Search This Blog

Showing posts with label John Cool. Show all posts
Showing posts with label John Cool. Show all posts

Monday, October 3, 2011

Scam Email: John Cool

Got two scam emails in succession last night, one at 12:34 am and the second at 12:57 am. It was probably the same scammer sending out a massive mailing because both had similar characteristics - generic fake first name with no last name, both signed just "purchasing manager", and the email content and format basically identical, and sent so close together in time. So I'll post both of them below.

first one received:
Return-path: [dientito@gitserver2net.gitserver2.net]
Delivery-date: Mon, 03 Oct 2011 02:34:37 -0500
Received: from gitserver2net.gitserver2.net ([173.192.23.66]:58112) Mexico
Subject: Order List
From: john [johncool461@gmail.com]
X-AntiAbuse: Sender Address Domain - gitserver2net.gitserver2.net

Good day,

We browsed through your web page and we are interested in ordering some of your products,we are located in Finland,we will like to know if you have the items in stocks,so kindly get back to me with the right contact person email,phone # and confirmation of website so that we can place my order quickly, and i want to know if you have your own personal shipper or can the order be picked up at your store,please advise so that we can proceed by going ahead to place the order.

Regards
Purchasing Manager
 second one received:

Return-path: [anonymous@megatron.webapptron.com]
Delivery-date: Mon, 03 Oct 2011 02:57:18 -0500
Received: from [209.216.201.191] (port=55203 helo=megatron.webapptron.com)
Received: (qmail 25906 invoked by uid 48); 29 Sep 2011 18:10:06 -0700
Date: 29 Sep 2011 18:10:06 -0700
Message-ID: [20110930011006.25882.qmail@megatron.webapptron.com]
Subject: Email order
From: smith [sec@yahoo.com]
Reply-To: smithpayne91@yahoo.com

Good day,

We browsed through your web page and we are interested in ordering some of your products,we are located in Norway,we will like to know if you have the items in stocks,so kindly get back to me with the right contact person email,phone # and confirmation of website so that we can place my order quickly, and i want to know if you have your own personal shipper or can the order be picked up at your store,please advise so that we can proceed by going ahead to place the order.

Regards

Purchasing Manager

Wednesday, September 7, 2011

Scam Email: John Cool

I got two of these, the second one coming only 9 minutes after getting the first one, both identical. This scammer decided not to even bother with a fake name.


Return-path: [geaveens@charon.e-dentify.nl]
Delivery-date: Wed, 07 Sep 2011 09:43:16 -0500
Received: from [94.100.20.18] (port=55062 helo=charon.e-dentify.nl)   
    (envelope-from )
    id 1R1JLQ-0004W7-AV
Received: from geaveens by charon.e-dentify.nl with local (Exim 4.69)
    (envelope-from )
    id 1R1JL8-0001lD-8q
Subject: Order Inquiry
From: john [johncool461@gmail.com]
Reply-To:
 johncool461@gmail.com
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: [E1R1JL8-0001lD-8q@charon.e-dentify.nl]
Date: Wed, 07 Sep 2011 16:42:58 +0200
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Originator/Caller UID/GID - [700 696] / [47 12]
X-AntiAbuse: Sender Address Domain - charon.e-dentify.nl

Good day,

We browsed through your web page and we are interested in ordering some of your products,we are located in Finland,we will like to know if you have the items in stocks,so kindly get back to me with the right contact person email,phone # and confirmation of website so that we can place my order quickly, and i want to know if you have your own personal shipper or can the order be picked up at your store,please advise so that we can proceed by going ahead to place the order.

Regards
Purchasing Manager