RSS

Tag Archives: Phishing Scam

“WellsFargo”

ONLINE FRAUD / PHISHING SCAM

Subject: 1 new message

Your online access has been temporarily suspended

We recently detected failed attempts to provide the correct answers to your security questions. As a result, we temporarily suspended online access to your account.
For immediate access to your account, click : Sign On to Wells Fargo Online and proceed with the verification process.
Security questions are one of the ways Wells Fargo confirms your identity. For your protection, Wells Fargo safeguards your account whenever there is a possibility that someone other than you is attempting to sign on.
Sincerely,
Wells Fargo Online Customer Service
Please do not reply to this email directly. To ensure a prompt and secure response, sign on to email us.
31eh7a45-1355-4t5c-te17- 123504u38dkrl

Return-Path: <no-reply@biem.net>
X-YahooFilteredBulk: 94.229.33.233
Received-SPF: fail (domain of biem.net does not designate 94.229.33.233 as permitted sender)
X-Originating-IP: [94.229.33.233]
Authentication-Results: mta1499.mail.bf1.yahoo.com from=biem.net; domainkeys=neutral (no sig); from=biem.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.moonshineq.net) (94.229.33.233) by mta1499.mail.bf1.yahoo.com with SMTP; Wed, 15 May 2013 16:10:58 +0000
Received: by mail.moonshineq.net (Postfix, from userid 5003) id ED36434C35B8; Wed, 15 May 2013 18:10:57 +0200 (CEST)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on vps242.xel.cz
X-Spam-Level: ***
X-Spam-Status: No, score=3.5 required=5.0 tests=ALL_TRUSTED,BAYES_50, HTML_EXTRA_CLOSE,HTML_IMAGE_ONLY_32,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG, MIME_HTML_ONLY,MIME_QP_LONG_LINE,MISSING_HEADERS,REPLYTO_WITHOUT_TO_CC autolearn=no version=3.3.1
Received: from biem.net (unknown [205.204.94.129]) (Authenticated sender: test@moonshineq.net) by mail.moonshineq.net (Postfix) with ESMTPA id 0A8B134C34A3; Wed, 15 May 2013 18:08:43 +0200 (CEST)
Reply-To: no-reply@biem.net
From: “WellsFargo” <no-reply@biem.net>
Subject: 1 new message
Message-ID: <20130515090732.18758B2703054FC7@biem.net>

Wells Fargo no-reply@biem.net

 

Tags: , , , ,

“UPS Courier Service”

WARNING – EMAIL SCAM / UPS PHISHING ATTACK

scam_fraud

Account Suspended: Update Your Information
From: “UPS Courier Service” <activationserver@ups.com>

Dear Customer:

UPS Courier Service!

This message is to confirm that your online access have been suspended due to billing error.
We will review the activity on your account with you and upon verification, we will remove any retrictions placed on your account
We hope you enjoy the ease and convenience you’ll get with the ability to manage your UPS accounts from almost anywhere you are.

To access and activate your account, simply click the link below.

https://www.ups.com/us/activation ← ATTN: This is a spoofed link and NOT a legit UPS website.

The entire activation should take only 5 minutes of your time. Please complete the activation by now
Sincerely,

Thank you for being a valued customer

UPS,

Return-Path: tfcadmin@u16050260.onlinehome-server.com
X-YahooFilteredBulk: 74.208.74.16
Received-SPF: none (domain of u16050260.onlinehome-server.com does not designate permitted sender hosts)
X-Originating-IP: [74.208.74.16]
Authentication-Results: mta1534.mail.bf1.yahoo.com from=ups.com; domainkeys=neutral (no sig); from=ups.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO u16050260.onlinehome-server.com) (74.208.74.16) by mta1534.mail.bf1.yahoo.com with SMTP; Thu, 09 May 2013 01:29:45 +0000
Received: by u16050260.onlinehome-server.com (Postfix, from userid 10013) id CEB65D099; Mon, 6 May 2013 21:24:17 -0400 (EDT)
From: UPS Courier Service activationserver@ups.com
Subject: Account Suspended: Update Your Information
Message-ID: <3dfa45d367d9e24c2e74d18b1d205288@thefcove.com>
X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version ]

 

Tags: , , , , , ,

“Paypal Service Support”

WARNING – EMAIL SCAM / PAYPAL PHISHING ATTACK

Subject: Notice Of Policy Uptadeþ

This is an automated email, please do not reply

Dear PayPal User
Your account has been limited : You Must Confirm Your Information!

Please click on the following link to Confirm It:

Click here to Confirm Your Account Information.

You Must Confirm Your Information To Save It .

Thanks You For Helping,
The PayPal Team

Need Assistance?
We’re happy to help by phone at 1-514-748-5774, Monday to Friday 9:00am to 5:00 pm EST, or by email
Copyright 2012. All rights reserved. PayPal

Email ID: 15464

Return-Path: west-heaton.co.uk@hosts.co.uk
X-YahooFilteredBulk: 85.233.160.25
Received-SPF: pass (domain of hosts.co.uk designates 85.233.160.25 as permitted sender)
X-Originating-IP: [85.233.160.25]
Authentication-Results: mta1107.mail.gq1.yahoo.com from=hosts.co.uk
Received: from 127.0.0.1 (EHLO outgoing-smtp.namesco.net) (85.233.160.25) by mta1107.mail.gq1.yahoo.com
Received: from [192.168.0.76] (helo=nutmeg.hosts.co.uk) by outgoing-smtp.namesco.net with esmtp (Exim 4.72) (envelope-from <west-heaton.co.uk@hosts.co.uk>) id 1UOXgz-0003sR-6K
Received: from west-heaton.co.uk by nutmeg.hosts.co.uk with local (Exim 4.69) (envelope-from <west-heaton.co.uk@hosts.co.uk>) id 1UOXgy-0005Gn-CD
Subject: Notice Of Policy Uptade<FE>
From: <Paypal@ServiceSupport.com>
Reply-To: Paypal@ServiceSupport.com
Message-Id: <E1UOXgy-0005Gn-CD@nutmeg.hosts.co.uk>
Sender: <west-heaton.co.uk@hosts.co.uk>
X-namescosender: 334336 45679
X-namesco: 192.168.0.151
X-Spam-Score: 2.0 (++)

Paypal@ServiceSupport.com <Paypal@ServiceSupport.com> 1-5147485774

 

Tags: , , , , , ,

“Danielle Stafford”

WARNING – EMAIL SCAM

online risks

From: Danielle admin@jpcraven.com
domainsprivate368@gmail.com
Sent: Thursday, March 21, 2013 8:00 AM
Subject: Personal Message

Hello

Greg asked me pass this specific info onto you today…

Your email has been confirmed and an account has
been created in order for you to begin generating an approximate $7, 487. 28/month using this proven cash system, beginning today.

STEP TWO: Activate It Here (actual URL is go.clickmeter.com/Isw0)
Your invitation expires in 48 hours.

Congratulations!

Danielle Stafford
Member Assist

You are receiving this message from Unique Solutions and we
respect your privacy. Manage your message preference right here

Unique Solutions
538 West 21st Street, Suite 95187
Houston, TX 77008, United States

* As with most offers you find, results are unique. Your results
will vary. This is an advertisement.

 

Tags: , , , ,

“UNITED NATIONS & FACEBOOK AWARD CENTER” aka “Dr. Napoleon Best”

WARNING – EMAIL SCAM / FACEBOOK SCAM

facebook-safety

From: claimoffice claim <claimdepartment6@gmail.com>
Date: Wed, 27 Mar 2013 16:51:11 +0200
Subject: UNITED NATIONS & FACEBOOK AWARD CENTER!!!.

Please view the attached file.

United Nations_&_Facebook_doc.

Subject Line: Congratulations;Please View Attachment File For Details
From: “UNITED NATIONS & FACEBOOK AWARD CENTER” <agent_napoleon@rediffmail.com>
To: undisclosed-recipients

Message contains attachments1 File (294KB)
UNITED%20NATIONS%2

—–

Return-Path: <agent_napoleon@rediffmail.com>
X-YahooFilteredBulk: 98.139.44.159
Received-SPF: softfail (transitioning domain of rediffmail.com does not designate 98.139.44.159 as permitted sender)
X-Originating-IP: [98.139.44.159]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=rediffmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.159) by mta1299.mail.sk1.yahoo.com with SMTP; Tue, 19 Mar 2013 04:20:37 -0700
Received: from [98.139.44.100] by nm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 19 Mar 2013 11:20:37
Received: from [98.139.44.88] by tm5.access.bullet.mail.sp2.yahoo.com with NNFMP; 19 Mar 2013 11:20:36
Received: from [127.0.0.1] by omp1025.access.mail.sp2.yahoo.com with NNFMP; 19 Mar 2013 11:20:36 -0000
X-Yahoo-Newman-Id: 885835.65878.bm@omp1025.access.mail.sp2.yahoo.com
Received: from [204.93.60.218] by web5702.biz.mail.ne1.yahoo.com via HTTP; Tue, 19 Mar 2013 04:20:34 PDT
X-Mailer: YahooMailRC/727 YahooMailWebService/0.8.138.524
Message-ID: <1363692034.60989.YahooMailRC@web5702.biz.mail.ne1.yahoo.com>
From: UNITED NATIONS & FACEBOOK AWARD CENTER <agent_napoleon@rediffmail.com>
Reply-To: UNITED NATIONS & FACEBOOK AWARD CENTER <dr.napoleonbest062@gmail.com>
Subject: Congratulations;Please View Attachment File For Details

UNITED NATIONS & FACEBOOK AWARD CENTER agent_napoleon@rediffmail.com Reply Address: dr.napoleonbest062@gmail.com Dr. Napoleon Best

 
Leave a comment

Posted by on 03/20/2013 in Lottery Scam

 

Tags: , , , , , , , , , ,

 
%d bloggers like this: