RSS

Tag Archives: EHarmony

“eHarmony.com Dating Partner”

POSSIBLE PHISHING ATTACK – ONLINE DATING WEBSITE – PRETENDING TO BE EHARMONY – SPOOFED LINKS

ATTENTION: I’ve been getting fake eHarmony emails sent to my spam filter. I am not, nor have I ever signed up for eHarmony and I received these eHarmony emails the past several days (on my fake scam baiting account, mind you) — I knew immediately that something was phishy. The fact that the URLs weren’t even related to eHarmony, and after looking up the header details I realized this is some type of phishing email. Whether it’s malware, a hacker, a scam, etc, it’s something phishy.
SUBJECT LINE: Singles Looking For Love In 2013

#1 Most Trusted Online Dating Site. Join Now!

©2013 eHarmony, Inc.
If you would no longer wish to receive our special promotions, please click here
or send mail to:
PO Box 3640, Santa Monica, CA 90408

HEADER DETAILS:

Return-Path: <2093192922@portalexport.com>
X-YahooFilteredBulk: 130.93.81.10
Received-SPF: pass (domain of portalexport.com designates 130.93.81.10 as permitted sender)
X-YMailISG: M3AJff0WLDu3gnhmNjiGcWZCDX8VNfF9gVyEVwn0d57lYzYE Qw6i7CSQaV_KniE81oJcBTzfEaYhbhvkkW_3bgeWeNssI0hpTf8pzJVZd4oj DlOjgYNdSbizcBsnGDlAlYOCN3ODZG2M3SCHPtdrCfd2Vkv.uh7LQM7onIIZ EvxzodhiT8tstB4O0meuQ.GeuYvrrsfQ_ykQPIL11z4apR1aDJwKCEP8PjBP NiXMaIWSB6QtdT9r3Nu9RD7FRc_6pNpGJCLqKv6YhG2tAUiA.Z4dU8LaSe.Z 2OSI7J.8etjFW6l1A07wfcOiPhdjpUJfzOKT3gjlPVw0bneSOCbvdf0n0.Ol J53i3G8UtPk._SsOOuRTH0px18vsfKJfAba0qkHMhi4IaS.xyabsVmAj3121 .cFUzW7sBgHPzIHmJwX2hAOHr8n.nzSK05os.fCTkr2VC2dn3adr5CjCK4Cs yTDmaf2XCi7fI_wdhX_VHfQl4n43kCVWkSbr83ioRgw1UxL5OQh648_uW3QA QNZiz09BBkeWzy5hcVIbYeFN6WRAHb554l.AFMQQZSY1F.WzfnoyjbRArlsb 3_YxdMxulbx_UfOHBv2DlGin3XVIA_DASQd3fT.2LlbX02M.sFomz4ikQI5k