SHARE
TWEET

2019-01-02 - Phishing email with link to fake login page

malware_traffic Jan 2nd, 2019 (edited) 588 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Received: from vpssmart.localdomain ([185.116.214.218]) by [removed] for [removed];
  2.         Wed, 02 Jan 2019 17:32:16 +0000 (UTC)
  3. Received: from localhost.com (localhost [127.0.0.1])
  4.     by vpssmart.localdomain (Postfix) with ESMTP id 2B47D130D0D
  5.     for [removed]; Wed,  2 Jan 2019 17:23:50 +0000 (GMT)
  6. Date: 02 Jan 2019 09:23:50 -0800
  7. MIME-Version: 1.0
  8. Subject: About: Ownership confirmation for [recipient's email address]
  9. Message-ID: <20190102092345.258D76CC01A691AE@localhost.com>
  10. From: [recipients' email domain] Mail support team.. <system-alert-pulciifydimgebukeknshicppqcpnvdaqkhvqb@localhost.com>
  11. Content-Transfer-Encoding: quoted-printable
  12. Content-Type: text/html;
  13.     Charset="iso-8859-1"
  14. To: [removed]
  15.  
  16. <html>
  17. <body>
  18. <p>Dear [recipient's email address],</p>
  19. <p>You have pending incoming emails that you are yet to receive.</p>
  20. <p style="padding-bottom:10px;">Access to&nbsp;[recipient's email address] will be restricted until you confirm ownership of [recipient's email address]</p>
  21. <p><a style="text-decoration:none;background-color:#468bfc;color:white;width:20px;padding:10px;" href="hxxps://msmody[.]com/.dns%40%40/.dns%40%40?email=[hex string representing recipient's email address]">Confirm account now </a></p>
  22. <p style="padding-top:10px;"><b>Note:</b> Access to [recipient's email address] will be restricted within 48 (forty eight) working hours.</p>
  23. </body>
  24. </html>
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top