[nsp-sec] hotmail phishing drop box Reply-To: <claims_dept22 at hotmail.com>

[Russell Fulton]

Received: from mx1.auckland.ac.nz (130.216.12.42) by
 uxchange10-fe1.UoA.auckland.ac.nz (130.216.4.112) with Microsoft SMTP Server
 (TLS) id 14.1.289.1; Thu, 6 Oct 2011 09:42:49 +1300
X-Ironport-External: YES
X-Envelope-Recipient: rful011 at uoa.auckland.ac.nz
X-Ironport-HAT: -2.6 - SUSPECTLIST - $THROTTLED
X-IronPort-AV: E=Sophos;i="4.68,488,1312113600"; 
   d="scan'208";a="103225259"
X-IronPort-Anti-Spam-Result: Av//AMyyi07KmDZGSmdsb2JhbAAxDQSDGS6BY48lhQQBAjUjSgEBAYdjhDR2BhoBARUMCgYJDCQBawEBAQ4BLB0BAQECBAEBARMgBwEIBAlGDiUDAQsmEwEOAQQgAR2FNgEBASiCAwEBAZgIjjeBRyWBHgoBAQEDDIQbbYhEg3sKBQ2DDASGOoE8hEKJaYNbh3qDQYEqGQEX
X-IronPort-Anti-Spam-Filtered: true
Received-SPF: None identity=helo; client-ip=202.152.54.70;
  receiver=mx1.auckland.ac.nz;
  envelope-from="info at mail.com";
  x-sender="postmaster at batavia-air.co.id";
  x-conformance=spf_only
Received-SPF: None identity=mailfrom; client-ip=202.152.54.70;
  receiver=mx1.auckland.ac.nz;
  envelope-from="info at mail.com";
  x-sender="info at mail.com";
  x-conformance=spf_only
Received: from mail.batavia-air.co.id (HELO batavia-air.co.id)
 ([202.152.54.70])  by mx1.auckland.ac.nz with ESMTP; 05 Oct 2011 14:33:31
 +1300
Received: from 202.152.54.70 (mail.batavia-air.co.id [127.0.0.1])	by
 batavia-air.co.id (Postfix) with ESMTP id 530831A88A2D;	Wed,  5 Oct 2011
 07:20:47 +0700 (WIT)
Received: from 41.203.64.251        (SquirrelMail authenticated user fernando)
        by 202.152.54.70 with HTTP;        Wed, 5 Oct 2011 07:20:47 +0700
 (WIT)
Message-ID: <14203.41.203.64.251.1317774047.squirrel at 202.152.54.70>
Date: Wed, 5 Oct 2011 07:20:47 +0700
Subject: Warning!!! Your Email Account has exceeded its quota limit.
From: Webmail Administrator <info at mail.com>
Reply-To: <claims_dept22 at hotmail.com>
User-Agent: SquirrelMail/1.4.8-4.0.1.el4.centos
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
To: undisclosed-recipients:;
Return-Path: info at mail.com
X-MS-Exchange-Organization-AuthSource: uxchange10-fe1.UoA.auckland.ac.nz
X-MS-Exchange-Organization-AuthAs: Anonymous
MIME-Version: 1.0

Dear Account User,

Welcome to Webmail Administrator

We hereby announce to you that an automatic error message alert was
received in our database from your email account. Your Email account has
almost exceeded is Quota Limit! We are currently carrying out possible
maintenance on your account.

You might be unable to send and receive email, and this could make your
email account ineffective and as well as possible deletion from database.
To avoid this and to assist us in sorting out this problem we advise that
you verify your account and upgrade by filling out the details below:

EMAIL ADDRESS:
USERNAME:
PASSWORD:
CONFIRM PASSWORD:
DATE OF BIRTH:

Note: changes in database may take 2-3 business days.

Thank you.

Web Administrator
Remote Webmail Service
SS's Unix/IMAP mail service
C 2011 UCLA Web Administrator