RSS

“Domain Toolz” – “GNPC GHANA”

13 Feb

WARNING – NIGERIAN SCAM / DOMINE TOOLZ is NOT DOMAIN TOOLS – It’s a SCAMMER FROM AFRICA!

I received many emails from “Domain Toolz” as well as other similar types including “Nija Toolz”, etc. These are Nigerian scammers and this seems to be a new type of email scam.  This is NOT the official ” Domain Tools ” — You’ll notice the emails dominetool@info.org – (look at the header details for further information.) — Also, google the phone number given by the scammer 995557766211 as well as the other phone numbers given, and you’ll see the other anti-scam warnings.

Subject Line: Hi
Hello:

Plz IF U Need Free Tools B4 BUYING, PLZ DON’t ADD ME,ONLY SERIOUSE BUYER’S SHOULD ADD or CALL me for better explanation..For Low Price, High Response and Guaranteed Leads:
|Yahoo Chat:| dominetoolz
|Phone Num: | +995557766211
****Dealing with ALl kind of Working Tooz such as;:

*Fresh Leads,Inbox SMTP,Cpannel,Webmail
*Smtp Domain,…. inbox&bulk 3 weeks last
*Smtp ip…… instant bulk, Domain smtp inbox
*PHP Mailer… inbox and bulk, 500 bcc
*Webmail,.. inbox 500 bcc,Cpanel 1000 bcc
*ADMIN RDP with AMS 4.3 installed….
*Bulk mail Sender with registered code
*Company&Personal (e-mail and password) worldwide
*Inbox,1000 bcc ,500 bcc for added acct,unlimited adding account valid for 2 month
*VALID CCV: US-UK-CA-EU,AU (with bin|dob|fulls),TRACKs

View Webmail Link:
========= http://mail.todaysdentalcomfort.com/
========= https://webmail.rice.edu/imp/login.php
========= https://webmail.eunet.rs/
========= http://webmail.tcsn.net/src/login.php
========= http://login.hostmail.com/
========= http://mail.gtec.com/sendmail.php
========= http://webmail.allcom.net/horde/imp/login.php
========= http://webmail.limedomains.net/src/login.php
………webmail,500bcc Cpannel 1000 bcc unlimited instant delivery to all domain

****PAYMENT MODE: BANK TRNSFER ,LIBERTY RESERVE(Lr),WU OR MG
****ONLY INTERESTED BUYERS SHOULD ADD ME UP ON MY

Contact Us on ;

Yahoo Chat: dominetoolz
OR Call: +995557766211

Return-Path: <dekiep08@server4.securitydatabase.net>
X-YahooFilteredBulk: 94.75.226.132
Received-SPF: none (domain of server4.securitydatabase.net does not designate permitted sender hosts)
X-Originating-IP: [94.75.226.132]
Authentication-Results: mta1026.mail.bf1.yahoo.com from=info.org
Received: from 127.0.0.1 (EHLO server4.securitydatabase.net) (94.75.226.132) by mta1026.mail.bf1.yahoo.com with SMTP; Tue, 12 Feb 2013 23:39:48 -0800
Received: from dekiep08 by server4.securitydatabase.net with local (Exim 4.80) (envelope-from <dekiep08@server4.securitydatabase.net>) id 1U5WwV-0004cj-Ru
Subject: =?UTF-8?Q?Hi?=
From: =?UTF-8?Q?DomainToolz?= <dominetool@info.org>
Message-ID: <756d1c2618a3f691ba1c7a93b0581d35@de-kiep.nl>
X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version ]
Content-Type: text/plain; charset=”iso-8859-1″
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – server4.securitydatabase.net
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [513 32003] / [47 12]
X-AntiAbuse: Sender Address Domain – server4.securitydatabase.net
X-Get-Message-Sender-Via: server4.securitydatabase.net: authenticated_id: dekiep08/only user confirmed/virtual account not confirmed
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php
X-Source-Dir: de-kiep.nl:/public_html dekiep08@server4.securitydatabase.net

+99 5557766211

Call me now for any of the tools below : 08151404202

Domain Hosted Smtp 5days valid Unlimited send per day

IP SMTP scanned one 1day valid Unlimited Inbox

Cpanel for Uploading Shel,MAILERS and attachment
WEBMAIL 1000BCC all domain for 14days 2weeks usage/AJAX MAILER/PHP MAILER

Online bank transfers USA AND UK ALONE
RDP ADMIN RIGHTS WITH SMTP SCANNER INSTALLED

GLOBAL VPN WITH SHOP ADMIN CCVS & fullz with dob ssn mmn SSH with user and pass

Alibaba logins email + pass Scam pages yahoo hotmail scam TROJANS SPY WAR .E.T.C

CONTACT ME ON MY YAHOO ID BELOW TO CHAT
YAHOO ID: supply.tools

Return-Path: <SRS0=QhdoIq=MJ=gnpcghana.biz=menatwork@eigbox.net>
Received: from bosmailout13.eigbox.net (bosmailout13.eigbox.net [66.96.190.13])
by mtain-dd05.r1000.mx.aol.com (Internet Inbound) with ESMTP id 5EA05380000BA;
Received: from bosmailscan10.eigbox.net ([10.20.15.10])
by bosmailout13.eigbox.net with esmtp (Exim)
id 1U7Be4-0005do-Ak; Sun, 17 Feb 2013 16:19:36 -0500
Received: from bosimpout03.eigbox.net ([10.20.55.3])
by bosmailscan10.eigbox.net with esmtp (Exim)
id 1U7Be3-00059e-Ia; Sun, 17 Feb 2013 16:19:35 -0500
Received: from bosoxweb03.eigbox.net ([10.20.16.130])
by bosimpout03.eigbox.net with NO UCE
id 1ZGm1l0032oNGcS01ZGmY7; Sun, 17 Feb 2013 16:16:47 -0500
X-Authority-Analysis: v=2.0 cv=bNyU0YCZ c=1 sm=1 a=gaRN1OqtqpgA:10
a=L0c8UjjR34oA:10 a=wPDyFdB5xvgA:10 a=lVtUCIHhAAAA:8 a=qwWS_V2vAAAA:8
a=dVWuJ8JuoV0A:10 a=n_gZElOowpq4M_8BPzIA:9 a=QEXdDO2ut3YA:10
a=Fsw1MSz14NhLbZ3D:21 a=8-wJWWr6kIYRYwp0:21 a=SSmOFEACAAAA:8
a=jIHu358HOpLIQ5BdFM8A:9 a=_W_S_7VecoQA:10 a=p403mkujtbAA:10
a=E0mLtArHtNV_t03u:21 a=zCNrcEfJYDYH9f34O0OG8A==:117
X-EN-OrigOutIP: 10.20.16.130
X-EN-IMPSID: 1ZGm1l0032oNGcS01ZGmY7
Received: from localhost ([127.0.0.1] helo=bosoxweb03.eigbox.net)
by bosoxweb03.eigbox.net with esmtp (Exim 4.72)
(envelope-from <menatwork@gnpcghana.biz>)
id 1U7Bdz-0002LV-PQ; Sun, 17 Feb 2013 16:19:31 -0500
From: Tools Tools Tools <menatwork@gnpcghana.biz>
Reply-To: Tools Tools Tools <menatwork@gnpcghana.biz>
Message-ID: <2042564767.586925.1361135970980.JavaMail.open-xchange@emailmg.netfirms.com>
Subject: BUY SMTPS PHP MAILER CREDIT CARDS & EMAIL LEADS here
X-Mailer: Open-Xchange Mailer v-
X-Originating-IP: 209.198.196.20
x-aol-global-disposition: G
x-aol-sid: 3039ac1d409151214a353af9
X-AOL-IP: 66.96.190.13

0 8151404202

Tools Tools Tools menatwork@gnpcghana.biz Tools Tools Tools mjola@gnpcghana.biz

Call me now for any of the tools below : 08151404202

Domain Hosted Smtp 5days valid Unlimited send per day

IP SMTP scanned one 1day valid Unlimited Inbox

Cpanel for Uploading Shel,MAILERS and attachment
WEBMAIL 1000BCC all domain for 14days 2weeks usage/AJAX MAILER/PHP MAILER

Online bank transfers USA AND UK ALONE
RDP ADMIN RIGHTS WITH SMTP SCANNER INSTALLED

GLOBAL VPN WITH SHOP ADMIN CCVS & fullz with dob ssn mmn SSH with user and pass

Alibaba logins email + pass Scam pages yahoo hotmail scam TROJANS SPY WAR .E.T.C

CONTACT ME ON MY YAHOO ID BELOW TO CHAT
YAHOO ID: supply.tools

Return-Path: <SRS0=4pDa4i=MJ=gnpcghana.biz=mjola@eigbox.net>
Received: from bosmailout15.eigbox.net (bosmailout15.eigbox.net [66.96.190.15])
by mtain-dl06.r1000.mx.aol.com (Internet Inbound) with ESMTP id 16251380000A1
Received: from bosmailscan10.eigbox.net ([10.20.15.10])
by bosmailout15.eigbox.net with esmtp (Exim)
id 1U7BFG-0000Sd-DQ
Received: from bosmailscan24.eigbox.net ([10.20.15.24])
by bosmailscan10.eigbox.net with esmtp (Exim)
id 1U7BFG-0005bd-89
Received: from bosimpout04.eigbox.net ([10.20.55.4])
by bosmailscan24.eigbox.net with esmtp (Exim)
id 1U7BFF-00058X-BT; Sun, 17 Feb 2013 15:53:57 -0500
Received: from bosoxweb03.eigbox.net ([10.20.16.130])
by bosimpout04.eigbox.net with NO UCE
id 1Ytw1l0042oNGcS01YtxoL; Sun, 17 Feb 2013 15:53:57 -0500
X-Authority-Analysis: v=2.0 cv=FqCHDhXq c=1 sm=1 a=gaRN1OqtqpgA:10
a=L0c8UjjR34oA:10 a=wPDyFdB5xvgA:10 a=lVtUCIHhAAAA:8 a=qwWS_V2vAAAA:8
a=dVWuJ8JuoV0A:10 a=n_gZElOowpq4M_8BPzIA:9 a=QEXdDO2ut3YA:10
a=Fsw1MSz14NhLbZ3D:21 a=8-wJWWr6kIYRYwp0:21 a=SSmOFEACAAAA:8
a=jIHu358HOpLIQ5BdFM8A:9 a=_W_S_7VecoQA:10 a=p403mkujtbAA:10
a=E0mLtArHtNV_t03u:21 a=zCNrcEfJYDYH9f34O0OG8A==:117
X-EN-OrigOutIP: 10.20.16.130
X-EN-IMPSID: 1Ytw1l0042oNGcS01YtxoL
Received: from localhost ([127.0.0.1] helo=bosoxweb03.eigbox.net)
by bosoxweb03.eigbox.net with esmtp (Exim 4.72)
(envelope-from <mjola@gnpcghana.biz>)
id 1U7BFB-00073n-EV; Sun, 17 Feb 2013 15:53:53 -0500
Date: Sun, 17 Feb 2013 15:53:52 -0500 (EST)
From: Tools Tools Tools <mjola@gnpcghana.biz>
Reply-To: Tools Tools Tools <mjola@gnpcghana.biz>
Message-ID: <698639419.586562.1361134432679.JavaMail.open-xchange@emailmg.netfirms.com>
Subject: BUY SMTPS PHP MAILER CREDIT CARDS & EMAIL LEADS here
X-Mailer: Open-Xchange Mailer v-
X-Originating-IP: 209.198.196.20
x-aol-sid: 3039ac1d4ad4512143674ce5
X-AOL-IP: 66.96.190.15

—–

****IF U REQUIRE TEST B4 BUYING,PLZ DON’t ADD ME,ONLY SERIOUSE BUYER’S SHOULD
ADD or CALL me for better explanation.For Low Price, High Response and
Guaranteed Leads:

|Yahoo Chat:| dominetoolz
|Phone Num: | +995557766211

****Dealing with ALl kind of Working Tooz such as;:

*Fresh Leads,Inbox SMTP,Cpannel,Webmail
*Smtp Domain,…. inbox&bulk 3 weeks last
*Smtp ip…… instant bulk, Domain smtp inbox
*PHP Mailer… inbox and bulk, 500 bcc
*Webmail,.. inbox 500 bcc,Cpanel 1000 bcc
*ADMIN RDP with AMS 4.3 installed….
*Bulk mail Sender with registered code
*Company&Personal (e-mail and password) worldwide
*Inbox,1000 bcc ,500 bcc for added acct,unlimited adding account valid for 2
month
*VALID CCV: US-UK-CA-EU,AU (with bin|dob|fulls),TRACKs

View Webmail Link:
========= http://mail.todaysdentalcomfort.com/
========= https://webmail.rice.edu/imp/login.php
========= https://webmail.eunet.rs/
========= http://webmail.tcsn.net/src/login.php
========= http://login.hostmail.com/
========= http://mail.gtec.com/sendmail.php
========= http://webmail.allcom.net/horde/imp/login.php
========= http://webmail.limedomains.net/src/login.php
………webmail,500bcc Cpannel 1000 bcc unlimited instant delivery to all
domain

****PAYMENT MODE: BANK TRNSFER ,LIBERTY RESERVE(Lr),WU OR MG
****ONLY INTERESTED BUYERS SHOULD ADD ME UP ON MY

Contact Us on ;

| Yahoo Chat: (dominetoolz)
|OR Call: +995557766211

Return-Path: <dekiep08@server4.securitydatabase.net>
Received: from server4.securitydatabase.net (server4.securitydatabase.net [94.75.226.132])
by mtain-df01.r1000.mx.aol.com (Internet Inbound) with ESMTP id 2193438000094
for <deleted@aol.com>; Wed, 13 Feb 2013 02:37:38 -0500 (EST)
Received: from dekiep08 by server4.securitydatabase.net with local (Exim 4.80)
(envelope-from <dekiep08@server4.securitydatabase.net>)
id 1U5WuO-0004Ug-Vj
Subject: =?UTF-8?Q?Hi?=
From: =?UTF-8?Q?DomainToolz?= <dominetool@info.org>
Message-ID: <68cfa79c12e23ee04efd2753f430f19d@de-kiep.nl>
X-Priority: 3
X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version ]
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=”iso-8859-1″
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – server4.securitydatabase.net
X-AntiAbuse: Original Domain – aol.com
X-AntiAbuse: Originator/Caller UID/GID – [513 32003] / [47 12]
X-AntiAbuse: Sender Address Domain – server4.securitydatabase.net
X-Get-Message-Sender-Via: server4.securitydatabase.net: authenticated_id: dekiep08/only user confirmed/virtual account not confirmed
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php
X-Source-Dir: de-kiep.nl:/public_html
x-aol-global-disposition: G
x-aol-sid: 3039ac1d40d5511b42c13fef
X-AOL-IP: 94.75.226.132
X-AOL-SPF: domain : server4.securitydatabase.net SPF : none

___

ANOTHER NIJA TOOLS SCAM –
MEN THEM,

MY NAME IS BALOoooo

THIS IS MY WORK.

I BOMB FOR YAHOO BOYS ONLINE WITH MY SPIDER WOX WITHin 20MINS

MY SPIDER BOMBS 2MILLION EMAILS AT A TIME AND ALL IS INBOX ALL DOMAIN INSTANT
DELIVERY.

I WILL USE MY DATABASE EMAILS TO BOMB FOR YOU AND ALSO CREATE A CPANEL
UNLIMITED HOST BAND LIMIT FOR YOU AS REPLY TO box so that they don’t block BOX after
bombing. 150,000 mails inbox panel.

AMOUNT FOR BOMBING IS 50,000NAIRA with no reduction

You get REPLIES LIKE PURE WATER. TRY ME OUT TODAY IF YOU HAVE YOUR CASH AND SEE
DIFFERENCE BETWEEN SMTP AND SPIDER.

you get replies as much as you cant be able to reply them within 1 week.

CALL MY PHONE AND TALK TO ME : MOBILE NUMBER: 08151404202

YAHOO ID: toolsnija

HEADER DETAILS:

Return-Path: <SRS0=aDYOa1=MF=nijaguymen.com=browsing@yourhostingaccount.com>
Received: from mailout04.yourhostingaccount.com (mailout04.yourhostingaccount.com [65.254.254.209])
by mtain-di03.r1000.mx.aol.com (Internet Inbound) with ESMTP id 5469F380000E5;
Received: from mailscan17.yourhostingaccount.com ([10.1.15.17] helo=mailscan17.yourhostingaccount.com)
by mailout04.yourhostingaccount.com with esmtp (Exim)
id 1U5gvN-0006OE-5k; Wed, 13 Feb 2013 13:19:17 -0500
Received: from impout01.yourhostingaccount.com ([10.1.55.1] helo=impout01.yourhostingaccount.com)
by mailscan17.yourhostingaccount.com with esmtp (Exim)
id 1U5gvL-0007qs-J7; Wed, 13 Feb 2013 13:19:15 -0500
Received: from oxweb02.int.bizland.net ([10.1.16.65])
by impout01.yourhostingaccount.com with NO UCE
id zuKF1k0081QDZJ201uKFFo; Wed, 13 Feb 2013 13:19:15 -0500
X-Authority-Analysis: v=2.0 cv=EJGEIilC c=1 sm=1 a=4JYqHuoJFzsA:10
a=UwjbIac-6BUA:10 a=ENMpTqyH5p4A:10 a=wPDyFdB5xvgA:10 a=4tlhzLW5AAAA:8
a=TsZowB4XAAAA:8 a=4XgOxz7PD2AA:10 a=L15U6cDrY0f95Kr3xCsA:9 a=QEXdDO2ut3YA:10
a=4Hd6iof8T7WiHt7G:21 a=8PaJNTXrOXF4ioqk:21 a=SSmOFEACAAAA:8
a=F0lHZpNP53fCOEyBUGIA:9 a=_W_S_7VecoQA:10 a=p403mkujtbAA:10
a=2cOAiQbFi092K4Sj:21 a=NYY6OMZchRL/HwQCwlRBow==:117
X-EN-OrigOutIP: 10.1.16.65
X-EN-IMPSID: zuKF1k0081QDZJ201uKFFo
Received: from localhost ([127.0.0.1] helo=oxweb02.int.bizland.net)
by oxweb02.int.bizland.net with esmtp (Exim 4.72)
(envelope-from <browsing@nijaguymen.com>)
id 1U5gvG-0002gC-9Q; Wed, 13 Feb 2013 13:19:10 -0500
From: “HACKER @ BOMB MAILS” <browsing@nijaguymen.com>
Reply-To: “HACKER @ BOMB MAILS” browsing@nijaguymen.com
Message-ID: <2064734965.138608.1360779549751.JavaMail.open-xchange@email.fatcow.com>
Subject: CALL ME TO BOBM MAILS FOR YOU 08151404202
Content-Type: multipart/alternative;
boundary=”—-=_Part_138607_706836246.1360779549736″
X-Mailer: Open-Xchange Mailer v6.20.7-Rev6
X-Originating-IP: 66.73.61.190
x-aol-global-disposition: G
x-aol-sid: 3039ac1da607511be8060732
X-AOL-IP: 65.254.254.209

HACKER @ BOMB MAILS browsing@nijaguymen.com

CONTACT; ======================================== |Yahoo Chat:| dominetoolz |Phone Num: | +995557766211 ======================================== ****Dealing with ALl kind of Working Tooz such as;: DOMAIN SMTP inbox IP SMTP RDP with AMS installed cPannel MISTERSHOOPER addresses available SHELLZ ROOT 1Million Fresh LEADS FTP unlimited webmail inbox….. View Webmail Link: ========= http://mail.todaysdentalcomfort.com/========= http://webmail.tcsn.net/src/login.php ========= http://login.hostmail.com/ ========= http://mail.gtec.com/sendmail.php ========= http://webmail.allcom.net/horde/imp/login.php ****ONLY INTERESTED BUYERS SHOULD ADD ME UP ON MY ****YAHOO MESSENGER ID;<< dominetoolz >> ****Call>>>>>>>>>>>>>>;<< +995557766211 >>

DomainToolz dominetool@info.org inboxtoolz@info.org inboxToolzz@info.org
inboxtoolz@info.org – +995557766211 Georgia
Received: from cpanel2.garantiserver.com ([46.235.15.25])
by mx.google.com with ESMTPS id k36si13973587wen.141.2012.10.23.15.52.08
(version=TLSv1/SSLv3 cipher=OTHER);
Tue, 23 Oct 2012 15:52:09 -0700 (PDT) 46.235.15.25

 
2 Comments

Posted by on 02/13/2013 in Other

 

Tags: , , , , , , , , , , , , , , , , ,

2 responses to ““Domain Toolz” – “GNPC GHANA”

  1. leonor arango

    02/13/2013 at 13:48

    Gus please you taken everything soiled it. you realize all thay stuff and _____——- Is part of how they separATE. I READ Mnifesto it is this scam scum it says.. i am so so sad for all those like me with good intentions had computer stolen. broke my heart and my people are minorities like me
    , leonor Arango@ I really liked you@ 2-10-13

     
  2. leonor arango

    02/13/2013 at 13:49

    * Not duplicateGus please you taken everything soiled it. you realize all thay stuff and _____——- Is part of how they separATE. I READ Mnifesto it is this scam scum it says.. i am so so sad for all those like me with good intentions had computer stolen. broke my heart and my people are minorities like me
    , leonor Arango@ I really liked you@ 2-10-13

     

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: