FYI...

- http://ddanchev.blogspot.com/2008/04/web-email-exploitation-kit-in-wild.html
April 16, 2008 - "... This web based exploitation kit is a great example of customization applied to publicly known XSS vulnerabilities within a segmented set of web sites, email providers in this case... Automating the process of phishing by using the vulnerable sites as redirectors can outpace the success of the Rock Phish kit whose key success factor relies on diversity of the brands targeted, whereas all the campaigns operate on the same IP..."

(Screenshot available at the URL above.)