RSS

“MR. MORGAN WHITE”

06 Dec

LOAN SCAM – NIGERIAN 419 SCAMMER

I’ve been baiting this fraudster and it appears as if this person is still copying/pasting scripts because none of my ”questions” are being answered and he keeps responding with irrelevant bull and calling me Jason, which is NOT the (fake) name I’ve given him. These Nigerians are very unorganized. These are the latest emails;

EMAIL: Hello,

This is an urgent reminder on your current loan transfer. At this period of Xmas, we are giving out great and affordable loan offers. To see how this affect your loan file asap, kindly get back to us and lets get you educated on this OK…

Thanks and get back asap OK…

MR. MORGAN WHITE

HEADER:

Return-Path: <equityloanalliance@9.cn>
Received-SPF: none (domain of 9.cn does not designate permitted sender hosts) dXIgY3VycmVudCBsb2FuIHRyYW5zZmVyLiBBdCB0aGlzIHBlcmlvZCBvZiBY bWFzLCB3ZSBhcmUgZ2l2aW5nIG91dCBncmVhdCBhbmQgYWZmb3JkYWJsZSBs b2FuIG9mZmVycy4gVG8gc2VlIGhvdyB0aGlzIGFmZmVjdCB5b3VyIGxvYW4g ZmlsZSBhc2FwLCBraW5kbHkgZ2V0IGJhY2sgdG8gdXMgYW5kIGxldHMgZ2V0 IHlvdSBlZHVjYXRlZCBvbiB0aGlzIE9LLi4uIFRoYW5rcyBhbgEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzE2
X-YMailISG: OWt5sVcWLDtoA2N7rfJb7LCC5rN.s00Hg1mOlNwsULNgMUfU 71cEWX5tkoEZ5VA7WORHCVWE7xh5Zcssz0szX3FEepJurmZYcWT.fPjS0rV5 KV05T8ECxPrc2KhC1wpB_L3peBaBNZyky_CZkBmpF3FVPRA5Eua9ngIDA7YB VNF5nUxt5AE6gDhG887ZzMbPeWNY41_K8wCikbt0N5JlNtWPtKlGNckqo20C ..K3D3QXWcBODbLK9ZcOY1CmqaZc2aC5i8gEAvMH5o28BSL677zPjLEedF1H KEYZjyLjcA1VG96Qf3lpuuwgyX0PV79TSqVxDRRDTqVfdXjQYT0NukH7B.TO KGwNDrdUT1D_UFv_81USjM23u6NN.vvcchQ0Fkron9253z7E2Ebb60PNocR5 Ca9CRQv95mfE0B.MHwnpGn.fdeq.haf5idsb3R0mEi..cw7KzDJqvWjNybJQ y49USti9uSZ0QH3KtQYSmf6JktdzJ52WjTyEjMjQHVVbAUBPMKmeJF93devs YLI94Mdkia5L8dyQyAYTfBWqty6LH5y3mdvbEXNT7EbMiasq67Pgqbltl6pJ kCjzK0ZNJNMn7hiS5flQNfiM3fmp8kqJLN8QwGHPXb0Z_nHJ0pPr41X6wOAO aJ9BnN1jIdzj6M5yCfyHwEHsL8tZ4734Pi4AtAK6ofG1pDfarCWcINTKzQox w1CGKuz4urYxvFl4ohNmQUtjQwGDeJmuylHylK.DYzMvjGZ4UdAWP8pGgJKG lf_idPEzhh.PFfSNgNIpgHY.h829rTh8oxcoTVZ10YVsrCPv9H6IaRIzFybX KRoJHKiiR6X4DIPVVV4Oo1.JEYYULwKkXEMD4jJfIc7H3bb0VcRVbDhVHMr7 6W3rC2SG8AotEXYyki31EJlIdhFsP0xQFDe9gqeDFYxmbDd1tpxnLvAnGkr4 zMuZeGegbS6NjSr3GeQQqZ3vJJ8QRQP5Ua2Mz5L_.urB57aDDVMGCIe159nG TP_3YonH1VlILdnICVQ708I_BECSVDfdYa_37eQ7MRb_sryQFjxo.VgoLxWQ Ye6vCPyBdQacLkZZTkJ9D2.zgH3kKkJGkKicydIcECf9Zxl2gC.G9qot7M0_ xa7NJrRQYpknI3nQO6.AeBd4IKwvYpNvKAWPDdhuN4i386Hy7rG8BkNffQRV Qcud0qQJKZvMUzcspmKzdvRQZP077Z_UUMvGTJghGxRLFSNXuSbYoOHKQCqH m0pFClVQmWzmlg–
X-Originating-IP: [65.54.190.102]
Authentication-Results: mta1355.mail.gq1.yahoo.com from=live.com; domainkeys=neutral (no sig); from=9.cn; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s27.bay0.hotmail.com) (65.54.190.102) by mta1355.mail.gq1.yahoo.com with SMTP; Mon, 03 Dec 2012 12:50:05 -0800
Received: from BAY153-W49 ([65.54.190.125]) by bay0-omc2-s27.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 3 Dec 2012 12:49:15 -0800
X-Originating-IP: [63.141.199.185]
X-EIP: [nPiv37sbcX9x2A8tIR1maRhzG+9Bnv3+]
X-Originating-Email: [equityloanalliance@9.cn]
Message-ID: <BAY153-W498895A9D80F868B1A2790E8400@phx.gbl>
Return-Path: equityloanalliance@9.cn
Content-Type: multipart/alternative; boundary=”_7c845861-ab62-4e00-be06-7d3c4d23683a_”
From: “MR. MORGAN WHITE” <equityloanalliance@9.cn>
Sender: <hotmail_1367294eeb04af7b@live.com>
Subject: XMAS LOAN BONUS===GET BACK ASAP OK…
Date: Mon, 3 Dec 2012 20:49:14 +0000
In-Reply-To: <1348547540.27242.YahooMailClassic@web161006.mail.bf1.yahoo.com>
References: <BAY153-W558910253EA928A0D510C6E89E0@phx.gbl>,<1348547540.27242.YahooMailClassic@web161006.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 03 Dec 2012 20:49:15.0158 (UTC) FILETIME=[A7F2B360:01CDD197]

FILL OUT YOUR BORROWER’S FORM ASAP OK…
All we requested was your borrower’s details and application, stating how much you wish to borrow and for what ever term. We do not understand the content of your last mail. So if you still need this loan, you have to fill out your borrower’s details to enable kick off with your loan processing OK…

THANKS.

Return-Path: <equityloanalliance@9.cn>
X-YahooFilteredBulk: 65.54.190.78
Received-SPF: none (domain of 9.cn does not designate permitted sender hosts)
X-Originating-IP: [65.54.190.78]
Authentication-Results: mta1255.mail.bf1.yahoo.com from=9.cn; domainkeys=neutral (no sig); from=9.cn; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s3.bay0.hotmail.com) (65.54.190.78) by mta1255.mail.bf1.yahoo.com with SMTP; Wed, 26 Sep 2012 00:19:47 -0700
Received: from BAY153-W21 ([65.54.190.123]) by bay0-omc2-s3.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Wed, 26 Sep 2012 00:19:46 -0700
Message-ID: <BAY153-W2158CFC2401EA4FE29B19BE89C0@phx.gbl>
Return-Path: equityloanalliance@9.cn
Content-Type: multipart/alternative; boundary=”_59557885-be2b-472d-99ca-aa205da67157_”
X-Originating-IP: [209.73.132.4]
From: “MR. MORGAN WHITE” <equityloanalliance@9.cn>
Subject: FILL OUT YOUR BORROWER’S FORM ASAP OK…
In-Reply-To: <1348547540.27242.YahooMailClassic@web161006.mail.bf1.yahoo.com>
References: <BAY153-W558910253EA928A0D510C6E89E0@phx.gbl>,<1348547540.27242.YahooMailClassic@web161006.mail.bf1.yahoo.com>

MR MORGAN WHITE equityloanalliance@9.cn

MR. MORGAN WHITE – equityloanalliance@9.cn – equityloanalliance@9.cn – hotmail_1367294eeb04af7b@live.com –

Two originating-ip’s (which are fake and not the senders actual IP location) 63.141.199.185 — 65.54.190.102 —

Received: from 65.54.190.125 by bay0-omc2-s27.bay0.hotmail.com

All IP’s have been previously reported and blacklisted by numerous anti-scam websites and other internet users. Any unknown contact offering anything for ‘free’ or anything involving money is a SCAM

Associated Email: TR…..@AOL.COM
IP: 65.54.190.125
The ip address 65.54.190.125 has been recorded as a spammers ip. If you have had a member sign up with this address you may want to consider contacting them, and possibly banning them from your site.

Other Spammers in this Range:

65.54.190.203
65.54.190.125
65.54.190.162
65.54.190.163
65.54.190.199
65.54.190.153
65.54.61.87
65.54.190.148
65.54.226.44
65.54.190.223
65.54.190.22
65.54.190.162
65.54.61.85
65.54.190.189

 
Leave a comment

Posted by on 12/06/2012 in Other

 

Tags: , , , , , , , , , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: