Alternatives to Inbox Cat for all platforms with any license

Platforms

Show 17 less popular platforms

Inbox Cat Comments

phishing?

Comment by sentient
about Inbox Cat · Aug 2012 · Helpful Not helpful

I'm not sure of what the following means but this is my experience with inbox.cat.
My email reader complained about its certificate so I looked at it and this is what I found:

  • the imap/pop/smtp server is mail.inbox.cat
  • its address is not found on whois lookup, but my dns translates it to 146.185.25.42
  • the same IP was recently used for phishing, see (http://antifraudintl.org/showthread.php?t=63046 )
  • reverse dns shows that 146.185.25.42 is actually xray.unisonplatform.com
  • the SSL certificate for the encrypted connection to mail.inbox.cat is issued to *.unisonplatform.com

So what's going on here? Not sure but it looks phishy..

here's the dns records:

  • Domain ID: REG-D912762
  • Domain Name: inbox.cat
  • Domain Name ACE: inbox.cat
  • Domain Language:
  • Registrar ID: R-2027 (GANDI SAS)
  • Created On: 2011-10-17 08:06:41 GMT
  • Last Updated On: 2012-07-07 10:41:55 GMT
  • Expiration Date: 2012-10-17 08:06:41 GMT
  • Status: clientTransferProhibited
  • Registrant ID: EJS29-GANDI-CQCA
  • Registrant Name: Elliot Jakubiel Smith
  • Registrant Organization: PulseCloud International
  • Registrant Street: 86 Barkers Lane
  • Registrant City: Manchester
  • Registrant State/Province:
  • Registrant Postal Code: M33 6SD
  • Registrant Country: GB
  • Registrant Phone: +44.07895147250
  • Registrant Phone Ext:
  • Registrant Fax:
  • Registrant Fax Ext:
  • Registrant Email: cec4...@contact.gandi.net
  • Name Server: dns1.pointhq.com
  • Name Server ACE: dns1.pointhq.com
  • Name Server: dns4.pointhq.com
  • Name Server ACE: dns4.pointhq.com
  • Name Server: dns3.pointhq.com
  • Name Server ACE: dns3.pointhq.com
  • Name Server: dns5.pointhq.com
  • Name Server ACE: dns5.pointhq.com
  • Name Server: dns2.pointhq.com
  • Name Server ACE: dns2.pointhq.com

the website is hosted locally on this guy's vps located in the Custodian Data Centre and maybe the guy who owned the vps before him was doing phishing

Reply