RSS

Tag Archives: Loan Company

“Loan World Wide”

WARNING – EMAIL SCAM – PHONY LOAN COMPANY

Return-Path: <metalmartins@sinos.net>
X-YahooFilteredBulk: 200.160.158.145
Received-SPF: pass (domain of sinos.net designates 200.160.158.145 as permitted sender)
X-Originating-IP: [200.160.158.145]
Authentication-Results: mta1053.mail.ne1.yahoo.com from=loan.com; domainkeys=neutral (no sig); from=loan.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp.sinos.net) (200.160.158.145) by mta1053.mail.ne1.yahoo.com with SMTP; Thu, 07 Mar 2013 00:30:00 +0000
Received: by smtp.sinos.net (Postfix, from userid 100) id 31502330419; Wed, 6 Mar 2013 21:08:43 -0300 (BRT)
Received: from webmail.sinos.net (webmail.sinos.net [200.160.145.245]) by smtp.sinos.net (Postfix) with ESMTP id 704CC330414; Wed, 6 Mar 2013 21:08:40 -0300 (BRT)
Received: from 180.215.190.12 (Sinosnet authenticated user metalmartins) by webmail.sinos.net
Message-ID: <64959.180.215.190.12.1362614921@webmail.sinos.net>
Subject: LOAN OFFER!
From: “WORLD WIDE LOANS” <info@loan.com>
Reply-To: loan_world.wide@live.com
User-Agent: Webmail Sinosnet WORLD WIDE LOANS info@loan.com

WHY WORRY WHEN YOU CAN APPLY TODAY FOR:

*AUTO LOAN
*BUSINESS LOAN
*START-UP CAPITAL
*PERSONAL LOAN
*REAL ESTATE LOAN

LOANS AT VERY LOW RATE AS LOW AS 2% FOR MORE THAN 3 YEARS. FOR MORE
INFORMATION SEND:

NAME:………………….
ADDRESS:…………………..
SEX:………………………..
AGE:……………………………
OCCUPATION:……………………….
COUNTRY OF RESIDENCE:………………..
PHONE NUMBER:……………………….

VIA EMAIL TO: loan_world.wide@live.com

 
Leave a comment

Posted by on 03/10/2013 in Other

 

Tags: , , , , , , ,

“Prince Ares”

Facebook Scammer who also sends out other scams including phony Loan offers

facebook_scams

Return-Path: <ujtnarng@djsnhdh.com>
X-YahooFilteredBulk: 201.45.154.205
X-Originating-IP: [201.45.154.205]
Authentication-Results: mta1026.mail.ac4.yahoo.com from=nxxbvrvhe.com; domainkeys=fail (bad syntax); from=pavdz032.com; dkim=permerror (no key)
Received: from 127.0.0.1 (EHLO relay0.iaxwrqen.com) (201.45.154.205) by mta1026.mail.ac4.yahoo.com
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=default; d=pavdz032.com; h=Message-ID:Date:From:Reply-To:To:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe; i=hfpxbucukm@pavdz032.com; bh=dFVZvz8xLuT_rKYt3EnH8h4_Y=; b=Z66y6TC4hHQav5l511K8rN7BV5J2QPB2W413mbPu0TdqFp920187h_E0S5S_J68F60qS583caI9 2bEDByPgYz1H5D8Aq_7B4fb_vm1XuZ6mqy7Sr5wc3D2KR89_2UIV
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=default; d=pavdz032.com; b=8294O73zP5nEdA9d6ib515t_4wQ8Z6UvsP8c8tIm3Ombw4O2EkQiw_9P4o9_SY1TQUUuwKoG4le Bl5cNKPOp3H_di0y19vLuaGJiK8mb_63cY2_NK9fEzAB7X4SxKgk;
From: “Facebook” <ajyfdofoh@nxxbvrvhe.com>
Reply-To: <ddbthbreutflr@lgthyibfibkuhlqz.com>
To: <princeares@yahoo.com>
Subject: Hey
Return-Path: tkapwv@dfvqdjfz.com

hey baby i saw your facebook profile (youre cute!) id love to chat with you on yahoo messenger my
screename there is nicebooty73@yahoo.com addme to chat i’m online now :)

Return-Path: <zutuxaap@jhdgsndhj.com>
X-YahooFilteredBulk: 188.124.84.112
X-Originating-IP: [188.124.84.112]
Authentication-Results: mta1014.mail.ac4.yahoo.com from=ghmruojtgv.com; domainkeys=fail (bad syntax); from=hgehj052.com; dkim=permerror (no key)
Received: from 127.0.0.1 (EHLO smtp0.zupqfco.com) (188.124.84.112) by mta1014.mail.ac4.yahoo.com with SMTP; Tue, 26 Feb 2013 10:58:30 -0800
From: “Facebook” <rndywxklvxq@ghmruojtgv.com>
Reply-To: <vybkkzxucrclf@ghljzccazbycdzw.com>
To: <princeares@yahoo.com>
Subject: Hey
Return-Path: onwyitun@lijjaenpb.com

From: “Facebook” <rndywxklvxq@ghmruojtgv.com> princeares@yahoo.com

hey baby i saw your facebook profile (youre cute!) id love to chat with you on yahoo messenger my
screename there is classyfoxy8104@yahoo.com addme to chat i’m online now :)

Adriana

The below message is a loan scam which was from the same scammer above. You’ll notice he uses the name PrinceAre which is the same name in the above scammers email address princeares@yahoo.com Young Lee Loan Firm – YOUNGLEELOANFIRM@YAHOO PrinceAre

Adriana

Hello i am Mr Leehom PrinceAre you in any financial stress or need a loan to settle debts or pay the bills? There is a small credit score and you are finding it hard to give credit to local banks and other financial institutions? Need a loan for any reason, such as: a) Personal Loan, Business Expansion. b) Business Start-up and education. c) the debt consolidation. d) Hard Money Loans. Contact today and get the stems of this service. Sincerely favorite.meet up with their financial need,you can contact us via PRINCELOANASIAFIRM@GMAIL.COM

 
Leave a comment

Posted by on 03/01/2013 in Other

 

Tags: , , , , , , ,

“Roberts Draska”

WARNING – LOAN SCAM – FAKE LOAN OFFER

The more time, the more money.

EMAIL: Do you need a loan of 2% to pay off your bills?Or for your Business if yes Email us : roberts.draskas@gmail.com Information needed

(1)Name:
(2)Amount needed as loan:
(3)Phone number:
(4)Duration:
(5)Country:
Note:that all mail must be sent to roberts.draskas@gmail.com
Mr roberts draskas .

HEADER DETAILS:

Return-Path: <roberts.draskas@gmail.com>
X-YahooFilteredBulk: 209.85.212.68
Received-SPF: pass (domain of gmail.com designates 209.85.212.68 as permitted sender)
X-YMailISG: U2eLDAIWLDsjZhwoKPbfZ96Uzru1.zOZ9rPn8mlp6_vjbLhK VRmafQjuGfWP4LrXIIW4XtTCvU62ZRrxLENhQmPzo0eVh6BglJRyOvXqMyXW _k7Ap__4a8XiwVUtwCNFmSkG.rjOfDjhEg6iwTPYsgGfLp16DV7.ZWVjM9jn LYoFAI_hXSYYKy.xRCPhkndKojfGxXUtid30fAj.jYcUcz6OSq1yQGNWrzCr yBoSXTinJtX7.qmaXKAbY8ztnjyfX4mk31DQzUlzz6YG4aJIUoAnbpAy2IyF mi2Z6484WXfZN5RFkpVbSIjtKKrMtVrC8GLEz4VEYn_ge8e1IUnneRqZP74x RuOPci27NjuEwwVu9xzR9jHDjmh8dBrRrHT9D9J_yrjEHLOSoMbkWpEnR3xv k5ZgzHnXz.J0sO3u5lYw5pbrQqMrV.3QJm3IgPfkBV.dizk_msh0CEpJgLUG CBoELK71r1HmvUgPv42aX3FJ.yLSVS1wm4CVS306QwvBWc5nrMLsRiN0tZNX WgDL1.paR_JXcj._hYDi8e_hvDgZDb.hmohaMy2bZYsLr9jhW0ol1AvXUjXC IcmgUPSdZcR1qkC.YD5hroASt796f59UxO3.r3hWRY86jGGNh2NARSUAd9Vi vNUSzbnIzt_ynXCPww5h.3DQxgMEut.5B3tMLvK4s6WEuLmecpbbGzjc2D8U NdqrsIptkaRgwZjFm4sESUJ0qiLwFovy6kOHbd56WelY2khIT_5OzE8kdxxz hjbwmK1bVC0_I1a6dVaDQioy0d3Sp_IitmBMWV0zamfTvzB52z_tKQFlxVTo vSGZ2sx8ogcy1TTJQ3ba0gdxEEpcZxmy2PVpOAzqWRdMhP9KDorkFxXylq0r 5dXnSZ1o9xRaUDo_a_hlqtXPPS613ZnoAJ9vCjZ3TPkBdea0spQsAG99DogD Tn1SzqAc75jNPrRzw5a4qhf9N8hASOXfDP7.WxG.30UXdkmhiOeI2VCne8lC OTnQ96p6KaFCojDbnxpYA5WTzQu9y.NiwfOFqZeufZRHDVPoywInnZuFDmKL eQ2tWORU8vFOlUNgp7qxh67n_2BoCj9C6jMelwErW7vtSoYPgRsLzfbwy5Zm iI2JE1gVhhtk6PWopeiBDCT22HXBjyHWrMOpC.EVxDCdx30Jcc9est0L7IOJ oCEtBcOCceE_ttSKAV31HpsPV0gkAY3ZCid18YhBzC_kDFHLr7ol4JYmCt57 AloP5IXgCVSI1g2e_.QiJHEW5BmdG1CBWbKsrZA0YPgUEQdtaz0K7e31g13W tt_e6I7Azg–
X-Originating-IP: [209.85.212.68]
Authentication-Results: mta1094.mail.ac4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-vb0-f68.google.com) (209.85.212.68) by mta1094.mail.ac4.yahoo.com with SMTP; Thu, 17 Jan 2013 07:22:59 -0800
Received: by mail-vb0-f68.google.com with SMTP id fq11so288225vbb.7 for <deleted@yahoo.com>; Thu, 17 Jan 2013 07:22:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:date:message-id:subject:from:to :content-type; bh=hpFxrNRnnIiIcWD+EhHsTadALiBX6lSQf41OsuB5+uo=; b=HqHur0c3YoWiIwlO+WzHZf97CVNlfLOZA7Fr7KRgCzdkCFS7/lCTwK5WtkDLx2E8tV XvXPTIpVvPkYYNk95Jt7zpSXdGNGM4wjSi+T5w8ccJWzlZmkqfjmuQGaz8gqndfQxuuf 2K7XjZDX8YOGsQhdBThKhNwmKCLUBE0x+XHnUY33QGetG9MDp9b6TyFD3CoPAE+8M/rT VknDaHcvkvNstFguje20HJd6d/bYs0qbm9Wz2/jMzKXflo5qqlUmzazMIOiK5XcRZ/CT 5LPSmtAAcd6N4ntrac95GvrMUwIukB5XD+wnl65KHDcMNPTiZfRDCRFZqSvP8fwuqDcK 7OWw==
X-Received: by 10.52.66.75 with SMTP id d11mr5170548vdt.63.1358436178573; Thu, 17 Jan 2013 07:22:58 -0800 (PST)
Received: by 10.59.3.106 with HTTP; Thu, 17 Jan 2013 07:22:58 -0800 (PST)
Date: Thu, 17 Jan 2013 07:22:58 -0800
Message-ID: <CAJEXoSA2CdBeTWgnPPJqJoshxrZ+bPTb8-tDeL+K5ob9fAiFnw@mail.gmail.com>
Subject: loan offer 2%
From: Roberts Draska <roberts.draskas@gmail.com>

Robert Draska roberts.draskas@gmail.com

 
Leave a comment

Posted by on 01/27/2013 in Other

 

Tags: , , , , , , , ,

“St. Marie Funding Firm”

LOAN SCAM – NIGERIAN 419 SCAMMER – FRAUD

loan-scam

Good day ,

We offer the right solution to your financial needs.We stand apart from other
lenders because we believe in customer service, and we stay with you until you
get the results you want.In general we offer home loans,car loans,hotel loans,
commercial loans,  business loans e.t.c, at lower interest rate of 3%. Contact
us via E-MAIL: st.marieloanfirm@live.com

Regards,
Mr. Lawal Femi
Secretary (St Marie Funding Firm)
Garaki Abuja, Nigeria.

Return-Path: <info@gmail.com>
X-YahooFilteredBulk: 200.192.100.52
Received-SPF: neutral (200.192.100.52 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: V2rNJCYWLDtq2U6Cx6MAQOOR4uMb6r.w5j3PUkzHgQhr3NU. gDIgHnagYTNF9NwhXXBPj8oDdDR9jFeaNX6w9fTkS9uhE._2HZl_bhORMsJn nAkXVm3xV184MaTmvDLRIswVaBgKR9qBM9UCz3EpdS2GpOUpzpIjrp5_ycin RR2RsXdpDo5BPUUOnN00y0gQgl2IoyziJaRk136vZ_V0Anspob34gTyRuDHt j0w1Mbi51bStfqvUgjklz_vLdIZtmAmD.tehjQg2nWoGQckHig0riStVyYCK .GGw4xbaONJLS_3mW9hTis8QbOQzUJ0w9ym4qlglPzVCmrKrYjiuu7YMETD8 53197xtVgQse4Rb2QTkcejY5sI_M8ouiYvuRvBR0vAVqKgVz82r0bQKHueV8 OleoNjZI.MJOMRRLz1FDoh.bvQyuBOgkA24GpZO1IjuQD_j0f4Ins8DTfoOw A.oSzRI80W3vgiF1GH_Z7UWPs6os6C1zqmxpJIXIFro1UXmtDrame_SytARb nW6J79AD.V9cIl8nQbPKVUd1YaiGKG9..3LGOhJVEQwoTooe5ZnPwTjyo266 ZVgcBrx3pUnuNkoyjNrFwmidrMB0cJURQefbZ9F4pFYFaoJNPonqLG208MOU I6Gnud8ldfg3JAsfna8AOkSt1lnETwU0PAVgS2isUnvys4cZI.X8_Cl6LL1I ctTQV3_4ptOHYqOaTB8VlGtjYtc6MwtlVqmAMnXewXxVmUFzP2tfffY2CVr. FuLTUDcuJBV5Vcjf.KGs4QLawB8xcO9nNc68QvDHjZC6URcYcyNEzPRxKRqW BUdbemA0CEjFMh75yEsXnBC.jK9gUv9oTHQ_m.rumtsNSVW_xOvJlJ9w1NE0 Z86m3PcPbpDo0q.M0NigGFAjfeomEFHG.uEZniNxhFfL1VYpep7mx8pe67az w0KZBo69OB83aJPGrNlChXNdQWp90Z3Ku_B3wLgpWy5dA.kJJ9IN0FVWRya_ Vq1M8iUT2DceI8OEn19_L6RbLnwocmtFsT0ZjxeeWQovINxfr9BIu02ovrg8 MzyWzrkSXqABJVdDd7docF6iVX0TyauxUcc6AfZIcfsQm8_AwlWPCT1ybdK3 9hl72mFeE2NgLgpFbAaH2GNGCHKL_Nkf1U8bg2wNq.XsWm0aAIhtVoa5RfSw D0FcI9PSoiSx3hHSNMLXSK7bx.rpXs4DtPyhV.IjL6l2zd6zx0VUARrbxWq4 a99CsnpfgO4CUGIx931LtEp09nXIIFAvtVIrNe8hItOW8BCWCv7OGRbLdQTz NOTFQJzZiDsOI.YqEMUT8RTq4lWufb4b.A–
X-Originating-IP: [200.192.100.52]
Authentication-Results: mta1204.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO correio.interponta.com.br) (200.192.100.52) by mta1204.mail.bf1.yahoo.com with SMTP; Sat, 05 Jan 2013 07:38:50 -0800
Received: from correio.interponta.com.br (correio.interponta.com.br [127.0.0.1]) by correio.interponta.com.br (8.13.6/8.13.6) with ESMTP id r05EGwdg027600 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 5 Jan 2013 12:42:02 -0200
Received: (from apache@localhost) by correio.interponta.com.br (8.13.6/8.13.6/Submit) id r05EBg5n027170; Sat, 5 Jan 2013 12:11:42 -0200
X-Authentication-Warning: correio.interponta.com.br: apache set sender to info@gmail.com using -f
Received: from 79.141.173.99 ([79.141.173.99]) by correio.interponta.com.br (Horde MIME library) with HTTP; Sat, 05 Jan 2013 12:11:41 -0200
Message-ID: <20130105121141.scw848qeyowscc8g@correio.interponta.com.br>
Date: Sat, 05 Jan 2013 12:11:41 -0200
From: “St. Marie Funding Firm” <info@gmail.com>
Reply-to: st.marieloanfirm@live.com
User-Agent: Internet Messaging Program (IMP) H3 (4.1.2)
X-Interponta-MailScanner-Information: Please contact the ISP for more information
X-Interponta-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
X-Interponta-MailScanner-From: info@gmail.com

St Marie Funding Firm info@gmail.com REPLY-ADDRESS: st.marieloanfirm@live.com

RECEIVED IP: 79.141.173.99 ORIGINATING/FILTER-BULK: 200.192.100.52

 
Leave a comment

Posted by on 01/05/2013 in Other

 

Tags: , , , , , , , , , , , , , , ,

CLEARWAY LOAN COMPANY

LOAN SCAM – FRAUD

EMAIL: Good day!

Are you a Business man or woman? Are you in any financial mess or do you need funds to start up your own business? Do you need loan to settle your debt or pay off your bills or start a nice business? Do you have a low credit score and you are finding it hard to obtain capital loan from local banks/other financial
institutes? Do you need a loan for any reason such as:

a) Personal Loan, Business s Expansion
b) Business Start-up, Education
c) Debt Consolidation
d) Hard Money Loans
e) Mosques OR Church’s

We offer Private, Commercial and Personal Loans with very Minimum annual Interest Rates as Low as 2% within a 1year to 50years repayment duration period to any part of the world. We give out loans within the range of $5,000.00. to $5,000,000.00. Our loans are well insured for maximum security is our priority.

Every interested applicant should contact us via the below contact details. E-mail: clearway-uk@cnegal.com

Yours Sincerely
Rev. Mack Lipsky.
CEO/CLEARWAY LOAN COMPANY.

—————————————————————-
This message was sent using IMP, the Internet Messaging Program.

HEADER:

Return-Path: <avenianaki@edc.uoc.gr>
X-YahooFilteredBulk: 147.52.242.100
Received-SPF: pass (domain of edc.uoc.gr designates 147.52.242.100 as permitted sender)
X-YMailISG: kwnKlV0WLDu8NbZL2LsJt4P4heTM72fb6AOVevGR910rv5HI RAY._0fmrpgJkqkIAvA0_MCETcsWHB96F2K7Rtnx_tYFcT.ibDMaBomklH4t yyJmek3MtGCn8KbpbHakIwj2rGGgOohUXbG5UnAt9OeSpmkG_ZDU5MLEfdzU AHz5ceYYMGwWik6YMyhOoWBg3p_Q3RK26yTmpEHXkkEUe.1sNGuD7A0OAgkR nAYcln_l0mR4tz73Gt3AzqY5cvuSlP4p.wgIwFe_aI1t4IaHqO8PzS3TGeY1 dq_90.tJVaKMNkJ1vZHM2tHW.R6iR0r8rin0MzZcEbWT.2QgmKg5LdMkkicP 9EUfTMJ00r4A7LIbW0dejatPPWRCCFXUT.1sL2pwcMo4UhRTDlOHh2tSfQwa 4C6_fYgtkkjSjyJA5ootQfEnrcGCo3LZywRW6Exv52WHGPFJe6w7uMQq5d2x nsDU54030RYeR.xmoA_rhLrY5wXti87C9n1ZS82TscptB2JBqVoJIFTG951q bryWaXRVXBEHU4jrEe0uFQRInEF75ocwjOsG2lz4P1S0hdMv1WtjquHEGkqX aITI.JgSbS5Pd8N5QPPQWn6MJuzDjulLE1UeNQ4omNkcTOepxRJUc66_ZmRv PZVTgqpWdRCwI39l887bqRDqFGVOF5qdY_SsvdVwNcZZk3ZFxGPcLwn6_3BM THFkHI.WMWO6x1u7zBYgIQQzOJK40IZIdmPUFvPdwWHnP7YEh6uD62Gb8H0Q GiNWrWIjaE4ETxGQ6plhyR0vTPK.ebp_xgEg6V7bi15b38lj4Riz0p6kt9WM mIm7s5IKbsNoS2p5aktQYb25j3OYpTEPi58_i3gS4ZhyX8bAZlgcpJ.9ktLW H9lBm6_bsX5yjW533OZXLuBDfGOusiaVuIyCL073yC_rQd5hf9yXelVFcUXU UGURxEA.Ld31v0KSw5aJAvKkQx1qoFXBYPNOZcalWttSuCOlrmbj7.jTdIac Wx7lIXqKDOXRoRduHIKUD10HCVJb63iz4VLc9sqaT3woHLjM25ic9btg7SYt CWwiA_BXHaQI_.mPLqGUxtViNH0wELwIXl8qyEGPqij5et.zOW4WCE8iecyZ Tg_WlId_6sotypZ47Yd63KEK6iuMITinOvUF2yI_Nuh2oU2wzcQeIvnwCaUj IF3S6KS9cyPqz1ZAyjQQ01i3k96BBSBNM_PSjGdJKA.Vl0u518UwmZ4iUObO uO9qAaV1Fdf0CssXKrLsRWANtiIi4vgQ.3zgpdndsdmdRgOLO0YqksmU5c0L fChTkI7ISkjVhFcrKd9KjkXdfCTrmwHU0_J7YvfeJ4exbxvKRboaxdd_yD4W YvlEs3hEHKqqj7JSnjbAA2cHfc.t1vzHdt3ZYDNxdjdyhyaCFyT8MeDAegKI FtW6Q7puEM8.v2Ak4Aku.fQXiAY4q5adtrvrYb9GRYiJOxfCriYyNhV4B4tD RyZHl4aFL_K7u3RsKWa4gTRipGJzDxqCrTPuKz12wAHqdOgKQYM9Cvl6Q.Az uGnFgh3sBfYrXn.SN48fooxTioy3ifnGOpWuTM3lP70B_QpugXsvKxCenk6s vuKMHHtLHO08s6cp1u9S_zOYUBBS_RqMum1hrZn3nK6cGdZwXgysk_d4Fc0K uHTtg4l4fPVFPpGbbPvya3UkrHKt
X-Originating-IP: [147.52.242.100]
Authentication-Results: mta1075.mail.bf1.yahoo.com from=edc.uoc.gr; domainkeys=neutral (no sig); from=edc.uoc.gr; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO edc.uoc.gr) (147.52.242.100) by mta1075.mail.bf1.yahoo.com with SMTP; Sun, 02 Dec 2012 10:56:11 +0000
Received: from edusrv.edc.uoc.gr (localhost [127.0.0.1]) by edc.uoc.gr (8.13.6/8.13.6) with ESMTP id qB2AqrDK016787; Sun, 2 Dec 2012 12:52:58 +0200
Received: (from nobody@localhost) by edusrv.edc.uoc.gr (8.13.6/8.13.6/Submit) id qB2Aqrif016786; Sun, 2 Dec 2012 12:52:53 +0200
X-Authentication-Warning: edusrv.edc.uoc.gr: nobody set sender to avenianaki@edc.uoc.gr using -f
Received: from 41.138.189.201 ([41.138.189.201]) by http://www.edc.uoc.gr (Horde Framework) with HTTP; Sun, 02 Dec 2012 12:52:52 +0200
Message-ID: <20121202125252.14553t5uazznrh8k@www.edc.uoc.gr>
Date: Sun, 02 Dec 2012 12:52:52 +0200
Disposition-Notification-To: avenianaki@edc.uoc.gr
From: CLEARWAY LOAN COMPANY <avenianaki@edc.uoc.gr>
Reply-to: clearway-uk@cnegal.com
Subject: Loan Offer
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; DelSp=”Yes”; format=”flowed”
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.10)
X-Spam-Status: No, score=-0.1 required=5.5 tests=ALL_TRUSTED,AWL,US_DOLLARS_3 autolearn=no version=3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on edusrv.edc.uoc.gr
Received-SPF: pass (edc.uoc.gr: localhost is always allowed.) receiver=edc.uoc.gr; client-ip=127.0.0.1; helo=edusrv.edc.uoc.gr; envelope-from=avenianaki@edc.uoc.gr; x-software=spfmilter 0.93 http://www.acme.com/software/spfmilter/;

“CLEARWAY LOAN COMPANY” avenianaki@edc.uoc.gr – REPLY-ADDRESS: clearway-uk@cnegal.com – RETURN-PATH: avenianaki@edc.uoc.gr

RECEIVED IP: 41.138.189.201

clearway-uk@cnegal.com clearwayuk@cnegal.com

 
Leave a comment

Posted by on 12/16/2012 in Other

 

Tags: , , , , , , , , , , , , ,

KB LOAN FINANCE COMPANY

LOAN SCAM – FRAUD

no scams animation

SUBJECT: GUARANTEE LOAN OFFER
EMAIL: Do you need a Loan? Have you been trying to obtain a Loan from any of the Bank or Loan Companies and got Ripped off and they have refuse to grant you the Loan? I want you to Thank God for given you this great opportunity to find a Copany called KELLY BROWN LOAN FINANCE COMPANY because we offer all types of Loan at low Interest Rate of 3%, Categories of Loan issued out: Business Loan, Personal Loan, Company 
Loan, Student Loan, Mortgage Loan, E.T.C. If you are interested in getting a Loan from us do contact us via Email:- kb_loan@msn.com

HEADER:

Return-Path: <un@salle.url.edu>
X-YahooFilteredBulk: 84.88.232.246
Received-SPF: pass (domain of salle.url.edu designates 84.88.232.246 as permitted sender)
X-YMailISG: gQirYdQWLDtDVUNPaItBnf8GENlTcud3Zd202KI_PmNCNTmw WdrBJD7kuvqZgFBpQj6dWL5tvRLNpOmK70VdKGZpGGVaO565y9dCJBZ9xkIY xrLF6OWEf_qR_6_qyxtuSWWJOaWDTzP6kRppmjTHgBXxkvtt01FqmPXZ6xi4 .gI7iBYu1NAsjY0_geE4xEtQII2QKGm5MnI.2HZN20BJkviz1ucYW1e_hbn7 Zrzxb3DRqvetEBh2LHyi0K0JY068W69L40UE1s4r9T_NqJFEHnlSxoi9lB.C Vza8KbtusmZ1dpcg_1Kc9eSbkOTahw63RQUQoxo6JURlaxXbseA0WtTKiJhY B5gU0wi_BDjfVW7a1kI3HLpBqDucAX84sBMdi.SG7uJMPwKfMP4quwA1uR74 SdIL4FEv.U8ecSACq0FeUKLIs_1DiKD8XtZGRNpgYPZ19UI7tGWPR2BBZVRh lOIgZfEqN6vQk481tHbqLIA6f5AENxyU7vkJxvta4oig9P29AF6uNL3z3UBV RrUdTi.HO4fsDHNCgCJg0oAJk.CfYPwShPgeS3cK7eH_VYnv57Q0ERSpCdqA FbmruWOdbc28VKy.RA.bazude5H6gXk1G9n6rhvxuVbu38chOkpfX0PmfcPh SzfEfcvTy6XXz7eCurY_SD0jIld.Eh1ILqfJTpc2miupaIZCXgTe7hoC4h.g zLV6_zIIBA_mJkQ0dqho5D4zMlq81QBT_7OT7baIIpJK9eMSBtAxuY61k3Pm lewyOuQNxGMBGui4Z3dsdDQSXeNK46lOIPXB01CMI8mydzeEjkTyGyF6IkJY kqnUKuybBurvRuCL583OL4gXI91NG6Kpm2wC7ubtElu.DqTumnHjL1NIFQnW 7.asqm4Htil5ZUPgc.ffEcCwvIuzgY3jr3eUcycvE395fTw6IaC0mPLlAtIZ Nbuc5uUl2k53DCxoIjcWIh2PCtvH2YJsMA09JuCggg8TgppE08Y6ZSquwDLd 1CwHHFb6_m9SyWcP0OJ2fDLu3CuPMClHfy1hHuXgLCcwYnDKa3d9TnBcX722 aysZWMbFcaPuSvTGoA0ywqsJ2wdyxEp2fhS03tL0f.Jzr1490.Fl2mb_V7Vt eZBDN_Nm_a8OEJYghOijmavSWDvmErokbuMWak4gm6Sco6dVkSOtSM9XLuNI aof1MSl93CSJdSSy3QE5OZSgZCH25LdEe3Tlpp4P45I0ju6vyqt71sjWVi76 dA–
X-Originating-IP: [84.88.232.246]
Authentication-Results: mta1250.mail.sk1.yahoo.com from=salle.url.edu; domainkeys=neutral (no sig); from=salle.url.edu; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO relay1.salle.url.edu) (84.88.232.246) by mta1250.mail.sk1.yahoo.com with SMTP; Mon, 10 Dec 2012 21:38:00 -0800
Received: from User ([115.240.60.147]) (authenticated bits=0) by relay1.salle.url.edu (8.14.3/8.14.3/Debian-9.4) with ESMTP id qBB5YNqS012291; Tue, 11 Dec 2012 06:34:27 +0100
Message-Id: <201212110534.qBB5YNqS012291@relay1.salle.url.edu>
Reply-To: <kb_loan@msn.com>
From: “KB LOAN FINANCE COMPANY”<un@salle.url.edu>
Subject: GUARANTEE LOAN OFFER
Date: Tue, 11 Dec 2012 03:34:50 -0200

“KB LOAN FINANCE COMPANY” un@salle.url.edu RETURN-PATH: un@salle.url.edu Reply-To: kb_loan@msn.com

X-YahooFilteredBulk: 84.88.232.246

RECEIVED IP: 115.240.60.147

 
Leave a comment

Posted by on 12/11/2012 in Other

 

Tags: , , , , , , , , , , , ,

“MR. MORGAN WHITE”

LOAN SCAM – NIGERIAN 419 SCAMMER

I’ve been baiting this fraudster and it appears as if this person is still copying/pasting scripts because none of my ”questions” are being answered and he keeps responding with irrelevant bull and calling me Jason, which is NOT the (fake) name I’ve given him. These Nigerians are very unorganized. These are the latest emails;

EMAIL: Hello,

This is an urgent reminder on your current loan transfer. At this period of Xmas, we are giving out great and affordable loan offers. To see how this affect your loan file asap, kindly get back to us and lets get you educated on this OK…

Thanks and get back asap OK…

MR. MORGAN WHITE

HEADER:

Return-Path: <equityloanalliance@9.cn>
Received-SPF: none (domain of 9.cn does not designate permitted sender hosts) dXIgY3VycmVudCBsb2FuIHRyYW5zZmVyLiBBdCB0aGlzIHBlcmlvZCBvZiBY bWFzLCB3ZSBhcmUgZ2l2aW5nIG91dCBncmVhdCBhbmQgYWZmb3JkYWJsZSBs b2FuIG9mZmVycy4gVG8gc2VlIGhvdyB0aGlzIGFmZmVjdCB5b3VyIGxvYW4g ZmlsZSBhc2FwLCBraW5kbHkgZ2V0IGJhY2sgdG8gdXMgYW5kIGxldHMgZ2V0 IHlvdSBlZHVjYXRlZCBvbiB0aGlzIE9LLi4uIFRoYW5rcyBhbgEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzE2
X-YMailISG: OWt5sVcWLDtoA2N7rfJb7LCC5rN.s00Hg1mOlNwsULNgMUfU 71cEWX5tkoEZ5VA7WORHCVWE7xh5Zcssz0szX3FEepJurmZYcWT.fPjS0rV5 KV05T8ECxPrc2KhC1wpB_L3peBaBNZyky_CZkBmpF3FVPRA5Eua9ngIDA7YB VNF5nUxt5AE6gDhG887ZzMbPeWNY41_K8wCikbt0N5JlNtWPtKlGNckqo20C ..K3D3QXWcBODbLK9ZcOY1CmqaZc2aC5i8gEAvMH5o28BSL677zPjLEedF1H KEYZjyLjcA1VG96Qf3lpuuwgyX0PV79TSqVxDRRDTqVfdXjQYT0NukH7B.TO KGwNDrdUT1D_UFv_81USjM23u6NN.vvcchQ0Fkron9253z7E2Ebb60PNocR5 Ca9CRQv95mfE0B.MHwnpGn.fdeq.haf5idsb3R0mEi..cw7KzDJqvWjNybJQ y49USti9uSZ0QH3KtQYSmf6JktdzJ52WjTyEjMjQHVVbAUBPMKmeJF93devs YLI94Mdkia5L8dyQyAYTfBWqty6LH5y3mdvbEXNT7EbMiasq67Pgqbltl6pJ kCjzK0ZNJNMn7hiS5flQNfiM3fmp8kqJLN8QwGHPXb0Z_nHJ0pPr41X6wOAO aJ9BnN1jIdzj6M5yCfyHwEHsL8tZ4734Pi4AtAK6ofG1pDfarCWcINTKzQox w1CGKuz4urYxvFl4ohNmQUtjQwGDeJmuylHylK.DYzMvjGZ4UdAWP8pGgJKG lf_idPEzhh.PFfSNgNIpgHY.h829rTh8oxcoTVZ10YVsrCPv9H6IaRIzFybX KRoJHKiiR6X4DIPVVV4Oo1.JEYYULwKkXEMD4jJfIc7H3bb0VcRVbDhVHMr7 6W3rC2SG8AotEXYyki31EJlIdhFsP0xQFDe9gqeDFYxmbDd1tpxnLvAnGkr4 zMuZeGegbS6NjSr3GeQQqZ3vJJ8QRQP5Ua2Mz5L_.urB57aDDVMGCIe159nG TP_3YonH1VlILdnICVQ708I_BECSVDfdYa_37eQ7MRb_sryQFjxo.VgoLxWQ Ye6vCPyBdQacLkZZTkJ9D2.zgH3kKkJGkKicydIcECf9Zxl2gC.G9qot7M0_ xa7NJrRQYpknI3nQO6.AeBd4IKwvYpNvKAWPDdhuN4i386Hy7rG8BkNffQRV Qcud0qQJKZvMUzcspmKzdvRQZP077Z_UUMvGTJghGxRLFSNXuSbYoOHKQCqH m0pFClVQmWzmlg–
X-Originating-IP: [65.54.190.102]
Authentication-Results: mta1355.mail.gq1.yahoo.com from=live.com; domainkeys=neutral (no sig); from=9.cn; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s27.bay0.hotmail.com) (65.54.190.102) by mta1355.mail.gq1.yahoo.com with SMTP; Mon, 03 Dec 2012 12:50:05 -0800
Received: from BAY153-W49 ([65.54.190.125]) by bay0-omc2-s27.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 3 Dec 2012 12:49:15 -0800
X-Originating-IP: [63.141.199.185]
X-EIP: [nPiv37sbcX9x2A8tIR1maRhzG+9Bnv3+]
X-Originating-Email: [equityloanalliance@9.cn]
Message-ID: <BAY153-W498895A9D80F868B1A2790E8400@phx.gbl>
Return-Path: equityloanalliance@9.cn
Content-Type: multipart/alternative; boundary=”_7c845861-ab62-4e00-be06-7d3c4d23683a_”
From: “MR. MORGAN WHITE” <equityloanalliance@9.cn>
Sender: <hotmail_1367294eeb04af7b@live.com>
Subject: XMAS LOAN BONUS===GET BACK ASAP OK…
Date: Mon, 3 Dec 2012 20:49:14 +0000
In-Reply-To: <1348547540.27242.YahooMailClassic@web161006.mail.bf1.yahoo.com>
References: <BAY153-W558910253EA928A0D510C6E89E0@phx.gbl>,<1348547540.27242.YahooMailClassic@web161006.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 03 Dec 2012 20:49:15.0158 (UTC) FILETIME=[A7F2B360:01CDD197]

FILL OUT YOUR BORROWER’S FORM ASAP OK…
All we requested was your borrower’s details and application, stating how much you wish to borrow and for what ever term. We do not understand the content of your last mail. So if you still need this loan, you have to fill out your borrower’s details to enable kick off with your loan processing OK…

THANKS.

Return-Path: <equityloanalliance@9.cn>
X-YahooFilteredBulk: 65.54.190.78
Received-SPF: none (domain of 9.cn does not designate permitted sender hosts)
X-Originating-IP: [65.54.190.78]
Authentication-Results: mta1255.mail.bf1.yahoo.com from=9.cn; domainkeys=neutral (no sig); from=9.cn; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s3.bay0.hotmail.com) (65.54.190.78) by mta1255.mail.bf1.yahoo.com with SMTP; Wed, 26 Sep 2012 00:19:47 -0700
Received: from BAY153-W21 ([65.54.190.123]) by bay0-omc2-s3.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Wed, 26 Sep 2012 00:19:46 -0700
Message-ID: <BAY153-W2158CFC2401EA4FE29B19BE89C0@phx.gbl>
Return-Path: equityloanalliance@9.cn
Content-Type: multipart/alternative; boundary=”_59557885-be2b-472d-99ca-aa205da67157_”
X-Originating-IP: [209.73.132.4]
From: “MR. MORGAN WHITE” <equityloanalliance@9.cn>
Subject: FILL OUT YOUR BORROWER’S FORM ASAP OK…
In-Reply-To: <1348547540.27242.YahooMailClassic@web161006.mail.bf1.yahoo.com>
References: <BAY153-W558910253EA928A0D510C6E89E0@phx.gbl>,<1348547540.27242.YahooMailClassic@web161006.mail.bf1.yahoo.com>

MR MORGAN WHITE equityloanalliance@9.cn

MR. MORGAN WHITE – equityloanalliance@9.cn - equityloanalliance@9.cn - hotmail_1367294eeb04af7b@live.com -

Two originating-ip’s (which are fake and not the senders actual IP location) 63.141.199.185 – 65.54.190.102 –

Received: from 65.54.190.125 by bay0-omc2-s27.bay0.hotmail.com

All IP’s have been previously reported and blacklisted by numerous anti-scam websites and other internet users. Any unknown contact offering anything for ‘free’ or anything involving money is a SCAM

Associated Email: TR…..@AOL.COM
IP: 65.54.190.125
The ip address 65.54.190.125 has been recorded as a spammers ip. If you have had a member sign up with this address you may want to consider contacting them, and possibly banning them from your site.

Other Spammers in this Range:

65.54.190.203
65.54.190.125
65.54.190.162
65.54.190.163
65.54.190.199
65.54.190.153
65.54.61.87
65.54.190.148
65.54.226.44
65.54.190.223
65.54.190.22
65.54.190.162
65.54.61.85
65.54.190.189

 
Leave a comment

Posted by on 12/06/2012 in Other

 

Tags: , , , , , , , , , , , , ,

“YAHOO MSN LOTTERY AWARD” yamsnltry@gmail.com

WARNING – Yahoo & MSN Lottery Scam

UPDATE: Same scammer, different scam — YAHOO MSN LOTTERY SCAM is also under Mrs Marika White <> web.office.76835@verizon.net <> mwlc@uneta.org – LOAN SCAM OFFER

Name & Email Address:  YAHOO MSN LOTTERY AWARD <> web.offfice_297938@verizon.net <> yamsnltry@gmail.com <>
Email: VIEW ATTACHMENT FILL ON HOW TO CLAIM YOUR WINNING PRICE. (I didn’t post the attached document)
HEADER:
Return-Path: <web.offfice_297938@verizon.net>
X-YahooFilteredBulk: 98.139.91.211
Received-SPF: neutral (98.139.91.211 is neither permitted nor denied by domain of verizon.net)
X-YMailISG: Zsyr_wQWLDuEOOR1NaKyY_oBKZ37LKhQ8E2oQYEySigknPqK k9D6cpNLJZG_BpWUYUrJK_13IbO6F2cwu0NdZUgFHsfdlBF2C_dY2LzlOFZm 1JHjYm2nt8r1TfUBQnHfb8I9AUlc_TORp9W.HgQYitOkE2hqUsGDkfrCuMDK DxM3_kxC1G0y9YuwlQ88LYK2N1cmfqnh6DyJr_rjxthFVpfPINYFlTZ9Gfuc ADYFdazto8WrGC8i9vrIWN9WZfWDwFONq5hJIJIIhqbaW8MfJoWeK2JIvkDP M1CYc0eevzZ_Adx1MDBBNelRnSr.vJSmUOwvJ6zQoWRlo4NgzOgFdBx8umEv jTO89nvzJD37UFWarpT59cdImqjiqLI0TB1E45jD15WCEX64ZB1Kln8hiaU4 .CCbyQpy7Ejsn7.W4n2lwvvlczK_R5o_vXJi3oCILudIaYnmwNt9EJ9DJmEZ mBMzXWFKyx9lH2nydX65fY_Q.JtjwJNlF4x2TjQlpMPTfrdKqwhWG_Klh3fR 3n63BOLG9BL8BQ.nLhlc1JvTvE22i4sUX9xyZKmLBFN8AZHjRfoLWiMkj2Xs sLXbSKZXrRdFzqI2_n0iCZVNHY6fDzOdBFg6QR8VysmkWs4dB4wAIeQ69Rmh Af72L8BXmXvs8.HrRPOsQnF8u524lck_LJJRpcmkMuAO54uGy2pwm6caB9FS sKQZOWwp_U8QkDL8N98rJG7xaMUkN1R64dRNvetL6mzCosxKo2FzICda_wHA LHsgGzNHEJ2sNFenGGjuJbiytfFEMpBH3yJUhO1vVKsdm7z60MbhrJRySNOM XOdXnWKdvCDWOQR0HSaBsIRIyxvGvenRMSXWDT4LasvnebD1tBJPseZsrBsZ YHg7hxAgbAuOHrFh.mgMe4rdRKr2xPdD3YGkatTu8t57eiZTMB8W63zW9SpF PyHX6f_tzIye0e8_7v91nVqSdqtWSJxNXsWw0zjqbU5A27.pbD_jLO3C7BmN cTDixi3lrIhNF.6uxxmXfrMY0iJDLZFCpszrUyaLkj2J_gbXiJ5A4APr0u6H jN90S41j9NjeKltQgIesZccd8ai38FkuFPPSgVQg7gAKeTJ8.HhXqnyNmKag do1r6x.wQWJvpjyX1cERpQiFWYG1ll52U8vm_s9sL1QxfzpknziQ0ovd3EFy tn10R8UwjtbP2uQW30npI62WZ1n.THsyrN7bAUHzDprK4z6cagfARVXtLyb0 0PCwWTmXMmOpJF.REjy.0wacWzDKexj8Xyk_a5lmm1VsUHBR7W3nsMvGsKVr cXgYKVt3
X-Originating-IP: [98.139.91.211]
Authentication-Results: mta1233.mail.sk1.yahoo.com from=verizon.net; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm16-vm1.bullet.mail.sp2.yahoo.com) (98.139.91.211) by mta1233.mail.sk1.yahoo.com with SMTP; Thu, 01 Nov 2012 09:43:22 -0700
Received: from [72.30.22.77] by nm16.bullet.mail.sp2.yahoo.com with NNFMP; 01 Nov 2012 16:43:19 -0000
Received: from [98.139.44.72] by tm11.bullet.mail.sp2.yahoo.com with NNFMP; 01 Nov 2012 16:43:19 -0000
Received: from [127.0.0.1] by omp1009.access.mail.sp2.yahoo.com with NNFMP; 01 Nov 2012 16:43:19 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 544878.38546.bm@omp1009.access.mail.sp2.yahoo.com
Received: (qmail 38451 invoked by uid 60001); 1 Nov 2012 16:43:18 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351788198; bh=+BQMkEUCkDI2VtC72aG597OihJthi8rb/rYyQFpeEQg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=aNHRB8WdCQEwnQg70kLRCvCEUFE+uHv8IJac3i7Dk8S2EgUmO+DBnGU+YRcgpwpX9oh4Pvxd4VrXxjcu838HWEjbI+sEy1kl/e6p+1fJdpav3oqdBwpxR7InNnGP7+hSWL7I1I4P0bSC6LZybpaVqwkOr1DbuhBSJ5XCTIAgfCs=
X-YMail-OSG: 9GmeWBYVM1m_z1iUg7uZUlUSFiIeKFpvpN8AJCtmVieCHI2 cRuIdKT2YMYQZMDD9xbq4TFvWF3tJ4NHMAEiKveJnqIeEKkxxE9_0pR_MJlt aKNENjj12NPTRtBewD9cSPqW0bYw8JunmrgvPpiQmGvp4D9gLMtAWHLy0uKC DmN9_B77Yj0w0E1dfN.gWVUc6KZM0NRqqfdxrMQXidqH__p1bdXcjmRsG36T I4BF68LKdh.kJP1BnQThneGDj33t8kfPbES0EaVGUzKdBG_7O9AgQJ86VceJ RMGNiXwJ.LXdTcogyxq5QHA3663yCoqxlHZDIup2aJWpAurwfyp.Fvs5UpJ8 0Xztz9spbZJsk2fd.H6tkCR1T0EdP8zrUb7mZ2EIv9awZAPEETGIzorem9Vf XAmAXiAV5gprc5OJ3hN9BecbpInTiwr.lyB1Ag71B9Zutr5roGfRivZ6hZMq sVdtlmiPfdqX1OiFr7aNWocK2oa20ZPBl0tdv5nIFlm60c03bBHbt_GmsKf8 exVl4ZdMtLmPbYfe_DnzZ2HDAf5LhuMEoMHZ51f05
Received: from [72.64.146.136] by web84506.mail.ne1.yahoo.com via HTTP; Thu, 01 Nov 2012 09:43:18 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1351788198.35520.YahooMailClassic@web84506.mail.ne1.yahoo.com>
Date: Thu, 1 Nov 2012 09:43:18 -0700 (PDT)
From:
YAHOO MSN LOTTERY AWARD web.offfice_297938@verizon.net
Reply-To: yamsnltry@gmail.com
Subject: Fw: YAHOO MSN AWARD LOTTERY PROMO SEPTEMBER 2012 DRAWN

98.138.90.254 ← Project Honey Pot has detected malicious behavior from this IP address. This address has also been reported by multiple online users and websites. Nigerian 419 spam activity being sent from this IP

OTHER SCAMMERS SENDING FROM THIS IP: 98.138.91.174
From: Xmas Loan Offer at 3% <web.office.nextlin@att.net>
Subject: none/blank
From: Yahoo Msn Award <web.office_689374@verizon.net>
Subject: none/blank
From: “Frank Jimmy Loans Co”  web.office.003-10@rogers.
Subject: none/blank
From: Cons <00o11constance@att.net>
Subject: hi
From: John Vidyapin <JohnVidyapin25@rocketmail.com>
Subject: Re:
From: “Lt. General Kenny”<sssssgfee@hotmail.com>
Subject: URGENT REPLY
From: Kafando Idriss <kafandoidriss@gmail.com>
Subject: VERY URGENT CALL FOR MORE INFORMATION +226 75 44 8
From: “Ukos” <stolze016@yahoo.dk>
Subject: Gvzdjos Hzcgkotx FnquyBycfjosw Wjnr JruycgPtxbfjn
From: 李���姐
Subject: =?gb2312?B?xNDFriDD++VsIc/Iv7TYmyAg1Nm4tuVYIWd1Y2N=?
From: Victoria mandi <victoria01mandi@yahoo.com>
Subject: Hallo mijn liefste
From: zvgcdby <zengchuanxedm@yahoo.cn>
Subject: 2011年11月28日17时47分53
From: “a_just_my_world@yahoo.com” <a_just_my_world@yahoo
Subject: Search for Anyone’s Arrest Record
From: wggi <hanchoujwxv@yahoo.cn>
Subject: |散頭|辦
From: “Mrs. Sharon Crawford” <sharoncrwfrd1191@skymail.mn
Subject: Scam Victim Compensation Alert, Open Attachment To
From: Sgt JASON CAMPBELL <web.jasoncam104444@att.net>
Subject: Urgent Mail From Sgt Jason Campbell.
From: mercyjohnson <lindabenbella@yahoo.com>
Subject: Good day my Love
From: “bittapain@yahoo.com” <bittapain@yahoo.com>
Subject: FWD: You have a secret admirer – GUESS WHO
From:  torn_016@yahoo.com <torn_016@yahoo.com>
Subject: FW: Money
From: ahmad2joachimugkt <ahmad2joachimugkt@yahoo.com>
Subject: FW:GreatLoveForEveryMan! did at Court though she w
From: ionsas chrograde <chrogradeille757@yahoo.com>
Subject: genevievebuehl, Verifizierte Online Swissapotheke
From: glory adams <weboo444@att.net>
Subject: Ol
From: “Rev.John Ibe” <revibejohn1@live.com>
Subject: Attention: Honorable Beneficiary
From: Idris <mridrislukman@gmail.com>
Subject: BANK TRANSFER VIEW ATTACHMENT FOR DETAILS

Associated SPAM IPs
89.122.224.52 | HSD
209.160.72.139 | HS
207.150.196.50 | HS
208.66.195.3 | H
207.150.194.146 | HS
173.45.70.178 | HSD
208.53.147.89 | H
24.64.199.108 | HS
115.124.113.132 | HS
66.199.236.50 | H
74.86.209.74 | H
208.101.44.3 | H
74.124.192.3 | H
216.40.220.34 | H
207.150.196.55 | HS
115.124.113.133 | HS
173.45.74.234 | HS
221.218.114.138 | HS
70.85.113.242 | H
76.64.126.197 | H
58.248.29.247 | H
58.248.29.217 | H
64.231.136.67 | H
74.12.60.71 | H
117.205.85.130 | H
91.105.35.138 | H
75.125.47.162 | HSDW
41.82.95.220 | HS
207.150.196.48 | HS

 
1 Comment

Posted by on 11/14/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , ,

“frodo bagins”

WARNING: Loan Scam – This scammer has been emailing continuously

 UPDATE: Frodo Bagins emailed me more then once. The first time he spelt his last name with two ‘G’s’ , then he sent another email with only one ‘G’s’ – “frodo baggins” <info.baginsfinancialhome@gmail.com> with a new reply address: <tilllee03@gmail.com>

FIRST EMAIL: – DO YOU NEED A LOAN CONTACT US WITH ?

NAME:
COUNTRY:
LOAN AMOUNT:
LOAN DURATION:
SEX:
CELL NO:

CONTACT NAME:Mr.Frodo Baggins
EMAIL: info.baginsfinancialhome@gmail.com

MD FRODO BAGGINS
CEO

FIRST EMAIL HEADER:

Return-Path: <tilllee03@gmail.com>
X-YahooFilteredBulk: 209.85.216.195
Received-SPF: pass (domain of gmail.com designates 209.85.216.195 as permitted sender)
X-YMailISG: 0HTvm8wWLDvw1DsG0d9Y1NmgwFgeYdJZhq06yZJV8Wlt3H2d KNU2OSDefhdboTs9Cl9q8.qhap_.WEWGjsGv33S8vvjNbGWmHUn8Ags4MIMj IdyQVDfkBVR.hlWckg.73iNIvw.7YAJAGaHWGcUxljaQvCHH.5NCxRyIWR_x rxXoKRFhu3pDlSi657xOoqiTTYgb3Tk0BPO0yW.rwPIAT1DDDBJaZ8jb4VDj uz_GB2O38YatF0oXuTkHRMRLMxVhnakElpFaPyywzcFnfsJiEQg_F14FR7Wd azb4l.FQgXhvFdYuYEGsbkTTkCTlM_QHQ8Sw28CSHYCLCg7l1_RlIt.fHyfx 8Df73xgeZInMe7DSOigqgoxaGNfAFAsnbBgXFRpndHml_bFfBVxodOJeekmj 87hVR017EG4QN1ovP2i2T6LTBkuA.Jm7GCqYjCms733xNMQqEXPDQwRrWBE3 L.tRsIA9JYfW0kUIEY.Mu3ckWPoO8jOp4V73hT7sNHrvSiiM2NGydNOsPVnB exkVo7BVS7.lpPbtDDYP8ooG_LsYzbbj.2rIXG1_vq3umNOa.MXVNsCmFBum F3JO6JtAFM5tJJH6j_FlnKc0Aau2oW1eRfpn5XQVwqp92OF3bnvEOQO3lN1W 8epcUG3uO0OlMD6f1J5Ox2VCgX83Rv.le8kSlQJID.6iiYfbxqMkOmWkc5IU HAMammbC.2PVjGLrUl94zJah9zOzvsjqmfLau2Gm9vF8XZkpXOhLEfOcHfTl aaZQDu95qnP7O3IGhPr7YPiwzzr178zutha7I.NSH88v80bfR7xiCMte68Kw 800ceZAI2syKkDEUf47UCjzX6XsG5VlSDFWLnHwSSoVgrezm2jYTROsZzi10 mUlSVCUg8.47NlqOvTBH7ZwNbS_SDJr.HoiXsrYbJaYUPXk2EwqcEGNrG7Xj 8QIdLQz1TS9HrX_ztwMOohKAGXs4ynxrbn2ufrBQcAFJW9O4bi4.4NL1PPSC Q8deCTKV256Qq1krTNhygpVcUEeIiQSdNavaDGIgiDo7EtObhZI_BnWV.2f3 _MUbqRSBtpxydEHD._cbjOocdFFSZ5uz0dDwGTEDCcr9IJ5G64vN4Tkgw7Q2 Qi6gWw91dMn.osHlSjWrO.1IFYmwqKES3.s_0OKF5WLLW8u_eBZbMse5_PDK Z5EianRxUjQGZOhceWaPyKBRn0sEzPFz
X-Originating-IP: [209.85.216.195]
Authentication-Results: mta1264.mail.ac4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-qc0-f195.google.com) (209.85.216.195) by mta1264.mail.ac4.yahoo.com with SMTP; Fri, 05 Oct 2012 13:52:57 -0700
Received: by mail-qc0-f195.google.com with SMTP id f14so309090qcs.2 for deleted@yahoo.com Fri, 05 Oct 2012 13:52:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:x-google-sender-auth:message-id:subject :from:to:content-type; bh=8JiIr2taqp8ew6U/TdDKd0TW3YxlKQZFrUKQ3Vh4Z/k=; b=CnFhMOAaxKCITg2A4ih+3LTlQmJplxBvdvslIexMQURbS8RWqlCMaU/TmPmtmkC/ml w8N2caI+yyDH2R6v6vdYA2xdPJQ7x1J8DSwXx2PW4u1CpUn3zDalb12SQ2Kb4w7G2Cm/ lxsItzRZvUV9ez6kC6q95ilxbo+oSA/zh6Ft6h53dJ08abQzVriMgN1tfpyBG8d9r8gD WRD0s+rGfItwJ41JGZ+QrNTpRPiLCcfRuWabjeJ1dcWS+dCE5JMwXo0hjAD5EGMxC0jY 3YYaHHZXw5nibbl0Vqgnp+nRm30Q71+CHEudqB9ZUQkCDUSE6UuGlALU9BqQnq6zWtG7 KNDA==
MIME-Version: 1.0
Received: by 10.49.129.202 with SMTP id ny10mr27873466qeb.32.1349470376918; Fri, 05 Oct 2012 13:52:56 -0700 (PDT)
Sender: tilllee03@gmail.com
Received: by 10.49.2.1 with HTTP; Fri, 5 Oct 2012 13:52:56 -0700 (PDT)
Date: Fri, 5 Oct 2012 13:52:56 -0700
X-Google-Sender-Auth: e70947xGpdLhtkL1kMVP-MRdJDs
Message-ID: <CAHvX1ewS14g3WdT5YyQDBQ9Cjmp6DZQjVmyXwZYyH0JdTiPqfA@mail.gmail.com>
From: frodo baggins <info.baginsfinancialhome@gmail.com>
Content-Type: multipart/alternative; boundary=047d7b6da5727381c604cb560ec0

209.85.216.195 fake originating ip address just like the first headers IP address
10.224.179.197 – IP in another one of ”Frodo Baggins” emails. ALL IP’s used by this scammer have been blacklisted and reported by other online users/websites.

__________________________________

SECOND EMAIL: Name/Email-Address:  frodo bagins <> info.baginsfinancialhome@gmail.com with the reply-address: leetree89@gmail.com

EMAIL : Hello Applicant We render monetary assistance to small/big businesses men/women, students and individuals for them to attend to their various needs, with an affordable interest rate of to pay on it. Are you financially down, looking for financial help to refinance your life, expand your business, to pay your bills or to clear your debt?, now is the time you have long been waiting for to get out of those problem you find your self, Maximize this great opportunity now and smile all the way because now is the time to take advantage of your today and tomorrow. kindly contact us for a loan that is valid now on.
We offer various kinds of loan as low as 3% interest rate.
TYPE OF LOANS:
*  Home Loan
*  Auto Loan
*  Mortgage Loan
*  Business Loan
*  Personal Loan
* Student Loan
Why not contact us now
EMAIL : info.baginsfinancialhome@gmail.com
Tel no: +234-7065480165
MD/CEO: Mr Frodo Baggins

SECOND HEADER:

Return-Path: <leetree89@gmail.com>
X-YahooFilteredBulk: 209.85.223.195
Received-SPF: pass (domain of gmail.com designates 209.85.223.195 as permitted sender)
X-YMailISG: wAe5r6YWLDvIJgov5cj2KUP3fzyNWbATivCVlmLZIt2XaYk5 9SPbk_RlDzAR6jgOAsYJHp71HcMwlk3G45hSAFhEB0ldOJHxB80Zghfs4sQM wG8aRHJP29AG7mdGNH9Fi_9RTSmpshqe2MyetlT7GUOfAxIyPUnmNgskd2dV u93ULCiqXGPUReKvhCESC3sGPg6qv6QgQwbhF6wRlNdIoznaFK7zygOlzh0p DjvE4E0njS5ywgYh6wb.S5scSPBxcmXUdLhkDKLOO6siR9sXsn9ef5NLhIb. urUDRmSILT8byQ2COjgCd5vLopciCw7AFVCC6ppUI15KVC_ijjYf2hV0N4Bm 9MZyMuNPgV.g1O0B84E8tym8.91j4irWONVlc_CScgQXhxdq9JY7aZXUitWH _L2FXizro6jFQN.M2wJ7PzJnjdo0y2Ozt5cyf4BS5hzP4yERJZooyWUobl.y FuxFDXwJjcnS3TKCSTFj26E2zMgMrNHn2_1.bm4AZK5Wr.izcGQPD9JU0jiE UHbz1el75y0tixpHVOURAhZC8hLk47JxRfG6W.whRLPvIaQXvl.m36USGHr2 .mXZNoHQWiNBBkr4OjrIlLxeJNwprraj_t_pGeiCLi71U1T2ON1KYzY2wojb 7lhakLMft7bLdGe50gnXRmx1JQwcvGCpfCxQuvkDMldZfcoMJ2w.8UmOcBk9 nEucUnZ7b2FhI0wcDHDkC1HfSqTehL4mXCssjfQ_00bQWDTb8P4TKloZ2jJw nei_AzDb1F6Lje7HnG2DHFh.V5GRutThX3QLYxESEUakP0N9DtfZuhns1.OD 51EaF979KceaAKeQQHK6DTrE9P9FbndrihV9sT9CcFXkqk2Nues9coQfMIAg IcIME5BQf_om4MorxWCaMacPicntiV4hGJBvgtDPSZ0_GrsE5M.DwLpjkYbI lMdH6zgLEnqRnvPXDP9Ayw2O1vGIPtWe3Nn4vte0sN3vM784462MPRy_rWrV 84aPFaOidmnYi1Qe0vI_UXvkfGJqBZvgL.5M9eFD0IFY9zU4SCJRjvgKGo2H bhxz1zG5DLH9HuOOK7O1maO7WAbThMiZGCyBvSgagKnpjoW10H9ndFjg4DvX G4gSFGHA6HFDxFJcnrWWcNAEVnb5MX_sSlx5QvTfPUmvML.hPifYMGzcinU_ C2CiHZ26KIcmBRKPq1Trvk1ejiyWKivebKQDxxNzUvoZHaclPw–
X-Originating-IP: [209.85.223.195]
Authentication-Results: mta1199.mail.gq1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-ie0-f195.google.com) (209.85.223.195) by mta1199.mail.gq1.yahoo.com with SMTP; Sat, 10 Nov 2012 08:39:25 -0800
Received: by mail-ie0-f195.google.com with SMTP id e10so1274863iej.10 for Sat, 10 Nov 2012 08:39:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:x-google-sender-auth:message-id:subject :from:to:content-type; bh=J9xKazkM7rgL50Ajx7XGI9vItqksrzp0UlW28/UzSBM=; b=mo9ndQxQBpYsOjz8azhhJPmSU6ejdBIIxwUVb83KQhr7n4u1CaBFzp9+foiT2FGBSr +8sHzY/q/Hoix5ea743U3NGKXZHGXzqi+9IGHKepHRprVbkt8HGl7b2KmJwbUGOX0F88 zXzcAs2cda1wbTJPgryBpQuuQXeEUkFvKbYI8Bu3Ld0prIXeUEIigKHE19vn8GvGu3VG rzj0uNAQfxVcl3SUYTrUiDtEeMCUfLHJNcuadWmURxWd4jSswlveaqnTHBEjc2Lrvaj8 h0hP8VPvoZmIiZ4GhQ6QFblMaIYqspAolq/HU+bSWiZRfQ8Eue1sxtRsti4sQU4p4WBG R4ew==
MIME-Version: 1.0
Received: by 10.50.17.162 with SMTP id p2mr3779101igd.9.1352564262546; Sat, 10 Nov 2012 08:17:42 -0800 (PST)
Sender: leetree89@gmail.com
Received: by 10.64.26.136 with HTTP; Sat, 10 Nov 2012 08:17:40 -0800 (PST)
Date: Sat, 10 Nov 2012 17:17:40 +0100
X-Google-Sender-Auth: P8IlBaidLMaPHDYNMwhJQHksil8
Message-ID: <CABg9_11Ktjn_jE5OX66eeUgZBmfquAgUwthhYwFsBi3YZ6nqZg@mail.gmail.com>
Subject:
From:
frodo bagins <info.baginsfinancialhome@gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=14dae93407dd67afac04ce2668ae
Bcc:
Content-Length: 2190
 
3 Comments

Posted by on 11/12/2012 in Other

 

Tags: , , , , , , , , , , , , , ,

 
Follow

Get every new post delivered to your Inbox.

Join 49 other followers

%d bloggers like this: