Page 1 of 1

HELP

Posted: Sat Oct 01, 2011 7:05 pm
by Bliss
Hackers please help
I am not a hacker , but I think this is a phishing page

http://facebooksecured.3dn.ru/

can u find any trace to the person who did it, like a mail account ?
Please respond , thank you

Re: HELP

Posted: Sun Oct 02, 2011 8:24 pm
by DaymItzJack
Bliss wrote:Hackers please help
I am not a hacker , but I think this is a phishing page

http://facebooksecured.3dn.ru/

can u find any trace to the person who did it, like a mail account ?
Please respond , thank you
... you fell for that site...?

Posted: Sun Oct 02, 2011 10:45 pm
by Bliss
no i didn't, all i know is he changes ur hotmail password and ur facebook and then sends ur friends messages to send him money.

Didn't happen to me, but i really want to know if we can find out his e-mail address,
thanks

Posted: Tue Oct 04, 2011 2:17 pm
by Liidian
Seems like the website itself doesn't expose any information about his/ her email.
The server by itself seem to be hosted in Virgin Gorda in the caribbean sea, with the IP 193.109.247.49.
I don't have anymore information to give.

Re: HELP

Posted: Tue Oct 04, 2011 2:54 pm
by alternateblackhat
Bliss wrote:Hackers please help
I am not a hacker , but I think this is a phishing page

http://facebooksecured.3dn.ru/

can u find any trace to the person who did it, like a mail account ?
Please respond , thank you
you can get this from a simple whois query
.
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '193.109.246.0 - 193.109.247.255'

inetnum: 193.109.246.0 - 193.109.247.255
netname: UCOZ-NET
descr: Compubyte Limited
country: VG
org: ORG-COMP2-RIPE
admin-c: COMP1-RIPE
tech-c: COMP1-RIPE
status: ASSIGNED PI
mnt-by: RIPE-NCC-END-MNT
mnt-lower: RIPE-NCC-END-MNT
mnt-by: QL-NOC
mnt-routes: QL-NOC
mnt-routes: HOSTER-RIPE-MNT
mnt-domains: QL-NOC
mnt-domains: MNT-COMPUBYTE
source: RIPE # Filtered

organisation: ORG-COMP2-RIPE
org-name: Compubyte Limited
org-type: OTHER
address: Trident Chambers, Wickhams Cay,
P.O. Box 146 Road Town, Tortola,
British Virgin Islands
mnt-ref: RU-WEBALTA-MNT
mnt-by: MNT-COMPUBYTE
source: RIPE # Filtered

role: Compubyte NOC
address: Trident Chambers, Wickhams Cay, P.O. Box 146 Road Town, Tortola, British Virgin Islands
mnt-by: MNT-COMPUBYTE
abuse-mailbox: abuse@compubyte.vg
admin-c: MIG12-RIPE
tech-c: YEUT1-RIPE
nic-hdl: COMP1-RIPE
source: RIPE # Filtered

% Information related to '193.109.247.0/24AS29076'

route: 193.109.247.0/24
descr: Compubyte Limited route object
origin: AS29076
mnt-by: HOSTER-RIPE-MNT
source: RIPE # Filtered

Posted: Tue Oct 04, 2011 2:56 pm
by alternateblackhat
By the way, i didn't filter down the query it for a reason.

Posted: Tue Oct 04, 2011 2:58 pm
by CodeX
Your best chance is to contact the hosting provider although you may not have any luck with that as it's a .ru but you can always hope, the whois on it should help with this approach.

Posted: Tue Oct 04, 2011 3:07 pm
by alternateblackhat
ill give one more bit of help. This is their webpage, it has there number and location from the whois query.