[nsp-sec] UPC NL & iBurst Phising - (Hosted in AS3595)

[Stijn Jonker]

All,

If GNAXNET (AS3595) is represented on the list could one please look  
at the host at 72.9.224.34 it's at least hosting an phishing site for  
our dutch operations UPC NL, and I stumbled upon one for iBurst.co.za  
as well. The UPC one was warned for by Firefox the iBurst not.

The upc.php and iBurstb.php are unfortunately interpreted and not  
shown, so no idea where the dropbox is..

hXXp:// katzkasting.com/ forum/images/smiles/upc.htm

hXXp:// katzkasting.com/ forum/images/smiles/iBurstb/iBurstb.htm

Bulk mode; whois.cymru.com [2009-09-03 10:29:23 +0000]
3595    | 72.9.224.34      | GNAXNET-AS - Global Net Access, LLC


--
Yours Sincerly / Met Vriendelijke groet,
Stijn Jonker
SJCJonker at SJC.nl
Skype: sjcjonker