Click to go to homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD

Scam email #250442 - Your user is part of the hitwheeste spoof design to spoof and sent us spam: Action Required to Activate Membership for indiasemiconductorforum -Semiconductor community

Email info

The email was sent on 2018-05-16 14:29:34 and appeared to be from but this address could have been spoofed.
If you replied to this email, your reply would have been sent to which was the scammer's actual email address.
It was probably sent from in Unknown, United Kingdom

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

Your email is part of the hitwheese spoof attack.
Until your email, I have never heard of your site before. was hit with hitwheeste ddos attack meant to overwhelm our email
server which is a repository for our cake orders and gmail correspondences.
For more on what we have found out on the attack
We would appreciate if you could help us look into this. Your email was
triggered by a fake registration. Please check your forms.
Hitwheeste ddos attack starts with unsecured forms (ours was ninja forms)
and unchallenged comments. you should take steps to secure them
---original email header---
Received: by 2002:ac8:1403:0:0:0:0:0 with SMTP id k3-v6csp6597506qtj;
Wed, 16 May 2018 01:43:16 -0700 (PDT)
X-Received: by 2002:a9d:2fc8:: with SMTP id
Wed, 16 May 2018 01:43:16 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t26460196; cv=none;; s=arc-20160816;




C2Bg=ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;;




KV7g=ARC-Authentication-Results: i=1;;
spf=pass ( best guess record for domain of designates as permitted
Return-Path: <>
Received: from (
by with ESMTPS id
for <>
(version=TLS1 cipher?S128-SHA bits8/128);
Wed, 16 May 2018 01:43:16 -0700 (PDT)
Received-SPF: pass ( best guess record for domain of designates as permitted
sender) client-ip8.58.94.162;
spf=pass ( best guess record for domain of designates as permitted
Received: from hostingi by with local (Exim 4.87)
(envelope-from <>)
id 1fIs5k-0004Lo-8s
for; Wed, 16 May 2018 01:47:24 -0700
Subject: Action Required to Activate Membership for indiasemiconductorforum
-Semiconductor community
From: "indiasemiconductorforum -Semiconductor community"
Auto-Submitted: auto-generated
Message-ID: <20180516073237.047489dbb005@>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-Mailer: vBulletin Mail via PHP
Date: Wed, 16 May 2018 01:47:24 -0700
X-AntiAbuse: This header was added to track abuse, please include it with
any abuse report
X-AntiAbuse: Primary Hostname -
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [504 504] / [47 12]
X-AntiAbuse: Sender Address Domain -
X-Get-Message-Sender-Via: authenticated_id:

Dear dreque,

Thank you for registering at the indiasemiconductorforum -Semiconductor
community. Before we can activate your account one last step must be taken
to complete your registration.

Please note - you must complete this last step to become a registered
member. You will only need to visit this URL once to activate your account.

To complete your registration, please visit this URL:й8f852

**** Does The Above URL Not Work? ****
If the above URL does not work, please use your Web browser to go to:

Please be sure not to add extra spaces. You will need to type in your
username and activation number on the page that appears when you visit the

Your Username is: dreque
Your Activation ID is: e98f852a0efb58be7245d6b2266842e1a1374a80

If you are still having problems signing up please contact a member of our
support staff at

All the best,
indiasemiconductorforum -Semiconductor community

To stop receiving this email, please visit this URL:Юleteactivation&u

SpamAssassin Report (spam score: )

Please be careful with the links in the above email - strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)


Where the scam probably came from

theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer