These are emails that I have personally received and have kept copies of for proof. My reason for this blog is to hopefully prevent someone from being scammed. NEVER DOWNLOAD OR OPEN ANY ATTACHMENTS, FILES OR IMAGES FROM SITES YOU DON'T KNOW AS TRUSTWORTHY NEVER GIVE PERSONAL INFORMATION SUCH AS ID OR BANK ACCOUNT NUMBERS TO ANYONE YOU DON'T PERSONALLY KNOW AND TRUST. FORWARD ANY EMAIL THAT SEEMS SUSPICIOUS TO SPAM@UCE.GOV REPORT GMAIL ABUSE TO GOOGLE IF YOU RECEIVE ANY SUSPICIOUS EMAIL POSING AS THE IRS, FORWARD THE MESSAGE TO PHISHING@IRS.GOV TO FILE A COMPLAINT ABOUT A SCAM THROUGH THE MAIL LOG ONTO POSTALINSPECTORS.USPIS.GOV Please note that some of the email addresses and other info displayed are from innocent people who had their accounts hacked and used by scammers, I do not remove the good from the bad for the sake of accuracy. It is a GOOD idea to change your passwords occasionally.


Wednesday, March 12, 2014

Outlook (cholden@chaileyschool.org) Your Mailbox is Full Clean up your inbox in seconds‏

keep  Your  Inbox  Clean  With  Sweep
tth
Your Mailbox is Full Clean up your inbox in seconds. Sweep helps you quickly delete unwanted mail.


Your mailbox is now full and has now exceeded the limit assigned to you,You are going to find it difficult to send and received email.You should act immediately to remedy this situation by clicking on the Sweep Mailbox Tag to Delect old email and sweep your mailbox clean

Sweep Clean Mailbox

A year ago,We launched Outlook.com a more personal and productive inbox.In that time,We 've worked hard to continue to improve your email experience.Thanks to you Outlook.com is only getting better.

Sincerely,
 Outlook.com Admin.

(sender IP is 62.171.198.108) smtp.mailfrom=cholden@chaileyschool
.org; dkim=none header.d=chaileyschool.org; x-hmca=none header.
id=cholden@chaileyschool.org
X-SID-PRA: cholden@chaileyschool.org
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MjtHRD0yO1NDTD00
X-Message-Info: rMRz3PBqtTVAMgL4ylmXYcq+kgh1J3WMSYcAKGE2g8gjxXmv
p7W8qnaU2gy13M4hs5qZiLclYOxq50MHLvKavPq7N+l9PTEkxCdcJwUd16GjhuZh
e24Pd6CI80HglcgwRQWLcpl/5EEDDz46IAWoketgX19GhtdcVu+dzxhGb7Mc+FY8
R9Jxl3v8PYSUahCifaO4tguQF9ZopSkeX3A99k4lj/bTej4q
Received: from mx.segfl.ifl.net ([62.171.198.108])
Received: from chailey-com1.chaileysec.lan ([10.22.16.21])
 by mx.segfl.ifl.net (8.13.8/8.13.8) with ESMTP id s2C0dV
wS014742;
 Wed, 12 Mar 2014 00:39:32 GMT
Received: from localhost (localhost.localdomain [127.0.0.1])
 by chailey-com1.chaileysec.lan (Postfix) with ESMTP id 
436537C017B;
 Wed, 12 Mar 2014 00:39:31 +0000 (GMT)
X-Virus-Scanned: amavisd-new at chailey-com1.chaileysec.lan
Received: from chailey-com1.chaileysec.lan ([127.0.0.1])
 by localhost (chailey-com1.chaileysec.lan [127.0.0.1]) 
(amavisd-new, port 10024)
 with ESMTP id RrnmHS38ZFOH; Wed, 12 Mar 2014 00:39:30 
+0000 (GMT)
Received: from chailey-com1.chaileysec.lan 
(localhost.localdomain [127.0.0.1])
 by chailey-com1.chaileysec.lan (Postfix) with ESMTP id
 5709D7C01FF;
 Wed, 12 Mar 2014 00:29:53 +0000 (GMT)
Date: Wed, 12 Mar 2014 00:29:51 +0000 (GMT)
From: Outlook <cholden@chaileyschool.org>
To: li@li.com
Message-ID: <2100450790.105031.1394584191914.JavaMail.
root@chailey-com1.chaileysec.lan>
Subject: Your Mailbox is Full Clean up your inbox in seconds
MIME-Version: 1.0
Content-Type: multipart/alternative; 
 boundary="----=_Part_105030_117676290.1394584191909"
X-Originating-IP: [41.203.69.1]
X-Mailer: Zimbra 6.0.8_GA_2661 (zclient/6.0.8_GA_2661)
Return-Path: cholden@chaileyschool.org

Wednesday, March 5, 2014

PayPal (customers@account2.com) Review Account‏

Dear Valued Customer,

Our Account Protection System recently detected an issue with your account.
There was an unusual activity on the credit card linked to your PayPal
account. Our security team suspects that an unauthorized user tried to access
your account without your consent.

Your account have been temporarily limited. We understand this may be
frustrating and inconvenient for you.

What to do next:

Please download the attachment in this email and simply open it so that
you are able to proceed with the verification process. Please fill in the required
fields after you have opened t he attachment.

We apologize for any inconvenience that may have been caused.
Sincerely,
Copyright © 1999-2014 PayPal. All rights reserved.


--Forwarded Message Attachment--

  • My Account
    • Overview
    • Add Funds
    • Withdraw
      • Transfer to Bank Account
    • History
      • Basic Search
      • Download History
    • Resolution Centre
      • View Open Cases
      • Guides
    • Profile
      • Add or Edit Email
      • Add or Edit Bank Account
      • Add or Edit Credit Card
      • Add or Edit Postal Address
  • Send Money
  • Request Money
  • Merchant Services
  • Auction Tools
  • Products & Services

Profile Update


Secure Transaction 
Please complete the form below to update your Profile information and 
restore your account access.

Personal Information Profile

Make sure you enter the information accurately, and according to the formats
required.
Fill in all the required fields.
 
   
 
 
 
 We might contact this phone number if there are
any invalid data specified.


Home Address Profile

Enter your information as accurately as possible.
 
 
 
 
 
 


Credit/Debit Card Profile

Enter card information as accurately as possible.
For card number, enter numbers only please, no dashes or spaces.
 
   
 Help finding your Card Verification
 Number 



For your protection, we verify credit card information.

The process normally takes about 30 seconds, but it may take longer during
certain times of the day. Please click Save Profile to update your information.






Copyright © 1999-2014 PayPal. All rights reserved.


(sender IP is 178.77.71.99) smtp.mailfrom=customers@account2.com; dkim=none header.d=account2.com; x-hmca=fail header.id=customers@account2.com
X-SID-PRA: customers@account2.com
X-AUTH-Result: FAIL
X-SID-Result: FAIL
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Message-Info: kjumoA4Bp2wgWFO/VpVNu8u+kYcRPxY1B1RniwRKf9Qd5+pQwY6AaiOfoSRc8SBcWV1gL/7Tm0YBAkBLnhSC7fbnlame1nlPjWQEBDRd/2qwVTyBWqPgnCJEVw6MZ6i69zUSfVkGK41vwJTja+GcyUd9pEtaNiHi/klV5vRhBxzTzYsynh99YInsxNzS/dA1Wh4F//gdXwZCnVffJhw22XJAOzf+8YYO
Received: from fabiando.de ([178.77.71.99]) 
Received: from 127.0.0.1 ([184.22.114.182]) by FABIANDO.DE with MailEnable ESMTP; Sun, 2 Mar 2014 12:07:52 +0100
Message-ID: <2014325328.519@account2.com>
From: PayPal <customers@account2.com>
Subject: Review Account
X-Mailer: Eureka Version 3 3.0.4132
MIME-Version: 1.0
Content-Type: multipart/mixed;
 boundary="--25350"
Bcc:
Return-Path: customers@account2.com

Customer Service (antonio@mecanocar.es) Warning Alert

 
Dear User,
For your own Security, We are having a system Re-activation of all Hotmail Account.
 
Please click and follow the link below to Sign In & Re-activate your account,
https://login.live.com/
 
Thank you
Security Protocols
Copyright © 2014 Microsoft.


(sender IP is 82.223.190.47) smtp.mailfrom=antonio@mecanocar.es; dkim=none header.d=mecanocar.es; x-hmca=none header.id=antonio@mecanocar.es
X-SID-PRA: antonio@mecanocar.es
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MTtHRD0xO1NDTD00
X-Message-Info: apxhH7NDCOakC1KUTpW+dI5M8d+0lnHGIWljlc5krfm/l+7FqGK571xMRBYvBAlaZwm5CPUckd4IMjtgZC5MTnU5opmSzWCBut1rt/jGlxsaQPqntpTdeYn8Tp04b9mawHuv7P3BRrREHTM6mtpCdLP/luXWj7pjsITt2CtUwtW09wDt4b3Yo4sxw0tfSnIn39edudJn7ppllQj4aAZ/dvBYvjb9SeU/zS+c0RDMPMs=
Received: from llsc494-a04.servidoresdns.net ([82.223.190.47])
Received: from User (unknown [67.139.12.226])
 by llsc494-a04.servidoresdns.net (Postfix) with ESMTPA id 027F12010FF;
 Wed,  5 Mar 2014 22:58:59 +0100 (CET)
Reply-To: <noreply@outlook.com>
From: "Customer Service"<antonio@mecanocar.es>
Subject: Warning Alert
Date: Wed, 5 Mar 2014 14:59:59 -0700
MIME-Version: 1.0
Content-Type: multipart/related;
 boundary="----=_NextPart_000_0009_01C2A9A6.54C702FE"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: antonio@mecanocar.es

Wednesday, February 26, 2014

Capt. Peter Shedom. (izabel.souza@tjam.jus.br) FOR YOU:‏

Hello,I am Major James Walton currently serving with the second platoon golf company 2/5 marines in Afghanistan (operation branding Iron).We have some amount of funds to move out of the Middle East.The most important thing is that can we trust you?Once the funds get to you, you take 30% out and keep our own 70%.Your own part of this deal is to find a safe place where the funds can be sent to.If you are interested i will furnish you with more details.Reply to: waltonmajorjames@yahoo.com.hk

Regards,
Major James Walton


(sender IP is 201.90.253.216) smtp.mailfrom=izabel.souza@tjam.jus.br; dkim=none header.d=tjam.jus.br; x-hmca=none header.id=izabel.souza@tjam.jus.br
X-SID-PRA: izabel.souza@tjam.jus.br
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MjtHRD0yO1NDTD00
X-Message-Info: 8CE+rboeI8AcxdV/TMBiFE/OknikEo17i7TpTrK1GwStmAKJigdzHfbUhNS/qfeIKGh75K+4zxe4xx6flf4wnoCYH4lY0RQe/3dKFbaqHTbPJ9UrugVrh+cQAXgu8JesfJrgMpj6cQUk4oHdwlPMQMAIhzxt7GfngpiFAfmCUZGMmjYVpsKN4HTEl1NQxuWPw1a3JMZxJ1+vsH/LvvzLUurpdYLrgBKB
Received: from mail.tjam.jus.br ([201.90.253.216])
Received: from localhost (localhost [127.0.0.1])
 by mail.tjam.jus.br (Postfix) with ESMTP id 23A7872F1FB7;
 Tue, 18 Feb 2014 04:46:00 -0400 (AMT)
X-Virus-Scanned: amavisd-new at mail.tjam.jus.br
Received: from mail.tjam.jus.br ([127.0.0.1])
 by localhost (mail.tjam.jus.br [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 2VHw5AJEZTXX; Tue, 18 Feb 2014 04:45:56 -0400 (AMT)
Received: from localhost (localhost [127.0.0.1])
 by mail.tjam.jus.br (Postfix) with ESMTP id 8351372F1BD1;
 Tue, 18 Feb 2014 04:35:45 -0400 (AMT)
X-Virus-Scanned: amavisd-new at mail.tjam.jus.br
Received: from mail.tjam.jus.br ([127.0.0.1])
 by localhost (mail.tjam.jus.br [127.0.0.1]) (amavisd-new, port 10026)
 with ESMTP id BddbQsqNP7as; Tue, 18 Feb 2014 04:35:41 -0400 (AMT)
Received: from mail.tjam.jus.br (apzimbra08.tjam.tj.am.gov.br [10.47.60.51])
 by mail.tjam.jus.br (Postfix) with ESMTP id 29ACC72F2459;
 Tue, 18 Feb 2014 04:24:51 -0400 (AMT)
Date: Tue, 18 Feb 2014 04:24:51 -0400 (AMT)
From: "Capt. Peter Shedom." <izabel.souza@tjam.jus.br>
Reply-To: "Capt Peter Shedom." <capt_peter_shedom@usa.com>
Message-ID: <75338191.202315.1392711891031.JavaMail.root@tjam.jus.br>
Subject: FOR YOU:
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [197.210.248.55]
X-Mailer: Zimbra 8.0.2_GA_5569 (zclient/8.0.2_GA_5569)
Thread-Topic: FOR YOU:
Thread-Index: lj1LS5a1GOrXykFeO2G/90RjLm9QsQ==
Bcc:
Return-Path: izabel.souza@tjam.jus.br

PayPal (paypal@mail.nu) Notification of Limited Account Access !

Notification of Limited Account Access
Dear Member,
As part of our security measures, we regularly screen activity in the PayPal 
system. We recently contacted you after noticing an issue on your account.We requested information from you for the following reason:

We recently received a report of unauthorized credit card use associated with 
this account. As a precaution, we have limited access to your PayPal account
 in order to protect against future unauthorized transactions.

Case ID Number: PP-204-863-415
In accordance with PayPal's User Agreement, your account access will remain 
limited until the issue has been resolved. Unfortunately, if access to your
 account remains limited for an extended period of time, it may result in further limitations or eventual account closure. We encourage you to follow our 
verification procedure as soon as possible to help avoid this.

Click here to login and restore your account access




Once you log in, you will be provided with steps to restore your account access.
 We appreciate your understanding as we work to ensure account safety.

This is a final reminder to log in to PayPal as soon as possible.
We thank you for your prompt attention to this matter. Please understand
 that
 this is a security measure intended to help protect you and your account. We apologize for any inconvenience.
Sincerely,
PayPal Account Review Department
PayPal Email ID PP-204-863-415


PayPal Email ID PP638


(sender IP is 5.9.35.116) smtp.mailfrom=minecraft@static.
5-9-35-116.clients.your-server.de; dkim=none header.d=mail.nu;
 x-hmca=none header.id=paypal@mail.nu
X-SID-PRA: paypal@mail.nu
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Message-Info: 11chDOWqoTkrZhqh+rybja4epMZL0YGr75y5CHq1KsueqUyV7
IBMRyis8YW6esSZ5aKWIDoKOH5MGrYaCayHGpr3wCjECxbBvuxLFh6kWu4qCzvxMy
Mxj+kfUU5wppJfrmM3zFhv4snlP+bcdaDyj8GO5XPhKd4gAl6ftZCw4ueTbPPw+0y
16hzqgu2O286nFAZ99AJ/2KtVl7PpNWc2OYnJJ9Wx1xMf
Received: from vm101SasMei.projects4every.de ([5.9.35.116])
Received: by vm101SasMei.projects4every.de (Postfix, from userid
 1000)
 id 6B6381109703; Mon, 24 Feb 2014 17:30:54 +0100 (CET)
Subject: Notification of Limited Account Access !
X-PHP-Originating-Script: 1000:ebay.php
From: PayPal < paypal@mail.nu >
Content-Type: text/html
Message-Id: <20140224163054.6B6381109703@vm101SasMei.projects4every.de>
Date: Mon, 24 Feb 2014 17:30:54 +0100 (CET)
Return-Path: minecraft@static.5-9-35-116.clients.your-server.de

Amazon Voucher Code (catour.courtney@uaoc.daemily.com) Amazon Survey Winner‏



(sender IP is 193.254.35.239) smtp.mailfrom=catour.courtney@daemily.com; dkim=pass header.d=daemily.com; x-hmca=pass header.id=catour.courtney@uaoc.daemily.com
X-SID-PRA: catour.courtney@uaoc.daemily.com
X-AUTH-Result: PASS
X-SID-Result: PASS
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Message-Info: M98loaK0Lo1tWPCbe4OE0Ql3djEnVfuA8v0qtNgD5LIilRa38R8F66sn2MTQtZQySvh/7GkkxRMMXKivs7K7AFh8wThX11Sfq5/2TmY3fbCPLWnhMWpoEA8Fl4HvXusfDBgE/8+FarK9X6GgzwnHINDEUsGIlFjDB5bxuFzB0BdSfcvK13RfFokZz5Hwmc6ulRLEvn2aHl6itJEr66B5LpB77Ni2YksF
Received: from daemily.com ([193.254.35.239])
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=key1; d=daemily.com;
 h=Message-ID:From:To:Date:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding; i=catour.courtney@uaoc.daemily.com;
 bh=j5mIONilvKMoTZSdWzoc6xoxHdQ=;
 b=qtt6wPnFRYAnnbrgBCMgzgbiorBENKzfshS1pHmjK/nFwFadKU/ubHR8bM3fpBg6VXx27Wixn6B4
   g+Fg0fFh09dkdPNkuRg3WAjHoyz1tqUC0e+oA6SxQ1tLVt5jOjBjBxiMLobZIbqCTdTDIwgYUmEl
   BrcYxbCBuM5oLpn8dts=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=key1; d=daemily.com;
 b=VFKEBWunQfSTOd1C/CSbzNk9T6LnwikTaxe4A7cDj8o/X9uThKmkCBRHf7hMRj7vdoBHWvSfn73o
   12sG+YI5cDIM/te4VWBC0OsFVtneaxKXH3b8AlcFDHWWk2Tqs5d24O+b4vcjPBVh90EJcUB5MtO0
   54t5wh2+QA8NkZCStDA=;
Received: by daemily.com id h17d500ickg5 for (envelope-from <catour.courtney@daemily.com>)
Message-ID: <703682325.5253588.83928.iziwhuci.53512@daemily.com>
From: "Amazon Voucher Code" <catour.courtney@uaoc.daemily.com>
Date: Sun, 23 Feb 2014 13:08:34 +0200 (EET)
Subject: Amazon Survey Winner 
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1-6185109013-987309360574147=:34938"
Content-Transfer-Encoding: 8bit
Return-Path: catour.courtney@daemily.com

Saturday, February 15, 2014

The Ford Foundation (rune1@pto.no) GRANT AWARD‏

The Ford Foundation would like to inform you that your email address has been chosen by the board of directors as one of the final recipients of a Cash Grant /Donation Of The sum of 1.5 Million USD' Please contact redeem3@zsk.name for more information on how to proceed further.

Chair of the Board, Ford Foundation.


(sender IP is 198.154.254.193) smtp.mailfrom=rune1@pto.no; dkim=none header.d=pto.no; x-hmca=none header.id=rune1@pto.no
X-SID-PRA: rune1@pto.no
X-AUTH-Result: NONE
X-SID-Result: NONE
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MjtHRD0yO1NDTD00
X-Message-Info: 8o1DqI9Z3c1ot8HYuOMd7a1691dBooAM7ijZkq0fTks5KDcQoHeKkDc5vKxhKfX57tAXM+64aFEQJLx/BzpACG+bcgmxPnmigzyjFBdMsPTjpAwlCxTlfDgnqhuUgvsPjT+HzPIngkCBEVudPL1I9KXSIx5hDa4PrJvb8Lui9tAqAoKT+bZEzYCZUKt2YfdDPknNKuBhF1hGAAQGlP37zL3gNLGjDm5u
Received: from inf.informams.com.br ([198.154.254.193])
Received: from [219.140.69.122] (port=1185 helo=User)
 by inf.informams.com.br with esmtpa (Exim 4.82)
 (envelope-from <rune1@pto.no>)
 id 1WE6FF-0001BB-M9; Thu, 13 Feb 2014 21:03:07 -0300
Reply-To: <redeem3@zsk.name>
From: "The Ford Foundation"<rune1@pto.no>
Subject: GRANT AWARD
Date: Fri, 14 Feb 2014 02:03:03 +0200
MIME-Version: 1.0
Content-Type: text/plain;
 charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - inf.informams.com.br
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - pto.no
X-Get-Message-Sender-Via: inf.informams.com.br: authenticated_id: itaporan/only user confirmed/virtual account not confirmed
X-Source: 
X-Source-Args: 
X-Source-Dir: 
Bcc:
Return-Path: rune1@pto.no