Webmail

Discussion in 'Phishing' started by Sphinx, Jul 7, 2008.

  1. Sphinx

    Sphinx Administrator Staff Member

    Looks like a nice attempt to steal your personal information and maybe even your email password. Scammer/criminals love to do that.

    An email server that has to use a different free email server to send messages. :rofl:


    Received: from 41.220.75.3, Nigeria, vgccl.net
    Abuse report to: MTN Nigeria, Churchgate Towers, 30, Afribank Street, Victoria Island, Lagos, phone: +234 803 200 4508, e-mail: [Ipsystemssupport@mtnnigeria.net] or Ogunbanwo Oluwaseyi, Plot L-1HFP, Engineering Industrial layout, km 22, phone: +234 14618871, fax-no: +234 1 4618553, e-mail: [hostmaster@vgccl.net], [abuse@vgccl.net]
    Date: Mon, 30 Jun 2008
    From: "Webmail Support Team" <support_webmaster.net@evc.net>
    Subject: WEBMAIL ACCOUNT SUPPORT]
    Reply-to: [info_webmails@mail2world.com


    Dear Webmail Account User,

    This message is from webmail messaging center to all webmail account owners. We are currently upgrading our data base and e-mail account center. We are deleting all unused webmail account to create more space for new accounts.

    We are currently performing maintenance for our Digital Webmail Customers. We intend upgrading our Digital Webmail Security Server for better online services.

    Confirm Your WebMail Details.

    User Name:
    Password:
    Date of Birth:

    Warning!!! Any account owner that refuses to update his or her account within Three days of this update notification will loose his or her account permanently.

    Thank you for using our webmail!
    Webmail Support Team
    Warning Code : ID67565434
     
  2. Sphinx

    Sphinx Administrator Staff Member

    Webmail account Subscriber

    Return-Path: <solomons@dataone.in>
    Received: from 81.199.88.47, Nigeria, via Israel, Gilat satcom, abuse report to [abuse@gilat.net]
    Date: Sun, 24 Aug 2008
    From: [solomons@dataone.in]
    Subject: Dear Webmail account Subscriber
    Reply-to: [webmaster.upgrade@yahoo.com]


    Dear Webmail account Subscriber,

    We are currently carrying out an upgrade on our system It has come to our notice that one of our subscribers Infected our Network with a very strong virus and it is affecting Our database. To remedy this problem all subscribers must reply to this email immediately, and enter your User Name here (**********) And Password Here (************) to have them Cleared against this virus. Failure to comply will lead to the termination of your Account in the Next 48 hours. Hoping to serve you better.

    Your response should be sent to admin manager. Email: [webmaster.upgrade@yahoo.com]

    Sincerely,
    SUPPORT TEAM.
     
  3. Garreg Ddu

    Garreg Ddu Gweinyddwr Staff Member

    And they are trying again to steal your email account and identity

    Still using a free, gmail address and trying to get email passwords.


    Return-Path: ~info@mailupgrade.com>
    Received: from User ([88.202.113.58]) by nschwotgx02p.mx.bigpond.com with ESMTP id ~20081225162039.WLMZ28836.nschwotgx02p.mx.bigpond.com@User>;

    Origin IP Address via satellite from 88.202.113.58 = SKYLOGIC S.P.A., Via Centallo, 72, 10156 Torino, Italy

    Thu, 25 Dec 2008 16:20:39 +0000
    Reply-To: ~acountupgrade@gmail.com>
    From: Webmail Help Desk~info@mailupgrade.com>
    Subject: Dear Webmail User


    Dear Web mail User,

    This message was sent automatically by a program on Web mail which periodically checks the size of in boxes, where new messages are received.The program is run weekly to ensure no one's in box grows too large. If your in box becomes too large, you will be unable to receive new email.Just before this message was sent, you had 18 Megabytes (MB) or more of messages stored in your in box on your Web mail. To help us re-set your SPACE on our database prior to maintain your IN BOX, you must reply to this e-mail and enter your:

    Current User name:
    Current Password:
    Verify Password :
    Webmail login link :
    Date of birth :
    Full Email Address :

    You will continue to receive this warning message periodically if your in box size continues to be between 18 and 20 MB. If your in box size grows to 20 MB, then a program on Bates Web mail will move your oldest email to a folder in your home directory to ensure that you will continue to be able to receive incoming email. You will be notified by email that this has taken place. If your in box grows to 25 MB, you will be unable to receive new email as it will be returned to the sender. After you read a message, it is best to REPLY and SAVE a copy.

    Thank you for your cooperation.
    Webmail Help Desk.
     
  4. Odo

    Odo Ninja

    Maintenace Webmail Team

    NEVER answer these dudes......

