Peter’s Soapbox

Lame Phishing Attempt

Here’s a lame phishing scam attempt that my mom recently received. I can’t believe people fall for this, but they do.
Return-Path: Received: from smx71.sover.net (smx71.sover.net [209.198.112.151]) by spot.sover.net (8.13.8/8.13.8) with ESMTP id m0SNPKlL083277 for <MY MOM’s ADDRESS HERE - REMOVED FOR OBVIOUS REASONS>; Mon, 28 Jan 2008 18:25:20 -0500 (EST)
(envelope-from rkimes@peoplepc.com)
Received: from sover.net (localhost.sover.net [127.0.0.1])
by smx71.sover.net (8.14.1/8.14.1) with ESMTP id m0SNPI3F060639
for <MY MOM’s ADDRESS HERE - REMOVED FOR OBVIOUS REASONS>; Mon, 28 Jan 2008 18:25:19 -0500 (EST)
(envelope-from rkimes@peoplepc.com)
Received: (from defang@localhost)
by sover.net (8.14.1/8.14.1/Submit) id m0SNPHj2060568
for MY MOM’s ADDRESS HERE - REMOVED FOR OBVIOUS REASONS; Mon, 28 Jan 2008 18:25:17 -0500 (EST)
(envelope-from rkimes@peoplepc.com)
X-Authentication-Warning: donkey1.sover.net: defang set sender to using -f
Received: from mta4.adelphia.net (mta4.adelphia.net [68.168.78.184])
by smx7x.sover.net (envelope-sender ) (MIMEDefang) with ESMTP id m0SNPAki060319; Mon, 28 Jan 2008 18:25:17 -0500 (EST)
Received: from edge11.adelphia.net ([209.86.89.73]) by mta4.adelphia.net
(InterMail vM.6.01.05.02 201-2131-123-102-20050715) with ESMTP
id <20080128232508.IJOI2226.mta4.adelphia.net@edge11.adelphia.net> for ; Mon, 28 Jan 2008 18:25:08 -0500
Received: from smtpauth13.mail.atl.earthlink.net ([209.86.89.73])
by edge11.adelphia.net
(InterMail vG.2.00.00.02 201-2161-108-103-20050713) with ESMTP
id <20080128232509.LVQU27457.edge11.adelphia.net@smtpauth13.mail.atl.earthlink.net> for ; Mon, 28 Jan 2008 18:25:09 -0500
Received: from [209.86.224.50] (helo=mswamui-swiss.atl.sa.earthlink.net)
by smtpauth13.mail.atl.earthlink.net with asmtp (Exim 4.34)
id 1JJdLg-00075c-Qm
for skal@adelphia.net; Mon, 28 Jan 2008 18:25:08 -0500
Received: from 213.185.118.224 by webmail.peoplepc.com with HTTP; Mon, 28 Jan 2008 18:25:08 -0500
Message-ID: <16690938.1201562708755.JavaMail.root@mswamui-swiss.atl.sa.earthlink.net> Date: Tue, 29 Jan 2008 00:25:08 +0100 (GMT+01:00) From: rkimes@peoplepc.com Reply-To: soverprotect@gmail.com Subject: PLEASE PROTECT YOUR SOVER EMAIL ACCOUNT FROM BEING CLOSED Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Mailer: EarthLink Zoo Mail 1.0 X-ELNK-Trace: 2113918cd9dcdc88e9c7218ab0f5e41dcf19559046249dac5812bd2e937f99e6e67f4c8947036589350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c X-Originating-IP: 209.86.224.50 X-Bayes-Prob: 0.0001 (Score 0) X-Spam-Score: 3.60 (***) [Tag at 5.00] L_T_COMBINED,NO_REAL_NAME,SUBJ_ALL_CAPS,UNDISC_RECIPS,URG_BIZ X-Spam-Milter-Status: No, hits=3.60 required=5.00 l=75 f=1 st=1 tests=L_T_COMBINED,NO_REAL_NAME,SUBJ_ALL_CAPS,UNDISC_RECIPS,URG_BIZ X-CanItPRO-Stream: sovernet:MY MOM’s ADDRESS HERE - REMOVED FOR OBVIOUS REASONS (inherits from sovernet:default)
X-Canit-Stats-ID: Bayes signature not available
X-Scanned-By: CanIt (www . roaringpenguin . com) on 209.198.112.41
Status:
X-PMFLAGS: 36176000 0 1 P4LZ1SS7.CNM

This is to notify you that we are presently working on our SOVER
Webmail, this maintenance can close your SOVER email account
completely. Please do not say you were not informed, your urgent
response is highly needed, to protect your email account from being
closed, please forward your SURNAME and PASSWORD to our customer
services with email address: soverprotect@gmail.com ________________________________________ PeoplePC Online A better way to Internet http://www.peoplepc.com