Account Notice (Paypal Phishing)

Thu 15/1/2015 5:28:36

Dear Valued Customer,

Unauthorized access has been detected in your account.

Unfortunately, due to this event, our security system has limited the access to your account. Account Limitations prevent you from completing certain actions with your account, such as withdrawing, sending, or receiving money. These limitations are implemented when we see unusual or suspicious activity to help protect both PayPal buyers and sellers. Please verify your account by completing the form which is attached in this email. By doing this, restrictions in your account will be lifted.

We apologize for any inconvenience.

Thank you,
PayPal Security Team

Email analysis :

+ services@ppsec.com
+ Content-Type : multipart/mixed; boundary="--17415"
+ Mime-Version : 1.0
+ Return-Path : < services@ppsec.com >
+ X-Mailer : Balsa 14.0.103581
+ Received : from unknown (HELO mail.dsdemails.co.uk) (216.98.153.222)
+ Received : from 216.98.153.222 ([219.232.247.108]) by dsdemails.co.uk
+ Account Notice

Phishing analysis :

OPEN : Attached.html
FORM : http://www.csticket.su/submit.php

csticket.su analysis :

domain: CSTICKET.SU
nserver: ns1.hostns222777.com.
nserver: ns2.hostns222777.com.
nserver: ns3.hostns222777.com.
nserver: ns4.hostns222777.com.
state: REGISTERED, DELEGATED
person: Private
Person e-mail: rawixidawax@hotmail.com
registrar: R01-REG-FID
created: 2015.01.11
paid-till: 2016.01.11
free-date: 2016.02.13
source: TCI

rawixidawax@hotmail.com analysis :

domain: FE-CC.SU
nserver: ns1.freedns.ws.
nserver: ns2.freedns.ws.
nserver: ns3.freedns.ws.
nserver: ns4.freedns.ws.
state: REGISTERED, DELEGATED
person: Private Person
e-mail: rawixidawax@hotmail.com
registrar: R01-REG-FID
created: 2014.02.18