Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

dmitriye9e8d@ngs.ru

DO NOT click on any links in these emails.

dmitriye9e8d@ngs.ru

Unread postby firefly » Wed May 20, 2020 3:26 pm

Clickable phishing link sent as registration for a fake lottery.

Email received:

Hi there!
In order to support you, we have decided to send you one ticket so that you can participate in the game for free.
This ticket is assigned to your e-mail address and you can participate in the game as soon as it is activated.
All that remains is to complete the registration by clicking on the link below. xxx
Activate your free ticket
-----
You received this email as part of the #Stay_At_Home_2020 international lottery promotion.


Phishing link not posted.

Header:

Return-Path: <dmitriye9e8d@ngs.ru>
Received: from smtpout.ngs.ru (smtpout243.gw-m11.ngs.ru. [195.19.220.243])
Received-SPF: pass (google.com: domain of dmitriye9e8d@ngs.ru designates 195.19.220.243 as permitted sender) client-ip=195.19.220.243;
Authentication-Results: mx.google.com;
dkim=pass header.i=@ngs.ru header.s=mail1 header.b=YSaZWzAA;
spf=pass (google.com: domain of dmitriye9e8d@ngs.ru designates 195.19.220.243 as permitted sender) smtp.mailfrom=dmitriye9e8d@ngs.ru;
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=ngs.ru
Received: from 185.158.114.14 (unknown [178.176.113.96]) (Authenticated sender: dmitriye9e8d@ngs.ru)
Message-ID: <202593C0CB1F33508C89C07D997BF1A2@ngs.ru>
From: Lynnette Thompson <dmitriye9e8d@ngs.ru>
Subject: Ticket № 1453634 International lottery promotion
Date: Tue, 19 May 2020 21:16:37 +0200
X-Mailer: Microsoft Windows Live Mail 14.0.8117.416

Originating IP: 178.176.113.96
Originating ISP: Pjsc Megafon
City: Yekaterinburg
Country of Origin: Russian Federation
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

earl788braverman3561996@ngs.ru

Unread postby firefly » Wed May 20, 2020 3:30 pm

Same message received from:

Return-Path: <earl788braverman3561996@ngs.ru>
Received: from smtpout.ngs.ru (smtpout243.gw-m11.ngs.ru. [195.19.220.243])
Received: from 53-253.static.spheral.ru (unknown [91.133.1.2])
Message-ID: <3E3B8DDED5012FFC20256CD155C0C277@ngs.ru>
From: Hannah Hernandez <earl788braverman3561996@ngs.ru>
Subject: Ticket № 37534887 International lottery promotion
Date: Tue, 19 May 2020 22:18:31 +0200
X-Mailer: Microsoft Windows Live Mail 16.4.3528.331

Originating IP: 91.133.1.2
Originating ISP: Fortex Cjsc
City: Moscow
Country of Origin: Russian Federation
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe


Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 22 guests