Paychex.com phish?

Phishing operations, including perpetrators, how to report them and get them shut down.

Paychex.com phish?

Postby Bobster » Thu Oct 21, 2010 11:25 pm

These sites apparently serve as phishing sites and/or for the purpose of delivering malware. At one point a web page I retrieved from one of these sites contained a Javascript trojan downloader (according to VirusTotal).

hXXp://www.id1471paychex.com/contacts
hXXp://www.id3641paychex.com/contacts
hXXp://www.id3711paychex.com/contacts
hXXp://www.id9561paychex.com/contacts

All of the above domain names currently point to 82.80.252.211:
Code: Select all
$ nslookup id1471paychex.com
Non-authoritative answer:
Name:   id1471paychex.com
Address: 82.80.252.211

$ nslookup 82.80.252.211
Non-authoritative answer:
211.252.80.82.in-addr.arpa      name = bzq-80-252-211.static.dcenter.bezeqint.net.


McAfee SiteAdvisor page:
http://www.siteadvisor.com/sites/id3114 ... om/msgpage
"The trouble with the world is that the stupid are cocksure
and the intelligent are full of doubt." -- Bertrand Russell
Bobster
Spam Reporter
 
Posts: 207
Joined: Fri Mar 23, 2007 4:16 pm

Re: Paychex.com phish?

Postby Red Dwarf » Fri Oct 22, 2010 1:53 am

User avatar
Red Dwarf
You are kiillllling-a my bizinisss!
 
Posts: 10484
Joined: Tue Jun 27, 2006 2:01 am


Return to Phishers

Who is online

Users browsing this forum: No registered users and 2 guests

cron