Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

info@expresshell.com

This section deals specifically with online romance scams. The images used by the scammers are stolen from innocent people, usually from their social media pages.

info@expresshell.com

Unread postby Big Al » Mon Jun 24, 2019 1:04 am

From a Survivor:
Thomas Oisin Hawkins claims to be an assistant captain on a ship in Denmark. It's a contract, Cargo ship. Also claims he has a daughter named Emily. His wife and baby died during childbirth.


From: info@expresshell.com
Date: April 17, 2019
To:
Subject: Re: EXPRESSSHELL DELIVERY NOTIFICATION!!!

Hello sorry for the late responds from our service, your package is still safe but the package was held by the customs in mexico airport, we have not been able to contact you because our service online was upgraded and we lost most of our customers details due to the upgrade please kindly bear with us and please we have to find solution to release your package from the hands of the customs. we await your response as soon as possible thank you..



From: info@expresshell.com
Date: April 21, 2019
To:
Subject: Re: EXPRESSSHELL DELIVERY NOTIFICATION!!!

Thank you for your immediate response Madam, the customs of the mexico international airport has demanded for the Non-inspection document for your package or your package will be open to know the content of what you have inside, We await your response if you want the customs to open your package or Not.


http:/ /global.expresshell.com/en/process.php
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" admin.
 
Posts: 84945
Joined: Fri Apr 27, 2012 10:48 pm

info@expresshell.com thomasoisinhawkins@gmail.com

Unread postby Big Al » Mon Jun 24, 2019 1:08 am

From: info@expresshell.com
Date: April 22, 2019
To:
Subject: Re: EXPRESSSHELL DELIVERY NOTIFICATION!!!

Please proceed by making Wire Transfer payment into this account Information given to you and make sure you send us a copy of the payment Slip as proof of payment.

ACCOUNT HOLDER- SOBAEH G.
BANK NAME- CBW BANK
BANK ROUTINE- 101115302
ACCOUNT NUMBER- 800617026XXXX
BANK ADDRESS- 7676 COURTNEY OAK APT 3005 FORTHWORTH 76112 TX.


From: thomas oisin hawkins <thomasoisinhawkins@gmail.com>
Date: April 24, 2019
To:
Subject: Re:

By loving someone not just to say it , but when comes the hard time, now I know love just end in your lips



Stolen images used:

Image

Image

Image

Image
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" admin.
 
Posts: 84945
Joined: Fri Apr 27, 2012 10:48 pm

info@expresshell.com

Unread postby Big Al » Thu Jul 11, 2019 10:44 pm

sorry for the late response, we would like to know who you are representing on his/her behalf... Thank you



