Spammers blog postings

Spammers Postings

Earliest: February 20, 2004Latest: October 1, 2017Total: 17

October 1, 2017

G-Shock Car Shock Promotion Update

My encounter with the Casio Promotion scammer came to an abrupt end on Wednesday. No shots were fired, no prisoners taken.

Chat Log

I put up the entire chat log as well as the email conversations on a special page (It?s worthy of a separate page). I hope that people find it entertaining and educational on how a scammer was persistent on getting me to send the money.

My favorite exchange came on Tuesday afternoon. When I was ?discouraged? that they didn?t tell me that it costs money to send money via Western Union:

Scamer Chat

How it all ended

On Wednesday morning, xx hours after this whole ordeal started, I was out of excuses and decided to end it with a simple email:

From: blog@cryan.com
Date: Wed, September 27, 2017 12:37 pm
To: "Sierra Shelley"

Thank you for letting us know about this opportunity. We are going to pass on this.

Was it Going to be the End?

I was certain that I would get a reply requesting to send back the full amount. As that would be a natural response if this was a legitimate opportunity.

No additional communication was made.

I wonder if they moved on or if the communication line was cut off because the scam was running too long and they were about to get caught.

Guess I'll just hang up the check on the virtual wall and thank them for six days of entertainment.

The Check Frame

Casio Confirmation

Before sending them an email, I did reach out to Casio and asked them if they were running a car promotion. You never know. They replied with the following:

Thank you for contacting Casio I'm sorry for the inconvenience but yes this is a scam. Casio is aware and currently investigating. A notice is being drafted and will be posted on Casio.com and G-Shock.com shortly. We recommend that you do not click on any links and delete any messages associated with this offer. Thank you for contacting Casio and should you have any questions or concerns please feel free to contact us again.

Five Lessons Learned

If you're unsure about an offer that seemed too good to be true, as the company that is "sponsoring" the promotion. A simple email or phone call can help alert the company that someone is abusing their brand.

If anyone sends you a check and ask you to cash it and they perform some action - which involves you moving money, it's a scam.

Scammers will use scare tactics to get you to send them the money.

They will make it seem as legit as possible - except be very short in email replies. In communications, they will always be focus on the financial aspect and not the actual activity.

Western Union has an alert on top of their send money form. It's good advice. Hopefully, service workers at the store will ask follow up questions to put a sense of the reality of your transaction.

July 23, 2017

Government Grant Scam

The Scammer

Recently I have been calls about how I won a $9,000 grant. However, in order to collect the grant I have to pay $250 in Steam Card. Yes, this is a scam. Seriously who would collect a payment using Steam Cards?

The scam works by keeping you on the phone while you go to the store to get the gift card. They don't want to risk you talking to anyone else that might inform you that it's a scam. They will insist on staying on the phone and then "order you" to get the card.

The Federal Government will never ask you to pay for any processing fee to get a loan. In addition, they will not require a payment method by a gift card.

$9,000 Government Grant Scam

You can read about the scam New America Media website and on Scam Detector.

In my last call, I told them that it would be a while before I could get to the store. These are the phone numbers that have been calling me back to see if I have gotten the cards:

  • (202) 470-0947
  • (202) 350-0969
  • (202) 643-6782

Don't be fooled, just because these are Washington DC numbers, doesn't mean that they are actually calling from Washington DC. Once when I called the number, I heard "Google Voice" isn't able to transfer the phone number.

December 24, 2016

(716) 210-9393

If you get a call from (716) 210-9393 it's American Home Security. An automated machine greets you. Apparently, a human doesn't have to deal with the all the hang ups.

Automation Bleep Sound

You can tell that it's going to be some type of automation system because as soon as you say, "Hello" you'll hear a bleep sound.

Yes, the bleep tells you that an automated system dialed your number. You are the winner of the lucky phone number lottery.

(716) 210-9393

The number is located in Pendleton, NY, and there is no American Home Security office in Pendleton, NY. This is clearly a scam or phone bait type of call.

The system tries to pick a "local" number with the hope you would answer it. I believe a lot of these "local" numbers were old AOL modem dial-in access points.

Time to Play!

I like to mess with their "Automation" process a bit. As soon as I hear the bleep sound I know that it's a scam waiting to happen.

Here's a brief transcript of a past call.

Caller: "This is American Home Security, how are you doing?"
Me: "Terrible"
Caller: [Click]

If you get them to hang up, the system may reject your number from future calls. Then again, maybe they will keep trying until they win.

