Hi,
I do not understand how this is being displayed in IE.
I got a phishing e-mail reported to me and I went to check it out.
This is the HTML text
P class=Estilo6To log into your account and verify your account
activity,
click here: BRA
to:
[EMAIL PROTECTED]
and
[EMAIL PROTECTED]
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic
Sent: Thursday, May 12, 2005 1:17 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Phishing Question
Goran,
It's probably DHTML being used to fake an address bar in a window that
doesn't have one, or it is placing a fake address bar on top of the real
one. It might look real, but it isn't. It is safe to blacklist
haukelid.com, and that's all that you need to do about it.
Matt
Goran
Subject: [Declude.JunkMail] Phishing Question
Hi,
I do not understand how this is being displayed in IE.
I got a phishing e-mail reported to me and I went to check it out.
This is the HTML text
P class=Estilo6To log into your account and verify your account
activity,
click here: BRA
One slight correction here. The domain haukelid.com doesn't belong to
the phisher. This is an active site that was likely just simply hacked
and then the PHP code was placed on it...it's a pretty ingenious way to
get a clean address.
Matt
Goran Jovanovic wrote:
Hi,
I do not understand how
PROTECTED]
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Matt
Sent: Thursday, May 12, 2005 4:33 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Phishing Question
One slight correction here. The domain