Header:
Delivered-To:
Received: by 2002:ac8:7155:0:0:0:0:0 with SMTP id h21csp10081902qtp;
Thu, 11 Jul 2019 02:54:47 -0700 (PDT)
X-Google-Smtp-Source: APXvYqw4jebPVLZZH+zNQscgtd4GUasHms36tqS5+YiHguw1rTxG7o660HrSc+zKuNDy0Tyurfnn
X-Received: by 2002:a17:90a:19d:: with SMTP id 29mr3868854pjc.71.1562838887091;
Thu, 11 Jul 2019 02:54:47 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1562838887; cv=none;
d=google.com; s=arc-20160816;
b=myIw4Pq8xea9LPxvcq3moQEMlXyTX0ZPZhwZZk8TIxxz6E1yEBiqIDPb7ujDoRxjGY
Y/GI6Vtj/ZhQwmBq9mO4kfFbO+qz6xDZEPpWtptNONNHr7w4YS5tOxH8JvfqeEbOygk0
5y3Zhg2n1FKzg0wP+YDz/c9JkvYm/MYWzhyq09zS6aZOXlxINkkrzlCydaKVkSVm6m/u
9RWdHXYt3nV2VKz+yZD2GaxReLy/ACPfhDOtBml9RvOZeMViTq6SwdcjWeMPq/t2Fk03
mjxvLd5INwN0T/C/IYs8DL8o3OZcqMaGQ4Gq/rxgewbaENM3G5NJu+KeCc0G0LblhPlW
S9Ew==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=user-agent:message-id:references:in-reply-to:subject:to:from:date
:content-transfer-encoding:mime-version:dkim-signature;
bh=1m+4HNeNhyy9SXw1xJ4JBTtDp7xDIwUw045f6mbLxIw=;
b=ivvCKJSPbZuW1ZBSGoKINRy6DIK9Vd0c6pFkMpa7UyyXPm+ju1dkodBWwutQyRYSs8
85fNxKGyZlSTpK9/7IhISF3af+cAUXTdXiZ3zbo0pJriMQNl5OjgbEBgzNqjFOQ1GKXi
+h1VJ2jRRPfUAoCqMT3jNRlntpH8vvfJIlYvLrpi428XL2aNEXwnnNJ5JHkzwAe+gail
fKXqsVCgZ+hMN0zoNBdnJe8e4w7U2t9d4fLzu0ggcdSQ8jFqscpVmaEo2upGqTVCROJc
QdocRvT5co9BFesbbzBNGzpWayiCLDxe4x4QfwitxZxh2nsqGGfyRDQ1nmITNUliirAt
6EVA==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@expresshell.com header.s=default header.b=2hGody3M;
spf=pass (google.com: domain of info@expresshell.com designates 184.171.164.162 as permitted sender) smtp.mailfrom=info@expresshell.com
Return-Path: <info@expresshell.com>
Received: from gains.cloudcastdns.com (gains.cloudcastdns.com. [184.171.164.162])
by mx.google.com with ESMTPS id h2si4659000plh.380.2019.07.11.02.54.46
for < >
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 11 Jul 2019 02:54:46 -0700 (PDT)
Received-SPF: pass (google.com: domain of info@expresshell.com designates 184.171.164.162 as permitted sender) client-ip=184.171.164.162;
Authentication-Results: mx.google.com;
dkim=pass header.i=@expresshell.com header.s=default header.b=2hGody3M;
spf=pass (google.com: domain of info@expresshell.com designates 184.171.164.162 as permitted sender) smtp.mailfrom=info@expresshell.com
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=expresshell.com; s=default; h=Message-ID:References:In-Reply-To:Subject:To: From:Date:Content-Transfer-Encoding:Content-Type:MIME-Version:Sender:Reply-To :Cc:Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=1m+4HNeNhyy9SXw1xJ4JBTtDp7xDIwUw045f6mbLxIw=; b=2hGody3MOLFxQ7s2vmm+oWn1cI rxi0AhniJ0v3tur/tCVFf/qxIvm+Uko+dSmmV5umV4B0OBkWb9/B5AgHcEki0CE2DWBWts3lstWQ2 8fvigOp/z/c3XyuRAXa4M9AkY4rzMc/N8xkAgoywK7peqwuKjKlaTBLQlrRwoQwKlmnbymNQM5dgL X64N7cuSYIUsXjNUaRUUXRsBBmHmbl4Uqj/4+rQPn6S0VPEB5TFhBGGXz5ydWFju2eASE31j2fTV8 7EENqqiX1UEBrwu7PDlNimbpKiYWu2We5Blow3DelvTlAWtLnOdY9RMYp9LEVygcYYmUBmr0zKDWh B63ICoDQ==;
Received: from [::1] (port=46304 helo=gains.cloudcastdns.com) by gains.cloudcastdns.com with esmtpa (Exim 4.92) (envelope-from <info@expresshell.com>) id 1hlVmn-00G6rL-V8 for ; Thu, 11 Jul 2019 15:24:46 +0530
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Date: Thu, 11 Jul 2019
From: info@expresshell.com
To:
Subject: Re: EXPRESSSHELL DELIVERY NOTIFICATION!!!
In-Reply-To: <CAAbCh5tr=tRgeL4Xxuj2PxLC0X26E8aEZr3U0GdHAxzvyE6WJQ@mail.gmail.com>
References: <CAAbCh5vW27ujm4bv1H5bua=TnxxSzBVye67og8nCiCUo_Y3fmw@mail.gmail.com> <CAAbCh5tr=tRgeL4Xxuj2PxLC0X26E8aEZr3U0GdHAxzvyE6WJQ@mail.gmail.com>
Message-ID: <6633ff2b0f36b7a39cf4b1a33a11a046@expresshell.com>
X-Sender: info@expresshell.com
User-Agent: Roundcube Webmail/1.3.8
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gains.cloudcastdns.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - expresshell.com
X-Get-Message-Sender-Via: gains.cloudcastdns.com: authenticated_id: info@expresshell.com
X-Authenticated-Sender: gains.cloudcastdns.com: info@expresshell.com
X-Source:
"Look for the lies."
Being Blackmailed? Go here and do this first: https://blackmailscams.com/
The information you supply can help others from becoming Victims.
Image
User avatar
Big Al
"Little pee nut" admin.
 
Posts: 84945
Joined: Fri Apr 27, 2012 10:48 pm


Return to Romance scams.

Who is online

Users browsing this forum: Google [Bot] and 42 guests