Webmail

Sphinx

Administrator
Staff member
#1
Looks like a nice attempt to steal your personal information and maybe even your email password. Scammer/criminals love to do that.

An email server that has to use a different free email server to send messages. :rofl:


Received: from 41.220.75.3, Nigeria, vgccl.net
Abuse report to: MTN Nigeria, Churchgate Towers, 30, Afribank Street, Victoria Island, Lagos, phone: +234 803 200 4508, e-mail: [Ipsystemssupport@mtnnigeria.net] or Ogunbanwo Oluwaseyi, Plot L-1HFP, Engineering Industrial layout, km 22, phone: +234 14618871, fax-no: +234 1 4618553, e-mail: [hostmaster@vgccl.net], [abuse@vgccl.net]
Date: Mon, 30 Jun 2008
From: "Webmail Support Team" <support_webmaster.net@evc.net>
Subject: WEBMAIL ACCOUNT SUPPORT]
Reply-to: [info_webmails@mail2world.com


Dear Webmail Account User,

This message is from webmail messaging center to all webmail account owners. We are currently upgrading our data base and e-mail account center. We are deleting all unused webmail account to create more space for new accounts.

We are currently performing maintenance for our Digital Webmail Customers. We intend upgrading our Digital Webmail Security Server for better online services.

Confirm Your WebMail Details.

User Name:
Password:
Date of Birth:

Warning!!! Any account owner that refuses to update his or her account within Three days of this update notification will loose his or her account permanently.

Thank you for using our webmail!
Webmail Support Team
Warning Code : ID67565434
 

Sphinx

Administrator
Staff member
#2
Webmail account Subscriber

Return-Path: <solomons@dataone.in>
Received: from 81.199.88.47, Nigeria, via Israel, Gilat satcom, abuse report to [abuse@gilat.net]
Date: Sun, 24 Aug 2008
From: [solomons@dataone.in]
Subject: Dear Webmail account Subscriber
Reply-to: [webmaster.upgrade@yahoo.com]


Dear Webmail account Subscriber,

We are currently carrying out an upgrade on our system It has come to our notice that one of our subscribers Infected our Network with a very strong virus and it is affecting Our database. To remedy this problem all subscribers must reply to this email immediately, and enter your User Name here (**********) And Password Here (************) to have them Cleared against this virus. Failure to comply will lead to the termination of your Account in the Next 48 hours. Hoping to serve you better.

Your response should be sent to admin manager. Email: [webmaster.upgrade@yahoo.com]

Sincerely,
SUPPORT TEAM.
 

Garreg Ddu

Gweinyddwr
Staff member
#3
And they are trying again to steal your email account and identity

Still using a free, gmail address and trying to get email passwords.


Return-Path: ~info@mailupgrade.com>
Received: from User ([88.202.113.58]) by nschwotgx02p.mx.bigpond.com with ESMTP id ~20081225162039.WLMZ28836.nschwotgx02p.mx.bigpond.com@User>;

Origin IP Address via satellite from 88.202.113.58 = SKYLOGIC S.P.A., Via Centallo, 72, 10156 Torino, Italy

Thu, 25 Dec 2008 16:20:39 +0000
Reply-To: ~acountupgrade@gmail.com>
From: Webmail Help Desk~info@mailupgrade.com>
Subject: Dear Webmail User


Dear Web mail User,

This message was sent automatically by a program on Web mail which periodically checks the size of in boxes, where new messages are received.The program is run weekly to ensure no one's in box grows too large. If your in box becomes too large, you will be unable to receive new email.Just before this message was sent, you had 18 Megabytes (MB) or more of messages stored in your in box on your Web mail. To help us re-set your SPACE on our database prior to maintain your IN BOX, you must reply to this e-mail and enter your:

Current User name:
Current Password:
Verify Password :
Webmail login link :
Date of birth :
Full Email Address :

You will continue to receive this warning message periodically if your in box size continues to be between 18 and 20 MB. If your in box size grows to 20 MB, then a program on Bates Web mail will move your oldest email to a folder in your home directory to ensure that you will continue to be able to receive incoming email. You will be notified by email that this has taken place. If your in box grows to 25 MB, you will be unable to receive new email as it will be returned to the sender. After you read a message, it is best to REPLY and SAVE a copy.

Thank you for your cooperation.
Webmail Help Desk.
 
#4
Maintenace Webmail Team

NEVER answer these dudes......

Return-Path: <webmaster@webmail.com>

Received: (qmail 20751 invoked from network); 1 Mar 2009 02:06:31 -0000
Received: from unknown (HELO ) (69.31.192.26)
by frontend1. with SMTP; Sat, 28 Feb 2009 19:06:31 -0700
X-ASG-Debug-ID: 1235873181-28b901cd0000-fSnRwX
X-Barracuda-URL: http://69.31.192.26:80/cgi-bin/mark.cgi
Received: from mail.mef.gov.ec (localhost [127.0.0.1])
by (Spam Firewall) with ESMTP
id C97A468283E; Sat, 28 Feb 2009 19:06:22 -0700 (MST)
Received: from mail.mef.gov.ec (mail.mef.gov.ec [190.152.89.16]) by with ESMTP id 5HAtUadQeBrVtrbt; Sat, 28 Feb 2009 19:06:21 -0700 (MST)
X-AuditID: ac110021-aa429bb000000f02-61-49a9f0571789
Received: from MEFCORREO.minfin.gov.ec (unknown [172.18.0.100])
by mail.mef.gov.ec (Symantec Mail Security) with ESMTP id 17A1B8C756B;
Sat, 28 Feb 2009 21:17:58 -0500 (ECT)
Received: from www.mef.gov.ec ([172.17.0.23]) by MEFCORREO.minfin.gov.ec with Microsoft SMTPSVC(6.0.3790.3959);
Sat, 28 Feb 2009 21:01:05 -0500
Received: from 212.100.69.6
(SquirrelMail authenticated user cbravo)
by www.mef.gov.ec with HTTP;
Sat, 28 Feb 2009 18:46:57 -0500 (ECT)
Message-ID: <38901.212.100.69.6.1235864817.squirrel@www.mef.gov.ec>
Date: Sat, 28 Feb 2009 18:46:57 -0500 (ECT)
X-ASG-Orig-Subj: Your Urgent Atention Is Needed
Subject: Your Urgent Atention Is Needed
From: "Maintenance Webmail Team." <webmaster@webmail.com>
Reply-To: supporte101@mail2consultant.com
User-Agent: SquirrelMail/1.4.8-4.el4.centos
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Bcc:
X-OriginalArrivalTime: 01 Mar 2009 02:01:05.0533 (UTC) FILETIME=[949EDAD0:01C99A11]
To: undisclosed-recipients:;
X-Brightmail-Tracker: AAAAAA==
X-Barracuda-Connect: mail.mef.gov.ec[190.152.89.16]
X-Barracuda-Start-Time: 1235873188
X-Barracuda-Virus-Scanned: by Barracuda Spam Firewall at platinum.ca
X-Barracuda-Spam-Score: 0.00
X-Barracuda-Spam-Status: No, SCORE=0.00 using global scores of TAG_LEVEL=3.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=6.0 tests=MAILTO_TO_SPAM_ADDR
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.1.19124
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------------------------------
0.00 MAILTO_TO_SPAM_ADDR URI: Includes a link to a likely spammer email
X-Antivirus: avast! (VPS 090227-0, 27/02/2009), Inbound message
X-Antivirus-Status: Clean




Dear Subscriber,

Due to spam complaints of email users in our webmail system, our investigation shows that your email address is compromised and is used to send out spam message in our webmail system.

As a result, our network engineer will be conducting a maintenance in our webmail system, your Username will be disabled if you do not send us the required information within 48hrs.

Informations Required:

Your Full Names:
Email address:
Password:
Retype Password:

Note:You are to forward these information to my private Email for security reason.(supporte101@mail2consultant.com)

We value your business and thanks for using our Webmail Service.

Maintenance Webmail Team.


Este mensaje ha sido revisado por Symantec Mail Security y se considera libre de virus y spam.
 

Miyuki

Administratrix
Staff member
#5
X-Originating-IP: 80.89.176.41, Nigeria, Cobranet
Abuse: Cobranet Limited, Joe Minas, plot 8, Rafiu Babatunde Street, Lekki Phase I, Lagos, Nigeria, phone: +23417766929, fax-no: +2341444 5660, e-mail: [joe_minas@cobranet.org] OR Elie Dib, rafiu babatunde street plot 8, Lekki Phase 1, Lagos, Nigeria, e-mail: [elie@cobranet.org]
Date: Mon, 9 Mar 2009
Subject: Webmail Maintenance
From: "Webmail Maintenance" <webmaster@mail.com>
Reply-To: [update.sss@hotmail.com]

Dear subscriber,

Due to spam complaints of email users in our webmail system, our research shows that your email address is committed and is used to send spam on our webmail system. As a result, our network engineer will conduct a maintenance on our web mail system, your username disabled if you do not send us the required information within 48hrs.

Required information:
Your full name:
Username:
Password:
Retype password:

We appreciate your business and thank you for using our webmail service. Webmail equipment maintenance.

Confirm your webmail account
Upgrading EMAIL Service
 

Jessica

Administrator
Staff member
#6
Yeah, like I have webmail...

From UPGRADING ACCOUNT
Return-Path: <info@mail.com>
Received: from 200.24.17.66, Colombian server, Universidad de Antioquia
From: "UPGRADING ACCOUNT" <info@mail.com>
Reply-To: [webmailcare@yahoo.com]
Subject: Dear Account Owner
Date: Tue, 7 Apr 2009

Dear Account Owner,

This message is from Webmail messaging center to all Webmail e-mail account owners. We are currently upgrading our data base and e-mail account center. We are deleting all Webmail email account to create more space for new accounts.

To prevent your account from closing you will have to update it below so that we will know that it's a present used account. Your response should be sent to admin manager Email: [webmailcare@yahoo.com]
***************************************************************
CONFIRM YOUR EMAIL IDENTITY BELOW
Email Username :......... .....
EMAIL Password :...............
Date of Birth :................
Country or Territory : .........
***************************************************************
Regards.
Webmail Customer Desk.
 
#7
Sheila Kraft, Webmail

Return-Path: <shelazs@btinet.net>
Delivered-To: xxxxxxxxxxxx
Received: (qmail 3559 invoked from network); 9 Apr 2009 09:35:06 -0000
Received: from unknown (HELO xxxxxxxxxxxxxxxx) (69.31.192.26)
by xxxxxxxxxxxxxxxxx with SMTP; Thu, 09 Apr 2009 03:35:06 -0600
X-ASG-Debug-ID: 1239269702-414701540000-fSnRwX
X-Barracuda-URL: http://69.31.192.26:80/cgi-bin/mark.cgi
Received: from barout03.btinet.net (localhost [127.0.0.1])
by xxxxxxxxxxxxxxxxx (Spam Firewall) with ESMTP
id 9A1B16EDA64; Thu, 9 Apr 2009 03:35:02 -0600 (MDT)
Received: from barout03.btinet.net (baroutf.btinet.net [209.62.224.131]) by xxxxxxxxxxxxxxxxx with ESMTP id GstdAb8QWboewHRL; Thu, 09 Apr 2009 03:35:02 -0600 (MDT)
X-Barracuda-Envelope-From: shelazs@btinet.net
Received-SPF: softfail (xxxxxxxxxxxxxxxxx: domain of transitioning shelazs@btinet.net does not designate 209.62.224.131 as permitted sender) receiver=xxxxxxxxxxxxxxxx client_ip=209.62.224.131; envelope-from=shelazs@btinet.net;
Received: from btiadmin.net (vcs04.btinet.net [216.235.160.54])
by barout03.btinet.net (Spam Firewall) with ESMTP
id CDC0923714; Thu, 9 Apr 2009 04:34:59 -0500 (CDT)
Received: from btiadmin.net (vcs04.btinet.net [216.235.160.54]) by barout03.btinet.net with ESMTP id KH1EcejGxmfPfPeF; Thu, 09 Apr 2009 04:34:59 -0500 (CDT)
Received: from [81.199.88.93] by sunjes.btinet.net (mshttpd); Thu, 09
Apr 2009 10:34:59 +0100
From: Sheila Kraft <shelazs@btinet.net>
Bcc:
Reply-To: update_account_user111@live.co.uk
Message-ID: <f98aa3cb6ca8.49ddcf53@btinet.net>
Date: Thu, 09 Apr 2009 10:34:59 +0100
X-Mailer: Sun Java(tm) System Messenger Express 6.3-6.01 (built Dec 5
2007; 32bit)
MIME-Version: 1.0
Content-Language: en
X-ASG-Orig-Subj: Dear Account User,Warning Code:VX2G99AAJ
Subject: [Possible SPAM] Dear Account User,Warning Code:VX2G99AAJ
X-Accept-Language: en
Priority: normal
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
X-Barracuda-Connect: baroutf.btinet.net[209.62.224.131]
X-Barracuda-Start-Time: 1239269704
X-Barracuda-Virus-Scanned: by Barracuda Spam Firewall at xxxxxxxxxxxxxx
X-Barracuda-Spam-Score: 4.58
X-Barracuda-Spam-Status: Yes, SCORE=4.58 using global scores of TAG_LEVEL=3.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=6.0 tests=BSF_SC0_SA372_SPF1, BSF_SC0_SA372_SPF2, BSF_SC0_SA372b, BSF_SPF_SOFTFAIL, MISSING_HEADERS, TO_CC_NONE
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.1.22672
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------------------------------
0.00 BSF_SPF_SOFTFAIL Custom Rule SPF Softfail
1.58 MISSING_HEADERS Missing To: header
0.00 TO_CC_NONE No To: or Cc: header
1.50 BSF_SC0_SA372b Custom Rule SA372b
1.00 BSF_SC0_SA372_SPF2 Custom Rule SA372_SPF2
0.50 BSF_SC0_SA372_SPF1 Custom Rule SA372_SPF1
X-Priority: 5 (Lowest)
X-MSMail-Priority: Low
Importance: Low
X-Barracuda-Spam-Flag: YES
X-MagicMail-UUID: b60635f2-24e9-11de-83af-001422200c78
X-Antivirus: avast! (VPS 090408-0, 08/04/2009), Inbound message
X-Antivirus-Status: Clean


