[nsp-sec] Phising Page AS29873 / 65.254.248.144

[Chris Morrow]

On 03/15/11 10:41, Serge Droz wrote:
> ----------- nsp-security Confidential --------
> 
> Hello All,
> 
> does anyone have a contact to get rid of this Phising Page:
> 
> http://wasolu.com/Form/use/mlist/form1.html
> 
> 65.254.254.33 ?
> 
> The respective phising mail, included below, is pretty bad, but as usual that
> wouldn't stop people from clicking on the link.
> 

Note:           ARIN has attempted to validate the data for this POC,
but has received no response from the POC since 2010-09-27
Name:           Brock, Brian
Handle:         BBR189-ARIN
Company:        Endurance International Group, Inc.
Address:        70 Blanchard Road
City:           Burlington
StateProv:      MA
PostalCode:     01803
Country:        US
RegDate:        2008-08-11
Updated:        2009-09-27
Phone:          +1-781-852-3254 (Office)
Email:          bnbrock at maileig.com
Ref:            http://whois.arin.net/rest/poc/BBR189-ARIN


Name:           EIG Network Operations
Handle:         ENO74-ARIN
Company:        The Endurance International Group, Inc
Address:        70 Blanchard Road
City:           Burlington
StateProv:      MA
PostalCode:     01803
Country:        US
RegDate:        2010-08-25
Updated:        2010-08-25
Phone:          +1-339-234-9762 (Office)
Email:          netmon at maileig.com
Ref:            http://whois.arin.net/rest/poc/ENO74-ARIN

note that the domain maileig.com seems to be signed up via tucows to:
Registrant:
 Domain Name Holding Company, Inc.
 70 Blanchard Road
 Burlington, MA 01803
 US


maileig -> BIZLAND-SD ASN -> 65.254.224.0/19 BIZLAND-FC03
OrgName:        The Endurance International Group, Inc.


> Thanks for any help
> Serge
> 
> 
> ------
> 
> De : WEBMASTER ADMINISTRATEUR [mailto:denict at sercomtel.com.br]
> Envoyé : mardi, 15. mars 2011 13:49
> Objet : System Administrator
> 
> Un ordinateur de maintenance de base est actuellement en cours sur notre
> Webmail Message Center.
> Notre Centre de messages doit être remis à zéro en raison de la grande quantité
> de spams que nous
> recevons quotidiennement. Une quarantaine d'entretien nous aidera à éviter ce
> dilemme quotidien.
> Pour re-valider votre boîte aux lettres S'il vous plaît Cliquez sur le lien
> ci-dessous:
> 
> http://wasolu.com/Form/use/mlist/form1.html
> 
> Le défaut de re-valider votre boîte aux lettres rendra votre e-mail en-active
> de notre base de
> données.
> 
> Cordialement,
> System Administrator
> 192.168.0.1
> DE SANS NICOLAS
> 
> 
> ----------
>