RSS

J W – justme362@yahoo.com (Craigslist Scam)

04 Oct

BIG TIME SCAMMER. MANY COMPLAINTS ON VARIOUS WEBSITES. This particular scam is a ‘Craigslist Scam’ (I will post links to sites where others have warned about this scammer under many other fake names/emails.)

Name: J W Email Address Used: justme362@yahoo.com

X-Originating-IP: 98.139.91.98 ( Received from various other IP’s which includ – 74.205.153.31 – 98.139.91.33 – 98.139.91.70 )

Subject: Pot Bellie Pig

Email: how much and how old

Email Header:

Return-Path: <justme362@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts) AzACA3RleHQvaHRtbAMDMQ–
X-YMailISG: OmuTubwWLDsr4kJoDLAfIfAxc8dUZvaFdqWq2Kh9Ac6mz7gb 7FNGsjBcB3dLlE28Ec0U9LA31ynB.GtpSwRgZsjlm03EbrETXxuTHG1O7M1h 82kjoNAdFtfp9sX4tRogkC1G7QXqEubJjYdhIJy818odTLAurDIScgCvhPnO zE2N72BO05hW1wWVhrQwxbAXhbCgBf3PL8CK4KupspoJfHJwTWonk8QrbZWn RhFgaXdN2Sfilk.ifaEL86WQcaMnotXlaoF8Bgg8Rt2PVk3BTyjoTYk1iRFK _WErhw.c3428BOLJMnnilS2FVOulPooGT_AkHVHrqWDkUz7lM7JJtGMorIda X_NHUBRUtDcmjnaQpBI2TYjT5IAam4AAxJ5whssA6jEkNcIK74UVVYidUxeY 75oBdO3hi4gh5wDLxu1EQ9e2ly4bddo0bYiIvZhmn6K1rsCjrxHq1AtdrnXU kYNlZTXofIm_1KvDkV6CU_AZWho99dfCR.AVY.oghEwjWlHpasij2bODQhc7 FS0Kvb74_hU0Ua2ZiVQbDCUUe5Vk488ycx8OQxuSrbcCajlgYVJsEmmO419U Fg7AENTupVp0TLaEr4hIfgp0ic9ADjUuzpZByWyLxFMOq7Z5zXICzD6.CC5f NArrCqrMUQ3S_kGixevVUhG4VkJVBSJeEFTSjfk4X1YGunLMqFP94aasSV9T WsgMc7DSBaCFwiOdcIe6ILa2Hv5qib31W_lXWc9pr2jOPnPJbeShH7KLB9k. 3tnGem44aqRqMkNRBtbs6Gf8DAnYOce.AMWHUC6UtLXnmcTsQfpRkmqIf5dW 9Tmk_2VNqV4v5UFbdN.ikYB7mBJef5fmvev7twU.ljXPtpbumJqFLGdU2xYs GDB6nBtJjjgzF.WGL5BZNSUWOUo0LxLwds.QOeHpTGMNho7eI2LyUSiNVYK3 y.yeQDXsmnsyNvYWs1twnxi63PxSXGfjV3HeXEa3fCBiYX2E9duL4431pTyW cCsAR1DMxT0MUwaMcscQvmfCP0wQjGxM6oaFOnk4LTdQEhdXj9QruTffe69y UGa0ii_aUA4NYpLo0_GEWwpzFMqN0X49UGXJMRHca2x.UV3gtvS1g3BFKzGD Tb_cndQ9O5a1_EU2UsEYbj4e6VMgh9Z5mJUKB_gWJnAXdT0n_wuhXzJwlSt4 sb87S0RAItlGsVBF5IBg4w–
X-Originating-IP: [98.139.91.98]
Authentication-Results: mta1420.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm28.bullet.mail.sp2.yahoo.com) (98.139.91.98) by mta1420.mail.mud.yahoo.com with SMTP; Wed, 03 Oct 2012 20:10:41 -0700
Received: from [98.139.91.70] by nm28.bullet.mail.sp2.yahoo.com with NNFMP; 04 Oct 2012 03:10:41 -0000
Received: from [98.139.91.33] by tm10.bullet.mail.sp2.yahoo.com with NNFMP; 04 Oct 2012 03:10:41 -0000
Received: from [127.0.0.1] by omp1033.mail.sp2.yahoo.com with NNFMP; 04 Oct 2012 03:10:41 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 158103.16518.bm@omp1033.mail.sp2.yahoo.com
Received: (qmail 21274 invoked by uid 60001); 4 Oct 2012 03:10:40 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1349320240; bh=1fLNaBrXhCPER7C2p3/uLibi2nX1E/Ke/IFiyu6wETw=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=frKLVobFHiwClISRJNppPjL058MdN6LLxEUTuSqyNV6Uv6XO8w+UwLQV85YfR3dET2Xmx2KZ3xSYaH+OQOZ4GAfCF/yQdiBDzz7IEiosxczcMYlr9IexBFIWTf0HztLt/yRasgq/sthLpbT+yKHwJxxnBwLagJ28Irx87hzAcUU=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=XGr0Upkikodmw90VI/ZYnfepBgJMPnJKIWU9Sxjc48I7g+0W/oge59BE3JkOGUqXWCziYRk0GZpc1YmBVmHl0gptx2u+YUt6rAurQjKX/u2nDTnTvvk/QsSq0DIcgTvKJWk9Rt+tByc0Np0uPbkOe+zGSJ4zuZKG/6HnVJXE3VM=;
X-YMail-OSG: KkgkRvYVM1lAhxaOaFIiXpmzQwqLNsc.e0xQ9WhHIqvRAqC saaNNaCglECz9WFnsCv.g.kazbj7mX.piJw4oYtvlU3w6NxpYuFLJCqZQCel DwzUrEWHaM1UEb.TmYMuKuo9gw7i1gh.ZEr8qn.x7A453_O4G0_ucsOseTN4 3IhcbIbpzniP81syBy4XpbQ.Nn4AUIlUvPGnP9wpelcXrlT3guw7dnQ3zaGE Idu83Hd82X34kdGuNxM4Z6uswdMf.VZtjHdyaPssz6S2q71knsuD4lvOQI0E oL41I88d2yIkLZ5TBlZMWXXI9OoEqK.iS3BazRQdSa8tjJ2XqWtZRssdTJZ2 fJ28srQfXMsDXij97lZigghZ3KlbWba_PfuzyePbtdY88ZVVeOmDECdKhHjC 59OJhmq9miT_rOncXVylYMDa54M68prfd5cUrZFMSUHcePWXv2semrq4qj4P CULYwpz_Dq..A2s2JPw0rGg–
Received: from [74.205.153.31] by web45704.mail.sp1.yahoo.com via HTTP; Wed, 03 Oct 2012 20:10:40 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.122.442
Message-ID: <1349320240.5310.YahooMailClassic@web45704.mail.sp1.yahoo.com>
Date: Wed, 3 Oct 2012 20:10:40 -0700 (PDT)
From:
J W justme362@yahoo.com
Subject: pot belly pig
To: My email was here.
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”-1911720250-861579668-1349320240=:5310″
Content-Length: 369

Below are other usernames and emails used by scammers

Example User Names Used By 98.139.91.98
User-name: email
User-name: guangzhou
User-name: kevin
User-name: thutrisch
User-name: marketta_e_buco
User-name: winnifredkcreaser
From:
MAC DAVIDSON LOAN SERVICE <web.office_174_912@att. Subject: none/blank
From:
CITI LOAN SERVICES <hctrbrtt7@gmail.com> Subject: none/blank
From:
Hadi Sall <00ha001@att.net> Subject: Hello
From:
“MR. SUNNY LUCAS” <sunluccas111222@rediffmail.com> Subject: SOUTH AFRICAN NETWORK FOR WOMEN
From:
“Mr.Mack White.” <webxxfxxmaster4830@att.net> Subject: THIS THIS MTCN__ 130 374 8443 TO PICK UP YOUR $5.0
From:
BARRISTER John Williams <webtzzz587687@att.net> Subject: OPEN THIS ATTACHMENT FOR YOUR PAYMENT OF $2.5 MILL
First Received From     approximately 2 years, 3 months, 4 weeks ago
Last Received From                         within 1 week
Number Received     333 email(s) sent from this IP

Dictionary Attacks                             7 email(s) sent from this IP
First Received From     approximately 1 year, 1 month, 2 weeks ago
Last Received From                         within 4 months, 2 weeks
Advertisements
 
1 Comment

Posted by on 10/04/2012 in Craigslist Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

One response to “J W – justme362@yahoo.com (Craigslist Scam)

  1. DH

    10/08/2012 at 14:41

    thx thought this looke like a scammer

     

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: