Beware of a GMail phishing attempt

kosandpol

Well-known member
  • Jun 10, 2008
    45,329
    1,492
    113
    If you receive a mail like below, do NOT reply to it.

    cleardot.gif
    from :
    cleardot.gif
    Gmail [email protected]
    to :
    cleardot.gif
    [email protected]
    date :
    cleardot.gif
    Sun, Sep 18, 2011 at 6:30 PM
    subject :
    cleardot.gif
    Your Google Account

    We make every effort to ensure that we provide the Ultimate Security required for maximum protection of all our Email Account from unwanted Users and spy wares. We do not want you to loose access to your Account since your login information are no longer valid on our database system. We need to confirm your profile details below for verification purpose and to confirm that you own this account to avoid Denial of Service.


    Username:
    Password
    Birthdate
    Territory

    We require all users to respond within a period of 48 hours to avoid account suspension.
    Sincerely,
    G mail.

    This is a lame attempt at lifting your gmail account details.

    Looking at the mail header, you can clearly see that this is NOT sent by Gmail.
    Code:
    Received: by 10.223.87.70 with SMTP id v6cs169081fal;
            Sun, 18 Sep 2011 06:00:18 -0700 (PDT)
    Received: by 10.68.13.33 with SMTP id e1mr2751295pbc.387.1316350817399;
            Sun, 18 Sep 2011 06:00:17 -0700 (PDT)
    [COLOR="Red"]Return-Path: <[email protected]>[/COLOR]
    Received: from [COLOR="Red"]p3plwbeout15-06.prod.phx3.secureserver.net (p3plsmtp15-06-2.prod.phx3.secureserver.net. [173.201.193.44])[/COLOR]
            by mx.google.com with SMTP id c8si8605850pbl.273.2011.09.18.06.00.16;
            Sun, 18 Sep 2011 06:00:17 -0700 (PDT)
    [COLOR="Red"]Received-SPF: neutral (google.com: 173.201.193.44 is neither permitted nor denied by best guess record for domain of [U][email protected][/U]) client-ip=173.201.193.44;[/COLOR]
    Authentication-Results: mx.google.com; spf=neutral (google.com: 173.201.193.44 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
    Received: (qmail 12210 invoked from network); 18 Sep 2011 13:00:16 -0000
    Received: from unknown (HELO localhost) (173.201.193.115)
      by p3plwbeout15-06.prod.phx3.secureserver.net with SMTP; 18 Sep 2011 13:00:16 -0000
    Received: (qmail 14487 invoked by uid 99); 18 Sep 2011 13:00:16 -0000
    Content-Transfer-Encoding: quoted-printable
    Content-Type: text/html; charset="utf-8"
    [COLOR="Red"]X-Originating-IP: 41.113.16.202[/COLOR]
    User-Agent: Web-Based Email 5.6.01
    
    From: "Gmail" <[email protected]>
    X-Sender: [email protected]
    To: [email protected]
    Subject: Your Google Account
    Date: Sun, 18 Sep 2011 06:00:14 -0700
    Mime-Version: 1.0
    lame hacker's domain : mansuod.com
    lame hacker's IP : 41.113.16.202
    lame hacker's mail server : p3plwbeout15-06.prod.phx3.secureserver.net
    lame hacker's mail server IP : 173.201.193.115