| Author |
Message |
loualsindor
Elite Baiter
Joined: 23 Mar 2012
Posts: 1999
Location: A little rock in a big ocean
|
 Posted:
Mon Nov 24, 2014 6:16 pm |
  |
I'm not sure if this is something you animals can take a crack at. Looks like one that's been around a while, has a nice front end. Typical Amex phishing bit
The spam:
-----
Security Concern on Your American Express Account
Dear Customer:
We are writing to you because we need to speak with you regarding a security concern on your account. Our records indicate that you recently used your American Express card on Novermber 06, 2014.
For your security, new charges on the accounts listed above may be declined. If applicable, you should advise any Additional Card Member(s) on your account that their new charges may also be declined.
To secure your account , please click log on to : http://americanexpress.com
Your prompt response regarding this matter is appreciated.
Sincerely,
American Express Identity Protection Team
Please do not reply to this e-mail. This customer service e-mail was sent to you by American Express. You may receive customer service e-mails even if you have unsubscribed from marketing e-mails from American Express.
Contact Customer Service | View our Privacy Statement | Opt Out
This email was sent to [email protected].
American Express Customer Service Department
P.O. Box 297817 | Ft. Lauderdale, FL 33329-781
----
All of the links are to:
http://alternativeon-site.com/caotcucenf/jilbomkbgg.html
The redirects (there are a couple) land you at
http://79.96.232.231/americanexpress/
and the "reply to" is your own address.
The IP is in Poland. The email seems to move through Turkey, but this isn't my area of expertise. Let me know if you need anything else!
Header:
Delivered-To: xxxxxxxxxx
Received: by 10.194.127.66 with SMTP id ne2csp275194wjb;
Mon, 24 Nov 2014 10:01:52 -0800 (PST)
X-Received: by 10.68.68.172 with SMTP id x12mr35206280pbt.71.1416852111974;
Mon, 24 Nov 2014 10:01:51 -0800 (PST)
Return-Path: <[email protected]>
Received: from mx2.agentdns.com ([206.131.185.38])
by mx.google.com with ESMTP id vb10si15097507pac.124.2014.11.24.10.01.51
for <xxxxxxxxxxxxxx>;
Mon, 24 Nov 2014 10:01:51 -0800 (PST)
Received-SPF: fail (google.com: domain of [email protected] does not designate 206.131.185.38 as permitted sender) client-ip=206.131.185.38;
Authentication-Results: mx.google.com;
spf=fail (google.com: domain of [email protected] does not designate 206.131.185.38 as permitted sender) [email protected]
Received: from welcome.aexp.com (unknown [212.109.102.34])
by mx2.agentdns.com (Postfix) with ESMTP id 8091A6DD
for <xxxxxxxxx>; Mon, 24 Nov 2014 11:01:50 -0700 (MST)
Received: from domain.local (domain.local [192.168.0.25])
by welcome.aexp.com (Postfix) with ESMTP id 0408151174
for <xxxxxxxxxxxxx>; Mon, 24 Nov 2014 18:01:50 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_471ba7dc1faab2340488ce5e25365c5e"
Date: Mon, 24 Nov 2014 17:56:50 +0000
From: <xxxxxxxxxxxxxx>
To: <[email protected]>
Subject: Security Concern on Your American Express Account
Message-ID: <[email protected]>
User-Agent: Roundcube Webmail/1.0.1 |
_________________
 - 229
 X 6
X 5
X 1
 Budapest/Fiji - 22,500 miles
Save, Collines, Benin/Victoria Island, Nigeria - 448 miles on a bus
Save, Collines, Benin/Accra, Ghana - 700 miles on a bus
Evil Attorney epics - 22
- Why do you give shit about who i scammed you have to stop sticking ur nose on my shoes. Because it doesn't fit your noses
- Please bring me back before i hit my brain on a pan.
- This business is not like selling shoes and clothes in the market sir.
* Help Keep Eater Running - Click here to donate
Last edited by loualsindor on Thu May 12, 2016 7:38 pm; edited 1 time in total |
|
|
|
|
loualsindor
Elite Baiter
Joined: 23 Mar 2012
Posts: 1999
Location: A little rock in a big ocean
|
| Posted:
Mon Nov 24, 2014 6:30 pm |
|
|
|
|
|
music man
Baiting Guru
Joined: 22 Sep 2005
Posts: 14806
Location: East Harlemshire , yo!
|
| Posted:
Mon Nov 24, 2014 8:11 pm |
|
| Quote: |
| This forum is for fraudulent sites being used to commit Advance Fee Fraud. Please do not post phishing sites, malware sites, electronics sites or sites used for pyramid/ponzi schemes. |
Moving to Misc Scams  |
_________________
 x2  x2   x104  x213  x4  x20  x4    x2  x1  x2  x2   x2  x2   x2  x13
You will rot in jail.watch your back- any shadow could be mine ! YOU ARE VERY EASY TO TRACK IN YOU NEIGHBOURHOOD ! DRUNKARD AND A SCUMBAG LIKE YOU!
mike lawrence (cheque scammer)
Go fuck your dead parents asshole!!!How can a deaf fool make clean money..The money that you have will never be spent on anything reasonable.
So fuck off..dont reply me again until the cops get your stinking ass...
Lyord Melson- cheque scammer
$4.002million and £214K in fake cheques taken out of circulation. (updated May 2009)
 |
|
|
|
|
loualsindor
Elite Baiter
Joined: 23 Mar 2012
Posts: 1999
Location: A little rock in a big ocean
|
| Posted:
Mon Nov 24, 2014 8:16 pm |
|
Apologies and thanks for the move. Not my normal corner of the asylum! |
_________________
- 229
X 6
X 5
X 1
Budapest/Fiji - 22,500 miles
Save, Collines, Benin/Victoria Island, Nigeria - 448 miles on a bus
Save, Collines, Benin/Accra, Ghana - 700 miles on a bus
Evil Attorney epics - 22
- Why do you give shit about who i scammed you have to stop sticking ur nose on my shoes. Because it doesn't fit your noses
- Please bring me back before i hit my brain on a pan.
- This business is not like selling shoes and clothes in the market sir.
* Help Keep Eater Running - Click here to donate |
|
|
|
|
|
|
|
View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
SmartFeed
