RSS

David George

11 Dec

SCAM – BUSINESS PROPOSAL PARTNER – FRAUD

12/17/12 – UPDATE: Below the first email and header is another email/header from the same scammer. The second header shows “David George” using different information including different email addresses and IPs

animated scam credit card

EMAIL #1

SUBJECT: View This Attach File And Get Back To Me.
EMAIL: There was an attached file in the email titled “Open Attach”
HEADER:

Return-Path: <dtito4539@gmail.com>
X-YahooFilteredBulk: 98.138.91.101
Received-SPF: neutral (98.138.91.101 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: 7_YIhlkWLDu90wKhHyyxw6zpHyxycgdiAAa4YwuNukVVetoh J_IC5bWWEgUUtuhkKfPFe.tMo1UbGmenMhF03EOzfaw7eIqqmetRMEZ4oGzb VHndlb9o.U94PesgTXj0QFOJCMffAurCH346kPPPTRxPpLhWIvTbXtLQmcLU BJRJ7U.Y2xNjjaxrdUgitDHDq9IqyHsyg4GUmdsg3DViiS7ug05icIpm6zZY 15TpdzMEk.dloUVHX4X5colstMK9o8cj3S6Dy9pG7og_pb6ByLAZIAqEHLpo Qrt.EOlrMjtuxj6DMzYzX6qi7YUmXO6vp_kcU1yMNz_itYP0LPLIngyQJ9NR F9BtNikASLmNJUDU2gyctMSy57nj9hjVmDozpZ4SlaFLigd6460ujdc9AfVi hcf493q5bq_ZcAvKBRSCYoY6H17gmiybGwA1Khd9zAXSHVK8F75gmOwlsEZV IBiRI7_8cwpOzDmLinvmzXZXyhS74F1IGrQL0JL_g_B8yk_DdeAIVgtpmkWT SOyia.1O5nayDgWlpWgkc9xwpbznXoUZvHcnTtjc2XYTLmnJQ8S4hVt0qTTZ crIyoxAQagIeC25yzg0JCFsY59rQIKfAQyzBB_dFL25lOA0qsaMem1h_o9zk ZBPXQLLazUI7iFCdePeIve0r3vADC3LxQNzSlOPqJh0rTb1eB5fupXG2v1Ix xZBev0wEsghKQ9aPi.hlpyfq7HOUj8KFbB08w1Tjncfn0ptfICfi7514.4Fg TSdWVFftXF3MEp7ZEs9kbkHD3vSv2kpBtB2MerhvoZ7YA3ofF7.OWStPDNVB OrPE.u0Q.U0tEEAQ8iTF6050DJCFNZnDYnIILvXWIGEAkunQxqF9kKM_xXI8 3KlZFhO3_00Tk3sekKyuw0XPQg60zPVbwwgTRlRdwn7UvN8kpoULxNaPA_Ld gDblLsidCE_opoBENVrcfvBmbF5_klg.e.4FELw9x92L8QUsYR_vOJp7DL6N XIRfvT6BnyWcmwHQIPhFrTi_ajCRjhKzLrE5_z7dzThVKmD0TVht07F1osXa iHFcLu8f6Uu.hDz8iEGyJ09KaC8RRVoFS8f4nm_MkxSu9bk0k1Lu3fvkNQfx L847swtQsIiC4wlsRCHwYrj6piDtl8GyRQ9uCPivXpH2ifGbXg.e2f71TCaa PIrQGY7xCDbzDq7OYaYggzfEcgPgqPR_7YCNsmbez_LC5eUKq9b13OTQWCzo 50lAe__6EAfKTnwSImZds2a6pw–
X-Originating-IP: [98.138.91.101]
Authentication-Results: mta1209.mail.ac4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm8-vm6.bullet.mail.ne1.yahoo.com) (98.138.91.101) by mta1209.mail.ac4.yahoo.com with SMTP; Mon, 03 Dec 2012 14:34:36 +0000
Received: from [98.138.226.180] by nm8.bullet.mail.ne1.yahoo.com with NNFMP; 03 Dec 2012 14:34:29 -0000
Received: from [66.94.237.109] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 03 Dec 2012 14:34:29 -0000
Received: from [127.0.0.1] by omp1014.access.mail.mud.yahoo.com with NNFMP; 03 Dec 2012 14:34:29 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 280493.47606.bm@omp1014.access.mail.mud.yahoo.com
Received: (qmail 25551 invoked by uid 60001); 3 Dec 2012 14:34:28 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354545268; bh=o0AZy5NFBNZAPup6KgDmVQaETpPB/49bLptSj+IPDic=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=32q637yHtI3YkIIUG0C9gxQUCjXIvqiWJRRigd35qEzsDn9zlFniWa3HMPoBUfjKydfgoK4wuW2mGqPnVVijEQGQCtwPbhawwF8cwcoiHruJB/v+H3KOd5+9A3/t46tBgFI0hvqee/6n9jY3cr4P3JAeAwmfDyQv0qlkeJ/z+/o=
X-YMail-OSG: oYLOaBAVM1nTTiR5riPoVSq50.JwVtNy0eFdRApEKzvilWE UKgXcXt.fJt6NELENVzUePzHgeoyn.jo2uoDWFq1MobkNjWJynQ8rz9gFdE3 3b6Ty2cyiU.Wh5LRVuJclL2GuLEuHeBlPXgbqmxZ94K4wNVfZJKMHaHVLvA5 hCOhKDclOO.Sv5qigihI9Ia4kFYnCQM5ABMh5fyj8fxU8IHc_ba4Gy.fxUn5 Od6ndKsyQeCR_ATVtgZYfQ_BuLBFJHZFbCNu2HiwU7gMRTPYva.qn7F0Q1eD _3yFpW8Fz2g_M5AuyffKQxssk9QhnThpttFJt7OU15ixxdNgL9lMiNZvq5.Z 2vZh_hlZvmgPi1GOY_XIELkH16uG_YOYgSQYmOW8Ai0Jix96FT4x9FFvl0aG gZzkNI1cD4engrONgudP_kyUY.oNSoxqQcheo1_WoO.KMUloBwuab2GXbqBB 3280I_3PrRVaBGGd6onJrDq4AgDhVBX._XtCWGr3RpOEtyTWV6yZqGKc-
Received: from [69.163.96.25] by web5703.biz.mail.ne1.yahoo.com via HTTP; Mon, 03 Dec 2012 06:34:28 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354545268.64346.YahooMailClassic@web5703.biz.mail.ne1.yahoo.com>
Date: Mon, 3 Dec 2012 06:34:28 -0800 (PST)
From: David George <dtito4539@gmail.com>
Reply-To: gdavid484@gmail.com
Subject: View This Attach File And Get Back To Me.

