Email storage limit phishing - password theft

From: [redacted]@undp.org>
Date: October 29, 2013, 12:48:21 PM EDT

Dear email user,

Your email storage limit has been exceeded; you are required to validate your account by click on the link bellow

http://verifyhere.wwwwp.madconfusion.com/

login your email account details and click on Submit, automatically your account will be verified and upgraded. Note: failure to validate your email account within the next three days of receiving this message’ your account will automatically be closed.

Thanks for Cooperation!

Webmail Admin Team

Redirects to
Envelope From: rose.kimali@undp.org

Accept-Language: en-US
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="Windows-1252"
Date: Tue, 29 Oct 2013 16:55:58 +0000
From: [redacted]@undp.org>
MIME-Version: 1.0
Message-ID:

Received: from eu3sys201aob102.obsmtp.com ([207.126.148.85]) by iron3-mx.tops.gwu.edu with ESMTP/TLS/DHE-RSA-AES256-SHA; 29 Oct 2013 12:57:41 -0400
Received: from dppfxof02.pfx.undp.org ([193.194.138.69]) (using TLSv1) by eu3sys201aob102.postini.com ([207.126.154.11]) with SMTP ID DSNKUm/oo9gxpn638pZr1COWrCkWa8CKb1b5@postini.com; Tue, 29 Oct 2013 16:57:39 UTC
Received: from DPCHM07.DPECSP.UNICC.ORG (unknown [10.94.34.66]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by dppfxof02.pfx.undp.org (Postfix) with ESMTPS id 0390560C61; Tue, 29 Oct 2013 16:56:03 +0000 (UTC)
Received: from DPCHM08.DPECSP.UNICC.ORG ([169.254.8.131]) by DPCHM07.DPECSP.UNICC.ORG ([169.254.7.9]) with mapi id 14.03.0123.003; Tue, 29 Oct 2013 16:55:58 +0000
Thread-Index: Ac7Ux72s48jJCbrSQn28hVG+ZDulyQ==
X-Ipas-Result: ApwGAPXnb1LPfpRVf2dsb2JhbAAlMAMBgz9UjUQDsW4kA4EDFg4BAQsLCggUKIIYAQQEAQUCAw8BLwgBBT4rCwQBAS8WGQYCAgMBH4VBAQErgXIBBhgECYxoi0aDBIsNAQGBIgWCOoEkKIMRiwQXjX4BCgsHBHdCGQQBglEmgQ0Dh2GRWJN/gRhRAQcXBhx7
X-Ironport-Anti-Spam-Filtered: true
X-Ironport-Anti-Spam-Result: ApwGAPXnb1LPfpRVf2dsb2JhbAAlMAMBgz9UjUQDsW4kA4EDFg4BAQsLCggUKIIYAQQEAQUCAw8BLwgBBT4rCwQBAS8WGQYCAgMBH4VBAQErgXIBBhgECYxoi0aDBIsNAQGBIgWCOoEkKIMRiwQXjX4BCgsHBHdCGQQBglEmgQ0Dh2GRWJN/gRhRAQcXBhx7
X-Ironport-Av: E=Sophos;i="4.93,594,1378872000"; d="scan'208";a="317136701"
X-MS-Has-Attach:
X-MS-Tnef-Correlator:
X-Originating-Ip: [10.94.64.125]
X-Senderbase: 2.7

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.