---------- Forwarded message ----------
From: Andrey Kopelev <ansvet_99@yahoo.com>
Date: Sunday, January 9, 2022
Subject: Fraud/Phishing emails illegal money transaction Fwd: Attn Beneficiary:
To: spam@fightspam.gc.ca, reportphishing@antiphishing.org, reportphishing@apwg.org, phishing-report@us-cert.gov, fraudreporting@unaids.org, contact@cyber.gc.ca, abuse@contactprivacy.com, emailscamalerts@gmail.com, network-abuse@google.com, google-cloud-compliance@google.com, arin-contact@google.com, abusecomplaints@markmonitor.com, ccops@markmonitor.com, hostmaster@markmonitor.com, secure@microsoft.com, dns-admin@google.com, david@davidstrauss.net, abuse@pantheon.io, office.westernunion123@gmail.com, google-abuse-bounces-reports@devnull.spamcop.net, report@phishing.gov.uk, spoof@westernunion.com
This person bombards me with fraud/phishing emails offering illegal money transaction. My emails address is not officially listed anywhere. The only way this person could get it is from the spam list. This person is a spammer/scammer/hacker. Please block his accounts. Below is the full header, his original email, abuse reports and the example messages sent from this IP address.
Other email: mrjohnsonmatthey@gmail.com
X-Originating-Ip: [209.85.210.66]
209.85.210.66 listed in dnsbl.sorbs.net ( 1 )
Direct Phone Number:+44-7491-5469-69 - fake phone number
| First Received From | approximately 11 years, 2 months, 2 weeks ago |
| Last Received From | within 1 week |
| Number Received | 506 email(s) sent from this IP |
| Dictionary Attacks | 57 email(s) sent from this IP |
| First Received From | approximately 10 years, 6 months, 3 weeks ago |
| Last Received From | within 1 year, 2 months, 2 weeks |
| Example Messages Sent From |
| Subject: none/blank |
| Subject: none/blank |
| Subject: Hello |
| Subject: IMPORTANT NOTICE |
| Subject: NOTIFICATION. |
| Subject: Your email has won |
| Subject: Attention , |
| Subject: Darlehen Angebot |
| Subject: GOOD DAY BENEFICIARY, |
| Subject: Attention Dear Beneficiary , |
| Subject: Project Financing / Loan |
| Subject: Attention Dear....... |
| Subject: Your Seized Funds. Contact with Ref: FMF/CGS/013 |
| Subject: THIS IS THE NEW PAYMENT ARRANGEMENT |
| Subject: Your Help Is needed Urgently ( ) |
| Subject: CAN I ENTRUST THIS TO YOU? |
| Subject: Santiago, did you miss out on some of these new |
| Subject: [SALE OFF] Fun Shirt For Any Member Of The CHARL |
| Subject: Re: Gail, design personalized shirts with your n |
| Subject: Donation Of $1.5M For You! |
| Example User Names Used By |
| User-name: balis |
| User-name: beijing |
| User-name: chairman |
| User-name: frank |
| User-name: general |
| User-name: guangzhou |
| User-name: hr |
| User-name: jiangsu |
| User-name: job |
| User-name: kefu |
| User-name: kevin |
| User-name: personnel |
| User-name: sale |
| User-name: wade.moraes |
| User-name: web |
| User-name: zhejiang |
| User-name: harradon |
| User-name: selypuk |
| User-name: handzel |
| User-name: delcieaalborn |
| User-name: oriann.v.loeven |
| User-name: epositregular |
| User-name: enny_kribs |
| User-name: phen |
| User-name: elody_anway |
| User-name: efkovichchz |
| User-name: ibasicdavid2010 |
| User-name: hanhharradon |
| User-name: mfinger |
| User-name: ogelio_routhier |
Mr Peter Mike <office.westernunion123@gmail.com >
Attn Beneficiary:
X-Ymailisg: _ZgKlLEWLDuyjgVMP_rEiOeP09.c0w2ipivuEq51StmPnuDS .tCdw9tbXgUBRhLAvj7CXNoJhq8A7SUdVz6x1tzwGx6jdOAUteKoQcsrlbx. 2Pu2lq_foeDkLZxp476wpmGiOeu.N3Fea9ViEdcX76Ugyp499ZY8Oy7s8Gin zmDlEY_WyVZh6LbZSYVbhfJlYPcg_VrFFWWRDju5WExoDDsn1zgZq5zUSy01 GF0h5joEJusFxS2jomgOvUlC01PwzcejbQ35jX1ktXlb1pGq0beybOQ0SDmL F0VDJXS2a5LfxyR6V_wEDTFQEzB5mu_NLyaNqXJzmiNdblGVlgoZEpubSqSt .pkz1pCVwTN9UjUdxUj3p_nbE48z2eyeLlKb5ck_YlKaBe7FN3eV_1QWA56v ZAqS0RANBxAZyvR6BoAr_kJEIuhZBCcf54Ekw.XgPeedap2_2zhH5tFlHEFn 3Oc8xratzSkY3xIjZOg8uJmsfgQNPXZDnCa_I1TnRwR0ToiBRKPz1XsZVu.4 47y.KooWJXcfLOAAGXAxY8.r.kt9hAufqyiN2tIzU6MSBi05aCcAa97vGibk DZoFzNQt3sY.5iGbYCA2dMyqUSec3XcEofZrc9KhpabzFq0sS3dbM1BYzWO9 1QFJqZGO5bKVpO.Vp3tbMegnPO.py8JSgjKKNXEo2uqBTrqD87EZpOHsvMSz og73wJTwpl.tQrZQVSWs87qYEOfldD0xecgLXxHmrB.Y403ccms_XlqRvngM 4jk8S3gZQbZ.2tWbMiHL2tWwprlHg0sAKuqrZmbuDXJlkGXCNLBPHGZu8g8J v28pdnT17quOLQDCCzUQCeaCb9b5N6v37lY6EOxk18DVbfs6aEIywWvXS8Ov R_VyAuPnweejZ1UJm04VbG2K.Ucciz51YDRpc1Lza7vd8hdoUGt8Jdr6cV.Y dondRZd6EE7tUibq4er4ewpyavYDgoDk.eNyMVMu91maCUUF48286vn5gDCs QffwvG8VONHFE0gTNn9Su1R4mywNVWdTRWVRF51eXkVEgkwZzRsoJTEdc3vs gZzMn71VtbzF22nY0dTgKXO_5LsE579I5hx9qOlyQI98H7XLJ5NwsHB8ut4d zGksFU3QLqA01RgERhJ9rrOkU_IJS.sotwzlyoBHlzVR0LA.vuCaFZScDt4p rewFhGnZDQxJ0ivy3Khz_L91Ze3yBcgAlc1oNjPa.m20885rypna_D2D3p9w 628h7QVVEsoXKREea6hqGxz82260kW6o15njZbQ0RhQ-
X-Received: by 2002:a25:3814:: with SMTP id f20mr82284068yba.81.1641699110646; Sat, 08 Jan 2022 19:31:50 -0800 (PST)
Return-Path: <office.westernunion123@gmail.com >
X-Originating-Ip: [209.85.210.66]
X-Apparently-To: ansvet_99@yahoo.com; Sun, 9 Jan 2022 05:19:17 +0000
X-Gm-Message-State: AOAM530HKGevPNC8gP1yY620QBC5rgHov1b7QG9bllbMy8f/M7PqN5tE QLfm9AltHApPiuybHUklPJvFkVAcY1PrCJ/+qqIdmZPB0xNA4U+0
X-Google-Smtp-Source: ABdhPJx7pCRJB0Qhn8A/SEtndXjmNYMmWWNPKrxQynh3SHY+WM60c9+p9LVxOc2cbOmvE4q558vPJ5nKQ063I3vNlg0=
Mime-Version: 1.0
Authentication-Results: atlas212.free.mail.gq1.yahoo.com ; dkim=pass header.i=@gmail.com header.s=20210112; spf=pass smtp.mailfrom=gmail.com; dmarc=pass(p=NONE,sp=QUARANTINE) header.from=gmail.com;
Content-Length: 2146
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:reply-to:from:date:message-id:subject:to; bh=YGX9jfuLAEat9IdIFEXEzMCfHnSaopMaLNVWffbAjqE=; b=QtnqzWPPUwikgmZoSardYR6Zd3VVyrKdhviMS5wv0WDjWyV2oX4Ckd3ySG/+Nr0DPn 87XqY/eRKWsAUq5BWdEpyu5YxqTvvbhO0VNTMc+UNu+OHUNYrfSRmZCvHA6DU9jPczo3 WR32foaRDK6l5Kra8+zn4bvVM1RF4AC1aMZKjOonj/rlIzWL2bVH5R/kSBc4ybDBnfEq N8eNvqEuAVwi3txkP6tH3crex0ZSM4+It5G9Ga9Eu1GUenTmiaVhvKzRCVSi0+5fOBOS 6RGZp1WgDON5C04VvQQ4mNJK+Tjr7Mv2oFaiCr5BJjI0lY093EW1t8c3/so1RgP6ETCX RFpw==
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:reply-to:from:date:message-id :subject:to; bh=YGX9jfuLAEat9IdIFEXEzMCfHnSaopMaLNVWffbAjqE=; b=jClTYB/vHHmvVsdzjSw08MMW+j2/cW3y29iSwcImZ8Qiej3Y8SOCeE4n2H7fnPESPL rRLjAZKqwctfAZ1EGXqlkw9kDVGKP+6dSq1obfwSmteuZMzOJ0KIIk3o6Yiqj7kTfzuA lK91oTl5Bb+wtXdzslh2YWD/g4bO9twmoFnSv8X3Ij2yK3oH6jt6gmBA8OK1k8Nua2WZ p12NRtjAKcKYz3/+kNCpwmQoUN+6egFerNTqyDdjfynff5/UVjf9KCgyWyZcj2vAugpv 4++ZpxMYJLwbX62YmLzxxyaAXePaqPtX5SQh+dcPSq/EG91qq1w/KRk1pJuD6oRHlEnZ ZKgw==
Content-Type: text/plain; charset="UTF-8"
Received-Spf: pass (domain of gmail.com designates 209.85.210.66 as permitted sender)
Received: from 10.253.62.155 by atlas212.free.mail.gq1.yahoo.com with HTTPS; Sun, 9 Jan 2022 05:19:16 +0000
Received: from 209.85.210.66 (EHLO mail-ot1-f66.google.com) by 10.253.62.155 with SMTPs (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256); Sun, 09 Jan 2022 05:19:16 +0000
Received: by mail-ot1-f66.google.com with SMTP id s21-20020a05683004d500b0058f585672efso11704949otd.3 for <ansvet_99@yahoo.com>; Sat, 08 Jan 2022 21:19:16 -0800 (PST)
Received: by 2002:a0d:dd85:0:0:0:0:0 with HTTP; Sat, 8 Jan 2022 19:31:49 -0800 (PST)
Begin forwarded message:From: Mr Peter Mike <office.westernunion123@gmail.com >Subject: Attn Beneficiary:Date: January 8, 2022 at 10:31:49 PM ESTTo: undisclosed-recipients:;Reply-To: mrjohnsonmatthey@gmail.comAttn Beneficiary:
I hereby wish to inform you that your payment has been redirected to
the ENTERPRISE BANK OF UNITED KINGDOM- ENGLAND. for immediate release
to you with immediate effect .
Nevertheless, we have set up a new arrangement to carry out your
payment through "BANK WIRE TRANSFER". Your fund (US$4,500,000.00)
should be TRANSFER to you directly into your nominated BANK ACCOUNT
through our foreign payment paramount center at the ENTERPRISE BANK OF
UNITED KINGDOM-ENGLAND..
In view of this, be inform that your "Payment Files, Document & Fund
(US$4.5MUSD)"has been forwarded to our international paramount payment
center at the ENTERPRISE BANK OF UNITED KINGDOM-ENGLAND.For immediate
TRANSFER to you, therefore you are required to contact our payment
center where your payment has been forwarded to in order to proceed on
your funds TRANSFER/PAYMENT immediately.
Kindly contact the "ENTERPRISE BANK OF UNITED KINGDOM-ENGLAND."with
the information below,
Contact Person: MR.JOHNSON MATTHEY.,THE DIRECTOR INTERNATIONAL
REMITTANCE DEPARTMENT ENTERPRISE BANK OF UNITED KINGDOM-ENGLAND.
Direct Contact E-mail Address: (mrjohnsonmatthey@gmail.com )
Direct Phone Number:+44-7491-5469-69
I advise you should contact MR.JOHNSON MATTHEY., with the above
information immediately to enable his office embark officially on your
fund TRANSFER/PAYMENT immediately. Do contact MR.JOHNSON MATTHEY As
you were directed and fully comply and corporate with MR.JOHNSON
MATTHEY.,THE DIRECTOR INTERNATIONAL REMITTANCE DEPARTMENT ENTERPRISE
BANK OF UNITED KINGDOM-ENGLAND to enable them work with you and effect
the release and transfer of your funds to you as soon as possible.
Finally, note you are required to forward all your "BANKING ACCOUNT
DETAILS/INFORMATION" to the MR.JOHNSON MATTHEY.,THE DIRECTOR
INTERNATIONAL REMITTANCE DEPARTMENT ENTERPRISE BANK OF UNITED
KINGDOM-ENGLAND.
Do not hesitate to notify me after contacting the BANK. Try to update
and notify me upon contacting the BANK regarding your fund
TRANSFER/PAYMENT .
Waiting to hear from you as soon as possible.
Good luck & remain bless.
Regards,
Best Regards.
Mr Peter Mike
No comments:
Post a Comment