I recently got a email from localbitcoin.org with a infected 'invoice' attached, figured I'd post it here.
Whois:
Domain Name:LOCALBITCOIN.ORG
Domain ID: D169077364-LROR
Creation Date: 2013-06-28T11:06:49Z
Updated Date: 2014-06-05T12:16:45Z
Registry Expiry Date: 2017-06-28T11:06:49Z
Sponsoring Registrar:eNom, Inc. (R39-LROR)
Sponsoring Registrar IANA ID: 48
WHOIS Server:
Referral URL:
Domain Status: clientTransferProhibited -- http://www.icann.org/epp#clientTransferProhibited
Registrant ID:394dcfc39f185a6d
Registrant Name:Jeremias Kangas
Registrant Organization:Kangas Bros. Innovations
Registrant Street: Maapadontie 5 G 325
Registrant City:Helsinki
Registrant State/Province:Uusimaa
Registrant Postal Code:00640
Registrant Country:FI
Registrant Phone:+358.401654046
Registrant Phone Ext:
Registrant Fax: +358.401654046
Registrant Fax Ext:
Registrant Email:jeremias.kangas@kangasbros.fi
Admin ID:394dcfc39f185a6d
Admin Name:Jeremias Kangas
Admin Organization:Kangas Bros. Innovations
Admin Street: Maapadontie 5 G 325
Admin City:Helsinki
Admin State/Province:Uusimaa
Admin Postal Code:00640
Admin Country:FI
Admin Phone:+358.401654046
Admin Phone Ext:
Admin Fax: +358.401654046
Admin Fax Ext:
Admin Email:jeremias.kangas@kangasbros.fi
Tech ID:394dcfc39f185a6d
Tech Name:Jeremias Kangas
Tech Organization:Kangas Bros. Innovations
Tech Street: Maapadontie 5 G 325
Tech City:Helsinki
Tech State/Province:Uusimaa
Tech Postal Code:00640
Tech Country:FI
Tech Phone:+358.401654046
Tech Phone Ext:
Tech Fax: +358.401654046
Tech Fax Ext:
Tech Email:jeremias.kangas@kangasbros.fi
