Anti-Phishing Group of CityU

Last update: Jun. 25, 2005

Anthony Y. Fu, Xiaotie Deng, and Wenyin Liu

Department of Computer Science,

City University of Hong Kong, Hong Kong SAR

Demo of IRI based Phishing:

IRIs we applied for research use Target

www.中囯银行.com (囯 is "guo" with the second tone, same to "国" in simplified Chinese)

www.中国銀行.com (in Japanese)

www.中国银行.com
www.美國.net (國 is in Traditional Chinese) www.美国.net
www.和記黄埔.com (in Japanese) www.和记黄埔.com
 http://www.miсrоsоft.com http://www.microsoft.com
http://www.paypаl.com http://www.paypal.com 

Phishing IRI examples of www.citibank.com using UC-SimListv

i t i b a n
FF57 FF57 FF57 FF0E 217D 69 74 69 62 61 006E FF4B 2024 FF43 FF4F FF4D
w w . с ο m
77 FF57 77 2024 FF43 2170 FF54 2170 FF42 FF41 FF4E FF4B 002E 441 03BF 006D
w w i а n · о
77 77 FF57 2027 FF43 2170 FF54 69 FF42 430 006E FF4B 00B7 217D 043E 217F
і t i a · с
FF57 FF57 FF57 FF0E FF43 456 74 69 FF42 61 FF4E FF4B 387 441 FF4F FF4D
w w · i і a k · c ο m
77 77 FF57 00B7 FF43 69 FF54 456 FF42 61 FF4E 006B 387 63 03BF 006D
w w · і t b c о
77 77 FF57 00B7 217D 456 74 2170 62 FF41 FF4E FF4B 2027 63 043E 217F

Phishing IRI examples www.citibank.com using UC-SimList

w W w · А N K . С Ο Μ
77 57 77 00B7 FF43 FF4C FF54 FF29 FF22 410 004E 004B 002E 421 039F 039C
W ϲ ǀ Т В А n Κ c ο
57 FF57 FF37 2027 03F2 01C0 422 FF49 412 410 006E 039A FF0E 63 03BF 216F
W w ˙ c ǀ Т Β N · Ο m
57 FF57 77 02D9 63 01C0 422 2170 392 FF21 004E FF4B 387 FF23 039F 006D
w w Τ I В Α Ν Κ С O
FF57 77 77 FF0E FF23 FF49 03A4 49 412 391 039D 039A 2027 421 004F 216F
W W · t Β A n · ο
57 FF37 57 00B7 FF43 FF49 74 FF4C 392 41 006E 212A 00B7 217D 03BF 217F
W W · Т l Β Α c O
57 57 FF37 387 FF43 2160 422 006C 392 391 FF4E FF2B 2027 63 004F FF4D

Phishing IRI examples www.花旗银行.公司 using UC-SimListv

w · ·
FF57 FF57 77 00B7 82B1 65D7 94F6 884C 00B7 516C 53F8
w .
FF57 77 FF57 002E 82B1 65D7 94F6 884C FF0E 516C 53F8
w ˙
FF57 FF57 77 02D9 82B1 65D7 94F6 884C 2027 516C 53F8
w · ·
FF57 FF57 77 387 82B1 65D7 94F6 884C 387 516C 53F8
w ·
FF57 77 FF57 2027 82B1 65D7 94F6 884C 387 516C 53F8
w w ·
77 FF57 77 FF65 82B1 65D7 94F6 884C 387 516C 53F8

Phishing IRI examples www.花旗银行.公司 using UC-SimList

˙
FF37 FF57 FF57 02D9 82B1 65D7 94F6 884C 2024 516C 53F8
·
FF57 FF37 FF57 2024 82B1 65D7 94F6 884C 387 516C 53F8
.
FF57 FF57 FF57 002E 82B1 65D7 9280 884C FF0E 516C 53F8
w ·
FF57 FF57 77 387 82B1 65D7 94F6 884C FF65 516C 53F8
.
FF37 FF57 FF57 2024 82B1 65D7 9280 884C 002E 516C 53F8
W W
57 FF57 57 2024 82B1 65D7 9280 884C FF65 516C 53F8

Phishing IRI examples www.シテイバンク.会社 using UC-SimListv

w w w
77 77 77 FF0E 30B7 30C6 30A4 30D0 30F3 30AF 2027 4F1A 793E
w w ·
77 FF57 77 00B7 30B7 30C6 30A4 30D0 30F3 30AF 2024 4F1A 793E
w w .
FF57 77 77 002E 30B7 30C6 30A4 30D0 30F3 30AF FF0E 4F1A 793E
w w ˙ ·
FF57 77 77 02D9 30B7 30C6 30A4 30D0 30F3 30AF 387 4F1A 793E
. ·
FF57 FF57 FF57 002E 30B7 30C6 30A4 30D0 30F3 30AF 387 4F1A 793E
w w
77 77 FF57 FF0E 30B7 30C6 30A4 30D0 30F3 30AF FF65 4F1A 793E

Phishing IRI examples www.シテイバンク.会社 using UC-SimList

W ·
FF57 FF57 57 FF65 3057 3066 3044 3070 30F3 30AF 00B7 4F1A 793E
w w ˙
77 FF37 77 02D9 3057 3066 30A4 30D0 30F3 30AF 2027 6703 793E
W w ˙
FF37 57 77 2024 30B7 30C6 30A4 30D0 30F3 304F 02D9 6703 793E
.
FF57 FF57 FF57 2027 3057 30C6 30A4 30D0 30F3 304F 002E 4F1A 793E
·
FF37 FF37 FF57 00B7 3057 3066 30A4 3070 30F3 304F FF65 4F1A 793E
w W
77 FF57 57 FF65 3057 3066 30A4 30D0 30F3 30AF 2024 4F1A 793E

 

Phishing text of the following paragraph using UC-SimListv and UC-SimList

Every Internet user should know about spoof(a.k.a. phishing or hoax)e-mails that appear to be from a well-known company but can put you at risk. Although they can be difficult to spot, they ask you to click a link back to a spoof web site and provide, update or confirm sensitive personal information.

using UC-SimListv

ν е у ǀ n t e e ο Ӏ k n ο u t s р о ο ( · а р i ѕ i ɡ о ο ) а s һ a а р e а r е f a е І ˉ n n с o p a у b u c а p t o а r k Α I h ο t h е ϲ а b d i f f t ο ѕ p ο һ е a s у о o i k а і n a k ο ѕ p ο f b а n p v e , р a t e o f e n е p r о n а Ι f r o n
FF25 03BD 435 FF52 443 01C0 006E 74 FF45 FF52 FF4E 65 FF54 FF55 FF53 65 FF52 FF53 FF48 03BF FF55 04C0 FF44 006B 006E 03BF FF57 FF41 FF42 FF4F 75 74 73 440 043E 03BF FF46 28 FF41 FF65 FF4B 387 430 2027 440 FF48 69 455 FF48 69 FF4E 261 043E FF52 FF48 03BF FF41 2179 29 FF45 2574 217F 430 FF49 2160 73 FF54 04BB 61 FF54 430 440 FF50 65 430 72 FF54 FF4F FF42 435 66 FF52 FF4F 217F 61 FF57 435 2160 406 02C9 FF4B 006E FF4F FF57 006E 441 006F 217F 70 61 FF4E 443 62 75 FF54 63 430 FF4E 70 FF55 74 FF59 006F FF55 430 FF54 72 2170 FF53 006B 2024 391 49 FF54 68 03BF FF55 FF47 FF48 74 68 435 FF59 03F2 430 FF4E 62 FF45 64 69 66 66 2170 217D FF55 217C FF54 74 03BF 455 70 03BF FF54 FF0C FF54 04BB 435 FF59 61 73 FF4B 443 043E FF55 FF54 006F FF43 FF29 69 FF43 006B 430 2160 456 006E FF4B FF42 61 FF43 006B FF54 03BF FF41 455 70 FF4F 03BF 66 FF57 FF45 62 FF53 FF49 FF54 FF45 430 006E 217E 70 FF52 FF4F 76 FF49 217E 65 002C FF55 440 FF44 61 74 65 FF4F FF52 217D 006F FF4E 66 FF49 FF52 217F FF53 65 006E FF53 2170 FF54 FF49 FF56 435 70 FF45 72 FF53 043E 006E 430 399 2170 FF4E 66 FF4F 72 217F FF41 FF54 FF49 006F 006E 2024
Е ν y е r u e r s h o Ӏ k n о b o ѕ p o f ( . һ і һ n o r х ) е ˉ a i s t h a t р е а ο e f ο w е Ӏ І ­ k n o w n о р y u t а р t у о u а t r ѕ g h h y a n e i i с t t о р o t h e y а s k y o ο ϲ i ϲ a I і n a k ο ѕ p o о f t а d р ο ν i d e , u a t e o r о n s e n ѕ ν е p е s n а І і n а ο ·
415 03BD FF45 FF52 79 FF4C FF4E FF54 435 72 FF4E FF45 FF54 75 FF53 65 72 73 68 006F FF55 04C0 217E 006B 006E 043E FF57 FF41 62 006F FF55 FF54 455 70 006F FF4F 66 28 FF41 2024 FF4B FF0E FF41 002E FF50 04BB 456 FF53 04BB FF49 006E FF47 006F 72 FF48 FF4F FF41 445 29 435 02C9 FF4D 61 69 2160 73 74 68 61 74 FF41 FF50 440 435 430 FF52 FF54 03BF FF42 65 66 FF52 03BF 217F FF41 77 435 04C0 406 00AD 006B 006E 006F 77 006E FF43 043E FF4D 440 FF41 FF4E 79 FF42 75 74 217D 430 FF4E 440 FF55 74 443 043E 75 430 74 72 2170 455 FF4B 2027 FF21 FF29 FF54 FF48 FF4F FF55 67 68 FF54 68 FF45 79 FF43 61 006E FF42 65 217E 69 FF46 FF46 69 441 FF55 217C 74 74 043E FF53 440 006F 74 FF0C FF54 68 65 79 430 73 006B 79 006F FF55 FF54 03BF 03F2 FF4C 69 03F2 FF4B 61 49 456 006E FF4B FF42 61 FF43 006B FF54 03BF FF41 455 70 006F 043E 66 FF57 FF45 FF42 FF53 2170 74 FF45 430 FF4E 64 440 FF52 03BF 03BD 69 64 65 002C 75 FF50 FF44 61 74 65 006F 72 217D 043E 006E FF46 2170 FF52 217F 73 65 006E 455 2170 FF54 FF49 03BD 435 70 435 FF52 73 FF4F 006E 430 406 456 006E FF46 FF4F FF52 217F 430 FF54 FF49 03BF FF4E 387
E v y Ι n e t u s r h о u d о w а о t s p ο a а р һ ѕ һ n o h o x е а i ѕ t h t р р а t о b e o a ǀ ˉ k c o p a у u a p y o а Ι h o h һ у c n b i f c u t ο ѕ р ο , e y k у ο t I c k a c k o а ѕ p o ο w e b s t a d o d e u а o c o f r е і p r ѕ o n ǀ і n о r m a t i o
45 76 FF45 FF52 79 399 006E FF54 FF45 FF52 FF4E 65 74 75 73 FF45 72 FF53 68 043E 75 FF4C 64 FF4B FF4E 043E 77 430 FF42 043E FF55 74 73 70 03BF FF4F FF46 FF08 61 2024 FF4B 2024 430 FF0E 440 04BB 2170 455 04BB FF49 006E FF47 006F FF52 68 006F FF41 78 FF09 435 FF0D FF4D 430 69 2160 455 74 68 FF41 74 FF41 440 440 FF45 430 FF52 74 043E 62 65 FF46 FF52 006F FF4D 61 FF57 FF45 01C0 FF29 02C9 006B FF4E FF4F FF57 FF4E 63 006F 217F 70 61 FF4E 443 FF42 75 FF54 FF43 61 FF4E 70 FF55 FF54 79 006F FF55 430 FF54 FF52 2170 FF53 FF4B 2024 FF21 399 FF54 68 006F FF55 FF47 68 FF54 04BB FF45 443 63 FF41 006E 62 FF45 FF44 69 FF46 66 FF49 63 75 FF4C FF54 74 03BF 455 440 03BF FF54 002C FF54 FF48 65 79 FF41 FF53 006B 443 03BF FF55 74 FF4F 217D 49 FF49 63 FF4B FF41 FF4C 2170 FF4E 006B FF42 61 63 006B FF54 006F 430 455 70 006F 03BF FF46 77 65 62 73 FF49 74 FF45 61 FF4E 64 FF50 FF52 006F 2174 2170 64 65 FF0C 75 FF50 217E 430 FF54 FF45 006F FF52 63 006F FF4E 66 2170 72 217F FF53 435 FF4E FF53 456 FF54 FF49 FF56 FF45 70 FF45 72 455 006F 006E FF41 01C0 456 006E FF46 043E 72 006D 61 74 69 006F FF4E 2027
Ε е Ι е е s e ѕ o u k o w а b о u s p ο ο f ( k р h ѕ і n ο h о a x ) а І ѕ t а р a е о m a w e Ι k n o ο m p a у b u c у ο a t і ѕ k · A I о u h t h е у е i f c t о ѕ o , һ е у a y ο u о Ӏ i ϲ а і c k ο a ѕ o f w e b s i е а n d р r v d , u p o r ϲ ο r s е n s і t i e р e r s o а n ο m a i n ·
395 FF56 435 FF52 FF59 399 FF4E FF54 435 FF52 FF4E 435 FF54 FF55 73 65 FF52 455 FF48 006F 75 2160 217E 006B FF4E 006F 77 430 62 043E 75 FF54 73 70 03BF 03BF 66 28 FF41 2027 006B FF0E FF41 2027 440 68 2170 455 FF48 456 006E FF47 03BF FF52 68 043E 61 78 29 FF45 FF0D 217F 430 2170 406 455 74 FF48 430 FF54 FF41 440 FF50 FF45 61 FF52 FF54 FF4F FF42 435 FF46 FF52 043E 006D 61 77 65 399 FF29 2011 006B 006E 006F FF57 FF4E 217D 03BF 006D 70 61 FF4E 443 62 75 FF54 63 FF41 FF4E FF50 FF55 FF54 443 03BF FF55 61 74 FF52 456 455 006B 387 41 49 FF54 FF48 043E 75 FF47 68 74 68 435 443 217D FF41 FF4E FF42 435 217E 69 66 FF46 2170 63 FF55 2160 FF54 74 043E 455 FF50 006F FF54 002C FF54 04BB 435 443 61 FF53 FF4B 79 03BF 75 FF54 043E 217D 04C0 69 03F2 FF4B 430 217C 456 FF4E FF4B FF42 FF41 63 006B FF54 03BF 61 455 FF50 006F FF4F 66 77 65 62 73 69 FF54 435 430 006E 64 440 72 FF4F 76 FF49 64 FF45 002C 75 70 217E FF41 FF54 FF45 006F 72 03F2 03BF FF4E FF46 2170 72 FF4D 73 435 006E 73 456 74 69 FF56 65 440 65 72 73 006F FF4E 430 FF4C FF49 006E FF46 03BF FF52 006D 61 FF54 69 FF4F 006E 00B7
Е r у e r e t s r s h о k o w a ο u t р ο o ( а · а · р i s h n һ e ­ a ѕ t a t a p р е r t ο f r o m a е I ǀ k n о w n c о р n y b t а n u у о a k Α o g h е а n b e і f f i c t ο s р о t , t h е у a s k y u t ο i а і n b а k s p o ο е ѕ i e n d r o ν е , р а ο c o n r m s e s i t ν e p ѕ а ǀ f о а i o
415 2174 FF45 72 443 2160 FF4E FF54 65 72 FF4E 65 74 FF55 73 FF45 72 73 68 043E FF55 217C FF44 006B FF4E 006F 77 61 FF42 03BF 75 74 FF53 440 03BF 006F FF46 28 430 387 FF4B 2024 430 387 440 FF48 69 73 68 2170 006E FF47 FF4F FF52 04BB FF4F FF41 2179 FF09 65 00AD 217F 61 FF49 FF4C 455 74 FF48 61 74 61 70 440 435 FF41 72 74 03BF FF42 FF45 66 72 006F 006D 61 FF57 435 49 01C0 2010 006B 006E 043E 77 006E 63 043E FF4D 440 FF41 006E 79 62 FF55 74 FF43 430 006E FF50 75 FF54 443 043E FF55 61 FF54 FF52 FF49 FF53 006B FF65 391 2160 FF54 FF48 006F FF55 67 68 FF54 FF48 435 FF59 FF43 430 006E 62 65 FF44 456 66 66 69 63 FF55 217C 74 FF54 03BF 73 440 043E 74 002C 74 68 435 443 61 73 006B 79 FF4F 75 74 03BF 217D FF4C 69 FF43 FF4B 430 FF29 456 006E FF4B 62 430 FF43 006B FF54 FF4F FF41 73 70 006F 03BF FF46 FF57 435 FF42 455 69 FF54 65 FF41 006E 64 FF50 72 006F 03BD 2170 217E 435 002C FF55 440 FF44 430 FF54 FF45 03BF FF52 63 006F 006E FF46 FF49 72 006D 73 65 FF4E 73 69 74 FF49 03BD 65 70 FF45 FF52 455 FF4F FF4E 430 01C0 2170 FF4E 66 043E FF52 217F 430 FF54 69 006F FF4E FF0E
Е e y I n e r n t ѕ e r о l d k ο w b ο u t s р о о ( а k a · h і h і g ο r h ο a x а l a а р a t b о Ι ˍ k n о n ο m p n у u n p u t y o і s k · І һ o u һ һ ϲ a n е d f c u I t о ѕ t һ e y y ο с с k а І і b a с k ο a s р о о b t d ο i d e , d t ο r c о e s і i p n a n f о а t і ο n ·
415 2174 65 FF52 79 49 006E FF54 65 72 006E FF45 74 FF55 455 65 72 FF53 FF48 043E FF55 006C 64 006B FF4E 03BF 77 FF41 62 03BF 75 74 73 440 043E 043E FF46 28 430 FF65 006B 2027 61 387 FF50 68 456 FF53 68 456 FF4E 67 03BF 72 68 03BF 61 78 FF09 FF45 2011 217F 430 2170 006C FF53 FF54 FF48 61 FF54 430 FF50 440 FF45 61 FF52 74 FF4F 62 FF45 FF46 FF52 043E FF4D FF41 FF57 FF45 FF29 399 02CD 006B 006E 043E FF57 006E 217D 03BF 006D 70 FF41 006E 443 FF42 75 FF54 FF43 FF41 006E 70 75 74 79 006F FF55 FF41 FF54 FF52 456 73 006B 00B7 FF21 406 FF54 04BB 006F 75 FF47 04BB FF54 04BB FF45 FF59 03F2 61 006E FF42 435 64 2170 FF46 66 FF49 63 75 49 74 FF54 043E 455 FF50 FF4F 74 FF0C FF54 04BB 65 79 FF41 FF53 FF4B 79 FF4F FF55 FF54 03BF 441 217C 2170 441 006B 430 406 456 FF4E FF4B 62 61 441 006B FF54 03BF 61 73 440 043E 043E FF46 FF57 FF45 62 FF53 2170 74 FF45 FF41 FF4E 64 FF50 FF52 03BF 2174 69 64 65 002C FF55 FF50 64 FF41 74 FF45 03BF 72 63 043E FF4E FF46 FF49 FF52 FF4D FF53 65 FF4E 73 456 FF54 69 2174 FF45 70 FF45 FF52 FF53 FF4F 006E 61 FF4C FF49 006E 66 043E FF52 FF4D 430 74 456 03BF 006E 00B7

using UC-SimList
 

R Ү ǀ n Τ Ε R U s e s O u l d n Ο w Β o u P o о а . . Α ˙ Ρ l S Ι N g O R о А e A l Т А р a r В Е F r M A W ǀ k w n С m а Υ Β U ϲ а N u у ο u A Т i S a Ӏ t Н О U ɡ һ Н е y d f Τ Τ o T , һ Y s K y ο U Ο С Ӏ ϲ І N K Β а с T a о О e е a n r Ο e р D t e О c ο N f ǀ r Ѕ Е n s р S ο N A l N m l ·
FF25 FF36 FF45 52 04AE 01C0 006E 03A4 395 52 FF2E FF45 FF54 55 73 65 FF32 73 FF48 004F 75 006C 64 FF4B 006E 039F 77 FF21 392 006F 75 FF54 FF53 50 006F 043E FF46 FF08 430 002E FF4B 002E 391 02D9 03A1 FF28 006C 53 FF28 399 004E 67 004F 52 FF28 043E 410 FF58 FF09 65 2576 216F 41 006C 216C FF33 FF54 FF28 FF21 422 410 FF50 440 FF45 61 72 FF34 FF4F 412 415 46 72 FF4F 004D 41 57 FF45 FF29 01C0 2011 006B FF4E FF2F 77 006E 421 FF4F 006D FF30 430 FF2E 03A5 392 55 FF54 03F2 430 004E FF50 75 FF54 443 03BF 75 41 422 FF32 69 53 212A FF0E 61 04C0 74 041D 041E 55 261 04BB FF34 041D 435 79 FF23 FF21 FF4E FF42 FF25 64 217C 66 FF46 FF29 FF23 FF35 216C 03A4 03A4 006F FF33 FF30 FF2F 54 002C FF54 04BB FF45 59 FF21 73 004B 79 03BF 55 FF54 039F 421 04C0 2160 03F2 212A FF41 FF2C 406 004E 004B 392 430 441 FF2B 54 FF2F 61 FF53 FF50 043E 041E FF46 FF57 65 FF42 FF33 FF4C FF54 435 61 006E 217E FF50 72 039F FF56 217C FF44 65 FF0C FF55 440 44 FF21 74 65 041E FF52 63 03BF 004E 66 01C0 72 FF2D 405 415 006E 73 217C FF54 FF4C FF36 FF45 440 FF25 FF32 53 03BF 004E 41 006C FF29 004E FF46 FF4F FF52 006D FF41 FF34 006C FF4F FF4E 00B7
E Ε Ү Ν Τ r N U S Е Ѕ һ u k Ν w Α Β О S Р f ( А · А · I H і N ο o a x ) M l S Η a t a Р P e Α Τ Ο b е Ο Α Е ǀ N о Μ Р N Ү В t а n Р U u K А Т һ g h H e ϲ а N B е F f t Τ Τ , Τ Н E Y s Υ T о C A l I k A o А Ѕ Ο о f E B S Τ n Р R о D E Ρ A Ο с е ѕ Τ ν ѕ Ο N А Ӏ Ι n Ο a T о
45 FF56 395 FF32 04AE FF4C 039D 03A4 FF25 72 004E FF45 FF54 55 53 415 FF32 405 04BB FF4F 75 FF2C FF24 006B 039D FF4F 77 391 392 041E FF35 FF54 53 420 FF2F FF2F 66 28 410 387 FF2B 2027 410 387 FF50 FF28 49 FF33 48 456 004E FF27 03BF FF52 FF48 006F 61 78 29 FF25 2010 004D FF41 006C FF2C 53 FF34 397 61 74 61 420 50 65 391 FF32 03A4 039F 62 435 FF46 FF32 039F FF4D 391 FF57 415 01C0 216C 2011 212A 004E FF4F FF37 FF4E 216D 043E 039C 420 FF41 004E 04AE 412 FF35 74 216D 430 006E 420 55 FF34 FF59 FF4F 75 FF41 FF54 FF52 FF4C FF33 004B 2024 410 216C 422 04BB FF4F FF35 67 68 FF34 48 65 FF39 03F2 430 004E 42 435 FF24 217C 46 66 217C 216D FF55 217C 74 03A4 FF2F FF53 FF30 FF2F 03A4 002C 03A4 041D 45 59 FF41 73 FF4B 03A5 FF4F FF55 54 043E 43 2160 FF29 217D FF4B 41 006C 49 FF4E 006B FF22 41 217D FF4B FF34 006F 410 405 FF50 039F 043E 66 FF57 45 42 53 2170 03A4 FF25 FF41 006E FF44 420 52 043E 2174 2170 44 45 FF0C FF35 03A1 217E 41 FF54 FF45 039F FF52 441 FF2F FF2E FF26 FF49 FF52 FF4D FF33 435 FF2E 455 FF49 03A4 217C 03BD FF45 FF50 FF25 FF32 455 039F 004E 410 04C0 399 006E FF26 039F FF32 FF4D 61 54 217C 043E FF4E FF65
E E y N Е R N T S E r һ ο u ǀ d N О W а Β ο U Ρ o a · K A · P ǀ S l G O һ Α х е Μ А I I Ѕ T Α Р Р e Α t o В E f R Μ а W l n Ο O p у b С А p Т y u Α Т r l Ѕ I H O U Н Т һ Ε a E Ι I u t Ο S Ρ Т , T H Е Υ а k Ү Ο Τ Ο ϲ L ǀ с Α I n Α С Ο а Ѕ Ρ о о e b ѕ і Т e Ρ R Ο v Ӏ Ε , U Р D А t E R C N F l ѕ Е s l l Ε Ε R Ѕ Ο Ν n o M A t Ӏ Ο ˙
45 2174 45 FF32 79 FF49 004E FF54 415 52 004E FF25 54 FF35 53 45 72 FF33 04BB 03BF 75 01C0 64 212A 004E 041E 57 430 392 03BF 55 FF34 FF33 03A1 FF2F 006F FF26 FF08 61 387 004B 2024 41 00B7 50 FF48 01C0 53 FF28 006C FF2E 47 004F FF32 04BB FF2F 391 445 FF09 435 2574 039C 410 49 49 405 54 FF28 FF21 FF54 391 420 420 65 391 FF32 74 006F 412 45 66 52 FF4F 039C 430 57 FF25 006C 216C FF0D FF2B 006E 039F FF37 FF2E 217D 004F FF4D 70 FF21 FF4E 443 62 FF55 FF54 421 410 FF4E 70 FF55 422 79 FF4F 75 391 422 72 006C 405 FF4B 2024 FF21 49 FF34 48 004F 55 FF47 041D 422 04BB 395 FF59 FF23 61 FF4E FF42 45 216E 399 FF26 FF46 49 217D 75 2160 74 FF34 039F 53 03A1 FF4F 422 002C 54 48 415 03A5 430 FF33 006B 04AE 039F FF35 03A4 039F 03F2 004C 01C0 441 FF2B 391 FF29 49 006E 212A FF22 391 421 212A FF34 039F 430 405 03A1 043E 043E FF26 FF37 65 62 455 456 422 65 FF41 FF2E 216E 03A1 52 039F 76 04C0 FF24 395 002C 55 420 44 410 74 45 FF4F 52 43 FF2F 004E 46 006C FF32 216F 455 415 FF4E 73 006C FF54 006C FF56 395 FF50 395 52 405 039F 039D FF21 FF2C FF4C 006E FF26 006F FF32 004D 41 74 04C0 039F FF2E 02D9
e у Т Е R N Т ѕ R ѕ ο U L D N ο Α Т ѕ р Ο Ο F ( · Α p һ Н l N ο R Η А Х E Μ а ѕ Τ H Α t e А Ο Ε R E Ι ǀ О О P А n Ү В U Τ С a n р T y о u Α r A Н o U G h h E Υ c A N Β е і f u T t ο s p о T , h а s k Y O Τ Ӏ ǀ c k а І ǀ Ν b A С K T а S р ο O F W b ѕ I t Ε Α Ρ О d u a ο C Ο Ν l e Ν Т l E P Ε ο Ν І i F o M Т ǀ ο N .
FF45 2174 65 FF32 443 2170 FF2E 422 415 52 004E FF45 422 FF35 455 FF45 52 455 FF28 03BF 55 004C 44 FF4B 004E 03BF FF57 391 FF42 FF4F FF35 422 455 440 039F 039F 46 28 FF21 2027 FF4B 00B7 391 2027 70 04BB 2160 FF53 041D 006C 004E FF47 03BF 52 397 FF2F 410 425 FF09 45 2574 039C 430 2160 216C 455 03A4 48 391 74 FF21 FF30 FF30 65 410 FF52 FF34 039F FF22 395 FF46 52 FF4F FF2D FF21 FF37 45 399 01C0 2010 FF2B FF2E 041E FF37 FF4E 216D 041E FF2D 50 410 006E 04AE 412 55 03A4 421 61 006E 440 FF35 54 79 043E 75 391 FF34 72 FF29 FF33 FF4B 2024 41 217C FF34 041D 006F 55 47 68 FF54 68 45 03A5 63 41 004E 392 435 216E 456 66 FF46 217C 217D 75 2160 54 74 03BF 73 70 043E 54 002C FF54 68 FF25 FF39 430 73 006B 59 004F FF55 03A4 FF4F FF43 04C0 01C0 63 006B 430 406 01C0 039D FF2B 62 41 421 004B 54 FF4F 430 53 440 03BF 004F 46 57 FF25 62 455 49 74 395 391 FF2E FF44 03A1 FF32 041E 2164 FF4C 64 FF45 FF0C 75 FF30 217E 61 FF54 FF25 03BF FF32 43 039F 039D FF46 006C FF52 FF4D FF33 65 039D FF53 2170 422 006C FF56 45 50 395 FF52 FF33 03BF 039D FF41 406 69 FF4E 46 006F FF32 004D FF21 422 01C0 03BF 004E 002E
r у n Т Ε r E u S е ѕ h ο u L k о W a В Ο u t S Ο Ο ( a · k · A P H І S ǀ Ν O һ о M i T a A р Ρ a T O B f R Ο М e І l Κ w ϲ О Α Υ U T a n Р ο А і Ѕ K а Т Η O H Η E Y b E d С Τ T S Ρ O Т Η е y S k y Ο Τ О Κ l Ν Α Т О A Р Ο О F W Е b ǀ t Е Α P r ǀ d е A Т e ο R С о N f I R M Ѕ Е n Ѕ Ӏ Т I v e P Ε r ѕ о Α І f О M T Ӏ O
FF25 FF36 FF25 72 443 FF49 006E 422 395 72 FF4E 45 FF54 75 53 435 FF52 455 68 03BF 75 004C FF44 006B FF4E 043E 57 61 412 039F 75 74 53 FF50 039F 039F FF26 28 61 387 006B 387 41 FF0E 50 48 406 53 FF48 01C0 039D FF27 004F FF32 04BB 043E FF41 2169 FF09 FF25 2574 004D FF41 69 FF2C FF33 54 FF48 61 FF34 41 440 03A1 FF25 61 FF52 54 004F 42 FF25 66 52 039F 041C FF21 FF57 65 406 006C 2010 039A FF4E FF4F 77 FF2E 03F2 041E FF4D FF50 391 FF4E 03A5 FF42 55 54 FF43 61 006E 420 FF55 FF34 FF39 03BF FF35 410 FF34 FF52 456 405 004B 2024 430 FF29 422 397 004F FF35 FF47 48 FF54 397 45 59 FF23 FF21 FF4E 62 45 64 217C FF26 FF46 FF49 421 FF55 216C 03A4 54 FF2F 53 03A1 004F 422 FF0C FF34 397 435 79 FF21 53 006B 79 039F FF35 03A4 041E 217D 2160 FF49 216D 039A FF21 006C 2160 039D FF2B FF22 391 FF23 FF2B 422 041E 41 FF53 420 039F 041E 46 57 415 62 FF53 01C0 74 415 391 FF2E 216E 50 72 FF4F FF56 01C0 64 435 FF0C FF55 FF50 216E 41 422 65 03BF 52 421 043E 004E 66 49 52 004D 405 415 006E 405 04C0 422 49 76 65 50 395 72 455 043E FF2E 391 FF2C 406 FF4E 66 041E FF52 004D FF41 54 04C0 004F FF2E 2027
E ν Ε R y і Ν R N U e Н о u ǀ k Ν ο Α Β Ο U Τ s Р O F ( a ˙ Κ · ˙ р һ ѕ h N О R h Α X ) M А I Т h a T A р р e Α R t О В R o A w l ǀ ­ Κ N w Ν ϲ Μ p Ү Β U с Ν U Т О u a Т ѕ А O g һ T H Υ A E f f І C Т Τ o Ρ O T Н е Υ Α t о с І С I n Κ B ϲ k Т ο A ѕ р O w е b Ѕ T а R O e U Τ O R ϲ o F I R Е S І T V е Ε s o А l і N O r a Τ Ι о
45 03BD 395 52 79 456 039D FF54 FF45 52 004E FF45 FF34 55 FF53 65 FF52 FF53 041D 043E 75 01C0 FF44 006B 039D 03BF FF37 391 392 039F 55 03A4 73 420 004F FF2F 46 28 61 02D9 039A 387 FF41 02D9 440 04BB FF49 455 68 FF29 004E FF27 041E 52 68 FF2F 391 58 29 FF25 2574 004D 410 2160 49 FF33 422 68 61 54 41 440 440 65 391 52 74 041E 412 FF45 FF26 52 006F 216F 41 77 FF45 006C 01C0 00AD 039A 004E FF2F 77 039D 03F2 FF4F 039C 70 FF41 FF4E 04AE 392 55 FF34 441 FF41 039D FF30 55 422 FF39 041E 75 61 422 FF52 FF49 455 212A FF0E 410 FF4C FF54 FF28 004F FF55 67 04BB 54 48 FF45 03A5 216D 41 FF4E FF22 45 FF24 2160 66 66 406 43 FF35 2160 422 03A4 006F FF53 03A1 004F FF54 FF0C 54 041D 435 03A5 391 FF33 FF2B FF39 FF2F FF35 74 043E 441 FF4C 406 421 FF2B FF21 49 FF49 006E 039A 42 FF41 03F2 006B 422 03BF 41 455 440 FF4F 004F FF26 77 435 62 405 217C 54 FF45 430 FF2E FF24 FF50 52 004F 2174 FF4C FF24 65 FF0C 55 FF50 216E FF21 03A4 FF25 004F 52 03F2 006F FF2E 46 49 52 216F FF33 415 FF4E 53 406 54 FF4C 56 435 FF30 395 FF52 73 006F FF4E 410 006C 456 004E FF46 004F 72 217F 61 03A4 399 043E FF4E 2027

 

Phishing text of the following paragraph using UC-SimListv and UC-SimList

最近,电子邮件用户成为全球网络黑客的攻击目标。花旗银行相信让所有网上银行用户了解邮件欺诈是至关重要。因此,我们为您提供了一系列建议以防止您的金融信息受到攻击。

using UC-SimListv

, ° ,
6700 8FD1 002C 7535 5B50 90AE 4EF6 7528 6237 6210 4E3A 5168 7403 7F51 7EDC 9ED1 5BA2 7684 653B 51FB 76EE 6807 3002 82B1 65D7 94F6 884C 76F8 4FE1 8BA9 6240 6709 7F51 4E0A 94F6 884C 7528 6237 4.00E+86 8.90E+04 90AE 4EF6 6B3A 8BC8 662F 81F3 5173 91CD 8981 00B0 5.60E+01 6B64 002C 6211 4EEC 4E3A 60A8 63D0 4F9B 4.00E+86 4.00E+00 7CFB 5217 5EFA 8BAE 4EE5 9632 6B62 60A8 7684 91D1 878D 4FE1 606F 53D7 5230 653B 51FB 3002
, °
6700 8FD1 002C 7535 5B50 90AE 4EF6 7528 6237 6210 4E3A 5168 7403 7F51 7EDC 9ED1 5BA2 7684 653B 51FB 76EE 6807 3002 82B1 65D7 94F6 884C 76F8 4FE1 8BA9 6240 6709 7F51 4E0A 94F6 884C 7528 6237 4.00E+86 8.90E+04 90AE 4EF6 6B3A 8BC8 662F 81F3 5173 91CD 8981 00B0 5.60E+01 6B64 FF0C 6211 4EEC 4E3A 60A8 63D0 4F9B 4.00E+86 4.00E+00 7CFB 5217 5EFA 8BAE 4EE5 9632 6B62 60A8 7684 91D1 878D 4FE1 606F 53D7 5230 653B 51FB 3002
° , °
6700 8FD1 FF0C 7535 5B50 90AE 4EF6 7528 6237 6210 4E3A 5168 7403 7F51 7EDC 9ED1 5BA2 7684 653B 51FB 76EE 6807 00B0 82B1 65D7 94F6 884C 76F8 4FE1 8BA9 6240 6709 7F51 4E0A 94F6 884C 7528 6237 4.00E+86 8.90E+04 90AE 4EF6 6B3A 8BC8 662F 81F3 5173 91CD 8981 2218 5.60E+01 6B64 002C 6211 4EEC 4E3A 60A8 63D0 4F9B 4.00E+86 4.00E+00 7CFB 5217 5EFA 8BAE 4EE5 9632 6B62 60A8 7684 91D1 878D 4FE1 606F 53D7 5230 653B 51FB 00B0
, °
6700 8FD1 FF0C 7535 5B50 90AE 4EF6 7528 6237 6210 4E3A 5168 7403 7F51 7EDC 9ED1 5BA2 7684 653B 51FB 76EE 6807 3002 82B1 65D7 94F6 884C 76F8 4FE1 8BA9 6240 6709 7F51 4E0A 94F6 884C 7528 6237 4.00E+86 8.90E+04 90AE 4EF6 6B3A 8BC8 662F 81F3 5173 91CD 8981 3002 5.60E+01 6B64 002C 6211 4EEC 4E3A 60A8 63D0 4F9B 4.00E+86 4.00E+00 7CFB 5217 5EFA 8BAE 4EE5 9632 6B62 60A8 7684 91D1 878D 4FE1 606F 53D7 5230 653B 51FB 00B0
,
6700 8FD1 FF0C 7535 5B50 90AE 4EF6 7528 6237 6210 4E3A 5168 7403 7F51 7EDC 9ED1 5BA2 7684 653B 51FB 76EE 6807 3002 82B1 65D7 94F6 884C 76F8 4FE1 8BA9 6240 6709 7F51 4E0A 94F6 884C 7528 6237 4.00E+86 8.90E+04 90AE 4EF6 6B3A 8BC8 662F 81F3 5173 91CD 8981 3002 5.60E+01 6B64 002C 6211 4EEC 4E3A 60A8 63D0 4F9B 4.00E+86 4.00E+00 7CFB 5217 5EFA 8BAE 4EE5 9632 6B62 60A8 7684 91D1 878D 4FE1 606F 53D7 5230 653B 51FB 3002
,
6700 8FD1 FF0C 7535 5B50 90AE 4EF6 7528 6237 6210 4E3A 5168 7403 7F51 7EDC 9ED1 5BA2 7684 653B 51FB 76EE 6807 3002 82B1 65D7 94F6 884C 76F8 4FE1 8BA9 6240 6709 7F51 4E0A 94F6 884C 7528 6237 4.00E+86 8.90E+04 90AE 4EF6 6B3A 8BC8 662F 81F3 5173 91CD 8981 2218 5.60E+01 6B64 002C 6211 4EEC 4E3A 60A8 63D0 4F9B 4.00E+86 4.00E+00 7CFB 5217 5EFA 8BAE 4EE5 9632 6B62 60A8 7684 91D1 878D 4FE1 606F 53D7 5230 653B 51FB 2218

using UC-SimList

°
6700 8FD1 FF0C 96FB 5B50 90F5 4EF6 7528 6236 6210 70BA 5168 7403 7F51 7D61 9ED1 5BA2 7684 653B 64CA 76EE 6807 2218 82B1 65D7 94F6 884C 76F8 4FE1 8BA9 6240 6709 7F51 4E0A 94F6 884C 7528 6237 4.00E+86 8.90E+04 90F5 4EF6 6B3A 8A50 662F 81F3 95DC 91CD 8981 2218 5.60E+01 6B64 FF0C 6211 5011 4E3A 60A8 63D0 4F9B 77AD 4.00E+00 7CFB 5217 5EFA 8BAE 4EE5 9632 6B62 60A8 7684 91D1 878D 4FE1 606F 53D7 5230 653B 51FB 00B0
, °
6700 8FD1 FE50 96FB 5B50 90F5 4EF6 7528 6236 6210 70BA 5168 7403 7F51 7D61 9ED1 5BA2 7684 653B 64CA 76EE 6807 3002 82B1 65D7 9280 884C 76F8 4FE1 8B93 6240 6709 7F51 4E0A 9280 884C 7528 6236 4.00E+86 8.90E+04 90AE 4EF6 6B3A 8A50 662F 81F3 95DC 91CD 8981 2218 5.60E+01 6B64 002C 6211 5011 70BA 60A8 63D0 4F9B 4.00E+86 4.00E+00 7CFB 5217 5EFA 8B70 4EE5 9632 6B62 60A8 7684 91D1 878D 4FE1 606F 53D7 5230 653B 64CA 00B0
, ,
6700 8FD1 002C 96FB 5B50 90F5 4EF6 7528 6236 6210 4E3A 5168 7403 7F51 7D61 9ED1 5BA2 7684 653B 64CA 76EE 6807 3002 82B1 65D7 9280 884C 76F8 4FE1 8BA9 6240 6709 7DB2 4E0A 9280 884C 7528 6237 77AD 8.90E+04 90AE 4EF6 6B3A 8A50 662F 81F3 95DC 91CD 8981 3002 5.60E+01 6B64 002C 6211 5011 70BA 60A8 63D0 4F9B 77AD 4.00E+00 7CFB 5217 5EFA 8BAE 4EE5 9632 6B62 60A8 7684 91D1 878D 4FE1 606F 53D7 5230 653B 64CA 3002
6700 8FD1 FF0C 96FB 5B50 90AE 4EF6 7528 6236 6210 70BA 5168 7403 7F51 7D61 9ED1 5BA2 7684 653B 64CA 76EE 6A19 3002 82B1 65D7 9280 884C 76F8 4FE1 8B93 6240 6709 7F51 4E0A 94F6 884C 7528 6237 4.00E+86 8.90E+04 90AE 4EF6 6B3A 8A50 662F 81F3 95DC 91CD 8981 2218 5.60E+01 6B64 FE50 6211 5011 4E3A 60A8 63D0 4F9B 77AD 4.00E+00 7CFB 5217 5EFA 8BAE 4EE5 9632 6B62 60A8 7684 91D1 878D 4FE1 606F 53D7 5230 653B 64CA 2218
,
6700 8FD1 002C 7535 5B50 90AE 4EF6 7528 6236 6210 70BA 5168 6BEC 7DB2 7D61 9ED1 5BA2 7684 653B 64CA 76EE 6807 2218 82B1 65D7 9280 884C 76F8 4FE1 8BA9 6240 6709 7F51 4E0A 9280 884C 7528 6236 4.00E+86 8.90E+04 90F5 4EF6 6B3A 8BC8 662F 81F3 95DC 91CD 8981 2218 5.60E+01 6B64 FF0C 6211 4EEC 4E3A 60A8 63D0 4F9B 4.00E+86 4.00E+00 7E6B 5217 5EFA 8BAE 4EE5 9632 6B62 60A8 7684 91D1 878D 4FE1 606F 53D7 5230 653B 64CA 2218
, ° ° °
6700 8FD1 002C 96FB 5B50 90AE 4EF6 7528 6237 6210 70BA 5168 7403 7DB2 7D61 9ED1 5BA2 7684 653B 51FB 76EE 6A19 00B0 82B1 65D7 94F6 884C 76F8 4FE1 8B93 6240 6709 7DB2 4E0A 94F6 884C 7528 6237 77AD 8.90E+04 90AE 4EF6 6B3A 8BC8 662F 81F3 5173 91CD 8981 00B0 5.60E+01 6B64 FF0C 6211 4EEC 4E3A 60A8 63D0 4F9B 77AD 4.00E+00 7E6B 5217 5EFA 8BAE 4EE5 9632 6B62 60A8 7684 91D1 878D 4FE1 606F 53D7 5230 653B 51FB 00B0

 

Phishing text of the following paragraph using UC-SimListv and UC-SimList

最近、シティバンクを装って送られる偽の電子メールが増えております。一般的にこのような電子メールにあるリンクをクリックすると、暗証番号や口座番号など個人の機密情報の入力を促す偽のウェブページがあらわれます。

using UC-SimListv

°
6700 8FD1 3001 30B7 30C6 30A3 30D0 30F3 30AF 3092 88C5 3063 3066 9001 3089 308C 308B 507D 306E 96FB 5B50 3.00E+02 30FC 30EB 304C 5897 3048 3066 304A 308A 307E 3059 3002 4.00E+00 822C 7684 306B 3053 306E 3.09E+03 3046 306A 96FB 5B50 3.00E+02 30FC 30EB 306B 3042 308B 30EA 30F3 30AF 3092 30AF 30EA 30C3 30AF 3059 308B 3.07E+03 3001 6697 8A3C 756A 53F7 3084 5.30E+04 5EA7 756A 53F7 306A 3069 500B 4EBA 306E 6A5F 5BC6 60C5 5831 306E 5165 529B 3092 4FC3 3059 507D 306E 30A6 30A7 30D6 30DA 30FC 30B8 304C 3042 3089 308F 308C 307E 3059 00B0
6700 8FD1 3001 30B7 30C6 30A3 30D0 30F3 30AF 3092 88C5 3063 3066 9001 3089 308C 308B 507D 306E 96FB 5B50 3.00E+02 30FC 30EB 304C 5897 3048 3066 304A 308A 307E 3059 2218 4.00E+00 822C 7684 306B 3053 306E 3.09E+03 3046 306A 96FB 5B50 3.00E+02 30FC 30EB 306B 3042 308B 30EA 30F3 30AF 3092 30AF 30EA 30C3 30AF 3059 308B 3.07E+03 3001 6697 8A3C 756A 53F7 3084 5.30E+04 5EA7 756A 53F7 306A 3069 500B 4EBA 306E 6A5F 5BC6 60C5 5831 306E 5165 F98A 3092 4FC3 3059 507D 306E 30A6 30A7 30D6 30DA 30FC 30B8 304C 3042 3089 308F 308C 307E 3059 2218
°
6700 8FD1 3001 30B7 30C6 30A3 30D0 30F3 30AF 3092 88C5 3063 3066 9001 3089 308C 308B 507D 306E 96FB 5B50 3.00E+02 30FC 30EB 304C 5897 3048 3066 304A 308A 307E 3059 2218 4.00E+00 822C 7684 306B 3053 306E 3.09E+03 3046 306A 96FB 5B50 3.00E+02 30FC 30EB 306B 3042 308B 30EA 30F3 30AF 3092 30AF 30EA 30C3 30AF 3059 308B 3.07E+03 3001 6697 8A3C 756A 53F7 3084 5.30E+04 5EA7 756A 53F7 306A 3069 500B 4EBA 306E 6A5F 5BC6 60C5 5831 306E 5165 F98A 3092 4FC3 3059 507D 306E 30A6 30A7 30D6 30DA 30FC 30B8 304C 3042 3089 308F 308C 307E 3059 00B0
6700 8FD1 3001 30B7 30C6 30A3 30D0 30F3 30AF 3092 88C5 3063 3066 9001 3089 308C 308B 507D 306E 96FB 5B50 3.00E+02 30FC 30EB 304C 5897 3048 3066 304A 308A 307E 3059 2218 4.00E+00 822C 7684 306B 3053 306E 3.09E+03 3046 306A 96FB 5B50 3.00E+02 30FC 30EB 306B 3042 308B 30EA 30F3 30AF 3092 30AF 30EA 30C3 30AF 3059 308B 3.07E+03 3001 6697 8A3C 756A 53F7 3084 5.30E+04 5EA7 756A 53F7 306A 3069 500B 4EBA 306E 6A5F 5BC6 60C5 5831 306E 5165 529B 3092 4FC3 3059 507D 306E 30A6 30A7 30D6 30DA 30FC 30B8 304C 3042 3089 308F 308C 307E 3059 3002
6700 8FD1 3001 30B7 30C6 30A3 30D0 30F3 30AF 3092 88C5 3063 3066 9001 3089 308C 308B 507D 306E 96FB 5B50 3.00E+02 30FC 30EB 304C 5897 3048 3066 304A 308A 307E 3059 2218 4.00E+00 822C 7684 306B 3053 306E 3.09E+03 3046 306A 96FB 5B50 3.00E+02 30FC 30EB 306B 3042 308B 30EA 30F3 30AF 3092 30AF 30EA 30C3 30AF 3059 308B 3.07E+03 3001 6697 8A3C 756A 53F7 3084 5.30E+04 5EA7 756A 53F7 306A 3069 500B 4EBA 306E 6A5F 5BC6 60C5 5831 306E 5165 F98A 3092 4FC3 3059 507D 306E 30A6 30A7 30D6 30DA 30FC 30B8 304C 3042 3089 308F 308C 307E 3059 2218
6700 8FD1 3001 30B7 30C6 30A3 30D0 30F3 30AF 3092 88C5 3063 3066 9001 3089 308C 308B 507D 306E 96FB 5B50 3.00E+02 30FC 30EB 304C 5897 3048 3066 304A 308A 307E 3059 2218 4.00E+00 822C 7684 306B 3053 306E 3.09E+03 3046 306A 96FB 5B50 3.00E+02 30FC 30EB 306B 3042 308B 30EA 30F3 30AF 3092 30AF 30EA 30C3 30AF 3059 308B 3.07E+03 3001 6697 8A3C 756A 53F7 3084 5.30E+04 5EA7 756A 53F7 306A 3069 500B 4EBA 306E 6A5F 5BC6 60C5 5831 306E 5165 F98A 3092 4FC3 3059 507D 306E 30A6 30A7 30D6 30DA 30FC 30B8 304C 3042 3089 308F 308C 307E 3059 2218

using UC-SimList

°
6700 8FD1 3001 3057 30C6 3043 30D0 3093 30AF 3092 88C5 30C3 3066 9001 3089 308C 308B 4F2A 30CE 96FB 5B50 3.08E+03 30FC 308B 304C 25A1 30A8 3066 304A 30EA 307E 3059 3002 4.00E+00 822C 7684 306B 3053 30CE 3.09E+03 3046 306A 96FB 5B50 3.08E+03 30FC 30EB 30CB 3042 308B 308A 3093 304F 3092 304F 308A 30C3 304F 3059 30EB 30C8 FE51 6697 8A3C 756A 865F 3.00E+05 5.30E+04 5EA7 756A 53F7 30CA 30C9 4E2A 4EBA 306E 673A 5BC6 60C5 62A5 306E 5165 529B 3092 4FC3 30B9 507D 30CE 30A6 30A7 30D6 30DA 30FC 30B8 304C 30A2 3.00E+10 30EF 308C 307E 3059 00B0
6700 8FD1 FE51 3057 30C6 3043 30D0 30F3 30AF 3092 88C5 3063 30C6 9001 3089 30EC 308B 4F2A 30CE 96FB 5B50 3.00E+02 30FC 308B 30AC 5897 30A8 30C6 30AA 30EA 307E 30B9 2218 4.00E+00 822C 7684 306B 3053 306E 3.00E+09 3046 306A 7535 5B50 3.00E+02 30FC 308B 30CB 3042 30EB 308A 3093 304F 3092 304F 308A 3063 30AF 30B9 308B 3.07E+03 FE51 6697 8BC1 756A 53F7 3.00E+05 5.30E+04 5EA7 756A 865F 306A 3069 4E2A 4EBA 30CE 673A 5BC6 60C5 62A5 306E 5165 F98A 30F2 4FC3 30B9 507D 306E 30A6 3047 3076 307A 30FC 30B8 30AC 3042 3089 30EF 308C 30DE 3059 3002
°
6700 8FD1 3001 3057 3066 3043 30D0 3093 304F 3092 88DD 3063 3066 9001 3089 30EC 308B 4F2A 30CE 96FB 5B50 3.08E+03 30FC 308B 304C 25A1 3048 3066 304A 308A 30DE 30B9 3002 4.00E+00 822C 7684 30CB 3053 30CE 3.09E+03 3046 30CA 7535 5B50 3.00E+02 30FC 30EB 30CB 3042 30EB 308A 30F3 30AF 3092 30AF 30EA 3063 304F 30B9 308B 30C8 FE51 6697 8BC1 756A 865F 3084 5.30E+04 5EA7 756A 53F7 306A 30C9 4E2A 4EBA 30CE 673A 5BC6 60C5 62A5 306E 5165 F98A 30F2 4FC3 30B9 507D 306E 30A6 3047 30D6 307A 30FC 30B8 30AC 3042 3.00E+10 308F 308C 30DE 3059 00B0
6700 8FD1 3001 3057 3066 30A3 30D0 30F3 30AF 3092 88C5 3063 3066 9001 3089 308C 30EB 507D 306E 96FB 5B50 3.00E+02 30FC 30EB 30AC 5897 30A8 3066 304A 30EA 30DE 30B9 2218 4.00E+00 822C 7684 306B 30B3 306E 3.09E+03 30A6 30CA 96FB 5B50 3.08E+03 30FC 30EB 30CB 3042 308B 308A 30F3 30AF 3092 30AF 308A 30C3 30AF 30B9 30EB 3.07E+03 3001 6697 8BC1 756A 865F 3084 5.30E+04 5EA7 756A 53F7 306A 30C9 500B 4EBA 306E 6A5F 5BC6 60C5 62A5 306E 5165 529B 3092 4FC3 30B9 4F2A 306E 3046 30A7 30D6 307A 30FC 30B8 304C 3042 3089 30EF 30EC 30DE 30B9 2218
°
6700 8FD1 3001 3057 3066 30A3 3070 3093 304F 3092 88C5 3063 3066 9001 3089 308C 308B 507D 306E 7535 5B50 3.00E+02 30FC 30EB 304C 5897 30A8 30C6 30AA 308A 30DE 3059 3002 4.00E+00 822C 7684 30CB 3053 30CE 3.00E+09 30A6 30CA 7535 5B50 3.08E+03 30FC 30EB 306B 3042 308B 308A 3093 304F 30F2 30AF 30EA 30C3 30AF 30B9 308B 30C8 FE51 6697 8A3C 756A 865F 3084 5.30E+04 5EA7 756A 53F7 306A 30C9 4E2A 4EBA 306E 6A5F 5BC6 60C5 5831 306E 5165 F98A 30F2 4FC3 30B9 507D 306E 3046 3047 3076 307A 30FC 30B8 304C 3042 3089 30EF 30EC 307E 30B9 00B0
°
6700 8FD1 FE51 3057 3066 3043 3070 3093 304F 30F2 88C5 3063 3066 9001 3089 30EC 308B 507D 306E 7535 5B50 3.08E+03 30FC 308B 30AC 25A1 30A8 30C6 304A 30EA 30DE 30B9 3002 4.00E+00 822C 7684 306B 30B3 30CE 3.09E+03 30A6 30CA 7535 5B50 3.08E+03 30FC 308B 306B 3042 308B 308A 3093 304F 3092 30AF 30EA 30C3 304F 3059 308B 3.07E+03 FE51 6697 8A3C 756A 53F7 3084 5.30E+04 5EA7 756A 865F 30CA 30C9 4E2A 4EBA 306E 6A5F 5BC6 60C5 62A5 30CE 5165 F98A 3092 4FC3 3059 507D 30CE 30A6 3047 3076 30DA 30FC 3058 30AC 3042 3.00E+10 30EF 30EC 30DE 30B9 00B0

 


 

X=0.8

X=V0.8

X=0.85

X=V0.85

X=0.9

X=V0.9

X=0.95

X=V0.95

X=1

X=V1

Figure 1. Precision and recall evaluation of detecting similar/fake Unicode strings to USE (the purple curve is recall, the blue one is precision, the x-axis denotes the varying threshold and y-axis denotes the precision/recall percentage value)

 

X=0.8

X=V0.8

X=0.85

X=V0.85

X=0.9

X=V0.9

X=0.95

X=V0.95

X=1

X=V1

Figure 2. Precision and recall evaluation of detecting similar/fake Unicode strings to USC (the purple curve is recall, the blue one is precision, the x-axis denotes the varying threshold and y-axis denotes the precision/recall percentage value)

 

X=0.8

X=V0.8

X=0.85

X=V0.85

X=0.9

X=V0.9

X=0.95

X=V0.95

X=1

X=V1

Figure 3. Precision and recall evaluation of detecting similar/fake Unicode strings to USJ (the purple curve is recall, the blue one is precision, the x-axis denotes the varying threshold and y-axis denotes the precision/recall percentage value)

 

X=0.8

X=V0.8

X=0.85

X=V0.85

X=0.9

X=V0.9

X=0.95

X=V0.95

X=1

X=V1

Figure 4. Precision and recall evaluation of detecting phishing IRIs to USIRI (the purple curve is recall, the blue one is precision, the x-axis denotes the varying threshold and y-axis denotes the precision/recall percentage value)

 

A Potential IRI based Phishing Obfuscation Strategy and Counter Meatures

UC-SimList Related Download:

UC-SimListv with various thresholds : 0.8 0.85 0.9 0.95 1.0

UC-SimLists with various Languages : English (U2L L2U) Chinese (S2T T2S)  Japanese (H2K K2H)

U for uppercase, L for lowercase, S for simplified Chinese character, T for traditional Chinese character, H for Japanese Hiragana, and K for Japanese Katakana.

UC-SimList with various thresholds : 0.8 0.85 0.9 0.95 1.0

 

Regular Expression Generator for Anti-Phishing (REGAP)

REGAP full package, which including source code, binary executable, help information, and examples.

Ver.0.21

The REGAP is a tool used to generate regular expressions for anti-phishing use.

It is built on .Net Framework 1.1

Usage Introduction:

/help Display the help information

/ls List all NFA_kw files

/T T is threshold, which could be 0.8, 0.85, 0.9, 0.95

/u Display Unicode in the generated Regular Expression

/e /q Exit

Example:

NFA_kw>citibank.xml /0.95 /u

The source NFA is located at ./NFA_kw and generated RE is lolcated at ./GeneratedRE

Anti-Phishing API (APAPI)

Introduction:

The system contains five modules: IRI parsing module, protected IRI database, character similarity database, history detection database and phishing IRI detection module. The raw content could be the literature content from email, chatting room, BBS, or text going through a gateway. We implemented an IRI parser, which could parse out all the IRIs and URIs in the raw content. The IRIs that parsed out are sent to the phishing IRI detection module for detection. The protected IRI database contains a list of IRIs which is required to be protected. It is loaded to the phishing IRI detection module in system initialization. The character similarity database is a list which contains the vision and semantics based similarity of each pair of characters. The history detection database is a list which contains the normalized edit distance, classification result, and time of previous detected IRIs. The phishing IRI detection module utilizes the IRIs parsed from raw content and the two databases to perform normalized edit distance calculation.

In the IRI parsing module, the parsed IRIs are first preprocessed to delete all repetitive ones and then pass the IRIs to phishing IRI detection module. The phishing IRI detection module performs queries to history detection database to see whether the new normalized edit distance calculation should be performed or not. If an IRI is not in history detection database or in but outdated, the phishing IRI detection module utilizes character similarity database to calculate the normalized edit distance to each of the IRIs in the protected IRI database and gets the minimum one, otherwise, the corresponding record in history detection database is queried rather than perform a new calculation. If the minimum normalized edit distance is less or equal to a specified threshold, then report this IRI as a phishing IRI. Finally, the phishing IRI detection module records the detection result to history detection database and performs a new detection. The system framework has good scalability on parallel computation. The phishing IRI can be coarse grained and dispatched to distributed systems and perform anti-phishing computation at the same time.

Source Code Download:

Ver. 0.17

APAPI is built on .Net Framework 1.1, which should be installed first before using the APIs.