Got Paid Reports (WinnerEarn)

[shriganesh]

Beware of email spoofing techniques now a days used by malicious hackers to attack you.

I want to explain all of you what is email spoofing. I was just now attacked two times when a malicious hacker used the following email id's

admin at superhotpay dot com
superhotpay at superhotpay dot com
admin at large-profit.com
admin at trust-income dot com

to send me email which looks like as if superhotpay and trust-income admins have sent me emails. But NO actually this is hacker's game.

SO DON'T GET FEARED BECAUSE ACTUALLY SUPERHOTPAY OR TRUST-INCOME DID NOT SEND THESE MAILS. THESE ARE THE TRICKS USED BY MALICIOUS HACKERS and COMPETITORS AND MISCHEVIOUS PEOPLE TO SPOIL NAME OF REPUTED AND GENUINE HYIPS.

How they do email spoofing and what is email spoofing? I want to explain this to everyone on this forum so that they do not get confused when they get a phishing mail where FROM FIELD contains email id of reputed and genuine hyips.

Email Spoofing: It's an action taken by malicious hackers who use the authorized email id's of reputed and genuine hyips with an intention to spoild their name on internet. When you or me receives a mail we always check the FROM field i.e. the FROM field which specifies which email account has sent you email. Actually here is how they do email spoofing:

Hackers first go to ANONYMAILER dot net Site for sending free anonymous joke emails like sites which provide anonymous email facility or email spoofing facility.
In "FROM NAME" and "FROM EMAIL" FIELD hackers enter the email id which he wants to misuse. Some sent me a threat email before few minutes by using the above two email id's. Actually hackers do these type of tricks to confuse us. So, that we get into fear and we think that the email was from original admin of the concerned hyip's email id's specified above.

Then he writes a letter asking you to send payments or follows some steps on liberty reserve and so on. Sometimes they will send you email for fear that your account has been blocked. Sometimes they will send emails specifying that the sender is the admin of so and so hyip and that he is closing the company. This way investors get into fear and withdraw all their money and then genuine hyips come into problem when all investors get out.

If anyone has any query regarding email spoofing I am there to help and guide them.

Sincerely

Kalpesh Sharma
Research Expert
Technical Intelligence Expert
IT Security Expert

[shriganesh]

Just read this email communication and you will come to know the truth of winnerearn.com

Winnerearn.com did this email spoofing attack on superhotpay, large-profit, me and trust-income. I have full proof solid evidence about this. Below is a recent email that I sent to admin of large-profit.com that how winnerearn is using email spoofing techniques by misusing large-profit.com 's email id and sending threat and phishing email attacks to large-profit.com investors. Winnerearn is the culprit behind sending all these threat and malicious hacking attempts. Read it your self with complete headerfile, ip address, mailserver from where email was routed to my inbox, timedate stamp, etc. Here is the copy paste of email which I recently sent to large-profit.com admin and informed him that how the competitor winnerearn is doing malicious and hacking activities against large-profit.com

Here starts the copy paste ============

I have traced the hacker. All the three emails that I recieved were sent by
mail server winnerearn.com

They are the culprits who are misusing your name. Here is genuine technical
intelligence evidence:

When I checked the email header on ip2location.com/emailtracer.aspx

I saw that the mail was sent by
E1RC5qx-00075C-IY at winnerearn.r47.dragonara.net

Here is the header file of the email I received where winnerearn.com(your
competitor) is MISUSING your name and sending emails to your investors:

Delivered-To: pvtint at gmail.com
Received: by 10.220.168.85 with SMTP id t21cs181268vcy;
Fri, 7 Oct 2011 01:30:24 -0700 (PDT)
Received: by 10.216.168.143 with SMTP id k15mr2235758wel.111.1317976224212;
Fri, 07 Oct 2011 01:30:24 -0700 (PDT)
Return-Path: <nobody at winnerearn.r47.dragonara.net>
Received: from backup.b2bstoragemail.com (backup.b2bstoragemail.com.
[84.19.161.65])
by mx.google.com with SMTP id f8si5976681wed.4.2011.10.07.01.30.23;
Fri, 07 Oct 2011 01:30:24 -0700 (PDT)
Received-SPF: neutral (google.com: 84.19.161.65 is neither permitted nor
denied by best guess record for domain of
nobody at winnerearn.r47.dragonara.net) client-ip=84.19.161.65;
Authentication-Results: mx.google.com; spf=neutral (google.com: 84.19.161.65
is neither permitted nor denied by best guess record for domain of
nobody at winnerearn.r47.dragonara.net)
smtp.mail=nobody at winnerearn.r47.dragonara.net
To: pvtint at gmail.com
Subject: Large-Profit Pending Withdrawals!
From: admin at large-profit.com
Reply-To: admin at large-profit.com
Message-Id: <E1RC5qx-00075C-IY at winnerearn.r47.dragonara.net>
Date: Fri, 07 Oct 2011 04:32:23 -0400


----- Original Message -----
From: "Kalpesh Sharma" <pvtint at gmail.com>
To: <admin at large-profit.com>; <info at large-profit.com>;
<support at large-profit.com>
Sent: Friday, October 07, 2011 2:12 PM
Subject: Re: Large-Profit Pending Withdrawals!


>I have received another email as mentioned below from some malicious hacker
> who is using email spoofing techniques by sending me emails on your name.
> Check this and inform all your investors. I am there to help you, don't
> worry. I got two emails which looks like as if were sent by you, but I am
> a
> world record holder and IT Security Expert and quickly identified that
> these
> are spoofed email techniques which malicious hackers are using to spoil
> your
> hyip's reputation on internet. You need to post this on your news section
> and send a mass mail to all your existing investors before these hackers
> create any kind of trouble for your company. I am a person who helps all
> hyip admins and all investors when something strange is observed during my
> research. It was my duty to inform you and that's why I am informing you.
>
> Have a nice day
>
> Sincerely
>
> Kalpesh Sharma
> Research Expert
> Technical Intelligence Expert
> IT Security Expert
>
> ----- Original Message -----
> From: <admin at large-profit.com>
> To: <pvtint at gmail.com>
> Sent: Friday, October 07, 2011 2:02 PM
> Subject: Large-Profit Pending Withdrawals!
>
>
>> Hello dear Large-Profit member,
>>
>> We are sorry for the recent delays in LibertyReserve withdrawals. We
>> upgraded some of our server hardware and software, but unfortunately we
>> are not able to process LR payouts now. An action is required at your
>> side to be taken so our script can send your pending withdrawal.
>>
>> 1. Login to your LR account, go to Merchant Tools.
>> 2. Click on Create new API
>> 3. Enter the following entries
>> 3.1. API Name: largeprofit
>> 3.2. Sec. Word: largeprofit1
>> 4. Tick ENABLED
>> 5. Tick BALANCE
>> 6. Tick TRANSFER
>>
>> Enter your PIN and submit to save the configuration. Please reply to this
>> e-mail with your LR account number.
>>
>> We will then make the adjustments needed to process your pending payout
>> ASAP.
>>
>> Large-Profit Team
>>
>


Here ends the copy paste ============

[shriganesh]

Originally Posted by winnerearn

You're very welcome. Thank you for your support!

Why the hell are you hacking and sending me spoofed emails by misusing the genuine hyips who are paying me regularly specified above? You ass, you mother ****er. Stop it with me, ok? Else you will be in a big trouble. I will find you anywhere in the world whatsoever proxy IP's or anonymous servers or anonymous private dns you are using. OK? I never mess up unnecessarily with anyone and always try help monitors, admins of hyips and also investors. But if someone does these kinds of acts then I get out of control. Hope you understand that? I am not an ordinary guy with NO technical knowledge whom you can easily fool and with whom you play emotional games of sweet dialogues in the discussion forums. It won't be a big deal for me to find you and kick you. So, stop sending such threat and phishing mails to me by misusing other genuine and honest hyip email id's just because they are your competitors.

Kalpesh Sharma
Research Expert
IT Security Expert
Technical Intelligence Expert - Worked With Army Intelligence during New Delhi Serial Bomb Blasts.