[GTER] Phishing vindo da locaweb

[Toledo, Luis Carlos]

Olá,

Essa madrugada recebemos uma "enxurrada" de phishing vindo da locaweb, mais
expecificamente dos hosts abaixo, interessante que até passa por um clamav.

Já enviei para abuse at locaweb, aqui tudo vindo desses hosts eu arquivo com
muito carinho em /dev/null.

Vale o alerta para os amigos da lista.

Abs Toledo

Received: from hm1707.locaweb.com.br (shared-2.locaweb.com.br
[200.234.214.155])
	by shared-2.locaweb.com.br (Postfix) with ESMTP id B62204CD074
	for <xxxx at yyyy.com>; Wed,  9 Dec 2009 02:46:51 -0200 (BRST)
Received: from hm1875.locaweb.com.br (hm1875.locaweb.com.br
[189.126.114.31])
	by hm1707.locaweb.com.br (Postfix) with ESMTP id 9DD2DF94B46D
	for <xxxx at yyyy.com>; Wed,  9 Dec 2009 02:46:51 -0200 (BRST)
Received: by hm1875.locaweb.com.br (Postfix, from userid 21644)
	id 80836E10144; Wed,  9 Dec 2009 02:46:51 -0200 (BRST)
X-Locaweb-ID:
63325679646D56794F69426F625445344E7A55734948567A5A584A755957316C4F6942306458
4A7063323176596D56756447383D
content-type: text/html
Subject: Nova Contra-Proposta
From: maria.cecilia022 at gmail.com
To: <xxxx at yyyy.com>
Message-Id: <20091209044651.80836E10144 at hm1875.locaweb.com.br>
Date: Wed,  9 Dec 2009 02:46:51 -0200 (BRST)
X-Virus-Scanned: clamav-milter 0.95.1 at hm1707.locaweb.com.br
X-Virus-Status: Clean
X-SPF-Scan-By: smf-spf v2.0.2 - http://smfs.sf.net/
Received-SPF: Neutral (hm1707.locaweb.com.br: 189.126.114.31 is neither
permitted
	nor denied by domain of maria.cecilia022 at gmail.com)
	receiver=hm1707.locaweb.com.br; client-ip=189.126.114.31;
	envelope-from=<maria.cecilia022 at gmail.com>;
helo=hm1875.locaweb.com.br;