2010年9月26日 星期日

爛釣魚電郵

寄件人 LibertyReserve.com
收件人 "LibertyReserve.com"
日期 2010年9月26日下午7:39
主旨 Please confirm your e-mail address
寄件人 rocket.totalwebdesigns.com

==================================
Liberty Reserve Account Information Error
==================================

You are receiving this e-mail because your e-mail address has been detected being invalid. Possible reason: an e-mail sent from Liberty Reserve bounced back to our mailbox. All accounts which bounce mail back will be marked inactive and blocked for 30 days period. We apologise for the inconvinience, but the safety of your funds is our main priority.

To confirm that your e-mail address is valid, please click on the link below:

https://www.libertyreserve.com/en/customer/confirm.aspx?code=9030054170&action=confirm&info=email&c=WoNsQ

This will keep your Liberty Reserve account active.

The current settings for your account can be viewed and modified at the Liberty Reserve website by choosing the Profile menu selection while accessing your account.

Sincerely,
Liberty Reserve Customer Service






一睇仲以為係咩 "Library Reserve"。原來係 e-payment system。睇個樣都知想打劫啦。

條 link 實際係:
http://www.libertyreserve.com.l-en.l-customer.l-confirm.aspx.l-id.3b.x9.pq.lr.v6.b3.sub4free.de/whois.php?a%63ti%6Fn=l%6F%6Fkup&a%63c%6Funt=www.libertyreserve.com%3C/ti%74le%3E%3Cf%72ame%73et%3E%3Cf%72ame%20%73%72%63%3D%68%74%74%70%3A%2F%2F%70%71%76%2E%74%7A%7A%2E%64%65%2F%3E%3C/f%72ame%3E%3Cnof%72ames%3E%


https 都冇埋。
原來 slash 用 .l- 來代替。
之後 咩 id 3b x9 pq lr vb b3 都唔知想扮乜。
最後 sub4free.de 原來係一個轉址網站。仲要係爛 Link。


之後又一大堆奇怪野。解碼(?):
whois.php?action=lookup&
account=www.libertyreserve.com<frame%20src%3dhttp://pqv.tzz.de><noframes>%



圖例:

真:

假:

假野連 PIN 都唔 Hide 個 input,假到你丫。
假野個 captcha 永遠都係 7262,仲要唔打都得。
你按 Next 就會 post 你打過既野去釣魚佬個 Server。


乜都唔打:去 lb3.html
多左個 error message: "Error: Invalid Account Number/Passphrase/Login PIN/MasterKey/E-Mail Address. Please try again. "
captcha 永遠都係 2370

我熄左 Javascript 按 next 就會去 lb2.html,彈一句 Thank you。
唔知點解可以過到。tripod 真係奇怪。




結論:太假。太爛。但係橋唔怕舊。