RSS

“Toyota Automioble Company”

13 Mar

WARNING – EMAIL SCAMS / ADVANCE FEE FRAUD

Note: I’ve posted the headers under each email. Each time, the scammer has different IP and return-addresses but the same received addresses. I’ve put the emails in order from newest to oldest. He changes around his email addresses frequently.

Subject Line: WINNING NOTICE FROM TOYOTA AUTOMOBILE COMPANY (UK).
From: “toyotacompany.toyota@libero.it” <toyotacompany.toyota@libero.it>

Message contains attachments1 File (153KB)
TOYOTA-COMPANY_UK..doc

TOYOTA AUTOMOBILE COMPANY(UK)
OPEN ATTACH FILE FOR MORE INFORMATION REPLY TO EMAIL-
toyota_automobileuk@aol.com

Return-Path: <toyotacompany.toyota@libero.it>
X-YahooFilteredBulk: 212.52.84.102
Received-SPF: pass (domain of libero.it designates 212.52.84.102 as permitted sender)
X-Originating-IP: [212.52.84.102]
Authentication-Results: mta1113.mail.gq1.yahoo.com from=libero.it; domainkeys=neutral (no sig); from=libero.it; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO outrelay02.libero.it) (212.52.84.102) by mta1113.mail.gq1.yahoo.com
X-CTCH-Spam: Suspect
X-CTCH-RefID: str=0001.0A0C0206.5147751B.007B,ss=1,re=0.000,fgs=512,sb=0
X-libjamoibt: 1587
Received: from wmail51 (172.31.0.241) by outrelay02.libero.it (8.5.140.03) id 512DF09102B5D17E;
From: “toyotacompany.toyota@libero.it” <toyotacompany.toyota@libero.it>
Reply-To: toyotacompany.toyota@libero.it toyotacompany.toyota@libero.it
Subject: WINNING NOTICE FROM TOYOTA AUTOMOBILE COMPANY (UK).
X-SenderIP: 180.215.193.231
X-libjamv: +cdCorxq1yI=
X-libjamsun: Hf5WJUB269gg++R8TEdlLTJHPQ1C/59FyYgJuzP0BQw= toyota_automobileuk@aol.com

Subject Line: CONGRATULATION! CONGRATULATION!! CONGRATULATION!!!
From: <toyotaclaims2@liive.com> <toyotaclaims2@live.com>

Toyota Automiobile Company UK (Notice the spelling. Shouldn’t it say Toyota Automobile Company NOT Automiobile.)

Return-Path: <toyotaclaims001@rediffmail.com>
X-YahooFilteredBulk: 202.137.235.216
Received-SPF: pass (domain of rediffmail.com designates 202.137.235.216 as permitted sender)
X-Originating-IP: [202.137.235.216]
Authentication-Results: mta1203.mail.mud.yahoo.com
Received: from 127.0.0.1 (HELO rediffmail.com) (202.137.235.216) by mta1203.mail.mud.yahoo.com
x-m-msg: asd54ad564ad7aa6sd5as6d5; a6da7d6asas6dasd77; 5dad65ad5sd;
X-REDF-OSEN: toyotaclaims001@rediffmail.com
Reply-To: toyotaclaims2@liive.com
“toyotaclaims2 ” toyotaclaims2@live.com
Received: from unknown 115.242.51.148 by rediffmail.com via HTTP; 13 Mar 2013 03:55:06 -0000
Message-ID: <1362830153.S.412501.RU.sfs11,sfs11,289,484.19183.f4mail-235-145.rediffmail.com.old.1363146906.29333@webmail.rediffmail.com>
Sender: toyotaclaims001@rediffmail.com
Subject: =?utf-8?B?ICBDT05HUkFUVUxBVElPTiEgICAgQ09OR1JBVFVMQVRJT04hISAgICBDT05HUkFUVUxBVElPTiEhIQ==?=
From: toyotaclaims2@liive.com

toyotaclaims2@liive.com <toyotaclaims2@liive.com>
Toyota Claims <toyotaclaims2@live.com>

Subject Line: CONGRATULATION! CONGRATULATION!! CONGRATULATION!!! Date: Wednesday, March 13, 2013 7:18 PM
From: “TOYOTA COMPANY” <toyotaclaims2@live.com>
toyotaclaims2@live.com

Message contains attachments1 File (295KB)
TOYOTA_AUTOMIOBILE_COMPANY_UK. toyotaclaims2@live.com.docx

PLEASE OPEN THE ATTACHMENT

Return-Path: <timmy-timmy@lenta.ru>
X-YahooFilteredBulk: 81.19.67.59
X-Originating-IP: [81.19.67.59]
Authentication-Results: mta1421.mail.mud.yahoo.com
Received: from 127.0.0.1 (EHLO mxout2.rambler.ru) (81.19.67.59) by mta1421.mail.mud.yahoo.com with SMTP; Wed, 13 Mar 2013 12:19:01 -0700
Received: from saddam4.rambler.ru (saddam4.rambler.ru [10.32.16.4]) by mxout2.rambler.ru (Postfix) with ESMTP id 8160A1E86; Wed, 13 Mar 2013 23:18:57 +0400 (MSK)
Received: from localhost.localdomain (localhost [127.0.0.1]) by saddam4.rambler.ru (Postfix) with ESMTP id 5E81E259906; Wed, 13 Mar 2013 23:18:57 +0400 (MSK)
Received: from [115.241.133.214] by saddam4.rambler.ru with HTTP; Wed, 13 Mar 2013 23:18:57 +0400
From: “TOYOTA COMPANY” <toyotaclaims2@live.com>
To: toyotaclaims2@live.com
Reply-To: TOYOTA COMPANY toyotaclaims2@live.com
Subject: CONGRATULATION! CONGRATULATION!! CONGRATULATION!!!
In-Reply-To: <1363201974.439682.17368.53021@saddam1.rambler.ru>
Message-Id: <1363202337.161203.25438.48680@saddam4.rambler.ru>
References: <1363201974.439682.17368.53021@saddam1.rambler.ru>
X-Mailer: Rambler WebMail, http://mail.rambler.ru/
X-Rambler-User: timmy-timmy@lenta.ru/115.241.133.214
X-Spam: yes timmy-timmy@lenta.ru

Return-Path: <kelvin.kelvin@rambler.ru>
Received-SPF: pass (domain of rambler.ru designates 81.19.67.58 as permitted sender)
X-Originating-IP: [81.19.67.58]
Authentication-Results: mta1077.mail.bf1.yahoo.com
Received: from 127.0.0.1 (EHLO mxout1.rambler.ru) (81.19.67.58) by mta1077.mail.bf1.yahoo.com
Received: from saddam3.rambler.ru (saddam3.rambler.ru [10.32.16.3]) by mxout1.rambler.ru (Postfix) with ESMTP id 69C161752; Thu, 14 Mar 2013 11:03:45 +0400 (MSK)
Received: from localhost.localdomain (localhost [127.0.0.1]) by saddam3.rambler.ru (Postfix) with ESMTP id 4E1FC295B88; Thu, 14 Mar 2013 11:03:45 +0400 (MSK)
Received: from [115.242.6.226] by saddam3.rambler.ru
From: “TOYOTA COMPANY” <toyoyaclaims2@live.com>
To: toyotaclaims2@live.com
Reply-To: “TOYOTA COMPANY” <toyoyaclaims2@live.com>
Subject: CONGRATULATION! CONGRATULATION!! CONGRATULATION!!!
In-Reply-To: <1363242452.449044.26828.32945@saddam3.rambler.ru>
Message-Id: 1363244623.221956.29607.11421@saddam3.rambler.ru
References: <1363242452.449044.26828.32945@saddam3.rambler.ru>
X-Mailer: Rambler WebMail, http://mail.rambler.ru/
X-Rambler-User: kelvin.kelvin@rambler.ru/115.242.6.226
X-Spam: yes

SCAMDEX  posted up a idenical email that they received from this same scammer.

return-path: <toyotaclaims003@rediffmail.com>
from [203.199.83.111] (port=36682 helo=f4mail-83-111.rediffmail.com)by lester.HUN1P0T with esmtp (Exim 4.80)(envelope-from <toyotaclaims003@rediffmail.com>)id 1U8IMK-0002BJ-QSfor scamalot@HUN1P0T
from rediffmail.com (unknown [10.50.250.70])by f4mail-83-111.rediffmail.com (Postfix)
from unknown 115.240.10.82 by rediffmail.com via HTTP; 18 Feb 2013 08:48:33 -0000
reply-to: toyotaclaims2@liive.com
to: “toyotaclaims2 ” <toyotaclaims2@live.com>
message-id: <1361177225.S.411939.15556.f4mail-235-215.rediffmail.com.old.1361177313.27037@webmail.rediffmail.com>
sender: toyotaclaims003@rediffmail.com
from: toyotaclaims2@liive.com <webdon445@yahoo.com.sg>

 
Leave a comment

Posted by on 03/13/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: