Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

<WalgreensNotifications@stupendousnbeds.xyz>

DO NOT click on any links in these emails.

<WalgreensNotifications@stupendousnbeds.xyz>

Unread postby SlapHappy » Tue Dec 15, 2015 10:38 pm

116.139.203.217 Verizon Business Chaoyang China

Return-Path: <158b48a3e1927d685b202_9e857056@stupendousnbeds.xyz>
Received: from ones.specialnabba.xyz ([116.139.203.217])
by mx.google.com with ESMTP id r7si3550248oed.2.2015.12.15.13.26.56
for xxx
Tue, 15 Dec 2015 13:26:56 -0800 (PST)
Received-SPF: pass (google.com: domain of
158b48a3e1927d685b202_9e857056@stupendousnbeds.xyz designates
116.139.203.217 as permitted sender) client-ip=116.139.203.217;
Authentication-Results: mx.google.com;
spf=pass (google.com:
domain of 158b48a3e1927d685b202_9e857056@stupendousnbeds.xyz
designates 116.139.203.217 as permitted sender) smtp.mailfrom=158b48a3e1927d685b202_9e8 ... snbeds.xyz
Date: Tue, 15 Dec 2015 13:26:54 -0800
Message-ID: <158b48a3e1927d685b202_9e857056@overheated.stupendousnbeds.xyz>
Reply-To: <postmaster@stupendousnbeds.xyz>
Sender: <WalgreensNotifications@stupendousnbeds.xyz>
From: Walgreens Notifications <WalgreensNotifications@stupendousnbeds.xyz>
To: xxx
Subject: Attn: Customer - Pickup required for your-Walgreens-order. Customer
No.5493221
MIME-Version: 1.0
Content-transfer-encoding: 8bit
Content-type: text/html; charset=UTF-8



.........Walgreens......At The Corner Of Happy-And-Healthy


Alert for: xxx - You Have One (1) New Important Account Notification/Message.

**Customer #803421.

You have (1) item requiring confirmation for your member account-accuracy.

Your accumulated reward points earned are going to expire if they are not redeeemed by the end of the day (EST) on 12/17/2015.

Go Here Now - Must be Redeemed By 12-17-2015

https:/ /t.co/duQra5CwaE



- - - - - - - - - - -End of Customer Notification/Message #803421- - - - - - - - - - -
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

<WallgreensMessage@quietcrbats.xyz>

Unread postby SlapHappy » Fri Dec 18, 2015 8:04 pm

116.139.47.23 Verizon Business Chaoyang China

Return-Path: <15883cd98632bd685b202_9b5c7356@quietcrbats.xyz>
Received: from Richey.crackercramir.xyz ([116.139.47.23])
by mx.google.com with ESMTP id u136si6951188ywg.255.2015.12.17.17.08.43
for xxx
Thu, 17 Dec 2015 17:08:44 -0800 (PST)
Received-SPF: pass (google.com: domain of 15883cd98632bd685b202_9b5c7356@quietcrbats.xyz
designates 116.139.47.23 as permitted sender) client-ip=116.139.47.23;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of 15883cd98632bd685b202_9b5c7356@quietcrbats.xyz
designates 116.139.47.23 as permitted sender)
smtp.mailfrom=15883cd98632bd685b202_9b5 ... crbats.xyz
Date: Thu, 17 Dec 2015 17:08:43 -0800
Message-ID: <15883cd98632bd685b202_9b5c7356@piccolo.quietcrbats.xyz>
Reply-To: <postmaster@quietcrbats.xyz>
Sender: <WallgreensMessage@quietcrbats.xyz>
From: WallgreensMessage <WallgreensMessage@quietcrbats.xyz>
To:
Subject: Attention: Pickup-required for Your Wallgreens-order. Customer:xxxxx
MIME-Version: 1.0
Content-transfer-encoding: 8bit
Content-type: text/html; charset=UTF-8



....Wallgreens....At The-Corner of Happy-And-Healthy!


New-Alert/Msg for: xxxxxx - One (1) Important Account-Notice/Msg Received.


******Customer-ID #330363.


You have one current (1) item that is requiring-your-confirmation for account-accuracy.

Your current accumulated reward-points you've earned are set to expire if not redeemed by the end of the day (CST) on 12/20/2015.


Please Go Right Here Now - Points Must Be-Redeemed By 12/20/2015
"https:/ /t.co/DOg2doFD5m"




- - - - - - - - - - - -End of Customer Notice/Message #10388 - - - - - - - - - - -
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Sams Club <SamsClub@didacticcrabut.xyz>

Unread postby SlapHappy » Sat Dec 19, 2015 3:13 am

116.139.153.153 Verizon Business Chaoyang China

Return-Path: <1586ab3bf3d2cc649b102_94bb7456@didacticcrabut.xyz>
Received: from semiclassical.parsimoniouscrbane.xyz ([116.139.153.153])
by mx.google.com with ESMTP id wl8si15360077wjc.134.2015.12.18.18.06.13
for xxx
Fri, 18 Dec 2015 18:06:14 -0800 (PST)
Received-SPF: pass (google.com: domain of 1586ab3bf3d2cc649b102_94bb7456@didacticcrabut.xyz
designates 116.139.153.153 as permitted sender) client-ip=116.139.153.153;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of 1586ab3bf3d2cc649b102_94bb7456@didacticcrabut.xyz
designates 116.139.153.153 as permitted sender) smtp.mailfrom=1586ab3bf3d2cc649b102_94b ... crabut.xyz
Date: Fri, 18 Dec 2015 18:06:12 -0800
Message-ID: <1586ab3bf3d2cc649b102_94bb7456@drowsily.didacticcrabut.xyz>
Reply-To: <postmaster@didacticcrabut.xyz>
Sender: <SamsClub@didacticcrabut.xyz>
From: Sams Club <SamsClub@didacticcrabut.xyz>
To: xxx
Subject: Attn: Your $100 credit requires confirmation ASAP. Cust:xxx
MIME-Version: 1.0
Content-transfer-encoding: 8bit
Content-type: text/html; charset=UTF-8


Sam’s Club. Savings Made Simple.


Sam’s Club Member:xxx
Member Account #:330346

RE: One (1) Important Account Message Received

Your $100 account credit requires your confirmation for acceptance and account accuracy. This credit must be redeemed by 12/21/15.

Please Go Here Now to Confirm - Must be Redeemed by 12/21/15.
https:/ /t.co/K6mk1hrMBI





- - - - - - - - - - -End of Customer Relations Message #6512- - - - - - - - - - -
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Re: stupendousnbeds.xyz

Unread postby firefly » Sat Dec 19, 2015 4:20 am

Domain Name: STUPENDOUSNBEDS.XYZ
Domain ID: D13829452-CNIC
WHOIS Server: whois.namecheap.com
Referral URL:
Updated Date: 2015-12-14T05:05:07.0Z
Creation Date: 2015-12-14T05:05:03.0Z
Registry Expiry Date: 2016-12-14T23:59:59.0Z

Sponsoring Registrar: Namecheap
Sponsoring Registrar IANA ID: 1068
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: addPeriod https://icann.org/epp#addPeriod
Registrant ID: YEJ3PVB04UUO3O5W
Registrant Name: WhoisGuard Protected
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71543
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: quietcrbats.xyz

Unread postby firefly » Sat Dec 19, 2015 4:21 am

Domain Name: QUIETCRBATS.XYZ
Domain ID: D13925042-CNIC
WHOIS Server: whois.namecheap.com
Referral URL:
Updated Date: 2015-12-17T01:55:48.0Z
Creation Date: 2015-12-17T01:55:46.0Z
Registry Expiry Date: 2016-12-17T23:59:59.0Z

Sponsoring Registrar: Namecheap
Sponsoring Registrar IANA ID: 1068
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: addPeriod https://icann.org/epp#addPeriod
Registrant ID: IJAL3XE42WCOWCAE
Registrant Name: WhoisGuard Protected
Registrant Organization: WhoisGuard, Inc.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71543
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: didacticcrabut.xyz

Unread postby firefly » Sat Dec 19, 2015 4:22 am

Domain Name: DIDACTICCRABUT.XYZ
Domain ID: D13923386-CNIC
WHOIS Server: whois.namecheap.com
Referral URL:
Updated Date: 2015-12-17T00:58:07.0Z
Creation Date: 2015-12-17T00:58:03.0Z
Registry Expiry Date: 2016-12-17T23:59:59.0Z

Sponsoring Registrar: Namecheap
Sponsoring Registrar IANA ID: 1068
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: addPeriod https://icann.org/epp#addPeriod
Registrant ID: HPXP2L4VZFCTK5BJ
Registrant Name: WhoisGuard Protected
Registrant Organization: WhoisGuard, Inc.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 71543
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

<Sams.Club@derists.xyz>

Unread postby SlapHappy » Sun Dec 20, 2015 12:16 am

Return-Path: <Sams.Club@derists.xyz>
Received: from derists.xyz ([2a04:1bc7:597a:14bf:ed72:3016:a96f:4998])
by mx.google.com with ESMTP id sd9si6667230igb.7.2015.12.19.15.08.35
for xxx
Sat, 19 Dec 2015 15:08:36 -0800 (PST)
Received-SPF: pass (google.com: domain of Sams.Club@derists.xyz designates 2a04:1bc7:597a:14bf:ed72:3016:a96f:4998 as permitted sender)
client-ip=2a04:1bc7:597a:14bf:ed72:3016:a96f:4998;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of Sams.Club@derists.xyz designates
2a04:1bc7:597a:14bf:ed72:3016:a96f:4998 as permitted sender)
smtp.mailfrom=Sams.Club@derists.xyz;
dkim=pass header.i=@derists.xyz;
dmarc=pass (p=REJECT dis=NONE) header.from=derists.xyz
DKIM-Signature:
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
To: xxx
From: "Sam's Club" <Sams.Club@derists.xyz>
Subject: xxx, You WON a $50 Sams Club Gift Card!
Date: Sat, 19 Dec 2015 15:08:30 -0800
Message-ID: <81FB849F-3190-467F-A2E2-2D4C7C932257@derists.xyz>

You WON a $50 Sams Club Gift Card!

==
derists.xyz is scammer domain.


Whois Record for DeriSts.xyz
Whois & Quick Stats
Email is associated with ~1,199 domains


Registrant Org Ltd_Adreaction is associated with ~1,200 other domains

Dates Created on 2015-11-14 - Expires on 2016-11-14 - Updated on 2015-12-07

IP Address 185.66.136.254 - 2,495 other sites hosted on this server

IP Location Romania - Harghita - Dealu - Advertising Distribution Supplies S.r.l.
ASN Romania AS203974 ADS Advertising Distribution Supplies S.R.L. (registered Sep 21, 2015)
Whois History 2 records have been archived since 2015-11-16

Whois Server whois.nic.xyz
Website
Website Title Welcome to nginx!

Server Type nginx/1.4.6 (Ubuntu)
Response Code 200
SEO Score 76%
Terms 41 (Unique: 32, Linked: 2)
Images 0 (Alt tags missing: 0)
Links 2 (Internal: 0, Outbound: 2)
Whois Record ( last updated on 2015-12-19 )
Domain Name: DERISTS.XYZ
Domain ID: D12814430-CNIC
WHOIS Server: whois.namecheap.com
Referral URL:
Updated Date: 2015-12-07T12:37:07.0Z
Creation Date: 2015-11-14T06:27:15.0Z

