Brian999 just tried to scam me

[hongkongpfui]

Brian999 just tried to scam me per email he did send a spoofed fake email that claims to be from the real escrow.ms usere here

after i told him via email nice try and that i will report him no more reply


if escrow.ms reply here in the post that it was really him who send me an email i will apologize and remove this topic

[Brian999]

poor .

i don't know why . i only ask he work with escrow . don't sent email for escrow

https://i.imgur.com/80Yogti.png

https://i.imgur.com/kjDbwHL.png

https://i.imgur.com/erThN10.png

https://i.imgur.com/1uYVovP.png

https://i.imgur.com/lHLcUQn.png

https://i.imgur.com/VG7zGSY.png

https://i.imgur.com/04oe6Wr.png

[hongkongpfui]

Just wired that just after 2 minutes i got an email from "escrow.ms"

how he know you contacted me by miracle ?


Dude go away

Von:    Business escrow <escrovv.ms@gmail.com>
An:    brandfratz@gmail.com
Datum:    4. August 2014 22:09
Betreff:    escrow service


https://i.imgur.com/cJNoHd0.png


so if that was not you how the fuck this guy should email me ?

[Brian999]

i don't contact . i see he off
so i have sent you 2 link escrow. .

[escrow.ms]

I don't provide escrow on email or IM services so if you have received any email, it's 100% Fake.

@Hong can you please post screenshot and email source? Also check source of brian's email

[hongkongpfui]

FAKE EMAIL HEADER :

Delivered-To: brandfratz@gmail.com
Received: by 10.152.48.50 with SMTP id i18csp308883lan;
        Mon, 4 Aug 2014 08:09:40 -0700 (PDT)
X-Received: by 10.42.63.15 with SMTP id a15mr32456421ici.80.1407164950314;
        Mon, 04 Aug 2014 08:09:10 -0700 (PDT)
Return-Path: <escrovv.ms@gmail.com>
Received: from mail-ie0-x242.google.com (mail-ie0-x242.google.com [2607:f8b0:4001:c03::242])
        by mx.google.com with ESMTPS id jc19si40964553icc.66.2014.08.04.08.09.09
        for <brandfratz@gmail.com>
        (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
        Mon, 04 Aug 2014 08:09:10 -0700 (PDT)
Received-SPF: pass (google.com: domain of escrovv.ms@gmail.com designates 2607:f8b0:4001:c03::242 as permitted sender) client-ip=2607:f8b0:4001:c03::242;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of escrovv.ms@gmail.com designates 2607:f8b0:4001:c03::242 as permitted sender) smtp.mail=escrovv.ms@gmail.com;
       dkim=pass header.i=@gmail.com;
       dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-ie0-x242.google.com with SMTP id rl12so2267419iec.9
        for <brandfratz@gmail.com>; Mon, 04 Aug 2014 08:09:09 -0700 (PDT)
Return-Path: <escrovv.ms@gmail.com>
Received-SPF: pass (google.com: domain of escrovv.ms@gmail.com designates 10.50.221.99 as permitted sender) client-ip=10.50.221.99
X-Received: from mr.google.com ([10.50.221.99])
        by 10.50.221.99 with SMTP id qd3mr37604621igc.3.1407164949090 (num_hops = 1);
        Mon, 04 Aug 2014 08:09:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:date:message-id:subject:from:to:content-type;
        bh=yQ0gbdOmjt43lLd9VbcjhNxMcXA/HbNNoxGfdMxyn5Q=;
        b=mwwWqD8IvB+wcLMUEGGavFvxQ0B/hHT80mdx3zkFDdXla1VfhUulQ8i8+/qLtPR7pD
         QNL/96L2Ef/ZHaYLRpDAHVy/nK74WiO2K784QF0sBSgAqgTacnw1iUk+VQiqksMwvxzK
         9XfrV0im5QgtLQB2c9enb8nVhN0DQWOT3D0N5y8ZQGsGo137ChwXwPQB91JlO4ZUMmK9
         XVfN5QsMMKGBXBOx+o5LAZKS+1r8AslV920KcoaBkgwQgUyBY9Bs460B5clg+7C8oImT
         RFgZX8Qr/z5k1BrY9NHgzjddvPAroZNMmwc/wlAA7M/sc6GO2Lg6wlOfE/85fm2qTSGu
         KV/A==
MIME-Version: 1.0
X-Received: by 10.50.221.99 with SMTP id qd3mr37604621igc.3.1407164949082;
 Mon, 04 Aug 2014 08:09:09 -0700 (PDT)
Received: by 10.107.4.203 with HTTP; Mon, 4 Aug 2014 08:09:09 -0700 (PDT)
Date: Mon, 4 Aug 2014 23:09:09 +0800
Message-ID: <CAGgFoBSmDo6=KJz6xXvOQ_FFkfoMvOimO1Gn7CBgxbpK8y529A@mail.gmail.com>
Subject: escrow service
From: Business escrow <escrovv.ms@gmail.com>
To: brandfratz@gmail.com
Content-Type: multipart/alternative; boundary=001a11346f68ee44d904ffcf1ef4

--001a11346f68ee44d904ffcf1ef4
Content-Type: text/plain; charset=UTF-8

i have get work escrow on forum . BTC for skrill . right?

--001a11346f68ee44d904ffcf1ef4
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">i have get work escrow on forum . BTC for skrill . right?=
=C2=A0<div><br></div></div>

--001a11346f68ee44d904ffcf1ef4--

BRAIN'S EMAIL HEADER :

                                                                                                                                                                                                                                                              
Delivered-To: brandfratz@gmail.com
Received: by 10.152.48.50 with SMTP id i18csp311844lan;
        Mon, 4 Aug 2014 08:50:50 -0700 (PDT)
X-Received: by 10.229.191.2 with SMTP id dk2mr37296583qcb.8.1407167450429;
        Mon, 04 Aug 2014 08:50:50 -0700 (PDT)
Return-Path: <brian999@fastservice.com>
Received: from mout.gmx.com (mout.gmx.com. [74.208.4.201])
        by mx.google.com with ESMTPS id 8si29120545qah.127.2014.08.04.08.50.49
        for <brandfratz@gmail.com>
        (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Mon, 04 Aug 2014 08:50:50 -0700 (PDT)
Received-SPF: none (google.com: brian999@fastservice.com does not designate permitted sender hosts) client-ip=74.208.4.201;
Authentication-Results: mx.google.com;
       spf=neutral (google.com: brian999@fastservice.com does not designate permitted sender hosts) smtp.mail=brian999@fastservice.com
Received: from [27.73.174.190] by 3capp-mailcom-lxa10.server.lan (via HTTP);
 Mon, 4 Aug 2014 17:50:49 +0200
MIME-Version: 1.0
Message-ID: <trinity-0d714b2f-977a-4ce6-a887-e8d1e049d7f7-1407167448772@3capp-mailcom-lxa10>
From: "exchange service" <brian999@fastservice.com>
To: "brand wand" <brandfratz@gmail.com>
Subject: Re: Bitcoins
Content-Type: text/html; charset=UTF-8
Date: Mon, 4 Aug 2014 17:50:49 +0200
Importance: normal
Sensitivity: Normal
In-Reply-To: <CAE1SnVHbKzbOdBCHGEXi_-xYM6zM=ocYJsRftwoEchyx+fUQEg@mail.gmail.com>
References: <CAE1SnVF0zL9uS5fXrAgGuvFSWqiX5snnCj9BrQS0CH1eKnhZ3g@mail.gmail.com>
 <trinity-a48290d7-3d38-4f0b-a622-59288c50e1d3-1407164418473@3capp-mailcom-lxa03>
 <CAE1SnVH0AxXeH3q_ocat1hMwoQq28BH+FOq=TorAiYcEpuvUEQ@mail.gmail.com>
 <trinity-9d1d14c3-2718-4da0-8562-72ca77676b64-1407164654700@3capp-mailcom-lxa03>
 <CAE1SnVFcjnRfC+ca_L+51AuKxByBMJW-ZZLHx-8iC7=8QHN3Pg@mail.gmail.com>
 <trinity-1578bc27-f6e5-43ab-976f-ba04e45f68e6-1407165651576@3capp-mailcom-lxa10>
 <CAE1SnVE_6a652gAYb9C6iiQ5_sNsO3NtuiCV+uiZ5aqEbzqSVw@mail.gmail.com>
 <trinity-20b8b00b-466c-44d9-80b8-4d29c2558e21-1407165898172@3capp-mailcom-lxa10>
 <CAE1SnVGSc3LJVm55TxVrTeHDu-vbABrTYHMaJce4Eno+4o-FPg@mail.gmail.com>
 <trinity-bd8e50dc-48c0-48ad-9f6d-6dc32b266edd-1407166825589@3capp-mailcom-lxa10>,
 <CAE1SnVHbKzbOdBCHGEXi_-xYM6zM=ocYJsRftwoEchyx+fUQEg@mail.gmail.com>
X-UI-Message-Type: mail
X-Priority: 3
X-Provags-ID: V03:K0:GRolyET8+EAvLW3D4upfbd2DLvaceDr13TTu0Dukhyp
 FzNMiLFZfhqPMTEo5e8dgT01sfpXcf4/Y9VI0uPyX9JxBvrDp2
 Bwbs8jgifbRtyJBVdVJcr91WXDHlS3xBnRhLJiG7pcmRvjF86w
 reA98bkoDekA652xY6d0K8FhxJXbvMY+Rmt3oixQfy7bI9xtU4
 TXyUlt9M4iclgn84IL+4XcdgUBYnVpgBnVnAZi8lKyWUexpwA8
 up8y2kF3vnXV+6gNqiPnYPImQV4opUdcgZs6f1gF1TwswMIRuK
 6kR0dWu2kZo1NRzaj2ka5p2mJsO

i very sure don&#39;t sent you email . both delete post here<br>
<br>
<div name="quote" style='margin:10px 5px 5px 10px; padding: 10px 0 10px 10px; border-left:2px solid #C3D9E5; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;'>
    <div style="margin:0 0 10px 0;">
        <b>Sent:</b>&nbsp;Monday, August 04, 2014 at 11:42 PM<br/>
        <b>From:</b>&nbsp;&quot;brand wand&quot; &lt;brandfratz@gmail.com&gt;<br/>
        <b>To:</b>&nbsp;&quot;exchange service&quot; &lt;brian999@fastservice.com&gt;<br/>
        
        <b>Subject:</b>&nbsp;Re: Bitcoins
    </div>
    <div name="quoted-content">
        <div>go away your scam will NOT work <br/></div><div class="gmail_extra"><br/><br/><div class="gmail_quote">2014-08-04 22:40 GMT+07:00 exchange service <span>&lt;<a href="brian999@fastservice.com" target="_parent">brian999@fastservice.com</a>&gt;</span>:<br/>
<blockquote class="gmail_quote" style="margin: 0 0 0 0.8ex;border-left: 1.0px rgb(204,204,204) solid;padding-left: 1.0ex;">you edit post or me sent screen poor? i don&#39;t sent contact escow . why you tell me scam<br/>
<br/>
<div style="margin: 10.0px 5.0px 5.0px 10.0px;padding: 10.0px 0 10.0px 10.0px;border-left: 2.0px solid rgb(195,217,229);">
    <div style="margin: 0 0 10.0px 0;">
        <b>Sent:</b>&nbsp;Monday, August 04, 2014 at 11:26 PM<div><div class="h5"><br/>
        <b>From:</b>&nbsp;&quot;brand wand&quot; &lt;<a href="brandfratz@gmail.com" target="_parent">brandfratz@gmail.com</a>&gt;<br/>
        <b>To:</b>&nbsp;&quot;exchange service&quot; &lt;<a href="brian999@fastservice.com" target="_parent">brian999@fastservice.com</a>&gt;<br/>
        
        <b>Subject:</b>&nbsp;Re: Bitcoins
    </div></div></div><div><div class="h5">
    <div>
        <div>No one is online<br/><br/>and i need to sell now, so go first of forget it or find an escrow NOW<br/></div><div class="gmail_extra"><br/><br/><div class="gmail_quote">2014-08-04 22:24 GMT+07:00 exchange service <span>&lt;<a href="http://brian999@fastservice.com" target="_blank">brian999@fastservice.com</a>&gt;</span>:<br/>

<blockquote class="gmail_quote" style="margin: 0 0 0 0.8ex;border-left: 1.0px rgb(204,204,204) solid;padding-left: 1.0ex;">what i only ask you . use escrow <br/>
<a href="https://bitcointalk.org/index.php?action=profile;u=76380" target="_blank">https://bitcointalk.org/index.php?action=profile;u=76380</a><br/>
or<br/>
<a href="https://bitcointalk.org/index.php?action=profile;u=14283" target="_blank">https://bitcointalk.org/index.php?action=profile;u=14283</a><br/>
<br/>
i have two escrow. for trust . but you get fee escrow<br/>
<br/>
<div style="margin: 10.0px 5.0px 5.0px 10.0px;padding: 10.0px 0 10.0px 10.0px;border-left: 2.0px solid rgb(195,217,229);">
    <div style="margin: 0 0 10.0px 0;">
        <b>Sent:</b>&nbsp;Monday, August 04, 2014 at 11:22 PM<div><div><br/>
        <b>From:</b>&nbsp;&quot;brand wand&quot; &lt;<a href="http://brandfratz@gmail.com" target="_blank">brandfratz@gmail.com</a>&gt;<br/>
        <b>To:</b>&nbsp;&quot;exchange service&quot; &lt;<a href="http://brian999@fastservice.com" target="_blank">brian999@fastservice.com</a>&gt;<br/>
        
        <b>Subject:</b>&nbsp;Re: Bitcoins
    </div></div></div><div><div>
    <div>
        <div>Pm me on the forum if you are the REAL <a href="http://escrow.ms" target="_blank">escrow.ms</a> <br/></div><div class="gmail_extra"><br/><br/><div class="gmail_quote">2014-08-04 22:20 GMT+07:00 exchange service <span>&lt;<a href="http://brian999@fastservice.com" target="_blank">brian999@fastservice.com</a>&gt;</span>:<br/>


<blockquote class="gmail_quote" style="margin: 0 0 0 0.8ex;border-left: 1.0px rgb(204,204,204) solid;padding-left: 1.0ex;">escrow <br/>
<br/>
<a href="https://bitcointalk.org/index.php?action=profile;u=14283" target="_blank">https://bitcointalk.org/index.php?action=profile;u=14283</a><br/>
<br/>
or<br/>
<br/>
<a href="https://bitcointalk.org/index.php?topic=260070.0" target="_blank">https://bitcointalk.org/index.php?topic=260070.0</a><br/>
<br/>
?<br/>
<br/>
<div style="margin: 10.0px 5.0px 5.0px 10.0px;padding: 10.0px 0 10.0px 10.0px;border-left: 2.0px solid rgb(195,217,229);">
    <div style="margin: 0 0 10.0px 0;">
        <b>Sent:</b>&nbsp;Monday, August 04, 2014 at 11:05 PM<div><br/>
        <b>From:</b>&nbsp;&quot;brand wand&quot; &lt;<a href="http://brandfratz@gmail.com" target="_blank">brandfratz@gmail.com</a>&gt;<br/>
        <b>To:</b>&nbsp;&quot;exchange service&quot; &lt;<a href="http://brian999@fastservice.com" target="_blank">brian999@fastservice.com</a>&gt;<br/>
        
        <b>Subject:</b>&nbsp;Re: Bitcoins
    </div></div><div>
    <div>
        <div>Yes correct<br/></div><div class="gmail_extra"><br/><br/><div class="gmail_quote">2014-08-04 22:04 GMT+07:00 exchange service <span>&lt;<a href="http://brian999@fastservice.com" target="_blank">brian999@fastservice.com</a>&gt;</span>:<br/>



<blockquote class="gmail_quote" style="margin: 0 0 0 0.8ex;border-left: 1.0px rgb(204,204,204) solid;padding-left: 1.0ex;">0.22 = 129.31 USD now . so i sent you 123 MB?<br/>
<br/>
<div style="margin: 10.0px 5.0px 5.0px 10.0px;padding: 10.0px 0 10.0px 10.0px;border-left: 2.0px solid rgb(195,217,229);">
    <div style="margin: 0 0 10.0px 0;">
        <b>Sent:</b>&nbsp;Monday, August 04, 2014 at 11:01 PM<br/>
        <b>From:</b>&nbsp;&quot;brand wand&quot; &lt;<a href="http://brandfratz@gmail.com" target="_blank">brandfratz@gmail.com</a>&gt;<br/>
        <b>To:</b>&nbsp;&quot;exchange service&quot; &lt;<a href="http://brian999@fastservice.com" target="_blank">brian999@fastservice.com</a>&gt;<br/>
        
        <b>Subject:</b>&nbsp;Re: Bitcoins
    </div><div><div>
    <div>
        <div>i whant the BITSTAMP rate +5%<br/></div><div class="gmail_extra"><br/><br/><div class="gmail_quote">2014-08-04 22:00 GMT+07:00 exchange service <span>&lt;<a href="http://brian999@fastservice.com" target="_blank">brian999@fastservice.com</a>&gt;</span>:<br/>




<blockquote class="gmail_quote" style="margin: 0 0 0 0.8ex;border-left: 1.0px rgb(204,204,204) solid;padding-left: 1.0ex;">0.22 btc how many MB you want . tell me price<br/>
<br/>
<div style="margin: 10.0px 5.0px 5.0px 10.0px;padding: 10.0px 0 10.0px 10.0px;border-left: 2.0px solid rgb(195,217,229);"><div>
    <div style="margin: 0 0 10.0px 0;">
        <b>Sent:</b>&nbsp;Monday, August 04, 2014 at 10:51 PM<br/>
        <b>From:</b>&nbsp;&quot;brand wand&quot; &lt;<a href="http://brandfratz@gmail.com" target="_blank">brandfratz@gmail.com</a>&gt;<br/>
        <b>To:</b>&nbsp;<a href="http://brian999@fastservice.com" target="_blank">brian999@fastservice.com</a><br/>
        
        <b>Subject:</b>&nbsp;Bitcoins
    </div>
    </div><div><div><div>
        <div><div><div><div>Hello<br/><br/></div>i have 0.22 and i whant the bitstamp rate +5%<br/><br/></div>You send first or we use an escrow since skrill can be reversed anyway<br/><br/></div>My skill mail is the same as here<br/>





</div>

    </div>
</div></div></div>
<br/>
</blockquote></div><br/></div>

    </div>
</div></div></div>
<br/>
</blockquote></div><br/></div>

    </div>
</div></div>
<br/>
</blockquote></div><br/></div>

    </div>
</div></div></div>
<br/>
</blockquote></div><br/></div>

    </div>
</div></div></div>
<br/>
</blockquote></div><br/></div>

    </div>
</div>
<br/>


https://i.imgur.com/cJNoHd0.png

[hongkongpfui]

And no @brain999 i will not remove this topic stop to ask me in the emails you should explain this first then if escrow.ms think its ok i will delete it

[escrow.ms]

He's Return-Path: <escro v v .ms@gmail.com>

  vv looks like w


It's his email https://bitcointalk.org/index.php?action=profile;u=341589  (He tried to scam one more guy in past)
https://bitcointalk.org/index.php?action=profile;u=321122 (Multiple accounts)

@hongkongpfui  did you gave your email id to anyone else except brian?  If not, brian is ex.her

[hongkongpfui]

no @escrow.ms that is why after i got this mail i was directly sure it is just a scam


it's was brain999 for sure the only one where i did send 1 email was to him since he  did send me his email via private message

good luck next time



LOL he even copied your avatar


*EDIT*

someone should put him in the red to warn users