John Gilmore - good English!

[greenbarn]

Hello,
My name is John Gilmore and I have clients from abroad requiring
accommodation.I
will need to know if can accommodate 2 couples (4 adults) arriving 16th January
to depart 30th January. If you do have availability,I will need you to address
the following points;

1. I will need you to send me the all inclusive cost for the accommodation of
the 4 guests(2 couples) for the 2 weeks in January. If the requested dates are
unavailable,please be at liberty to suggest any alternative dates in February.

2. Please let me know if you accept credit card payments because I am working
out of UK and do not have access to banking facilities. I will pay by sending
my
credit card information on email or phone.

3. I will also need some bookings to be made on behalf of the guests for some
other external needs.These external needs will include things like car
hire,meals, excursions and so on. For this,I will need contacts for the local
tourist office to see if they can provide me with an agent that can handle
these
services.

Please get back to me with specific answers to the points above via email. I
hope to hear from you soon.
Kind Regards,John Gilmore.
+447005947571
+447005-942-691 Fax
john_gilmoe54@live.com

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

--
Este mensaje ha sido analizado por MailScanner
en busca de virus y otros contenidos peligrosos,
y se considera que está limpio.
For all your IT requirements visit: http://www.transtec.co.uk

[Paul Carmel]

Good English maybe, but the first line lets him down:-

"My name is John Gilmore and I have clients from abroad requiring
accommodation"

[greenbarn]

Good English maybe, but the first line lets him down:-

"My name is John Gilmore and I have clients from abroad requiring accommodation"

That was what raised the alarms!

I can't work out who to report this one to, and there's no help (to me) in the message header (below). Any clues?

From: John Gilmore <john_gilmoe54@live.com>
Subject: Accommodation Request.
Date: 27 November 2009 00:32:48 GMT
To: john_gilmoe54@live.com
Reply-To: great_groups2@hotmail.com
Return-Path: <john_gilmoe54@live.com>
Received: from rly-db06.mx.aol.com (rly-db06.mail.aol.com [172.19.130.81]) by air-db01.mail.aol.com (v126.13) with ESMTP id MAILINDB012-acd4b0f1ea12ff; Thu, 26 Nov 2009 19:35:01 -0500
Received: from mail13.extendcp.co.uk (mail13-f.extendcp.co.uk [79.170.40.141]) by rly-db06.mx.aol.com (v125.7) with ESMTP id MAILRELAYINDB063-acd4b0f1ea12ff; Thu, 26 Nov 2009 19:34:42 -0500
Received: from correo.sichca.com.co ([200.74.146.149]) by mail13.extendcp.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69) id 1NDonJ-0005cx-8D for enquiries@greenbarncottages.co.uk; Fri, 27 Nov 2009 00:34:41 +0000
Received: from correo.sichca.com.co (localhost.localdomain [127.0.0.1]) by correo.sichca.com.co (8.13.1/8.13.1) with ESMTP id nAR0Wu3A028626; Thu, 26 Nov 2009 19:32:56 -0500
Received: (from apache@localhost) by correo.sichca.com.co (8.13.1/8.13.1/Submit) id nAR0WmlI028618; Thu, 26 Nov 2009 19:32:48 -0500
Received: from 192.168.17.14 ([192.168.17.14]) by 192.168.17.10 (IMP) with HTTP for <servicio@127.0.0.1>; Thu, 26 Nov 2009 19:32:48 -0500
X-Authentication-Warning: correo.sichca.com.co: apache set sender to john_gilmoe54@live.com using -f
Message-Id: <1259281968.4b0f1e3080a6f@192.168.17.10>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
User-Agent: Internet Messaging Program (IMP) 3.2.6
X-Originating-Ip: 192.168.17.14
X-Hyundai-Mailscanner-Information: Please contact the ISP for more information
X-Hyundai-Mailscanner: Found to be clean
X-Hyundai-Mailscanner-Spamcheck: no es spam, SpamAssassin (no almacenado, puntaje=-4.108, requerido 3.2, autolearn=not spam, ALL_TRUSTED -1.80, BAYES_00 -2.60, FROM_HAS_ULINE_NUMS 0.29)
X-Hyundai-Mailscanner-From: john_gilmoe54@live.com
X-Spam-Status: No
X-Aol-Ip: 79.170.40.141
X-Mailer: Unknown (No Version)

[Windy]

He wants to stay with us too GB

Isn't there a hotmail spam abuse adress somwhere?

[altyfc]

And he wants to stay with us (as in http://www.dedicate.co.uk ). I'm not sure our office can accommodate a party of that size.

[greenbarn]

Okay - I've forwarded the whole lot with headers to abuse@hotmail.com

[goosie]

he doesn't want to stay with us but it is very similar to the scam from Winston that I posted a couple of weeks back. Slightly more sophisticated in terms of dates, tailored to your property etc. got me going for a bit I admit

[altyfc]

We've got Tim Harrison wanting to stay in our office also. Unfortunately the dates clash with Mr. Gilmore's...

Hello,

I want to make a reservation in your facility for Six (6) newly ordained priest from Greece they will be visiting your country for a seven (7) days religious program in the month of Jan 2010.

Arrival Date :17th Jan 2010

Departure Date:24th Jan 2010

Number of guest:6

Number of rooms:3

Kindly confirm availability and get back to me with the cost, so that we can pay a deposit for the rooms to be reserved for them, am waiting for your swift response.

Regards

Mr.Tim Harrison

[greenbarn]

Had a response from Microsoft to say that they've closed the two accounts.
Thought that was pretty quick?

[Windy]

Not bad!

[annafern]

just had my second from John Gilmore and its a different email address. jgpowers47@yahoo.com

how do i report him with this new email address?

the first one came in on Thursday and what rang alarm bells for me is the to: address is always undisclosed.

With these scams i can never work out what they are trying to achieve as they do say they want to pay by credit card?

[greenbarn]

Same here:
I AM RESENDING THE EMAIL I SENT TO YOU EARLIER DUE TO EMAIL PROBLEMS.PLEASE
REPLY TO THIS MAIL AND UPDATE ME BASED ON MY LAST MAIL.
Thank you. J. Gilmore.

Persistent, isn't he?

I assume it's an overpayment scam, particularly as there's the mention of additional service he wants booked. His credit card payment will be worthless, made with a stolen card ID, or charged back.

Yahoo have a reporting form here

[Windy]

He's a bit insistent isn't he - same repeated email here

[Mountain Goat]

jgpowers47 @yahoo.com

Find the original headers from the incoming email (depends on your email system - in Gmail it's the dropdown menu via the arrow to the right of the Reply button), copy them into the original email and forward to:

abuse @ yahoo.com

Same procedure with most of the other email systems.

God bless.

MG

[greenbarn]

Part of the response from Yahoo

After investigation, we have determined that this email message did not
originate from the Yahoo! Mail system. It appears that the sender of
this message forged the header information to give the impression that
it came from the Yahoo! Mail system.