Phishing robot#AT#altervista.org
Appena ricevuta (@ cambiata in AT):
Citazione:
Dear user of the altervista.org mailing service!
We are informing you that because of the security upgrade of the mailing service your mailbox (diamondsATaltervista.org) settings were changed. In order to apply the new set of settings click on the following link:
hxxp: //altervista.org/owa/service_directory/settings.php?email=diamondsATaltervista.org&from=a ltervista.org&fromname=diamonds
Best regards, altervista.org Technical Support.
Il link punta a:
Codice:
hxxp: //altervista.org.molendf.kr/owa/service_directory/settings.php?email=diamondsATaltervista.org&from=altervista.org&fromname=diamonds
Sorgente:
Codice:
From - Fri Jan 08 22:57:32 2010
X-Account-Key: account1
X-UIDL: GmailId1260feec3d740201
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Delivered-To: mioindirizzo-gmail
Received: by 10.216.70.146 with SMTP id p18cs198922wed;
Fri, 8 Jan 2010 13:54:52 -0800 (PST)
Received: by 10.86.239.17 with SMTP id m17mr9736120fgh.16.1262987690846;
Fri, 08 Jan 2010 13:54:50 -0800 (PST)
Return-Path: <checksva9@specautomatika.ru>
Received: from f2.avforwarding.com (f2.avforwarding.com [188.40.107.231])
by mx.google.com with ESMTP id 22si60398558fxm.67.2010.01.08.13.54.50;
Fri, 08 Jan 2010 13:54:50 -0800 (PST)
Received-SPF: neutral (google.com: 188.40.107.231 is neither permitted nor denied by best guess record for domain of checksva9@specautomatika.ru) client-ip=188.40.107.231;
Authentication-Results: mx.google.com; spf=neutral (google.com: 188.40.107.231 is neither permitted nor denied by best guess record for domain of checksva9@specautomatika.ru) smtp.mail=checksva9@specautomatika.ru
Received: from GLWWSDDI (unknown [41.153.194.3])
by f2.avforwarding.com (Postfix) with ESMTP id E9E631F47EE;
Fri, 8 Jan 2010 21:55:41 +0100 (CET)
Received: from 41.153.194.3 by mail.specautomatika.ru; Fri, 8 Jan 2010 23:54:44 +0200
From: "robot@altervista.org" <robot@altervista.org>
To: <diamonds@altervista.org>
Subject: A new settings file for the diamonds@altervista.org mailbox has just been released
Date: Fri, 8 Jan 2010 23:54:44 +0200
Message-ID: <000d01ca90ad$3020d340$6400a8c0@checksva9>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0006_01CA90AD.3020D340"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.3416
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
Importance: Normal
This is a multi-part message in MIME format.
------=_NextPart_000_0006_01CA90AD.3020D340
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Dear user of the altervista.org mailing service!We are informing you that because of the security upgrade of the mailing service your mailbox (diamonds@altervista.org) settings were changed. In order to apply the new set of settings click on the following link:http://altervista.org/owa/service_directory/settings.php?email=diamonds@altervista.org&from=altervista.org&fromname=diamondsBest regards, altervista.org Technical Support.Letter ID#4CRHTXNDO7ZMNHC0TV0DHCMTQ4
------=_NextPart_000_0006_01CA90AD.3020D340
Content-Type: text/html;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3DWindows-1=
252">
<meta name=3DProgId content=3DWord.Document>
<meta name=3DGenerator content=3D"Microsoft Word 10">
<meta name=3DOriginator content=3D"Microsoft Word 10">
<link rel=3DFile-List href=3D"cid:filelist.xml@BE53429F.71210CD2">
<link rel=3DEdit-Time-Data href=3D"cid:editdata.mso@BE53429F.71210CD2">
</head>
<body>
<p><font face=3D"Lucida Sans Unicode, Lucida Grande, sans-serif">Dear user =
of the altervista.org mailing service!<br><br>We are informing you that bec=
ause of the security upgrade of the mailing service your mailbox (<a href=3D=
"mailto:diamonds@altervista.org">diamonds@altervista.org</a>) settings were=
changed. In order to apply the new set of settings click on the following =
link:<br><br><a href=3D"http://altervista.org.molendf.kr/owa/service_direct=
ory/settings.php?email=3Ddiamonds@altervista.org&from=3Daltervista.org&from=
name=3Ddiamonds"><font size=3D"2">http://altervista.org/owa/service_directo=
ry/settings.php?email=3Ddiamonds@altervista.org&from=3Daltervista.org&fromn=
ame=3Ddiamonds</font></a><br><br>Best regards, altervista.org Technical Sup=
port.<br><br>Letter ID#4CRHTXNDO7ZMNHC0TV0DHCMTQ4</font></p>
</body>
</html>
------=_NextPart_000_0006_01CA90AD.3020D340--
da notare che io NON ho una mail diamondsATaltervista.org :wink:
-
Insomma, se vi arriva una roba simile, cestinate.