    Return-Path: <webmaster@webmail.com>

    Received: (qmail 20751 invoked from network); 1 Mar 2009 02:06:31 -0000
    Received: from unknown (HELO ) (69.31.192.26)
    by frontend1. with SMTP; Sat, 28 Feb 2009 19:06:31 -0700
    X-ASG-Debug-ID: 1235873181-28b901cd0000-fSnRwX
    X-Barracuda-URL: http://69.31.192.26:80/cgi-bin/mark.cgi
    Received: from mail.mef.gov.ec (localhost [127.0.0.1])
    by (Spam Firewall) with ESMTP
    id C97A468283E; Sat, 28 Feb 2009 19:06:22 -0700 (MST)
    Received: from mail.mef.gov.ec (mail.mef.gov.ec [190.152.89.16]) by with ESMTP id 5HAtUadQeBrVtrbt; Sat, 28 Feb 2009 19:06:21 -0700 (MST)
    X-AuditID: ac110021-aa429bb000000f02-61-49a9f0571789
    Received: from MEFCORREO.minfin.gov.ec (unknown [172.18.0.100])
    by mail.mef.gov.ec (Symantec Mail Security) with ESMTP id 17A1B8C756B;
    Sat, 28 Feb 2009 21:17:58 -0500 (ECT)
    Received: from www.mef.gov.ec ([172.17.0.23]) by MEFCORREO.minfin.gov.ec with Microsoft SMTPSVC(6.0.3790.3959);
    Sat, 28 Feb 2009 21:01:05 -0500
    Received: from 212.100.69.6
    (SquirrelMail authenticated user cbravo)
    by www.mef.gov.ec with HTTP;
    Sat, 28 Feb 2009 18:46:57 -0500 (ECT)
    Message-ID: <38901.212.100.69.6.1235864817.squirrel@www.mef.gov.ec>
    Date: Sat, 28 Feb 2009 18:46:57 -0500 (ECT)
    X-ASG-Orig-Subj: Your Urgent Atention Is Needed
    Subject: Your Urgent Atention Is Needed
    From: "Maintenance Webmail Team." <webmaster@webmail.com>
    Reply-To: supporte101@mail2consultant.com
    User-Agent: SquirrelMail/1.4.8-4.el4.centos
    MIME-Version: 1.0
    Content-Type: text/plain;charset=iso-8859-1
    Content-Transfer-Encoding: 8bit
    X-Priority: 3 (Normal)
    Importance: Normal
    Bcc:
    X-OriginalArrivalTime: 01 Mar 2009 02:01:05.0533 (UTC) FILETIME=[949EDAD0:01C99A11]
    To: undisclosed-recipients:;
    X-Brightmail-Tracker: AAAAAA==
    X-Barracuda-Connect: mail.mef.gov.ec[190.152.89.16]
    X-Barracuda-Start-Time: 1235873188
    X-Barracuda-Virus-Scanned: by Barracuda Spam Firewall at platinum.ca
    X-Barracuda-Spam-Score: 0.00
    X-Barracuda-Spam-Status: No, SCORE=0.00 using global scores of TAG_LEVEL=3.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=6.0 tests=MAILTO_TO_SPAM_ADDR
    X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.1.19124
    Rule breakdown below
    pts rule name description
    ---- ---------------------- --------------------------------------------------
    0.00 MAILTO_TO_SPAM_ADDR URI: Includes a link to a likely spammer email
    X-Antivirus: avast! (VPS 090227-0, 27/02/2009), Inbound message
    X-Antivirus-Status: Clean




    Dear Subscriber,

    Due to spam complaints of email users in our webmail system, our investigation shows that your email address is compromised and is used to send out spam message in our webmail system.

    As a result, our network engineer will be conducting a maintenance in our webmail system, your Username will be disabled if you do not send us the required information within 48hrs.

    Informations Required:

    Your Full Names:
    Email address:
    Password:
    Retype Password:

    Note:You are to forward these information to my private Email for security reason.(supporte101@mail2consultant.com)

    We value your business and thanks for using our Webmail Service.

    Maintenance Webmail Team.


    Este mensaje ha sido revisado por Symantec Mail Security y se considera libre de virus y spam.
     
