Date: Tue, 30 Jul 2013 11:17:28 -0500 [12:17:28 EDT]
From: Pinterest [firstname.lastname@example.org]
Subject: Your password on Pinterest was Successfully modified!
A Few Updates...
Changing your password is complete. Please use the link below within 24 hours. reset. Receive New Password to email.
Ask for a New Password
Pinterest is a tool for collecting and organizing things you love.
This email was sent to [redacted].
Don’t want activity notifications? Change your email preferences.
©2013 Pinterest, Inc. | All Rights Reserved
The link goes through a legitimate hacked site and then on to [donotclick]www.pinterest.com.onsayoga.net/news/pinterest-paswword-changes.php (report here) which is hosted on the following IPs:
188.8.131.52 (Megalan EAD, Bulgaria)
184.108.40.206 (Ximbo / CPCnet, Hong Kong)
220.127.116.11 (Razor Inc, US)
These IPs are controlled by this gang and form part of this large network of malicious IPs and domains. I recommend you use that list in conjunction with blocking onsayoga.net.