Topic: Blockchain.info phishing attempt! (Read 1660 times)
thanks this is very usual information especially for new people like me
Thanks for the warning.
Code:
[email protected]
http://www.dreamteammoney.com/index.php?showtopic=173982
No sure why but it was in that page, looks like a identifier.. ;PCode:
Most phishing attempts are really easy to spot.
Thanks for warning people who need it.
Thanks for warning people who need it.
After reading, feel useful. Thank you.
I have the same feeling with you, very useful
Would like to believe I wouldn't have fallen for it, but thanks!
I read this story yesterday and thanks for sharing your concerns with this community..! I just want to know what services you are registered to with the mailing address in which you got the phishing mail.
A good solution ,set up a two factor authentication and be sure your private key is safe.
global moderator
Activity: 3990
Merit: 2717
Join the world-leading crypto sportsbook NOW!
If people fall for a phishing email, especially with broken English, then I have no sympathy.
After reading, feel useful. Thank you.
Thanks for Info ,
legendary
Activity: 1862
Merit: 1011
Reverse engineer from time to time
Looked at my spam folder and saw this bc.i scam e-mail with super broken english
Delivered-To: ***************
Received: by 10.112.1.72 with SMTP id 8csp66660lbk;
Fri, 28 Mar 2014 20:33:39 -0700 (PDT)
X-Received: by 10.66.21.7 with SMTP id r7mr543434pae.135.1396064018900;
Fri, 28 Mar 2014 20:33:38 -0700 (PDT)
Return-Path: <[email protected]>
Received: from server1.lotusproxy.com ([192.184.9.147])
by mx.google.com with ESMTPS id j4si4797401pad.186.2014.03.28.20.33.38
for <***************>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 28 Mar 2014 20:33:38 -0700 (PDT)
Received-SPF: neutral (google.com: 192.184.9.147 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=192.184.9.147;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 192.184.9.147 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from enginnv by server1.lotusproxy.com with local (Exim 4.82)
(envelope-from <[email protected]>)
id 1WTk1Y-000XFR-AW
for ***************; Fri, 28 Mar 2014 20:33:36 -0700
To: ***************
Subject: You need to confirm your wallet
X-PHP-Script: engineer-inv.com/a.php for 69.60.116.154
From: Blockchain <[email protected] >
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Fri, 28 Mar 2014 20:33:36 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.lotusproxy.com
X-AntiAbuse: Original Domain - *****
X-AntiAbuse: Originator/Caller UID/GID - [514 526] / [47 12]
X-AntiAbuse: Sender Address Domain - server1.lotusproxy.com
X-Get-Message-Sender-Via: server1.lotusproxy.com: authenticated_id: enginnv/only user confirmed/virtual account not confirmed
Quote
Delivered-To: ***************
Received: by 10.112.1.72 with SMTP id 8csp66660lbk;
Fri, 28 Mar 2014 20:33:39 -0700 (PDT)
X-Received: by 10.66.21.7 with SMTP id r7mr543434pae.135.1396064018900;
Fri, 28 Mar 2014 20:33:38 -0700 (PDT)
Return-Path: <[email protected]>
Received: from server1.lotusproxy.com ([192.184.9.147])
by mx.google.com with ESMTPS id j4si4797401pad.186.2014.03.28.20.33.38
for <***************>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 28 Mar 2014 20:33:38 -0700 (PDT)
Received-SPF: neutral (google.com: 192.184.9.147 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=192.184.9.147;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 192.184.9.147 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from enginnv by server1.lotusproxy.com with local (Exim 4.82)
(envelope-from <[email protected]>)
id 1WTk1Y-000XFR-AW
for ***************; Fri, 28 Mar 2014 20:33:36 -0700
To: ***************
Subject: You need to confirm your wallet
X-PHP-Script: engineer-inv.com/a.php for 69.60.116.154
From: Blockchain <[email protected] >
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Fri, 28 Mar 2014 20:33:36 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.lotusproxy.com
X-AntiAbuse: Original Domain - *****
X-AntiAbuse: Originator/Caller UID/GID - [514 526] / [47 12]
X-AntiAbuse: Sender Address Domain - server1.lotusproxy.com
X-Get-Message-Sender-Via: server1.lotusproxy.com: authenticated_id: enginnv/only user confirmed/virtual account not confirmed
** If you see a mensage that a risk page ignore it.
** If your already enter the correct details, you don't need to insert it
again.
Since our last update on our servers, we worried about the size of wallets.
And many of these wallets are no funds, no movement and no logins.
Because to avoid future problems with our servers, we are requesting that all
users wishing to continue with their wallets to make a brief confirmation.
If you want to continue using your account on Blockchain, please click the link
below and confirm your wallet:
https://blockchain.info/wallet/confirm/
If within 48 hours we do not receive your confirmation, your wallet will be
erased and all their bitcoins will be reset.
Jump to: