Anyone know what this is?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Elite Baiter Joined: 19 Jan 2009 Posts: 1440

Been getting a ton of these lately. The "Download Postal Receipt" is clickable, but clicking it does nothing.

Screen shot:

Hello I'm New here! Joined: 30 Nov 2012 Posts: 9

just done a whois look up.

Information below, obviously fishy; since the website is a furniture place. email acct hacked maybe?
----------------------------------
Registrant:
Lexington Furniture Industries
1300 National Highway
Thomasville, NC 27360
US

Domain Name: LEXINGTON.COM

Administrative Contact, Technical Contact:
Hemphill, Rick
Lexington Furniture
1300 National Highway
Thomasville, NC 27360
US
336-474-5369 fax: 336-474-5769

Record expires on 25-Apr-2017.
Record created on 24-Apr-1995.

Domain servers in listed order:

NS49.WORLDNIC.COM 205.178.190.25
NS50.WORLDNIC.COM 206.188.198.25
-----------------------------------------------------

Posted: Thu Dec 27, 2012 1:08 pm

Quite a few users have reported that clicking the link tries to install a malicious .exe file. In some cases it phones home to Turkey.

These messages have become so widespread that Fedex posted a specific notice on their site warning customers not to click or open emails with such content.

Baiting Guru Joined: 27 Mar 2011 Posts: 21155

I have gotten a number of these in both forms. The express delivery and the Fedex. I just assumed it was a virus attempt so deleted them.

Elite Baiter Joined: 19 Jan 2009 Posts: 1440

Thanks. I thought it might be an phishing attempt or a form requested money for delivery or some such crap.

The Lexington addy is definitely stolen. I've had no virus warnings when I try to click on the link. Maybe the scammers just messed up.

Anyone know what this is?	View next topic View previous topic