Twitter Phishing eMail

DIN 4844-2 Warnung vor einer Gefahrenstelle

Eine Twitter Phishing eMail ist unterwegs

Per eMail hatte ich heute eine Info über eine ausstehende Nachricht auf Twitter in meinem Posteingang. Irritiert hatte mich die Tatsache, dass die Info über eine email-Adresse kam, die mit keinem Twitter-Konto verbunden ist. Ein Grund für mich, hier einmal genauer hin zu schauen.

Tw_Phishing_01

Ein ganz klar vorne weg, Twitter verschickt keine Infos über ausstehende Nachrichten!

Die Info ist gut gemacht, allerdings ohne jegliche Twitter Logos und ohne die übliche persönliche Anrede. Statt dessen nur einen Link zu der angeblichen Nachricht.

Warnung 24x24 Warnung: Alle Links in dieser eMail führen auf folgende Weiterleitungs-Adresse: http://122.155.6.25/~meechok/iranize.html

Wer sich für den Quellcode interessiert, den habe ich hier mit eingefügt.

Quellcode der eMail:

X-Account-Key: account6
X-UIDL: 0LpBSP-1QUnfs3OU8-00fNQM
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: from [212.85.97.169] (helo=v000423.home.net.pl)
	by mx35.web.de with smtp (WEB.DE 4.110 #2)
	id 1PsSiD-00039X-00
	for XXXXXX@XXXXXX; Thu, 24 Feb 2011 05:21:57 +0100
Received: by mx005.twitter.com (Postfix, from userid 1853)
        id 0745A6EB7E3; Thu, 24 Feb 2011 05:21:35 +0000 (UTC)
X-DKIM: Sendmail DKIM Filter v2.8.2 mx005.twitter.com 0745A6EB7E3
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=twitter.com; s=dkim;
        t=1907487162; i=@twitter.com; bh=iTDzdnvao18CfUUM7tIxGikSkdU=;
        h=Content-Type:Content-Transfer-Encoding:MIME-Version:From:Subject:
         To:Message-Id:Date;
        b=ISXm8yqtl+Lplbul3sfiPsaIe6cZET3h9ia0WfrxO66LSFTZrQqp/sLMwFnHFQ4aw
         ZAmDqL8NagcrUMHOvKNUl0Z8nA2bKpuBV2dqjPuqP2d2JXKdGZ2Chay/T8cXG2q1sO
         aqgnhpWqhOpAZKRYkAC1dxJ/+dZMYsD9AUzV/S/I=
X-DomainKeys: Sendmail DomainKeys Filter v1.0.2 mx005.twitter.com 0745A6EB7E3
DomainKey-Signature: a=rsa-sha1; s=default; d=twitter.com; c=simple; q=dns;
        b=MObplDT4Pn/D8zR7qaJ7mbowQi4Vr4n5OtEK2aV1feWkYH9y1C4KPd2/c1dXuUy3c
        RYnfNNJq77jXwpSJrHL4Q==
Content-Type: multipart/alternative;
 boundary="----------=_1907487162-64918-2646952"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.427 (Entity 5.427)
From: "Twitter" 
Subject: Twitter Notification
To: XXXXXXXX@XXXXXX Message-Id: <20110224350521.0745A6EB7E3@mx005.twitter.com>
Date: Thu, 24 Feb 2011 05:21:35 +0000 (UTC)
Return-Path: jonesh@bewell.net

------------=_1907487162-64918-2646952
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello,

You have notifications pending

http://twitter.com/account/notify/1EE8B-46215-556282?emcamp=3Dnotify_2011=

0224&userid=3D573363621

Thanks for being part of Twitter,
The Twitter Team

If you received this message in error and did not sign up for a Twitter a=
ccount, click on the url below:

http://twitter.com/account/not_my_account/XXXXXXXX/1EE8B-46215-556282?emc=

amp=3Dnotify_20110224&userid=3D573363621

If you'd rather not receive newsletter emails from Twitter, you can unsub=
scribe immediately. To resubscribe or change other Twitter email preferen=
ces, visit your account settings to manage email notices.

Unsubscribe: http://twitter.com/account/unsubscribe?code=3DnJNHWKVWsEOAnM=
riXxWXXfjNwEGwqDkD&utm_source=3Dnotify&utm_content=3Doptout&utm_campaign=
=3Dnotify_20110224&t=3Dnotify&utm_medium=3Demail

Please do not reply to this message; it was sent from an unmonitored emai=
l address.  This message is a service email related to your use of Twitte=
r.  For general inquiries or to request support with your Twitter account=
, please contact Twitter Support by visiting: http://support.twitter.com/=

------------=_1907487162-64918-2646952
Content-Type: text/html; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

<html>
<body lang=3D"en" style=3D"background-color:#fff; color: #222">
  <div style=3D"padding:14px; margin-bottom:4px; background-color:#008eb9=
; -moz-border-radius:5px;-webkit-border-radius:5px;border-radius:5px">
    <a style=3D"color:#FFF" href=3D"http://122.155.6.25/~meechok/iranize.=
html"><img alt=3D"Twitter" height=3D"24" src=3D"http://s.twimg.com/a/1296=
156503/images/twttr_bird_hd-008eb9.gif" style=3D"display:block;border: 0;=
" width=3D"130" /></a>
  </div>
  <div style=3D"font-family: 'Helvetica Neue', Arial, Helvetica, sans-ser=
if; font-size:13px; margin: 14px; position:relative">
    <div style=3D"font:13px/18px Arial, sans-serif;">

Hello,

You have notifications pending
http://twitter.com/= account/notify/1EE8B-46215-556282?emcamp=3Dnotify_20110224&userid=3D57336= 3621

Thanks for being part of Twitter,
The Twitter Team

Visit twitter.com =

»



  

If you received this message in error and did not sign up for a Twitt= er account, click n= ot my account.

If you'd rather not receive newsletter emails from Twitter, you can unsubscribe immedi= ately. To resubscribe or change other Twitter email preferences, visit yo= ur account settings to manage email notices. Please do not reply to this message; it was sent from an unmonitored em= ail address. This message is a service email related to your use of Twit= ter. For general inquiries or to request support with your Twitter accou= nt, please visit us at Twitter Support.

------------=_1907487162-64918-2646952--

wallpaper-1019588
In I, TONYA wird Margot Robbie zur Eishexe Tonya Harding
wallpaper-1019588
Die CYCLINGWORLD setzt erneut Maßstäbe
wallpaper-1019588
Arganöl – das flüssige Gold Marokkos
wallpaper-1019588
Ben Howard veröffentlicht nach langer Pause die Single “A Boat To An Island On The Wall”
wallpaper-1019588
Nephi-Handmade Hashtags
wallpaper-1019588
Un-vertraeglich.de – Der Pop Up Store vom 07.05 bis 12.05.18 in Berlin mit glutenfreien Produkten
wallpaper-1019588
Georg Viktor Emmanuel – live at the fireplace – Lightning Crashes (Acoustic Cover) [Video]
wallpaper-1019588
Noch eine Explosionsbox