Influx of PayPal phishes this morning, 30 so far, since 09:53.
So far, whilst the subjects have been slightly varied, the href have all remained the same, with all leading to;
49paypal.com/73ecc8e60844c7b6e67fa3897b6f134d/01.php
The domain has been registered through Internet.BS, and lives at;
IP: 63.90.228.38
IP PTR: Resolution failed
ASN: 701 63.80.0.0/12 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business
Domains registration records:
Code:
Domain 49paypal.com
Date Registered: 2013-2-1
Date Modified: 2013-2-6
Expiry Date: 2014-2-1
DNS1: ns-canada.topdns.com
DNS2: ns-uk.topdns.com
DNS3: ns-usa.topdns.com
Registrant
ppal
Weed Paradise
Email:paradise007@mailtb.ru
8483 court av.
34448 Hannase
United States
Tel: +1.3527955744
Administrative Contact
ppal
Weed Paradise
Email:paradise007@mailtb.ru
8483 court av.
34448 Hannase
United States
Tel: +1.3527955744
Technical Contact
ppal
Weed Paradise
Email:paradise007@mailtb.ru
8483 court av.
34448 Hannase
United States
Tel: +1.3527955744
18 unique subjects seen so far;
Quote:
Account Review Department
ACCOUNT SUSPENSION
Confirm your personal information
Notification of Limited Account Access
Notification of Restricted Account Access
Online Access Suspended
PayPal UK - Security Center !
Status - Account Limited
This Account Could Be Suspended
Update required for your account
Update Your Billing Records
Urgent Action Required
Verify your Account information
We've temporarily limited your access
We've temporarily limited your account
Your account has been restricted
YOUR ACCOUNT HAS BEEN TEMPORARILY LIMITED!
Your PayPal account is restricted - take action now
Read morehttp://hphosts.blogspot.co.uk/2013/02/a ... phish.html
Login
Register
FAQ
Search
