[nsp-sec] UPC NL & iBurst Phising - (Hosted in AS3595)

[Stijn Jonker]

All,

Apologies, wrong signature and no introduction; I'm working for UPC  
Broadband, the corporate entity of UPC across 10 European countries.  
Main AS6830.

Stijn

--
Yours Sincerly,

Stijn Jonker
Security Manager
UPC Broadband
+31 20 7789993
SJonker at UPCBroadband.com
SJCJonker at SJC.nl
Skype: sjcjonker






On 3 Sep 2009, at 12:53, Stijn Jonker wrote:

> ----------- nsp-security Confidential --------
>
> All,
>
> If GNAXNET (AS3595) is represented on the list could one please look  
> at the host at 72.9.224.34 it's at least hosting an phishing site  
> for our dutch operations UPC NL, and I stumbled upon one for  
> iBurst.co.za as well. The UPC one was warned for by Firefox the  
> iBurst not.
>
> The upc.php and iBurstb.php are unfortunately interpreted and not  
> shown, so no idea where the dropbox is..
>
> hXXp:// katzkasting.com/ forum/images/smiles/upc.htm
>
> hXXp:// katzkasting.com/ forum/images/smiles/iBurstb/iBurstb.htm
>
> Bulk mode; whois.cymru.com [2009-09-03 10:29:23 +0000]
> 3595    | 72.9.224.34      | GNAXNET-AS - Global Net Access, LLC
>
>
> --
> Yours Sincerly / Met Vriendelijke groet,
> Stijn Jonker
> SJCJonker at SJC.nl
> Skype: sjcjonker
>
>
>
>
>
>
>
>
> _______________________________________________
> nsp-security mailing list
> nsp-security at puck.nether.net
> https://puck.nether.net/mailman/listinfo/nsp-security
>
> Please do not Forward, CC, or BCC this E-mail outside of the nsp- 
> security
> community. Confidentiality is essential for effective Internet  
> security counter-measures.
> _______________________________________________