Re: We have detected that PHPNET HOSTING SERVICES IS HOSTING A FRAUDULENT WEBSITE that offers a PHISHING SCAM against ALLIANCE LIECESTER.

What part of that implies php.net ? That company might be called PHPNET but there is no period in there and no domain name to do with us. Scott On 6 Feb 2009, at 23:36, juanluis.fernandezperez@telefonica.es wrote:

Hello Derick, The scam phishing site is hosted in IP: 195.144.11.40,please review this site and closure of this scam. http://whois.domaintools.com/195.144.11.40

inetnum:        195.144.11.0 - 195.144.11.255
netname:        PHPNET
descr:          PHPNET hosting services
country:        FR
org:            ORG-PF3-RIPE
admin-c:        GT2183-RIPE
tech-c:         GT2183-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-HM-PI-MNT
mnt-lower:      RIPE-NCC-HM-PI-MNT
mnt-by:         PHPNET-MNT
mnt-routes:     PHPNET-MNT
mnt-domains:    PHPNET-MNT
source:         RIPE # Filtered

organisation: ORG-PF3-RIPE

org-name:       PHPNET FRANCE
address:        123 ter cours de la libération
address:        38100
address:        GRENOBLE
address:        FRANCE
phone:          +33 04 56 58 65 00
fax-no:         +33 0 4 38 49 27 95

e-mail:

admin-c:        GT2183-RIPE
tech-c:         GT2183-RIPE
org-type:       OTHER
mnt-by:         PHPNET-MNT
mnt-ref:        PHPNET-MNT
source:         RIPE # Filtered

person:         GRANGIER Thibaud
address:        123 ter cours de la libération
address:        38100
address:        GRENOBLE
address:        FRANCE
phone:          +33 04 56 58 65 00

e-mail:

nic-hdl:        GT2183-RIPE
mnt-by:         PHPNET-MNT
source:         RIPE # Filtered

route:          195.144.11.0/24
descr:          PHPNET Hosting Services
origin:         AS42363
mnt-by:         PHPNET-MNT
source:         RIPE # Filtered

Best Regards __________________________ Juan Luis Fernández Pérez Servicio antiphishing SOC-Telefonica Empresas Telf:+34917548987 Fax: +34911817465 __________________________ -----Derick Rethans <derick@php.net> escribió: ----- Para: Anti-Fraud_Command-Center <phishing@telefonica.es> De: Derick Rethans <derick@php.net> Fecha: 06/02/2009 23:33 cc: thibaud@phpnet.org, security@php.net, php-webmaster@lists.php.net Asunto: Re: We have detected that PHPNET HOSTING SERVICES IS HOSTING A FRAUDULENT WEBSITE that offers a PHISHING SCAM against ALLIANCE LIECESTER. On Fri, 6 Feb 2009, Anti-Fraud_Command-Center wrote: Telefonica Spain is managing the FRAUDULENT ACTIONS against ALLIANCE LIECESTER BANK and all related with PHISHING SCAMS against this finantial entity. We have detected that PHPNET HOSTING SERVICES IS HOSTING A FRAUDULENT WEBSITE that offers a PHISHING SCAM against ALLIANCE LIECESTER BANK from the next URL: http://forum.cascranes.com/cache/index.php with this IP: 195.144.11.40, HOSTED ON YOUR NETWORK. Sorry, but we do not have any servers hosted in Africa. and especially not with this IP address. with kind regards, Derick Rethans _____________________________________________________________________ Mensaje analizado y protegido por Telefonica Empresas