Seen in the wild: Phishing gang site

Just some of the typical random junk we run across in our research:  http://sharky-socks(dot)net is a backdoor to a phishing gang.

Subdirectories we have found on the site: 

CitiScam/               
adminlist/              
cgi-bin/                
citibank/               
me/                     
proxyservice/           

So typing in http://sharky-socks(dot)net/citibank will give you the Citibank scam site.

Whois info.

Everyones Internet is hosting it.

Alex Eckelberry
(Thanks to Sunbelt researcher Eric Howes)