{"id":4670,"date":"2013-05-20T18:46:55","date_gmt":"2013-05-21T02:46:55","guid":{"rendered":"http:\/\/al6400.com\/blog\/?p=4670"},"modified":"2013-05-20T18:47:22","modified_gmt":"2013-05-21T02:47:22","slug":"fake-walmart-tv-purchase-phishing-scam","status":"publish","type":"post","link":"https:\/\/www.al6400.com\/blog\/fake-walmart-tv-purchase-phishing-scam\/","title":{"rendered":"Fake Walmart TV Purchase"},"content":{"rendered":"<p>Well, looks like someone out there is trying the old e-mail phishing scam again.  This time it looks like they are trying to pretend to be Walmart.com and attempting to scare people in making them think that they made a purchase.  This is what the e-mail looks like:<\/p>\n<p align=\"center\"><img decoding=\"async\" src=\"http:\/\/www.al6400.com\/bpic\/walmartscama.jpg\" alt=\"Walmart TV Phishing Scam\"\/><\/p>\n<blockquote><p>From &#8211; Thu May 16 14:26:40 2013<br \/>\nX-UIDL: 1368709532.17838.pt01<br \/>\nX-Mozilla-Status: 0001<br \/>\nX-Mozilla-Status2: 00000000<br \/>\nX-Mozilla-Keys:<br \/>\nReturn-Path: <particlezdag24 @mail.wallmart.com>\nReceived: (fqmail 17837 invoked from network); 16 May 2013 13:05:32 -0000<br \/>\nReceived: (qmail 15440 invoked from network); 16 May 2013 13:05:32 -0000<br \/>\nReceived: from 36-230-174-36.dynamic-ip.hinet.net (36-230-174-36.dynamic-ip.hinet.net [36.230.174.36])<br \/>\nReturn-path: <\/particlezdag24><particlezdag24 @mail.wallmart.com>\nDelivery-date: Thu, 16 May 2013 21:05:20 +0800<br \/>\nReceived: from [16.34.49.217] (port=60661 helo=[192.168.199.151])<br \/>\n\tby 36.230.174.36 with asmtp<br \/>\n        id 5YLB76-7112H5-If; Thu, 16 May 2013 21:05:20 +0800<br \/>\nX-EN-OrigIP: 36.230.174.36<br \/>\nX-EN-IMPSID: WLKW1l02w0lF5W901LKWYU<br \/>\nDKIM-Signature: v=1; a=rsa-sha256; c=simple\/simple;<br \/>\n  d=walmart.com; i=help@walmart.com; q=dns\/txt; s=IP;<br \/>\n  t=1367353171; x=1398889171;<br \/>\n  h=date:message-id:to:from:cc:subject:<br \/>\n   content-transfer-encoding;<br \/>\n  z=Date:=20Tue,=2030=20Apr=202013=2013:19:24=20-0700=20(PDT<br \/>\n   )|Message-Id:=20&lt;201304302019.r3UKJOLd022606@ndc-fulmaila<br \/>\n   pp3.walmart.com>|To:=20tom@tomgivens.com|From:=20&#8243;Walmart<br \/>\n   .com&#8221;=20<help @walmart.com>|CC:=20|Subject:=20Thanks=20for<br \/>\n   =20your=20Walmart.com=20Order=202677175-375050;<br \/>\n  bh=Y5\/lWjKcTaPNp8T8dOICiPv+PwPN9urNh\/jRID58VAU=;<br \/>\n  b=btTEEO7LpaM983cciYDSzAai3ciXwZxh7\/LWlEci41J17LEU\/kS4D\/TN<br \/>\n   fkXgtUVI\/SrLjh\/7sH3+0daB9OdkRzRYpVWrQDWGnC6VTbYjY1ex4qRgr<br \/>\n   HsvHvxo\/OvUlB67Y4PlUL8ahqxh9OqELNVXebj35MuQP6gKD78lLB26Ws<br \/>\n   M=;<br \/>\nAccreditor: Habeas<br \/>\nX-Habeas-Report: Please report use of this mark in spam to <http: \/\/www.habeas.com\/report><\/http:><br \/>\nDate: Thu, 16 May 2013 21:05:20 +0800<br \/>\nMessage-Id: &lt;705711808426.ICRFUIFS346176@ndc-fulmailapp4.walmart.com><br \/>\nX-Authentication-Warning: ndc-fulmailapp5.walmart.com: batch set sender to orders@mail.wallmart.com using -f<br \/>\nFrom: Wallmart.com <electroplating701 @services.wallmartmail.com><br \/>\nErrors-To: eorderconfirm@mail.wallmart.com<br \/>\nSubject: Thanks for your Walmart.com Order 6036254-090423<br \/>\nMIME-Version: 1.0<br \/>\nContent-Type: multipart\/alternative;<br \/>\n        boundary=&#8221;&#8211;Boundary-49=_0B139ELD_PC76FKN4K&#8221;<\/p>\n<p>Thanks for ordering from Walmart.com. We&#8217;re currently processing your order.<br \/>\nItems in your order selected for shipping<\/p>\n<p>\u2022 You&#8217;ll receive another email, with tracking information, when your order ships.<\/p>\n<p>\u2022 If you&#8217;re paying by credit card or Bill Me Later\u00ae, your account will not be charged until your order ships. If you see a pending charge on your account prior to your items shipping, this is an authorization hold to ensure the funds are available. All other forms of payment are charged at the time the order is placed.<br \/>\nShipping Information<br \/>\n  \tShip to Home \t <\/p>\n<p>Liam Wilson<br \/>\n2636 Burgess St<br \/>\nSt Peters, DC 68025-3157<br \/>\nUSA<\/p>\n<p>Walmart.com \tOrder Number: 6036254-090423<br \/>\nShip to Home &#8211; Standard<br \/>\nItems \tQty \tArrival Date \tPrice<br \/>\nToshiba UN48EH8000 62&#8243; 1080p 400Hz Class LED (3.7&#8243; ultra-slim) 3D HDTV \t1 \tArrives by Tue., May 21<br \/>\nEligible for Free Standard Shipping to Home. \t$898.00<br \/>\nSubtotal: \t$898.00<br \/>\nShipping: \tFree<br \/>\nTax: \t$62.86<br \/>\nSee our Returns Policy or<br \/>\ncontact Customer Service \tWalmart.com Total: \t$960.86<br \/>\nOrder Summary<br \/>\nOrder Date: \t05\/15\/2013<br \/>\nSubtotal: \t$898.00<br \/>\nShipping: \tFree<br \/>\nTax: \t$62.86<br \/>\nOrder Total: \t$960.86<br \/>\nCredit card: \t$960.86<\/p>\n<p>Billing Information<br \/>\nPayment Method:<br \/>\nCredit card<br \/>\nIf you have any questions, please refer to help.walmart.com or reply to this email and let us know how we can help.<br \/>\nThanks,<\/p>\n<p>Your Walmart.com Customer Service Team<br \/>\nwww.walmart.com<\/electroplating701><\/help><\/particlezdag24><\/blockquote>\n<p>This one is a little more apparent that it is illegitimate as they try to get you to go to a misspelled domain called \u201cWallmart.com\u201d as opposed to \u201cWalmart.com.\u201d  As usual, I&#8217;m sure someone out there may have fallen for it so be sure to just dump it in the trash.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Well, looks like someone out there is trying the old e-mail phishing scam again. This time it looks like they are trying to pretend to be Walmart.com and attempting to scare people in making them think that they made a purchase. This is what the e-mail looks like: From &#8211; Thu May 16 14:26:40 2013 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":12143,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_newsletter_tier_id":0,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[6],"tags":[4310,4311,1339,4309,4308,880],"class_list":["post-4670","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-money-making-scams","tag-fake-purchase","tag-online-order","tag-phishing-scam","tag-tv-purchase","tag-wallmart-com","tag-walmart"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/www.al6400.com\/blog\/wp-content\/uploads\/2015\/01\/IMG_0768-1300x866.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6VnHC-1dk","_links":{"self":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts\/4670","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/comments?post=4670"}],"version-history":[{"count":2,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts\/4670\/revisions"}],"predecessor-version":[{"id":4672,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts\/4670\/revisions\/4672"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/media\/12143"}],"wp:attachment":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/media?parent=4670"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/categories?post=4670"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/tags?post=4670"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}