RSS

Monthly Archives: October 2012

“Donella” (has multiple names/emails)

WARNING – Craigslist JOB SCAM – Nigerian Scammer

Donella also sends scams under the names  
Nieves Baltimore nievesbaltimore@yahoo.com in a Craigslist rental scam
Lilia Rahall
Liliara Hall
Dixie Cleasby

From: dixiecleasby@yahoo.com
To:
Sent: Monday, January 7, 2013 6:21 AM
Subject: $550 / 2br – 1150ft² – Breezy House in Spanish Fork Move in special (Spanish Fork)

Hi

The property is a bedroom bath with garage and washer + dryer. Dogs and cats are allowed with a $100 pet fee.

The requirements to rent our property are as follows:

1. PhotoID
2. First months rent and optional fee for pets
3. Rental Agreement, I will bring this to the viewing
(Options are month-to-month, 6 month or a 1 year lease)
4. Background check for each applicant

The provider we use is Tenant Verified, here is a link.

This is an affordable way for me to screen applicants based on previous rental history and employment information. If you have a criminal record or bad tenant history, I’m flexible and I will work with you.

Contact me once you’ve completed your background check. It’s in a .pdf, you can print it and bring to the viewing or email it to me. I’m looking for real tenants not window shoppers or tire kickers, right now I have 3 rental properties and a full-time job.

What’s the best contact number for you? Are you available tomorrow?

Enjoy your Monday!

Dixie Cleasby

From: liliarahall@yahoo.com
To:
Sent: Thursday, March 14, 2013 12:23 PM

Subject: $500 / 2br – 1150ft² – 2 bed / 2 bath available now in Lindon (Lindon)
Hi R*******,
Did you receive my last email?
The property is a 2 bedroom 2.0 bath with garage and washer + dryer. Dogs and cats are allowed with a $100 cleaning fee.
Requirements to rent our property are as follows:
1. PhotoID
2. First months rent and optional fee for pets
3. Rental Agreement, I will bring it to the showing
(Options are month-to-month, 6 month or a 1 year lease)
4. Background check for each applicant
The service we use is Tenant Verified, here is a link.
This is an affordable way for me to screen applicants based on prior tenant history and job history. If you have a felony or bad tenant history, I am flexible and I will help you out.
Contact me when you have your background check. It is in a .pdf, you can print it and bring to the showing or email it to me. I am looking for real tenants not window shoppers or tire kickers, right now I have 3 rental properties and a full time job.
What is the best contact number for you? Are you available tomorrow?
Enjoy your Thursday!
Lilia Rahall

The name listed is “ Nieves Baltimore ” It seemed suspicious to me. Here is a copy of the email, sent from nievesbaltimore@yahoo.com on 1/8/13 at 8:11 a.m.

“The property is a 1 bedroom 1.5 bath with garage and full size washer and dryer. Cats and dogs are accepted with a $100 additional deposit.

Requirements to rent our property are as follows:

1. A copy of your drivers license
2. 1st months rent and optional fee for pets
3. Lease Agreement, I will bring it to the viewing
(Options are month-to-month, 6 month or a 1 year lease)
4. Background check for each applicant

The service we use is Tenant Verified, here is a link.

This is an affordable way for me to screen applicants based on previous addresses and employment information. If you have a felony or bad rental history, I am flexible and I will work with you.

Let me know when you have your background check. It is in a .pdf, you can print it and bring to the viewing or email it to me. I am looking for real tenants not window shoppers or tire kickers, I have 3 rentals and a full-time job.

What is the best contact number for you? Are you available tomorrow?

Enjoy your Wednesday!

Nieves Baltimore”

_______________

UPDATE: Donella’s newest name and email address is  DONELLA WEINGARTNER donellaweingartner@yahoo.com

NOTE: ”Donella” also known as ” Donella Pomponi ” also pretends to be Kembo009 – kelmo009@yahoo.com and Kelmo009@yahoo.com – Kelmo/Kembo009 also pretend’s to be a Craigslist Admin in a Craigslist Scam. The Craigslist email is Info@Craigslist.com and other fake corps. Donepom09 is also BernardOBI@lawyer.com and analonzo090@yahoo.com donepom09@yahoo.com

The last IP – 208.179.199.135 – has been blacklisted and 173.221.123.190 and 209.216.206.176 are most likely just associated with the scam-email. But regarding, if you come across either of the IP’s mentioned, STAY FAR AWAY. For a list of other scam/spam usernames and IP’s that are associated with this scammer, please click: 208.179.199.135

This Nigerian Scammer has been spamming my (made-up) email address under various names, emails and scams. I’m sure she is also some of the other scams I’ve posted on this site but unfortunately I can’t keep up with all of them so if you know of any other names/email addresses that Donella-Pomponi goes by, please leave them in the comment section. Thank you.

Name/Email-Address: Donella <> donepom09@yahoo.com <> 

Subject: RESUME
Email: We got your resume and email from CRAIGSLIST and we’ll like to offer you a Job with our Company after thorough review of your resume.

PRUDENT POLLS LLC is a well established Evaluating Firm, Our Primary Business is to provide exceptional Customer Service Evaluation. Our company is solely responsible for hiring survey agents and recommending them to our Clients. The clients are companies that have a wide network of businesses across America, most of our clients have retail outlet in major cities across America. What your job (Survey Agent’s Position) entails is to conduct surveys at any of our client’s retail outlet assigned to you. you will be patronizing their business and conducting a survey at the same time which mostly is in regards to the customer relationship their staffs offer.

We will therefore like to offer you the job position as a survey Agent to conduct customer service surveys in your area.

Your Job will involve you providing feedback to us about the customer experience at any client’s locations. Companies use this survey for many reasons. During a typical survey session, you will make observations at a specific store/office, restaurant, or other type of location, while acting like an average customer.

A typical survey report will include

1) How long it took you to get services.
2) Smartness of the attendant
3) Customer service professionalism

Most companies employ our expertise when people give complaints about their services, or when they feel there are needs for them to improve their customer service. Your Identity would be kept confidential as a safety measure. You will receive $400 on each survey you conduct at any time for any of our clients, and with the number of clients we currently work with, you could be conducting as much as 5-10 surveys weekly, which will earn you between $1200-$2400 weekly. That means you can earn about $78,000/year doing part time.

Our clients include:

McDonalds
Starbucks
Dunkin’ Donuts
Washington Mutual
ACME Check Cashing
Chase Financial
Walmart
MoneyGram America
Victoria’s Secret
Dell America
Western Union America
FTD Florists

No commitment is involved, no start up fees, no paper works, and you would have flexible working hours.

If you are interested, email me your full name, address and phone number, so that we can add your mailing address to our Regional
database.

First name.
Last name.
Address ….(No P.O Box)
City, State, Zip Code
Cell phone Only.

Once we receive this information and confirm your interest, we will introduce you to our clients immediately.

