https://bitcointalk.org/index.php?topic=272235.msg2924773#msg2924773
I found this phishing mail from dorob.de :
Quote
x-store-info: 4r51+eLowCe79NzwdU2kR3P+ctWZsO+J
Authentication-Results: hotmail.com; spf=none (sender IP is 109.230.252.211) smtp.mailfrom=web20@www.dorob.de; dkim=none header.d=bitstamp.at; x-hmca=none header.id=noreply@bitstamp.at
X-SID-PRA: noreply@bitstamp.at
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Message-Info: 11chDOWqoTmVj06pJHBcZxuEoFGOvBJ3/gaRQ36zt2fHWB2P0p63NM2SaSOWofIAi9AoMzOl4+Hip0rzegwHRzM11yTGnnQzDBl2TGcikvSdX6RGgbW2Ik7BtczfG68DFacIs+l3R0ocQGaRZEHSCbl5YRPMwbBbSFzOK4AUuWsEwfbR3EMY3nHMVWxgaK+FIMmVlZHsQucszO+ettUJSkcSMyB685It
Received: from www.dorob.de ([109.230.252.211]) by COL0-MC1-F19.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Sun, 3 Nov 2013 03:34:15 -0800
Received: by www.dorob.de (Postfix, from userid 1026)
id E12461601C94; Sun, 3 Nov 2013 12:34:13 +0100 (CET)
To: @outlook.de
Subject: Email address confirmation
X-PHP-Originating-Script: 1026:send.php
From: Bitstamp <noreply@bitstamp.at>
Message-ID: <20131103113413.E12461601C94@www.dorob.de>
Date: Sun, 3 Nov 2013 12:34:13 +0100
Return-Path: web20@www.dorob.de
X-OriginalArrivalTime: 03 Nov 2013 11:34:15.0493 (UTC) FILETIME=[A02F4F50:01CED888]
MIME-Version: 1.0
Content-Type: text/plain
Dear customer,
please confirm your email address by clicking on this link and login: http://www.bitstamp.at/account/login/?mail_hash=b2d2af9571793f10eeb07c98bcb96ce0
This link will expire in 6 hours.
If you have any questions regarding Bitstamp exchange service please read our FAQ or use our support form. Our support staff will be more than happy to assist you.
Best regards,
Bitstamp team
Authentication-Results: hotmail.com; spf=none (sender IP is 109.230.252.211) smtp.mailfrom=web20@www.dorob.de; dkim=none header.d=bitstamp.at; x-hmca=none header.id=noreply@bitstamp.at
X-SID-PRA: noreply@bitstamp.at
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Message-Info: 11chDOWqoTmVj06pJHBcZxuEoFGOvBJ3/gaRQ36zt2fHWB2P0p63NM2SaSOWofIAi9AoMzOl4+Hip0rzegwHRzM11yTGnnQzDBl2TGcikvSdX6RGgbW2Ik7BtczfG68DFacIs+l3R0ocQGaRZEHSCbl5YRPMwbBbSFzOK4AUuWsEwfbR3EMY3nHMVWxgaK+FIMmVlZHsQucszO+ettUJSkcSMyB685It
Received: from www.dorob.de ([109.230.252.211]) by COL0-MC1-F19.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Sun, 3 Nov 2013 03:34:15 -0800
Received: by www.dorob.de (Postfix, from userid 1026)
id E12461601C94; Sun, 3 Nov 2013 12:34:13 +0100 (CET)
To: @outlook.de
Subject: Email address confirmation
X-PHP-Originating-Script: 1026:send.php
From: Bitstamp <noreply@bitstamp.at>
Message-ID: <20131103113413.E12461601C94@www.dorob.de>
Date: Sun, 3 Nov 2013 12:34:13 +0100
Return-Path: web20@www.dorob.de
X-OriginalArrivalTime: 03 Nov 2013 11:34:15.0493 (UTC) FILETIME=[A02F4F50:01CED888]
MIME-Version: 1.0
Content-Type: text/plain
Dear customer,
please confirm your email address by clicking on this link and login: http://www.bitstamp.at/account/login/?mail_hash=b2d2af9571793f10eeb07c98bcb96ce0
This link will expire in 6 hours.
If you have any questions regarding Bitstamp exchange service please read our FAQ or use our support form. Our support staff will be more than happy to assist you.
Best regards,
Bitstamp team
Good luck with future business.