Indice del forum Olimpo Informatico
I Forum di Zeus News
Leggi la newsletter gratuita - Attiva il Menu compatto
 
 FAQFAQ   CercaCerca   Lista utentiLista utenti   GruppiGruppi   RegistratiRegistrati 
 ProfiloProfilo   Messaggi privatiMessaggi privati   Log inLog in 

    Newsletter RSS Facebook Twitter Contatti Ricerca
Probabile phishing, sicuramente SPAM
Nuovo argomento   Rispondi    Indice del forum -> Sicurezza
Precedente :: Successivo  
Autore Messaggio
bdoriano
Amministratore
Amministratore


Registrato: 02/04/07 12:05
Messaggi: 14391
Residenza: 3° pianeta del sistema solare...

MessaggioInviato: 14 Lug 2010 07:47    Oggetto: Probabile phishing, sicuramente SPAM Rispondi

Buongiorno a tutti.

stamattina, come al solito, controllo i messaggi di posta e mi trovo il seguente avviso:
Citazione:
PROMOZIONE
VALIDA SINO AL 16/07/10

BANCA DATI AZIENDE COMPRESI DI

Ragione sociale

indirizzo, cap, comune, provincia.

tel, fax, sito internet.

Divise per regione e per settore.
Clicca qui per parlare con un nostro consulente

Se non riesci ad aprire il link scrivi una email a banch.dati@gmail.com

oppure telefona al numero _392_078-52-63

Guardando il sorgente del messaggio, si nota come utilizzi l'encoding per superare le difese anti-SPAM:
Codice:
From - Wed Jul 14 06:59:25 2010
X-Account-Key: account14
X-UIDL: 4268
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00400000
X-Mozilla-Keys:                                                                                 
Return-Path: <banch.dati@gmail.com>
Received: from mailrelay04.libero.it (192.168.32.91) by ims2e8.libero.it (8.5.124)
        id 4C10F9F60095BEA0 for ****@libero.it; Wed, 14 Jul 2010 01:22:52 +0200
X-IronPort-Anti-SPAM-Filtered: true
X-IronPort-Anti-SPAM-Result: AjQKADOSPEzAqCSj/2dsb2JhbAB+giCbWxKBS65gOwqHUS6IWIQ1cgSPIw
X-IronPort-AV: E=Sophos;i="4.55,198,1278288000";
   d="scan'208,217";a="855402238"
Received: from mtalibero01.libero.it ([192.168.36.163])
  by mailrelay04.libero.it with ESMTP; 13 Jul 2010 23:22:52 +0000
X-LREMOTE-IP: 174.120.255.250
Received: from isvn.net (HELO aphrodite.z4webhosting.com) ([174.120.255.250])
  by mtalibero01.libero.it with SMTP; 13 Jul 2010 23:22:52 +0000
Received: FROM [82.84.245.94] BY aphrodite.z4webhosting.com with hMailServer ; Tue, 13 Jul 2010 16:34:01 -0500
Message-ID: <D81D3E9E-5FAC-4C95-B56D-EE8804341448@aphrodite.z4webhosting.com>
Disposition-notification-to: banch.dati@gmail.com
MIME-Version: 1.0
From: banch.dati@gmail.com
To: ****@libero.it
Reply-To: banch.dati@gmail.com
Date: 13 Jul 2010 22:33:53 +0100
Subject: fattura
Content-Type: multipart/alternative;
 boundary=--boundary_42983_bb07055c-7c33-4f05-a242-12c277637782


----boundary_42983_bb07055c-7c33-4f05-a242-12c277637782
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64
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==
----boundary_42983_bb07055c-7c33-4f05-a242-12c277637782
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64

PGh0bWw+DQoNCjxoZWFkPg0KPC9oZWFkPg0KPHRhYmxlIHdpZHRoPSI2MDAiaGVpZ2h0PSIy
MDAiIGJvcmRlcj0wIiJjZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiYm9yZGVyY29s
b3I9Ymx1ZQ0KPHRyPjx0ZD4NCg0KPGZvbnQgY29sb3I9ImJsdWUiPjxESVYgQUxJR049IkNF
TlRFUiI+PGgxPlBST01PWklPTkU8L2ZvbnQ+PC9oMT48L0RJVj4NCjx0YWJsZSBib3JkZXI9
IjEiPg0KICA8L3RyPg0KPC90ZD4NCjwvdGFibGU+DQo8Zm9udCBjb2xvcj0iYmxhY2siPjxE
SVYgQUxJR049IkNFTlRFUiI+DQo8aDM+VkFMSURBIFNJTk8gQUwgMTYvMDcvMTA8L2gzPjwv
dGQ+DQo8L3RyPg0KPHRkPjxmb250IGNvbG9yPSJibHVlIj48RElWIEFMSUdOPSJDRU5URVIi
PjxwPkJBTkNBIERBVEkgQVpJRU5ERSBDT01QUkVTSSBESTwvcD48L3RkPg0KPC90cj4NCjx0
ZD48RElWIEFMSUdOPSJDRU5URVIiPjxwPlJhZ2lvbmUgc29jaWFsZTwvcD48L3RkPg0KPC90
cj4NCjx0ZD48RElWIEFMSUdOPSJDRU5URVIiPjxwPmluZGlyaXp6bywgY2FwLCBjb211bmUs
IHByb3ZpbmNpYS48L3A+PC90ZD4NCjwvdHI+DQo8dGQ+DQo8RElWIEFMSUdOPSJDRU5URVIi
PjxwPnRlbCwgZmF4LCBzaXRvIGludGVybmV0LjwvcD48L3RkPg0KPC90cj4NCjx0ZD4NCjxE
SVYgQUxJR049IkNFTlRFUiI+PHA+RGl2aXNlIHBlciByZWdpb25lIGUgcGVyIHNldHRvcmUu
PC9wPg0KPC90cj4NCg0KPHRyPjx0ZCBhbGlnbj1jZW50ZXI+PGEgaHJlZj0ibWFpbHRvOmJh
bmNoLmRhdGlAZ21haWwuY29tP1N1YmplY3Q9Y2hpZWRvIG5ld3MmYm9keT1pbmRpY2FyZSUw
QU5vbWUlMEFUZWxlZm9ubyUwQVF1YW5kbyUyMHZvbGV0ZSUyMEVzc2VyZSUyMFJpY29udGF0
dGF0aSI+PGI+Q2xpY2NhIHF1aSBwZXIgcGFybGFyZSBjb24gdW4gbm9zdHJvIGNvbnN1bGVu
dGU8L2I+PC9hPjwvdGQ+PC90cj4NCg0KPHRyPjx0ZD48RElWIEFMSUdOPSJDRU5URVIiPjxw
PlNlIG5vbiByaWVzY2kgYWQgYXByaXJlIGlsIGxpbmsgc2NyaXZpIHVuYSBlbWFpbCBhIGJh
bmNoLmRhdGlAZ21haWwuY29tPC9wPjwvdGQ+PC90cj48L2JyPg0KPHRyPjx0ZD48RElWIEFM
SUdOPSJDRU5URVIiPjxwPm9wcHVyZSB0ZWxlZm9uYSBhbCBudW1lcm8gXzM5Ml8wNzgtNTIt
NjM8L3A+PC90ZD48L3RyPg0KDQo8Ym9keT4NCg0KPC9ib2R5Pg0KPC9odG1sPg==
----boundary_42983_bb07055c-7c33-4f05-a242-12c277637782--



.


Ovvia e immediata la segnalazione al servizio abusi di gmail... Twisted Evil
Top
Profilo Invia messaggio privato
Mostra prima i messaggi di:   
Nuovo argomento   Rispondi    Indice del forum -> Sicurezza Tutti i fusi orari sono GMT + 2 ore
Pagina 1 di 1

 
Vai a:  
Non puoi inserire nuovi argomenti
Non puoi rispondere a nessun argomento
Non puoi modificare i tuoi messaggi
Non puoi cancellare i tuoi messaggi
Non puoi votare nei sondaggi