account?

Post from the man at the Yahoo! Analytics helm about the Yahoo! Analytics launch!

Post containing screenshots and information about the latest version 9.5 of Yahoo! Analytics.

Posted by: h4ck@lyst | May 8, 2009

facebook lanches indian languages spport!

UPDATE:: screenshots and friends finder!

Starting midnight, may 8th, 2009 (IST) the social networking site facebook started offering indian languages support. From the site:
“”Welcome to Facebook in the Indian languages

Do you speak Hindi, Punjabi, Bengali, Telugu, Tamil or Malayalam? Now you can use Facebook in any of these languages to connect with your Indian friends all over the world.

Click on हिन्दी, ਪੰਜਾਬੀ, বাংলা, తెలుగు, தமிழ், മലയാളം to start using Facebook in your preferred language,””

Considering that facebok is the next thing on the indian social networking site ( after orkut), this could be a big pull for the newly discovered broadband(indian standards) savvy youth, Also, since google seem to be learning atleast on one front from someone else(facebook), expect orkut role out in indian languages ASAP!

Posted by: h4ck@lyst | May 3, 2009

Lucky billionth!

The one billionth app, Bump created by Bump Technologies, was downloaded by Connor Mulcahey, age 13, of Weston, CT. As the grand prize winner of Apple’s one billion app countdown contest, Connor will receive a $10,000 iTunes gift card, an iPod touch, a Time Capsule and a MacBook Pro.

http://www.apple.com/itunes/billion-app-countdown/

« Newer Posts - Older Posts »

Categories