Other Situations

Caller: "Are you the Homeowner?"
Me: Sometimes
Caller: "Do you own your home?"
Me: "We are borrowing it"

I try to use words that they don't expect. I do this to see if I can confuse the automation system.

Every once in a while it might be hard to determine if the caller is a human or a machine, I have a script for that.

Caller: "Are you the Homeowner?"
Me: "Wow, there was a big storm going by your area, did you loose power"
Caller: "I am sorry, Are you the Homeowner?"

November 21, 2016

mark.silberman78 spam emails

I have been getting a lot of these types of emails, not exactly sure of what they are trying to accomplished.

From - Mon Nov 21 11:21:55 2016
X-Account-Key: account1
X-UIDL: 00002ff74a8abd8e
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <>
Received: from [::ffff:178.91.53.33] ([178.91.53.33])
by cryan.com
   for ; Mon, 21 Nov 2016 08:15:02 -0800
Received: from unknown (HELO localhost) (mark.silberman78@gmail.com@112.240.163.89)
  by 178.91.53.33 with ESMTPA; Mon, 21 Nov 2016 21:16:50 +0500
X-Originating-IP: 112.240.163.89
From: mark.silberman78@gmail.com
To: xxxx@cryan.com
Subject: you've been scammed

Your email xxxx@cryan.com has been hacked and spam is sent to all your contacts!
If you don't have a lawyer, you may contact me at mark.silberman78@gmail.com

Best Regards,
Mark
mark.silberman78@gmail.com

The first of these types of emails started appearing on November 13, 2016. This weekend I received at least a 100 of these emails. I might be getting these emails due to some anti-sql injection that I have put in place. (Basically I giving the attempted hackers a run for their money.)

This email was also mentioned on Koos van den Hout.

November 28, 2015

Keefer Women

Keefer Women

Everyone once in a while, I end up at a page asking me to fill out some weird Survey information. If I fill out the survey I get some "cool gift." Usually these are on survey2015.info, aldimarket.club, fastestsurvey.com and uniccshop.cc.hypestat.com.

Ya, I know this a phishing type of scam, which is why the about sites are not linked. Clearly they are after my contact information.

What's really funny is on the page is usually testimony from people that "actually" got the cool gifts. One of the images is some "mystery" person with a child. (See the thumbnail image on the right.) I am sure its probably some stock photography but I haven't been able to find it.

Here are some of the quotes that I found from this women that goes by many strange names. She certainly likes the weight loss "cool gifts."

Keefer2

Seems that many of these domains were set up by Duy Nguyen. He is associated with 686 domains and 208 unique emails. Which makes me wonder what other products/services does the "mystery" person likes?

January 25, 2013

Google Verification Numbers

Google uses these numbers to text message their Google Verification codes:

  • (240) 670-2451
  • (213) 224-0739
  • (240) 670-2291
  • (785) 338-8106

February 27, 2012

Miss. Sara

Recently I have been getting emails at work from a 'Miss. Sara' with the subject line of 'Re:Have a Great Day...." and the body of the email contains:

Hi,
Focus on the future, not on the past because better days lie ahead. 
U are indeed a very special friend. Gud day.
Thank's & Regard's
SARA

Not really SPAM, but just weird to be getting at work since I don't use my email address on any external accounts.

August 31, 2007

Crystal Development

CrystalWhat do the following companies have in common?

They are all the same company. They are currently spaming around the Internet. If you get an email from one of them, just add them to you SPAM Blocklist.

They can't even spell the word "development" correctly on their website:

Corporate Headquarters
Crystal Develpment.
VZV Ubicenter Philipssite 5
bus 13 B-3001 Leuven
Belgium

April 19, 2007

Smart Spam

Spam for those who have finished their 23rd year of school

Your current case has been presented to the important groups, and upon meticulous forethought, we are able to propose to you the subsequent prospect.

Based upon meticulous forethought you meet the criteria to attain a openhanded profit on your initial property investment.

By completing the subsequent attached form in a timely manner we will be able to complete our appraisal, and we feel assured you will attain not only a decreased rate of interest, but also a cash return that will fulfill all your holiday needs and more!

Please go here to complete this stage of the agreement.

Hoping on the best for you all.
Chris Savage

Should you prefer not to take advantage of this holiday prospect you can go here.

December 13, 2006

System Doctor

Just saw this when visiting Boston.com website:

Systemdoctor

Some users will instantly know what's wrong with that image. Yes this appeared in a Javascript Pop-up in Safari, a Macintosh computer. Macintosh computers don't have a registry.