********WARNING********
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Mon Feb 3 23:13:55 2014
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 46.228.37.119; Fri, 31 Jan 2014 12:04:09 +0000
X-YahooFilteredBulk: 205.188.169.19
Received-SPF: pass (domain of aol.com designates 205.188.169.19 as permitted sender)
X-YMailISG: x
X-Originating-IP: [205.188.169.19]
Authentication-Results: mta1058.mail.ir2.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=mx.aol.com;
dkim=pass (ok)
Received: from 127.0.0.1 (EHLO oms-dd02.mx.aol.com) (205.188.169.19)
by mta1058.mail.ir2.yahoo.com with SMTPS; Fri, 31 Jan 2014 12:04:09 +0000
Received: from mtaout-mae02.mx.aol.com (mtaout-mae02.mx.aol.com [172.26.254.142])
by oms-dd02.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id 8798E3800018F
for <x>; Fri, 31 Jan 2014 07:04:08 -0500 (EST)
Received: from my-server (unknown [192.154.110.237])
by mtaout-mae02.mx.aol.com (MUA/Third Party Client Interface) with ESMTPA id 1E6A038000089
for <x>; Fri, 31 Jan 2014 07:04:08 -0500 (EST)
From: "Yahoo!" <Dvdlaniado@aol.com>
Subject: [Bulk] ********WARNING********
To: x
Content-Type: multipart/alternative; boundary="pgDbC4x0t6bueXlwjKUIokd=_Otx24MAZu0"
MIME-Version: 1.0
Date: Fri, 31 Jan 2014 04:04:04 -0800
x-aol-global-disposition: S
X-SPAM-FLAG: YES
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20121107; t=1391169848;
bh=2m4T2v/+UST8P6M0sz3JeAJH1PrIy8RH/aOI+2ZEhyo=;
h=From:To:Subject:Date:MIME-Version:Content-Type;
b=sJa6D+vqxzHYo5RxE2P0HNiRLmeJvEu8hlxLsdjAUd8Stn8nhuwxn/oHGCczO4wBN
HU06V4tJA5GYQHx7mRnpbBGtL0FQiGPPU3nS680YuEF4hESK05B0U6F5+GWqFR7iNo
B25t8FYHHNTUhJloDzVK6ogDdUr6qnc8B5/xamKE=
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1afe8e52eb9138107e
X-AOL-IP: 192.154.110.237
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 46.228.37.119; Fri, 31 Jan 2014 12:04:09 +0000
X-YahooFilteredBulk: 205.188.169.19
Received-SPF: pass (domain of aol.com designates 205.188.169.19 as permitted sender)
X-YMailISG: x
X-Originating-IP: [205.188.169.19]
Authentication-Results: mta1058.mail.ir2.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=mx.aol.com;
dkim=pass (ok)
Received: from 127.0.0.1 (EHLO oms-dd02.mx.aol.com) (205.188.169.19)
by mta1058.mail.ir2.yahoo.com with SMTPS; Fri, 31 Jan 2014 12:04:09 +0000
Received: from mtaout-mae02.mx.aol.com (mtaout-mae02.mx.aol.com [172.26.254.142])
by oms-dd02.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id 8798E3800018F
for <x>; Fri, 31 Jan 2014 07:04:08 -0500 (EST)
Received: from my-server (unknown [192.154.110.237])
by mtaout-mae02.mx.aol.com (MUA/Third Party Client Interface) with ESMTPA id 1E6A038000089
for <x>; Fri, 31 Jan 2014 07:04:08 -0500 (EST)
From: "Yahoo!" <Dvdlaniado@aol.com>
Subject: [Bulk] ********WARNING********
To: x
Content-Type: multipart/alternative; boundary="pgDbC4x0t6bueXlwjKUIokd=_Otx24MAZu0"
MIME-Version: 1.0
Date: Fri, 31 Jan 2014 04:04:04 -0800
x-aol-global-disposition: S
X-SPAM-FLAG: YES
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20121107; t=1391169848;
bh=2m4T2v/+UST8P6M0sz3JeAJH1PrIy8RH/aOI+2ZEhyo=;
h=From:To:Subject:Date:MIME-Version:Content-Type;
b=sJa6D+vqxzHYo5RxE2P0HNiRLmeJvEu8hlxLsdjAUd8Stn8nhuwxn/oHGCczO4wBN
HU06V4tJA5GYQHx7mRnpbBGtL0FQiGPPU3nS680YuEF4hESK05B0U6F5+GWqFR7iNo
B25t8FYHHNTUhJloDzVK6ogDdUr6qnc8B5/xamKE=
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1afe8e52eb9138107e
X-AOL-IP: 192.154.110.237
Body:
Dear User,
We noticed a login attempt to your account from an unrecognized device on Friday, Jan 31, 2014 10:30 AM GST from Fiji Island.
Was this you? If so, please disregard the rest of this email.
Thanks,
Mail Account Services
Please do not reply to this message. Mail sent to this address cannot be answered.
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
Apple Phishing Scam - Update Your Apple Billing InformationYahoo! Phishing Scam - U P D A T E
Its Help Desk E-Mail Hack Phishing Scam
INTUIT Phishing Scam - Employer contributions report
UPS Phishing Scam - UPS Tracking Number H4122908562
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
Yahoo! sending e-mail warning notifications via a free AOL account? This alone should be enough to spell SCAM!
So if it was you, you should regard the bottom part of the e-mail but not the upper part? What should you do with the upper part? Print it out and hang it against the wall?
Yeah, they can detect a login attempt from Fiji, but they can't even identify the account holder's name. A generic greeting in an e-mail like this, always tells you it is a scam.