| Email title: |
'Verify your billing information at Earthlink.', various other subjects. |
| Scam target: |
Earthlink customers |
| Email format: |
HTML email, containing a single image linking to the phish site. |
| Sender: |
EarthlinkAccounting Supporting <27790@rotario.com> |
| Sender spoofed? |
No |
| Scam call to action: |
'We've encountered a problem due to the fact that we could not verify the data that you provided... To verify your information please follow the link...' |
| Scam goal: |
Getting victim's Earthlink username/password, credit card and bank account information, SSN. |
| Call to action format: |
Image link |
| Visible link: |
https://start.earthlink.net/track?billing.asp |
| Called link : |
http://218.22.141.202/2/index.html |
| Phish website hosted on : |
218.22.141.202 |
email.jpg)
site1.jpg)
adrbar.jpg){kind=small}