If you receive an email that looks like this do not click on it. Please roll over and actually look at the link and you will see that it is a spoofed phishing site.
18:00:42 -0000 (GMT)
Received: From 200-161-146-136.dsl.telesp.net.br (200.161.146.136) by
Sun, 10 Jan 2010 17:53:53 -0000 (GMT)
From: Support Team <[email protected]>
To: “[email protected]” <[email protected]>
Content-Class: urn:content-classes:message
Date: Sun, 10 Jan 2010 10:53:48 -0800
Subject: The settings for the [email protected] mailbox were changed
Thread-Topic: The settings for the [email protected] mailbox were changed
Thread-Index: AcqSID7hjw+IxyYESJ+bPAE7/GnfHw==
Message-ID: <000d01ca921d$dc3f18f0$6400a8c0@fripperyjr1>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-TNEF-Correlator:
x-envelope-to: [email protected]
x-envelope-from: [email protected]
Content-Type: multipart/alternative;
boundary=”_000_000d01ca921ddc3f18f06400a8c0fripperyjr1_”
MIME-Version: 1.0
–_000_000d01ca921ddc3f18f06400a8c0fripperyjr1_
Content-Type: text/plain; charset=”iso-8859-1″
Content-Transfer-Encoding: quoted-printable
Dear user of the krypt.com mailing service!
We are informing you that because of the security upgrade of the mailing service your mailbox ([email protected]) settings were changed. In order to apply the new set of settings click on the following link:
http://krypt.com/owa/service_directory/[email protected]&from=krypt.com&fromname=demo –> http://krypt.com.ujyhs.co.kr/owa/service_directory/[email protected]&from=krypt.com&fromname=demo
Best regards, krypt.com Technical Support.
Letter_ID#7RH8XD661NGDGSXAPHDMHQNJ