Author |
Message |
goticam
Hello I'm New here!
Joined: 19 Oct 2009
Posts: 15
Location: BULGARIA
|
Posted:
Wed May 12, 2010 3:41 am |
|
2-layer scam:
1) Keneth P, uid:5437480792
Profile: http://www.tagged.com/profile.html?uid=5437480792
E-mail address: [email protected]
In tagged message and in posterior e-mail message:
"Am Major. Kenneth Preston. I am a 55years old man from Maryland, United States...
am a military man serving in Baghdad in Iraq"
IP-addresses from the source of e-mail message:
41.218.236.189 from Ghana, Accra
33 minutes later i received an e-mail message about funds
- amount of ($3.700.000. Millions Dollars) - from:
2) Irene Smith
E-mail address: [email protected]
IP-addresses from the source of e-mail message:
41.218.236.189 from Ghana, Accra
THE SAME AS THE ONE OF "Major. Kenneth Preston"... supposed being in Iraq
Both letters from 1) and 2) were addressed to [email protected]
If you wish can see the facts here:
xxxxx/2layer-scam.html
You can see the content of the above page in my last post below. |
_________________ ****************************
... The best way to say is to do ...
La mejor forma de decir es hacer
- http://blue_fractal.tbg.0lx.net/ -
****************************
Last edited by goticam on Sun May 23, 2010 10:43 pm; edited 1 time in total |
|
|
|
Branwen
Baiting Guru
Joined: 18 Oct 2008
Posts: 4771
Location: Down on the (Playmobil) farm
|
Posted:
Wed May 12, 2010 9:09 am |
|
Hello goticam,
Would you please post the emails and headers of these emails you received, so we can have full proof of the scams.
Thank you! |
_________________ x14
It is your first time to use western union so therefore none can blame you. It is always like this at the first experience. - Yes lad, and at the second, and the third... you'll see.
I don't want to guess the number - But, lad, isn't that the best fun to be had with MoneyGram reference numbers? |
|
|
|
Cathartic Kate
Elite Baiter
Joined: 03 Dec 2008
Posts: 1542
Location: Spooner Hall
|
Posted:
Wed May 12, 2010 10:43 am |
|
Hi and welcome to Eater goticam
This scammer is using stolen photographs/details - see
http://en.wikipedia.org/wiki/Kenneth_Preston
Quote: |
Both letters from 1) and 2) were addressed to (mail address in your post) |
Can you please clarify whether this is a baiting/innocent third party mail address?
Also linky seems not to work.
Should you edit, may I also remind you to alter your duplicate of the above post at Scamwarners. |
_________________ Give the lads some extra pain with your own IT admin from hell - visit toolkits for Grooble Gambit
Proud member of "The Todger Club"
< никогда достаточно
|
|
|
|
goticam
Hello I'm New here!
Joined: 19 Oct 2009
Posts: 15
Location: BULGARIA
|
Posted:
Sun May 23, 2010 8:23 pm |
|
Delivered-To: -(me)[email protected]
Received: by 10.213.28.82 with SMTP id l18cs184110ebc;
Tue, 11 May 2010 04:08:16 -0700 (PDT)
Received: by 10.101.132.40 with SMTP id j40mr1761291ann.67.1273576091777;
Tue, 11 May 2010 04:08:11 -0700 (PDT)
Return-Path: <[email protected]>
Received: from col0-omc1-s8.col0.hotmail.com (col0-omc1-s8.col0.hotmail.com [65.55.34.18])
by mx.google.com with ESMTP id z5si2678098ank.74.2010.05.11.04.07.30;
Tue, 11 May 2010 04:08:11 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.34.18 as permitted sender) client-ip=65.55.34.18;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.34.18 as permitted sender) [email protected]
Received: from COL102-W25 ([65.55.34.7]) by col0-omc1-s8.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 11 May 2010 04:06:46 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/mixed;
boundary="_1882baac-f0fd-4290-b426-1868c03ac00a_"
X-Originating-IP: [41.218.236.189]
From: Kenneth Preson <[email protected]>
To: <[email protected]>
Subject: From Maj. Kenneth Preston In Iraq
Date: Tue, 11 May 2010 11:06:44 +0000
Importance: Normal
In-Reply-To: <[email protected]>
References:
<[email protected]>,<[email protected]>,<[email protected]>
MIME-Version: 1.0
X-OriginalArrivalTime: 11 May 2010 11:06:46.0813 (UTC) FILETIME=[0C0CB4D0:01CAF0FA] |
_________________ ****************************
... The best way to say is to do ...
La mejor forma de decir es hacer
- http://blue_fractal.tbg.0lx.net/ -
**************************** |
|
|
|
goticam
Hello I'm New here!
Joined: 19 Oct 2009
Posts: 15
Location: BULGARIA
|
Posted:
Sun May 23, 2010 8:28 pm |
|
Delivered-To: -(me)[email protected]
Received: by 10.213.28.82 with SMTP id l18cs185191ebc;
Tue, 11 May 2010 04:40:12 -0700 (PDT)
Received: by 10.227.134.142 with SMTP id j14mr5129702wbt.18.1273578011616;
Tue, 11 May 2010 04:40:11 -0700 (PDT)
Return-Path: <[email protected]>
Received: from blu0-omc1-s21.blu0.hotmail.com (blu0-omc1-s21.blu0.hotmail.com [65.55.116.32])
by mx.google.com with ESMTP id u8si18238113wbc.84.2010.05.11.04.40.11;
Tue, 11 May 2010 04:40:11 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.116.32 as permitted sender) client-ip=65.55.116.32;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.116.32 as permitted sender) [email protected]
Received: from BLU140-W35 ([65.55.116.7]) by blu0-omc1-s21.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 11 May 2010 04:39:33 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_aa435159-0698-45c2-a3a7-0faafe13a165_"
X-Originating-IP: [41.218.236.189]
From: Irene Smith <[email protected]>
To: <[email protected]>
Subject: I NEED YOUR HELP MAMA
Date: Tue, 11 May 2010 11:39:33 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 11 May 2010 11:39:33.0181 (UTC) FILETIME=[A018A6D0:01CAF0FE] |
_________________ ****************************
... The best way to say is to do ...
La mejor forma de decir es hacer
- http://blue_fractal.tbg.0lx.net/ -
**************************** |
|
|
|
goticam
Hello I'm New here!
Joined: 19 Oct 2009
Posts: 15
Location: BULGARIA
|
Posted:
Sun May 23, 2010 8:39 pm |
|
Cathartic Kate wrote: |
Quote: |
Both letters from 1) and 2) were addressed to (mail address in your post) |
Can you please clarify whether this is a baiting/innocent third party mail address?
Also linky seems not to work.
|
I do not know is this e-mail address innocent or not.
The fact i noticed is that both letters from scammers have
"To: <[email protected]>"
The link does not work due to exceeded bandwidth of the free host.
Will be working again from June, 1. |
_________________ ****************************
... The best way to say is to do ...
La mejor forma de decir es hacer
- http://blue_fractal.tbg.0lx.net/ -
**************************** |
|
|
|
Branwen
Baiting Guru
Joined: 18 Oct 2008
Posts: 4771
Location: Down on the (Playmobil) farm
|
Posted:
Sun May 23, 2010 8:58 pm |
|
Thank you goticam for posting the headers!
That 'sent to' email address might be the email address of another person who also received the scam mails, so I have edited your posts and replaced it with xxxxxx, for their privacy and protection. |
_________________ x14
It is your first time to use western union so therefore none can blame you. It is always like this at the first experience. - Yes lad, and at the second, and the third... you'll see.
I don't want to guess the number - But, lad, isn't that the best fun to be had with MoneyGram reference numbers? |
|
|
|
goticam
Hello I'm New here!
Joined: 19 Oct 2009
Posts: 15
Location: BULGARIA
|
Posted:
Sun May 23, 2010 9:32 pm |
|
Photos sent to me in the private e-mail:
|
_________________ ****************************
... The best way to say is to do ...
La mejor forma de decir es hacer
- http://blue_fractal.tbg.0lx.net/ -
**************************** |
|
|
|
goticam
Hello I'm New here!
Joined: 19 Oct 2009
Posts: 15
Location: BULGARIA
|
Posted:
Sun May 23, 2010 9:45 pm |
|
Thank you, Branwen.
I mentioned the same (about this e-mail address) in the currently non available page above. |
_________________ ****************************
... The best way to say is to do ...
La mejor forma de decir es hacer
- http://blue_fractal.tbg.0lx.net/ -
**************************** |
|
|
|
goticam
Hello I'm New here!
Joined: 19 Oct 2009
Posts: 15
Location: BULGARIA
|
Posted:
Sun May 23, 2010 10:36 pm |
|
|
_________________ ****************************
... The best way to say is to do ...
La mejor forma de decir es hacer
- http://blue_fractal.tbg.0lx.net/ -
**************************** |
|
|
|
|