A swift acknowledgment of this email will be appreciated.
Warm Regards,

HEADER:

Return-Path: <donepom09@yahoo.com>
X-YahooFilteredBulk: 208.179.199.135
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: ifQ22vcWLDsHu7YfnZRFP18bufrCnJDst_adfOBeTlqEdXJ4 CJhid64YeK.WgpD5YK0F27QmPohwh0k7AZ.qJ97E0.PBfpjpnrk2v1TwNHHE 6muDb6o6LOjLCmv0eT.1MM2u.qGkT5ChOfFaU.8fQI4bc2g0aCHTyvCKWdX6 4.x5utKcq5B90ULEt0JZf29dqU.9dYg7w52uPh2nN5tiHEMgJiDfIGzM7s69 KFhzHdJSxuLBPq5L2nXV8H9ceVUyCpiFZD_l14dwmdpGnRayJQp_2JqVeON7 HYoObwxXEH0h98bC9y8qepGIaubu0l9rswQS94BppZzWL7RAS1bxW0Fs.ysg IR8ZGGRoN4zS4lulMsOfKVLEcX8noH3JeMLwN1nVYVS2urG30xRZ_9qGmdOM xTO07MYSjs7iIIwLOZfGxe0T60BL_yDnuaaDMhJeO_41N_H5f_6XiFjURgrZ dfUGFKNj5LxSSboKHOjTD5lfZDYZ_IuhR6_CtziXJfzHz1iSqggTjMPzwrr6 hu9tQzmggOdIfpAu2qnzVGFHfgrDkwWPZwkVXXEF7nIgzWK8A2wU2vsq1qG5 aLBQSmTf_ZH7kMREkBZKyPi0A77XgF_100pPycHaJa410UQph5Z8S71ChYWT 4exOa0ihWFptdLKihIii8WF.zc29QOb1_896zrxUVEBTP0lBkH8Gb2qQou2S HBXAUNiK4BHj43MhtXjEmq29qxUI_WJ8MnA5VdyRtXBippIWpSxIoWDmO_x_ sCoV2n7_Yn5fc0.RRbUM6iSH4cFyQwweFNfu4WrCPAnUhL7mMfAlGowdfk0F f.BRn7VTx8tvkFs_pjEgeLEzBD6nLjV0fZ4mg74pvMiRNABmYxvTIwSMESa8 o1qULvM.B6Sw32Jl24EIs5sgQmOj3Q64q0ZjseLCBcqcx42flja0S76NM9_m WRvO1racmCrdt7OEFaZaXFYVsY20hZeqUAbzjA_9mbXC_BzJAhnyYtwConGv eyjR0UsOBvNVTcBMgOHCrVLLNPWxKc.WDTrqFiCs8z5k4wPzTIpYwD7wFTJv svg5HWNtslqFqdMkROFFuOjgE4xVhH25kUA5U4XqCxGSbJnCa8RwnI6c30nn A7lmpehZmrs7hz2FfzZnBk3EpRrq91giaxRiMK4G8l5MXkWiSosLxpujt65e .NHOyUCU4jf2IJhccOv67Lsse1qQo1OdBe4kVxxATCOpdqN0G8XwDePIn8P9 tfqxsrsX4L8KatpIz3iDx8jlRZ19bRI9pRDvqEByy0PE09HGtL2YpziRDENY V_CoFQfik7_sBSeNJm4gl2HS8bf7O20H6M.p8ClKX8hCazws5cxs.1A22Qtl LKqRW2_GF.eTSvjIMqqNCbytz4bOYeF9UM_C6RZsTg09dtWK.hBd.KNCgyqy HTbxRfF_hp3tv6xxf2UjKioAzL1Y7Ti8zDHYetuyiaE7bY89_ABQP4Ry601n NDR51DcDR6WBZavcLijEoJtzuaR6DkE.GtJviLGWf0coGa4DFcx7m8q6_72J LpllBUuk
X-Originating-IP: [208.179.199.135]
Authentication-Results: mta1167.mail.bf1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO postoffice.altimages.com) (208.179.199.135) by mta1167.mail.bf1.yahoo.com with SMTP; Sat, 27 Oct 2012 15:31:58 -0700
Received: from 173.221.123.190.nw.nuvox.net [173.221.123.190] by postoffice.altimages.com with SMTP; Sat, 27 Oct 2012 15:06:30 -0700
Reply-To: <donepom09@yahoo.com>
From:
“Donella”<donepom09@yahoo.com>
Subject: Resume
Date: Sat, 27 Oct 2012 18:07:07 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset=”Windows-1251″
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Content-Length: 2652

Return-Path:
X-YahooFilteredBulk: 209.216.206.176
Received-SPF: fail (domain of craigslist.org does not designate 209.216.206.176 as permitted sender)
X-YMailISG: _lHCni8WLDvrWGy3pDHtD5dtHxniB5IuSukY6RXLo5vdacie UPFwjA8fJv5cizR3utChLxu9PHSc59olCOxJUTQgMPQ.z8_Y1ENjSGlVt2a. ua5VrRGyzbTzICpYi9MrHtC3EU9M8LPq8RCN.vOK0fI1z1xdIktCD8MaYnpb KYZ8I18TrDdiNeXX8JGLjfYAyrrBisnJxxOXzIcHcGzsE4YrSoQPgqzTlxmn MsM_a0K6b_DZB2Df1WiGYa5LWe1kBaxJaSp5m7b8nlFaKT9XDkPImbOXmccM jmnyhbeUrWIouL7nilPXBeFu_z6KW157UERKlhHTLoqWXOfnBV1ZQafCWpIY HIGQH0H6t6K4pFipFA3hKjct405xDONOZbI5TFCYs.9tIykzGJMQnHWiRzWr BS3nBNe7XDKlg67SWiWgxTeyGc0xUp1iPazCgZ8pbDqTpOHDuu_sq_Dg4yXE y3qdoS5Lj.xymkOj4WPl8.PnQ1eypg8AIFbkOfYV7hv9tMWUvJVhb8IQNEHx 4aVpSzCVFIB7V8lLk4TceRTqd_ORtidR51Xf_n5dhsDUWs6MdZLLVPLN0E2D VjcQLfHNwVxBNQ6ymqn2cxLmj77jDOaGV8L5V1eHEmxLai_7J9nb0wRzliNG GdE_chCpWBLr1s1dDVuBSvoDl3ozrhc47cZr2k749sosTrl7g1CwOEEYh.0y SlfLGavGBzsby5iR9pETyupE3IlKqqxBFSqU2xK9X_G5ghLyMomqlgk1MTIo qnQDPwJ6qMQw16S1QpJ4_iYxh2adUupwfPSYYHGik5bGMjiFgoNwfajBjcy0 5Pi7GwvkQ.Z9eJTOiJzZOidkheR3kC5H6XgpHcCI9asNyS01ELN.43sajJCy YTz7.Xj_.5iZUV5B3_L.e5mvslDSI0R6_0oGvC5yxihSGMKtVAD8L8neewwz qY2EcJ99eHw3a7QdxQoDtBk.UsZA5nAl.Kv9oK2kBw6PriDAwP193cOJSzjM zEIAM8EHJPbYD9p4v5Ym7R3B6DLjuaQxduSQj6aROxlKYO_F34ebVucBHhwI mvpO8DxcfbHhaQAyVzC_w33sYiopdaB1sPkGk1sYf6BU7BKJenRwm8S0neTv KNvHqxH0rx64GLjr
X-Originating-IP: [209.216.206.176]
Authentication-Results: mta1413.mail.mud.yahoo.com from=craigslist.org; domainkeys=neutral (no sig); from=craigslist.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO witt.m5hosting.com) (209.216.206.176) by mta1413.mail.mud.yahoo.com with SMTP; Mon, 01 Oct 2012 04:36:37 -0700
Received: (qmail 590 invoked from network); 1 Oct 2012 04:36:37 -0700
Received: from 173.221.123.190.nw.nuvox.net (HELO User) (173.221.123.190) by michaelmccafferty-com.m5computersecurity.com with SMTP; 1 Oct 2012 04:36:37 -0700
Reply-To:
From: “Craigslist”

173.221.123.190 <> 209.216.206.176 <> 208.179.199.135

 

Tags: , , , , , , , , , , , , , , , , , , , ,

“REV TONY JOHNSON” uba_bankof_africa591@yahoo.fr

Nigerian Scam – This Scammer has been posted on many Anti-Scam websites. Beware.

Name/Email-Address: REV TONY JOHNSON <> 00000.peter3836@att.net <>

Subject: FORM UNITED BANK FOR AFRICA

 Email: (Scammer sent link/document that I was not comfortable posting, or clicking for that matter.)

Header:

Return-Path:   <00000.peter3836@att.net>
X-YahooFilteredBulk:   98.139.91.85
Received-SPF:   none (domain of att.net does not designate permitted sender hosts)
X-YMailISG:   9kknV9oWLDtv8vRtznpLL4tOSNsNqpkx60GsStjuE6MxcWbj pwKfClOL.QTMvcLM1DeCTRRCA58LtJ3qsLU261jczA6zscd5va4dFrPXCd0e J3jD9vdjczMRii5W78ivqinobrAaYifVgOGJzc8eGNlfCB0IG7RF8xZy9Z3_ iZpVOQYkFvZXGD90QbB_p.zqu3MCfvT0wS_vX3ZJ1pqCDzkEcMzGlN0kqMpC 16EgDaXweYUo5fKTL38RIuCu5O_k4GygqaCqbeqngwNehIk5uERyD4K.7WYv PKYFhv6EfPEkyp64.VI5T8EROKUkxqumzRlhsoJhhMUl83p2kPNMJjtXCcnE JlXG6x0e.fpi.fFKOWIeDD.zlOZ3VtStaNdsjejyUT2ha4EakBxhfaKWYrMX tYvkj8JpKOkDBLLA06tbsz0GfTWtnX9V402tYzUJ_zvyyDAQfxUpB6K6Xmer xb7RqlSvfLOIJWXx9vR8SpfT7hEn_bYBw4J9XzSMYZgO7006VgsKp0dSwJ.s p.B_bA8.hH4DQA0Yg.wCKGALoWcPTn0zm5I2UDjHOBaVnY9.tk4gHzyC8H32 VEMQ6jutQLR2gbqd.itrzexsuIEniQYaWg1qHPn_rqNedC_ZnMVppjE.1WzY 5D2RM1L7eMXAMdDdGPL5gdutZzb9SkIH5jZIAJ3nIx4102lqPmyTUMInHTc. eUDYUu7YfSqk4VxKUYli.ApgiSOoXOH83lp2UcR9Wegth_8meGXF2_cIV9XP BBkmuBMAQ7joz5ya_0LDhw03vscqEdZAlK5y.KfZ2tucnRp.einNgBpu6ne_ FmPmUINhGqAB7OGbHqhDw4O158ZND2DPbboEOY8SPBLfhonxT4nwc8oqjBa0 Ab3lBM_hZvp5aDnkqFLO4KA5gYfZugmxqx0TOSKc12P6i7g45lDyKuXomZZ2 G43GuzqwuQt14qUmHlrKRdYq2yEPXEH9HaToxqss2HeHA1PsnlWNV9jw5oYp j1vBLZWwOqtiNjFEsl0hXW3EfeuRHb1BRO6NESnBDIe91yn8G0L2MYHhDLuZ MhnBVdrtp5X0oE35jbf9JdlLWTZYL..d4T.Unersk9POawr73vVcS.NZvu2D dE7hkPjIPcxHwWOrIgn17R8qM5.e.upECnZFt.z98diR5uuOjbuIMLHRn8x8 GksEysN6D60pNz2tWoYD8L4gHj.Ffqs2s7NN88la50ekFXvleEO1jPQKsI.. 2RbtSb.841SOsCklvwH9l2k2TUT.QYFFgF97c7rA7OkzVqJ6Oasna_lVtyGE Q_8ddeakp77c_sFfNSi0ZJkrn.SvWb_D
X-Originating-IP:   [98.139.91.85]
Authentication-Results:   mta1330.mail.gq1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm15.bullet.mail.sp2.yahoo.com) (98.139.91.85) by mta1330.mail.gq1.yahoo.com with SMTP; Fri, 26 Oct 2012 13:01:29 -0700
Received:   from [72.30.22.78] by nm15.bullet.mail.sp2.yahoo.com with NNFMP; 26 Oct 2012 20:01:28 -0000
Received:   from [98.139.44.92] by tm12.bullet.mail.sp2.yahoo.com with NNFMP; 26 Oct 2012 20:01:28 -0000
Received:   from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 26 Oct 2012 20:01:28 -0000
X-Yahoo-Newman-Property:   ymail-3
X-Yahoo-Newman-Id:   178330.64391.bm@omp1029.access.mail.sp2.yahoo.com
Received:   (qmail 52467 invoked by uid 60001); 26 Oct 2012 20:01:27 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1351281687; bh=RQIxipjXyx4BouKhwZOYvYRcKeMe+7hwEu6HG+WEL+o=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=YZ6JpD3YSQW1ibUtJpE7WgIV1VrnJ90JseU9ZViOOVLf6Cwsk8RgOwafTBfWS+Uy6bTqXVvhSh03CC6I/LLOGLpKngyOthP+BN1IYzVNvjlFd0ZVjXyLd1aRLdx0Rr6sfpRkGGjV5ExDdWZijT4IgBHWCLxZnctkK7iKHCWWkyI=
DomainKey-Signature:   a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=YdiXJPTNfi57rrAvl2qFQqgos7B12berpWMr2sjI4Hyx+SllX+6ACrFNrdVKEOyBwlgWyRfgm0yaZMalSMnn3/k9SRc2XU5cWZ7kQ0Aq6blIHnrdQl8XdUU048EOnxEDC4Uo9L+IdkvJx5Qmw2O4A7Rt4yh5Ak1hj81J6pUf+UM=;
X-YMail-OSG:   CnrxdaUVM1kVlJI7EBoIvg6DvDRmUrFoxHg3.LWENJwvaGh s52Ne4N3.F0QuS0uqUm9xAw.qaQBj2jQvrfc1RQ.zEoUxwIwIioTNq5.zWIZ Atm5BzoA1b3FsK_xbxh922lpBOVGOGxlTyVjvIHO_Ew.cFsCqDsmSezRjj2l v6da5CpsgQRCN.99Mu7SiuWLTB6Pw1DXFvHD1JFdfum3WpSUnWOzghoyWqK_ V7imNRSOUnU3Z8oo02aa8dSDCnAGK5Wkqivu5pQFxY46IXjuNHLPfYJeToFF dGOIHdYvIujkkxI1BBV34TMc.j.wwdayKG0stw49yi_MIXl1lByRByL223VQ DDOk4eWHjXldkzEuCAykD3o5bQKu7MiESONz4FfwfUbguimznyRHkqI46WsA _xBOXBhpH6y5LEdEIS_bGD5NFh3G2oKC_VEKX1_bEE4YzZAUXFuBShOZqNm9 7SUHvBOoj_CXwUcvNVkn8mngqHWUf0eaDzPK61dqFAuoJJH_eVpkO4teYlka jwC.r
Received:   from [173.13.200.181] by web181005.mail.ne1.yahoo.com via HTTP; Fri, 26 Oct 2012 13:01:27 PDT
X-Mailer:   YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID:   <1351281687.63772.YahooMailClassic@web181005.mail.ne1.yahoo.com>
Date:   Fri, 26 Oct 2012 13:01:27 -0700 (PDT)
From:  
REV TONY JOHNSON <00000.peter3836@att.net>  
Reply-To:   uba_bankof_africa591@yahoo.fr
Subject:   FORM UNITED BANK FOR AFRICA
To:   undisclosed recipients: ;
MIME-Version:   1.0
Content-Type:   multipart/mixed; boundary=”2044483418-1914170016-1351281687=:63772″
Content-Length:   4944

 

 
Leave a comment

Posted by on 10/27/2012 in Uncategorized

 

Tags: , , , , , , , , , ,

“Mr. Burichin J. John” a.k.a “Mr. John Abu”

419 SCAM / ADVANCE FEE FRAUD

credit_card_scam

Subject: This is to Officially Inform You
From: “JOHN ABU” <golden2un@konin.lm.pl>

Dear Beneficiary

This is to officially inform you that we have written to you before without getting respond from you and we believe that our previous mail did not get to you therefore we write you again. We are contacting you concerning the release of your inheritance fund / Draft /Cheque /ATM Card which have been delayed for transfer by some officials who claim to be in position of your fund thereby extorting money from you in one way or the other.

Your Fund has finally been approved for transfer by the West Africa Fund Monitoring Unit. Your fund will be transfer to you via MasterCard ATM/Draft/Cheque/ (any of your preferred option) which is cash able in any ATM machine or Bank anywhere in the world.

We hereby inform you that the Inheritance Funds worth of US$7,500,000.00 (Seven Million Five Hundred Thousand U.S Dollars) only has been credited in your favour as the first part payment of your inheritance fund which has been delayed by these officers who claim to be in position of your fund.

Therefore you are warned to stop any further communication with anybody concerning your inheritance fund.

Your fund to be released via MasterCard ATM/Draft /Cheque / (any of your preferred option) in act to uphold the rule of law which we represent.You have to reconfirm the information’s below for security reasons. The only money you are obliged to pay is $250 dollars which is the cost of the Delivery.

Send them the following information’s of yours for the conclusion of your ATM Card/Draft/Cheque – any of your preferred option:

Reply to the following email address: westafricafundmonitoring@live.com
I repeat reply to the following email address: westafricafundmonitoring@live.com

Full Name:__________
Delivery Address:____
Country:_______
Occupation:_____
Phone Number:____
Age:______
sex:______

Regards

Mr. John Abu

Return-Path: golden2un@konin.lm.pl
X-YahooFilteredBulk: 83.242.127.230
X-Originating-IP: [83.242.127.230]
Authentication-Results: mta1278.mail.ne1.yahoo.com from=konin.lm.pl; domainkeys=neutral (no sig); from=konin.lm.pl; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smok.lm.pl) (83.242.127.230) by mta1278.mail.ne1.yahoo.com with SMTP;
Received: from User (unknown [202.118.236.178]) by smok.lm.pl (Postfix) with ESMTP id DF6CF191B9D; Fri, 17 May 2013 23:55:44 +0200 (CEST)
Reply-To: <westafricafundmonitoring@live.com>
From: “JOHN ABU”<golden2un@konin.lm.pl>
Subject: This is to Officially Inform You
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Mr. John Burichin westafricafundmonitoring@live.com West Africa Fund Monitoring

Name/Email-Address: Mr Burichin J  John dl46988@bellsouth.net  jburichin.john00@yahoo.com 
Subject: YOU ONLY HAVE YOURSELF TO BLAME
EMAIL: FEDERAL MINISTRY OF FINANCE NATIONAL HOUSE OF ASSEMBLY COMPLEX SENATE HOUSE – UPPER CHAMBERS WUSE DISTRICT, ABUJA FCT- NIGERIA Our Ref: FGN /SNT/STB I have to inform you again, that we are not playing over this, I know my reason for the continuous sending of this notification to you, the fact is that you can’t seem to trust any one again over this payment For what you have been in cantered in many months ago, but I want you to trust me, I cannot scam you for $79.99 it is for bank processing of your payment, the fees of $79.99 is clearly written to you before, I didn’t invent the bill to defraud you of $79.99 it is an official bank payment processing fee, and the good part of this, is that you will never, ever be disturbed again over any kind of payment, this is final, and the forms from there becomes effective once we submit your payment application processing fee and pay the form fee of $79.99 I don’t want you to loose this fund this time, because you may never get another such good opportunity, the federal government is keen and very determined to pay your overdue debts, this is not a fluke, I would not want you to loose this fund out of ignorance, I will send you all the documents as soon as bank payment processing fee is paid, you have to trust me, you will get your fund, find a way to get $79.99 you will not loose it, instead it will bring your financial breakthrough, find the money and send it to our bursary. The reason why am sending you this, is because I want you to receive your USD 1.7M immediately we are trying to round up for this payment program. Here Is the Payment Information through Western Union NOTE: MONEY GRAM NOT ACCEPTED Finally my advice to you is not to abandon this transaction because of the requirement of ($79.99) Receivers Name: Ekenedirichukwu Emeka Address: Lagos Nigeria Test Question: God Is Good Answer: To Me MTCN________________ Send all the details of the MTCN direct to this email. Yours in service Mr. Burichin J. John CHIEF AUDITOR TO THE PRESIDENT http://www.nigeria.gov.ng
HEADER: 
Return-Path:   <dl46988@bellsouth.net>
X-YahooFilteredBulk:   217.146.183.189
X-Originating-IP:   [217.146.183.189]
Authentication-Results:   mta1142.mail.gq1.yahoo.com from=bellsouth.net; domainkeys=neutral (no sig); from=bellsouth.net; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm15.bullet.mail.ukl.yahoo.com) (217.146.183.189) by mta1142.mail.gq1.yahoo.com with SMTP; Fri, 26 Oct 2012 22:57:07 -0700
Received:   from [217.146.183.213] by nm15.bullet.mail.ukl.yahoo.com with NNFMP; 27 Oct 2012 05:57:05 -0000
Received:   from [77.238.184.71] by tm6.bullet.mail.ukl.yahoo.com with NNFMP; 27 Oct 2012 05:57:05 -0000
Received:   from [127.0.0.1] by smtp140.mail.ukl.yahoo.com with NNFMP; 27 Oct 2012 05:57:05 -0000
X-Yahoo-Newman-Id:   688540.23795.bm@smtp140.mail.ukl.yahoo.com
Message-ID:   <688540.23795.bm@smtp140.mail.ukl.yahoo.com>
X-Yahoo-SMTP:   Upd.lqSswBCX7afte7DsensppMhRuN6HxniFKWm1.X3_6Q–
Received:   from USER-PC (dl46988@62.193.162.122 with login) by smtp140.mail.ukl.yahoo.com with SMTP; 27 Oct 2012 05:57:05 +0000 GMT
From:  
“Mr. Burichin J. John” <dl46988@bellsouth.net>
Subject:   YOU ONLY HAVE YOUR SELF TO BLAME.
 
Leave a comment

Posted by on 10/27/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , ,

Rev.Mrs.Sandra Morgan sandramorgan3@hotmail.com

Email Scammer AND Possible HACKER

IP:  98.136.216.151 – Project Honey Pot has also detected malicious scam behavior and possible phishing attacks relating to this IP address. ” The Threat Rating is a metric that describes how dangerous an IP is based off its observed suspicious activity. These activities include sending spam messages, performing dictionary attacks, harvesting addresses, posting spam comments to web forms, hosting bad web pages (phish sites, etc), and breaking nofollow or certain robot.txt rules. ”

Name: (Mrs.) Sandra Morgan

Email-Address: sandramorgan3@hotmail.com

Subject: “Rev Mrs. Sandra Morgan” <sandramorgan3@hotmail.com> sandramorgan711@yahoo.es

Email: 

From Rev Mrs Sandra Morgan, Kindly view the memo for more info and get back to me ASAP

(A link/document was also sent a but I wasn’t comfortable clicking it nor posting it.)

____________________

76.164.223.67 ↔ This e-mail address is also a threat and associated with Nigerian Scammers – Below is a list of IP’s and Usernames/EmailAddresses Associated with this IP

Associated Harvesters
61.209.182.171 | H
220.104.111.43 | H
220.209.92.10 | H
61.120.171.99 | H
58.93.60.43 | H
219.66.235.234 | H
124.100.242.218 | H
211.3.203.142 | H
207.58.242.51 | H
216.40.222.50 | H
87.118.98.62 | H
74.86.14.10 | H
61.12.159.10 | H
124.87.239.201 | H
210.197.231.224 | H
221.189.176.140 | H
211.3.202.189 | H
211.3.148.18 | H
58.1.134.137 | H
61.192.206.8 | H
210.159.185.76 | H
211.3.201.184 | H
221.187.26.77 | H
211.3.197.133 | H
58.93.52.120 | H
58.1.137.191 | H
211.3.150.226 | H
61.197.40.208 | H
221.191.123.113 | H
221.191.98.148 | H
211.3.149.19 | H
220.102.212.9 | H
211.3.197.244 | H
222.148.27.140 | H
210.159.185.248 | H
61.12.154.89 | HS
222.149.220.4 | H
203.141.139.66 | H
60.42.120.21 | H
122.16.111.96 | H
220.145.66.254 | H
220.212.121.156 | H
61.192.203.55 | H
60.42.121.62 | H
221.191.100.238 | H
221.187.33.151 | H
60.35.184.189 | H
61.194.3.241 | H
61.197.106.97 | H
211.3.148.38 | H
210.159.162.224 | H
61.209.182.88 | H
210.196.117.232 | H
219.66.233.209 | H
60.238.228.252 | H
60.39.204.165 | H
210.159.162.152 | H
210.159.164.35 | H
219.116.155.150 | H
60.41.42.46 | H
60.236.76.181 | H
58.93.58.112 | H
61.201.27.78 | H
61.192.190.165 | H
61.201.27.187 | H
211.3.202.95 | H
61.192.203.48 | H
211.3.198.197 | H
61.209.182.129 | H
219.66.234.219 | H
220.98.187.188 | H
61.201.27.254 | H
218.43.35.206 | H
211.3.200.161 | H
220.104.131.236 | H
IPs In The Neighborhood
76.164.222.99
76.164.222.104 | D
76.164.222.119 | SC
76.164.222.132
76.164.222.137 | S
76.164.222.138 | S
76.164.222.154 | S
76.164.222.162
76.164.223.54 | SDC
76.164.223.57 | SD
76.164.223.68 | SDC
76.164.223.69 | SC
76.164.223.73 | S
76.164.223.76 | SC
76.164.223.77 | C
76.164.223.80 | SC
76.164.223.81 | SDC
76.164.223.83 | S
76.164.223.89 | SD
76.164.223.92 | S
76.164.223.93 | S
76.164.223.99 | SC
76.164.223.100 | SDC
76.164.223.101 | S
76.164.223.104 | S
76.164.223.107 | S
76.164.223.113 | S
76.164.223.117 | SD
76.164.223.122 | S
76.164.223.124 | S
76.164.223.166 | S
76.164.223.175 | S
76.164.223.180 | SD
76.164.223.198 | D
76.164.223.200 | SD
76.164.223.216 | SC
76.164.223.219 | S
76.164.223.220 | S
Sample Spam URLs & Keywords Posted From 76.164.223.67
Domain: blackscissors.org
URL: http://blackscissors.org/forum/showthread.php?26109-salg-billige-Silagra-piller&p=26140#post26140
Domain: www.narproducerattidaholm.se
URL: http://www.narproducerattidaholm.se/forum/viewtopic.php?f=4&t=89925
Domain: slideweb.fr
URL: http://slideweb.fr/showthread.php?tid=10290
Domain: www.teenmentalillness.org
URL: http://www.teenmentalillness.org/index.php?topic=82103.new#new
Domain: forum.sotkov.cz
URL: http://forum.sotkov.cz/viewtopic.php?f=2&t=158059
Domain: rxdoctoronline.com
URL: http://rxdoctoronline.com/pictname/diflucan.jpg
Domain: rxdoctoronline.com
URL: http://rxdoctoronline.com/buy-diflucan-dk.html
Domain: www.alcatraz0572.be
URL: http://www.alcatraz0572.be/phpBB-3.0.2/phpBB3/viewtopic.php?f=2&t=18519&sid=605025174e220963ca42c615 …
