Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Phishers impersonating Google / Gmail

DO NOT click on any links in these emails.

"Please pay attention" <news@gmail.com>

Unread postby SlapHappy » Mon Dec 22, 2014 7:58 pm

* 67.192.111.21 Rackspace Hosting San Antonio United States

Return-Path: <news@gmail.com>
Received: from o1.mail1.sg.cartserver.com (o1.mail1.sg.cartserver.com. [50.31.36.8])
by mx.google.com with ESMTPS id ag17si24290407pac.113.2014.12.22.00.50.08
for <
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 22 Dec 2014 00:50:09 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning news@gmail.com does
not designate 50.31.36.8 as permitted sender) client-ip=50.31.36.8;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning news@gmail.com does not designate
50.31.36.8 as permitted sender) smtp.mail=news@gmail.com;
dkim=pass header.i=@americommerce.com;
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=americommerce.com;
h=mime-version:sender:from:to:reply-to:subject:content-type;
s=smtpapi; bh=yS9lnzHOQVkfL1tB1r0aKehhvnU=; b=LFG13HZG5PLI/slz5r
xrP53WuwqZBzjskSF6a4amvJJ/uS6JB58j7QpVpjSxwrZDqIwaAeBs5yzi+Gg885
7o8kEz3vPm2DTO8qvHD+GtkSzCcKNHkKODF+Ta9WeUdf7S8vhbzXhIGJYoIwalDH
zqF1khL841RsIHOAH6m+QP95U=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sendgrid.info;
h=mime-version:sender:from:to:reply-to:subject:content-type:x-feedback-id;
s=smtpapi; bh=yS9lnzHOQVkfL1tB1r0aKehhvnU=; b=btgru4woObut5OIYmu
Q5gLVCOezXUv1FCJm9kVQ4iGgTfCVzykxMqDE42hE4mxkvqE9Cn7XXP67OqbO/kY
aCLUA7njybaWDZ1y4ukyAcxP3shwC03wDiqcdqYb92M3QpcRtPEquApiZELExB6T
J7cX/6KZpDtgrQuOzzN0AX/FM=
Received: by filter-371.sjc1.sendgrid.net with SMTP id filter-371.22436.5497DB3E9
2014-12-22 08:50:06.683871926 +0000 UTC
Received: from 580454-WEB30 (unknown [67.192.111.21])
by ismtpd-044 (SG) with ESMTP id 14a71306c42.2d7c.4d219
for Mon, 22 Dec 2014 08:50:06 +0000 (UTC)
MIME-Version: 1.0
Sender: "Please pay attention" <news@gmail.com>
From: "Please pay attention" <news@gmail.com>
To:
Reply-To: "Please pay attention" <news@gmail.com>
Date: 22 Dec 2014 02:50:06 -0600
Subject: Notice Confirmation - Credit Card Declined
Content-Type: multipart/alternative;
boundary=--boundary_813_143b2328-9fb7-47a8-9e49-aade02e7b0b6
Message-ID: <14a71306c42.2d7c.4d219@ismtpd-044>
X-SG-EID: 8DYt/+7EOhdpqhqdIRjnoXyvMQ8hgjrwK97JMAbEk/zdiEWmbb+fp0Xn6D3SjKe8pr/gllfCFmoCN5
P3SkU/UHzGUqJVWEnSXnt0zDbNL8qE6OjX2hPvwRek/z3EkoE13rfbNQdQi8YBHQsbmyzHZ6vFCaXw
4CIkc7p7dw6cFoE=
X-SG-ID: QFhYLX5ou5EoqRKCveQAKy0y7NVIzEJ1/8pp7pgICt2/n63sad5s99GBLgc6D1xSkcZc204zDbb9aJ
sX8Vx8zxnUA6AuHRumrhOz2JHlYRPiRNi6qN+ukPh9F9SQNQ9pYMdvVNO223BcIXk40vKnG2tXL6Dh
T2ymApci75yiR1w=
X-Feedback-ID: 132871:0mSQBffqgmGFbJKdfrD8oQxhWhbfJJ9wlPl8rawokU4=:BOdpATYxIsDgdLotVuDoGMSWeBJcDGM+gFCiAP9j6ak=:SG

nothing in body of email, except a trace to see if you opened it. .
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

