nanog mailing list archives

Re: Yahoo-hosted phishing sites


From: "Jon R. Kibler" <Jon.Kibler () aset com>
Date: Wed, 29 Mar 2006 11:56:17 -0500

MARLON BORBA wrote:

Did you tried the form to report "Phishing Sites on Yahoo"?

http://add.yahoo.com/fast/help/us/domains/cgi_phishing


Yeah, tried that too. Get back a message saying that they are not yahoo servers. 

For example, just yesterday had a couple of phish quarantined by ClamAV that were using http://rds.yahoo.com/{whatever} 
as the URL. (It may have been a redirect, but there was no other URL embedded into the message -- nor was there unicode 
or anything similar.) The hostname rds.yahoo.com is an alias for rds.yahoo7.akadns.net, and that appears to be why 
yahoo's automated response disclaims it. 

If you try to send to anything () akadns net, their mail server rejects it saying that the mail is an illegal relay 
attempt.

Jon
-- 
Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC  USA
(843) 849-8214




==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.


Current thread: