|
Mailbox.com Scam |
||
|
Contents - List
of Scams by Type and by profession.
|
Mailbox.com Scam - This is a scam that is attempting to get you
to download a file that is most likely damaging to your computer
or a Trojan Horse Virus that will send information to a third
party. The link goes to an .RS destination which is Russia.
Russian Criminals are very active in this kind of scam. The link
below
Your Mailbox Has Exceeded It Quota/Limit As Set By Your Administration, And You May Not Be Able To Send Or Receive New Mails Until You Re-Validate It. To Re-Validate, Please CLICK: Re-Validate Your Mailbox http://test3.3dnet.rs /index.php is the destination of the link..
I have taken out part of the link and disabled it so it can not be
visited. PHP is a file type NOT a web page. |
|
|
|
||
|
|
Return-Path: <mailbox@mailbox.com> Received: from smtp-out-401.his.com (smtp-out-401.his.com [216.194.225.42]) by mtain-mg04.r1000.mx.aol.com (Internet Inbound) with ESMTP id C899D38000083; Mon, 14 Nov 2011 22:25:16 -0500 (EST) Received: from localhost (localhost [127.0.0.1]) by smtp-out-401.his.com (Postfix) with ESMTP id E1B9764A62; Mon, 14 Nov 2011 21:33:44 -0500 (EST) X-Virus-Scanned: Debian amavisd-new at smtp-out-401.his.com X-Amavis-Alert: BAD HEADER SECTION, Non-encoded 8-bit data (char AE hex): Subject: Your Mailbox Has Exceeded It Quota/Limit\256 X-Spam-Flag: YES X-Spam-Score: 7.116 X-Spam-Level: ******* X-Spam-Status: Yes, score=7.116 tagged_above=-99 required=5 tests=[BAYES_50=0.8, DNS_FROM_RFC_DSN=0.001, FORGED_MUA_OUTLOOK=1.927, FORGED_OUTLOOK_HTML=0.021, FROM_MISSP_MSFT=1, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.723, MSOE_MID_WRONG_CASE=2.584, SUBJECT_NEEDS_ENCODING=0.049, T_FROM_MISSPACED=0.01] autolearn=unavailable Received: from smtp-out-401.his.com ([127.0.0.1]) by localhost (smtp-out-401.his.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1z43SbMScXbl; Mon, 14 Nov 2011 21:33:44 -0500 (EST) Received: from mail-sterling.his.com (mail-sterling.his.com [216.194.248.141]) by smtp-out-401.his.com (Postfix) with ESMTP id 3420B64A5A; Mon, 14 Nov 2011 21:33:44 -0500 (EST) Received: from localhost (localhost.localdomain [127.0.0.1]) by mail-sterling.his.com (Postfix) with ESMTP id DC19C3F809E3; Mon, 14 Nov 2011 21:29:06 -0500 (EST) X-Virus-Scanned: amavisd-new at mail-sterling.his.com X-Amavis-Alert: BAD HEADER SECTION, Non-encoded 8-bit data (char AE hex): Subject: Your Mailbox Has Exceeded It Quota/Limit\256 Received: from mail-sterling.his.com ([127.0.0.1]) by localhost (mail-sterling.his.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MrZk4t28jm7m; Mon, 14 Nov 2011 21:29:06 -0500 (EST) Received: from User (unknown [70.89.35.169]) by mail-sterling.his.com (Postfix) with ESMTPA id 0B2513F8191C; Mon, 14 Nov 2011 21:02:52 -0500 (EST) From: "Mailbox Administrator"<mailbox@mailbox.com> Subject: ~~ Your Mailbox Has Exceeded It =?iso-8859-1?Q?Quota/Limit=AE?= Date: Mon, 14 Nov 2011 21:02:58 -0500 MIME-Version: 1.0 Content-Type: text/html; charset="Windows-1251" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-Id: <20111115020253.0B2513F8191C@mail-sterling.his.com> To: undisclosed-recipients:; x-aol-global-disposition: S X-AOL-REROUTE: YES x-aol-sid: 3039ac1d60cc4ec1db9c5225 X-AOL-IP: 216.194.225.42 X-AOL-SPF: domain : mailbox.com SPF : none |
|