SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD


Scam email #250442 - Your user is part of the hitwheeste spoof design to spoof and sent us spam: Action Required to Activate Membership for indiasemiconductorforum -Semiconductor community

Email info

The email was sent on 2018-05-16 14:29:34 and appeared to be from dylankhoolim@gmail.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to dylankhoolim@gmail.com which was the scammer's actual email address.
It was probably sent from in Unknown, United Kingdom

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

Your email is part of the hitwheese spoof attack.
Until your email, I have never heard of your site before.
Gobi.com.sg was hit with hitwheeste ddos attack meant to overwhelm our email
server which is a repository for our cake orders and gmail correspondences.
For more on what we have found out on the attack
http://zifsoft.com/2018/04/28/hitwheeste-ddos/
We would appreciate if you could help us look into this. Your email was
triggered by a fake registration. Please check your forms.
Hitwheeste ddos attack starts with unsecured forms (ours was ninja forms)
and unchallenged comments. you should take steps to secure them
-----------------------------------------------------------
---original email header---
Delivered-To: dylankhoolim@gmail.com
Received: by 2002:ac8:1403:0:0:0:0:0 with SMTP id k3-v6csp6597506qtj;
Wed, 16 May 2018 01:43:16 -0700 (PDT)
X-Google-Smtp-Source:
AB8JxZrqA86X7ey/cgMKtMDmWLC+RWA4S08tj8zBO+QnE4KjccJl5iYjzD7yQJ11B5MiO/peSEgF
X-Received: by 2002:a9d:2fc8:: with SMTP id
b8-v6mr12867986otd.177.1526460196466;
Wed, 16 May 2018 01:43:16 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t26460196; cv=none;
d=google.com; s=arc-20160816;
bИaQXxF1IN7wchp3JmQUfkA77bFuNN3UznVPdpuSkoyMUO1QnwtHbk7WLFL5dqsF3H

AVk5R+0EPBGZexa+pqucZNG13SOFH7qrABJXMdErFiWBM7A4b/T/+kDHm6gTkucYoteB

W6rtEwbd/545OODotJ3B8iexxdS8BpJ0+69+uHvAQDg5yVDWWt4KbSoWJhTgOlUe42dA

uwXJu6Or6pPnkteBn0ch25dD5D8/MN8mM8W/YiEkqbaG80x0Sz6Ywm0RLpcD2t+GOaOf

AjpcMntWaxY+XASKkOuHSbPgPwcdiSsRoMZ2QIWb43hrwLFuGEtI1Xf5MlasbQPpgwt8
C2Bg=ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;
s=arc-20160816;
hЪte:content-transfer-encoding:mime-version:message-id
:auto-submitted:from:subject:to:arc-authentication-results;
bh?g15BbflK+kzF4CkksJIkuGV+zGwmA1++Xs/OyOmno=;
b=i1dFiSWizge1ayATzfpoVWCza6hTpOvcbY89bHxqO3d5GioClB7qv9FVdAE0vJzNPj

WcMx8+o1f0dItpA5OPg4SOsTqpFPoulbbhpi3K0KoXJUkseVGBz2CPyJEnAIorNzOE75

sUz+vFY5+KwEQnwtTxVvT/23uPmIzjZ6iSc3sVhlzb3NS9XU8U5/fXpKpz3nzNQRHzyp

R6eLoS1q2TfggFTbJVWKsWm6hjyYEJNHPdPCTluqCU3sfR7xFMszmeRCqMeMnn0GKXtp

8IDK+fiMtQDl9vOAsyLxhVFFFz9ZDLkFdt0wJIbj1KoSMy+qBwg2crN1w15QnJhDFzVF
KV7g=ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: best guess record for domain of
hostingi@hostingi.arvixevps.com designates 198.58.94.162 as permitted
sender) smtp.mailfrom=hostingi@hostingi.arvixevps.com
Return-Path: <hostingi@hostingi.arvixevps.com>
Received: from hostingi.arvixevps.com (hostingi.arvixevps.com.
[198.58.94.162])
by mx.google.com with ESMTPS id
97-v6si731676otr.120.2018.05.16.01.43.15
for <dylankhoolim@gmail.com>
(version=TLS1 cipher?S128-SHA bits8/128);
Wed, 16 May 2018 01:43:16 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of
hostingi@hostingi.arvixevps.com designates 198.58.94.162 as permitted
sender) client-ip8.58.94.162;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of
hostingi@hostingi.arvixevps.com designates 198.58.94.162 as permitted
sender) smtp.mailfrom=hostingi@hostingi.arvixevps.com
Received: from hostingi by hostingi.arvixevps.com with local (Exim 4.87)
(envelope-from <hostingi@hostingi.arvixevps.com>)
id 1fIs5k-0004Lo-8s
for dylankhoolim@gmail.com; Wed, 16 May 2018 01:47:24 -0700
To: dylankhoolim@gmail.com
Subject: Action Required to Activate Membership for indiasemiconductorforum
-Semiconductor community
From: "indiasemiconductorforum -Semiconductor community"
<info@indiasemiconductorforum.com>
Auto-Submitted: auto-generated
Message-ID: <20180516073237.047489dbb005@http://www.indiasemiconductorforum.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-Mailer: vBulletin Mail via PHP
Date: Wed, 16 May 2018 01:47:24 -0700
X-AntiAbuse: This header was added to track abuse, please include it with
any abuse report
X-AntiAbuse: Primary Hostname - hostingi.arvixevps.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [504 504] / [47 12]
X-AntiAbuse: Sender Address Domain - hostingi.arvixevps.com
X-Get-Message-Sender-Via: hostingi.arvixevps.com: authenticated_id:
hostingi/from_h
X-Authenticated-Sender: hostingi.arvixevps.com:
info@indiasemiconductorforum.com

-----------------------------------------------------------
Dear dreque,

Thank you for registering at the indiasemiconductorforum -Semiconductor
community. Before we can activate your account one last step must be taken
to complete your registration.

Please note - you must complete this last step to become a registered
member. You will only need to visit this URL once to activate your account.

To complete your registration, please visit this URL:
http://www.indiasemiconductorforum.com/register.php?a?t&u3422&iй8f852
a0efb58be7245d6b2266842e1a1374a80

**** Does The Above URL Not Work? ****
If the above URL does not work, please use your Web browser to go to:
http://www.indiasemiconductorforum.com/register.php?a=ver

Please be sure not to add extra spaces. You will need to type in your
username and activation number on the page that appears when you visit the
URL.

Your Username is: dreque
Your Activation ID is: e98f852a0efb58be7245d6b2266842e1a1374a80

If you are still having problems signing up please contact a member of our
support staff at info@indiasemiconductorforum.com

All the best,
indiasemiconductorforum -Semiconductor community


--------------------
To stop receiving this email, please visit this URL:
http://www.indiasemiconductorforum.com/register.php?doЮleteactivation&u
3422&iй8f852a0efb58be7245d6b2266842e1a1374a80

SpamAssassin Report (spam score: )





Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer