Sunday, December 27, 2009

Interesting, I'll grant you....

Grant Number: MICC/97846563459/206‏
From: e.blokdijk@hetnet.nl
Sent: December 22, 2009


MICROSOFT®
(UK. Regional Office)
Microsoft Building, Wright Lane,
Kensington London W85sp.

Winner No. 005,

It is obvious that this notification will come to you as a surprise but please find time to read it carefully as we congratulate you over your success in the following official publication of results of the E-mail electronic online Sweepstakes organized by Microsoft Corporation ,in conjunction with the foundation for the promotion of software products,(F.P.S.) held today 22nd December 2009 here in United kingdom, A Draft of $1,000.000.00 (One Million United States Dollars) will be issued in your name.

It is important to note that your award was released with the following particulars attached to it.
(1) File Number: F1267-2009
(2) Ref. Code :KP23/857/MCL5 /CO
(3) Grant Number: MICC/97846563459/206

Forward The Following Information as Listed Below and Send to Asset Management & Finance Group Office [ Microsoft Corporation Consultancy Firm].

.Residential address:
.Tel(Mobile):
.Nationality/Country:
.Full Names:
.Age/Sex:
.Occupation/Position:

Asset Management & Finance Group Office :
51a High Street, Hanham, Bristol. BS15 3DQ.
Director : Mr. Alexander Godson
Contact Email:alexandergody@live.com
Tel:+447010306574

Soon as The Above Information is Received Through E-mail: alexandergody@live.com,You Will Be Duly Informed

Tuesday, December 22, 2009

Furnish me with a few details, eh....

Subject: Your Blog Featured at Home Furniture Depot‏
From: home furniture homefurniture@in.com
Sent: December 10, 2009

Hello,
This is Shiela from homefurnituredepot.net.
We stumbled on your blog while searching for Exclusive Furniture related information. We operate the largest Home Furniture & Office Furniture website featuring more than 30,000 blogs. Our site averages 200,000 unique visitors per month. As a kind note We have featured your blog at http://homefurnituredepot.net/blog_awards/index.php?id=143 We would be grateful if you could add the following details to your blogs main page.
Home Office Furniture
Looking forward for your confirmation.
Thanks
Shiela
homefurnituredepot.net.

Saturday, December 19, 2009

Gassy wee montebanks, wot?

Date: Thu, 10 Dec 2009 12:05:28 -0000 (GMT)

Subject: MESSENGER FROM CHEVRON-TEXACO

From: "CHEVRON/TEXACO OIL AND GAS COMPANY" chvjddoma@yahoo.com
Reply-To: cttt-2009@discuz.org

Attn: Chevron-Texaco Beneficiary

Your verification number is: (CT-389-6373,FGN/P-073-92)(Dunno, Mrs. Victoria
Wallison ~ all of a sudden I don't feel so very special any more.
http://itccommunicationsnet-johnnichols.blogspot.com/2009/12/inbox-call-to-confrim-they-are-still-at.html)

We wish tocongratulate you over your email success in the Chevron-Texaco computer
balloting sweepstake held recently.your price is worth $300,000.00 USD
United States Dollars. you are to contact your CLAIMS PROCESSING OFFICER
with your:

1.full name
2.Home Address:
3.Age:
4.Phone Number:
5.Occupation.
6.Amount Won:
7.Annual Income(Optional).
8.Delivery mode.
Via Bank Transfer Or
Via Courier Delivery

CLAIMS PROCESSING OFFICER:

Payment Officer General Information
Name: Mr Alhaji Musa Aliu Mohammad
Email:cttt-2009@discuz.org
Telephone:+234-705 81 56 183 (http://www.419report.org/419-phone-2009-11.htm)

+234-808 79 26 131 (http://www.419report.org/419-phone-2009-11.htm)

Fax: +234-707-226-2983-6. (http://antifraudintl.org/showthread.php?t=19792;
http://k0bkl.org/abuse/lottery.html;
http://www.delphifaq.com/faq/scams/f987.shtml?p=159;
http://419archive.blogspot.com/2009_02_01_archive.html;
http://zoqy.blogspot.com/2009/08/todays-e-mail-scams_578.html)

West Africa Office.

All response should be forewarded to (Mr Alhaji Musa Aliu Mohammad)
Co-sponsors of this online promotion are listed herein: Shell Oil Company,
Pepsi Corporation, and the Federal Government of Nigeria.

NOTE: You must have received different emails from different angles,
which are fraud mails, DO NOT DIS-REGARD THIS EMAIL AS IT'S NOT A FRAUD,
as this Organization is a 100% Scam Free.

Yours Faithfully,

Mrs Victoria Wallison (http://antifraudintl.org/showthread.php?t=20670;
http://gariell.wordpress.com/2009/03/20/mrs-victoria-wallison-fedex-parcel-scam/)


Wednesday, December 2, 2009

Royal pain in the ass....

I don't have a Royal Bank of Canada account ~ of that, I am really quite certain. I wish the knobheads flooding my mailbox with scammail trying to get me to click on their miserable links would be just as certain.

The links they used have been edited out. I'm quite certain that 99% would have the sense not to click on them but there are those few who just have to have a look. If it isn't safe for me to click on, it's not gonna do them any good either.

The name of their game is 'Click on the link'. Whether they use it to con personal information from you, infect your computer with malware, whatever...., they gain nothing if you don't click.
99.99% of the time DO NOT CLICK ON LINKS IN YOUR EMAILS ~ particularly unsolicited ones. About the only time I do any more is if I am registering for a site and they send me a
confirmation email.

If you receive an email from banks, credit companies, Paypal, EBay, etc... requesting personal information or that you need to up-date with them and you find yourself looking at a link, open a new window, go directly to their website and deal with them there. Or by phone ~ old-fashioned to be sure, but I like it.

I used http://headertool.apelord.com/headers to check the headers on the emails because I usually find it quite useful. Computer savvy scammers have no difficulty covering up their tracks from the average user (including faking IP addresses) but I thought it was interesting to note that there was no consistent information as there would be if it were actually the RBC.


From: Royal Bank of Canada service@rbc.ca
Date: 30 Nov 2009
Subject: You have one new message from Royal Bank of Canada
Please update your RBC Royal Bank account.
Your Internet Banking Account may be locked. (or not even
exist, eh?)

Please identify yourself by visiting our Online Banking
service: (link)

**************

From: RBC Royal Bank idpfxo@yahoo.com
To: donotreply@rbc.com
Subject: New Message from Customer Service - KCGYIWILQE
Date: Tue, 1 Dec 2009

From: Customer Service
Date: 01/12/2009
Subject: Unsuccessful login attempt from IP address: 89.202.19.215 (Germany)

For your security, your online profile has been locked.
- Protect your personal account information by following the link bellow: (link)

We appreciate your understanding as we work to ensure account safety.
DO NOT REPLY TO THIS EMAIL. IF YOU HAVE QUESTIONS PLEASE CONTACT US .

Copyright 2009 RBC Financial Group Registered Number 3950882 2009.

The following IP addresses were extracted from your headers
IP Address Probable Country
75.149.139.109 Algeria
76.248.224.105 Ireland (20842)
* The last IP listed is usually the originating IP address

*************

Reply-To: noreply@rbc-royalbank.ca
From: "RBC Royal Bank" email-id@rbc-royalbank.ca
Subject: Reference ID: CPIQVMFIXK
Date: Tue, 1 Dec 2009

Dear Customer,

We would like to inform you that your RBC Royal Bank online account has been
locked due to inactivity. To avoid losing important information, you must
reactivate your RBC account now.

Click here to confirm your information and unlock your online banking: (link)

Thank you for using RBC Royal Bank.
___________________________

Please do not reply to this email. This mailbox is not monitored and you will
not receive a response. For assistance, log in to your RBC online banking and
choose the Help link located in the bottom right corner.

You are receiving this email notification because this email address is listed
as the administrative contact email for your RBC Royal Bank account.

Copyright © 2009 RBC Royal Bank of Canada

The following IP addresses were extracted from your headers:
IP Address Probable Country
83.138.66.82 Cape Verde
70.46.232.115 N/A (49221)
* The last IP listed is usually the originating IP address


************

Reply-To: noreply@rbc-royalbank.com
From: "RBC Royal Bank" email-id@rbc-royalbank.com
Subject: Action Required: Please update your RBC account
Date: Tue, 1 Dec 2009

Your privacy on the Internet is of the utmost importance to us. To
protect your account against unauthorized use, RBC Royal Bank requires
you to create sign-in questions and answers.

Anytime you login from a different IP address, you will have to answer
one of these security questions. Make your RBC Royal Bank online banking
even more secure by updating your account now.

Please create Security Questions and Answers for your RBC Royal Bank online
account by going to: (link)

We strongly advise you to enroll now. The new security measures will be
effective right away.

Thank you for using RBC Royal Bank.

The following IP addresses were extracted from your headers:

IP Address Probable Country
69.10.138.198 Western Sahara (June Lake)
70.55.226.34 Jamaica (21754)
* The last IP listed is usually the originating IP address

*****************

Reply-To: noreply@rbc-royalbank-ca.com
From: "RBC Royal Bank" serv@rbc-royalbank-ca.com
Subject: Customer Service: Email ID XQJUUXUMMI
Date: Tue, 1 Dec 2009

(link)

The following IP addresses were extracted from your headers:

IP Address Probable Country
83.138.147.229 Cambodia (07746)
24.199.254.142 Germany
* The last IP listed is usually the originating IP address

****************

Reply-To:
From: "RBC Royal Bank"
Subject: Customer Service: Email ID

Date: Tue, 1 Dec 2009

(link)

The following IP addresses were extracted from your headers:

IP Address Probable Country
217.7.203.173 N/A*
74.8.95.169 Micronesia, Federated States of*
* The last IP listed is usually the originating IP address

****************

Reply-To: noreply@rbc-royalbank.ca
From: "RBC Royal Bank" email-id@rbc-royalbank.ca
Subject: Reference ID: MBGSBCPSDP
Date: Tue, 1 Dec 2009

Dear Customer,

We would like to inform you that your RBC Royal Bank online account has
been locked due to inactivity. To avoid losing important information,
you must reactivate your RBC account now.

Click here to confirm your information and unlock your online banking: (link)

Thank you for using RBC Royal Bank.
___________________________

Please do not reply to this email. This mailbox is not monitored and you will
not receive a response. For assistance, log in to your RBC online banking and
choose the Help link located in the bottom right corner.

You are receiving this email notification because this email address is listed
as the administrative contact email for your RBC Royal Bank account.

The following IP addresses were extracted from your headers:

IP Address Probable Country
67.192.109.26 Czech Republic
70.46.232.115 N/A (49221)
* The last IP listed is usually the originating IP address

***************

From: RBC Royal Bank erpydl@yahoo.com
To: donotreply@rbc.com
Subject: Transfer status: PENDING - ID: NRTHNZPMFR
Date: Wed, 2 Dec 2009

This email confirms that you have transferred A1-MOBILE using Money Transfer.

Transfer id : 250010358176
Price : 110.00 CAD
Transfer Fee: 15.00 CAD
Subtotal : 125.00 CAD
__________________

To cancel payment please confirm account ownership by following the link below:

http://mail.bcmanor.com/RBC-rbcaccess.html
__________________

DO NOT REPLY TO THIS EMAIL. IF YOU HAVE QUESTIONS PLEASE CONTACT US .
Copyright 2009 RBC Financial Group Registered Number 3950882 2009.



















Friday, November 27, 2009

It's a dog's life...

I received this in the email account I use for my scam blogs.

Not that I don't think my blog is going to the dogs sometimes but the relevancy of a rental scam blog to an animal health care site? Am I missing the connection? Or is it, as I figure, just another attempt to have me (and other lucky recipients) click on a 'poisoned' link?

My line of thought towards that conclusion goes something like this -

1. My site has nothing to do with animal care.

2. If I type in www.dog-health-problems.org, I get a list of sites that are similar but not the same.

3. Why does a .org use yahoo as an email?

4. Whois.domaintools.com shows that the domain name was registered October 13, 2009. Now it's not impossible that it's a brand new site but somehow I don't think it's what it represents itself to be. It begs the question as to how it can be 'the largest Dog Health Problems website featuring more than 30,000+ blogs. Our site averages 200,000+ uniques visitors per month.'

5. If I google the phone number (+45 36946676) used in the registration done with a Netherlands address it tends to lead me to links like this: http://www.moneyfanclub.com/closed-programs/11759-cash-account-biz-scammers.html or this: http://resources.alibaba.com/topic/514452/How_to_verify_if_a_buyer_is_serious_any_tips_.htm. Feel free to rummage around yourself ~ there's always something new to learn about scams that way.

Where the link in my email will lead me, I do not want to know. My computer is older and cranky enough without having it infested with malware, trojans and other nasty things which is quit often what happens when people click willy-nilly on links they receive in emails.

Bottom line is that I think I do not want to know these people and it's even less likely that I would consider having anything to do with them.

Date: Fri, 27 Nov 2009 

Subject: Your Blog Featured at dog-health-problems.org

From: substance abuse buddypress23@gmail.com (Seriously,
folks, would you use
a nickname such as 'substance abuse'
if you want people to take you seriously
in a business
venue?)


Hello,

This is Shiela from dog-health-problems.org.

We stumbled on your blog while searching for Dog Health
Problems related
information. (That sounds more like a
serious trip and fall than a stumble to me.)


We operate the largest Dog Health Problems website featuring
more than 30,000+
blogs. Our site averages 200,000+ uniques
visitors per month
(I checked at Alexa.com~ they're not
even a blip on the radar.)
As a kind note We have featured
your blog athttp://dog-health-problems.org/blog_awards/*******

We would be grateful if you could add the following details
to your blogs main page.

(Said addition appears to be a link to Dog Health Problems
and I'm not posting it here.)

Looking forward for your confirmation.

Thanks

Shiela

dog-health-problems.org.



Thursday, November 26, 2009

Cry me a river....

Aside from the stranger than usual format ~ I've never been invited
to attend a scam before ~ I think this is a five hankie sobber ripping
off in a bald-faced and callous manner someone else's name
(http://en.wikipedia.org/wiki/Jade_Goody) to reach even lower
levels of scumdom.

From: mrs.jade Goody mrs.jadegoody13@yahoo.in

I NEED YOUR HONEST
mrs.jade Goody

Thursday 26 November 2009
9:00 PM - 10:00 PM (GMT +00:00)

My Dear One in Christ,I am Mrs. Jade goody from Maldrid, presently
staying in United Kingdom. I am married to Mr. Jack goody who
worked as the financial Director United nation Development on Africa
for more than Ten years before he died in the year 2007. We were
married for Eight years without a child. He died after a brief illness
that lasted for only one week. Before his death we were both born
again Christian. Since his death I decided not to remarry or get a
child outside my matrimonial home, which the Bible is against. When
my late husband was alive he deposited the sum of 16.8 Million
Pounds Sterling’s (Sixteen Million Eight hundred thousand Pounds
Sterling’s) with one Bank in my name. Presently, this money is still
with the Security Company Recently, my Doctor told me that
I would not last long due to cancer problem. The one that disturbs
me most is my stroke sickness. Having known my condition I decided
to keep this fund in the Security Company in Europe.I want an
organization or an individual that will use this fund for phanages,
widows, propagating the word of God and to endeavor that the house
of God is maintained. The Bible made us to understand that blessed
is the hand that giveth. I took this decision because I don't have any
child that will inherit this money and my husband relatives are not
Christians and I don't want my husbands efforts to be used by
unbelievers. I don't want a situation where this money will be used
in an ungodly way. This is why I am taking this decision. I am not
afraid of death hence I know where I am going. I know that I am
going to be in the bosom of the Lord. Exodus 14 VS 14 says that the
lord will fight my case and I shall hold my peace. I don't need any
telephone communication in this regard because of my health, hence
the presence of my husband's relatives around me always.I don't want
them to know about this development, or please if you must call me to
confirm things from me, it must be brief due to my illness. With God all
things are possible. As soon as I receive your reply I shall inform the
security company in Europe that you are the beneficiary of the c
onsignment you will need to go and claim this fund in Europe. I will
also issue you an authority letter that will prove you the present
beneficiary of this fund. I want you and the organization to always
pray for me because the lord is my shepherd; my happiness is that I
lived a life of a worthy Christian. Whoever that wants to serve the
Lord must serve him in spirit and truth. Please always be prayerful
all through your life. Any delay in your reply will give me room in
sourcing another person for this same purpose. Please assure me that
you will act accordingly as I stated herein.

Hoping to receive your reply and Remain blessed in the Lord.

Yours in Christ,
Mrs. Jade goody.
My direct Number---------- +44 70 359 33 797…
Email… mrs.jadegoodysister@london.com

RSVP to this invitation

Sunday, November 22, 2009

Junque, junque, junque and more junque...

Received: 22 Nov 2009
Subject: Your CreditScore Is Enclosed
Email: MyCreditScore@bestworkerbee.com
Content: Your CreditScore is available for no cost. CLICK
THERE TO VIEW YOUR SCORE.

(Hmmmm... According to whois.domaintools.com,
bestworkerbee.com is registered with no
website. Yah ~
sounds even more legit to me.


Dare I say it? DON'T CLICK ON LINKS IN EMAILS!)

Received: Sat, 21 Nov 2009
Subject: Question about Item #330370543054 - Respond Now
Email: "eBay" members@eBy.com
Content: Dear member, eBay member leahpfeiffer has left
you a message regarding item #330370543054. Click here to
view the message
.

(Let's consider the fact that I don't sell on EBay so poor
ol' leah is outta luck
there or even consider it
astonishing that EBay doesn't know how to spell its name.

When I look on Whois it tells me that the domain is
registered to The Eby
Group Inc. and when I google that
I find, '
The Eby Group Inc is headquartered in Olathe, KS.
The Eby Group Inc is operating in the Multimedia & Graphic
Design industry. The email address pattern for The Eby
Group Inc
is jane.doe@eby.com.' And, according to EBay,
leahpfeiffer is not a registered user.)

Received:
Mon, 16 Nov 2009
Subject:
PAYPAL GRANT.
Email: "Paypal Inc." waysaves@terra.es
Reply to: imperio78@aol.com

(So call me sceptical but somehow I don't think Paypal
routes its mail through AOL.
When I look up waysaves@terra.es
on Whois I find the website title is 'Terra.
Noticias en
espanol, ocio y contenidos multimedia.' I do use Paypal
on occasion and I can
guarantee I have never dealt with AOL
or notices in Spanish. Yeah ~ like I'll click
on this
site.)


Received: Tue, 10 Nov 2009
Subject: Fwd: find
Email: Debra Johnson debrajohnson2280555@yahoo.com
To: David Patterson (And then there is a link ~ ta da! ~
which ends with
'hghhoejcba.info'. Whois search tells me
that it is registered to an Andrew Klimow
in Moscow, Russia,
who owns about 7,132 other domains and that there is no site

profile.)

Received:
Fri, 6 Nov 2009
Subject: Fwd: check
Email: Jean Ward jeanward4617754@yahoo.com
To: Scott Butler fugrjstnymnreb@hotmail.com
Header analysis: From Moscow, Russian Federation
Content:
it is pretty (And then there is a link which ends with
zuyerasmcq.info. Whois tells me it's registered to our pal,
Andrew Klimow, and that it was created Nov. 5, 2009. Also
no site profile.)

Received:
Subject:
Email:
Reply to:
Header analysis:
Content:

Received:
Subject:
Email:
Reply to:
Header analysis:
Content:

So How Come?

My photo
I have two blogs at the moment - Here Be Dragons which is devoted to rental scams primarily sourced through Craigslist although the proliferation of free ad sites has widened the hunting grounds. Many additions come from other sources (ie: blogs/anti-scam sites/online community ad sites) or are provided by people who want to share their experiences. There Ain't No Such Thing As A Free Lunch is for copies of scammail that I find in my mailboxes ~ sometimes I can't resist the odd acerbic comment but for the most part I post 'em because the more that people do, the fewer fools they get to gull. Dunno what to say about me that would be very interesting ~ I'm a granny who reads, gardens and crafts as the mood strikes me. :) I don't particularly care for the social predators on this planet and this blog is part of my way of saying so.