dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
1193
share rss forum feed


Johkal
Cool Cat
Premium,MVM
join:2002-11-13
Happy Valley
kudos:10

Legitimate or Fake Email?

Click for full size

I just received this email today. Is this email legitimate or fake?

From: Your AT&T Internet Service Customer Care Team att.2131183527@emailff.att-mail.com
--
In God we trust; all others bring data!



lostinms
Moo

join:2001-11-29
Grenada, MS
It may be legit. They havnt started to do the whole cap thing in my area but when they do I may have to switch.


Darknessfall
Premium
join:2012-08-17
kudos:7
reply to Johkal
One thing that Johkal forgot to mention in his post is that he isn't even in an AT&T area.



tigerpaw509

join:2011-01-19
reply to Johkal
Its legit.Legacy dsl has a cap of 150g.Uverese has a 250g limit.


Johkal
Cool Cat
Premium,MVM
join:2002-11-13
Happy Valley
kudos:10

1 edit
reply to Darknessfall
Ruined the spoiler.

To add: I did indeed receive this email to my Gmail account & wondered if this was fake or just a mistake to the wrong address.


NormanS
I gave her time to steal my mind away
Premium,MVM
join:2001-02-14
San Jose, CA
kudos:12
Reviews:
·SONIC.NET
·Pacific Bell - SBC
reply to Johkal
said by Johkal:

I just received this email today. Is this email legitimate or fake?

From: Your AT&T Internet Service Customer Care Team att.2131183527@emailff.att-mail.com

Without the full headers, there is no way to know for sure. Subscribers to the legacy ADSL service once known as, "at&t Yahoo! HSI *" (where * could be, "Basic", "Express", "Pro", or "Elite") have been under a 150 GB cap since early in 2011; and AT&T has begun sending notices, and billing for overages in the past year.

As an example, here are the full headers for an official notice in response to a recent password change:
Return-Path: <reg.ge4tonbsgiytgnby-**********=aosake.net@returns.bulk.yahoo.com>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on d.spam.sonic.net
X-Spam-Level: **
X-Spam-Status: No, score=2.1 required=5.0 tests=DCC_CHECK,DKIM_SIGNED,
DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,HTML_MESSAGE,RP_MATCHES_RCVD,
TVD_PH_BODY_ACCOUNTS_PRE autolearn=disabled version=3.3.2
Received: from e.mx.sonic.net (e.mx.sonic.net [69.12.221.235])
by c.spam.sonic.net (8.14.4/8.14.4) with ESMTP id s0V3waj1031638
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT)
for <**********@lds.sonic.net>; Thu, 30 Jan 2014 19:58:36 -0800
Received: from n1.bullet.mail.gq1.yahoo.com (n1.bullet.mail.gq1.yahoo.com [216.39.62.136])
by e.mx.sonic.net (8.13.8.Beta0-Sonic/8.13.7) with SMTP id s0V3wWxL021072
for <**********@aosake.net>; Thu, 30 Jan 2014 19:58:36 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1391140711; bh=XWYmijILn2+DfJPZ7n9KZ92dd41VAyno6oZp2k0BcUs=; h=Received:Received:Date:Received:To:From:Reply-To:Errors-To:Subject:X-Yahoo-Newman-Property:X-Yahoo-Newman-Id:Message-Id:MIME-Version:Content-Type; b=Xpj1dMNHEpT0M6hvcw9R1kc0aTHtEefG88xWxy/1umprZGx7v7HhINDguo38G/9Kf6u6SbYNdOqhACzvdZe6hc82j4agJegnuHr2S+uLDmGIxYJQad3Xa4YRg/9kuGX6WXXKhWGccAvV5eXTtXuxPr09wC5QRA/AeayCEjCLJ+o=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net;
b=VKYRJCjX6+1KeVS8kC8NAOGMpxA50QMtCB/KX1ou47ZLSoYAOfVj0OUzt7W1bcASd9RB18T3ZRxf7bu61aQqpocKDi5Qsr0jZgvFbzLruTBVQV8xDPpKx iS9UI5Xb0xTssiPO+U04y37HDZ2ZBM7QBBnE1O94jioh4neWWpYYiQ=;
Received: from [216.39.60.190] by n1.bullet.mail.gq1.yahoo.com with NNFMP; 31 Jan 2014 03:58:31 -0000
Received: from [68.142.240.250] by t6.bullet.mail.gq1.yahoo.com with NNFMP; 31 Jan 2014 03:58:31 -0000
Date: 30 Jan 2014 19:58:31 -0800
Received: from [127.0.0.1] by r03.member.gq1.yahoo.com with NNFMP; 31 Jan 2014 03:58:31 -0000
To: **********@aosake.net
From: att.net-account-services@att.net
Reply-To: att.net-account-services@att.net
Errors-To: att.net-account-services@att.net
Subject: =?us-ascii?Q?Your_AT&T_Yahoo!_account_information_has_changed?=
X-Yahoo-Newman-Property: reg
X-Yahoo-Newman-Id: 1974221348
Message-Id: <1974221348@r03.member.gq1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="==_MIME-Boundary-1_=="
X-Sonic-SB-IP-RBLs: IP RBLs sorbs-spam.
 

--
Norman
~Oh Lord, why have you come
~To Konnyu, with the Lion and the Drum


NormanS
I gave her time to steal my mind away
Premium,MVM
join:2001-02-14
San Jose, CA
kudos:12
Reviews:
·SONIC.NET
·Pacific Bell - SBC

1 edit
reply to Darknessfall
said by Darknessfall:

One thing that Johkal forgot to mention in his post is that he isn't even in an AT&T area.

So? Prior to the 2005 SBC purchase of AT&T, the two offered separate services. In the early to mid 90s, Pacific Bell, operating under the umbrella of, "The Pacific Telesis Group" bought Prodigy (I still have a promotional "Pacific Bell-Prodigy" CD, "AOL style").

Prodigy offered dial-up Internet access outside of the Pacific Bell footprint, and AT&T, under their, "Worldnet Service" brand, offered both dial-up and DSL Internet outside of the then 13-state SBC footprint (DSL was actually AT&T Worldnet branding on Covad service). It is entirely feasible for "@prodigy.net" and "@att.net" (formerly, "@worldnet.att.net") email addresses to exist outside of the current 21-state (formerly 22-state) AT&T footprint. And I have set up non-AT&T accounts to receive official account notices about some of my "@pacbell.net" accounts.

Addenda: It is also conceivable, since around 2009, to move out of the AT&T footprint and keep an AT&T email address. Furthermore, just how trustworthy are those bandwidth meters? What if some glitch causes AT&T to send me an email notice to my Primary "@pacbell.net" account?

--
Norman
~Oh Lord, why have you come
~To Konnyu, with the Lion and the Drum