WARNING – EMAIL SCAM / UPS PHISHING ATTACK
Account Suspended: Update Your Information
From: “UPS Courier Service” <email@example.com>
UPS Courier Service!
This message is to confirm that your online access have been suspended due to billing error.
We will review the activity on your account with you and upon verification, we will remove any retrictions placed on your account
We hope you enjoy the ease and convenience you’ll get with the ability to manage your UPS accounts from almost anywhere you are.
To access and activate your account, simply click the link below.
https://www.ups.com/us/activation ← ATTN: This is a spoofed link and NOT a legit UPS website.
The entire activation should take only 5 minutes of your time. Please complete the activation by now
Thank you for being a valued customer
Received-SPF: none (domain of u16050260.onlinehome-server.com does not designate permitted sender hosts)
Authentication-Results: mta1534.mail.bf1.yahoo.com from=ups.com; domainkeys=neutral (no sig); from=ups.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO u16050260.onlinehome-server.com) (18.104.22.168) by mta1534.mail.bf1.yahoo.com with SMTP; Thu, 09 May 2013 01:29:45 +0000
Received: by u16050260.onlinehome-server.com (Postfix, from userid 10013) id CEB65D099; Mon, 6 May 2013 21:24:17 -0400 (EDT)
From: UPS Courier Service firstname.lastname@example.org
Subject: Account Suspended: Update Your Information
X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version ]