[Phish] Amazon Phishing

August 23, 2017, 11:29 am

≫ Next: [Phish] Comcast Phishing (again)

Cripe, I nearly 'bit' on this phish attempt simply because I had placed an Amazon order on Sunday and only looked at the email subject. Lol, but the email addy is NOT the one I use for my Amazon account. VirusTotal has the link flagged many, many times as malicious, etc. Return-Path: <amazonsale@roblox.com>Delivered-To: REDACTED@comcast.netReceived: from dovdir3-asb-04o.email.comcast.net ([96.118.52.180]) by dovback3-asb-17o.email.comcast.net (Dovecot) with LMTP id 8zBoCCr6mlmnSgAA6vxrdw for <REDACTED@comcast.net>; Mon, 21 Aug 2017 15:20:10 +0000Received: from dovpxy-asb-10o ([96.118.52.180]) by dovdir3-asb-04o.email.comcast.net (Dovecot) with LMTP id Zb06Air6mlkjFAAAhMaxxA ; Mon, 21 Aug 2017 15:20:10 +0000Received: from resimta-ch2-10v.sys.comcast.net ([96.118.52.180]) by dovpxy-asb-10o (Dovecot) with LMTP id aPVmLCb6mlmiVgAAwYr30A ; Mon, 21 Aug 2017 15:20:10 +0000Received: from public-exrmf-dc3-2.serverdata.net ([66.119.34.7]) by resimta-ch2-10v.sys.comcast.net with SMTP id joUldvf47kZwRjoUndCEs2; Mon, 21 Aug 2017 15:20:08 +0000X-CAA-SPAM: N00001X-Authority-Analysis: v=2.2 cv=O4VJhF1W c=1 sm=1 tr=0 p=R7_L_xKKAAAA:8 p=dqxyivIfAAAA:8 a=dcH+gtitjk1JzjMtN7lkHw==:117 a=dcH+gtitjk1JzjMtN7lkHw==:17 a=9cW_t1CCXrUA:10 a=XYpLuExSeDkA:10 a=O76VCmqbo-wA:10 a=khwyK8DuSVkA:10 a=KeKAF7QvOSUA:10 a=vggBfdFIAAAA:8 a=NBs6PbiXI1xqtj9m8cEA:9 a=Eubbw4Vpy5BBNRp5:21 a=Fhf0qRSKS59DaSoi:21 a=wPNLvfGTeEIA:10 a=gwFHdTb4g5oA:10 a=1XWaLZrsAAAA:8 a=xGTIJIAVngg1l0an:21 a=EId3fCc_AGlM3C8J:21 a=cquYy45D80njx4-q:21 a=_W_S_7VecoQA:10 a=frz4AuCg-hUA:10 a=fkqBw3BD5RLjSgApC7jY:22 a=hnY84wnBSDYmUyAa6Kkj:22 a=9CcPPxs0A7t_sP0VOl6d:22X-Xfinity-Message-Heuristics: IPv6:N;TLS=1;SPF=2;DMARC=Received: from localhost (localhost [127.0.0.1]) by exrmf-dc3-2.serverpod.net (Postfix) with ESMTP id BF06614C; Mon, 21 Aug 2017 05:40:51 -0700 (PDT)X-Virus-Scanned: by amavisd-new at exrmf-dc3-2Received: from public-exrmf-dc3-2.serverdata.net ([10.36.156.27]) by localhost (exrmf-dc3-2.serverpod.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iA790pcTw48p; Mon, 21 Aug 2017 05:40:50 -0700 (PDT)Received: from HUB040-DC3-3.exch040.serverpod.net (unknown [10.68.140.134]) by exrmf-dc3-2.serverpod.net (Postfix) with ESMTP id CD534125; Mon, 21 Aug 2017 05:40:19 -0700 (PDT)Received: from MBX040-E1-DC3-6.exch040.serverpod.net ([10.68.140.72]) by HUB040-DC3-3.exch040.serverpod.net ([10.68.140.46]) with mapi id 14.03.0319.002; Mon, 21 Aug 2017 05:40:14 -0700From: Amazon Sales <AmazonSale@roblox.com>Subject: Verify your Amazon AccountThread-Topic: Verify your Amazon AccountThread-Index: AdMaeqH09IqxK/fFTgqksI6t3Gpg2w==Date: Mon, 21 Aug 2017 12:40:13 +0000Message-ID: <20B24127B275204585F4E4216438C62F079EC5@MBX040-E1-DC3-6.exch040.serverpod.net>Accept-Language: en-USContent-Language: en-USX-MS-Has-Attach:X-MS-TNEF-Correlator:x-originating-ip: [23.254.167.169]Content-Type: multipart/alternative; boundary="_000_20B24127B275204585F4E4216438C62F079EC5MBX040E1DC36exch0_"MIME-Version: 1.0X-CMAE-Verdict: spamX-CMAE-Score: 100X-CMAE-Analysis: v=2.2 cv=W/Z6blek c=1 sm=1 tr=0 p=dqxyivIfAAAA:8 a=LoeaT0TP3lAT3TgP8FaB3Q==:117 a=9cW_t1CCXrUA:10 a=XYpLuExSeDkA:10 a=O76VCmqbo-wA:10 a=KeKAF7QvOSUA:10 a=R7_L_xKKAAAA:8 a=vggBfdFIAAAA:8 a=NBs6PbiXI1xqtj9m8cEA:9 a=Eubbw4Vpy5BBNRp5:21 a=Fhf0qRSKS59DaSoi:21 a=wPNLvfGTeEIA:10 a=gwFHdTb4g5oA:10 a=1XWaLZrsAAAA:8 a=xGTIJIAVngg1l0an:21 a=EId3fCc_AGlM3C8J:21 a=cquYy45D80njx4-q:21 a=_W_S_7VecoQA:10 a=frz4AuCg-hUA:10 a=fkqBw3BD5RLjSgApC7jY:22 a=9CcPPxs0A7t_sP0VOl6d:22 a=hnY84wnBSDYmUyAa6Kkj:22X-CMAE-Envelope: MS4wfFILU4AeE8M4bYrBc3OKU7Dd1F6hmdO9B2ZYzGPcAu6h8gH/kIYPpifByNRub4F86lNXROYHgLlow56+FkXT4x2PVB9BlXHQbJja7fU3moRXUL2xoMUt CT3payTgU2HQbU/aGJC+FjlY4dXKKrWLR+kV+FbwGUGUPG5dFSKpt8YSvivK1Ip1gLrdYP5vNHaJYLIvvB0n3V9VNeAcNV1PEexOSa2wMam9Z8XPD/Eo3krF TyBLuw3fqee22vEAcdHOUUafkdSqjHXxBdmjrXU26tWbnwiHD5hLUpAjAdt2E5F+uRK8MqGSY+ipanhWG1x2FHi+vOSFQGrZes6cSZPMhpK2j90459+73l51 k2pLITt8hTCJ81pRZNXDd58KjdASewhA4CdHtTiLreVGcXARN3D6dznsxuSaZxh7DBpv9+rEYg8B+0MAXNmJsBV//VAzJWXldvnNh+DSit3hD0RkqkgYSZcy 1v2k4bmCskOvpllUa7SpI8QMc3gIRLONl8ukOUEyFNHr+N8TGcV4oO3ZWbWBx6JzBGVgUdgmfgnta/lzb0EJvqKxe/xh2alVkM63kDZlMe0Tw+1nXJdjGIVb E4TUCTrEnySD3naZssSwXP9YAHQ/U5BPW83QJ9b3hFpoc4ePdham4/lh4Uq/5EErT7IALouDoVyJqNxW/0XT5kC+MaUzZTYbemTO7fntLleoUrvaiLLQaUsw Oa6MeDIfLRfQ8WR7sZp0rz625aagMQebDWLkz722P4Oi1VXWou8JkyZFsLU7e8gUJ38VykZI/EsjzUdy4ReSARJTvTJ5HZU1ccmjtOudysBtJ70/01ey8sd4 OYeptTQq2Ork0vOsQgHcF8TXil9XTfo4rMNxJ+sDMehO4FVCywyGJ8vzLxd5MjXVacW+CBExcFgC7WagT/3PYf8k6rCWhD9hR5ukocrBSj9MiFA7K5ZIYrg6 vfyht1ZVXD5hfQitEJfUloQeX4v5pUUUFbyQ0UVzry5AlOrEk09P5Z9s/QjtO/jwL6wLnmTZuQLZU0qe8bZTaFqOqPo29I9Py5D6tFOkY4LWSys6M17eBIbv uxkUXmdQgUd3xIR4Ss6/RVfK/ZuKEOLSNNBrRuIYIRFB/YOvKjNiNYv49VkeRsNx0PXDZmew9yx/0JFElwYJMRnJny6v1MsT9j/TzsTtH0CMg92ZHrv6Ki0K 4CpV0Cr8h6NF87N0orEwgWUzI0dgXPKoZLlfB/3OKZJ1iZLU18ARSypunZ66QnapOgQ3IUoW8xgn3ydSubveKfNzl1Qu/10SV3spmycBrpvj9jpxb3WOc/cR TiR9lptF0z5t9uSONndP6Lwl6x0Rt9p1nRGcExhctLtThNIXnK9WjRwjuPPZEiJvTYesJ96lSFOMZFUNgQCLv3Fncb6UgH3shdBMA4jS1SDAHfjeIgOgfZHG mhKSLK5Dl+9XYrL9JE1uhPMOfkfx97U8x6c4U/9EIsbMLPEivICJH2yaG9NzS9uXvDHm7d5h3XKXnMAHWzzc/gTdSjx/syOy+tZpEKJaVl5sTKDywJUuIBZ5 TXluRn55f5ywXEKjodNoCTWeAdyacAu5F+cnbo5Un848UQUICxBnCTJLTrB1cLBGLMWN4biEBJNG4BB4KozDwilq --_000_20B24127B275204585F4E4216438C62F079EC5MBX040E1DC36exch0_Content-Type: text/plain; charset="iso-8859-1"Content-Transfer-Encoding: quoted-printable Transactions On Hold Hello amazon user,We are having trouble authorizing your payment method for transaction. Plea=se verify or update your payment method. If your payment information is cor=rect (such as expiry date and billing address), please contact your bank fo=r more details. Update your payment method<http://nikolasadienersho[dot]com/amsa/amazon[dot]com/Ama=zon> --_000_20B24127B275204585F4E4216438C62F079EC5MBX040E1DC36exch0_Content-Type: text/html; charset="iso-8859-1"Content-Transfer-Encoding: quoted-printable <html dir=3D"ltr"><head><meta http[dash]equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=1"><style type=3D"text/css" id=3D"owaParaStyle"></style></head><body fpstyle=3D"1" ocsi=3D"0"><div style=3D"direction: ltr;font-family: Tahoma;color: #000000;font-size: =10pt;"><table class=3D"m_4833179176479060623gmail-m_-2708218674891565880yahoo-comp=ose-table-card" id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_=3_16_0_ym19_1_1503059957727_60122" cellpadding=3D"0" style=3D"font-size: 13=px; margin: 0px auto; padding: 0px; border-collapse: collapse; word-break: =break-word; font-family: "helvetica neue", "segoe ui", =helvetica, arial, "lucida grande", sans-serif; width: 500px; colo=r: rgb(51, 51, 51);"><tbody id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym=19_1_1503059957727_60123" style=3D"width: 500px;"><tr id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60124"><td id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60125" style=3D"font-family: arial, sans-serif; margin: 0px=; vertical-align: middle; font-stretch: normal; font-size: 14px; line-heigh=t: normal;"><table class=3D"m_4833179176479060623gmail-m_-2708218674891565880yahoo-comp=ose-table-card" id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_=3_16_0_ym19_1_1503059957727_60126" cellpadding=3D"0" style=3D"margin: 0px; =padding: 0px; border-collapse: collapse; word-break: break-word; width: 500=px;"><tbody id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym=19_1_1503059957727_60127" style=3D"width: 500px;"><tr id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60128"><td id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60129" style=3D"margin: 0px; vertical-align: middle; font-s=tretch: normal; line-height: normal;"><table class=3D"m_4833179176479060623gmail-m_-2708218674891565880yahoo-comp=ose-table-card" id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_=3_16_0_ym19_1_1503059957727_60130" cellpadding=3D"0" style=3D"margin: 0px 0=px 15px; padding: 0px; border-collapse: collapse; word-break: break-word; w=idth: 500px;"><tbody id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym=19_1_1503059957727_60131" style=3D"width: 500px;"><tr id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60132"><td rowspan=3D"2" id=3D"m_4833179176479060623gmail-m_-2708218674891565880yu=i_3_16_0_ym19_1_1503059957727_60133" style=3D"margin: 0px; vertical-align: =middle; font-stretch: normal; line-height: normal; width: 115px; padding: 1=8px 0px 0px;"></td><td id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60136" style=3D"margin: 0px; vertical-align: middle; font-s=tretch: normal; line-height: normal; text-align: right; padding: 7px 0px 5p=x;"><h2 id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60137" style=3D"margin: 0px; padding: 0px; font-weight: nor=mal; font-size: 20px; line-height: 24px;">Transactions On Hold</h2></td></tr></tbody></table></td></tr><tr id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60138"><td id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60139" style=3D"margin: 0px; vertical-align: middle; font-s=tretch: normal; line-height: normal;"><table class=3D"m_4833179176479060623gmail-m_-2708218674891565880yahoo-comp=ose-table-card" id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_=3_16_0_ym19_1_1503059957727_60140" cellpadding=3D"0" style=3D"margin: 0px; =padding: 0px; border-collapse: collapse; word-break: break-word; width: 500=px;"><tbody id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym=19_1_1503059957727_60141" style=3D"width: 500px;"><tr id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60142"><td id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60143" style=3D"margin: 0px; vertical-align: middle; font-s=tretch: normal; line-height: normal;"><span id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym1=9_1_1503059957727_60144" style=3D"font-size: 18px; color: rgb(204, 102, 0);= margin: 15px 0px 0px;">Hello amazon user,</span><div id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19=_1_1503059957727_60145" style=3D"margin: 4px 0px 18px; padding: 0px; text-a=lign: justify; font-stretch: normal; line-height: 18px;">We are having trouble authorizing your payment method for transaction. Plea=se verify or update your payment method. If your payment information is cor=rect (such as expiry date and billing address), please contact your bank fo=r more details.</div></td></tr></tbody></table></td></tr><tr id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60146"><td id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60147" style=3D"margin: 0px; vertical-align: middle; font-s=tretch: normal; line-height: normal;"><table class=3D"m_4833179176479060623gmail-m_-2708218674891565880yahoo-comp=ose-table-card" id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_=3_16_0_ym19_1_1503059957727_60148" cellpadding=3D"0" style=3D"margin: 0px; =padding: 0px; border-collapse: collapse; word-break: break-word; width: 500=px; border-top: 3px solid rgb(203, 207, 212);"><tbody id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym=19_1_1503059957727_60149" style=3D"width: 500px;"><tr id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60150"><td id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60151" style=3D"margin: 0px; vertical-align: middle; font-s=tretch: normal; line-height: normal; padding: 18px; background-color: rgb(2=39, 239, 239); width: 464px;"><table class=3D"m_4833179176479060623gmail-m_-2708218674891565880yahoo-comp=ose-table-card" id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_=3_16_0_ym19_1_1503059957727_60152" cellspacing=3D"0" cellpadding=3D"0" alig=n=3D"left" style=3D"margin: 0px 170px 0px 0px; padding: 2px 0px 0px; border=-collapse: collapse; word-break: break-word; width: 270px; min-height: 44px=;"><tbody id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym=19_1_1503059957727_60153" style=3D"width: 270px;"><tr id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60154"><td id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60155" align=3D"center" style=3D"margin: 0px; vertical-alig=n: middle; font-stretch: normal; line-height: normal; padding: 13px 0px; ba=ckground-color: rgb(240, 193, 75); width: 270px; border-radius: 3px; border=-bottom-color: rgb(255, 255, 0); min-height: 100%;"><a rel=3D"nofollow" id=3D"m_4833179176479060623gmail-m_-2708218674891565880=yui_3_16_0_ym19_1_1503059957727_60156" href=3D"http://nikolasadienersho[dot]com=/amsa/amazon[dot]com/Amazon" target=3D"_blank" data-saferedirecturl=3D"https://=www.google[dot]com/url?hl=3Den&q=3Dhttp://gawainejohnsonso[dot]com/ama/amazon[dot]c=om/Amazon/&source=3Dgmail&ust=3D1503317658924000&usg=3DAFQjCNGK=NJbUPoPF8aSZvr1mrY20EfsQsA" style=3D"color: rgb(102, 102, 102); margin: 0px=; padding: 0px; background-image: initial; background-position: initial; ba=ckground-size: initial; background-repeat: initial; background-origin: init=ial; background-clip: initial; background-color: transparent; outline: none=; font-stretch: normal; font-size: 13px; line-height: 18px; display: inline=-block;"><span id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3=_16_0_ym19_1_1503059957727_60157" style=3D"color: rgb(17, 17, 17); font-str=etch: normal; font-size: 16px; line-height: 18px;"><b id=3D"m_4833179176479=060623gmail-m_-2708218674891565880yui_3_16_0_ym19_1_1503059957727_60158">Up=date your payment method</b></span></a></td></tr></tbody></table></td></tr></tbody></table></td></tr><tr id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60159"><td id=3D"m_4833179176479060623gmail-m_-2708218674891565880yui_3_16_0_ym19_=1_1503059957727_60160" style=3D"margin: 0px; vertical-align: middle; font-s=tretch: normal; line-height: normal;"> </td></tr></tbody></table></td></tr></tbody></table></div></body></html> --_000_20B24127B275204585F4E4216438C62F079EC5MBX040E1DC36exch0_--

↧

[Phish] Comcast Phishing (again)

September 27, 2017, 11:46 am

≫ Next: Phishing? Scam? Spam? ???

≪ Previous: [Phish] Amazon Phishing

Gotta love these scammers that are just bound and determined to send a Comcast invoice each and every month, generally two or three times from different individuals :D. This time the phish email references it being legally binding ... hahaha. NOTE: I deleted some stuff in the middle which APPEARED to be coding for font formatting etc. Return-Path: <docusign@signagen.com>Delivered-To: REDACTED@comcast.netReceived: from dovdir3-asa-07o.email.comcast.net ([96.118.59.78]) by dovback3-asa-20o.email.comcast.net with LMTP id 2KLwESrby1m3NQAA0iVB6A for <REDACTED@comcast.net>; Wed, 27 Sep 2017 17:08:58 +0000Received: from dovpxy-asb-16o.email.comcast.net ([96.118.59.78]) by dovdir3-asa-07o.email.comcast.net with LMTP id 4MOQESrby1krNQAAdtYtdw ; Wed, 27 Sep 2017 17:08:58 +0000Received: from resimta-ch2-15v.sys.comcast.net ([96.118.59.78]) by dovpxy-asb-16o.email.comcast.net (Dovecot) with LMTP id KJEuGCfby1mMMwAAOJv1+w ; Wed, 27 Sep 2017 17:08:58 +0000Received: from signagen.com ([147.0.243.50]) by resimta-ch2-15v.sys.comcast.net with SMTP id xFpPd2zm1OFFFxFpRdiuxa; Wed, 27 Sep 2017 17:08:57 +0000X-CAA-SPAM: N00001X-Authority-Analysis: v=2.2 cv=Tp+WvHfh c=1 sm=1 tr=0 p=S4njE1XbAAAA:8 p=osUyVJkOz413Ms6b:21 a=BSYBak67m6frmeWzXm16qw==:117 a=BSYBak67m6frmeWzXm16qw==:17 a=C_IRinGWAAAA:8 a=IkcTkHD0fZMA:10 a=khwyK8DuSVkA:10 a=qkiSI_mZUWEA:10 a=LFCFqbsqDgrCZucbUPAA:9 a=_W_S_7VecoQA:10 a=QEXdDO2ut3YA:10 a=_QgY2E5gK-MA:10 a=FjCc_Hfnnlhfw5RvHwmx:22X-Xfinity-Message-Heuristics: IPv6:N;TLS=0;SPF=0;DMARC=Message-ID: <9932ED6B.93376A2C@signagen.com>Date: Wed, 27 Sep 2017 13:08:57 -0400From: "Carl Michaels via DocuSign" <docusign@signagen.com>X-Mailer: iPhone Mail (13G12)X-Accept-Language: en-usMIME-Version: 1.0To: <REDACTED@comcast.net>Subject: Your Invoice 01304863 for accounting@comcast.net Document is Ready for SignatureContent-Type: text/html; charset="utf-8"Content-Transfer-Encoding: 7bitX-CMAE-Envelope: MS4wfMpQE8+gi6aHdLn8G9FOQUZGrrIjlmsyYmM3ZSm9QwbrH/NcIok5IZwmLkwYIJQHB0X+fgnUoek9elbFjfJJLssWDq20OD+gjDxdYERvd0BuZRTlzXP9 Dna3/2N1fXWKG47ARaObnwZRNQKjTxSOeQfn/3ImS9c0pOf3La987I2s4wHUjdKkkCIXx4dED3SVyg== <html> Your signature is required on this document.</td> href="http://web.purarewards[DOT]com/ds[DOT]php?kou=REDACTED@comcast[DOT]net"style="font-size: 15.0px;color: rgb(255,255,255);background-color:rgb(255,0,0);font-family: Helvetica , Arial , Sans Serif;font-weight:bold;text-align: center;text-decoration: none;background-color:rgb(255,0,0);display: inline-block;"><span style="padding: 0.0px24.0px;line-height: 44.0px;">VIEW DOCUMENT </span></a></td> Your Invoice 01304863 for accounting@comcast.net Document hasto be signed.</p> <p style="font-size: 15.0px;color: rgb(51,51,51);font-family:Helvetica , Arial , Sans Serif;line-height: 20.0px;"> To sign your Invoice <span style="color: rgb(51, 51,51); font-family: Helvetica, Arial, 'Sans Serif'; font-size: 15px;background-color: rgb(255, 255, 255);">01304863</span><span style="color:rgb(51, 51, 51); font-family: Helvetica, Arial, 'Sans Serif'; font-size:15px; background-color: rgb(255, 255, 255);"> foraccounting@comcast.net</span><br /> document, visit the button above ("View Document").</p> <p style="font-size: 15.0px;color: rgb(51,51,51);font-family:Helvetica , Arial , Sans Serif;line-height: 20.0px;"> The document won't be valid until signed.</p> <p style="font-size: 15.0px;color: rgb(51,51,51);font-family:Helvetica , Arial , Sans Serif;line-height: 20.0px;"> Thank you.</p> <b>About DocuSign</b><br /> Sign documents electronically in just minutes. It's safe,secure, and legally binding. Whether you're in an office, at home,on-the-go -- or even across the globe -- DocuSign provides a professionaltrusted solution for Digital Transaction Management™.</p> <p style="margin-bottom: 1.0em;font-family: Helvetica , Arial, Sans Serif;font-size: 13.0px;color: rgb(102,102,102);line-height:18.0px;"> <b>Questions about the Document?</b><br /> If you need to modify the document or have questions aboutthe details in the document, please reach out to the sender by emailing themdirectly or replying to this email.<br /> <br /> If you are having trouble signing the document, pleasecontact us.</p> <p style="margin-bottom: 1.0em;font-family: Helvetica , Arial, Sans Serif;font-size: 13.0px;color: rgb(102,102,102);line-height:18.0px;font-size: 10.0px;line-height: 14.0px;"> </body></html>

↧

Phishing? Scam? Spam? ???

October 4, 2017, 2:19 am

≫ Next: lost wallet scam

≪ Previous: [Phish] Comcast Phishing (again)

I found this in my Inbox. I'm puzzled by it. There's no links in the body. There's no attachment. It's obvious not legit. It's got a strange From address that matches what's in the header. Virus and malware scans are clean. Anyone have an idea what it's about?

↧

lost wallet scam

October 19, 2017, 2:54 pm

≫ Next: FBI Anti-Terrorist and Monetary Crimes Division

≪ Previous: Phishing? Scam? Spam? ???

co-worker lost pannier bag from bike which had wallet and keys. Put up a Craigslist and posters in area in case someone finds it. she got a text message from someone saying they found it. Wanted co-worker to send them name and address and phone number and a picture of the wallet to prove ownership. Person also included their name and an gmail contact. Told co-worker to ignore. could be scam but just in case. Make a fake / burner email and reply to person asking them to briefly describe wallet and to say street name that is in id in wallet. person replied to email with a USPS tracking number and an link to a "USPS" tracking website. Told her not to click on the link. Go to the USPS and look up number. Tracking number does not exist. Oh and the person is also in Arizona. (wallet lost in Vancouver BC) Person says was visiting Vancouver and found wallet. Person also asks friend to sent $65 shipping via money gram. scammer 99.99% sure

↧

FBI Anti-Terrorist and Monetary Crimes Division

October 13, 2017, 6:14 pm

≫ Next: [Scam] Fast mingle

≪ Previous: lost wallet scam

Got this today --------------------------------------- FBI Headquarters 935 Pennsylvania Avenue, NW Washington, D.C. 20535-0001 [ This is to notify you that huge funds valued at 1.2 million Dollars have been transferred into your account. This transfer was stopped today by the Federal Bureau of Investigations (FBI) because our verification showed that you do not possess the Diplomatic Immunity Seal of Transfer (DIST) to show that this fund is legit and rightly belongs to you. YOU CAN OBTAIN THE DIST DOCUMENT AT A FEE OF USD650, Do reply to this e-mail so we can direct you accordingly where you will obtain this legal wiring document to fully authorize the crediting of your fund into your main account. FBI Anti-Terrorist and Monetary Crimes Division ------------------------------------- Seriously?

↧

[Scam] Fast mingle

September 15, 2017, 4:27 am

≫ Next: [Phish] For a few years now

≪ Previous: FBI Anti-Terrorist and Monetary Crimes Division

I had a $10 charge from a fraud called fast mingle come through on my bank account. It was sent through on my girlfriends account number. we called the bank and disputed it. we got the phone number from the bank and the net and tried to call the company also. their "contact" number goes straight to voicemail at all hours. I also got an overdraft from it because I didn't catch it in time. I have reported them to the BBB both as a scam and personally. anyone else have info about them or any other sites that they may run. I have their supposed address etc.

↧

[Phish] For a few years now

September 22, 2017, 12:34 pm

≫ Next: HUMOR Who is this Spam from?

≪ Previous: [Scam] Fast mingle

One of my email accounts, a main one, keeps getting letters addressed to me by my name but as though I live in Great Britain and was some sort of head honcho and part time street performer. It's weird and I figured, ok, maybe some guy keeps giving out the wrong email or people keep getting his email that might be similar to mine. But it never ends, and it keeps getting weirder and weirder. I report spam to google (it's gmail) but every day there some "new" sender and there isn't always a link included but a supposed email address link. I wonder what is going on, surely by now if it was some guy with a similar email address he'd have taken proper measures to explain to people to send to the right address?

↧

HUMOR Who is this Spam from?

October 29, 2017, 8:52 am

≫ Next: Any way to report to Twitter about my account compromise?

≪ Previous: [Phish] For a few years now

I had to chuckle when I got this. From: Home Depot Halloween (Lowes-PreHalloween AT nbvnv.stream) Subject: REI is giving away Free LED Lanterns - Ends 10.30.17 Content: Lowes is having a Pre Black Friday Sale on LED Lanterns...The Pre Black Friday Giveaway ends on 10.30.17 Who was the sender? Home Depot or Lowes? Maybe REI. Is it a sale or a free giveaway? Let's be safe and cover all the bases. :D :D :D

↧

Any way to report to Twitter about my account compromise?

November 5, 2017, 11:51 am

≫ Next: Team National....scam or great company?

≪ Previous: HUMOR Who is this Spam from?

This morning, @justinjlockhar1 (JustinJL, unfortunately protected due to account that's already been compromised) sent me a link that I clicked in which I shouldn't have authorized an app that spread an Instagram link to anyone that followed me. I want to let Twitter know of my situation, as I cannot be forgiven for what happened. I've changed my password and explained everyone what happened, including sending a direct message to those who told me that my account has been compromised or that they do not click in the link that an unauthorized app has sent. My lesson learned is this: Never click in link from someone you do know. JustinJL is a proud advocate and supporter of The Venus Project and I do not know his account has already been compromised before I click in the link. His tweets are legit and the last time that the tweet was legit is about 12 hours ago at the time of writing. Since I cannot undo what I've done and I cannot delete the links that were already sent in direct message, what can I do next? I've already changed my password and I'm using a password manager, so that part is done, including lesson learned from above.

↧

Team National....scam or great company?

November 8, 2017, 2:45 am

≫ Next: [Scam] US Government Grant Department Fraud

≪ Previous: Any way to report to Twitter about my account compromise?

A friend is trying to get me to join this Team National MLM. I listened to his pitch and immediately thought it was a pyramid scheme. Has anyone joined this group and if so, what was your outcome?

↧

[Scam] US Government Grant Department Fraud

May 28, 2013, 12:55 pm

≫ Next: [Scam] Anthony Morrison/Hidden Millionaires Infomercial

≪ Previous: Team National....scam or great company?

I got a call from a guy with an accent who claims he is from the US Government Grant Department and that I won a grant that amounted to $8,400 and that I could use it towards anything. I asked him what particular grant did I win and how did I qualify. He said I won a December drawing from 1700 applicants and that I qualified because I didn't have a criminal record and that I paid my taxes on time(even though I never filed because I never held a job before) and that they were calling to verify my identity since all they had was my name and phone number. He then asked me for my name and address (he just said they had my name) and while doing this I googled up this supposed department and found red flags all over it. He then asked me what form would I like to receive my money and I mention Visa or MasterCard and then he asked me for my MasterCard number. That solidified that this was a scam and I told him that I wanted the money in PayPal. He pushed for MasterCard so I gave him the info to a defunct college debit card that I had laying around. He pulled up a fake confirmation number and said that if I didn't call his manager right away that I would lose my grant. I called his so called manager who goes by "Brandon War" according to the guy and got a message saying that he was busy and that his inbox was full. I would later on call the guy who started this and got a inbox full message as well. I then reported the incident to the the Department of Health and Human Services, Office of the Inspector General through phone where the automated messaging pretty much said that they would never give grants in the way this guy tried, reaffirming that I was right. After the reporting was done, I followed their advice to call and alert the bank of the card even though it was defunct. The bank confirmed that no activity has happened to the card and reaffirmed that the card was defunct and tied to no accounts. From what I can gather from past reports, these scammers would gather card numbers and then charge them and the person would never received a dime. Do not give them any card info, unless like me you are using a dead card. They just want to steal money and with college students pressing hard for money, its easy to prey upon those needs. Caller ID: Washington DC Number of the one who started this: 202-666-3552 Number of manager "Brandon War": 202-808-3678 Fake Confirmation Number: ZO938 ---- Chronological list of numbers mentioned in this topic: 202-697-9891 202-657-4727 212-121-2121 202-436-9932 202-580-8203 206-905-1512 616-980-2164 416-364-1111 646-401-0282 202-738-4201 202-470-3389 202-640-5461 646-807-2671 202-241-6404 202-657-4861 828-303-5558 347-394-0227 202-697-9898 202-559-7624 209-813-0490 202-407-9192 202-738-4616 202-738-1368 202-697-9849 828-303-5558 1800-447-8477 1800-223-8164 1800-377-4950 882-221-4451 206-905-1104 202-506-1967 202-621-0439 202-666-5870 202-470-3953 202-241-9467 202-000-1111 202-738-4648 202-923-4781 202-738-1191 213-965-3964 767-275-9061 202-621-5429 222-222-2245 253-205-8311 222-222-2245 202-738-1655 209-813-0493 202-657-4968 551-333-1196 206-445-0530 206-777-1016 202-738-4294 000-012-1233 202-559-7624 206-855-6581 202-407-7235 202-000-1111 202-738-1655 202-657-5808 202-436-9932 1800-262-7890 321-806-2951 850-754-9493 315-715-8484 202-697-9373 202-000-1111 360-633-3050 206-445-0530 202-621-5429 202-738-4217 202-657-4771 202-657-6412 206-201-2631 206-249-7221 206-452-3769 202-407-9711 202-738-4307 206-249-7221 315-625-1567 213-457-3153 526-789-4562 202-683-9846 202-738-1065 202-738-2323 202-631-2323 786-991-2744 202-738-1065 202-580-8398 253-843-6561 202-657-5031 202-738-1682 202-738-1853 202-470-2658 202-697-7222 202-599-9602 202-436-9770 646-250-3817 202-738-1514 202-657-4861 206-973-7328 206-855-6792 202-470-3524 202-738-4272 202-407-9711 222-222-2245 202-657-4335 202-478-7651 202-467-9056 206-866-5667 202-241-2208 202-407-9094 360-205-3786 212-735-1623 209-813-0178 347-535-4487 202-407-9095 206-855-3282 202-657-5808 347-696-1007 202-783-1131 202-621-0867 206-801-1198 202-666-7736 378-616-1723 253-843-6181 202-470-3389 202-666-9257 315-889-1959 302-956-9114 212-203-0514 202-738-4227 202-738-1562 202-559-7968 202-470-6662 202-697-9328 202-697-7222 209-243-5668 567-890-9876 646-233-2181 202-067-9006 222-222-2245 219-229-3949 206-855-3282 253-843-6537 202-470-5011 360-205-3786 347-474-6903 239-344-7605 215-356-2987 206-905-1514 206-331-4687 202-738-4068 202-783-4067 206-905-1514 678-508-7234 202-280-7632 315-308-5502 1800-111-3344 516-554-0002 360-851-4717 416-364-1111 222-222-2245 202-360-4507 202-445-6565 206-317-1696 202-738-4418 202-738-1852 202-511-2457 202-511-2542 202-697-9690 206-317-1214 202-657-4642 202-738-1706 253-245-3160 202-600-8836 347-467-1047 202-621-0386 565-454-3434 315-636-4036 561-952-2080 202-738-1998 480-696-8937 202-738-4261 253-693-4892 222-222-2245 202-111-0000 202-657-6018 206-792-9400 1800-111-1001 202-000-1111 202-666-3888 786-540-1818 516-811-6656 509-331-5555 402-715-4266 208-410-6074 631-402-9176 202-177-7222 844-646-1499 888-538-3518 204-480-5387 631-495-5427 817-473-0583 603-913-2771 225-664-6622 610-268-9028 214-875-9653 806-874-8241 225-314-2083 317-654-5602 310-627-1520 469-518-0029 910-242-4512 954-436-1050 225-928-6119 225-930-7470 470-248-1212 876-792-2594 813-702-9234 225-614-9473 770-822-3600 561-200-3540 866-599-5939 866-452-6442 225-283-3110 202-738-4101 202-311-3565 253-216-8101 202-407-9192 202-738-1123 360-207-0962 202-666-1747 301-476-0602 202-738-1614 253-843-6189 253-843-6181 315-695-1315 646-583-1927 425-206-2009 206-201-2025 202-511-2457 714-929-8215 202-621-0572 202-718-5302 202-657-5624 360-207-0862 240-292-8072 877-382-4357 202-657-6501 315-675-7795 424-281-3296 202-559-4658 202-407-9192 360-474-4577 646-583-2732 315-696-1315 202-738-1738 202-738-4703 303-356-9999 202-657-4167 206-855-5055 646-593-8900 253-843-6182 315-314-4216 202-666-3552 202-666-9257 509-331-5555 202-666-3552 202-808-3678 202-657-6938 202-697-9659 202-697-7222 206-855-5834 233-862-9677 206-866-5706 707-282-5004 202-738-9968 240-244-7766 Unique list of numbers sorted by area code: 1800-111-1001 1800-111-3344 1800-223-8164 1800-262-7890 1800-377-4950 1800-447-8477 202-000-1111 202-067-9006 202-111-0000 202-177-7222 202-241-2208 202-241-6404 202-241-9467 202-280-7632 202-311-3565 202-360-4507 202-407-7235 202-407-9094 202-407-9095 202-407-9192 202-407-9711 202-436-9770 202-436-9932 202-445-6565 202-467-9056 202-470-2658 202-470-3389 202-470-3524 202-470-3953 202-470-5011 202-470-6662 202-478-7651 202-506-1967 202-511-2457 202-511-2542 202-559-4658 202-559-7624 202-559-7968 202-580-8203 202-580-8398 202-599-9602 202-600-8836 202-621-0386 202-621-0439 202-621-0572 202-621-0867 202-621-5429 202-631-2323 202-640-5461 202-657-4167 202-657-4335 202-657-4642 202-657-4727 202-657-4771 202-657-4861 202-657-4968 202-657-5031 202-657-5624 202-657-5808 202-657-6018 202-657-6412 202-657-6501 202-657-6938 202-666-1747 202-666-3552 202-666-3888 202-666-5870 202-666-7736 202-666-9257 202-683-9846 202-697-7222 202-697-9328 202-697-9373 202-697-9659 202-697-9690 202-697-9849 202-697-9891 202-697-9898 202-718-5302 202-738-1065 202-738-1123 202-738-1191 202-738-1368 202-738-1514 202-738-1562 202-738-1614 202-738-1655 202-738-1682 202-738-1706 202-738-1738 202-738-1852 202-738-1853 202-738-1998 202-738-2323 202-738-4068 202-738-4101 202-738-4201 202-738-4217 202-738-4227 202-738-4261 202-738-4272 202-738-4294 202-738-4307 202-738-4418 202-738-4616 202-738-4648 202-738-4703 202-738-9968 202-783-1131 202-783-4067 202-808-3678 202-923-4781 204-480-5387 206-201-2025 206-201-2631 206-249-7221 206-317-1214 206-317-1696 206-331-4687 206-445-0530 206-452-3769 206-777-1016 206-792-9400 206-801-1198 206-855-3282 206-855-5055 206-855-5834 206-855-6581 206-855-6792 206-866-5667 206-866-5706 206-905-1104 206-905-1512 206-905-1514 206-973-7328 208-410-6074 209-243-5668 209-813-0178 209-813-0490 209-813-0493 212-121-2121 212-203-0514 212-735-1623 213-457-3153 213-965-3964 214-875-9653 215-356-2987 219-229-3949 222-222-2245 225-283-3110 225-314-2083 225-614-9473 225-664-6622 225-928-6119 225-930-7470 233-862-9677 239-344-7605 240-244-7766 240-292-8072 253-205-8311 253-216-8101 253-245-3160 253-693-4892 253-843-6181 253-843-6182 253-843-6189 253-843-6537 253-843-6561 301-476-0602 302-956-9114 303-356-9999 310-627-1520 315-308-5502 315-314-4216 315-625-1567 315-636-4036 315-675-7795 315-695-1315 315-696-1315 315-715-8484 315-889-1959 317-654-5602 321-806-2951 347-394-0227 347-467-1047 347-474-6903 347-535-4487 347-696-1007 360-205-3786 360-207-0862 360-207-0962 360-474-4577 360-633-3050 360-851-4717 378-616-1723 402-715-4266 416-364-1111 424-281-3296 425-206-2009 469-518-0029 470-248-1212 480-696-8937 509-331-5555 516-554-0002 516-811-6656 526-789-4562 551-333-1196 561-200-3540 561-952-2080 565-454-3434 567-890-9876 603-913-2771 610-268-9028 616-980-2164 631-402-9176 631-495-5427 646-233-2181 646-250-3817 646-401-0282 646-583-1927 646-583-2732 646-593-8900 646-807-2671 678-508-7234 707-282-5004 714-929-8215 767-275-9061 770-822-3600 786-540-1818 786-991-2744 806-874-8241 813-702-9234 817-473-0583 828-303-5558 844-646-1499 850-754-9493 866-452-6442 866-599-5939 876-792-2594 877-382-4357 882-221-4451 888-538-3518 910-242-4512 954-436-1050

↧

[Scam] Anthony Morrison/Hidden Millionaires Infomercial

June 8, 2008, 3:34 pm

≫ Next: Time share busters? Another scam?

≪ Previous: [Scam] US Government Grant Department Fraud

After seeing one of Anthony's infomercials on a cable TV station earlier today, I thought I would try to find out more about it. Since most money making schemes hawked mainly through infomercials are scams, I had no doubt that Hidden Millionaires fell into this same category. I wanted to know what he was trying to get suckers to bite onto. When you go to one of his seminars, you soon find out that you have to pay $3995.00 for a system to buy adwords online to generate leads for credit card companies. And you are told you have to buy into the system then and there - you aren't given a few days to think about it. This is typical of scams that employ high pressure sales tactics. Some more info on Yahoo Answers: http://answers.yahoo.com/question/index?qid=20080225100324AA9Yb2f It sounds like the only one making money off Hidden Millionaires is Anthony Morrison. -- "The trouble with computers, of course, is that they are very sophisticated idiots." - Doctor Who (from Robot)

↧

Time share busters? Another scam?

November 17, 2017, 10:42 am

≫ Next: Being bombarded, latest a fake ATT Call

≪ Previous: [Scam] Anthony Morrison/Hidden Millionaires Infomercial

I recall how credit consolidation services don't help anyone and are somewhat predatory, but now there are services to get you out of time shares, are these yet another of these things?

↧

Being bombarded, latest a fake ATT Call

November 22, 2017, 7:11 am

≫ Next: [Spam] Yahoo spam and header help

≪ Previous: Time share busters? Another scam?

Moments ago I saw a call from ATT appear on my computer screen (I use an app in linux to tell me when my phone has some activities) and I ran to answer but it turned out to be fake, they played the 3 note ATT sound and claimed they wanted me to stop my account from being closed just enter... I hung up. These guys are really going after me hard now.

↧

[Spam] Yahoo spam and header help

November 29, 2017, 12:44 pm

≫ Next: [Scam] US Government Grant Department Fraud

≪ Previous: Being bombarded, latest a fake ATT Call

Does anyone know how to easily (??) report spam to Yahoo from Yahoo users ? I do not have a Yahoo account but this week I have received four (4) spam emails purportedly from Yahoo to my Primary and one secondary Comcast accounts. I really don't care to buy Rayban sunglasses, lol. What I'm curious about is that in this recent email below, one of the Comcast recipients is listed as "gracie-5" and that DID land in my Comcast inbox. But ... my actual C/C account starts out with "gra" followed by 4 more letters and 4 numbers. How or why did that make it to my C/C account, please? That's a real stretch for the email address name. Thanks very much in advance ! Return-Path: Delivered-To: REDACTED@comcast.net Received: from dovdir3-ch2g-02o.email.comcast.net ([69.252.207.16]) by dovback3-ch2g-19o.email.comcast.net with LMTP id KP/zAp/pHVrdNAAA9Jp5OA for ; Tue, 28 Nov 2017 22:56:31 +0000 Received: from dovpxy-asb-16o.email.comcast.net ([69.252.207.16]) by dovdir3-ch2g-02o.email.comcast.net with LMTP id 0JCWOp7pHVqidAAAKfUrMw ; Tue, 28 Nov 2017 22:56:31 +0000 Received: from resimta-ch2-16v.sys.comcast.net ([69.252.207.16]) by dovpxy-asb-16o.email.comcast.net with LMTP id WNJPDZvpHVonUwAAOJv1+w ; Tue, 28 Nov 2017 22:56:30 +0000 Received: from sonic306-22.consmr.mail.ne1.yahoo.com ([66.163.189.84]) by resimta-ch2-16v.sys.comcast.net with SMTP id JonleTOfJztOPJonme3l3j; Tue, 28 Nov 2017 22:56:30 +0000 X- CAA-SPAM: N00001 X-Authority-Analysis: v=2.2 cv=RrC1FGuK c=1 sm=1 tr=0 p=eZSH5X2WV6IA:10 p=bf8IaYcWAAAA:8 p=M1qnO33elo0ASy1rdhQA:9 p=LC7wlVklhd1aC-6E:18 a=FRIVNl6ejNASCn8GnJoiJQ==:117 a=x7bEGLp0ZPQA:10 a=5-57cLrN4DgA:10 a=5HJ6KZJP-kkA:10 a=khwyK8DuSVkA:10 a=sC3jslCIGhcA:10 a=ZZnuYtJkoWoA:10 a=r77TgQKjGQsHNAKrUKIA:9 a=tclcd6dtLQvEqt9_mmAA:9 a=QEXdDO2ut3YA:10 a=_W_S_7VecoQA:10 a=pbYHOb3InSAA:10 a=KQqxNPgzF0kA:10 a=DIyJOsdSk80A:10 a=5bAsoVll4pEXcT0qZkIr:22 X-Xfinity-Message-Heuristics: IPv6:N;TLS=1;SPF=1;DMARC=P Authentication-Results: resimta-ch2- 16v.sys.comcast.net; dkim=pass header.d=yahoo.com header.b=IDogob7r DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1511909789; bh=Xmax9knd5v0bAM01oJ/MGqEIiu7CennKnP+bFwc3Gt8=; h=From:To:Subject:Date:From:Subject; b=IDogob7r3UEBiFb1p01h6KeK8ycUIw8zWTSvcG82YOsow0y42pmXIetJznOZ5D1UQ/psUMGeF8nDIzY3Q+B1sm3LmUMRfKcTKAloil/AYpQOI25 ka/1YkLj1VfLccPwEnEzrKSnhOFSiJjJpQgoq0Lx8znHehQ+f/bIxW/5lSEBI9u3dgBJiErvMmTp4s6VEX498RkEhN1GSp+5aeT+taoQAaHr/nKjt8HPI5 dL2Nksk9dcxy40HJyzvXXl9d7iSO9JlFLXmfVPVq1CF2qmVWeZ1p45LQ6ElITIL30RF5k7lbjnI+fNkmnO3POWEkzZZUQcJpA7l+/JgzPPq2WkC0Q== X -YMail-OSG: sDfDY6IVM1leU1vKsXspXsqqjABI57AzP7RW4az6S0mcEcz.piGIEdehHVs3i9j fOLZ29bxM8quaIirEJgaMY_PkE9drvKxoiA8KZTNcRMoPUtq2Yvu_x2hp.svLMk2yVsReejj2oAl .3Y5HwH02iqUsLDwdemB2XSDJVwWW.CBOzbjDR23ywae.LLxHtL3kocXVKNZCnz0gU45WK7xlNIm 0CekluqWu_9z.iUNsGrMef6uMzlM7ud7FX5JSUvWiuXC.DoAZEh6Pa4vt5CurFSK8v_JrbbQJxnk 1q4f2BuIgz0js87SSzGcQMdFZm1DwEVIB6LRRUznDH1U1DeC01J38y3OMoHgQF6CO3HEWBQNPTPm zuHylLhWC4F6Ub3A2XAccNYvmwBH1dxBsfg95v13JyhXLfzocw5ai8P6xH1iNPSJLPpOSf3RZL3Q 1yCHp8fznhHpcntH9PeAKSvprAjPh_qEr_eDDBa3acPS8HUQpjeykQHaktkmQLLR_X8QdFSna1LO g0I93h84a.2ZsVWOSwIOUaWDtN4eNelE- Received: from sonic.gate.mail.ne1.yahoo.com by sonic306.consmr.mail.ne1.yahoo.com with HTTP; Tue, 28 Nov 2017 22:56:29 +0000 Received: from [127.0.0.1] by smtp218.mail.ne1.yahoo.com with NNFMP; 28 Nov 2017 22:56:24 -0000 X-Yahoo-Newman-Id: 726638.735.bm@smtp218.mail.ne1.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: sDfDY6IVM1leU1vKsXspXsqqjABI57AzP7RW4az6S0mcEcz .piGIEdehHVs3i9jfOLZ29bxM8quaIirEJgaMY_PkE9drvKxoiA8KZTNcRMo PUtq2Yvu_x2hp.svLMk2yVsReejj2oAl.3Y5HwH02iqUsLDwdemB2XSDJVwW W.CBOzbjDR23ywae.LLxHtL3kocXVKNZCnz0gU45WK7xlNIm0CekluqWu_9z .iUNsGrMef6uMzlM7ud7FX5JSUvWiuXC.DoAZEh6Pa4vt5CurFSK8v_JrbbQ Jxnk1q4f2BuIgz0js87SSzGcQMdFZm1DwEVIB6LRRUznDH1U1DeC01J38y3O MoHgQF6CO3HEWBQNPTPmzuHylLhWC4F6Ub3A2XAccNYvmwBH1dxBsfg95v13 JyhXLfzocw5ai8P6xH1iNPSJLPpOSf3RZL3Q1yCHp8fznhHpcntH9PeAKSvp rAjPh_qEr_eDDBa3acPS8HUQpjeykQHaktkmQLLR_X8QdFSna1LOg0I93h84 a.2ZsVWOSwIOUaWDtN4eNelE- X-Yahoo-SMTP: mQn7lQyswBC5kXzwjeDD2WIx0CElCcscq_KVmg-- From: qkjuek To: gracie-5 Subject: Ray Ban suglasses 19.99USD, only today Date: Wed, 29 Nov 2017 06:55:52 +0800 Message-ID: MIME-Version: 1.0 Content-Type: multipart/related; boundary="---- =_NextPart_000_02D3_0169C00C.15F52300" X-Mailer: Microsoft Outlook 16.0 X-CMAE-Envelope: MS4wfHRhVuJQTQYf8F4IBkB+fgSjT5N4u+TXAs2KJkUlznw24U2dY22KIk4iH7bTgzBYB8S1d5JxSZwcpKtqAURWIOVAewD5+TAkQ39aEXL1gmdH p141Nk8i MqYj1Wnr8gocwFbWfkAuNsAGAKmI9x3bKqBPpuCnDeVuV/4JjhXmhZkj+Ui++7QbpjdfMOwfZKKsgwOicAtAtx+y23pXIix+xQo= This is a multi-part message in MIME format. ------=_NextPart_000_02D3_0169C00C.15F52300 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0C02_0169C00C.15F52300" ------=_NextPart_001_0C02_0169C00C.15F52300 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCg== ------=_NextPart_001_0C02_0169C00C.15F52300 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64

↧

[Scam] US Government Grant Department Fraud

May 28, 2013, 12:55 pm

≫ Next: [Spam] another Email Scam

≪ Previous: [Spam] Yahoo spam and header help

↧

[Spam] another Email Scam

December 13, 2017, 4:56 am

≫ Next: [Scam] 8 Figure Dream Lifestyle Scam

≪ Previous: [Scam] US Government Grant Department Fraud

L.A.X AIRPORT SECURITY Los Angeles International Airport (LAX) 1 World Way, Los Angeles, CA 90045, United States ATTENTION:Notice On Your Consignment Box reg #: JG1N8875BS. Today we have discovered an abandoned metal suitcase with reg code#: JG1N8875BS originally scheduled to be delivered to you by the agency foreign payment service New York. This Suitcase is a metal box when scanned by a forensic scanner was revealed to contain 100 dollars bills valued approximately $2,316,000USD (Two Million, Three Hundred and Sixteen thousand United States dollars) which has been under Security survaellance for a number of days now. I am writing to inform you that we have investigated the said Suitcase and the investigation proved the legitimacy of its content. Note, The Funds which belongs to you was initially scheduled for delivery to your resident, The Diplomat who arrived with the Consignment made several attempts to reach you all efforts proved abortive so he decided to leave for his country but before he left he settled the delivery charges and left the Storage Keeping Charges unpaid due to the reasons that he did not know when you will attempt to claim the consignment and the Cargo and Storage Unit charges $20.00 for each day the Consignment box stays in their custody for its safety keeping. You are therefore advised to make contact with Mr. Edward Gordon of All Cargo Logistics Courier Express, llc, a U.S Customs Broker to assist you recover your Consignment box and deliver it to your home. You may contact him through his email:(eddygordon@deliveryman.com) to recover your Consignment or we will be compelled to list your Fund as an unclaimed consignment and maybe forfeited and moved to the United States Treasury Department for holding. God Bless Sincerely, Paul Anderson All american courier........... Director of Delivery Operation

↧

[Scam] 8 Figure Dream Lifestyle Scam

April 18, 2017, 5:05 pm

≫ Next: [419] Not all 419 scammers are Nigerian?

≪ Previous: [Spam] another Email Scam

So looks like I came across an mlm scam recently called 8 Figure Dream Life Style. I had been getting what are various robo calls from people trying to get me to join whatever mlm scheme the internet is peddling and decided to bite on one of these scams. The robo call is a pre-recorded message about how they make so much money, how they are so in demand and all that jazz. Oh they also ask you to grade your interest. I guess to see if you are worth trying to spin doctor on. You leave your name and email. Eventually the person set up the robo call calls you. I had a guy(named Tom) call me back and do a more "personal" version of the robo call and had me re-verify my email. Told me I will be attending a "webinar" to learn about the system. My email was sent various links to get an idea about what his program is about but like all mlm scams, it is full of fluff: coachtom.my8figuredreamlifestyle.com/128 So I activated my Google-no-jutsu. First link was a review of the system where it is revealed that basically you join an affiliate sales program starting at $2k to $22k memberships with a license fee going from $149 to $449. So what useless product are they peddling? Personal development tools, health and fitness stuff and all that jazz. Stuff you can get online for free while giving you marketing info that you can also find for free online or much much more cheaper at a book store. BUT, it gets even more scummy. If you manage to get your first sale, the commissions go to your recruiter, not you. The drain from the bottom starts immediately! You have been warned. Some other sites that go more into detail of the scam, also be warned also that some of these review sites may be peddling mlm scams of their own so watch out: https://learntogrowwealthonline.com/8-figure-dream-lifestyle-review http://askmarcbarrett.com/8-figure-dream-lifestyle/8-figure-dream-lifestyle-review-new-scam-life-changing-business-model http://www.ripoffreport.com/reports/advertising-deceptive-dream-lifestyle-syst-dream-lifestyle-system-nick-br-463707 I have blocked the recruiter from calling and emailing me. That number is: 727 251 1807 and he has a number that he texts other crap from but isn't reply-able: 210-598-5080. He goes by Tom. Phone Numbers used in the scam: 210-598-5080 727-251-1807 888-826-7567 954-248-1148 Websites used in scam: coachtom.my8figuredreamlifestyle.com/128 ThousandsEachDay.com facebook.com/coachtom8FDL/ Update 1: New Phone number used in scam: 1-888-826-7567 New Scam website: ThousandsEachDay.com. FB HUB: facebook.com/coachtom8FDL/

↧

[419] Not all 419 scammers are Nigerian?

January 1, 2018, 5:08 pm

≫ Next: [Phish] New Comcast Phish

≪ Previous: [Scam] 8 Figure Dream Lifestyle Scam

quote:Louisiana – (Courtesy AP) A Louisiana man was arrested in connection with a “Nigerian prince” scheme that has scammed people out of thousands of dollars, police announced Thursday. Michael Neu, 67, faces 269 counts of wire fraud and money laundering after being taken into custody following an 18-month investigation, according to the Slidell Police Department. Police said Neu is suspected of being the scam’s “middleman” who obtained money and “subsequently wired” funds to his co-conspirators in Nigeria. http://guardianofvalor.com/man-acted-middleman-nigerian-scammers-arrested/

↧

[Phish] New Comcast Phish

January 5, 2018, 12:16 am

≫ Next: [Scam] US Government Grant Department Fraud

≪ Previous: [419] Not all 419 scammers are Nigerian?

I'm not great at deciphering email headers, but this appears to be Phishing ... I think. The basic "from" isn't the usual from Xfinity and when I ran it through Spamcop, it didn't seem to resolve properly to Xfinity/Comcast. The link didn't show any malware or trojans via VirusTotal. NO, I did not click any links. Return-Path: <noreply@email.com>Delivered-To: REDACTED@comcast.netReceived: from dovdir3-asc-08o.email.comcast.net ([96.114.154.132]) by dovback3-asc-02o.email.comcast.net with LMTP id QHr/Dt/bTlrDTgAAGwrn3g for <REDACTED@comcast.net>; Fri, 05 Jan 2018 01:58:55 +0000Received: from dovpxy-asd-19o.email.comcast.net ([96.114.154.132]) by dovdir3-asc-08o.email.comcast.net with LMTP id oNZ8DN/bTlqaRQAACztinQ ; Fri, 05 Jan 2018 01:58:55 +0000Received: from resimta-po-04v.sys.comcast.net ([96.114.154.132]) by dovpxy-asd-19o.email.comcast.net with LMTP id aEdBN9jbTlqMCgAApPS35g ; Fri, 05 Jan 2018 01:58:55 +0000 Received: from WIN-HDR0OI256J4 ([89.43.30.27]) by resimta-po-04v.sys.comcast.net with SMTP id XHFkepUmxToiQXHHZemOoH; Fri, 05 Jan 2018 01:58:54 +0000X-CAA-SPAM: N00001X-Authority-Analysis: v=2.2 cv=NP2lwwyg c=1 sm=1 tr=0 p=udss0zr3IuQA:10 p=nuU9vHo2AAAA:8 a=CrTx4c87Kf08tvTIWIZdYA==:117 a=CrTx4c87Kf08tvTIWIZdYA==:17 a=8nREzoGVCx8A:10 a=x7bEGLp0ZPQA:10 a=WrkWzsK7gVUA:10 a=DpPe5YBf0RwA:10 a=khwyK8DuSVkA:10 a=RgaUWeydRksA:10 a=5b1klvdMYGkA:10 a=C_IRinGWAAAA:8 a=QdKRc8GWAAAA:8 a=v3ZZPjhaAAAA:8 a=nen-wmhp6X95hwMyytwA:9 a=WABZMT_NO7OgsCtV:21 a=vX1h_Uh0X6EA:10 a=lkCsYzG5RSMsCalrlOfk:22 a=rzNOnZBice9uWjTYM8_p:22X-Xfinity-Message-Heuristics: IPv6:N;TLS=0;SPF=2;DMARC=Received: from WIN-HDR0OI256J4 ([127.0.0.1]) by WIN-HDR0OI256J4 with Microsoft SMTPSVC (8.5.9600.16384); Wed, 3 Jan 2018 21:54:50 -0500Message-ID: <03adafc1-43103-18319130854167@win-hdr0oi256j4>From: "XFINITY My Account" <noreply@email.com>To: REDACTED@comcast.netSubject: Important : Update Required In Your XFINITY AccountDate: Wed, 3 Jan 2018 21:53:50 -0500MIME-Version: 1.0Content-Type: text/htmlContent-Transfer-Encoding: 7bitX-Priority: 3Return-Path: noreply@email.comX-OriginalArrivalTime: 04 Jan 2018 02:54:50.0721 (UTC) FILETIME=[63A9BD10:01D38507]X-CMAE-Envelope: MS4wfGqRkHMReNXlTRwYIQmocrEyyDNiqHIj15DyRvE7WGg8oFy7HaAejQPqk0Q6J4rgPGAS9EIhry1xGCBquFZSmQIcM8dNVFoYot9dDdKMuwK Htw++nTnl bwZA1tQOKU/HIjh1a+QaToNZSs41nuss794sv7FoQk6hDcJv22z4/9IQ <table class="ecxmainTable" style="color: rgb(102, 102, 102); font-family: Calibri,sans-serif; font-size: inherit; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: inherit; text-indent: 0px; text-transform: none; white-space: normal; widows: 1; word-spacing: 0px; text-align: center; border-collapse: collapse; border: 0px none; padding: 0px; background-color: rgb(255, 255, 255)" align="center" cellpadding="0" cellspacing="0"> <tbody style="line-height: 21.3px"> <tr style="line-height: 21.3px"> <td class="ecxtopPadding" colspan="3" style="line-height: 21.3px; font-family: 'Helvetica Neue',Helvetica,Arial,sans-serif; height: 16px" height="16"> </td> </tr> <tr style="line-height: 21.3px"> <td class="ecxextraColumn" style="line-height: 21.3px; font-family: 'Helvetica Neue',Helvetica,Arial,sans-serif; width: 64px"> </td> <td class="ecxcenterColumn" style="line-height: 21.3px; font-family: 'Helvetica Neue',Helvetica,Arial,sans-serif; width: 685px"> <table style="line-height: inherit; font-size: inherit; border: 0px none; padding: 0px" align="center"> <tbody style="line-height: 21.3px"> <tr style="line-height: 21.3px"> <td style="line-height: 21.3px" align="center"> <img border="0" src="http://media2[dot]comcast[dot] net/anon.comcastonline2/EMS/ResidentialNewLook/images/xfinityLogoW-O-RMark.jpg" width="248" height="84"><p> <img width="224" height="1" alt="" border="0" dfsrc="http://media2[dot]comcast.net/anon[dot] comcastonline2/EMS/ResidentialNewLook/images/div.gif" src="http://media2[dot]comcast[dot]net/anon[dot] comcastonline2/EMS/ResidentialNewLook/images/div.gif" style="display: block"></td> </tr> <tr style="line-height: 21.3px"> <td class="header ecxtitleSpacer" style="line-height: 38.34px; font-family: 'Helvetica Neue',Helvetica,Arial,sans-serif; color: rgb(43, 43, 43); font-size: 27px; font-weight: 300; padding-left: 0px; padding-right: 0px; padding-top: 24px; padding-bottom: 16px" align="center"> Νotice οf changes tο the XFINITY User Αgreement.</td> </tr> <tr style="line-height: 21.3px"> <td class="ecxcontent spacer" style="line-height: 20px; font-family: 'Helvetica Neue',Helvetica,Arial,sans-serif; color: rgb(102, 102, 102); font-size: 15px; font-weight: 300; padding-bottom: 14px" align="center"> <p align="left">      Dear Customer,</p> <p>Τhis is an autοmatic message by the system tο let yοu knοw that yοu haνe tο cοnfirm yοur accοunt Ιnfοrmatiοn within 48 hοurs.<br> We haνe nοticed that sοme data frοm yοur accοunt infοrmatiοn seems inaccurate οr unνerified.</p> <p> </p> <table class="mobile_button" width="236" border="0" cellspacing="0" cellpadding="0"> <tr> <td height="40" width="1" id="force_height"> <img src="http://img.ed4.net/spacer10.gif" height="40" width="1" border="0" style="display:block;"></td> <td class="button_style" id="button_text" width="235" align="center" valign="middle" style="font-family: Arial,sans-serif; font-weight: bold; font-stretch: normal; text-align: center; color: #fff; font-size: 13px; border-radius: 7px !important; -webkit-border-radius: 7px ! important; -moz-border-radius: 7px !important; -o-border-radius: 7px !important; -ms-border-radius: 7px !important; background: #009CDE"> <a style="color:#fff; text-decoration:none; display:block; font-weight:bold;" class href="https://bazzarsa.com/wp-includes/customize/"> <span style="color:#ffffff; text-decoration:none; display:block; font-family:Arial,sans-serif; font-weight:bold; font-size:13px; line-height:15pxin/;"> Sign in Now</span></a> </td> </tr> </table> </td> </tr> <tr style="line-height: 21.3px"> <td class="ecxcontent ecxspacer1" style="line-height: 20px; font-family: 'Helvetica Neue',Helvetica,Arial,sans-serif; color: rgb(102, 102, 102); font-size: 15px; font-weight: 300; padding-bottom: 14px" align="center"> οnce yοu have cοnfirmed yοur accοunt infοrmatiοns yοur accοunt will start tο wοrk as nοrmal οnce again.<br> Τhis is an autοmated message. Ρlease dο nοt reply tο this email. Ιf yοu need additiοnal heΙp, Ρlease νisit Comcast Suppοrt. <br> <br> <img width="224" height="1" alt="" border="0" dfsrc="http://media2[dot]comcast[dot [net/anon.comcastonline2/EMS/ResidentialNewLook/images/div.gif" src="http://media2[dot]comcast[dot]net/anon[dot] comcastonline2/EMS/ResidentialNewLook/images/div.gif" style="display: block"><p> <font color="#000000"><span style="font-weight: 700"> <img border="0" src="http://media2[dot]comcast.net/anon[dot] comcastonline2/EMS/ResidentialNewLook/images/footer_logo.jpg" width="108" height="35"></span></font></td> </tr> </table> </td> <td class="ecxextraColumn" style="line-height: 21.3px; font-family: 'Helvetica Neue',Helvetica,Arial,sans-serif; width: 64px"> </td> </tr> <tr style="line-height: 21.3px"> <td class="footer ecxbackground ecxcenterColumn" colspan="3" style="line-height: 22px; font-family: 'Helvetica Neue',Helvetica,Arial,sans-serif; width: 685px; font-size: 11px; color: rgb(136, 136, 136); text-align: center; padding-left: 0px; padding-right: 0px; padding-top: 15px; padding-bottom: 10px; background-image: url ('https://statici.icloud.com/emailimages/v4/common/footer_gradient_web.png'); background-repeat: no-repeat; background-position: 50% 0%" align="center">  Cοpyright @ 2017 Comcast . Αll rights reserνed.</td> </tr> <tr style="line-height: 21.3px"> <td class="footer ecxcenterColumn ecxcontent" colspan="3" style="line-height: 14px; font-family: 'Helvetica Neue',Helvetica,Arial,sans-serif; width: 685px; font-size: 11px; color: rgb(136, 136, 136); text-align: center" align="center"> </td> </tr></table>

↧