[SpamCop-List] Re: I just had to share this...
MikeE at ster.invalid
Fri Feb 18 21:23:48 EST 2005
> D‮ae‬r Bar‮alc‬ys
Dear Barclays Member,
This email was sent by the Barclays server to verify your email address.
You must complete this process by clicking on the link below and
entering in the small window your Barclays Membership number, passcode
and memorable word. This is done for your protection because some of
our members no longer have access to their email addresses and we must
verify it. To verify your email address and access your bank account,
click on the below.
cname kickme.to DNS 18.104.22.168
whois -h whois.arin.net 22.214.171.124 ...
Mzima Networks, Inc. 126.96.36.199 - 188.8.131.52
abuse at mzima.net
Lunarpages 184.108.40.206 - 220.127.116.11
abuse at lunarpages.com
18.104.22.168/32 is listed on the Spamhaus Block List (SBL)
18-Feb-2005 21:58 GMT | SR14
Encoded and Google-redirected Phish : croatian.at
cited URL when decoded points to croatian.at which then
redirects to http://google.ch/url?q=http://ai0hrfj.da.ru
Then follows at spamhaus an example of your Barclays phish.
kibitzer, not SC admin
More information about the SpamCop-List