Domain: ifthisismotherhood.com
URL: http://ifthisismotherhood.com/parentadvocate/viewtopic.php?f=1&t=114613
Domain: www.tiempodecriar.com
URL: http://www.tiempodecriar.com/foro/viewtopic.php?f=10&t=9725
Domain: bloodguild.org
URL: http://bloodguild.org/viewtopic.php?f=6&t=109560
Domain: redroid.blogja.net
URL: http://redroid.blogja.net/forum/viewtopic.php?f=23&t=149483
Domain: rxdoctoronline.com
URL: http://rxdoctoronline.com/pictname/zithromax.jpg
Domain: rxdoctoronline.com
URL: http://rxdoctoronline.com/buy-zithromax-dk.html
Domain: www.exponenteducation.com
URL: http://www.exponenteducation.com/node/2883
Keywords: kennel cough and amoxicillin successive
76.164.223.67’s User Agent Strings
Mozilla/0.6 Beta (Windows)
Mozilla/4.0 (compatible; MSIE 4.01; Digital AlphaServer 1000A 4/233; Windows NT; Powered By 64-Bit Alpha Processor)
Mozilla/4.0 (compatible; MSIE 5.0; Windows 2000) Opera 6.0 [en]
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0; .NET CLR 1.0.2914)
Mozilla/4.0 (compatible; MSIE 6.0; Update a; AOL 6.0; Windows 98)
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) NS8/0.9.6
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)
Mozilla/4.76 [en] (Windows NT 5.0; U)
Mozilla/4.79 [en] (Windows NT 5.0; U)
Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.165 Safari/535.19 YI
Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.63 Safari/535.7
Mozilla/5.0 (Windows NT 5.1; rv:14.0) Gecko/20100101 Firefox/14.0
Mozilla/5.0 (Windows NT 5.2; rv:12.0) Gecko/20100101 Firefox/12.0
Mozilla/5.0 (Windows NT 5.2; WOW64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.1634 Safari/535.19 YE
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.165 Safari/535.19 YI
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/15.0.874.121 Safari/535.2
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.52 Safari/536.5 Comodo_Dragon/19.1.0.0
Opera/7.54 (Windows NT 5.1; U) [pl]
Opera/9.00 (Windows NT 5.1; U; en)
Opera/9.01 (Windows NT 5.1; U; en)
Opera/9.80 (Windows NT 5.1; U; en) Presto/2.10.289 Version/12.00
Opera/9.80 (Windows NT 6.1; U; ru) Presto/2.10.229 Version/11.61
Example Messages Sent From 76.164.223.67
From:”‹´��û ‚¢‚±‚¢” <op5ifu2nnh@hotmail.com>
Subject: “ダメ男を買う”イ
From:”’‡��c Ž��–ë��T” <tqhr7h83yl@docomo.ne.jp>
Subject: =?ISO-2022-JP?B?GyRCSH49dyRyS=?=
From:”ì��£ —R“ß” <d8oegspfnh@willcom.com>
Subject: 話題の逆援コミュニティ
From:”�ᏼ �g�T” <r5tqjudmcl@willcom.com>
Subject: ■不倫の出会い掲示板(
From:”�㐙 ����” <nqkm6z3wm6@msn.com>
Subject: 貴方にあったセフレを無
From:”•l��è ��ؖȎq” <pkjnbxh9vf@docomo.ne.jp>
Subject: 貴方の時間をお金で買わ
From:”•Ð��ª –¾ˆßŽq” <pso4rdn1pn@docomo.ne.jp>
Subject: 史上初!!先振込みの逆
From:”���� ����” <ii86l9oq47@willcom.com>
Subject: あなたがH目的なら無駄
From:”’r��{ ‘½ˆ��” <ll70xaqbez@livedoor.com>
Subject: 今晩5万円でお相手して
From:”¬��c“‡ Ž” <oalhy9nkgx@yahoo.com>
Subject: あなたの時間を売ってく
From:”¼��ì Žì‹P” <udsewkvuap@docomo.ne.jp>
Subject: 旦那以外の方と…
From:”���X �[��” <orhdnlol1g@ezweb.ne.jp>
Subject: 即愛はいかが?
From:”’ç ˆÇ‹|” <banamwccxd@msn.com>
Subject: 大人気のSTAR-CAS
From:”���� �ԓގq” <hcrmzpijqx@yahoo.com>
Subject: =?ISO-2022-JP?B?GyRCJCpGQCRKGyhCQi1DQVMbJEIlKyE8JU=?
From:”�΋� ���Ƃ�” <ktejbvfxmm@docomo.ne.jp>
Subject: 限定販売!便利なB-C
From:”…��ì Žé”T” <zk360a6l@docomo.ne.jp>
Subject: 夢のカードが、今なら特
From:”•l��û ��ѓތb” <i2b1nyyt@i.softbank.jp>
Subject: =?ISO-2022-JP?B?GyRCOiMhIkJ=?
From:”‘q��{ ¬—t” <zus9qfit@softbank.ne.jp>
Subject: =?ISO-2022-JP?B?GyRCJUYlbCVTJE4lQSVjJXMlTSVrJHIbKE=?
From:”�镔 �x�D” <f9udtjsp@docomo.ne.jp>
Subject: 全てのチャンネルが制限
From:”���� �P��” <q1coqz6p@ezweb.ne.jp>
Subject: スカパー!全有料チャン
From:”‚”¨ t“Þ” <n3foeznnxu@i.softbank.jp>
Subject: 【半永久】半永久的に使
From:”‹àŽR ��mŠG” <7oichpls@mail.goo.ne.jp>
Subject: =?ISO-2022-JP?B?GyRCJDMkbBsoQjEbJEJLZyRHQTQkRiROJU=?
From:”Elva —R��üŽq” <tuotsbbwxrvmrj@goomeil.com>
Subject: avxezrzfae@ezweb.ne.jp
From:”Silas ŒbŽq” <ovlkdazex@goomeil.com>
Subject: qmckkf@yahoo.co.jp
From:”Alexis Œ‹Žq” <iflwflsiimhwdu@yahoo.com>
Subject: zjswekt@goomeil.com
Example User Names Used By 76.164.223.67
User-name: eslie.hubler
User-name: istan_c_cabanela
User-name: archive1_1963
User-name: aratyfus_1964

 

 

Header:

