Fake banks, couriers, law firms, escrow and other fake sites used in scams.
#68454 by Terminator5 Sun Sep 25, 2011 12:34 pm
Gmail Phishing Email . No IP Identified on a trace .


Begin Phishing Email:

Dear gmail client,
please update your account immediately to avoid suspension.

click here to update

End Phishing Email


Link to fake gmail login page here:


http://www.paintstuff.net/Login.html




Full Header Info:


Delivered-To: xxxxxxx
Received: by 10.180.94.170 with SMTP id dd10cs20956wib;
Sat, 24 Sep 2011 21:16:50 -0700 (PDT)
Received: by 10.223.58.198 with SMTP id i6mr4276822fah.91.1316924210565;
Sat, 24 Sep 2011 21:16:50 -0700 (PDT)
Return-Path: <[email protected]>
Received: from cg-p07-ob.rzone.de (cg-p07-ob.rzone.de. [81.169.146.214])
by mx.google.com with ESMTPS id c18si7315921fak.176.2011.09.24.21.16.50
(version=TLSv1/SSLv3 cipher=OTHER);
Sat, 24 Sep 2011 21:16:50 -0700 (PDT)
Received-SPF: neutral (google.com: 81.169.146.214 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=81.169.146.214;
Authentication-Results: mx.google.com; spf=neutral (google.com: 81.169.146.214 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
X-RZG-CLASS-ID: cg00
Received: from pessimal.store ([192.168.40.75])
by snori-cg-023.store (RZmta 26.7) with ESMTP id i05b75n8P02AZo
for <xxxxxx>;
Sun, 25 Sep 2011 06:16:25 +0200 (MEST)
Received: (from Unknown UID 130761@localhost)
by post.webmailer.de (8.13.7/8.13.7) id p8P4GOSl023223;
Sun, 25 Sep 2011 04:16:24 GMT
Date: Sun, 25 Sep 2011 04:16:24 GMT
Message-Id: <[email protected]>
To: xxxxxx
Subject: update
From: Gmail Team <[email protected]>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
X-RZG-SCRIPT: :eD1KJxD+Na7B2PqxHDrLExTz9CZtjGLG10PVrtw5kooPUBLuHegGZ7EIKrXUqjK/m8fHkz46Nst5Y0JWD6gFdkEVeUzPxHW1bnPHlVnqb39DjoXYVO0Y

Daniel 8 :25
Advertisement

#68563 by Mike Wilson Mon Sep 26, 2011 7:36 am
Phishing page is dead

It is ALWAYS a scam
If the pet seller or shipper asks for money to be sent via Western Union, Money Gram, any brand of gift card. Walmart To Walmart , Zelle , PayPal friends and family option, or mentions Cameroon
#73374 by Terminator5 Mon Nov 07, 2011 4:05 pm
The source IP address is 196.47.163.225

Geo-Location Information

Country Cote D'Ivoire

City Abidjan

From: Gmail Team [email protected]

Reply-To: [email protected]

Subject: Gmail Warning!!!(Verify Your Account Now To Avoid It Suspended)!


Begin Scam Email:

Dear Valued Member,




Account Alert. VERIFY YOUR FREE GMAIL ACCOUNT NOW!!!
GMAIL ACCOUNT VERIFICATION ALERT
Security Code: (KMM8740VL96410KM)!!!

Dear Gmail Member,
This message is from Gmail messaging center to all Gmail free account owners and premium account owners. We are currently upgrading our data base and e-mail account center. We are deleting all unused Gmail account to create more space for new accounts.To prevent your account from closing you will have to update your account by sending all the requested information's below to our service client so that we will know that it's a present used account and update it. CONFIRM YOUR IDENTITY BELOW.

Gmail! ID: ..............................

Password: .....................

Date of Birth: .........................

Country or Territory: ....................

A Warning!!! Account owner that refuses to update his or her account within Seven days of receiving this warning will lose his or her account permanently.
Thank you for using Gmail!.

End Scam Email

Daniel 8 :25
#73412 by Bubbles Tue Nov 08, 2011 12:55 am
I notified our Fake Site Killers. This kind of phishing should be reported to Gmail / Google.

If it is a bank, PayPal ebay or something else the phish can be reported to that site. They are quick to get the phishing site taken down as they have paid staff who does that for them.

Bubbles, former Scamwarners moderator.

Rest in Peace 24 June 2015.

Gone, but never forgotten.

Who is online

Users browsing this forum: Bing [Bot] and 41 guests