I had an order show up today that seems like it may be fraudulent to me. The user ordered hosting only and the domain name they registered it for looks suspicious: fvckc0d3r.co.cc .
I did a whois on the domain and it's a new domain with 3 records since 6/16/2012. The currently registered IP resolves to the Ukraine, the user provided a New Jersey mailing address, but the GeoIP on the users IP resolves to Ohio with a server name of xl.webmarketinghost[dot]com.
Should I cancel the order through WHMCS? I use the simple PayPal billing, will that refund their money without any charges to me?
P.S. - Is there any chance they used this method to hack my site or gain access to my PayPal account?