Like everyone we get our share of fake or spam emails and although very alert to this kind of thing the levels these low life go to is incredible, if they where to put so much effort into an honest job they would not need to do this.

 

Was easy for us to spot as they used my email name not my ebay name..

 

The one below could easily catch out someone not switched on to this kind of thing, have reported it to ebay as I always do and a quick source check shows a hijacked ip for the "nationwidemedical.com" in Orlando having said that most likely bounced from some where else....Russia, latvia, China etc. bloody menaces!!

 

Be careful and tell partners and the kids too as they might not be on guard like we all are.

 

Jeff TT

 

 

 

Return-path:

Envelope-to: jeff@zedworld.co.uk

Delivery-date: Fri, 07 Jun 2013 08:11:35 +0100

Received: from [66.40.74.39] (port=50858 helo=nationwidemedical.com)

by server2.velnetweb.co.uk with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)

(Exim 4.80.1)

(envelope-from )

id 1Ukqpj-00028J-07

for jeff@zedworld.co.uk; Fri, 07 Jun 2013 08:11:35 +0100

Message-ID:

From: \"member@eBay.com\"

To: \"Zedworld\"

Subject: This eBay member has a question for you.

Date: Fri, 7 Jun 2013 07:11:32 +0000

X-Mailer: sendEmail-1.56

MIME-Version: 1.0

Content-Type: multipart/related; boundary=\"----MIME delimiter for sendEmail-139160.963547514\"

 

 

Source:

 

The source host name is "host39.maxim.net" and the source IP address is 66.40.74.39.

 

 

 

Geo-Location Information

Country United States

State/Region FL

City Orlando

Latitude 28.6185

Longitude -81.4336

Area Code 407

 

 

Whois:

 

The IP address 66.40.74.39 appears to have been assigned by the American Registry for Internet Numbers (ARIN). ARIN is the Regional Internet Registry (RIR) for the United States, Canada, and several islands in the Caribbean Sea and North Atlantic Ocean

Edited June 7, 201312 yr by JeffTT

I agree Jeff, if these gits spent as much time on on legitimate work as they do on spamming.....

Jeff meant to say that i googled your site today to get the phone no and it comes up with a warning when you click the link through google. Check your hosting service hasn't allowed some malware to sit on their server!

Jeff meant to say that i googled your site today to get the phone no and it comes up with a warning when you click the link through google. Check your hosting service hasn't allowed some malware to sit on their server!

 

Yeah, Im getting it to on http://www.zedworld.co.uk

 

Edited June 7, 201312 yr by Yowser

Yes got a couple of call yeterday, done a quick check earlier and there is some malware from a third party been attached to the tech help page! at first could not understand how on earth they done it without my very complex password, however dawned on me I had a little flash at the top banner ( didgital clcock left over from a previous page build) and found the flash content has some security issues thats let them in, flash has been secured now and site cleaned today, requesting a retest by Google to clear the warning once I get my head around their web tools page, hackers are bleeding scum bags and thieves hiding behind a pc screen!

 

Thanks guys

 

Jef

Yeah, Im getting it to on http://www.zedword.co.uk

 

[ATTACH=CONFIG]70967[/ATTACH]

 

Misspell on your link there matey.

 

Jeff TT

Misspell on your link there matey.

 

Jeff TT

 

opps. Fixed.

I'm a nosey cow and always look at the emails but never open any links or attachments that are in my emails unless its something I've been expecting.