[Full-disclosure] Possible Google Phishing Scam

Mon May 2 22:03:47 BST 2005

Enclosures as raw text.

Interesting that a, my google e-mail is not public, b, I didn't ask for 
assistance, c, there is no place in google to report this other than a user 
error unable to get to e-mail.

Header

E-Version: 1.0
Received: from sproxy.google.com ([64.233.170.130]) by mc11-f36.hotmail.com 
with Microsoft SMTPSVC(6.0.3790.211); Mon, 2 May 2005 13:52:43 -0700
Received: by sproxy.google.com with SMTP id 75so677713rnf for 
<Dan_20407 at msn.com>; Mon, 02 May 2005 13:52:33 -0700 (PDT)
Received: by 10.38.6.79 with SMTP id 79mr4905141rnf; Mon, 02 May 2005 
13:52:33 -0700 (PDT)
X-Message-Info: JGTYoYF78jFaGB+11S+vL5LvkM4SrEiu5eChb/GKA2U=
Return-Path: accounts-noreply at google.com
X-OriginalArrivalTime: 02 May 2005 20:52:43.0742 (UTC) 
FILETIME=[E33317E0:01C54F58]

Body Path

       <html>   <head>  <title> Google Accounts </title>  <style 
type="text/css"><!--

      .body { margin-left: 3em;
              margin-right: 5em;
              font-family: arial,sans-serif; }

      div.errorbox-good {}

      div.errorbox-bad {}

      div.errormsg { color: red; font-size: smaller; font-family: 
arial,sans-serif;}
      font.errormsg { color: red; font-size: smaller; font-family: 
arial,sans-serif;}
    //--> </style> </head>  <body alink="#ff0000" text="#000000" 
vlink="#551a8b" link="#0000cc" bgcolor="#ffffff">                         
<table cellpadding="0" width="100%" cellspacing="0" border="0"> <tr> <td 
align="right" nowrap> <font size="-1" face="Arial, sans-serif">          <a 
href="http://www.google.com">Google Home</a>  |     <a 
href="https://www.google.com/accounts/Login">Sign In</a>    </font> </td> 
</tr> <tr> <td><img width="1" alt="" height="1"></td> </tr> </table>  <table 
cellpadding="2" width="100%" cellspacing="0" border="0"> <tr> <td 
colspan="2"><img width="1" alt="" height="2"></td> </tr> <tr> <td width="1%" 
valign="top">  <a href="https://www.google.com/accounts/"> <img 
src="googleaccountslogo.gif" alt="Google" border="0" align="left">   </a>  
</td> <td valign="top"> <table cellpadding="0" width="100%" cellspacing="0" 
border="0"> <tr> <td colspan="2"><img width="1" alt="" height="15"></td> 
</tr> <tr bgcolor="#3366cc"> <td><img width="1" alt="" height="1"></td> 
</tr> <tr bgcolor="#e5ecf9"> <td style="padding-left: 4px; 
padding-bottom:3px; padding-top:2px; font-family:arial,sans-serif;"> 
<b>Google Accounts</b></td> </tr> <tr> <td colspan="2"><img width="1" alt="" 
height="5"></td> </tr>  </table> </td> </tr> </table>   <div class="body">  
<b> Reset Password </b> <font size="-1"></font> <p><font size="-1"> Select 
your new password and enter it below.</font></p>  <form 
action="ExcPasswdCap" method="post"> <input type="hidden" name="c" 
value="7950981877820516101">  <table cellpadding="2" cellspacing="2" 
border="0"> <tr> <td align="center" valign="top"> <table cellpadding="2" 
bgcolor="#cbdced" cellspacing="0" border="0" width="100%"> <tr> <td> <table 
cellpadding="5" bgcolor="#ffffff" cellspacing="0" border="0" width="100%"> 
<tr> <td nowrap><b><font size="-1" face="Arial, sans-serif">  New password:  
</font></b></td> <td> <div class="errorbox-good"> <input type="password" 
name="Passwd" size="25">  </div> </td> </tr> <input type="hidden" name="p" 
value=""> <tr> <td nowrap><b><font size="-1" face="Arial, sans-serif">  
Re-enter password:  </font></b></td> <td> <div class="errorbox-good"> <input 
type="password" name="PasswdAgain" size="25">  </div> </td> </tr> <tr> <td 
align="center">&nbsp;</td> <td> <input type="submit" name="null" 
value="Reset password"> </td> </tr> </table> </td> </tr> </table> </td> 
</tr> </table>  </form> </div>   <style type="text/css"><!--

.footer { padding-right: 5px;
          padding-left: 5px;
          padding-bottom: 5px;
          padding-top: 5px;
          font-size: 83%;
          border-top: #ffffff 1px solid;
          border-bottom: #ffffff 1px solid;
          background: #e5ecf9;
          text-align: center;
          font-family: arial,sans-serif;
}
//--> </style> <br><br> <div align="center" class="footer"> <font 
color="#666666">  &copy;2005 Google  </font> - <a 
href="http://www.google.com"> Google Home </a> - <a 
href="http://www.google.com/terms_of_service.html"> Terms of Service </a> - 
<a href="http://www.google.com/privacy.html"> Privacy Policy </a> - <a 
href="http://www.google.com/help/faq_accounts.html"> About Google Accounts 
</a> </div>  </body> </html>

Sometimes MSN E-mail will indicate that the mesasge failed to be delivered. 
Please resend when you get those, it does not mean that the mail box is bad, 
merely that MSN mail is over worked at the time.

_________________________________________________________________
FREE pop-up blocking with the new MSN Toolbar – get it now! 
http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/