Clicky
Last visit was: Sat Jul 05, 2014 11:50 am
It is currently Sat Jul 05, 2014 11:50 am

Paychex.com phish?


All times are UTC - 5 hours [ DST ]


 [ 2 posts ] 
Author Message
 PostPosted: Thu Oct 21, 2010 11:25 pm   
Spam Reporter
User avatar

Joined: Fri Mar 23, 2007 4:16 pm
Posts: 206
These sites apparently serve as phishing sites and/or for the purpose of delivering malware. At one point a web page I retrieved from one of these sites contained a Javascript trojan downloader (according to VirusTotal).

hXXp://www.id1471paychex.com/contacts
hXXp://www.id3641paychex.com/contacts
hXXp://www.id3711paychex.com/contacts
hXXp://www.id9561paychex.com/contacts

All of the above domain names currently point to 82.80.252.211:
Code:
$ nslookup id1471paychex.com
Non-authoritative answer:
Name:   id1471paychex.com
Address: 82.80.252.211

$ nslookup 82.80.252.211
Non-authoritative answer:
211.252.80.82.in-addr.arpa      name = bzq-80-252-211.static.dcenter.bezeqint.net.


McAfee SiteAdvisor page:
http://www.siteadvisor.com/sites/id3114 ... om/msgpage

_________________
"The trouble with the world is that the stupid are cocksure
and the intelligent are full of doubt." -- Bertrand Russell


Top
 Profile  
 PostPosted: Fri Oct 22, 2010 1:53 am   
You are kiillllling-a my bizinisss!
User avatar

Joined: Tue Jun 27, 2006 2:01 am
Posts: 9227
See
viewtopic.php?f=4&t=642&p=48831&hilit=id3920paychex.com#p48831


Top
 Profile WWW  
 [ 2 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Wayback machine and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  


Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Style originally created by Volize © 2003 • Redesigned SkyLine by MartectX © 2008