Doesn't "Chase Online" raise a red flag?
Marsh, KA5M
-----Original Message-----
From: TowerTalk [mailto:towertalk-bounces@contesting.com] On Behalf Of Steve
Baughn
Sent: Tuesday, March 7, 2017 12:14 PM
To: towertalk@contesting.com; W0MU Mike Fatchett <w0mu@w0mu.com>
Subject: Re: [TowerTalk] Phishing Attempt on list members
Bad thing is these bozo's are getting a little better with their English and
use of terms such as 73 etc making it a bit harder to spot.,..
73, Steve, WD8NPL
-----Original Message-----
From: W0MU Mike Fatchett
Sent: Tuesday, March 07, 2017 12:55 PM
To: towertalk@contesting.com
Subject: Re: [TowerTalk] Phishing Attempt on list members
and many other QTH.com list users.
On 3/7/2017 9:21 AM, Bill Cotter wrote:
> Beware of the phishing attempt you may receive (below). Someone has
> harvested names from this list and is targeting "tower-speak" members.
>
> 73 Bill N4LG
>
>
>
>> Delivered-To: n4lg@qx.net
>> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=qth.net;
>> s=default;
>> t=1488899527;
>> bh=y3c0luieP8LJ655Uh35p+oaTX6WXSC4BE+eL0xv3NIs=;
>> h=Date:To:From:Subject:List-Id:List-Unsubscribe:List-Archive:
>> List-Post:List-Help:List-Subscribe:Reply-To;
>>
>> b=SsD1PS1YSwz2Gv0Z6J93oDBAdXLIpaXzgM0/YCQBmO4QoZD8tuGBApMurdovTrMvK
>>
>> 5BfgStgEa+d78emz1tgS7oWACF+Tf+UydoMda4glMQsfHBQB1xrG7foebi1ZgpYdWp
>> gkkiep1te6AA48Q4nNk644U87Nm0sSE8aSfY8jRo=
>> X-Original-To: tower-speak@mailman.qth.net
>> Delivered-To: tower-speak@mailman.qth.net
>> Date: Tue, 7 Mar 2017 23:10:30 +0900
>> To: tower-speak@mailman.qth.net
>> From: "Chase AcctSec. Team chasesecurity-team_noreplies@chse.com"
>> <kb0stn@sbcglobal.net>
>> X-Sender-Warning: www.cep.co.jp has no MX records
>> X-Sender-Warning: Reverse DNS lookup failed for 210.255.105.34
>> (deferred)
>> X-SpamExperts-Class: unsure
>> X-SpamExperts-Evidence: Combined (0.39)
>> X-Recommended-Action: accept
>> X-Filter-ID:
>> s0sct1PQhAABKnZB5plbIZpY1ikLiFgbVmksaMuwG0C5OxuSEtuFWwwaLyTv3J4q92PND
>> pgLsd6D
>>
>> dd/s7VM53g3T+DSfEwaX1fMB91s1i0eF3rqxKFd/nPW1dGGCWU27kPJbqGF1mm7icJReI
>> Q1Y0eGb
>>
>> l2rxzgZzlEZmtq8bUJ1ESxetogg2qpgjEaQVMqtgHHASJNUmoOHSoqgqxfHmWWFKriOvK
>> 5c3NjZx
>>
>> hn31ZU4XXoJpPBs4SXre2qkDo6tZnxyFa+Q+jcWWki4nd/MNUQioT+LYyf+F84tisMSPn
>> hn31ZU4XXoJpPBs4SXre2qkDo6tZnxyFa+Q+VK7RuLD
>>
>> 0cO47gH2HJlBchoL647lNwN4qOsSZg+fYhVZG6JgW08GUKyIRv5R4YS10xebidA8HjwZk
>> 0cO47gH2HJlBchoL647lNwN4qOsSZg+ZUDJOsO
>>
>> TC4gLPcreuTRO8h4kE9NVybyZuCiaqkrTMLg0gyykv6sPD5sIH8EF3joBheiindVvWjMA
>> s6k3Y4z
>>
>> hdrc7mVMTsXqUoUqJg7F2WHEjt37MS2lIdOrf/zvkfJ5qxZ6Hdc351pSh/Q9kPA7nEm8y
>> CUrkAIp
>>
>> zU0HC+OHo93JT2u4lL5dx5YjZwWTcp0rVeO1dO6omiH/21XAikGmQzbz+8y1rHkBAO56p
>> zU0HC+lfq0eVU
>>
>> aVfwajC1K+JsJP8LNZ+wb8Fh6AzaRQJBYfVjU8jp64UzkfHMeaQSZyGwfqeNO0Vta0QHI
>> aVfwajC1K+JsJP8LNZ+SXmTwUu
>>
>> LKQ+ubjvZxdX/Mk3mf2JJ6ytnJ0Xd4KZmhdHwpVLA+f58jEXnRK5ls8GJS1nfGZHtwH6g
>> LKQ+pgoatEb
>> QYNxkjCA
>> X-Report-Abuse-To: spam@quarantine4.antispamcloud.com
>> X-Content-Filtered-By: Mailman/MimeDel 2.1.20
>> Subject: [Tower-Speak] Account Suspension
>> X-BeenThere: tower-speak@mailman.qth.net
>> X-Mailman-Version: 2.1.20
>> List-Id: Discussion of anything related to towers
>> <tower-speak.mailman.qth.net>
>> List-Unsubscribe:
>> <http://mailman.qth.net/mailman/options/tower-speak>,
>>
>> <mailto:tower-speak-request@mailman.qth.net?subject=unsubscribe>
>> List-Archive: <http://mailman.qth.net/pipermail/tower-speak/>
>> List-Post: <mailto:tower-speak@mailman.qth.net>
>> List-Help: <mailto:tower-speak-request@mailman.qth.net?subject=help>
>> List-Subscribe:
>> <http://mailman.qth.net/mailman/listinfo/tower-speak>,
>>
>> <mailto:tower-speak-request@mailman.qth.net?subject=subscribe>
>> Reply-To: alt.y7-fdeawx2@yopmail.com
>> Sender: "Tower-Speak" <tower-speak-bounces@mailman.qth.net>
>> X-MagicMail-OS: Inactive
>> X-MagicMail-UUID: 6ddbd5e8-0348-11e7-a552-002481abe416
>> X-MagicMail-SourceIP: 69.16.227.189
>> X-MagicMail-EnvelopeFrom: <tower-speak-bounces@mailman.qth.net>
>> X-MagicMail-Whitelisted: Yes
>>
>> Hi,
>> Due to a recent compromise of our servers by some chinese hackers, It
>> has been mandated that we carry out an integrity check to isolate and
>> disable all suspicious accounts. For now we have already placed a red
>> flag on several accounts thereby preventing them from carrying out
>> any financial transactions whatsoever.
>> To ensure that your account was not compromised, you are required to
>> ascertain your identity, failure to do this within 24 hours will lead
>> to account service suspension.
>> Login and Ascertain Your Identity
>> Thanks for your anticipated co-operation and understanding.
>> The Accounts Team,
>> For Chase Online
>> ______________________________________________________________
>> Tower-Speak mailing list
>> Home: http://mailman.qth.net/mailman/listinfo/tower-speak
>> Help: http://mailman.qth.net/mmfaq.htm
>> Post: mailto:Tower-Speak@mailman.qth.net
>>
>> This list hosted by: http://www.qsl.net Please help support this
>> email list: http://www.qsl.net/donate.html
>
> _______________________________________________
>
>
>
> _______________________________________________
> TowerTalk mailing list
> TowerTalk@contesting.com
> http://lists.contesting.com/mailman/listinfo/towertalk
_______________________________________________
_______________________________________________
TowerTalk mailing list
TowerTalk@contesting.com
http://lists.contesting.com/mailman/listinfo/towertalk
_______________________________________________
_______________________________________________
TowerTalk mailing list
TowerTalk@contesting.com
http://lists.contesting.com/mailman/listinfo/towertalk
_______________________________________________
_______________________________________________
TowerTalk mailing list
TowerTalk@contesting.com
http://lists.contesting.com/mailman/listinfo/towertalk
|