Lol here we go again. Support scam redux. Gotta check to see which breach this email is tied to.
The email is a rip of a Google message format, again. Even has Google's address at the bottom, but never mentions Google.
That link tho.
That url forwards to...
Welp.
Israeli virtual private server company, hosted in NL. Hrm.
And passive DNS from @securitytrails shows... just the one domain, two FQDNs.
Fails all around.
Anyone want to take bets on which breach the targeted email was harvested from?
That server costs 9 euros a month. A baaaaaaahgain.
SeedVPS offers servers starting at 9 euros, with cPanel for 13 euros a month extra. And if you happened to have purloined a credit card on the last phish, it's free!
cPanel is a fave of phishers.It also generates a LOT of certificate noise whenever someone uses cPanel's certificate service.
And that site... is hosted here:
Not even the most recent kit. It's like they're not even trying.
And as far as the IP goes... like I said. Not even trying.
Well, at least their site is locked down. Good job, comrades.
What's the ruble to dollar exchange rate?
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Sean Gallagher is at BSidesLV/Black Hat/ DEF CON
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member and get exclusive features!

Premium member ($3.00/month or $30.00/year)

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!