Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Phishers impersonating WhatsApp

DO NOT click on any links in these emails.

Phishers impersonating WhatsApp

Unread postby firefly » Sat Nov 30, 2013 2:08 am

WhatsAppMessenger - clint-ctastyle@cgdarch.com

Email:

Whats App

New voice mail.

Description

Time: Nov 28 2013 22:03
Duration: 05 seconds

Play - link

© 2013 Whats App Inc.


Phishing link: http:/ /199.47.149.2 /~sunnycha /fumble.html

Header:

Authentication-Results: mx.google.com;
spf=neutral (google.com: 103.8.25.16 is neither permitted nor denied by best guess record for domain of clint-ctastyle@cgdarch.com) smtp.mail=clint-ctastyle@cgdarch.com
Date: Thu, 28 Nov 2013
From: WhatsAppMessenger <clint-ctastyle@cgdarch.com>
Subject: Incoming voicemail(s), Nov 28

Originating IP: 103.8.25.16
Originating ISP: Sksa Technology Sdn Bhd
Country of Origin: Malaysia
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

WhatsApp Messenger - d*ck.stilley@allgutterservices.com

Unread postby firefly » Sat Nov 30, 2013 2:15 am

Email:

Whats App

Incoming voice mail.

Information

Time of Call: Nov 28 2013 05:56
Length of Call: 09 seconds

autoplay - link

© 2013 WhatsApp Inc.


Phishing link: http:/ /93.188.8.67/punting. html

Header:

Received-SPF: neutral (google.com: 212.34.128.228 is neither permitted nor denied by best guess record for domain of d*ck.stilley@allgutterservices.com) client-ip=212.34.128.228;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 212.34.128.228 is neither permitted nor denied by best guess record for domain of d*ck.stilley@allgutterservices.com) smtp.mail=d*ck.stilley@allgutterservices.com
Date: Thu, 28 Nov 2013
From: WhatsApp Messenger <d*ck.stilley@allgutterservices.com>
Subject: Incoming voicemail at Nov 28

Originating IP: 212.34.128.228
Originating ISP: Ran Networks S.l.
City: Madrid
Country of Origin: Spain
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

WhatsAppNotifier fm@degagee.de

Unread postby firefly » Sun Apr 26, 2015 7:23 pm

Return-Path: fm@degagee.de
Received: from xvm-16-34.ghst.net (xvm-16-34.ghst.net. [92.243.16.34])
Date: Sun, 26 Apr 2015
Subject: You have a new voice message: Apr 26, 5 seconds
Premises-Verified: emergence

Originating IP: 92.243.16.34
Originating ISP: Gandi Dedicated Hosting Servers
Country of Origin: France


WhatsApp

A new voicemail.

Information

Date: Apr 26 2015
Duration: 05 seconds

Listen - phishing link: http:/ /s74166.gridserver. com/wp-includes/js/tinymce/orderlies.php

© Whats App Inc.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Phishers impersonating WhatsApp

Unread postby firefly » Sat Feb 20, 2016 11:05 pm

Email:

Whats AppService <fhoopey@dshoward.com>

WhatsApp

New voicemail.

Description

Date
06 seconds

autoplay

© Whats App


Phishing link hidden in the content of the message: http: // askimo.com/tills.php

Header:

Return-Path: <fhoopey@dshoward.com>
Received: from s17818293.onlinehome-server.info (s17818293.onlinehome-server.info. [82.165.146.118])
Powering-Papering-Cropper: 1421
Inconvenience-Disobedient: FEF7C5E9CCB5222E
From: Whats AppService <fhoopey@dshoward.com>
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
Subject: Incoming voicemessage 3:51AM
Mumbling-Stickers-Retraction: 2946
Frye-Bilks: CB63B63A8CE2

Originating IP: 82.165.146.118
Originating ISP: 1&1 Internet Ag
Country of Origin: Germany
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Whats AppNotifier - codein@ase.net

Unread postby firefly » Sat Feb 20, 2016 11:09 pm

Email:

WhatsApp

Incoming voicemail.

Description

Date / time
05 seconds

Listen

© WhatsApp


Phishing link hidden in the content of the email: http: // 1874salisbury.com /hibbard.php

Header:

Return-Path: <codein@ase.net>
Received: from s17974621.onlinehome-server.info (s17974621.onlinehome-server.info. [212.227.82.66])
Quitting-Authorship-Observes: 15C41E5A39D
Content-Transfer-Encoding: 7bit
Message-ID: <71448b252abb1e414e1f883642ae@s17974621.onlinehome-server.info>
X-Priority: 1
Suggesting-Forsythe-Footfall: 67CF767A8FCA
Subject: New voicemessage 2:49AM
From: Whats AppNotifier <codein@ase.net>

Originating IP: 212.227.82.66
Originating ISP: 1&1 Internet Ag
Country of Origin: Germany
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Whats App Notifier <dhws@shakti-innovations.com>

Unread postby firefly » Sat Feb 20, 2016 11:13 pm

Email:

Whats App

Missed voice message.

Description

Date/ time
07 sec

Play

© Whats App


Phishing link hidden in the content of the message: http: // alexfotografi.com/compact.php

Header:

Return-Path: <dhws@shakti-innovations.com>
Received: from server5.ghesi.net (server5.ghesi.net. [92.114.82.4])
Subject: New voice mail - 6:50AM
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset=UTF-8
Descendant-Everybody: 2a6e749c461bc
MIME-Version: 1.0
To:
Message-ID: <8e2dfc1d891175b17fd2ba47@server5.ghesi.net>
X-Priority: 1
From: Whats App Notifier <dhws@shakti-innovations.com>

Originating IP: 92.114.82.4
Originating ISP: Ipv4 Management Srl
City: Bucharest
Country of Origin: Romania
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

WhatsApp Service <cotic@q5.net>

Unread postby firefly » Tue Apr 19, 2016 6:35 pm

Return-Path: <cotic@q5.net>
X-Originating-IP: [202.181.212.249]
From: WhatsApp Service <cotic@q5.net>
Subject: Incoming voice mail: 11:32AM

Originating IP: 202.181.212.249
Originating ISP: Hongkong Commercial Internet Exchange

Country of Origin: Hong Kong

Email:

WhatsApp Service <cotic@q5.net>
To
Whats App

Missed voicemessage.

Information

Apr 18 11:32 AM
07 sec

Play - link

© WhatsApp
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

WhatsApp Messenger <el@skypay.co.uk>

Unread postby firefly » Wed May 04, 2016 11:22 pm

Email:

Whats App

You have a new voice mail.

Description

Time: May 3 2016 22:29
Length: 09 seconds

Play - phishing link hidden in the content of the message:: http: / /mebel-geleos.ru/sinai.php

© 2016 WhatsApp Inc.

Return-Path: <el@skypay.co.uk>
Received: from lik.from.sh (lik.from.sh. [141.8.195.77])
Received-SPF: temperror (google.com: error in processing during lookup of el@skypay.co.uk: DNS error) client-ip=141.8.195.77;
Date: Tue, 3 May 2016 22:29:35 +0000

Originating IP: 141.8.195.77
Originating ISP: Sprinthost.ru Llc
Country of Origin: Russian Federation

Reported.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe


Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 23 guests