[nsp-sec] Phishing website in AS 10297

[Chris Morrow]

i have a friendly contact there, I'll send it now... minus nsp-sec infoz.
-chris

Helge Aksdal wrote:
> ----------- nsp-security Confidential --------
> 
> Hi all,
> 
> The phishing website hxxp://online-no.co.cc is currently being
> hosted at
> 
> AS      | IP               | AS Name
> 10297   | 209.190.85.9     | COLUMBUSNAP - The Columbus Network Access Point, Inc.
> 
> does anyone have the possibility to take down the website, or know
> someone that can?
> 
> Example of phishing e-mail below:
> 
>> -------- Original Message --------
>> Subject: Konto oppgradering
>> Date: Mon, 17 May 2010 07:35:53 +0100
>> From: Telenor e-post <upgrade at online.no>
>> Reply-To: <noreply at online.no>
>>
>> Kjære Bruker,
>> Vi er nå oppgraderer våre regnskaper, og at du må bekrefte din  
>> informasjon på linken nedenfor;
>> hxxp://online-no.co.cc/
>> Takk
>> IT-avdelingen
>