______________________________________________________________________-

EMAIL #2

SUBJECT: PROCEDURE

EMAIL: Dear Partner,

I thank you for showing your interest to assist me in transferring
this money to your overseas account, which i expect you to keep
absolutely confidential at all times in order to avoid eyebrows in the
course of transfer.

May it please you to know that all about the transfer is legal and
bank to bank transfer, vital clearance certificates that authenticates
international remittance of funds shall be secured in the course of
transfer. Which will prove authenticity of our transfer to any country
we wish to transfer the money without any questioning.

In order to proceed, an attorney will be appointed for you here who
will open non resident account for you and act on your behalf in
signing vital transfer documents in the bank. Please provide your
overseas account as listed below in order for me to secure needed
documentation and submit to transferring bank.

BENEFICIARY NAME:

BANK NAME:

ACCOUNT NUMBER:

OCCUPATION:

ROUTING CODE:

AGE AND MARITAL STATUS:

DIRECT MOBILE NUMBER:

As soon as i have above details the process of transfer will commence
immediately. Soon the money is transferred to your overseas account, i
will fly with my wife and three children to start our new life in your
country and for investment purposes.

My kind regards.

Mr David George

HEADER:

Return-Path: <gdavid484@gmail.com>
X-YahooFilteredBulk: 209.85.216.43
Received-SPF: pass (domain of gmail.com designates 209.85.216.43 as permitted sender)
X-YMailISG: Naz6iTcWLDtPafJG3frokkXc3ukEHhTq3qYpgF4eNnaak8._ lMhg6dmlYkLbunyfJ2F_ScLNOHbc.0PforP346SREmeFE8IvdMZBPKTsIGXx CbQDb8lVKkwl.kO43q3gpPWPohkmyy8ID.rGWIMGOWKgYrqKEaO9EgvfFYiZ Qu4GT7I8XH9drvzgQci_ZjQjIFABMS_wDvrLwYlm6pL31xkYfGV4KtQ45Q17 6g6HkfRXCIp4JDr7XnpdtH2Czvj4zj9znDFQ3x6P8SqMrz8x5TqQ_iS7iE0C 9IJK0laSaCncr702mWVPBm9ZII2OBFnib.tYKZd6AIdxEprwdaIN_Alsb5aw uxoIpUVTUmqOLvwmBLWCNCTAzcLpzc6Xa7lDBKyte9RANBJsS.JX1G74pVBe c2jCIR4MVCSaq0ki0Ymx6HnD01j3yBAWdZBr6QIjrl9BmO_YxU0ZpI8KHg8v g4MGA6yZq7RUZnuxbg0BDtYLGxZ8pWu4fSC_FjT6_ozHRaNjrLhjHryfj764 GM0WodRCK.ymMN9l_auWKrOyvg0d1FIjW_ZHST.QiHFdAjai1PRQfdfOkplg cPL.hs.6qugujGYT_9Y3cog2d0Bf.6neEArkKtqTi4DXSEJAaqbIGI6DMfBA 74O1YUYtMNgG6uBS1FhLoQ2Zo4mLCfbfXgzie63M71RjS1BQBX4VQubxWRJ6 QNLNoMVq3Yt9799SxL9fcwO18ShYH_.eJi10eLcNOCIh29StJXS_N1QlThEu QDraPzGmksoQdRhUZUblTH9j7neXT_718NX4pTZ_143xkGaDN6S5U4XjGE_R TahgKTyjL_UYjTwC7Ie0xbAWDVShPe.Eh_fHWUqIC4BEr2k3QLzzLeBIPgIq NzDejCpoF8AmkidTUBQ3zqy5vHDAG_3o8qDzOJSP3O4PEIWSLbd9VxNMF5SP 9DAHxJNQKmm1db9h5VS.ZHSur7394iWoRwpnvc3rv0fgKGdWi7_iC8j2j04U UUfSWS8XnHRp2Ov7OLVRIyY4bD1bGfSc8qBd6lCZ_EveqsWvp8J4QfJ_4qu6 zHBUmHXdb7m3JvsqoP4YBA8bR2XATJ_G4yX7iYX2BDmVs9EDKlFY43timvNb f4QS3R.8ADY1LdCdHLgVa2k2nRYwvAwHKpsJlEIH3hHKc_gWVI.jCc0VyYsb ARtIvjvHW7gexxEknP99axWYdJqBDM8lKBZZMnj_h5pFfs3fWjqsajaFygl1 sX9m.16Q97x71A3RLSMND3Xs1x4cT_4nY.ZbYipkvK2MHXCUC1_TZ4VDoVKV HJe2vrRB60r_osW1Bi5PBvDgV_56kvoYhWpbiDH1Jn5l3Bz1Ok95wI34bsAn lo1dhmFylFc-
X-Originating-IP: [209.85.216.43]
Authentication-Results: mta1359.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-qa0-f43.google.com) (209.85.216.43) by mta1359.mail.bf1.yahoo.com with SMTP; Mon, 17 Dec 2012 06:45:58 -0800
Received: by mail-qa0-f43.google.com with SMTP id cr7so2408219qab.16 for ________ Mon, 17 Dec 2012 06:45:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=2d2+rDEpHVoIcbezyBoHjZjajUgVJN0jJTtW6tVL+8M=; b=c9F0p9ivfWP9MIx23K2tt92FCTeKFDYw/DHZCWSSwamsLNrPItTa9A+/XlZ6H0ninC e/zmvrCMhba/vyLt3wZtRX9O+1Zjl3DpOJNXmLmIaGdr0Bmznfk2OAHMeqYPs8rG5X2M GNTj1lLfg81srKJESlVsvYeR9RegXlcxhHC4pulkwAdQKWf8LbL93dDyMJRlNsXWu0EY 00aqZe4GuS0H0IdEKYeTmiI1DqeBSLcaXXLSl2uueSyb8nWpe6O/k6eoqJx6HfeoISxn myvnAy1y2tyLK8ZoppV8hV7IDGOF5tfNt66/9v13A95R7A8RrYYI9JZwLvXaZraPD5uN mglw==
MIME-Version: 1.0
Received: by 10.229.195.81 with SMTP id eb17mr1446091qcb.93.1355755238484; Mon, 17 Dec 2012 06:40:38 -0800 (PST)
Received: by 10.49.86.10 with HTTP; Mon, 17 Dec 2012 06:40:38 -0800 (PST)
Date: Mon, 17 Dec 2012 16:40:38 +0200
Message-ID: <CAOsNjvqCda1OyXrR7PZPsHz61bqgzO=W=_uOc2NTp8KsQXZGJA@mail.gmail.com>
Subject: PROCEDURE.
From: david george <gdavid484@gmail.com>

david george gdavid484@gmail.com 209.85.216.43

“David George” dtito4539@gmail.com RETURN-PATH: dtito4539@gmail.com REPLY-TO-ADDRESS:  gdavid484@gmail.com

X-YahooFilteredBulk: 98.138.91.101

RECEIVED IP: 69.163.96.25

ASSOCIATED IP: 41.137.20.4

Most recent scammer addresses who’ve sent spam under the same received IP (69.163.96.25) as the above scammer include: 

11-Dec-12 06:42 69.163.96.25 Robcsz14 whywenti@gmail.com
11-Dec-12 06:08 69.163.96.25 barobertoswifta9291 retireasw@gmail.com
11-Dec-12 05:34 69.163.96.25 dfrhihmcn retireasw@gmail.com
11-Dec-12 05:28 69.163.96.25 bbobbyshtolzeay2369 swaytyh7@gmail.com
11-Dec-12 04:18 69.163.96.25 baangelastexxd3595 shiqyxr12t@126.com
11-Dec-12 03:45 69.163.96.25 bbobyshulze7823 pefexafeGat@xe6mxun.mil.pl
11-Dec-12 03:39 69.163.96.25 bajanesstivnov2066 redeassenry@xe6mxun.mil.pl
11-Dec-12 03:27 69.163.96.25 velesyttsa1943 ajlovedoratheexplorer@gmail.com
11-Dec-12 03:18 69.163.96.25 bjanessmaareyy333 lilin206@mailondandan.com
11-Dec-12 03:13 69.163.96.25 pitytop8408 adalia0130@new-purse.com
11-Dec-12 03:13 69.163.96.25 bjanssdarky5157 adalia0130@new-purse.com
11-Dec-12 03:08 69.163.96.25 baannatunior1266 adalia0130@new-purse.com
11-Dec-12 02:59 69.163.96.25 aolautivanovy3790 adalia0130@new-purse.com
11-Dec-12 02:55 69.163.96.25 anatjunior1022 adalia0130@new-purse.com
11-Dec-12 02:53 69.163.96.25 avelesygoglety3513 adalia0130@new-purse.com
11-Dec-12 02:48 69.163.96.25 Irraphfrarelp adalia0130@new-purse.com
11-Dec-12 02:44 69.163.96.25 bobbysulzeay4833 adalia0130@new-purse.com
11-Dec-12 02:39 69.163.96.25 bradadaka6821 adalia0131@new-purse.com
11-Dec-12 00:00 69.163.96.25 brianiup ugugoo100@gmail.com
10-Dec-12 23:55 69.163.96.25 bbbbyshulzeay3925 superpogirl@gmail.com
10-Dec-12 22:26 69.163.96.25 aImmilajenanew29 Immilajenanew2@gmail.com
10-Dec-12 20:30 69.163.96.25 anntaecahvs787 adalia0127@new-purse.com
10-Dec-12 20:01 69.163.96.25 Keycleotherce adalia0127@new-purse.com
10-Dec-12 19:53 69.163.96.25 baanatyandexta8617 adalia0127@new-purse.com
10-Dec-12 19:50 69.163.96.25 gregorasmaarlyay4510 babala752@new-purse.com
10-Dec-12 18:13 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 18:12 69.163.96.25 adizzyclttle8389 prodvizheniesaytovpt@gmail.com
10-Dec-12 18:12 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 18:12 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:57 69.163.96.25 bbbbypetrovy649 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:57 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:48 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:47 69.163.96.25 beveasdark1744 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:45 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:45 69.163.96.25 bangelasunior1313 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:44 69.163.96.25 aaleeytopy3312 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:44 69.163.96.25 bptrickmshtolzea688 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:42 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:34 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:29 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:00 69.163.96.25 Babimatty ktgz846@new-purse.com
10-Dec-12 16:50 69.163.96.25 asemCoemyJex67 semCoemyJex2@gmail.com
10-Dec-12 16:45 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 16:22 69.163.96.25 adaasjnr3096 newoktosanz12@gmail.com lasufuv@weboka.info

For more spammer addresses sent from 69.163.96.25 please click: Stop Forum Scam

SCAM MESSAGES SENT FROM 98.138.91.101
From: Mr George LUis <0000officedesk769@att.net>
Subject: URGENT REPLY NEEDED
From: heesoen_21@yahoo.com
Subject: Curs Engleza fara profesor
From: Microsoft Office <web.microffices01@att.net>
Subject: You have been selected as a potential winner of Mi
From: sefolo <sefoloedward@gmail.com>
Subject: PLEASE VIEW YOUR ATTACHED LETTER AND READ CAREFU
From: popularipehi5@yahoo.com
Subject: Trusa de machiaj profesionala – Reducere 30%
From: popularipehi5@yahoo.com
Subject: Tigaia magica Dry Cooker
From: YAHOO MAIL LOTTERY <webde_0012@hotmail.com>
Subject: Congratulations : Congratulations ; Open An Attach
From: =?iso-8859-1?Q=?=
Subject: ProV – Erectii pana la 72 de ore
From: Popa Maria <sylviu28@yahoo.com>
Subject: Scapa de negi, alunite si oricealt semn al pielii
From: CANADA UK LOTTERY PROMOTION <drjohnpatrickagt5@gma
Subject: Congratulation,[Kindly Open The Attach File
From: “xcvbcfsdfss@yahoo.com” <xcvbcfsdfss@yahoo.com>
Subject: Your Criminal Record may have been updated recentl
From: Popescu Maria <relisword_99@yahoo.com>
Subject: Ochelari de soare Ray-Ban !
From: popescu <andreea16thebest@yahoo.com>
Subject: Ochelari de soare Ray-Ban !
From: “Department of Minerals & Energy, South Africa” <w
Subject: CONTRACT AGREEMENT/ $14.5M
From:
Subject: From: Mrs. Bridget Hills & Francis Hills (Son) OPE
From: YAHOO AWARD PROMOTION <mrsmartins66@gmail.com>
Subject: congratulations,kindly open the attachment
From: FREE LOTTO EMAIL PROMO OFFICE <freelottery03@redif
Subject: Fw: Congratulations!! Please Kindly Read In Good F
From: SJPUB <pjmom1@yahoo.com>
Subject: PUBLISH RESEARCH STUDIES ARTIC
From: James Kunta <jamkzm1@gmail.com>
Subject: KUNTA INVEST.ASSISTANCE
From: “FROM: MUSA AHMED” <ahmdmsa@rediffmail.com>
Subject: URGENT REPLY, PLEASE I NEED HELP!!!
From: MICROSOFT AWARD LOTTERY 2012 <drjohnpatrickglo@gma
Subject: CONGRATULATIONS, {Kindly View The Attach File For
From: Australian International Lottery Program <web90901
Subject: Congratulations Check Your Attachment
From: MSCLARA <msclaraglory2004@gmail.com>
Subject: YOUR EMAIL HAVE WON $1,000,000MUSD
From: MRS GRACE MANDA <gracemanda147@gmail.com>
Subject: I NEED YOUR ASSISTANCE ON THIS TRANSITION

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: