Fake Order Scam - Gudmundur Yngvason

Purchase / Overpay with Stolen credit Card / Western Union Excess Funds Scam


The source host name is "215-50-228-83.btc-net.bg" and the source IP address is 83.228.50.215


Geo-Location Information

Country Bulgaria

City Burgas

Subject: Chrismas Order To Iceland


From: Gudmundur Yngvason


Reply-To: [email protected]



Begin Scam Email:


Hi,


I would like to place an order in your company,and I will like to confirm if you ship to Iceland and my payment will be remitted via Visa/Master Card. So please let me know if you can assist me with the order,and please do not forget to include your website in your reply,I will be very glad if you treat this email with good concern.

I will like you to get back to me if you can ship to that destination.

Regard's
Gudmundur Yngvason

End Scam Email

Commentary:

Sales Enquiry In Progress on this one .

T5

Answer to my sales enquiry :

From [email protected]

Please don't worry about shipping cost.I have a shipping agent that will come for the pickup of the package in your location and i have notify them about this and they told me the best way for them is to come for the pickup in your location and is for you to email me with the information needed below so that they can estimate the actual freight quote of the package.



* Your Company Name and Address ?
* Date and time the package will be ready for pickup at your location?
* Contact Person for the pickup arrangement ?
* Telephone Number ?
* Weight of the package and how many boxes are they ?
* Total cost without the freight charges?



Kindly get back to me with this detailed info so i can forward my credit card details to you for the payment Asap!


Best Regards
Gudmundur Yngvason

Daeluval Vídd Ltd.
Tröllaborgir 18.
112 Reykjavík.
Iceland
Tel. + 354 561 3274
Fax + 354 552 5184
IS- Iceland Reg number: 520427-1064. Tax/Vat number: 74516

Commentary by T5

Iceland transfer phone numbers . Probable location West Africa .

Lagos Nigeria location confirmed . We will probably be seeing more Iceland Transfer Number Scams .

From 41.155.2.100

dial-pool2.lg.starcomms.net

Lagos Nigeria


Begin Scam Email

Hi,



I would like to place an order in your company,and I will like to confirm if you ship to Iceland and my payment will be remitted via Visa/Master Card. So please let me know if you can assist me with the order,and please do not forget to include your website in your reply,I will be very glad if you treat this email with good concern.

I will like you to get back to me if you can ship to that destination.



Regard's
Gudmundur Yngvason

End Scam Email

X-SA-Exim-Mail-From: [email protected]
Subject: Iceland Mail Order

From: John Baldur

Reply-To: [email protected]

Updated details on these scammers.

Begin Scam Email:


Hi,

I would like to place an order in your company,and I will like to confirm if you ship to Iceland and my payment will be remitted via Visa/Master Card. So please let me know if you can assist me with the order,and please do not forget to include your website in your reply,I will be very glad if you treat this email with good concern.
I will like you to get back to me if you can ship to that destination.

Regard's
John Baldur

End Scam Email

Header Details:

Delivered-To: xxxxxx
Received: by 10.180.107.66 with SMTP id ha2cs158239wib;
Sat, 24 Dec 2011 00:45:45 -0800 (PST)
Received: by 10.14.121.196 with SMTP id r44mr7059073eeh.55.1324716344546;
Sat, 24 Dec 2011 00:45:44 -0800 (PST)
Return-Path: <[email protected]>
Received: from mailscan.tbox.co.za ([98.158.181.133])
by mx.google.com with ESMTPS id 64si9606472eej.120.2011.12.24.00.45.44
(version=TLSv1/SSLv3 cipher=OTHER);
Sat, 24 Dec 2011 00:45:44 -0800 (PST)
Received-SPF: neutral (google.com: 98.158.181.133 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=98.158.181.133;
Authentication-Results: mx.google.com; spf=neutral (google.com: 98.158.181.133 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from www-data by mailscan.tbox.co.za with local (Exim 4.69)
(envelope-from <[email protected]>)
id 1ReNEZ-0008FQ-T9
for xxxxxx; Sat, 24 Dec 2011 08:45:40 +0000
To: xxxxxx
From: John Baldur <>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Sat, 24 Dec 2011 08:45:39 +0000
X-SA-Exim-Connect-IP: <locally generated>
X-SA-Exim-Mail-From: [email protected]
Subject: ORDER TO ICELAND
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on mailscan.tbox.co.za
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.3 required=5.0 tests=BAYES_80,FH_FROMEML_NOTLD,
FROM_NO_USER,NO_RELAYS,SUBJ_ALL_CAPS autolearn=no version=3.2.4
X-SA-Exim-Version: 4.2.1 (built Thu, 25 Oct 2007 20:25:01 +0000)
X-SA-Exim-Scanned: Yes (on mailscan.tbox.co.za)

Just wanted to update. I got a very similar version of this scam today and the name he used is Erik Hutton.