[nsp-sec] Phishing site against Mexican Agency at AS21788

[David Jiménez]

Hi folks,

The following url is hosting a phishing site against a Mexican Agency in
charge of the electricity distribution in the country.

hxxp://www.gob.cfe-pago.com/

AS      | IP               | BGP Prefix          | CC | Registry |
Allocated  | AS Name
21788   | 64.120.186.79    | 64.120.128.0/18     | US | arin     |
2009-04-27 | NOC - Network Operations Center Inc.


The real domain name is http://www.cfe.gob.mx/

Is there anyone from AS21788 that could help us to shutdown it and gather
information in order to identify the dropbox and sessions to this IP??


Kind regards
-- 
---
David Jimenez | CERT-MX Operations Center
--------------------------------------------------------------
Mexican National CSIRT
Federal Police / E-Crime Unit
Email: cert-mx at ssp.gob.mx
Phishing Report: phishing at ssp.gob.mx
PGP Key: 1937 EF11 0521 B628 7228 4699 2BAE 4D94 778B 188