Sunday, January 16, 2022

Fwd: Fraud/Phishing emails asking for personal information Fwd: GOOD DAY



---------- Forwarded message ----------
From: Andrey Kopelev <ansvet_99@yahoo.com>
Date: Sunday, January 16, 2022
Subject: Fraud/Phishing emails asking for personal information Fwd: GOOD DAY
To: spam@fightspam.gc.ca, reportphishing@antiphishing.org, reportphishing@apwg.org, phishing-report@us-cert.gov, fraudreporting@unaids.org, contact@cyber.gc.ca, abuse@contactprivacy.com, emailscamalerts@gmail.com, network-abuse@google.com, arin-contact@google.com, google-abuse-bounces-reports@devnull.spamcop.net, security@google.com, dns-admin@cscglobal.com, david@davidstrauss.net, abuse@pantheon.io, abusecomplaints@markmonitor.com, ccops@markmonitor.com, hostmaster@amazon.com, agentmarkjhnsn@gmail.com, abuse@google.com


This person bombards me with fraud/phishing emails asking for personal information. My emails address is not officially listed anywhere. The only way this person could get it is from the spam list. This person is a spammer/scammer/hacker.  Please block his accounts.  Below is the full header, his original email, abuse reports and the example messages sent from this IP address. 

Email address: agentmarkjhnsn@gmail.com has been reported all over the internet as scam. 
Other email address provided: atmdeparrtmentoffice@gmail.com has been issued a fraud warning. 

X-Originating-Ip: [209.85.219.169] 

Geographic LocationUnited States United States

First Received Fromapproximately 12 years, 10 months, 1 week ago 
Last Received Fromwithin 1 week 
Number Received246 email(s) sent from this IP

Example Messages Sent From 209.85.219.169
Subjectnone/blank 
Subjectnone/blank 
Subject: CONGRATULATIONS 
Subject: Dear Friend, 
Subject: Dear Friend, 
Subject: GOOD DAY MY DEAR, 
Subject: IMPORTANT TRANSFER NOTICE 
Subject: waiting for your respond 
Subject: =?UTF-8?B?5YSq5a2Q44G=? 
Subject: RE: IMPORTANT BUSINESS PROPOSAL 
Subject: RE: IMPORTANT BUSINESS PROPOSAL 
Subject: A package for you 
Subject: こんにちはー! 
Subject: Welcome To Wells Fargo Bank 
Subject: I hope to hear from you immediately. 
Subject: =?UTF-8?B?44GC44GR44G+44GX44Gm44GK44KB44G=? 
Subject: RE:YOUR CONSIGNMENT BOX CONTACT SECURITY KEEPING C 
Subject: =?UTF-8?B?44G144G/44G=? 
Subject: Is your outdated? littlecms.com 



"Mr.Enock Nanny" <agentmarkjhnsn@gmail.com> 
GOOD DAY
To: undisclosed-recipients:; Bcc: Svetlana Kopelev <ansvet_99@yahoo.com> 
X-Ymailisg: lIyc8W8WLDtXLD3v0WZSQ1xtK00bRTVH8Tx7R7iM7kJo41WG FJuZOxTDWHH3XX0iN1alBXDTsVf60zMImPi0kj9g4.3ORjxUjjRcM8j6J.bJ pri06Pkdz8LMvT_.rs19VBcsAWU7EweOyA0El9njHsPJ_cS9xsvTnfREC9Dc nrgB4CvZhgrPGapjL8WAPxiJREO_WzVq2LO9xC1zDO5SucYcTHw4wmjXkH64 3hDYeLAMCQqUrxGFNKbbAiY7BYQGf623tZyW2CzldZIUwgtrk0hO53EIQ8a8 ZL04M7rTplvgC_5g5maepbhzem.T447yzfdIBsEZtkoUUPGQ9i6hUXei.jua x9Z48qO97YdmqMD.4cGkDVDNhMe7E9e1W.VlU4M2YvukyMa8Fao25y7C2UY7 r_wLl0rfxP2FXxmaQ1oZPEywfpFnRirLmqSy5330dfNk1TvgI1AvhpYZS0Sc fIE9HrxDkqr9.MdNdg6Z09CE.8U.HV4H8bvG2JsSU0kABlH4pFEC4.hOsYip H2FPOrnJFHJMCkBk49odGk60xJVUXe6Fi.rIGsqD4LhmttkeMTZ92pNqqhom RqUj91We5AK3AM8bGrDZBmXQGOihw8FpS20Q0Rj04ZHsuI9.A1qXzfVEn0aU BLJLDNvfpeHCjvFVqbVo.l0vYU9BPHwN83m5XkommBArUbCSV_omIMjc1F2M NT6bb4yJEZu0R5g66VLMrTcxw40RRI1bIVc0GI2ZADB14EhbnPBTNNrT.C.h sa8uDCBY_3ndzzjcZV9MUJx1nVGoPeUiSRJhdFvYEEZSHYTNBHKaG5SMXUTj JUW2XUH1qu8Sdvf1S1YoRBeURJ3hFHm1gssfoTcURiZ4ebMlPgHmiKl1jDB0 3fnSf197BEhfncrxtvPcMkBYf7qzCuxBt.Hteo8qwtJ0fch9eoYlaWq7DfJp oNdP7W.KM_aKmK0l8EcGWXMmuYQBhOf9XPEfsmAgb3TDMmDNyb3Cc8yNsyOI ENUwIgfRSyrgBFVUJCZjooyhtgdC9hhdv7TQPqKBAUz7HenSaVKXx6XEwzBH cDlljuitMuseIufRvzjBtctVFdTMRTGg1UqHZeNvaBn6CiHpXyYrxSslMYLJ BvOhciPjDucfDopZ1OdmZcz2X4uTgkbyRcbLTJlTln3aMNxQGHmBSey4EcG9 XzQKCc55BXtcN_hId8XD.DDxOkJwfIT0K5TwLQuUbewUcgjjpZj.5N4WUU5Y UP5S0oCtKgk4s2kXFXE3EkurSu6G5FjnI2wl2rBZIBHiG2Rdu1lPVvHTlQ--
X-Received: by 2002:a25:b11c:: with SMTP id g28mr19270418ybj.622.1642282877902; Sat, 15 Jan 2022 13:41:17 -0800 (PST)
X-Gm-Message-State: AOAM530utRm+NnTwocEEce/w4Cvo5AR+IGb4QCdnW6Io4UuRSSXPrQT0 d0rV/oElk1S0iH/qZ9J0tZKeZPcxssKNa4ARldw=
X-Originating-Ip: [209.85.219.169]
X-Apparently-To: ansvet_99@yahoo.com; Sat, 15 Jan 2022 21:41:18 +0000
X-Google-Smtp-Source: ABdhPJx48ht7vqBCb+b1dwRiuYrNq9m2HNbkWLOB6+TaNoly1JUxPYjxc29/mlUsCWtIuBGaNIJKaF8yMCnqEzJluRU=
Mime-Version: 1.0
Authentication-Results: atlas106.free.mail.bf1.yahoo.com; dkim=pass header.i=@gmail.com header.s=20210112; spf=pass smtp.mailfrom=gmail.com; dmarc=pass(p=NONE,sp=QUARANTINE) header.from=gmail.com;
Content-Length: 1091
Content-Transfer-Encoding: quoted-printable
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:reply-to:from:date:message-id:subject:to :content-transfer-encoding; bh=DFMYhwIpRrZSpIdmdSDHqRpYZ1rqRTep3MjNMEbGfwI=; b=bbnJxz10W0VbY5EphVmCTVobwqbT5NZVSalPp6vfYG1GM9PBpIoGhEQ9lFwPU2xDCu GOHPIIXdSS53+DKykAOaKpb8JkWbEvzPr5B4jq134m3OENNYN2IqywWJg9pfsjmF9qyZ 3IokAUYMKtJL/TeB3YHug75vUoKZpfw1ug1ZLGURBa3RunrhPB6t8ttYg1j9YJygAN5V dXDi3SAk1Ebm3lakoQI3jj6p6849ItNgwU88fUcsv5viFpqQdttT1GhEbF/qOaJDu0Ww oGS++PhpUMt/rGJFoiOoSjVrNtcrPd3f241eeoSVAAe9UtXWu3gWb7nhx1zreWCrq/7y UPmA==
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:reply-to:from:date:message-id :subject:to:content-transfer-encoding; bh=DFMYhwIpRrZSpIdmdSDHqRpYZ1rqRTep3MjNMEbGfwI=; b=6lod3sQ0aTbxQ/RbEanhr9NYj4SJbOqIRMITKKp3ZVeB8gMQdQBTmk3O8rbp/b5W7L 3sXFwkoIpRSQbL62mQ6P/LAFExKY2FMx70aRnBKt+OLvdEmIZBE1q4/IphWparaIrVpU mthFxN8tzKYkkXPOnib102eg5Kewsh5klyhbM0jtF2v9Z24iJ6b5UPxG8A3GoHytdIFz 1EvBfKrbtx8elD9Hx8zhZNUzwCPplNa06XbLmelxJTcYe7RFyc7A9zfdhQhSVC0GALwv nCzrt1kGz5IBNXW5y11xDg6BBHQZ6sg4EOKfGK7DwZ9xKpGuiaNODjWka+WWD5GLOX9k Im6g==
Content-Type: text/plain; charset="UTF-8"
Received-Spf: pass (domain of gmail.com designates 209.85.219.169 as permitted sender)
Received: from 10.197.39.234 by atlas106.free.mail.bf1.yahoo.com with HTTPS; Sat, 15 Jan 2022 21:41:18 +0000
Received: from 209.85.219.169 (EHLO mail-yb1-f169.google.com) by 10.197.39.234 with SMTPs (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256); Sat, 15 Jan 2022 21:41:18 +0000
Received: by mail-yb1-f169.google.com with SMTP id g81so34057721ybg.10 for <ansvet_99@yahoo.com>; Sat, 15 Jan 2022 13:41:18 -0800 (PST)
Received: by 2002:a05:7010:628d:b0:1f9:ced1:d12f with HTTP; Sat, 15 Jan 2022 13:41:17 -0800 (PST)



Begin forwarded message:

From: "Mr.Enock Nanny" <agentmarkjhnsn@gmail.com>
Subject: GOOD DAY
Date: January 15, 2022 at 4:41:17 PM EST
To: undisclosed-recipients:;

Hello Dear,

I am Mr.Enock Nanny and I work with United Bank of Africa (UBA).
Please Can you use ATM Visa card to withdraw money at ATM cash machine
in your country? I want to transfer money to you from my country; it's
part of money taken by some old politicians that was forced out of
power.

I will change the account details to yours which you will be
withdrawing money with it and always send my own percentage of the
money, and the amount we are talking about is
$6.5Million US dollars.

Whatever amount you withdraw daily, you will send 50% to me and you
will take 50%, the bank account will be on your name, I will be
waiting for your information as soon as possible.

Your name...........................................

Age.................................................

Sex.................................................

Country.............................................

Occupation..........................................

Phone number........................................


Best Regards.

Mr.Enock Nanny
My private email: atmdeparrtmentoffice@gmail.com


No comments:

Post a Comment