[nsp-sec] Phishing dropbox at (AS 27715)

[Rob Thomas]

Hi, David.

> Just received the following email with a phishing html as attachment that
> drop the information at 189.126.116.82 (AS27715).

Thanks for the heads up!  I suspect 189.126.116.82 has hosted a few
phishing sites.

        stamp        |                     qname                     |
class | type |     rdata
--------------------- -----------------------------------------------
------- ------ ----------------
 2011-06-15 02:28:56  |  accounts.craigslist.org.craigslist-center.org
|  IN     |  A     |  189.126.116.82
 2011-06-15 07:44:54  |  xxxcnn1320.hospedagemdesites.ws
|  IN     |  A     |  189.126.116.82

We don't see a lot of traffic to it presently.

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
https://www.team-cymru.org/
"Say little and do much." M Avot 1:15