domaći phishing

[Nemanja Avramović]

Malo pre mi stiže mejl:

From - Fri May 16 11:24:58 2008
X-Account-Key: account3
X-UIDL: UID1813-1171556209
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Return-path: <sladjaj86@gmail.com>
Envelope-to: [moj email]
Delivery-date: Thu, 15 May 2008 18:47:57 -0500
Received: from [209.85.132.244] (helo=an-out-0708.google.com)
	by host.enohost.com with esmtp (Exim 4.68)
	(envelope-from <sladjaj86@gmail.com>)
	id 1JwnAz-0003hz-Dc
	for [moj email]; Thu, 15 May 2008 18:47:57 -0500
Received: by an-out-0708.google.com with SMTP id c34so183914anc.31
        for <[moj email]>; Thu, 15 May 2008 16:47:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:received:received:message-id:date:from:subject:mime-version:content-type;
        bh=aFrSMlhmmZRRgRWCrjvCtswEzSal0SK4BLh2YHiR3Iw=;
        b=PB/yebrDXWXEfR1VOdhT7BSA5ovmQ4tTu/mA3sQVAy1fI5fBnQMGLnpCc3Jgwjs91OTVI0uro6dSEp7L7gfZ54ecDvcp0XNea0PeyHuiSpbtc4bBvB8uhTXXiEuRZbGbsxgn4F8xGk6xhZYGRvi0pft6U09hL2LS7g+NqlgN3G0=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:subject:mime-version:content-type;
        b=qLF7Jx1gGtKBwcTkvAGaWbXIVSCyfZ9sTdij8ScUFQFpM6XAWaZ3uSnwik/gk9Z4hnfWGsFMh7azUXNovOTRSYbx7wggr+g6xKybv6cbkziXf//8RZUv66RC2Qnp3smkzV8p6oJDAZJiGroU4J96u/eoUZijDkCOmv+JgW/Qe8Q=
Received: by 10.100.41.16 with SMTP id o16mr3921687ano.132.1210895202972;
        Thu, 15 May 2008 16:46:42 -0700 (PDT)
Received: by 10.100.143.11 with HTTP; Thu, 15 May 2008 16:46:42 -0700 (PDT)
Message-ID: <5ae1bd460805151646q71816d4am61953f27e7b55313@mail.gmail.com>
Date: Thu, 15 May 2008 16:46:42 -0700
From: "Sladja Jankovic" <sladjaj86@gmail.com>
Subject: Sladja facebook
MIME-Version: 1.0
Content-Type: multipart/alternative; 
	boundary="----=_Part_10743_22058799.1210895202980"
X-Antivirus-Scanner: Scanned clean by ClamAV

------=_Part_10743_22058799.1210895202980
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hell, I am Sladja and this is my face book


Sladjaj's facebook

<http://kalauz.freehostia.com/pecanje/FaceBook/>
To view Gordana's profile, follow this
link<http://kalauz.freehostia.com/pecanje/FaceBook/>
:


To write on Gordana's Wall, follow this
link:<http://kalauz.freehostia.com/pecanje/FaceBook/>


To send Gordana a message, follow this
link<http://kalauz.freehostia.com/pecanje/FaceBook/>
:


<http://kalauz.freehostia.com/pecanje/FaceBook/>Thanks,
The Facebook Team

<http://kalauz.freehostia.com/pecanje/FaceBook/>

------=_Part_10743_22058799.1210895202980
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hell, I am Sladja and this is my face book<br><br><br><a href="http://kalauz.freehostia.com/pecanje/FaceBook/">Sladjaj's facebook<br><br></a><br>To view Gordana's profile, follow this <a href="http://kalauz.freehostia.com/pecanje/FaceBook/">link</a>:<br>

<br><br>To write on Gordana's Wall, follow this <a href="http://kalauz.freehostia.com/pecanje/FaceBook/">link:</a><br><br><br>To send Gordana a message, follow this <a href="http://kalauz.freehostia.com/pecanje/FaceBook/">link</a>:<a href="http://kalauz.freehostia.com/pecanje/FaceBook/"><br>
<br><br></a>Thanks,<br>The Facebook Team<a href="http://kalauz.freehostia.com/pecanje/FaceBook/"><br><br></a><br>

------=_Part_10743_22058799.1210895202980--

A snimite URL http://kalauz.freehostia.com/pecanje/FaceBook/
"pecanje" :P

Da ne komentarišem izgled stranice. Ono podseća više na Google nego na Facebook login stranu :P

edit: Korisnika sam prijavio GMail-u (mada moguće je da je email poslat sa ukradenog accounta jer tamo ima phishing stranica i za GMail), a sad ću ga prijaviti i Freehostia hostingu.

[Dejan Topalovic]

Prejako!
A jesi skontao da u nastavku poruke pise Gordana umjesto Sladja?

Ocito neki 15-godisnjak pokusava steci hackersku slavu "pecajuci"...

[Nemanja Avramović]

Da, da
Prvo kad sam video naslov poruke pomislih da me neka Slađa zove na Facebook preko onog "invite friends" ali čim sam video na šta liči poruka (nevezano za pominjanje Gordane, i pre nego što videh linkove), skontah šta je u pitanju.

"Hell, I am Sladja..."

edit: Brza ova freehostia

Hello Nemanja,

Thank you very much for the information that you have provided. I will terminate this site right away.

Best Regards,
Peter
Support@Freehostia.com
http://www.freehostia.com

[Dejan Topalovic]

Brzi su vala:
The webpage cannot be found

[kai]

Strašno No comment.