Yahoo! ACCOUNT UPDATE
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Mon Apr 7 18:34:04 2014
X-Account-Key: account2
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 188.125.69.159; Mon, 07 Apr 2014 09:21:14 +0000
X-YahooFilteredBulk: 98.138.91.227
Received-SPF: pass (domain of yahoo.com designates 98.138.91.227 as permitted sender)
X-YMailISG: x
X-Originating-IP: [98.138.91.227]
Authentication-Results: mta1024.mail.ir2.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com;
dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm5-vm5.bullet.mail.ne1.yahoo.com) (98.138.91.227)
by mta1024.mail.ir2.yahoo.com with SMTPS; Mon, 07 Apr 2014 09:21:13 +0000
Received: from [98.138.101.128] by nm5.bullet.mail.ne1.yahoo.com with NNFMP; 07 Apr 2014 09:21:12 -0000
Received: from [98.138.84.40] by tm16.bullet.mail.ne1.yahoo.com with NNFMP; 07 Apr 2014 09:21:12 -0000
Received: from [127.0.0.1] by smtp108.mail.ne1.yahoo.com with NNFMP; 07 Apr 2014 09:21:12 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1396862472;
bh=fkwURKP99W21zd7bGJdvDLk0X6BHAtNITqQ9Cd4E3tU=;
h=X-Yahoo-Newman-Id:Message-ID:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:X-Rocket-...
t-Type:MIME-Version:Date:X-Antivirus:X-Antivirus-Status;
b=tVIsqi7MFFsvn5Z2n87Bs9gqSP/vXjznqaWU1EtR+YLghsFtTBmeZUMQdaGFqK5VeXkw6jDbs2mOkDN58d9Owz0...
+/n/df+/F6vxxLyFWRSrt/2twllDOCpeM7zUjHS5v4nYt4b5W10m4=
X-Yahoo-Newman-Id: 148414.80449.bm@smtp108.mail.ne1.yahoo.com
Message-ID: <x@smtp108.mail.ne1.yahoo.com>
X-YMail-OSG: Lo0XltkVM1nP80SgBn8OdcqkUV856a5I933_QJkwNhlJeon
zcmn77ufAwJmJ5TltNS_kqBEBDVWlTug.xFjArhbfzP2EVD_ZaynQS1lrtBT
nzCd68LhOWDoqBY_QX7gF4pFNGIUkh.shOza7JVN6eDaZHesnGLr4yWHqRvL
nyuWFoTvTkz1iygW0zcrewpqvoKDsjfpGoz3P05nncS64xEBcMOMK.v3L6w8
.DPNtE93J3YVNhtA9SFEKDsL.ar5lALCiW5gRhs7ezMX4md8Xm3vkomuFdGO
g.Su4XEfjOibzr7DpZ7ctXQYiSGH.5SGeD1O2VrKOJ2s7TaPrIGMaERhw2hN
J71lSUYxIa6wjbVD7_OgsetMbuPOZnM_lmqa9RHBry6mSFSPCOSmC4vpEQO7
VCyYBuoNORURx4STJTppCyGz_u_.A3MMeYcZKA5sQ5UG7VG2wStmW1QPC5ek
SmqIyUN5LZl7F8G8eLTvmDLumsQVGrTLeYybBzIzJd4Sck3YocIVDSMawZaF
VVEPZnNGR6r4J2eUOTKKEnuQgqKgWHwK7A.cst3astyNaN_aC5U1i8ttUT_E
inJ.kcKc0CmXrnFA4lbSM4j4aqpPdwrkX4mrmFaclMiYEhwdHo4UjeQ_6CQQ
PTwJtiMsQNss5rRze8ltgEVT1RiVI86GR
X-Yahoo-SMTP: cZXO1JeswBDssVdUbk1LoojFJ4SH5vqq
From: "Yahoo!" <navintalwar@yahoo.com>
Subject: [Bulk] ACCOUNT UPDATE
To: x
Content-Type: multipart/alternative; boundary="rgmP8TIQMVkBfE7mD7vGb=_xUQQT98QhGK0"
MIME-Version: 1.0
Date: Mon, 7 Apr 2014 10:21:09 +0100
X-Antivirus: avast! (VPS 140407-0, 04/07/2014), Outbound message
X-Antivirus-Status: Clean
X-Account-Key: account2
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 188.125.69.159; Mon, 07 Apr 2014 09:21:14 +0000
X-YahooFilteredBulk: 98.138.91.227
Received-SPF: pass (domain of yahoo.com designates 98.138.91.227 as permitted sender)
X-YMailISG: x
X-Originating-IP: [98.138.91.227]
Authentication-Results: mta1024.mail.ir2.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com;
dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm5-vm5.bullet.mail.ne1.yahoo.com) (98.138.91.227)
by mta1024.mail.ir2.yahoo.com with SMTPS; Mon, 07 Apr 2014 09:21:13 +0000
Received: from [98.138.101.128] by nm5.bullet.mail.ne1.yahoo.com with NNFMP; 07 Apr 2014 09:21:12 -0000
Received: from [98.138.84.40] by tm16.bullet.mail.ne1.yahoo.com with NNFMP; 07 Apr 2014 09:21:12 -0000
Received: from [127.0.0.1] by smtp108.mail.ne1.yahoo.com with NNFMP; 07 Apr 2014 09:21:12 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1396862472;
bh=fkwURKP99W21zd7bGJdvDLk0X6BHAtNITqQ9Cd4E3tU=;
h=X-Yahoo-Newman-Id:Message-ID:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:X-Rocket-...
t-Type:MIME-Version:Date:X-Antivirus:X-Antivirus-Status;
b=tVIsqi7MFFsvn5Z2n87Bs9gqSP/vXjznqaWU1EtR+YLghsFtTBmeZUMQdaGFqK5VeXkw6jDbs2mOkDN58d9Owz0...
+/n/df+/F6vxxLyFWRSrt/2twllDOCpeM7zUjHS5v4nYt4b5W10m4=
X-Yahoo-Newman-Id: 148414.80449.bm@smtp108.mail.ne1.yahoo.com
Message-ID: <x@smtp108.mail.ne1.yahoo.com>
X-YMail-OSG: Lo0XltkVM1nP80SgBn8OdcqkUV856a5I933_QJkwNhlJeon
zcmn77ufAwJmJ5TltNS_kqBEBDVWlTug.xFjArhbfzP2EVD_ZaynQS1lrtBT
nzCd68LhOWDoqBY_QX7gF4pFNGIUkh.shOza7JVN6eDaZHesnGLr4yWHqRvL
nyuWFoTvTkz1iygW0zcrewpqvoKDsjfpGoz3P05nncS64xEBcMOMK.v3L6w8
.DPNtE93J3YVNhtA9SFEKDsL.ar5lALCiW5gRhs7ezMX4md8Xm3vkomuFdGO
g.Su4XEfjOibzr7DpZ7ctXQYiSGH.5SGeD1O2VrKOJ2s7TaPrIGMaERhw2hN
J71lSUYxIa6wjbVD7_OgsetMbuPOZnM_lmqa9RHBry6mSFSPCOSmC4vpEQO7
VCyYBuoNORURx4STJTppCyGz_u_.A3MMeYcZKA5sQ5UG7VG2wStmW1QPC5ek
SmqIyUN5LZl7F8G8eLTvmDLumsQVGrTLeYybBzIzJd4Sck3YocIVDSMawZaF
VVEPZnNGR6r4J2eUOTKKEnuQgqKgWHwK7A.cst3astyNaN_aC5U1i8ttUT_E
inJ.kcKc0CmXrnFA4lbSM4j4aqpPdwrkX4mrmFaclMiYEhwdHo4UjeQ_6CQQ
PTwJtiMsQNss5rRze8ltgEVT1RiVI86GR
X-Yahoo-SMTP: cZXO1JeswBDssVdUbk1LoojFJ4SH5vqq
From: "Yahoo!" <navintalwar@yahoo.com>
Subject: [Bulk] ACCOUNT UPDATE
To: x
Content-Type: multipart/alternative; boundary="rgmP8TIQMVkBfE7mD7vGb=_xUQQT98QhGK0"
MIME-Version: 1.0
Date: Mon, 7 Apr 2014 10:21:09 +0100
X-Antivirus: avast! (VPS 140407-0, 04/07/2014), Outbound message
X-Antivirus-Status: Clean
Body:
Dear Yahoo User
Your two incoming mails were placed on pending status due to the recent upgrade to our database, In order to receive the messages CLICK HERE to login and wait for responds from Yahoo.
Yahoo Customer Care Team
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
Orchard Bank Phishing Scam Account Alert Statement AvailableYahoo Phishing Scam - ********WARNING********
Its Help Desk E-Mail Hack Phishing Scam
UPS Phishing Scam - UPS Tracking Number H4122908562
Parcel Delivery Malware Spam - UPS Shipping service report Q76WQCOQBV
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
Why just two? What does pending mean in this context? Are the messages hanging in thin air until the user logs in? Why does a database upgrade affect the mail server. None of this makes sense. Why? Because it is a scam devised by an idiot!
Responds? If we log in, will we receive the messages placed on pending status or some responds from Yahoo?
Hopefully this e-mail will confuse Yahoo users so much that they will ignore it... hey, wait a minute, they said two messages were placed on pending status, but technically you just logged in to download this one. So what's the purpose of this message then? Food for thought....