TechQuotes WebLog
 
Username:
Password:
Gmail Phishing attempt
2009-08-27 17:43:03
This is what I received

================================


from Customer Care
to
date Thu, Aug 27, 2009 at 6:34 PM
subject Urgent Responded Needed..
signed-by btinternet.com

hide details 6:34 PM (1 hour ago)



The Upgrade Customer Upgrade Care Team users periodically checks the size of your e-mail space is sending you this information. The program runs weekly to ensure your in box does not grow too large, thus preventing you from receiving or sending new e-mail. As this message is being sent, you have 18 megabytes (MB) or more stored in your in box. To help us reset your space in our database, please enter your current

Users (_________________)
password(_______________)
country
state

You will receive a periodic alert if your in box size is between 18 and 20 MB. If your in box size is 20 MB, a program on your Web mail will move your oldest e-mails to a folder in your home directory to ensure you can continue receiving incoming e-mail. You will be notified this after this has taken place.



================================


--------here's the source-------------


Delivered-To: xxxxxxx@gmail.com
Received: by 10.100.242.8 with SMTP id p8cs73926anh;
Thu, 27 Aug 2009 16:34:14 -0700 (PDT)
Received: by 10.210.115.15 with SMTP id n15mr8085134ebc.43.1251416053086;
Thu, 27 Aug 2009 16:34:13 -0700 (PDT)
Return-Path:
Received: from n25.bullet.mail.ukl.yahoo.com (n25.bullet.mail.ukl.yahoo.com [87.248.110.142])
by mx.google.com with SMTP id 17si1292512ewy.19.2009.08.27.16.34.11;
Thu, 27 Aug 2009 16:34:12 -0700 (PDT)
Received-SPF: neutral (google.com: 87.248.110.142 is neither permitted nor denied by domain of zoecleggmail@btinternet.com) client-ip=87.248.110.142;
Authentication-Results: mx.google.com; spf=neutral (google.com: 87.248.110.142 is neither permitted nor denied by domain of zoecleggmail@btinternet.com) smtp.mail=zoecleggmail@btinternet.com; dkim=pass (test mode) header.i=@btinternet.com
Received: from [217.12.4.215] by n25.bullet.mail.ukl.yahoo.com with NNFMP; 27 Aug 2009 23:34:11 -0000
Received: from [87.248.110.106] by t2.bullet.ukl.yahoo.com with NNFMP; 27 Aug 2009 23:34:08 -0000
Received: from [127.0.0.1] by omp211.mail.ukl.yahoo.com with NNFMP; 27 Aug 2009 23:34:08 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 9119.49513.bm@omp211.mail.ukl.yahoo.com
Received: (qmail 93169 invoked by uid 60001); 27 Aug 2009 23:34:07 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btinternet.com; s=s1024; t=1251416046; bh=gTZA2MZvAcjPEHtvS4B1xuOVA/EHSbCx8IT8gLhveuI=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=cWi2tLQtrX4QcRqhXy5MIK7QDkkjoMpiZyj1L46l7hQgPyVnpC/Ik/uvP5eGyzEIj8MritzlwDZhdDo3Bh1MWKMo1Xc2M9RqyOMIHeqDi337FyA307AfOwtc23zqc8SmI5TGxLx1Fc6I02V2T6mgP1sQ9Vg4HD9UobdBg3mnhuk=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=btinternet.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
b=JtrgM7hcSqPD72QwpU9ahGq4wZxQQrs3s2vr2qehacg40LqKXXckxzLEEpJryAPwbMdfFszGqAiqx5HxjebwyakU3QBfTjUc2l+QUpKq1jifi+GaJ8m+yamzf20wC48hph7xWltQExOIFiOQmhJ5dENb8toI/1ZGPSGhI95qYw8=;
Message-ID: <951461.92563.qm@web87007.mail.ird.yahoo.com>
X-YMail-OSG: ud6t5S4VM1l9NSYn0xBbPZ_dwaGbY1SMDITDg4wBMk0KcvSI.uHgktADJVYWNqC6ZQohPDNg9zbA7Cvxugr_z2D5k9QornMSxJ7S9NFplhw9KNhzzBs3uxXk2PzVqg92qcb7ip6KV1fNju_o8G9TOCmGr1q5XP72dcJra7wLmxTdDxyqN3.QNhWEPJBAI6OhDgq.KdhaGc0t9VJ5qZACcmGdwAUCg4lTlqAW9aA38Ykowz_iPX1o8BqJfIsFjKMNWo79F7jglt3EKFRiB9lFBTowpfyMdac7bEPwRKMA.v64Ks9j3gVgBCIFU.SgCsFJ62kzx4zIzGaLjVk1ywAOfVlB9ktO4xZNbCzMmKbjq2AJyeZ6odgSo0grjO7R0lBbWEYcn6MNRSi3adIOIU1wLxV8s9lu1mm362y6Mm5SzOOr3HDvBSJENv_PklefhlzqnmTw7g--
Received: from [41.191.109.130] by web87007.mail.ird.yahoo.com via HTTP; Thu, 27 Aug 2009 23:34:06 GMT
X-Mailer: YahooMailClassic/6.1.2 YahooMailWebService/0.7.338.2
Date: Thu, 27 Aug 2009 23:34:06 +0000 (GMT)
From: Customer Care
Subject: Urgent Responded Needed..
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-378388372-1251416046=:92563"

--0-378388372-1251416046=:92563
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable



The Upgrade Customer Upgrade Care Team users periodically checks the size o=
f your e-mail space is sending you this information. The program runs weekl=
y to ensure your in box does not grow too large, thus preventing you from r=
eceiving or sending new e-mail. As this message is being sent, you have 18 =
megabytes (MB) or more stored in your in box. To help us reset your space i=
n our database, please enter your current

Users (_________________)
password(_______________)
country
state

You will receive a periodic alert if your in box size is between 18 and 20 =
MB. If your in box size is 20 MB, a program on your Web mail will move your=
oldest e-mails to a folder in your home directory to ensure you can contin=
ue receiving incoming e-mail. You will be notified this after this has take=
n place.
--0-378388372-1251416046=:92563
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

top" style=3D"font: inherit;">

The Upgrade Customer Upgrade Care Tea=
m users periodically checks the size of your e-mail space is sending you th=
is information. The program runs weekly to ensure your in box does not grow=
too large, thus preventing you from receiving or sending new e-mail. As th=
is message is being sent, you have 18 megabytes (MB) or more stored in your=
in box. To help us reset your space in our database, please enter your cur=
rent

Users (_________________)
password(_______________)
count=
ry
state

You will receive a periodic alert if your in box size is=
between 18 and 20 MB. If your in box size is 20 MB, a program on your Web =
mail will move your oldest e-mails to a folder in your home directory to en=
sure you can continue receiving incoming e-mail. You will be notified this =
after this has taken place.

--0-378388372-1251416046=:92563--



================================
 
Re: Gmail Phishing attempt
2009-08-27 17:45:38
...and of course, I did not respond to the email :)
 
Post Response
Name
Email
WebPage
Please enter the characters in the image, in the textbox below CAPTCHA Image
  Change Image

Comments below

HOME - COURSES - WEBLOG - PATCHES - WHITEPAPERS - SCRIPTS - NOTES - HUMOR - PGP Key