Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

USAGC.org Green Card lottery scam

Post up any 419 emails you received. All persons/companies depicted in these emails are either fictitious or have had their identities copied/stolen by the scammers. Emails posted by staff are received unsolicited to their "catcher" accounts.

Re: USAGC.org Green Card lottery scam

Unread postby SlapHappy » Fri Mar 06, 2015 12:45 am

+12023184492
Number billable as geographic number
Country or destination United States
City or exchange location Westchester, DC
Original network provider* Peerless Network Of The District Of Columbia, Dc
Bandwidth SMSEnabled VoIP in Washington, DC
Redirected VOIP to Russian Scammers.


Knightmare86,

If you have the email with full headers where they told you to send money to the bank account mentioned above, please post it here, MINUS YOUR NAME AND EMAIL ADDRESS. XXX it out or delete them where they occur.

Great sites for finding & checking email headers and IPs
viewtopic.php?f=3&t=50
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Re: USAGC.org Green Card lottery scam

Unread postby Knightmare89 » Sun Mar 08, 2015 4:06 pm

SlapHappy,
unfortunately such an email doesn't exist as all transactions were done over phone.

Hunting headers now.
Plus filing a complaint to iC3.
You don't want to piss me off.
User avatar
Knightmare89
New survivor
 
Posts: 5
Joined: Thu Mar 05, 2015 7:57 pm

Shipments@usagc.org AngieChapman@usagc.com

Unread postby Knightmare89 » Sun Mar 08, 2015 7:31 pm

As promised...

HEADERS (From latest to first):

* 192.117.146.33 012 Smile Communications Ramat Gan Israel
74.217.224.226 Internap Network Services Corporation n/a United States
*Probable originating IP address


Shipments@usagc.org

Return-Path: <Shipments@usagc.org>
Received: from relay.usagc.org (mail2.usagc.org. [74.217.224.226])
by mx.google.com with ESMTPS id h20si11008743qaq.78.2015.03.01.23.30.18
for <XXXXXXXX@gmail.com>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 01 Mar 2015 23:30:18 -0800 (PST)
Received-SPF: permerror (google.com: domain of Shipments@usagc.org uses a
mechanism not recognized by this client. unknown mechanisms: ))
client-ip=74.217.224.226;
Authentication-Results: mx.google.com;
spf=permerror (google.com: domain of Shipments@usagc.org uses a mechanism
not recognized by this client. unknown mechanisms: )) smtp.mail=Shipments@usagc.org
Received: from usagc.org (exchange.usagc.corp [192.117.146.33])
by relay.usagc.org (8.14.4/8.14.4) with ESMTP id t227UHDg032355
for <XXXXXXX@gmail.com>; Mon, 2 Mar 2015 09:30:17 +0200
Received: from Internal Mail-Server by Mail-SeCure (envelope-from
Shipments@usagc.org) with ESMTPS (AES128-SHA encrypted); 2 Mar 2015 09:30:10
+0200
Received: from EXCHANGE.USAGC.CORP ([fe80::80e5:ae7f:bbd6:fe5]) by
Exchange.USAGC.CORP ([fe80::80e5:ae7f:bbd6:fe5%16]) with mapi id
14.03.0210.002; Mon, 2 Mar 2015 09:30:09 +0200

***
AngieChapman@usagc.com

* 81.218.7.122 Bezeq International n/a Israel
70.42.35.148 Internap Network Services Corporation New York United States
*Probable originating IP address


Return-Path: <AngieChapman@usagc.com>
Received: from mail.usagc.org (mail.usagc.org. [70.42.35.148])
by mx.google.com with ESMTP id i2si10159486qan.53.2015.02.08.04.37.51
for <XXXXXXXXX@gmail.com>;
Sun, 08 Feb 2015 04:37:51 -0800 (PST)
Received-SPF: permerror (google.com: domain of AngieChapman@usagc.com uses
a mechanism not recognized by this client. unknown mechanisms: ))
client-ip=70.42.35.148;
Authentication-Results: mx.google.com;
spf=permerror (google.com: domain of AngieChapman@usagc.com uses a
mechanism not recognized by this client. unknown mechanisms: )) smtp.mail=AngieChapman@usagc.com
Message-Id: <54d7589f.c260e00a.2b27.6f6aSMTPIN_ADDED_MISSING@mx.google.com>
Received: from ([81.218.7.122]) by usagc.com with MailEnable WebMail; Sun, 8 Feb 2015 04:37:44 -0800
Content-Type: multipart/mixed; boundary="_000_FD739EB1B8883A48B2D08B036C80CDD73DE42373ExchangeUSAGCCO_"
MIME-Version: 1.0

***

Return-Path: <AngieChapman@usagc.com>
Received: from mail.usagc.org (mail.usagc.org. [70.42.35.148])
by mx.google.com with ESMTP id f110si3857426qgf.106.2015.02.27.04.33.16
for <XXXXXXXXXX@gmail.com>;
Fri, 27 Feb 2015 04:33:16 -0800 (PST)
Received-SPF: permerror (google.com: domain of AngieChapman@usagc.com uses a
mechanism not recognized by this client. unknown mechanisms: ))
client-ip=70.42.35.148;
Authentication-Results: mx.google.com;
spf=permerror (google.com: domain of AngieChapman@usagc.com uses a
mechanism not recognized by this client. unknown mechanisms: ))
smtp.mail=AngieChapman@usagc.com
Message-Id: <54f0640c.f71f8c0a.a9f2.234aSMTPIN_ADDED_MISSING@mx.google.com>
Received: from ([81.218.7.122]) by usagc.com with MailEnable WebMail; Fri, 27 Feb 2015 04:33:13 -0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--=_Part_9824528F496C4934B39BC748FD5DC8F6"
To: <XXXXXXXXXX@gmail.com>
From: <AngieChapman@usagc.com>
Subject: USAGC - Full program #555803348
Date: Fri, 27 Feb 2015 14:33:13 +0200
X-Priority: 3
X-MSMail-Priority: Medium
X-ME-Bayesian: 0.000000

This is a multi-part message in MIME format.

***
USAGC_Shop-GUID2OFB4AHXUBNRP3CTRT2Q@usagc-mail.org>

* 62.144.110.105 Ecotel Communication Ag n/a Germany
*Probable originating IP address


Return-Path: <USAGC_Shop-GUID2OFB4AHXUBNRP3CTRT2Q@usagc-mail.org>
Received: from mx110e105.fagms.de (mx110e105.fagms.de. [62.144.110.105])
by mx.google.com with ESMTP id ho5si3204032wib.33.2015.02.27.04.26.14
for <XXXXXXXXXXX@gmail.com>;
Fri, 27 Feb 2015 04:26:15 -0800 (PST)
Received-SPF: pass (google.com: domain of
USAGC_Shop-GUID2OFB4AHXUBNRP3CTRT2Q@usagc-mail.org designates
62.144.110.105 as permitted sender) client-ip=62.144.110.105;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of
USAGC_Shop-GUID2OFB4AHXUBNRP3CTRT2Q@usagc-mail.org designates
62.144.110.105 as permitted sender)
smtp.mail=USAGC_Shop-GUID2OFB4AHXUBNRP3 ... c-mail.org
X-CSA-Complaints: whitelist-complaints@eco.de
List-Id: <1>
DomainKey-Signature:
To: XXXXXXXXX@gmail.com
From: "=?UTF-8?B?VVNBR0MuT1JHIC0gU2hvcA==?=" <USAGC_Shop@usagc-mail.org>
Reply-To: "=?UTF-8?B?VVNBR0MuT1JHIC0gU2hvcA==?="
<USAGC_Shop-GUID2OFB4AHXUBNRP3CTRT2Q@usagc-mail.org>
Subject: Purchase confirmation for XXXXXXXXXXXXX
X-EMID: 1A801A703QP0VSD0F3CJH00SAN3HA
X-EMGUID: 2OFB4AHXUBNRP3CTRT2Q
Content-Type: multipart/alternative;
boundary="--15022713261300.30622.Texte--"
Message-Id: <15022713261301.30622@msweb11.ffm.local>
MIME-Version: 1.0
Date: Fri, 27 Feb 2015 13:26:13 +0100

***

* 81.218.7.122 Bezeq International n/a Israel
70.42.35.148 Internap Network Services Corporation New York United States
*Probable originating IP address


Return-Path: <AngieChapman@usagc.com>
Received: from mail.usagc.org (mail.usagc.org. [70.42.35.148])
by mx.google.com with ESMTP id l90si3882704qgd.26.2015.02.27.04.14.25
for <XXXXXXXXXX@gmail.com>;
Fri, 27 Feb 2015 04:14:25 -0800 (PST)
Received-SPF: permerror (google.com: domain of AngieChapman@usagc.com uses
a mechanism not recognized by this client. unknown mechanisms: ))
client-ip=70.42.35.148;
Authentication-Results: mx.google.com;
spf=permerror (google.com: domain of AngieChapman@usagc.com uses a
mechanism not recognized by this client. unknown mechanisms: ))
smtp.mail=AngieChapman@usagc.com
Message-Id: <54f05fa1.e3548c0a.46d6.3070SMTPIN_ADDED_MISSING@mx.google.com>
Received: from ([81.218.7.122]) by usagc.com with MailEnable WebMail; Fri, 27 Feb 2015 04:14:22 -0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--=_Part_AF9042A3B06E447E97334C4CA7A15133"
To: <XXXXXXXXXX@gmail.com>
From: <AngieChapman@usagc.com>
Subject: Hi how are you? I remind you that we have schedule for today
Date: Fri, 27 Feb 2015 14:14:22 +0200
X-Priority: 3
X-MSMail-Priority: Medium
X-ME-Bayesian: 0.000004

This is a multi-part message in MIME format.

***
newsletter-EMID0AA03QP0VS60F1RGI08CEN10 ... c-mail.org
newsletter@usagc-mail.org

* 62.144.110.106 Ecotel Communication Ag n/a Germany
*Probable originating IP address



Return-Path: <newsletter-EMID0AA03QP0VS60F1RGI08CEN1006KKMS5@usagc-mail.org>
Received: from mx110e106.fagms.de (mx110e106.fagms.de. [62.144.110.106])
by mx.google.com with ESMTP id gk17si13090241wic.117.2015.02.22.08.28.19
for <XXXXXXX@gmail.com>;
Sun, 22 Feb 2015 08:28:20 -0800 (PST)
Received-SPF: pass (google.com: domain of
newsletter-EMID0AA03QP0VS60F1RGI08CEN10 ... c-mail.org designates
62.144.110.106 as permitted sender) client-ip=62.144.110.106;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of
newsletter-EMID0AA03QP0VS60F1RGI08CEN10 ... c-mail.org designates
62.144.110.106 as permitted sender)
smtp.mail=newsletter-EMID0AA03QP0VS60F1 ... c-mail.org;
dkim=pass header.i=@emstechnology.net
X-CSA-Complaints: whitelist-complaints@eco.de
List-Id: <1>
DKIM-Signature:
DomainKey-Signature:
X-EMID: 0AA03QP0VS60F1RGI08CEN1006KKMS5
X-EMMAIL: XXXXXXXXX@gmail.com
Feedback-ID: 18001A703QP003EJG5B:UMS:EMS
List-Unsubscribe: <http://usagc-mail.org/host/h.php?EMID=08A03QP0F1RGI08CEN101S7R39B&AID=32645>
From: "=?UTF-8?B?VVNBR0MgR3JlZW4gQ2FyZCBTZXJ2aWNlcw==?=" <newsletter@usagc-mail.org>
Reply-To: "=?UTF-8?B?VVNBR0MgR3JlZW4gQ2FyZCBTZXJ2aWNlcw==?=" <newsletter-EMID0AA03QP0VS60F1RGI08CEN1006KKMS5@usagc-mail.org>
To: XXXXXXXXXXXX@gmail.com
Subject: XXXXXXX, Increase your Winning Chances
Content-Type: multipart/alternative;
boundary="--150222172746FW.10343.Texte--"
Message-Id: <150222172746FW.10343@mscreator57.ffm.local>
MIME-Version: 1.0
Date: Sun, 22 Feb 2015 17:27:46 +0100

***
!!! THE BANK TRANSFER EMAIL !!!
support@greencardsupport.org

* 81.218.118.146 Bezeq International Tel Aviv Israel
74.217.224.226 Internap Network Services Corporation n/a United States
*Probable originating IP address


Return-Path: <support@greencardsupport.org>
Received: from relay.usagc.org (mail2.usagc.org. [74.217.224.226])
by mx.google.com with ESMTPS id f134si21319943qhc.20.2015.02.22.06.15.11
for <XXXXXXXX@gmail.com>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 22 Feb 2015 06:15:11 -0800 (PST)
Received-SPF: none (google.com: support@greencardsupport.org does not designate
permitted sender hosts) client-ip=74.217.224.226;
Authentication-Results: mx.google.com;
spf=none (google.com: support@greencardsupport.org does not designate permitted
sender hosts) smtp.mail=support@greencardsupport.org
Received: from usagc.org (bzq-218-118-146.red.bezeqint.net [81.218.118.146])
by relay.usagc.org (8.14.4/8.14.4) with ESMTP id t1MEF8p1027113
for ; Sun, 22 Feb 2015 16:15:09 +0200
Message-Id: <201502221415.t1MEF8p1027113@relay.usagc.org>
Received: from Internal Mail-Server by Mail-SeCure (envelope-from
support@greencardsupport.org) with SMTP; 22 Feb 2015 16:15:07 +0200
MIME-Version: 1.0

NOTE: This seemed to make want to think it was from Cyprus but I checked the IP-- Tel Aviv.

