Advance fee loan scams and fraudulent loan sites.
#197120 by jmdewall Thu Apr 10, 2014 6:25 pm
I am posting the header to the email I received below. I appreciate any info provided. Thanks!

From ALEX. KEN. Thu Apr 10 12:16:19 2014
X-Apparently-To: xxxxxxxxxxx via 72.30.239.181; Thu, 10 Apr 2014 21:53:42 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of blumail.org designates 209.85.216.171 as permitted sender)
bWF0ZSBhbmQgYWNjcmVkaXRlZCBpbnRlcm5hdGlvbmFsIGZpbmFuY2lhbCBp
bnZlc3RtZW50IGNvbXBhbnkgLiDCoFdlIGFyZSByZWFkeSB0byBncmFudCB5
b3UgbG9hbiBmb3IgdGhpcyBkZWFsLGRvIHRlbGwgdXMgdGhlIHRvdGFsIGFt
b3VudCBvZiBtb25leSB5b3UgbmVlZGVkIGFzIGEgbG9hbiBzbyB0aGF0IHdl
IGNhbiBzZW5kIHlvdSBsb2FuIHRlcm1zLiBXZSB3YWl0IHlvdQEwAQEBAQN0
ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzE2
X-YMailISG: 9RIWA_gWLDsi9gWaCpiUiHZ33DSbGgcFoj8_LrYZH9D84T_Z
6EMAcqkiMRws42aveqli7pjjETULf03.F3iDQ.nKogk7HedFLPuTZPr38GS6
9rRnmt3gC9vPBUVT7DsXOo6NTABjS6i2ehoDTIVoe9s.MbcTZGM.VRR8jL4S
eilMLfhaF4ZUbdFqWwCsgqHl5HycvazhyEG0cfdh8po1.syQxozkDRnc5H6S
TRb0GHUTnAlV8LsznKPv_RBJiUXzJwYGXc.cJkbrLzoTUilj2AeilPFwQiAM
dXLmJpQfFeHp_5YV7mj_L4IV44lg9Xw26..TjEVj2OcH3zOxKOTVzWY6uLAZ
v2LNyiyxu1AqOCmWPX.41HJB8paj8q6ldacprC5QZqxXikCOeQ8ynves2on0
wYdZscFfCbp1rtX_och2CIPQuqbCgfqbzuF9kUZRwWWLKyuzO_2PXAXB3Mg0
QWnokBUHYN3PgjSNqzKhHk3N94U1WtoGfd4qrlyoBp.2VqEQWt9oHx0PlHjU
k_pLYlba08sEo6ujChTbZt8Vdk8TyInQKg5XldR_kAgmQOw8HjpS4FVmntSp
DFsMDd3y7CcTzE08iJ9Kl6am4t3iSRNzhKt00QVs0c5lg4WKrXAOCGjI8lQ5
ELwHwBIPDj3MwSxtkv1cOyr6i6CUVPJHCTNppCt3J_BEwyVlQHD8DmmK5Cq7
zgagl0TA9FmFrxFSja3Zkemp1TlNdap7h1lloTTncObn1xOjNR_LspM_YbYO
d0lKtRVb1LnHRdHKPgTb1EO9wRS_bumIkynA7Q51V0NnWrx3BN.PaTpinp7Z
74RDKAT4H9dJZBsOYb9L_BO52XTfNSTfzte41bBGVnUDSS5LDG0R6TIbjzCD
s79urPSKLnUiCiLDjYAacVYg6Pb7.Wi4JnHLHo9HxsrkVf8uRaFcV7._0nxX
GlOYy8uGa_eN_B4Yc09rgXwkc0JPe6yI9AGN1xX7TC9i45vjh9xP.rqWobXy
LhLTUx05manJ0wQ4xWk0nD9uQZJHfourKT7Gm9cVvV7eWC4u1iJV0lbBLUQz
n9JbX3Qyb34Jtrp5zQtOT0jfGDl2pAUhDDqENTdIiLM1yjTKhNFtnK2_Zu4x
Y.rsWnxTzGqyJKxhT0fofvnftJDDg_Pbi5ulWloHhskic0bKHyBg86JCHOiL
UByTlEdM0LlA9jJEWl0EdQbbsAchyPBlFcsr2oL_bFCo2nzfJ.yEKw9g9QPg
B3rXe61svF1mwWs4MNJj88TkADhLInY49qUXQmPUdUEa8FWt60PSRbU9bLJR
VNx.jPiml.HxHH.gZvb1uX9_cKw73aqkbUw0kisaXXJi_JiXcL1VenP4LlCt
vwrIIYK.DtYsCExpDRaUYoAzEvKw9GQpYLkVRjpvE.st3NF2xm.MFf.QnmM4
s4UUonmOxo6L_AWiDTxGaMJJ_NqSWQvmsHr4PCmqtiYPKe8.bbnyDXNR0N1s
oCCUcX4j4vmOkzpaD4HS3omNeNuSC5vBB8bPe5m_9HW_qEMB
X-Originating-IP: [209.85.216.171]
Authentication-Results: mta1188.mail.bf1.yahoo.com from=blumail.org; domainkeys=neutral (no sig); from=blumail.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail-qc0-f171.google.com) (209.85.216.171)
by mta1188.mail.bf1.yahoo.com with SMTPS; Thu, 10 Apr 2014 19:16:19 +0000
Received: by mail-qc0-f171.google.com with SMTP id c9so4955152qcz.30
for <xxxxxxxxxxxxxxx>; Thu, 10 Apr 2014 12:16:19 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:date:message-id:subject:from:to
:content-type;
bh=2tDN9wIhuRy9Je3Mkr8XmcBAHUDpdhSutJ3oQVsCBGs=;
b=RBc2a/xjPyBjS/sp+5hSYzy56xka4UrBtFVJRmxw+P1tjyWImzeuVjrMe6hAxx2cYU
jVzTL1sSFtGrjgA66ay36GWioAPMCCmPPU/qC567OcC+SVvqlQ1huwId6B8N7ZaenyGm
gcpS+U6pY1zsVFwDlUa1ZYN9R7eb4u8dxkh22REj0NulMkyp4jcv4tK8vxaOS7P2sR7N
GvJI5CGdwFTTkwztpqibkzy4h7nlUOzHWoFhsqbiWlCtaJyRSzWJ+jLW5rPIKOTBjM5H
QPuDHvUQu9m5cngBEdtTKPr80K0FeeFxkbcPQfc23wZItrLaCahnQdU0DuBsycwYRhw9
rObQ==
X-Gm-Message-State: ALoCoQlIqSwiA8Wqey2OHTrmW/puQXoppInHgKF2YdHBx3ENb0Qp13PvoSmhcedvk5p21rlsokFC
MIME-Version: 1.0
X-Received: by 10.140.43.135 with SMTP id e7mr13195055qga.95.1397157379460;
Thu, 10 Apr 2014 12:16:19 -0700 (PDT)
Received: by 10.140.35.210 with HTTP; Thu, 10 Apr 2014 12:16:19 -0700 (PDT)
Date: Thu, 10 Apr 2014 16:16:19 -0300
Message-ID: <[email protected]om>
Subject: Gainfully employed family needs help
From: "ALEX. KEN." <[email protected]>
To: xxxxxxxxxxxxxxxxxxxxx
Content-Type: multipart/alternative; boundary=001a113a986e4c5f8004f6b50deb
Content-Length: 18372
Received: from 72.30.239.181 (72.30.239.181) by deli10036.mail.bf1.yahoo.com(98.139.210.156); Thu, 10 Apr 2014 21:53:42 +0000
Advertisement

#197121 by Mike Wilson Thu Apr 10, 2014 6:56 pm
The sender of the email appears to be hiding his location by send the through Yahoo and Gmail.
A Google search on the email address [email protected] returns several hits where he claims to be offering low interest loans. At first glance looks like another loan scam to me.

It is ALWAYS a scam
If the pet seller or shipper asks for money to be sent via Western Union, Money Gram, any brand of gift card. Walmart To Walmart , Zelle , PayPal friends and family option, or mentions Cameroon
#197125 by HillBilly Thu Apr 10, 2014 8:06 pm
99.9% of the time when someone is using a free email address to try and conduct business, they are a scammer. blumail is a free email service like hotmail, yahoo, or gmail.

Try using this tool to check for scam letters in addition to posting them here :
http://www.scamomatic.com/
a fast search Click here shows many scams from all over the world associated with this email address.

Who is online

Users browsing this forum: No registered users and 5 guests