Paranoia or a lucky escape?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Tue Apr 20, 2010 6:03 pm

Didn't click on the links, why would Yahoo contact my catcher account?

from
Ecard from Yahoo! Greetings <[email protected]>

reply-to
[email protected]
to
[email protected]
date
20 April 2010 18:38
subject
from Rita. Hello dear Nice to meet you, has sent you an ecard from Yahoo! Greetings
mailed-by
yahoo.americangreetings.com
Signed by
yahoo.americangreetings.com

hide details 18:38 (18 minutes ago)

from Rita. Hello dear Nice to meet you, ([email protected]) has sent you an ecard.

To view your ecard, choose from the options below.

Click on the following link:
http://www.yahoo.americangreetings.com/ecards/view.pd?i=334301471&m=1650&rr=y&source=yahoo999

For your security, if you'd prefer not to click on links within this email:
1. Type http://www.yahoo.americangreetings.com/?source=yahoo999&rr=y into your web browser
2. Locate the ecard pickup link in the upper right-hand corner of the page
2. Enter the following code --> 3343014711650

Please do not reply to this email. To help resolve your issue or question, go to:
http://www.yahoo.americangreetings.com/help/index.pd?source=yahoo999
We have an extensive help center that may answer your questions, or you can choose to email us from there.

To read about email protection, type http://www.yahoo.americangreetings.com/emailprotection into your web browser.

Thank you!
Your friends at Yahoo! Greetings

Posted: Tue Apr 20, 2010 6:05 pm

Forgot the headers.

Delivered-To: [email protected]
Received: by 10.213.28.205 with SMTP id n13cs25544ebc;
Tue, 20 Apr 2010 10:39:41 -0700 (PDT)
Received: by 10.229.221.84 with SMTP id ib20mr5369734qcb.93.1271785179791;
Tue, 20 Apr 2010 10:39:39 -0700 (PDT)
Return-Path: <[email protected]>
Received: from dc3-ironport5.americangreetings.com (dc3-ironport5.americangreetings.com [66.119.43.123])
by mx.google.com with ESMTP id fo28si9542323qcb.19.2010.04.20.10.39.38;
Tue, 20 Apr 2010 10:39:38 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 66.119.43.123 as permitted sender) client-ip=66.119.43.123;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 66.119.43.123 as permitted sender) [email protected]; dkim=pass [email protected]
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=yahoo.americangreetings.com;
[email protected]; l=1001; q=dns/txt;
s=sitemail; t=1271783534; x=1303319534;
h=from:sender:reply-to:subject:date:message-id:to:cc:
mime-version:content-transfer-encoding:content-id:
content-description:resent-date:resent-from:resent-sender:
resent-to:resent-cc:resent-message-id:in-reply-to:
references:list-id:list-help:list-unsubscribe:
list-subscribe:list-post:list-owner:list-archive;
z=From:=20"Ecard=20from=20Yahoo!=20Greetings"=20<ecards@ya
hoo.americangreetings.com>|Reply-To:=20<ritaukazi60@yahoo
.com>|Subject:=20from=20Rita.=20Hello=20dear=20=20=20Nice
=20to=20meet=20you,=20has=20sent=20you=20an=20ecard=20fro
m=20Yahoo!=20Greetings|Date:=20Tue,=2020=20Apr=202010=201
3:38:57=20-0400|Message-Id:=20<1271785137.0969681091.1089
[email protected]>|To:=20<[email protected]>
|MIME-Version:=201.0;
bh=bWhsrb1brXJKRJT0HcUhhzS24GFl35+lzYu4bCJwlCc=;
b=bsyuU5flYCdaIZCT0T5EXil9DZw2wmlf7Gpjxe5NqZSgkwxjWok7UOvn
sTkRSDfV953p1qSLuiPKazJovBKrKa9y0GemMkhF2+JNEKJWK4ujbTjAw
TGupW42I9XuZGSBy8dZz5bF05mmKJZ2mJQj1s9dCrVaM8RDNixpcbCoxQ
E=;

Posted: Tue Apr 20, 2010 6:07 pm

I clicked for you. It's a rather lengthy and loud ecard with the following text attached to it:

Quote:

Hello dear
Nice to meet you,

my id .([email protected]) .
how are you today i hope that every things is OK with you as is my pleasure to contact you after viewing your profile in which really interest me in having communication with you if you will have the desire with me so that we can get to know each other better and see what happened in future. i will be very happy if you can write me back with my privet email adress ([email protected]) for easiest communication and to know more about each other.i will send you my picture when i receive your reply,(Remember the distance or colour does not matter but love matters a lot in life )i will be waiting to hear from you as i wish you all the best for your day.
yours new friend Rita.

ETA: Even worse... it's a happy birthday e-card.

Posted: Tue Apr 20, 2010 6:10 pm

I think lads are trying new ways of getting their scam messages from getting flagged as spam or something.

I sometimes get 419 scams and the subject has something like: "this use has forwarded you this site link" or something. It is usually a legit site, and inside the message there is the scam.

Posted: Tue Apr 20, 2010 6:13 pm

Beware though as e-cards or anything else that 'runs' oncew opened can be a virus as well.

Posted: Tue Apr 20, 2010 6:22 pm

MOP do feel free to play with your new friend.

Beware indeed wowwow, don't know any Rita.

Posted: Tue Apr 20, 2010 8:04 pm

I believe it also blocks where they are sending the mail from. The header resolves to United States (Cleveland), I don't think for a minute the sender is in Cleveland. Rolling Eyes

Paranoia or a lucky escape?	View next topic View previous topic