full-disclosure - Google + Amazon fun scam

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4403198B.3000705@heapoverflow.com>
Date: Mon Feb 27 15:24:09 2006
From: ad at heapoverflow.com (ad@...poverflow.com)
Subject: Google + Amazon fun scam

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
WARNING!: dont login to the link , the sample link within
[SCAM][/SCAM] redirects to a real scammer website.

If i remember I saw on this list a post wich was warning about faking
scam links within google.com domain.
I got this scam today:

[SCAM]http://google.com/url?sa=p&pref=ig&pval=2&q=http://wielrenneninlimburg.nl/forum/www.amazon.com/index.html[/SCAM]

wich is pretty easy to discover but I have tried a variant wich the
scammer probably forgot to use to grow his fooling possiblities:

[SCAM]http://google.com/url?sa=p&pref=ig&pval=2&q=%68%74%74%70%3A%2F%2F%77%69%65%6C%72%65%6E%6E%65%6E%69%6E%6C%69%6D%62%75%72%67%2E%6E%6C%2F%66%6F%72%75%6D%2F%77%77%77%2E%61%6D%61%7A%6F%6E%2E%63%6F%6D%2F%69%6E%64%65%78%2E%68%74%6D%6C[/SCAM]

should be nasty to scam google services or anything other via this
way. the scammer will hide its domain + "steal" google.com domain.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
 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=Kc3I
-----END PGP SIGNATURE-----