Google

World Wide Web anti-scam


Seitenindex umschalten Seiten: 1 Thema versenden
Normales Thema Eric <johnsoneric582@yahoo.com> (Gelesen: 2372 mal)
 
lamayo
Ex-Mitglied


Eric <johnsoneric582@yahoo.com>
13. September 2013 um 19:47
 
the details of the parcel
from Eric Johnson to you 

From
Eric Johnson
 
 
To
xxxx@yahoo.com
1 Attachment247KBSlideshow
247KBSave



Honey this is  login ( www.secure.moovsexpress.com ) .The tracking no.
xxxxxxx) Then attached below is the airway bill. i love you keep in touch 

Spoiler:
From Eric Johnson Fri Sep 13 09:28:36 2013
X-Apparently-To: xxxxx@yahoo.com via 98.138.90.149; Fri, 13 Sep 2013 09:28:44 -0700
Return-Path: <johnsoneric582@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
Lm1vb3ZzZXhwcmVzcy5jb20gKSAuVGhlIHRyYWNraW5nIG5vLiA2ODQwNDU2
Njk0KSBUaGVuIGF0dGFjaGVkIGJlbG93IGlzIHRoZSBhaXJ3YXkgYmlsbC4g
aSBsb3ZlIHlvdSBrZWVwIGluIHRvdWNoIAEwAQEBAQNtdWx0aXBhcnQvYWx0
ZXJuYXRpdmUDAzMCA3RleHQvcGxhaW4DAzACA3RleHQvaHRtbAMDMgJOIEQg
MS5qcGcDaW1hZ2UvanBlZwMDMzM1
X-YMailISG: L5vOV2MWLDsqjqat7otmoSxHa0GsW5NNQRBvzZKyh42VDvBm
6GiAPoQK7Mr590Si3hoZ02pbshDaFsvoDMmoqbgnuJFkVJhBiQSL8MGiWuda
BzKm4XyqW72Xix7DJIWX4GF3okFFDdwoBpCjb5ECkhVVsHQGIPV2Da9yFQfz
ADnfZ3wa0MglP7zgaxUo0UU5chSLdgpdJm1pTpGcrqL5WIJ9e9e_TuK6ll.c
1v_45iSc4fvD8LgfLwqjUeyp0pJzyYWaF7p87OaxOdKE3Z_BFMdvckez4ny3
gQEfWZdraChy7yUosR69bG_NNPXaOIr11q3quE1Re0PE3KhPKprit_HBVJpr
eTAksH8YCnuhVjw5sDCGRzYUYZ6yLneYf6NQ41nQxSYozJJVqt8ieAad_NAN
U02M.K3fSBgXxsUKGx1Ahz.8lh87OMVg7AERsT7p8YSufcl5fVvUj_ibcK5S
FcWFxeGCCmmyXXpPSEIHY2gLAa8JaPqhZRCT7eAkBokKVgXCFC.TW3sCIEXe
otAKxoR_VbMF4VTr.vI5inNh9GMmkld5iLdWsrss_Ch5ffdX.cEDiDl.teeq
4vNWvJF.KoxXJhlQq42cydYfcATCnSKc8RFNh.JsACz0O2g8IOjLL2iGJ42c
9eUrpwro8TVvpTu__ImQ5MfqttebVN77hNq8kg7lyKcowpqJpQFlzzNsN5lw
37f0VLAQ68rVY30EI9bboLrZt_Felm2loWA5JpOmjqW_8IdmkSgqYy3i.3Nr
nEtHLmwHdA5ribLqs5Rwr1RNSzSjLiRulQSuB5gMu9aev4RVcaE3qVzsYtD3
.2FZca3mNdAyf.raMt1kOqUGr17dt_KKWJSOMCzPOZjAyiULD7IAzCycIoEk
F7MOFCulG98Io0fA8xwNrrQvyBqGgVGKC6wco_U2F_wWoUn2NAuwBRjqBZWK
FzUzpCAU4sQ68IqNbMD1WZFyBpMBr2dVlXwuIiZFAvZ9QExKJwdYnMvQp4sd
c0Nvv6WWtui5Qw_mlWkm.b6n84HVb_yEY9QpZdkOufYUarmi7yi78wi5uC3X
AyxELnON2f0S5l.daL5UM48nQLJifRI9MO97xY5WCavURSXBzGvkoVvBn0Zm
h0Ibpwiov9wFHAGbsw_O4nRJrQOE52YltvnE_hein1fFmKwRh6D.oCjDoToU
ggl2YX6TLrsTZWEdhF1IF0NMv.5JXXWZ3lVPEiYcK0kMd27XWcBG8uUK6swU
NWUx5fTPAzBZH5CunZzYaLPc69JvurRQVJ56KTda.H1pdgqXIFHl.FCshf_N
IjrRuZSuwPPQmCKZdqor85nlH.js
X-Originating-IP: [106.10.151.243]
Authentication-Results: mta1176.mail.gq1.yahoo.com  from=yahoo.com; domainkeys=pass (ok);  from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO nm34-vm4.bullet.mail.sg3.yahoo.com) (106.10.151.243)
  by mta1176.mail.gq1.yahoo.com with SMTP; Fri, 13 Sep 2013 09:28:43 -0700
Received: from [106.10.166.124] by nm34.bullet.mail.sg3.yahoo.com with NNFMP; 13 Sep 2013 16:28:37 -0000
Received: from [106.10.150.26] by tm13.bullet.mail.sg3.yahoo.com with NNFMP; 13 Sep 2013 16:28:37 -0000
Received: from [127.0.0.1] by omp1027.mail.sg3.yahoo.com with NNFMP; 13 Sep 2013 16:28:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 40242.16318.bm@omp1027.mail.sg3.yahoo.com
Received: (qmail 37762 invoked by uid 60001); 13 Sep 2013 16:28:36 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1379089716; bh=gAuxs0F91SiIkvks10lWVlGhDlpF7zbXUArFZZ8wLic=; m:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; mvm7VnhlL2uPM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  m:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
  nxhgxa6YXDymc=;
X-YMail-OSG: nHDay1MVM1klSmq1PfHKyjVfFe277GFOuQE_J1Q.vY8w94y
T5R4CuOG7oyMiqSKdG0H2Gwl7FdVtJmft3GT2Bc6H_pysmshIPHbCD0IuOTc
iD9EI9b6WfuclmLxfXSskXdmyiVRBNWNUQJhguFCg.fMBCqpc7S7.rBhjeMU
Zumgn67PaTNhzV7atS9hb6jMVdb_HkV68seaoL.AAv43RONR4LGVULcGt_ir
daA57zW_bzqQE4CzbuPtFDyekA5SKIYvibvfQ1D5XnV0CHn3ZBfYb2pNvlUl
oqCTn8.hn9LU3OUtVquuBcqZj_V1tUfaf81y6G38HniR.BEoAMLDvXLTCcuC
hEdVa2ZjgV3EZH3A_tP_F5bDAVqhtIW8hFzp69OqeJYghiaVPP8iC438grvi
HPU7txKwn7jv9_cAjgT1RAeCKF1AItK5nows.aXCR0DJKwoooBt0eLUVnZ3X
swOhtlmdJpVqernOxP8d.Azi9ogvC9Z3MzxIUclqU4MwQjzbjL0WDt_61dZe
0yeiB6yJKCrXSwkF1Py7ox6K0vE_OiCKUCKnw3whkhvGy_tRlps.ksaW8Dke
CjLIuGxjRp.57Wr7_KsLKVGJ3o5l9uzFca02TSLzU
Received: from [175.139.86.179] by web193806.mail.sg3.yahoo.com via https; Sat, 14 Sep 2013 00:28:36 SGT
X-Mailer: YahooMailWebService/0.8.157.561
References: <1378966185.36846.YahooMailNeo@web163505.mail.gq1.yahoo.com> <1379088096.40943.YahooMailNeo@web165001.mail.bf1.yahoo.com> <1379089063.56796.YahooMailNeo@web163506.mail.gq1.yahoo.com>
Message-ID: <1379089716.34262.YahooMailNeo@web193806.mail.sg3.yahoo.com>
Date: Sat, 14 Sep 2013 00:28:36 +0800 (SGT)
From: Eric Johnson <johnsoneric582@yahoo.com>
Reply-To: Eric Johnson <johnsoneric582@yahoo.com>
Subject: the details of the parcel
To: "xxxxxxx@yahoo.com" <xxxxx@yahoo.com>
In-Reply-To: <1379089063.56796.YahooMailNeo@web163506.mail.gq1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-1409126635-227023963-1379089716=:34262"
Content-Length: 345737
« Zuletzt geändert: 14. September 2013 um 00:54 von zapparella »  
Zum Seitenanfang
 
IP gespeichert
 
Indikation
x5dr
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4917
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Re: Eric <johnsoneric582@yahoo.com>
Antwort #1 - 13. September 2013 um 21:02
 
Mail über Malaysien!

Code
Alles auswählen
IP:	175.139.86.179
Decimal:	2945144499
Hostname:	175.139.86.179
ISP:	Telekom Malaysia Berhad
Organization:	TM Net
Services:	None detected
Type:	Broadband
Assignment:	Static IP

Country:	Malaysia my flag
State/Region:	Selangor
City:	Shah Alam 



Zitat:
Sat, 14 Sep 2013 00:28:36 SGT
X-Mailer: YahooMailWebService/0.8.157.561
Date: Sat, 14 Sep 2013 00:28:36 +0800 (SGT)
« Zuletzt geändert: 14. September 2013 um 00:57 von zapparella »  
Zum Seitenanfang
 
IP gespeichert
 
x5dr
Forum Administrator
*****
Offline


Die spinnen, die Scammer!

Beiträge: 4917
Standort: Oberweis
Mitglied seit: 05. Februar 2012
Geschlecht: männlich
Re: Eric <johnsoneric582@yahoo.com>
Antwort #2 - 13. September 2013 um 21:08
 
« Zuletzt geändert: 14. September 2013 um 00:57 von zapparella »  
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30400
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Eric <johnsoneric582@yahoo.com>
Antwort #3 - 13. September 2013 um 23:13
 
@ lamayo

Please post the airwaysbill also! We just want to have something to laugh! Zwinkernd
Usually this form of scam is from Nigerians living in Malaysia.

Do you have photos from him and what is his facebooksite?
« Zuletzt geändert: 14. September 2013 um 00:59 von zapparella »  
Zum Seitenanfang
 
IP gespeichert
 
lamayo
Ex-Mitglied


Re: Eric <johnsoneric582@yahoo.com>
Antwort #4 - 14. September 2013 um 03:55
 
Eric Johnson faebook profile: https://www.facebook.com/profile.php?id=100004197125902

Zitat:
Eric Johnson
Work and Education
Engineer
University of Berlin
Berlin, Germany
John F. Kennedy School, Berlin Germany
Berlin, Germany
Living
London, United Kingdom
Current City
Berlin, Germany
Hometown
Basic Information
Gender      
Male
Interested In      
Men and Women
Relationship Status      
Single



« Zuletzt geändert: 14. September 2013 um 10:16 von zapparella »  

johnsoneric582b.jpg ( 33 KB | Downloads )
johnsoneric582b.jpg
Zum Seitenanfang
 
IP gespeichert
 
lamayo
Ex-Mitglied


Re: Eric <johnsoneric582@yahoo.com>
Antwort #5 - 14. September 2013 um 04:00
 
This is the airway bill
« Zuletzt geändert: 14. September 2013 um 12:01 von Uli »  

Eric_Johnson_Airway_Bill.jpg ( 121 KB | Downloads )
Eric_Johnson_Airway_Bill.jpg
Zum Seitenanfang
 
IP gespeichert
 
Uli
General Counsel
***
Offline



Beiträge: 30400
Mitglied seit: 17. Januar 2008
Geschlecht: männlich
Re: Eric <johnsoneric582@yahoo.com>
Antwort #6 - 14. September 2013 um 12:24
 
His facebbokprofile exist since August 2012!

In his Airway Bill he has the phone number +447452026681. This is a cellphone number:
Zitat:


Information on phone number range +44 74XXXXXXXX
     
Number billable as      mobile number
Country or destination      United Kingdom
City or exchange location      
Original network provider*


Information about the fake-site moovsexpress.com:
Code
Alles auswählen
Domain name: moovsexpress.com

Registrant Contact:

   Curtis Pembry ()

   Fax:
   7722 N 101 Plz
   HILLBURN,  10931
   US

Administrative Contact:

   Curtis Pembry ()
   +1.2404422077
   Fax:
   7722 N 101 Plz
   HILLBURN,  10931
   US

Technical Contact:

   Curtis Pembry ()
   +1.2404422077
   Fax:
   7722 N 101 Plz
   HILLBURN,  10931
   US

Status: Locked

Name Servers:
   ns1.crystone.net
   ns2.crystone.net

Creation date: 19 Mar 2013 15:03:00
Expiration date: 19 Mar 2014 07:03:00 



On their site the phonenumber +447509755189 is a cellphone number, too!
Zitat:


Information on phone number range +44 75097XXXXX
     
Number billable as      mobile number
Country or destination      United Kingdom
City or exchange location      
Original network provider*      Jersey Telecom


There is no contact address on the site (on the airway bill, too!!!)
And it's very funny to see, that there are 7 pieces declared, dimension 90 x 80 x 120 cm (I guess), with a weight of 14.47 kg! No real courier receipt will declare it in this way!
And he has forgotten to mark the way of payment!!!!!

Possibly somebody knows something about the two carriers the palnes in the background belonging to!
  

planes.jpg ( 10 KB | Downloads )
planes.jpg
Zum Seitenanfang
 
IP gespeichert
 
Webmaster
Forum Administrator
*****
Offline


Abgeschlafft und ausgepufft!!

Beiträge: 28211
Standort: Йошкар-Ола
Mitglied seit: 06. Januar 2008
Geschlecht: männlich
Re: Eric <johnsoneric582@yahoo.com>
Antwort #7 - 01. September 2017 um 23:12
 
Dieses Thema wurde in dieses Forum von Malayische Scammer - Male [move by] Webmaster.
  
Zum Seitenanfang
IP gespeichert
 
Seitenindex umschalten Seiten: 1
Thema versenden