RSS

Tag Archives: Craigslist Scam

419 Scammers / Craigslist Scammers

if you’ve received an email from porkyexposed@yahoo.com – which is MY email – the email is believed to have been forged. If you look at the full header information of the email you will most likely see a different reply to and/or return-path, which is the spammers email-address. Unfortunately there is nothing I can do except send out this warning.

Below email addresses are email addresses of scammers, or victims who’s email has been compromised by said scammer who is also sending spam to Craigslist users.

Minnie Wilton <minniewilton@hotmail.com>
hellen4luv <hellen4luv@hotmail.com>
nicholassai50 <nicholassai50@yahoo.com>
bar chyke <bar.chyke@gmail.com>
Irina Sankara <irinasankara@yahoo.com>
Stacy Mohamed stacymohamed@hotmail.com
georg1a georg1a@cox.net
dorcaslove4ever dorcaslove4ever@yahoo.com
nefendt10 nefendt10@gmail.com
tiffi does voodoo <tiffidoesvoodoo@yahoo.com>
tinamark9922 <tinamark9922@hotmail.com>
mrs anickg <mrs.anickg@gmail.com>,
stacy mohamed <stacymohamed@hotmail.com>,
johnson smith 054 johnson.smith054@gmail.com
mayra3281 <mayra3281@gmail.com>

gv4z4 3189488499 <gv4z4-3189488499@comm.craigslist.org>
ssgwj 3136808648 <ssgwj-3136808648@comm.craigslist.org>
mayra3281 <mayra3281@gmail.com>
3dddc 3146814683 <3dddc-3146814683@comm.craigslist.org>
pw2c4 3188999951 <pw2c4-3188999951@comm.craigslist.org>

Received: from [178.254.203.20] by web161005.mail.bf1.yahoo.com via HTTP; Wed, 19 Jun 2013 04:58:43 PDT
X-Rocket-MIMEInfo: 002.001,SG93IGFyZSB5b3U_CgoKCgpQb3JreSBQaWcKATABAQEB

 
Leave a comment

Posted by on 06/20/2013 in Craigslist Scam

 

Tags: , , , , , , , , , , , ,

“Roger S. Elliott”

CRAIGSLIST SCAM / CHILDCARE SCAM

Subject: NANNY REQUIED URGENTLY
From Roger S. Elliott
Return-Path: <arougly3@gmail.com>
Received-SPF: pass (domain of gmail.com designates 74.125.82.67 as permitted sender)
X-Originating-IP: [74.125.82.67]
Authentication-Results: mta1047.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-wg0-f67.google.com) (74.125.82.67) by mta1047.mail.bf1.yahoo.com
Received: by wgbdt10 with SMTP id dt10so188354wgb.10
Received: by 10.216.238.79 with SMTP id z57mr1550703weq.184.1346946264925;
Received: by 10.216.218.151 with HTTP; Thu, 6 Sep 2012 08:44:24 -0700 (PDT)
Reply-To: xjxinc@gmail.com
Subject: NANNY REQUIED URGENTLY
From: “Roger S. Elliott” <arougly3@gmail.com>

My name is Mr. Roger S. Elliott, my wife died six months ago of breast
cancer. I don’t wanna talk about this but i think it is important
since you would be working as Cynthia’s nanny. Cynthia is 4 years old.
I am out of the city based on my business that is really booming here
in London and my girl will be arriving shortly back to the state
precisely on Sep 15th, Cynthia is here with me right now for holiday..

After a serious discussion with my father-in-law concerning a proper
care for my girl, we finally decided to search for a good and
responsible Nanny. If You are a student you can go for your classes
and report to Cynthia as soon as you are done with classes. The
monthly pay is $2600.00 for live out and $2400.00 for live in. We will
be responsible for your transportation which in exclusive of your
weekly salary regardless of the distance. You will be working with my
sister and also a housekeeper for a while before i fully arrive back
to the state..

We are strongly searching for someone of well mannered attitudes,
neatness and good sense of relationship. We are a Christian family and
we love our religion so basically everything we do is according to our
doctrines, I don’t mind your religion, but just letting you know so we
don’t offend you. If you are interested in this offer, please answer
all the questions below so i can have a brief idea of you..

1) What academic qualifications do you possess?
2) Do you have any relevant certificate to back up your
babysitting/Nanny career?
3) How old are you?
4) Are you married?
5) Do you have a valid Bank Account?
6) Tell us more about your temperament ..
7) Can you handle money if you are given an assignment to carry out?
8) Is your husband/Girlfriend/parent in support of you doing this job?
9) Which city are you located in?
10) How would you spend a time with my daughter though out a day?
“9:00am ~ 7:30pm”
11) What kind of activities would you plan for her?

Let me know if you will be available for the work offer and if you
have any questions as regards this offer, feel free to get in touch
with me..
I await a response at your earliest convenience. If the hours are not
okay by you let me know

Sincerely,
Roger

 
Leave a comment

Posted by on 05/27/2013 in Craigslist Scam

 

Tags: , , , , , , , , , ,

“Luz Reyes” “Donella Weingartner”

WARNING – RENTAL SCAM / ONLINE SCAMMER

rental-scam

Subject Line: Fwd: $625 / 2br – 1075ft&sup2; – Outstanding 2 bedroom 1 bathroom Rental (Loris)

From: luz.reyes24304@yahoo.com <luz.reyes24304@yahoo.com>
Date: Tue, Mar 26, 2013 at 1:03 PM
Subject: $625 / 2br – 1075ft&sup2; – Outstanding 2 bedroom 1 bathroom
Rental (Loris)
To: <emailuser@gmail.com>

Hey Daisy,
Did you get my last email?
The property is a bedroom bath with garage and washer/dryer. Pets are
allowed with a $100 cleaning charge.
The requirements to lease our property are as follows:
1. Photo ID
2. First months rent and optional fee for pets
3. Lease Agreement, I’ll bring it to the viewing
(It is month to month, 6 month or a 1 year lease)
4. Background check for each applicant
The service we use is Tenant Verified, here is a link.
This is an affordable way for me to screen applicants based on prior
tenant history and employment information. If you have a felony or bad
tenant history, I am flexible and I’ll work with you.
Let me know when you have your background check. It’s in a .pdf, you
can print it and bring to the viewing or email it to me. I am looking
for real tenants not window shoppers or tire kickers, right now I have
3 rental properties and a full time job.
What is the best contact number for you? Are you available tomorrow?
Enjoy your Tuesday!
Luz Reyes

_________________

From: donellaweingartner@yahoo.com <donellaweingartner@yahoo.com>
Date: Mon, Mar 25, 2013 at 11:08 AM
Subject: $625 / 2br – 1075ft&sup2; – Outstanding 2 bedroom 1 bathroom
Rental (Loris)
To: “emailuser@gmail.com”

Hey Daisy,
The property is a bedroom bath with garage and full size washer and
dryer. Dogs and cats are allowed with a $100 cleaning fee.
Requirements to rent our property are as follows:
1. PhotoID
2. 1st months rent and optional fee for pets
3. Rental Agreement, I’ll bring it to the viewing
(Options are month-to-month, 6 month or a 1 year lease)
4. Background check for each applicant
The provider we use is Tenant Verified: link.
This is an affordable way for me to screen applicants based on
previous rental history and employment information. If you have a
criminal record or bad tenant history, I am flexible and I’ll work
with you.
Let me know when you’ve completed your background check. It’s in a
.pdf, you can print it and bring to the viewing or email it to me. I
am looking for real tenants not window shoppers or tire kickers, right
now I have 3 rental properties and a full time job.
What is the best contact number for you? Are you available tomorrow?
Enjoy your Monday!
Donella Weingartner

 

Donella Weingartner also uses the name Donella Pomponi and Barrister Bernard OBI

 
Leave a comment

Posted by on 03/28/2013 in Craigslist Scam

 

Tags: , , , , , , , ,

“Marvin Thomas”

WARNING – NIGERIAN SCAM

Note: I am not selling anything on Craigslist nor do not have an ad up on any websites. Also, notice he is saying ‘item’ without actually naming the item he wants to purchase. That’s because he doesn’t care what the item it. He just wants your money and the item to possibly sell.

Subject Line: re:am interested in your posted ad
From: marvin thomas marvinthomas3 on AudrinaPatridge.com marvin.thomas03@gmail.com

Hi, thomas is my name.is your ad still for sale.I would love to buy this item asap,do withdraw the advert.I want you to know that i will be sending you a money order for payment.if you are ok with that,i will need your full name and mailing info to send the payment and i will arrange for the pick up.if you are willing to sell the item to me do email me at marvin.thomas03@gmail.com

Return-Path: <apache@iceman.sidestudios.com>
Received: from iceman.sidestudios.com (466180-web4.sidestudios.com [166.78.83.107])
by mtain-mi01.r1000.mx.aol.com (Internet Inbound) with ESMTP id 599E2380000C6
Received: by iceman.sidestudios.com (Postfix, from userid 48)
id 590A3462328; Tue, 12 Mar 2013 11:42:58 -0500 (CDT)
Subject: re:am interested in your posted ad
X-PHP-Originating-Script: 502:class.phpmailer.php
From: marvin thomas marvinthomas3 on AudrinaPatridge.com” <marvin.thomas03@gmail.com>
Reply-To: “marvinthomas3 on AudrinaPatridge.com” <marvin.thomas03@gmail.com>, “marvinthomas3 on AudrinaPatridge.com” <marvin.thomas03@gmail.com>, “marvinthomas3 on AudrinaPatridge.com” <marvin.thomas03@gmail.com>, “marvinthomas3 on AudrinaPatridge.com” <marvin.thomas03@gmail.com>
X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version 2.0.0 rc3]
x-aol-sid: 3039ac1d7b89514011016a3d
X-AOL-IP: 166.78.83.107
X-AOL-SPF: domain : iceman.sidestudios.com SPF : none

queen jobe queenjobe12@yahoo.com thomasmarvind@yahoo.com apache@iceman.sidestudios.com

 
1 Comment

Posted by on 03/14/2013 in Craigslist Scam

 

Tags: , , , , , , ,

“Kelly Clark”

WARNING – CRAIGSLIST SCAM / WORK AT HOME JOB SCAM & eBay Scam (by the same scammer)

Subject Line: Craigslist Poster Needed – If you need a part time job $1.50 per post
Hi,
I need a poster for my ads on craigslist. This is a part time job. I will pay $1.50 per post.
You will make around $500 per week. If you are a hard working person, this is the job for you.
Stay home and make money. I am a ticket dealer and you will have to post my tickets on craigslist.
For more details you can reply me at : kelly777clark@gmail.com

Return-Path: <SRS0=pRWY=HR=gmail.com=kelly777clark@srs.kundenserver.de>
X-YahooFilteredBulk: 212.227.126.171
Received-SPF: pass (domain of srs.kundenserver.de designates 212.227.126.171 as permitted sender)
X-Originating-IP: [212.227.126.171]
Authentication-Results: mta1017.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO moutng.kundenserver.de) (212.227.126.171) by mta1017.mail.bf1.yahoo.com with SMTP; Tue, 18 Sep 2012 12:00:25 -0700
Received: from icpu915.kundenserver.de (infong275.kundenserver.de [212.227.127.173]) by mrelayeu.kundenserver.de (node=mreu2) with ESMTP (Nemesis) id 0Lapqe-1TtkZs30um-00kZGI; Tue, 18 Sep 2012 21:00:24 +0200
Received: from 172.129.57.149 (IP may be forged by CGI script) by icpu915.kundenserver.de with HTTP id 4Ap1SB-1TMsjg2aNE-008rGa; Tue, 18 Sep 2012 21:00:24 +0200
X-Sender-Info: <196478416@icpu915.kundenserver.de>
Subject: Craigslist Poster Needed – If you need a part time job $1.50 per post
From: Kelly Clark <kelly777clark@gmail.com>
X-Provags-ID: V02:K0:WsRioMRAUeEUNvQ4ZPtQ2D6mlz22M54vRuN/irE7MX2 ffUm0HEPE6p0PKyzPfaOJCIBdptsBJxgvPSljElCtlC9LwfaTb 8PxTcDSihpB0xKSDwLrnfxZkz9HvnEKHc4zRMrmc71D1cV893m rzzS+lAw+WdJswQZ+uaeMCdt+xu1O4rss0HEa2ymKID2qafWyl 0gOEPD1O3VIcpGAJG+98TfuoTFwQQQZe5e6tHjDeGIKQWmdjrq JGiaBpiEXWT1r31kjjXnogl8SGiQ67RxwxiqH5LfVd+lCJalxV ydHF9C0y5K2T1nTO6j+jToyljjo1FJNdK95rGRdWI4CFaFcWeg q6TWhOuRThvRJzAQas1y7b463jE0W9Ht2KrBj9QWySFlNJe1rG idNe4YRXxbuKIjm7Xdspy5QKArZ4wf6T7RkA33lEMz+fhcSYAY UKlK8

Kelly Clark kelly777clark@gmail.com

Subject Line: eBay Lister Needed – $300 per week- Part time job
Hello,

I need someone who can post my cars online on eBay. Will pay $50 for each add you will post online.
I will send you the money every 3-4 days via PayPal or Money Order. You can make around $300-400 per week

Let me know asap if you are interested

Thanks

Kelly A. Clark kelly777clark@gmail.com
Return-Path: <SRS0=HVV3=IJ=gmail.com=kelly777clark@srs.kundenserver.de>
X-YahooFilteredBulk: 212.227.126.186
Received-SPF: pass (domain of srs.kundenserver.de designates 212.227.126.186 as permitted sender)
X-Originating-IP: [212.227.126.186]
Authentication-Results: mta1331.mail.bf1.yahoo.com from=; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO moutng.kundenserver.de) (212.227.126.186) by mta1331.mail.bf1.yahoo.com 
Received: from icpu915.kundenserver.de (infong275.kundenserver.de [212.227.127.173]) by mrelayeu.kundenserver.de (node=mreu4) with ESMTP (Nemesis) id 0MPNP2-1TI4dV0wTY-004Pde;
Received: from 195.93.60.8 (IP may be forged by CGI script) by icpu915.kundenserver.de with HTTP id 4AMXHL-1T2b5V0gFE-00OF7J; Fri, 12 Oct 2012 03:56:33 +0200
X-Sender-Info: <196478416@icpu915.kundenserver.de>
Message-Id: <4AMXHL-1T2b5V0gFE-00OF7J@icpu915.kundenserver.de>
Subject: eBay Lister Needed – $300 per week- Part time job
From: Kelly A. Clark <kelly777clark@gmail.com>
Reply-To: kelly777clark@gmail.com

 

Tags: , , , , , , , , , , , ,

“Matthew Snapp” aka “Anthony Gray”

WARNING – JOB SCAM / NIGERIAN SCAMMER

fraud


Subject Line: babysitter/nanny

Hello,

We are in need of a good babysitter/nanny for my girl Lacey which is 4yrs old, i am from Singapore, i will be in state for an assignment from 25th of September through 30th 0f October and am looking for someone who can care for my girl during this period from Monday through Friday or anytime you are convenient and comfortable with, and i saw your Resume on craiglist.com as a very good babysitter/nanny, i will be coming to state with 8 delegate to assist some of our branches in the state, i will appreciate it if the girl is being taking care of in a free smoking environment by a good Christian, I hereby anticipate your reply indicating your availability throughout these times and the total cost of caring for response for more details. Please kindly send your response to my private e-mail for quick reply ( matthew_snapp@yahoo.com )

Return-Path: <anthony.gray24@yahoo.com>
X-YahooFilteredBulk: 98.138.91.208
X-Originating-IP: [98.138.91.208]
Authentication-Results: mta1184.mail.gq1.yahoo.com
Received: from 127.0.0.1 (HELO nm20-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.208) by mta1184.mail.gq1.yahoo.com with SMTP; Tue, 18 Sep 2012 15:19:01 -0700
Received: from [98.138.90.55] by nm20.bullet.mail.ne1.yahoo.com with NNFMP; 18 Sep 2012 22:18:58 -0000
Received: from [98.138.226.162] by tm8.bullet.mail.ne1.yahoo.com with NNFMP; 18 Sep 2012 22:18:58 -0000
Received: from [127.0.0.1] by omp1063.mail.ne1.yahoo.com with NNFMP; 18 Sep 2012 22:18:58 -0000
X-Yahoo-Newman-Id: 259306.82278.bm@omp1063.mail.ne1.yahoo.com
Received: (qmail 27031 invoked by uid 60001); 18 Sep 2012 22:18:58 -0000
Received: from [41.211.229.21] by web120303.mail.ne1.yahoo.com via HTTP; Tue, 18 Sep 2012 15:18:57
Message-ID: <1348006737.90749.YahooMailClassic@web120303.mail.ne1.yahoo.com>
From: Matthew Snapp <anthony.gray24@yahoo.com>
Reply-To: matthew_snapp@yahoo.com
Subject: babysitter/nanny

