RSS

Garry Blair geeblair87@gmail.com fireflylow@aol.com jamespato004@gmail.com

28 Sep

WARNING – NIGERIAN SCAM (419)

Garry Blair is still at it except now he’s been caught up on Craigslist trying to steal peoples items and money.

Latest phone numbers being used by this scammer;

  1. 4702382022
  2. 4705144904
  3. 4702000432 – Pretending to be Market Max
  4. 4702382011
  5. 4705142861

Newest email being used by Garry Blair <rhowhd@gmail.com>
Subject: Re: Buck wood stove

On Mar 10, 2013, at 8:17 AM, Craigslist User wrote:

sorry: think i need to talk to you on the phone before we proceed. this seems really fishy to me.

On Mar 10, 2013, at 8:15 AM, Garry Blair wrote:

I’m at work right now i cant make or receive calls. After you receive the check and confirm to me that it has clear from your bank, then i will send my shipper for the pick up of the item.

On Mar 10, 2013, at 8:10 AM, Garry Blair wrote:

Nice hearing back from you, no problem about the price, i will pay you by a Cashier Check .i will send it in a next day delivery I’m offering you $420 i will take care of the shipping. I want you to remove the add right away so that i can be rest assured that you are really selling the item to me.So get back to me with your full information such as:

Full Name,
Residential Address
Phone Number
300
In order to send the payment to you tomorrow.

Regards,
Garry.
On Mar 10, 2013, at 8:06 AM, Craigslist User wrote:

375.

i just noticed that one of the two front glass pieces is cracked. i’ll happily order you a new one (either tempered or ceramic, whatever your preference), and have it sent to your house. can do so at this website: https://secure.onedayglass.com/

erin

On Mar 10, 2013, at 8:01 AM, Garry Blair wrote:

Ok, got it now. Good to know that. How much is your price?

Below are other emails, names and IP addresses used by Garry Blair

Garry Blair sends scam mail under Geeblair87@gmail.com and fireflylow@aol.com and his reply to address is jamespato004@gmail.com (I’m assuming he also pretends to be a ‘ James Pato ‘)

This Scammers IP-Address is from Nigeria, which I already knew just for the simply fact that 95% of these scams are from that third-world Country. By going to ProjectHoneyPot, you can find other IPs associated with this IP/Scammer by clicking: 41.190.2.33

Name of Scammer: Garry Blair

Name of Scam: Secret Shopper

Email Address: geeblair87@gmail.com (geeblair87)

IP-Address: 41.190.2.33
Return-Path: <nobody@vps.ezwebcenter.com>
Received-SPF: none (domain of vps.ezwebcenter.com does not designate permitted sender hosts)

Email: Secret Shopper Part -Time Job Offer!

Consumer Research Group is currently searching for individual interested to work for the company as a part secret shopper and earn $300 per week. It’s fun and rewarding, and you choose when and where you want to shop. There is no charge to become a shopper and you do not need previous experience. Contact us with below information if you are interested in this offer.

Your Name: Age: Location: Current Job:
Garry Blair Regional Instructor.

Return-Path: <SRS0=7ZzF=IP=aol.com=fireflylow@srs.kundenserver.de>
X-YahooFilteredBulk: 212.227.17.9
Received-SPF: pass (domain of srs.kundenserver.de designates 212.227.17.9 as permitted sender)
X-YMailISG: 5Wb3vzUWLDvCVco3sMsn3g6u12ScNjOuMd1rjFAq390hZYPJ 326s5pttcNddDwSINTZCuuc6YHGcHdYBrR_JIM54rme2htAMrpVWt9TVg0yf WiVQuRCIez8PokEIEssyZp.E6A0B5vHNgKebK4mdBZk1RZkuUvydJe.viHht pvkWUxS_2HgYiQlqTogwbDYd1jgzUOEs48pRFPFNn4GygK3SuIenRMNuYWwn f7._wSxLwSHUmb4TkLqykMOvNcichK7a_B3tXGVcTpQ_9jT9HXYGi7pW3muV .erv9r4e75PB5dbbkWc.lxG0v3adtnC7rWQ8k.6DbyovJk0S4yFabrtEg2MN .mqSrHPNydWmnLivy_aSsyJ6SAsIxegkvCXy3.qvPbDW9Min_vOVSfvZy2k4 ixdx1OJWYZ3c7QkUsErjDAdw91JkolB1jnXd72PwNQ0jGYAErqx4KHFk3bRq mx52kCDtVqxj4QNaiukgfRrwe7M73WnEVkB0Cs53EqMhyfNY_J7Daip5e4nv DNHrFUrZSaogY1bX_WHECfOnO4wyzwLOhR4TfHSLViuvqoMwQ8vg0j_fKpl7 4r5kdc5NvDtHlqtiIKYBUoH7COzgp8qplE3oLcprq_qE1gi1pHRSB0G.Iig8 k67L.Qw8dKwHPysv8W3m4wZahSqERWdozC3qhK17l_1TZMx.WL5f_0A9cvi6 TkFTwjZop1iAwwb2AmwxDyrQ0B.DFC9E6TuXb54j9.N7DSsqLZmRZLjtPEBV 3opkdM6XPNNIvHBrtHlPjmw_5cIkMrMm.48QjaV4muMBiZ.qDX8NZcrE5J_Q bm17bM_VOUSQL25AjEcVDOui91N5tmqqY8sdFrR2OVjL1l3mK2wgTrN4getM bV9teko4yq50PTbvKIl7X4yIZK.8bDpXIVytw1k6x40LGYS7jnhjS_GW8dfV 8L.juJOvaVJUQX8M4ms6hlAFs6FSXxabnC7HUOBVNWi_IuBOhAt8janVUV04 kettjtFd_2S1D0VKWB2vYIxnypHYZQNEPnKXvOGTl1GqQIFmUmREw0vw_qsN PnKiblBeOTQEDjdVnEWPsV70WSveyJEFtUHKnF6ZkEVK0KrGpw7ZKr8fUKqp Vbo_TMLEh4IKERqNd8tJoOyKpRSMUe24lhgfya.gRb3ijoXSNiO_27UaBBxG bGfH8Aau2mroTOsNLf_wl21yUydllQcnlOO_gr0oH4U1QXwNj7Y2Xr5obXHR 9Rbre2069kvmbqT.0HDZNxHXbHMo
X-Originating-IP: [212.227.17.9]
Authentication-Results: mta1203.mail.ac4.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=aol.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO moutng.kundenserver.de) (212.227.17.9) by mta1203.mail.ac4.yahoo.com with SMTP; Thu, 18 Oct 2012 13:12:34 -0700
Received: from icpu934.kundenserver.de (infong877.kundenserver.de [212.227.34.100]) by mrelayeu.kundenserver.de (node=mreu4) with ESMTP (Nemesis) id 0MGKzj-1Te3Gg0Rmh-00F4Um; Thu, 18 Oct 2012 22:12:33 +0200
Received: from 41.190.2.67 (IP may be forged by CGI script) by icpu934.kundenserver.de with HTTP id 4AWAjO-1TqLED0DoK-00RcPL; Thu, 18 Oct 2012 22:12:33 +0200
X-Sender-Info: <309299044@icpu934.kundenserver.de>
Date: Thu, 18 Oct 2012 22:12:33 +0200
Message-Id: <4AWAjO-1TqLED0DoK-00RcPL@icpu934.kundenserver.de>
Subject: Now Recruiting: Earn $300 As Evolution Shopper In Your District
From: Garry Blair <fireflylow@aol.com>
Reply-To: fireflylow@aol.com
rhowhd@gmail.com
41.190.2.67 – Location: AFRICA
212.227.17.9 – Known Scammer IP’s

 
1 Comment

Posted by on 09/28/2012 in Craigslist Scam

 

Tags: , , , , , , , , , , , , , ,

One response to “Garry Blair geeblair87@gmail.com fireflylow@aol.com jamespato004@gmail.com

  1. Admin

    09/28/2012 at 06:55

    FULL HEADER INFORMATION:

    Sent on: Thu, 27 Sep 2012 03:13:13 -0700
    Return-Path:
    Received-SPF: none (domain of vps.ezwebcenter.com does not designate permitted sender hosts) YXJjaGluZyBmb3IgaW5kaXZpZHVhbCBpbnRlcmVzdGVkIHRvIHdvcmsgZm9y IHRoZSBjb21wYW55IGFzIGEgcGFydCBzZWNyZXQgc2hvcHBlciBhbmQgZWFy biAkMzAwIHBlciB3ZWVrLiBJdCdzIGZ1biBhbmQgcmV3YXJkaW5nLCBhbmQg eW91IGNob29zZSB3aGVuIGFuZCB3aGVyZSB5b3Ugd2FudCB0byBzaG9wLiBU aGVyZSBpcyBubyBjaGFyZ2UgdG8gYmVjb21lIGEgc2hvcHBlcgEwAQEBAQ–
    X-YMailISG: k1Eamu8WLDtTJK4EhEJ2lifsDnHJsBP52p2oJsRk6PoEjYFT vrhA.qxmF0z44T.tpSnUFzIeKBp.DMah1ikSquea8D8fbIMpE8Iw6xeY20ex T0tpjwfPd44gZ2rhGdGwyOLAttta4AE9E3WNGs.Co2DHthZ1b50cklQdE6rF fj8hCz7pV8OGmjAk3tR0xwyL8tc3gSPv9R91rU.RGPJD5VmZSB3oRV38kzkJ j8KXDYOiB8U4WbjfHFciPC1rtnZzCGP9V5t1sXMORoghZsjauMnA97YIXYLA YrubtTG7lXO_we8mwZFiepN0g39ZuIFEZBQasAtBV_CI4I5x3f51Bif1Ygkr LsEyvLteqqGiMozbXk7pQpGTwH97FWO6Ibx9a7Qc0wybodkdZFDcmpQzIEdu 1M1OfWLrm5yhQ_PpLeYF7DesJ9Eh329dDWMt5Mw0IqChOvBWJiFfgne1r58. 4dzxYQ.MBRxuyNlwBBz5CBZ7K2hR5IoGjZmpNl8b5KRJnKR06ABO4LHLWwRU 6h.ZGfQYonQqTh8UyK7iC3CmVd8s6INuFFuIb3.PQlQ7Ep3ZMtlR8AsmQz9O JasSDMeO6r8Bg5nP74VodwDUH6h_5VRtjITEZVq0_TiQFMFP1_dVXZ5xRPwc sDX9b.XxYZ1uHk6hbEZK55UJxSX.AgvbOZ2Tcl3pclYjq59bQj2qpgBAEo4K WNy2zY1WJ_riQRwucGThwfxPwbcS_v938ejUAxJlNtZzk1U181INKXQW165Q dvek_ZtApWBEyxsNjflnni6U8IqeeTF.vW00qIJxFeSHt_777XS5hIhwI4_A A4DBThIVN7Jos1YI.9qOC8Yo8wJtG4m54XlIbXmOcumiD2jcQf7cVGKvXxSY VkqAVOxXcpEi4p4_ZoK9M40sHz8suD232IMSDrblhk8nMZjcpJxgldpztnJI o.FAhLFz8k8cS62IGbXr0blIYgGdcW9gnXF_oN2zL7xE04rlGK63DuT6TnnO wzBQKkkG9RjrPFQ.7zNQim8NeQgSGUz1FvMPA0WNNk4X7vBpAtgQg5yeGHGh B3an9IhGa7VpHCcNY8dv8DrH3PSy

    X-Originating-IP: [207.58.166.231]

    Authentication-Results: mta1119.mail.mud.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
    Received: from 127.0.0.1 (EHLO vps.ezwebcenter.com) (207.58.166.231) by mta1119.mail.mud.yahoo.com with SMTP; Thu, 27 Sep 2012 03:13:13 -0700
    Received: from nobody by vps.ezwebcenter.com with local (Exim 4.77) (envelope-from ) id 1THB5j-0007lI-Rf

    Subject: Secret Shopper Part -Time Job Offer!
    From: Garry Blair Add sender to Contacts
    Reply-To:
    MIME-Version: 1.0
    Content-Type: text/plain
    Content-Transfer-Encoding: 8bit
    Message-Id:
    Date: Thu, 27 Sep 2012 06:13:11 -0400
    X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
    X-AntiAbuse: Primary Hostname – vps.ezwebcenter.com
    X-AntiAbuse: Original Domain – yahoo.com
    X-AntiAbuse: Originator/Caller UID/GID – [99 99] / [47 12]
    X-AntiAbuse: Sender Address Domain – vps.ezwebcenter.com
    Content-Length: 445

     

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: