[nsp-sec] Anybody with contacts at Rackvibe?

[SURFcert - Peter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

A number of our universities fell victim to phishing attacks. A couple
of those attacks pointed to phishing sites hosted on one and the same
server. We have been trying to contact the owner of the site and
Rackvibe but we did not get any response. And the site is still up.

Have a look at http://vs01.justedge.net/~finanspr/. There you will find
phishing sites for a number webmail servers. We already warned the sites
in The Netherlands. But it would be much more efficient when we can shut
down that site.

That host shows up in spam and phishing messages (searching for the IP
address and domain) since 2002.

- --
Peter Peters
SURFcert Officer off Duty
cert at surfnet.nl                            http://cert.surfnet.nl/
office-hours: +31 302 305 305    emergency (24/7): +31 622 923 564
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFI/zB3elLo80lrIdIRAoIBAKCQMIJ7zHpI/+dxjMdDnC/QI5AHywCfUWzK
13EKFlbD4R5ax2W7fZHQKZs=
=ZHk9
-----END PGP SIGNATURE-----