Check Website
Inclusion Status
It is currently Fri Nov 17, 2017 9:09 pm

All times are UTC




Post new topic Reply to topic  [ 2 posts ] 
Author Message
 Post subject: ALERT: PayPal phish
PostPosted: Thu Feb 07, 2013 11:03 am 
Offline
Site Admin

Joined: Thu May 28, 2009 10:25 am
Posts: 6001
Influx of PayPal phishes this morning, 30 so far, since 09:53.

So far, whilst the subjects have been slightly varied, the href have all remained the same, with all leading to;

49paypal.com/73ecc8e60844c7b6e67fa3897b6f134d/01.php

The domain has been registered through Internet.BS, and lives at;

IP: 63.90.228.38
IP PTR: Resolution failed
ASN: 701 63.80.0.0/12 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business

Domains registration records:

Code:
Domain 49paypal.com

 Date Registered: 2013-2-1
 Date Modified: 2013-2-6
 Expiry Date: 2014-2-1

 DNS1: ns-canada.topdns.com
 DNS2: ns-uk.topdns.com
 DNS3: ns-usa.topdns.com

 Registrant
 ppal
 Weed Paradise
 Email:paradise007@mailtb.ru
 8483 court av.
 34448 Hannase
 United States
 Tel: +1.3527955744

 Administrative Contact
 ppal
 Weed Paradise
 Email:paradise007@mailtb.ru
 8483 court av.
 34448 Hannase
 United States
 Tel: +1.3527955744

 Technical Contact
 ppal
 Weed Paradise
 Email:paradise007@mailtb.ru
 8483 court av.
 34448 Hannase
 United States
 Tel: +1.3527955744


18 unique subjects seen so far;

Quote:
Account Review Department
ACCOUNT SUSPENSION
Confirm your personal information
Notification of Limited Account Access
Notification of Restricted Account Access
Online Access Suspended
PayPal UK - Security Center !
Status - Account Limited
This Account Could Be Suspended
Update required for your account
Update Your Billing Records
Urgent Action Required
Verify your Account information
We've temporarily limited your access
We've temporarily limited your account
Your account has been restricted
YOUR ACCOUNT HAS BEEN TEMPORARILY LIMITED!
Your PayPal account is restricted - take action now


Read more
http://hphosts.blogspot.co.uk/2013/02/a ... phish.html

_________________
Regards
Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

Keeping it FREE!



IP:
top
Top
 Profile  
Reply with quote  
 Post subject: Re: ALERT: PayPal phish
PostPosted: Tue Feb 12, 2013 4:34 pm 
Offline
User avatar

Joined: Sat May 30, 2009 9:50 pm
Posts: 34
Location: South Central Montana, USA
I just sent you an email I got today from PayPal. Seems phishy to me.



IP:
top
Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
hpHosts and hpHosts Online are copyright © Malwarebytes Corp - All Rights Reserved

Powered by phpBB © 2000-2009 phpBB Group