SmartFeedSmartFeed          



WELCOME - YOU ARE CURRENTLY VIEWING 419EATER AS A GUEST

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

ScamWarners.com - Internet Anti-Fraud Center - now open!


 2-layer *Major. Kenneth Preston*, [email protected]

View next topic
View previous topic
 
This forum is locked: you cannot post, reply to, or edit topics.This topic is locked: you cannot edit posts or make replies.
Author Message
goticam
Hello I'm New here!


Joined: 19 Oct 2009
Posts: 15
Location: BULGARIA


PostPosted: Wed May 12, 2010 3:41 am Reply with quoteBack to top

2-layer scam:

1) Keneth P, uid:5437480792
Profile: http://www.tagged.com/profile.html?uid=5437480792
E-mail address: [email protected]

In tagged message and in posterior e-mail message:
"Am Major. Kenneth Preston. I am a 55years old man from Maryland, United States...
am a military man serving in Baghdad in Iraq"

IP-addresses from the source of e-mail message:
41.218.236.189 from Ghana, Accra


33 minutes later i received an e-mail message about funds
- amount of ($3.700.000. Millions Dollars) - from:

2) Irene Smith
E-mail address: [email protected]
IP-addresses from the source of e-mail message:
41.218.236.189 from Ghana, Accra
THE SAME AS THE ONE OF "Major. Kenneth Preston"... supposed being in Iraq Smile


Both letters from 1) and 2) were addressed to [email protected]

If you wish can see the facts here:
xxxxx/2layer-scam.html


You can see the content of the above page in my last post below.

_________________
****************************
... The best way to say is to do ...
La mejor forma de decir es hacer
- http://blue_fractal.tbg.0lx.net/ -
****************************

Last edited by goticam on Sun May 23, 2010 10:43 pm; edited 1 time in total
View user's profileSend private message
Branwen
Baiting Guru


Joined: 18 Oct 2008
Posts: 4771
Location: Down on the (Playmobil) farm


PostPosted: Wed May 12, 2010 9:09 am Reply with quoteBack to top

Hello goticam,

Would you please post the emails and headers of these emails you received, so we can have full proof of the scams.

Thank you!

_________________
Purple Flower Mc Fry Sand Timer x14

It is your first time to use western union so therefore none can blame you. It is always like this at the first experience. - Yes lad, and at the second, and the third... you'll see.

I don't want to guess the number - But, lad, isn't that the best fun to be had with MoneyGram reference numbers?
View user's profileSend private message
Cathartic Kate
Elite Baiter


Joined: 03 Dec 2008
Posts: 1542
Location: Spooner Hall


PostPosted: Wed May 12, 2010 10:43 am Reply with quoteBack to top

Hi and welcome to Eater goticam

This scammer is using stolen photographs/details - see

http://en.wikipedia.org/wiki/Kenneth_Preston

Quote:
Both letters from 1) and 2) were addressed to (mail address in your post)


Can you please clarify whether this is a baiting/innocent third party mail address?

Also linky seems not to work.

Should you edit, may I also remind you to alter your duplicate of the above post at Scamwarners.

_________________
Give the lads some extra pain with your own IT admin from hell - visit toolkits for Grooble Gambit

Proud member of "The Todger Club"

Closed lad accounts < никогда достаточно




Goat
View user's profileSend private message
goticam
Hello I'm New here!


Joined: 19 Oct 2009
Posts: 15
Location: BULGARIA


PostPosted: Sun May 23, 2010 8:23 pm Reply with quoteBack to top

Delivered-To: -(me)[email protected]
Received: by 10.213.28.82 with SMTP id l18cs184110ebc;
Tue, 11 May 2010 04:08:16 -0700 (PDT)
Received: by 10.101.132.40 with SMTP id j40mr1761291ann.67.1273576091777;
Tue, 11 May 2010 04:08:11 -0700 (PDT)
Return-Path: <[email protected]>
Received: from col0-omc1-s8.col0.hotmail.com (col0-omc1-s8.col0.hotmail.com [65.55.34.18])
by mx.google.com with ESMTP id z5si2678098ank.74.2010.05.11.04.07.30;
Tue, 11 May 2010 04:08:11 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.34.18 as permitted sender) client-ip=65.55.34.18;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.34.18 as permitted sender) [email protected]
Received: from COL102-W25 ([65.55.34.7]) by col0-omc1-s8.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 11 May 2010 04:06:46 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/mixed;
boundary="_1882baac-f0fd-4290-b426-1868c03ac00a_"
X-Originating-IP: [41.218.236.189]
From: Kenneth Preson <[email protected]>
To: <[email protected]>
Subject: From Maj. Kenneth Preston In Iraq
Date: Tue, 11 May 2010 11:06:44 +0000
Importance: Normal
In-Reply-To: <[email protected]>
References:
<[email protected]>,<[email protected]>,<[email protected]>
MIME-Version: 1.0
X-OriginalArrivalTime: 11 May 2010 11:06:46.0813 (UTC) FILETIME=[0C0CB4D0:01CAF0FA]

_________________
****************************
... The best way to say is to do ...
La mejor forma de decir es hacer
- http://blue_fractal.tbg.0lx.net/ -
****************************
View user's profileSend private message
goticam
Hello I'm New here!


Joined: 19 Oct 2009
Posts: 15
Location: BULGARIA


PostPosted: Sun May 23, 2010 8:28 pm Reply with quoteBack to top

Delivered-To: -(me)[email protected]
Received: by 10.213.28.82 with SMTP id l18cs185191ebc;
Tue, 11 May 2010 04:40:12 -0700 (PDT)
Received: by 10.227.134.142 with SMTP id j14mr5129702wbt.18.1273578011616;
Tue, 11 May 2010 04:40:11 -0700 (PDT)
Return-Path: <[email protected]>
Received: from blu0-omc1-s21.blu0.hotmail.com (blu0-omc1-s21.blu0.hotmail.com [65.55.116.32])
by mx.google.com with ESMTP id u8si18238113wbc.84.2010.05.11.04.40.11;
Tue, 11 May 2010 04:40:11 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.116.32 as permitted sender) client-ip=65.55.116.32;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.116.32 as permitted sender) [email protected]
Received: from BLU140-W35 ([65.55.116.7]) by blu0-omc1-s21.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 11 May 2010 04:39:33 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_aa435159-0698-45c2-a3a7-0faafe13a165_"
X-Originating-IP: [41.218.236.189]
From: Irene Smith <[email protected]>
To: <[email protected]>
Subject: I NEED YOUR HELP MAMA
Date: Tue, 11 May 2010 11:39:33 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 11 May 2010 11:39:33.0181 (UTC) FILETIME=[A018A6D0:01CAF0FE]

_________________
****************************
... The best way to say is to do ...
La mejor forma de decir es hacer
- http://blue_fractal.tbg.0lx.net/ -
****************************
View user's profileSend private message
goticam
Hello I'm New here!


Joined: 19 Oct 2009
Posts: 15
Location: BULGARIA


PostPosted: Sun May 23, 2010 8:39 pm Reply with quoteBack to top

Cathartic Kate wrote:


Quote:
Both letters from 1) and 2) were addressed to (mail address in your post)


Can you please clarify whether this is a baiting/innocent third party mail address?

Also linky seems not to work.


I do not know is this e-mail address innocent or not.
The fact i noticed is that both letters from scammers have
"To: <[email protected]>"


The link does not work due to exceeded bandwidth of the free host.
Will be working again from June, 1.

_________________
****************************
... The best way to say is to do ...
La mejor forma de decir es hacer
- http://blue_fractal.tbg.0lx.net/ -
****************************
View user's profileSend private message
Branwen
Baiting Guru


Joined: 18 Oct 2008
Posts: 4771
Location: Down on the (Playmobil) farm


PostPosted: Sun May 23, 2010 8:58 pm Reply with quoteBack to top

Thank you goticam for posting the headers!

That 'sent to' email address might be the email address of another person who also received the scam mails, so I have edited your posts and replaced it with xxxxxx, for their privacy and protection.

_________________
Purple Flower Mc Fry Sand Timer x14

It is your first time to use western union so therefore none can blame you. It is always like this at the first experience. - Yes lad, and at the second, and the third... you'll see.

I don't want to guess the number - But, lad, isn't that the best fun to be had with MoneyGram reference numbers?
View user's profileSend private message
goticam
Hello I'm New here!


Joined: 19 Oct 2009
Posts: 15
Location: BULGARIA


PostPosted: Sun May 23, 2010 9:32 pm Reply with quoteBack to top

Photos sent to me in the private e-mail:

Image
Image
Image
Image
Image

_________________
****************************
... The best way to say is to do ...
La mejor forma de decir es hacer
- http://blue_fractal.tbg.0lx.net/ -
****************************
View user's profileSend private message
goticam
Hello I'm New here!


Joined: 19 Oct 2009
Posts: 15
Location: BULGARIA


PostPosted: Sun May 23, 2010 9:45 pm Reply with quoteBack to top

Thank you, Branwen.
I mentioned the same (about this e-mail address) in the currently non available page above.

_________________
****************************
... The best way to say is to do ...
La mejor forma de decir es hacer
- http://blue_fractal.tbg.0lx.net/ -
****************************
View user's profileSend private message
goticam
Hello I'm New here!


Joined: 19 Oct 2009
Posts: 15
Location: BULGARIA


PostPosted: Sun May 23, 2010 10:36 pm Reply with quoteBack to top

Image
Image
Image

_________________
****************************
... The best way to say is to do ...
La mejor forma de decir es hacer
- http://blue_fractal.tbg.0lx.net/ -
****************************
View user's profileSend private message
Display posts from previous:      
This forum is locked: you cannot post, reply to, or edit topics.This topic is locked: you cannot edit posts or make replies.


 Jump to:   



View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



E-Mail Header Analysis


All Content © 2003 - 419Eater.com
Powered by phpBB © 2001, 2002 phpBB Group :S5: FI Theme :: All times are GMT