CO-OP BANK (long url)

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Tue Sep 06, 2011 10:07 pm

CO-OP bank lookalike. (Good grief)
http://meridyapi.com.tr/templates/system/co-oprative.co.uk-CBIBSWebstart.do.html
Do we db these? Please change status as appropriate.

Up for grabs.
PM me for the mail it came in, if you need it.

Posted: Tue Sep 06, 2011 11:55 pm

^^^ Not %100 sure but this looks like a garden variety Phishing site.

Was this one of the emails that was asking you to update or verify your account information?

Posted: Tue Sep 06, 2011 11:55 pm

Interesting find, pie.

http://meridyapi.com.tr/

Here is a google cache of the page previous:

http://webcache.googleusercontent.com/search?q=cache:ROIRoYZNNOQJ:meridyapi.com.tr/+http://meridyapi.com.tr&cd=1&hl=en&ct=clnk&gl=us&client=firefox-a

Per google translate (Turkish):

Quote:

Meri Building the foundation to date without sacrificing quality residential and office projects in a very contemporary architecture atmıştır.Marmara Kocaeli Region, and especially with the new projects and continues to produce high quality workmanship.

In particular plots of our customers have realized over the starting phase of the project is finalized to the stage of the roof construction work in the field of coarse material that has proven itself and continues to grow with the confidence of its customers.

So it is just the FB login? http://meridyapi.com.tr/templates/system/co-oprative.co.uk-CBIBSWebstart.do.html

For hacked domains the protocol is to not put it in the DB, report it to the domain owner directly, and get them to remove it. ([email protected])

Quote:

canonical name meridyapi.com.tr.
aliases
addresses 85.153.18.131
Domain Whois record

Queried whois.nic.tr with "meridyapi.com.tr"...

** Registrant:
Merid Yapi Ins.San.Tic.Ltd.Sti
Sirripasa Mah.Denizciler Cad.NO:218 DERÝNCE KOCAE
LÝ
Kocaeli,
Türkiye
[email protected]
+ 532-510-0116
+ 262-229-5329

** Registrar:
NIC Handle : fp39-metu
Organization Name : Ýsim Tescil Ýnternet Teknolojileri A.Þ
Address : Bulgurlu Mah. Selvili Sok. No: 16

Ýstanbul,
Türkiye
Phone : + 90-216-3299393-
Fax : + 90-216-3292333

** Domain Servers:
ns1.pghdns.com
ns2.pghdns.com

** Additional Info:
Created on..............: 2010-Apr-05.
Expires on..............: 2012-Apr-04.

If someone else agrees this is hacked, I will send a report on it tomorrow. Very Happy

Edit#1 to resize pic.

Edit #2 -- Oh just a phishing page. I didn't think of that, woody. Well then, I suppose this really doesn't need a DB, eh?

Posted: Tue Sep 06, 2011 11:59 pm

^^^ Doesn't matter now. Very Happy

Suspended.

Posted: Wed Sep 07, 2011 12:01 am

^^^^

It took me longer to resize the damn image and host it at UploadEater than it did for the page to get suspended!!!

Baiting Guru Joined: 03 May 2007 Posts: 18313

Whatever it was, I'm glad it's suspended. I've moved it here to misc scams from the fake sites forum on the assumption that Woody's estimation of it being a phishing site is correct.