[nsp-sec] Kiwibank phishing - dyndns?

David Robb ender at paradise.gen.nz
Mon Mar 10 16:38:25 EDT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Today's phishing attempt for Kiwibank sends victims off to:

hxxp 
://w ww.autoflock.com/counter/.web/www.kiwibank.com.au/update%20account/Online%20Services/

- -> 64.185.237.101 (Content Broadcast)

17081   | 64.185.237.101   | XIBIG - Xibi Group, Inc.


autoflock.com has no useful contact details (surprise!), but is hosted by
1forallhosting.com -> dnsdc4.com/NameCheap.com -> mydyndns.org

dnsdc4.com also looks like it might be the same person.



Any assistance in making this go away would be appreciated.

Thanks,
- --
David Robb - Solutions Design Engineer, TelstraClear.
(david.robb at team.telstraclear.co.nz, ender at paradise.gen.nz)
ASN: 4763, 4768, 7714, 9345, 9901       inoc-dba: 9901*DWR
ph: +64-9-9125266  mob: +64-29-9125266

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iD8DBQFH1ZxGMC982kVZF/cRAlo3AKCxpSq5bMB4/p8VaIjO382Un8QI/gCfTAxj
uhfASndWFgJfRE9BdnV76uk=
=L90V
-----END PGP SIGNATURE-----




More information about the nsp-security mailing list