Watch out for someone posing as Carl Juvrud He will respond to an that you have on here then he will send you a link with this is a picture of what I want it will go to a fake QRZ sign in page trying to get your username and password
Yeah I got an email from this guy yesterday and was wondering about it. His email looked like it was written by a two year old. Thanks for the heads up!
question? How does he get our email if it is not posted anywhere? You have to be logged into the qrz website to associate it with the call signs. I didn't post it in any messages on the internet
There's an active site in Poland, that appears to be collecting login credentials: onqrz.xxx.cc, with a fake QRZ login page. This is just a theory, but I poked around the site and didn't find much other than fake QRZ login pages and a protected cgi-bin directory. The URL onqrz.nut.cc is a dead giveaway. IP address: 37.72.171.98 A whois lookup on the ip address turns up a hosting company in Poland: role: Eureka Solutions Hostmaster Team address: Eureka Solutions Sp. z o.o. address: ul. Wlodkowica 21 address: 50-072 Wroclaw address: POLAND e-mail: ripe@swiftnoc.com abuse-mailbox: abuse@swiftway.net See the following thread: https://forums.qrz.com/index.php?th...ited-emails-beware.535256/page-3#post-4043950 There could be more.
From - Tue Nov 22 16:18:32 2016 X-Account-Key: account3 X-UIDL: 11e6-b0eb-54bcc27a-8cd9-0021281414b6 X-Mozilla-Status: 0003 X-Mozilla-Status2: 00000000 X-Mozilla-Keys: Status: U Return-Path: <cwjuvrud@gmail.com> Received: from mx-pinchot.atl.sa.earthlink.net ([207.69.195.25]) by mdl-afraid.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1C9gUi5PL3Nl36X0; Tue, 22 Nov 2016 14:39:06 -0500 (EST) Received: from mail-qt0-f174.google.com ([209.85.216.174]) by mx-pinchot.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id 1C9gUh4iD3Nl34d0 for <baronscarpia@earthlink.net>; Tue, 22 Nov 2016 14:39:05 -0500 (EST) Received: by mail-qt0-f174.google.com with SMTP id w33so19134196qtc.3 for <baronscarpia@earthlink.net>; Tue, 22 Nov 2016 11:39:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:from:date:message-id:subject:to; bh=FFqtQTF0NY0LnV1DH5JS7dE1uDzY21tYsW1NgasgHeU=; b=f7kztuUq5IyUExKdef0ISkc0mxCin75HoKSdcqyrFxr7DGwPhR24TOnXrkhXtHvpnT SW4Z4rXRG62mRnhi+dIZolCnXTTGmmPQxFFu6JbipFyqAGJFX0JpHRjTPvFapaUANCHt /LY0pC04YDhLTszNyYGpo4IbrBfOdTwLXOfFlqeKPBbmZFPApPZv/NaNG2FqIBq5f5ht 4OyWFXJUJsYFq5bRn7arUuY+8WKFOug6t6BUSltYs0fUt7rinYGzoYwaQ8EaNMBeaH28 +Lll7W1q0nTpzX01sCUJc5vqJAWt89JujH0BqgNaTQiMuDvHIu9tZXMAWUDLtn/i6WR3 l+Tw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=FFqtQTF0NY0LnV1DH5JS7dE1uDzY21tYsW1NgasgHeU=; b=L6Kow003DaQ5800Tn0KfWt5UBYqWVfzfIPlSlm2xSu/rWLFQJoTyVJpY8h923TxXbV YgTEYLKvGnV01HWY2XvU8ASsYFGp77P/HEl8NFZqZ4Jm9KXPvo0ZjfUg4e9AjPOcWRX8 HIC24tVwsVGVN+cAOuwsm/c9OJb0TjC4HCRh8snA79O3R3794HhPM7mvzVsw5lGzarko adnZ/ICJnoBLsdLhV8Y+omXKmBR8QBuGog1uB1yKh8T0b0Mvt+2Q7cYn8KtG/gQSlIrU 2VPqJHML/Mle+7CGdY/eQylMi+3xtgP4iv/f0WgaVt6N5Tk0xDp9HpoB9Jt5IVg8CM38 NNcg== X-Gm-Message-State: AKaTC00OUUK7uiRCYU0PEVPr4aX5LFsd2/wP1/7yJiRd2hAaKfnCWswjIsAuWYGtgiWgXIpCTdiInsITCTVD1Q== X-Received: by 10.200.56.253 with SMTP id g58mr13115539qtc.201.1479843545442; Tue, 22 Nov 2016 11:39:05 -0800 (PST) MIME-Version: 1.0 Received: by 10.237.35.145 with HTTP; Tue, 22 Nov 2016 11:39:05 -0800 (PST) From: Carl W Juvrud <cwjuvrud@gmail.com> Date: Tue, 22 Nov 2016 11:39:05 -0800 Message-ID: <CACdNOKayezKtm=ohnxp7bxfOsGCEratH1A+smYYWPSq3L=0fVg@mail.gmail.com> Subject: ICOM IC-735 To: baronscarpia@earthlink.net Content-Type: text/plain; charset=UTF-8 X-ELNK-Received-Info: spv=0; X-Authentication-Results: dkim="pass"; (0:no or failed dkim processing); dmarc="none"; (1); dwl="miss"; den="not exempt" X-ELNK-AV: 0 X-ELNK-Info: sbv=0; sbrc=.0; sbf=bb; sbw=000; X-Antispam: clean, score=2 X-Antivirus: avast! (VPS 161122-0, 11/22/2016), Inbound message X-Antivirus-Status: Clean i am interested . do you take paypal 73 Received the preceding from "Carl", 22 Nov '12 with a 1339 time stamp in response to my "FOR SALE" ad. EXACTLY the same message I received in response to an earlier post. Seems he has a limited English vocabulary. I don't & he got it in my reply. I suspect that this creature got my email address off of QTH where I posted the ad or "it" maintains a call sign / email database. Happy Thanksgiving & 73! Jerry N9LCD
I just got a reply from him about a for sale item I have listed. He contacted me at my email address and gave no callsign, just his name. I did the name lookup and found him here. Merry Christmas, WB4YAL John
Got a mail from him today on item I have for sale.. Thought name sounded familiar when asked for his call, got the hedge and dodge.. Mailed him back, YOU ARE A SCAMMER, NO DEAL! END OF STORY.
Scammer must be trying new tactic now... he was only trying to buy. Seems he's trying the deal where he sends more money than agreed with a phony check.
