mavfo.org/newfolder/httponline-secure-pay.php?daqCIDID=23

Email Header . Ip Traced Mumbai India . Source IP Address 14.97.53.105 . Tata Teleservices Ltd - Tata Indicom - Cdma Divisi

Suspect Hacked or Spoofed Origination Email Address.

Following the link in the email will download a Rogue Identity Stealing Antivurus onto your computer .

Do Not Follow Link

hxxp :// mavfo.org /newfolder/ httponline- secure-pay.php?daqCIDID=23

Do Not Follow Link

edited to disable link - please do not post active links to malware. -Jillian

Return-Path: <[email protected]>
Received: from nm25.access.bullet.mail.mud.yahoo.com (nm25.access.bullet.mail.mud.yahoo.com [66.94.237.90])
by mtain-dh03.r1000.mx.aol.com (Internet Inbound) with SMTP id 46F1938000091
for <xxxxxx>; Thu, 16 Feb 2012 13:02:33 -0500 (EST)
Received: from [66.94.237.196] by nm25.access.bullet.mail.mud.yahoo.com with NNFMP; 16 Feb 2012 18:02:32 -0000
Received: from [66.94.237.109] by tm7.access.bullet.mail.mud.yahoo.com with NNFMP; 16 Feb 2012 18:02:32 -0000
Received: from [127.0.0.1] by omp1014.access.mail.mud.yahoo.com with NNFMP; 16 Feb 2012 18:02:32 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 71493 invoked by uid 60001); 16 Feb 2012 18:02:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sbcglobal.net; s=s1024; t=1329415352; bh=Ng83KE/6Nl0lon1ht+g9IIuOO5xFREiZMjTc2w+w/NA=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=2L/NIpThcrqfcCufQk/38xK5ztFvG4Zn8m93z5ta8PLNR+qQMoqEtM6qJG2GEeOhGhOOGB5CK+97n5Fu0FVObzYcu4vktPN6fUycPDLyDRQFC7fyrp68pz1IRSBflxNuwFWi6ZQGKiylnI84jsEs9WhZmup0I9rAbwbtUSHrtHg=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=sbcglobal.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type;
b=TkjQzke14WL4UwO8Heu9JSiYJR45LaSow1nNeFzBHHXwR0NytX6X9VfWQSRl97nO8zn3RrH/1x3/HWqe9lBlrCtAGrCNS0qa2Gei3ZpG3YN4T0Dm87kInZsuLvZNFq4td5Zv933Wr4nv3yausJ6zKnSHkXxdRTTzAlebXArnq98=;
X-YMail-OSG: nXyA2pQVM1mQAm9eUtbnGGyS6sJs98nBNrGOdw0QRa4Qyrj
gpEhq7G7GcfRkSZm3iKKGQwrD0hhdYi4PL7xMgq46STv2bXI6pDsnhPYvINP
m9uhwNUKWMaoNfcG8zBixUWNMHgpRPn6VpVl1m0mpDuuCGWHrtsZyWNNE441
eRzeSIyBlj..Yesxn7X1JQHIGtV13MeAimxnLUBhxuAdMdcO._TtyPBvLI6e
uVIaAtrpZ13suUU6.6XYSjks2b4Umx6962bv5PAEFCb10GKTgZe1fO8d0taB
IGl1uyTe3wuh_9jX0F3M_gSQbXqfR6X_XkzeNE5pQWVgU4mKv_sFQtHX3oFJ
i32rISJDUFQE_rY5HmxnmixN5oTbNvRp27flhVW4Uiy8S6LJTFVKASnRTsQe
2iNPUKxkir_N4MxU.fbSwroS42lXggy02V.qp71i.pPji3cleyrCxEkz1FrT
LWHAiHzuibHSMhAFEe4XRNPDSS7zD_uXz1o3xr_M4aKpDMPICFzLczDyTEXv
kvOxt6t3smONcERiYM8WgXqCe4NDfNffYohCGDNttqqcIZFJHSzEMCOV1xiM
t1pM-
Received: from [14.97.53.105] by web81602.mail.mud.yahoo.com via HTTP; Thu, 16 Feb 2012 10:02:32 PST
X-Mailer: YahooMailWebService/0.8.116.338427
Message-ID: <[email protected]>
Date: Thu, 16 Feb 2012 10:02:32 -0800 (PST)
From: Stan Burman <[email protected]>
Subject: Re:
To: xxxxxx
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
x-aol-global-disposition: G
x-aol-sid: 3039ac1d41174f3d44b96256
X-AOL-IP: 66.94.237.90
X-AOL-SPF: domain : sbcglobal.net SPF : none



Begin Scam Email



nice day
hxxp: //mavfo. org/newfolder/ httponline-secure-pay.php?daqCIDID=23

Thu, 16 Feb 2012 19:02:31
______________
"This degree scale will give us that." (c) Trinity x7xx

End Scam Email

Do not follow link .