Quantcast
0

Ashley Madison: The People Behind The Scam

Posted by Viktoria Michaelis on October 15, 2015 in Internet |

I’ve mentioned the Ashley Madison hack and ensuing scam – mail demands for Bitcoin payments – a few times over the last few weeks and thought I would now add a closing note, since, for me, the whole has to have an end somewhere. In one of the posts I mentioned that the mail address being used to send out the blackmail mails has been used for other services too – if you can call extortion a service. Perhaps, if anyone in the States is interested, this could be of use to them:

Give us a call to be accepted for the Government’s New Student Aid Program.

888-554-9076

Experienced representatives are ready to accept your call from 8 – 9 pm EST.

Sincerely,
Student Investment Aid

It comes from the same mail address (sharingservices@aol.com) with the following Headers:

X-Envelope-From: <sharingservices@aol.com>
X-Envelope-To: [Redacted]
X-Delivery-Time: 1444892983
X-UID: 29765
Return-Path: <sharingservices@aol.com>
Authentication-Results: strato.com 1;
spf=pass
smtp.mailfrom=”sharingservices@aol.com”;
dkim=none;
domainkeys=none;
dkim-adsp=none
header.from=”sharingservices@aol.com”
X-Strato-MessageType: email
Date: Thu, 15 Oct 2015 09:09:42 +0200 (CEST)
X-RZG-CLASS-ID: mi
Received-SPF: pass
(strato.com: domain aol.com designates 204.29.187.36 as permitted sender)
mechanism=ptr;
client-ip=204.29.187.36;
helo=”taclomr-m004e.mx.aol.com”;
envelope-from=”sharingservices@aol.com”;
receiver=mailin.rzone.de;
identity=mailfrom;
Received: from taclomr-m004e.mx.aol.com ([204.29.187.36])
by mailin.rzone.de (RZmta 37.14 OK)
with ESMTP id r04859r9F79gEOf
for [Redacted];
Thu, 15 Oct 2015 09:09:42 +0200 (CEST)
Received: from vm-149-174-150-116.asset.aol.com (vm-149-174-150-116.asset.aol.com [149.174.150.116])
by taclomr-m004e.mx.aol.com (Outbound Mail Relay) with ESMTP id E0CD53800DF8;
Thu, 15 Oct 2015 03:09:41 -0400 (EDT)
From: sharingservices@aol.com
Reply-To: stefan.rabsahl@paddling.net
To: [Redacted]
Message-ID: <442177460.1223719.1444892981914.JavaMail.dpadmin@vm-149-174-150-116.asset.aol.com>
Subject: Lucas recommends  РFACEBOOK RECOMMENDS : *** CALL US BACK *** READ  IT NOW
MIME-Version: 1.0
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
From-IP-Address: 172.29.24.161

Please, don’t anyone send me threatening mails about this: I’m only passing it on, I didn’t originate it! And, no, I couldn’t be bothered calling the telephone number either – for obvious reasons – but perhaps they can give a little more information about the darker side of their business.

  • Viktoria Michaelis.

Tags: , , ,

Leave a Reply

Your email address will not be published. Required fields are marked *

Copyright © 2010-2017 Viktoria Michaelis All rights reserved.
This site is using the Desk Mess Mirrored theme, v2.5, from BuyNowShop.com.

error: Content is protected !!