[SPAM/E-mail Worm] You are here because one of your friends have invited you. - Reported on 22-Sept-2011
0 Comments Published by Ebisu on Sep 21, 2011 at 6:37 PM.
>>>> Following is another version of fast spreading E-MAIL WORM/SPAM reported by a user of this blog.
The e-mail contains a link: http://www.thedose.com/doseblog/wp-content/uploads/headway/background-uploads/zxfek.htm
which leads to a web page with the following content:
--------------------------------------------------------------------
You are here because one of your friends have invited you.
We try to be helpful for you.
Page loading, please wait....
--------------------------------------------------------------------
The web page has got a Meta Refresh leading to the URL: http://hospitalwikicare.com
as shown below:
<meta http-equiv="refresh" content="4; url=http://hospitalwikicare.com">
The final destination domains in most of these cases are Online Pharmacy websites seems to be hosted in Romania, Canada etc.
Some of the reported sites are listed below:
caretabgalaxy.com
brewingwelness.com
cialisprescriptiondrug.com
canadatsx.com
canadarctic.com
carepillhealth.com
caretabgalaxy.com
ommatorepillstablets.net
wikimedicare.com
phartax.com
drugstorehealthrx.net
dietpilleating.com
medicinetab.com
pharmpharmaceutical.com
hospitalpharm.com
newmedicalrx.com
medicalomma.com
hospitalwikicare.com
healthprescriptionmedical.com
dhavi.ru/trial2/
pillsdrugstoredrug.com
mercolatab.com
ommacaretablet.com
actoslispill.com
ommatabletpharmacyrx.net
applemedtablet.com
pharmacylevitra.com
smartphonemedicinetablet.com
taxtrapharmacy.com
carepillspatients.com
tabletsmedshealthcare.net
republicansrx.com
wikimedicalpatients.com
herbalwelness.com
badgestratab.com
foodietmeds.com
============Original E-mail=======================
================================================
The e-mail contains a link: http://www.thedose.com/doseblog/wp-content/uploads/headway/background-uploads/zxfek.htm
which leads to a web page with the following content:
--------------------------------------------------------------------
You are here because one of your friends have invited you.
We try to be helpful for you.
Page loading, please wait....
--------------------------------------------------------------------
The web page has got a Meta Refresh leading to the URL: http://hospitalwikicare.com
as shown below:
<meta http-equiv="refresh" content="4; url=http://hospitalwikicare.com">
The final destination domains in most of these cases are Online Pharmacy websites seems to be hosted in Romania, Canada etc.
Some of the reported sites are listed below:
caretabgalaxy.com
brewingwelness.com
cialisprescriptiondrug.com
canadatsx.com
canadarctic.com
carepillhealth.com
caretabgalaxy.com
ommatorepillstablets.net
wikimedicare.com
phartax.com
drugstorehealthrx.net
dietpilleating.com
medicinetab.com
pharmpharmaceutical.com
hospitalpharm.com
newmedicalrx.com
medicalomma.com
hospitalwikicare.com
healthprescriptionmedical.com
dhavi.ru/trial2/
pillsdrugstoredrug.com
mercolatab.com
ommacaretablet.com
actoslispill.com
ommatabletpharmacyrx.net
applemedtablet.com
pharmacylevitra.com
smartphonemedicinetablet.com
taxtrapharmacy.com
carepillspatients.com
tabletsmedshealthcare.net
republicansrx.com
wikimedicalpatients.com
herbalwelness.com
badgestratab.com
foodietmeds.com
============Original E-mail=======================
---------- Forwarded message ----------
From: [Will be a name familiar to you!]
Date: Mon, Sep 22, 2011 at 1:46 PM
Subject:
To: [Could be any names in the contacts book of the affected person!]
From: [Will be a name familiar to you!]
Date: Mon, Sep 22, 2011 at 1:46 PM
Subject:
To: [Could be any names in the contacts book of the affected person!]
================================================
0 Responses to “[SPAM/E-mail Worm] You are here because one of your friends have invited you. - Reported on 22-Sept-2011”
Post a Comment