BlogKontaktTagcloud

Postfinance Pishing

[ ] by leo @ 28.08.2005 11:05 CEST

Wiedermal ein Pishing Versuch auf die Postfinancekunden. Musste ja einer versuchen nach der schwachen Stellungsnahme der Post beim letzten Versuch (werd ich dann wohl hier mal noch posten müssen). Unten erst mal den Quelltext des Mails, an einigen Stellen durch XXX ersetzt.


From - Sun Aug 28 10:58:50 2005
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: 
Delivered-To: XXXX
Received: (qmail 15803 invoked from network); 28 Aug 2005 08:57:36 -0000
Received: from unknown (HELO ceviserv.cevinet.ch) (213.144.137.244)
  by 80-218-75-113.dclient.hispeed.ch with SMTP; 28 Aug 2005 08:57:36 -0000
Received: from serv2.cevinet.ch (137-246.init7.net [213.144.137.246] (may be forged))
	by ceviserv.cevinet.ch (8.11.0/8.11.0) with ESMTP id j7S8wOn26290
	for ; Sun, 28 Aug 2005 10:58:24 +0200
X-Authentication-Warning: ceviserv.cevinet.ch: Host 137-246.init7.net [213.144.137.246] (may be forged) claimed to be serv2.cevinet.ch
Received: from coldwar5.swisslink.ch (unknown [62.2.195.69])
	by serv2.cevinet.ch (Postfix) with ESMTP id 3C654880
	for ; Sun, 28 Aug 2005 10:59:21 +0200 (CEST)
Received: from nobody by coldwar5.swisslink.ch with local (Exim 4.52)
	id 1E9IzX-0005QD-B4
	for XXX@cevi.ch; Sun, 28 Aug 2005 10:58:15 +0200
To: XXX@cevi.ch
Subject: Important Account Information Last Notice (ID: 028-1812995)
From: PostFinance 
Reply-To: 
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: 
Date: Sun, 28 Aug 2005 10:58:15 +0200
X-AntiAbuse: Sender Address Domain - coldwar5.swisslink.ch
X-Source: 
X-Source-Args: /usr/local/apache/bin/httpd -DSSL 
X-Source-Dir: azarochromepourmeuf.com:/public_html/ma
X-CeviNet-MailScanner: Found to be clean
X-CeviNet-MailScanner-SpamCheck: not spam, SpamAssassin (Wertung=2.914,
	benoetigt 5, FORGED_RCVD_HELO 0.05, HTML_10_20 0.29,
	HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.16, REPLY_TO_EMPTY 1.41)
X-CeviNet-MailScanner-SpamScore: ss
X-MailScanner-From: nobody@coldwar5.swisslink.ch

<html>
<body>

<p>Dear PostFinance Valued Account Holder,<br>
PostFinance has a strict policy to ensure all of our customer's emails<br>
associated with their bank account(s) are confirmed. Upon inspection this<br>
email was registered with your account(s) however not confirmed. Please<br>
confirm your email by clicking the link below or If the link does not allow<br>
you to click on it please proceed by copying/pasting it into the appropriate<br>
web browsing window :<br>
<br>
<a href="https://www.yellow-net.cc/start_e.html">https://www.yellownet.ch/start_e.html</a><br>
<br>
Email verification must be performed within 1 business day from receiving<br>
this email. Failure to comply will result in online banking suspension and<br>
limited account activity until an account specialist can contact you<br>
regarding this error. This can be avoided simply by following our online<br>
verification link above.<br>
Sincerely,<br>
PostFinance, N.A. Account Services Department<br>
PostFinance, N.A. Member FDIC. Equal Housing Lender<br>
Copyright © 2005 PostFinance, N.A. All rights reserved.</p>

</body>

</html>




Comments (0)  Permalink

comments

add a comment

The Trackback URL to this comment is:
http://leo.freeflux.net/blog/plugin=trackback(103).xml

Keine (weiteren) neuen Kommentare erlaubt.