Topic: mt.gox phishing … (Read 1244 times)
Really, check site address in the address bar every time when you enter mtgox or other important site like topicstarter do.
I'm shocked and amazed that, as someone on the MtGox leak list, I've never received these emails...
I still continue to receive (phishing) emails about Photo ID verification - I thought they were real until I click the link and get some wierd wigydsjkhfd.de address or somthing similar to what i put....
I SQL-injected them and dropped various tables.
good!
yep I too got this .ru one a couple of days ago, the last one was .tk or .tw if I remember correctly but otherwise the same, I'm still waiting for the first Intersango phish since their emails got broadcast not so long ago
I SQL-injected them and dropped various tables.
Hacking the phishers. Me likey. 
I SQL-injected them and dropped various tables.
… hit me once again. fortunately i'm "yubikeyed". wondering from where they know my address.
page: http://ejubg3.tmweb.ru/
header:
page: http://ejubg3.tmweb.ru/
header:
Code:
Received: by 10.50.135.36 with SMTP id pp4csp99778igb;
Tue, 28 Feb 2012 07:41:04 -0800 (PST)
Received: by 10.14.101.129 with SMTP id b1mr8494837eeg.12.1330443664220;
Tue, 28 Feb 2012 07:41:04 -0800 (PST)
Return-Path:
Received: from xm63.hostsila.org (xm63.hostsila.org. [194.28.85.190])
by mx.google.com with ESMTPS id c42si4380583eeo.73.2012.02.28.07.41.03
(version=TLSv1/SSLv3 cipher=OTHER);
Tue, 28 Feb 2012 07:41:04 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 194.28.85.190 as permitted sender) client-ip=194.28.85.190;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 194.28.85.190 as permitted sender) [email protected]
Received: from samanito by xm63.hostsila.org with local (Exim 4.69)
(envelope-from)
id 1S2PFS-0002xV-PM
for [email protected]; Tue, 28 Feb 2012 17:45:54 +0200
To: XXXX
Subject: [Mt.Gox] Your account is currently pending review.
X-PHP-Script: 194.28.85.190/~samanito/index.php for 84.19.169.163
From:[email protected]
Reply-To:[email protected]
MIME-Version:1.0
Content-Type: text/html;
Message-Id:
Sender:
Date: Tue, 28 Feb 2012 17:45:54 +0200
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - xm63.hostsila.org
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [1226 32007] / [47 12]
X-AntiAbuse: Sender Address Domain - xm63.hostsila.org
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/samanito/public_html/index.php
X-Source-Dir: samanito.net:/public_html
Tue, 28 Feb 2012 07:41:04 -0800 (PST)
Received: by 10.14.101.129 with SMTP id b1mr8494837eeg.12.1330443664220;
Tue, 28 Feb 2012 07:41:04 -0800 (PST)
Return-Path:
Received: from xm63.hostsila.org (xm63.hostsila.org. [194.28.85.190])
by mx.google.com with ESMTPS id c42si4380583eeo.73.2012.02.28.07.41.03
(version=TLSv1/SSLv3 cipher=OTHER);
Tue, 28 Feb 2012 07:41:04 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 194.28.85.190 as permitted sender) client-ip=194.28.85.190;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 194.28.85.190 as permitted sender) [email protected]
Received: from samanito by xm63.hostsila.org with local (Exim 4.69)
(envelope-from
id 1S2PFS-0002xV-PM
for [email protected]; Tue, 28 Feb 2012 17:45:54 +0200
To: XXXX
Subject: [Mt.Gox] Your account is currently pending review.
X-PHP-Script: 194.28.85.190/~samanito/index.php for 84.19.169.163
From:[email protected]
Reply-To:[email protected]
MIME-Version:1.0
Content-Type: text/html;
Message-Id:
Sender:
Date: Tue, 28 Feb 2012 17:45:54 +0200
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - xm63.hostsila.org
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [1226 32007] / [47 12]
X-AntiAbuse: Sender Address Domain - xm63.hostsila.org
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/samanito/public_html/index.php
X-Source-Dir: samanito.net:/public_html
Jump to: