Google Adwords phishes have been quiet for a while, but now they’re back.
Unlike most of the other Google Adwords runs, these are not using .cn TLDs, instead ones like Belgium and EU (.be and .eu).
Some sample URLs:
adwords.google.com.mstrack01 be
adwords.google.com.fputs eu
adwords.google.com.mjstr-1 be
adwords.google.com.mt-spr1 eu
adwords.google.com.mdstr be
adwords.google.com.pmstr be
All fast flux:
And all appear to have been registered with Tucows.
Alex Eckelberry