PaulDotCom mailing list archives

phishing question


From: chris.blazek at gmail.com (Chris Blazek)
Date: Tue, 1 Dec 2009 14:54:36 -0600

A coworker clicked on a link in an email and was directed to facebook then
redirected to the following site: despatiesmercemerce . blogspot . com
All of there fb contacts then received the same email. I pulled up the site
in malzilla and noticed a script block in the header that looks like it's
obfuscated.

I was wondering if someone in the group could figure out what the site was
trying to do.

Thanks,
Chris
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20091201/c754b2e9/attachment.htm 


Current thread: