Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

purchase@snplumbing.in "Techie&Cooper Industries, Inc"

For the reports that have information missing.

purchase@snplumbing.in "Techie&Cooper Industries, Inc"

Unread postby SlapHappy » Thu Nov 01, 2012 2:16 am

* 85.31.218.188 Jaguar Network Vanves France
76.74.253.195 Serverbeach San Antonio United States
*Probable originating IP address

Received: by 10.217.61.7 with SMTP id h7csp454844wex;
Wed, 31 Oct 2012 08:40:49 -0700 (PDT)
Received: by 10.60.31.135 with SMTP id a7mr30958208oei.26.1351698048301;
Wed, 31 Oct 2012 08:40:48 -0700 (PDT)
Return-Path: <purchase@snplumbing.in>
Received: from web1690.linux-hosting.com ([76.74.253.195])
by mx.google.com with ESMTP id zk8si3794164obb.113.2012.10.31.08.40.46;
Wed, 31 Oct 2012 08:40:48 -0700 (PDT)
Received-SPF: neutral (google.com: 76.74.253.195 is neither permitted nor denied by best guess record for domain of purchase@snplumbing.in) client-ip=76.74.253.195;
Authentication-Results: mx.google.com; spf=neutral (google.com: 76.74.253.195 is neither permitted nor denied by best guess record for domain of purchase@snplumbing.in) smtp.mail=purchase@snplumbing.in
Received: from User (unknown [85.31.218.188])
by web1690.linux-hosting.com (Postfix) with ESMTP id 5863FCB8420;
Wed, 31 Oct 2012 21:05:49 +0530 (IST)
From: "Techie&Cooper Industries, Inc"<purchase@snplumbing.in>
Subject: TT payment copy made to your bank account
Date: Wed, 31 Oct 2012 16:38:02 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0065_01C2A9A6.67CC6DC4"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20121031153551.5863FCB8420@web1690.linux-hosting.com>
To: undisclosed-recipients:;

This is a multi-part message in MIME format.

------=_NextPart_000_0065_01C2A9A6.67CC6DC4
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit

Find attached bank swift copy of payment, please confirm and arrange for shipment soon

wait to hear from you.

Regards.

Kyung Hwan Ju



Techie & Cooper Industries, Inc
Tel: 1-713-209840

Ttcopy$16,350.html
43K
Phishing form.
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

marizell.rahon@yahoo.com marizel.rahon@yahoo.com

Unread postby SlapHappy » Thu Nov 01, 2012 3:09 am

* 41.138.164.30 Visafone Communications Limited Port Harcourt Nigeria

Received: by 10.217.61.7 with SMTP id h7csp399393wex;
Wed, 31 Oct 2012 00:32:37 -0700 (PDT)
Received: by 10.50.190.232 with SMTP id gt8mr535007igc.69.1351668756019;
Wed, 31 Oct 2012 00:32:36 -0700 (PDT)
Return-Path: <marizel.rahon@yahoo.com>
Received: from nm21.bullet.mail.ne1.yahoo.com (nm21.bullet.mail.ne1.yahoo.com. [98.138.90.84])
by mx.google.com with ESMTPS id s10si3055762ice.52.2012.10.31.00.32.34
(version=TLSv1/SSLv3 cipher=OTHER);
Wed, 31 Oct 2012 00:32:36 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of marizel.rahon@yahoo.com designates 98.138.90.84 as permitted sender) client-ip=98.138.90.84;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of marizel.rahon@yahoo.com designates 98.138.90.84 as permitted sender) smtp.mail=marizel.rahon@yahoo.com; dkim=pass header.i=@yahoo.com
Received: from [98.138.226.176] by nm21.bullet.mail.ne1.yahoo.com with NNFMP; 31 Oct 2012 07:32:34 -0000
Received: from [98.138.89.199] by tm11.bullet.mail.ne1.yahoo.com with NNFMP; 31 Oct 2012 07:32:34 -0000
Received: from [127.0.0.1] by omp1057.mail.ne1.yahoo.com with NNFMP; 31 Oct 2012 07:32:34 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 356137.77563.bm@omp1057.mail.ne1.yahoo.com
Received: (qmail 18313 invoked by uid 60001); 31 Oct 2012 07:32:34 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351668754; bh=OuoUrEMcOPtply+/3rZG7oDuHh4sY1jKOIad5KfFg88=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=PJMu+EqskWN8SLCEatK2AZG/9cdRsMmUAMffOXU8KLWvmijOto5WSnQs9F0+9qkpDKxEvDjmxwfXWk12fz9y9HDcskKnj9xRixByji90RrzGGnoo9Vwy7V52qSC9V0CwmOT8z7+lPz3TUnJZB5jbYOm/NzBJLCUIXWmfE0y1qdY=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=1zQytEqZPu2YUwI/+6UE1lVJBOeyF3C2TqUl/RIWdyuzrsWHeoDyIZs26BcoiNRIrAxVm7ISFv1m+e1EQxlmvdLfU/Ww9zZ9oWlEb0nzwdjW0DV1NEOG+ujwplG9XOGUSnrB/kSXN7rK5uk+gHsj+4JTyZeXUYGnxO+Up+3pyXU=;
X-YMail-OSG: cIH2pfUVM1mVZ0qbOoHGCKsvzFiYIinSPBgyGxHn33rELbE
rj_uhRN.llSAPrhJRHL0Qjxnp0hz1ZFFM7avyLz1VA7Rnh7cuT2_xhEXxTLM
ygJ5F9qv6SpMLr2cpOoGGQ.9UORvYw_55TWphvxq68yDYZvXK9rpUpxlTdhr
JwZa_e.Sz9F9KqHzeX.BgSkP0yyvu55eQ17ES9O2bqoO3ImOJYIOZazuxOwi
HadbT8tBWw2SOv47hxi3R6g11_Obdhu.7jhUEPnC6Vwbe2jjz7QLiUKJ7IE9
isNUG7nDuvGLkmn3unpIZ_AnBljBhncsnxVbJy9iQcCilRC6fD2zBjhlWII6
BgiDAI4aZo9D1X768i6MXSvPuduZu5AfYsSM_U6BOi3gGTHlPKnYK_A8sv_K
SviY4H_VCbeCAeJ8Xnngk9a0S39fAw8EusZ5LYLAbeH_..4a5TtyPf8feoOH
c6CSFfFFO7JeU4jOIJczhj8IXRkAKKvTRPgZBhac_zxzi8uOIu_MyY1Smc1Z
9nlJpG7EPeteaulId7Mge.c8TUa3yCr0RgCJ_z86WBOB5N.rYk4foLseO08o
HkK2YbYhqll2gTwVFero.bDGhuTDjLVaU.Zl72OEBHnrxp4V8BkIBxwyjzs3
WGBcXEsMCt35.sknsLE63FooJ
Received: from [41.138.164.30] by web121301.mail.ne1.yahoo.com via HTTP; Wed, 31 Oct 2012 00:32:33 PDT
X-Rocket-MIMEInfo: 001.001,CkZpbmQgYXR0YWNoZWQgYmFuayBzd2lmdCBjb3B5IG9mIHBheW1lbnQsIHBsZWFzZSBjb25maXJtIGFuZCBhcnJhbmdlIGZvciBzaGlwbWVudCBzb29uCgp3YWl0IHRvIGhlYXIgZnJvbSB5b3UuCgpSZWdhcmRzLgoBMAEBAQE-
X-Mailer: YahooMailWebService/0.8.123.460
Message-ID: <1351668753.18200.YahooMailNeo@web121301.mail.ne1.yahoo.com>
Date: Wed, 31 Oct 2012 00:32:33 -0700 (PDT)
From: Marizel Rahon <marizel.rahon@yahoo.com>
Reply-To: Marizel Rahon <marizell.rahon@yahoo.com>
Subject: TT payment copy made to your bank account
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-2095016334-340808247-1351668753=:18200"

---2095016334-340808247-1351668753=:18200
Content-Type: multipart/alternative; boundary="-2095016334-189809837-1351668753=:18200"

---2095016334-189809837-1351668753=:18200
Content-Type: text/plain; charset=us-ascii

Same email text as above and same attachment.
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.


Return to Reports with missing information.

Who is online

Users browsing this forum: No registered users and 15 guests