gpanniversary@163.com "Google®"<noreply@grainfo.biz>

Unread postby SlapHappy » Sun Jan 04, 2015 3:34 pm

* 5.133.61.11 Wave-max S.r.l. Russi Italy

Return-Path: <noreply@grainfo.biz>
Received: from plesk-02.n4web.net ([83.166.184.241])
by mx.google.com with ESMTPS id de1si104986618wjc.85.2015.01.04.01.17.27
for
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 04 Jan 2015 01:17:28 -0800 (PST)
Received-SPF: none (google.com: noreply@grainfo.biz does not designate permitted
sender hosts) client-ip=83.166.184.241;
Authentication-Results: mx.google.com;
spf=none (google.com: noreply@grainfo.biz does not designate permitted sender
hosts) smtp.mail=noreply@grainfo.biz
Message-Id: <54a90528.41b3c20a.0871.ffffc607SMTPIN_ADDED_MISSING@mx.google.com>
Received: (qmail 31604 invoked from network); 4 Jan 2015 08:58:26 +0000
Received: from unknown (HELO User) (5.133.61.11)
by smtp.nodefour.net with SMTP; 4 Jan 2015 08:58:16 +0000
Reply-To: <gpanniversary@163.com>
From: "Google®"<noreply@grainfo.biz>
To: winner@google.org
Subject: Batch A Listing.
Date: Sun, 4 Jan 2015 10:10:02 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00D1_01C2A9A6.502495EC"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000



Dear Google User.

Attached to this email is your anniversary notification for being an active user of Google.

Sincerely.
Lawrence "Larry" Page
Co-founder and CEO of Google Inc™


attachment;
filename="Google User.pdf"
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

noreply@g.com

Unread postby firefly » Tue Mar 03, 2015 7:00 pm

Email:

Dear Gmail User,

your two incoming mails were placed on pending status due to the recent upgrade to our database,

In order to receive this messages clickhere to login and wait for response from Gmail.

We apologies for any inconvenience and appreciate your understanding.

Regards,

Gmail


Return-Path: <www-data@proton-tech.hu>
Received: from mail.proton-tech.hu (proton-tech.hu. [92.43.201.25])
Subject: Seven Unread Mail
X-PHP-Originating-Script: 33:logdb.php
From: G Service! <noreply@g.com>
Date: Tue, 3 Mar 2015

Originating IP: 92.43.201.25
Originating ISP: Mediacenter Hungary Kft.
Country of Origin: Hungary

Phishing link: http:/ /www. kibso.org/gmail-webmail.html
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

Re: noreply@g.com

Unread postby firefly » Tue Mar 03, 2015 7:03 pm

Dear Gmail User,

your two incoming mails were placed on pending status due to the recent upgrade to our database,

In order to receive this messages clickhere to login and wait for response from Gmail.

We apologies for any inconvenience and appreciate your understanding.

Regards,

Gmail


Return-Path: <www-data@epsisoft-concept.com>
Received: from ns367008.ip-94-23-22.eu (epsisoft-concept.com. [94.23.22.129])
Subject: Unread Mail
X-PHP-Originating-Script: 33:lemail.php(115) : eval()'d code
From: Email Service <noreply@g.com>
Date: Tue, 3 Mar 2015

Originating IP: 94.23.22.129
Originating ISP: Ovh Sas
Country of Origin: France

Phishing link: http:/ /www. kibso.org/gmail-webmail.html
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

<no-reply@google accounts.com> <stephen.foster2@nhcs.net>

Unread postby SlapHappy » Tue Mar 31, 2015 6:09 pm

Return-Path: <stephen.foster2@nhcs.net>
Received: from mail-wi0-f174.google.com (mail-wi0-f174.google.com. [209.85.212.174])
by mx.google.com with ESMTPS id a6si15788794wjf.92.2015.03.29.20.55.16
for <>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 29 Mar 2015 20:55:17 -0700 (PDT)
Received-SPF: pass (google.com: domain of stephen.foster2@nhcs.net designates
209.85.212.174 as permitted sender) client-ip=209.85.212.174;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of stephen.foster2@nhcs.net designates
209.85.212.174 as permitted sender) smtp.mail=stephen.foster2@nhcs.net
Received: by mail-wi0-f174.google.com with SMTP id g7so86466901wib.1
for <>; Sun, 29 Mar 2015 20:55:16 -0700 (PDT)
X-Google-DKIM-Signature:
X-Gm-Message-State:
MIME-Version: 1.0
X-Received: by 10.180.75.212 with SMTP id e20mr18207273wiw.26.1427687715374;
Sun, 29 Mar 2015 20:55:15 -0700 (PDT)
Received: by 10.194.20.9 with HTTP; Sun, 29 Mar 2015 20:55:15 -0700 (PDT)
Date: Mon, 30 Mar 2015 04:55:15 +0100
Message-ID: <CAGzOupfrvAVFixE1E-wbTqc8HsK9sMG1GKATnELJcQU5ouZc=Q@mail.gmail.com>
Subject: Termination Request will soon be processed
From: "Google <no-reply@google accounts.com>" <stephen.foster2@nhcs.net>
To: undisclosed-recipients:;
Content-Type: multipart/mixed; boundary=f46d043890a5208f4105127973f8
Bcc: xxxxx



Attachments area
Preview attachment
DEAR VALUED USER.pdf
[PDF]
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

wkveqx@grainfo.us

Unread postby SlapHappy » Thu May 14, 2015 5:54 pm

85.20.31.110 Bt Italia S.p.a. n/a Italy

Return-Path: <wkveqx@grainfo.us>
Received: from smtp.chelco.com (smtp.chelco.com. [204.49.162.35])
by mx.google.com with ESMTP id g76si12605647ykg.105.2015.05.14.09.51.22
for
Thu, 14 May 2015 09:51:22 -0700 (PDT)
Received-SPF: none (google.com: wkveqx@grainfo.us does not designate
permitted sender hosts) client-ip=204.49.162.35;
Authentication-Results: mx.google.com;
spf=none (google.com: wkveqx@grainfo.us does not designate permitted
sender hosts) smtp.mail=wkveqx@grainfo.us
X-ASG-Debug-ID: 1431621836-07312b389083490002-OmKWeg
Received: from User (85-20-31-110-static.albacom.net [85.20.31.110]) by
smtp.chelco.com with ESMTP id 4gsXUQUDVhDeyRRk; Thu, 14 May 2015 1
1:44:09 -0500 (CDT)
X-Barracuda-Envelope-From: wkveqx@grainfo.us
X-Barracuda-AUTH-User: marketing
X-Barracuda-Apparent-Source-IP: 85.20.31.110
Reply-To: wkveqx@grainfo.us
From: Google® <wkveqx@grainfo.us>
To: recipient
Subject: Batch A Listing.
Date: Thu, 14 May 2015 18:44:08 +0200
X-ASG-Orig-Subj: Batch A Listing.
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_000A_01C2A9A6.27BAC186"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Barracuda-Connect: 85-20-31-110-static.albacom.net[85.20.31.110]
X-Barracuda-Start-Time: 1431621845
X-Barracuda-URL: https://192.168.162.35:443/cgi-mod/mark.cgi
X-Virus-Scanned: by bsmtpd at chelco.com
X-Barracuda-BRTS-Status: 1
X-Barracuda-Spam-Score: 1.50
X-Barracuda-Spam-Status: No, SCORE=1.50 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=5.0 tests=FORGED_MUA_OUTLOOK, MISSING_MID, NO_REAL_NAME, TO_MALFORMED
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.18931
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------------------------------
0.14 MISSING_MID Missing Message-Id: header
0.00 TO_MALFORMED To: has a malformed address
0.00 NO_REAL_NAME From: does not include a real name
1.36 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Message-Id: <20150514165121.A52446CA380@smtp.chelco.com>



Dear Google User.

Attached to this email is your anniversary notification for being an active user of Google.

Sincerely.
Lawrence "Larry" Page
Co-founder and CEO of Google Inc™


Attachments area
Preview attachment
Google Active User.pdf
[PDF]
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

"Google Cooperation"<googlecoopration@googlemail.com>

Unread postby SlapHappy » Fri Sep 18, 2015 5:51 pm

120.140.120.143 Packet One Networks Sdn Bhd, Internet Services Pro Kuala Lumpur Malaysia

Return-Path: <googlecoopration@googlemail.com>
Received: from spam.gwnu.ac.kr (spam.gwnu.ac.kr. [202.30.48.29])
by mx.google.com with ESMTP id hv6si5739878pac.157.2015.09.17.07.34.25;
Thu, 17 Sep 2015 07:34:29 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning
googlecoopration@googlemail.com does not designate 202.30.48.29 as permitted
sender) client-ip=202.30.48.29;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning googlecoopration@googlemail.com
does not designate 202.30.48.29 as permitted sender)
smtp.mailfrom=googlecoopration@googlemail.com;
dmarc=fail (p=QUARANTINE dis=QUARANTINE) header.from=googlemail.com
Message-Id: <55facf75.66c2420a.6969e.ffffa200SMTPIN_ADDED_MISSING@mx.google.com>
Received: from external ([120.140.120.143])
(authenticated authid=test)
by spam.gwnu.ac.kr (1.0) id t8HEVNO00D45;
Thu, 17 Sep 2015 23:31:40 +0900
X-SmartFilter: UNIQ,F14C3FF44F67515256649D1DE1E6A9F9,t8HEVNO00D45
X-SmartFilter: AUTH,t8HEVNO00D45,test
X-SmartFilter: FROM,t8HEVNO00D45,googlecoopration@googlemail.com
Reply-To: <larrypage042@gemail.com>
From: "Google Cooperation"<googlecoopration@googlemail.com>
Subject: Google Notification Letter !!""
Date: Thu, 17 Sep 2015 16:31:44 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0002_01C2A9A6.1EC60100"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

This is a multi-part message in MIME format.

