New Google Adwords phishing run

Google Adwords phishes have been quiet for a while, but now they�re back.

Unlike most of the other Google Adwords runs, these are not using .cn TLDs, instead ones like Belgium and EU (.be and .eu).

Some sample URLs:

adwords.google.com.mstrack01 be
adwords.google.com.fputs eu
adwords.google.com.mjstr-1 be
adwords.google.com.mt-spr1 eu
adwords.google.com.mdstr be
adwords.google.com.pmstr be

All fast flux:

And all appear to have been registered with Tucows.

Alex Eckelberry