Site logo

     



Advert.
Switch to full style
Scammers blackmailing people over webcam footage or photographs. Sometimes referred to as "sextortion". Your first port of call should be www.blackmailscams.com for the steps needed.
Post a reply

Ashley Madison leak blackmail.

Mon Sep 28, 2015 12:00 pm

I was recently (today) sent an email from someone named David davis about the recently leaked Ashley Madison data


Email info
Unfortunately your data, including complete credit card details, was leaked in the recent hacking of Ashley Madison. Below is the glimpse of the data we have about you:

Name:
Address:
Credit Card Type Used:
Credit card number:
Last Payment:
Your computer ip address:

Plus we have access to your complete profile data including your pics, secret fantasies, conversations, etc.

We have access to your Facebook page as well. If you would like to prevent me from sharing this dirt info with all of your friends, family members, spouse, then you need to send exactly 10 bitcoins (BTC) to the following BTC address:

Bitcoin Address:
1NfbMT1SpGfxwyaGJXjBt1VsUD7hy9pt2B

We are providing a chance to solve this case. You make a payment to the above mentioned btc address. The time ends in the next 24 hours. We will not publish your data and we will not inform your contacts.

You can get bitcoins at an exchange like Expresscoin.com, Localbitcoins.com, Clevercoin.com, Coincorner.com, Coincafe.com, Coinbase.com, Circle.com or a Bitcoin ATM machine Coinatmradar.com.

If you pay within 24 hours of receipt then we will delete your record. No payment? Then you will see what happen after this period. Once this period has expired, we can't do anything more for you. Our website is launching soon. We will surprise your family, friends and colleague with it. We will give you this one last chance.

You may be wondering why should you and what will prevent other people from doing the same, in short you now know to change your privacy settings in Facebook so no one can view your friends/family list. So go ahead and update that now (I have a copy if you dont pay).

Consider how expensive a divorce lawyer is. If you are no longer in a committed relationship then think about how this will affect your social standing amongst family and friends. What will your friends and family think about you?
David Davis


this is a new type of extortion scam and I just thought I should let you know that this is out there

Admin note: 1 Bitcoin equals 237.55 US Dollar

Re: Ashley madison

Mon Sep 28, 2015 12:45 pm

We've heard about this, but it's the first time we've had a report here. Do you have their email address too?

(edit) I see you've filled in a form, thank you.

What name did the scammer use?*: david davis
Scammer's email address if you have it.: socnyj@suited.xyz

Re: Ashley madison

Mon Sep 28, 2015 1:53 pm

Address lookup
canonical name suited.xyz.
aliases
addresses 69.172.201.208


Domain Whois record
Queried whois.centralnic.com with "suited.xyz"...

Domain Name: SUITED.XYZ
Domain ID: D10176693-CNIC
WHOIS Server: whois.uniregistrar.net
Referral URL: http://www.uniregistrar.com
Updated Date: 2015-09-22T23:43:43.0Z
Creation Date: 2015-09-16T15:24:49.0Z
Registry Expiry Date: 2016-09-16T23:59:59.0Z
Sponsoring Registrar: Uniregistrar Corp
Sponsoring Registrar IANA ID: 1659
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Registrant ID: unireg0wmiozar4
Registrant Name: PrivacyDotLink Customer 580978
Registrant Organization:
Registrant Street: PO Box 30485
Registrant City: Seven Mile Beach
Registrant State/Province: Grand Cayman
Registrant Postal Code: KY1-1202
Registrant Country: KY
Registrant Phone: +1.3457495465
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: 580978@privacy-link.com
Admin ID: unireg0wmiozar4
Admin Name: PrivacyDotLink Customer 580978
Admin Organization:
Admin Street: PO Box 30485
Admin City: Seven Mile Beach
Admin State/Province: Grand Cayman
Admin Postal Code: KY1-1202
Admin Country: KY
Admin Phone: +1.3457495465
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: 580978@privacy-link.com
Tech ID: unireg0wmiozar4
Tech Name: PrivacyDotLink Customer 580978
Tech Organization:
Tech Street: PO Box 30485
Tech City: Seven Mile Beach
Tech State/Province: Grand Cayman
Tech Postal Code: KY1-1202
Tech Country: KY
Tech Phone: +1.3457495465
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: 580978@privacy-link.com
Name Server: SELL.INTERNETTRAFFIC.COM
Name Server: BUY.INTERNETTRAFFIC.COM
DNSSEC: unsigned
Billing ID: unireg0wmiozar4
Billing Name: PrivacyDotLink Customer 580978
Billing Organization:
Billing Street: PO Box 30485
Billing City: Seven Mile Beach
Billing State/Province: Grand Cayman
Billing Postal Code: KY1-1202
Billing Country: KY
Billing Phone: +1.3457495465
Billing Phone Ext:
Billing Fax:
Billing Fax Ext:
Billing Email: 580978@privacy-link.com
>>> Last update of WHOIS database: 2015-09-28T12:51:01.0Z <<<

Network Whois record
Queried whois.arin.net with "n ! NET-69-172-200-0-1"...

NetRange: 69.172.200.0 - 69.172.201.255
CIDR: 69.172.200.0/23
NetName: PEER1-DOSARREST-01
NetHandle: NET-69-172-200-0-1
Parent: PEER1-BLK-14 (NET-69-172-192-0-1)
NetType: Reassigned
OriginAS: AS13768
Customer: DosArrest (C02492651)
RegDate: 2010-05-12
Updated: 2010-12-15
Comment: DDoS Protection services
Ref: http://whois.arin.net/rest/net/NET-69-172-200-0-1


CustName: DosArrest
Address: 600 West 7th Street
City: Los Angeles
StateProv: CA
PostalCode: 90017
Country: US
RegDate: 2010-05-12
Updated: 2011-03-19
Ref: http://whois.arin.net/rest/customer/C02492651

OrgTechHandle: ZP55-ARIN
OrgTechName: PEER 1 Network Inc
OrgTechPhone: +1-604-484-2588
OrgTechEmail: net-admin@peer1.net
OrgTechRef: http://whois.arin.net/rest/poc/ZP55-ARIN

OrgAbuseHandle: NSA-ARIN
OrgAbuseName: Peer 1 Network AUP Enforcement
OrgAbusePhone: +1-604-484-2588
OrgAbuseEmail: abuse@peer1.net
OrgAbuseRef: http://whois.arin.net/rest/poc/NSA-ARIN

RTechHandle: ZP55-ARIN
RTechName: PEER 1 Network Inc
RTechPhone: +1-604-484-2588
RTechEmail: net-admin@peer1.net
RTechRef: http://whois.arin.net/rest/poc/ZP55-ARIN

RNOCHandle: ZP55-ARIN
RNOCName: PEER 1 Network Inc
RNOCPhone: +1-604-484-2588
RNOCEmail: net-admin@peer1.net
RNOCRef: http://whois.arin.net/rest/poc/ZP55-ARIN

RAbuseHandle: NSA-ARIN
RAbuseName: Peer 1 Network AUP Enforcement
RAbusePhone: +1-604-484-2588
RAbuseEmail: abuse@peer1.net
RAbuseRef: http://whois.arin.net/rest/poc/NSA-ARIN



No need to list it as a fake bank. We can just report it to the host if we think it should be killed.
BA

Re: Ashley madison

Mon Sep 28, 2015 1:59 pm

I got the same message. Is this legit or a scam? See below...

Unfortunately your data, including complete credit card details, was leaked in the recent hacking of Ashley Madison. Below is the glimpse of the data we have about you:

Name:
Address:
Credit Card Type Used:
Credit card number:
Last Payment:
Your computer ip address:

Plus we have access to your complete profile data including your pics, secret fantasies, conversations, etc.

We have access to your Facebook page as well. If you would like to prevent me from sharing this dirt info with all of your friends, family members, spouse, then you need to send exactly 10 bitcoins (BTC) to the following BTC address:

Bitcoin Address:
1NfbMT1SpGfxwyaGJXjBt1VsUD7hy9pt2B

We are providing a chance to solve this case. You make a payment to the above mentioned btc address. The time ends in the next 24 hours. We will not publish your data and we will not inform your contacts.

You can get bitcoins at an exchange like Expresscoin.com, Localbitcoins.com, Clevercoin.com, Coincorner.com, Coincafe.com, Coinbase.com, Circle.com or a Bitcoin ATM machine Coinatmradar.com.

If you pay within 24 hours of receipt then we will delete your record. No payment? Then you will see what happen after this period. Once this period has expired, we can't do anything more for you. Our website is launching soon. We will surprise your family, friends and colleague with it. We will give you this one last chance.

You may be wondering why should you and what will prevent other people from doing the same, in short you now know to change your privacy settings in Facebook so no one can view your friends/family list. So go ahead and update that now (I have a copy if you dont pay).

Consider how expensive a divorce lawyer is. If you are no longer in a committed relationship then think about how this will affect your social standing amongst family and friends. What will your friends and family think about you?

Re: Ashley madison

Mon Sep 28, 2015 2:00 pm

It came from the following e-mail address...
Richard Brown <eligibilitywkota@excerpt.xyz>

Re: Ashley madison

Mon Sep 28, 2015 2:21 pm

i was going through my junk mail when I found it - there was a similar message from a Charles Davis - I deleted them both -

So big Al found it to be a fake bank- then what happens next?

I have shut everything down as recommended in the site, and it will stay shut down for a month.

as well I deleted my emails from him and the sender was never on my friend list for facebook; however, he did say he has the list of my friends (still not sure about that).

and I put a google alert for my name up as well.

Re: Ashley madison

Mon Sep 28, 2015 2:51 pm

It's not a fake bank. It's possibly a "Paid For" website/E-mail Address but I need to ask someone more experienced about it. If it turns out as a "Paid for" site rather than a free one, it can be reported to the host for closure.

About: eligibilitywkota@excerpt.xyz

eligibilitywkota@excerpt.xyz is an email address.
You can investigate this address with the Email Dossier
Domain Dossier will continue with excerpt.xyz.
Address lookup
lookup failed excerpt.xyz
Could not find an IP address for this domain name.

Domain Whois record
Queried whois.centralnic.com with "excerpt.xyz"...

Domain Name: EXCERPT.XYZ
Domain ID: D4693592-CNIC
WHOIS Server: whois.discount-domain.com
Referral URL: http://www.onamae.com
Updated Date: 2015-09-11T19:29:11.0Z
Creation Date: 2014-08-01T19:29:11.0Z
Registry Expiry Date: 2016-08-01T23:59:59.0Z
Sponsoring Registrar: GMO
Sponsoring Registrar IANA ID: 49
Domain Status: pendingDelete https://icann.org/epp#pendingDelete
Domain Status: redemptionPeriod https://icann.org/epp#redemptionPeriod
Registrant ID: 62CE0DB436DEF5
Registrant Name: Whois Whois Privacy Protection Service by onamae.com
Registrant Organization: Whois Privacy Protection Service by onamae.com
Registrant Street: 26-1 Sakuragaoka-cho
Registrant Street: Cerulean Tower 11F
Registrant City: Shibuya-ku
Registrant State/Province: Tokyo
Registrant Postal Code: 150-8512
Registrant Country: JP
Registrant Phone: +81.0303648727
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: proxy@whoisprotectservice.com
Admin ID: 62CE0F30CE348C
Admin Name: Whois Whois Privacy Protection Service by onamae.com
Admin Organization: Whois Privacy Protection Service by onamae.com
Admin Street: 26-1 Sakuragaoka-cho
Admin Street: Cerulean Tower 11F
Admin City: Shibuya-ku
Admin State/Province: Tokyo
Admin Postal Code: 150-8512
Admin Country: JP
Admin Phone: +81.0303648727
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: proxy@whoisprotectservice.com
Tech ID: 62CE287BCA9EF3
Tech Name: Whois Whois Privacy Protection Service by onamae.com
Tech Organization: Whois Privacy Protection Service by onamae.com
Tech Street: 26-1 Sakuragaoka-cho
Tech Street: Cerulean Tower 11F
Tech City: Shibuya-ku
Tech State/Province: Tokyo
Tech Postal Code: 150-8512
Tech Country: JP
Tech Phone: +81.0303648727
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: proxy@whoisprotectservice.com
Name Server: NS1.XSERVER.JP
Name Server: NS2.XSERVER.JP
Name Server: NS3.XSERVER.JP
Name Server: NS4.XSERVER.JP
Name Server: NS5.XSERVER.JP
DNSSEC: unsigned
Billing ID: 62CE10AE833989
Billing Name: Whois Whois Privacy Protection Service by onamae.com
Billing Organization: Whois Privacy Protection Service by onamae.com
Billing Street: 26-1 Sakuragaoka-cho
Billing Street: Cerulean Tower 11F
Billing City: Shibuya-ku
Billing State/Province: Tokyo
Billing Postal Code: 150-8512
Billing Country: JP
Billing Phone: +81.0303648727
Billing Phone Ext:
Billing Fax:
Billing Fax Ext:
Billing Email: proxy@whoisprotectservice.com
>>> Last update of WHOIS database: 2015-09-28T13:50:31.0Z <<<

Network Whois record
Don't have an IP address for which to get a record

Re: Ashley madison

Mon Sep 28, 2015 3:01 pm

Good morning,
Newbie here...

i have received the same email from 3 different spammers....

raysgesb@shipping.xyz
eventuallydd@gabriel.xyz
liesbuua@mission.xyz

Re: Ashley madison

Mon Sep 28, 2015 3:42 pm

Feedback form #7885

What name did the scammer use?*: Robert Miller
Scammer's email address if you have it.: weakzb@assessed.xyz

How old did the scammer say they were?*: i dont know
Scammer's Skype username . THE NAME WILL HAVE NO SPACES IN IT.*: i dont know
Address of the scammer's FaceBook, Google+ or other social media site page. .: no facebook
What site did you first meet the scammer on?: he took my data in Ashley Madison
How much money did they demand?: 10 bitcoins
What steps, if any, have you already taken to block the scammer?: I did not take any measure yet

Re: Ashley madison

Mon Sep 28, 2015 3:44 pm

Feedback form #7887

What name did the scammer use?*: don't know, deleted message
How old did the scammer say they were?*: didn't
Scammer's Skype username . THE NAME WILL HAVE NO SPACES IN IT.*: none
What site did you first meet the scammer on?: Hotmail (using Ashley Madison details)
How much money did they demand?: 10 BTC
Name you were told to send the money to. : 1NfbMT1SpGfxwyaGJXjBt1VsUD7hy9pt2B
What steps, if any, have you already taken to block the scammer?: Deleted emails, closed Hotmail account associated, added FB privacy
Are there any other details you wish to share? Anything you say may help prevent someone else from being scammed, no matter how trivial it may seem at the time.: Same email message as was noted on viewtopic.php?f=20&t=38976 but different sender and address. Got here by googling the bitcoin address
Post a reply