***
support1@usagc.org

* 81.218.118.146 Bezeq International Tel Aviv Israel
74.217.224.226 Internap Network Services Corporation n/a United States
*Probable originating IP address


Return-Path: <support1@usagc.org>
Received: from relay.usagc.org (mail2.usagc.org. [74.217.224.226])
by mx.google.com with ESMTPS id y4si10187512qch.0.2015.02.08.04.18.42
for <XXXXX@gmail.com>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 08 Feb 2015 04:18:43 -0800 (PST)
Received-SPF: permerror (google.com: domain of support1@usagc.org uses a
mechanism not recognized by this client. unknown mechanisms: ))
client-ip=74.217.224.226;
Authentication-Results: mx.google.com;
spf=permerror (google.com: domain of support1@usagc.org uses a mechanism
not recognized by this client. unknown mechanisms: )) smtp.mail=support1@usagc.org
Received: from usagc.org (bzq-218-118-146.red.bezeqint.net [81.218.118.146])
by relay.usagc.org (8.14.4/8.14.4) with ESMTP id t18CIejk001032
for <XXXXXXXXXXX@gmail.com>; Sun, 8 Feb 2015 14:18:41 +0200
Message-Id: <201502081218.t18CIejk001032@relay.usagc.org>
Received: from Internal Mail-Server by Mail-SeCure (envelope-from
support1@usagc.org) with SMTP; 8 Feb 2015 14:18:41 +0200
MIME-Version: 1.0

***
v-cnfoeeo_bghlokmlho_cckihahn_cckihahn_ ... kt5307.com
Members@usagcnews.org
Members-reply@usagcnews.org

74.112.67.31 Silverpop Systems Atlanta United States

Return-Path: <v-cnfoeeo_bghlokmlho_cckihahn_cckihahn_a@bounce.usagc.mkt5307.com>
Received: from mail2338.usagc.mkt2732.com (mail2338.usagc.mkt2732.com. [74.112.67.31])
by mx.google.com with ESMTP id r2si3179844qcq.9.2014.12.12.14.59.23
for <XXXXXXXXXXXX@gmail.com>;
Fri, 12 Dec 2014 14:59:23 -0800 (PST)
Received-SPF: pass (google.com: domain of
v-cnfoeeo_bghlokmlho_cckihahn_cckihahn_ ... kt5307.com designates
74.112.67.31 as permitted sender) client-ip=74.112.67.31;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of
v-cnfoeeo_bghlokmlho_cckihahn_cckihahn_ ... kt5307.com designates
74.112.67.31 as permitted sender) smtp.mail=v-cnfoeeo_bghlokmlho_cckihahn ... kt5307.com;
dkim=pass header.i=@usagcnews.org
DKIM-Signature:
DomainKey-Signature:
Received: by mail2338.usagc.mkt2732.com id hhdpkm19if47 for <>;
Fri, 12 Dec 2014 22:56:57 +0000 (envelope-from <v-cnfoeeo_bghlokmlho_cckihahn_cckihahn_a@bounce.usagc.mkt5307.com>)
Date: Fri, 12 Dec 2014 22:56:57 +0000 (GMT)
From: USAGC Green Card Services <Members@usagcnews.org>
Reply-To: Members-reply@usagcnews.org
To: XXXXXXXX@gmail.com
Message-ID: <78334541.1370031301418425017527.JavaMail.app@rbg42.atlis1>
Subject: XXXXXXXXXX, You are Eligible
MIME-Version: 1.0

***

* 74.112.67.31 Silverpop Systems Atlanta United States
*Probable originating IP address


Return-Path: <v-cndcjjk_bkklemphce_cbhiplgm_cbhiplgm_a@bounce.usagc.mkt5307.com>
Received: from mail2338.usagc.mkt2732.com (mail2338.usagc.mkt2732.com. [74.112.67.31])
by mx.google.com with ESMTP id m66si24286933ykm.154.2014.11.12.05.11.04
for <XXXXXXXXXX@gmail.com>;
Wed, 12 Nov 2014 05:11:04 -0800 (PST)
Received-SPF: pass (google.com: domain of
v-cndcjjk_bkklemphce_cbhiplgm_cbhiplgm_ ... kt5307.com designates
74.112.67.31 as permitted sender) client-ip=74.112.67.31;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of
v-cndcjjk_bkklemphce_cbhiplgm_cbhiplgm_ ... kt5307.com designates
74.112.67.31 as permitted sender) smtp.mail=v-cndcjjk_bkklemphce_cbhiplgm ... kt5307.com;
dkim=pass header.i=@usagcnews.org
DKIM-Signature:
DomainKey-Signature:
Received: by mail2338.usagc.mkt2732.com id hcde6g19if4p for ;
Wed, 12 Nov 2014 13:10:10 +0000 (envelope-from <v-cndcjjk_bkklemphce_cbhiplgm_cbhiplgm_a@bounce.usagc.mkt5307.com>)
Date: Wed, 12 Nov 2014 13:10:10 +0000 (GMT)
From: USAGC Green Card Services <Members@usagcnews.org>
Reply-To: Members-reply@usagcnews.org
To: XXXXXXXXXXxx@gmail.com
Message-ID: <2006878489.458906121415797810381.JavaMail.app@rbg42.atlis1>
Subject: Green Card Lottery Submission
MIME-Version: 1.0

***
* 62.144.68.79 Ecotel Communication Ag n/a Germany


Return-Path: <newsletter-EMID0AA03QP0VS60A8TPN07J7IL013RJ22N@usagc-mail.org>
Received: from mx68e079.mx-exp.net (mx68e079.mx-exp.net. [62.144.68.79])
by mx.google.com with ESMTP id x7si18548230lax.124.2014.09.23.06.12.04
for <XXXXXXXXXXXX@gmail.com>;
Tue, 23 Sep 2014 06:12:05 -0700 (PDT)
Received-SPF: pass (google.com: domain of
newsletter-EMID0AA03QP0VS60A8TPN07J7IL0 ... c-mail.org designates
62.144.68.79 as permitted sender) client-ip=62.144.68.79;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of
newsletter-EMID0AA03QP0VS60A8TPN07J7IL0 ... c-mail.org designates
62.144.68.79 as permitted sender)
smtp.mail=newsletter-EMID0AA03QP0VS60A8 ... c-mail.org;
dkim=pass header.i=@emstechnology.net
X-CSA-Complaints: whitelist-complaints@eco.de
DKIM-Signature:
DomainKey-Signature:;
X-EMID: 0AA03QP0VS60A8TPN07J7IL013RJ22N
X-EMMAIL: XXXXXXXXxx@gmail.com
Feedback-ID: 18001A703QP003EJG5B:UMS:EMS
List-Unsubscribe: <http://usagc-mail.org/host/h.php?EMID=08A03QP0A8TPN07J7IL00PFRO1O&AID=32645>
From: "=?UTF-8?B?VVNBR0MgR3JlZW4gQ2FyZCBTZXJ2aWNlcw==?=" <newsletter@usagc-mail.org>
Reply-To: "=?UTF-8?B?VVNBR0MgR3JlZW4gQ2FyZCBTZXJ2aWNlcw==?=" <newsletter-EMID0AA03QP0VS60A8TPN07J7IL013RJ22N@usagc-mail.org>
To: XXXXXXXXXx@gmail.com
Subject: XXXXXXXX, don't miss this opportunity
Content-Type: multipart/alternative;
boundary="--140923151130N7.20663.Texte--"
Message-Id: <140923151130N7.20663@mscreator39.fagms.de>
MIME-Version: 1.0
Date: Tue, 23 Sep 2014 15:11:30 +0200

***
update@usagc.org

* 208.89.13.237 Liveperson New York United States


Return-Path: <update@usagc.org>
Received: from mails.liveperson.net (mails05.liveperson.net. [208.89.13.237])
by mx.google.com with ESMTP id ew7si6434778wic.97.2014.09.17.05.47.37
for <XXXXXXX@gmail.com>;
Wed, 17 Sep 2014 05:47:38 -0700 (PDT)
Received-SPF: permerror (google.com: domain of update@usagc.org uses a mechanism
not recognized by this client. unknown mechanisms: )) client-ip=208.89.13.237;
Authentication-Results: mx.google.com;
spf=permerror (google.com: domain of update@usagc.org uses a mechanism not
recognized by this client. unknown mechanisms: )) smtp.mail=update@usagc.org
From: Update <update@usagc.org>
To: =?UTF-8?B?TWFyaWthIFDDtmxsw6Q=?= <XXXXXXXXX@gmail.com>
Subject: USAGC (LTK1221303514321X)
Date: Wed, 17 Sep 2014 08:47:30 -0400
Message-ID: <201409170847300902.122130.13171@equinix.liveperson.net>
MIME-Version: 1.0

***
* 208.89.13.237 Liveperson New York United States


Return-Path: <update@usagc.org>
Received: from mails.liveperson.net (mails05.liveperson.net. [208.89.13.237])
by mx.google.com with ESMTP id wz3si24212299wjc.65.2014.09.16.05.53.00
for <XXXXXXXXXXX@gmail.com>;
Tue, 16 Sep 2014 05:53:01 -0700 (PDT)
Received-SPF: permerror (google.com: domain of update@usagc.org uses a mechanism
not recognized by this client. unknown mechanisms: )) client-ip=208.89.13.237;
Authentication-Results: mx.google.com;
spf=permerror (google.com: domain of update@usagc.org uses a mechanism not
recognized by this client. unknown mechanisms: )) smtp.mail=update@usagc.org
From: Update <update@usagc.org>
To: =?UTF-8?B?TWFyaWthIFDDtmxsw6Q=?= <>
Subject: Acknowledge: Changes to contact information (Ticket# LTK1221303514321X)
Date: Tue, 16 Sep 2014 08:52:50 -0400
Message-ID: <201409160852500646.122130.8156@equinix.liveperson.net>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_b5f_1487e85cb56.u_cHo"

This is a multi-part message in MIME format.

***
Customer-service-EMID0AA03QP19TO0ATFOM0 ... c-mail.org

* 62.144.68.79 Ecotel Communication Ag n/a Germany


Return-Path: <Customer-service-EMID0AA03QP19TO0ATFOM07FKK601030NSO@usagc-mail.org>
Received: from mx68e079.mx-exp.net (mx68e079.mx-exp.net. [62.144.68.79])
by mx.google.com with ESMTP id n16si6674622lbi.109.2014.09.06.06.50.02
for <XXXXXXXX@gmail.com>;
Sat, 06 Sep 2014 06:50:03 -0700 (PDT)
Received-SPF: pass (google.com: domain of
Customer-service-EMID0AA03QP19TO0ATFOM0 ... c-mail.org designates
62.144.68.79 as permitted sender) client-ip=62.144.68.79;
Authentication-Results: mx.google.com;
spf=pass (google.com:
domain of Customer-service-EMID0AA03QP19TO0ATFOM0 ... c-mail.org
designates 62.144.68.79 as permitted sender) smtp.mail=Customer-service-EMID0AA03QP1 ... c-mail.org
X-CSA-Complaints: whitelist-complaints@eco.de
DomainKey-Signature: X-EMID: 0AA03QP19TO0ATFOM07FKK601030NSO
X-EMMAIL: XXXXXXXXXXX@gmail.com
List-Unsubscribe: <http://usagc-mail.org/host/h.php?EMID=08A03QP0ATFOM07FKK60175EJ4V&AID=32645>
From: "=?UTF-8?B?VVNBR0MgU3VwcG9ydCBUZWFt?=" <Customer-service@usagc-mail.org>
Reply-To: "=?UTF-8?B?VVNBR0MgU3VwcG9ydCBUZWFt?=" <Customer-service-EMID0AA03QP19TO0ATFOM07FKK601030NSO@usagc-mail.org>
To: XXXXXXXXXXX@gmail.com
Subject: XXXXXXXX, Confirm your information today
Content-Type: multipart/alternative;
boundary="--140906102723U4.18639.Texte--"
Message-Id: <140906102723U4.18639@mscreator08.fagms.de>
MIME-Version: 1.0
Date: Sat, 6 Sep 2014 10:27:23 +0200

***
aiden@usagc.com

* 81.218.7.122 Bezeq International n/a Israel
70.42.35.148 Internap Network Services Corporation New York United States
*Probable originating IP address



Return-Path: <aiden@usagc.com>
Received: from mail.usagc.org (mail.usagc.org. [70.42.35.148])
by mx.google.com with ESMTP id au4si5912817igc.59.2014.07.20.06.25.09
for <XXXXXXXXXX@gmail.com>;
Sun, 20 Jul 2014 06:25:09 -0700 (PDT)
Received-SPF: permerror (google.com: domain of aiden@usagc.com uses a mechanism
not recognized by this client. unknown mechanisms: )) client-ip=70.42.35.148;
Authentication-Results: mx.google.com;
spf=permerror (google.com: domain of aiden@usagc.com uses a mechanism not
recognized by this client. unknown mechanisms: )) smtp.mail=aiden@usagc.com
Message-Id: <53cbc335.84ab320a.18ab.ffffbf97SMTPIN_ADDED_MISSING@mx.google.com>
Received: from ([81.218.7.122]) by usagc.com with MailEnable WebMail;
Sun, 20 Jul 2014 06:24:42 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--=_Part_6E1B1648C8DA467F8130B93D42CC48A0"
To: <XXXXXXXXX@gmail.com>
From: <aiden@usagc.com>
Subject: USA Green card organization
Date: Sun, 20 Jul 2014 16:24:42 +0300
X-Priority: 3
X-MSMail-Priority: Medium
X-ME-Bayesian: 0.000014

This is a multi-part message in MIME format.

***
photo@usagc.org

* 208.89.13.209 Liveperson New York United States


Return-Path: <photo@usagc.org>
Received: from mails.liveperson.net (mails.liveperson.net. [208.89.13.209])
by mx.google.com with ESMTP id gj19si13774882icb.4.2014.07.31.05.03.25
for <XXXXXXXXXXX@gmail.com>;
Thu, 31 Jul 2014 05:03:25 -0700 (PDT)
Received-SPF: permerror (google.com: domain of photo@usagc.org uses a mechanism
not recognized by this client. unknown mechanisms: )) client-ip=208.89.13.209;
Authentication-Results: mx.google.com;
spf=permerror (google.com: domain of photo@usagc.org uses a mechanism not
recognized by this client. unknown mechanisms: )) smtp.mail=photo@usagc.org
From: Photo <photo@usagc.org>
To: aiden@usagc.com
Cc: XXXXXXXXXX@gmail.com
Subject: RE: FW: USA Green card organization (LTK1221303411482X)
Date: Thu, 31 Jul 2014 08:03:22 -0400
Message-ID: <201407310803220575.122130.15061@equinix.liveperson.net>
MIME-Version: 1.0

***
81.218.118.146

Return-Path: <support1@usagc.org>
Received: from relay.usagc.org (mail2.usagc.org. [74.217.224.226])
by mx.google.com with ESMTPS id f43si11914043yhc.158.2014.07.31.05.03.01
for <XXXXXXXXXXXXXXX@gmail.com>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 31 Jul 2014 05:03:01 -0700 (PDT)
Received-SPF: permerror (google.com: domain of support1@usagc.org uses a mechanism
not recognized by this client. unknown mechanisms: )) client-ip=74.217.224.226;
Authentication-Results: mx.google.com;
spf=permerror (google.com: domain of support1@usagc.org uses a mechanism not
recognized by this client. unknown mechanisms: )) smtp.mail=support1@usagc.org
Received: from usagc.org (bzq-218-118-146.red.bezeqint.net [81.218.118.146])
by relay.usagc.org (8.14.4/8.14.4) with ESMTP id s6VC2xqK027629
for <XXXXXXXXXXXX@gmail.com>; Thu, 31 Jul 2014 15:03:00 +0300
Message-Id: <201407311203.s6VC2xqK027629@relay.usagc.org>
Received: from Internal Mail-Server by Mail-SeCure (envelope-from
support1@usagc.org) with SMTP; 31 Jul 2014 15:02:56 +0300
MIME-Version: 1.0

***
* 208.89.13.209 Liveperson New York United States


Return-Path: <support1@usagc.org>
Received: from relay.usagc.org (mail2.usagc.org. [74.217.224.226])
by mx.google.com with ESMTPS id z54si11968265yhe.67.2014.07.31.05.02.39
for <XXXXXXXXXXXXX@gmail.com>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 31 Jul 2014 05:02:39 -0700 (PDT)
Received-SPF: permerror (google.com: domain of support1@usagc.org uses a mechanism
not recognized by this client. unknown mechanisms: )) client-ip=74.217.224.226;
Authentication-Results: mx.google.com;
spf=permerror (google.com: domain of support1@usagc.org uses a mechanism not
recognized by this client. unknown mechanisms: )) smtp.mail=support1@usagc.org
Received: from usagc.org (bzq-218-118-146.red.bezeqint.net [81.218.118.146])
by relay.usagc.org (8.14.4/8.14.4) with ESMTP id s6VC2bjY027626
for <XXXXXXXXXXXX@gmail.com>; Thu, 31 Jul 2014 15:02:38 +0300
Message-Id: <201407311202.s6VC2bjY027626@relay.usagc.org>
Received: from Internal Mail-Server by Mail-SeCure (envelope-from
support1@usagc.org) with SMTP; 31 Jul 2014 15:02:33 +0300
MIME-Version: 1.0

***
Last edited by SlapHappy on Mon Mar 09, 2015 12:10 am, edited 2 times in total.
Reason: editeed headers. traced emails.
You don't want to piss me off.
User avatar
Knightmare89
New survivor
 
Posts: 5
Joined: Thu Mar 05, 2015 7:57 pm

Re: USAGC.org Green Card lottery scam

Unread postby Knightmare89 » Sun Mar 08, 2015 7:53 pm

I'm sorry I couldn't provide you with the exact thing you were asking for
but hopefully these headers will be of some use at least.
You don't want to piss me off.
User avatar
Knightmare89
New survivor
 
Posts: 5
Joined: Thu Mar 05, 2015 7:57 pm

Re: USAGC.org Green Card lottery scam

Unread postby SlapHappy » Mon Mar 09, 2015 12:12 am

Thanks for the addtional info on these guys. We have a few more email addresses and some email traces to help others find this topic to be warned.
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Re: USAGC.org Green Card lottery scam

Unread postby vinx » Fri Mar 20, 2015 7:30 pm

I was taking participation through website ovaustralia.com to take that tricky ride.
After some days I got a call on my mobile. It was a girl who put me through several question about my live style and working career stages and my current responsibility. So, seems it was like a good interview agency negotiation . I am russian and agenda was to find the way to move to Australia.
As we taking a negation, in the end she told me - I have a very good speaking language skill, good career track and everything is good for me to taking full optional visa for moving to Australia, only I do not have an ability to making vote in the country.
then she transfer immediately the call to smart guy Jessy, he is like a financial manager who is responsible for wire to make a payment for taking a spot in the visa getting process.
So, bla-bla-bla hold on the line, please take a patient, give the card details : all the numbers and CV code, so I turn my stupidity on, and continue the conversation with hm, but I already was having a feel that it is something wrong, douse too fast everything goes for charge my card, no authority like steps like a (here is I do not share my opinion)....
He taking my card detail and start to play music on background call. He's return and told me that he cannot charge my card for some amount from 600 to 1000 USD I do not remember, then he turn on his speech again and tell me some bullish like a this is good chance to take a visa and possibility to move to country not only Australia, but to New Zeland and to Canada)) what da f#ck? Canada...
And told me that he try to charge for small amount of money, dessapear with music on background and then return back, told me he cannot charge minimal amount of payment for taking my spot in the service.
I told him, I need to check with my bank couse it is smth wrong with my card maybe or my bank have a security system for making payments online.
He is get a next time when it is will be suitable for me to loot me again, and tell me he send all of official papers and necessary document about program by email, gives me phone number of the official office and told me there is online support team and I have my personal manager now, and he must to help me to past all the steps I'll get wrong to help them to loot me properly ))
Then disappear, finishing the call.
I wait some time, and get a simply email message about the site ovaustralia.com and possible opportunity I can get through that agency nothing serious, no authority papers attached.
Then I was taking a call from my bank, after half an hour. It was the security bank manager, who asked me about did I make some online or shopping actions with my card? I replied - n, it is true, I didn't do any of it. )
Then she told me that my card is stopped with the operations and freeze in service, cause they have a suspicious alerts with several charges on it from internet.
He told, that it is not possible to use that card again and card must reissued and I should take a ride to their office and get a new one.
So, then I checked the bank report with this transaction, that Jessy was did.. and found that transactions was initiated from YEKE*USAGC.ORG, several from WWW.USAG.ORG and some like that.
I start reserch a little with domain name registration, hit whois services and had found all that domain belong to USA lottery with several online representatives and phone numbers in the Eu, USA, Russia, etc...
Domains name registered with private records and it is info not shown at all, just general tracks...
So, guys this is a scam team works globally, from US and Russia I suppose to leave them out and keep your money for take leisure better... Use a general governmental organisations and check the authority status of the companies you are asking for service...
vinx
New survivor
 
Posts: 1
Joined: Fri Mar 20, 2015 7:26 pm

Re: USAGC.org Green Card lottery scam

Unread postby Knightmare89 » Fri Mar 20, 2015 7:45 pm

Oh yes, sounds familiar enough.
I'm glad you didn't lose any money at least.

I'm no moderator here but here's a few tips:

-DON'T DELETE THE EMAILS ! The people here AND maybe police will want to see them. They're good evidence.

- Post the email headers here but REMOVE YOUR OWN INFO (email, name, etc. )

- Report this to the police. Also, if you can, to the FBI Internet Crime Complaint Center (iC3).

- It's probably a good idea to report this to the Russian Embassy of Australia, too.

Hang in there.
You don't want to piss me off.
User avatar
Knightmare89
New survivor
 
Posts: 5
Joined: Thu Mar 05, 2015 7:57 pm

Re: USAGC.org Green Card lottery scam

Unread postby SlapHappy » Fri Mar 20, 2015 8:52 pm

vinx,

Can you please post all the emails you received from everyone involved? Also, Full names they used and their telephone numbers? Thanks.
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Re: USAGC.org Green Card lottery scam

Unread postby sthan » Tue Apr 21, 2015 10:40 am

Hi guys,

I just been scammed 300$, by USAGC.org, they want me to pay more for a package, their talk was suspicious, so I said I don't have the money for that, I'll call my bank and request to not process the payment.
I wish I find this site earlier....
sthan
New survivor
 
Posts: 1
Joined: Tue Apr 21, 2015 10:30 am

Re: USAGC.org Green Card lottery scam

Unread postby Wayne » Tue Apr 21, 2015 2:30 pm

At least you've found us now. If you have any other details, can you add them to the thread? Anything posted can help save others.
Click HERE for webcam blackmail/sextortion help.
Do NOT email me for sextortion help. Use the link above. If you ignore this, your message WILL be deleted.
Image
User avatar
Wayne
Site owner/"cruel and sarcastic" admin.
 
Posts: 58347
Joined: Mon Apr 16, 2012 5:13 pm

PreviousNext

Return to Scammer 419 emails.

Who is online

Users browsing this forum: No registered users and 60 guests