[URGENT] SUSPENSION REQUIRED: Phishing website IN ACTIVITY

Status
Not open for further replies.

Cert Lexsi

New Member
Messages
2
Reaction score
0
Points
0
We have just identified a phishing website under your administration.



As a result, we ask you to proceed with its takedown as soon as possible.





The phishing website is located at the following domain: postestatic.pcriot.com




and at the following URL: http://postestatic.pcriot.com/Entreprise-Professionnel.html


This URL leads to a fraudulent page containing a counterfeiting site of La Poste.




The site responds to the following IP address(es): 69.175.121.74





We have verified that none of these IP addresses belong to La Poste (www.laposte.net)



Please consider reporting any data in your possession which may be related to the reported incident (such as connection logs, suspicious accounts in relation to this fraud...)



Thank you to confirm the reception of our request by responding to this email.



Thanks for you cooperation.





CERT-LEXSI - Cybercrime department

http://cert.lexsi.com

cert-soc@lexsi.com





CERT-LEXSI is a CSIRT team recognized by Enisa that conducts cybercrime monitoring and investigation and works with other CSIRTs and law enforcement agencies.

Our mission is to correlate information on phishers and cybercrime gangs to assist legal procedures and lead to arrests.

You may be in possession of critical information for investigations:

- server files you can send us (we research to find out identities and fraud evidence;

- IP addresses used for server administration;

- information related to billing (rejected credit card, card owner name, full or partial cc number).
 
Status
Not open for further replies.
Top