PDA

View Full Version : Phishing scam in Spanish with links to a Russian site


outbackmark
15 January 2008, 10:36
Olá xxxxxx@xxxxx.com ,

Seu Amigo (a) Mdorresteijn - ( mdorresteijn@hetnet.nl )
Enviou uma WebCharges do UOLCharges no dia 07/01/2008!.

Para a visualização da Animação Utilize:


MailScanner has detected a possible fraud attempt from " www . termopribor . ru" claiming to be [:: Visualizar UOL Charge de xxxxxx@xxxxx.com - SBPReci4Qrr6auS::]




Caso o link não responda, Tente:






Header--
Return-Path: <www-data@ezaz.hu>

Received: from iaamta05sl.mx.xxxxxxxx.com ([85.90.162.41])

by imta11sl.mx.xxxxxxxxx.com with ESMTP

id <20080107130501.PHIY12549.imta11sl.mx.bigpond.com@iaamta05sl. mx.xxxxxxxx.com>

for <xxxxxxxx@xxxxxxx.com>; Mon, 7 Jan 2008 13:05:01 +0000

Received: from ezaz.hu ([85.90.162.41]) by iaamta05sl.mx.xxxxxxxx.com

with ESMTP

id <20080107130459.EECY4881.iaamta05sl.mx.xxxxxxx.com@ezaz.hu>

for <xxxxxxxxx@xxxxxxxx.com>; Mon, 7 Jan 2008 13:04:59 +0000

Received: from localhost (localhost [127.0.0.1])

by ezaz.hu (Postfix) with ESMTP id 25C5C2B55D4

for <xxxxxxxxx@xxxxxxxxxxx.com>; Mon, 7 Jan 2008 14:04:13 +0100 (CET)

X-Virus-Scanned: Debian amavisd-new at suni-repa.ezaz.hu

Received: from ezaz.hu ([127.0.0.1])

by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id yl-bqplao9px for <xxxxxxxxxx@xxxxxxxxxx.com>;

Mon, 7 Jan 2008 14:04:13 +0100 (CET)

Received: by ezaz.hu (Postfix, from userid 33)

id 908082B5620; Mon, 7 Jan 2008 14:04:07 +0100 (CET)

To: xxxxxxxxxa@xxxxxxxxxx.com

Subject: Essa voce precisa VER

MIME-Version: 1.0

From: "M.Dorresteijn" <mdorresteijn@hetnet.nl>

Reply-To: "M.Dorresteijn" <mdorresteijn@hetnet.nl>

Content-Type: text/html; charset=ISO-8859-1

Content-Transfer-Encoding: 7bit

Content-Disposition: inline

X-Mailer: PHP v4.4.4-8+etch4

Message-Id: <20080107130407.908082B5620@ezaz.hu>

Date: Mon, 7 Jan 2008 14:04:07 +0100 (CET)