Thursday, April 16, 2015

Sospecha de fraude de correo electrónico fue directo a correo no deseado - No se cuenta con Caja Rural

From avisos@cajarural.es Wed Apr 15 13:54:47 2015
X-Apparently-To: itccommunications@yahoo.es; Wed, 15 Apr 2015 21:45:18 +0000
Return-Path:
X-YahooFilteredBulk: 109.235.70.89
Received-SPF: softfail (transitioning domain of google.com does not designate 109.235.70.89 as permitted sender)
X-YMailISG: CUgpf5EWLDvDOMrS.fOFB6Ur.XDbqR22s.8WlJ.h55U1YbRC
 NiyvVizomyK9qsQQs5QbcqG5MKVsbzlECDi4u0zHjBw_1WJwuT_XE_cxPNsT
 _NGhowqlgXHsO.ARcJhydRlaumLzuFjidv3czVCgpk4mIsnPg9MqQe7jUWvd
 L5hrITwzaO7qMV4Djy3DFEJUSElUkMWGqxgkhabVDNaIrq.pYMfkx08LTg.q
 0WEPVgHnMDlgQm9YVva9SqCB84UTz43H_X8tNYKMSIurfAjsc5Zk8tr4fqE3
 3xdo8cb1R1SQGFT.kHEoDELOugMrV_H99Jt3zDudrMe3MiJZvR7pa_DXLylA
 noudf4WdZPVULZq_Y4o5.aMCSeHXMzHJR8BDHi.5xYTjkk1_bJ9GjkolVlRP
 F_xfz0pmkiXp70.BcDLpuIAvLijTdNMHCEv60cLnLSdBJQmMdo9Hm_fA9_Q3
 hNn8eqbyqoYSP0xPEUZsABv9FS2pYtHQDY34o0ntOK88vezdJ93bbEexCWtK
 DJVt1.DIJbKkU7UYXuCQenR72T_Ob98Nfrn522hVhCVQFjsqsBL8IQAeENda
 6.NMuUqoEHgDvYAeAt4kcmM2Ng3nQONZEwaHbqY6yyLgxdS.RngJ9PnJn.EA
 ZaUkXy9V64.NiRRj0dhuVYGeS9Ka4qFJi9fclENv4aihcoVLrj4UncNQV2b3
 Z8YLuIl8ibdS_n77IkHAMNtzW91ZTw9PuGubKW2U2vrmLnP.456jaWOVCvFW
 GTxlhSPiQeIGa5F1_7lmMnenUmunGHg7q5UUbik296kDjdp5yePgzaPrPvFk
 OxvQ6OT4QRMIS.8ak6NO4FrAhWviDjXraBEsV_X7Fd11557XcaVkB8v71W9w
 w9MGFkL0r.k2Z.xxHFkQEdCiqBSKdGUVfLcNE1722XaZWOUoWx1GLyuMSwsl
 aWZoR2JXW9FmzimD8VCbfqNf41KSakvHlhOghCWYP8kdmvL9JeLtBJ1TiLmn
 4BbF1M3erjgOrQFvvSTaN52Pz5A52KaTTUA6gbveXE9nrEYkavppAzVQQ19P
 EF.mlWoveP7Ldu8kcXd9QX6yyxlgsXJda603REPzO3iQmuSc90YoUfIZJBYR
 g2KidF6ghILD5FjiBAMW.iywipeiR.Hl3aEcy.9tEGJW5mK2j40jJTgUzfXT
 VNqqbmlKWmCJW3o6XK76vZThOBm2.1PNxMdxGdPzb_7EcM6ZAvPx9_ySc6Fi
 fRiu0C4iq736XPDxGbsGoGCt5FXm4UGoutbfcgd07gAGHb3U1K6aDB..FXph
 cLudxhhDvJfONWTQd4T7UBkoxeghfKuOtJmpqIIYiwRbhRsTzh_oqqakhz0q
 Y.B2Es3eKZRgIcd2RDW6zlKQO5N.zGN6JW4MSMsGcZQ_J3e_V2NHVLN4Ez_Y
 RNCE1lhHqiCEbxJff2BeFEI3T9B74rNlYU8pYO2oREmz6MZRshPAiwoSEkHp
 jqIMEKgHwriJvIjpUeaqr8I4Za7k7sRfxGw9zhlTXeiXP_L6.QTrkSC.oRhY
 oarh7BsOSjY.cIbiESkbGcMvDiZhsoCs3mbeJ3QuaDc8nCLzA_FE_CMWfHXW
 npWYRR7zJg--
X-Originating-IP: [109.235.70.89]
Authentication-Results: mta1003.mail.ir2.yahoo.com  from=cajarural.es; domainkeys=neutral (no sig);  from=cajarural.es; dkim=neutral (no sig)
Received: from 127.0.0.1  (EHLO smtp.sritis.net) (109.235.70.89)
  by mta1003.mail.ir2.yahoo.com with SMTPS; Wed, 15 Apr 2015 21:45:18 +0000
Received: from srv10.sritis.net (srv10.sritis.net [185.65.200.226])
    by smtp.sritis.net (8.13.8/8.13.8) with ESMTP id t3FDsllY002544
    (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
    for ; Wed, 15 Apr 2015 16:54:47 +0300
Received: from localhost (78.208.209.62.cust-rfservis.sigmasoft.cz [62.209.208.78] (may be forged))
    (authenticated bits=0)
    by srv10.sritis.net (8.13.8/8.13.8) with ESMTP id t3FDslZd022987
    for ; Wed, 15 Apr 2015 16:54:47 +0300
To: itccommunications@yahoo.es
From: avisos@cajarural.es
Reply-To: no_responda@cajarural.es
Subject: URGENTE (cambios en su cuenta de ruralvia.com)
Date: Wed, 15 Apr 2015 15:54:47 +0200
X-Priority: 1 (Highest)
Message-ID: <20150415_135447_091244 .code="" google.com="">
X-Mailer: Personal
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7BIT
X-Virus-Scanned: clamav-milter 0.97.7 at srv10.sritis.net
X-Virus-Status: Clean
Content-Length: 923



