RE: Congrats! You've received a Wells Fargo reward

http://eotekla.co.uk/ree71.php?32=1o0261c46f9490b27_1nk4.33yr48vt.A01mcr000jl1paz7qj_a22144.0j3emMWh

Watch out for this spam being sent out this week:

Our email came from: [email protected]

The link takes you through to: http://eotekla.co.uk/ree71.php?32=[string]

With various different strings in the URL

The click here button seems to have been disabled already as it just gives a 404 not found error but the others still work. The final destination was a Windows server at https://madsdidit.com/

The unsubscribe link appears to take you through to a real subscription service at opt.listarmor.com & ariding.org.uk but probably just logs your email address as live from the encoded string. The site appears to be an information service of some kind connected with brulyga.co.uk but it does not look reputable.

 

 

Add comment