[nsp-sec] ATT Yahoo/AOL scam drop box

[Jeff Wolfe]

Hey Yahoo / AOL folks:

Run of the mill scam, drop box is "dmmgarlc at aol.com".

Looks like it was sent from Yahoo!.


-JEff
Penn State

> X-IronPort-AV: E=Sophos;i="4.60,409,1291611600"; d="scan'208";a="11728626"
> X-IronPort-Anti-Spam-Result: Av//AKtoR03Rv1ZgkWdsb2JhbAAilRQJDgEKGwEkGBo2CIQXiXoBAQEBFAoHEQMSD4YppX6BCwGBG4xbBSWFLIUXilCKKQ
> X-IronPort-Anti-Spam-Filtered: true
> Received: from web82201.mail.mud.yahoo.com ([209.191.86.96]) by ironport1.ems.psu.edu with SMTP; 01 Feb 2011 04:59:53 -0500
> Received: (qmail 98857 invoked by uid 60001); 1 Feb 2011 09:59:52 -0000
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1296554392; bh=wORmBsII3m/b94Xp6FupPYWJ+ktdBAP8shj3nFYgy+E=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=M9R2o+VgLp8uN0uV9eM4MQsmlG+UViCGR4ZUxFpMth3HgtaJwuEvlY7hMagS5UmETrC0tGML9885dF20KjNOlYbdnDsivIziBmuzwtXLrh+vrHGcIPoWcuHUXA5O8lJOK9Lsk6bk5M/y3usB3zZ0TNYceqNik8o7y2IeHasRoaI=
> Message-ID: <816039.90427.qm at web82201.mail.mud.yahoo.com>
> X-YMail-OSG: kMTg2XEVM1n6N4jIPUzNtwdrtoYlYlm3W4w_SWMqqObdw4S far_tWQ3eV55klYP_prgCv5t9q6A7cHL6VLE5d3TvXXFqTC.acDNI73zfaV9 pID1LK5QAO44..qXr8JF0.cEDR73c2xpBzU0CGda7HiEi64zIjYvavHgTWsN huoaEY.x7sCQK.a34faGINu1gqr31y0cJkDMNj2RI4dJwuEFHeF0sU4iBxEC s29k7f5ydFr3qt6mpGcyVRy.Pj2C4C4Ym9_ToEJIQNnIjkGfN5gJGzSIDpma 4cSFQfUvdcxQQk0YaO88yf6anurKyecxTOckMPJEk90bFNyph3vSt_KOIojv fDloPt9NUae03hAZxEVgQqSgcM3AGSWYLv4sWzA06Ao5npq0vORRt8UtykZj g_PZqhAGnC9soA0kZJXxRQHC2o5HYkgqcgLUVfsIiq4gA7Y7ovCwXztEClBk I_e_yVKbp4EJfeSxkRSJa3h0FLF3vruODsm6sJihUMGlyHPrWwgz1eg8ZpxI r.8cqFxrYWCCreGmhRCFShk1EB6gwnC3oO.K0ig--
> Received: from [41.155.5.104] by web82201.mail.mud.yahoo.com via HTTP; Tue, 01 Feb 2011 01:59:52 PST
> X-RocketYMMF: mmoffat2001
> X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.107.285259
> Date: Tue, 1 Feb 2011 01:59:52 -0800 (PST)
> From: Dale Malecki <dmmgarlc at aol.com>
> Reply-To: dmmgarlc at aol.com
> Subject: OUR VACATION PROBLEM!!!!!!!!!HELP
> To: undisclosed recipients: ;
> MIME-Version: 1.0
> Content-Type: multipart/alternative; boundary="0-236901884-1296554392=:90427"
>
> Am writing this with tears in my eye,my family and I came down here to
> Wales UK. for a short vacation  unfortunately we were mugged at the
> park of the hotel where we lodge,all cash,credit card and mobile phone
> were stolen off from  us but luckily for us we still have our passports
> with us.We've been to the embassy and the Police station here, but
> they're  not helping issues at all and our flight leaves today but
> we're having problems settling the hotel bills, and the hotel  manager
> won't let us leave until we settle the bills,i'm freaked out at the
> moment.we need a quick loan,promise to pay you back once we get home
> please help.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> Thanks
>
>
>
>
>
>
>
>
>
>
>
>
> Dale
>
>
>
>
>
>
>
>
>
>
>