[nsp-sec] AS5713 - phishing drop box

Nishal Goburdhan nishal at is.co.za
Mon Oct 13 13:28:34 EDT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 13 Oct 2008, at 7:18 PM, Roper, Sara wrote:

> ----------- nsp-security Confidential --------
>
> All,
>
> Anyone with contacts at AS5713?  It seems they're hosting a phishing
> drop box targeting Qwest customers.  :(  Example below - I'm working  
> to
> obtain full headers.  Whois info:
>
> bash-2.04$ whois -h whois.cymru.com 196.25.210.98
> AS      | IP               | AS Name
> 5713    | 196.25.210.98    | SAIX-NET

hi.

i can ping folk that i know there, but they'll probably only get to it  
tomorrow [it's 19h27 as i type].

- --
nishal goburdhan, internet solutions, south africa
tel: +27-11-575-0283, inoc-dba: 3741*ndg
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)

iEYEARECAAYFAkjzhUIACgkQgWyqjgMSsWyO3ACePTGcFJFOZaTn2PNsyKhlIil0
6EoAnRAftoop42abLdBaz/BJTO5deLAc
=Rxew
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list