RSS

“Mrs. Susan Claim” a.k.a “Craigh Bradley”

11 Feb

WARNING – NIGERIAN SCAM / ADVANCE FEE FRAUD

The lottery scam sent by this scammer under the name “Susan” was sent in the form of an attached file written in Microsoft Word – titled “WINNING NOTIFICATION..doc”
The same scammer using the name “Craig” sent a lottery scam in the form of an attached file titled CRAIGH BRADLEY.DOC

Subject Line: Please View attached to claim your prize

Return-Path: msclaim3@gmail.com
Received: from nm3-vm1.access.bullet.mail.sp2.yahoo.com (nm3-vm1.access.bullet.mail.sp2.yahoo.com [98.139.44.109])
by mtain-dd09.r1000.mx.aol.com (Internet Inbound) with ESMTP id 8EE943800009F
Received: from [98.139.44.98] by nm3.access.bullet.mail.sp2.yahoo.com with NNFMP; 07 Feb 2013 08:36:06
Received: from [98.139.44.71] by tm3.access.bullet.mail.sp2.yahoo.com with NNFMP; 07 Feb 2013 08:36:04
Received: from [127.0.0.1] by omp1008.access.mail.sp2.yahoo.com with NNFMP; 07 Feb 2013 08:36:04 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 877976.30982.bm@omp1008.access.mail.sp2.yahoo.com
Received: (qmail 98195 invoked by uid 60001); 7 Feb 2013 08:36:03 -0000
Received: from [173.245.64.36] by web5715.biz.mail.ne1.yahoo.com via HTTP; Thu, 07 Feb 2013 00:36:03 PST
X-Rocket-MIMEInfo: 001.001,CgEwAQEBAQ–
X-RocketYMMF: webojoh
X-Mailer: YahooMailRC/718 YahooMailWebService/0.8.132.503
Message-ID: <1360226163.87697.YahooMailRC@web5715.biz.mail.ne1.yahoo.com>
From: “Mrs. Susan” <msclaim3@gmail.com>
Reply-To: “Mrs. Susan” <ashleyroland2@gmail.com> You can tell by the email address that this scammer also uses Ashley Roland as one of her fake names.
Subject: Please View attached to claim your prize.
X-AOL-VSS-INFO: 5400.1158/87986
X-AOL-SCOLL-AUTHENTICATION: mtain-dd09.r1000.mx.aol.com ; domain : yahoo.com DKIM : pass
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d409551136777481d
X-AOL-IP: 98.139.44.109
X-AOL-SPF: domain : gmail.com SPF : neutral
Content-Type: application/msword; name=WINNING
Content-Disposition: attachment; filename=”WINNING NOTIFICATION..doc”
Mrs Susan Claim msclaim3@gmail.com REPLY_ADDRESS: ashleyroland2@gmail.com Ashley Roland

Subject Line: OPEN THE ATTACHED FILE CRAIGH 
From CRAIGH BRADLEY craighbradley02@live.com
To undisclosed recipients: ; undisclosed recipients

Return-Path: <craighbradley02@live.com>
Received: from nm2-vm1.access.bullet.mail.sp2.yahoo.com (nm2-vm1.access.bullet.mail.sp2.yahoo.com [98.139.44.159])
by mtain-db07.r1000.mx.aol.com (Internet Inbound) with ESMTP id 8CDB73800008E
Received: from [98.139.44.99] by nm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 08 Mar 2013 15:04:32
Received: from [98.139.44.74] by tm4.access.bullet.mail.sp2.yahoo.com with NNFMP; 08 Mar 2013 15:04:32
Received: from [127.0.0.1] by omp1011.access.mail.sp2.yahoo.com with NNFMP; 08 Mar 2013 15:04:32 -0000
X-Yahoo-Newman-Id: 580024.75970.bm@omp1011.access.mail.sp2.yahoo.com
Received: from [173.245.64.36] by web5701.biz.mail.ne1.yahoo.com via HTTP; Fri, 08 Mar 2013 07:04:30 PST
X-Rocket-MIMEInfo: 001.001,CgEwAQEBAQ–
X-RocketYMMF: webbanky
X-Mailer: YahooMailRC/726 YahooMailWebService/0.8.135.514
Message-ID: <1362755070.44517.YahooMailRC@web5701.biz.mail.ne1.yahoo.com>
From: CRAIGH BRADLEY <craighbradley02@live.com>
Reply-To: CRAIGH BRADLEY <craighbradley01@live.com>
Subject: OPEN THE ATTACHED FILE CRAIGH
X-AOL-SCOLL-AUTHENTICATION: mtain-db07.r1000.mx.aol.com ; domain : yahoo.com DKIM : pass
x-aol-sid: 3039ac1d405b5139fe0133d0
X-AOL-IP: 98.139.44.159

Craig H Bradley
Craigh Bradley
Craig Bradley
Received-Address: craighbradley02@live.com Reply-Address: craighbradley01@live.com

 
Leave a comment

Posted by on 02/11/2013 in Lottery Scam

 

Tags: , , , , , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: