[nsp-sec] Help with Phishing page at AS 32244

[Gabriel Iovino]

Can someone help get this Phishing page taken down? Two emails have been
sent to <abuse at liquidweb.com> with zero success. First email was sent on
2011-08-18.

> -----
>                Type: Phishing
>          IP Address: 72.52.252.4
>           Date/Time: 2011-08-29 13:39:04 (UTC)
>                 URL: hxxp://gogu.in/phpfprmgenerator/use/wantsbox/form1.html
>     String to match: Please fill in all fields marked with a *
>        String found: Yes
> Sample CURL command: curl -s -i -m 60 -H "User-Agent: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 5.1)" "hxxp://gogu.in/phpfprmgenerator/use/wantsbox/form1.html"
>          First Seen: 2011-08-18 14:26:18 (UTC)
> -----


> whois -h whois.cymru.com '-v 72.52.252.4'
> AS      | IP               | BGP Prefix          | CC | Registry | Allocated  | AS Name
> 32244   | 72.52.252.4      | 72.52.192.0/18      | US | arin     | 2006-08-03 | LIQUID-WEB-INC - Liquid Web, Inc.


> whois -h peer.whois.cymru.com '72.52.252.4'
> PEER_AS | IP               | AS Name
> 1239    | 72.52.252.4      | SPRINTLINK - Sprint
> 3356    | 72.52.252.4      | LEVEL3 Level 3 Communications
> 3549    | 72.52.252.4      | GBLX Global Crossing Ltd.
> 3561    | 72.52.252.4      | SAVVIS - Savvis

Thanks in advance.

Gabe

-- 
Gabriel Iovino
Principal Security Engineer, REN-ISAC
http://www.ren-isac.net
24x7 Watch Desk +1(317)278-6630


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20110829/a8bc7648/attachment-0001.sig>