[nsp-sec] [verifingscencses at gmail.com, verification at google-eupgrading.com, support-details at google.com]

William Allen Simpson william.allen.simpson at gmail.com
Tue Aug 9 15:45:28 EDT 2011


Awful lot of gmail phishing these days, but this is the most blatant!

===

Return-Path: <verification at google-eupgrading.com>
Received: from p3plwbeout17-03.prod.phx3.secureserver.net (p3plsmtp17-03-2.prod.phx3.secureserver.net [173.201.193.166])
         by mx.google.com with SMTP id n9si387172pbk.1.2011.08.09.10.47.07;
         Tue, 09 Aug 2011 10:47:08 -0700 (PDT)
Received-SPF: neutral (google.com: 173.201.193.166 is neither permitted nor denied by best guess record for domain of verification at google-eupgrading.com) client-ip=173.201.193.166;
Authentication-Results: mx.google.com; spf=neutral (google.com: 173.201.193.166 is neither permitted nor denied by best guess record for domain of verification at google-eupgrading.com) smtp.mail=verification at google-eupgrading.com
Received: (qmail 1133 invoked from network); 9 Aug 2011 17:47:07 -0000
Received: from unknown (HELO localhost) (173.201.193.245)
   by p3plwbeout17-03.prod.phx3.secureserver.net with SMTP; 9 Aug 2011 17:47:07 -0000
Received: (qmail 4247 invoked by uid 99); 9 Aug 2011 17:34:37 -0000
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"
X-Originating-IP: 41.30.154.55
User-Agent: Web-Based Email 5.5.15
Message-Id: <20110809103434.2c17cbc1deae0683644a73f5c695bd55.e936f677fc.wbe at email17.secureserver.net>
From: "Gmail" <verification at google-eupgrading.com>
Reply-To: "Gmail" <verifingscencses at gmail.com>
To: support-details at google.com
Subject: Database System Update
Date: Tue, 09 Aug 2011 10:34:34 -0700
Mime-Version: 1.0

<html><body><span style=3D"font-family:Verdana; color:#000000; font-size:10=
pt;"><div>*****************************************************************=
********<br>This footnote confirms that this email message has been scanned=
  by New Google Mail-SeCure for<br>the presence of malicious code, vandals &=
amp; computer viruses.<br>*************************************************=
*************************<br>Dear Customer,<br><br>We are shutting down som=
e accounts that can not be verify on our database and your account was auto=
matically chosen. We are sending you this Email to verify and let us know i=
f you still want to use this account, Kindly supply the below details for p=
roper verification:<br><br>        *Full=
  Name :<br>        *Email ID :<br> =
       *Password :<br>   &nbsp=
;    *Occupation :<br>      &n=
bsp; *Alternative Email:<br>        *Ter=
ritory (State/Country) :<br><br>Note: Users should reply within 48 hours to=
  avoid "Permanently Lockup" Account<br><br>Verification Team<br>***********=
***************************************************************<br mce_bogu=
s=3D"1"></div></span></body></html>




More information about the nsp-security mailing list