RE: Full-disclosure: Interesting but suspicious possible phishing mail

["RandallM" <randallm () fidmail com>]

Have been getting a number of these come thru also at work. 
Of course all the users are asking me questions about these.
They all have the strange words, paragraphs, and questions like this one.
They really got my attention. I at first thought they were hidden messages
but
Not so as the one we receive come as text. 

thank you
Randall M
 
 

<|>------------------------------
<|>
<|>Message: 4
<|>Date: Tue, 11 Jan 2005 02:27:55 +0000
<|>From: "DAN MORRILL" <dan_20407 () msn com>
<|>Subject: [Full-disclosure] Interesting but suspicious possible
<|>     phishing mail
<|>To: full-disclosure () lists netsys com
<|>Message-ID: <BAY3-F6DFC3B80597953B0FA3E1C0880 () phx gbl>
<|>Content-Type: text/plain; format=flowed
<|>
<|>Hi folks,
<|>
<|>Got this really interesting mail in my box today, and 
<|>knowing that I haven't 
<|>used that e-mail address or ordered anything on line lately. 
<|>Wondering if it 
<|>might not be a phishing e-mail. Haven't seen anything like 
<|>this before. 
<|>Anyone see anything similar?
<|>r/
<|>Dan
<|>
<|>
<|>
<|>from :  Gabrielle U. Philips, Jr <gbhclayddnoglk () safe-mail net>
<|>Sent :  Monday, January 10, 2005 10:40 PM
<|>To :  "Gabrielle U. Philips, Jr" <MickeyandSnake7tit () safe-mail net>
<|>CC :  mdamon () qwest net, mdamore () qwest net, mdan12 () qwest net, 
<|>mdan22 () qwest net, mdan32 () qwest net
<|>Subject :  Shipping Notification, Tracking Number : 
<|>TCD461649887242ESB
<|>
<|>MIME-Version: 1.0
<|>Received: from msnmail2.uswest.net ([63.226.138.22]) by 
<|>mc10-f38.hotmail.com 
<|>with Microsoft SMTPSVC(6.0.3790.211); Mon, 10 Jan 2005 14:45:54 -0800
<|>Received: (qmail 72801 invoked by uid 0); 10 Jan 2005 22:45:55 -0000
<|>Received: from unknown (63.226.138.18) by 
<|>msnmail2.uswest.net with QMQP; 10 
<|>Jan 2005 22:45:55 -0000
<|>Received: (qmail 56089 invoked by uid 0); 10 Jan 2005 22:45:55 -0000
<|>Received: from 42-171-64.adsl.cust.tie.cl (200.42.171.64) by 
<|>mpls-cmx-12.inet.qwest.net with SMTP; 10 Jan 2005 22:45:42 -0000
<|>X-Message-Info: JGTYoYF78jHm2Kmrh/becsOSGajhcE+aqhdcaXLDOFI=
<|>Delivered-To: mdan12 () qwest net
<|>X-DCC-Qwest.net-Metrics: mpls-cmx-12.inet.qwest.net 1210; Body=4 
<|>Fuz1=4Fuz2=4
<|>Return-Path: ihgeclhtquoqdm () gawab com
<|>X-OriginalArrivalTime: 10 Jan 2005 22:45:54.0814 (UTC) 
<|>FILETIME=[24BA71E0:01C4F766]
<|>
<|>
<|>
<|>
<|>Content-Type: multipart/mixed; 
<|>boundary="-----mpls-cmx-12.inet.qwest.net-1105397155-56110"
<|>
<|>
<|>Content-Type: text/plain
<|>
<|>
<|>This email was forwarded from your previous Qwest.net email address
<|>to your MSN email address.  To discontinue email forwarding for any
<|>future emails sent to your previous Qwest.net email address, please
<|>contact MSN Customer Service.
<|>
<|>
<|>
<|>
<|>
<|>Content-Type: message/rfc822
<|>Content-Description: forwarded message
<|>Content-Transfer-Encoding: 8bit
<|>Content-Disposition: inline
<|>
<|>
<|>From: Gabrielle U. Philips, Jr <gbhclayddnoglk () safe-mail net>
<|>To: "Gabrielle U. Philips, Jr" <MickeyandSnake7tit () safe-mail net>
<|>Cc: mdamon () qwest net, mdamore () qwest net, mdan12 () qwest net, 
<|>mdan22 () qwest net, 
<|>mdan32 () qwest net
<|>Subject: Shipping Notification, Tracking Number : TCD461649887242ESB
<|>Sent: Monday, January 10, 2005 10:40 PM
<|>MIME-Version: 1.0
<|>Received: (qmail 56089 invoked by uid 0); 10 Jan 2005 22:45:55 -0000
<|>Received: from 42-171-64.adsl.cust.tie.cl (200.42.171.64) by 
<|>mpls-cmx-12.inet.qwest.net with SMTP; 10 Jan 2005 22:45:42 -0000
<|>X-DCC-Qwest.net-Metrics: mpls-cmx-12.inet.qwest.net 1210; Body=4 
<|>Fuz1=4Fuz2=4 Content-Type: multipart/alternative; 
<|>boundary="--Part_GRKDac7J6.oMXawOLoYO4"
<|>
<|>
<|>Content-Type: text/html; format=flowed; charset=iso-8859-15
<|>Content-Transfer-Encoding: quoted-printable
<|>
<|>Check your status Below:
<|>
<|>cov2pa.com/track.asp?cg=1&c=tc
<|>
<|>The illiterate of the 21st century will not be those who 
<|>cannot read and 
<|>write, but those who cannot learn, unlearn, and relearn. 
<|>Alvin Toffler
<|>Those police officers are practicing driving between the two 
<|>buildings.
<|>The illiterate of the 21st century will not be those who 
<|>cannot read and 
<|>write, but those who cannot learn, unlearn, and relearn. 
<|>Alvin Toffler
<|>Haven't the photographers already disliked praying?
<|>Few things are harder to put up with than the annoyance of a 
<|>good example.
<|>3
<|>When people are free to do as they please, they usually 
<|>imitate each other. 
<|>-Eric Hoffer (1902-1983)
<|>Have you already loved sleeping?
<|>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html