Friday, March 12, 2010

To the idiots in Ghana...or wherever you're hiding...

Who are sending out these emails - There are those of us out here that are onto your game and you're losers at playing it. Get a clue!!

This email above is a FAKE email trying to get people to click the little link for AOL Billing Methods and then enter their information on the next page that pops up so that these jokers can siphon your bank account. Don't be fooled by any of these. When I receive them I think "Do I have an account with AOL?" and then instead of clicking the link I go right to that website and log in. In this case, I closed my AOL billed account so many years ago I can't remember it.

Next up the other clues that this is NOT a legit AOL email:

Date: March 9, 2010 1:53:24 PM MST

From: AOL <info@aol.com>

Subject: SPAM -  Warning Notification

Return-Path: <info@aol.com>

Envelope-To: 

Delivery-Date: Fri, 12 Mar 2010 12:12:31 -0500

Received: from impinc01.yourhostingaccount.com ([10.1.13.101] helo=impinc01.yourhostingaccount.com) by mailscan08.yourhostingaccount.com with esmtp (Exim) id 1Nq8PX-0000O1-7C for ; Fri, 12 Mar 2010 12:12:31 -0500

Received: from srv2.wwuae.org ([74.55.184.42]) by impinc01.yourhostingaccount.com with NO UCE id sHCX1d0090vJ7kA02HCX3s; Fri, 12 Mar 2010 12:12:31 -0500

Received: from [174.133.195.229] (helo=User) by srv2.wwuae.org with esmtpa (Exim 4.69) (envelope-from <info@aol.com>) id 1Np6Qc-0004Rq-Ja; Tue, 09 Mar 2010 14:53:22 -0600

X-En-Origip: 74.55.184.42

X-En-Impsid: sHCX1d0090vJ7kA02HCX3s

Mime-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-Msmail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-Mimeole: Produced By Microsoft MimeOLE V6.00.2600.0000

X-Whitelistedrcpt-Nohdrfromcallback: Yes

X-Antiabuse: This header was added to track abuse, please include it with any abuse report

X-Antiabuse: Primary Hostname - srv2.wwuae.org

X-Antiabuse: Original Domain - 

X-Antiabuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-Antiabuse: Sender Address Domain - aol.com

A simple use of a program called traceroute tells me where the IP address (see above in GREEN) is located. It's NOT AOL. In fact though the server that it does report as being "theplanet" may only be a bounce point, but when you send something from an AOL server it's got AOL stamped all over it. Also AOL does not use OUTLOOK EXPRESS for mailings. Sheesh. Amateurs!

Please be wary when you see things like this as in the time it took me to write this, literally millions of dollars were stolen by internet crooks. Don't be a victim. Fight back. Report these, DELETE these and go about your life.

With love and understanding for all.

Michael

Posted via email from DocMurdock - Technology Tidbits