Tuesday, July 31, 2012

Blokkering van de betaling door het Rabobank systeem.

If you received below e-mail then do not click on the link under "Uw betaalopdracht" It is going to:


A Hacked  website. The website owner is informed by us.

Geachte cliënt,
Hierbij deelt de Rabobank u mede, dat uw betaling met het nummer 129983 geblokkeerd is.
De oorzak ervan is dat de afzender in gebreke is gebleven de juiste bankgegevens te verstrekken.

Uw betaalopdracht (Link removed)

Voer alstublieft de correcte bankgegevens van uw ontvanger in, zodat de betaling succesvol kan worden uitgevoerd.

Voor het ongemak bieden wij u onze excuses aan.
Klantenservice van de Rabobank

Monday, July 30, 2012

Ihr Handeln ist gefragt, your name DHL

If you get this email, (looks like it is coming from "PACKSTATION.de", but the link in mail is going to ps24.name Do NOT fill in the form. If you doubt then go to the original DHL website (dhl.de) The Website ps24.name is registered 1 week ago. (07/17/2012)

Link is going to:

Below the mail.

Sehr geehrte(r) yourname,

aufgrund derzeitiger Erneuerungen, insbesondere etlicher Sicherheitsupdates zur Fraudprävention, sind wir gezwungen von jedem PACKSTATION-Nutzer eine einmalige Verifikation durchführen zu lassen. Diese können Sie binnen Sekunden online durchführen.

Wir bitten Sie diesen Vorgang schnellstmöglich abzuschließen, da es sonst zu längeren verzögerungen bei Ihrem nächsten Paketempfang führen kann.

Jetzt Verifikation online durchführen!

Wir hoffen weiterhin auf Ihr Vertrauen.
Ihr PACKSTATION Kundenservice

Your credit card is blocked (FAKE e-mail)

If you receive a e-mail with below details, then do NOT unzip and run EXE file in zip.
It is all fake. They e-mails look like they are coming from MyUps and VISA TEAM 54

See below example's:

Dear User,

CAUTION: Your credit card is locked!

From your credit card has been removed $ 43,9
Possibly illegal operation!

More details in the attached file.
Instantly contact your bank .

Friday, July 27, 2012

ABN AMRO N.V Fake mail

If you receive below e-mail, then do NOT click on link, it is going to a other website then the ABN AMRO.

Website owner is informed.

http://artistspain.com/ lorenzogonzalez/ wp-includes/ js/tinymce/utils/abnamro/abnamro/default.htm 


Geachte heer/mevrouw,

Werken wij met een nieuw beveiligingssysteem. Dit systeem zorgt ervoor dat er geen misbruik gemaakt kan worden van uw rekening door bijvoorbeeld een virus of kwaadwillende software dat op uw computer is gennstalleerd.
Om ervoor te zorgen dat ook uw rekening beveiligd wordt door ons nieuw systeem verzoeken wij u hieronder eenmalig in te loggen en uw gegevens te verifieren.

Thursday, July 26, 2012

craigslist Leah Cross asteropaeus.com SPAM going to trustedsurveys.com

If you receive spam titled Craigslist  and a link that is going to :  asteropaeus.com

Then send a complain to :


There email is:


See below example e-mail from Leah Cross?

Update: We also received several other complaints from different website's URL that are going to the same trustedsurveys?? This website for example as well: lacepillow . com
Creation date: 28 Jul 2012 12:23:00


I need a couple people here in town to help me finish some extra work online that I need completed. The work is pretty easy, and the hours are very flexible. Details are right here.

Thanks for your time

Sent from my iPhone

Some basic tips to prevent that your Wordpress Website get hacked.

Here are just some basic tips to prevent that your Wordpress website get hacked.

  1. Delete your readme.html file.
  2. Delete your install.php file

Federal Tax transfer returned

Below website is being hacked. And someone placed this here :

http://mbdesignlab.com/ wp-content/uploads/fgallery /reves.html (Do NOT click this)

Other site that has the same hack: http://jjgraphics.se/ wp-content/uploads/fgallery/ reves.html

Website owners is informed.

Fwd: Diene Fotos (Do NOT open file DCIM.HTML) Script

if you receive something like below e-mail with attached a HTML file, then do NOT open it. It is a script that can harm your computer. It is random send to peoples e-mail.

Below the email.

deine Fotos findest du im Anhang (Internet Explorer format)


And below a part of the code in DCIM.htm file.

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
  <meta http-equiv="Content-Type" content="text/html; charset=utf-8">

<h1><b>Please wait a moment. You will be forwarded...</h1></b>


Wednesday, July 25, 2012

Email about Adblaster.

Did you receive a mail where you get a offer to buy AdBlaster? Do NOT fall for that trick. There are a lot of good review from people who have already got this program, but that is also the reason why they give a good review. Because they get resell rights. And remember, if you use software like ADBLASTER, you are spamming. Some of the responses we found that shows how bad it are below: Hi just to add I too received a email for this product so I checked around and found this comment from a site called rip off report. A handy site for checking out these sort of products. ************************************************** *********************** AdBLASTER can Blast your ad to more than 2.5 million websites! Get 5,000 Hits Per hour This is a lie and a Rip- Off. I installed 6 of my web-site's on this so call AdBlaster to advertise on. After 1 year using this program I didn't get the 5,000 Hit's per hour they said I would, I didn't even get one! I even checked some of the web-site's of this program.I could'nt even find my web-site's advertisement. I tried to contact megapromoter dot com about this false claim, they never responded. By the way, they are located in Germany, so don't waste your time and money on this so call AdBlaster. You will never get all those hits. AdBlaster is a big Rip-Off !!! Nathan Brooklyn, New York U.S.A. ************************************************** ************************ Hope this helps some one save a few dollars. Regards Allan Source: http://www.warriorforum.com/internet-marketing-product-reviews-ratings/349432-anyone-heard-ad-blaster-software.html Dangerous : See: http://download.cnet.com/AdBlaster/3640-2650_4-10382845-1.html "Dangerous software" April 23, 2011 | By jammstrasse Version: AdBlaster 2.0 Pros None! If you download it watch out. It contains a virus. Cons Norton anti-virus would not allow AdBlaster software on my computer because it contains a virus. I paid with paypal and am fighting the fight to get my money back. I wish I had of read these reviews before I got this rip-off product. Summary

US Airways - Reservations (Fake mail. Do NOT press link)

If you receive this mail, then do NOT click on the link ! It is going to this website :


A hacked WordPress website .....

Below the e-mail (Links deactivated.)

You can check in from 24 hours and up to 60 minutes before your flight (2 hours if you're flying internationally).
Then, all you need to do is print your boarding pass and go to the gate.

Confirmation code: 121051

Check-in online:  Online reservation details



Departure city and time

Washington, DC (DCA) 10:00PM

Depart date: 7/26/2012

We are committed to protecting your privacy. Your information is kept private and confidential. For information about our privacy policy visit usairways.com.

US Airways, 111 W. Rio Salado Pkwy, Tempe, AZ 85281 , Copyright US Airways , All rights reserved.

Fake UPS mail. UPS Tracking Number H28247834659

If you receive below e-mail that looks it is coming from UPS, then do NOT click on the attached file. It is a virus. There is a attached file in called imapp.exe. This is the virus. It is send from a LinkedIn account in most cases.

Welcome to UPS Customer Services
RESPECTABLE,you @yourmail .com


Print out the invoice copy attached and collect the package at our department.

Best Regards , UPS .com Customer Services.

Copyright 2011 United Parcel Service of America, Inc. USPS TEAM, the Your USPS .us Customer Services brandmark, and the color brown are trademarks of United Parcel Service of America, Inc. All rights reserved.
Please do not reply directly to this e-mail. Your USPS .com Customer Services will not receive any reply message. For questions or comments, visit Contact UPS.
We understand the importance of privacy to our customers. For more information, please consult the USPS .us Customer Services Privacy Policy.
This communication contains proprietary information and may be confidential. If you are not the intended recipient, the reading, copying, disclosure or other use of the contents of this e-mail is strictly prohibited and you are instructed to please delete this e-mail immediately.

Tuesday, July 24, 2012

Paypal transfer confirmation. or Paypal has sent you a bank transfer. Part 2.

Same emails are going out as before, but now only with smaller amount. Do NOT click on the links in the mail. The websites are hacked. Seems that it is coming from the BANK OF AMERICA Link is going to : http://run19.superfastcashmachine.com/traninfo.html Website is already reported as spam.

Monday, July 23, 2012

Now on Facebook as well.

We are now on facebook as well.

Click on our link and like us, if you appreciate the work we do here ....



Your Ebay funds transfer confirmation.

Same fake post as the other! Do not click on the link. Unsafe.

Transaction ID 347424457512 Transaction Time : 7/23/2012 02:00 PDT

Your funds are now available

Dear info@yourmail.com,

The funds from this eBay payment are now available for use. Check your Transaction Details for more information. Buyer Camden Kane Buyer email ullamcorper.magna@condimentumegetvolutpat.edu

 Payment total 271,131.27 USD

Your Ebay confirmation of your transaction through Paypal.

If you receive below e-mail, then do NOT jump in the air from luck.
It is a fake email. 
The link is going to :
http:// wangyixin . wegang . com 

And has NOTHING to do with your paypal or e-bay.
Just another SCAM!

UPDATE: Page is blocked now. 

Date: 07/23/12 12:35:52
To: info@youremail.com
Subject: Your Ebay confirmation of your transaction through Paypal.

Transaction  ID 653545164627 Transaction Time : 7/23/2012 05:00 PDT

Your funds are now available

Dear info@youremail.com,
The funds from this eBay payment are now available for use. Check your Transaction Details for more information.

Buyer Adrian Howell Porter Bowers
Buyer email lorem.auctor.quis@risusNunc.edu
Payment total 588,595.58 USD

Thursday, July 19, 2012

ING Mobiel Informatie (fake)

If you receive below e-mail then do not click on the link. It is going to a hacked website:

http://www. innertalk. com. my/wp-content/ cache/ ingm.nl/ Zakelijk.html

Welkom bij de ING nieuws update online. Vanwege veiligheidsredenen dient u uw rekening zo snel mogelijk te updaten.

Indien u uw rekening niet update, dan zal Uw toegang tot het internetbankieren op [ING Bank] om veiligheidsredenen

Update uw rekening dus snel en veilig door op de onderstaande link te klikken en uw Telefoonnummer toe te voegen als bevestiging van de update.
Inloggen Mijn ING

Tuesday, July 17, 2012

yes hey, craigs list

Spam e-mail on craigslist.
If you receive below e-mail then do NOT click on the link. It is going to :

chunchula . com and that is going to: trustedsurvey s.com

People get just paid for this. So they send it to a lot of email addresses so they get paid.


I need a couple people here in town to help me finish some extra work online that I need completed. The work is pretty easy, and the hours are very flexible. >Details are right here.<  (Here was the link!)

Thanks for your time

Sent from my iPhone

Betreft Uw Nieuwe abn amro internet bankieren

If you receive below email, then do NOT click on the link. It is a fake mail.If you want to be sure, then just go to the website from ABN AMRO N.V.(Hack is working with a file on :


in image directory: abn.php

Website owner is informed!

Update: Owner website remove files.
Geachte ABN-Amro klant,Welkom op onze vernieuwde site voor het internetbankieren. In de afgelopen week zijn transacties die zijn gedaan via geld- en betaalautomaten, vertraagd verwerkt in uw bij- en afschrijvingen.

Web Colleagues Work-at-Home Typing Program SPAM

If you receive below e-mail the you are invited to this website:

http://www.webcolleagues.com / ?id= bushtamante

The person will make money from it.
Cost are $47

Unwanted mail.
Did you get it? Let us know.

Monday, July 9, 2012

Malware Monday (7/9/2012)

There is a scam going on where spam is send so that your dns is changed.
When this is done then you will not go to a website you type in, but to websites that the hackers want you to visit. To check if you are hacked, check this website from the FBI.
Do it not elsewhere! That can also be a scam, and you can fall into a other kind of hack / scam.


Sunday, July 8, 2012

Responses on craigslist to get your e-mail

When you get responses like :

Is it still available?

Your title in a return email ?

Then do not response on it. It is just a way to get your email so they can send you spam.

One of the domain names used for this is :


Created 15 hours ago! (7/8/2012) Registered with dynadot.com

You can send a complain to:

Tuesday, July 3, 2012

Will "remove" really remove you from a mailing list?

Sometimes you get a e-mail with at the and a statement that you can get your e-mail removed of there mailing list by simple reply on the e-mail with "remove" in the subject.
What most people not know is that this is a perfect way for the person sending this e-mail in the first place to check if the e-mail address that they have is a "life" e-mail address.

How can you see that this is NOT a way to find out that your e-mail address is life or not?

When the e-mail is send from a hotmail , gmail or yahoo mail address, you have a big change that this is just a way to check if your e-mail addresss is life. So, just delete the e-mail and report it with the hotmail, gmail or yahoo account as spammer.

Keep your e-mail clean.

Toyota Lotery Promotion

If you receive below e-mail the do not response on it. Fake!
Customer Service Department

Dear Email Owner,

This is to inform you that you have won a sum of US$ 2,500,000.00 United States Dollars Only for the email user this 2012 Prize promotion which is organized by TOYOTA ONLINE CYBER LOTTERY THAILAND, Participants were selected through a computer ballot system drawn from 2,500,000 email addresses of individuals and companies from all part of the world as part of our electronic business Promotions Program. Among the (2,500,000.00) that subscribed to MICROSOFT, HOTMAIL, YAHOO, GMAIL Companies domains and few from other e-mails providers, 12 people are selected yearly to benefit from this promotion and you are one of the Selected Winners this year 2012.

Your email address has therefore been approved to claim a total sum of (US$ 2,500,000.00 UNITED STATES DOLLARS) in cash with the following reference numbers:

Ticket Number 4500542188(TMPWAYZ20051).
Serial Number MH4710019
Reference Number: FLS433/453L/GMSA.
Bonus Number VXT55
INSURANCE Number is: WIF0050770

Note: your e-mail address qualified for the draw, as a result of your visiting various websites we are running the e-business promotions for. You/Your Company email address, attached to ticket number 4500542188(TMPWAYZ20051), with serial number MH4710019 drew the Reference Number: FLS433/453L/GMSA. And Bonus number 1 and consequently YOU HAVE won in the Second Category. To begin your claim:-


1. Your Full Names:
2. Your Country:
3. Telephone Number:
4. Occupation:
5. Age:

For further clarification please call and send mail to your claim agent (Dr. Wong Lee) in order to process your claims with our payee bank:-

Dr. Wong Lee OR Mr. Paul Wilton

Claim Agent,
Toyota Lottery Thailand Branch.
Email: coordinatordepartment@yahoo.com.hk
Phone Contact : +66890017408

WARNING: Keep your winning informations confidential until your claims are processed and your fund remitted to you in your bank account. This is part of our precautionary measure to avoid double claiming and unwarranted abuse of this program by some unscrupulous elements.

Congratulations once again,

Yours faithfully,