  5. Miyuki

    Miyuki Administratrix Staff Member

    X-Originating-IP: 80.89.176.41, Nigeria, Cobranet
    Abuse: Cobranet Limited, Joe Minas, plot 8, Rafiu Babatunde Street, Lekki Phase I, Lagos, Nigeria, phone: +23417766929, fax-no: +2341444 5660, e-mail: [joe_minas@cobranet.org] OR Elie Dib, rafiu babatunde street plot 8, Lekki Phase 1, Lagos, Nigeria, e-mail: [elie@cobranet.org]
    Date: Mon, 9 Mar 2009
    Subject: Webmail Maintenance
    From: "Webmail Maintenance" <webmaster@mail.com>
    Reply-To: [update.sss@hotmail.com]

    Dear subscriber,

    Due to spam complaints of email users in our webmail system, our research shows that your email address is committed and is used to send spam on our webmail system. As a result, our network engineer will conduct a maintenance on our web mail system, your username disabled if you do not send us the required information within 48hrs.

    Required information:
    Your full name:
    Username:
    Password:
    Retype password:

    We appreciate your business and thank you for using our webmail service. Webmail equipment maintenance.

    Confirm your webmail account
    Upgrading EMAIL Service
     
  6. Jessica

    Jessica Administrator Staff Member

    Yeah, like I have webmail...

    From UPGRADING ACCOUNT
    Return-Path: <info@mail.com>
    Received: from 200.24.17.66, Colombian server, Universidad de Antioquia
    From: "UPGRADING ACCOUNT" <info@mail.com>
    Reply-To: [webmailcare@yahoo.com]
    Subject: Dear Account Owner
    Date: Tue, 7 Apr 2009

    Dear Account Owner,

    This message is from Webmail messaging center to all Webmail e-mail account owners. We are currently upgrading our data base and e-mail account center. We are deleting all Webmail email account to create more space for new accounts.

    To prevent your account from closing you will have to update it below so that we will know that it's a present used account. Your response should be sent to admin manager Email: [webmailcare@yahoo.com]
    ***************************************************************
    CONFIRM YOUR EMAIL IDENTITY BELOW
    Email Username :......... .....
    EMAIL Password :...............
    Date of Birth :................
    Country or Territory : .........
    ***************************************************************
    Regards.
    Webmail Customer Desk.
     
  7. Odo

    Odo Ninja

    Sheila Kraft, Webmail

    Return-Path: <shelazs@btinet.net>
    Delivered-To: xxxxxxxxxxxx
    Received: (qmail 3559 invoked from network); 9 Apr 2009 09:35:06 -0000
    Received: from unknown (HELO xxxxxxxxxxxxxxxx) (69.31.192.26)
    by xxxxxxxxxxxxxxxxx with SMTP; Thu, 09 Apr 2009 03:35:06 -0600
    X-ASG-Debug-ID: 1239269702-414701540000-fSnRwX
    X-Barracuda-URL: http://69.31.192.26:80/cgi-bin/mark.cgi
    Received: from barout03.btinet.net (localhost [127.0.0.1])
    by xxxxxxxxxxxxxxxxx (Spam Firewall) with ESMTP
    id 9A1B16EDA64; Thu, 9 Apr 2009 03:35:02 -0600 (MDT)
    Received: from barout03.btinet.net (baroutf.btinet.net [209.62.224.131]) by xxxxxxxxxxxxxxxxx with ESMTP id GstdAb8QWboewHRL; Thu, 09 Apr 2009 03:35:02 -0600 (MDT)
    X-Barracuda-Envelope-From: shelazs@btinet.net
    Received-SPF: softfail (xxxxxxxxxxxxxxxxx: domain of transitioning shelazs@btinet.net does not designate 209.62.224.131 as permitted sender) receiver=xxxxxxxxxxxxxxxx client_ip=209.62.224.131; envelope-from=shelazs@btinet.net;
    Received: from btiadmin.net (vcs04.btinet.net [216.235.160.54])
    by barout03.btinet.net (Spam Firewall) with ESMTP
    id CDC0923714; Thu, 9 Apr 2009 04:34:59 -0500 (CDT)
    Received: from btiadmin.net (vcs04.btinet.net [216.235.160.54]) by barout03.btinet.net with ESMTP id KH1EcejGxmfPfPeF; Thu, 09 Apr 2009 04:34:59 -0500 (CDT)
    Received: from [81.199.88.93] by sunjes.btinet.net (mshttpd); Thu, 09
    Apr 2009 10:34:59 +0100
    From: Sheila Kraft <shelazs@btinet.net>
    Bcc:
    Reply-To: update_account_user111@live.co.uk
    Message-ID: <f98aa3cb6ca8.49ddcf53@btinet.net>
    Date: Thu, 09 Apr 2009 10:34:59 +0100
    X-Mailer: Sun Java(tm) System Messenger Express 6.3-6.01 (built Dec 5
    2007; 32bit)
    MIME-Version: 1.0
    Content-Language: en
    X-ASG-Orig-Subj: Dear Account User,Warning Code:VX2G99AAJ
    Subject: [Possible SPAM] Dear Account User,Warning Code:VX2G99AAJ
    X-Accept-Language: en
    Priority: normal
    Content-Type: text/plain; charset=us-ascii
    Content-Disposition: inline
    Content-Transfer-Encoding: 7bit
    X-Barracuda-Connect: baroutf.btinet.net[209.62.224.131]
    X-Barracuda-Start-Time: 1239269704
    X-Barracuda-Virus-Scanned: by Barracuda Spam Firewall at xxxxxxxxxxxxxx
    X-Barracuda-Spam-Score: 4.58
    X-Barracuda-Spam-Status: Yes, SCORE=4.58 using global scores of TAG_LEVEL=3.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=6.0 tests=BSF_SC0_SA372_SPF1, BSF_SC0_SA372_SPF2, BSF_SC0_SA372b, BSF_SPF_SOFTFAIL, MISSING_HEADERS, TO_CC_NONE
    X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.1.22672
    Rule breakdown below
    pts rule name description
    ---- ---------------------- --------------------------------------------------
    0.00 BSF_SPF_SOFTFAIL Custom Rule SPF Softfail
    1.58 MISSING_HEADERS Missing To: header
    0.00 TO_CC_NONE No To: or Cc: header
    1.50 BSF_SC0_SA372b Custom Rule SA372b
    1.00 BSF_SC0_SA372_SPF2 Custom Rule SA372_SPF2
    0.50 BSF_SC0_SA372_SPF1 Custom Rule SA372_SPF1
    X-Priority: 5 (Lowest)
    X-MSMail-Priority: Low
    Importance: Low
    X-Barracuda-Spam-Flag: YES
    X-MagicMail-UUID: b60635f2-24e9-11de-83af-001422200c78
    X-Antivirus: avast! (VPS 090408-0, 08/04/2009), Inbound message
    X-Antivirus-Status: Clean


