- ... From: Betty Fellows Subject: [Y-Mail] Phishing that looks like it s from yahoo To: Y-Mail@yahoogroups.com Date: Wednesday, May 6,Message 1 of 2 , May 6, 2009View Source
--- On Wed, 5/6/09, Betty Fellows <betty@...> wrote:
From: Betty Fellows <betty@...>
Subject: [Y-Mail] Phishing that looks like it's from yahoo
Date: Wednesday, May 6, 2009, 2:52 PM
I'm guessing that this is a phishing expedition from someone, not from
Dear Yahoo Email Owner,
This message is from Yahoo Account Webmaster messaging center to all
We are currently upgrading our data base and e-mail account center. We
deleting all unused email account to create more space for new accounts.
To prevent your account from closing you will have to update it below so
that we will know that it's a present used account.
To complete your Email account, you must reply to this email immediately
and enter your informations below.
EMAIL LOGIN INFORMATION
Name:(khushnood Ul Hassan)
Alternative email:(..... ...)
NOTE : Failure to do this will immediately render your email address
deactivated from our database.
Sorry for any inconvenience this may cause you.
THANK YOU FOR USING YAHOO MAIL.
Here are the full headers:
From YAHOO UPGRADE ADMINISTRATOR Wed May 6 13:08:51 2009
Authentication- Results: mta159.mail. re4.yahoo. com from=yahoo.com;
domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 184.108.40.206 (EHLO mailout1.surf- town.net)
by mta159.mail. re4.yahoo. com with SMTP; Wed, 06 May 2009 06:15:38
Received: from localhost (mailout1 [127.0.0.1])
by mailout1.surf- town.net (Postfix) with ESMTP id 207C8F0019EA;
Wed, 6 May 2009 15:08:53 +0200 (CEST)
Received: from squirrel-webmail. surftown. com (unknown [212.97.133. 1])
by mailout1.surf- town.net (Postfix) with ESMTP id C7DA8F001768;
Wed, 6 May 2009 15:08:49 +0200 (CEST)
Received: from 220.127.116.11
(SquirrelMail authenticated user anders@damgaard- net.dk)
by squirrel-webmail. surftown. com with HTTP;
Wed, 6 May 2009 15:08:51 +0200 (CEST)
Message-ID: <66987683f69d123afde 1fa51abb395b9. squirrel@ squirrel- webmail.surftown .com
Date: Wed, 6 May 2009 15:08:51 +0200 (CEST)
Subject: FILL LOGIN DETAILS OR LOOSE ACCOUNT
From: "YAHOO UPGRADE ADMINISTRATOR" <info@...>
Reply-To: aoupgrade@live. com
User-Agent: SquirrelMail/ 1.4.16
Content-Type: text/plain;charset= iso-8859- 1
Content-Transfer- Encoding: 8bit
To: undisclosed- recipients: ;