[SOLVED] Scammer operating on these forums

In case you don't know by now, the user "denis50" is a scammer. I guess its about the advance fee fraud and hope none of our joomlapolis friends gets conned by this.

Admin, It would be good if you could remove this person asap. from the system.

Cheers

Cliff

---

This is a message from denis50 at Joomlapolis.com ( www.joomlapolis.com ) to you:

---

Good day,
How is everything with you, I picked interest on you after going through your short profile and deemed it necessary to write you immediately. I have something very important to disclose to you, but I found it difficult to express myself here, since it's a public site. Could you please get back to me on my private email: XXXXXXX for the full details?

Have a nice day and God bless you,
Mr.XXXX.
From France

Edited your post to remove spam email post - no need to give it even further exposure.

Thanks for reporting. You are actually the third person to report this (other 2 used the profile Report button).

We have blocked spammer and removed PM messages he sent.

Thanks a lot, sorry I did not know there was a report profile button! Will remember for future.

please fee free to delete this post!

Cliff

He's moving to direct emails too. This one from 5:00pm MDT Sunday. and apparently through your pop/smtp.
reply to mr.denisclaude51@outlook.fr
mailed from Claude1956 @ Joomlapolis.com [mr.denisclaude50@yahoo.fr]

Received: (qmail 20547 invoked by uid 30297); 23 Feb 2015 00:08:23 -0000
Received: from unknown (HELO p3plibsmtp01-15.prod.phx3.secureserver.net) ([72.167.238.231])
(envelope-sender <mr.denisclaude50@yahoo.fr>)
by p3plsmtp06-02.prod.phx3.secureserver.net (qmail-1.03) with SMTP
for <***@***.com>; 23 Feb 2015 00:08:23 -0000
Received: from mx5.joomlapolis.com ([80.74.152.231])
by p3plibsmtp01-15.prod.phx3.secureserver.net with bizsmtp
id vc8N1p0064zoWPC01c8Puh; Sun, 22 Feb 2015 17:08:23 -0700
Received: from www.joomlapolis.com (localhost [127.0.0.1])
by mx5.joomlapolis.com (Postfix) with ESMTP id BBF9D64076A
for <***@***.com>; Mon, 23 Feb 2015 01:08:20 +0100 (CET)
Date: Mon, 23 Feb 2015 01:08:20 +0100
To: bart@immediasol.com
From: "Claude1956 @ Joomlapolis.com" <mr.denisclaude50@yahoo.fr>
Subject: hello
Message-ID: <b331114ba18f6344ab11cf85efa53930@www.joomlapolis.com>
X-Priority: 3
X-Mailer: PHPMailer 5.2 ( code.google.com/a/apache-extras.org/p/phpmailer/ )
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"
X-Nonspam: None
X-Antivirus: AVG for E-mail 2012.0.2249 [4257/8653]
X-AVG-ID: ID1572FBD4-5A2B4B65

bmowrey wrote: He's moving to direct emails too. This one from 5:00pm MDT Sunday. and apparently through your pop/smtp.
reply to mr.denisclaude51@outlook.fr
mailed from Claude1956 @ Joomlapolis.com [mr.denisclaude50@yahoo.fr]
...

Thanks for reporting!

His account and IP address have now been blocked.

He misused our "email to user" feature. but he also hit the built-in hourly sending limit, so could only send a few mails before being stopped.

We also decreased that limit drastically, so that it is becoming way less interesting to misuse that feature for spam.

UPDATE: We have now also implemented much more drastic PM limits.

Thank you guys for being on top of your forums. Nicely Done.