Links last last verified 08/21/2007
Page last updated 09/17/2007
This page is a continuation of my Malware - Email Example #009-012 (Card from Neighbor or School Chum) page. Be sure to read it!
Items on this page were received by Bill Sanders (aka LYAO Editor or "-LE")
NOTE: All external links on this page open a new window.
PLEASE NOTE: Since I created the original page on this type of emailed malware, I have received other examples recently at the rate of at least two a day. I believe they've also recently changed from using the "ecard" to other lures. Please see the original page to see my first examples and my experience. Also note that I did NOT take any of the links below. Because of my experiences prior to these emails and with the above, I will not longer click on ANY link with an unresolved DNS (not a real site name - just the numbers in "999.999.999.999" format). Remember, too, that the visible link can contain whatever they wish. Be sure to check the underlying link. Some email clients will allow you to roll over the link, and the underlying link will show in the status bar. If yours does this, use it.
A "named link" does NOT look like "Orange Frog Productions", but like "http://www.orangefrogproductions.com". If you roll your cursor over THESE example links, both with show "#" in the status bar of your browser (bottom left corner). Normally the "#" is followed by something else (roll over the Table-of-Contents links, below to see what I mean.) No matter what the link LOOKS like (either of the above, for example), the UNDERLYING link is the one that shows on the status bar. If they don't match, don't go to another spot on the page (these will have a "#" in them after the page's URL), or contain only numbers (in 999.999.999.999 format - the IP), then you will have NO CLUE where the link will take you.
NOTE: Recently, I received one with a return address username of unsubscribe. This leads me to believe that even the email return addresses are spoofed or stolen. So the senders, listed below, may not be to blame for these emails. In other words, "don't kill (or blame) the messager".
BE VERY CAREFUL ABOUT TRUSTING LINKS THAT HAVE NO NAME!
Check out: Urban Legends Reference Pages (Snopes): 'Postcard from a Family Member' virus
I have only put spaces in the links below, so they will not work and removed the "TO" from most of the emails. Please be aware that many of the following use real ecard company websites to attempt to lure you in. If the links WERE real, the link would be their name, and not an IP number!.
Table-of-Contents:
Again, I have only put spaces in the links, so they will not work and removed most of the "TO"s from the emails listed below. Please be aware that many of the following use real ecard company websites to attempt to lure you in. If the links WERE real, the link would be their name, and not an IP number!
Notice that many use EXACTLY the same format, though the company, sender name, and links are different.
NOTE: The Lists, below, are separated by "tactic". The examples, below them, are in the order they were received. All headers have bookmarks on them.
Tactic #1 - Someone sent you an ecard!
This is the first type I found. (See original page and my experience.) However, as with all web-based company emails, you should pay attention to the grammar, and, if you've not had experience with ecards, you might want to visit one of those sites, and send a free one to yourself, so you see the differences between the real thing and these. If you don't know the name or email address, DO NOT CLICK THE LINK. See below for a warning from one of the ecard companies, and a link explaining how you can get the card without going through the link in the email.
- 08/04/2007 - hallmark.com - from "Class mate"
- 08/06/2007 - dgreetings.com - from "School mate"
- 08/07/2007 - postcards.org - from "School-mate"
- 08/08/2007 - MyPostcards.Com - from "Class mate"
- 08/08/2007 - greetingcard.org - from "Neighbour"
- 08/09/2007 - GreetingCards.Com - from "Friend"
- 08/10/2007 - Greeting-Cards.com - from "Neighbour"
- 08/11/2007 - egreetings.com - from "School-mate"
- 08/11/2007 - vintagepostcards.com - from "Partner"
- 08/12/2007 - hallmark.com -
from "Brother(
andresmedina79 @ yahoo.co.uk )" - 08/12/2007 - christianet.com -
from "Uncle(
rscprod @ reper-fr.ch )" - 08/13/2007 - free-e-cards-online.com -
from "Neighbour(
r_petrungaro @ shamrock.com )" - 08/13/2007 - all-yours.net -
from "Nephew(
orla @ isssw.com )" - 08/14/2007 - deepestfeelings.com -
from "Father(
orientexpress7 @ ttpa.com )" - 08/14/2007 - funsilly.com -
from "Worshipper(
6787254446 @ peoplesfed.com )" - 08/15/2007 - postcards.org -
from "Uncle(
ertan.barut @ yourkidsdirect.com )" - 08/15/2007 - americangreetings.com -
from "Colleague(
ruslan_a @ virginiahospitalcenter.com )" - 08/15/2007 - funnygreetings.com - from "Your Pal"
- 08/15/2007 - perfectgreetings.com - from "Your Cousin"
- 08/16/2007 - usagreetings.com - from "Your Neighbor"
- 08/16/2007 - 123greetings.com - from "Your Son"
- 08/16/2007 - lavacards.com - from "Your Brother"
- 08/17/2007 - marlo.com - from "Your Brother"
- 08/17/2007 - superlaugh.com - from "Your Partner"
- 08/17/2007 - [unknown] - from "Friend"
- 08/17/2007 - [unknown] -
from
"denise.jurquet @ yahoo.com.tw " - 09/04/2007 - [yahoo] - from
nicolae.lupu @ gypsyted.com
I am ASSUMING, since the following "tactics" provide links to IPs and not named domains, that they are of the same ilk as the above, which DO go to virus-installing pages. I have not tried them, as I had the problems described on my Malware - Email Example #009-012 (Card from Neighbor or School Chum) page, and believe that they use the same type "landing pages".
This does NOT mean that they are safe. Unless you are very experienced, and truly trust your virus scanner, I suggest that you DO NOT check out the sites yourself.
Tactic #2 - Soft-Porn to Hard-Porn
They changed tactics... Now the suggestion is possible salacious pictures! This is as bad as the MySpace spammers! The idea is to catch the curious. Trust me... It's much safer to do a Google (or other) search for free porn, than it is to click an IP link in a spam email, the latter of which may or may not take you to a site that will do damage to your computer, set cookies you don't know about to spy on your habits, or more.
- 08/18/2007 - [pictures] -
rrohrberg @ sbcglobal.net - 08/19/2007 - [pictures] -
ruud_daleman @ bancoestado.cl - 08/20/2007 - [pictures] -
ari @ nets.com.jo
Tactic #3 - "Thank you for joining ... "
Another tactic change... Confirmation Emails - Now they SAY I've joined their site. I know I haven't. Now I need to check to see if someone DID sign up for them without my knowledge, using my email address! DON'T DO IT! If you are unsure, and there's an actual named site listed in the email, go directly there, and enter the username and password from the email. I will lay you odds it will not work! Legitimate companies with subscription services (free or paid), do not want
- 08/20/2007 - [membership] - Dog Lovers
[underlying link: yeaababy @ geiger.com ] - 08/21/2007 - [membership] - Web Cooking
[underlying link: crawford @ metrony.wish.org ] - 08/21/2007 - [membership] - Fun World
[underlying link: toshikon @ dieseina.de ] - 08/21/2007 - [membership] - Online Gamer
[underlying link: catanks @ doubleagentrecords.com ] - 08/21/2007 - [membership] - Online Gamers
[underlying link: michael.althaber @ 2by2.net ] - 08/22/2007 - [membership] - Bartenders Guide
[underlying link: mac11160 @ paccell.com ] - 08/22/2007 - [membership] - Mobile Fun
[underlying link: nbvyr @ fidnet.com ] - 08/22/2007 - [membership] - Resume Hunters
[underlying link: hnkb @ george-stults.com ] - 08/23/2007 - [membership] - Online Hook-Up
[underlying link: lykp @ spencerstuart.com ] - 08/23/2007 - [membership] - Mobile Fun
[underlying link: sqw @ yale.edu ] - 08/23/2007 - [membership] - Entertaining Pros
[underlying link: rdkzv @ cokesbury.com ]
Tactic #4 - "You got Caught!..."
GEEZE! How many times are they going to do this? ANOTHER Tactic change. This time, it's either you or an email sent to an erroneous address. The object this time is to get you check out something on a valid site. The links look ok, just like Phisher's links do. However, BEWARE! The Underlying links on these are unnamed IPs.
- 08/25/2007 - [Caught ya] - from
oskam1004 @ runner.csub.edu - 08/25/2007 - [Caught ya] - from
elam_666 @ homepower.com - 08/25/2007 - [Caught ya] - from
qacwgoa @ signet.co.uk - 08/25/2007 - [Caught ya] - from
jmokansk @ jsoconsulting.com - 08/26/2007 - [Caught ya] - from
jennifer_pick @ centralite.com - 08/26/2007 - [Caught ya] - from
ysnezko @ pcs-chromex.com - 08/27/2007 - [Caught ya] - from
tim_pate @ bidmc.harvard.edu - 08/27/2007 - [Caught ya] - from
pezhang @ eng.sun.com - 08/27/2007 - [Caught ya] - from
greetingsmtpspecial @ tef.ktu.lt - 09/07/2007 - [Caught ya] - from
mmk @ kellyservices.ru
Tactic #5 - Fan
And, once again they change tactics. Are you a fan or enthusiast? ... of Music? ,,, of Sports? ... of on- and off-line games? ... of ANYTHING? Make sure you check the links before you take them, if they are from Spammers. You may also want to be careful about those from friends. (If you catch this malware, it's possible they could use YOUR email address to send malware to others, including your friends, coworkers, family, and acquaintances on YOUR email list.)
- 08/29/2007 - [Music Fan] - from
anna.pelaou @ parknet.dk - 08/29/2007 - [Music Fan] - from
khongbiet777 @ ms14.hinet.net - 09/08/2007 - [Sports Fan] - from
e_m_augustine @ havers.com - 09/09/2007 - [Sports Fan] - from
mmgdmj @ libertycorp.com - 09/09/2007 - [Sports Fan] - from
cordova @ ousd.k12.ca.us - 09/10/2007 - [Sports Fan] - from
seminoles-list-owner @ bcbstx.com - 09/10/2007 - [Sports Fan] - from
wsk @ focusforward.com - 09/10/2007 - [Sports Fan] - from
unsubscribe @ valeant.com - 09/11/2007 - [Sports Fan] - from
bclay @ itcmed.com - 09/11/2007 - [Sports Fan] - from
nathalie.semaan @ elevatorbraille.com - 09/15/2007 - [Game Fan] - from
buero @ mantra-intellect.lk - 09/16/2007 - [Game Fan] - from
clucas6305 @ precise-metals.com - 09/16/2007 - [Game Fan] - from
verae @ wyotech.com - 09/17/2007 - [Game Fan] - from
wzierhofer @ difruscia.ca
Examples
Received 08/04/2007 11:20PM
From: hallmark.com
Sent: Saturday, August 04, 2007 11:20 PM
Subject: You've received an ecard from a Class mate!
Hi. Class mate has sent you an ecard.
See your card as often as you wish during the next 15
days.
SEEING YOUR CARD
If your email software creates links to Web pages, click on your card's direct www address below while you are connected to the Internet:
Or copy and paste it into your browser's "Location" box (where Internet addresses go).
We hope you enjoy your awesome card.
Wishing you the best,
Mail Delivery System,
hallmark.com
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/06/2007 07:33PM
From: dgreetings.com
Sent: Monday, August 06, 2007 7:33 PM
Subject: You've received an ecard from a School mate!
Hi. School mate has sent you an ecard.
See your card as often as you wish during the next 15 days.
SEEING YOUR CARD
If your email software creates links to Web pages, click on your card's direct www address below while you are connected to the Internet:
Or copy and paste it into your browser's "Location" box (where Internet addresses go).
We hope you enjoy your awesome card.
Wishing you the best,
Mail Delivery System,
dgreetings.com
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/07/2007 10:26AM
From: postcards.org
Sent: Tuesday, August 07, 2007 10:26 AM
Subject: You've received an ecard from a School-mate!
Hi. School-mate has sent you an ecard.
See your card as often as you wish during the next 15 days.
SEEING YOUR CARD
If your email software creates links to Web pages, click on your card's direct www address below while you are connected to the Internet:
Or copy and paste it into your browser's "Location" box (where Internet addresses go).
We hope you enjoy your awesome card.
Wishing you the best,
Webmaster,
postcards.org
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/08/2007 05:26AM
From: MyPostcards.Com
Sent: Wednesday, August 08, 2007 5:26 AM
Subject: You've received an ecard from a Class mate!
Hi. Class mate has sent you an ecard.
See your card as often as you wish during the next 15 days.
SEEING YOUR CARD
If your email software creates links to Web pages, click on your card's direct www address below while you are connected to the Internet:
Or copy and paste it into your browser's "Location" box (where Internet addresses go).
We hope you enjoy your awesome card.
Wishing you the best,
Webmaster,
MyPostcards.Com
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/08/2007 08:41AM
From: greetingcard.org
Sent: Wednesday, August 08, 2007 8:41 AM
Subject: You've received a postcard from a Neighbour!
Hi. Neighbour has sent you a postcard.
See your card as often as you wish during the next 15 days.
SEEING YOUR CARD
If your email software creates links to Web pages, click on your card's direct www address below while you are connected to the Internet:
Or copy and paste it into your browser's "Location" box (where Internet addresses go).
We hope you enjoy your awesome card.
Wishing you the best,
Administrator,
greetingcard.org
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/09/2007 05:19PM
From: GreetingCards.Com
Sent: Thursday, August 09, 2007 5:19 PM
Subject: Friend sent you a greeting card from
GreetingCards.Com!
Friend has created an ecard for you at GreetingCards.Com, the Internet's most popular greeting card service.
Your greeting card ID is: 55ab65e8517a32e6b9ea6878b15d77
To see your custom greeting card, simply click on the link below:
Send greeting cards from GreetingCards.Com whenever you
want by visiting us at:
http://GreetingCards.Com/
Copyright (c) 1996-2007 GreetingCards.Com All Rights
Reserved
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/10/2007 10:40AM
From: Greeting-Cards.Com
Sent: Friday, August 10, 2007 10:40 AM
Subject: Neighbour sent you a greeting card from Greeting-Cards.Com!
Neighbour has created a greeting ecard for you at Greeting-Cards.Com, the Internet's most popular greeting card service.
Your greeting card ID is: 43e297e646d1deed435601e5ee713076a3
To see your custom greeting card, simply click on the link below:
Send greeting cards from Greeting-Cards.Com whenever you
want by visiting us at:
http://Greeting-Cards.Com/
Copyright (c) 1996-2007 Greeting-Cards.Com All Rights
Reserved
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/11/2007 04:52AM
From: egreetings.Com
Sent: Saturday, August 11, 2007 4:52 AM
Subject: School-mate sent you a postcard from egreetings.Com!
School-mate has created a greeting card for you at egreetings.Com, the Internet's most popular greeting card service.
Your greeting card ID is: 5b23933165b19d3383b4c009ee64d82c3a9ebee
To see your custom greeting card, simply click on the link below:
Send greeting cards from egreetings.Com whenever you want
by visiting us at:
http://egreetings.Com/
Copyright (c) 1996-2007 egreetings.Com All Rights
Reserved
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/11/2007 02:17PM
From: vintagepostcards.com
Sent: Saturday, August 11, 2007 2:17 PM
Subject: Partner sent you a greeting ecard from vintagepostcards.com!
Partner has created a greeting ecard for you at vintagepostcards.com, the Internet's most popular greeting card service.
Your greeting card ID is: c3de8293ec6968e3ca03
To see your custom greeting card, simply click on the link below:
Send greeting cards from vintagepostcards.com whenever you want by visiting us at:
http://vintagepostcards.com/
Copyright (c) 1996-2007 vintagepostcards.com All Rights
Reserved
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/12/2007 10:32AM
From:
Sent: Sunday, August 12, 2007 10:32 AM
Subject: greeting ecard
Brother(
To see your custom greeting ecard, simply click on the following Internet address (if your mail program doesn't support this feature you will need to COPY and PASTE the address into your browser's address box):
Send a FREE greeting card from hallmark.com whenever you want by visiting us at:
http://hallmark.com/
This service is provided and hosted by hallmark.com.
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/12/2007 11:52PM
From:
Sent: Sunday, August 12, 2007 11:52 PM
Subject: Musical ecard
Uncle(
To see your custom Musical ecard, simply click on the following Internet address (if your mail program doesn't support this feature you will need to COPY and PASTE the address into your browser's address box):
Send a FREE greeting card from christianet.com whenever you want by visiting us at:
http://christianet.com/
This service is provided and hosted by christianet.com.
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/13/2007 10:10AM
From:
Sent: Monday, August 13, 2007 10:10 AM
Subject: Birthday postcard
Neighbour(
To see your custom Birthday postcard, simply click on the following Internet address (if your mail program doesn't support this feature you will need to COPY and PASTE the address into your browser's address box):
Send a FREE greeting card from free-e-cards-online.com
whenever you want by visiting us at:
http://free-e-cards-online.com/
This service is provided and hosted by free-e-cards-online.com.
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/13/2007 11:59AM
From:
Sent: Monday, August 13, 2007 11:59 AM
Subject: Funny e-card
Nephew(
To see your custom Funny e-card, simply click on the following Internet address (if your mail program doesn't support this feature you will need to COPY and PASTE the address into your browser's address box):
Send a FREE greeting card from all-yours.net whenever you want by visiting us at:
http://all-yours.net/
This service is provided and hosted by all-yours.net.
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/14/2007 06:04AM
From:
Sent: Tuesday, August 14, 2007 6:04 AM
Subject: Funny postcard
Father(
To see your custom Funny postcard, simply click on the following Internet address (if your mail program doesn't support this feature you will need to COPY and PASTE the address into your browser's address box):
Send a FREE greeting card from deepestfeelings.com
whenever you want by visiting us at:
http://deepestfeelings.com/
This service is provided and hosted by deepestfeelings.com.
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/14/2007 12:43AM
From:
Sent: Tuesday, August 14, 2007 12:43 PM
Subject: Animated card
Worshipper(
To see your custom Animated card, simply click on the following link:
Send a FREE greeting card from funsilly.com whenever you want by visiting us at:
This service is provided and hosted by funsilly.com.
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/15/2007 04:53AM
From:
Sent: Wednesday, August 15, 2007 4:53 AM
Subject: Funny postcard
Uncle(
To see your custom Funny postcard, simply click on the following link:
Send a FREE greeting card from postcards.org whenever you want by visiting us at:
This service is provided and hosted by postcards.org.
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/15/2007 05:21AM
From:
Sent: Wednesday, August 15, 2007 5:21 AM
Subject: Love ecard <my email username>
Colleague(
To see your custom Love ecard, simply click on the following link:
Send a FREE greeting card from americangreetings.com
whenever you want by visiting us at:
This service is provided and hosted by americangreetings.com.
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/15/2007 07:10PM
Sent: Wednesday, August 15, 2007 7:10 PM
Subject: Animated e-card
Good day.
Your Pal has sent you Animated e-card from funnygreetings.net.
Click on your card's direct www address below:
Copyright (c) 1996-2007 funnygreetings.net All Rights Reserved
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/16/2007 12:17AM
From:
Sent: Thursday, August 16, 2007 12:17 AM
Subject: Musical e-card
Good day.
Your Cousin has sent you Musical e-card from perfectgreetings.com.
Click on your card's direct www address below:
Copyright (c) 1996-2007 perfectgreetings.com All Rights Reserved
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/16/2007 02:40AM
Sent: Thursday, August 16, 2007 2:40 AM
Subject: Thank you postcard
Good day.
Your Neighbor has sent you Thank you postcard from usagreetings.com.
Click on your card's direct www address below:
Copyright (c) 1994-2007 usagreetings.com All Rights Reserved
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/16/2007 03:19PM
From:
Sent: Thursday, August 16, 2007 3:19 PM
Subject: love postcard
Good day.
Your Son has sent you love postcard from 123greetings.com.
Click on your love postcard link below:
Copyright (c) 1990-2007 123greetings.com All Rights Reserved
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/16/2007 10:24PM
From:
Sent: Thursday, August 16, 2007 10:24 PM
Subject: love e-card
Good day.
Your Brother has sent you love e-card from lavacards.com.
Click on your love e-card link below:
Copyright (c) 1993-2007 lavacards.com All Rights Reserved
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/17/2007 03:21AM
From:
Sent: Friday, August 17, 2007 3:21 AM
Subject: animated e-card
Good day.
Your Brother has sent you animated e-card from marlo.com.
Click on your animated e-card link below:
Copyright (c) 1992-2007 marlo.com All Rights Reserved
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/17/2007 05:13AM
From:
Sent: Friday, August 17, 2007 5:13 AM
Subject: love card
Good day.
Your Partner has sent you love card from superlaugh.com.
Click on your love card link below:
Copyright (c) 1995-2007 superlaugh.com All Rights Reserved
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/17/2007 11:26AM
From:
Sent: Friday, August 17, 2007 11:26 AM
Subject: funny e-card
Hello.
Friend has sent you funny e-card.
Your funny e-card link:
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/17/2007 01:34PM
From:
Sent: Friday, August 17, 2007 1:34 PM
Subject: Don`t worry, be happy!
I`m in hurry, but i still love you...
(as you can see on the ecard)
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/18/2007 03:37AM
From:
Sent: Saturday, August 18, 2007 3:37 AM
I got so drunk when my friend took these pictures of me. Check em out.
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/19/2007 03:54PM
From:
Sent: Sunday, August 19, 2007 3:54 PM
Subject: My friend took these pics of me, I even took some of her. wanna see?
click
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/20/2007 11:13AM
From:
Sent: Monday, August 20, 2007 11:13 AM
Subject: I am glad you liked my pics, here.s a few you will really like.
click
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/20/2007 07:27PM
From:
Sent: Monday, August 20, 2007 7:27 PM
Subject: New User Details
Dear Member,
Thank You for Joining Dog Lovers.
Confirmation Number: 7974365994
Temorary Login: user9340
Your Temp. Password ID: ex271
This Login Info will expire in 24 hours. Please Change it.
Click here to enter our secure server:
Enjoy,
Welcome Department
Dog Lovers
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/21/2007 06:09AM
From:
Sent: Tuesday, August 21, 2007 6:09 AM
Subject: Please Confirm
Welcome Member,
Are you ready to have fun at Web Cooking.
User Number: 8841261877
Temorary Login: user4566
Your Temp. Password ID: ww437
For security purposes please login and change the temporary Login ID and Password.
Follow this Link:
Welcome,
Internet Support
Web Cooking
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/21/2007 08:27AM
From:
Sent: Tuesday, August 21, 2007 8:27 AM
Subject: Internal Support
Welcome,
We are glad you joined Fun World.
Member Number: 7843697633
Temp Login ID: user2436
Your Temp. Password ID: gr515
Please Change your login and change your Login Information.
Follow this Link:
Enjoy,
Membership Services
Fun World
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/21/2007 10:45AM
From:
Sent: Tuesday, August 21, 2007 10:45 AM
Subject: New User Support
Dear Member,
We are glad you joined Online Gamers.
Account Number: 22323441814
Login ID: user1667
Your Password ID: ig789
For security purposes please login and change the temporary Login ID and Password.
Follow this link, or paste it in your browser:
Thank You,
Support Department
Online Gamers
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/21/2007 02:04PM
From:
Sent: Wednesday, August 21, 2007 2:04 PM
Subject: Internet Techincal Support
Greetings,
Welcome To Online Gamers.
Confirmation Number: 51264472973422
Your Temp. Login ID: user2560
Your Password ID: wl481
This Login Info will expire in 24 hours. Please Change it.
Follow this Link:
Welcome,
Membership Services
Online Gamers
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/22/2007 01:55AM
From:
Sent: Wednesday, August 22, 2007 1:55 AM
Subject: Tech Department
Dear Member,
Thank You for Joining Bartenders Guide.
Confirmation Number: 65971419
Temorary Login: user6050
Temorary Password: vr634
Please keep your account secure by logging in and changing your login info.
Click here to enter our secure server:
Welcome,
Technical Services
Bartenders Guide
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/22/2007 09:31AM
From:
Sent: Wednesday, August 22, 2007 9:31 AM
Subject: Internal Verification
Dear Member,
We are glad you joined Mobile Fun.
Account Number: 39951264472973
Your Temp. Login ID: user2270
Temp Password ID: dt956
For security purposes please login and change the temporary Login ID and Password.
Use this link to change your Login info:
Enjoy,
New Member Services
Mobile Fun
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/22/2007 11:34AM
From:
Sent: Wednesday, August 22, 2007 11:34 AM
Subject: Internal Verification
Welcome Member,
Are you ready to have fun at Resume Hunters.
Membership Number: 481659714193
Your Temp. Login ID: user4440
Your Password ID: rg539
Be Secure. Change your Login ID and Password.
Click here to enter our secure server:
Welcome,
Confirmation Dept.
Resume Hunters
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/23/2007 02:35AM
From:
Sent: Thursday, August 23, 2007 2:35 AM
Subject: User Verification
Welcome,
We are glad you joined Online Hook-Up.
Member Number: 71419364926566
Login ID: user4688
Your Password ID: cp334
Your temporary Login Info will expire in 24 hours. Please login and change it.
Follow this link, or paste it in your browser:
Enjoy,
Support Department
Online Hook-Up
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/23/2007 07:43AM
From:
Sent: Thursday, August 23, 2007 7:43 AM
Subject: Technical Support
Greetings,
Welcome To Mobile Fun.
Member Number: 9265666488
Temorary Login: user3350
Your Password ID: ef852
This Login Info will expire in 24 hours. Please Change it.
This link will allow you to securely change your login info:
Enjoy,
New Member Services
Mobile Fun
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/23/2007 12:09PM
From:
Sent: Thursday, August 23, 2007 12:09 PM
Subject: New User Letter
Greetings,
Welcome To Entertaining Pros.
Membership Number: 629399579
Temorary Login: user7885
Temp Password ID: tf260
For security purposes please login and change the temporary Login ID and Password.
Follow this link, or paste it in your browser:
Thank You,
Support Department
Entertaining Pros
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/25/2007 08:40AM
From:
Sent: Saturday, August 25, 2007 8:40 AM
Subject: LOL, dude what are you doing
What are you thinking...if pat sees this your divorced dude. :-{) go look at it...
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/25/2007 11:34AM
From:
Sent: Saturday, August 25, 2007 11:34 AM
Subject: oh man your nutz
Dude I know thats you, someone emailed me a link to the video. go look at it...
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/25/2007 05:16PM
From:
Sent: Saturday, August 25, 2007 5:16 PM
Subject: Dude, what if your wife finds this?
What are you thinking...if pat sees this your divorced dude. :-{) check it out yourself
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/25/2007 11:49PM
From:
Sent: Saturday, August 25, 2007 11:49 PM
Subject: where did you hook up with that?
You need to take this offline, it is in everyones email. :-( go look at it...
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/26/2007 03:16AM
From:
Sent: Sunday, August 26, 2007 3:16AM
Subject: LOL, dude what are you doing
LMAO, I cant believe you put this video online.
Everyone can see your face there. LOL see for yourself...
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/26/2007 02:59PM
From:
Sent: Sunday, August 26, 2007 2:59 PM
Subject: Who is that your with? lol
LMAO, I cant believe you put this video online.
Everyone can see your face there. LOL take a look, lol...
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/27/2007 03:04AM
From:
Sent: Monday, August 27, 2007 3:04 AM
Subject: sheesh man, what are you thinkin
OMG, what are you doing man. This video of you is all over the net. take a look, lol...
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/27/2007 05:45AM
From:
Sent: Monday, August 27, 2007 5:45 AM
Subject: are you kidding me? lol
You need to take this offline, it is in everyones email. :-( here is the link I got
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/27/2007 12:17PM
From:
Sent: Monday, August 27, 2007 12:17PM
Subject: I cant belive you did this
OMG, what are you doing man. This video of you is all over the net. this is the link to it.
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/29/2007 09:41AM
Sent: Wednesday, August 29, 2007 9:41 AM
Subject: oh man, you got to see this video
Velvet Revolver just filmed their new video.
Watch it before anyone else sees it. Go to my server to
get the video:
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 08/29/2007 12:56PM
Sent: Wednesday, August 29, 2007 12:56 PM
Subject: OMG, check out the new video
Sean Kingston finished a new video.
See it before the video is released. Go to my server to
get the video:
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 09/04/2007 10:08AM
From:
Sent: Tuesday, September 04, 2007 10:08 AM
Subject: Your E-greeting
Someone has sent you an E-Card.
To view it, follow this link:
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 09/07/2007 12:46PM
From:
Sent: Friday, September 07, 2007 12:46 PM
Subject: Who is that your with? lol
LMAO, I cant believe you put this video
online. Everyone can see your face there. LOL here is
the link I got
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 09/08/2007 09:45PM
From:
Sent: Saturday, September 08, 2007 9:45 PM
Subject: Are you ready for football season?
Life as we know it is back, NFL season is open.
Never miss a game again, and know all the stats.
Check out our online stats and game information center:
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 09/09/2007 03:56AM
From:
Sent: Sunday, September 09, 2007 3:56 AM
Subject: Do you have your NFL Game List?
We interrupt this life to bring you.....FOOTBALL!
Get all the information you need for every game.
Get you data online everyday from our free game tracker:
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 09/09/2007 08:19PM
From:
Sent: Sunday, September 09, 2007 9:19 PM
Subject: NFL Season Is Here!
Football Season Is Finally here!
Know all the games, what time, what channel and the stats.
Know everything you need with this free game tracking system:
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 09/10/2007 02:08AM
From:
Sent: Monday, September 10, 2007 2:08 AM
Subject: NFL Game List
NFL Football is BACK!
Have the details for every game, provided every day.
Stay informed for every game with our free game page:
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 09/10/2007 07:15AM
From:
Sent: Sunday, September 09, 2007 9:14 PM
Subject: FOOTBALL! Are You ready?
Football is back, Life may resume again!
Don't miss a thing because you didn't know, this season.
Never be in the dark again with this online game tracker:
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 09/10/2007 11:34AM
From:
Sent: Monday, September 10, 2007 11:34 AM
Subject: Free NFL Game Tracker
Football......Need we say more?
We want you to have all the details for every game this football season.
Get all your game info daily from our online game tracker:
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 09/11/2007 10:30AM
From:
Sent: Tuesday, September 11, 2007 10:30 AM
Subject: Do you have your NFL Game List?
Football is back, Life may resume again!
We want you to have all the details for every game this
football season.
Get all your game info daily from our online game
tracker:
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 09/11/2007 02:37PM
From:
Sent: Tuesday, September 11, 2007 2:37 PM
Subject: FOOTBALL! Are You ready?
Life as we know it is back, NFL season is open.
We can keep you on top of every single game this season.
Stay informed for every game with our free game page:
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 09/15/2007 10:10PM
From:
Sent: Saturday, September 15, 2007 10:10 PM
Subject: 1000 free games!
Click here to get over 1000 games for free
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 09/16/2007 06:26AM
From:
Sent: Sunday, September 16, 2007 6:26 AM
Subject: Get 1000 games for free
Click
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 09/16/2007 07:10PM
From:
Sent: Sunday, September 16, 2007 7:10 PM
Subject: 1000 free games!
Play
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
Received 09/17/2007 02:24PM
From:
Sent: Monday, September 17, 2007 2:24 PM
Subject: Free games!
Here are all the games you will ever need... for free
[I left names and links (except mine) in here for the search engines to find. DO NOT TRY TO CONTACT THEM! They may have sent a virus! -LE]
back to top
back to table-of-contents
End Notes
First of all - The actual ecard sites named above had nothing to do with this. In fact, at least one (I didn't look at all of them) had the following on their site:
Email Scam Alert!
Beware of fraudulent e-mails claiming you’ve received a greeting card from a [family member…friend…schoolmate…etc.]
The websites of many greeting card publishers, and the website of the Greeting Card Association (www.greetingcard.org), are being used in an Internet “phishing” scam.
Millions of e-mails falsely claiming to be from greeting card publishers have been sent to consumers around the country.
These fraudulent e-mails -- which claim to contain an e-card from an unnamed individual such as a “friend” or “schoolmate” -- instruct you to click on a link in the E-mail message to view your e-card. Clicking on the link could introduce a virus into your computer.
If you get an e-mail claiming you’ve received an e-card from a generic ‘friend’ or ‘classmate’—instead of an individual whose name or personal e-mail address you recognize — the e-mail is fraudulent and should be immediately deleted
A legitimate e-card notification will always include the actual name or personal e-mail address of the sender. The sender will never be identified by a generic term such as “friend” or “family member.”
If you are unsure if an e-card notice is legitimate, we strongly recommend that you go directly to the publisher’s website to safely retrieve your e-card and avoid the use of links. (Click here for instructions)
The Greeting Card Association has contacted the Federal Trade Commission and the FBI about this “phishing” scam.
If you have received a fraudulent e-mail regarding e-cards, we recommend that you file a complaint with the FBI’s Internet Crime Complaint Center at www.ic3.gov.
[source: Greeting Card Association - Celebrating the Tradition of Greeting Cards]
Second - Let this be a warning to you:
BE VERY CAREFUL ABOUT CLICKING ON SPAM EMAIL LINKS.
Some look like something in which you might be interested. Just remember that spam is crap. Some people get paid because they have mailing lists. Others get paid to send emails to those people IN this mailing lists. How did you get onto a mailing list? You signed up for a service somewhere. They may have asked you a bunch of questions to determine your likes and habits. They MAY have sold your email address to a spammer. Be sure to read and understand all privacy policies and terms of services/uses associated with the site. Also, be aware that if you allow them to give your information to their "partner sites", THEIR privacy policies and terms of service statements will apply.
Then, you and your family members or friends may be in the habit of sending ecards (or e-cards, depending on your preference) to each other. Most legitimate sites offer a fairly large selection of free (you don't have to subscribe) ecards. You find one you like, normally enter your name and email address, the recipient's name and email address, and, in many cases, a message. The recipient receives an email very much like those in Tactic #1, above. However, the differences would be that it would use your name, most likely include your email address, give the identification of the card, a link directly to their site (so you can cut and paste the card id to retrieve your card), and a link directly to the card, itself, but the links should be NAMED. THERE SHOULD BE NO IP ADDRESS IN THE LINK.
Others, (see Tactic #2, above), offer the men (who apparently use email more than women), chances to view free pictures or movies - some of which could easily grace the pages of Playboy, and others that would make some porn-meisters blush! One thing to remember... If you view something on a webpage, it has been downloaded to your computer. After a while (depending on your settings) it may go away, but for that time, it's there!
Then there are those who get you to a site (named or otherwise), by sending you an email thanking you for joining (Tactic #3, above.) If you DIDN'T join, it's probably spam, especially if the link they give you is untranslated (IP only - no name. If you haven't read my note, above, you may wish to, now.). If there's a name and you are worried, go directly to the site. Try to log in with the information provided in the email. I will bet it doesn't work. If it DOES, check the account information to be sure it's NOT yours. If it IS, and you didn't sign up for it, you may have a grievance/problem.
UPDATE: 08/25/2007 - Now I've started getting emails saying that I've done something wrong - Tactic #4, above (can't be me... I'm at home almost all the time, right now, working on my computer and watching TV!). And, if it wasn't ME, there must have been some mistake. Hmmm... I wonder what that YouTube video shows? DON'T CHECK IT OUT. Remember the old saying, "Curiosity killed the cat", or in this case, your computer! The actual YouTube link shown might be valid, but under that link is NOT a YouTube page, but an unnamed IP link.
UPDATE: 09/09/2007 - I got a couple of Fan spams - for supposedly new videos by big-name artists. Now that football season is in gear, I'm getting "offers" for football stats and stories. (see Tactic #5, above) - All of you VERY into Sports of any type, especailly Fantasy sports, need to be extremely careful. Remember, "spam is spam and spam is crap".
UPDATE: 09/17/2007 - More and more of Tactic #5. They were for football and NFL fans at the start of the season, and will probably continue throughout. I'm sure when the NBA starts up, they will start pushing them. And now, they are also hitting the on- and off-line game enthusiasts.
Remember ... If your kids use your computer, receive and send emails and IMs, etc., that many of them are really into games. They will want to check out all the "free" games offered. They will have to download something to sign in, or they will have to download the game. From most named sites, these games are "clean" - meaning they've been scanned and stored, some for download, without malware in them. From some, they will include some spyware, and from others, they will include even stronger malware or viruses. Be sure your kids read this page, and understand how they can be conned into opening viruses that can wreck your computer, or spyware invading your family's privacy. If they want to download something, be sure they ask you, and you verify the site is valid, first.
NOTE About these emails (specifically noting Tactic #3)
SPAMMERS HAVE A NEW TRICK
This week, I’ve been receiving a lot of confirmation e-mail messages. They’re for job sites, gambling sites, dating services and other things. I did not sign up with any of these sites.
So what’s going on? These confirmation messages are just a new disguise for the Storm Worm Trojan. The messages contain an IP number to confirm your registration. Click on the link, and the site will attempt to install malware. The malware is disguised as a “Secure Login Applet.”
No doubt you’ve received some of these messages, too. Delete them! The Storm Worm Trojan will turn your computer into a zombie.
[Source: Kim Komando Show August 25, 2007 (Vol 11, No 34) Electronic Newsletter]
Keep repeating to yourself:
Spam is Spam and Spam is CRAP
[Note the absence of the registered trademark symbol]
THERE SHOULD BE NO IP ADDRESS IN A LINK.
Basically, the idea is to BE VERY CAREFUL with spam emails and their links.
Send comments/questions about this page to Bill Sanders at:
Go to
Email Example #009-012 (Card from Neighbor or School Chum)
(the original page)
Go to Malware
(Viruses, Adware, Spyware) Home page
Go to Malware Examples Home Page
Send email to Bill Sanders
()
with questions or comments about this page or site.
This site, all text and graphics (unless otherwise noted) on it
were designed, developed and published by Bill Sanders of Orange Frog Productions.
It and it's CSS was validated and complies with both the:
CSS and
HTML 4.01
validators from W3C.
NOTE: All CSS validates except the "New Window Buttons"
which include some invalid code (ie: hacks),
added PicoSearch Tables,
and warnings for using transparent backgrounds when color foregrounds defined.
Copyright © 2003, 2004, 2005, 2006, 2007 by Bill Sanders / Full site last modified: October 21, 2006
Any reproduction, printing, or selling of this content is
prohibited without express written consent from William D.
Sanders.
![Welcome to Orange Frog Productions Scams, Shams & Flim-Flams Section [Banner]](images/ssff/ofp_banner_ssff.jpg)




