Re: Interesting low scoring phish

2009-12-07 Thread rich...@buzzhost.co.uk
On Mon, 2009-12-07 at 16:00 +0100, Yet Another Ninja wrote:
> On 12/7/2009 3:42 PM, rich...@buzzhost.co.uk wrote:
> > http://pastebin.com/m7c1c17d
> > 
> > Interesting insofar as it appears to be whitelisted??? Is this some kind
> > of well known US email or hosting service?
> > 
> > Sane missed it, the dnsbl's have missed it and the content filtering has
> > missed it. So it's a tasty morsel of spam :-)
> 
> "By clicking on the link you agree to download..."
> 
> where' the URL?
> html part missing in sample?
Try this - I'm having a bad day

http://pastebin.com/m381ef211



Re: Interesting low scoring phish

2009-12-07 Thread Yet Another Ninja

On 12/7/2009 3:42 PM, rich...@buzzhost.co.uk wrote:

http://pastebin.com/m7c1c17d

Interesting insofar as it appears to be whitelisted??? Is this some kind
of well known US email or hosting service?

Sane missed it, the dnsbl's have missed it and the content filtering has
missed it. So it's a tasty morsel of spam :-)


"By clicking on the link you agree to download..."

where' the URL?
html part missing in sample?