Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Dr. Samson Kess <drsamsonkess@ymail.com> (Gelesen: 2148 mal)
 
bounty-hunter
Ex-Mitglied


Dr. Samson Kess <drsamsonkess@ymail.com>
17. Juni 2010 um 18:53
 
Hello Mr Achim 


I AM DR. SAMSON KESS

WRITING YOU FROM WESTERN UNION MONEY TRANSFER . I AM THE MONEY UNIT CONTROLLER,

I WRITE YOU TO INFORM YOU ABOUT MONEY THAT WAS DEPOSITED IN YOUR NAME IN OUR WESTERN UNION, THIS MONEY WAS DEPOSITED BY A REFUGEE BOY CALLED ERIC TITU, HE HAS DEPOSITED THE MONEY HERE FOR TWO MONTHS NOW, THIS BOY DEPOSITED THE MONEY IN YOUR NAME AFTER WHICH HE WAS CAUGHT FOR MONEY LAUNDRY AND WAS SENT TO JAIL, BUT EARLY YESTERDAY THEY CALL US TO INFORM US THAT THE BOY WAS DEAD WHAT A SAD STORY,AND WE DONT HAVE ANY OPTION THAN TO CONTACT YOU NOW AND HE HAS ALREADY DEPOSITED THE MONEY IN YOUR NAME THE TOTAL FOUND IS $10,0000.

NOW WE HAVE ARRANGING TO SEND YOU YOUR MONEY, AND ALL THE MONEY CAN NOT BE SENT TO YOU ONCE SO WE NEED TO SEND IT BIT BY BIT AND ME ARE SENDING IT TO THREE MTCN AND THREE RECEIVER NAMES, SO ALL WE NEED FROM YOU IS TO SEND US


1.THREE RECEIVER NAMES AND


2.THREE RECEIVER ADDRESS,


I KNOW AFTER YOU HAVE RECEIVE YOU MONEY YOU ARE SURELY GOING TO COMPENSATE ME FOR A WORK WELL DONE,

MAY ERIC TITU GENTLE SOUL REST IN PEACE AMEN



NOTE: IF YOU ARE NOT THE BEARER OF THE NAME ABOVE PLEASE FORWARD BACK THIS EMAIL FOR IT MAY IMPLICATE YOU THANK FOR YOUR COPERATION

