rapidredirect.com/?r=46 - PHISHING SITE

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Sun Mar 20, 2011 11:24 pm

Here is something for the scary sitekillers to kill:

http://rapidredirect.com/?r=46

here is the mail:

Quote:

Dear Account User,

A DGTFX virus has been detected in your folders. Your email account has to be upgraded to our new Secured DGTFX anti-virus 2010 version to prevent damages to our webmail log and your important files. Click on the link below to secure your email account and to avoid spread of the virus.

http://rapidredirect.com/?r=46

Director of Webmail Technical Team. Note that your password will be encrypted with 1024-bit RSA keys for your password safety.

Thank you for your cooperation.
Webmail Technical Team.

Quote:

Received: by 10.52.156.225 with SMTP id wh1cs91940vdb;
Sun, 20 Mar 2011 15:01:06 -0700 (PDT)
Received: by 10.52.69.207 with SMTP id g15mr4677339vdu.233.1300658465833;
Sun, 20 Mar 2011 15:01:05 -0700 (PDT)
Received-SPF: softfail (google.com: best guess record for domain of transitioning unknown does not designate <unknown> as permitted sender)
Received: by 10.241.21.145 with POP3 id 17mf2307711vws.39;
Sun, 20 Mar 2011 15:01:05 -0700 (PDT)
X-Gmail-Fetch-Info:
Received: from [email protected] by (64.135.83.92:25) via
Mail-1.carrollu.edu (140.104.157.2:10435) with [InBox.Com SMTP Server] id
1103200518317.WH92 for ; Sun, 20 Mar 2011 13:43:36
-0800
Received: from CMAIL.carrollu.edu ([fe80::dca9:63d7:73cb:2beb]) by
Mail-1.carrollu.edu ([2002:8c68:9d02::8c68:9d02]) with mapi; Sun, 20 Mar 2011
16:43:32 -0500
From: Kathryn C Maxwell <[email protected]>
Date: Sun, 20 Mar 2011 16:43:31 -0500
Subject: Attn: Virus Alert
Thread-Topic: Attn: Virus Alert
Thread-Index: AQHL50faPIE0Lq8u+0meuoI9DoatNA==
Message-ID: <[email protected]>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Spam-Ratio: 2.41

Posted: Sun Mar 20, 2011 11:39 pm

We don't deal with phishing sites here -- only sites/domains being used in 419 AFF scams. This is the same as a PayPal phish or phish being sent for legit banks. In this case, the best thing to do is to contact the owner of the domain -- http://rapidredirect.com/ -- and let them know of this abuse. Usually that will do the trick.

Also, it has been bombed from an edu account -- probably phished/hacked itself. From: Kathryn C Maxwell <[email protected]> Sending the email with headers to the school would be good too.

Marking this N/A. Very Happy

Posted: Sun Mar 20, 2011 11:50 pm

since I am now 00:47 and off to bed to get some sleep after a busy sunday, maybe someone is here to carry out this great advise.

I am way to tired to do so - despite my concerns for the idiots out there typing in their password...
good night

Posted: Mon Mar 21, 2011 12:59 am

I sent to both.

This can be moved to Misc Scams. Very Happy

Posted: Mon Mar 21, 2011 7:10 am

Thank you, Dora. Very Happy

rapidredirect.com/?r=46 - PHISHING SITE	View next topic View previous topic