[nsp-sec] Live phishing phorm on AS 35470

[Joel Rosenblatt]

Hi,

We have been getting hit with phish all pointing to the form on fm. 9hz. com (remove the spaces) for the last two days

AS      | IP               | AS Name
35470   | 79.170.89.30     | XL-AS XL Network

Can someone kill the form and, if possible, collect the ID's that have been phished.

Thanks,
Joel Rosenblatt

Joel Rosenblatt, Manager Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel