visaandmaster.com

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Wed Jan 02, 2013 3:07 pm

http://visaandmaster.com
Uhh, I don't understand any of the hieroglyphs on the site.
Anyway, got this email (+ some attachment)

Quote:

Received: by 10.229.63.155 with SMTP id b27csp409409qci;
Wed, 2 Jan 2013 06:53:04 -0800 (PST)
X-Received: by 10.112.32.101 with SMTP id h5mr19035745lbi.3.1357138383868;
Wed, 02 Jan 2013 06:53:03 -0800 (PST)
Return-Path: <[email protected]>
Received: from mx.zembank.ru (mx.zembank.ru. [62.165.46.58])
by mx.google.com with ESMTP id fs7si70030578lbb.51.2013.01.02.06.53.00;
Wed, 02 Jan 2013 06:53:03 -0800 (PST)
Received-SPF: neutral (google.com: 62.165.46.58 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=62.165.46.58;
Authentication-Results: mx.google.com; spf=neutral (google.com: 62.165.46.58 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from localhost (localhost [127.0.0.1])
by mx.zembank.ru (Postfix) with ESMTP id 69ADC6784B1;
Wed, 2 Jan 2013 19:48:56 +0500 (YEKT)
Received: from User (unknown [125.23.218.248])
by mx.zembank.ru (Postfix) with ESMTP id 28C916784B2;
Wed, 2 Jan 2013 19:48:40 +0500 (YEKT)
Reply-To: <[email protected]>
From: "[email protected]"<[email protected]>
Subject: Update
Date: Wed, 2 Jan 2013 09:09:10 -0600
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0088_01C2A9A6.28E46530"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:

Quote:

Dear Customer,

We recently received a report of unauthorized card payment attempt
associated with your card account. To protect you against any further unauthorised
payment attempts, we've limited access to your card account. Please take
a minute to review the details below and what steps you need to take to
remove the limits.

-----------------------------------
Details of disputed transaction
-----------------------------------

Case ID Number: V/M-231-876-414

-----------------------------------
What to do next
-----------------------------------

Please download the form attached to this email and open it in a web browser.
Once opened, you will be provided with steps to restore your card account.
We appreciate your understanding as we work to ensure your account safety.

-----------------------------------
Due dates
-----------------------------------

Please get back to us as soon as possible.

-----------------------------------
Other details
-----------------------------------

There are no other details for this transaction at this time.

Yours sincerely,

Verified by Visa/Mastercard service.

Checked the email online:

Quote:

MX record about visaandmaster.com exists.
Connection succeeded to visaandmaster.com SMTP.
220-vps.jacarlin.com ESMTP Exim 4.80 #2 Wed, 02 Jan 2013 10:03:04 -0500

220-We do not authorize the use of this system to transport unsolicited,

220 and/or bulk e-mail.

> HELO verify-email.org
250 vps.jacarlin.com Hello webhostingfast.com [66.36.231.122]

> MAIL FROM: <[email protected]>
=250 OK

> RCPT TO: <[email protected]>
=250 Accepted

I will be glad to kill this one.. Cool

Baiting Guru Joined: 03 May 2007 Posts: 18313

This is phishing, not advance fee fraud, so not something that will go in the database and not something we work on in this forum.

That said, please report it to http://www.antiphishing.org (just send them a copy of the email, no need for a formal abuse report).

The domain is set to expire in a few days (January 12, 2013): http://whois.domaintools.com/visaandmaster.com but if you want to report it anyway, you can report it to it's registrar, Public Domain Registry (they're cooperative). They have a reporting page here: http://resources.publicdomainregistry.com/report-abuse/

It's good to report these, but sorry, no flags for this one.