Personal Website of Dave York
Home | .docx Version Of My Resume | "Thoughts on The Late War" | .doc Version of my Resume | Favourite Links | Qualification Scans | My Resume | Quotations

How to Pwn Password Phishing Scammers

From: MSN_Abuse (MSN_Abuse@css.one.microsoft.com)
Medium riskYou may not know this sender.Mark as safe|Mark as junk
Sent: Wednesday, 11 March 2009 5:13:18 PM
To: Dave York (dy90@hotmail.com)

Hello Dave,

 

We have reviewed the account troyfrench4@hotmail.com and upon further investigation, we have found that the account has violated Terms of Use Agreement and we have closed the account.

 

Your help in making the Microsoft network an enjoyable place for everyone is greatly appreciated.

 

Sincerely,

Kim

Microsoft Global Escalations





--- Original Message ---
From : WEBCS.WLHM.00.00.EN.SYK.MNL.AU.T01.SPT.00.EM
Sent : Sunday, March 08, 2009 6:31:52 AM UTC
To : "Dave York"
Subject : RE: SRX1094994183ID - Hotmail phishing scam originating from X-Originating-IP: [41.219.201.95]

Hello Dave,

 

 

Thank you for writing Windows Live Hotmail Customer Support. My name is Karen and I apologize for the delay in answering your e-mail. This is in response to your concern regarding the e-mail accounts that was used for scamming.

 

I appreciate the information you have provided us. I have already submitted your case to our product team for further investigation. I may not be able to get back to your message soon but I assure you that we are working diligently to have your issue resolved.

 

You are valuable at Windows Live, and we look forward to providing you with consistent and effective service. We appreciate your input and involvement in our Windows Live products.

 

 

Sincerely,

 

 

Karen K.

Windows Live Hotmail Customer Support





--- Original Message ---
From : "Dave York"
Sent : Friday, February 27, 2009 12:16:12 AM UTC
To : "abuse@hotmail.com"
Subject : Hotmail phishing scam originating from X-Originating-IP: [41.219.201.95]

Dear Hotmail Abuse,
 
below is the full email header disclosing X-Originating-IP and further below is the phishing message from 'troyfrench4@hotmail.com'. Please take appropriate action to defend the good name of the Windows Live Hotmail Team that is being fraudulently misused by a scammer in such fashion.
 
With Thanks to Windows Live and Hotmail for your services as administrators,
 
from David York
Sydney, Australia
 


 
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtTQ0w9Mw==
X-Message-Status: n:0
X-SID-PRA: Windows Live Team Live Team Care <troyfrench4@hotmail.com>
X-SID-Result: Pass
X-Message-Info: cTX+9FGku42no0cvuoGDfDnBB3XnG6QSnfJwvG75s/Kk8CmcXToOhoOAwOZzvb4mO9fjv+BPYSFtTTjU03cp5ekMHzawfcef
Received: from bay0-omc3-s38.bay0.hotmail.com ([65.54.246.238]) by bay0-imc3-s24.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Wed, 25 Feb 2009 09:42:51 -0800
Received: from BAY132-W51 ([65.55.137.86]) by bay0-omc3-s38.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 25 Feb 2009 09:42:39 -0800
Message-ID: <BAY132-W51108F8461EA0C52E5EA26FFAC0@phx.gbl>
Return-Path: troyfrench4@hotmail.com
Content-Type: multipart/alternative;
boundary="_a3ea6d87-94b6-4dc0-97af-9944a22546d2_"
X-Originating-IP: [41.219.201.95]
Reply-To: <customerhelpservices@live.com>
From: Windows Live Team Live Team Care <troyfrench4@hotmail.com>
Subject: Windows Live Hotmail! Warning! Verify Your Account Now To Avoid
Closure ( VX2G99AAJ ) !!!
Date: Wed, 25 Feb 2009 12:42:39 -0500
Importance: Normal
MIME-Version: 1.0
Bcc:
X-OriginalArrivalTime: 25 Feb 2009 17:42:39.0278 (UTC) FILETIME=[73DD3CE0:01C99770]

--_a3ea6d87-94b6-4dc0-97af-9944a22546d2_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable



 

From: troyfrench4@hotmail.com
Subject: Windows Live Hotmail! Warning! Verify Your Account Now To Avoid Closure ( VX2G99AAJ ) !!!
Date: Wed, 25 Feb 2009 12:42:39 -0500

 
Dear Account User

 
 
CONFIRM YOUR WINDOWS LIVE ACCOUNT SERVICES. VERIFY YOUR FREE HOTMAIL ACCOUNT NOW !!!
 
 
This Email is from Hotmail Customer Care and we are sending it to every Hotmail Email User Accounts Owner for safety. we are having congestions due to the anonymous registration of Hotmail accounts so we are shutting down some Hotmail accounts and your account was among those to be deleted. We are sending this email to you so that you can verify and let us know if you still want to use this account. If you are still interested please confirm your account by filling the space below.Your User name, password, date of birth and your country information would be needed to verify your account.

Due to the congestion in all Hotmail users and removal of all unused Hotmail Accounts, Hotmail would be shutting down all unused Accounts, You will have to confirm your E-mail by filling out your Login Information below after clicking the reply button, or your account will be suspended within 24 hours for security reasons.

* Username: ...............................
* Password: ................................
* Date of Birth: ............................
* Country Or Territory: .................

After following the instructions in the sheet, your account will not be interrupted and will continue as normal. Thanks for your attention to this request. We apologize for any inconveniences.

Warning!!! Account owner that refuses to update his/her account after two weeks of receiving this warning will lose his or her account permanently.
 
Sincerely,
The Windows Live Hotmail Team



Click here to obtain your own FREE .co.nr web domain just like http://york.co.nr !


Map stars show locations of visitors to this site since the map was added in early May of 2009

Your Internet Protocol Address is
Your Host Location is
Your Country Location is