Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

hawks3399@gmail.com admin@dealer.com

DO NOT click on any links in these emails.

hawks3399@gmail.com admin@dealer.com

Unread postby SlapHappy » Wed Aug 09, 2017 12:52 pm

IP Address 217.61.121.237

Decimal Representation 3644684781
ASN AS31034
City Arezzo
Country Italy
Country Code IT
ISP Aruba Business S.R.L.
Latitude 43.4167° (43° 25′ 0″ N)
Longitude 11.8833° (11° 52′ 59″ E)
Organization Aruba Business S.R.L.
Postal Code 52100
Is Private IP Address no
PTR Resource Record host237-121-61-217.static.arubacloud.com
Is Reserved IP Address no
State Toscana
State Code 16
Timezone Europe/Rome


Return-Path: <admin@dealer.com>
Delivered-To: xxx
Received: from xxx
by xxx (Dovecot) with LMTP id Cd4KMpU0iVmvCAAAcPn/pw
for <xxx>; Tue, 08 Aug 2017 05:48:37 +0200
Return-path: <admin@dealer.com>
Envelope-to: xxx
Delivery-date: Tue, 08 Aug 2017 05:48:37 +0200
Received: from [217.61.121.237] (port=34398 helo=dealer.com)
by xxx with esmtp (Exim 4.87)
(envelope-from <admin@dealer.com>)
id 1devVV-0000YF-K9
for xxx; Tue, 08 Aug 2017 05:48:37 +0200
Received: from IP-10-12.dataclub.biz (unknown [185.29.10.12])
by dealer.com (Postfix) with ESMTPA id D73F340EC;
Mon, 7 Aug 2017 18:39:45 -0400 (EDT)
Content-Type: multipart/mixed; boundary="===============0834850702=="
MIME-Version: 1.0
Subject: Document Arrival / Address Confirmation From DHL Global
To: me <admin@dealer.com>
From: " DHL Office" <admin@dealer.com>
Date: Tue, 08 Aug 2017 01:39:41 +0300
Reply-To: hawks3399@gmail.com

You will not see this in a MIME-aware mail reader.
--===============0834850702==
Content-Type: multipart/alternative; boundary="===============0445705936=="
MIME-Version: 1.0

--===============0445705936==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body


Dear Customer ,

We visited your address 3 hours ago but could not locate you.

It was a wrong address. Please download the attachment and fill n your correct details. We have tried to deliver your parcel to you but could not meet you at your address. This process is to ensure that your parcel gets to you.

Thank You

------------------------------ ------------------------------ -----------------



This email is scanned(secured) and sent to you because you are a subscriber to our newsletter.
NOTE: IF MESSAGE IS FOUND BY ERROR IN YOUR JUNK MAIL KINDLY OPEN AS SAME.

© 2016 DHL Express | Customer Service | www.dhl.co.tw

-
Attachment: L_ADDRESS_PDF.rar (~198 KB)
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

hawks3399@gmail.com admin@befish.cf

Unread postby SlapHappy » Wed Aug 16, 2017 10:41 am

IP Address 185.29.10.12
City Stockholm
Country Sweden
Country Code SE
ISP DataClub S.A.
Latitude 59.3333° (59° 19′ 59″ N)
Longitude 18.0500° (18° 3′ 0″ E)
Organization DataClub S.A.
Postal Code 173 11
Is Private IP Address no
PTR Resource Record ip-10-12.dataclub.biz
Is Reserved IP Address no
State Stockholms Lan

Return-Path: <admin@befish.cf>
Delivered-To: xxx
Received: from server1.scamsurvivors.com
by xxx (Dovecot) with LMTP id yeZ6OrLSk1midQAAcPn/pw
for <xxx>; Wed, 16 Aug 2017 07:05:55 +0200
Return-path: <admin@befish.cf>
Envelope-to: xxx
Delivery-date: Wed, 16 Aug 2017 07:05:55 +0200
Received: from [212.237.58.51] (port=57768 helo=mail.befish.cf)
by xxx with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.87)
(envelope-from <admin@befish.cf>)
id 1dhqWg-0007ox-MS
for xxx; Wed, 16 Aug 2017 07:05:54 +0200
Received: from IP-10-12.dataclub.biz (unknown [185.29.10.12])
(Authenticated sender: admin)
by mail.befish.cf (Postfix) with ESMTPA id E386C3A78;
Wed, 16 Aug 2017 00:09:00 -0400 (EDT)
Content-Type: multipart/mixed; boundary="===============1387223674=="
MIME-Version: 1.0
Subject: Re: August korea ORDER
To: me <admin@befish.cf>
From: "Pablo Harry" <admin@befish.cf>
Date: Wed, 16 Aug 2017 07:08:58 +0300
Reply-To: hawks3399@gmail.com

You will not see this in a MIME-aware mail reader.
--===============1387223674==
Content-Type: multipart/alternative; boundary="===============0703179725=="
MIME-Version: 1.0

--===============0703179725==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body


Dear ,


I am sorry that i could not get back to you earlier as regards our pending order.

the buyer was not able to make a quick decision. But we are now ready to

proceed and finalize the order

please find the attached order, provide your quote asap

Best regards
Mike Abbas

PURCHASING DEPARTMENT

LOFT COMMERCIAL TRADING LTD
Phone- +49-721-74647
website- www.loftcommercialstrading.com

Attachment: August_Order_Request.rar

=
+4972174647
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

hawks3399@gmail.com admin@dealer.com

Unread postby SlapHappy » Sat Aug 26, 2017 6:58 am

IP Address 185.29.10.12
City Stockholm
Country Sweden
Country Code SE
ISP DataClub S.A.
Organization DataClub S.A.
Postal Code 173 11
Is Private IP Address no
PTR Resource Record ip-10-12.dataclub.biz
Is Reserved IP Address no
State Stockholms Lan

Return-Path: <admin@dealer.com>
Delivered-To:
Received: from
by with LMTP id +SASIBTznVnPHwAAcPn/pw
for ; Wed, 23 Aug 2017 23:26:44 +0200
Return-path: <admin@dealer.com>
Envelope-to:
Delivery-date: Wed, 23 Aug 2017 23:26:44 +0200
Received: from [94.177.197.211] (port=52412 helo=dealer.com)
by with esmtp (Exim 4.87)
(envelope-from <admin@dealer.com>)
id 1dkdAi-00026s-Ao
for ; Wed, 23 Aug 2017 23:26:44 +0200
Received: from IP-10-12.dataclub.biz (unknown [185.29.10.12])
by dealer.com (Postfix) with ESMTPA id 2AFD42A1E;
Wed, 23 Aug 2017 16:45:34 -0400 (EDT)
Content-Type: multipart/mixed; boundary="===============1280861412=="
MIME-Version: 1.0
Subject: RE: RFQ-P-17-6749 - REQUEST FOR QUOTATION
To: me <admin@dealer.com>
From: "Evans" <admin@dealer.com>
Date: Wed, 23 Aug 2017 23:45:29 +0300
Reply-To: hawks3399@gmail.com

You will not see this in a MIME-aware mail reader.
--===============1280861412==
Content-Type: multipart/alternative; boundary="===============0517922265=="
MIME-Version: 1.0

--===============0517922265==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body


Dear

Good day to you.

We would like to request a quotation on the following Fans.Kindly find table below from our Clients (RFQ) for your kind attention.

Your quotation shall be based on the following terms and conditions:

1. The total gross weight & individual weight of the item (lbs/kg)?

2. Price Validity (Standard: 90 days as requested by Client)?

3. Lead Time (Week/s)?

4. Payment Terms

5. Please provide drawing.

6. Dimensions (L x W x H cms/inch) , weight + packaging (lbs/kg)?

7. Warranty period?

8. Delivery Place: Ex-Works?

9. Harmonized Code/HS Code/Customs Tariff Code?

10. Please include Certificate of Conformity (COC) from Manufacturer.

(Please mention if there is any charge for this certificate)

Appreciate your kind feedback soonest.We look forward to receiving your best offer/quote as soonest possible.

Thank you in advance

Mark Evans

Attachment: RFQ_201708_XLXS.rar (~172 KB)
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

hawks3399@gmail.com admin@betaxi.gq

Unread postby SlapHappy » Wed Nov 15, 2017 7:04 pm

Email Sender admin@betaxi.gq
IP Address 31.14.140.216
IP Address Country Italy
IP Address State Toscana
IP Address City Arezzo
IP Address Postcode 52100
IP Address Latitude 43.4167
IP Address Longitude 11.8833
ISP of this IP Aruba S.p.A.
Organization Aruba S.p.A.
Timezone Europe/Rome


Return-Path: <admin@betaxi.gq>
Delivered-To: xxx
Received: from server1.scamsurvivors.com
by xxx with LMTP id j6PVAPYkDFrpAgAAcPn/pw
for <xxx>; Wed, 15 Nov 2017 12:28:54 +0100
Return-path: <admin@betaxi.gq>
Envelope-to: xxx
Delivery-date: Wed, 15 Nov 2017 12:28:54 +0100
Received: from [31.14.140.216] (port=33724 helo=mail.betaxi.gq)
by xxx with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.87)
(envelope-from <admin@betaxi.gq>)
id 1eEvsD-000098-Eq
for slxxx; Wed, 15 Nov 2017 12:28:53 +0100
Received: from IP-129-133.dataclub.biz (unknown [84.38.129.133])
(Authenticated sender: admin)
by mail.betaxi.gq (Postfix) with ESMTPA id 5482C4BE8;
Wed, 15 Nov 2017 05:32:54 -0500 (EST)
Content-Type: multipart/mixed; boundary="===============0862546767=="
MIME-Version: 1.0
Subject: FW: DHL Details For November 14th// Scan copy of Shipping Docs // 1718-047
// Imidazoline 18 OH // PO. 18103
To: Me <admin@betaxi.gq>
From: "DHL Courier Dept" <admin@betaxi.gq>
Date: Wed, 15 Nov 2017 12:32:51 +0200
Reply-To: hawks3399@gmail.com

==================================
AWB Number: ABT07610
Pickup Date: 2017-9-11 09:15:00
Estimated Delivery Date: 2017-10-11 1:00:00
Service: P
Pieces: 1
Cust. Ref: 530685065
Description: Parcel
Ship From: Piedra Logistics S.R.L
===================================

Attachment: DHL_35373Y44.rar (~234 KB)
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Re: hawks3399@gmail.com

Unread postby SlapHappy » Thu Dec 13, 2018 12:56 pm

IP Address 185.29.8.50
Decimal Representation 3105687602
ASN AS60567
City Stockholm
Country Sweden
Country Code SE
ISP DataClub S.A.
Latitude 59.3333° (59° 19′ 59″ N)
Longitude 18.0500° (18° 3′ 0″ E)
Organization DataClub S.A.
Postal Code 173 11
Is Private IP Address no
PTR Resource Record ip-8-50.dataclub.eu
Is Reserved IP Address no
State Stockholms Lan
State Code 26
Timezone Europe/Stockholm

Return-Path: <admin@xdtoilet.cf>
Received: from IP-8-50.dataclub.eu (unknown [185.29.8.50])
by mail.xdtoilet.cf (Postfix) with ESMTPA id 758632B97;
Wed, 12 Dec 2018 16:07:58 -0500 (EST)
Subject: FW: Remittance Message Advice
To: ME <admin@xdtoilet.cf>
From: "Ali Al Sabri" <admin@xdtoilet.cf>
Date: Wed, 12 Dec 2018 23:07:16 +0200
Reply-To: hawks3399@gmail.com
Attachments
PAYMENT_COPY.ace (~247 KB)
Show options
Message Body



FW: Remittance Message Advice
From Ali Al Sabri <admin@xdtoilet.cf>
To ME <admin@xdtoilet.cf>
Reply-To hawks3399@gmail.com
Date Wed 16:07
Attachments
PAYMENT_COPY.ace (~247 KB)

Show options
Message Body
Dear Sir,

Please find the swift copy in attachment.

Thanks & Best Regards,

Ali Al Sabri



From: no-reply@oman-arabbank.com [mailto:no-reply@oman-arabbank.com]
Sent: Sunday, December 4, 2018 12:03 PM
To: alialsabri@danat-azaman.com
Subject: Swift Message Advice



Dear Customer

Please find attached your latest transfer details in SWIFT Format.

Regards

Oman Arab Bank



This email/attachment(s) thereto are intended solely for the addressee(s). Any form of use or taking of any action in reliance on information contained therein by other than the addressee is unauthorized, prohibited and unlawful. If you receive this message in error, notify the sender immediately by e-mail and delete material from all your systems. The Oman Arab Bank S.A.O.c does not represent that any attachment is free from computer viruses or defects and the user assumes all responsibility for any loss, damage or consequence resulting directly or indirectly from the use of any attachment. The information contained in any email does not necessarily reflect the views of the Oman Arab Bank S.A.O.c or any other related entities or persons.
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.


Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 14 guests