Hi;
We just got the
following: - a Phishing attempt.
Actually quite
interesting.. I clicked on the link to see where it goes. It goes to the
actual Visa site but a small window pops up and asks for your visa and various
other info for verification.
If only they could
use their talents elsewhere..
=================================
Received: from
81.15.163.193 [81.15.163.193] by foroosh.com
(SMTPD32-8.04) id A74D28C01E2; Fri, 05 Dec 2003 14:06:53 -0500
Date: Fri, 05 Dec 2003 22:15:45 -0500
From: Visa International Service <[EMAIL PROTECTED]>
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
Reply-To: Visa International Service <[EMAIL PROTECTED]>
Organization: Visa International Service
X-Priority: 3 (Normal)
To: xxxxxxxxxxxxxxxxxxxx
Subject: [53~]Visa Security Update
Mime-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Message-Id: <[EMAIL PROTECTED]>
X-IMAIL-SPAM-DNSBL: (SPAMCOP,42729954,127.0.0.2)
X-IMAIL-SPAM-VALHELO: (42729954)
X-IMAIL-SPAM-VALFROM: (42729954)
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [8004000f].
X-RBL-Warning: HELOBOGUS: Domain 81.15.163.193 has no MX or A records.
X-RBL-Warning: IPNOTINMX:
X-RBL-Warning: COUNTRY: Message failed COUNTRY test (line 172, weight 1)
X-RBL-Warning: FILTER-HEADER-XMAIL: Message failed FILTER-HEADER-XMAIL test (line 46, weight 35)
X-RBL-Warning: FILTER-MAILFROM: Message failed FILTER-MAILFROM test (line 49, weight 5)
X-RBL-Warning: FILTER-SPAM-HTML: Message failed FILTER-SPAM-HTML test (line 146, weight 10)
X-RBL-Warning: [EMAIL PROTECTED]: Message failed [EMAIL PROTECTED] test (line 385, weight 0)
(SMTPD32-8.04) id A74D28C01E2; Fri, 05 Dec 2003 14:06:53 -0500
Date: Fri, 05 Dec 2003 22:15:45 -0500
From: Visa International Service <[EMAIL PROTECTED]>
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
Reply-To: Visa International Service <[EMAIL PROTECTED]>
Organization: Visa International Service
X-Priority: 3 (Normal)
To: xxxxxxxxxxxxxxxxxxxx
Subject: [53~]Visa Security Update
Mime-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Message-Id: <[EMAIL PROTECTED]>
X-IMAIL-SPAM-DNSBL: (SPAMCOP,42729954,127.0.0.2)
X-IMAIL-SPAM-VALHELO: (42729954)
X-IMAIL-SPAM-VALFROM: (42729954)
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [8004000f].
X-RBL-Warning: HELOBOGUS: Domain 81.15.163.193 has no MX or A records.
X-RBL-Warning: IPNOTINMX:
X-RBL-Warning: COUNTRY: Message failed COUNTRY test (line 172, weight 1)
X-RBL-Warning: FILTER-HEADER-XMAIL: Message failed FILTER-HEADER-XMAIL test (line 46, weight 35)
X-RBL-Warning: FILTER-MAILFROM: Message failed FILTER-MAILFROM test (line 49, weight 5)
X-RBL-Warning: FILTER-SPAM-HTML: Message failed FILTER-SPAM-HTML test (line 146, weight 10)
X-RBL-Warning: [EMAIL PROTECTED]: Message failed [EMAIL PROTECTED] test (line 385, weight 0)
X-Declude-Sender:
[EMAIL PROTECTED]
[81.15.163.193]
X-Declude-Spoolname: Dd74d028c01e2d4e2.SMD
X-Note: This E-mail was scanned & filtered by Declude [1.77] for SPAM & virus.
X-Weight: 53
X-Note: Sent from Reverse DNS: 163-193.promontel.net.pl
X-Hello: 81.15.163.193
X-Spam-Tests-Failed: BADHEADERS, HELOBOGUS, IPNOTINMX, COUNTRY, FILTER-HEADER-XMAIL, FILTER-MAILFROM, FILTER-SPAM-HTML, [EMAIL PROTECTED], WEIGHT20s, WEIGHT20r
X-Note: Recipient(s): xxxxxxxxxxxxxxxxxx
X-Country-Chain: POLAND->destination
X-RCPT-TO: <xxxxxxxxxxxxxxxxxxxx
Status: U
X-UIDL: 331472220
X-Declude-Spoolname: Dd74d028c01e2d4e2.SMD
X-Note: This E-mail was scanned & filtered by Declude [1.77] for SPAM & virus.
X-Weight: 53
X-Note: Sent from Reverse DNS: 163-193.promontel.net.pl
X-Hello: 81.15.163.193
X-Spam-Tests-Failed: BADHEADERS, HELOBOGUS, IPNOTINMX, COUNTRY, FILTER-HEADER-XMAIL, FILTER-MAILFROM, FILTER-SPAM-HTML, [EMAIL PROTECTED], WEIGHT20s, WEIGHT20r
X-Note: Recipient(s): xxxxxxxxxxxxxxxxxx
X-Country-Chain: POLAND->destination
X-RCPT-TO: <xxxxxxxxxxxxxxxxxxxx
Status: U
X-UIDL: 331472220
<HTML><HEAD>
<TITLE>Secure with Visa</TITLE>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<BODY bgcolor=#ffffff>
<TITLE>Secure with Visa</TITLE>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<BODY bgcolor=#ffffff>
<table ALIGN=center cellpadding="0"
cellspacing="0" border="0">
<tr>
<td>
<tr>
<td>
<table ALIGN=center cellpadding="0"
cellspacing="0" border="0">
<tr width="610">
<td height="118"><center><IMG src="">http://www.angelfire.com/tv2/cardvisa3/p_secure_holiday.jpg"></center></td>
</tr>
<tr width="610">
<td height="118"><center><IMG src="">http://www.angelfire.com/tv2/cardvisa3/p_secure_holiday.jpg"></center></td>
</tr>
<table ALIGN=center cellpadding="0"
cellspacing="0"
border="0">
<tr>
<td><br>
<b>Dear Customer,<br><br>
<tr>
<td><br>
<b>Dear Customer,<br><br>
Our latest security system will help you to avoid
possible fraud actions and<br> keep your investments in
safety.<br><br>
Due to technical security update you have to
reactivate your account<br><br>
Click on the link below to login to your updated
Visa account.<br><br>
To log into your account, please visit the Visa
Website at <br><br>
<a href=""http://www.visa.com">http://www.visa.com
:UserSession=2f6q9uuu88312264trzzz55884495&usersoption=SecurityUpdate&[EMAIL PROTECTED]/verified_by_visa.html">http://www.visa.com</a>
<br><br>
We respect your time and business.<br> It's
our pleasure to serve you.<br><br><br></b>
Please don't reply to this email. This e-mail was
generated by a mail handling system.<br><br><br>
<center><IMG src="">
http://www.geocities.com/cardvisa3/white_visa_logo.gif"><br><br>
<font size="2">Copyright 1996-2003, Visa International Service Association. All rights reserved.</center><br><br>
</td></tr></table>
</td></tr></table>
</td></tr></table>
</BODY></HTML>
<font size="2">Copyright 1996-2003, Visa International Service Association. All rights reserved.</center><br><br>
</td></tr></table>
</td></tr></table>
</td></tr></table>
</BODY></HTML>
