[PL-481663] Phishing attack hosted on appppple.sqlite-pdo.com
| From: | PhishLabs Security Operations | Date: | Sun, 05 Feb 2017 19:30:45 +0000 |
| Subject: | [PL-481663] Phishing attack hosted on appppple.sqlite-pdo.com | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-25584@lists.php.net to get a copy of this message | ||
Hello,
My name is Lindsay Richardson and I work for PhishLabs. We investigate computer crime incidents on
behalf of other organizations.
During an investigation of fraud, we have identified a phishing site which is hosted on your network
and attempting to defraud the customers of Apple.
The following URLs are some components of this phishing attack:
hXXp appppple [dot] sqlite-pdo.com/
First detection of malicious activity: 02-05-2017 19:06:03 UTC
Most recent observation of malicious activity: 02-05-2017 19:27:59 UTC
Associated IP Address: 51.15.134.191
Hostname of Server: sqlite-pdo.com
If you agree that this is malicious, we kindly request that you take steps to have the content
removed as soon as possible. It is likely that the intruder who set up this phishing site has also
left additional fraudulent material on this server.
If we have contacted you in error, or if there is a better way for us to report this incident,
please let us know so that we may continue our investigation.
We are extremely grateful for your assistance.
Kind Regards,
Lindsay Richardson
PhishLabs Security Operations
soc@phishlabs.com
+1.202.386.6001
http://www.phishlabs.com