Registry Expiry Date: 2016-11-14T23:59:59.0Z
Sponsoring Registrar: Namecheap
Sponsoring Registrar IANA ID: 1068
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registrant ID: AIGQ3C1HAKKT5ZZ1
Registrant Name: mohammad Abboud
Registrant Organization: Ltd_Adreaction
Registrant Street: Sheikh Zayed Road
Registrant City: Dubai
Registrant State/Province: Dubai
Registrant Postal Code: 0112344
Registrant Country: AE
Registrant Phone: +1.8009179986
Registrant Phone Ext:
Registrant Fax: +1.8009179986
Registrant Fax Ext:
Registrant Email: adreactionltd@gmail.com
Admin ID: FGCFLOF2RLC5DQYA
Admin Name: mohammad Abboud
Admin Organization: Ltd_Adreaction
Admin Street: Sheikh Zayed Road
Admin City: Dubai
Admin State/Province: Dubai
Admin Postal Code: 0112344
Admin Country: AE
Admin Phone: +1.8009179986
Admin Phone Ext:
Admin Fax: +1.8009179986
Admin Fax Ext:
Admin Email: adreactionltd@gmail.com
Tech ID: T5EWOSZ4NCT5PPGC
Tech Name: mohammad Abboud
Tech Organization: Ltd_Adreaction
Tech Street: Sheikh Zayed Road
Tech City: Dubai
Tech State/Province: Dubai
Tech Postal Code: 0112344
Tech Country: AE
Tech Phone: +1.8009179986
Tech Phone Ext:
Tech Fax: +1.8009179986
Tech Fax Ext:
Tech Email: adreactionltd@gmail.com
Name Server: DNS1.REGISTRAR-SERVERS.COM
Name Server: DNS2.REGISTRAR-SERVERS.COM
Name Server: DNS3.REGISTRAR-SERVERS.COM
Name Server: DNS4.REGISTRAR-SERVERS.COM
Name Server: DNS5.REGISTRAR-SERVERS.COM
DNSSEC: unsigned
Billing ID: LIAFZILGFH1FGASM
Billing Name: mohammad Abboud
Billing Organization: Ltd_Adreaction
Billing Street: Sheikh Zayed Road
Billing City: Dubai
Billing State/Province: Dubai
Billing Postal Code: 0112344
Billing Country: AE
Billing Phone: +1.8009179986
Billing Phone Ext:
Billing Fax: +1.8009179986
Billing Fax Ext:
Billing Email: adreactionltd@gmail.com
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

"Kohls.Rewards" <Kohls.Rewards@suceudis.xyz>

Unread postby SlapHappy » Mon Dec 21, 2015 3:25 pm

Return-Path: <Kohls.Rewards@suceudis.xyz>
Received: from suceudis.xyz ([2a04:5b07:54c5:69a1:a260:de75:7627:1e3d])
by mx.google.com with ESMTP id l14si4667571pfb.85.2015.12.20.06.14.43
for xxx
Sun, 20 Dec 2015 06:14:44 -0800 (PST)
Received-SPF: pass (google.com: domain of Kohls.Rewards@suceudis.xyz designates 2a04:5b07:54c5:69a1:a260:de75:7627:1e3d as permitted sender) client-ip=2a04:5b07:54c5:69a1:a260:de75:7627:1e3d;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of Kohls.Rewards@suceudis.xyz designates 2a04:5b07:54c5:69a1:a260:de75:7627:1e3d as permitted sender)
smtp.mailfrom=Kohls.Rewards@suceudis.xyz;
dkim=pass header.i=@suceudis.xyz;
dmarc=pass (p=REJECT dis=NONE) header.from=suceudis.xyz
DKIM-Signature:
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
To: XXXXXX@gmail.com
From: "Kohls.Rewards" <Kohls.Rewards@suceudis.xyz>
Subject: xxx, You Won! December 18th Draw - $50.00 from Kohls
Date: Sun, 20 Dec 2015 06:14:38 -0800
Message-ID: <C4F1D109-4FFA-4B8A-91F8-E09AF280E6E0@suceudis.xyz>



You Won The December 8th Draw!

http:/ /suceudis.xyz/ qeyJjIjogMjc3NDUsICJmIjogMCwgIm0iOiAyNDAzMCwgImwiOiA2NCwgInMiOiAwLCAidSI6IDIyNjMyMjcxMiwgInQiOiAxLCAic2QiOiAyNDV9

=
suceudis.xyz Scammer domain.


Whois Record for SuceUdIs.xyz
Email is associated with ~1,200 domains
adreactionltd@gmail.com

Registrant Org Ltd_Adreaction is associated with ~1,201 other domains

Dates Created on 2015-12-08 - Expires on 2016-12-08 - Updated on 2015-12-08

IP Address 185.66.136.254 - 2,795 other sites hosted on this server

IP Location Romania - Harghita - Dealu - Advertising Distribution Supplies S.r.l.
ASN Romania AS203974 ADS Advertising Distribution Supplies S.R.L. (registered Sep 21, 2015)
Whois History 1 record has been archived since 2015-12-10

Whois Server whois.nic.xyz
Website
Website Title Welcome to nginx!

Response Code 200
SEO Score 76%
Terms 41 (Unique: 32, Linked: 2)
Images 0 (Alt tags missing: 0)
Links 2 (Internal: 0, Outbound: 2)
Whois Record ( last updated on 2015-12-10 )


Viewing a cached Whois record
Our system is temporarily unable to provide a real-time Whois lookup for this domain name. The record shown here was current on 12/10/2015. If you refresh your browser we will attempt another lookup.

Domain Name: SUCEUDIS.XYZ
Domain ID: D13729580-CNIC
WHOIS Server: whois.namecheap.com
Referral URL:
Updated Date: 2015-12-08T11:29:07.0Z
Creation Date: 2015-12-08T11:29:04.0Z
Registry Expiry Date: 2016-12-08T23:59:59.0Z
Sponsoring Registrar: Namecheap
Sponsoring Registrar IANA ID: 1068
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: addPeriod https://icann.org/epp#addPeriod
Registrant ID: OKG3PKJYN0M0NOJU
Registrant Name: mohammad Abboud
Registrant Organization: Ltd_Adreaction
Registrant Street: Sheikh Zayed Road
Registrant City: Dubai
Registrant State/Province: Dubai
Registrant Postal Code: 0112344
Registrant Country: AE
Registrant Phone: +1.8009179986
Registrant Phone Ext:
Registrant Fax: +1.8009179986
Registrant Fax Ext:
Registrant Email:
Admin ID: OKKLLX0NKQGFQ0JI
Admin Name: mohammad Abboud
Admin Organization: Ltd_Adreaction
Admin Street: Sheikh Zayed Road
Admin City: Dubai
Admin State/Province: Dubai
Admin Postal Code: 0112344
Admin Country: AE
Admin Phone: +1.8009179986
Admin Phone Ext:
Admin Fax: +1.8009179986
Admin Fax Ext:
Admin Email:
Tech ID: HOG3FJGQWVFPD3CE
Tech Name: mohammad Abboud
Tech Organization: Ltd_Adreaction
Tech Street: Sheikh Zayed Road
Tech City: Dubai
Tech State/Province: Dubai
Tech Postal Code: 0112344
Tech Country: AE
Tech Phone: +1.8009179986
Tech Phone Ext:
Tech Fax: +1.8009179986
Tech Fax Ext:
Tech Email:
Name Server: DNS1.REGISTRAR-SERVERS.COM
Name Server: DNS2.REGISTRAR-SERVERS.COM
Name Server: DNS3.REGISTRAR-SERVERS.COM
Name Server: DNS4.REGISTRAR-SERVERS.COM
Name Server: DNS5.REGISTRAR-SERVERS.COM
DNSSEC: unsigned
Billing ID: LGKW1GDMGQYGYMVR
Billing Name: mohammad Abboud
Billing Organization: Ltd_Adreaction
Billing Street: Sheikh Zayed Road
Billing City: Dubai
Billing State/Province: Dubai
Billing Postal Code: 0112344
Billing Country: AE
Billing Phone: +1.8009179986
Billing Phone Ext:
Billing Fax: +1.8009179986
Billing Fax Ext:
Billing Email:
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

<AMAZ0NPrimeReward@joincrapes.xyz>

Unread postby SlapHappy » Mon Dec 21, 2015 3:34 pm

* 116.139.66.87 Verizon Business Chaoyang China

Return-Path: <158db14e0992f5685b202_01ab7656@joincrapes.xyz>
Received: from panthers.efficaciouscrbays.xyz ([116.139.66.87])
by mx.google.com with ESMTP id q185si18481422ywc.420.2015.12.20.05.20.02
for
Sun, 20 Dec 2015 05:20:04 -0800 (PST)
Received-SPF: pass (google.com: domain of
\158db14e0992f5685b202_01ab7656@joincrapes.xyz designates 116.139.66.87
as permitted sender) client-ip=116.139.66.87;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of 158db14e0992f5685b202_01ab7656@joincrapes.xyz
designates 116.139.66.87 as permitted sender)
smtp.mailfrom=158db14e0992f5685b202_01a ... crapes.xyz
Date: Sun, 20 Dec 2015 05:20:01 -0800
Message-ID: <158db14e0992f5685b202_01ab7656@meritoriousness.joincrapes.xyz>
Reply-To: <postmaster@joincrapes.xyz>
Sender: <AMAZ0NPrimeReward@joincrapes.xyz>
From: AMAZ0NPrime Reward <AMAZ0NPrimeReward@joincrapes.xyz>
To: xxx
Subject: Notice: Your New $100 AMAZ0N-Prime Credit-is Expiring 12/28/2015.
Shopper/Customer:XXXXXX
MIME-Version: 1.0
Content-transfer-encoding: 8bit
Content-type: text/html; charset=UTF-8



AMAZ0N .com Prime.

NEW IMPORTANT-NOTIFICATION REGARDING YOUR CURRENT POINTS

AMAZ0N-PRIME SHOPPER ID#8278 - - DATE: 12/20/2015

ONE (1) DAY ONLY!

Hello Shopper! To show you how much we really value and appreciate your years of repeat business, & to celebrate the success of AMAZ0N Prime we’ve just now awarded you with $100 worth of shopper bonus points that can be applied towards any product sold on AMAZ0N's website!

To claim your new bonus, you just simply follow the link that we've provided below & use your coupon-card during the checkout stage on AMAZ0N’s website......That’s it!

So go here now to redeem your newest reward - Expires on 12/27
"http:/ /ow.ly/W86Tt"


*******The Above Link is Set to Expire on 12/23/2015, So Don't Wait!
=
JOINCRAPES.XYZ is a scammer domain.


Whois Record for JoinCrapes.xyz

Registrant Org WhoisGuard, Inc. was found in ~3,233,642 other domains

Dates Created on 2015-12-17 - Expires on 2016-12-17 - Updated on 2015-12-17

Whois History 1 record has been archived since 2015-12-18

Whois Server whois.nic.xyz
Website
Website Title None given.

Whois Record ( last updated on 2015-12-21 )
Domain Name: JOINCRAPES.XYZ
Domain ID: D13924163-CNIC
WHOIS Server: whois.namecheap.com
Referral URL:
Updated Date: 2015-12-17T01:27:16.0Z
Creation Date: 2015-12-17T01:27:14.0Z
Registry Expiry Date: 2016-12-17T23:59:59.0Z
Sponsoring Registrar: Namecheap
Sponsoring Registrar IANA ID: 1068
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: addPeriod https://icann.org/epp#addPeriod
Registrant ID: U0MB3FTUJSYQMRE5
Registrant Name: WhoisGuard Protected
Registrant Organization: WhoisGuard, Inc.
Registrant Street: P.O. Box 0823-03411
Registrant City: Panama
Registrant State/Province: Panama
Registrant Postal Code: 00000
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Phone Ext:
Registrant Fax: +51.17057182
Registrant Fax Ext:
Registrant Email: 9a3d16f134e24212b2a8a4bddd226c04.protect@whoisguard.com
Admin ID: BPJNPQELES3OB5GR
Admin Name: WhoisGuard Protected
Admin Organization: WhoisGuard, Inc.
Admin Street: P.O. Box 0823-03411
Admin City: Panama
Admin State/Province: Panama
Admin Postal Code: 00000
Admin Country: PA
Admin Phone: +507.8365503
Admin Phone Ext:
Admin Fax: +51.17057182
Admin Fax Ext:
Admin Email: 9a3d16f134e24212b2a8a4bddd226c04.protect@whoisguard.com
Tech ID: ROE1ZYAGE5RVRMGL
Tech Name: WhoisGuard Protected
Tech Organization: WhoisGuard, Inc.
Tech Street: P.O. Box 0823-03411
Tech City: Panama
Tech State/Province: Panama
Tech Postal Code: 00000
Tech Country: PA
Tech Phone: +507.8365503
Tech Phone Ext:
Tech Fax: +51.17057182
Tech Fax Ext:
Tech Email: 9a3d16f134e24212b2a8a4bddd226c04.protect@whoisguard.com
Name Server: DNS1.REGISTRAR-SERVERS.COM
Name Server: DNS2.REGISTRAR-SERVERS.COM
Name Server: DNS3.REGISTRAR-SERVERS.COM
Name Server: DNS4.REGISTRAR-SERVERS.COM
Name Server: DNS5.REGISTRAR-SERVERS.COM
DNSSEC: unsigned
Billing ID: 3XI5YLOBIDZ31N1S
Billing Name: WhoisGuard Protected
Billing Organization: WhoisGuard, Inc.
Billing Street: P.O. Box 0823-03411
Billing City: Panama
Billing State/Province: Panama
Billing Postal Code: 00000
Billing Country: PA
Billing Phone: +507.8365503
Billing Phone Ext:
Billing Fax: +51.17057182
Billing Fax Ext:
Billing Email: 9a3d16f134e24212b2a8a4bddd226c04.protect@whoisguard.com
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

<AmazonPrimeReward@oldcraids.xyz>

Unread postby SlapHappy » Mon Dec 21, 2015 3:45 pm

116.139.219.18 Verizon Business Chaoyang China

Return-Path: <15821305e7e2e8685b202_d23c7656@oldcraids.xyz>
Received: from Rijswijk.thingscragio.xyz ([116.139.219.18])
by mx.google.com with ESMTP id s5si17603256ywg.32.2015.12.19.21.29.55
for xxx
Sat, 19 Dec 2015 21:29:56 -0800 (PST)
Received-SPF: pass (google.com: domain of
15821305e7e2e8685b202_d23c7656@oldcraids.xyz designates 116.139.219.18
as permitted sender) client-ip=116.139.219.18;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of 15821305e7e2e8685b202_d23c7656@oldcraids.xyz
designates 116.139.219.18 as permitted sender)
smtp.mailfrom=15821305e7e2e8685b202_d23 ... craids.xyz
Date: Sat, 19 Dec 2015 21:29:54 -0800
Message-ID: <15821305e7e2e8685b202_d23c7656@keyboarder.oldcraids.xyz>
Reply-To: <postmaster@oldcraids.xyz>
Sender: <AmazonPrimeReward@oldcraids.xyz>
From: AmazonPrime Reward <AmazonPrimeReward@oldcraids.xyz>
To: xxx
Subject: Attn: Your $100 AMAZ0N-Prime Credit-Will Expire 12/27/2015. Shopper:xxx
MIME-Version: 1.0
Content-transfer-encoding: 8bit
Content-type: text/html; charset=UTF-8



Amazon .com Prime.


IMPORTANT NOTIFICATION REGARDING YOUR CURRENT REWARDS POINTS

AMAZON PRIME SHOPPER#10853 - - DATE: 12/19/2015

ONE (1) DAY ONLY!

To show you how much we really value your years of repeat business, and to celebrate the success of Amazon Prime we’ve just awarded you with $100 worth of bonus points that can be applied towards any product for sale on Amazon’s website!

To claim your new bonus, just follow the link that we've provided below and use your coupon-card during checkout on Amazon’s website.....That’s it!

Go here now to redeem your new reward - Expires 12/26
"https:/ /t.co/OU3JuyYnee"


******The Above Link Expires on 12/22/2015, So Don't Wait!
=
oldcraids.xyz is scammer domain.


Whois Record for OldCrAids.xyz
Related Domains For Sale or At Auction
PaidSearch.xyz ($3,000) Plaids.com ($9,899) MaidsCleaning.com ($2,895) AidsResearch.com ($9,999) FinancialAidService.com ($4,388) AidsProject.com ($4,388)
1 2 3 More >
Whois & Quick Stats
Email


Registrant Org WhoisGuard, Inc. was found in ~3,233,642 other domains

Dates Created on 2015-12-17 - Expires on 2016-12-17 - Updated on 2015-12-17

Whois History 1 record has been archived since 2015-12-18

Whois Server whois.nic.xyz
Website
Website Title None given.

Whois Record ( last updated on 2015-12-21 )
Domain Name: OLDCRAIDS.XYZ
Domain ID: D13923686-CNIC
WHOIS Server: whois.namecheap.com
Referral URL:
Updated Date: 2015-12-17T01:09:37.0Z
Creation Date: 2015-12-17T01:09:31.0Z
Registry Expiry Date: 2016-12-17T23:59:59.0Z
Sponsoring Registrar: Namecheap
Sponsoring Registrar IANA ID: 1068
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: addPeriod https://icann.org/epp#addPeriod
Registrant ID: JDKFGMSG5BXXLQSC
Registrant Name: WhoisGuard Protected
Registrant Organization: WhoisGuard, Inc.
Registrant Street: P.O. Box 0823-03411
Registrant City: Panama
Registrant State/Province: Panama
Registrant Postal Code: 00000
Registrant Country: PA
Registrant Phone: +507.8365503
Registrant Phone Ext:
Registrant Fax: +51.17057182
Registrant Fax Ext:
Registrant Email: a29b2d859a664adda0424cd241914ded.protect@whoisguard.com
Admin ID: PMF4C434CWFNJDME
Admin Name: WhoisGuard Protected
Admin Organization: WhoisGuard, Inc.
Admin Street: P.O. Box 0823-03411
Admin City: Panama
Admin State/Province: Panama
Admin Postal Code: 00000
Admin Country: PA
Admin Phone: +507.8365503
Admin Phone Ext:
Admin Fax: +51.17057182
Admin Fax Ext:
Admin Email: a29b2d859a664adda0424cd241914ded.protect@whoisguard.com
Tech ID: BDTEIEBNFU1QTANC
Tech Name: WhoisGuard Protected
Tech Organization: WhoisGuard, Inc.
Tech Street: P.O. Box 0823-03411
Tech City: Panama
Tech State/Province: Panama
Tech Postal Code: 00000
Tech Country: PA
Tech Phone: +507.8365503
Tech Phone Ext:
Tech Fax: +51.17057182
Tech Fax Ext:
Tech Email: a29b2d859a664adda0424cd241914ded.protect@whoisguard.com
Name Server: DNS1.REGISTRAR-SERVERS.COM
Name Server: DNS2.REGISTRAR-SERVERS.COM
Name Server: DNS3.REGISTRAR-SERVERS.COM
Name Server: DNS4.REGISTRAR-SERVERS.COM
Name Server: DNS5.REGISTRAR-SERVERS.COM
DNSSEC: unsigned
Billing ID: IFVH2RFQGPQOUC3Z
Billing Name: WhoisGuard Protected
Billing Organization: WhoisGuard, Inc.
Billing Street: P.O. Box 0823-03411
Billing City: Panama
Billing State/Province: Panama
Billing Postal Code: 00000
Billing Country: PA
Billing Phone: +507.8365503
Billing Phone Ext:
Billing Fax: +51.17057182
Billing Fax Ext:
Billing Email: a29b2d859a664adda0424cd241914ded.protect@whoisguard.com
Tools
OldCrAids.xyz
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Next

Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 1 guest