[nsp-sec] Paypal phish on Sri Lanka government website

[Janish, Nathan]

No contacts at Sri Lanka Telecom Internet but from a Tier 1 perspective we pass traffic to Cable & Wireless down in Miami.  I'll give C&W two hours to handle the matter and block it on our backbone if they don't.

Nathan Janish
Level3 Communications
720.888.3350



-----Original Message-----
From: nsp-security-bounces at puck.nether.net [mailto:nsp-security-bounces at puck.nether.net] On Behalf Of sthaug at nethelp.no
Sent: Thursday, May 01, 2008 1:55 AM
To: nsp-security at puck.nether.net
Subject: [nsp-sec] Paypal phish on Sri Lanka government website

----------- nsp-security Confidential --------

Anyody got suitable contacts in Sri Lanka? There's a Paypal phish on

       http://www.pmoffice.gov.lk:10010/

which redirects to

      http://www.pmoffice.gov.lk:10010/www.paypal.com/cgi-bin/

IP is 203.115.31.131, ISP is AS 9329, Sri Lanka Telecom Internet.

Steinar Haug, AS 2116


_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the nsp-security community. Confidentiality is essential for effective Internet security counter-measures.
_______________________________________________