Topic ' ' in forum 'Security' - dslreports.com http://www.dslreports.com/forum/nbsp-27608734 en Wed, 22 May 2013 17:17:30 EDT Wed, 22 May 2013 17:17:30 EDT   http://www.dslreports.com/forum/nbsp-27611332
After you enter your email address and password it sends your data here

»dswarbrick.com/4784/win/dolua/pitol/all.php

Which dumps to

»dswarbrick.com/4784/win/dolua/pitol/mail.php

And finally to

»support.microsoft.com/kb/817144]]> http://www.dslreports.com/forum/nbsp-27611332 Thu, 11 Oct 2012 02:42:08 EDT Re: Microsoft emails SCAM http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27610509 http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27610509 Wed, 10 Oct 2012 20:21:32 EDT Re: Microsoft emails SCAM http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27610490 said by Sindows 7:

Over the past days, we have sent notifications regarding your account suspension which many fails to update,

"which many fails to update"?
--
It's not really power unless you abuse it.]]> http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27610490 Wed, 10 Oct 2012 20:15:50 EDT Re: Microsoft emails SCAM http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27610362
I hope you used Properties/Details/Message Source to read that in Outlook Express and did NOT actually open it. If you foolishly opened it expect a ton of spam since the sender has confirmed a live address. :(
--
When governments fear people, there is liberty. When the people fear the government, there is tyranny. Thomas Jefferson]]> http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27610362 Wed, 10 Oct 2012 19:28:10 EDT Re: Microsoft emails SCAM http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27609615 said by rcdailey:

I got a warning that it was a suspected phishing site.

Ya think? ;-)

said by email :
Click on the Verify button below is this link:

hxxp://dswarbrick.com/4784/win/dolua/pitol/


Seems like an unlikely URL for Microsoft . Unless, of course, Microsoft is in the process of changing its corporate branding to "dswarbrick"

Perhaps Ballmer just likes folk music.]]> http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27609615 Wed, 10 Oct 2012 16:00:38 EDT Re: Microsoft emails SCAM http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27609465 said by Sindows 7:

What is this crap?

It's crap. Delete it and ignore. The poor grammar is also a give away.]]> http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27609465 Wed, 10 Oct 2012 15:15:25 EDT Re: Microsoft emails SCAM http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27609381 wget hxxp://dswarbrick.com/4784/win/dolua/pitol/
to get the source of that page.

<p><font color="#990000" size="4">To update your windows installation records,</br>you are required to choose your email address below.</font></p>
Then they ask for your email provider, email address and finally email password.

--
Overflow error in /dev/null]]> http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27609381 Wed, 10 Oct 2012 14:54:39 EDT Re: Microsoft emails SCAM http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27609316 http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27609316 Wed, 10 Oct 2012 14:40:42 EDT Re: Microsoft emails SCAM http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27609074 http://www.dslreports.com/forum/Re-Microsoft-emails-SCAM-27609074 Wed, 10 Oct 2012 13:51:29 EDT Microsoft emails SCAM http://www.dslreports.com/forum/Microsoft-emails-SCAM-27608734 Link at the bottom if someone wants to "test" it, beware.

Flag this message
Notice of suspension
From Microsoft Wed Oct 10 08:29:51 2012
*******@yahoo.ca via 98.139.211.138; Wed, 10 Oct 2012 08:30:01 -0700

202.124.241.66
softfail (transitioning domain of microsoft.com does not designate 202.124.241.66 as permitted sender)
Sr7jR9AWLDsYrQFbsjbn3qunx_xkwkZkEy1JINXztDqscvM0 o0aDw7TH4PCL6rbr2biS5OxZz.ub9mDek2otfDE.LhiRUwn2bcOJNpRi6sQW SZR8gmh0r5Es705Rs4pYP1wfOpvxbl3CcV1kWEgQ36.DIDQaRCKDsOjTd24B _9MD8cHWsHmxuzeoucBq.aGlwuzkCNu67eXtzAiNFXb8ENQgJn3lUdA1oiBK BHO2Kq_0kSTNecr2fTAtzsekQx7VrfnAahA80AMx2E3adRcDZRPREtPkLq57 fJZaxdRHYXZbMcMOi_xR2Xz_ZO_PFjBfWqtYpM_exxagiQuFqucbi1buaPRK sJ3bd2XSo95d5UM33e1xU_YjGFdYCfnGvf9eyzaqGdRKQcFONB_D8ISjB4Iu P17tWh_Pig3d46nV4yxTeipOOfMVb4Dzq4MkTsmBQX9r44_VZTb6RnT_yX2f .zQ6Gg.H8KP2_95LUW7HuTZRQfK7dNbM9eF.EotLDQKMXMVNuwmeOhLAJG8s OK1gfejE8FuJNn3dXv6YnxH.3BNGtJMlk5juDmJd1U60EBIRwpPxlyGNDxJO aTwsa12kep0msAoN46F9p90Aq5j_B7v2I0vcDnuCO5ISdrQFMZowcxS.9GrJ 2n9iD.mxgHYqOz9vaC7_3OMYNj_.lhq.gEvLQILGr0yyKYn0ypMDNStZ.P6o 3axeVPnRfstL9B.jCilVnu1ym4l884R0xDZ0ym40sTPLnASgCojrKcIvjAC7 BHtB3xNi1o0FGp5qXC92mvcrkgR69B99j0m_M9kT7ph7jHCStIiJYlXYOFcE 9sc1UhgMknvddziKw86g3bvQEguvVi_ZLs2OkwNzfpgNHIFitssvMeQPRDoM A7bwxuvo.JnB3uFP.RVy430twbG0G9wF5dELniTP7QMC_AzjN6NxWF9GaX87 PHut4lCMVCU96g.ddebKzPWHL4Aw_1EFxUNYN3tkpmzyd8qbL5L9DGFmkcTB mxV.5bbr_Z897pc1m_3OIyjDirpO0coOiGO944lF5fMF2lg2wybu33NbvRKp a155aSo_i0.2lVrXgX93U7p02qmDJex_nzFj4jVhb1I1J8NOjabnC_VkYd_M uyuQwdzKy_66oAcR4XtgC074k.sYkjKdfn9kC7GNSRCtUFXd8cQnCzRXNImP j9EqAshbwrhR7fsJnKCxEtculvBbBgEpvwp85hvxfpAxpEpgwvyqO5_rkLXN Qu8kOtQwV2IR.gWv4QgUTrtyJh2b703PuAPUppBbDcVtXFfyG2ttvhL97bRa t_cQO9VVJhl2rq6Y3G03fwqL7egj3NP_LSgNM5OGtPzd0Wc725phmtS7b2R6
[202.124.241.66]
mta1108.mail.gq1.yahoo.com from=microsoft.com; domainkeys=neutral (no sig); from=microsoft.com; dkim=neutral (no sig)
from 127.0.0.1 (EHLO smtp-mx-server-8.servers.netregistry.net) (202.124.241.66) by mta1108.mail.gq1.yahoo.com with SMTP; Wed, 10 Oct 2012 08:30:00 -0700
from cpe-58-175-250-132.hdcz1.win.bigpond.net.au ([58.175.250.132] helo=User) by smtp-mx-server-8.servers.netregistry.net protocol: esmtpa (Exim 4.72 #1 (Debian)) id 1TLyEm-0007tU-CA; Thu, 11 Oct 2012 02:30:20 +1100
"Microsoft"
Add sender to Contacts
Notice of suspension
Thu, 11 Oct 2012 02:29:51 +1100
1.0
text/html; charset="Windows-1251"
7bit
3
Normal
Microsoft Outlook Express 6.00.2600.0000
Produced By Microsoft MimeOLE V6.00.2600.0000

()

8808

***************************************************************************

***************************************************************************


We've updated the Microsoft Services Agreement, which governs many of our online services - including your Microsoft account and many of our online products and services for consumers, such as Hotmail, SkyDrive, Bing, MSN, Office.com, Windows Live Messenger, Windows Photo Gallery, Windows Movie Maker, Windows Mail Desktop and Windows Writer.

Over the past days, we have sent notifications regarding your account suspension which many fails to update, However, failure to verify your records will result in account suspension. Click on the Verify button below and enter your login information on the following page to Confirm your records.

Thank you for using Microsoft products and services!

--------------------------------------------------------------------------------

Microsoft respects your privacy. Please read our online Privacy Statement.
Microsoft Corporation
One Microsoft Way
Redmond, WA 98052

Click on the Verify button below is this link:


hxxp://dswarbrick.com/4784/win/dolua/pitol/ ]]> http://www.dslreports.com/forum/Microsoft-emails-SCAM-27608734 Wed, 10 Oct 2012 12:22:08 EDT