Return-Path: <sandramorgan3@hotmail.com>
X-YahooFilteredBulk: 98.136.216.151
Received-SPF: softfail (transitioning domain of hotmail.com does not designate 98.136.216.151 as permitted sender)
X-YMailISG: jJ0QtIEWLDv_WDdKEHNBtLRVf.cuyLK58wwtme64dCer.zJl aQF6QYPEtjfmg9IzTHRPezMFoNle7UyMF.k3hoMT1JqqkWXYk31Ryzq3Olag htLZOkTeYzuJGnskOb5NNGQ.l8h4xOVJUaFlX9bxnK52gOONrBO45P7GfObo LtzfZODJb.ni.0raEZ1S_CLxTVaPRHaCLJ9zeBv2IRk_48eonWDoGM.yZXmD eLQJ5yEdYVZSYGxQuQ7iSRp4W9p_6745FX6rw1L6ss8a.VCt265jnFYTJCgm HsNEVcAva_tfe7gnN8Dy11IZ9Mt3UzFjRRyEIxgJVl8Nz5dGP_yIyV6ZhHnJ HrBn6HBpYOk_T0g_v7ojeTNCLfZyAKQBL09fe6l0WclHbBjqMkGMnRoBrjzq TFRJ.IFKhIQtva3YXMubvzwTKq1Dbv.fnjDbaauFFOvBU2arWr6m76rnJtza h4Yw2xXVttSt79PkZgdkCqZANYKIhre77bsoLMdw6Bdcw3vpitvbCj2c.8vC UpBnP6bbRBQXZXNFzVgqPh2G6xtCd_8AbBx9yGDRzsPziIwGXx_iNgCW6YhS 4PbcuEhWrqa80vMl802UZCfQTxoxxTRsai7rndIwcZ6Lt8h3PwN6Toz5pq.L buQ_hXfucVOmCu.PmE3edojpHkwgMddseoxzITCMxJLlA2guTJplMBvDSfj7 4EKTtaPCxKzLdeFHJdKf1h8X.nWuQZXSWhtY1DsCpHQiKMV3okF0gCRTpZQ9 ONsMoiOgm_OWP1lWKY3EsK_Tl3PaWvW_hCvfeto0MWqy_w.mhLrlSoe6Yj.o chfgP3sy2s1LhpDnFDilmgu4iYWYlXw2r_wgDfLAAt6.SKKnjv1WTeVnc_3p RjfW_lAYfGa.ODOqupEqaXAAzNfByNNLFC.2s3qHC6hiDPl9iyBzDqHkVUqG djDbb2Kh6k8LVyBR.TS8uKv71iiUr1BQ65gfDLXLMZEuOJmq1c7PELdX2rbX ex3KBFEPvfq7G1.kmqIvWZE8wcBsq0MmULPabYQEHFyz8ZTXqL2b_m.qOSer 4NyQW9xcQyYFTCLgJ6ICVX2EtyT1hSxbXYP.2hOxQK92OsaUYT6YQ3.4.4Fl 30AVc0U9AF7Swc4o810pBeMGRMWPubBW391GZvZSK9sHuAhREK3vO7MkdM1j lKnK8PCYEuDzamgGsYImRqn5O1rwwTZ5EnY9TFbhHmGW
X-Originating-IP: [98.136.216.151]
Authentication-Results: mta1243.mail.sk1.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm27-vm8.bullet.mail.gq1.yahoo.com) (98.136.216.151) by mta1243.mail.sk1.yahoo.com with SMTP; Thu, 18 Oct 2012 01:52:11 -0700
Received: from [98.137.12.55] by nm27.bullet.mail.gq1.yahoo.com with NNFMP; 18 Oct 2012 08:52:09 -0000
Received: from [98.136.185.47] by tm15.bullet.mail.gq1.yahoo.com with NNFMP; 18 Oct 2012 08:52:08 -0000
Received: from [127.0.0.1] by smtp108.mail.gq1.yahoo.com with NNFMP; 18 Oct 2012 08:52:08 -0000
X-Yahoo-Newman-Id: 920957.30208.bm@smtp108.mail.gq1.yahoo.com
Message-ID: <920957.30208.bm@smtp108.mail.gq1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: RCeCcIQVM1muyrgHf8tFbAK_TyyCFBtb0IJdtseZjnsWyd1 k4f1DlPremX9ocgnXNu1rIc5pccsyZaZSTdynHvW3Qjy6GkDsGjiACqQJq3m ePy_3Q68lIyXqbwRM6FlvnRYkWjr58eWhphr0Fl1KcBbH1fN_a.T7BUlxILc O_dZ09vj1XwYfVCUsYSwO646Tlv6HROuZ8rCQQ.5IgCIGThMZgjLuDhU0Jfn p.ROAkfB4y1wdN3L34OjNvs6OQBaQf_TVeiwOTAZ.iuOFI2cDPoDWo_.idv6 khYgPN7MtLJqtwuSqiR8QhSGmEPqfn886pIKt4M84xk72TbKnygvITRrZHTC l_bJhhXE5kcPXmYw4npOotVo6hOgoo94gQvpjNE4yBFwTRwOX_M43P5V3oTk Fz7yj7vX4mg4Uda.I85WlRlChLKqexP70TNKAymX7zNhf
X-Yahoo-SMTP: rcUwqs.swBCs4f4vwoVy9tuv4a_36owJ2kQYl6t9GG.H0B7U
Received: from User (sandramorgan3@76.164.223.67 with login) by smtp108.mail.gq1.yahoo.com with SMTP; 18 Oct 2012 01:52:08 -0700 PDT
Reply-To: <sandramorgan711@yahoo.es>
From: “Rev.Mrs.Sandra Morgan”<sandramorgan3@hotmail.com>
Subject: From Rev.Mrs.Sandra Morgan,Kindly view the memo for more info and get back to me.ASAP
Date: Thu, 18 Oct 2012 09:52:06 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_010C_01C2A9A6.43814626″
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Content-Length: 4220
 

Tags: , , , , , , , , , , , , , , ,

“Mark Wellington”

Employment (Job) Scam – ”Work At Home” Scam

Nigerian Scammers information below:

Name: Mark Wellington Email-Address:  Adminjob@aol.biz <> admnjobj@aol.com (replyto-emailaddress)

168.234.191.26 ↔ IP-Address in this email has been black-listed and Project-Honey-Pot (PHP) has detected malicious behavior as well. To view other usernames and email-addresses associated with this IP/Scammer, then please click: 168.234.191.26

198.12.80.73 ↔ Yahoo (my email server) has warned me that this IP ”might be forged” – I already suspected it was.

Subject: Need a job?

Email: If you have access to a computer, and have up to three hours spare time per-week. you can get paid, would you like to work part or full time online, and get paid weekly? If yes,then please read carefully.

_____________________________________________________________________
ABOUT US
______________________________________________________________________
Asin Europe is a diverse wholesale distributor with operations spanning multiple
business groups. The company is ranked as one of the largest plumbing
wholesalers in North America. Ferguson is also the industry’s second largest
distributor of pipes, valves and fittings, waterworks, and heating and cooling
equipment in North America.
______________________________________________________________________
JOB POSITION
_______________________________________________________________________
We are currently seeking part or full time employees for our ever-growing
accounts receivable department. Through extensive demographic research, we have
discovered a wealth of untapped human resources that, for one reason or another,
need the freedom to work from home. If this sounds like you, please read on,
and consider becoming part of our company family.
As part of our ongoing Multi Level Marketing Network,we seek capable
individuals to work for us as our representative.You can easily make $700-$2000
or more in a week by working for us as a Sub-contractor in your geographical
location, you will be in charge of collecting payment on behalf of our
affiliates and Small business organizations that are registered under us. Does
it sounds like your dream job? Well, it certainly does for 10,000+ current
members who are making $700 – $2,000 weekly online with this system.
Note that no form of investment is needed from you and this job will take only
1-3 hours of your time per week.
______________________________________________________________________
JOB RESPONSIBILITY
_______________________________________________________________________
The position of Accounts Receivable Officer entails the following duties:
1. Co-ordinate payments from our clients.
2. Receive payments which come in form of certified checks or united states
postal money orders, process payments at your local bank, and forward 90% of
funds received to the proper branch office, as instructed. The remaining 10% is
your wage. Since this position is need-based, you will have plenty of free time
while enjoying a good income.
___________________________________________________________
REMUNERATION
___________________________________________________________
For every assignment in form of payment received from our clients, you’re
entitled to 10% which excludes the cost of processing western union to any
regional office accountant
Also you get a monthly salary of $1000 which comes at the end of every month,
plus other incentives and benefits that accrue, which includes tax-free
holidays.
________________________________________________________________________
INTERESTED APPLICANTS (HOW TO APPLY)
Interested applicants should fill out the required details below and send back
so that one of our Human Resources Managers can contact you via email with an
approval letter if the management decides you are a successful candidate.
Please specify the best way to contact you in your reply email.
Details Required:

FIRST NAME:
LAST NAME
ADDRESS LINE 1 (Not P.O Box):
ADDRESS LINE 2:
CITY:
STATE:
COUNTRY:
ZIP/POSTAL CODE:
HOME PHONE:
CELL PHONE:
GENDER:
AGE:
NATION OF ORIGIN:
HAVE YOU RESPONDED TO A SIMILAR OFFER LIKE THIS? IF YES,WHAT WAS THE OUTCOME :
CURRENT JOB :( If Any)
NOTE: A COPY OF YOUR RESUME SHOULD BE INCLUDED IF AVAILABLE.
We appreciate your interest in Aisin Europe Ltd.
Mr Mark Wellington
Human Resources Department,
Aisin Europe ltd,
223 campobello ave
North las vegas,
nv 89081 USA
REPLY TO……………admnjobj@aol.com

Read the rest of this entry »

 
 

Tags: , , , , , , , , , , , , ,

“Red bull”

RED-BULL IMPOSTER – EMPLOYMENT SCAM

Name/Email-Address: Red bull <> admin@redbull.com <> redbull.promousa@att.net

Subject: ***Red Bull Auto Wrap Decal Promo***

Email: RED BULL energy drink is looking to hire candidates for the up coming promo on Auto Wrap Decals. Interested people should please get in touch with us on email atredbullpromousa@att.net to apply and get more information on this job openning. Please note that the position is opened until the amount of people wanted had been choosen.

Header:

Return-Path:   <admin@redbull.com>
X-YahooFilteredBulk:   64.202.189.171
Received-SPF:   none (domain of redbull.com does not designate permitted sender hosts)
X-YMailISG:   T.ylaU0WLDuqGPokP9TNstD18uFUkZjvD5WqnxKQnPI0xm1q fA980gORQJ2G8JWDDiCcR844dxBJI4jiqXeFJe3dOTxengEgCMO.tI.ATUad hTiKe5pQFsiopmN_K5mUTTVTOzQgXU1iGFQIMOgCNhKGTRyd5F8C6byl9lJF z08gXJoypx4XLUdmMePUvBEUoQSJQT2fuUovhnQIiv_WVLn8gb.WcwceRuLB AQ8E0T6AfuLHLYcVGlIwd0KZFUK275fGDWMa2RLsX0Z5PL3EWq_zxRBXCCDa 0Bg9KKrv_x0LLIOU4iUlQ7NJ1t_KaYPTcW714o51N1Sv1TNvrZbCwb.KKOj2 d0I50AaR0Ffuu.fGu41KHXu_He.C.80MNuqA5mxDz4HWFuAkMnPh9JhvNBFe tm9CrvX9MyM6ANk0xj9oFIEvuttXgzQpa5MqMwXTMuKDWVhcYqXx8Fteng20 vemzefR7y4kCLwK32kcvWo1WpCbrTv34N4vlaEsGJn.ndBi90lG.rQlhdQ5w QIcypbeGhWnZ0BULlDr6vNl9jvs4BlTih469CRnhoxv6aaJSA1VXIqVO_VZe p47sFuhD2R3WbonnJNnbCBDZ8qRYSyctY6KfNoW75tsX9Wwh9KDmHMNRl1cd YlosmMC4NHz7WhfqfFyXT87pj07H2F90vKAYR05egjENnCCXFw2hr9CZAlSm KD_nbN9OrJuE1RgSXZtK8UiN2wqG8cwFkUeTo8um6vT6fTOdbyQASuFaPug9 w_Db85shTS0G8MGBQ0N.A4czkKbmsB3nckBNndQJxT6IPRf1e.EB3o3JDMzb w.pmsyOPxeSqoVPAmr.yUCRZdoeY8lkBfomk52HK_p4_w1OJskbQ0rCdCKpv AJOlwFJP_AJUhiRdKkPcqubAhmIF62swKd9Z2JetDPtj4e.YY6TpjjR1eySE 8O7eA9MoaoKfOC5R2cPhXu5iQkJHNoDa6rN_KAU.kjQ1MypsF99tjOPT5fhh oAHWSCHHkofmd5BVrmS6.l1QixYm62qbqIHcvCdADeRihAiT5UxlWGocQU_9 wtLzIGcGhBGG0qKys54YbKvIxSnqh7hh4dq17gFXWu1qRUuVAFEaEE_LNTUj 1EmezQWlyhPHTCstMzLsAfjfjKFfudKYL5MzraLl.a4O9qdrePab_XBDoNd0 n2mPRVgjLBz.AnaL.HGtMwt9uolwOlSIbMerRvNiRNqhjXnephe9S0ver5ZM nf7vFU865QLkvM9NV5Gy8G_xUVM7819bOWEMk.i3lc6dA0VP0rvTckQv8Wlm
X-Originating-IP:   [64.202.189.171]
Authentication-Results:   mta1205.mail.sk1.yahoo.com from=redbull.com; domainkeys=neutral (no sig); from=redbull.com; dkim=neutral (no sig)
Received:   from 127.0.0.1 (HELO k2smtpout03-01.prod.mesa1.secureserver.net) (64.202.189.171) by mta1205.mail.sk1.yahoo.com with SMTP; Thu, 18 Oct 2012 04:05:14 -0700
Received:   (qmail 26171 invoked from network); 18 Oct 2012 11:05:13 -0000
Received:   from unknown (HELO ip-118-139-163-87.ip.secureserver.net) (118.139.163.87) by k2smtpout03-01.prod.mesa1.secureserver.net (64.202.189.171) with ESMTP; 18 Oct 2012 11:05:13 -0000
Received:   (qmail 21631 invoked from network); 18 Oct 2012 10:42:27 +1100
Received:   from 68-116-17-66.static.knwc.wa.charter.com (HELO User) (68.116.17.66) by ip-118-139-167-155.ip.secureserver.net with ESMTPA; 18 Oct 2012 10:42:26 +1100
Reply-To:   <redbull.promousa@att.net>
From:  
“Red bull”<admin@redbull.com>  
Subject:   ***Red Bull Auto Wrap Decal Promo***
Date:   Wed, 17 Oct 2012 16:41:50 -0700
MIME-Version:   1.0
Content-Type:   text/html; charset=”Windows-1251″
Content-Transfer-Encoding:   7bit
X-Priority:   3
X-MSMail-Priority:   Normal
X-Mailer:   Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE:   Produced By Microsoft MimeOLE V6.00.2600.0000
Content-Length:   335
 

Tags: , , , , , , , , ,

 
Follow

Get every new post delivered to your Inbox.

Join 61 other followers

%d bloggers like this: