[nsp-sec] ATTN Google, phishing drop box

Anthony Edwards anthony.edwards at sns.bskyb.com
Wed Dec 8 06:49:29 EST 2010


Account username and phishing drop box upmgrenoble1 at gmail.com:

: Envelope-to: abuse at abuse.noc.uk.easynet.net
: Delivery-date: Wed, 08 Dec 2010 09:09:37 +0000
: Received: from mail-relay1.easynet.com ([87.83.30.7])
: 	by abuse.noc.uk.easynet.net with esmtp (Exim 4.63)
: 	(envelope-from <UK-Abuse at easynet.com>)
: 	id 1PQG1p-0000px-4S
: 	for abuse at abuse.noc.uk.easynet.net; Wed, 08 Dec 2010 09:09:37 +0000
: Received: from UKEXCAS1.easynet.global (10.48.32.26) by
:  UKEXTMG1.Easynet.Global (10.48.35.165) with Microsoft SMTP Server id
:  14.0.702.0; Wed, 8 Dec 2010 09:09:32 +0000
: Resent-From: <UK-Abuse at easynet.com>
: Received: from UKEXTMG2.Easynet.Global (10.48.35.166) by
:  UKEXCAS1.easynet.global (10.48.32.26) with Microsoft SMTP Server (TLS) id
:  14.0.702.0; Wed, 8 Dec 2010 09:09:29 +0000
: Received: from int0.mail.uk.easynet.net (212.135.11.36) by mail.easynet.com
:  (10.48.35.151) with Microsoft SMTP Server id 14.0.702.0; Wed, 8 Dec 2010
:  09:09:51 +0000
: Received: from mailfilter5.mail.uk.easynet.net ([212.135.6.204])	by
:  int0.mail.uk.easynet.net with esmtp (Exim 4.50)	id 1PQG11-0005JA-98	for
:  abuse at easynet.net; Wed, 08 Dec 2010 09:08:47 +0000
: Received: from mx3.mail.uk.easynet.net ([212.135.6.25])	by
:  mailfilter5.mail.uk.easynet.net with esmtps (TLSv1:AES256-SHA:256)	(Exim
:  4.69)	(envelope-from <upmgrenoble1 at gmail.com>)	id 1PQG10-0006on-Tb	for
:  abuse at easynet.net; Wed, 08 Dec 2010 09:08:47 +0000
: Received: from [209.85.160.66] (helo=mail-pw0-f66.google.com)	by
:  mx3.mail.uk.easynet.net with esmtp (Exim 4.69)	(envelope-from
:  <upmgrenoble1 at gmail.com>)	id 1PQG0z-0005OY-U8	for abuse at easynet.net; Wed, 08
:  Dec 2010 09:08:46 +0000
: Received: by pwj5 with SMTP id 5so194118pwj.9        for <abuse at easynet.net>;
:  Wed, 08 Dec 2010 01:08:45 -0800 (PST)
: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
:         d=gmail.com; s=gamma;
:         h=domainkey-signature:mime-version:received:received:date:message-id
:          :subject:from:content-type:content-transfer-encoding;
:         bh=5DJpGJb3EC7yJEK3XwzXsRSbfeizFkQFFw5FP2MAxMA=;
:         b=uGlotBiwvGO7BJZ5y8TzenNl9NMHtvEz/GodvqMFN+9ZtcWsUmJBFKnX0TrMvMIs94
:          tVAN57Tcl0QyvU/eXuBuCpfmm/dXfyE6wriORQ3WEdQZMY0m7hd2RLlZwBKVOAVBC8q3
:          DGMb3BWALsNzEAYQz2PFVrGiVBnsKiZCfIFSU=
: DomainKey-Signature: a=rsa-sha1; c=nofws;
:         d=gmail.com; s=gamma;
:         h=mime-version:date:message-id:subject:from:content-type
:          :content-transfer-encoding;
:         b=ZtUjMfer6Jrui9CMHOSUnWDJ9AqroFtvcwXvVpVuGBmoPxTKhp5+xIqLOloUKU9i1A
:          svPUdi3defrWCdCoQqqI3SpSojeaPcpXjOFmqKAg/BtBNxRZbBJinfE3zp45PSdRZIrU
:          FcIlxtuU7OHh3bVl/slCVNxNIFftgFk8OydtM=
: MIME-Version: 1.0
: Received: by 10.142.192.20 with SMTP id p20mt3154120wff.42.1291799319383; Wed,
:  08 Dec 2010 01:08:39 -0800 (PST)
: Received: by 10.142.231.12 with HTTP; Wed, 8 Dec 2010 01:08:39 -0800 (PST)
: Date: Wed, 8 Dec 2010 10:08:39 +0100
: Message-ID: <AANLkTi=vAuf66OJXrhLkwK=ie3Fy7q+4GZNwFBAP=HAE at mail.gmail.com>
: Subject: Easynet Global Managed Networks (Update Your Account)
: From: Easynet Global Managed Networks <upmgrenoble1 at gmail.com>
: Content-Type: text/plain; charset="ISO-8859-1"
: Content-Transfer-Encoding: quoted-printable
: X-Sent-For-Filtering: yes
: To: Undisclosed recipients:;
: 
:  Easynet Global Managed Networks take your privacy seriously, We are
: writing to inform you that we are upgrading our webmail to enable us
: fight against SPAM MAIL,before we shall proceed with you WE want you
: to send to us with your account information below:
: 
: CONFIRM YOUR EMAIL IDENTITY BELOW
: Email Username :  =======================
: Email Password :  ========================
: Date of Birth : =============================
: 
: Not that the excesses will last for 5working days Any account owner
: that refuses to update his/her account within five working days of
: this update notification will loose his/her account permanently.
: 
: You are advise to send to us with the above information to enable
: re-structure and offer you good service that  Easynet Global Managed
: Networks will not rent or sele your identifiable personal information
: to any body
: 
: Easynet Global Managed Networks
: Terms & Conditions
: cc Technical Support
: Copyright © 2010. | Business Services

-- 
Anthony Edwards
anthony.edwards at sns.bskyb.com
Abuse Team Manager  -  Sky Network Services
DDI: 0161 888 3507



More information about the nsp-security mailing list