Heads up... apparent fradulent email trying to trick AT&T customers...

Seems like the crooks are at it again.. don't fall for this..

X-Apparently-To: ?????????@???.???? <--ME ; Thu, 14 Sep 2017 23:16:52 +0000
Return-Path:
Received-SPF: pass (domain of b.e.att-mail.com designates 63.236.76.122 as permitted sender)
X-YMailISG:
WJVEvw--
X-Originating-IP: [63.236.76.122]
Authentication-Results: mta1102.mail.ne1.yahoo.com from=e.att-mail.com; domainkeys=pass (ok); from=e.att-mail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mta822.e.att-mail.com) (63.236.76.122) <---Looks like Quest
by mta1102.mail.ne1.yahoo.com with SMTPS; Thu, 14 Sep 2017 23:16:51 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=e.att-mail.com;
s=20131213134352; t=1505431011; x=1521069411;
bh=M3XhHPBMrNztetpa9KpsscFEkzFDayD/VDzEMJ/tv0k=; h=From:Reply-To;
b=HwxLtmVqAwNJ7Hhz2FMSm+R/1pVxw3laiZP5Vlf/nOqVTOG2AyDfMkFgERmDhw8u4
0W8565k5hqzDffgDWAorm2pFef4LjhdqAOSePSGE5DZsWDjUg5O+7GsgAncqAI81YS
qddAWmbH+sCOepOQYTzZy44G6oZc4Qw5XMqppHRUCInVFJci7ISB+FwKUzTDw/bJ8G
ah8UY71xEErkQ00wwKp+T0vCtVV+HtqgFse9AtRelXw83gBvBU8REk68IEflWueAx1
iriTVAXwb9cc8P4zfz/VzeYJDWMGULlaUQfepJaUYRAjQ3ieVMVD1h7j9ton5maSb1
E5ZVAIIwK/a9Q==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=200505; d=e.att-mail.com;
b=kIolQ/bK6boOn+kjyte2TvmMCtxShS97YdS01gDh+aQVunHNERsOVegwP5bGPPzk+zmakEXaY8orPQY2gGUqnL0qhmjl59al33IO2Le4LN65jOtfqXVFLh8goZnAlpzdkcaShZ6tfWpXKXWI28X+UcHbEiPmJQ34DqJ1a609kVM=;
h=Date:Message-ID:List-Unsubscribe:From:To:Subject:MIME-Version:Reply-To:X-Mailer:X-mid:X-aid:Content-type;
Date: Thu, 14 Sep 2017 23:16:51 -0000
Message-ID:
List-Unsubscribe:
From: "AT&T"
To: ?????????@???.???? <--ME
Subject: Please update your bill settings.
MIME-Version: 1.0
Reply-To: "AT&T"
X-Mailer: CheetahMailer
X-mid: 2105501696
X-aid: 2087949560
Content-type: multipart/alternative; boundary="=b38uh5dbfs8s93aur519cb0c7fd6tc"
Content-Length: 23101
X-EsetId: 37303A2997E3B66D627164

--=b38uh5dbfs8s93aur519cb0c7fd6tc
Content-Type: text/plain; charset="iso-8859-1"
Content-transfer-encoding: 8bit

myAT&T

AutoPay could lead to something amazing!
http://e.att-mail.com/a/tBZuwn3B8c5T4B9f2gAAEywqjZN/pht

To see the HTML version, copy this link into your browser:
http://e.att-mail.com/a/tBZuwn3B8c5T4B9f2gAAEywqjZN/online?t_sparams=6M1li7l2HDnCfgs2vBE7emlZTOq86qwcvyZMijFPYlVEFM4hEEuHFgwoJTxSMB71Bozuzcd

======================================================================

myAT&T

Warning, do not go here:

http://e.att-mail.com/a/tBZuwn3B8c5T4B9f2gAAEywqjZN/online?t_sparams=6M1li7l2HDnCfgs2vBE7emlZTOq86qwcvyZMijFPYlVEFM4hEEuHFgwoJTxSMB71Bozuzcd

if you go to this site. look at the website URL and notice it says

E.ATT-MAIL.COM <--- It's a fraud..

If you get an email with this stuff in it forward it to

Abuse@ATT.NET (notice it says net not com)

AND

spam@uce.gov