[nsp-sec] Phishing website in AS 10297

Helge Aksdal helge.aksdal at telenor.com
Tue May 18 10:14:00 EDT 2010


Hi all,

The phishing website hxxp://online-no.co.cc is currently being
hosted at

AS      | IP               | AS Name
10297   | 209.190.85.9     | COLUMBUSNAP - The Columbus Network Access Point, Inc.

does anyone have the possibility to take down the website, or know
someone that can?

Example of phishing e-mail below:

> -------- Original Message --------
> Subject: Konto oppgradering
> Date: Mon, 17 May 2010 07:35:53 +0100
> From: Telenor e-post <upgrade at online.no>
> Reply-To: <noreply at online.no>
>
> Kjære Bruker,
> Vi er nå oppgraderer våre regnskaper, og at du må bekrefte din  
> informasjon på linken nedenfor;
> hxxp://online-no.co.cc/
> Takk
> IT-avdelingen

-- 
Helge Aksdal 
Abuse Response Team
Telenor 



More information about the nsp-security mailing list