Attention: Ragecash And Extreme Paychecks Affiliates

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • seeric
    ..........
    • Aug 2004
    • 41917

    #1

    Attention: Ragecash And Extreme Paychecks Affiliates

    If by any chance you get an email today from abuse@extremepaychecks or abuse@ragecash saying something like this:

    The ragecash one looks the same as this one. Some idiot is trying to build themselves a nice affiliate DB looks like.


    Dear Valued Member,

    According to our terms of services, you will have to confirm your e-mail by the following link, or your account will be suspended within 24 hours for security reasons.

    hxxp://www.extremepaychecks.com/confirm.php?account=yourname@y ourdomain.com

    The link will be going to this location:
    hxxp://161.246.71.20/Confirmation_Sheet.pif

    After following the instructions in the sheet, your account will not be interrupted and will continue as normal.

    Thank you for your attention to this request. We apologize for any inconvenience.

    Sincerely, Extremepaychecks Abuse Department


    DELETE THIS EMAIL AND DO NOT CLICK ON THE LINK !!!! THIS WAS NOT FROM US !!

    Thanks
  • BoyAlley
    So Fucking Gay
    • Nov 2004
    • 19714

    #2
    Damn that's some shit! Adult phishing. Do they have no shame?

    Comment

    • MaddCaz
      Confirmed User
      • Mar 2006
      • 9483

      #3
      Get Emmmm!!!!

      BigCocks.com -
      MatureWomen.com -
      Tranny.com -
      DrunkGirls.com -
      TeenGirls.com -
      MonsterCock.com and
      many more... Click
      here to see them all!

      Comment

      • JFK
        FUBAR the ORIGINATOR
        • Jan 2002
        • 67369

        #4
        Thanks for the warning

        FUBAR Webmasters - The FUBAR Times - FUBAR Webmasters Mobile - FUBARTV.XXX
        For promo opps contact jfk at fubarwebmasters dot com

        Comment

        • seeric
          ..........
          • Aug 2004
          • 41917

          #5
          the subject line just says


          KBip



          thats it.

          Comment

          • Pete-KT
            Workin With The Devil
            • Oct 2004
            • 51532

            #6
            Thats fucked up bro

            Comment

            • baddog
              So Fucking Banned
              • Apr 2001
              • 107089

              #7
              I don't get it . . . don't they already have the database if they are sending the emails to your affiliates?

              Comment

              • Fetish Gimp
                Confirmed User
                • Feb 2005
                • 1699

                #8
                Numeric url + pif file: warning flags should be going up and down your ass.
                Strapon Seduction - femdom blog | Twitter

                Comment

                • jimthefiend
                  So Fucking Banned
                  • Oct 2003
                  • 18889

                  #9
                  Can't blame me for trying.

                  Comment

                  • seeric
                    ..........
                    • Aug 2004
                    • 41917

                    #10
                    Originally posted by Fetish Gimp
                    Numeric url + pif file: warning flags should be going up and down your ass.

                    they are.

                    one of the ip is in thailand.

                    trust me i've got a nice crew of people who love to play with this kind of stuff checking it out.

                    not sure exactly what they are trying to accomplish but i bet my guys find out.

                    i'm no brainiac with this, i just want my affils to know that some ass is messing with us and probably other proggies.

                    Comment

                    • Basic_man
                      Programming King Pin
                      • Oct 2003
                      • 27360

                      #11
                      This kind of shit really sucks !
                      UUGallery Builder - automated photo/video gallery plugin for Wordpress!
                      Stop looking! Checkout Naked Hosting, online since 1999 !

                      Comment

                      • fatal attraction
                        Confirmed User
                        • Feb 2003
                        • 6522

                        #12
                        Thanks for the warning. That's fucked up!

                        Comment

                        • madawgz
                          8.8.8.8
                          • Mar 2006
                          • 30509

                          #13
                          Originally posted by baddog
                          I don't get it . . . don't they already have the database if they are sending the emails to your affiliates?
                          true, where would they get the emails...
                          TAEMDLRMSKRJIXMRLSMRJ.

                          Comment

                          • seeric
                            ..........
                            • Aug 2004
                            • 41917

                            #14
                            its some kind of worm or virus and we tracked it to the source.



                            this is the phish mail exactly word for word. still digging deeper.

                            http://www.millersmiles.co.uk/report/1294

                            Please send us any scam/phishing emails you have received by clicking here.

                            If you have received the email below, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content, such as a different subject or return address, or with the fake webpage(s) hosted on a different webserver.

                            We aim to report every variant of the scams we receive, so even if it appears that a scam you receive has already been reported, please submit it to us anyway.






                            ACCOUNT ALERT

                            Date Reported: 26th September 2005 Whats this? Risk Level: MEDIUM Whats this?

                            Details

                            Apparent Sender:
                            Aol - See all Aol phishing scams Whats this?
                            Return Address:
                            < [email protected] > Whats this?
                            Email Format: HTML Whats this?

                            URL of Web Content:
                            http://199.74.94.110:90/Confirmation_Sheet.pif Whats this?
                            Location:
                            US Whats this?

                            Comments:


                            * Email asks you to confirm/update/verify your account data at Aol by visiting the given link. You will be taken to a spoof website where your details will be captured for the phishers.


                            * Aol never send their users emails requesting personal details in this way.


                            * The REAL URL of the spoof website is disguised as "http://[email protected]/confirm. php?email=aol.com".


                            * The spoof website this email links to was not online at time of this report, but variations of the scam which link to working websites are bound to exist, so be wary! The website may have been taken down or disabled by the hosts, but quite often these websites are hosted on the personal computer of the phishers, so may only be online at certain times.


                            * The REAL URL of the spoof website looks nothing like the actual Aol URL.


                            Content

                            Email:

                            "According to our terms of services, you will have to confirm your e-mail by the following link or your account will be suspended within 24 hours for security reasons."

                            Dear Valued Member,

                            According to our terms of services, you will have to confirm your e-mail by the following link or your account will be suspended within 24 hours for security reasons.

                            http://[email protected]/confirm. php?email=aol.com

                            After following the instructions in the sheet, your account will not be interrupted and will continue as normal.

                            Thanks for your attention to this request. We apologize for any inconvenience.

                            Sincerely,Aol Security Department

                            Website:

                            Spoof website not online at time of report...


                            started as an aol problem, but looks as if people are adopting the work/virus from this aol phish campaign.

                            Comment

                            • seeric
                              ..........
                              • Aug 2004
                              • 41917

                              #15
                              Originally posted by madawgz
                              true, where would they get the emails...

                              heres what i think has happened.


                              i think they have harvested a bunch of boards and what not and snagged visible email addresses, i did not receive this email to my private registered accounts with rage and i have about 15. i only got it to the email addresses that i use on the boards. or, they are taken from any persons infected computers outlook address book. typical phishing shit.

                              i've asked several affils that i know if they received it and they said no. so, from what it looks like this ass may be just changing program names and sending to all public addresses that they have found.



                              this post is more precautionary and educational than anything else.
                              Last edited by seeric; 06-19-2006, 11:05 AM.

                              Comment

                              • Wizzo
                                2011 GFY Hall of Fame!
                                • Nov 2000
                                • 15224

                                #16
                                Damn that sucks...
                                Looking for Opportunity!

                                Comment

                                • seeric
                                  ..........
                                  • Aug 2004
                                  • 41917

                                  #17
                                  Originally posted by Wizzo
                                  Damn that sucks...


                                  we wont be the only ones this happens too. jsut wanted to put the research out there.

                                  we're tracking the worm host now to see what to do with it. its def a BP and throwaway when necessary. for real there is no real information on there and the chances of the thailand hosting company helping isn't very good i'd imagine. if anything they'll dump him and he'll get a new account with a new green dot card or something.

                                  i'd love to shove his worm up his ass.

                                  Comment

                                  • seeric
                                    ..........
                                    • Aug 2004
                                    • 41917

                                    #18
                                    Originally posted by A1R3K
                                    If by any chance you get an email today from abuse@extremepaychecks or abuse@ragecash saying something like this:

                                    The ragecash one looks the same as this one. Some idiot is trying to build themselves a nice affiliate DB looks like.


                                    Dear Valued Member,

                                    According to our terms of services, you will have to confirm your e-mail by the following link, or your account will be suspended within 24 hours for security reasons.

                                    hxxp://www.extremepaychecks.com/confirm.php?account=yourname@y ourdomain.com

                                    The link will be going to this location:
                                    hxxp://161.246.71.20/Confirmation_Sheet.pif

                                    After following the instructions in the sheet, your account will not be interrupted and will continue as normal.

                                    Thank you for your attention to this request. We apologize for any inconvenience.

                                    Sincerely, Extremepaychecks Abuse Department


                                    DELETE THIS EMAIL AND DO NOT CLICK ON THE LINK !!!! THIS WAS NOT FROM US !!

                                    Thanks

                                    one more thing that i would add to webmasters is, if in fact this is someone who really knows what they are doing and you do click on this link and expose yourself to this worm, god knows what you are opening up for this scumbag. there is a good chance that this person is an adult webmaster and may be looking to expoit your accounts in some way. the email addresses that we got these phishing emails from are not used outside of adult boards and affiliate programs. just be careful.

                                    Comment

                                    • gdog
                                      Confirmed User
                                      • Aug 2004
                                      • 1550

                                      #19
                                      Damn boy that sucks that someone is pulling shit like that with your program
                                      Busty Amateurs is Back - Meet the Girls | Read the BLOG | See the UPDATES

                                      High conversions and high retention, almost 1000 hosted galleries 995 PAYS
                                      Samples Big Boobs | Busty Babes | Strap Ons | Hardcore | Amateurs | Videos

                                      Comment

                                      • seeric
                                        ..........
                                        • Aug 2004
                                        • 41917

                                        #20
                                        Originally posted by gdog
                                        Damn boy that sucks that someone is pulling shit like that with your program
                                        not my program, i'm just the dog chained to the tree, but i'm still pissed about it.

                                        Comment

                                        • scottybuzz
                                          Too lazy to set a custom title
                                          • May 2006
                                          • 14799

                                          #21
                                          unlucky to whoevers program it is
                                          $$$$$ MAKE HUGE MONEY IN CAMS - CLICK HERE $$$$$

                                          Comment

                                          • seeric
                                            ..........
                                            • Aug 2004
                                            • 41917

                                            #22
                                            Originally posted by scottybuzz
                                            unlucky to whoevers program it is
                                            i basically say that because there are lots of people who nickle and dime every response and stuff around here so i like to keep them straight. do i care alot bout this? fuckin A right i'm pissed about this and we have located the culprit. pays to know certain people.

                                            Comment

                                            • xxxjay
                                              Tube groupie.
                                              • Aug 2002
                                              • 13482

                                              #23
                                              Thanks for the heads up dood!
                                              http://donttellmehowtoruinmylife.com/ - http://www.jmdigitalmarketing.com/my...s-and-reviews/ - http://www.wouldyouhitit.org - http://shinyobjectreviews.com/

                                              Comment

                                              • V_RocKs
                                                Damn Right I Kiss Ass!
                                                • Nov 2003
                                                • 32451

                                                #24
                                                I love it when people try to take my money and can't even use English anywhere near correctly...

                                                Comment

                                                • Mr. Soul
                                                  Confirmed User
                                                  • Jul 2005
                                                  • 1633

                                                  #25
                                                  That's why you shouldn't sell or trade your webmaster database.

                                                  Comment

                                                  • seeric
                                                    ..........
                                                    • Aug 2004
                                                    • 41917

                                                    #26
                                                    Originally posted by Mr. Soul
                                                    That's why you shouldn't sell or trade your webmaster database.

                                                    if this was directed at me and made to insinuate that i have sold a database, re-read what i wrote aboove.

                                                    if you wrote this to start shit, read below.

                                                    you obviously didn't read what i wrote. no one hs my database. i'm no n00b that ses value in spamming webmasters. you must think i'm a complete idiot or something. spamming webmasters is worthless. why would i want to make a measily couple K and have the community pissed off at me. haha. some of you people doubt my intelligence.

                                                    Comment

                                                    • RogerV
                                                      Banned!
                                                      • Jul 2002
                                                      • 12591

                                                      #27
                                                      Thats nuts I get them for Paypal all the time

                                                      Comment

                                                      Working...