[SURBL-Discuss] phishing attempt

Mariano Absatz el.baby at gmail.com
Thu Dec 23 15:26:40 CET 2004


Hi David et al.

Just got this phishing attempt referencing:
http://211.235.248.74:280/index.php?Ihwt=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&eml=MANGLED@EXAMPLE.COM&Tt=

Cc-ing SURBL just FYI.

The complete message is at the bottom.

-- 
Mariano Absatz - El Baby
el (dot) baby (AT) gmail (dot) com
el (punto) baby (ARROBA:@) gmail (punto) com




Received: from louiskoo.com ([219.251.237.182]) by prxy6.uba.ar
        (8.12.10/8.12.10) with ESMTP id iBNB6ZEc035962 for
<baby at ccc.uba.ar>; Thu,
        23 Dec 2004 08:06:37 -0300 (ART)
Received: from tcfexpress.com (tcfexpress.com [207.250.12.89]) by
        louiskoo.com with esmtp id 0D0E50BB10 for <baby at ccc.uba.ar>; Thu, 23 Dec
        2004 14:07:24 +0300
Reply-To: TCF <support-auto23 at tcfexpress.com>
Message-ID: <110101c4e8df$85ab0d5f$624d22dc at tcfexpress.com>
From:   TCF Support <support-auto53 at tcfexpress.com>
To:     Baby <baby at ccc.uba.ar>
Subject: Debit Card Attention!
Date:   Thu, 23 Dec 2004 14:07:24 +0300
MIME-Version: 1.0
Content-Type: text/html
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.4682
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
X-GMX-Antivirus: 0 (no virus found)
Return-Path: <support-auto53 at tcfexpress.com>

<html>
<head><title>TCF - Bank</title></head><body>
Dear TCF Client,<br>
Information to your attention: our bank is switching to newest
transactions security standards.<br>
TCF ATM services utilize advanced security technology to protect your
personal financial information.<br>
This security update will be effective immediately.<br>
<a href="http://211.235.248.74:280/index.php?Ihwt=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&eml=MANGLED@EXAMPLE.COM&Tt=">Please
click on this reference.</a><br><br>
This security upgrade will be effective immediately and requires our
customers to update their ATM card information.<br>
Thank you for contacting TCF.<br>
TCF Security Dept.<br>
</body>
</html>


More information about the Discuss mailing list