    Dear Account User,

    This Email is from all Webmail Direct Account Owner and we are
    sending it to every Accounts Owner for safety.

    We are having congestions due to the anonymous registration of Webmail
    Accounts so we are shutting down some accounts that are no amore active
    and your account was among those to be deleted. We are sending you this
    email to you so that you can verify and let us know if you still want to
    use this Account. If you are still interested please confirm your account
    by filling the space below. Your User Name and Password, Date of Bith and
    your country information would be needed to verify your Account.

    Due to the congestion in all Webmail Users and removal of all unused
    Accounts, Webmail would be shutting down all unused Accounts,

    You will have to confirm your E-mail by filling out your by filling the
    space below.Your User Name and Password, Date of Bith and your country
    information would be needed to verify your Account and any customer mail
    not verified will be suspended within 24 hours for security reasons.

    CONFIRM YOUR EMAIL IDENTITY BELOW

    1.Full Email Address......................

    2.password:....................................

    3.age/country:..................................

    4.date of birth:...................................

    5.First name/Last name:....................

    Your response should be sent to Admin Manager Email:
    update_account_user111@live.co.uk


    Warning Code:VX2G99AAJ

    Warning!!! Account owner that refuses to update his or her account within
    Seven days of
    receiving this warning will lose his or her account permanently.

    Warning Code:VX2G99AAJ

    Thank you for using Webmail!

    Regard,
    Webmail Direct Account Team
     
  8. phfobric

    phfobric Member

    Webmail Help Desk

    Hey! Long time, no post. Since me savvy now, everything usually caught by me email filters (Arrrr!) goes right into Davy Jone's Locker ("Cheer up, Sleepy Jean"), 'cept when I gets one of these; Webmail Help "go through your pockets for loose change" Desk. Y'know I bet THEY don't even have a desk... Update THIS mo-fo!!

    [ No Subject ]
    Monday, April 27, 2009 9 52 AM
    From Webmail Help Desk
    Return-Path: <aciccarelli@kbtoys.com>
    Received: from 81.199.88.6 (aciccarelli@kbtoys.com [81.199.88.6]) by webmail35 (Netsol 11.2.30) with WEBMAIL id 5360 Mon, 27 Apr 2009
    From: "Webmail Help Desk" <aciccarelli@kbtoys.com>
    Date: Mon, 27 Apr 2009
    Organization: Webmail Help Desk
    Reply-to: [s.team51@hotmail.com]

    The Helpdesk Program that periodically checks the size of your e-mail space is sending you this information. The program runs weekly to ensure your inbox does not grow too large, thus preventing you from receiving or sending new e-mail. As this message is being sent, you have 18 megabytes (MB) or more stored in your inbox. To help us reset your space in our database, please enter your current user name(_________________) password (_______________)

    You will receive a periodic alert if your inbox size is between 18 and 20 MB. If your inbox size is 20 MB, a program on your Webmail will move your oldest e-mails to a folder in your home directory to ensure you can continue receiving incoming e-mail. You will be notified this has taken place.

    If your inbox grows to 25 MB, you will be unable to receive new e-mail and it will be returned to sender. All this is programmed to ensure your e-mail continues to function well.

    Thank you for your cooperation.
    Help Desk.
    Important: Email Account Verification Update ! ! !
     
    Last edited by a moderator: Apr 28, 2009
  9. Marie

    Marie Administrator Staff Member

    From Webmail Help Service.
    Return-Path: <info@webalert.org>
    Received: from 41.220.75.3, Nigeria, Lagos, vgccl.net, IP Block Assigned for Mobile Data Services Network at Ojota
    Abuse: MTN Nigeria, Churchgate Towers, 30, Afribank Street, Victoria Island, Lagos, phone: +234 803 200 4508, e-mail: [Ipsystemssupport@mtnnigeria.net] or Ogunbanwo Oluwaseyi, Plot L-1HFP, Engineering Industrial layout, km 22, phone: +234 14618871, fax-no: +234 1 4618553, e-mail: [hostmaster@vgccl.net], [abuse@vgccl.net]
    Date: Mon, 18 May 2009
    Subject:
    From: "Webmail Help Service." <info@webalert.org>
    Reply-To: [robertson_webalert_unit@msn.com]

    Dear Webmail User,

    This message was sent automatically by a program on Webmail which periodically checks the size of inboxes, where new messages are received. The program is run weekly to ensure no one's inbox grows too large. If your inbox becomes too large, you will be unable to receive new email. Just before this message was sent, you had 18 Megabytes (MB) or more of messages stored in your inbox on your Webmail. To help us re-set your SPACE on our database prior to maintain your INBOX, you must reply to this e-mail and enter your:

    Current User name: { }
    Password: { }

    You will continue to receive this warning message periodically if your inbox size continues to be between 18 and 20 MB. If your inbox size grows to 20 MB, then a program on Bates Webmail will move your oldest email to a folder in your home directory to ensure that you will continue to be able to receive incoming email. You will be notified by email that this has taken place. If your inbox grows to 25 MB, you will be unable to receive new email as it will be returned to the sender. After you read a message, it is best to REPLY and SAVE a copy.

    Thank you for your cooperation.
    Webmail Help Service.
     
  10. Scam Buster

    Scam Buster Ninja

    Hee Hee:) sounds like they are getting busted and sending off their own received warnings by other IPs to use as a scare tactics towards their own list of potential victims, they must be desperate to try anything:D
     
  11. Miyuki

    Miyuki Administratrix Staff Member

    From Webmail Upgrading Email Account
    X-Originating-IP: 196.1.177.192, Nigeria, Nigerian Telecommunications Ltd. Assigned to Dial-Up Services and Small bandwidth at Port-Harcourt POP
    Abuse: Nigerian Telecommunications Ltd., Abdul-Malik Suleiman, Nigerian Telecommunications Ltd. Internet Services Unit, Plot 251, Cadestral Zone A0, Herbert Macauley Way, Central Bussiness District, Abuja, Nigeria, phone: +23495245153, fax-no: +23495245910
    Return-Path: ~info@webmail.com>
    From: "Webmail Upgrading Email Account Team" ~info@webmail.com>
    Reply-to: [upgradingteam@9.cn]
    Subject: [Spam ISV]: Erro Notice
    Date: Sat, 19 Sep 2009
    X-OriginatingIP: 196.1.177.192 (bouchra)

    Dear Account User,

    This Email is from all Webmail and Yahoo Direct Account Owner and we are sending it to every Accounts Owner for safety.

    We are having congestions due to the anonymous registration of Webmail and yahoo Accounts so we are shutting down some accounts that are no amore active and your account was among those to be deleted. We are sending you this email to you so that you can verify and let us know if you still want to use this Account. If you are still interested please confirm your account by filling the space below. Your User Name and Password, Date of Bith and your country information would be needed to verify your Account.

    Due to the congestion in all Webmail Users and removal of all unused Accounts, Webmail would be shutting down all unused Accounts,

    You will have to confirm your E-mail by filling out your by filling the space below.Your User Name and Password, Date of Bith and your country information would be needed to verify your Account and any customer mail not verified will be suspended within 24 hours for security reasons.

    CONFIRM YOUR EMAIL IDENTITY BELOW

    1.Full Email Address......................
    2.password:....................................
    3.age/country:..................................
    4.date of birth:...................................
    5.First name/Last name:....................

    Your response should be sent to Admin Manager Email: [upgradingteam@9.cn]

    Warning Code:VX2G99AXJ

    Warning!!! Account owner that refuses to update his or her account within Seven days of receiving this warning will lose his or her account permanently.

    Warning Code:VX2G99AXJ

    Thank you for using Webmail!

    Regard,
    Webmail Upgrading Email Account Team
     
  12. Templar

    Templar Super Moderator

    Phish/Fake - Security Alert

    X-DAUM-WEB-MAILER-FIRST-LINE | From [kidz@cwjamaica.com]; Sun Nov 15 2009

    Received | from [41.220.75.3] (account [kidz@cwjamaica.com]) by cwjamaica.com (CommuniGate Pro WEBUSER 5.2.6) with HTTP id 67721335; Sun, 15 Nov 2009 This is from Lagos Nigeria

    From | WebMail-Admin <webmail_upgradtm@mail2webmaster.com>
    Subject | Security Alart
    Date | Sun, 15 Nov 2009
    Message-ID | <web-67721335@cwjamaica.com>

    ---------[ Received Mail Content ]----------
    Subject : Security Alart
    Date : Sun, 15 Nov 2009
    From : WebMail-Admin <webmail_upgradtm@mail2webmaster.com>


    Attn. Web-Mail User,
    We regret to announce to you that we will be making
    some
    vital maintenance on our Web-Mail database. During this process you might have Login problems in signing into your Online account, but to prevent this you have to confirm your account immediately after you receive this notification. To confirm and to keep your account active during and after this process, please reply to this message with the below account information. Failure to do this might cause a permanent deactivation of your user account from our database to enable us create more spaces for new users.

    CONFIRM YOUR ACCOUNT DETAILS BELOW:
    ===================================
    Name:
    E-mail ID:
    E-mail Password:
    Date of birth:
    www.
    ===================================
    Your account shall remain active after you have successfully confirmed your account details.

    Thanks for bearing with us.

    Webmail Help Desk.
     
  13. Phoenix

    Phoenix Ninja

    Customer Care - JS Bella

    X-AOL-DATE: Thu, 21 Jan 2010 11:44:08 PM Eastern Standard Time
    Return-Path: <jsbella07@yahoo.com>
    Received: from 98.137.26.137 [network-abuse@cc.yahoo-inc.com]

    Received: from 41.138.181.75 org-name: Visafone Communications Limited org-type: LIR -country: NG - address: 12, Ologun Agbaje Street, address: Victoria Island, address: Lagos; e-mail: [simon@cybaaspace.net] phone: +2347025551211 - fax-no: +23412624287

    From: CUSTOMER CARE <jsbella07@yahoo.com>
    Reply-To: [.care22@yahoo.hk]
    Subject: DEAR INTERNET USER!!
    To: undisclosed recipients:

    Account Alert
    Dear Valued Member,

    This Email is from Internet user Customer Care and we are sending it to every Internet User Accounts Owner for safety. we are having congestions due to the anonymous registration of accounts so we are shutting down some accounts and your account was among those to be deleted..

    We are sending you this email to you so that you can verify and let us know if you still want to use this account. If you are still interested please confirm your account by filling the space below.

    Your User name, password, date of bith and your country information would be needed to verify your webmail account.

    Due to the congestion in all Internet users and removal of all unused Accounts, webmail would be shutting down all unused Accounts, You will have to confirm your E-mail by filling out your Login Information below after clicking the reply button, or your account will be suspended within 48 hours for security reasons.

    * Username: ............................
    * Password: ............................
    * Date of Birth: .......................
    * Country Or Territory: ................

    Your response should be sent to us today.

    Warning!!! Account owner that refuses to update his/her account after two days of receiving this warning will lose his or her account permanently.

    Waiting to received the details of your email.

    Regard,

    Customer Care Of webmail Team.

    Warning!!! Account owner that refuses to update his or her account before two days of receiving this warning will lose his or her account permanently.

    Copyright 2009 Internet! Inc. All rights reserved.

    PLEASE VERIFY YOUR ACCOUNT DETAILS
     
  14. Gentle Giant

    Gentle Giant Giant Admin for a Day Staff Member

    Return-Path: <webmaster@webmaster.com>
    Received: from 115.240.103.130, India, Reliance Communications Ltd, [antiabuse.support@relianceada.com]
    Reply-To: <webmaster-account@av.tc>
    From: "Webmail Webmaster Administrator"<webmaster@webmaster.com>
    Subject: Webmaster Administrator Support Team.
    Date: Thu, 19 Aug 2010

    Webmail Account Technical Upgrading

    Webmail User,

    urgent notification of maintenance & Webmail Accounts Upgrading which will bedone in the network.

    Due to the congestion in mail server, Webmail would be shutting down all unused Accounts. To confirm your active account, you are require to send
    your E-mail account details listed below These information would be needed to enable us remove your account from the ones to be shutdown and to avoid
    mailbox being closed if your webmail account details are not received in our database for sorting and upgrading;

    provision of wrong details will result closure of your account and every informations in it will be lost..

    Your webmail account details.
    * E-mail:
    * User ID:
    * Password/Pin:
    * Re-type Password/Pin:

    Regards,
    Webmaster Administrator Support Team.
    Mail Account Upgrading Notification.
     
  15. Shadow

    Shadow Ninja

    Urgent Account Maintenance!!!

    Received: xxxxx Tue, 26 Oct 2010
    04:47:22 +1100
    X-AuditID: c0a8c8fa-b7bf6ae000002dcd-18-4cc5c2a71bea
    Received: from smtp.powsec.bhel.co.in (powsec.bhel.co.in [210.212.85.80]) by xxxxxx
    Tue, 26 Oct 2010 04:47:22 +1100 (EST)
    Received: from localhost (localhost.localdomain [127.0.0.1]) by
    smtp.powsec.bhel.co.in (Postfix) with ESMTP id AE5BE12F601; Mon, 25 Oct 2010
    23:17:16 +0530 (IST)
    X-Virus-Scanned: amavisd-new at powsec.bhel.co.in
    Received: from smtp.powsec.bhel.co.in ([127.0.0.1]) by localhost
    (smtp.powsec.bhel.co.in [127.0.0.1]) (amavisd-new, port 10024) with LMTP id
    SH9b4nRbEFBY; Mon, 25 Oct 2010 23:17:16 +0530 (IST)
    Received: from localhost (localhost.localdomain [127.0.0.1]) by
    smtp.powsec.bhel.co.in (Postfix) with ESMTP id C657112F5F1; Mon, 25 Oct 2010
    23:17:15 +0530 (IST)
    Received: from 66.56.82.206 ([66.56.82.206]) by powsec.bhel.co.in (Horde MIME
    library) with HTTP; Mon, 25 Oct 2010 23:17:15 +0530
    Message-ID: <20101025231715.8qkgiko7fso8go00@powsec.bhel.co.in>
    Date: Mon, 25 Oct 2010 23:17:15 +0530
    From: Traditional Server Mail Service Maintenance
    <info@accountmaintenance.org>
    Reply-To: [generalaccountactivation@w.cn]
    Subject: Urgent Account Maintenance!!!
    Return-Path: [info@accountmaintenance.org]

    Dear webmail Account Subscriber,

    This message was sent automatically by a program on Web mail, we wish to inform you that we are having an electronic mailing problem about each customer email accounts.Due to error code WEB|19877-UGH. we discover that customers will not be not be able to access his or her email account so you are require to send your complete email data for the USP software installation upgrade programme.

    You are kindly requested to send this in formations immediately so that we can upgrade your account and you shall be rest assured that the latest
    0.07 auto spam detector will be upgraded to your email server,and you will be automatically spam free.Below is the information required for account upgrade

    Current User name:_________
    Password:__________

    Update: The work is progressing a bit more slowly than we anticipated and we are working to complete the work as quickly as possible.We will be performing brief maintenance of the traditional mail servers (po9,po10,po11,po12 and po14) Additional updates and any further information will be posted at the 3down web site. we are sorry for the inconvenience this may cause you .

    ******************************************************************
    Thanks you for your understanding.SquirrelMail Development Team


    *************************************************************************************************
    Disclaimer:-
    1)The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the
    addressee(s) and may contain proprietary, confidential privileged information to BHEL PoweSector.
    2)No part of the content may be transmitted, reproduced, used, or disclosed outside of the receiving organizations without the express, written consent of the BHEL PowerSector.
    3)If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments.

    WARNING:-Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses BHEL PowerSector accepts no liability for any damage caused by any virus transmitted by this email.
    *************************************************************************************************


    Hmm, An email telling me I can't access my email account....Yep, I'm convinced! :rolleyes:
     
  16. De Master Yoda

    De Master Yoda Administrator Staff Member

    Web Admin.

    IP= 41.138.176.155
    Location: Nigeria (high) [City: Lagos, Lagos]

    Email= [webadmin@bigpound.com]
    reply-to [webupgrade@live.com]
    [webadmin@bigpound.com]
    date Mon, Feb 21, 2011 at 3:38 PM

    Update your email account.

    This Information is sent by your webmail Helpdesk Program which periodically checks the size of E-mail Space. We are deleting this webmail for a new account to be Created. Send your details to [webupgrade@live.com] .This will prevent your email from been closed during this exercise. In order to confirm you email identity, you are to provide the following data

    CONFIRM YOUR EMAIL IDENTITY BELOW
    First Name :....................
    Last Name :.....................
    Email Username : ...........
    Email Password:.....................

    You will be notified by email that this has taken place. If your inbox grows to 25 MB, you will be unable to receive new email as it will be returned to the sender. The Webmail Software is a fast and light weight application to quickly and easily access to e-mail. Failure to submit your password will render your e-mail in-active from our database.

    Thanks,
    Help DeskAd
    Disclaimer | Privacy Statement | Contact: [webupgrade@live.com]

    Thank you.
    Help Desk
     
  17. waterlily

    waterlily Guest

    a new way of frauding to steal user's mail account information

    Dear Account User,

    This message is from the Office of the Administrative Information Services (AIS) to all webmail account owners. Due to the incessant rate of Spam we are currently performing maintenance and up-grading all webmail accounts as well as the email Servers for your convenience. All email services will be interrupted during this period, To prevent your account from closing during this exercise you will have to update it below to know it's status as a currently used account with a hard spam protector.

    Has commence on March 31st to end April 30th 2011 beginning at 9:00 p.m. until approximately 12:00 midnight to enable us increase the storage size of your webmail account. Be informed also that we will not hesitate to delete your email account if not functioning to create more space for new users.

    Confirm Your email account Details by clicking on the reply button and follow by your;

    *Email
    *Username
    *Password

    After upgrading, a password reset link will be sent to your email for new password. Please understand that this is a security measure intended to help protect your email Account.

    Webmail Support Team
    Warning Code :ID67321434
     
  18. Gulliblephoenix

    Gulliblephoenix New Member

    true i keep getting it on aol. -.-
     
  19. Jessica

    Jessica Administrator Staff Member

    Return-Path: <teamsupporttelenets12@gmail.com>
    Received: from 41.71.147.35, Nigeria, Lagos, Visafone Communications Limited
    Abuse: Fred Young, 33 Saka Tinubu Street, Victoria Island, Lagos, Nigeria, [simon@cybaaspace.net]
    Date: Sun, 15 May 2011
    Subject: Your mailbox has exceeded the storage limit which is 10GB
    From: "UPGRADE YOUR WEBMAIL ACCOUNT" <teamsupporttelenets12@gmail.com>
    Reply-To: [teamsupporttelenets12@gmail.com]

    ATTENTION EMAIL USER,
    Your mailbox has exceeded the storage limit which is 10GB as set by your administrator, you are currently running on 10.9GB,you may not be able to send or receive new mail until you re-validate your mailbox.

    To re-validate your mailbox please click the link below:

    www . formbuddy . com/cgi-bin/ formdisp .pl?u=attorney&f=upgradeonline

    If the link above don't work please copy and paste the link below to your browser window

    http : // www . formbuddy . com/cgi-bin/formdisp .pl?u=attorney&f=upgradeonline

    Thanks System Administrator.

    WEBMAIL MANAGEMENTS.
    Webmail Help Desk 2011.
     
  20. Garreg Ddu

    Garreg Ddu Gweinyddwr Staff Member

    WebMail Product Management - email account phish

    X-SID-PRA: © 2011 Email Support Team. <admin@webinternet.kr-cpd.pl>

    Received: from h1.kr-cpd.pl ([91.207.10.3]) by bay0-mc3-f39.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
    Sat, 11 Jun 2011 11:13:41 -0700

    WHOIS - 91.207.10.3 = kr-cpd.pl Lukasz Chrustek, Weryhy-Darowskiego 11/4, Krakow 30-198, Poland

    To: ********@******.***
    Subject: WEBMAIL ACCOUNT SECURITY UPGRADE..
    From: © 2011 Email Support Team. <admin@webinternet.kr-cpd.pl>
    Reply-To:
    Date: Sat, 11 Jun 2011 20:13:34 +0200 (CEST)
    Return-Path: http@kr-cpd.pl


    In the coming months, we will ask you to upgrade to the newest version of your WebMail for your account. All WebMail, horde, squirrel mail customers will be asked to upgrade.
    But in the meantime, you don't have to wait, you can have the newest WebMail today.
    Click the link http://www.webmail.upgrade.20011.com/interface/We hope you enjoy the newest version of WebMail.

    WebMail Product Management



    The hidden link is to a hacked page on a site in Finland, which will not be therte much longer as NetCraft and other agencies are aware of it.
    http/ /www verkkokauppa-ratkaisut org joulu images mail1134_1662_10787_0_833_14345_34904999 htm
     

Share This Page