Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Phishers impersonating Google / Gmail

DO NOT click on any links in these emails.

Gmail <yahoo-inc@q.com>

Unread postby SlapHappy » Mon Mar 21, 2016 2:53 pm

* 178.62.84.4 Digital Ocean London United Kingdom

Return-Path: <yahoo-inc@q.com>
Received: from smtp.q.com (smtp.quartz.synacor.com. [205.169.121.111])
by mx.google.com with ESMTPS id q5si9555458igh.19.2016.03.21.04.39.01
for xxx
(version=TLS1 cipher=AES128-SHA bits=128/128);
Mon, 21 Mar 2016 04:39:01 -0700 (PDT)
Received-SPF: pass (google.com: domain of yahoo-inc@q.com designates
205.169.121.111 as permitted sender) client-ip=205.169.121.111;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of yahoo-inc@q.com designates 205.169.121.111
as permitted sender) smtp.mailfrom=yahoo-inc@q.com;
dkim=pass header.i=@q.com
Return-Path: <yahoo-inc@q.com>
DKIM-Signature:
X-Authed-Username: eWFob28taW5jQHEuY29t
X_CMAE_Category: 0,0 Undefined,Undefined
X-CNFS-Analysis:
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
Received: from [10.30.7.251] ([10.30.7.251:58302] helo=md34.quartz.synacor.com)
by smtp.q.com (envelope-from <yahoo-inc@q.com>)
(ecelerity 2.2.2.40 r(29895/29896)) with ESMTP
id 45/B7-08079-25DDFE65; Mon, 21 Mar 2016 07:38:59 -0400
Date: Mon, 21 Mar 2016 07:38:58 -0400 (EDT)
From: Gmail <yahoo-inc@q.com>
To: Gmail <yahoo-inc@q.com>
Message-ID: <765225069.752672.1458560338870.JavaMail.root@md34.quartz.synacor.com>
In-Reply-To: <994282639.752615.1458559982365.JavaMail.root@md34.quartz.synacor.com>
Subject: RE: Email Closure Request In Process
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_752671_700370268.1458560338868"
X-Originating-IP: [178.62.84.4]
X-Mailer: Zimbra 6.0.8_GA_2685 (zclient/6.0.8_GA_2685)


Hi , Mail
Your mail account was recently requested for Closure which we need your Authentication. Pls if you have NOT requested for a Account Closure And SHUT DOWN click on Mail Sign in below fill and submit to save your account from hackers Mail Sign in
"http:/ /closureupdatexxxxxxx.webeden.co.uk/"
Failure to do this you may not be able to-login your Yahoo account within the next 24hours

This is just a notification for your account safety.
Have a great day!

Mail Team Upgrade!
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
human guy! With small brain.
 
Posts: 43725
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

gmaillllll.es.tl

Unread postby Big Al » Wed Mar 30, 2016 11:11 pm

ALL EMAIL ACCOUNT UPGRADE

Dear account user on this date 31 / 03 / 2016 Google has approved a new secured link to all email users for you to sign in and upgrade your email account save and secured power by google follow the instructions below link http:/ /gmaillllll.es.tl/ Use any of your email account sign in with the password and is acceptable upgrade your email if some one is using your email with your upgrading it will lost access on your email thank you google user guide is our honor to save and protect all users?

Yours In service
Google service guide
E-mail-Updgradernone-reply@post.com


Header:
Return-Path: <nasir64@myonlineinf.net>
Received: from smtp104.biz.mail.gq1.yahoo.com (smtp104.biz.mail.gq1.yahoo.com. [98.137.12.179])
Subject: Hi
To: Recipients <nasir64@myonlineinf.net>
From: nasir64@myonlineinf.net
Date: Wed, 30 Mar 2016
Reply-To: E-mail-Updgradernone-reply@post.com
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" moderator.
 
Posts: 45664
Joined: Fri Apr 27, 2012 10:48 pm

Google - dieter.bug@mahle.com

Unread postby firefly » Tue Apr 19, 2016 5:34 pm

From Google Sat Apr 16 2016
Received: from 127.0.0.1 (HELO server.thelistcovery.com) (107.181.172.103)
From: Google <dieter.bug@mahle.com>
Subject: We have sent a message with important information

Originating IP: 107.181.172.103
Originating ISP: Total Server Solutions L.l.c.
City: Atlanta
Country of Origin: United States


Email:

Google <dieter.bug@mahle.com>
To
Google

Notification Service Reporting:

We have sent a message with further instructions.

The Google Support.

You can also unsubscribe from these messages or change your notification settings.
You received this mandatory email service announcement to update you about important changes to your account.
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 50426
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Google <cpclfwskmzhk@excite.de>

Unread postby firefly » Sat Mar 03, 2018 12:02 am

Message:

Google
Hi xxx,

You have notifications pending.

2/02/2013
Damaged message was found and recovered.
We hope you found this message to be useful. However, if you'd rather not receive future e-mails of this sort, please opt-out here.


Return-Path: <cpclfwskmzhk@excite.de>
Received: from cp80.zonasprivadasdns.com (cp80.zonasprivadasdns.com. [5.145.175.80])
Authentication-Results: mx.google.com;
spf=neutral (google.com: 5.145.175.80 is neither permitted nor denied by best guess record for domain of cpclfwskmzhk@excite.de) smtp.mailfrom=cpclfwskmzhk@excite.de
From: Google <cpclfwskmzhk@excite.de>
Message-ID: <cf7e.aa658c.93389586@excite.de>
Date: Fri, 2 Feb 2018 11:35:15
To:
Subject: Damaged message was found and recovered

Originating IP: 5.145.175.80
Originating ISP: Comvive Servidores S.l.
Country of Origin: Spain

Phishing link hidden in the body of the message: http: / / pastasus.com/wp-content/plugins/encore.php
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 50426
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Previous

Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 5 guests