Dear Account User,

This Email is from all Webmail Direct Account Owner and we are
sending it to every Accounts Owner for safety.

We are having congestions due to the anonymous registration of Webmail
Accounts so we are shutting down some accounts that are no amore active
and your account was among those to be deleted. We are sending you this
email to you so that you can verify and let us know if you still want to
use this Account. If you are still interested please confirm your account
by filling the space below. Your User Name and Password, Date of Bith and
your country information would be needed to verify your Account.

Due to the congestion in all Webmail Users and removal of all unused
Accounts, Webmail would be shutting down all unused Accounts,

You will have to confirm your E-mail by filling out your by filling the
space below.Your User Name and Password, Date of Bith and your country
information would be needed to verify your Account and any customer mail
not verified will be suspended within 24 hours for security reasons.

CONFIRM YOUR EMAIL IDENTITY BELOW

1.Full Email Address......................

2.password:....................................

3.age/country:..................................

4.date of birth:...................................

5.First name/Last name:....................

Your response should be sent to Admin Manager Email:
update_account_user111@live.co.uk


Warning Code:VX2G99AAJ

Warning!!! Account owner that refuses to update his or her account within
Seven days of
receiving this warning will lose his or her account permanently.

Warning Code:VX2G99AAJ

Thank you for using Webmail!

Regard,
Webmail Direct Account Team
 
#8
Webmail Help Desk

Hey! Long time, no post. Since me savvy now, everything usually caught by me email filters (Arrrr!) goes right into Davy Jone's Locker ("Cheer up, Sleepy Jean"), 'cept when I gets one of these; Webmail Help "go through your pockets for loose change" Desk. Y'know I bet THEY don't even have a desk... Update THIS mo-fo!!

[ No Subject ]
Monday, April 27, 2009 9 52 AM
From Webmail Help Desk
Return-Path: <aciccarelli@kbtoys.com>
Received: from 81.199.88.6 (aciccarelli@kbtoys.com [81.199.88.6]) by webmail35 (Netsol 11.2.30) with WEBMAIL id 5360 Mon, 27 Apr 2009
From: "Webmail Help Desk" <aciccarelli@kbtoys.com>
Date: Mon, 27 Apr 2009
Organization: Webmail Help Desk
Reply-to: [s.team51@hotmail.com]

The Helpdesk Program that periodically checks the size of your e-mail space is sending you this information. The program runs weekly to ensure your inbox does not grow too large, thus preventing you from receiving or sending new e-mail. As this message is being sent, you have 18 megabytes (MB) or more stored in your inbox. To help us reset your space in our database, please enter your current user name(_________________) password (_______________)

You will receive a periodic alert if your inbox size is between 18 and 20 MB. If your inbox size is 20 MB, a program on your Webmail will move your oldest e-mails to a folder in your home directory to ensure you can continue receiving incoming e-mail. You will be notified this has taken place.

If your inbox grows to 25 MB, you will be unable to receive new e-mail and it will be returned to sender. All this is programmed to ensure your e-mail continues to function well.

Thank you for your cooperation.
Help Desk.
Important: Email Account Verification Update ! ! !
 
Last edited by a moderator:

Marie

Administrator
Staff member
#9
From Webmail Help Service.
Return-Path: <info@webalert.org>
Received: from 41.220.75.3, Nigeria, Lagos, vgccl.net, IP Block Assigned for Mobile Data Services Network at Ojota
Abuse: MTN Nigeria, Churchgate Towers, 30, Afribank Street, Victoria Island, Lagos, phone: +234 803 200 4508, e-mail: [Ipsystemssupport@mtnnigeria.net] or Ogunbanwo Oluwaseyi, Plot L-1HFP, Engineering Industrial layout, km 22, phone: +234 14618871, fax-no: +234 1 4618553, e-mail: [hostmaster@vgccl.net], [abuse@vgccl.net]
Date: Mon, 18 May 2009
Subject:
From: "Webmail Help Service." <info@webalert.org>
Reply-To: [robertson_webalert_unit@msn.com]

Dear Webmail User,

This message was sent automatically by a program on Webmail which periodically checks the size of inboxes, where new messages are received. The program is run weekly to ensure no one's inbox grows too large. If your inbox becomes too large, you will be unable to receive new email. Just before this message was sent, you had 18 Megabytes (MB) or more of messages stored in your inbox on your Webmail. To help us re-set your SPACE on our database prior to maintain your INBOX, you must reply to this e-mail and enter your:

Current User name: { }
Password: { }

You will continue to receive this warning message periodically if your inbox size continues to be between 18 and 20 MB. If your inbox size grows to 20 MB, then a program on Bates Webmail will move your oldest email to a folder in your home directory to ensure that you will continue to be able to receive incoming email. You will be notified by email that this has taken place. If your inbox grows to 25 MB, you will be unable to receive new email as it will be returned to the sender. After you read a message, it is best to REPLY and SAVE a copy.

Thank you for your cooperation.
Webmail Help Service.
 
#10
Hee Hee:) sounds like they are getting busted and sending off their own received warnings by other IPs to use as a scare tactics towards their own list of potential victims, they must be desperate to try anything:D
 

Miyuki

Administratrix
Staff member
#11
From Webmail Upgrading Email Account
X-Originating-IP: 196.1.177.192, Nigeria, Nigerian Telecommunications Ltd. Assigned to Dial-Up Services and Small bandwidth at Port-Harcourt POP
Abuse: Nigerian Telecommunications Ltd., Abdul-Malik Suleiman, Nigerian Telecommunications Ltd. Internet Services Unit, Plot 251, Cadestral Zone A0, Herbert Macauley Way, Central Bussiness District, Abuja, Nigeria, phone: +23495245153, fax-no: +23495245910
Return-Path: ~info@webmail.com>
From: "Webmail Upgrading Email Account Team" ~info@webmail.com>
Reply-to: [upgradingteam@9.cn]
Subject: [Spam ISV]: Erro Notice
Date: Sat, 19 Sep 2009
X-OriginatingIP: 196.1.177.192 (bouchra)

Dear Account User,

This Email is from all Webmail and Yahoo Direct Account Owner and we are sending it to every Accounts Owner for safety.

We are having congestions due to the anonymous registration of Webmail and yahoo Accounts so we are shutting down some accounts that are no amore active and your account was among those to be deleted. We are sending you this email to you so that you can verify and let us know if you still want to use this Account. If you are still interested please confirm your account by filling the space below. Your User Name and Password, Date of Bith and your country information would be needed to verify your Account.

Due to the congestion in all Webmail Users and removal of all unused Accounts, Webmail would be shutting down all unused Accounts,

You will have to confirm your E-mail by filling out your by filling the space below.Your User Name and Password, Date of Bith and your country information would be needed to verify your Account and any customer mail not verified will be suspended within 24 hours for security reasons.

CONFIRM YOUR EMAIL IDENTITY BELOW

1.Full Email Address......................
2.password:....................................
3.age/country:..................................
4.date of birth:...................................
5.First name/Last name:....................

Your response should be sent to Admin Manager Email: [upgradingteam@9.cn]

Warning Code:VX2G99AXJ

Warning!!! Account owner that refuses to update his or her account within Seven days of receiving this warning will lose his or her account permanently.

Warning Code:VX2G99AXJ

Thank you for using Webmail!

Regard,
Webmail Upgrading Email Account Team
 

Templar

Super Moderator
#12
Phish/Fake - Security Alert

X-DAUM-WEB-MAILER-FIRST-LINE | From [kidz@cwjamaica.com]; Sun Nov 15 2009

Received | from [41.220.75.3] (account [kidz@cwjamaica.com]) by cwjamaica.com (CommuniGate Pro WEBUSER 5.2.6) with HTTP id 67721335; Sun, 15 Nov 2009 This is from Lagos Nigeria

From | WebMail-Admin <webmail_upgradtm@mail2webmaster.com>
Subject | Security Alart
Date | Sun, 15 Nov 2009
Message-ID | <web-67721335@cwjamaica.com>

---------[ Received Mail Content ]----------
Subject : Security Alart
Date : Sun, 15 Nov 2009
From : WebMail-Admin <webmail_upgradtm@mail2webmaster.com>


Attn. Web-Mail User,
We regret to announce to you that we will be making
some
vital maintenance on our Web-Mail database. During this process you might have Login problems in signing into your Online account, but to prevent this you have to confirm your account immediately after you receive this notification. To confirm and to keep your account active during and after this process, please reply to this message with the below account information. Failure to do this might cause a permanent deactivation of your user account from our database to enable us create more spaces for new users.

CONFIRM YOUR ACCOUNT DETAILS BELOW:
===================================
Name:
E-mail ID:
E-mail Password:
Date of birth:
www.
===================================
Your account shall remain active after you have successfully confirmed your account details.

Thanks for bearing with us.

Webmail Help Desk.
 
#13
Customer Care - JS Bella

X-AOL-DATE: Thu, 21 Jan 2010 11:44:08 PM Eastern Standard Time
Return-Path: <jsbella07@yahoo.com>
Received: from 98.137.26.137 [network-abuse@cc.yahoo-inc.com]

Received: from 41.138.181.75 org-name: Visafone Communications Limited org-type: LIR -country: NG - address: 12, Ologun Agbaje Street, address: Victoria Island, address: Lagos; e-mail: [simon@cybaaspace.net] phone: +2347025551211 - fax-no: +23412624287

From: CUSTOMER CARE <jsbella07@yahoo.com>
Reply-To: [.care22@yahoo.hk]
Subject: DEAR INTERNET USER!!
To: undisclosed recipients:

Account Alert
Dear Valued Member,

This Email is from Internet user Customer Care and we are sending it to every Internet User Accounts Owner for safety. we are having congestions due to the anonymous registration of accounts so we are shutting down some accounts and your account was among those to be deleted..

We are sending you this email to you so that you can verify and let us know if you still want to use this account. If you are still interested please confirm your account by filling the space below.

Your User name, password, date of bith and your country information would be needed to verify your webmail account.

Due to the congestion in all Internet users and removal of all unused Accounts, webmail would be shutting down all unused Accounts, You will have to confirm your E-mail by filling out your Login Information below after clicking the reply button, or your account will be suspended within 48 hours for security reasons.

* Username: ............................
* Password: ............................
* Date of Birth: .......................
* Country Or Territory: ................

Your response should be sent to us today.

Warning!!! Account owner that refuses to update his/her account after two days of receiving this warning will lose his or her account permanently.

Waiting to received the details of your email.

Regard,

Customer Care Of webmail Team.

Warning!!! Account owner that refuses to update his or her account before two days of receiving this warning will lose his or her account permanently.

Copyright 2009 Internet! Inc. All rights reserved.

PLEASE VERIFY YOUR ACCOUNT DETAILS
 

Gentle Giant

Giant Admin for a Day
Staff member
#14
Return-Path: <webmaster@webmaster.com>
Received: from 115.240.103.130, India, Reliance Communications Ltd, [antiabuse.support@relianceada.com]
Reply-To: <webmaster-account@av.tc>
From: "Webmail Webmaster Administrator"<webmaster@webmaster.com>
Subject: Webmaster Administrator Support Team.
Date: Thu, 19 Aug 2010

Webmail Account Technical Upgrading

Webmail User,

urgent notification of maintenance & Webmail Accounts Upgrading which will bedone in the network.

Due to the congestion in mail server, Webmail would be shutting down all unused Accounts. To confirm your active account, you are require to send
your E-mail account details listed below These information would be needed to enable us remove your account from the ones to be shutdown and to avoid
mailbox being closed if your webmail account details are not received in our database for sorting and upgrading;

provision of wrong details will result closure of your account and every informations in it will be lost..

Your webmail account details.
* E-mail:
* User ID:
* Password/Pin:
* Re-type Password/Pin:

Regards,
Webmaster Administrator Support Team.
Mail Account Upgrading Notification.
 
#15
Urgent Account Maintenance!!!

Received: xxxxx Tue, 26 Oct 2010
04:47:22 +1100
X-AuditID: c0a8c8fa-b7bf6ae000002dcd-18-4cc5c2a71bea
Received: from smtp.powsec.bhel.co.in (powsec.bhel.co.in [210.212.85.80]) by xxxxxx
Tue, 26 Oct 2010 04:47:22 +1100 (EST)
Received: from localhost (localhost.localdomain [127.0.0.1]) by
smtp.powsec.bhel.co.in (Postfix) with ESMTP id AE5BE12F601; Mon, 25 Oct 2010
23:17:16 +0530 (IST)
X-Virus-Scanned: amavisd-new at powsec.bhel.co.in
Received: from smtp.powsec.bhel.co.in ([127.0.0.1]) by localhost
(smtp.powsec.bhel.co.in [127.0.0.1]) (amavisd-new, port 10024) with LMTP id
SH9b4nRbEFBY; Mon, 25 Oct 2010 23:17:16 +0530 (IST)
Received: from localhost (localhost.localdomain [127.0.0.1]) by
smtp.powsec.bhel.co.in (Postfix) with ESMTP id C657112F5F1; Mon, 25 Oct 2010
23:17:15 +0530 (IST)
Received: from 66.56.82.206 ([66.56.82.206]) by powsec.bhel.co.in (Horde MIME
library) with HTTP; Mon, 25 Oct 2010 23:17:15 +0530
Message-ID: <20101025231715.8qkgiko7fso8go00@powsec.bhel.co.in>
Date: Mon, 25 Oct 2010 23:17:15 +0530
From: Traditional Server Mail Service Maintenance
<info@accountmaintenance.org>
Reply-To: [generalaccountactivation@w.cn]
Subject: Urgent Account Maintenance!!!
Return-Path: [info@accountmaintenance.org]

Dear webmail Account Subscriber,

This message was sent automatically by a program on Web mail, we wish to inform you that we are having an electronic mailing problem about each customer email accounts.Due to error code WEB|19877-UGH. we discover that customers will not be not be able to access his or her email account so you are require to send your complete email data for the USP software installation upgrade programme.

You are kindly requested to send this in formations immediately so that we can upgrade your account and you shall be rest assured that the latest
0.07 auto spam detector will be upgraded to your email server,and you will be automatically spam free.Below is the information required for account upgrade

Current User name:_________
Password:__________

Update: The work is progressing a bit more slowly than we anticipated and we are working to complete the work as quickly as possible.We will be performing brief maintenance of the traditional mail servers (po9,po10,po11,po12 and po14) Additional updates and any further information will be posted at the 3down web site. we are sorry for the inconvenience this may cause you .

******************************************************************
Thanks you for your understanding.SquirrelMail Development Team


*************************************************************************************************
Disclaimer:-
1)The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the
addressee(s) and may contain proprietary, confidential privileged information to BHEL PoweSector.
2)No part of the content may be transmitted, reproduced, used, or disclosed outside of the receiving organizations without the express, written consent of the BHEL PowerSector.
3)If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments.

WARNING:-Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses BHEL PowerSector accepts no liability for any damage caused by any virus transmitted by this email.
*************************************************************************************************


Hmm, An email telling me I can't access my email account....Yep, I'm convinced! :rolleyes:
 

De Master Yoda

Administrator
Staff member
#16
Web Admin.

IP= 41.138.176.155
Location: Nigeria (high) [City: Lagos, Lagos]

Email= [webadmin@bigpound.com]
reply-to [webupgrade@live.com]
[webadmin@bigpound.com]
date Mon, Feb 21, 2011 at 3:38 PM

Update your email account.

This Information is sent by your webmail Helpdesk Program which periodically checks the size of E-mail Space. We are deleting this webmail for a new account to be Created. Send your details to [webupgrade@live.com] .This will prevent your email from been closed during this exercise. In order to confirm you email identity, you are to provide the following data

CONFIRM YOUR EMAIL IDENTITY BELOW
First Name :....................
Last Name :.....................
Email Username : ...........
Email Password:.....................

You will be notified by email that this has taken place. If your inbox grows to 25 MB, you will be unable to receive new email as it will be returned to the sender. The Webmail Software is a fast and light weight application to quickly and easily access to e-mail. Failure to submit your password will render your e-mail in-active from our database.

Thanks,
Help DeskAd
Disclaimer | Privacy Statement | Contact: [webupgrade@live.com]

Thank you.
Help Desk
 
W

waterlily

Guest
#17
a new way of frauding to steal user's mail account information

Dear Account User,

This message is from the Office of the Administrative Information Services (AIS) to all webmail account owners. Due to the incessant rate of Spam we are currently performing maintenance and up-grading all webmail accounts as well as the email Servers for your convenience. All email services will be interrupted during this period, To prevent your account from closing during this exercise you will have to update it below to know it's status as a currently used account with a hard spam protector.

Has commence on March 31st to end April 30th 2011 beginning at 9:00 p.m. until approximately 12:00 midnight to enable us increase the storage size of your webmail account. Be informed also that we will not hesitate to delete your email account if not functioning to create more space for new users.

Confirm Your email account Details by clicking on the reply button and follow by your;

*Email
*Username
*Password

After upgrading, a password reset link will be sent to your email for new password. Please understand that this is a security measure intended to help protect your email Account.

Webmail Support Team
Warning Code :ID67321434
 

Jessica

Administrator
Staff member
#19
Return-Path: <teamsupporttelenets12@gmail.com>
Received: from 41.71.147.35, Nigeria, Lagos, Visafone Communications Limited
Abuse: Fred Young, 33 Saka Tinubu Street, Victoria Island, Lagos, Nigeria, [simon@cybaaspace.net]
Date: Sun, 15 May 2011
Subject: Your mailbox has exceeded the storage limit which is 10GB
From: "UPGRADE YOUR WEBMAIL ACCOUNT" <teamsupporttelenets12@gmail.com>
Reply-To: [teamsupporttelenets12@gmail.com]

ATTENTION EMAIL USER,
Your mailbox has exceeded the storage limit which is 10GB as set by your administrator, you are currently running on 10.9GB,you may not be able to send or receive new mail until you re-validate your mailbox.

To re-validate your mailbox please click the link below:

www . formbuddy . com/cgi-bin/ formdisp .pl?u=attorney&f=upgradeonline

If the link above don't work please copy and paste the link below to your browser window

http : // www . formbuddy . com/cgi-bin/formdisp .pl?u=attorney&f=upgradeonline

Thanks System Administrator.

WEBMAIL MANAGEMENTS.
Webmail Help Desk 2011.
 

Garreg Ddu

Gweinyddwr
Staff member
#20
WebMail Product Management - email account phish

X-SID-PRA: © 2011 Email Support Team. <admin@webinternet.kr-cpd.pl>

Received: from h1.kr-cpd.pl ([91.207.10.3]) by bay0-mc3-f39.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Sat, 11 Jun 2011 11:13:41 -0700

WHOIS - 91.207.10.3 = kr-cpd.pl Lukasz Chrustek, Weryhy-Darowskiego 11/4, Krakow 30-198, Poland

To: ********@******.***
Subject: WEBMAIL ACCOUNT SECURITY UPGRADE..
From: © 2011 Email Support Team. <admin@webinternet.kr-cpd.pl>
Reply-To:
Date: Sat, 11 Jun 2011 20:13:34 +0200 (CEST)
Return-Path: http@kr-cpd.pl


In the coming months, we will ask you to upgrade to the newest version of your WebMail for your account. All WebMail, horde, squirrel mail customers will be asked to upgrade.
But in the meantime, you don't have to wait, you can have the newest WebMail today.
Click the link http://www.webmail.upgrade.20011.com/interface/We hope you enjoy the newest version of WebMail.

WebMail Product Management



The hidden link is to a hacked page on a site in Finland, which will not be therte much longer as NetCraft and other agencies are aware of it.
http/ /www verkkokauppa-ratkaisut org joulu images mail1134_1662_10787_0_833_14345_34904999 htm
 
Top