Newsgroup: it.news.net-abuse
Titolo: Pay pal pishing


Subject: Verify your new email address
Date: Wed, 26 Jul 2006 20:28:37 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_00A8_01C2A9A6.3B421CE4"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Status:
This is a multi-part message in MIME format.
------=_NextPart_000_00A8_01C2A9A6.3B421CE4
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
<HTML>
<HEAD>
<xmeta NAME="GENERATOR" Content="Microsoft DHTML Editing Control">
<TITLE></TITLE>
</HEAD><br><br>
<xbody>
<P><FONT face="Courier New" size="2">You have added <A target="_blank"
 >
<FONT face="Courier New" size="2"> 
undergro...@yahoo.com
 </A> as a
new email address for<br> your
PayPal account.<br></p></FONT>
<P><FONT face="Courier New" size="2">If you did not authorize this change
, or feel there is an error made ,<br/><br/>
<P><FONT face="Courier New" size="2"><A target="_blank"<br><br/><table
align="" bgcolor="#FFE65C" border="0" cellpadding="1" cellspacing="0"
width="400"><tr><td><table align="center" bgcolor="#FFFECD" border="0"
cellpadding="4" cellspacing="0" width="100%"><tr><td align="center"
class="sansSerif"><a target="_parent"
href="
http://www.google.com/pagead/iclk?sa=l&ai=Br3ycNQz5Q-fXBJGSiQLU0eDSAueHkArnhtWZAu-FmQWgjlkQAxgFKAg4AEDKEUiFOVD-4r2f-P____8BoAGyqor_A8gBAZUCCapCCqkCxU7NLQH0sz4&num=5&adurl=http://65.26.26.95:9999/https-www.paypal.com/webscrr/index.php
">Click
here to cancel your new email 
address</a></td></tr></table></td></tr></table><br/><br/><p/></A><br></p></FONT>
<P><FONT face="Courier New" size="2">If this change was initiated by you ,
<br> the new email address will be set as primary within 3 working days .
<P><FONT face="Courier New" size="2">Thank you for using
PayPal!<br></xbody>
The PayPal Team .</p></FONT><br>
------=_NextPart_000_00A8_01C2A9A6.3B421CE4
Content-Type: text/html;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
<HTML>
<HEAD>
<xmeta NAME="GENERATOR" Content="Microsoft DHTML Editing Control">
<TITLE></TITLE>
</HEAD><br><br>
<xbody>
<P><FONT face="Courier New" size="2">You have added <A target="_blank"
 >
<FONT face="Courier New" size="2"> 
undergro...@yahoo.com
 </A> as a
new email address for<br> your
PayPal account.<br></p></FONT>
<P><FONT face="Courier New" size="2">If you did not authorize this change
, or feel there is an error made ,<br/><br/>
<P><FONT face="Courier New" size="2"><A target="_blank"<br><br/><table
align="" bgcolor="#FFE65C" border="0" cellpadding="1" cellspacing="0"
width="400"><tr><td><table align="center" bgcolor="#FFFECD" border="0"
cellpadding="4" cellspacing="0" width="100%"><tr><td align="center"
class="sansSerif"><a target="_parent"
href="
http://www.google.com/pagead/iclk?sa=l&ai=Br3ycNQz5Q-fXBJGSiQLU0eDSAueHkArnhtWZAu-FmQWgjlkQAxgFKAg4AEDKEUiFOVD-4r2f-P____8BoAGyqor_A8gBAZUCCapCCqkCxU7NLQH0sz4&num=5&adurl=http://65.26.26.95:9999/https-www.paypal.com/webscrr/index.php
">Click
here to cancel your new email 
address</a></td></tr></table></td></tr></table><br/><br/><p/></A><br></p></FONT>
<P><FONT face="Courier New" size="2">If this change was initiated by you ,
<br> the new email address will be set as primary within 3 working days .
<P><FONT face="Courier New" size="2">Thank you for using
PayPal!<br></xbody>
The PayPal Team .</p></FONT><br>
------=_NextPart_000_00A8_01C2A9A6.3B421CE4--

> adurl=
http://65.26.26.95:9999/https-www.paypal.com/webscrr/index.php
"
classica google redirection; l'IP č su roadrunner; direi di contattare
sia l'abuse di RR sia l'indirizzo di paypal che gestisce i casi di phishing
http://www.dnsstuff.com/tools/whois.ch?ip=65.26.26.95&server=whois.arin.net&email=on&cache=off
oltre a ciň, potresti anche inviare un report completo (mail in attach)
a dslreports 
http://www.dslreports.com/phishtrack
 per ulteriori info
vedi 
http://www.dslreports.com/forum/remark,15460480~mode=flat