Microsoft/ Hotmail/ Windows Live

Discussion in 'Phishing' started by Spidey, Apr 2, 2009.

  1. Spidey

    Spidey Ninja

    They tried it for Yahoo so they might as well try it for hotmail too.

    Received: from 196.3.183.72, Nigeria, Lagos, Netcom Africa Limited
    Abuse: Netcom Africa Limited, 5/F South Atlantic Petroleum Tower, 7 Adeola Odeku Street, Victoria Island, Lagos, Nigeria, phone: +2341461234, fax-no: +2341461235, fax-no: +85230782000, e-mail: [info@netcomng.com] or Yen Choi, Netcom Africa Limited, 7 Adeola Odeku Street, Victoria Island, Lagos, NG phone: +234 1 461 1234, fax-no: +234 1 461 1235, e-mail: [IP_Registrar@netcomng.com]
    Reply-To: <upgradewindowslive101@hotmail.com>
    From: "Windows Live Team"<upgradewindowslive1@hotmail.com>
    Subject: Verify Your Account Now To Avoid Closure (VX2G99AAJ)
    Date: Tue, 31 Mar 2009

    Dear Account User

    This Message is from Hotmail Customer Care, we are sending this out to every Hotmail Account Users for safety.We are having congestions due to the anonymous registration of Hotmail accounts, so we are shutting down some Hotmail accounts and your account was amongst one of those randomly picked to be Suspended, so we are sending this email to you so that you can verify your account and let us know if you still want to use the email or not. If you are still interested please confirm your account by filling the space below.Your User name, password, date of birth and your country information would be needed to verify your account.

    We apologize for any inconveniences, it was due to the congestion s in all Hotmail users and removal of all unused Hotmail Accounts, Hotmail would be shutting down all unusual Accounts, You will have to confirm your E-mail by filling out your Login Information below after clicking the reply button, or your account will be suspended within 24 hours for security reasons.

    * Username: .......................................
    * Password: .......................................
    * Date of Birth:....................................
    * Country Or Territory:........................

    After following the instructions in the sheet, your account will not be interrupted and will continue as normal. Thanks for your attention to this request, once again we apologize for any inconveniences.

    Warning!!! Account owner that refuses to update his/her account after two weeks of receiving this warning will lose his or her account permanently.

    Sincerely,
    The Windows Live Hotmail Team
     
  2. Kat

    Kat Administrator Staff Member

    :rolleyes: I suppose they might as well try.

    Received: from 82.128.34.145, Nigeria, Lagos, CDMA 1X/EVDO dial up pool
    Return-Path: [nizwani2004@hotmail.com]
    X-Originating-IP: [82.128.34.145]
    From: Windows Live Hotmail ~nizwani2004@hotmail.com>
    Subject: Warning!!! Windows Live Account Verification!
    Date: Sat, 25 Apr 2009

    Attn: Account User,

    We are having congestion due to the anonymous registration of free Windows Live Account therefore we are shutting down some Windows Live Account and your account was among those to be deleted. We are sending you this email so that you can re-confirm your account information to enable us upgrade your account from been deleted. If you are still interested to use your Windows Live account kindly re-confirm your account by filling the space below after clicking the reply button.

    * User name: ...............................
    * Password: ................................
    * Date of Birth: ...........................
    * Country Or Territory: ....................

    Kindly note we already have all your account details including your password in our account data but hence we are having lot's of anonymous registration and account mixtures you are hereby mandated to forward the above details without hitch delay by following the instructions in the sheet promptly to avoid upgrading the wrong account so that your account will not be interrupted and will continue as normal. Thanks for your attention to this effect. We apologize for any inconveniences.

    Warning!!! Account owner that refuses to update his/her account after 48 Hours of receiving this warning will lose his or her account permanently.

    Sincerely.
    Microsoft.
    Windows Live ID Customer service
     
  3. Spanish Administrator

    Spanish Administrator THE Spanish Administrator Staff Member

    Received: from 41.219.221.86, Nigeria, Lagos, Lagos dial pool customers, starcomms.net
    Abuse contact persons: Navneet Singh, Plot 1261, Bishop Kale Close, off Saka Tinubu, Victoria Island, Lagos, Nigeria, phone: +234-1-804-9370, fax-no: +234-1-811-0301 e-mail: [navneets@starcomms.com] or Catalin Miclaus, Plot 1261C, Bishop Kale Close, off Saka Tinubu, phone: +234-7028000733, fax-no: +234-1-8110301 e-mail: [catalin@starcomms.com]
    Return-Path: [virgo152@hotmail.com]
    X-Originating-IP: [41.219.221.86]
    Reply-To: <alertcustomers@live.com>
    From: Hotmail Alert <virgo152@hotmail.com>
    To: <tion@hotmail.com>
    Subject: Hotmail Customers Urgent Alert!!!
    Date: Thu, 14 May 2009

    Dear Account Owner

    This is email from Windows Live Hotmail and we are sending it to you account user for your safety. Due to the anonymous registration of our account which is causing congestion to our service so we are shutting down some account and your account was among those to be deleted,so the purpose of this email is for you to verify that you are the owner of this account and you are still using it by filling the information below after clicking on the reply button:

    * Username: .........................
    * Password: ................................
    * Date of Birth: ............................
    * Country Or Territory: ................

    After following the instructions in the sheet, your account will not be interrupted and will continue as normal. Thanks for your attention to this request. We apologize for any inconveniences.

    Warning!!! Account owner that refuses to update his/her account after two weeks of receiving this warning will lose his or her account permanently.

    Sincerely,
    The Windows Live Hotmail Team
     
  4. Gentle Giant

    Gentle Giant Giant Admin for a Day Staff Member

    From the mail. No headers.

    Hotmail Customer Alert!!‏‏!‏
    From: Customer Care (bfinke33@hotmail.com)
    Sent: Sun 10/18/09 9:08 PM

    Dear Windows Live Hotmail Subscriber,

    We are currently carrying-out a mentainance process for your Windows Live Hotmail account, to complete this process you must reply to this email immediately,and enter your User name, password, date of birth and your country information would be needed to verify your account.

    Username: ..............................
    Password: ...............................
    Date of Birth: ...........................
    Country Or Territory: ................

    After following the instructions in the sheet, your account will not be interrupted and will continue as normal. Thanks for your attention to this request. We apologize for any inconveniences.

    Warning!!! Account owner that refuses to verify his/her account after 48 hours of receiving this warning will lose his or her account permanently.

    Sincerely,
     
  5. Sphinx

    Sphinx Administrator Staff Member

    X-SID-PRA: <larisaroyster@hotmail.com>
    Received: from 82.128.69.198, Lagos, Nigeria, Multi-Links Telecommunications Ltd.
    Return-Path: [larisaroyster@hotmail.com]
    X-Originating-IP: [82.128.69.198]
    Reply-To: <alertmessanger@live.com>
    From: <larisaroyster@hotmail.com>
    To: <alertmessanger@live.com>
    Subject: Sorry For Any Inconvinent Please Verify Your Account Now To Avoid Closure
    Date: Sun, 1 Nov 2009

    Windows Live Hotmail Alert !!!

    CONFIRM YOUR WINDOWS LIVE ACCOUNT SERVICES. VERIFY YOUR HOTMAIL ACCOUNT NOW TO AVOID IT CLOSED !!!

    Dear Account Owner

    This Email is from Hotmail Customer Care and we are sending it to every Hotmail Email User Accounts Owner for safety. we are having congestions due to the anonymous registration of Hotmail accounts so we are shutting down some Hotmail accounts and your account was among those to be deleted. We are sending this email to you so that you can verify and let us know if you still want to use this account. If you are still interested please confirm your account by filling the space below. Your User name, password, date of birth and your country

    information would be needed to verify your account.

    Confirm your E-mail by filling out your Login

    Information below after clicking the reply button or your account will be suspended within 48 hours for security reasons.

    * Username: .............................
    * Password: ................................
    * Date of Birth: ............................
    * Country Or Territory: ................
    After following the instructions in the sheet your account will not be interrupted and will continue as normal. Thanks for your attention to this request. We apologize for any inconveniences.

    Warning!!!

    Account owner that refuses to update his/her account after two weeks of receiving this warning will lose his or her account permanently.

    Sincerely
    The Windows Live Hotmail Team
     
  6. Spanish Administrator

    Spanish Administrator THE Spanish Administrator Staff Member

    From Microsoft Office .
    Return-Path: <office1@microsoft.com>
    Received: from 68.16.159.252, Atlanta, Georgia, BellSouth.net Inc. [abuse@bellsouth.net]
    From: "Microsoft Office ."<office1@Microsoft.com>
    Subject: Dear user
    Date: Tue, 26 Jan 2010

    Executive Summary

    Microsoft has decided to send the update trough email so that more people can benifit , public distribution would have resolved in more attacks of this kind.

    This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user viewed content rendered in a specially crafted Embedded OpenType (EOT) font in client applications that can render EOT fonts, such as Microsoft Internet Explorer, Microsoft Office PowerPoint, or Microsoft Office Word. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs, view, change, or delete data, or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

    This security update is rated Critical for Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2.

    http 68.16.159.252 /default.htm
     
  7. Nanook

    Nanook Administrator Staff Member

    Received: from snt0-mc4-f15.Snt0.hotmail.com ([65.55.90.199]) by snt0-omc4-s10.snt0.hotmail.com with Microsoft
    From: MICROSOFT BILLING *** ~error-591088@billing.msn.com>
    Subject: Your MSN payment method could not be authorized
    X-Originating-IP: [65.55.90.213]
    Reply-to: [error-591088@billing.msn.com]

    Microsoft Live Hotmail
    Billing and Account Management - Payment Method Authorization Failure
    Message Id: d6952732e47dc72b11d7603e5f687bec

    Dear Microsoft Live Hotmail user,
    During our monthly account maintenance and verification procedures, our billing and account management department was unable to authorize your current payment method information.

    This might be due to either of the following reasons:

    1. A recent change in your personal registered user information ( i.e. change of address, credit card )
    2. Submitting invalid information during the initial Sign Up or Upgrade process.
    3. An inability to accurately verify your selected payment method information due to an internal error within our credit card processors.

    Please use the following link to update your payment method information :

    http billing microsoft com/logon?action=auth&id=9013262&pass=d6952732e47dc72b11d7603e5f687bec [It's active]

    Based on your personal email filter settings the above link may have been blocked.To activate the link please look for the Show content link that is usually located on top of this message.

    NOTE! If your account information is not updated within 48 hours then your ability to use your Windows Live Hotmail account will become restricted.

    Thank you for using Windows Live Hotmail !

    Please do not reply to this e-mail, as this is an unmonitored alias.
     
  8. Central Scrutinizer

    Central Scrutinizer Administrator Staff Member

    X-SID-PRA: Window Live Team <salonanthony@hotmail.com>
    Received: from 41.155.79.231, Lagos, Nigeria, Lagos dial pool customers, starcomms.net
    Abuse: Navneet Singh, Plot 1261, Bishop Kale Close, off Saka Tinubu, Victoria Island, Lagos, Nigeria, phone: +234-1-804-9370, fax-no: +234-1-811-0301 e-mail: [navneets@starcomms.com] or Catalin Miclaus, Plot 1261C, Bishop Kale Close, off Saka Tinubu, phone: +234-7028000733, fax-no: +234-1-8110301 e-mail: [catalin@starcomms.com]
    Return-Path: [salonanthony@hotmail.com]
    X-Originating-IP: [41.155.79.231]
    Reply-To: <customer.dataalertteam@live.com>
    From: Window Live Team <salonanthony@hotmail.com>
    To: <customer.dataalertteam@live.com>
    Subject: Verify You Accounts Now To Avoid Been Closed!!
    Date: Wed, 21 Apr 2010

    Dear Account User,

    We encountered a problem with our database and a lot of records were lost, we are restoring our database to enable us serve you better. Your Windows Live! Account details are required so as to store in our database to keep your account active. Failure to do this will lose his or her account permanently.

    To update and enable us restore your account details in our data base to keep your account active, you are required to provide us the details below urgently. Click the reply button to enter details below.

    VERIFY YOUR HOTMAIL ACCOUNT NOW TO AVOID CLOSE !!!
    Hotmail ID:....................................
    Password:......................................
    Your Birthday:...............................
    Your Country or Territory:..................

    Make sure the details above are correct to enable us restore your account details, this will help prevent your account from been suspended.
    Note: YOUR DETAILS WILL NOT BE SHARED.

    Users have often told us that the more they use Windows Live! Service, the more they discover its benefits. We'll keep working on making Windows Live! the best email service around, and we appreciate your joining us for the ride.

    Warning!!! Account owner that refuses to update his or her account before One week of receiving this warning will lose his or her account permanently.

    Sincerely,
    Windows Live Alert Team
    Microsoft Corporation

    Get a new e-mail account with Hotmail – Free. Sign-up now.
     
  9. mysteryquest

    mysteryquest Member.

    X-Originating-IP: 211.181.157.57, Seoul, Korea
    Return-Path: <security@microsoft.com>
    Date: Sun, 25 Apr 2010 06:19:48
    Reply-To: "Microsoft Security Center" <security@microsoft.com>
    From: "Microsoft Security Center" <security@microsoft.com>
    Subject: Your System Needs To Be Updated

    This is not an update from Microsoft but an update with a viral payload!

    Microsoft Customer,

    This is the latest version of a security update, the "4 April 2010 Cumulative Patch" update which eliminates all known security vulnerabilities affecting Internet Explorer and MS Outlook/Express as well as six new vulnerabilities, as has been discussed in the Microsoft Security Bulletin MS02-005. Install the patch now to protect your computer against these vulnerabilities, the most serious of which could allow an attacker to steal bank credentials from your computer.

    Description of several well-known vulnerabilities:

    - "Incorrect MIME Header Can Cause IE to Execute E-mail Attachment" vulnerability.
    If a malicious user sends an affected HTML e-mail or hosts an affectede-mail on a Web site, and a user opens the e-mail or visits the Web site, Internet Explorer automatically runs the executable on the user's computer.
    - A vulnerability that could allow an unauthorized user to learn the location of cached content on your computer. This could enable the unauthorized user to launch compiled HTML Help (.chm) files that contain shortcuts to executables, there by enabling the unauthorized user to run the executables on your computer.
    - A new variant of the "Frame Domain Verification" vulnerability could enable a malicious Web site operator to open two browser windows, one in the Web site's domain and the other on your local file system, and to pass information from your computer to the Web site.

    - CLSID extension vulnerability. Attachments which end with a CLSID file extensiondo not show the actual full extension of the file when saved and viewed with Windows Explorer. This allows dangerous file types to look as though they are simple, harmless files - such as JPG or WAV files - that do not need to be blocked.

    System requirements:
    Versions of Windows no earlier than Windows 95.
    This update applies to:
    Versions of Internet Explorer no earlier than 4.01
    Versions of MS Outlook no earlier than 8.00
    Versions of MS Outlook Express no earlier than 4.01

    How to install
    Run the attached file q24042010.zip using WinZip/WinRAR. Then run the patch application (q24042010.exe) inside the .zip archive.

    How to use
    You don't need to do anything after running this item. Windows will automatically update your system.

    For more information about these issues, read Microsoft Security Bulletin MS02-005, or visit the link below.

    http: //www.microsoft.com/windows/ie/downloads/critical/default.asp

    If you have any questions about this article please contact us at [security@microsoft.com]

    Thank you for using Microsoft products.

    Be safe,
    MS Internet Security Center.
    ----------------------------------------
    ----------------------------------------
    Microsoft is registered trademark of Microsoft Corporation.
    Windows and Outlook are trademarks of Microsoft Corporation. DEAR WINNER
     
  10. The Doctor

    The Doctor Administrator Staff Member

    X-SID-PRA: Hotmail Customer Care <lmgfraig@yahoo.com>
    Received: from 41.138.170.253, Nigeria, Visafone Communications Limited
    Abuse: Fred Young, 33 Saka Tinubu Street, Victoria Island, Lagos, Nigeria
    Date: Sun, 6 Jun 2010
    From: Hotmail Customer Care <lmgfraig@yahoo.com>
    Reply-To: [ofty1@hotmail.com]
    Subject: Email Verification Notice. Message ID: 338209‏‏‏‏‏‏‏‏‏
    Return-Path: [lmgfraig@yahoo.com]

    ACCOUNT ALERT

    DEAR VALUED MEMBER,

    Due to the congestion in all MSN® users and removal of all unused and used accounts,MSN will be shutting down all unused and used Accounts,You will have to confirm your E-mail by filling out your login info below after clicking the reply button or your account will be suspended within 24hrs for security reasons

    User Name:...................................
    Password:....................................
    Date of Birth:................................
    Country or Territory:.....................

    After following the instructions in the sheet,your account will not be interrupted and will continue to function.Thanks for your attention to this request,We apologize for any inconvenience.
    Warning!!! Account owner that refuses to update his or her account before two weeks of receiving this warning will lose his or her account permanently.
     
  11. mysteryquest

    mysteryquest Member.

    MSN Phishing

    X-Originating-IP: 190.178.153.229, inetnum: 190.178/15, Telefonica de Argentina, AR-TEAR7-LACNIC, responsible: Agust�n Gomez Dhers, Buenos Aires, Argentina, tasamail@TELEFONICA.COM.AR

    Can't See Images? Click here! linked to http:// kpx.differdraw.ru/ ?ltxm="username"@yahoo.com

    About this mailing:

    You are receiving this e-mail because you subscribed to MSN Featured Offers. respects your privacy. If you do not wish to receive this MSN Featured Offers e-mail, please click the "Unsubscribe" link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers' content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

    ©2010 | Unsubscribe | More Newsletters | Privacy

    Unsubscribe linked to http:// http: //raci.com/
    More Newsletters linked to http:// ofmjq.com/
    Privacy linked to http:// gmdeu.com/
     
    Last edited: Jul 25, 2010
  12. Garreg Ddu

    Garreg Ddu Gweinyddwr Staff Member

    Still trying...

    More Nigerian criminals trying to get passwords for Hotmail accounts.

    X-SID-PRA: deswartw@ntlworld.com

    Sender: deswartw@ntlworld.com
    Reply-To: customercare0000@hotmail.co.uk

    X-Originating-IP: [41.217.65.3]

    Origin IP Address = 41.217.65.3 = ZOOM Mobile Nigeria Ltd, Lagos, NIGERIA

    Date: Wed, 20 Oct 2010 23:02:28 +0100
    Subject: HOTMAIL ACCOUNT VERIFICATION
    From: Windows Live Team <upgrademe@hotmail.co.uk>
    Bcc:
    Return-Path: deswartw@ntlworld.com


    From: Windows Live Team
    Sent: Wednesday, October 20, 2010 11:02 PM
    Subject: HOTMAIL ACCOUNT VERIFICATION


    Account Alert

    Dear Valued Member,

    Due to the congestion in Hotmail accounts all unused Accounts would be shut down, we urge you to confirm your details by filling out your Login Info below after clicking the reply button, or your account will be suspended within 48 hours for security reasons.


    User name: ............................

    Password: ............................

    Date of Birth: .......................

    Country or Territory..................

    After verifying your details, your account will continue as normal. Thanks for your attention to this request. We apologize for any inconvenience.
    Warning!!!Account owner who refuses to update his or her account before 48 hours of receiving this warning will lose his or her account permanently.
    Thank you for using Hotmail

    Thank you for using Hotmail! mail
    Warning Code: VX2G99AAJ
    Copyright © 2010 Hotmail! Inc. All rights reserved.
     
  13. Garreg Ddu

    Garreg Ddu Gweinyddwr Staff Member

    ... but failing

    I don't think the scammers had this in mind when they sent me the original email. :pound:

    From: Microsoft Customer Support
    Sent: Thursday, October 21, 2010 7:54 PM
    To: *******************
    Subject: RE: SRX1141132700ID - Fw: HOTMAIL ACCOUNT VERIFICATION


    Hello **********,

    This is Quenee from Windows Live Hotmail Abuse Team and I gather that you are concerned about the unsolicited message you have received from upgrademe@hotmail.co.uk account.

    What you have received is a Phishing message designed mainly for identity theft. These misleading e-mail messages poses as MSN generated e-mail so please refrain from giving out your personal informations.

    Moving forward, I have closed the accounts upgrademe@hotmail.co.uk and customercare0000@hotmail.co.uk that you reported, in accordance with our Code of Conduct (CoC).

    To view our rules and regulations, visit the following Web site:

    http://explore.live.com/code-of-conduct

    Thank you for contacting Windows Live Hotmail.

    Sincerely,

    Quenee
    Windows Live Hotmail Abuse Team

    Which I would suggest is what should happen to all email accounts being used for Phshing. Forward it to abuse@live.com with the full headers and the scammers will lose.
     
  14. Garreg Ddu

    Garreg Ddu Gweinyddwr Staff Member

    DO NOT REPLY TO THIS EMAIL.

    It has been reported to the Windows Live abuse team and is being dealt with.


    X-SID-PRA: Windows Team <hfarsakh@hotmail.com>

    Return-Path: [hfarsakh@hotmail.com]

    X-Originating-IP: [82.128.88.129]

    WHOIS - 82.128.88.129
    address: Multilinks Telecommunications Limited
    address: 231 Adeola Odeku Str.
    address: Victoria Island, Lagos, Nigeria


    From: Windows Team <hfarsakh@hotmail.com>
    To: Windows Team <hfarsakh@hotmail.com>
    Subject: Account Update!!!
    Date: Tue, 22 Feb 2011 12:14:27 -0800
    Importance: Normal





    Dear Valued Member


    We encountered a problem with our database and a lot of records were lost, we are restoring our database to enable us serve you better. Your Windows Live! Account details are required so as to restore our database and to keep your account active. Failure to do this will result in account owner's loosing their account permanently. To update and enable us restore your account details in our data base and to keep your account active, you are required to urgently provide us with the details below .Click the reply button to enter details below.


    * Username: ........................................

    * Password: .........................................

    * Date of Birth: .....................................

    * Country: ..........................


    After following the instructions in the sheet, your account will not be interrupted and will continue as normal. Thanks for your attention to this request. We apologize for any inconveniences.


    Microsoft,

    Windows Live Account Services





    Hotmail is part of Windows Live.

    * This assumes a reasonable growth rate.

    Microsoft respects your privacy. To learn more, please read our online Privacy Statement.

    For more information or for general questions regarding your e-mail account,

    Please visit Windows Live Hotmail Help.

    Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399,

    USA © 2010 Microsoft Corporation. All rights reserved.
     
  15. Garreg Ddu

    Garreg Ddu Gweinyddwr Staff Member

    Oh dear - this scammer seems to be having a problem

    Well, if you must send scamming emails to an AFI Admin, what else can you expect? :76: :pound:
     
  16. Central Scrutinizer

    Central Scrutinizer Administrator Staff Member

    X-SID-PRA: members service <maliknighat@hotmail.com>
    Received: from 118.101.103.205, Malaysia, Telekom Malaysia Berhad, [abuse@tm.net.my]
    Return-Path: [maliknighat@hotmail.com]
    Reply-To: <accountsim_200@hotmail.com>
    From: members service <maliknighat@hotmail.com>
    Subject: RE: service alert
    Date: Thu, 31 Mar 2011

    Windows Live Team Account Alert!!!

    ACCOUNT™ @ CONFIRMATION®

    Dear Account User

    Due to the congestion in all Hotmail users and removal of all unused Hotmail Accounts, Hotmail would be shutting down all unused accounts. You will have to confirm your E-mail by filling out your Login Info below after clicking the reply button or your account will be suspended within 24 hours for security reasons.

    User Name
    Password
    Date Of Birth
    Country Or Territory

    After Following the instructions in the sheet, your account will not be interrupted and will continue as normal. Thanks for your attention to this request. We apologize for any inconvenience.
     
  17. rex

    rex Guest

    windows7 fake!

    A windows7 security update virus asks for your: credit card number, address,billing address,phone number,social security number,and your e-mail!! It came from an foreign country! don't fall for it!!
     
  18. A new Phishing attack.

    But the silly Nigerian scammers sent this to my "Bigstring" email account. So it has been forwarded to Netcraft and, as Garreg Ddu says above, to abuse@live.com with its full headers.

    ===========================

    Return-Path: <fit2004@hero.webair.com>

    Date: Tue, 16 Aug 2011 04:50:31 -0400 (EDT)
    To: ***********@bigstring.com
    Subject: Windows Live Update

    X-PHP-Script: www.adultfriendfinderblog.com/wp-includes/pomo/FreewaY.php for 82.128.80.226


    From: Hotmail Team <member_services@live.com> Faked "From" address.
    Reply-To:




    Windows Live
    [​IMG]


    You have 1New Message alert from Hotmail.
    To read this message, follow the link below:

    https://login.live.com/login.srf? Which has a hidden URL pointing to the hacked Phishing site.


    | ©2011 Microsoft | All Rights Reserved.

    =========================

    Originating IP = 82.128.80.226
    Originating ISP = Multilinks Telecommunications Limited, 231 Adeola Odeku Str.,Victoria Island, Lagos, Nigeria
     
  19. If you report a "Phish" to the Live abuse centre, you will get an acknowledgement:

     
  20. Miyuki

    Miyuki Administratrix Staff Member

    @ Guest from India,

    Please do not post your email address here. This is not Microsoft.
     

Share This Page