RSS

16 Dec

Phishing Attack – Scam

EMAIL: camille.ngothe.perso.sfr.fr/fox.online.php?Section

(Spoofed link sent by the unknown user. Both the originating IP and the received IP are blacklisted on numerous anti-spam sites as well. This email was not only sent to me, but send to other indiviguals as well. Including Craigslist job posters.)

HEADER:

Return-Path: <annsouth@bellsouth.net>
X-YahooFilteredBulk: 98.136.218.182
Received-SPF: none (domain of bellsouth.net does not designate permitted sender hosts)
X-YMailISG: daZKockWLDso93P0mc6Hosbmjyn78Hjdup6M.j9klX6Ksjno hs6Wb2CDN93hfKs6UuH_Fbat_sAqGs5XT0_DuB738FiqYXZaSkuZ0wT0taim DGLl1m4v3VTElouokm0c3zZqSCJwe9GrWBUuQ_33GWEL2m3NViqnLhVBUxIM FdE9ZRFZP.scRtXy9TW7iMsPUeXCLBKEFnbeTBJdgQZkngB0yCLxJr3iYmQO qOeMn5ieiKCXhZvWj_XPDD2adm4A84DbOEicL3oCwGa_AJNMfmukZEs0koWh CY4kxsaxrTd7qir9QEgDbubweyoCyiaVfPxMJDvgt8PjVWFse7.aLYgoUgoI ShZDAVfylUHi8d3KeeqoHIHzpwsf4fDS0RZvtMEP0IMkie6UJk1Ys1Rl4pwu 9oH58gO92H.ziJuMfCiVDE9JE7rIb.n6PjJoyziEfAElY1ZL393dcZqB0L6E t3RAy68DmU9vQn0z6.zu5U2S66dKFNFb_pcUnqWuf0ZTWCZeo.RvTWgyNhl0 mi0rCEB3yAMumQA2PssKOhEnwKbBiDoF3fVj0_IGa5dWVxJijyj1TO7rIcxy iqaOgnkr7dokn54Ei1IO7oGdqeJ6ZCM4rgjzBCADfk5.RoaaCIqCkJzOpcB_ RUaV2eRrWhyxzZo8JdydVARCuJseB_YuehayLPROPO7W6VHLGVzabrHm85aO B1x9IqXxq81Pk5XijMFNogO.mVzl2q5MUEjtGVoi2UPrp.fnoovtKISS7JXI Na5Ps90cNbGHy2hcDeNgkpbPPetDw9kPBCXQYklbidrhV_7zRfUE_mv_Xvat 94lGwrifHGtjXLj2G_JbsyOcCPKDQbP1hvULaros1Yrq0MdwBb8STMHGmhGf iM2W77hVT8ksOw4DHEI7T_lqwvCNWa4cOSwV.qJ5YVi9u9bxW9bGOz_XQTGo 3JvCjbtgm..Hm8msm3tRSKHOttQAVG4jD9zxxzd_x.G_JRJJ1CoRgkkepOVu LU612cqcVMn9MM.C1IIzcWDmkKDPraIiPr.UtyMpeCefvfiqjf4pj5JlWp0n 5M4vzTRM4YnDuwGjQ5mPNSpjl.Q5UPaSvD.HkyUR9ZpKgZqq0KZDsjKTVhO5 kXCvlV2atV4pqDE3RrHbxqs8RRAKyGcDth9uuIB4MoO8lDld9eKkZLgJpQuP dN9EPLFi5lx7K7jr1NnJyn9CvD8cHRC5Y2Y3xZGU7BcRWoriw28skZADZ.CW 8mpjvcAn0DIqAjdYbJgNp.IYCjH5EIxsVW6VVtlOBkyIQE05g7pSP4gHyzON x.OPmyfL69zAdhtIMILs2Bz4ukhpKJEFb9xuoU6dZLM-
X-Originating-IP: [98.136.218.182]
Authentication-Results: mta1242.mail.mud.yahoo.com from=bellsouth.net; domainkeys=pass (ok); from=bellsouth.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm5-vm7.bullet.mail.gq1.yahoo.com) (98.136.218.182) by mta1242.mail.mud.yahoo.com with SMTP; Sat, 15 Dec 2012 21:55:11 -0800
Received: from [98.137.12.62] by nm5.bullet.mail.gq1.yahoo.com with NNFMP; 16 Dec 2012 05:55:11 -0000
Received: from [98.139.44.81] by tm7.bullet.mail.gq1.yahoo.com with NNFMP; 16 Dec 2012 05:55:11 -0000
Received: from [127.0.0.1] by omp1018.access.mail.sp2.yahoo.com with NNFMP; 16 Dec 2012 05:55:11 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 507237.19419.bm@omp1018.access.mail.sp2.yahoo.com
Received: (qmail 41730 invoked by uid 60001); 16 Dec 2012 05:55:11 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bellsouth.net; s=s1024; t=1355637310; bh=PAfNiz4XkEOo3v7JqeFF8gsCNfBxpW91ClX7ENbqg9A=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=RmFj8/RgsWq+yE3qnx2k2THtlaBwcJqicMKPNN6ebvhNT8DqBkgiN+++1KJ7WPBsxO53YiJEyTbVIrlUv70E1SMJcAkcb+oz6Y9Ami+sUeA8VQWqaiWyfQnDkxG686fc6KebqqCcB0e+I4byxBAiBV+Gfy5wfJRsl6kmS1zXesM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=bellsouth.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=iaIIjkzU2cbQwEHFpegy6PQH/M4muu6rtLQ7dwgPeDayY8Bdvrfa/poeDQRBq5U65qUal3NYqCdPQ3QyfepKB+fSwEGcyBRCB/Y+ZJy0IuzpgPWVgi49uYo+Ma5vXPa3dDYJ7HJIiTA7j1WgQaMw1eKyEgpg3ZQ2VHxbBGEYtkA=;
X-YMail-OSG: ARxshnsVM1l9wrHtMyIyE9W11k5u8._H2k98cNeQpLqYSx2 Kb9qnTv8g.UmEyD8WhOExplw1ecXK4Kq5gtTMNlDNf5Kp53u_neDfqoTRN.V aOrojkU7cRjKoEBI6cxSptSygZH9pig_KwvFQhCi6msntlhHcJTpPRay0CgX U4jdwcifyBEU0sVXZJBZen3GFLgX6Prf9_DohCAJiqJ_zQTipILccZQqxxH0 b1BO1OokNHLrdaNqaUyrIuJdIHTOogR9Fygvoes_BeqjaAItq3lGbWDuTUGi 2h5eAZiH2qz9ra0_YxcKx6SQCi6BkMoXQ6b56eOVVfbDckMKwp51hlOmLQ9c W4_vOZU8dQooj6g2nfwRHKCe8657mrvbdFnQ6xtGWfVtxuLbjkacJNa.e7f_ Ua3HVTzhlwFZL.RaEq4e1OAOA8k4f3c3h0B8JCLUvAXs35M2Gl.sf.t8km8f yHbVjwAbrbH8vzcn22fzlNFQVPodGl0GcXtihjNRIEnYfGsgBxFYy.mr3B75 x1lDMs_rhtDrZnKQAMvCCC17FGYYa.S20I7.8FSXiFn_E5bIBm2EPkBlfWJY zEQ–
Received: from [180.194.172.247] by web184804.mail.gq1.yahoo.com via HTTP; Sat, 15 Dec 2012 21:55:10 PST
X-Mailer: YahooMailWebService/0.8.128.478
Message-ID: <1355637310.41678.BPMail_high_carrier@web184804.mail.gq1.yahoo.com>
Date: Sat, 15 Dec 2012 21:55:10 -0800 (PST)
From: Ann South <annsouth@bellsouth.net>
Subject: FW:Hello!
To: charlesalicecoates@yahoo.com, jessyhammy0@gmail.com, my-email@yahoo.com, donnabutlerfamily@gmail.com, teamrecruitment831@yahoo.com, nkmt9-3426516780@job.craigslist.org, katielynn.rn@gmail.com, joselogan657@gmail.com, jusciunta@gth3ee.org

X-YAHOO-FILTER-BULK: 98.136.218.182 RECEIVED-IP: 180.194.172.247

 

Advertisements
 

Tags: , , , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: