2-layer *Major. Kenneth Preston*, [email protected]

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Wed May 12, 2010 3:41 am

2-layer scam:

1) Keneth P, uid:5437480792
Profile: http://www.tagged.com/profile.html?uid=5437480792
E-mail address: [email protected]

In tagged message and in posterior e-mail message:
"Am Major. Kenneth Preston. I am a 55years old man from Maryland, United States...
am a military man serving in Baghdad in Iraq"

IP-addresses from the source of e-mail message:
41.218.236.189 from Ghana, Accra

33 minutes later i received an e-mail message about funds
- amount of ($3.700.000. Millions Dollars) - from:

2) Irene Smith
E-mail address: [email protected]
IP-addresses from the source of e-mail message:
41.218.236.189 from Ghana, Accra
THE SAME AS THE ONE OF "Major. Kenneth Preston"... supposed being in Iraq Smile

Both letters from 1) and 2) were addressed to [email protected]

If you wish can see the facts here:
xxxxx/2layer-scam.html

You can see the content of the above page in my last post below.

Posted: Wed May 12, 2010 9:09 am

Hello goticam,

Would you please post the emails and headers of these emails you received, so we can have full proof of the scams.

Thank you!

Posted: Wed May 12, 2010 10:43 am

Hi and welcome to Eater goticam

This scammer is using stolen photographs/details - see

http://en.wikipedia.org/wiki/Kenneth_Preston

Quote:

Both letters from 1) and 2) were addressed to (mail address in your post)

Can you please clarify whether this is a baiting/innocent third party mail address?

Also linky seems not to work.

Should you edit, may I also remind you to alter your duplicate of the above post at Scamwarners.

Posted: Sun May 23, 2010 8:23 pm

Delivered-To: -(me)[email protected]
Received: by 10.213.28.82 with SMTP id l18cs184110ebc;
Tue, 11 May 2010 04:08:16 -0700 (PDT)
Received: by 10.101.132.40 with SMTP id j40mr1761291ann.67.1273576091777;
Tue, 11 May 2010 04:08:11 -0700 (PDT)
Return-Path: <[email protected]>
Received: from col0-omc1-s8.col0.hotmail.com (col0-omc1-s8.col0.hotmail.com [65.55.34.18])
by mx.google.com with ESMTP id z5si2678098ank.74.2010.05.11.04.07.30;
Tue, 11 May 2010 04:08:11 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.34.18 as permitted sender) client-ip=65.55.34.18;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.34.18 as permitted sender) [email protected]
Received: from COL102-W25 ([65.55.34.7]) by col0-omc1-s8.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 11 May 2010 04:06:46 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/mixed;
boundary="_1882baac-f0fd-4290-b426-1868c03ac00a_"
X-Originating-IP: [41.218.236.189]
From: Kenneth Preson <[email protected]>
To: <[email protected]>
Subject: From Maj. Kenneth Preston In Iraq
Date: Tue, 11 May 2010 11:06:44 +0000
Importance: Normal
In-Reply-To: <[email protected]>
References:
<[email protected]>,<[email protected]>,<[email protected]>
MIME-Version: 1.0
X-OriginalArrivalTime: 11 May 2010 11:06:46.0813 (UTC) FILETIME=[0C0CB4D0:01CAF0FA]

Posted: Sun May 23, 2010 8:28 pm

Delivered-To: -(me)[email protected]
Received: by 10.213.28.82 with SMTP id l18cs185191ebc;
Tue, 11 May 2010 04:40:12 -0700 (PDT)
Received: by 10.227.134.142 with SMTP id j14mr5129702wbt.18.1273578011616;
Tue, 11 May 2010 04:40:11 -0700 (PDT)
Return-Path: <[email protected]>
Received: from blu0-omc1-s21.blu0.hotmail.com (blu0-omc1-s21.blu0.hotmail.com [65.55.116.32])
by mx.google.com with ESMTP id u8si18238113wbc.84.2010.05.11.04.40.11;
Tue, 11 May 2010 04:40:11 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.116.32 as permitted sender) client-ip=65.55.116.32;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.116.32 as permitted sender) [email protected]
Received: from BLU140-W35 ([65.55.116.7]) by blu0-omc1-s21.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 11 May 2010 04:39:33 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_aa435159-0698-45c2-a3a7-0faafe13a165_"
X-Originating-IP: [41.218.236.189]
From: Irene Smith <[email protected]>
To: <[email protected]>
Subject: I NEED YOUR HELP MAMA
Date: Tue, 11 May 2010 11:39:33 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 11 May 2010 11:39:33.0181 (UTC) FILETIME=[A018A6D0:01CAF0FE]

Posted: Sun May 23, 2010 8:39 pm

Cathartic Kate wrote:

Quote:

Both letters from 1) and 2) were addressed to (mail address in your post)

Can you please clarify whether this is a baiting/innocent third party mail address?

Also linky seems not to work.

I do not know is this e-mail address innocent or not.
The fact i noticed is that both letters from scammers have
"To: <[email protected]>"

The link does not work due to exceeded bandwidth of the free host.
Will be working again from June, 1.

Posted: Sun May 23, 2010 8:58 pm

Thank you goticam for posting the headers!

That 'sent to' email address might be the email address of another person who also received the scam mails, so I have edited your posts and replaced it with xxxxxx, for their privacy and protection.

Posted: Sun May 23, 2010 9:32 pm

Photos sent to me in the private e-mail:

Posted: Sun May 23, 2010 9:45 pm

Thank you, Branwen.
I mentioned the same (about this e-mail address) in the currently non available page above.

Posted: Sun May 23, 2010 10:36 pm

2-layer Major. Kenneth Preston, [email protected]	View next topic View previous topic