YOUR URGENT RESPONDED HIS HIGHLY NEEDED
DR. SAMSON KESS
WESTERN UNION MONEY TRANSFER
MONEY UNIT CONTROLLER

Dr SAMSON KESS
+2348030450735
drsamsonkess@ymail.com



Spoiler:
Delivered-To: xxxxx@googlemail.com
Received: by 10.204.53.144 with SMTP id m16cs96913bkg;
        Thu, 17 Jun 2010 08:49:44 -0700 (PDT)
Received: by 10.231.150.15 with SMTP id w15mr10940644ibv.115.1276789782245;
        Thu, 17 Jun 2010 08:49:42 -0700 (PDT)
Return-Path: <drsamsonkess@ymail.com>
Received: from web120305.mail.ne1.yahoo.com (web120305.mail.ne1.yahoo.com [98.138.85.192])
        by mx.google.com with SMTP id q33si13136729ibg.30.2010.06.17.08.49.39;
        Thu, 17 Jun 2010 08:49:40 -0700 (PDT)
Received-SPF: neutral (google.com: 98.138.85.192 is neither permitted nor denied by best guess record for domain of drsamsonkess@ymail.com) client-ip=98.138.85.192;
Authentication-Results: mx.google.com; spf=neutral (google.com: 98.138.85.192 is neither permitted nor denied by best guess record for domain of drsamsonkess@ymail.com) smtp.mail=drsamsonkess@ymail.com; dkim=pass (test mode) Quelltext.i=@ymail.com
Received: (qmail 61451 invoked by uid 60001); 17 Jun 2010 15:49:39 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ymail.com; s=s1024; t=1276789779; bh=mSf2NUFwyJPAQfqF1NK4ZgCPC2ta8Qai29l8kzFGJ94=; tent-Type; egqyTn24MMVJ0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=ymail.com;
  tent-Type;
  COW7x3gkP7Czw=;
Message-ID: <234003.61426.qm@web120305.mail.ne1.yahoo.com>
X-YMail-OSG: B_.B8mQVM1kkGvRRghupkidl88ZhFTrwoKUnEdzB5ja5UAy
EMvjBNmHqmULvKLmzurOwxQSoTEl7cuf1HVJjMYITGMemSbvhLJu5uL.L4zK
ZEvmTes5uZRGgta5xBdMyT5v8vhfjS13oEP78NTepWxfC98d778EjftqPgdD
4ExYtS0IuQq6O5wyS0Q6eTR_72xZQUy2uU9R11cCQ5gj3WbVhkaujSXUxydv
flhSkVFPRGXkq9G7CisWHjjl.owPsMa1BIkVnTwU27QPiSqmLra6cBdnnla6
QvrgfK5zzSwYvv_U00Xax99CIO8dHJnEbjT5NGbQISsfgmjt1mxNJ1TKulDu
hAxk47cNi.V0uHL24.5qsDgj3nSBIV_CcVON8g0Y-
Received: from [41.155.113.65] by web120305.mail.ne1.yahoo.com via HTTP; Thu, 17 Jun 2010 08:49:38 PDT
X-Mailer: YahooMailRC/397.8 YahooMailWebService/0.8.103.269680
Date: Thu, 17 Jun 2010 08:49:38 -0700 (PDT)
From: Dr samson Kess <drsamsonkess@ymail.com>
Subject: Hello Mr xxxxx
To: xxxxx@googlemail.com
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="0-1455516023-1276789778=:61426"

« Zuletzt geändert: 22. Dezember 2010 um 21:03 von Uli »  

western_union_ID_.jpg ( 115 KB | Downloads )
western_union_ID_.jpg
Zum Seitenanfang
 
IP gespeichert
 
Indikation
bounty-hunter
Ex-Mitglied


Re: Dr. Samson Kess <drsamsonkess@ymail.com>
Antwort #1 - 17. Juni 2010 um 18:55
 
Eingeliefert über NG [Nigeria]


Code
Alles auswählen
IP Information - 41.155.113.65
IP address:                     41.155.113.65
Reverse DNS:                    dial-pool113.lg.starcomms.net.
Reverse DNS authenticity:       [Could be forged: hostname dial-pool113.lg.starcomms.net. does not exist]
ASN:                            33776
ASN Name:                       STARCOMMS-ASN (ASN for Starcomms)
IP range connectivity:          2
Registrar (per ASN):            RIPE
Country (per IP registrar):     NG [Nigeria]
Country Currency:               Unknown
Country IP Range:               41.155.0.0 to 41.155.127.255
Country fraud profile:          High
City (per outside source):      Unknown
Country (per outside source):   NG [Nigeria]
Private (internal) IP?          No
IP address registrar:           whois.afrinic.net
Known Proxy?                    No
Link for WHOIS:                 41.155.113.65 

« Zuletzt geändert: 19. Juni 2010 um 01:54 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30520
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Dr. Samson Kess <drsamsonkess@ymail.com>
Antwort #2 - 18. Juni 2010 um 11:14
 
Die Telefonnummer +2348030450735 ist schon bekannt:
Mike James <mikejames102@yahoo.ca> <mike_james101@hotmail.com> Smiley
Mailt aus Nigeria!
« Zuletzt geändert: 19. Juni 2010 um 01:56 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
bounty-hunter
Ex-Mitglied


Re: Dr. Samson Kess <drsamsonkess@ymail.com>
Antwort #3 - 18. Juni 2010 um 22:53
 
Antwort auf Betrugsmeldung an Western Union


Sehr geehrter Kunde,
 
vielen Dank für Ihre E-Mail.
 
Danke, dass Sie uns hierauf aufmerksam gemacht haben. Die E-Mail, die Sie erhalten haben, ist von Western Union weder gesandt noch genehmigt worden. Bitte ignorieren Sie diese E-Mail. Wir werden Ihre Anfrage zwecks eigener interner Meldung an unsere Sicherheitsabteilung weiterleiten.
 
Western Union rät dringend, jeglichen Fall von Betrugsverdacht Ihrer örtlichen Polizeibehörde zu melden.
 
Mit freundlichen Grüßen
Sabrina M. Eitel CSR 287
www.westernunion.de <http://www.westernunion.de/>  ;



Spoiler:
Return-Path: <german.customer@westernunion.de>
X-Original-To: xxxxx@arcor.de
Received: from mail-in-08.arcor-online.net (mail-in-08.arcor-online.net [151.189.21.48])
     by mail-in-02-z2.arcor-online.net (Postfix) with ESMTP id A524A1756F6
     for <xxxxx@arcor.de>; Fri, 18 Jun 2010 09:21:51 +0200 (CEST)
Received: from mail-out1.kundencontroller.de (mail-out1.kundencontroller.de [85.31.185.13])
     by mx.arcor.de (Postfix) with ESMTPS id E22CF205350
     for <xxxxx@arcor.de>; Fri, 18 Jun 2010 09:21:50 +0200 (CEST)
X-DKIM: Sendmail DKIM Filter v2.8.2 mx.arcor.de E22CF205350
Received: from airwave.kundencontroller.de (unknown [192.168.10.15])
     by mail-out1.kundencontroller.de (Postfix) with ESMTP id 708D56CA21
     for <xxxxx@arcor.de>; Fri, 18 Jun 2010 09:21:50 +0200 (CEST)
Received: from localhost (spamfighter2.kundencontroller.de [192.168.10.61])
     by airwave.kundencontroller.de (Postfix) with ESMTP id 2C05F3211C0
     for <xxxxxx>; Fri, 18 Jun 2010 09:21:50 +0200 (CEST)
X-DNSWL: No
X-Greylist: delayed 1895 seconds by postgrey-1.31 at stingray; Fri, 18 Jun 2010 09:21:44 CEST
X-policyd-weight: using cached result; rate: -7.5
Received: from interceptor.fexco.com (interceptor.fexco.com [194.106.137.59])
     by airwave.kundencontroller.de (Postfix) with ESMTP id E31F430A0C0
     for <xxxxx>; Fri, 18 Jun 2010 09:21:44 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
     by interceptor.fexco.com (Postfix) with ESMTP id C931828410D
     for <xxxxx>; Fri, 18 Jun 2010 07:49:13 +0100 (IST)
Received: from interceptor.fexco.com ([127.0.0.1])
by localhost (interceptor.fexco.com [127.0.0.1]) (Espion-Interceptor, port port 10024)
with ESMTP id 94745-04 for <xxxxx>;
Fri, 18 Jun 2010 07:49:13 +0100 (IST)
Received: from FexMailLS.fexco.ie (unknown [10.120.1.124])
     by interceptor.fexco.com (Postfix) with ESMTP id 8D017284106
     for <xxxxx>; Fri, 18 Jun 2010 07:49:13 +0100 (IST)
X-MimeOLE: Produced By Microsoft Exchange V6.5
References: <609555033.1276794181724.JavaMail.wasadmin@WUPRDMSG01C>
MIME-Version: 1.0
Content-Type: text/plain;
     charset=utf-8
Content-Transfer-Encoding: quoted-printable
Content-class: urn:content-classes:message
Subject: RE: Online-Betrug melden
Date: Fri, 18 Jun 2010 07:49:32 +0100
Message-ID: <20DE97076951C342A8B7ED580C9FD8C9067774A7@FexMailLS.fexco.ie>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Online-Betrug melden
Thread-Index: AcsOPvlOOd9Iy0iGQKKed5yDAbfEgwAc27iU
From: "WU German Customer" <german.customer@westernunion.de>
To: <xxxxx>


« Zuletzt geändert: 19. Juni 2010 um 03:15 von Webmaster »  
Zum Seitenanfang
 
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden
Link zu diesem Thema