RSS

Monica Glover

10 Dec

WARNING: CITY AD CAR SCAM – FRAUD

NOTE: Another scam email sent to my spam filter and then posted on Scammer419 September 30th, shares some of the same information as Monica Glover, including the proxy IP address – – for more information on this fraudster, click: JOB SCAM – Hiring:~Data Axis Virtual

 

 

SUBJECT: City Ads on your Car $1,200 paid

EMAIL: City Ads on your Car $1,200 paid

m<href=”http://bit.ly/TPNZug”&gt; </a>
vUse our Car with an Ad on it Or we pay u to put an Ad on your Car
$600 paid every 2-weeks

Monica Glover /hr
remove in subjectline

HEADER:

Return-Path: <monicaglover@excite.com>
X-YahooFilteredBulk: 208.89.132.141
Received-SPF: pass (domain of excite.com designates 208.89.132.141 as permitted sender)
X-YMailISG: 9Nwzyr0WLDv0OQ3Ui7B8D7xm7lzSa_NSFGGWM3G8_0.y_.f6 81ZQ58.NmyaYb9_flb12Sunx9Wp7ah8812lMg1pnsf8vdb2fyK3jVxHN4lPC QsGz_xk6_T30hsXVDhDTeb8Wx9_YK_xn1ego9wp2mMEm5aj6UpgHkLJYLw8A xFpPKHxhJQd26F5ze6NE84CwwD2UfEhxbVIvh4UZzgnr19y3wo3HVV30ZMeG LIRNPuL7gLpxT6J1Z_XHQRtjreqh6YjuC3wNHw5pACrqgSqfGPmuaEWXpQRC j9sk7_IAGgRK17x8SrdsKqOfrS7GD7VU2JRh2DQdDlsBycISjfFaruWX_ucZ ojSkmNQM0WQjKuCyLtjVIJ5yLIr.9U09Hwol2OyQF1i7rnsiBES8w34D8e3f fxt2XJkn5gj8QaYtmvAjgGZ77cWas5cjZi1rU9HnpJ_ItWU42gq1_EvTM3RK m3xjo7xkVEnaJCDjhgvTPi_d6VvvDK1YmmArBGRnHEOMzXlTd_MHDa1sYr3p BMhYQxr.EoIrvE3lH_XQ7B2RG9d1yin9U2NQYWrZ.XKKl.rPc9HdYdsT6J7l BgEdk9QbK_q3RQIG2.4aGMupxpDehgwlx0YO0_AXgnRq1U1JaZIX0O.86Se6 i5y_5oASVKVZEV05M359IGokbgluYUW0HF.iJv9bbczv4ZXVb44LVuIlwJZW kUey65UGwY5ixWZ2i6ZOsYOJ03SuAwrsITr2Hc7uZTaHAby_wQ7cugyCqvhG 4D1edndG08htdTHmvnJDLaT3dUZGW5bA7TVx8pMFZezkA4KAHve9EjqxsVTS kRDexqqyK3.bqtV3bt2lfwBOeGxSUx90tORKKa.wxBqzSMbhNh73pzevIUu7 2zumDt5H3m0gegC96sIdcWI0e1wClhWCAXZwyRDrQ.4cZ9BTXSpbGMEdbVpM 1iFsOZxrq0xOSusC2Q2ktLL9r4GZjqxYYW3eC85W0w0LhiaFFLzNpHcWrtHN E.0.q8jpN25H2YgjudlLJYZdrzuRwbAGL0iDHggTogKspVwWUggvWyI6km9M rJ38shxTp74mms.CK.Xkx0f80BBKV_6o0nBLP0Qi1s5kBa7I.ecGl1c9CkUo MI5R_zEw5h98TbN04RXufj_qFyy.hYYHwjzpoOBcgMzqrjVg9l2AP4UHpO5y Yv0yDKPxsMVrvUZ.GNVu0X6ffzW2epJUg_WliJO6Q2EdgYjlF_z6_ltI1YB8 YYN5XCOyKr6hjwkrRz.MzQL30y2.u9xwzqABdQgkNtqnv_nGjuRDnJMqJO.K nzt9FGzs3mUYyULddB4_
X-Originating-IP: [208.89.132.141]
Authentication-Results: mta1376.mail.bf1.yahoo.com from=excite.com; domainkeys=neutral (no sig); from=excite.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO outbound001.roc2.bluetie.com) (208.89.132.141) by mta1376.mail.bf1.yahoo.com with SMTP; Sun, 09 Dec 2012 17:46:23 -0800
Received: from web007.roc2.bluetie.com ([10.200.2.101]) by outbound001.roc2.bluetie.com with outbound001 id ZdmP1k0062Alkky01dmPZg; Sun, 09 Dec 2012 20:46:23 -0500
X-CMAE-OUT-Analysis: v=2.0 cv=UejTuduN c=1 sm=1 a=dQoNIrimAEwA:10 a=i-wQWBNYtOgA:10 a=FmX3VfpdAAAA:8 a=QoHJ8kPOAAAA:8 a=H-gxlunUoGwA:10 a=ObCx71v0AAAA:20 a=k1jASxCPtPb7Rh8cyAgA:9 a=QEXdDO2ut3YA:10 a=eXSbejlkubQA:10 a=IawXvI9lP1MA:10 a=bIZyQ9ZLpJ03m6HMhOEA:9 a=tXsnliwV7b4A:10 a=JWhqF-O9MfO5SqHS:21 a=7X69+Egs4aEeFnNAy6RSag==:117
X-CMAE-OUT-Score: 0.00
Received: from web007.roc2.bluetie.com (localhost.localdomain [127.0.0.1]) by web007.roc2.bluetie.com (Postfix) with ESMTP id 97A0B160125 Sun, 9 Dec 2012 20:46:23 -0500 (EST)
Message-ID: <20121209204619.8539@web007.roc2.bluetie.com>
X-HTTP-Received: from monicaglover.excite [78.129.250.121] by web007.roc2.bluetie.com (BlueTie WebMail ); Sun, 09 Dec 2012 20:46:19 -0500
X-Mailer: BlueTie MTA
Date: Sun, 09 Dec 2012 20:46:19 -0500
Reply-Path: prettybull909@aol.com
From: “Monica Glover” <monicaglover@excite.com>
Subject: City Ads on your Car $1,200 paid

“Monica Glover” <monicaglover@excite.com> RETURN-PATH: monicaglover@excite.com REPLY-TO: prettybull909@aol.com

RECEIVED IP – 78.129.250.121 ORIGINATING IP – 208.89.132.141

Another email/forum scammer who shares the same IP (78.129.250.121) – 10-Dec-12 02:51 78.129.250.121 diegofotch diegofotch@hotmail.co.uk

Advertisements
 
 

Tags: , , , , , , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: