(403) 215-9010

I received an email from this # in the form of an eFax. (What's the matter with people that have the time for this s#!t?) ---------------------------------------------------------------------------------- Delivered-To: Julie (email-removed-for-posting) Received: by 10.60.179.103 with SMTP id df7csp72392oec; Mon, 24 Feb 2014 11:52:57 -0800 (PST) X-Received: by 10.236.130.138 with SMTP id k10mr832945yhi.31.1393271577703; Mon, 24 Feb 2014 11:52:57 -0800 (PST) Return-Path: Received: from server1.ct3ia.com ([199.188.203.120]) by mx.google.com with ESMTP id x3si341181yhm.29.2014.02.24.11.52.57 for ; Mon, 24 Feb 2014 11:52:57 -0800 (PST) Received-SPF: neutral (google.com: 199.188.203.120 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=199.188.203.120; Authentication-Results: mx.google.com; spf=neutral (google.com: 199.188.203.120 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected] Received: from localhost (localhost.localdomain [127.0.0.1]) by server1.ct3ia.com (Postfix) with ESMTP id CCF2B2CD082 for ; Mon, 24 Feb 2014 17:24:53 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at server1.ct3ia.com X-Amavis-Alert: BAD HEADER SECTION, Improper use of control character (char 0D hex): From: eFax.com Received: from server1.ct3ia.com ([127.0.0.1]) by localhost (server1.ct3ia.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id weEqqC9+r1f5 for ; Mon, 24 Feb 2014 17:24:53 +0000 (UTC) Received: by server1.ct3ia.com (Postfix, from userid 5005) id CE62E2CD086; Mon, 24 Feb 2014 17:22:50 +0000 (UTC) To: email-removed-for-posting Subject: eFax message from 14032159010 - 1 page(s), Caller-ID: 403-215-9010 X-PHP-Originating-Script: 5005:sendme.php(3) : eval()'d code From: eFax.com Reply-To: [email protected] MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: 8bit Message-Id: <[email protected]> Date: Mon, 24 Feb 2014 17:22:50 +0000 (UTC) -----Original Message----- From: eFax.com [mailto:[email protected]] Sent: Monday, February 24, 2014 12:23 PM To: email-removed-for-posting Subject: eFax message from 14032159010 - 1 page(s), Caller-ID: 403-215-9010 Fax Message [Caller-ID: 403-215-9010] You have received a 1 page fax at 2014-02-24 05:30:20 CDT. * The reference number for this fax is min1_did13-1329191075-4032159010-49. View this fax online, on our website : http://www.efax.com/fax/fax_view.aspx?fax_id=4032159010 Please visit www.eFax.com/en/efax/twa/page/help if you have any questions regarding this message or your service. Thank you for using the eFax service!

I received 4 eFaxs from them today.

EFax notice, too. Clicked link and Russian message was displayed.

got an email stating i had an efax from this number

eFax

received notice of efax from this number.

eFax

Efax notice.

Also received eFax notice from this number. Bogus-DO NOT OPEN THE LINK.

Received an eFax notice from this number. Hovered over the link and found it goes here http://panora.pl/plugins/system/log/pdf_efax_4032159010.zip not to eFax. Suspected malware so I googled. Found another site, which confirms malware. Do not click the link.