* Warning* bogus e-mail from VISA

[tantalising]

Watch out for this e-mail it opens a window which leads to the visa site and a pop up with a submit form to another site.

It is a scam. *Not* send by visa

It opens a link to a official visa site and a pop up
to 64.21.80.2/~gotier

:UserSession=3D2f6q9uuu88312264trzzz55884495&users option=3DSecurityU=
pdate&[email protected]/~gotier/verified_by_visa.htm"=




Received: from 65.30.190.31 (CPE-65-30-190-31.wi.rr.com [65.30.190.31])


Message-Id: <[email protected]>
Date: Tue, 23 Dec 2003 03:44:45 -0600
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
Reply-To: Visa International Service <[email protected]>


Dear Customer,

Our latest security system will help you to avoid possible fraud actions and
keep your investments in safety.

Due to technical security update you have to reactivate your account

Click on the link below to login to your updated Visa account.

To log into your account, please visit the Visa Website at

http://www.visa.com

We respect your time and business.
It's our pleasure to serve you.


Please don't reply to this email. Thhs e-mail was generated by a mail handling system.

[Smokey The Bear]

-*- I dont think anyone here would be fooled by that , but thanx for the tip

This is the initial url

http://64.21.80.2/~gotier/verified_by_visa.htm

This is the popup page that attempts to log the credit card information

http://64.21.80.2/~gotier/r.php

I have contacted nac already.

<p><font size="2" face="Verdana, Arial"><br>
__________________
<table width="420" border="1" bordercolor="yellow" bgcolor="black"><tr><td width="120" height="60" ><img src="http://bestpornhost.com/gfy/gfy2.png" alt="I Dont Get Paid For This Bitch !"></td><td bgcolor="red"><center><img src="http://board.gofuckyourself.com/images/on.gif"><a href="http://www.duocash.com" target="_blank" style="color:white">DuoCash - Fuck Visa.</a><img src="http://board.gofuckyourself.com/images/on.gif"><br><a href="http://www.cecash.com" target="_blank" style="color:yellow">CeCash - Trusted Sponsor.</a><br><a href="http://www.nastydollars.com" target="_blank" style="color:lime">NastyDollars - Clean Program.</a><br></td></tr></table>

[tantalising]

Originally posted by  Smokey The Bear 
*- I dont think anyone here would be fooled by that , but thanx for the tip

Yes you are probably right. But you never know so
I thought I post it. Can't hurt I hope.

Thanks for reporting it I hope this ip is soon cut off somehow,

[johnbosh]

its very annoyijg I get several per day