Fake banks, couriers, law firms, escrow and other fake sites used in scams.
#208823 by Rod S Fri Jul 04, 2014 5:37 pm
The job offer is on the one that is closed down, this website is still active

Delivered-To:
Received: by 10.112.54.230 with SMTP id m6csp138455lbp;
Mon, 9 Jun 2014 05:54:54 -0700 (PDT)
X-Received: by 10.152.42.194 with SMTP id q2mr2319084lal.39.1402318493517;
Mon, 09 Jun 2014 05:54:53 -0700 (PDT)
Return-Path: <[email protected]>
Received: from ip-219-149.dataclub.biz ([46.183.219.149])
by mx.google.com with ESMTPS id ml7si36958215lbc.36.2014.06.09.05.54.53
for <>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 09 Jun 2014 05:54:53 -0700 (PDT)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=46.183.219.149;
Authentication-Results: mx.google.com;
spf=neutral (google.com: [email protected] does not designate permitted sender hosts) [email protected]
Received: from [5.248.5.216] (port=53306 helo=[192.168.1.101])
by ip-219-149.dataclub.biz with esmtpsa (TLSv1:DHE-RSA-AES128-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1Wtz39-0000Nk-Ne
for <removed> MW; Mon, 09 Jun 2014 05:51:44 -0700
Message-ID: <[email protected]>
Date: Mon, 09 Jun 2014 08:54:50 -0400
From: Ryan Moore <[email protected]>
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.5.0
MIME-Version: 1.0
To:
Subject: Re: We offer you new position. Yours ref.ID# of vacancy - 194269
References: <[email protected]> <[email protected]> <CAKa2Ec8XuGDGDArtr8vctZ6fo0Bcw2_cLjJtJfN1THis2iUjGA@mail.gmail.com> <[email protected]> <CAKa2Ec9XO6c8w+JnqEAJ+ZASS4qbzAUU48VHhfuALhn9zbPQBg@mail.gmail.com> <CAKa2Ec_mqsJg8+mWY9s0q2X8=CQP9BkoBAjbP=hjL+hfEkSz0w@mail.gmail.com> <CAKa2Ec-vjA5cabevFciYq=K1=GNpqag50ycGQqDNcqonZvz2cg@mail.gmail.com> <[email protected]> <CAKa2Ec9xE3mfp_w7NTDx9gp0WSf4N1UeeSDwSw9npmTSAUm2jg@mail.gmail.com> <[email protected]> <CAKa2Ec8z7gDtTCFXnjG80T6aoa2Yo8h9HKSZPt8i7Rb2p=T2dg@mail.gmail.com> <CAKa2Ec8AGUnyk8GA53uO1x8vKrn+NrBTBNXXAQQ2D7PKzRcECA@mail.gmail.com> <[email protected]> <CAKa2Ec__7wsqO9bhHr-C2Jh-bWZ+L-TeWOQapAJR2Hn=twrn2w@mail.gmail.com> <[email protected]> <CAKa2Ec_NVNJoz1VFfP2L93k=V=VckfuX_5t2XkX5wC5nyYjp9A@mail.gmail.com> <CAKa2Ec_MXRtmW6LSbzmrpsUwMEwxgzFaz-+340BW-aAKMG=WbQ@mail.gmail.com>
In-Reply-To: <CAKa2Ec_MXRtmW6LSbzmrpsUwMEwxgzFaz-+340BW-aAKMG=WbQ@mail.gmail.com>
Content-Type: multipart/alternative;
boundary="------------000003070201090204020209"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ip-219-149.dataclub.biz
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - safegs.su
X-Get-Message-Sender-Via: ip-219-149.dataclub.biz: authenticated_id: [email protected]

This is a multi-part message in MIME format.
--------------000003070201090204020209
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

Hello
Thanks for your mail. you have package coming to you. our website is
having some problems because the Authorities want we should use our
European Server not US server since we are a European Company based here
in the US
please check status of package below with same users name and password
_http://shipping-panel.su/login.php_
click once you see any package in the panel always click Task
received under status and once you received package always click package
received
Advertisement

#209262 by Rod S Mon Jul 07, 2014 11:44 am
Delivered-To:
Received: by 10.112.54.230 with SMTP id m6csp250993lbp;
Wed, 25 Jun 2014 07:20:38 -0700 (PDT)
X-Received: by 10.194.92.148 with SMTP id cm20mr10224700wjb.57.1403706037676;
Wed, 25 Jun 2014 07:20:37 -0700 (PDT)
Return-Path: <[email protected]>
Received: from ip-219-149.dataclub.biz ([46.183.219.149])
by mx.google.com with ESMTPS id e6si20358959wix.75.2014.06.25.07.20.23
for
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 25 Jun 2014 07:20:24 -0700 (PDT)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=46.183.219.149;
Authentication-Results: mx.google.com;
spf=neutral (google.com: [email protected] does not designate permitted sender hosts) [email protected]
Received: from localhost ([::1]:36424 helo=ip-219-149.dataclub.biz)
by ip-219-149.dataclub.biz with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1WznzD-0004DC-El
for ; Wed, 25 Jun 2014 07:15:43 -0700
Received: from 178.157.82.32 ([178.157.82.32]) by 46.183.219.149 (Horde
Framework) with HTTP; Wed, 25 Jun 2014 14:15:43 +0000
Date: Wed, 25 Jun 2014 14:15:43 +0000
Message-ID: <[email protected]>
From: [email protected]
To:
Subject: Re: We offer you new position. Yours ref.ID# of vacancy - 194269
References: <[email protected]>
<[email protected]>
<CAKa2Ec8z7gDtTCFXnjG80T6aoa2Yo8h9HKSZPt8i7Rb2p=T2dg@mail.gmail.com>
<CAKa2Ec8AGUnyk8GA53uO1x8vKrn+NrBTBNXXAQQ2D7PKzRcECA@mail.gmail.com>
<[email protected]>
<CAKa2Ec__7wsqO9bhHr-C2Jh-bWZ+L-TeWOQapAJR2Hn=twrn2w@mail.gmail.com>
<[email protected]>
<CAKa2Ec_NVNJoz1VFfP2L93k=V=VckfuX_5t2XkX5wC5nyYjp9A@mail.gmail.com>
<CAKa2Ec_MXRtmW6LSbzmrpsUwMEwxgzFaz-+340BW-aAKMG=WbQ@mail.gmail.com>
<[email protected]>
<CAKa2Ec9kYTxXHwWL3vX8mdKnfxBQp0j3Ct01bYFLPy43FA999w@mail.gmail.com>
<CAKa2Ec9g8pA_uO_9kdxQay=_dAHq0U+XbYbOCa4QsYR8i_aqvQ@mail.gmail.com>
<[email protected]>
<CAKa2Ec9D=NRGUQO62jcLpqcQ1d1sBw_6A4-2B0EJO1_KiBnW1A@mail.gmail.com>
<[email protected]>
<CAKa2Ec_n5c9yKJHHQDOnYKWHs1FOxfg5dRA_B-2gkqZsFQpgKQ@mail.gmail.com>
<[email protected]>
<CAKa2Ec9VDVtjYG+A2hGB5btAhyFdf-Y3-PrgEX4sX37Tr1p0VA@mail.gmail.com>
<[email protected]>
<CAKa2Ec-TsnC392rHWCp5rjd5gJx0zJCFwR6b6VDZjLkC5+woQQ@mail.gmail.com>
In-Reply-To: <CAKa2Ec-TsnC392rHWCp5rjd5gJx0zJCFwR6b6VDZjLkC5+woQQ@mail.gmail.com>
User-Agent: Internet Messaging Program (IMP) H5 (6.1.4)
Content-Type: text/plain; charset=UTF-8; format=flowed; DelSp=Yes
MIME-Version: 1.0
Content-Disposition: inline
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ip-219-149.dataclub.biz
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - safegs.su
X-Get-Message-Sender-Via: ip-219-149.dataclub.biz: authenticated_id: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:

Good morning
Yes your salary will be sent to you on the date 30, that's
next monday. Till that moment please be ready for incoming
pack's! my number is +(321) 558-7342 call me if there will
be serios problems, i'm working 2 jobs right now, so it's a
little hard to answer all the calls.

Thank you,
Mark Williams.
#209302 by Mike Wilson Mon Jul 07, 2014 6:29 pm
The active content is located here http://safegs.su/

The website is in the process of being reported for fraud.

It is ALWAYS a scam
If the pet seller or shipper asks for money to be sent via Western Union, Money Gram, any brand of gift card. Walmart To Walmart , Zelle , PayPal friends and family option, or mentions Cameroon
#209741 by Rod S Thu Jul 10, 2014 4:22 pm
Delivered-To:
Received: by 10.112.54.230 with SMTP id m6csp250993lbp;
Wed, 25 Jun 2014 07:20:38 -0700 (PDT)
X-Received: by 10.194.92.148 with SMTP id cm20mr10224700wjb.57.1403706037676;
Wed, 25 Jun 2014 07:20:37 -0700 (PDT)
Return-Path: <[email protected]>
Received: from ip-219-149.dataclub.biz ([46.183.219.149])
by mx.google.com with ESMTPS id e6si20358959wix.75.2014.06.25.07.20.23
for
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 25 Jun 2014 07:20:24 -0700 (PDT)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=46.183.219.149;
Authentication-Results: mx.google.com;
spf=neutral (google.com: [email protected] does not designate permitted sender hosts) [email protected]
Received: from localhost ([::1]:36424 helo=ip-219-149.dataclub.biz)
by ip-219-149.dataclub.biz with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1WznzD-0004DC-El
for ; Wed, 25 Jun 2014 07:15:43 -0700
Received: from 178.157.82.32 ([178.157.82.32]) by 46.183.219.149 (Horde
Framework) with HTTP; Wed, 25 Jun 2014 14:15:43 +0000
Date: Wed, 25 Jun 2014 14:15:43 +0000
Message-ID: <[email protected]>
From: [email protected]
To:
Subject: Re: We offer you new position. Yours ref.ID# of vacancy - 194269
References: <[email protected]>
<[email protected]>
<CAKa2Ec8z7gDtTCFXnjG80T6aoa2Yo8h9HKSZPt8i7Rb2p=T2dg@mail.gmail.com>
<CAKa2Ec8AGUnyk8GA53uO1x8vKrn+NrBTBNXXAQQ2D7PKzRcECA@mail.gmail.com>
<[email protected]>
<CAKa2Ec__7wsqO9bhHr-C2Jh-bWZ+L-TeWOQapAJR2Hn=twrn2w@mail.gmail.com>
<[email protected]>
<CAKa2Ec_NVNJoz1VFfP2L93k=V=VckfuX_5t2XkX5wC5nyYjp9A@mail.gmail.com>
<CAKa2Ec_MXRtmW6LSbzmrpsUwMEwxgzFaz-+340BW-aAKMG=WbQ@mail.gmail.com>
<[email protected]>
<CAKa2Ec9kYTxXHwWL3vX8mdKnfxBQp0j3Ct01bYFLPy43FA999w@mail.gmail.com>
<CAKa2Ec9g8pA_uO_9kdxQay=_dAHq0U+XbYbOCa4QsYR8i_aqvQ@mail.gmail.com>
<[email protected]>
<CAKa2Ec9D=NRGUQO62jcLpqcQ1d1sBw_6A4-2B0EJO1_KiBnW1A@mail.gmail.com>
<[email protected]>
<CAKa2Ec_n5c9yKJHHQDOnYKWHs1FOxfg5dRA_B-2gkqZsFQpgKQ@mail.gmail.com>
<[email protected]>
<CAKa2Ec9VDVtjYG+A2hGB5btAhyFdf-Y3-PrgEX4sX37Tr1p0VA@mail.gmail.com>
<[email protected]>
<CAKa2Ec-TsnC392rHWCp5rjd5gJx0zJCFwR6b6VDZjLkC5+woQQ@mail.gmail.com>
In-Reply-To: <CAKa2Ec-TsnC392rHWCp5rjd5gJx0zJCFwR6b6VDZjLkC5+woQQ@mail.gmail.com>
User-Agent: Internet Messaging Program (IMP) H5 (6.1.4)
Content-Type: text/plain; charset=UTF-8; format=flowed; DelSp=Yes
MIME-Version: 1.0
Content-Disposition: inline
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ip-219-149.dataclub.biz
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - safegs.su
X-Get-Message-Sender-Via: ip-219-149.dataclub.biz: authenticated_id: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:

Good morning
Yes your salary will be sent to you on the date 30, that's
next monday. Till that moment please be ready for incoming
pack's! my number is +(321) 558-7342 call me if there will
be serios problems, i'm working 2 jobs right now, so it's a
little hard to answer all the calls.

Thank you,
Mark Williams.

Who is online

Users browsing this forum: No registered users and 53 guests