RSS

Tag Archives: Phishing Scam

“WellsFargo”

ONLINE FRAUD / PHISHING SCAM

Subject: 1 new message

Your online access has been temporarily suspended

We recently detected failed attempts to provide the correct answers to your security questions. As a result, we temporarily suspended online access to your account.
For immediate access to your account, click : Sign On to Wells Fargo Online and proceed with the verification process.
Security questions are one of the ways Wells Fargo confirms your identity. For your protection, Wells Fargo safeguards your account whenever there is a possibility that someone other than you is attempting to sign on.
Sincerely,
Wells Fargo Online Customer Service
Please do not reply to this email directly. To ensure a prompt and secure response, sign on to email us.
31eh7a45-1355-4t5c-te17- 123504u38dkrl

Return-Path: <no-reply@biem.net>
X-YahooFilteredBulk: 94.229.33.233
Received-SPF: fail (domain of biem.net does not designate 94.229.33.233 as permitted sender)
X-Originating-IP: [94.229.33.233]
Authentication-Results: mta1499.mail.bf1.yahoo.com from=biem.net; domainkeys=neutral (no sig); from=biem.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.moonshineq.net) (94.229.33.233) by mta1499.mail.bf1.yahoo.com with SMTP; Wed, 15 May 2013 16:10:58 +0000
Received: by mail.moonshineq.net (Postfix, from userid 5003) id ED36434C35B8; Wed, 15 May 2013 18:10:57 +0200 (CEST)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on vps242.xel.cz
X-Spam-Level: ***
X-Spam-Status: No, score=3.5 required=5.0 tests=ALL_TRUSTED,BAYES_50, HTML_EXTRA_CLOSE,HTML_IMAGE_ONLY_32,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG, MIME_HTML_ONLY,MIME_QP_LONG_LINE,MISSING_HEADERS,REPLYTO_WITHOUT_TO_CC autolearn=no version=3.3.1
Received: from biem.net (unknown [205.204.94.129]) (Authenticated sender: test@moonshineq.net) by mail.moonshineq.net (Postfix) with ESMTPA id 0A8B134C34A3; Wed, 15 May 2013 18:08:43 +0200 (CEST)
Reply-To: no-reply@biem.net
From: “WellsFargo” <no-reply@biem.net>
Subject: 1 new message
Message-ID: <20130515090732.18758B2703054FC7@biem.net>

Wells Fargo no-reply@biem.net

 

Tags: , , , ,

“UPS Courier Service”

WARNING – EMAIL SCAM / UPS PHISHING ATTACK

scam_fraud

Account Suspended: Update Your Information
From: “UPS Courier Service” <activationserver@ups.com>

Dear Customer:

UPS Courier Service!

This message is to confirm that your online access have been suspended due to billing error.
We will review the activity on your account with you and upon verification, we will remove any retrictions placed on your account
We hope you enjoy the ease and convenience you’ll get with the ability to manage your UPS accounts from almost anywhere you are.

To access and activate your account, simply click the link below.

https://www.ups.com/us/activation ← ATTN: This is a spoofed link and NOT a legit UPS website.

The entire activation should take only 5 minutes of your time. Please complete the activation by now
Sincerely,

Thank you for being a valued customer

UPS,

Return-Path: tfcadmin@u16050260.onlinehome-server.com
X-YahooFilteredBulk: 74.208.74.16
Received-SPF: none (domain of u16050260.onlinehome-server.com does not designate permitted sender hosts)
X-Originating-IP: [74.208.74.16]
Authentication-Results: mta1534.mail.bf1.yahoo.com from=ups.com; domainkeys=neutral (no sig); from=ups.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO u16050260.onlinehome-server.com) (74.208.74.16) by mta1534.mail.bf1.yahoo.com with SMTP; Thu, 09 May 2013 01:29:45 +0000
Received: by u16050260.onlinehome-server.com (Postfix, from userid 10013) id CEB65D099; Mon, 6 May 2013 21:24:17 -0400 (EDT)
From: UPS Courier Service activationserver@ups.com
Subject: Account Suspended: Update Your Information
Message-ID: <3dfa45d367d9e24c2e74d18b1d205288@thefcove.com>
X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version ]

 

Tags: , , , , , ,

“Paypal Service Support”

WARNING – EMAIL SCAM / PAYPAL PHISHING ATTACK

Subject: Notice Of Policy Uptadeþ

This is an automated email, please do not reply

Dear PayPal User
Your account has been limited : You Must Confirm Your Information!

