FetishWealth.com - An invoice for payment - GoFuckYourself.com

zerovic · 03-15-2017, 07:00 AM

Hey guys,

Did any of you receive a mail from fetishwealth.com recently? The subject says: "An invoice for payment"

And the message:

Quote:

Hello, an invoice for payment № 289 according to the contract P/082273 from 15.03.2017. ( use WinRAR )

Regards,
FW Support

There's a RAR file attached to the mail, which contains a docx file. Opening it shows the FetishGirls logo on the top, and a smaller, invoice like image in the middle

It also says "To open an image double click on it"

When double clicked, it this popup comes up

I didn't run it of course lol..

What's interesting is that I have my payout set to $100 via paxum and my account currently stands on $17.40

I'm pretty sure this isn't legit, as even if the letters and numbers are small, the amounts on the thumbnail doesn't seem to be anything near $17.40

The only thing I can think of is that their affiliate database got compromised.. not sure tho

I have contacted then about this, but no response so far..

CPA-Rush · 03-15-2017, 07:04 AM

seems legit , run it on sandbox .

Spunky · 03-15-2017, 07:10 AM

It's a phish

Adraco · 03-15-2017, 07:10 AM

I also got the email, but sent to my OLD email account, that I used when I signed up but have since then changed.

I got the same reference numbers, No 289 and contract number P/082273.

Since they pay out beginning of the month, it does not make sense to send something mid-month. And why would it be sent as a .rar, if not as a way to bypass email anti-virus scanners?!

This is most likely a scam or phising attempt.

zerovic · 03-15-2017, 07:13 AM

So, tried double clicking on the invoice in sandboxie, and it opened the typical get flashplayer in firefox, and the invoice thumbnail changed to

so, yea, there's definitely something in there haha

fetishwealth · 03-15-2017, 07:49 AM

Hey, really sorry about that, we're looking into how this happened and attempting to get it resolved at the moment, but definitely do NOT open any attachment coming from that email.

yuu.design · 03-15-2017, 09:54 AM

i received this email too

03-15-2017, 07:04 AM	#2
CPA-Rush small trip to underworld Industry Role: Join Date: Mar 2012 Location: first gen intel 80386/nintendo-gb/arcade/ps1/internet person Posts: 4,927	seems legit , run it on sandbox . __________________ automatic exchange - paxum , bitcoin,pm, payza . daizzzy signbucks caution will black-hat black-hat your traffic ignored forever :zuzana designs {firefox- remove some posters \|skills#1\|skills#2\| email >[email protected] } ツ

03-15-2017, 07:10 AM	#3
Spunky I need a beer Industry Role: Join Date: Jun 2002 Location: ♠ Toiletville ♠ Posts: 133,895	It's a phish __________________ *Skype : Spunky GFY*

03-15-2017, 07:10 AM	#4
Adraco Confirmed User Industry Role: Join Date: May 2009 Location: Onboard an airplane around the globe Posts: 3,714	I also got the email, but sent to my OLD email account, that I used when I signed up but have since then changed. I got the same reference numbers, No 289 and contract number P/082273. Since they pay out beginning of the month, it does not make sense to send something mid-month. And why would it be sent as a .rar, if not as a way to bypass email anti-virus scanners?! This is most likely a scam or phising attempt. __________________ ---------------------------------------------------------------------------------- The truth is not affected by the beliefs, or doubts, of the majority.

03-15-2017, 07:13 AM	#5
zerovic Confirmed User Industry Role: Join Date: Apr 2010 Posts: 1,036	So, tried double clicking on the invoice in sandboxie, and it opened the typical get flashplayer in firefox, and the invoice thumbnail changed to so, yea, there's definitely something in there haha __________________ php, html, jquery, javascript, wordpress - contact me at contact at zerovic.com

03-15-2017, 07:49 AM	#6
fetishwealth Confirmed User Industry Role: Join Date: Nov 2006 Location: Miami, FL Posts: 1,424	Hey, really sorry about that, we're looking into how this happened and attempting to get it resolved at the moment, but definitely do NOT open any attachment coming from that email. __________________ ::BRUTALPOV.COM RECENTLY LAUNCHED ON FETISHWEALTH.COM:: FETISHNETWORK.com & 40+ PREMIUM FETISH SITES CONVERTING @ 1:423 & WITH AMAZING RETENTION! CONTACT: [email protected] ICQ#453~008~880

03-15-2017, 09:54 AM	#7
yuu.design Too lazy to set a custom title Industry Role: Join Date: Mar 2006 Location: Argentina Posts: 25,924	i received this email too __________________ Beautiful And Usable Web Design Creations For The Adult Industry Since 2003 I'm Yuu, Designer and Content Producer Paysites - Affiliate Programs - Dating & Cam Sites - Mainstream Projects - Tube Sites - Banners - Wordpress Themes - NATs integration - Landing Pages Check my Portfolio and Content Production Offers