I'm not sure what to make of this one

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Sun Aug 26, 2007 4:53 am

I got this in one of my personal accounts. I poked around a little bit and the link at the bottom of the page set my AV alarms off. Could someone with more skills than I have tell me WTF this is. The link pointed to this: http:// 7 4 . 1 3 4 . 1 2 . 185/ (link declickified - SP)
That IP is a US IP from what I can find but the .ch extension on the return path e-mail, plus the fact that I never joined "Resume Hunters" set off my BS alarm.

Thanks
Chase

Quote:

From Resume Hunters Thu Aug 23 10:47:32 2007
X-Apparently-To: [email protected] via 206.190.39.71; Thu, 23 Aug 2007 10:47:34 -0700
X-YahooFilteredBulk: 67.79.183.97
X-Originating-IP: [67.79.183.97]
Return-Path: <[email protected]>
Authentication-Results: mta242.mail.re3.yahoo.com from=rrcs-67-79-183-97.se.biz.rr.com; domainkeys=neutral (no sig)
Received: from 67.79.183.97 (HELO rrcs-67-79-183-97.se.biz.rr.com) (67.79.183.97) by mta242.mail.re3.yahoo.com with SMTP; Thu, 23 Aug 2007 10:47:34 -0700
Received: from yiwzouxbs by rrcs-67-79-183-97.se.biz.rr.com with local (Exim 4.63 (FreeBSD)) id 1IOH]2-000YTJ-89 for [email protected]; Thu, 23 Aug 2007 13:47:32 -0400
To: [email protected]
Subject: Welcome Letter
From: "Resume Hunters" <[email protected]> Add to Address BookAdd to Address Book Add Mobile Alert
Content-Type: text/html;charset=windows-1252
Content-Transfer-Encoding: 7BIT
Message-Id: <1IOH][email protected]>
Sender: User yiwzouxbs <[email protected]>
Date: Thu, 23 Aug 2007 13:47:32 -0400
Content-Length: 502
Welcome Member,

Thank You for Joining Resume Hunters.

Account Number: 234418147
Temp Login ID: user9845
Temorary Password: gz135

For security purposes please login and change the temporary Login ID and Password.

Click here to enter our secure server: Resume Hunters

Enjoy,
Confirmation Dept.
Resume Hunters

Posted: Sun Aug 26, 2007 6:33 am

Could be:

A. Malware loaded Email
B. Phishing Email
C. Typo in the mailing address <- least likely

I would delete from inbox and forget about it...

Posted: Sun Aug 26, 2007 2:21 pm

Thank You!

Posted: Mon Aug 27, 2007 1:04 am

^^^

im glad someone else posted this topic as i got a similer email which i will forget about...although this never set off any of my secrity software but its still good to see fellow 419 baiters opinions on even new wannabe scams

I'm not sure what to make of this one	View next topic View previous topic