Thursday, January 15, 2015

Intruder Detection

Wed 14/1/2015 21:16:25

Dear Valued Customer, Unauthorized access has been detected in your account.Unfortunately, due to this event, our security system has limited the access to your account.Account Limitations prevent you from completing certain actions with your account, such as withdrawing, sending, or receiving money.These limitations are implemented when we see unusual or suspicious activity to help protect both PayPal buyers and sellers.Please verify your account by completing the form which is attached in this email. By doing this, restrictions in your account will be lifted.We apologize for any inconvenience.

Thank you,
PayPal Security Team

----36185--
----31890

Content-Transfer-Encoding: base64
Content-Type: application/octet-stream; name="Verification.html"

Email analysis :

+ accounts@paysrv.com
+ X-Mailer : Evolution 2.0.159426
+ Content-Type : multipart/mixed; boundary="--31890"
+ Mime-Version : 1.0
+ Received : from 68-116-17-190.static.knwc.wa.charter.com
+ (HELO mail.westernmaterials.com) (68.116.17.190)
+ Received : from 68.116.17.190 ([140.117.169.188])
+ by mail.westernmaterials.com

Tuesday, January 6, 2015

PayPal Phishing

Dear PayPal Customer,

During your regular scheduled accounts maintenance verification procedure, We have detected a slight error regarding your PayPal Account This might be due to Unauthorization access to your PayPal Account...Please verify your information by Downloading the Attachment file and open in a browser to Continue. NOTE: At PayPal, your protection is our top priority and We're committed to keeping your PayPal accounts safe from unauthorized access. IMPORTANT: *If your PayPal information is not verified within 48 hours then your ability you access your PayPal account will be restricted.

Very sincerely,
PayPal Review Department

Copyright © 2015 PayPal, Inc. All rights reserved. PayPal is located at
2211 N. First St.,
San Jose, CA 95131.

Please do not reply to this email because we are not monitoring this inbox. To get in touch with us, log in to your account and click 'Contact Us' at the bottom of any page.

Phishing analysis :

Extract was removed from pastebin...

Email analysis :

NOTE : service@paypal.name
NOTE : X-Mailer-Sent-By : 1
NOTE : X-Mailer-Sid : 10
NOTE : Return-Path : bounce@anatrez.com
NOTE : X-Remote : 188.138.65.69 (static-ip-188-138-65-69.inaddr.ip-pool.com)
NOTE : Mime-Version : 1.0
NOTE : Content-Disposition : inline
NOTE : Content-Transfer-Encoding : 8bit
NOTE : Message-Id : < *@anatrez.com >
NOTE : Received : from static-ip-188-138-65-69.inaddr.ip-pool.com (HELO anatrez.com) (188.138.65.69)
NOTE : Important: We noticed unusual activity in your PayPal account (Ref #PP-003-627-576-424)

Tuesday, November 18, 2014

PayPal (Phishing)

PayPal™

Temporary Limited Account!

----------------------------------------------------------------------
We need your help
----------------------------------------------------------------------

Your billing information is either incomplete or out of date.As a result we have temporary limited your account until you update your billing information. Please click here to update and activate your account.. Thank you for being a PayPal customer.

Account - Help - Fees - Security - Apps - Shop

Please do not reply to this email. We are unable to respond to inquiries sent to this address. For immediate answers to your questions, visit our Help Center by clicking "Help" located on any PayPal page or email. Copyright © 2014 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.

Phising analysis :

CLICK : "click here"
OPEN : http://urnsosuifc5.esy.es/ansfo/login.php
REDIRECT : urnsosuifc5.esy.es/ansfo/index.php?cmd=_login-submit&dispatch=
SCREENSHOT :


esy.es whois :

Domain Name: esy.es
Registrant: Hostinger International Limited
Registrar: MARCARIA.COM
Create Date: 2006-03-06

Name Server: ns1.main-hosting.com
Name Server: ns2.main-hosting.com
Name Server: ns3.main-hosting.com
Name Server: ns4.main-hosting.com

Tuesday, October 21, 2014

Account Verification Notice (PayPal Phising)

http://images.paypal.com/en_GB/GB/i/logo/paypal_logo.gif
Dear Valued Customer,

We have detected unusual charges to a credit card linked to your account.

Your PayPal account have been limited due to the following reason: A number of suspicious activities have triggered our security system that shows that an un-authorized user tried to access your PayPal account with malicious intent. To minimize their efforts, we have limited access to your account. We have sent you an attachment containing the necessary steps in order to restore your account to its normal state. Simply download and open it in your web browser. Please do understand that this is a security measure intended to protect you and your account.

We apologize for any inconvenience.

Please do not reply to this email. This mailbox is not monitored by our staff. For assistance, you may log in to your PayPal account and click Help in the top right corner of the home page.

Copyright © 1999-2014 PayPal. All rights reserved.

< Attached.html >

Phishing analysis :

OPEN : Attached.html
FIND : http://www.secured-line.su/reach.php

secured-line.su whois :

domain: SECURED-LINE.SU
nserver: ns1.dnsfrnws.com.
nserver: ns2.dnsfrnws.com.
nserver: ns3.dnsfrnws.com.
nserver: ns4.dnsfrnws.com.
state: REGISTERED, DELEGATED
person: Private Person
e-mail: rawixidawax@hotmail.com
registrar: R01-REG-FID
created: 2014.07.10
paid-till: 2015.07.10
free-date: 2015.08.12
source: TCI

Email analysis :

NOTE : Return-Path : < notice@ppsec.com >
NOTE : Received : from server5124.123-serv.co.uk (HELO mail.alphads.co.uk) (109.104.75.167)
NOTE : Received : from 109.104.75.167 ([122.155.190.166])
NOTE : by ds5124.dedicated.turbodns.co.uk
NOTE : X-Mailer : Elm 2.0.88004
NOTE : Mime-Version : 1.0
NOTE : Content-Type : multipart/mixed; boundary="--34470"
NOTE : Account Verification Notice

Account Reviewed (PayPal Phishing)

Update Personal Information

Dear PayPal Member,

It has come to our attention that your PayPal account information needs to be updated as part of our continuing commitment to protect your account and to reduce the instance of fraud on our website. If you could please take a few minutes out of your online experience and update your personal records, you will not run into any problems in the future with the online service. However, failure to update your records could result in account suspension. We advise you to update your records as soon as possible. To update your account information, please download and open the attachment file that we sent via this email, and simply open it with your web browser. Once you have updated your account records, any activities going through your account will no longer be interrupted. We apologize for any inconvenience. Please understand that this is to keep you and your account in a protected state.

Copyright © 1999 - 2014 PayPal. All rights reserved.

< Verification.html >

Phishing analysis :

OPEN : Verification.html
FIND : http://www.secured-line.su/reach.php

secured-line.su whois :

domain: SECURED-LINE.SU
nserver: ns1.dnsfrnws.com.
nserver: ns2.dnsfrnws.com.
nserver: ns3.dnsfrnws.com.
nserver: ns4.dnsfrnws.com.
state: REGISTERED, DELEGATED
person: Private Person
e-mail: rawixidawax@hotmail.com
registrar: R01-REG-FID
created: 2014.07.10
paid-till: 2015.07.10
free-date: 2015.08.12
source: TCI

Email analysis :

NOTE : Return-Path : < staff@accounts8.com >
NOTE : Received : from 188.165.201.20 ([24.38.112.187]) by softysoft.fr
NOTE : X-Mailer : GroupWise 12.0.162984
NOTE : Mime-Version : 1.0
NOTE : Account Reviewed

Thursday, September 25, 2014

Reviewing your account



PayPal Account System Upgrade Verification.

Technical services of the PayPal Inc. are carrying out a planned system upgrade. We earnestly ask you to start with the procedure of confirmation on customers data. This email has been sent to all PayPal members, and we ask a few minutes of your online experience. We have sent you an attachment form through this email. Please download and open it in your web browser. Your personal information is protected by state-of-the-art technology. After you have filled in all the required fields in the form, our verification system will automatically update your account records.

We apologize for any inconvenience.

Thank you for using PayPal.
Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page.

Copyright © 1999-2014 PayPal. All rights reserved.

< Verify.html >

Thursday, July 24, 2014

PayPal Phishing

PayPal

Review Your PayPal Account limited

Identity Case ID PP 352-054-271-526

We understand it may be frustrating not to have full access to your PayPal account. We want to work with you to get your account back to normal as quickly as possible.
As part of our security measures, we regularly check the PayPal screen activity. We request information from you for the following reason:,

Our system detected unusual charges to a credit card linked to your PayPal account.

1. Download Attachment tethered with this email .And don't given this page to anyone .
2. Confirm that you are the owner of the account by opening your account and follow the instructions.

If you need help logging in, go to our Help Center by clicking the Help link located in the upper right-hand corner of any PayPal page.

Sincerely,

PayPal Support,

NOTE : PayPal INC
NOTE : replay@paypal.org
NOTE : Review Your PayPal Account limited !
NOTE : < PP-352-054-271-526.html >
NOTE : Produced By Microsoft MimeOLE V6.00.2600.0000
NOTE : from unknown (HELO WIN-O4A5UB8L7AS) (185.43.109.69)
NOTE : from User ([127.0.0.1]) by WIN-O4A5UB8L7AS with Microsoft SMTPSVC(7.5.7601.17514);

185.43.109.69 LOCATION :
================================================
================================================

DATA EXTRACTED FROM : PP-352-054-271-526.html
================================================
http://www.israelpost.co.il/zipcode.nsf/demozip
http://www.sarenapaleta.com
================================================

israelpost.co.il WHOIS :
================================================
descr: michal kerem
descr: 217 jaffa st.
descr: Jerusalem
descr: 12345
descr: Israel
phone: +972 2 6295094
e-mail: ipa.security10 AT gmail.com
===============================
admin-c: DT-MK20103-IL
tech-c: DT-GP6265-IL
zone-c: DT-MK20079-IL
nserver: ns1.bezeqint.net
nserver: ns2.bezeqint.net
nserver: ns3.bezeqint.net
validity: 08-01-2016
status: Transfer Locked
===============================
changed: domain-registrar AT isoc.org.il 20060108 (Assigned)
changed: domain-registrar AT isoc.org.il 20060209 (Changed)
changed: domain-registrar AT isoc.org.il 20070809 (Transferred)
changed: domain-registrar AT isoc.org.il 20070809 (Changed)
changed: domain-registrar AT isoc.org.il 20131119 (Changed)
changed: domain-registrar AT isoc.org.il 20131119 (Changed)
changed: domain-registrar AT isoc.org.il 20131119 (Changed)
changed: domain-registrar AT isoc.org.il 20131208 (Changed)
===============================
person: michal kerem
address: michal kerem
address: 217 jaffa st.
address: Jerusalem
address: Israel
phone: +972 2 6295094
e-mail: kerem_m AT postil.com
===============================
nic-hdl: DT-MK20103-IL
changed: Managing Registrar 20131208
person: Gilad Pomerantz
address: ISRAEL POST COMPANY LTD
address: 217 jaffa st.
address: Jerusalem
address: 91999
address: Israel
phone: +972 54 2888875
e-mail: pumi AT postil.com
===============================
nic-hdl: DT-GP6265-IL
changed: Managing Registrar 20131119
person: michal kerem
address: michal kerem
address: 217 jaffa st.
address: Jerusalem
address: Israel
phone: +972 2 6295094
e-mail: ipa.security10 AT gmail.com
nic-hdl: DT-MK20079-IL
changed: Managing Registrar 20131119
================================================

sarenapaleta.com WHOIS :
================================================
Registrar URL: http://www.godaddy.com
Registrant Name: Olivera Kulesevic
Registrant Organization: Sarena Paleta
Name Server: NS15.DOMAINCONTROL.COM
Name Server: NS16.DOMAINCONTROL.COM
DNSSEC: unsigned
================================================

Tuesday, July 8, 2014

Form attached

PayPal

PayPal Account System Upgrade Verification.

Technical services of the PayPal Inc. are carrying out a planned system upgrade. We earnestly ask you to start with the procedure of confirmation on customers data.

This email has been sent to all PayPal members, and we ask a few minutes of your online experience. We have sent you an attachment form through this email. Please download and open it in your web browser.

Your personal information is protected by state-of-the-art technology. After you have filled in all the required fields in the form, our verification system will automatically update your account records.

We apologize for any inconvenience.

Thank you for using PayPal.
Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page.

Copyright © 1999-2014 PayPal. All rights reserved.

< ReviewAccount.html >

Wednesday, July 2, 2014

Account Notification

Un-Authorized Access - Your PayPal account have been limited temporarily.

Dear Valued Customer,

Our state-of-the-art security system have detected what could be an intrusion from an un-authorized user. Our security team analyzes accounts individually after the security system have marked them as insecure. Please download the form attachment in this email and fill in your personal details in the form in order to keep your account in a verified state. Please do understand that this is a security measure intended to help protect you and your account. We apologize for any inconvenience.

Thank you,

PayPal Support Department

Please do not reply to this email. This mailbox is not monitored and you will not receive a response. Furthermore, should you require any assistance, you may log in to your PayPal account and click Help in the top right corner of any PayPal page.

< FormAttachment.html >

SCAM.CZ DETECTED ONE URL IN A FORM :
==============================================
http://www.secure-line2.com/transmit.php
==============================================

Secure-line2.com WHOIS :
==============================================
Domain name: secure-line2.com
Registry Domain ID:
Registrar WHOIS Server: whois.bizcn.com
==============================================
Registrar URL: http://www.bizcn.com
Updated Date: 2014-05-12T18:17:57Z
Creation Date: 2014-05-12T18:17:59Z
==============================================
Registrar Registration Expiration Date: 2015-05-12T18:17:59Z
Registrar: Bizcn.com,Inc.
Registrar IANA ID: 471
Registrar Abuse Contact Email: abuse@bizcn.com
Registrar Abuse Contact Phone: +86.5922577888
Reseller: Cnobin Technology HK Limited
==============================================
Domain Status: clientDeleteProhibited
Domain Status: clientTransferProhibited
==============================================
Registry Registrant ID:
Registrant Name: Kathy Ferranti
Registrant Organization: J. Brannam
Registrant Street: 1423 Koontz Lane
Registrant City: North Hollywood
Registrant State/Province: CA
Registrant Postal Code: 91605
Registrant Country: us
Registrant Phone: +01.8187649157
Registrant Phone Ext:
Registrant Fax: +01.8187649157
Registrant Fax Ext:
Registrant Email: admin@secure-line2.com
==============================================
Registry Admin ID:
Admin Name: Kathy Ferranti
Admin Organization: J. Brannam
Admin Street: 1423 Koontz Lane
Admin City: North Hollywood
Admin State/Province: CA
Admin Postal Code: 91605
Admin Country: us
Admin Phone: +01.8187649157
Admin Phone Ext:
Admin Fax: +01.8187649157
Admin Fax Ext:
Admin Email: admin@secure-line2.com
==============================================
Registry Tech ID:
Tech Name: Kathy Ferranti
Tech Organization: J. Brannam
Tech Street: 1423 Koontz Lane
Tech City: North Hollywood
Tech State/Province: CA
Tech Postal Code: 91605
Tech Country: us
Tech Phone: +01.8187649157
Tech Phone Ext:
Tech Fax: +01.8187649157
Tech Fax Ext:
Tech Email: admin@secure-line2.com
==============================================
Name Server: sara.ns.cloudflare.com
Name Server: tom.ns.cloudflare.com
DNSSEC: NotsignedDelegation
==============================================

Thursday, June 26, 2014

Notification Of Limited Account Access RX1599

https://www.paypal.com/en_US/i/logo/paypal_logo.gif

FOUND ABUSE FROM UNKNOWN THIRD PARTY

Because of concerns for the security and integrity of your account, we regularly screen activities in PayPal accounts system. It has been brought to our attention that your account information must be updated as part of our ongoing commitment to protect your account and reduce cases of fraud on our website. Protecting the security of your PayPal account is our primary concern, as a result we have limited access to sensitive account features until you update your information. If you could take 5-10 minutes of your online experience and update your records. Your account access will be fully restored after the update.

Restore my PayPal account

(This Link Will Expire in 12hours)

Sincerely,

PayPal

PayPal Resolution Center.
Copyright © 2014 PayPal, Inc. All rights reserved. | PayPal Email ID PP1599

Thursday, May 8, 2014

Early Notice

PayPal Account System Upgrade Verification.

Technical services of the PayPal Inc. are carrying out a planned system upgrade. We earnestly ask you to start with the procedure of confirmation on customers data. This email has been sent to all PayPal members, and we ask a few minutes of your online experience. We have sent you an attachment form through this email. Please download and open it in your web browser. Your personal information is protected by state-of-the-art technology. After you have filled in all the required fields in the form, our verification system will automatically update your account records.

We apologize for any inconvenience.

Thank you for using PayPal.
Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page.

Copyright © 1999-2014 PayPal. All rights reserved.

< FormAttachment.html >

Wednesday, May 7, 2014

Notification

http://images.paypal.com/en_GB/GB/i/logo/paypal_logo.gif

PayPal Account System Upgrade Verification.

Technical services of the PayPal Inc. are carrying out a planned system upgrade. We earnestly ask you to start with the procedure of confirmation on customers data. This email has been sent to all PayPal customers, and we ask a few minutes of your online experience. We have sent you an attachment form through this email. Please download and open it in your web browser. Your personal information is protected by state-of-the-art technology. After you have filled in all the required fields in the form, our verification system will automatically update your account records. We apologize for any inconvenience, and thank you for your time. Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page.

Copyright © 1999-2014 PayPal. All rights reserved.

< ReviewAccount.html >

Tuesday, May 6, 2014

Account Review

Dear Valued Customer,

Our security system has detected that you have changed your PayPal email address.
However, we have reverted the email address back to its original settings.

If you feel that an unauthorized person has changed your email, download the form
attachment in this email and fill in your personal details in the form in order to keep
your original email and to restore your PayPal account.

Please do understand that this is a security measure intended to help protect you and
your account. We apologize for any inconvenience.

Thank you,

PayPal

Please do not reply to this email. This mailbox is not monitored and you will not receive a response. Furthermore,
should you require any assistance, you may log in to your PayPal account and click Help in the top right corner
of any PayPal page.

< VerifyAccount.htm >

Thursday, April 24, 2014

PayPal phishing : Important: Your account has been limited until we hear from you ID: (Ref #PP-014-234-883-451)

Your Account PayPal Has Been Limited !

Hello ,

You recently tried to pay with PayPal but the transaction was declined because !

You don't make the new Account's Update to your PayPal account. We understand it may be frustrating not to have full access to your PayPal account. We want to work with you to get your account back to normal as quickly as possible. As part of our security measures, We request information from you for the following reason: Our system detected unusual charges to a credit card linked to your PayPal account.

Download the attachment form to verify your Profile information and restore your account.
Make sure you enter the information accurately, and according to the formats required.
Fill in all the required fields.

We thank you for your prompt attention to this matter

Your email preferences are set to receive "News and Promotions". Please do not reply to this email. We are unable to respond to inquiries sent to this address. For immediate answers to your questions, visit our Help Center by clicking "Help" at the top of any PayPal page.

Copyright 2014 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.

< #PP-014-234-883-451.html >

Header :
============================================
Return-Path : < no=replys@paypal.org >
Return-Path : No=replys@paypal.org
Delivered-To : scamcz@gmail.com
Received : from unknown (HELO WIN-6AC4TF61TTC) (185.7.215.110) by *** with SMTP;
Received : from User ([127.0.0.1]) by WIN-6AC4TF61TTC with Microsoft SMTPSVC(7.5.7601.17514);
Mime-Version : 1.0
Content-Type : multipart/mixed; boundary="----=_NextPart_000_00A9_01C2A9A6.28A26362"
X-Priority : 3
X-Msmail-Priority : Normal
X-Mailer : Microsoft Outlook Express 6.00.2600.0000
X-Mimeole : Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id :
Important: Your account has been limited until we hear from you ID: (Ref #PP-014-234-883-451)
============================================

Thursday, February 20, 2014

Paypal Phishing (Notification)

Dear Valued Customer,

Our Account Protection System recently detected an issue with your account.

There was an unusual activity on the credit card linked to your PayPal account. Our security team suspects that an unauthorized user tried to access your account without your consent.

Your account have been temporarily limited. We understand this may be frustrating and inconvenient for you.

What to do next:

Please download the attachment in this email and simply open it so that you are able to proceed with the verification process. Please fill in the required fields after you have opened t he attachment.

We apologize for any inconvenience that may have been caused.

Sincerely,

Copyright © 1999-2014 PayPal. All rights reserved.


File : VerifyAccount.htm
E-mail : dept@ppsecure.com
IP : 195.3.146.83;109.228.11.107
Mailer : GNUMail System 5.0.1816

Wednesday, February 19, 2014

Paypal Phishing


PayPal Account System Upgrade Verification.

Technical services of the PayPal Inc. are carrying out a planned system upgrade. We earnestly ask you to start with the procedure of confirmation on customers data.

This email has been sent to all PayPal customers, and we ask a few minutes of your online experience. We have sent you an attachment form through this email. Please download and open it in your web browser.

Your personal information is protected by state-of-the-art technology. After you have filled in all the required fields in the form, our verification system will automatically update your account records.

We apologize for any inconvenience, and thank you for your time. Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click Help in the top right corner of any PayPal page.

Copyright © 1999-2014 PayPal. All rights reserved.

File : ReviewAccount.html
E-mail : mail@reviewer.com
Title : Notification
Note : from 210.red-88-12-20.staticip.rima-tde.net
Note : (HELO apecco.com) (88.12.20.210)
Note : 127.0.0.1 ([195.3.146.83]) by apecco.com

Wednesday, November 6, 2013

Account Reviewed

Dear Valued Member,

You have added james118@comcast.net as a new email address for your PayPal account. If you did not authorize this change, check with family members and others who may have access to your account. If you still feel that an un-authorized person has changed your email, download the form attachment in this email and fill in your personal details in the form in order to keep your original email and to restore your PayPal account.

Please do understand that this is a security measure intended to help protect you and your account.

We apologize for any inconvenience.

Sincerely,
PayPal Support Team


User :


Host :


Whois : notified-users.com

Email: giraffegirl@yepmail.net
Organization: Sonia Tachenson
Address: Acacia Building 150 Kennedy Road
City: Mei Foo
State: sham shui po
ZIP: 4475
Country: HK
Phone: +8.5237234462

Related infos : giraffegirl@yepmail.net

Jeff Wright (giraffegirl@yepmail.net)
9, rue Paul Eyschen, Steinsel
Steinsel Luxembourg,7317 LU
Tel. +352.332157
pax0r.info
accountservices2.net
svaravinoplaks.com

E-mail : dept@account2.com
Note : from 60-251-45-1.hinet-ip.hinet.net (HELO mail.Sunbowsh.com) (60.251.45.1)
Note : from 127.0.0.1 ([184.22.41.189]) by Sunbowsh.com with MailEnable ESMTP;
Note : X-Mailer : ESMTP v1.3 7.0.2864
Note : X-Mimeole : Produced By Microsoft MimeOLE V8.00.256.1170
Note : X-Remote : 60.251.45.1 (60-251-45-1.hinet-ip.hinet.net)
Note : Account Verified : Issuer 12331
Note : HTML FORM TAG ACTION http://www.notified-users.com/Verified.php

Monday, August 19, 2013

Your Account Has Been Limited ! PayPal Case ID: PP-008-119-347

========================================================
We need your help
========================================================

Dear Customer,

We need your help resolving an issue with your account. To give us time to
work together on this, we've temporarily limited what you can do with your
account until the issue is resolved.

We understand it may be frustrating not to have full access to your
account. We want to work with you to get your account back to normal as
quickly as possible.

What's the problem?

We need a little bit more information about you to help confirm your
identity.

Case ID Number: PP-008-119-347

How you can help

Download The Attachment and Confirm Your Account

Yours sincerely.

Name : Paypal
E-mail : no=reply@paypal.org
IP : 96.44.189.235
Note : from unknown (HELO WIN-DIG6F2629OL) (96.44.189.235)