[nsp-sec] server-vonage.com

Michael Sinatra michael at rancid.berkeley.edu
Mon Aug 17 15:06:31 EDT 2009


Looks like server-vonage.com pretty much exists solely as a phishing
drop (see attached email--be careful with the links).  The site is still
up with a scraped version of the Vonage login page.

If anyone from the registrar, hosting provider, or vonage itself is
available for take-down activities, that would be great.  I'll also
contact abuse@ the hosting provider.

host server-vonage.com
server-vonage.com has address 194.154.164.103

whois -h whois.cymru.com 194.154.164.103
AS      | IP               | AS Name
5413    | 194.154.164.103  | AS5413 GX Networks

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.
Registrant:
 Contactprivacy.com
 96 Mowat Ave
 Toronto, ON M6K 3M1
 CA

 Domain name: SERVER-VONAGE.COM


 Administrative Contact:
    contactprivacy.com,   server-vonage.com at contactprivacy.com
    96 Mowat Ave
    Toronto, ON M6K 3M1
    CA
    +1.4165385457
 Technical Contact:
    contactprivacy.com,   server-vonage.com at contactprivacy.com
    96 Mowat Ave
    Toronto, ON M6K 3M1
    CA
    +1.4165385457


 Registration Service Provider:
    services at 123-reg.co.uk
    08712309525
    08709126612 (fax)
    http://www.123-reg.co.uk
    This company may be contacted for domain login/passwords,
    DNS/Nameserver changes, and general domain support questions.


 Registrar of Record: TUCOWS, INC.
 Record last updated on 15-Aug-2009.
 Record expires on 15-Aug-2011.
 Record created on 15-Aug-2009.

 Registrar Domain Name Help Center:
    http://domainhelp.tucows.com

 Domain servers in listed order:
    NS2.123-REG.CO.UK
    NS.123-REG.CO.UK


 Domain status: clientTransferProhibited
                clientUpdateProhibited



More information about the nsp-security mailing list