Newer email phishing spam scam!

[Rook Zimbabwe]

I just got this:
Email changed for safety!

Return-path: <suppot@webmailupgrade.waphall.com>
Envelope-to: test@test.org
Delivery-date: Mon, 09 May 2011 17:31:17 -0400
Received: from mail.bpc.bt ([202.144.155.54])
by server208.serverquality.com with esmtp (Exim 4.69)
(envelope-from <suppot@webmailupgrade.waphall.com>)
id 1QJY2k-0001rT-Lm
for test@test.org; Mon, 09 May 2011 17:31:07 -0400
Received: by mail.bpc.bt (Postfix, from userid 80)
id E1F18BF9001; Tue, 10 May 2011 03:20:53 +0600 (BTT)
Received: from 195.45.98.189 ([195.45.98.189]) by mail.bpc.bt (Horde
Framework) with HTTP; Tue, 10 May 2011 03:20:21 +0600
Message-ID: <20110510032021.15396mr027tc9w0s@mail.bpc.bt>
Date: Tue, 10 May 2011 03:20:21 +0600
From: Webmail Support Team <suppot@webmailupgrade.waphall.com>
Reply-to: info@despoconnect.com
To: undisclosed-recipients:;
Subject: Dear Account User !!!
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
User-Agent: Internet Messaging Program (IMP) H3 (4.3.7) / FreeBSD-7.2
X-BPC-MailScanner-Information: Please contact ITD for more information
X-BPC-MailScanner-ID: E1F18BF9001.AD110
X-BPC-MailScanner: Found to be clean
X-BPC-MailScanner-From: suppot@webmailupgrade.waphall.com
X-Spam-Status: No, No
X-ServerQuality-MailScanner-Information: Please contact the ISP for more information
X-ServerQuality-MailScanner-ID: 1QJY2k-0001rT-Lm
X-ServerQuality-MailScanner: Found to be clean
X-ServerQuality-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
score=3.617, required 7, BAYES_60 1.50, RCVD_IN_BL_SPAMCOP_NET 1.35,
RCVD_IN_SORBS_WEB 0.77)
X-ServerQuality-MailScanner-SpamScore: sss
X-ServerQuality-MailScanner-From: suppot@webmailupgrade.waphall.com


Dear Subscriber,

This is to inform you that We have noticed some unusual activities in=20=20
your account. As a result, access to account has been limited in
accordance with the Webmail Terms And Condition User Agreement. To=20=20=20
re-validate your mailbox mail, click the link to update your account
form: You must follow this link to the complete this upgrade process:

http://www.webmailupgrade.uiwap.com

Thanks
Webmail Support Team.
=A9 2011 All rights reserved.





----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

--=20
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

(allthough the format was different since that is the complete text view of the email)

I laugh at how weezily STUPID this scam is... Which email account??? I don't have an account at anything that even remotely looks like this "service" and it sure ain't from GMail nor MY OWN website (where I would not shut myself down in any case!)

The wife got one too... this time she did not click it but called me.

Be awares peeps!

[Rook Zimbabwe]

Link (opened with SANDBOXIE) takes you to this page:


notice all me HELPFUL info... as I don't use OUTLOOK I was not worried about harvesting info... I also blocked all forced programs...

[Joakim Christiansen]

Now make a bot to spam that submit form with nonsense info until you crash their server!

[MachineCode]

You really have big problems with malware and spam, don't you? I think it's time you closed ALL your email accounts and set up brand-new ones. Seriously.

[Nituvious]

I think the REAL question here is this:



I hope for your sake that you've been looking at the multi-colored wigs

[Rook Zimbabwe]

I think the REAL question here is this:

I hope for your sake that you've been looking at the multi-colored wigs

I was shopping for your birthday present!

[Rook Zimbabwe]

You really have big problems with malware and spam, don't you? I think it's time you closed ALL your email accounts and set up brand-new ones. Seriously.

This was a blanket spam attack on all email accounts on my web host... apparently they fired someone and he decided to lamely take revenge...

[Nituvious]

I think the REAL question here is this:

I hope for your sake that you've been looking at the multi-colored wigs

I was shopping for your birthday present!

Well, I really like this one:




[edit] speaking of wigs, I just received 2 spam emails in my super hidden ultra new gmail advertising wigs
This email address has had zero contact to the internet, is this a sign?

[GWarner]

Easy to spot, easier to report as phishing and spam, easiest to delete!

[Rook Zimbabwe]

Hmmm... so you never emailed out from it? Was it open when you went to get that pic for the wig? (GMail I mean?)

I used to get the occasional piece of SPAM on my .MIL email just every once in a while...

Pro Patria Veritas

I get email harvest attempts from banner ads all day... It is getting nasty!

SSG RW Dunn
8 BDE HHQ - OPS

[Nituvious]

Hmmm... so you never emailed out from it? Was it open when you went to get that pic for the wig? (GMail I mean?)

I used to get the occasional piece of SPAM on my .MIL email just every once in a while...

Pro Patria Veritas

I get email harvest attempts from banner ads all day... It is getting nasty!

SSG RW Dunn
8 BDE HHQ - OPS

Never checked it from a browser, always used it from Thunderbird. I don't think I had it open at the time either.
My .mil is always spammed thanks to the the guys who send out mailer lists to everyone.

160th Field Artillery all day long.