Account Upgrade®

There is an email to log in "your account" with Google Docs. I don't use Google Docs so I'm good, plus my gmail account forwards all those emails so it couldn't get full anyway.

Now, this did look suspicious, but what's really interesting is the fact that when you follow the link you definitively end up on Google's doc log in screen. Now, the fact that there is "my.liu.edu" in the link makes me think that someone did something so that when you log in they can get your credentials. Not too sure how that could work.

Of course, the email is very funky:

  • Sent from giving.com.tw
  • Going through s33.coowo.com
  • Coming from ncvo.org (according to the Message-Id)
  • And gives you an email to reply as info@web.co.uk

Now, what was REALLY funny is the From message: Account Upgrade®


Return-Path: <info@web.co.uk>
X-Original-To: alexis@m2osw.com
Delivered-To: alexis@m2osw.com
Received: from halk.m2osw.com (adsl-64-166-38-38.dsl.scrm01.pacbell.net [64.166.38.38])
    by mail.m2osw.com (Postfix) with ESMTP id F3A1542A013
    for <alexis@m2osw.com>; Fri,  3 Feb 2012 05:21:36 -0800 (PST)
Received: by halk.m2osw.com (Postfix)
    id BD8574C00BA; Fri,  3 Feb 2012 05:21:26 -0800 (PST)
Delivered-To: alexis@halk.m2osw.com
Received: from s33.coowo.com (s33.coowo.com [202.133.244.14])
    by halk.m2osw.com (Postfix) with ESMTPS id 592434C00B9
    for <notices@halk.m2osw.com>; Fri,  3 Feb 2012 05:21:21 -0800 (PST)
Received: from giving.com.tw (localhost [127.0.0.1])
    by s33.coowo.com (8.13.4/8.14.1) with ESMTP id q13DDGsu062182;
    Fri, 3 Feb 2012 21:13:17 +0800 (CST)
    (envelope-from info@web.co.uk)
From: "=?ISO-8859-1?Q?Account_Upgrade=AE?=" <info@web.co.uk>
Reply-To: info@web.co.uk
Subject: You have exceeded your email limit
Date: Fri, 3 Feb 2012 05:13:16 -0800
Message-Id: <20120203121037.M98609@ncvo.org>
X-Mailer: Open WebMail 2.51 20050228
X-OriginatingIP: 82.128.15.82 (janechiu)
MIME-Version: 1.0
Content-Type: text/plain;
    charset=iso-8859-1

You have exceeded your email limit quota of 450MB. You need to upgrade your email limit quota to 2GB within the next 48
hours. Use the below web link to upgrade your email account:

https://docs.google.com/a/my.liu.edu/spreadsheet/viewform?formkey=dFprTFJiU3g3MEZSZDBQOHNkQmNUZWc6MQ

Thank you for using our email.
Copyright ©2012 Email Helpdesk Centre.