From mewolf1@gmx.net Thu Jun 16 01:03:36 2005
From: wolfgang <mewolf1@gmx.net>
To: discuss@lists.surbl.org
Subject: [SURBL-Discuss] new phishing URI deutsch-bank.net
Date: Thu, 16 Jun 2005 01:03:24 +0200
Message-ID: <200506160103.25709.mewolf1@gmx.net>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============2097201845771876110=="

--===============2097201845771876110==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

>From the invalid sender address Support(a)db.com we are just receiving a flo=
od=20
of phishing mails

here is a quote with the URI in question

        Bitte, <strong><a href=3D3d"http://deutsch-bank=3D2enet/mod/WebObject=
=3D
s/dbpbc=3D2ewoa?lang=3D3dde">schauen</a></strong> Sie Internet Banking, um di=
=3D

i will submit samples to the web interfaces in a minute

cheers,

wolfgang


--===============2097201845771876110==--


From jeffc@surbl.org Thu Jun 16 01:18:55 2005
From: Jeff Chan <jeffc@surbl.org>
To: discuss@lists.surbl.org
Subject: Re: [SURBL-Discuss] new phishing URI deutsch-bank.net
Date: Wed, 15 Jun 2005 16:18:46 -0700
Message-ID: <1910390329.20050615161846@surbl.org>
In-Reply-To: <200506160103.25709.mewolf1@gmx.net>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============8914965373360252105=="

--===============8914965373360252105==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

On Wednesday, June 15, 2005, 4:03:24 PM, wolfgang wolfgang wrote:
>>From the invalid sender address Support(a)db.com we are just receiving a fl=
ood=20
> of phishing mails

> here is a quote with the URI in question

>         Bitte, <strong><a href=3D3d"http://deutsch-bank=3D2enet/mod/WebObje=
ct=3D
> s/dbpbc=3D2ewoa?lang=3D3dde">schauen</a></strong> Sie Internet Banking, um =
di=3D

> i will submit samples to the web interfaces in a minute

> cheers,

> wolfgang

Please send phishing reports to the best Internet authorities:

  postmaster(a)corp.mailsecurity.net.au
  reportphishing(a)antiphishing.org
  spam(a)uce.gov
  spam(a)mailpolice.com
  admin(a)fraudwatchinternational.com

That's how they get into the ph.surbl.org list.

Jeff C.
--
Don't harm innocent bystanders.


--===============8914965373360252105==--


From raymond@surbl.org Thu Jun 16 01:41:39 2005
From: Raymond Dijkxhoorn <raymond@surbl.org>
To: discuss@lists.surbl.org
Subject: Re: [SURBL-Discuss] new phishing URI deutsch-bank.net
Date: Thu, 16 Jun 2005 01:41:28 +0200
Message-ID: <Pine.LNX.4.61.0506160140490.18786@mailbox.prolocation.net>
In-Reply-To: <1910390329.20050615161846@surbl.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============6876908619979273734=="

--===============6876908619979273734==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit

Hi!

>>         Bitte, <strong><a href=3d"http://deutsch-bank=2enet/mod/WebObject=
>> s/dbpbc=2ewoa?lang=3dde">schauen</a></strong> Sie Internet Banking, um di=
>
>> i will submit samples to the web interfaces in a minute

> Please send phishing reports to the best Internet authorities:
>
>  postmaster(a)corp.mailsecurity.net.au
>  reportphishing(a)antiphishing.org
>  spam(a)uce.gov
>  spam(a)mailpolice.com
>  admin(a)fraudwatchinternational.com
>
> That's how they get into the ph.surbl.org list.

They were added to JP also last hour. Thanks for spotting.

Bye,
Raymond.

--===============6876908619979273734==--