Post by kas on Oct 3, 2012 22:38:39 GMT -5
A new spam email today:
Sure it looks fine but only the text show the links as that. The links (if moused over and having status bar enabled .. or if clicked on .. which you should not do from emails) you would see that it does not go to Vimeo at all (email is not really sent by them but sender field has been faked) but goes to a red-rated site at http://escrowresource.net/aloud.html
REAL Sender information can be seen in the source (for those who know how to view it - would be confusing for people who don't know computers that well):
Return-Path: <claudia.rudolph@bb149c89.virtua.com.br>
Received: from bb149c89.virtua.com.br (flexserver-ns1.lmgroup.com.br. [201.45.114.3])
Here is an excerpt of how they get the link to show up as a safe link when it is not:
(had to break the link by putting a space as Proboard's coding put a bcc in there)
Also if you don't know better and go to the site it actually has coding in the page to bring you to another site:
So you end up at medicinepharmacydrug.com
from: Vimeo no-reply@vimeo.com
reply-to: Vimeo <no-reply@vimeo.com>
to: k
date: Tue, Oct 2, 2012 at 1:18 AM
subject: Alun Lewis sent you a message on Vimeo!
To ensure delivery, add no-reply@vimeo.com to your address book.
Hi,
Alun Lewis just sent you a message on Vimeo:
“ Hey!
Nice video!
You are in Copenhagen?
If you want to reply:
vimeo.com/messages/user67243754
Alun Lewis’s profile on Vimeo:
vimeo.com/user67243754
Don't want these alerts anymore?
vimeo.com/settings/advanced
reply-to: Vimeo <no-reply@vimeo.com>
to: k
date: Tue, Oct 2, 2012 at 1:18 AM
subject: Alun Lewis sent you a message on Vimeo!
To ensure delivery, add no-reply@vimeo.com to your address book.
Hi,
Alun Lewis just sent you a message on Vimeo:
“ Hey!
Nice video!
You are in Copenhagen?
If you want to reply:
vimeo.com/messages/user67243754
Alun Lewis’s profile on Vimeo:
vimeo.com/user67243754
Don't want these alerts anymore?
vimeo.com/settings/advanced
Sure it looks fine but only the text show the links as that. The links (if moused over and having status bar enabled .. or if clicked on .. which you should not do from emails) you would see that it does not go to Vimeo at all (email is not really sent by them but sender field has been faked) but goes to a red-rated site at http://escrowresource.net/aloud.html
REAL Sender information can be seen in the source (for those who know how to view it - would be confusing for people who don't know computers that well):
Return-Path: <claudia.rudolph@bb149c89.virtua.com.br>
Received: from bb149c89.virtua.com.br (flexserver-ns1.lmgroup.com.br. [201.45.114.3])
Here is an excerpt of how they get the link to show up as a safe link when it is not:
<a href='http://escrowresource.net/aloud.html' style="color: #2786c2; text-decoration: none;">h ttp://vimeo.com/messages/user67243754</a>(had to break the link by putting a space as Proboard's coding put a bcc in there)
Also if you don't know better and go to the site it actually has coding in the page to bring you to another site:
<html><head><script type="text/javascript">window.location="http://medicinepharmacydrug.com";</script></head><body><a href="http://medicinepharmacydrug.com">Here</a></body></html>
So you end up at medicinepharmacydrug.com