A new wave of scam e-mails are now hitting victims around the globe. They usually appear to come from trusted friends and look like this:

If the victim chooses to go further, he or she will end up at this page:

The scam site is playing on people’s curiosity by offering a service to verify who blocked them on their MSN contact list. If the user chooses to fill-in an e-mail and password to sign-in, nothing will happen. The following message will appear:

The e-mail address and password entered is sent to remote servers. This confidential information may be used to hijack e-mail accounts and spam friends in your contact list with similar e-mails. Never fill in secret information on suspicious sites and avoid visiting the domains listed below:

Reverse IP: 121.54.174.85 

XX = .com

Ahem-they-blocked-me.XX           
Ahh-im-blocked.XX           
Awsome-grab-block-statuses.XX           
Bad-luck-im-blocked.XX           
Bing-block-status.XX           
Bing-your-block-status.XX           
Bingoo-check-block-status.XX           
Block-status-grabber.XX           
Cindrella-blocked-me.XX           
Damn-im-blocked.XX           
Damnn-they-blocked-me.XX           
Did-they-block-you.XX           
Duh-i-got-blocked.XX           
Face-blocked-truth.XX           
Find-reason-of-being-blocked.XX           
Finding-who-blocks.XX           
Friends-block-buddies.XX           
Grab-block-status.XX           
Grab-my-block-status.XX           
Grab-your-block-status.XX           
Have-they-blocked-you.XX           
Hell-they-blocked-you.XX           
Heroes-never-block.XX           
Hey-you-block-me.XX           
How-come-they-block-me.XX           
Huh-yes-i-was-blocked.XX           
Huhu-bing-block-statuses.XX           
Im-fedup-of-being-blocked.XX           
Im-sad-im-blocked.XX           
Ima-checking-block-status.XX           
Jealous-buddies-block.XX           
Jealoused-people-block.XX           
Jesus-he-blocked-us.XX           
Jesus-im-blocked.XX           
Lame-friends-block-you.XX           
Leme-check-block-status.XX           
Let-people-laugh.XX           
Let-them-hehe.XX           
Mean-friends-block.XX           
My-block-stat-grabber.XX           
My-block-status-check.XX           
My-friends-block-me.XX           
My-mates-blocked-me.XX           
No-damn-way-im-blocked.XX           
No-way-im-blocked.XX           
Notice-they-blocked-u.XX           
Oh-i-was-blocked.XX           
Oh-my-god-im-blocked.XX           
Oh-strange-im-blocked.XX           
Oh-weird-im-blocked.XX           
Ohh-ma-friend-blocked-me.XX           
Ohhh-damn-im-blocked.XX           
Omg-they-blocked-me.XX           
Ooo-seems-im-blocked.XX           
Phew-they-blocked-me.XX           
Phewww-seems-i-am-blocked.XX           
Ppl-are-sick-im-blocked.XX           
Puff-im-blocked.XX           
Query-block-status.XX           
Sad-i-was-blocked.XX           
See-they-blocked-me.XX           
Strange-i-was-blocked.XX           
They-were-haha.XX           
Ufff-i-was-blocked.XX           
Ufff-seems-blocked.XX           
Uffff-i-was-blocked.XX           
Uh-ho-i-got-blocked.XX           
Umm-jesus-im-blocked.XX           
Unlucky-im-blocked.XX           
Urr-he-blocked-me.XX           
Urr-he-blocked-us.XX           
Weird-i-was-blocked.XX           
Who-let-me-block.XX           
Why-do-they-block.XX           
Why-i-got-blocked.XX           
Why-my-friends-block.XX           
Wooh-im-blocked.XX           
Yuppy-find-block-statuses.XX           
Amazed-i-wasnt-blocked.XX           
Amazing-true-block-checks.XX           
Get-info-on-blocked-stats.XX           
Heheh-i-wasnt-blocked.XX           
Look-whos-blockin-you.XX           
See-live-block-stats.XX           
Woooh-i-was-not-blocked.XX

Albin

Lavasoft Malware Labs