SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD

SORT

ID

From

Subject

Date

Your email is part of the hitwheese spoof attack. Until your email, we have never heard of your site before. Gobi.com.sg was hit with hitwheeste ddos attack meant to overwhelm our email server which is a repository for our cake orders and gmail correspondences. For more on what we have found out on the attack http://zifsoft.com/2018/04/28/hitwheeste-ddos/ We would appreciate if you could help us look into this. Your email was triggered by a fake registration. Please check your forms. Hitwheeste ddos attack starts with unsecured forms (ours was ninja forms) and unchallenged comments. you should take steps to secure them ----------------------------------------------------------- ---original email header--- [email address removed] [email address removed] [email address removed] Received: from smtplqs-out43.aruba.it (smtplqs-out43.aruba.it [62.149.158.83]) by homiemail-mx26.g.dreamhost.com (Postfix) with ESMTP id A39082004912F [email address removed] Tue, 15 May 2018 22:59:39 -0700 (PDT) Received: from webxc31s04.ad.aruba.it ([192.168.143.104]) by smartcmd02.ad.aruba.it with bizsmtp id mtze1x0062FMWMs01tze8y; Wed, 16 May 2018 07:59:38 +0200 Received: (qmail 24184 invoked by uid 11102988); 16 May 2018 05:59:38 -0000 [email address removed] Subject: Account Details for WarBradsCQ at CARTELLA MEDICINA ESTETICA - SOFTWARE PER GESTIONE CARTELLA CLINICA MEDICINA E CHIRURGIA ESTETICA DA IPAD, IPHONE, COMPUTER, MAC X-PHP-Originating-Script: 11102988:phpmailer.php Date: Wed, 16 May 2018 07:59:38 +0200 [email address removed] [email address removed] X-Priority: 3 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aruba.it; s=a1; t=1526450378; bh=Up5IKPq80pjjHleUzyxJu9o6JgSiFCW7SILAXvtf44A=; h=To:Subject:Date:From:MIME-Version:Content-Type; b=hNDVNChNnnozxG3iVJH5/o0ohkTbVDx0VuKgRaTwYv1dWEdNynsGW9fRTJaEwRn9w FHMKy02frnZdS7rgUod4/q2EBqX+9jDqiKS42dBhiC1+QVF2SPZ/rMZ1+YtBdlv13n JlXUrfGvLazoBNRV6cgqZGZmzufhABv4Y/eUQ0WdVpHzjUGWLQoamDdn1TokSuKJdC yT0BfAr4I3/fzHpnz9wOFaHDz/imk4+eLqUFFuOP2EC8wxyfyjJJCdNl1cZNQzGa3k hmrf73ZElY3eAj0qPGlqUy25kAlJF3QLy13wQ2ZMB7XM2Nq5wmXuU94s4Rf4nfxPmJ F9+hwfy0ErIZw== ----------------------------------------------------------- Hello WarBradsCQ, Thank you for registering at CARTELLA MEDICINA ESTETICA - SOFTWARE PER GESTIONE CARTELLA CLINICA MEDICINA E CHIRURGIA ESTETICA DA IPAD, IPHONE, COMPUTER, MAC. Your account is created and must be activated before you can use it. To activate the account click on the following link or copy-paste it in your browser: http://www.softwaremedicinaestetica.it/index.php?option=com_users&task=registration.activate&token=86fbff569cb44d425352459b6595e120&lang=en After activation you may login to http://www.softwaremedicinaestetica.it/ using the following username and password: Username: WarBrads Password: a@kTni3s94J
#250407 - Sent May 16 2018 by mail@claudioplebani.com

1



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer