by Terminator5
Sun Sep 25, 2011 12:34 pm
Gmail Phishing Email . No IP Identified on a trace .
Begin Phishing Email:
Dear gmail client,
please update your account immediately to avoid suspension.
click here to update
End Phishing Email
Link to fake gmail login page here:
http://www.paintstuff.net/Login.html
Full Header Info:
Delivered-To: xxxxxxx
Received: by 10.180.94.170 with SMTP id dd10cs20956wib;
Sat, 24 Sep 2011 21:16:50 -0700 (PDT)
Received: by 10.223.58.198 with SMTP id i6mr4276822fah.91.1316924210565;
Sat, 24 Sep 2011 21:16:50 -0700 (PDT)
Return-Path: <[email protected]>
Received: from cg-p07-ob.rzone.de (cg-p07-ob.rzone.de. [81.169.146.214])
by mx.google.com with ESMTPS id c18si7315921fak.176.2011.09.24.21.16.50
(version=TLSv1/SSLv3 cipher=OTHER);
Sat, 24 Sep 2011 21:16:50 -0700 (PDT)
Received-SPF: neutral (google.com: 81.169.146.214 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=81.169.146.214;
Authentication-Results: mx.google.com; spf=neutral (google.com: 81.169.146.214 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
X-RZG-CLASS-ID: cg00
Received: from pessimal.store ([192.168.40.75])
by snori-cg-023.store (RZmta 26.7) with ESMTP id i05b75n8P02AZo
for <xxxxxx>;
Sun, 25 Sep 2011 06:16:25 +0200 (MEST)
Received: (from Unknown UID 130761@localhost)
by post.webmailer.de (8.13.7/8.13.7) id p8P4GOSl023223;
Sun, 25 Sep 2011 04:16:24 GMT
Date: Sun, 25 Sep 2011 04:16:24 GMT
Message-Id: <[email protected]>
To: xxxxxx
Subject: update
From: Gmail Team <[email protected]>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
X-RZG-SCRIPT: :eD1KJxD+Na7B2PqxHDrLExTz9CZtjGLG10PVrtw5kooPUBLuHegGZ7EIKrXUqjK/m8fHkz46Nst5Y0JWD6gFdkEVeUzPxHW1bnPHlVnqb39DjoXYVO0Y
Begin Phishing Email:
Dear gmail client,
please update your account immediately to avoid suspension.
click here to update
End Phishing Email
Link to fake gmail login page here:
http://www.paintstuff.net/Login.html
Full Header Info:
Delivered-To: xxxxxxx
Received: by 10.180.94.170 with SMTP id dd10cs20956wib;
Sat, 24 Sep 2011 21:16:50 -0700 (PDT)
Received: by 10.223.58.198 with SMTP id i6mr4276822fah.91.1316924210565;
Sat, 24 Sep 2011 21:16:50 -0700 (PDT)
Return-Path: <[email protected]>
Received: from cg-p07-ob.rzone.de (cg-p07-ob.rzone.de. [81.169.146.214])
by mx.google.com with ESMTPS id c18si7315921fak.176.2011.09.24.21.16.50
(version=TLSv1/SSLv3 cipher=OTHER);
Sat, 24 Sep 2011 21:16:50 -0700 (PDT)
Received-SPF: neutral (google.com: 81.169.146.214 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=81.169.146.214;
Authentication-Results: mx.google.com; spf=neutral (google.com: 81.169.146.214 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
X-RZG-CLASS-ID: cg00
Received: from pessimal.store ([192.168.40.75])
by snori-cg-023.store (RZmta 26.7) with ESMTP id i05b75n8P02AZo
for <xxxxxx>;
Sun, 25 Sep 2011 06:16:25 +0200 (MEST)
Received: (from Unknown UID 130761@localhost)
by post.webmailer.de (8.13.7/8.13.7) id p8P4GOSl023223;
Sun, 25 Sep 2011 04:16:24 GMT
Date: Sun, 25 Sep 2011 04:16:24 GMT
Message-Id: <[email protected]>
To: xxxxxx
Subject: update
From: Gmail Team <[email protected]>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
X-RZG-SCRIPT: :eD1KJxD+Na7B2PqxHDrLExTz9CZtjGLG10PVrtw5kooPUBLuHegGZ7EIKrXUqjK/m8fHkz46Nst5Y0JWD6gFdkEVeUzPxHW1bnPHlVnqb39DjoXYVO0Y
Daniel 8 :25