RSS

Tag Archives: 98.24.151.137

“Eva Jones” (aka) “Sam Jones”

CRAIGSLIST PHISHING ATTACK

THIS EMAIL HAD A FEW LINKS, ALL OF THEM WERE SPOOFED LINKS WITH THE SAME TRACKING URL WHICH WASN’T FOR ANY SURVEY LIKE THE EMAIL CLAIMS. I’VE ALSO NEVER POSTED ANY CRAIGSLIST ADS UNDER THIS EMAIL (WHICH IS MY FAKE SCAM BAITING EMAIL.)

phishing_attacks_hackers

Hello,
I seen your ad on Craigslist,
and I am looking for people to take
an easy survey about Craigslist.
Just Sign Up for a free account at mysurvey.com,
and we will pay you $45 just for taking
the Craigslist jobs survey.
Go to Mysurvey.com and Sign Up
This is easy money just for taking
a 1 minute craigslist survey…
Go to MySurvey.com and sign up
Have an awesome day
Best Regards,
Eva Jones
MySurvey Human Resources
MySurvey.com

HEADER DETAILS:

Return-Path: <fredialok@jobsearchonline.org>
X-YahooFilteredBulk: 188.121.53.2
X-Originating-IP: [188.121.53.2]
Authentication-Results: mta1362.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO n1plout04-02.prod.ams1.secureserver.net) (188.121.53.2) by mta1362.mail.mud.yahoo.com with SMTP; Sat, 13 Oct 2012 15:02:51 -0700
Received: (qmail 19079 invoked from network); 13 Oct 2012 22:02:50 -0000
Received: from unknown (98.24.151.137) by n1plout04-02.prod.ams1.secureserver.net (188.121.53.2) with ESMTP; 13 Oct 2012 22:02:47 -0000
From: “Eva Jones” <sam.jones@gmail.com>
Subject: Your Ad On Craigslist
Message-ID: <b1b4a6d9f6b44643bb48eee2f74727a5@DeeQ-PC>
X-Mailer: Microsoft Office Outlook 12.0
Return-Path: <fredialok@jobsearchonline.org>

FROM: Eva Jones a.k.a Sam Jones sam.jones@gmail.com RETURN-ADDRESS: fredialok@jobsearchonline.org RECEIVED_IP: 98.24.151.137 IP_USED: 188.121.53.2

 

Tags: , , , , , , , , ,

“Ryan Mathews”

CRAIGSLIST SURVEY SCAM – PHISHING SCAM

THERE WAS 3 LINKS – ALL LINKS WERE SPOOFED AND THE ACTUAL URL WAS TRACK.REVFORCECPA/AFF_etc.

EMAIL: Hello,

This Is Ryan With MyPaidSurveys.com, I saw your Ad
on Craigslist. We are looking for only 100 people to
take our simple paid surveys daily…
We pay $20 to $50 per survey daily, and we pay weekly.
Click Here And Register For a Free Account
Hurry…We are only looking for a 100 people only.
Get Paid $1,000 + weekly….
Click Here And Register Now
Sincerely yours,
Ryan Mathews
Hiring Manager
MyPaidSurveys.com

HEADER:

Return-Path: <francescoreidhead@jobsearchonline.org>
X-YahooFilteredBulk: 188.121.53.2
Received-SPF: none (domain of jobsearchonline.org does not designate permitted sender hosts)
X-YMailISG: 65Fy2LsWLDsvFB3wpPW1fIW3kxoxB1YgzGNy.izUKXCPC1nT ecrJiYb4yA4PCDYRiLGXSBAWbRV9g6WnHmBywayeNzHD16Ez5y2Ki437dm1Y .X5JQP9kCb08aZYt9GkfLCG0qcF7Lmxf1rLVPQ2Nxg4tHtN6jgA8K5kUG.OR pwh2Wg8EKlSXaaqATyAoZaciOKp7O8wxpC87auN83gjhJaXgnQhpbh_Wm0TN kJ4nW_.cutAMyDpNs3ukrGE.MZ53oe16KrUfVrbJy9jCPH5FJlyXbmLQoUDI W6PssvNPexBjMiLPr09jM3ez2quCISS7hE_a7gW9nQhsFZR_gCASSdweJ5go 4cojPLBdClhGyozUCnv3coVlpKFtnX17HMmefEcSbCm5YehqOqaPTF0OjL.z PUTtz.fOyL.sXEKRQQ978DOxiatUYeCbx_RjnxSTI1UdIObtv0rp6qPWCMHD P67MBe6Mo6JDCn0jELd94faooX4.w9nx7ie8PzY7QI8bWVMhVeA3AGeehXuO j9KVa99YZoUXobquBQCEq1XD88zzRS.tjb4dXUtxxQjWLlmplMI55BW_dbou OZ76BZni6G5_1dgdKIhVNJF7PHm2sOzXcmuZO.htZvBlDwXk1BaZcTDnPgtH pmqwAR9VhCVxh7BA9C5cXqLpioCuBzjYNGCEW2R5_7.FdNsi0e4N8IuDa4mH XMtUsado.v8VDjBrn._NZ_r6zRUjpMdWzWgMMF4j0Cz52tXLIExce1MhckFP Ys1DujpC1whpah3XyaEtA2_AThxX9hRvE4WKz5oTgPg7.PjwBjOL0E2qQ8Ov DzXQCCZtZae9IykSL8p_6DCo0v9fDUnSgetUfVvkjHkQDSnMejJvJgs6HQzx WpUyhQkLMKjc6eXu9tn0Wfq86LcRdJz.xy9TbRKB5YPr8Wtv3CyqKVWpi5mH xtllJdCMUmmZu_ook6CHrlG.UX8Q1v9nqTJpIfKRLYV_yKyYWfF8RWC3l1oc uhuw9ThqtHVzfMQRq9r7D3aPV3wcbdPNpkKzp_6ysSTz1ghHt4Kh7dSNuvrV GE3s2Lob1bPy_EXZ.FIleSxmv19bB7TV5DJ3QV96JWLIG4fVbX9X1WZfZyDl uhBFbcoQWh56lHexGEnGhCze3FIF.62Q_A6P
X-Originating-IP: [188.121.53.2]
Authentication-Results: mta1137.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=vfemail.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO n1plout04-02.prod.ams1.secureserver.net) (188.121.53.2) by mta1137.mail.mud.yahoo.com with SMTP; Sun, 14 Oct 2012 15:01:51 -0700
Received: (qmail 7504 invoked from network); 14 Oct 2012 22:01:50 -0000
Received: from unknown (98.24.151.137) by n1plout04-02.prod.ams1.secureserver.net (188.121.53.2) with ESMTP; 14 Oct 2012 22:01:49 -0000
From: “Ryan Mathews” <CraigslistAdReply@vfemail.net>
Subject: Re: Ad On Craigslist
Message-ID: <57509048dfe69f428ab5af9c6a5de2ad@DeeQ-PC>
Content-Type: multipart/alternative; boundary=”—-=_NextPart_000_0001_C30A4D9F.387FF949″
Return-Path: <francescoreidhead@jobsearchonline.org>

Ryan Mathews CraigslistAdReply@vfemail.net RETURN-ADDRESS: francescoreidhead@jobsearchonline.org

RECEIVED-IP: 98.24.151.137 X-ORIGINATING-IP: 188.121.53.2

 

Tags: , , , , , , , , , , , ,

”Max Jordan” CraigslistAdReply@vfemail.net JohnJones@jobsearchonline.org

Nigerian (419) Scammer <> Craigslist Scam

Scammer Information:

Name: Max Jordan

Email-Address: CraigslistAdReply@vfemale.com <> Reply-To-Email-Address: JohnJones@jobsearchonline.org

IP(s) – 188.121.53.1 <> Also recieved from unknown – 98.24.151.137

Subject line: Reply to Craigslist Ad

Email:

Hello,

This email is in reply to your Ad on Craigslist. We are looking for 500 people to post ads on Craigslist, This offer won’t last.

We will pay you $20 To $40 Per ad Post, You could be making $2,000 to $5,000 per week Today.. (Link was here that said ”Click here and get started today. I didn’t want to expose you to a link sent by a scammer because I do not trust it and refuse to click on any links in scam-emails. The URL was ”Track.revforcepa(dot)com” but it’s definitely connected to a phishing site and/or scammer trying to gain personal information.)

Sincerely yours, Max Jordan Work At Home Manager

Read the rest of this entry »

 
Leave a comment

Posted by on 10/17/2012 in Craigslist Scam

 

Tags: , , , , , , ,

 
%d bloggers like this: