Zoomed

• Two phishing nodes connected very similarly

  • ebay.accountreturning.com
  • charterone-information.net

• That's interesting in itself

• Both connected via peer1.net

• and via routers in Vancouver

• Latencies from them to destinatons is low

• Probably in Canada, possibly Vancouver