Please click on the following link to Confirm It:

Click here to Confirm Your Account Information.

You Must Confirm Your Information To Save It .

Thanks You For Helping,
The PayPal Team

Need Assistance?
We’re happy to help by phone at 1-514-748-5774, Monday to Friday 9:00am to 5:00 pm EST, or by email
Copyright 2012. All rights reserved. PayPal

Email ID: 15464

Return-Path: west-heaton.co.uk@hosts.co.uk
X-YahooFilteredBulk: 85.233.160.25
Received-SPF: pass (domain of hosts.co.uk designates 85.233.160.25 as permitted sender)
X-Originating-IP: [85.233.160.25]
Authentication-Results: mta1107.mail.gq1.yahoo.com from=hosts.co.uk
Received: from 127.0.0.1 (EHLO outgoing-smtp.namesco.net) (85.233.160.25) by mta1107.mail.gq1.yahoo.com
Received: from [192.168.0.76] (helo=nutmeg.hosts.co.uk) by outgoing-smtp.namesco.net with esmtp (Exim 4.72) (envelope-from <west-heaton.co.uk@hosts.co.uk>) id 1UOXgz-0003sR-6K
Received: from west-heaton.co.uk by nutmeg.hosts.co.uk with local (Exim 4.69) (envelope-from <west-heaton.co.uk@hosts.co.uk>) id 1UOXgy-0005Gn-CD
Subject: Notice Of Policy Uptade<FE>
From: <Paypal@ServiceSupport.com>
Reply-To: Paypal@ServiceSupport.com
Message-Id: <E1UOXgy-0005Gn-CD@nutmeg.hosts.co.uk>
Sender: <west-heaton.co.uk@hosts.co.uk>
X-namescosender: 334336 45679
X-namesco: 192.168.0.151
X-Spam-Score: 2.0 (++)

Paypal@ServiceSupport.com <Paypal@ServiceSupport.com> 1-5147485774

 

Tags: , , , , , ,

“Danielle Stafford”

WARNING – EMAIL SCAM

online risks

From: Danielle admin@jpcraven.com
domainsprivate368@gmail.com
Sent: Thursday, March 21, 2013 8:00 AM
Subject: Personal Message

Hello

Greg asked me pass this specific info onto you today…

Your email has been confirmed and an account has
been created in order for you to begin generating an approximate $7, 487. 28/month using this proven cash system, beginning today.

STEP TWO: Activate It Here (actual URL is go.clickmeter.com/Isw0)
Your invitation expires in 48 hours.

Congratulations!

Danielle Stafford
Member Assist

You are receiving this message from Unique Solutions and we
respect your privacy. Manage your message preference right here

Unique Solutions
538 West 21st Street, Suite 95187
Houston, TX 77008, United States

* As with most offers you find, results are unique. Your results
will vary. This is an advertisement.

 

Tags: , , , ,

“UNITED NATIONS & FACEBOOK AWARD CENTER” aka “Dr. Napoleon Best”

WARNING – EMAIL SCAM / FACEBOOK SCAM

facebook-safety

From: claimoffice claim <claimdepartment6@gmail.com>
Date: Wed, 27 Mar 2013 16:51:11 +0200
Subject: UNITED NATIONS & FACEBOOK AWARD CENTER!!!.

Please view the attached file.

United Nations_&_Facebook_doc.

Subject Line: Congratulations;Please View Attachment File For Details
From: “UNITED NATIONS & FACEBOOK AWARD CENTER” <agent_napoleon@rediffmail.com>
To: undisclosed-recipients

Message contains attachments1 File (294KB)
UNITED%20NATIONS%2

—–

Return-Path: <agent_napoleon@rediffmail.com>
X-YahooFilteredBulk: 98.139.44.159
Received-SPF: softfail (transitioning domain of rediffmail.com does not designate 98.139.44.159 as permitted sender)
X-Originating-IP: [98.139.44.159]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=rediffmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.159) by mta1299.mail.sk1.yahoo.com with SMTP; Tue, 19 Mar 2013 04:20:37 -0700
Received: from [98.139.44.100] by nm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 19 Mar 2013 11:20:37
Received: from [98.139.44.88] by tm5.access.bullet.mail.sp2.yahoo.com with NNFMP; 19 Mar 2013 11:20:36
Received: from [127.0.0.1] by omp1025.access.mail.sp2.yahoo.com with NNFMP; 19 Mar 2013 11:20:36 -0000
X-Yahoo-Newman-Id: 885835.65878.bm@omp1025.access.mail.sp2.yahoo.com
Received: from [204.93.60.218] by web5702.biz.mail.ne1.yahoo.com via HTTP; Tue, 19 Mar 2013 04:20:34 PDT
X-Mailer: YahooMailRC/727 YahooMailWebService/0.8.138.524
Message-ID: <1363692034.60989.YahooMailRC@web5702.biz.mail.ne1.yahoo.com>
From: UNITED NATIONS & FACEBOOK AWARD CENTER <agent_napoleon@rediffmail.com>
Reply-To: UNITED NATIONS & FACEBOOK AWARD CENTER <dr.napoleonbest062@gmail.com>
Subject: Congratulations;Please View Attachment File For Details

UNITED NATIONS & FACEBOOK AWARD CENTER agent_napoleon@rediffmail.com Reply Address: dr.napoleonbest062@gmail.com Dr. Napoleon Best

 
Leave a comment

Posted by on 03/20/2013 in Lottery Scam

 

Tags: , , , , , , , , , ,

“Hiring:~Data Axis Virtual”

EMPLOYMENT SCAM / EMAIL SCAM

UPDATED INFORMATION ON THIS SCAMMER WHO IS ALSO FRAUDING INDIVIDUALS ON DATING SITES INCLUDING EHARMONY IN WHAT’S CALLED A “ROMANCE SCAM”

Subject: Hiring:~Data Axes Virtual

Hello,
My name is Cynthia Mark , and I am a human resources supervisor at
Data Axes llc would first like to thank you for your interest
in the position. Here’s a brief overview of what we have to offer you.
Remember if you have any questions please feel free to email me back,
and I will be sure to respond personally.

Description:
-Work from office or home full or part time [telecommute]
-Full online training
-Pay based on per-completion basis
-Work your own schedule

Requirements:
Computer and email access
Competent typing ability
Basic internet knowledge
Must be able to learn and set goals

Details:
We are seeking only self motivated people with the desire to work with
online advertising.
No experience is necessary. You must have a computer with internet
access, a working email account, and basic typing skills. You can
choose
to work full or part time and the hours are set by you. We recommend 18
to 36 hours weekly. You will be processing responses from
advertisements; this will be explained to you in the training
materials.
Everything is sent via email. There is no contract to sign; the amount
you choose to process is entirely up to you. As with any job, you must
be able to respond to a dvertisements in a timely manner.

Compensation:
You will be paid $15.00 to $20.00 for each application you process. For
example, if you process 35 in a week you can expect to make $350 to
$700 weekly. The average person makes $700 per week. The amount of money
you
earn is entirely up to you. You will be responsible for keeping track
of your earnings for tax purposes. We do not take out anything for
government tax purposes, nor provide accounting services.

Training:
The training materials you receive will give you step-by-step
instructions on how to get started. When
you receive your training materials, you may begin working the same day.
There are no special software requirements for this position, but
familiarity with
basic computer skills.

Payment for work completed:
You will receive your payments through PayPal for each application you
process. There is a one time
non-refundable fee of $15.00 USD. This cost covers the training
materials sent to you. Once you process your first response, you will
have made back this fee. This is just a small processing fee,
protecting
from those who are not serious about doing this work. No business can
cover a dministrative cost, wasted time or provide costly materials to
everyon e who inquires about this position. If this is not acceptable
for you, or you cannot afford this small cost, please disregard this email.

The training materials and information will be sent to you after we
receive your administrative fee, you can begin immediately.

If you do not have a PayPal account, click on the link below to open a
fre e account so you can receive payment for your work and purchase your

training materials. Please notify me once you have made the payment, so

I can be sure the materials are sent to you. This is a completely fre e
service and it is a verified secure website. When making your payment,
please enter “Service/Other” in the “For:” field. Please send
your payment through PayPal to our account at: sunny_emale@yahoo.com
You will receive your materials within twenty-four hours. If you do not,
please email me with your PayPal address so I may confirm receipt.
http://www.paypal.com

NOTE:
You can feel 100% comfortable that this is absolut ely not a scam in any
way, shape form or fashion. There is one reason and one reason only that
hhere is a fee for the training materials. We need to identify those
applicants that are going to take this serious. This is an at home job and
leaves little ability to monitor applicants efforts. If this minimal fee is
not acceptable for you, or you cannot afford this small cost, please
disregard this opportunit y . But be assured you this is completely genuine
and legitimate!
******************************************************************************
Best,
Cynthia Mark
Data Axes llc
Asst. HR Supervisor

remove:reply remov e in subjectline

Return-Path:
Received: from mx-casero.atl.sa.earthlink.net ([207.69.195.34])
by mdl-harvest.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1tXn4k2SE3Nl36V0; Mon, 21 Jan 2013 14:30:08 -0500 (EST)
Received: from outbound001.roc2.bluetie.com ([208.89.132.141])
by mx-casero.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id 1tXn4k14b3Nl34m0

Received: from web008.roc2.bluetie.com ([10.200.2.102])
by outbound001.roc2.bluetie.com with outbound001
id qjW81k0032C3R5E01jW8N5; Mon, 21 Jan 2013 14:30:08 -0500
X-CMAE-OUT-Analysis: v=2.0 cv=JZ8+XD2V c=1 sm=1 a=lUlhjrXp7_sA:10
a=oti87C7NwtcA:10 a=IkcTkHD0fZMA:10 a=deDS6JXDAAAA:8 a=QoHJ8kPOAAAA:8
a=Pvi9LaN-ZWkA:10 a=fzrqQ9W4AAAA:8 a=5Up8faWwAAAA:8 a=Wn30oGziDlTkCwgbNAgA:9
a=QEXdDO2ut3YA:10 a=1-n_ZU4lECUA:10 a=gg_J_wPL-U8A:10 a=v6MMM96S_sUA:10
a=DaNu5FgYbKgAWmLyLTbO4Q==:117
X-CMAE-OUT-Score: 0.00
Received: from web008.roc2.bluetie.com (localhost.localdomain [127.0.0.1])
by web008.roc2.bluetie.com (Postfix) with ESMTP id 1ABC73187BC
X-HTTP-Received: from newsm995g.myway [177.135.138.218] by web008.roc2.bluetie.com (BlueTie WebMail ); Mon, 21 Jan 2013 14:30:08 -0500
X-Mailer: BlueTie MTA

From: “eHarmony Msg”
Importance: normal
Subject: eharmony has sent you a message. rb6r

Hello!

If you are 50 and above go here: http://nyp.st/Wb4gJo?cdpatch@earthlink.net
If you are under the age of 50 go here: http://nyp.st/Wb4gJo?cdpatch@earthlink.net

5iU%4iP#1rR%
————————–
Other Important info:

http://ip.robtex.com/208.89.132.141.html

Summary

Outbound001.roc2.bluetie.com point to 208.89.132.141.
Which servers does 208.89.132.141 use?

208.89.132.141 uses the reverse pointer outbound001.roc2.bluetie.com only.

It is blacklisted in three lists.

Domain Name

Reputation:
Source Result
BLACKLIST
CNET 208.89.132
208.89.132.0/24 RR-RC-BlueTie-Rochester AS19693 AS33524 (not announced)
Base Record Pref Name IP-number Reverse Route Autonomous System
outbound001.roc2.bluetie.com a 208.89.132.141 AS
roc2.bluetie.com com bluetie.com

_______________________

Return-Path: maryellis6@excite.com
Date: 09/29/12
X-Originating-IP: [208.89.132.141]
Received-SPF: pass (domain of excite.com designates 208.89.132.141 as permitted sender)

Claim’s to be ”Marry Ellis” – same scammer as stevenm8@excite.com (both have an idenical IP address, both are same scammer doing different scams.)

maryellis6@excite.com also uses maryellis@myluckymail.com (she spelt her fake name incorrect in the head it says ”Marry Ellis” but then sends her other email ”Mary Ellis,” OOPS. Scammers are to dumb for words. They are so obvious but still fool people apparently.)

Email from ”Marry Ellis” –

Hiring:~Data Axis Virtual
Hello,
My name is Mary Ellis , and I am a human resources supervisor at
Data Axis llc  would first like to thank you for your interest
in the position. Here’s a brief overview of what we have to offer you.
Remember if you have any questions please feel fre e to email me back,
and I will be sure to respond personally.
Description:
-Work from office or home full or part time [telecommute]
-Full online training
-Pay based on per-completion basis
-Work your own schedule
Requirements:
Computer and email access
Competent typing ability
Basic internet knowledge
Must be able to learn and set goals
Details:
We are seeking only self motivated people with the desire to work with
online a dvertising.
No experienc e is necessary. You must have a computer with internet
access, a working email account, and basic typing skills. You can
choose
to work full or part time and the hours are set by you. We recommend 18
to 36 hours weekly. You will be processing responses from
a dvertisements; this will be explained to you in the training
materials.
Everything is sent via email. There is no contract to sign; the amount
you choose to process is entirely up to you. As with any job, you must
be able to respond to a dvertisements in a timely manner.
Compensation:
You will be paid  $15.00 to  $20.00 for each application you process. For
example, if you process 35 in a week you can expect to make  $350 to
$700 weekly. The average person makes $600 per week. The amount of money
you
earn is entirely up to you. You will be responsible for keeping track
of your earnings for tax purposes. We do not take out anything for
government tax purposes, nor provide accounting services.
Training:
The training materials you receive will give you step-by-step
instructions on how to get started. When
you receive your training materials, you may begin working the same day.
There are no special software requirements for this position, but
familiarity with
basic computer skills.
Payment for work completed:
You will receive your payments through PayPal for each application you
process. There is a one time
non-refundable fee of  $19.00 USD. This cost covers the training
materials sent to you. Once you process your first response, you will
have made back this fee. This is just a small processing fee,
protecting
from those who are not serious about doing this work. No business can
cover a dministrative cost, wasted time or provide costly materials to
everyon e who inquires about this position. If this is not acceptable
for you, or you cannot afford this small cost, please disregard this email.
The training materials and information will be sent to you after we
receive your a dministrative fee, you can begin immediately.
If you do not have a PayPal account, click on the link below to open a
fre e account so you can receive payment for your work and purchase your
training materials. Please notify me once you have ma de the payment, so
I can be sure the materials are sent to you. This is a completely fre e
service and it is a verified secure website. When making your payment,
please enter “Service/Other” in the “For:” field. Please send
your payment through PayPal to our account at MaryEllis@myluckymail.com
You will receive your materials within twenty-four hours. If you do not,
please email me with your PayPal a ddress so I may confirm receipt.
NOTE:
You can feel 100% comfortable that this is absolut ely not a scam in any
way, shape form or fashion. There is one reason and one reason only that
hhere is a fee for the training materials. We need to identify those
applicants that are going to take this serious. This is an at home job and
leaves little ability to monitor applicants efforts. If this minimal fee is
not acceptable for you, or you cannot afford this small cost, please
disregard this opportunit y . But be assured you this is completely genuine
and legitimate!
******************************************************************************
Best,
Mary Ellis
Data Axis llc
Asst. HR
remov e:reply remov e in subjectline
Maryellis6 maryellis@myluckymail.com
 
5 Comments

Posted by on 09/30/2012 in Employment (Job) Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: