[Dshield] My last post re: Visa Security Update

Doug White doug at clickdoug.com
Thu Mar 11 18:39:55 GMT 2004


The link unescapes to  www.demospeople.com
and is hosted by Techweb

abuse addresses are:  abuse at pwebtech.com and abuse at nac.net

======================================
Stop spam on your domain, Anti-spam solutions
http://www.clickdoug.com/mailfilter.cfm
For hosting solutions http://www.clickdoug.com
======================================
If you woke up breathing, congratulations! You have been given another chance!



----- Original Message ----- 
From: "Louis Hablas" <Lou.Hablas at rzim.org>
To: "'General DShield Discussion List'" <list at dshield.org>
Sent: Thursday, March 11, 2004 8:36 AM
Subject: [Dshield] My last post re: Visa Security Update


: I noticed that in the body of my forward to the list that the 'Continue'
: button info. was not included.  'View Source' revealed the following.  I
: didn't bother translating to IP address:
:
: <FORM
:       target="_blank"
: action=http://%77%77%77%2E%64%65%6D%6F%73%70%65%6F%70%6C%65%2E%63%6F%6D
: method="get"><INPUT type="submit" value="Continue..."></FORM>
:
: -----Original Message-----
: From: list-bounces at dshield.org [mailto:list-bounces at dshield.org]On
: Behalf Of Louis Hablas
: Sent: Thursday, March 11, 2004 9:00 AM
: To: Dshield (E-mail)
: Subject: [Dshield] FW: Visa Security Update
:
:
: All:
:
: Received the following note.  It's definitely a phishing scam.  I didn't
: click on the 'Continue' button, but somebody on list may want to explore
: more fully.  Header info. shows the following--looks like an open proxy
: (64.166.210.148) from pacbell's world.  I've forwarded info. to abuse at same
: <mailto:abuse at same> .
:
: Lou
:
:
: Header Info:
:
:
: Received: from 64.166.210.148 (adsl-64-166-210-148.dsl.lsan03.pacbell.net
: [64.166.210.148]) by ATL0NTS-EXCH.rzim.org with SMTP (Microsoft Exchange
: Internet Mail Service Version 5.5.2657.72)
:  id G4DBM946; Wed, 10 Mar 2004 23:52:08 -0500
: Date: Wed, 10 Mar 2004 20:53:42 -0800
: From: Visa Service <  <mailto:security at visa-security.com>
: security at visa-security.com>
: X-Mailer: Microsoft Outlook Express 6.00.2800.1158
: Reply-To: Visa Service <  <mailto:security at visa-security.com>
: security at visa-security.com>
: Organization: Visa International Service
: X-Priority: 3 (Normal)
: To: <email address>Subject: Visa Security Update
: Mime-Version: 1.0
: Content-Type: text/html; charset=iso-8859-1
: Content-Transfer-Encoding: 8bit
:
:
: -----Original Message-----
: From: Visa Service [mailto:security at visa-security.com]
: Sent: Wednesday, March 10, 2004 11:54 PM
: To: <email address>
: Subject: Visa Security Update
:
:
:
:
:
: Dear Sir/Madam,
:
:
:
:
: We were informed that your card is used by another person or stolen. It
: could happen if you have been shopping on-line, and someone got your
: "Billing information" including your card number. To avoid and prevent any
: billing mistakes and to refund your credit card, it is strongly recommended
: to proceed filling in the secure form on our site and applying for our Zero
: Liability program. This program is free and it will help us to investigate
: this accident.
:
:
:
:
:
:
:
: Sincerely yours, Visa Support Assistant, Alwin Desagun.
:
:
:
:
: The information contained in this message may be CONFIDENTIAL and is for the
: intended addressee only.  Any unauthorized use, dissemination of the
: information, or copying of this message is prohibited.  If you are not the
: intended addressee, please notify the sender immediately and delete this
: message.
: _______________________________________________
: list mailing list
: list at dshield.org
: To change your subscription options (or unsubscribe), see:
: http://www.dshield.org/mailman/listinfo/list
:
:
: The information contained in this message may be CONFIDENTIAL and is for the
: intended addressee only.  Any unauthorized use, dissemination of the
: information, or copying of this message is prohibited.  If you are not the
: intended addressee, please notify the sender immediately and delete this
: message.
: _______________________________________________
: list mailing list
: list at dshield.org
: To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
:
:




More information about the list mailing list