Date: Wed, 20 Feb 2013 23:24:49 +0400
From: "AccountNotify@verizonwireless.com" [firstname.lastname@example.org]
Subject: Verizon wireless online bill.
Important account information from Verizon WirelessThe malicious payload is at [donotclick]participamoz.com/detects/holds_edge.php (report here) hosted on:
Your current bill for your account ending in XXXX-XX001 is now available online in My Verizon
Total Balance Due: $48.15
Scheduled Automatic Payment Date: 02/25/2012
Mind that payments and/or adjustments made to your account after your bill was generated will be deducted from your automatic payment amount.
> Review and Pay Your Bill
Thank you for choosing Verizon Wireless.
My Verizon is also available 24/7 to assist you with:
Vrowsing your usage
Updating your plan
Adding Account Members
Paying your bill
Finding accessories for your devices
And much, much more...
2011 Verizon Wireless
Verizon Wireless | One Verizon Way | Mail Code: 190WVB | Basking Ridge, NJ 07990
If you are not the intended recipient and feel you have received this email in error; or if you
would like to update your customer notification preferences, please click here.
220.127.116.11 (Chulanet, Thailand)
18.104.22.168 (MSP Digital / Cablevision, US)
The following IPs and domains are connected should be treated as malicious: