Scam Email: Cynthia Hilson

Here is an email I received this morning from an artist:

Good work Kathleen. Thanks for taking the time to compile the scam list. Just received my first scam this morning from:

Cynthia Hilson [cynthilson@gmail.com]

The original email is below.

Received: from unknown (HELO cloudmark1) (10.49.16.75)
From: "Cynthia Hilson" [cynthilson@gmail.com]
Subject: artworks purchase
Date sent: Sun, 30 Oct 2011 06:06:00 -0400

Good day to you.

I am so excited that I came across of your work on internet search,I am interested in purchasing these creative artworks from you.....................

The Valley,Logging Road,Green Apples,Creole Cabin and Portrait of a Jug

Let me know their various prices.and how much discounts are you going to give?I will be happy to have these selected artworks hung in our new home in South Africa.As well,I want you to take out the shipping cost.I have been in touch with a shipping firm that will be shipping other house decoratives.

We are traveling from our Seattle home to our new apartment as soon as possible.On Paying for the artworks,I will be glad to pay you with a Money Order or Cashier`s check in US funds that can be easily cashed at your local bank,please let me know on how to proceed for the payment of the creative artworks.

I will await your advise on how to proceed.Have a wonderful day.

Take care,
Cynthia Hilson

Scam Email: Lynda James

Scammers choosing James as part of their fake name seems like a really common thing. Clearly they don't use a name randomizer. Ooops. Mustn't give them any additional ideas.

Here is one an artist forwarded to me this morning:

Time Submitted: Mon, 24 Oct 11 04:14:54 +0100
From IP: 41.205.173.195

NAME = Lynda
EMAIL = lynda.jameshop@gmail.com
EMAILCONFIRMATION = lynda.jameshop@gmail.com
TELEPHONE = 4755875436
COMMENT = Good Day,

I'm Lynda James from Norway.I want to place an order and i know the difficulties encountered when shipping internationally,But that will not be a problem because i am registered with a shipping company which i'v used severally times without any delay nor damage.
Before i place the order,i want to inform you that i will be making the payment with my Mc/Visa cards because as for now i can only make payment with my US credit card account information,so if it's okay by you kindly get back to me with the contact details and please reconfirm your website so as to know if i'm right with the site.I awaiting your swift response so as to list out the items needed.

Lynda-J-Supperstore
Strandgaten 34,
N-5817 BERGEN,
Norway.
Telephone: 4755875436
Telefax: 4755875427

Warmest Regards,
Lynda James. 

Scam Email: Ricky Tetteh

Ah yes, this is exactly the kind of language I use when I talk about my art with clients..... NOT!

And what is with the signature?? The fake name has the middle initial AFTER the last name? So lame.

Return-path: [oforidankwa05@gmail.com]
Delivery-date: Wed, 05 Oct 2011 19:07:22 -0500
Received: from mail-gx0-f171.google.com ([209.85.161.171]:60236)
Sender: oforidankwa05@gmail.com
Date: Thu, 6 Oct 2011 00:41:21 +0100
X-Google-Sender-Auth: pXWfyzBrIfvo4RaNYio4MyOMB6I
Message-ID:
Subject: Supply Inquiry
From: Amason Ventures Ltd
To: undisclosed-recipients:;

Dear Sir

There is an on-going tender for the purchase of your products in large quantity, I will like to know if you can handle the supply order of your company's product to the Government of Ghana in West Africa. I am a commission agent.

Please Can you furnish us in full details about the standard of your products.We will appreciate it more if you can give us with detail specification/price lists to avoid making a wrong choice of product.

Please Reply directly to myemail:amasonventuresltd@msn.com

Ricky Tetteh E.
amasonventuresltd@msn.com

Scam Email: Patrick Doe

This came from the same servers I saw on a different scam email I posted Monday, so clearly the same scammer is exploiting the same server to send out their massive mailings. And will likely continue to do so until the owners of those servers realize what is going on and plug the security hole.

Return-path: [dientito@gitserver2net.gitserver2.net]
Delivery-date: Wed, 05 Oct 2011 09:25:28 -0500
Received: from gitserver2net.gitserver2.net ([173.192.23.66]:55184)
Subject: Order Enquiry
From: Patrick Doe [patdoe@blumail.org]
MIME-Version: 1.0
Content-Type: text/html
Message-Id: [E1RBSPX-00059d-Pc@gitserver2net.gitserver2.net]
Date: Wed, 05 Oct 2011 09:25:27 -0500

Hello, This mail is to make inquiry on the below question. 1- Do you carry overseas? (though i already know of a freight forwarder that will pick my packages from you,since they ship lesser than any other courier and they are so effective in shipping my goods to me here in Giza, Cairo, Egypt is estimated to be Next Day Service and 3-4days) I have used their services in the past and it was splendid. 2- Do you accept credit card for payment(U.S.A Master and Visa card to be precise)? Kindly let me know your comments on these, before i send the items I am interested in purchasing from you.

Patrick Doe
Store Owner

Scam Email: John Cool

Got two scam emails in succession last night, one at 12:34 am and the second at 12:57 am. It was probably the same scammer sending out a massive mailing because both had similar characteristics - generic fake first name with no last name, both signed just "purchasing manager", and the email content and format basically identical, and sent so close together in time. So I'll post both of them below.

first one received:

Return-path: [dientito@gitserver2net.gitserver2.net]
Delivery-date: Mon, 03 Oct 2011 02:34:37 -0500
Received: from gitserver2net.gitserver2.net ([173.192.23.66]:58112) Mexico
Subject: Order List
From: john [johncool461@gmail.com]
X-AntiAbuse: Sender Address Domain - gitserver2net.gitserver2.net

Good day,

We browsed through your web page and we are interested in ordering some of your products,we are located in Finland,we will like to know if you have the items in stocks,so kindly get back to me with the right contact person email,phone # and confirmation of website so that we can place my order quickly, and i want to know if you have your own personal shipper or can the order be picked up at your store,please advise so that we can proceed by going ahead to place the order.

Regards
Purchasing Manager

 second one received:

Return-path: [anonymous@megatron.webapptron.com]
Delivery-date: Mon, 03 Oct 2011 02:57:18 -0500
Received: from [209.216.201.191] (port=55203 helo=megatron.webapptron.com)
Received: (qmail 25906 invoked by uid 48); 29 Sep 2011 18:10:06 -0700
Date: 29 Sep 2011 18:10:06 -0700
Message-ID: [20110930011006.25882.qmail@megatron.webapptron.com]
Subject: Email order
From: smith [sec@yahoo.com]
Reply-To: smithpayne91@yahoo.com

Good day,

We browsed through your web page and we are interested in ordering some of your products,we are located in Norway,we will like to know if you have the items in stocks,so kindly get back to me with the right contact person email,phone # and confirmation of website so that we can place my order quickly, and i want to know if you have your own personal shipper or can the order be picked up at your store,please advise so that we can proceed by going ahead to place the order.

Regards

Purchasing Manager