[nsp-sec] Google spreadsheet phish

Nathan Lee nathan at caltech.edu
Mon Sep 19 13:29:21 EDT 2011


Google spreadsheet phish:

https://docs.google.com/spreadsheet/viewform?formkey=dG5HeEswc3l3OE9KSzVKVWVCcHFERlE6MQ.


Thanks,
Nathan


-------- Original Message --------
Return-Path: <fredcollins_20 at live.com>
X-Original-To: nathan at cco.caltech.edu
Received: from earth-doxen.imss.caltech.edu (localhost [127.0.0.1])	by 
earth-doxen-postvirus (Postfix) with ESMTP id 4C57B66E02E5	for 
<nathan at cco.caltech.edu>; Mon, 19 Sep 2011 09:42:56 -0700 (PDT)
X-Spam-Scanned: at Caltech-IMSS on earth-doxen by amavisd-new
X-Spam-Flag: NO
X-Spam-Score: 2.846
X-Spam-Level: **
X-Spam-Status: No, score=2.846 tagged_above=-10000 required=5 
tests=[CIT_LIVE_COM=2, HTML_MESSAGE=0.001, MISSING_HEADERS=1.581, 
SNF4SA=-1.389, SPF_HELO_PASS=-0.001, SPF_SOFTFAIL=0.654]	autolearn=disabled
Received: from cfia.or.cr (mail.cfia.or.cr [196.40.74.29])	by 
earth-doxen-external (Postfix) with ESMTP id B7C0166E0306	for 
<nathan at cco.caltech.edu>; Mon, 19 Sep 2011 09:42:53 -0700 (PDT)
Received: (qmail 3576 invoked by uid 48); 19 Sep 2011 10:06:36 -0600
Cc: recipient list not shown: ;
Received: from 187.0.221.134 (proxying for 41.71.151.29) 
(SquirrelMail authenticated user joaraya)        by webmail.cfia.or.cr 
with HTTP;        Mon, 19 Sep 2011 10:04:21 -0600 (CST)
Message-ID: <49772.187.0.221.134.1316448261.squirrel at webmail.cfia.or.cr>
Date: Mon, 19 Sep 2011 10:04:21 -0600 (CST)
Subject: Re-Validate Your Email Account Or Get Deleted
From: WebAdmin Team <fredcollins_20 at live.com>
Reply-To: fredcollins_20 at live.com
User-Agent: SquirrelMail/1.4.6
MIME-Version: 1.0
Content-Type: multipart/alternative;boundary="----=_20110919100421_13801"
X-Priority: 3 (Normal)
Importance: Normal



We detect some unusual activities in your account
which is  contrary to our  Web mail rules. If you wish not to loose
this account and to  verify you as the account owner <A 
href="https://docs.google.com/spreadsheet/viewform?formkey=dG5HeEswc3l3OE9KSzVKVWVCcHFERlE6MQ">CLICKHERE</A>
  and fill the form.
Signed
Customer Care Unit




More information about the nsp-security mailing list