mt.gox phishing … | Bitcointalksearch.org

neo_rage

full member

Activity: 196

Merit: 100

Really, check site address in the address bar every time when you enter mtgox or other important site like topicstarter do.

Maged

legendary

Activity: 1204

Merit: 1015

I'm shocked and amazed that, as someone on the MtGox leak list, I've never received these emails...

Xenland

legendary

Activity: 980

Merit: 1003

I'm not just any shaman, I'm a Sha256man

I still continue to receive (phishing) emails about Photo ID verification - I thought they were real until I click the link and get some wierd wigydsjkhfd.de address or somthing similar to what i put....

neo_rage

full member

Activity: 196

Merit: 100

Quote from: XMPPwocky on February 28, 2012, 12:47:40 PM

I SQL-injected them and dropped various tables.

good!

Otoh

donator

Activity: 3136

Merit: 1167

yep I too got this .ru one a couple of days ago, the last one was .tk or .tw if I remember correctly but otherwise the same, I'm still waiting for the first Intersango phish since their emails got broadcast not so long ago

rjk

sr. member

Activity: 448

Merit: 250

1ngldh

Quote from: XMPPwocky on February 28, 2012, 12:47:40 PM

I SQL-injected them and dropped various tables.

Hacking the phishers. Me likey. Grin

XMPPwocky

newbie

Activity: 21

Merit: 0

I SQL-injected them and dropped various tables.

phatsphere

hero member

Activity: 763

Merit: 500

… hit me once again. fortunately i'm "yubikeyed". wondering from where they know my address.

page: http://ejubg3.tmweb.ru/

header:

Code:

Received: by 10.50.135.36 with SMTP id pp4csp99778igb;
        Tue, 28 Feb 2012 07:41:04 -0800 (PST)
Received: by 10.14.101.129 with SMTP id b1mr8494837eeg.12.1330443664220;
        Tue, 28 Feb 2012 07:41:04 -0800 (PST)
Return-Path: 
Received: from xm63.hostsila.org (xm63.hostsila.org. [194.28.85.190])
        by mx.google.com with ESMTPS id c42si4380583eeo.73.2012.02.28.07.41.03
        (version=TLSv1/SSLv3 cipher=OTHER);
        Tue, 28 Feb 2012 07:41:04 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 194.28.85.190 as permitted sender) client-ip=194.28.85.190;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of [email protected] designates 194.28.85.190 as permitted sender) [email protected]
Received: from samanito by xm63.hostsila.org with local (Exim 4.69)
	(envelope-from )
	id 1S2PFS-0002xV-PM
	for [email protected]; Tue, 28 Feb 2012 17:45:54 +0200
To: XXXX
Subject: [Mt.Gox] Your account is currently pending review.
X-PHP-Script: 194.28.85.190/~samanito/index.php for 84.19.169.163
From:[email protected]
Reply-To:[email protected]
MIME-Version:1.0
Content-Type: text/html;
Message-Id: 
Sender:  
Date: Tue, 28 Feb 2012 17:45:54 +0200
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - xm63.hostsila.org
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [1226 32007] / [47 12]
X-AntiAbuse: Sender Address Domain - xm63.hostsila.org
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/samanito/public_html/index.php 
X-Source-Dir: samanito.net:/public_html

Topic: mt.gox phishing … (Read 1261 times)