ALERT: PayPal phish

Discuss whatever you like here! ( ...that's not spam!)

Moderators: Support Staff², Support Staff, AvantGuard, Developer

Post Reply
User avatar
MysteryFCM
Administrator
Administrator
Posts: 7330
Joined: Tue Dec 09, 2003 2:34 am
Windows Version: 10, 8.0, 8.1, 7, Vista, XP
Avant Version: 13.00 Build 23
Default engine: Gecko
IE Version: 7.x, 8.x, 9.x, 10.x, 11.x
Skin: AthenX
Location: Newcastle Upon Tyne, UK
Contact:

ALERT: PayPal phish

Post by MysteryFCM » Thu Feb 07, 2013 11:04 am

Influx of PayPal phishes this morning, 30 so far, since 09:53.

So far, whilst the subjects have been slightly varied, the href have all remained the same, with all leading to;

49paypal.com/73ecc8e60844c7b6e67fa3897b6f134d/01.php

The domain has been registered through Internet.BS, and lives at;

IP: 63.90.228.38
IP PTR: Resolution failed
ASN: 701 63.80.0.0/12 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business

Domains registration records:

Code: Select all

Domain 49paypal.com 

 Date Registered: 2013-2-1
 Date Modified: 2013-2-6
 Expiry Date: 2014-2-1 

 DNS1: ns-canada.topdns.com
 DNS2: ns-uk.topdns.com
 DNS3: ns-usa.topdns.com 

 Registrant
 ppal
 Weed Paradise
 Email:paradise007@mailtb.ru
 8483 court av.
 34448 Hannase
 United States
 Tel: +1.3527955744 

 Administrative Contact
 ppal
 Weed Paradise
 Email:paradise007@mailtb.ru
 8483 court av.
 34448 Hannase
 United States
 Tel: +1.3527955744 

 Technical Contact
 ppal
 Weed Paradise
 Email:paradise007@mailtb.ru
 8483 court av.
 34448 Hannase
 United States
 Tel: +1.3527955744
18 unique subjects seen so far;
Account Review Department
ACCOUNT SUSPENSION
Confirm your personal information
Notification of Limited Account Access
Notification of Restricted Account Access
Online Access Suspended
PayPal UK - Security Center !
Status - Account Limited
This Account Could Be Suspended
Update required for your account
Update Your Billing Records
Urgent Action Required
Verify your Account information
We've temporarily limited your access
We've temporarily limited your account
Your account has been restricted
YOUR ACCOUNT HAS BEEN TEMPORARILY LIMITED!
Your PayPal account is restricted - take action now
Read more
http://hphosts.blogspot.co.uk/2013/02/a ... phish.html

User avatar
AXEMAN
Avantic Elite
Avantic Elite
Posts: 1606
Joined: Thu Jan 24, 2008 12:55 am
Windows Version: WIN 7 64 BIT
Avant Version: THE LATEST
IE Version: 9

Re: ALERT: PayPal phish

Post by AXEMAN » Thu Feb 07, 2013 8:36 pm

Thanks for the info bro :thumbup:

User avatar
Tinman57
Avantic
Avantic
Posts: 834
Joined: Tue Oct 13, 2009 2:26 am
Windows Version: Linux Ubuntu 13.10
Avant Version: Linux Firefox
Default engine: Linux Firefox
IE Version: N/A
Skin: N/A
Location: TEXAS

Re: ALERT: PayPal phish

Post by Tinman57 » Fri Feb 08, 2013 11:36 pm

What? A PayPal phishing scheme!!! Oh MY!!! PP has got to be THE MOST phished site of any site I've ever seen. If you get a PayPal phish email, don't delete it, forward the whole email to spoof@paypal.com.

And remember,
An email from PayPal will: Address you by your first and last names or your business name

An email from PayPal won't: Ask you for sensitive information like your password, bank account, or credit card
((((TINMAN))))
----------------------------------------------------------
(Duck! It's another MicroSoft Patch!)

User avatar
MysteryFCM
Administrator
Administrator
Posts: 7330
Joined: Tue Dec 09, 2003 2:34 am
Windows Version: 10, 8.0, 8.1, 7, Vista, XP
Avant Version: 13.00 Build 23
Default engine: Gecko
IE Version: 7.x, 8.x, 9.x, 10.x, 11.x
Skin: AthenX
Location: Newcastle Upon Tyne, UK
Contact:

Re: ALERT: PayPal phish

Post by MysteryFCM » Fri Feb 08, 2013 11:46 pm

I get thousands of phishes for PP and others, every week (spend god knows how long, getting them taken down), so also feel free to pass them to me.

Post Reply