RE: [Declude.JunkMail] OT: Fraud Alert
Filter file for BODY your-instant-credit-reporter.org without the quotes. Can some one post the full headers? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of J Porter Sent: Wednesday, June 18, 2003 10:03 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] OT: Fraud Alert Yep... I got one this PM. What do you think is the best way to block it?? ~Joe - Original Message - From: Dan Patnode [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 11:50 PM Subject: [Declude.JunkMail] OT: Fraud Alert Watch out for this one, the underlying code looks like: href=http://www.your-instant-credit-reporter.org/fraud.html;FONT face=Arial size=2BestBuy.com/fraud_department.html/FONT/A/DIV/BODY/HTML The subject reads: BestBuy Order #1095619. Fraud Alert. The message reads: Dear customer, Recently we have received an order made by using your personal credit card information. This order was made online at our official BestBuy website on 06/19/2003. Our Fraud Department has some suspicions regarding this order and we need you to visit a special Fraud Department page at our web store where you can confirm or decline this transaction by providing us with the correct information. This e-mail address has been taken from National Credit Bureau. Click the link below to visit a special Fraud Department page to resolve the cause of the problem. BestBuy.com/fraud_department.html -- ORDER# 1095619 - STATUS: SUSPENDED ITEMS PURCHASED -- Item No: 73890 CDA-9815 In-Dash CD Player/Ai-Changer Controller Price: $387.65 Qty: 2 Total: $775.3 The order listed above has not yet been processed. The reason for the delay in processing your order is: - UNVERIFIED SHIPPING ADDRESS - Information provided: Shipping 41 WINHAM ST Staten Island, NY 10306 United States phone# 206-337-9843 In our effort to deter fraudulent transactions, we need your help in providing us with the correct information. Your prompt response is needed to avoid any unauthorized charges to your credit card. -- Click the link below to visit a special Fraud Department page to resolve the cause of the problem. BestBuy.com/fraud_department.html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses at HNB.com] --- [This E-mail scanned for viruses at HNB.com] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Fraud Alert
Ask and ye shall receive... whether you want it or not.. ) ~Header~ Received: from attbi.com [24.131.138.246] by mail.hnb.com (SMTPD32-7.03) id AE3F48EA013A; Wed, 18 Jun 2003 16:48:47 -0500 Received: from h00036d13b375.ne.client2.attbi.com (h00036d13b375.ne.client2.attbi.com [24.131.138.246]) by attbi.com (8.12.5/8.12.5) with ESMTP id itecdf78756 for [EMAIL PROTECTED]; Wed, 18 Jun 2003 18:44:48 -0400 (EST) Message-ID: [EMAIL PROTECTED] From: Arvind Fwpreg [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: BestBuy Order #1095619. Fraud Alert. Date: Wed, 18 Jun 2003 18:44:46 -0400 (EST) MIME-Version: 1.0 Content-Type: multipart/related; type=multipart/alternative; boundary==_NextPart_000_000F_01C33095.9F84B280 X-Priority: 1 X-MSMail-Priority: High X-Mailer: Microsoft Outlook Express 6.00.2720.3000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.1300 X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-Declude-Sender: [EMAIL PROTECTED] [24.131.138.246] X-Note: This E-mail was scanned at HNB.COM ISP for spam. X-Spam-Tests-Failed: NOPOSTMASTER X-RCPT-TO: [EMAIL PROTECTED] Status: U X-UIDL: 339081275 ~~ - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, June 19, 2003 1:10 AM Subject: RE: [Declude.JunkMail] OT: Fraud Alert Filter file for BODY your-instant-credit-reporter.org without the quotes. Can some one post the full headers? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com --- [This E-mail scanned for viruses at HNB.com] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Fraud Alert
I eventually got 4 copies from 3 IPs, 24.x.x.x plus: 68.82.235.252 81.202.170.237 No relaying. Interestingly, 3 of them got caught. Dan On Wednesday, June 18, 2003 23:24, J Porter [EMAIL PROTECTED] wrote: Ask and ye shall receive... whether you want it or not.. ) ~Header~ Received: from attbi.com [24.131.138.246] by mail.hnb.com (SMTPD32-7.03) id AE3F48EA013A; Wed, 18 Jun 2003 16:48:47 -0500 Received: from h00036d13b375.ne.client2.attbi.com (h00036d13b375.ne.client2.attbi.com [24.131.138.246]) by attbi.com (8.12.5/8.12.5) with ESMTP id itecdf78756 for [EMAIL PROTECTED]; Wed, 18 Jun 2003 18:44:48 -0400 (EST) Message-ID: [EMAIL PROTECTED] From: Arvind Fwpreg [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: BestBuy Order #1095619. Fraud Alert. Date: Wed, 18 Jun 2003 18:44:46 -0400 (EST) MIME-Version: 1.0 Content-Type: multipart/related; type=multipart/alternative; boundary==_NextPart_000_000F_01C33095.9F84B280 X-Priority: 1 X-MSMail-Priority: High X-Mailer: Microsoft Outlook Express 6.00.2720.3000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.1300 X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-Declude-Sender: [EMAIL PROTECTED] [24.131.138.246] X-Note: This E-mail was scanned at HNB.COM ISP for spam. X-Spam-Tests-Failed: NOPOSTMASTER X-RCPT-TO: [EMAIL PROTECTED] Status: U X-UIDL: 339081275 ~~ - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, June 19, 2003 1:10 AM Subject: RE: [Declude.JunkMail] OT: Fraud Alert Filter file for BODY your-instant-credit-reporter.org without the quotes. Can some one post the full headers? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com --- [This E-mail scanned for viruses at HNB.com] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Fraud Alert
Yep... I got one this PM. What do you think is the best way to block it?? ~Joe - Original Message - From: Dan Patnode [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 11:50 PM Subject: [Declude.JunkMail] OT: Fraud Alert Watch out for this one, the underlying code looks like: href=http://www.your-instant-credit-reporter.org/fraud.html;FONT face=Arial size=2BestBuy.com/fraud_department.html/FONT/A/DIV/BODY/HTML The subject reads: BestBuy Order #1095619. Fraud Alert. The message reads: Dear customer, Recently we have received an order made by using your personal credit card information. This order was made online at our official BestBuy website on 06/19/2003. Our Fraud Department has some suspicions regarding this order and we need you to visit a special Fraud Department page at our web store where you can confirm or decline this transaction by providing us with the correct information. This e-mail address has been taken from National Credit Bureau. Click the link below to visit a special Fraud Department page to resolve the cause of the problem. BestBuy.com/fraud_department.html -- ORDER# 1095619 - STATUS: SUSPENDED ITEMS PURCHASED -- Item No: 73890 CDA-9815 In-Dash CD Player/Ai-Changer Controller Price: $387.65 Qty: 2 Total: $775.3 The order listed above has not yet been processed. The reason for the delay in processing your order is: - UNVERIFIED SHIPPING ADDRESS - Information provided: Shipping 41 WINHAM ST Staten Island, NY 10306 United States phone# 206-337-9843 In our effort to deter fraudulent transactions, we need your help in providing us with the correct information. Your prompt response is needed to avoid any unauthorized charges to your credit card. -- Click the link below to visit a special Fraud Department page to resolve the cause of the problem. BestBuy.com/fraud_department.html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses at HNB.com] --- [This E-mail scanned for viruses at HNB.com] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Fraud Alert
Hey that one looks familiar.. I got 4 copies of that one today on different e-mail accounts that I NEVER used (however posted on webpages). Funny thing is that each and everyone of these are the same purchased item with same address.. I called BestBuy about it earlier today tried to get them to post a dang warning on their website about this fraud. Only way to fight misinformation such as this one is with information. Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] The Family Entertainment Network http://www.fament.com Phone : 620-231- Fax : 620-231-4066 - Your Full Time Professionals - Mikrotik OEM dealer - Online Store http://www.fament.com/catalog/ -- DP Watch out for this one, the underlying code looks like: DP href=http://www.your-instant-credit-reporter.org/fraud.html;FONT face=Arial size=2BestBuy.com/fraud_department.html/FONT/A/DIV/BODY/HTML DP The subject reads: DP BestBuy Order #1095619. Fraud Alert. DP The message reads: DP Dear customer, DP DP Recently we have received an order made by using your personal credit card information. DP This order was made online at our official BestBuy website on 06/19/2003. DP Our Fraud Department has some suspicions regarding this order and we need you to visit a special Fraud Department page at our web store where you can confirm or decline this transaction by DP providing us with the correct information. DP This e-mail address has been taken from National Credit Bureau. DP DP Click the link below to visit a special Fraud Department page to resolve the cause of the problem. DP BestBuy.com/fraud_department.html DP -- DP ORDER# 1095619 - STATUS: SUSPENDED DP ITEMS PURCHASED DP -- DP Item No: 73890 DP CDA-9815 In-Dash CD Player/Ai-Changer Controller DP Price: $387.65 Qty: 2 Total: $775.3 DP DP The order listed above has not yet been processed. DP The reason for the delay in processing your order is: DP DP - UNVERIFIED SHIPPING ADDRESS DP DP - Information provided: DP Shipping DP 41 WINHAM ST DP Staten Island, NY 10306 DP United States DP phone# 206-337-9843 DP DP In our effort to deter fraudulent transactions, we need your help in providing us with the correct information. Your prompt response is needed to avoid any unauthorized charges to your credit DP card. DP DP -- DP Click the link below to visit a special Fraud Department page to resolve the cause of the problem. DP BestBuy.com/fraud_department.html DP --- DP [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] DP --- DP This E-mail came from the Declude.JunkMail mailing list. To DP unsubscribe, just send an E-mail to [EMAIL PROTECTED], and DP type unsubscribe Declude.JunkMail. The archives can be found DP at http://www.mail-archive.com. DP --- DP [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