W4tlvj5kpAYEpDzMjMrSZoz.900y4sxRbFw5kv_dEAZ56_OcfsiD_wTuA6K0 XlRzTlIP27gQ6EoIafDU.GIyYrCNNxBrKCQOXKyTuG7UWLCjf.zAHY5oqjdo sylsaiFmj20f24gNvgwgyUFjwvfC0SAwlCbKIeoXrXVhJDdjQ0ikPMgeeoHg OH7f2Hf6DSdjKB_cFDCPGGbfRscHYLePq_0BmP1zUnM5L1zxzc.EY9CPijgN DsAPkpAoAp5lY7C8GDeqPZOyAvPJuyU2Qt0mmE9q5QiBvRvKlewbvOK7BusZ Z_o5cddS._R1QyJ0J6OfiirXgHbZlGwZGY3VqH2gfGGXZiqrrTVS6uiI0a_F mNiVA5Jdw.Vhose1PnR0ATG3SQJLy0xlgfmCI90TJe3_E6NwubWAWK5YK4OU zwrMdKiLpHu5WM7SHvA8GgPTws4NqwqbYn1gBkNvHgYkTzabyQ7E72vguk7r mCvYXVpJaYrgozv5OGNXnQeCHtL73sQf0IQrQAmkWAIe1pKxBtUS8HkDJki. iNH_vWvqO9_HTPOKGRArVq4FQPKhgoQaS6gXzUpa18fjyytvuzkIjgpnECia dYgtcMwG6TaMfJfnilczjWZ7i19ceCfb26_gGwIqqHEOexzWs42hb3vuiKYd qOStuXI6KVd6Fig5Kkvs5CfzO7NN9d28mgX4EN4UtypmZDvUmY6GSZfX8PHl FqOpIksji3xRa2u1f.Yl6KUArTL0dWTicRIVXiunSnD2uuxuhCUov9fgtuGc b_jAFjk9vsXH27xV
X-Originating-IP: [130.93.81.10]
Authentication-Results: mta1234.mail.ac4.yahoo.com from=; domainkeys=neutral (no sig); from=portalexport.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ul.portalexport.com) (130.93.81.10) by mta1234.mail.ac4.yahoo.com with SMTP; Wed, 30 Jan 2013 16:25:27 -0800
From: eHarmony.com Dating Partner <mailers@portalexport.com>
Message-id: <72704994_2093192922@portalexport.com>
Subject: Singles Looking For Love In 2013
X-mHn9bGc2TnNqC6Sqp8c: NzI3MDQ5OTRfMjA5MzE5MjkyMl8xNDI1ODY0N180ODMyOV82NzQ5MF8xMjI0NTVfMjY3MV83OTU2Mzk3XzBfNjA5DQ
X-Ver: NzI3MDQ5OTQ
X-CampaignDetail: 72704994
X-Log: 0
Errors-To: errors@portalexport.com
<http://portalexport.com/x/MjA5MzE5MjkyMg|NzI3MDQ5OTQ|cG9ya3lleHBvc2VkQHlhaG9vLmNvbQ|NDI|MTUzMQ|Njc0OTA|MTIyNDU1|NDgzMjk||MA|MA|||Nzk1NjM5Nw|MTQyNTg2NDc|MjY3MQ|MA|NjA5|VQ.html>
Content-Type: multipart/alternative; boundary=”—-_=_NextPart_001_FHVBI9TV.45VYWRRW” 88.198.16.166 173.44.133.82

 eHarmony.com Dating Partner mailers@portalexport.com 130.93.81.10

 The links came in forms of images pretending to be eHarmony but the actual URLs were http://www.portalexport.com.br/negocios.htm <> http://webmail.portalexport.com.br/index.php?lang=Latvian — Which is a ”business consultant” looking for partners to buy and sell items. It’s not even a English website, never mind an English dating website like eHarmony. The actual URL can’t be copy and pasted because it came in the form of an image but it started off like portalexport.com/…/with_a_bunch_of_numbers_and_letters

__ __ __ __

SUBJECT LINE: Singles Looking For Love In 2013

©2013 eHarmony, Inc.
If you would no longer wish to receive our special promotions, please click here
or send mail to:
PO Box 3640, Santa Monica, CA 90408

HEADER DETAILS:

Return-Path: <2093192922@devicedigest.com>
X-YahooFilteredBulk: 130.93.80.179
Received-SPF: pass (domain of devicedigest.com designates 130.93.80.179 as permitted sender)
X-YMailISG: qP4_qdIWLDsuod7JBnqDQpOfP0SPPxPAdYLhMttsbbbZhvJ9 fTFBcUBRm31.ArzlDqoCIlKINNvCIZPP.YYUpu38eWQuf1B.f7NKGjT7t_sd dx2s5ERWR8ymbEo8pXEaYNEaZEgtG_imXHo6Cnq1d4OemJo6.fPkm8YH_uVB ET0R1GYNVy5KoonXIyfDW9mtrMRtNj2nfuMJp2qHFgItr2hH0dOfoe08OPvG om5jmFe7TP8l16Rv0r5Ljt5L.X9gPwAiGV5VxLGnhZ49zhl9.upfGLsU9uCl 0GQAGSt8lIUoUBZ0w.Q6MNpIq33IY2fMPHnQjaz3yVk8U3Sv7ZLgvxVo7Tw8 st6vV5zQ36c7YI8AeqnehFxAr2iLjWa475NvjoyXmhGOO.AYJ3wkOvlV1MWu MiS0Zv86zlT1wQeBftcu9ROAl2wZco_tx6kt7Tfm.adYFbjuU6mNNcjTmm1F SKQ8gCHHei6JhHVxXtvoXYCyTaVxkbsmtLu5iC92ggMO5t8kU8ASjX0MWdS8 cx51VgWGHcRMtAMTq.uZWQJHWaYuQLmlqTGLyEg8V7XAGOjv9BYJrZYJNzJ4 wq2kJoyRWCB4qL1akmMI61mSMxEUq3vDjpjo6UERvvYFvHjzRn.dthghsCSB mIXI6xpIzNWnL_LOFNPs3HINsIYORPNYGAAibnrd6rNERchkaaxjqjVdVz0S s4ssR_3Lj1lxP9ncV9aU7gVa_qtegp6br61vnF2TaQ7hBEVXi1pqPxoge37d 2WN5c2pA8fEkfzgf7LQ0Hj7Rk3zRh5h2T4f5FL06JT5_RfSkZ9THFCufOlZp leAWTeA9qBfi2l7OeF6AEMGH1u1Ez4n0fQCkqIesKA_GIDfV1mmhbKQaK3Nf QcdIYfUCEGBbcspg78A_3SYNUXWyH4MS3GfdqBE61Y0jkkPERCHvSXz_RZkf 7KN3SEIXfKDn.VttRA7YEuRtsV_BXZKKEeX3lkfP_JcCEq.g39SC2Zux69L_ DwIw.MIbUbePduUaBC3.9yPNHbbLjTUvglNzyNmhHg5Nny_lLg5Iws_t7bbU FerwxMy0zl6SPwz0X09ztF5pwdxEnNht9xig0rd34yaDf9UYXmiKYbg0W8dS AlfOFPOmBlOo74nXVt8jywbKPE5j_8.niDgLwTXn6XC9fmPnhO_vGE1P7Hus Zn0_0WmKEDdFMyxMqJdt3Gq2lC3FJtzk935BL7bjaBv..azU7iLcHHLGrl4k rssOIt_F8bKMkmXr4xpqNYdd1fI0YpDK4ToJPfiGOQwTDrq1SB_xzppvljtw jCjUlLlzIyu31xor_0G6eb9JcAfynnabJsFsF2_grljdRB0nfKfxbPvWbzaf 2fhu8ZNCj4UngXFA5pKMeJIW
X-Originating-IP: [130.93.80.179]
Authentication-Results: mta1047.mail.gq1.yahoo.com from=devicedigest.com; domainkeys=neutral (no sig); from=devicedigest.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO kl5hbb.devicedigest.com) (130.93.80.179) by mta1047.mail.gq1.yahoo.com with SMTP; Thu, 31 Jan 2013 12:16:30 -0800
From: eHarmony Dating <mailers@devicedigest.com>
Message-id: <72975089_2093192922@devicedigest.com>
Subject: Singles Looking For Love In 2013
X-IK1CRNCvGL5wLAmNh8H: NzI5NzUwODlfMjA5MzE5MjkyMl8xNDI1ODk1Nl80NjQyOF82NTU4OV8xMjI0NTVfMjY3MV83OTU2MzkyXzBfNjA5DQ
X-Ver: NzI5NzUwODk
X-CampaignDetail: 72975089
X-Log: 0
Errors-To: errors@devicedigest.com
List-Unsubscribe: <http://devicedigest.com/x/MjA5MzE5MjkyMg|NzI5NzUwODk|cG9ya3lleHBvc2VkQHlhaG9vLmNvbQ|NDI|MTUzMQ|NjU1ODk|MTIyNDU1|NDY0Mjg||MA|MA|||Nzk1NjM5Mg|MTQyNTg5NTY|MjY3MQ|MA|NjA5|VQ.html>
Content-Type: multipart/alternative; boundary=”—-_=_NextPart_001_9EEATPXW.CKJHBHDT”

eHarmony Dating mailers@devicedigest.com RETURN_PATH: 2093192922@devicedigest.com

This email came in the form of a link as well. The URL is something along the lines of devicedigest.com/…/_bunch_of_numbers_and_letters — At first, it looks like a legitimate website, however, the .com/…/_numbers_letters are what’s making me suspicious. And the website the above email (portalexport) brought me too, was nothing more then a login page and business consultant looking for business partners (supposely a french website, not even English, and definitely NOT eHarmony.

 

If someone has figured out who these unknown emailers are, could you please fill me in. Thank you.

 

Tags: , , , , , , , , , , , , , , ,

“Hiring:~Data Axis Virtual”

EMPLOYMENT SCAM / EMAIL SCAM

UPDATED INFORMATION ON THIS SCAMMER WHO IS ALSO FRAUDING INDIVIDUALS ON DATING SITES INCLUDING EHARMONY IN WHAT’S CALLED A “ROMANCE SCAM”

Subject: Hiring:~Data Axes Virtual

Hello,
My name is Cynthia Mark , and I am a human resources supervisor at
Data Axes llc would first like to thank you for your interest
in the position. Here’s a brief overview of what we have to offer you.
Remember if you have any questions please feel free to email me back,
and I will be sure to respond personally.

Description:
-Work from office or home full or part time [telecommute]
-Full online training
-Pay based on per-completion basis
-Work your own schedule

Requirements:
Computer and email access
Competent typing ability
Basic internet knowledge
Must be able to learn and set goals

Details:
We are seeking only self motivated people with the desire to work with
online advertising.
No experience is necessary. You must have a computer with internet
access, a working email account, and basic typing skills. You can
choose
to work full or part time and the hours are set by you. We recommend 18
to 36 hours weekly. You will be processing responses from
advertisements; this will be explained to you in the training
materials.
Everything is sent via email. There is no contract to sign; the amount
you choose to process is entirely up to you. As with any job, you must
be able to respond to a dvertisements in a timely manner.

Compensation:
You will be paid $15.00 to $20.00 for each application you process. For
example, if you process 35 in a week you can expect to make $350 to
$700 weekly. The average person makes $700 per week. The amount of money
you
earn is entirely up to you. You will be responsible for keeping track
of your earnings for tax purposes. We do not take out anything for
government tax purposes, nor provide accounting services.

Training:
The training materials you receive will give you step-by-step
instructions on how to get started. When
you receive your training materials, you may begin working the same day.
There are no special software requirements for this position, but
familiarity with
basic computer skills.

Payment for work completed:
You will receive your payments through PayPal for each application you
process. There is a one time
non-refundable fee of $15.00 USD. This cost covers the training
materials sent to you. Once you process your first response, you will
have made back this fee. This is just a small processing fee,
protecting
from those who are not serious about doing this work. No business can
cover a dministrative cost, wasted time or provide costly materials to
everyon e who inquires about this position. If this is not acceptable
for you, or you cannot afford this small cost, please disregard this email.

The training materials and information will be sent to you after we
receive your administrative fee, you can begin immediately.

If you do not have a PayPal account, click on the link below to open a
fre e account so you can receive payment for your work and purchase your

training materials. Please notify me once you have made the payment, so

I can be sure the materials are sent to you. This is a completely fre e
service and it is a verified secure website. When making your payment,
please enter “Service/Other” in the “For:” field. Please send
your payment through PayPal to our account at: sunny_emale@yahoo.com
You will receive your materials within twenty-four hours. If you do not,
please email me with your PayPal address so I may confirm receipt.
http://www.paypal.com

NOTE:
You can feel 100% comfortable that this is absolut ely not a scam in any
way, shape form or fashion. There is one reason and one reason only that
hhere is a fee for the training materials. We need to identify those
applicants that are going to take this serious. This is an at home job and
leaves little ability to monitor applicants efforts. If this minimal fee is
not acceptable for you, or you cannot afford this small cost, please
disregard this opportunit y . But be assured you this is completely genuine
and legitimate!
******************************************************************************
Best,
Cynthia Mark
Data Axes llc
Asst. HR Supervisor

remove:reply remov e in subjectline

Return-Path:
Received: from mx-casero.atl.sa.earthlink.net ([207.69.195.34])
by mdl-harvest.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1tXn4k2SE3Nl36V0; Mon, 21 Jan 2013 14:30:08 -0500 (EST)
Received: from outbound001.roc2.bluetie.com ([208.89.132.141])
by mx-casero.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id 1tXn4k14b3Nl34m0

Received: from web008.roc2.bluetie.com ([10.200.2.102])
by outbound001.roc2.bluetie.com with outbound001
id qjW81k0032C3R5E01jW8N5; Mon, 21 Jan 2013 14:30:08 -0500
X-CMAE-OUT-Analysis: v=2.0 cv=JZ8+XD2V c=1 sm=1 a=lUlhjrXp7_sA:10
a=oti87C7NwtcA:10 a=IkcTkHD0fZMA:10 a=deDS6JXDAAAA:8 a=QoHJ8kPOAAAA:8
a=Pvi9LaN-ZWkA:10 a=fzrqQ9W4AAAA:8 a=5Up8faWwAAAA:8 a=Wn30oGziDlTkCwgbNAgA:9
a=QEXdDO2ut3YA:10 a=1-n_ZU4lECUA:10 a=gg_J_wPL-U8A:10 a=v6MMM96S_sUA:10
a=DaNu5FgYbKgAWmLyLTbO4Q==:117
X-CMAE-OUT-Score: 0.00
Received: from web008.roc2.bluetie.com (localhost.localdomain [127.0.0.1])
by web008.roc2.bluetie.com (Postfix) with ESMTP id 1ABC73187BC
X-HTTP-Received: from newsm995g.myway [177.135.138.218] by web008.roc2.bluetie.com (BlueTie WebMail ); Mon, 21 Jan 2013 14:30:08 -0500
X-Mailer: BlueTie MTA

From: “eHarmony Msg”
Importance: normal
Subject: eharmony has sent you a message. rb6r

Hello!

If you are 50 and above go here: http://nyp.st/Wb4gJo?cdpatch@earthlink.net
If you are under the age of 50 go here: http://nyp.st/Wb4gJo?cdpatch@earthlink.net

5iU%4iP#1rR%
————————–
Other Important info:

http://ip.robtex.com/208.89.132.141.html

Summary

Outbound001.roc2.bluetie.com point to 208.89.132.141.
Which servers does 208.89.132.141 use?

208.89.132.141 uses the reverse pointer outbound001.roc2.bluetie.com only.

It is blacklisted in three lists.

Domain Name

Reputation:
Source Result
BLACKLIST
CNET 208.89.132
208.89.132.0/24 RR-RC-BlueTie-Rochester AS19693 AS33524 (not announced)
Base Record Pref Name IP-number Reverse Route Autonomous System
outbound001.roc2.bluetie.com a 208.89.132.141 AS
roc2.bluetie.com com bluetie.com

_______________________

Return-Path: maryellis6@excite.com
Date: 09/29/12
X-Originating-IP: [208.89.132.141]
Received-SPF: pass (domain of excite.com designates 208.89.132.141 as permitted sender)

Claim’s to be ”Marry Ellis” – same scammer as stevenm8@excite.com (both have an idenical IP address, both are same scammer doing different scams.)

maryellis6@excite.com also uses maryellis@myluckymail.com (she spelt her fake name incorrect in the head it says ”Marry Ellis” but then sends her other email ”Mary Ellis,” OOPS. Scammers are to dumb for words. They are so obvious but still fool people apparently.)

Email from ”Marry Ellis” –

Hiring:~Data Axis Virtual
Hello,
My name is Mary Ellis , and I am a human resources supervisor at
Data Axis llc  would first like to thank you for your interest
in the position. Here’s a brief overview of what we have to offer you.
Remember if you have any questions please feel fre e to email me back,
and I will be sure to respond personally.
Description:
-Work from office or home full or part time [telecommute]
-Full online training
-Pay based on per-completion basis
-Work your own schedule
Requirements:
Computer and email access
Competent typing ability
Basic internet knowledge
Must be able to learn and set goals
Details:
We are seeking only self motivated people with the desire to work with
online a dvertising.
No experienc e is necessary. You must have a computer with internet
access, a working email account, and basic typing skills. You can
choose
to work full or part time and the hours are set by you. We recommend 18
to 36 hours weekly. You will be processing responses from
a dvertisements; this will be explained to you in the training
materials.
Everything is sent via email. There is no contract to sign; the amount
you choose to process is entirely up to you. As with any job, you must
be able to respond to a dvertisements in a timely manner.
Compensation:
You will be paid  $15.00 to  $20.00 for each application you process. For
example, if you process 35 in a week you can expect to make  $350 to
$700 weekly. The average person makes $600 per week. The amount of money
you
earn is entirely up to you. You will be responsible for keeping track
of your earnings for tax purposes. We do not take out anything for
government tax purposes, nor provide accounting services.
Training:
The training materials you receive will give you step-by-step
instructions on how to get started. When
you receive your training materials, you may begin working the same day.
There are no special software requirements for this position, but
familiarity with
basic computer skills.
Payment for work completed:
You will receive your payments through PayPal for each application you
process. There is a one time
non-refundable fee of  $19.00 USD. This cost covers the training
materials sent to you. Once you process your first response, you will
have made back this fee. This is just a small processing fee,
protecting
from those who are not serious about doing this work. No business can
cover a dministrative cost, wasted time or provide costly materials to
everyon e who inquires about this position. If this is not acceptable
for you, or you cannot afford this small cost, please disregard this email.
The training materials and information will be sent to you after we
receive your a dministrative fee, you can begin immediately.
If you do not have a PayPal account, click on the link below to open a
fre e account so you can receive payment for your work and purchase your
training materials. Please notify me once you have ma de the payment, so
I can be sure the materials are sent to you. This is a completely fre e
service and it is a verified secure website. When making your payment,
please enter “Service/Other” in the “For:” field. Please send
your payment through PayPal to our account at MaryEllis@myluckymail.com
You will receive your materials within twenty-four hours. If you do not,
please email me with your PayPal a ddress so I may confirm receipt.
NOTE:
You can feel 100% comfortable that this is absolut ely not a scam in any
way, shape form or fashion. There is one reason and one reason only that
hhere is a fee for the training materials. We need to identify those
applicants that are going to take this serious. This is an at home job and
leaves little ability to monitor applicants efforts. If this minimal fee is
not acceptable for you, or you cannot afford this small cost, please
disregard this opportunit y . But be assured you this is completely genuine
and legitimate!
******************************************************************************
Best,
Mary Ellis
Data Axis llc
Asst. HR
remov e:reply remov e in subjectline
Maryellis6 maryellis@myluckymail.com
 
5 Comments

Posted by on 09/30/2012 in Employment (Job) Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: