Sponsored by..

Wednesday, 14 September 2011

Some fake Bundeskriminalamt and Bundespolizei sites

Here are some more fake sites pretending to be the Bundeskriminalamt and Bundespolizei (agencies of the German Federal Police) which are probably worth blocking, following on from these.

193.105.240.204 [Sia Vps Hosting, Latvia]
bundespolizei-de.net
bundespolizei-de.org
bundespolizei-online.com
dpolg-bundespolizei.org
inter-bundeskriminalamt.org

77.87.229.14 [Invalid pointer to bundespolizei.de]
inter-bundeskriminalamt.eu
dpolg-bundespolizei.org [also on 193.105.240.204]
inter-bundeskriminalamt.org [also on 193.105.240.204]

211.154.153.49 [China Motion Network Communication]
agentbundeskriminalamt.net
bundeskriminalamtde.net
onlinebundeskriminalamt.net
torrentbundeskriminalamt.net

Note that 77.87.229.14 is actually the real IP for bundespolizei.de, but the scammers are pointing their DNS records to it, presumably to cause confusion.

You can safely block access to 193.105.240.0/24 (Sia VPS) without much fear of losing anything important. The Chinese netblock is more mixed, but blocking at least 211.154.153.49 might be a good idea if you are in Germany.

3 comments:

Andrew from Vancouver said...

211.154.153.51 in China is also bad and like its neighbour at .49 is a mix or Chinese and .ru webhosts.

Moshe Yonatan said...

How fake this message?

https://picasaweb.google.com/114851459225785206649/Mar14201202?authuser=0&authkey=Gv1sRgCL_80sCW7viIjQE&feat=directlink

Conrad Longmore said...

@Moshe: the domain inter-bundeskriminalamts.eu has been suspended for abuse.. so, pretty fake!