==============================================================
CAJA RURAL - 2015 (ruralvia.com) - info@qualitycarpas.com - Urgente (cambios en su cuenta).
==============================================================

Hubo un error en el ultimo acceso a su cuenta online.

El asunto requiere su atención inmediata.
En caso contrario, su cuenta puede quedar suspendida,
hasta que se dirige a una de nuestras oficinas.

==============================================================
Pulsa sobre el enlace para acceder a su cuenta,
o bien copia y pega la siguiente dirección en la barra de su navegador:
==============================================================
http://cajarural.es.drwelby.net/ruralvia.com/incidencias?id=DEWFBANI
==============================================================
Copyright (C) CAJA RURAL 2015 - Todos los derechos reservados
==============================================================

Wednesday, January 21, 2015

RIP Dirke

Comments:

You are on page 1 of 20, other pages: [1] 2 3 4 17 18 19 20
2007-06-14, 00:53:18   (updated: )
[hidden] from Netherlands  


This image was also posted here:
Dating scammer Natalya from Kolpino, Russia



Keywords: fake scammer ID
2007-06-17, 13:49:52
His sufferings:

He was scammed 2520 Euro by this Boris
http://www.delphifaq.com/faq/russian_marriage_scams/f1892.shtml
Name: Irina Prigunova


Email: foruuui@yahoo.com


Address:
Petrova 56-23
Yaranck,Russia


Other Comments:
Does anybody know this one????
Mind you: the visa is false, ofcourse! And Irina is definitely not the woman in the picture!
Lost his sister

http://www.delphifaq.com/faq/russian_marriage_scams/f2357.shtml?p=15#68221

He then lost his use of a leg in a traffic accident, decided against
amputation despite the pain he had to endure; Then lost his job, his
home; His government assistance delayed due to bureaucratic processing
difficulties; He was hoping to receive pension after turning 55,which
was about the time of last Xmas...

Good Morning all.

Cremation is today 22 January 2015

Dirk was scammed by Prigunova; He started many threads,eventually
adopting the Osinniki thread.

It has been requested locking these 2 threads, all dynamic shtml and static htm
pages. If late tributes arrive, they will be able to use any of his
other threads.
(by a member of delphifag.com)

Irina Prigunova thread
http://www.delphifaq.com/faq/russian_marriage_scams/f1892.shtml?p=19#274873

Natalya from Osinniki thread
http://www.delphifaq.com/faq/russian_marriage_scams/f1326.shtml?p=838#275966

Friday, January 2, 2015

Inbox - spam/scam attempt - Subject NEW JOB OFFER (even though marked as spam Yahoo allowed it into inbox 3rd time)

From xxxxxx@yahoo.es Fri Jan  2 23:29:01 2015
X-Apparently-To: xxxxxxx@yahoo.es; Fri, 02 Jan 2015 16:46:04 +0000
Return-Path:
X-YahooFilteredBulk: 113.177.66.201
Received-SPF: none (domain of yahoo.es does not designate permitted sender hosts)
X-YMailISG: ULdQ87oWLDuNIX1xsM1FAaug5GqIv4zBEgufUpYT8RpKfhR5
 uFtFZq2BGvsGEnoyOcWgvk4pDMERDnfONY.ORDjexZuafLz2cRuK8qXgaGdo
 YXEDv2R.N9Y4_plgp_ir1EOUvxQlaxj1U5Ae07d987RweX73zRG8kIpVCESa
 vO9mjvXcV5AEIUiEeJyHe.clekxITWqVyQNzQH5DJ5vSTHVDhMNsiuJqrBiY
 RNujPwojwn_C8AwRPwczDTgvFTmOoB6VilXuN6s4qAvm36NmNqAYyRud0_lv
 RpSZpwmJIAR.QjIPt9naoWukf9LwpxfEhGxebsrLxjhySvMGyGX_GAlHeVjm
 ilxbYo5jIjAYcjLaBWJlnj9uo_PLQt4ErwkQqrbkLj2bkj7zT2uSp9PEZGpH
 5Ps0r9LviGCfDtrXDIGCre7mVpZMGXQUvcOpjqQb.vCMizI.cHau.453DEjt
 xy5Fag_F5rmvLLnxneW0A4hc.3KFdhDp1Qq_5rtAE37MCBlbTENy_89uEu3O
 rP_oxHEme5mlpQUuWaIErWEdppN450NOLRzindGoIfNw1l2rBr89wFBw4Weu
 JqMseWx_ui7T2tRLw73du9qHRisVN3zcgbJvUormhsT9sHrJgWt2xocbjCEm
 c1xgExdSa6wFPy.YaniVvqin30YP6dpiCJf.kvushQIKaow8pcOIK3TLgRzT
 zt8PGk4Tm0B692F1Sybbr7vpP4nhiVdQP7.ct2SDeQhl4Ky006nim.ihw_mi
 pp_8nmQ.aQEdnD5s6DFcrJOLlTHfSj1RkJLMlz0ByzBFlQytnLn7Jp1Qvee9
 bgenx429Dk1vxyBlKKyF8MaH0B2A5.JzD0A.xE1WGQ7vJ60OYPtYj6iMoFxJ
 OEhafKf_YptrGcdkJ14PyNCvydm0vxCeZWhcH0Ky63ydtifDxW_AyZESH3kr
 ihBQGT3l79WaBcTSSUfIAMjdrxV6gGGbwEMtQ1uPVCHkqVbRzFf.39MM0geU
 qlZrc.Vt3s6LZTOEBb9hC1L7LajG0uDHJUT_QodLJD6LiNGUzCFt1aczkjHC
 oHNcO1dcEYgjqSDVJUYQbWd1k5KNvBL434LkaDjvrR8eSp2e0hq.r8myaWBZ
 H0QJvV6mKLyJd9eEtjeLjXCPbYwHHqOfc0lFQsxdY0V1Hdrz6QkEQPf6kPFN
 kfjFNNd4SBskrPYkehDilmlUpCYZS8gfpl2GyXUycccjdjTQjCpVfmJRt_9i
 ul8SMplAFk3z1WojxMqZCL_C2omf5O.3xiGaTD50IkFlS21W73NBfV3iS4qC
 AEAvPZ0KcLWJbDKA43J60UgxsXT9NjKjd2c-
X-Originating-IP: [113.177.66.201]
Authentication-Results: mta1108.mail.ir2.yahoo.com  from=yahoo.es; domainkeys=neutral (no sig);  from=yahoo.es; dkim=neutral (no sig)
Received: from 127.0.0.1  (EHLO localhost) (113.177.66.201)
  by mta1108.mail.ir2.yahoo.com with SMTP; Fri, 02 Jan 2015 16:46:03 +0000
Message-ID: <003701d026e6 cbe1a0="" kcmivdyv="">
From:
To:
Subject: New job offer
Date: 3 Jan 2015 05:29:01 +0600
MIME-Version: 1.0
Content-Type: text/plain;
    charset="cp-850"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.4898
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.4898
Content-Length: 567

De: "xxxxxx@yahoo.es" <xxxxxx@yahoo.es>
Para:
xxxxxx@yahoo.es
Enviado: Sábado 3 de enero de 2015 0:29
Asunto: New job offer

Good day!

We considered your resume to be very attractive and we thought the vacant position in our company could be interesting for you.

We cooperate with different countries and currently we have many clients in the world.
Part-time and full-time employment are both currently important.
We offer a flat wage from $1500 up to $5000 per month.

The job offers a good salary so, interested candidates please registration on the our site: www.binarysmoney.com

Attention! Accept applications only on this and next week.

Respectively submitted
Personnel department


  1. Dynamoo's Blog: binarysmoney.com / clickmoneys.com ...

    blog.dynamoo.com/2015/01/binarysmoneycom-clickmoneyscom.html
    6 hours ago - Spamvertised sites seen so far are binarysmoney.com, clickmoneys.com and thinkedmoney.com, all multihomed on the following IPs:
  2. Report for binarysmoney.com | Norton Safe Web

    https://safeweb.norton.com/report/show_mobile?...binarysmoney.com
    Norton Safe Web has analyzed binarysmoney.com for safety and security problems. Click now to view Norton Safeweb's rating for binarysmoney.com.
  3. Community reviews of binarysmoney.com | Norton Safe Web

    https://safeweb.norton.com/reviews?url=binarysmoney.com
    Reviews of binarysmoney.com from the Norton Safeweb community. Norton Safeweb is a reputation services that scans websites and reports whether they are ...
  4. thinkedmoney.com clickmoneys.com and binarysmoney ...

    sanesecurity.blogspot.com/.../thinkedmoneycom-clickmoneyscom-and.ht...
    5 hours ago - The job scam emails continue to come in, binarysmoney.com being the current one. So far we've seen... thinkedmoney.com clickmoneys.com
  5. Tres páginas para ganar dinero fácil que sirven para llenar ...

    www.redeszone.net/.../tres-paginas-para-ganar-dinero-...Translate this page
    37 mins ago - ... en un problema. binarysmoney.com, clickmoneys.com y thinkedmoney.com son tres de las páginas que más actividad han mostrado durante ...
  6. Activity Stream - Safer-Networking Forums

    forums.spybot.info/activity.php
    FYI... binarysmoney .com / clickmoneys .com / thinkedmoney .com "job" SPAM - http://blog.dynamoo.com/2015/01/binarysmoneycom-clickmoneyscom.html.
  7. Open Source RSS

    theosintrsslist.blogspot.com/
    Feb 20, 2014 - binarysmoney.com / clickmoneys.com / thinkedmoney.com "job" spam - I've been plagued with these for the past few days: Date: 2 January ...