------=_NextPart_000_0002_01C2A9A6.1EC60100
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit



Dear Google User,

This is to officially inform you that you have been selected as a winner for using Google services, attached is our official notification letter for your perusal.

Sincerely.
Larry Page
CEO & Co-founder of Google

Attachments area
Preview attachment Google Official Notification Letter.pdf

PDF
Google Official Notification Letter.pdf
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

From: Google onlineconfirmationcentre@gmail.com

Unread postby SlapHappy » Fri Nov 06, 2015 6:45 pm

Return-path: <onlineconfirmationcentre@gmail.com>
Envelope-to: xxx
Delivery-date: Fri, 06 Nov 2015 18:28:13 +0100
Received: from mail-wi0-f195.google.com ([209.85.212.195]:33883)
by xxx with esmtps (TLSv1.2:AES128-GCM-SHA256:128)
(Exim 4.86)
(envelope-from <onlineconfirmationcentre@gmail.com>)
id 1Zukny-0004zS-Mw
for xxx; Fri, 06 Nov 2015 18:28:13 +0100
Received: by wimw14 with SMTP id w14so5326246wim.1
for <xxx>; Fri, 06 Nov 2015 09:27:22 -0800 (PST)
DKIM-Signature:
MIME-Version: 1.0
X-Received: by 10.194.76.178 with SMTP id l18mr16217067wjw.75.1446830842420;
Fri, 06 Nov 2015 09:27:22 -0800 (PST)
Received: by 10.28.129.138 with HTTP; Fri, 6 Nov 2015 09:27:22 -0800 (PST)
Date: Fri, 6 Nov 2015 18:27:22 +0100
Message-ID: <CAKJqYntLVj2RwfGjYOS9F7LyOLweXS+oN4K4zR+gNCTmta38rw@mail.gmail.com>
Subject: IMAGE
From: Google <onlineconfirmationcentre@gmail.com>
To: xxx
Content-Type: multipart/alternative; boundary=047d7bfcf1ee69a4210523e28ecb
X-Spam-Status: No, score=-2.0
X-Spam-Score: -19
X-Spam-Bar: --
X-Ham-Report: Spam detection software, running on the system xxxx,
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: A friend sent you an image using Google documents, Please
view the image through the link below and confirm if you know this friend.
http:/ /google-drive. postosaojorgeconcordia. com.br/Preview- Document/ [...]
Content analysis details: (-2.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(onlineconfirmationcentre[at]gmail.com)
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/Dns ... nsbl-block
for more information.
[URIs: postosaojorgeconcordia.com.br]
-0.0 SPF_PASS SPF: sender matches SPF record
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
X-Spam-Flag: NO
Message 1 of 3 < > change-formatchange-format



A friend sent you an image using Google documents, Please view the image through the link below and confirm if you know this friend.
http:/ /google-drive.postosaojorgeconcordia. com.br/ Preview-Document/

Thank you for using Google Documents

Google Team.
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Valeria.V.Donnelly@realmaestro.net

Unread postby firefly » Sat Dec 05, 2015 6:27 am

Email:

Hello,

You recently requested an email subscription to Google Trading Application.
We can't wait to send the updates you want via email, so please click the
following link to activate your subscription immediately:

Click To Activate Your Google Application Account Now!

Regards,

Valeria V
Google Trading

(If the link above does not appear clickable or does not open a browser
window when you click it, copy it and paste it into your web browser's
Location bar.)

--

This message was sent to you by Google Trading Application.
You received this message because someone requested a subscription
to the Google Trading Application.
If you received this in error, please disregard.


Return-Path: bounce@realmaestro.net
Received: from slot11.realmaestro.net (slot11.realmaestro.net. [80.86.87.135])
From: "Valeria V. Donnelly" <Valeria.V.Donnelly@realmaestro.net>
Reply-To: Valeria.V.Donnelly@realmaestro.net
Subject: RE: we did not receive you confirmation

Originating IP: 80.86.87.135
Originating ISP: Plusserver Ag
Country of Origin: Germany

Phishing link: http:/ /track. realmaestro.net/redirect.php?id=3DPGFiMTRlMGI3Y2=
YyNmU3ZTQ1Y2Q0ZjAyMTNjMTY1OGQ2QHRyYWNrLnJlYWxtYWVzdHJvLm5ldD4%3D&amp;ref=3D=
aHR0cDovL2d0Lm5leHRtaW51dGVvZmZlci5jb20%2FUzI9M0RwZXRlcnNjaHdhcnR6ZXIxMUBnb=
WFpbC5jb20%3D&amp;e=3D1
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

cab.mathieu.lafond1@hotmail.com google9791@daum.net

Unread postby SlapHappy » Fri Jan 22, 2016 6:22 pm

* 41.189.35.81 Cote D'ivoire Telecom Abidjan Cote D'Ivoire

Return-Path: <google9791@hanmail.net>
Received: from smail-10.hanmail.net (smail-10.daum.net. [211.43.197.66])
by mx.google.com with ESMTP id s17si6518020igr.62.2016.01.20.08.10.18
for
Wed, 20 Jan 2016 08:10:21 -0800 (PST)
Received-SPF: pass (google.com: domain of google9791@hanmail.net
designates 211.43.197.66 as permitted sender) client-ip=211.43.197.66;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of google9791@hanmail.net designates
211.43.197.66 as permitted sender) smtp.mailfrom=google9791@hanmail.net
Received: from wwl1764.hanmail.net ([117.52.3.214])
by smail-10.hanmail.net (8.12.1/8.9.1) with ESMTP id u0KG9gD8024706;
Thu, 21 Jan 2016 01:09:45 +0900
Received: (from hanadmin@localhost)
by wwl1764.hanmail.net (8.12.9/8.9.1) id u0KG9a8Q002429
for <XXXXXX@gmail.com>; Thu, 21 Jan 2016 01:09:36 +0900
X-Originating-IP: [41.189.35.81]
From: "LOTERIE MICROSOFT" <google9791@hanmail.net>
Sender: google9791@daum.net
Organization:
To: <google9791@hanmail.net>
Subject: FW: Tr: re : fw: CONFIRMATION DE LOTE‏‏‏‏‏‏‏‏‏‏‏‏‏‏‏‏‏‏‏‏‏ (CONFIRMATION OF LAND)
X-Mailer: Daum Web Mailer 1.2
Date: Thu, 21 Jan 2016 01:09:34 +0900 (KST)
Message-Id: <20160121010934.HM.00000000000044Q@google9791.wwl1764.hanmail.net>
Errors-To: <google9791@daum.net>
X-HM-UT: qvs+stlid0ILUrg74CBOInesBVt3sRH+B2ZXGi8uOAU=
X-HM-FIGURE: qvs+stlid0Jha+W2K/Epr51+6szpa24Z
MIME-Version: 1.0
X-Hanmail-Attr: fc=1
Content-Type: multipart/mixed; boundary="1453306174.DaumWebMailer."



Nous vous contactons par cette présente lettre pour vous informer que vous êtes bénéficiaire de la somme de 250.000 EUROS a loterie organiser par la LOTERIE MICROSOFT WINDOWS 2016. Ceci n'étant donc pas un spam ni un virus, veuillez trouver en fichier joint votre notification de gain. Pour la réclamation de votre gain veuillez entrer en contact avec Me. MATHIEU LAFOND par courrier électronique Huissier accrédité à cette tombola.
Contact E-mail cab.mathieu.lafond1@hotmail.com

Tel mobil: +22 502 098 354

Cordialement,
LOTERIE DE LA MICROSOFT




2 Attachments
Preview attachment TICKET.JPG
[Image]
Preview attachment NOTIFICATION_DE_GAIN_MICROSOFT_CORP_2016(1).pdf
[PDF]
===

We will contact you by this present letter informing you that you are a beneficiary of the sum of 250.000 EUROS a lottery organized by the MICROSOFT WINDOWS LOTTERY 2016. This is therefore not a spam or a virus, please find attached file your winning notification. To claim your prize please contact me. MATHIEU LAFOND Bailiff accredited by email to this raffle.
Contact E-mail cab.mathieu.lafond1@hotmail.com

Mobile Phone: +22 502 098 354

Regards,
LOTTERY OF MICROSOFT
=
+22502098354
Number billable as mobile number
Country or destination Côte d'Ivoire
City or exchange location
Original network provider* Atlantique Cellulaire (MOOV)
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

PreviousNext

Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 11 guests