Where Mugu's come to LEARN!
The Fake Hallmark Card Scam
Contents - List
of Scams by Type and by profession.
If this site has kept you from losing money a donation
would be appreciated.
Analysis Rating: This one is a bit tricky... and not bad as far as
scams go. The idea is to get you to click on the link for the card..
but notice there is no name on the card as where it comes from, but
the other links do go to Hallmark. The main link for the card though
goes to: an FTP or File Transfer Protocol at infoasturias.com and
downloads an executable file. This is either a malicious program or
a spy program to steal information about banking, affiliate
programs, or other things that make you money.
Just because it says hallmark does not mean it IS from
hallmark and there are ways to make you think that it is from
hallmark. In the example above a period or DOT before the actual
address makes it appear to be Hallmark when it is actually
Received: from rly-dc01.mx.aol.com (rly-dc01.mail.aol.com
[172.19.136.30]) by air-dc04.mail.aol.com (v121_r4.4) with ESMTP id
MAILINDC043-b03491cc5fd321; Thu, 13 Nov 2008 19:27:58 -0500
Received: from knittersonlinenews.com (knittersonlinenews.com
[22.214.171.124]) by rly-dc01.mx.aol.com (v121_r4.4) with ESMTP id
MAILRELAYINDC017-b03491cc5fd321; Thu, 13 Nov 2008 19:27:41 -0500
Received: from [126.96.36.199] (HELO crechemania.com)
by knittersonlinenews.com (CommuniGate Pro SMTP 4.2.9)
with ESMTP id 1961490 for email@example.com; Thu, 13 Nov 2008 18:25:43
Received: by crechemania.com (Postfix, from userid 1025)
id 07DB21A7FEC5; Thu, 13 Nov 2008 18:25:43 -0600 (CST)
Subject: You've received A Hallmark E-Card!
From: "hallmark.com" <firstname.lastname@example.org>
Date: Thu, 13 Nov 2008 18:25:43 -0600 (CST)