MLP RPG players: Fake [email protected] emails WARNING.
My account isn’t hacked. I am 100% certain that my account [email protected] isn’t sending any AD emails.
However, as secure precaution. I changed my yahoo’s random generated password to 20 characters password.
Whoever is doing that, is using SMTP faking my email address to send out fake emails. DO NOT CLICK on those URL.
If you are tech savvy. Please check the IP/DNS source for those emails, I will DDoS them to hell once it become clear who is doing that low life shit.
Other issues: I have no fucking clue how the fuck they managed to get ALL of my contact emails on yahoo. (so everyone who got a reply from [email protected] got their email exposed)
I am 100% certain that this isn’t a game server database hack. After going thru the list of relies from those fake emails, it became clear that those emails are stolen from my Yahoo account previous contacts.
So it is out of my business, because Yahoo did a horrible job securing my email. I will move away from Yahoo email this week and switch to Gmail.
Fake email’s header:
x-store-info:sbevkl2QZR7OXo7WID5ZcaZ0jeT0hTF69C7eP4YVQgwAp2n9fEkGVeeJlwZ1fKqvr9tiTXsXN3hHof3WFlHHIwSnWByncjioQEj8n2b8HcKmf0mxecFwoS/vKe5LSq7CT9d03DEEkzc=
Authentication-Results: hotmail.com; spf=none (sender IP is 82.98.134.205; identity alignment result is pass and alignment mode is relaxed) [email protected]; dkim=none (identity alignment result is pass and alignment mode is relaxed) header.d=yahoo.com; x-hmca=none [email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MTtHRD0xO1NDTD0w
X-Message-Info: G7D4bOr+l5G7xtC2+7RExXPEjLDxpFguFkmhK+XltU73GkqjXH8M/ZJSWVpxRJcRu0qZTAJVikJf5bw4A83X6Z463Uh2CMeK/WV/ETtCRWqCNWLJngNGarJfivAFlA05N75mR7vlb9IxJW97i6ma89e2vm1v6opEx+rknpOwtn60cx3H9DwVYAViTF+Tdm+la0g4hFtNDozaL022vLdIdy3qI56R1Hyj
Received: from hl202.dinaserver.com ([82.98.134.205]) by BAY0-MC4-F20.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Wed, 26 Mar 2014 13:31:54 -0700
Received: from madrid-ds.com (unknown [27.74.102.68])
by hl202.dinaserver.com (Postfix) with ESMTPA id 006565A6570;
Wed, 26 Mar 2014 21:29:45 +0100 (CET)
From: Harvard Han <[email protected]>
To: “gcomms666” <[email protected]>, “Tylerboomgaarden” <[email protected]>, “drewheinson” <[email protected]>, “houchkid” <[email protected]>, “supersmartsam” order tramadol next day <[email protected]>, “sonic hedgehog1997” <[email protected]>, “darkferncielle” <[email protected]>, “midnightnya” <[email protected]>, “leviproc” <[email protected]>, “David Hijlkema” <[email protected]>, “neofox2000” <[email protected]>, “seadog575” <[email protected]>, “Kline DavidQ” <[email protected]>, “harvard1932” <[email protected]>, “infernomage39” <[email protected]>, “beastchoi641” <[email protected]>, “themusicfreak103” <[email protected]>, “harrywuzhere” <[email protected]>, “lasvegaspunk” <[email protected]>
Subject: Harvard Han
Date: Tue, 26 Mar 2014 09:29:45 +0100
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=”—-=_NextPart_000_09B2_8B20F6A9.3986E4E5″
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AVkoCB6Nu3JiZGNnbjZmNWY5a3hhcA==
Content-Language: en-us
X-DinaScanner-Information: DinaScanner. Filtro anti-Spam y anti-Virus
X-MailScanner-ID: 006565A6570.A7FFB
X-DinaScanner: Este E-Mail no ha sido analizado.
X-DinaScanner-SpamCheck:
X-DinaScanner-From: [email protected]
X-Spam-Status: No
Return-Path: [email protected]
X-OriginalArrivalTime: 26 Mar 2014 20:31:55.0222 (UTC) FILETIME=[6D8D8F60:01CF4932]
Real email’s header:
x-store-info:sbevkl2QZR7OXo7WID5ZcaZ0jeT0hTF6AXzSlXmnfiY1iRQZbmoEnRMQENIv4Gj7TJL7hFGFCqgVnahDbYX4TvB4eC6q+ApepVBqPwZ4R52A5MJwQ83rwH7PiKi+KkY4Ajio0OwwkT4=
Authentication-Results: hotmail.com; spf=none (sender IP is 98.138.91.115; identity alignment result is pass and alignment mode is relaxed) [email protected]; dkim=pass (identity alignment result is pass and alignment mode is relaxed) header.d=yahoo.com; x-hmca=pass [email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: PASS
X-SID-Result: PASS
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0w
X-Message-Info: gamVN+8Ez8V+RHg+F+brAYHAnmDl7UUXWRSegMSlbPNmDZ//RD8/GK+rbwqOYbW7UEXe4dXk8sXIIEc5fC04+EccZxj0qWRII2C/dmUNGEvkNSVYUTEYTnucV/jGzGYq05YmL94biporoxfoDyXsosxU2Ndlu2O4RTsYLSBCcItAELTl53vkrBRnATEpsj6uejla4VD4cqpM0zC6P3eO40wXQPydcCtB
Received: from nm22-vm6.bullet.mail.ne1.yahoo.com ([98.138.91.115]) by COL0-MC6-F3.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Wed, 26 Mar 2014 14:20:43 -0700
Received: from [98.138.101.130] by nm22.bullet.mail.ne1.yahoo.com with NNFMP; 26 Mar 2014 21:20:42 -0000
Received: from [98.138.87.5] by tm18.bullet.mail.ne1.yahoo.com with NNFMP; 26 Mar 2014 21:20:42 -0000
Received: from [127.0.0.1] by omp1005.mail.ne1.yahoo.com with NNFMP; 26 Mar 2014 21:20:42 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 51088 invoked by uid 60001); 26 Mar 2014 21:20:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1395868842; bh=GXO3qgOzNyjQ1lBrz7QmBeYk1IDmvJqa36O/EzXfTJo=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=EfRWDkS4KqRHjZXrOjLUYx+FApbaXrCP1gbourtEDpUbmNaB43VgSpx8rixXZTD+Rg/lAwcg1Cpbrc3eFvyTKy0uoTUu6c7cKTIYM6Qn1u1egBH7zygluAB5jbLxIoCkqrbh6gmsIiqnEJA+mmkD5BPy8Ii5+PteD56ULLe9soc=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=yfl77QAtjnQpV2CiK8swwQodeRsSExsTcdYhlNx/x+tKoZ54E1g2EIZkXwPmnsqhYXbWDqpVcl38lWpLldmVo1+2wKnTKQ25waD0KoutbhdJfalk546eR5e7paAtTTbDQkXyZtXgb/6CnkdmYhcxI1oSkQ8r6nyCcTiejnB/epc=;
X-YMail-OSG: 2HxvF0QVM1mov6y0gl5ypxVLa1nn05xLItWtdaa_yreVJEk
gknJzwKSbNp8mt5Nvxv2l9Grx0LYCrggMfQGkxmEQvZxw6IKdI5L3bp5ml8f
PGnmHoofKOsBa10bLwZWtBGOgEIHAy_UjB1vCp3Y0nj7rHxbqZ.sFFanaeTP
pOVHRU.1sU8R3pRXaIPF4VSwPE2L3LP9iNGWA_Yle.QabmYe1iPjfhmgcknj
hQ2ywLML7sMCErsBVgcKBHaA_.RxEQv2DclzjbSTvc0mdd7ednINxHh0y0Qc
eEu9pE.Hw1NXt41WlyKknPwVBejVn83TVHMOZg_bXak8444DznWW5nRBBT6N
uF21AjJkPfkaCBOQ_eUz9Va_0D8IQogy8tmQF3Bk3_d.JkUgxgW79hXuK8Zx
JoWOClTwDuImHCcrvxgCrcCVA2gUFwFYHbiqUzKUimmP84WK0bRBU6yGMcpm
eV.82te.dRdvbsivSjtRTBmNuBq2IeWHefrkFiF70mMisOnHAicLZghBJ4yU
z.9KR3MARzB2N65rtBkcKyWvtdQiiNyleAYy6NGq9hovrSuz8nAPi8e30zWz
Y1ASHLUboZQ6fdr1Kid6.cfS_enZTWgyS30MQImklv7aQArf5jdbOKd2m7Wi
_sHZQTaef6yobpKd7tBLmxAand.BXEBYK1M8mo0rEbsI7K55o9iU_w_xQDLy
zfwyuX2phJ_s-
Received: from [71.84.255.38] by web120405.mail.ne1.yahoo.com via HTTP; Wed, 26 Mar 2014 14:20:42 PDT
X-Rocket-MIMEInfo: 002.001,TW9yZSBpbmZvcm1hdGlvbiBvbjoKaHR0cDovL2RhcmtreXNoYWRvdy5jb20vd29yZHByZXNzL21scC1ycGctcGxheWVycy1mYWtlLWhhcnZhcmRoYW55YWhvby1jb20tZW1haWxzLXdhcm5pbmcvATABAQEB
X-Mailer: YahooMailWebService/0.8.181.645
Message-ID: <[email protected]>
Date: Wed, 26 Mar 2014 14:20:42 -0700 (PDT)
From: Harvard Han <[email protected]>
Reply-To: Harvard Han <[email protected]>
Subject: MLP RPG – Admin: Fake email advertisements. DO NOT CLICK THEM!
To: gcomms666 <[email protected]>,
Tylerboomgaarden <[email protected]>,
drewheinson <[email protected]>, houchkid <[email protected]>,
supersmartsam <[email protected]>,
sonic hedgehog1997 <[email protected]>,
darkferncielle <[email protected]>,
midnightnya <[email protected]>, leviproc <[email protected]>,
David Hijlkema <[email protected]>,
neofox2000 <[email protected]>, seadog575 <[email protected]>,
Kline DavidQ <[email protected]>,
harvard1932 <[email protected]>,
infernomage39 <[email protected]>,
beastchoi641 <[email protected]>,
themusicfreak103 <[email protected]>,
harrywuzhere <[email protected]>,
lasvegaspunk <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1501580392-662258659-1395868842=:93884″
Return-Path: [email protected]
X-OriginalArrivalTime: 26 Mar 2014 21:20:43.0530 (UTC) FILETIME=[3EF5E6A0:01CF4939]
