Beberapa kali saya mendapatkan yang fromnya dari: Yahoo! Account Service <mailbot@cc.yahoo-inc.com>, yang berisi perintah agar mengubah data pribadi account yahoo saya. Akan tetapi saya melihat ada yang aneh, Reply-To-nya ke: mailserve_verification@yahoo.com. Saya tidak menghiraukan email tersebut, karena domainnya yahoo.com.

Berikut ini screen capture dari email scam tersebut

Berikut adalah header email dari scam account Yahoo tersebut:

X-Kaspersky: MailDispatcher
X-Kaspersky: Original server data starting here: +OK 15148 octets
X-Apparently-To: kurnia2k3@yahoo.com.sg via 124.108.115.132; Sat, 05 Dec 2009 01:27:05 +0800
X-YMailISG: V9Hr0I0WLDtLpyV3SpB6Xrb91cu0qZJuIbOlW2i6NkaBBga658VQ07OPF.T6Gmd7P5zKdAgEYXV6MbjifSvlFebxH9XSr.0S.U5Ea_9UPscIJm9pWL4DhciurR_9Px9pAFJNKjfWm5wCZYSgK_Epbv15WJIm.aUe_SMblDzV1GCP_0AiPkZa5kAOxyv5mJ5FnywBK4rpMm44hvGCgOfzUgSnvMaCvUbyYG8eqRyqrFHW50bjfzip_aBYWJcroRGr5j1dZ8cWgoUkNXbnJ7DAlaftp.1FIJarxXc1jsw1.2FOK9zOwAXzdv8NqOB.BTHxgHmMRZ5niymoCmIS78dFSMVsST8Bte5o5v5WPb5jFXOxOewLI36QJ_ysQ4R11BOkXtfVYqKXKNn9OYVPbkhCDSYWs.GTCNWRb9GhjblWiwBk5IcVG6DdwJARB0KbSX2Vy4IwvwHjxVlEzHj4gJFVoik-
X-Originating-IP: [208.180.40.73]
Authentication-Results: mta135.mail.sg1.yahoo.com  from=cc.yahoo-inc.com; domainkeys=neutral (no sig); from=cc.yahoo-inc.com; dkim=neutral (no  sig)
Received: from 208.180.40.73  (EHLO omta01.suddenlink.net) (208.180.40.73)
by mta135.mail.sg1.yahoo.com with SMTP; Sat, 05 Dec 2009 01:27:05 +0800
Received: from User ([82.128.32.117]) by omta01.suddenlink.net
(InterMail vM.7.09.02.04 201-2219-117-106-20090629) with ESMTP
id <20091204172651.PCNS20088.omta01.suddenlink.net@User>;
Fri, 4 Dec 2009 11:26:51 -0600
Reply-To: <mailserve_verification@yahoo.com>
From: “Yahoo! Account Service”<mailbot@cc.yahoo-inc.com>
To: mailbot@cc.yahoo-inc.com
Subject: Auto Confirmation – Yahoo! Account Verification
Date: Fri, 4 Dec 2009 17:26:50 -0000
MIME-Version: 1.0
Content-Type: text/html;
charset=”Windows-1251”
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 091203-1, 12/03/2009), Outbound message
X-Antivirus-Status: Clean
Message-Id: <20091204172651.PCNS20088.omta01.suddenlink.net@User>

Waspadalah terhadap pencurian account anda. Yahoo tidak akan menutup account penggunanya selama penggunanya masih memakai layanan mereka. Dan jika ingin mengubah data account Yahoo anda, pastikan anda melihat URL yang ada di address bar browser anda tertulis yahoo.com.