Matthew Snapp anthony.gray24@yahoo.com matthewsnapp@yahoo.com

 

Tags: , , , , , , , ,

Suspicious Spoofed Craigslist Email

SUSPICIOUS FAKE CRAIGSLIST EMAIL – PHISHING ATTACK

01/27/13, UPDATE – I received another phishing email by a supposed Craigslist user using the name Eduard Frank – I’ll will post the e-mails in order, newest to oldest, along with the header details.

I don’t have any Craigslist ads currently listed. Infact I don’t even list Craigslist Ads on the account I use to bait scammers so I was immediately suspicious when I received this Craigslist email alert. Not only are the two ‘Craigslist’ links spoofed (the actual URL is not Craigslist) — but the IP address is blacklisted on many anti-scam websites.

SUBJECT: i would like to buy your item from craigslist RECEIVED: Thursday, January 24, 2013 4:22 PM
From: Eduard Frank qdbfwp@hotmail.com

EMAIL: Hi Am very interested in your item posted on craigslist : https://post.craigsIist.org/k/EEEYZLFl4hGbaqXZBYzI7A/vh279?s=tou This is the same spoofed link from the previous emails. The actual URL is goo.gl/aiNwi 

is it still available?

HEADER DETAILS:

Return-Path: <qdbfwp@hotmail.com>
X-YahooFilteredBulk: 209.86.89.63
Received-SPF: softfail (transitioning domain of hotmail.com does not designate 209.86.89.63 as permitted sender)
X-YMailISG: f21Sl8cWLDuLkBRdjpHUdX9xerAr20OQ.qHh.cYAhFw5lSy9 InkNTHdcI2EA5oGO9s9WRGoE8X5ydhJMddl7xNfU7SS5DV.ZmEuoogthq2Mr ZvEhsMyuVJDUF.SjyE4Tc89NIsqgqTDyubXh8JCI4vlsSXzjTBeONvNIq6Kg cqZ8zxS3GmdYZWjr7H42UDM4exf6rEjAzJpgC8FAMm4ynJLZBkBoyWFfO2Ll qv.ng07yAnqBA3sFkFS_Y.CSVvZm88fwcMZlZyRi_4wzLBnT5yvTPIAuvqT5 tNs4bOiPVUJfXgqNLp7wrrOUqTjAkUqRUs66quJ6_O2JXVAoU.ZY6JoiL5EO kI0w0mTfK_Ywb.QBcTEUSmUWvqn_CQsUlSLAvyn.qxAh8Y2runI8uiQygKGz PJYlnCyv78fhIxh.nBTk_9CqekcGWowgPXwkvZapxZ5_jda.VjWRmrJQpk5Q 70.QaXHLbKcyWqGU_DdG7adHyc9kvV4EiGdecXmmVXU1qM_MUGmbhRHPkInj yzHCteTsIZesiuI0wKIPizjJTdqCC.NN.UiWyXZlMTJfPXtQTa4RlRBDDPyz Xy0ki7OZklAZBGKSTFhDY5BgR.NKTJ6XWiPXz9gttbYrBMBrNkY2HLd0zEHX 8NAX0o7PjQfXOIJ1a1EB.3ZhcDS7kWlm9ChTpiVdDLLcNq8IYZoGIXdR8X4R jHFX6pCqOPafF_ukxFRia_W66cmiyjhUISaBWM5GDA1bam3h8Q5iDQhonN0H mt38Vl9DJdp.0CCcpXnGj8EMezEmFErlX7riKAHti3bHf6B2psPM9F3Q66YD Yvev1gX2V8AXHutGkN5kqIbapmCsFrEcNlsQ6PWOa_MaF50swL7c3qegbBmB aX2qBolGvmVByMl7LRqFYxvUirxOQxoRYQgh3RsDrOckcbf6xCeNIX_BnCMK MHTpGaA4sYqPPKdCTky02qrqvsrC4jgmgJygFS.ok93p6xLaA7J18EWkLP0B 7HXxWRY4Gv70DVDXfCmC_W6S.wfF0Q96oxHXhE8eGCz32L.sDLEJ.lfp8PTT ta6RcLyAAW5spPFLk4cFqavI1kDCiU8FxlcCL0wbAWcL9MbA97xKPwuwfzTA onZcJp5qb2AhvBc2FN_LWuRAL6bE.1cit4BS_T1xjj6ZrGV9cm5KKu2Bb7tz rOMyUXhj_Jti6n0rBzP3FBJkgzc2j.vTFMrgV.gbGVH9vZRYfUui8ndHyPXU QaZMaLBHHys-
X-Originating-IP: [209.86.89.63]
Authentication-Results: mta1160.mail.gq1.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO elasmtp-junco.atl.sa.earthlink.net) (209.86.89.63) by mta1160.mail.gq1.yahoo.com with SMTP; Thu, 24 Jan 2013 08:23:36 -0800
Received: from [71.237.118.147] (helo=User) by elasmtp-junco.atl.sa.earthlink.net with esmtpa (Exim 4.67) (envelope-from <qdbfwp@hotmail.com>) id 1TyPZx-0002jO-Fi; Thu, 24 Jan 2013 11:23:05 -0500
Reply-To: qdbfwp@hotmail.com
From: Eduard Frank<qdbfwp@hotmail.com>
Subject: i would like to buy your item from craigslist
Content-Type: text/html; charset=”Windows-1251″
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <E1TyPZx-0002jO-Fi@elasmtp-junco.atl.sa.earthlink.net>
X-ELNK-Trace: 8219d692fd5468d6d780f4a490ca6956d5d4673fe7faad86623ec139337907e38e9f230fcf1cb831350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 71.237.118.147

Your posting has been flagged for removal.
Approximately 98% of postings removed are in violation of craigslist posting guidelines.
Please make sure you are abiding by all posted site rules, including our terms of use:
http://www.craigslist.org/about/terms.of.use.html This was a spoofed link with the actual URL being goo.gl/aiNwi
If you need help figuring out why your posting was flagged, try asking in our flag help forum. Include posting title, body, category, city, how often posted, any images, HTML markup, etc.
If you feel your posting was wrongly flagged down (2% of flagged ads are) please accept our apologies and feel free to repost using the link below:
http://www.craigslist.org/about/ctd/repost.html This was a spoofed link with the actual URL being goo.gI/aiNwi
Sorry for the hassle, and thanks for your understanding.
——————————————————————————

Date: 1327114516
PostID: 24177504

HEADER DETAILS:

Return-Path: <dycsbl@craiglist-accounts.com>
X-YahooFilteredBulk: 209.86.89.69
Received-SPF: temperror (encountered temporary error during SPF processing of domain of craiglist-accounts.com)
X-YMailISG: 2h.FN3sWLDsEDE8qqS_yEcqB6M1HR9h.u85ZaLiGYL.IEQuU iab6_WhytOr0v8KZup3soVlAl7qxu2RiK1epX7ek6GeXBAj6poh2cJDD.zQg jPJjyPfclZKW_NnPFDTrSWD79AqrNkBBoJ5hW__LZXlZUz.ZLpSi3ZGXK4Ge VIQygP.nLCk6NbRgJn9twOcwwHoP9j9q6on5YSGUI.nb1gYsctI_PDBGrRnF KvveQMYnrrNG4DgZdrwZSRT2Ox8yP7gB51A8WWDw8krq9Pr5un4ainmeAweF XEuXHV0gt8Ow1O0rAIxiwCKOtJWaYKiesaCJl7_h6QSFdL1PpDwAqVZXazI0 QmP3DUNfRbb71rVQF.0VNpiFdohCTjJUO6uB0YxxGT6CZ10wN1eCKhe4eSPv e8vXdS37Jh0ofSMl9amPk1N5KfTnveNm2V6cqR1pA1vlUkaA_5CyVppBKBMz jtvxdFt.RDiMZzuE77R3OHnsdEvmu4PaX64_PEj.vf._aKc738JxzsFaHmf8 TQAsQMpo.WAEdh0b_5rITS4ima44rP.6UIKfFqAc31KrxVEBY9oGXCHB9nz9 V3nDA50qbSHIIagS9ZVZTstHWy4dum2Gaz9KgGNMoR6UIhnw4H6tagKAyPPY EnTD1ypXM8jQocv6l0dsJk3azMLION2iNB9P4Ow6gtjMwkVygfgFrchDUwRs fSxZ4_itBU3TG9KdPtUCdH5wUwuxAGiVBCjLVsLlg2d694opIOVX2J40BGRH IYhXAAfbxnnbpYnzY9.FWxSe.uRNv0UKJ5R91syZw_5x.ifYmztP8ZxSubqC 4PEvO1.qavB3u4KwY4riKy.H5mmZBAKLDx1EY4pYVofWYjywCEiVOuq0.KjM VszzfJPQT3i9fvKhxDE9THio9A1vagNxw1rThbN1v0cPF7CgwE1yGIXPKv3Y DjIOVLoI7C3ubQK1AioG3t6RCfO32iPiiefv0oWc4x6LYaDv0RMeO32XiVsm qoptc3moDkfy29NJAQZXHA9oO.GwX4fjNRIliMgY8OaK6zb2XRbBdDBfdD6f IVgVhUSeYJKmYxxWOmWP.DX1Jq2aZNU3LQ5MyOV0U054Ws9MRNZKjR3BJcCi 3tgqq1kcbrPHOhkWI0hjJNFaLZY8z3qLl41wPKkkq8H0FN0.6q._GbmNGB4z twsjMemUDLkyY32h.MUaQiL.3UvRYkY7mXIsQlCwKe4BeYyY0y03rcJMb3iF FIR2s29QvuOjBD7kRTSILNW1qwInYb3kFH_ODhQTUTLlYiic9f.M_uYkGXA0 X6nSS2lFS1d2hK.XlYnYjn49yt7oY0SVNiPQ6Z9FqiXwp4cT0cKnB6NX2NE8 DZGrkmlBsrgZmJA8n_9hHwi.7CKGEmLJnqP5MgQkCuKNEz_z0l7yYw22MkJH qqeHgmb75noxVzMTDd1KtfwgGTmnVGcBzo0vvAlk588aZfVAyXwXZMCX
X-Originating-IP: [209.86.89.69]
Authentication-Results: mta1220.mail.sk1.yahoo.com from=craiglist-accounts.com; domainkeys=neutral (no sig); from=craiglist-accounts.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO elasmtp-mealy.atl.sa.earthlink.net) (209.86.89.69) by mta1220.mail.sk1.yahoo.com with SMTP; Wed, 23 Jan 2013 12:58:50 -0800
Received: from [72.172.204.128] (helo=User) by elasmtp-mealy.atl.sa.earthlink.net with esmtpa (Exim 4.67) (envelope-from <dycsbl@craiglist-accounts.com>) id 1Ty7Nq-0004nx-4X; Wed, 23 Jan 2013 15:57:22 -0500
Reply-To: dycsbl@craiglist-accounts.com
From: Craigslist <dycsbl@craiglist-accounts.com>
Subject: flagged & removed 24177504
Message-ID: <E1Ty7Nq-0004nx-4X@elasmtp-mealy.atl.sa.earthlink.net>
0da15bcd0e72a23c13bbd08df6cfe9269ef193a6bfc3dd48c25deae7748207c3a2f7e1f2b096e1d07ef9f80aaf77e5a4350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 72.172.204.128

dycsbl@craiglist-accounts.com 72.172.204.128 <> 209.86.89.69

 

Tags: , , , , , , , , , , , , , , , ,

“Ryan Mathews”

CRAIGSLIST SURVEY SCAM – PHISHING SCAM

THERE WAS 3 LINKS – ALL LINKS WERE SPOOFED AND THE ACTUAL URL WAS TRACK.REVFORCECPA/AFF_etc.

EMAIL: Hello,

This Is Ryan With MyPaidSurveys.com, I saw your Ad
on Craigslist. We are looking for only 100 people to
take our simple paid surveys daily…
We pay $20 to $50 per survey daily, and we pay weekly.
Click Here And Register For a Free Account
Hurry…We are only looking for a 100 people only.
Get Paid $1,000 + weekly….
Click Here And Register Now
Sincerely yours,
Ryan Mathews
Hiring Manager
MyPaidSurveys.com

HEADER:

Return-Path: <francescoreidhead@jobsearchonline.org>
X-YahooFilteredBulk: 188.121.53.2
Received-SPF: none (domain of jobsearchonline.org does not designate permitted sender hosts)
X-YMailISG: 65Fy2LsWLDsvFB3wpPW1fIW3kxoxB1YgzGNy.izUKXCPC1nT ecrJiYb4yA4PCDYRiLGXSBAWbRV9g6WnHmBywayeNzHD16Ez5y2Ki437dm1Y .X5JQP9kCb08aZYt9GkfLCG0qcF7Lmxf1rLVPQ2Nxg4tHtN6jgA8K5kUG.OR pwh2Wg8EKlSXaaqATyAoZaciOKp7O8wxpC87auN83gjhJaXgnQhpbh_Wm0TN kJ4nW_.cutAMyDpNs3ukrGE.MZ53oe16KrUfVrbJy9jCPH5FJlyXbmLQoUDI W6PssvNPexBjMiLPr09jM3ez2quCISS7hE_a7gW9nQhsFZR_gCASSdweJ5go 4cojPLBdClhGyozUCnv3coVlpKFtnX17HMmefEcSbCm5YehqOqaPTF0OjL.z PUTtz.fOyL.sXEKRQQ978DOxiatUYeCbx_RjnxSTI1UdIObtv0rp6qPWCMHD P67MBe6Mo6JDCn0jELd94faooX4.w9nx7ie8PzY7QI8bWVMhVeA3AGeehXuO j9KVa99YZoUXobquBQCEq1XD88zzRS.tjb4dXUtxxQjWLlmplMI55BW_dbou OZ76BZni6G5_1dgdKIhVNJF7PHm2sOzXcmuZO.htZvBlDwXk1BaZcTDnPgtH pmqwAR9VhCVxh7BA9C5cXqLpioCuBzjYNGCEW2R5_7.FdNsi0e4N8IuDa4mH XMtUsado.v8VDjBrn._NZ_r6zRUjpMdWzWgMMF4j0Cz52tXLIExce1MhckFP Ys1DujpC1whpah3XyaEtA2_AThxX9hRvE4WKz5oTgPg7.PjwBjOL0E2qQ8Ov DzXQCCZtZae9IykSL8p_6DCo0v9fDUnSgetUfVvkjHkQDSnMejJvJgs6HQzx WpUyhQkLMKjc6eXu9tn0Wfq86LcRdJz.xy9TbRKB5YPr8Wtv3CyqKVWpi5mH xtllJdCMUmmZu_ook6CHrlG.UX8Q1v9nqTJpIfKRLYV_yKyYWfF8RWC3l1oc uhuw9ThqtHVzfMQRq9r7D3aPV3wcbdPNpkKzp_6ysSTz1ghHt4Kh7dSNuvrV GE3s2Lob1bPy_EXZ.FIleSxmv19bB7TV5DJ3QV96JWLIG4fVbX9X1WZfZyDl uhBFbcoQWh56lHexGEnGhCze3FIF.62Q_A6P
X-Originating-IP: [188.121.53.2]
Authentication-Results: mta1137.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=vfemail.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO n1plout04-02.prod.ams1.secureserver.net) (188.121.53.2) by mta1137.mail.mud.yahoo.com with SMTP; Sun, 14 Oct 2012 15:01:51 -0700
Received: (qmail 7504 invoked from network); 14 Oct 2012 22:01:50 -0000
Received: from unknown (98.24.151.137) by n1plout04-02.prod.ams1.secureserver.net (188.121.53.2) with ESMTP; 14 Oct 2012 22:01:49 -0000
From: “Ryan Mathews” <CraigslistAdReply@vfemail.net>
Subject: Re: Ad On Craigslist
Message-ID: <57509048dfe69f428ab5af9c6a5de2ad@DeeQ-PC>
Content-Type: multipart/alternative; boundary=”—-=_NextPart_000_0001_C30A4D9F.387FF949″
Return-Path: <francescoreidhead@jobsearchonline.org>

Ryan Mathews CraigslistAdReply@vfemail.net RETURN-ADDRESS: francescoreidhead@jobsearchonline.org

RECEIVED-IP: 98.24.151.137 X-ORIGINATING-IP: 188.121.53.2

 

Tags: , , , , , , , , , , , ,

 
%d bloggers like this: