RSS

Tag Archives: CITI LOAN SERVICES

“Mrs Marika White Loan Company” mwlc@uneta.org

WARNING: Loan Offer Scam – ”Loan Company” – Nigerian 419 Scammer

UPDATE: Same scammer, different scam — ”MARIKA WHITE” IS ALSO SCAMMING UNDER  YAHOO MSN LOTTERY AWARD  <> web.offfice_297938@verizon.net <> yamsnltry@gmail.com

Name/Email-Address: Mrs Marika White <> web.office.76835@verizon.net <> mwlc@uneta.org
Subject: Loan Company

Email: DO YOU NEED A LOAN TO PAY OFF YOUR BILLs OR START UP A BUSINESS?

HEADER:

Return-Path: <web.office.76835@verizon.net>
X-YahooFilteredBulk: 98.138.90.254
Received-SPF: neutral (98.138.90.254 is neither permitted nor denied by domain of verizon.net)
X-YMailISG: 1rccvcMWLDvwwkDPi1wOr05Wj4gQviOJDGKA.1i73_OolCyJ AIIlRo3P0Ksj.ASRtNNoeGsPA3ng79BJC4KSPPY2cKJmtSiyaO9p_2Gl6D9p KObaIr3h1rSJqZJtUWYKiUblIXp2C_AVI626ToDSMv07dQ_gJRa9_1mGJyzE 7r40FDbtvz_yB9A9.NHHDeM2iKxRVY4nua_X5Ed75fTZKPbtnTihqFFIsYzF ujLU9y8Y18H5cK7A8W6CQ7JrpCZL.zKbq_kNlj8HAhBv1jH5BnVA2ly1ebuI _9Ea7VizY_wANAhb3s2.6iifKVVVAO9rNPIsWHlTMvE6SHb8QJ6ulc674OXT tt37ekR0jxkNBXR0jgJdcYUs_aGyNP479WSp4zXCs7Ze.J2O_En0MQz_jgGj x5YLcacY3jehFs4C_MrSGEVAQOdDqp6L4zrtUtka_EJpyIT7eGwy5Sdr8cmG I_DgYc8vHfyvc9E_rkYu3JF35jAmqLU9cXx6wCO6uj37_TrU7u8Y9QZBL2O0 IT_06WFjLfOpT1Upk3uY4gIb9wcfw2QIQlDrpPnRZaLeg5D_P.fZdy9ZiUWG NAthLPa2dEX2t8jrBH1oAE2YXAKWNU3pNKD_7SiifEzT84h5Elwq2OHWRuJP IDbHLNrzmEk1qUNnYWEIF9rSxF1ghHHskstylaX8FXxRd7q7Nh7HRQAZZeEB HqSwPna3HbK7lluYsrzPEQXazlxcHdgklhWhFUE6m4.CkHrM1gErfL3aTM48 AunpFYoHEUut1CsqaK8G6yTEcKTxy.R0dG8AEmJ3rF1mJl2juH_MEOdliZ2U kWtVRS13J12.Gjfsw0.K_.mQE5Ns1SPY4XsqbFvoM54Zu9rZXWRdgLW0R.Jd BYdh.pFOiRY3Q1UigZapTc3x7asJRS767DUqSsLYRr_tP1rW5uqBttzHWYvC b7WRvJxQPEse4ssUVrxwkpMpe5Thz.YG5od_fkwHDZPfZNUQvx1lq9n9DoMC ON6XbLf7tz.kYkTT2amkr5TgG.7H1FYiff4cJ52Y_QhrlbmHPMpIzLH5v00h DQ2XofIrgBkFMmjpPSM4kLz.tIQadfYhtUtF1dRkRik2t8eFG48Pt2uurmng ciYCQZ2QbXFwxDJm7s_jgCuaaDphJcK8zBr1RtpVM2RtKz93LK0ffFUZl9M7 o9lnOxNgN71fbX6fF1ZyL7RaXQrLD_ahUhjSooa3ufwV7AGDjcmE5vnPzt0T 1hjFF1VEvTEsxPHJRroE3s4Ol.843VnRYEMul7UcKBKNDw–
X-Originating-IP: [98.138.90.254]
Authentication-Results: mta1319.mail.bf1.yahoo.com from=verizon.net; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15-vm1.bullet.mail.ne1.yahoo.com) (98.138.90.254) by mta1319.mail.bf1.yahoo.com with SMTP; Mon, 29 Oct 2012 01:57:01 -0700
Received: from [98.138.226.178] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
Received: from [66.94.237.101] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
Received: from [127.0.0.1] by omp1006.access.mail.mud.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 30294.68904.bm@omp1006.access.mail.mud.yahoo.com
Received: (qmail 89378 invoked by uid 60001); 29 Oct 2012 08:56:57 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351501017; bh=e7TPDsqolxdOXd+HQzrG2hNH4MUYxcgDXnSPz6Y8MYY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=S6/hrpGO0ydEf4hSQ7WjaAmQInuuCAKfvMSsvZ0XS0Ov4TRWjzWGBNXFyW77+X+V8/YyNSzLI21RcqyPrLYT8EnW8BEnqJ8WpAUNvumsMDSbo5i30f/2XLT5qHvIvcR23wmuVHVjVNwTMsysjaZ2E5frgnnMP06OYrvqxNptM0o=
X-YMail-OSG: xMBSpZUVM1kIRXuAjHgZbmAaovBVSk5eAFjFEevdiEknuMn uDEOw.0Co.m8vI5PZCw7DsxhJN0JUjUAfUKoR0NBqFZtrCvYJNVDAFkJnZ9r O3l8_IptDedNQleNN7u4GS21Jrt1VXT.7EIuaqBBvfYhmeBKDXsVQE_vJCTr OxQjQGHYGCzKlWPL_X_kkO_XpszI3mErScnhmbs_nIvqSVOegsbBMaeW.VOj UnLfwICoveMAz0JiOGClf4ZsO1t4_kD1ObkEb4L2mblFkgk9CHEebmunRZAK Xcr7_Y5_tNywAxz1tBI3HRe2YTVilPFzXNCReKYcuuMdLy4f6xvBQilPUGP6 HPr1KaxsdqlqsThn988RToeuJPivHlpxBZHhFfrwy_eRjT2VgvXYksHYOLp9 CS0zMN.CLJ8R11gH1ACo2JT6of3FUlzotv8ehcdNLfdu1aiNpfSMIKpa43vT Ynd2tYi7uArwgX_vtXoKO.vJ1x8lBQq8f0yXH.Ke0XesM79uUq5MG7j.8rJ6 ETIunLPAqxYZaDbywbA–
Received: from [72.64.146.136] by web84610.mail.ne1.yahoo.com via HTTP; Mon, 29 Oct 2012 01:56:57 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1351501017.25035.YahooMailClassic@web84610.mail.ne1.yahoo.com>
Date: Mon, 29 Oct 2012 01:56:57 -0700 (PDT)
From:
Mrs Marika White Loan Company <web.office.76835@verizon.net>
Reply-To: mwlc@uneta.org
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1644280220-398030313-1351501017=:25035″
Content-Length: 465
 

Tags: , , , , , , , , , , , , , , , , , , ,

J W – justme362@yahoo.com (Craigslist Scam)

BIG TIME SCAMMER. MANY COMPLAINTS ON VARIOUS WEBSITES. This particular scam is a ‘Craigslist Scam’ (I will post links to sites where others have warned about this scammer under many other fake names/emails.)

Name: J W Email Address Used: justme362@yahoo.com

X-Originating-IP: 98.139.91.98 ( Received from various other IP’s which includ – 74.205.153.31 – 98.139.91.33 – 98.139.91.70 )

Subject: Pot Bellie Pig

Email: how much and how old

Email Header:

Return-Path: <justme362@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts) AzACA3RleHQvaHRtbAMDMQ–
X-YMailISG: OmuTubwWLDsr4kJoDLAfIfAxc8dUZvaFdqWq2Kh9Ac6mz7gb 7FNGsjBcB3dLlE28Ec0U9LA31ynB.GtpSwRgZsjlm03EbrETXxuTHG1O7M1h 82kjoNAdFtfp9sX4tRogkC1G7QXqEubJjYdhIJy818odTLAurDIScgCvhPnO zE2N72BO05hW1wWVhrQwxbAXhbCgBf3PL8CK4KupspoJfHJwTWonk8QrbZWn RhFgaXdN2Sfilk.ifaEL86WQcaMnotXlaoF8Bgg8Rt2PVk3BTyjoTYk1iRFK _WErhw.c3428BOLJMnnilS2FVOulPooGT_AkHVHrqWDkUz7lM7JJtGMorIda X_NHUBRUtDcmjnaQpBI2TYjT5IAam4AAxJ5whssA6jEkNcIK74UVVYidUxeY 75oBdO3hi4gh5wDLxu1EQ9e2ly4bddo0bYiIvZhmn6K1rsCjrxHq1AtdrnXU kYNlZTXofIm_1KvDkV6CU_AZWho99dfCR.AVY.oghEwjWlHpasij2bODQhc7 FS0Kvb74_hU0Ua2ZiVQbDCUUe5Vk488ycx8OQxuSrbcCajlgYVJsEmmO419U Fg7AENTupVp0TLaEr4hIfgp0ic9ADjUuzpZByWyLxFMOq7Z5zXICzD6.CC5f NArrCqrMUQ3S_kGixevVUhG4VkJVBSJeEFTSjfk4X1YGunLMqFP94aasSV9T WsgMc7DSBaCFwiOdcIe6ILa2Hv5qib31W_lXWc9pr2jOPnPJbeShH7KLB9k. 3tnGem44aqRqMkNRBtbs6Gf8DAnYOce.AMWHUC6UtLXnmcTsQfpRkmqIf5dW 9Tmk_2VNqV4v5UFbdN.ikYB7mBJef5fmvev7twU.ljXPtpbumJqFLGdU2xYs GDB6nBtJjjgzF.WGL5BZNSUWOUo0LxLwds.QOeHpTGMNho7eI2LyUSiNVYK3 y.yeQDXsmnsyNvYWs1twnxi63PxSXGfjV3HeXEa3fCBiYX2E9duL4431pTyW cCsAR1DMxT0MUwaMcscQvmfCP0wQjGxM6oaFOnk4LTdQEhdXj9QruTffe69y UGa0ii_aUA4NYpLo0_GEWwpzFMqN0X49UGXJMRHca2x.UV3gtvS1g3BFKzGD Tb_cndQ9O5a1_EU2UsEYbj4e6VMgh9Z5mJUKB_gWJnAXdT0n_wuhXzJwlSt4 sb87S0RAItlGsVBF5IBg4w–
X-Originating-IP: [98.139.91.98]
Authentication-Results: mta1420.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm28.bullet.mail.sp2.yahoo.com) (98.139.91.98) by mta1420.mail.mud.yahoo.com with SMTP; Wed, 03 Oct 2012 20:10:41 -0700
Received: from [98.139.91.70] by nm28.bullet.mail.sp2.yahoo.com with NNFMP; 04 Oct 2012 03:10:41 -0000
Received: from [98.139.91.33] by tm10.bullet.mail.sp2.yahoo.com with NNFMP; 04 Oct 2012 03:10:41 -0000
Received: from [127.0.0.1] by omp1033.mail.sp2.yahoo.com with NNFMP; 04 Oct 2012 03:10:41 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 158103.16518.bm@omp1033.mail.sp2.yahoo.com
Received: (qmail 21274 invoked by uid 60001); 4 Oct 2012 03:10:40 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1349320240; bh=1fLNaBrXhCPER7C2p3/uLibi2nX1E/Ke/IFiyu6wETw=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=frKLVobFHiwClISRJNppPjL058MdN6LLxEUTuSqyNV6Uv6XO8w+UwLQV85YfR3dET2Xmx2KZ3xSYaH+OQOZ4GAfCF/yQdiBDzz7IEiosxczcMYlr9IexBFIWTf0HztLt/yRasgq/sthLpbT+yKHwJxxnBwLagJ28Irx87hzAcUU=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=XGr0Upkikodmw90VI/ZYnfepBgJMPnJKIWU9Sxjc48I7g+0W/oge59BE3JkOGUqXWCziYRk0GZpc1YmBVmHl0gptx2u+YUt6rAurQjKX/u2nDTnTvvk/QsSq0DIcgTvKJWk9Rt+tByc0Np0uPbkOe+zGSJ4zuZKG/6HnVJXE3VM=;
X-YMail-OSG: KkgkRvYVM1lAhxaOaFIiXpmzQwqLNsc.e0xQ9WhHIqvRAqC saaNNaCglECz9WFnsCv.g.kazbj7mX.piJw4oYtvlU3w6NxpYuFLJCqZQCel DwzUrEWHaM1UEb.TmYMuKuo9gw7i1gh.ZEr8qn.x7A453_O4G0_ucsOseTN4 3IhcbIbpzniP81syBy4XpbQ.Nn4AUIlUvPGnP9wpelcXrlT3guw7dnQ3zaGE Idu83Hd82X34kdGuNxM4Z6uswdMf.VZtjHdyaPssz6S2q71knsuD4lvOQI0E oL41I88d2yIkLZ5TBlZMWXXI9OoEqK.iS3BazRQdSa8tjJ2XqWtZRssdTJZ2 fJ28srQfXMsDXij97lZigghZ3KlbWba_PfuzyePbtdY88ZVVeOmDECdKhHjC 59OJhmq9miT_rOncXVylYMDa54M68prfd5cUrZFMSUHcePWXv2semrq4qj4P CULYwpz_Dq..A2s2JPw0rGg–
Received: from [74.205.153.31] by web45704.mail.sp1.yahoo.com via HTTP; Wed, 03 Oct 2012 20:10:40 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.122.442
Message-ID: <1349320240.5310.YahooMailClassic@web45704.mail.sp1.yahoo.com>
Date: Wed, 3 Oct 2012 20:10:40 -0700 (PDT)
From:
J W justme362@yahoo.com
Subject: pot belly pig
To: My email was here.
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”-1911720250-861579668-1349320240=:5310″
Content-Length: 369

Below are other usernames and emails used by scammers

Example User Names Used By 98.139.91.98
User-name: email
User-name: guangzhou
User-name: kevin
User-name: thutrisch
User-name: marketta_e_buco
User-name: winnifredkcreaser
From:
MAC DAVIDSON LOAN SERVICE <web.office_174_912@att. Subject: none/blank
From:
CITI LOAN SERVICES <hctrbrtt7@gmail.com> Subject: none/blank
From:
Hadi Sall <00ha001@att.net> Subject: Hello
From:
“MR. SUNNY LUCAS” <sunluccas111222@rediffmail.com> Subject: SOUTH AFRICAN NETWORK FOR WOMEN
From:
“Mr.Mack White.” <webxxfxxmaster4830@att.net> Subject: THIS THIS MTCN__ 130 374 8443 TO PICK UP YOUR $5.0
From:
BARRISTER John Williams <webtzzz587687@att.net> Subject: OPEN THIS ATTACHMENT FOR YOUR PAYMENT OF $2.5 MILL
First Received From     approximately 2 years, 3 months, 4 weeks ago
Last Received From                         within 1 week
Number Received     333 email(s) sent from this IP

Dictionary Attacks                             7 email(s) sent from this IP
First Received From     approximately 1 year, 1 month, 2 weeks ago
Last Received From                         within 4 months, 2 weeks
 
1 Comment

Posted by on 10/04/2012 in Craigslist Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: