Confirmation (PayPal Phishing)

Phishing analysis :

CLICK : ACTIVATE ACCOUNT
OPEN : http://stupendorecords.com/tmp/
NOTE : Phishing was removed.

Email analysis :

NOTE : Content-Type : text/html
NOTE : Mime-Version : 1.0
NOTE : X-Sender : p215080
NOTE : Return-Path : < info@storytellingmasterclass.de >
NOTE : Received : from emita.mittwald.de (emita.mittwald.de. [188.94.250.251])

NOTE : Received : from ovm4870 (ovm4870.internal [172.16.36.177])
NOTE : by emita.mittwald.de (Postfix)
NOTE : client-ip=188.94.250.251;
NOTE : smtp.mailfrom=info@storytellingmasterclass.de
NOTE : Confirmation

Hijacked websites :

stupendorecords.com : David Lopez Gausa / david@davidgausa.com / +34.34943894304
mittwald.de : Mittwald Hostmaster / +49.5772293100