Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

"McDonald's™" <noreply@formstack.com>

DO NOT click on any links in these emails.

"McDonald's™" <noreply@formstack.com>

Unread postby SlapHappy » Wed Nov 09, 2016 12:13 am

This is the stupidest phishing email I have ever seen. Sending McDonald's food via postal service?
I prefer my fries fresh, thank you.




Return-Path: <return@darant3.bpkpenaburjakarta.or.id>
Received: from mailout01.t-online.de ([2a01:4f8:100:4168:31b6:4f22:6918:7eac])
by mx.google.com with ESMTPS id 23si20994996qkd.84.2016.11.08.12.30.14
for <xxx>
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Tue, 08 Nov 2016 12:30:14 -0800 (PST)
Received-SPF: pass (google.com: domain of return@darant3.bpkpenaburjakarta.or.id
designates 2a01:4f8:100:4168:31b6:4f22:6918:7eac as permitted sender) client-ip=2a01:4f8:100:4168:31b6:4f22:6918:7eac;
Authentication-Results: mx.google.com;
dkim=neutral (bad version) header.i=@formstack.com;
dkim=pass header.i=@sendgrid.info;
spf=pass (google.com: domain of return@darant3.bpkpenaburjakarta.or.id
designates 2a01:4f8:100:4168:31b6:4f22:6918:7eac as permitted sender) smtp.mailfrom=return@darant3.bpkpenaburjakarta.or.id;
dmarc=fail (p=NONE dis=NONE) header.from=formstack.com
Port25: :Submitter::Message
DKIM-Signature:
DKIM-Signature:
Received: by filter0611p1mdw1.sendgrid.net with SMTP id
filter0611p1mdw1-22093-5821E615-68
2016-11-08 14:49:57.753308741 +0000 UTC
Received: from localhost (ec2-52-71-30-102.compute-1.amazonaws.com ) by
ismtpd0003p1iad1.sendgrid.net (SG) with ESMTP id MhAK2WEOSHq12aAKsYanMQ
for <tabourejam@gmail.com>; Tue, 08 Nov 2016 14:49:57.662 +0000 (UTC)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=_55e561a066a153c705fe0b6e11d54f8b"
From: "McDonald's™" <noreply@formstack.com>
Return-Path: noreply@formstack.com
To: tabourejam@gmail.com
Subject: CONGRATS! You Have Been Selected For FREE
Subject: TEST - CONGRATS! You Have Been Selected For FREE
Reply-To: tabourejam@gmail.com
Message-ID: <MhAK2WEOSHq12aAKsYanMQ@ismtpd0003p1iad1.sendgrid.net>
Date: Tue, 08 Nov 2016 14:49:57 +0000 (UTC)
X-SG-EID:
X-Feedback-ID:

--=_55e561a066a153c705fe0b6e11d54f8b
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8


Dear
Finally Free McDonald's Samples Right to Your Mailbox!

"http:/ /bit.ly/2eFJSCv"
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Re: "McDonald's™" <noreply@formstack.com>

Unread postby SlapHappy » Fri Nov 11, 2016 12:41 am

Return-Path: <return@dfghgftcfrd.bpkpenaburjakarta.or.id>
Received: from mailout01.t-online.de ([2a01:4f8:151:910c:f374:c0d4:d89d:a88b])
by mx.google.com with ESMTPS id h3si7574350wji.157.2016.11.10.15.32.57
for <xxx>
(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Thu, 10 Nov 2016 15:32:58 -0800 (PST)
Received-SPF: pass (google.com: domain of return@dfghgftcfrd.bpkpenaburjakarta.or.id
designates 2a01:4f8:151:910c:f374:c0d4:d89d:a88b as permitted sender)
client-ip=2a01:4f8:151:910c:f374:c0d4:d89d:a88b;
Authentication-Results: mx.google.com;
dkim=neutral (bad version) header.i=@formstack.com;
dkim=pass header.i=@sendgrid.info;
spf=pass (google.com: domain of return@dfghgftcfrd.bpkpenaburjakarta.or.id designates 2a01:4f8:151:910c:f374:c0d4:d89d:a88b as permitted sender) smtp.mailfrom=return@dfghgftcfrd.bpkpen ... arta.or.id;
dmarc=fail (p=NONE dis=NONE) header.from=formstack.com
DKIM-Signature:
Received: by filter0102p1las1.sendgrid.net with SMTP id
filter0102p1las1-30912-5824C92C-41
2016-11-10 19:23:24.54832351 +0000 UTC
Received: from localhost (ec2-52-71-30-102.compute-1.amazonaws.com ) by
ismtpd0005p1iad1.sendgrid.net (SG) with ESMTP id QIqy6EiRRoibfgAelmMnew for
<comesorofli@gmail.com>; Thu, 10 Nov 2016 19:23:24.300 +0000 (UTC)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="=_77e4f9db0ddb003c92a9ad3df10175e2"
From: "McDonald's™" <noreply@formstack.com>
Return-Path: noreply@formstack.com
To:
Subject: TEST - Subject: Get McDonald_breakfast all Day Try it.FREE.on us!
Reply-To: sapefunu@zainmax.net
Message-ID: <QIqy6EiRRoibfgAelmMnew@ismtpd0005p1iad1.sendgrid.net>
Date: Thu, 10 Nov 2016 19:23:24 +0000 (UTC)
X-SG-EID:
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8


Congrats! You've Been Selected for Complimentary McDonald's Samples.


"http:/ /bit.ly/2emAV2w"
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.


Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 12 guests