Monthly Archives: November 2012

“Michael Brewer”

SUSPICIOUS EMAIL – Sending unknown links in emails – I don’t trust it and i’d advise you not to click on any unknown links sent by unidentified online users (or bots) (FYI, I havn’t had a Craigslist ad up in months so any emails i’m receiving by people claiming to be from Craigslist are liars.)

Hello, my name is Michael.  I am a US Marine veteran, and I was just viewing your ad on craigslist.
I would like to show you something that I believe can help you.

I didn’t believe it when my friend approached me.  
After seeing his results I decided to follow his link.
My life has changed because of it.
But don’t take my word for it. Visit my link and see for yourself.

Best Regards,
Michael Brewer
Here’s the link.

Link was here

I didn’t click on the link and didn’t want to post it and have someone else accidentally click it. The Link said http://networthgain(dot)com and the URL was networthgain(dot)com with no ‘http’



Return-Path: <>
Received-SPF: neutral ( is neither permitted nor denied by domain of
X-YMailISG: S6Vh9hcWLDubgDGy_xQOlA8KEUP57lQplXkxzdnkuUs5UTL8 IHAmaELNCB5lqzGFOk5uiGRU.rDHF4wjb849pP2PZroMduwL2hY8.ksxIG04 IjjzxTS5BJRc6bn04pfF6hvl8OavbAl3NpZcoSSUColwAiiO1fhMWBNOUc_N grTMJdWNiFrmvDGExWJaTIIlpapw82RvCqcWkE.nMMM7KX1OIQLFiEPIfL9u U0jkH5hFS52wiy7TTFfnfFGPMWMQWJXkRYUs8kohLVKvDLtsk4fg5ZwdjBko D4ZclazthTgrDeMj6ps1EqHkQVQesZk9rBGKs4wrK.zQuJj52qe26VENjFjl PZjE2RcBAS.g_dOPyyBcOtpKBawWyHz08_X42qtLaCBlcDmt2XBb7iyCf3yE XYhV1SNVLWAG1BwoAQ_ufTQOrotoQEtwbMcPPlKU2.LXyvZMCDdt9exzI7au LaedSKChCnq0bl5V1JVfM8Ub2K1Ugla2_9YgIK4wveaD7V1uKe1sGBCfGaa5 alRTJJ2zl4uwynAFwDmLEWro1SOqIgchab.FaYsfGJCU8VPfnrFv.VzLSfKl 5uEKniX.4dBvbP4SeqH84n5AzGze8hjt_KiNu1J4hp5J_Cy_48ValPe0Dk9a G4LRVcHWvoKEIv4BPWO5OoHras6XYBAuDUuZDf9pffMJlLzkHoHDyoD6V8ef JF70e8WwFK73wvj9cqOHFKvjMlzeQjUuJ6w34nfVfo5dhNNPPr6GTEA5hkaR 3k3VvU67uh2ecUQytwpal02AaqEPS2ksVwA_zwByf286er2U7Vva1CZztWog .1eecc2V6fPlTTCuNn0XdGXRaFuUUIqx81_qXKcwLEl9em_a4cc2T9yzKVtL PqMDRBlyLXbH_WAwRl5fcjr9ifrbyGtd.IorpAF7NSl4wxwaUHlWpxwo44Fs ZoSh.Sgq69SxyDrwW2YrBff5dZWNCGfdMKJP8naMy46AhWb07SAlFFxj6im. T_1V6EdBnONACh36oCI8Efa99ahNQX8bbJK3pHygTBGqb5LBUdA2bkvt6G0p mursgi3SHF053GAxCeiy8srOdJ5n8keAADLFNNpwCcuNmvWvaYXMRmw3MFow cbSbl.tUYo3.cWhOgQVTUBUq0O3.keasOT9HNv5.4zfVcm7HNe5g4bUhlUMm VNxc0U_pF4LspgcPAWVMMyHCBSRVJXZ0sHMyxAAj0FTGXBp3TKoha4ENrFe2 5wgQk.8VMBQxL83aMQBCEejwHcBwVz8QQDROc9RHs_NmpZgDQ0vSSDzttOX. fvFTVavHkYCbvPUbkVpd.j49mA–
X-Originating-IP: []
Authentication-Results:; domainkeys=neutral (no sig);; dkim=neutral (no sig)
Received: from (HELO ( by with SMTP; Fri, 12 Oct 2012 01:20:40 -0700
Received: (qmail 28821 invoked by uid 0); 12 Oct 2012 08:20:40 -0000
Received: from unknown (HELO ( by with SMTP; 12 Oct 2012 08:20:40 -0000
Received: from [] (port=63105 helo=Kokunai-PC) by with esmtpa (Exim 4.76) (envelope-from <>) id 1TMaU3-0001Wc-VB for  Fri, 12 Oct 2012 02:20:40 -0600
Message-ID: <024463a9-41194-06891390529514@kokunai-pc>
Reply-To: “Michael Brewer” <>
“Michael Brewer” <>
Subject: Craigslist Reply…
Date: Fri, 12 Oct 2012 03:20:14 -0500
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-Identified-User: {} {sentby:smtp auth authed with exceptk3}


IP – Host:

IP – Host:

Michael Brewer — —


Tags: , , , , , , , , , ,


WARNING: 419 Scammer – Re-compensation Scam

For some reason, I continue to get get these types of scams. I’ve never been scammed in my life but I must of been mistaken for some other unfortunate victim.

Under the United Nations scam victims rehabilitation scheme, You are listed and
approved to receive payment of $1.2 million as one of the scammed victims.
This is to Inform you that ATM Card worth of $1.2 million has been accredited to your favor Has been approved in your name in the United Nation National Sweeptakes Compensation Award 2012.
Send this information to the agent:

1. Your full name:.
2. Your Residential Address:.
3. Age:.
4. Cell Phone.
5. Occupation:.

Best Regard.
Mr. David Mixon


Return-Path: <>
Received-SPF: fail (domain of does not designate as permitted sender)
X-YMailISG: ZRMohCgWLDuXlYwGR85er8xxNYjPQxwFe7BYQnDByx9SicDE grzQ0eM34XjG95w6LCcNUuop4ysJg8UAq4HRpolmJqb4xwSrNs7x4njtbbG0 pUWbTrPHZaSQ0hATIk6OiZ3TpThu57cfQQnGYlUpOoXPHML4NL6QfkajrVUP lXxJtK.hnbtiCSEISgrejngeJy8UhTyBVIFAa0byv_3TBvMZLVS6gcQhvvvm 9mIN7eo5pmlj4MDiLkPH5BFJgQfyDhzAUfZbqIl0Ata3TGpIYD1QAEnOnCzY JbTo6R3_Lda5VRJpa1nPas_bcRIdn6oBJAV0TTTN6zwr4Wxr4fBS_4FGzYNb kBIodwzyUx6gdGXkI8ljCrYQ4CfZoOJdwHuB9Waf5HbGheCog0CNhD1xMpmL 038Q.zC.jl.cFyE8YXW4veCSmk7IBfzJM93nVzWt93iF4fPE3XUacheqAK0z NYQ6uDoTYyeXhxgCVhtLR4VPau64SlxJISxLn8YQVXnEi1nnkFG1NpYR.vvZ RzLw1cdM5fycyQQUrSXhsLpdLJPg7xKtr9ZtvnWwYzFbFnz8_DgGFXjr_NQx O67gxxZgB2.Dvq7comAemP4yzmuKNVJiev4OJqfR7clERVwG19pBXWalm7l5 FFuQnapbzpyNqIufVOeMzcuSuDiPxzANRvlDCVV5UoCGiTNwGP0oTCq1JGbV U7tvnesmJ8GzmddfG3pgybKCOYqT6qhpjnS7UwtoVRfI7GPIN3r8o1CniXi6 Ac7AO3PIa_wAcFQQ0u6_.hxLRDs6KUKQesQOjMBABolhyooaand.PvA3hM77 GBcVKcJt4coJUo4KBmzK6fkbEviYJZN2y3bkWx0wPp2NDQX9DyPIG.6PCOBA tfw5D5wpV8xsJXXKP.gfkUkyCPVxRv0pJQ_lJtlnqbEVwCUFkOZd5YwHbGhN q5hFjrvUkYJ8OD7txRQsErxDBqlAl2tmwzfhTA79ECnI7.nyAzbfDW.XM0rw fGnxppdhFlx4AJ.XTXdSCMiGqtjJ02OaCjCse0HqCIfZTr6O0GfrQiQ3Od6h QexhHvqaBc7IAnLl2xwCuRNcxi.0HZKar356HEhc9Q2h9ANWtr4MeGYGIWqg Wl0Vqv1wGUVNQhe208h24Ns1Zo.LiHOamSjXk_.3gSqwNyKtzZf4N.MsoU7N ZVnyNqRmX9dD1.BPWmp47as1b022cJnpd1rtEnfaZM0u2zt00Lm.K5yENyVQ tV_QDLm715OHWHAJLhnwDoDrCRRLWrVySOTqhm5JzU36_LrlzPxn5rqF_8pK gsPck8gijSmnPfxe4BoEU0dF25HlFua_t3PiXIKaHa6SqedeHjJj.KqLrTUF vQWd_JIEqhVK0uqEbleBU2qz42gBHcgRNrfpRa6WIp7sRx6oL._E.Gy8k8Dk UBuQ_HoNI7Wl2MnMBH_jv8tX4eG1gLJAYEab5RIk7RDbWra0OTP.lsamxTcC _gmS6hJgeYHl4qWxiG4.vc2UOFI8QGdZbBAgyDcT24hYH9ZBbpk6kStB2qvR irjBjDT5dWBxHAMTUTO..9x6xoHZjPsidEhSZp7FdYrs0Sx9..PczXd8EMog MLVgOfxIUElEdRlYXC3sbavu1LZn0pCCzhuy
X-Originating-IP: []
Authentication-Results:; domainkeys=neutral (no sig);; dkim=neutral (no sig)
Received: from (EHLO ( by with SMTP; Sat, 13 Oct 2012 03:51:33 -0700
Received: from ([]) by (InterMail vM. 201-2260-151-110-20120111) with ESMTP id <>; Sat, 13 Oct 2012 12:51:27 +0200
Received: from User ([]) by with edge id Aaoy1k0160x7NyZ04ap5Vm; Sat, 13 Oct 2012 12:51:27 +0200
Reply-To: <>
Subject: Notification From United nations.
Date: Sat, 13 Oct 2012 18:51:25 +0800
MIME-Version: 1.0
Content-Type: text/plain; charset=”_iso-2022-jp$ESC”
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-Id: <>
Content-Length: 539



Leave a comment

Posted by on 11/30/2012 in Other


Tags: , , , , , , , , , , , ,

Smartphone users should be aware of malware targeting mobile phones

The IC3 has been made aware of various malware attacking Android operating systems for mobile devices. Some of the latest known versions of this type of malware are Loozfon and FinFisher. Loozfon is an information-stealing piece of malware. Criminals use different variants to lure the victims. One version is a work-at-home opportunity that promises a profitable payday just for sending out e-mail. A link within these advertisements leads to a website that is designed to push Loozfon on the user’s device. The malicious application steals contact details from the user’s address book and the infected device’s phone number.

FinFisher is a spyware capable of taking over the components of a mobile device. When installed the mobile device can be remotely controlled and monitored no matter where the Target is located. FinFisher can be easily transmitted to a smartphone when the user visits a specific web link or opens a text message masquerading as a system update.

Loozfon and FinFisher are just two examples of malware used by criminals to lure users into compromising their devices.

Safety tips to protect your mobile device:

  • When purchasing a smartphone, know the features of the device, including the default settings. Turn off features of the device not needed to minimize the attack surface of the device.
  • Depending on the type of phone, the operating system may have encryption available. This can be used to protect the user’s personal data in the case of loss or theft.
  • With the growth of the application market for mobile devices, users should look at the reviews of the developer/company who published the application.
  • Review and understand the permissions you are giving when you download applications.
  • Passcode protect your mobile device. This is the first layer of physical security to protect the contents of the device. In conjunction with the passcode, enable the screen lock feature after a few minutes of inactivity.
  • Obtain malware protection for your mobile device. Look for applications that specialize in antivirus or file integrity that helps protect your device from rogue applications and malware.
  • Be aware of applications that enable geo-location. The application will track the user’s location anywhere. This application can be used for marketing, but can also be used by malicious actors, raising concerns of assisting a possible stalker and/or burglaries.
  • Jailbreak or rooting is used to remove certain restrictions imposed by the device manufacturer or cell phone carrier. This allows the user nearly unregulated control over what programs can be installed and how the device can be used. However, this procedure often involves exploiting significant security vulnerabilities and increases the attack surface of the device. Anytime an application or service runs in “unrestricted” or “system” level within an operation system, it allows any compromise to take full control of the device.
  • Do not allow your device to connect to unknown wireless networks. These networks could be rogue access points that capture information passed between your device and a legitimate server.
  • If you decide to sell your device or trade it in, make sure you wipe the device (reset it to factory default) to avoid leaving personal data on the device.
  • Smartphones require updates to run applications and firmware. If users neglect this, it increases the risk of having their device hacked or compromised.
  • Avoid clicking on or otherwise downloading software or links from unknown sources.
  • Use the same precautions on your mobile phone as you would on your computer when using the Internet.

If you have been a victim of an Internet scam or have received an e-mail that you believe was an attempted scam, please file a complaint at

Leave a comment

Posted by on 11/30/2012 in Other


Tags: , , ,

“John Davis Johnson”


EMAIL: Nat west Bank Pl c London I35 Bishops gate Plaza London,United Kingdom Attention : Dear How are you doing please can you assist me to receive the sum of $15.5M through ATM VISA CARD,and i will compensate you with 20% of this total fund.If you are interested please let me know so that i tell you the requirement. Cheers. (1) full names:——————– (2) phone line:————————– (3) country of origin:————————— (4) age:————————————— (5) occupation:————————————- yours Sincerely:———————————————– Respectfully. John Davis Johnson Natwest Bank Plc London


Return-Path: <>
Received-SPF: none (domain of does not designate permitted sender hosts)
X-YMailISG: HRWGCx0WLDsKx3ztwqMj4elWIR6MrQT98M4Rl2HJhI57TqOY 4BuwZ2tjoKmv5HnGK78C1mnqA8smOczRSChzTqkNM_ZhpRr_SodcbozXWz3l vVO9Do3AF.KqdDhR4MUeRrECde.8LBIajxgBk6IvM24Gz382sjOf2xZ_PxbQ xLWdC6zBRBUR9lG2t8Oj3FoL80pWfPf_IT06r2VCu.b5Q_GOqkyxs1cx_ovD NhDvegBnTBURCs3pUPnFzItuHxFLlsD0_GSz3EQMYzOO47ZoZ2fAiHkiR.L5 f8STVrIjPAxoM_yK.7fWQRuVR_uLCIARN.hiyGYSZoaz25B1VPpoYTa7pQLO RKBC0ME0NuDpd7Rp6MWkNv.HMuzjCRXgn1tnZw1KeN97rzj1ADAUQxjhxuVD RjJ10KQzVVuRHt07W3HatR8tpL0vYX3OyssFsuPib_6tS7shYng9sCd.LxxI JwEtVgP1ZF6Y6zPXkBpf0QGkgZsuNW03QpY86ruywgd73sb7kci9OEs05eY9 4WRH_XeEgjL9QANadmDthQqjhRqfBHGcHjS7DtTpkNltTJnyto9yeMTOahSH gTHFHQtOATmn4Fsi_rQdm_svV1QOreltllC8a8g1Q1AJXgrWze90hQknxoSe EokPentr3HPiQ4kavy5C2PtBwu85PlCLw4QQDAMSVUF36PiaJA8mVVuhxNKJ idqaN2CwNKoIh0cgSHOK8rsBYVtXHm1hzcZ20wbQt5NdOpqTOKgzQ0DTgDLP BDPTXGxzRutyboz1q7dbNXh6bIOnGv4UxuNQ2BnWH8rWRdlzhw8_SX21Jskw 7g0TBV3sR6eGHDbp_yVWA4WLzn9IPobFch0B57p9ZtzdQpSFRUVsNcjYA_NU e7IsQGDbFAY9j3NXNfDaQ6infwdO2FQrb9cieRO96UUezGKj6qjcxfOhRxRC HtHhKlnGnGPH9De67NHdlOJNPt7pm9EBsa5CU0U2749iJu0bVS5j.jqz2EoG l9ACo8YFFUqI.EyqJV9wkczwLC3Tu1yqHfqOXO1T_m8I42IV4NhEVZ98lz2y vjqRS4zLJbmULoukyQbu7mS9bygLqudlhY_cRoer4xFXYd90pqklnxFQZZGB AHt4e5blMeDtX_BtglYv2rrdqzMTH93nnd3gXY.wb5V6BeL7L6n3AefhPLQ6 VsLqPr_Eju9D4IH5KqlrvkkZgPs_vujPsme_ivulVXKCZIXIQCcz_1nRlC6c vDDajg–
X-Originating-IP: []
Authentication-Results:; domainkeys=neutral (no sig);; dkim=neutral (no sig)
Received: from (EHLO ( by with SMTP; Wed, 28 Nov 2012 17:35:14 -0800
Received: (qmail 25028 invoked by uid 48); 27 Nov 2012 11:05:27 -0500
Date: 27 Nov 2012 11:05:27 -0500
Message-ID: <>
Subject: Attention: Beneficiary $15.5M through ATM VISA CARD From Natwest Bank Plc London
John Davis Johnson <>
MIME-Version: 1.0
Content-Type: text/html
Content-Length: 681

Below – same scammer, different scAM

My Dearest, I am away on holiday and for investment purposes in Brazil, I want to thank you for your effort in assisting my community on the crude oil spillage issue, I am sending you $1.2 million dollars for your efforts. So feel free to contact my secretary Mr. kingsley Akpan whom will send you an Citi bank international certified draft, so feel free to contact him for your money. Best regards, HRH. Dr Innocent Masi

HRH.Dr Innocent Masi

Received: by with SMTP id d20csp232572veu;
Sat, 10 Nov 2012 08:12:53 -0800 (PST)
Received: by with SMTP id gl1mr15606586vcb.58.1352563972178;
Sat, 10 Nov 2012 08:12:52 -0800 (PST)
Return-Path: <>
Received: from ([])
by with ESMTPS id eg8si1748202vdb.57.2012.
(version=TLSv1/SSLv3 cipher=OTHER);
Sat, 10 Nov 2012 08:12:52 -0800 (PST)
Received-SPF: neutral ( is neither permitted nor denied by best guess record for domain of client-ip=;
Authentication-Results:; spf=neutral ( is neither permitted nor denied by best guess record for domain of
Received: (qmail 13386 invoked by uid 48); 10 Nov 2012 04:44:39 -0500
Date: 10 Nov 2012 04:44:39 -0500
Message-ID: <>
To: [redacted]
Subject: Your compensation money
From: HRH.Dr Innocent Masi <>
MIME-Version: 1.0
Content-Type: text/html

HRH.Dr Innocent Masi

Source: Dr. Innocent Masi – Scamwarners


Another header below received by the same scammer as the above emails

Delivered-To: me 
Received: by with SMTP id 8csp182519lbr; 
Mon, 5 Nov 2012 04:06:10 -0800 (PST) 
Received: by with SMTP id l10mr14467309qal.58.1352117170095; 
Mon, 05 Nov 2012 04:06:10 -0800 (PST) 
Return-Path: <> 
Received: from ([]) 
by with ESMTPS id ku8si4746969qeb.7.2012. 
(version=TLSv1/SSLv3 cipher=OTHER); 
Mon, 05 Nov 2012 04:06:10 -0800 (PST) 
Received-SPF: neutral ( is neither permitted nor denied by best guess record for domain of client-ip=; 
Authentication-Results:; spf=neutral ( is neither permitted nor denied by best guess record for domain 
Received: (qmail 17875 invoked by uid 48 ); 5 Nov 2012 05:18:56 -0500 
Date: 5 Nov 2012 05:18:56 -0500 
Message-ID: <> 
To: me 
From: Holocaust Claims Processing Center Switzerland <> 
MIME-Version: 1.0 
Content-Type: text/html

John Davis Johnson – – – 


Posted by on 11/30/2012 in Other


“Mr Jude Anoma”


EMAIL: From: Mr Jude Anoma 

Address: Abidjan, Cote d’Ivoire.

Hello Dear,
My name is Mr Jude Anoma the principal treasury officer with one of the prime banks in Cote d’Ivoire. I have decided to contact you through this medium based on a business proposal, which will be of mutual benefit to both of us. I discovered your email through comprehensive web email search on directory so I decided to contact you. I know this might sound like scam to you because of a lot of activities going on in the internet today. But I assure you that this is real.

I am the personal accounts manager to one of our late client a national of your country, who used to work with an oil servicing company here in Cote d’Ivoire, the late client made a numbered time (fixed) deposited for twelve calendar months, valued at €8,200,000.00 (Eight Million Two Hundred Thousand European Euros) in my branch. Upon maturity, we sent a routine notification to his forwarding address but got no reply.

After a month, we sent a reminder and finally we discovered from his contract employers, PETRO-CI Corporation that my client died from an automobile accident. On further investigation, I found out that he did not leave a will and all attempts to trace his next of kin were fruitless. I therefore made further investigation and discovered that the deceased person did not declare any next of kin in all his official documents, including his bank deposit paperwork.

This sum of (€8,200,000.00) is still sitting in the bank and the interest is rolled over with the principal sum at the end of each year. No one will come forward to claim it. According to the law of Cote d’Ivoire, at the expiration of 5{five} years, the money will l revert to the ownership of the Cote d’Ivoire government if nobody claims the funds.

Consequently, my proposal is that I will like you as a foreigner to stand in as the next of kin to deceased person for the fact that you have same last name with him so that this money will not be reverted by the government. If this request matches with your inward intention for success and greatness, then you are urged to make a quick response indicating your interest and readiness to participate and work with me to make this successful.

Please observe utmost confidentiality, and be rest assured that this transaction would be most profitable for both of us because I shall require your assistance to invest my share in your country. In your return mail, please do forward your information as listed below if you are willing to complete this deal with me, to enable me put the total fund in your name for claim as the next of kin to the deceased person:

Your full name:
Your contact address:
Your phone number:
Date of Birth:

I wait for your urgent reply.

Best Regards,

Mr Jude Anoma

Rue 18 Avenue 11 Angre
Cocody-BP 982 Abidjan 01
Abidjan-Ivory Coast.


Return-Path: <>
Received-SPF: pass (domain of designates as permitted sender)
X-YMailISG: jti0k3AWLDtAdhHtJ8DBla5B6hhhFN9uNDQ2xLXFYHSDgkJi 7091ufrq_TjZrOiPrIOKj63_2IGN54yIjV6tPOKOaA6MQSboGMb3.VLa4ihD VnHZP15ln0etwMeg7Ci.AHtAcejrAaHkHsdimXH6nHUCToobObG6Y1nFpvhN YzhroWrqXo6MKSYtliiA0U9V6A2I1Kwwqwpv0Pj3cCTUHsUk5g3HncHSDXIs AJZnh.AnBpeOUzENdbp17DqRO.VAnev620wLyUqzo6nzBcDmyDQ9ge0XC51x 6Gk464rg8soUZ5CW7qmTGxtjySpOcyF_kXDJNgyVvVD89kfj_3W5s6rW3VNJ 1jbYOfSGg8wCLFkEpz4173rLvHHCEneC1V0DZOZ7rq3jq1qEXJGlFMjbnnWU 3LXOf5slQOrXlGFbhVqo6iIqbl5AB8GlX_ZlFoC.lKuGmoXrBjqtXKpDvMlk MklDV6TNAagWg4jWScFYCvIKbXv5GgpmGOs4NKE1n035dYZH0vFYE7Q4CO8p nLA5_rWWFq2Itdi1rOajDMEmtAJaHSTH_wwiW.uppyXVfQIm9_Lb6wyIqZky M9t4Flaeo8BgTmjv1UIdzzcFdW9peAlD3_Cs5iGh8PoUh52WBmxGzRjpZi7D JSKQWws3v53dJ7_9utqZ_O1GZbTKsOv29zxXQvkYl.KQVv30tAhTD6wdO17Q OSPkTBFG_jjquu.H0ptd03O_fcZKY2BXtNMUEQE1GuC2UNX9rCzmH52aGKBw USxd1kGEfDq5AyAG3k51CDMLqzgo9rO2cQlIEKqlnUHa_dKUT0tnLxTcNchV bUXZ8oj4RFOWrDoiWQj5GlzXdpdKuMkkdpk8tBDWgUXEoPsysImLLUoCy9qL ttxZg8T0hp_3_zj4xV8i.u5bGHRCOv90scNgBI0L0JKcnBKIByE6kC6iCycR eFLx73Arn1lYN5j7s02rDk6qtyRm.3PTa5PGnB3rZL7rhz.8TcdTWS2j76Be TKxKJsLdB1874.e8Bu2pwoO.eF7ZqgBrAo9E4AGT7Gd5CF9nT0SOZkyZHgw. wncFODEu_b99Il0M3745JzjWwtoOu63qJOh5mn5IUtX1I7yBiZfB70mcTMYn BZo6c9nguq3T66pAkJzFOjfGWujBAeLEULJy7gawozWyGNHLYJjHY3cVnVfm S2BoiAgKFV0qj0l6jHpd1MyuVFJU7UChSQW5hUW92gu8k1GtYJhABJLzxL2u PEQEKTnyNGtCaOs6Nxx0KFqfIjOZWwzcH3r6xogufNcVBtXPVYGTs3G_kTZg Rlsq1UtVgUXiduwFfZYJt3_9H7416xVCC1o3WMOLOqd.qg56fXXcL7_iQH2t 0ZqeV5XmohxjsTtR1p6F
X-Originating-IP: []
Authentication-Results:; domainkeys=neutral (no sig);; dkim=neutral (no sig)
Received: from (EHLO ( by with SMTP; Thu, 29 Nov 2012 08:33:18 -0800
Received: from (unknown []) by (Postfix) with ESMTP id 31F5018002998; Thu, 29 Nov 2012 16:32:59 +0000 (UTC)
Received: from (unknown []) by (Postfix) with ESMTP id 6EC5B40104A1; Thu, 29 Nov 2012 16:32:20 +0000 (UTC)
X-Terra-Karma: -2%
X-Terra-Hash: 18156cd98356fb6c44cc10b60c2b8ee4
Received-SPF: pass ( domain of designates as permitted sender) client-ip=;;;
Received: from ( []) (authenticated user jonascalcario!terra) by (Postfix) with ESMTPA id E7F104000014D; Thu, 29 Nov 2012 16:32:19 +0000 (UTC)
MIME-Version: 1.0
X-Mailer: TerraMail PHP 5.2
Message-ID: <>
Content-Type: multipart/alternative; boundary=”=_1e3c6d7761ec54535f40b301bdebe3a6″
Date: Thu, 29 Nov 2012 16:32:19 +0000
Subject: Hello Dear,
Mr Jude Anoma <>
X-Milter-Version: master.39-g1fd3ecd+
X-CLX-Rate-Response: fh=1gr; fi=;
X-CLX-ID: a123GLF8i43m0VH-AT1632K6
X-Abaca-Score-Saida: -7
Content-Length: 6555

Mr Jude Anoma – – – 


Example Messages Sent From
From: “Replica Pens” <>
Subject: Replica watches 25% price off 
From: “Hiram Swanson” <>
Subject: Attention from beautiful women is guaranteed to yo 
From: “Internal Revenue Service” <>
Subject: Notice of Underreported Income 
Subject: Rolex 
Subject: Best Buy Viagra Generic Online – Viagra 100mg x 60 – This IP is also known for sending scam

Tags: , , , , , , , , , , , , , , , , , , , ,


WARNING: NIGERIAN SCAMMER – 419 SCAM – Also known as “Advance Fee Fraud”

EMAIL: Attention:My dear:
I am Mr.Barry G. Diplomatic Agent Dhl Courier delivery company Benin Republic, Please I miss placed your original address I had due to CUSTOMS /FBI/ CIA and POLICE searching and scanning on the Box as if I am a terrorist.

They have confirmed that my movement is clear and with out any suspicious intentions to this country only to deliver this Box to you and the documents are updated.

I have just cleared the Box from the Customs and they are now demanding for the certificate of ownership and the international consignment delivery permit (ICDP) from country of Fund origin and I told them that it will be forwarded to them as soon as possible to enable complete your delivery today, so please call me with my number so that you will direct me on how to reach your destination today.
Here is my direct number +229-986-782-98 , do not fail to call me Asap!
and also, Please,I want you to call my director in Benin Republic and forward your name and your address to him and to enable him secure the requested certificate in your name and send to me immediately for immediate release of your consignment box, So I will proceed to your house today.


MR.BARRY GRANT (diplomatic agent)


X-Apparently-To:* Thu, 29 Nov 2012
Return-Path: <>
Received-SPF: none (domain of does not designate permitted sender hosts)
X-YMailISG: NTGtSB8WLDtYe65NR4uqunNnNs1MnyQjJouu19QOPQiUCKBV iSNFmgSYwDxkZDphFkZ8qTPjtfQsE.VTghXgxkJi9sVSPaY4TRbGj65rRLPS GXdig1MgB2wt8lAGvYD10SHAVkoz2MIqVNfKTBWX9.KJ.DXO4G2QNi34Gpbb bgIgx0pD1iVSopgEHsS44.bm8jy_chVSueCF8covE_k1YiuqGB9d8D_LdyDW mLvIDUABg8b6AboLq5XL.d7EDJfoRmIx0VaAxbL5E4Nc4XJB343st782HvfI tbiiwSMOWQpcIwavggsnBVrw.umkpEEGqtaXh6rgnW5A3UjR4wcAAF1AUCcF sAqovRtP41UJGd6uWB5Gdady8xYCItaRxxNyzTPtkNo7Mt0.L69HwHkpJP8y Et2sy8TWoRdou1TyW3AtzuaAQEmugOXJAdxwKygqBA24byinS5hNH_.CbkdF Nz0Tfc7aZxxQpHNmxCBqNDxkAjefLiX9mOaB34dozt_XM_82Muy1YalbrE8T PauKbjCZyMgwxf2zmA_xrnvWIK.xlUOQV3EFQKzhEl4eyHJgK7.eLLmgoLcX eErytdN1RTfIesVJHBbwZ9jgBZGpm5Mj6S5ZwtHabECmhPOp0vCOcvvbaxap DMSVZQ4uXFj6il.ss7GBfQZl4OGCibUqjZ8KncgbjxrkHRxu_qK5LndNgbp2 1.xH8UVF7MR.Zkcd5m6a1fC2DlmlwIXeR2K04N4iAGmQyMsFWd0dbk6.3NN4 JZ1tpQcpE8YOrKS1vyIrPVXMOPX8WzVRBCqrfkD_XvEynVx99cpMslValOfP 7My9yCQLJC_YIxdhB_YS3zhFlKAAEp8vtBcILbBoSC5LxOnYnrnChUmnw9dQ USsvP0On4.UFMV_LBHJmHl6VwzQpwlNr.7D0z8o8gpK1K7vtapaSabT9eyNt zcrDkhSF76oo51L0czJTXehdLDHt3uvVYg_f3TUsI7t2xgw.9mmHI2pE3GvI B.qzf.4if9jt2WZhqtas6MDs3yaxmixXpCBChDMHVUq_PC4fl1ouSCjwbkFK vr4RtPvkq4vRQlbofJmfuBr9FXPF5q7AypwnGF9jJVbzC._gHOtv87hiTuV4 Oh_RgZ7PUx6ZSfjPqQbjhPveL5mWS1v.wGxCjxsPT7tnOI3ZY6lbPrpMNaAW 2npS1KJA56P.wvXsPGKESpzCzSPBl62qs6IHB0t_XVUh8BLNHzTFWOMfbYUT YwkP9qT6i9w1vgJUB1ego_WTUlgShxLQVURZmw3ydr6pQSyCfoE6cvQqtHbG ABAFdkn61M2uadHeObpjtSNtzit8NXzx_pNlNBmGN1MjJZo-
X-Originating-IP: []
Authentication-Results:; domainkeys=fail (bad syntax);; dkim=pass (ok)
Received: from (EHLO ( by with SMTP; Thu, 29 Nov 2012 09:26:27 -0800
Received: from [] by with NNFMP; 29 Nov 2012 17:26:22 -0000
Received: from [] by with NNFMP; 29 Nov 2012 17:26:22 -0000
Received: from [] by with NNFMP; 29 Nov 2012 17:26:22 -0000
X-Yahoo-Newman-Property: ymail-3
Received: (qmail 10255 invoked by uid 60001); 29 Nov 2012 17:26:22 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=s1024; t=1354209982; bh=41J/k28ahEQMiiBQfZyiXVElzLvnyuotQtahBg+PFuY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=0sV8pjAIQVcACX3lou9apROdVhzBGBVgh4kwk6YHFS7Zvql0JZ0gxBckRKyNXHKl4TciLv2phdOrGvURRhCYvOkU6ZmWunYfnJGKnW4iYBDnEP/Mpf2SFIJoyq1ymyW2da3Qiab+WFyy7B396OnMmwesUwcJI8+KWjARl6bNUfg=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024;; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=42Co41ucafGl9HGkAWmgaORIvVGA38VT0Z8wrglrvdfGHQvoONCTMVE3h6sqTIFGf9MhLy58sEOE4NN5RXMHSQnqJm28UcvBsjI4Etmru9vB50o9/tri0E91bpzFvrI6yaEHz/Z0OFx/aUg6NzX2jy/3Peu1Ij+TZ/DvQpRonnY=;
X-YMail-OSG: n0667UEVM1lXGt1BS21iUoxCrxGgxkC6Pvo2gK.xHi32qcI kYMr.dZSLbV.Xkx0-
Received: from [] by via HTTP; Thu, 29 Nov 2012 17:26:22 GMT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/
Message-ID: <>
Date: Thu, 29 Nov 2012 17:26:22 +0000 (GMT)
Subject: I am Mr.Barry G. Diplomatic Agent Dhl Courier delivery company Benin Republic
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1670751155-715523683-1354209982=:35602″
Content-Length: 3482


IP – – Location: Nigeria – NOTE: According to Spam IP, this IP address has already been Recorded along with the email under the name barry grant — as well as: — under the name Mr. john eric.


Felicia Aime <> — Blaise Samake <> — — — — 

Leave a comment

Posted by on 11/30/2012 in Other


Tags: , , , , , , , , , , , ,

“Mr Dominic Fred”

Business Proposal Scam – FRAUD

EMAIL: Your Kind Attention
My name is Mr Dominic Fred, I am the regional manager of the Internationale commercial Bank of Ghana Takoradi branch in the western region of Ghana. I got your contact on a bank conference that was held in Namibia. I am a man of peace, married with two lovely kids.

In ever want problems in my life, it was just because of my present financial situation that I have planned to utilize this opportunity that came my way and I only hope you can assist me not to persecute me.If you don’t want this proposal can you kindly forget that I ever contacted you? I will be glad you did for the sake of my job.

Ihave packaged a financial transaction that will benefit you and I, as the regional manager of the International commercial Bank it is my dutyto send in a financial report to my head office in the capital city Accra at the end of each business year.

On the course of thelast year 2011 business report, I discovered that my branch in which Iam the manager made Twenty one Million US Dollars ($21,000,000.00M)which my head office are not aware of and will never be aware of. Ihave placed this funds on what we call escrow call account with nobeneficiary.

As an officer of this bank I cannot be directly connected to this money, so my aim of contacting you is to assist me receive this money in your bank account and get 30% of the total funds as commission. There are practically no risk involved, it will be a bank to bank transfer,all I need from you is to stand claim as the original depositor of this funds who made the deposit with my branch so that my head office can order the transfer to your designated bank account.

If you accept to work with me I will appreciate it very much if you think we can work together so that we can go over the details. Thank you in advance and may God bless you and your family.
Yours truly,
Mr Dominic Fred,


Return-Path: <>
Received-SPF: none (domain of does not designate permitted sender hosts)
X-YMailISG: hFOHHpIWLDvYrys.R4II_IH734enh8SDWp6sn2JEhnWIc7xi Tpz_JYyBRgfwsAjR_cerMBaV9xkV6QAwLxtPFK2eZK4_0e8ufY0GIuF_RoMy NBOmLhb63SxfgM8U959ryHfLlRcfY7_VWbWmgnVs1_I5oPqcO4CnhzkiIEh_ wBILSnhjuFzpJLQ28lkQPP.2nlCGQ9TXIKiYvfrdNHVcAdmf6SQsZ8vvpu9t 9O.j5u2FsyJNGMAoBUvL3XcUfuFAAps_eTzfskKalhvkTs3VVPDHhrhO3Gd0 o5yn6wx3unyocSeTxWWywXvCEk79x5CV3sehZu.esi6s7BxN2IFTHe80Fqke KtqYMcBJevqibo4AIjeK_pwh_gfmQlNWVkJ_Ik3m1MSte8EC87g8jeZ8zvve 8tFgN80qzIsIUyjYBZCpJsGaFQaHf3sTaW1qhHMdLq0gnLaFw0Dm2uT4ZFtN hY3dmbX4EUSrEJcJMw7NsKsbcxkmKRnLI53sUQgH3PmGftxO6V7gTNFQ7r3t tCHyMjUwrNCoMByhDZtbgg6J.t1BNaY2JLmn7bVepnEZh_OPOdvtGG3UV5nx wpW1I_YftS1pKXr2vyQw.YQsnfY8xjpgu6tVjo9LWPEBPcXN_CQ0XQmDUrOF ZKv6QG_a3VVkGFFluFts421OtB2uG9Vfr95BZCgyza0b_dXG_Wrx4GxICboI luojiHUPVJp0uvEj05WwEHPAwZ3QJPWnUJcyiVpCSUQPmTqzkFlHfDyVHFjD ZRQsj2wZ5OhY8eaGD1T0ZjJRazFTZJrfo8tMwRoaJqcSGo.de5346aLcwRT6 tUd2FpqJVtY90CGGcq.1JU3nsrXOGGYv0Qwe13cwVApv0oJy1l64iNBQskw3 YDlqeJr_FYMsVf7p7hCmKpR5SAfi7RR4wNY89SDg5PHrQFh_iEdlKhhuY5Qm SpMn07jhgTV5uG4efv2o4L8in.UHgdIJcSm6MwfFSGUc0dpbSVbGgwwW285Q j7Mrury7e.RlMN5DFaYT.aKl5zHULWRzIr5yqwbSy5SLdNcZuH6YcQxCxMDd _ub051OMFdhZc1nHqD6JGeGBf5VEX5YXoHDDqHBEiCdZ.YP3c_vpxvEK4Lp3 cIteutvZLV9YxB54SF4uRHoYp0ZJeb9oxsGuG9MQtWmwr6q6oKGgq6_YNTbT SKHRNytp2Ixc38jfiEb1Q2X5PH2tIM9Xua.znD30HUVjXeQpK5gdcbQGIAJz ZVQNJJX.nHlagepZ5qy5xPcuzx8cjB7tvK65rjslV1J1BMvQkhJRExOdFdhL S0hXK4Osv7EyLeJ8vA–
X-Originating-IP: []
Authentication-Results:; domainkeys=pass (ok);; dkim=pass (ok)
Received: from (EHLO ( by with SMTP; Wed, 28 Nov 2012 03:53:47 -0800
Received: from [] by with NNFMP; 28 Nov 2012 11:53:45 -0000
Received: from [] by with NNFMP; 28 Nov 2012 11:53:45 -0000
Received: from [] by with NNFMP; 28 Nov 2012 11:53:45 -0000
X-Yahoo-Newman-Property: ymail-5
Received: (qmail 36425 invoked by uid 60001); 28 Nov 2012 11:53:45 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=s1024; t=1354103625; bh=XB9Yk3BKHTI0kV4hbXyRr8jRO0kQ6FFaRCksgkNhnZs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=hw0duFtM1PYxIBty0zwoOcxltc8iSsjMs61rEsL+rg4LmuN3PohAMUYBO2x/1+oUEZWW2fV5TX/JFfoRVR6K1i8atGPjx+rlxCRtMvlB8nDExMNecq2gxUsBJa/FOj74RAXeeE6dG/p9WeUotKepkWulN1bNZnAIcmNH9J8fIq0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024;; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=vYnDdsRIm68Ioedb00qBOfBfLCr0qkQjQQh/Je0ulmwXlTE9kDd1KxFJNBobnz1mF68oDluwrSqRUe+HntOqFu2Q4DPKEkLjPzusuy8VrubPxhQm9xUkrgrnIuCPhLYekXZ5MHH13OCzCsHDFVw9kk/vFNGQ7dntZLX+V/BIZ2s=;
X-YMail-OSG: qayhNhAVM1l3yt7svfy603962BMJnxta75w_nmeyj.TaOIy f_.0HwunLEfrsU_isQQbJDVMqeSZLlJ7zwNSEymccVyZXaBiRAvH2Ulp0MSt WBTJM4N311tuoNwFw2ydPm6sjYbybGS7MoMN4yP_AcBGFZcO70M14644M9L4 aVYfhvsGGB_JUaX3nc9FvZnXETlws60z1zwWvavZDqJRx2Ym1.hpg5SWlCb8 aYgo4YZO7hEHJhELGFjUKgS9SuLRFHJsUhQ0MycE3tO4iDGbxWIOMkhrQWsq F_rHDbdDceb2RofS9t2eNiJNbrLf6stlmz7Gw6fzjt9pxuK25kz33OM0bPYN nzmEgX914peRkdB8ZHk5ht6BRbZNKb00SyqPqvUvdpTH3SXFR_iW.8rRQ1zb jmvH6ygBCc5RbSUZcq0CQY8Qut46hJaOPR4YrjvQX6Q7orwfyvqMeAWXEA.Y Mj6adgutiShn.rixjCUeZO9LIG7_VUNR7mwA3R6AnwFqlpDbReSORyngXBbD CrKik9pOtsfkKYXgNUGLcgzR2B5dRsr3Hrld3ZM_3YH_hqwDQCGqwAoN6zV4 uK74zBVhGnUA1lbROwrmpu7HPTz_tAGzHidxs1w–
Received: from [] by via HTTP; Wed, 28 Nov 2012 03:53:45 PST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/
Message-ID: <>
Date: Wed, 28 Nov 2012 03:53:45 -0800 (PST)
From: “Mr Dominic Fred,” <>
Subject: Your Kind Attention
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1024699347-1195129299-1354103625=:19975″
Content-Length: 4133

Mr Dominic Fred – – –

Both of the scammers IP address are  black listed on DNSBL – and other websites including PSBL, Project Honey Pot, etc.

The IP address was banned on An online dating website. The IP was blocked due to reports of scam activity.

Other email-addresses used by scammers under the same IP address – – TedGorman” <> – – – – – –

Georgette Housman <> – UNITED NATIONS COMPENSATION UNIT,” web.rew.1.2.6 – “Mr.Steve Gulliver” < – Mr Harrison Mark <> – Helen <> – YAHOO & FACEBOOK AWARDS CENTER <farmpetcotroloffic Subject: WINNING NOTIFICATION –  William Nii Offori <> – United Nations <> –  First Commercial Bank London <firstcommercialbankk Subject: PAYMENT APPROVED – Barclays Bank Plc <> Subject: LOAN/BG/SBLC/MTN/LC/POF/PPP/AGENT –  “Agent James Duru”<> – Gain Trust Finance < –


Tags: , , , , , , , , , , , , , ,

Nigerian Business Scam – “Wendy”

Business Proposal –  419 Scam – Nigerian Scammer

EMAIL: Hi there is a business opporunity you really want to handle with me please do kinldy get back to me for more info Regards

Return-Path: <>
Received-SPF: pass (domain of designates as permitted sender)
X-YMailISG: GG3IbX0WLDtfaBoi15UngS974JOEoxQDbkZU_Z6HSs5EZIo6 P3H4A6t.cRc3jegYH.DN5J347ZwqFkdurbrBsQMjIrTSGnk40emzudzBF8Wd CYw7AT6tHwoR4yfUZOL9hsRiD1GDwCI1TDsNcU1Y1jfId2eXQLYx21FDqeju zABeus04bEg76pb..BmXeEqJQBCdYklZe7afUtt9V_YyWLpNgDr3IFtB21_c NpVqYmsejLMtlT8JblGx374ZWzs6KxuwiNvzBvVauz3H7kIrQ_SsuqU30Z1_ V20j7pTUrH_78upMaWtTpv2MkAlYOjArI3MbdubRcX8aB_dgxWV.MMukdNUu ta0gV0gPbvWSvNgCxNQMHA5toX04WEUDPxe0Khz_8jZcv_Nk9a6gsOf5SagZ NkuAzxWTh_2fTXyVjz2VyOwoWQgYupKq57NajhlK6taHGhqC1uBoekuWf14c mZeN.MsiSp1v_9LZTxkx3duB.JqnRN8R1I3ErQSoMP1Gxozbi_VlKDqo3vV7 aYA5DoDX7s47ifM6L06dzJBtrfTSm2IYhoy8aoPiN_hYDEoVO3QjuMM2Hmvh o7gCWlu_zWgENYMZsiPpX1arii4KWC3ODoe2VIqSPTZICaiUWH9MtG24sgzT 6g_Zqwv5XfI78IHg9rd2S5vfqfNSKujnvDVXoKGJn6jx_SW.dQt6t5iu4Qeq 6N7nofeY9GDovHRnqi7gBuFg_XfTV3o7tSxgJwBpz9ZK6KdHG6weUDIBlDE_ iahcLkGsQyg_.hRIaVk52o4vGReZUfyunFpJfHcLEGhxmZwbOyAzAr76Qe4l z2YTA7b7of5q8zJR3qbMGyBdvgaH5UinFpcv2DVQmL49a27xT4zQdlHI2L9g n7ppjZ7xYz6_jzkN8hl.RYMM9ekyHcf7kBAB5tT4x4_QzApFM84I2Z7ElCyV PwGRlqYgZLpKZ2d4TZdCIZXKCoOJ0I3serlQkB21T6l.DLArnni4wdWJl7DL UyUtbMubnWNqLkSkQ6GwS7rzj84NfkuuO1faY2V2khBwno6sXh_KKn257Jxb cKX5_3XY8HnsDuGpNJOkJ.4iZlDM0HuD1nbzwrPkqjcM4aUILJWgLeU7T8nn zAg4fyjA4f4hTwKq9PuboBL.9u6BxjvxKqU8NuBmvRiFzVM.l3.Sn4kcnYTi u2ErJthQBdh6SEOANpabSozTHBtaMWHiWWN3gpVxq_aP4KhcT64srmfYH6qD riuDlOQ5y7m3w8AnKYdCSVp4p5kfITvgmFrZDms_KMyE4GJTNpxJTivIwl5u 0LmzopmkPRtgEyGTlpLP8.paWX3JMjnVRLyBgtA.bVJKKGHdTZDdDK2oqFWF S3F01BquTAMsnAy1IEYGbChppgMCb6suUn8d.NMXc8OO7ISuzo1_pKmlgXZt jhAzTfvYjxkfsswzZhm_18112vWF1FKXdQqZAgpPAsZt3kQYJQyej2mRNQao M9YzlsebIwh87acAp9aS6q8eMkw7PpiTZMYsL2EumTcG_7b42mGUUCPS9IY2 C8bKGv5MPyomwMIyOO0-
X-Originating-IP: []
Authentication-Results:; domainkeys=neutral (no sig);; dkim=neutral (no sig)
Received: from (EHLO ( by with SMTP; Wed, 28 Nov 2012 00:40:44 -0800
Received: from [] ( []) (authenticated bits=0) by (8.13.8/8.13.8) with ESMTP id qAS8OAJw017124 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 28 Nov 2012 03:31:35 -0500
Message-Id: <>
Content-Type: text/plain; charset=”iso-8859-1″
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Great Oppportunity,
To: Recipients <>
“Mrs. Wendy” <>
Date: Wed, 28 Nov 2012 08:30:48 -0800
X-DCC–Metrics:; whitelist
X-MailScanner-Information: Please contact the ISP for more information
X-UmaineSystem-MailScanner-ID: qAS8OAJw017124
X-MailScanner: spam detected
X-UmaineSystem-MailScanner-Watermark: 1354696308.24131@1kLhTD2+2mKYNx+1chJ8iQ
Content-Length: 130
From: Mrs. Wendy – – –; whitelist – –



Project Honey Pot has detected behavior from the IP address consistent with that of a mail server and dictionary attacker. Below we’ve reported some other data associated with this IP. This interrelated data helps map spammers’ networks and aids in law enforcement efforts.

Example Messages Sent From
From: “Louis” <>
Subject: {SPAM?} =?GB2312?B?M0QvMkQgQW5pbWF0aW9uIHNlcnZpY2V 
From: “Louis” <>
Subject: {SPAM?} =?GB2312?B?M0QvMkQgQW5pbWF0aW9uIHNlcnZpY2V 
From: “Rick” <>
Subject: {SPAM?} =?GB2312?B?RGlnaXRhbCBQaG90byBFZGl0aW5nIFN 
From: “Rick” <>
Subject: {SPAM?} =?GB2312?B?RGlnaXRhbCBQaG90byBFZGl0aW5nIFN 
From: “Louis” <>
Subject: {SPAM?} =?GB2312?B?QW5pbWF0ZWQgTW92aWUvVFYgU2VyaWV 
From: Becky Fortunato <>
Subject: viimeinen ilmoitus 
From: “Mr.Manabu” <>
Subject: Legal Matter, 
From: “Mr Manabu” <>
Subject: Legal matter, 
Associated Harvesters | HS | HS | HS | H | HS | HS | HS | HS | HS | HS | HS | H | H | H | H | H | H | H | H | H | HS | HR | H

Tags: , , , , , , , , , , , , , ,


Business Partner – Business Proposal – Nigerian 419 SCAM

EMAIL: FROM: MUKHTAR M HUSSAIN EMAIL: ATTN: MANAGING DIRECTOR REFERENCE: BUSINESS RELATIONSHIP Dear Sir, My name is Mukhtar Hussain, I am one of the Board of Director of the NBAD Private Bank (Suisse) SA in Geneva Branch Switzerland. I am soliciting for your assistance to secure my contract payment for me and I am ready to give you 20% and 80% for me. I realize this money from Contract that is awarded for me with a ghost company name in our Bank and it is against the banking policy to award a contract to a serving Director like me and the contract have been executed and supplied by me to Switzerland and due to this bank policy, the bank cannot pay this contract money into my personal account and it has been approved for immediate payment once we supply/tender the invoice of USD8,370,000.00 on your name and bank account. There are two (2) options to conclude this transaction and these are: (a). If you can come to our Office in Geneva Switzerland in person to sign the release ofthe Fund at the our Bank in UAE and you can open an account with us or in any private bank in UAE where you can transfer the Fund and you can make wire transfer to your account in your country install mentally. (b) You can provide your Bank Account in your Country and we tender invoice of claim With our Bank into your account and wire transfer can now be make from our bank into your account in your Country. But before we commence on the above, there is going to be an original signed agreement Between both of us and I will send you copies for study while I send the original copy by courier for you to sign and return back to me and after receiving, we proceed to execute the transaction. This transaction is 100% risk free and you can contact me at my private/direct number: +971 4 6977400 Email: for any question you might wish to ask and I will await your reply, Kindly keep the above confidential as I don’t want my reputation dented even if you are not interested, I will gives you more details when I hear from you. Best Regards MUKHTAR M HUSSAIN


Return-Path: <>
Received-SPF: none (domain of does not designate permitted sender hosts)
X-YMailISG: MIc.BWkWLDtjoR2jIN8zLusWmhJAvBnye.BtsoroyyiT_sU9 6N.iDmZWUBKVyA5nSLc8E8MTzhjaNHiMNxiw.FjMcAu.Ki06Pyo9LvE0uheU SyXpw0CFe0lkrktjh1OmZrom0SWEV5F8MQgZ346hCJ2jwSSeAYtU8ehvJo2H V5RMr0Ax22nqgD8PPfN1URRYLjpGzKv.0Po0jpGVCyA4G05wJltNvQRnTb.W gOP7LIMDq0tOw7q51rtiD26TvM7tK7mp0zRU0oFULlKsnOi5F0ahd88tasCd vghtkWR6FlPon9Y2mpbj06.m3XbLgeSsVsphi1jICGwJHSuZHEa3ZJwAxCNf T3YUbtfUj0_3O6TdhQ7iJ055xfgy0W1eT8O2alKFmpV.GcVVLw6.L2i2yxVi X9suRogP2hspQjSjtl0tqkurRa3fhzyo.mY2sP6KvC1GUqjUzOSxLyzimvF8 XddlUiqxOKtHPC.K_JLsJ65wtPsHMTeAulvevbAByORnfnF5jErnuYMK7FGd PY_kRnowRzLBSaSuOTYraLOV7WvK71.UYaJACEmUcOOO6hxQHhPPRWoMdKdm 3oRWjrKBcYciuIakVwcQSmU7EIKOEbmhc1PyccFGx_OQ2Mtaxhmuizlkr0AQ 8XKIraXZHhn1lLeblJ6Vb3CUoO5xUX6SNfrBmVcY2Lj3i0mBFoDvaeFosk23 RB_YkMD3cabUE2mQLDyMMYJ0JVbwv.CDpvdzs8USpteieXYgQV9QLQmCBG8W IV0aQUOpY0MhsAw9TXmVhGkkxP1kSNvUos9OnPbMR5H9B3Hu9BWtm7ALZCza u1hJ8VjblKCf8ApSq9.6zPq8tiptyohL0h727pFSp6JWuWLZ40H0kSSSLbTH _K26Xm5QoKCEcNHrYRyMcrYnncFCN.QwBgRlIZbbzqHlFyOT7j.P4ELBEdvu XEm6HFBpZNIz.hV4w7jVFbH2IMNjLI7aLp3GddxYg9pJX9tcsCV2u_jFozYm vG548W5.xqE1c0BAUVxvqDAZt120JaA6pwe1OLwK9tdbEVjWHfklqJ5v6yy. r3tmeVyDTvgeawtsVZ_mSJBgizRMtYCfuPjR3nCzS52A4sQB08NHfA45edWf PtWknUNTi.tJFe8ryYzqBbQ-
X-Originating-IP: []
Authentication-Results:; domainkeys=neutral (no sig);; dkim=neutral (no sig)
Received: from (HELO ( by with SMTP; Sat, 24 Nov 2012 05:57:41 -0800
Received: (qmail 24620 invoked from network); 24 Nov 2012 13:31:00 -0000
Received: from unknown (HELO ( by with SMTP; 24 Nov 2012 13:31:00 -0000
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
Date: Sun, 24 Nov 2012 13:31:00 -0000
Customer-Id: 51427
Abuse: (not a real abuse reporting address, it’s a spam/fake email-address)
Content-Length: 2332
It is obvious that this notification will come to you as a surprise but
please find time to read it carefully as we congratulate you over your
success in the following official publication of results of the E-mail
electronic online Sweepstakes organized by Microsoft Corporation,in
conjunction with the foundation for the promotion of software
products,(F.P.S.) held on the 20th Febuary 2010,in United kingdom to  mark
the  new year celebration ,You were selected for the prize of �480,000.00
(Four Hundred And Eighty Thousand Great British Pounds) In the fifth
category .
Contact Claims processing Officer  With Below Information:


Soon As The Above Information  is Received Through  E-mail: You Will Be
Duly Informed.

return-path:     <>
envelope-to:     Submissions@HUN1P0T
delivery-date:     Sun, 21 Feb 2010 08:26:22 -0800
      from [] ( fire.HUN1P0T with smtp (Exim 4.69)(envelope-from <>)id 1NjEdR-0004CL-A2for Submissions@HUN1P0T; Sun, 21 Feb 2010 08:26:22 -0800
      (qmail 31810 invoked from network); 21 Feb 2010 16:26:19 -0000
      from unknown (HELO ( by with SMTP; 21 Feb 2010 16:26:19 -0000
to:     Submissions@HUN1P0T
subject:     Notification!!!
mime-version:     1.0
content-type:     text/plain
content-transfer-encoding:     8bit
date:     Mon, 21 Feb 2010 16:26:19 -0000
customer-id:     50494

The email above is a scam email from the same scammer with the same IP and ”abuse” email. For more information on this email please go to Scamdex


Leave a comment

Posted by on 11/28/2012 in Other


Tags: , , , , , , , , , , , , , , , , , , ,




Bonjour , 

Je vous contacte de la sorte car je souhaite communiquer avec le monde et fais une chose que je devrais peut être pas dû. Je souffre d’une maladie très grave que je n’arrive presque pas à trouver le sommeil. J’envisage de vous mettre en possession de mes biens.J’avais travaillé dans le secteur pétrolier au Koweït. Ensuite j’avais décidé de mettre en place plusieurs centres. J’ai une mallette remplir et cerlé,soit 2.500.000 d’Euros qui sont jusqu’à ce jour dans une banque étrangère en AFRIQUE . Je sais qu’on se connait pas, mais ce que je demande à DIEU c’est de rendre votre cœur saint afin de réaliser mes projets avec ce don c’est à dire, construire des centres d’aide sociale. Je veux que vous rentriez en contacte avec mon notaire puisque Je l’ai acquise toute ma vie et la seule chose que je pourrai faire de bien sur cette terre avant de m’en aller c’est de savoir que ce don servira à rendre heureux la personne a qui je le ferai. En effet je suis gravement malade et je suis à l’approche de ma mort c’est ce que mon docteur me la confirmer ce qui me laisse un peu perplexe, pour avoir vous contacter a été une grande réflexion. Malheureusement nous n’avons pas eu la chance d’avoir des enfants mon marie et moi. Après Cinq années de vie commune, mon époux est mort dans un accident. Si Vous êtes d’accord j’attends alors votre réponse à ma lettre. Veuillez prier pour moi car je suis dans une situation critique.


Return-Path:   <>
Received-SPF:   pass (domain of designates as permitted sender)
X-YMailISG:   bwx8weMWLDsQQjWKBr4l3K0Yd4C43qxN3b20kfCMcGiIqGuk 0gY3_xmQAxfrzOtgq5RR_ZHnJrfYGkXVam1pZ.qmn41GVoggO7hqYAgq82.I qgcjt6DkUaIlzZXQ7rFc4AWCdFB2R69fuLNVrBCdy3ud1WIJq477k_4nj1K7 MKn2.p2l5Y7BD7qRoGZGYBnwYq1kWDZeCLoh8pCoFpZyjll58BFUG5GQYtF5 OZd4KPWPkbhvqU_7c.rUINpXGzadiVuyVBYKGofNZjrbT24_yWJuRPOu2V6Y U6uPYiidl0E5biW21rQViDH1e1u_cCqrZ1.HKIb6b2HWV3yfqdGznzFRGWso s_hmrGBS.VtxYRPxzLJHg8Z_gzdJ4jsWAoOirJf46dxz38t2mGlyJUZf9t0w DCvbGIdrK6UTLqR8VIwIRn4bQyuIMxN7DJXaRHVlHaK7_1friBmBmc.rh9xo AxsbPaT5GGS3bUPa97zmEmxt01o.DEKms.qpi3lUQ_uoAZhvitVcXIzm3VFc 3szSbmehvZ._y_R59TV2mXwtu9t6CHTYlsNsxTGqrs2NRMP8eBB343DwmxMh Mt.JL8jXgsgjaI0HMHQ3E3vLaQdYW0aFIGO4u02o8IdM5YzoAl9itSHMUkmL AruASq.PsnK9JEZOTrfcxicBHE3N1V9xqfsObfl73czGxL_OXUZ4rYZ9lQAU osqZFKjGj6SkGUjBPfo87SqrZ5jhRYxogex3D922HcqO.RJMN0ONh_MULrPh iyPk.asB35xgmxXiXsmvqvMLaWdO2JBT6sxeL0QeGO1xwnyFTHyFL5xhUjxC SGCj_MGa0TReEEgWjR__N_tOhOH_iWP2hzKHCIJX5ZdyKjV1zkqWd_.PLiRs I.Kx4zw1e9dLwholt.bUglOjupabBLEvNHt0tN6F.mptefUFMeqi0wZ1i.Dw hDU.FcQQjfhK1mB6KQYNr8TfCZbIMbEjga_QSIouuAaHuEYGzPdbSjAtyfnt hc7ybPX7c7XMgOPK4nhPBDnzke9RP9E2aaVZ5A4tcBt3GgkwKShjeuDOTF_h JwUlOE3GBER5r0we9ikY8uGQAmvu17w2t_f7UrnZyKzzH6qRm_uRWy3R15J3 VMGhQkTXyylzEWXLG586Z8tlYbFSG7Saq1nC8VDb5U3kAy_ntU6wZfj694t5 DeSrL21XdJiP55VWzyc7OF3wBC92kfaQspQRt9XQ.MHBKTfmlqgYxIfwcZHn MstkNPPAsjivDR9iBbzANn.lRnu1NBVlHK87P5Frr5XXkXLXaSxSBWUnIfM5 E7j_84Cjx9RGRenRcKZCC70fBwXZuzSbyw6Wu6cZYhkA6A.Q2k.0rJa.
X-Originating-IP:   []
Authentication-Results: from=unknown; domainkeys=neutral (unknown); from=unknown; dkim=neutral (unknown)
Received:   from (EHLO ( by with SMTP; Tue, 27 Nov 2012 11:25:30 -0800
Received:   from localhost (localhost []) by (Postfix) with ESMTP id C7B96803876; Tue, 27 Nov 2012 15:17:21 +0300 (EAT)
X-Virus-Scanned:   Debian amavisd-new at
Received:   from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id v5mcG8rOEEAS; Tue, 27 Nov 2012 15:17:21 +0300 (EAT)
Received:   from ( []) by (Postfix) with ESMTP id A5EB8803871; Tue, 27 Nov 2012 15:17:15 +0300 (EAT)
Received:   from ( []) by (Postfix) with ESMTP id A6A521D99093; Tue, 27 Nov 2012 15:19:01 +0300 (EAT)
Date:   Tue, 27 Nov 2012 15:18:55 +0300 (EAT)
Reply-To:   “” <>
Message-ID:   <>
Subject:   Bonjour ,
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”—-=_Part_635398_1213173424.1354018735148″
X-Originating-IP:   []
X-Mailer:   Zimbra 7.2.0_GA_2669 (ZimbraWebClient – GC16 (Win)/7.2.0_GA_2669)
To:   undisclosed-recipients:;
X-SpamTest-Group-ID:   00000000
X-SpamTest-Info:   Profiles 24807 [Sep 11 2011]
X-SpamTest-Info:   {TO: undisclosed}
X-SpamTest-Method:   none
X-SpamTest-Rate:   20
X-SpamTest-Status:   detected
X-SpamTest-Status-Extended:   detected
X-SpamTest-Version:   SMTP-Filter Version 3.0.0 [0284], KAS30/Release
Content-Length:   4529


Yolaine Provot ( Bonjour,

Je suis une veuve d’origine française née le 24 Février 1946 à CHENOVE (21) pour la raison de mon état de santé qui ne cesse pas de se dégradé de jour en jour. Je vous écris parce que je recherche une personne à qui faire confiance pour la bonne réalisation de mon projet de donation. Je veux vraiment donner de moi ma fortune d’argent actuellement disponible sous section de gardiennage auprès d’une Banque en République du BÉNIN B.O.A . Mon état de santé si vraiment critique ne me permet plus de sortir de l’hôpital où cette ma maladie me confine, je souffre de CANCER du cerveau qui se traite depuis plus de 1 An pour aujourd’hui. Je ne comprends plus rien de ma vie, c’est des raisons qui me poussent à vous contacter et de savoir si je peux bien sûr vous faire confiance et vous faire part de cette donation. Si oui, écrivez moi directement à mon adresse e_mail que voici (  )

Veuillez beaucoup m’excuser quant à ma façon de prendre ce contact avec vous. Je m’en vais bien vous faire savoir que je parle couramment le français.
Je suis Yolaine Provot, née le 24 Février 1946 à CHENOVE (21).

Je souhaite vous lire très bientôt,

Yolaine Provot, (  ) Pour avoir plus d’info sur mon etat de santé  contacté moi (+44 703 5944 846 )

(sender IP is
Received: from ([]) 
Received: from localhost (localhost [])
 by (Postfix) with ESMTP id 6DB97800E6B;
 Mon, 29 Oct 2012 15:13:27 +0300 (EAT)
X-Virus-Scanned: Debian amavisd-new at
Received: from ([])
 by localhost ( []) (amavisd-new, port 10024)
 with ESMTP id nkYxWdxBvbJa; Mon, 29 Oct 2012 15:13:27 +0300 (EAT)
Received: from ( [])
 by (Postfix) with ESMTP id E0910800E7B;
 Mon, 29 Oct 2012 15:10:36 +0300 (EAT)
Received: from ( [])
 by (Postfix) with ESMTP id 606B21D98E16;
 Mon, 29 Oct 2012 15:00:36 +0300 (EAT)
Date: Mon, 29 Oct 2012 15:10:33 +0300 (EAT)
From: Yolaine Provot <>
Reply-To: Yolaine Provot <> 

Email Scam Scammers Scamming

MARIE <> — “” <> << TONY OSITA << << << << – NIGERIA

TONY OSITA – Nigerian 419 (same IP)

X-Apparently-To: via – Scam Warners – > << Received: from [] by via HTTP; Tue, 13 Nov 2012 14:20:03 GMT 
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/ — Bonjour

The above scammers are also attempting to fraud others in an Inheritance Scam ( for more details on this scammer, please click: Mr. Mark Brown

1 Comment

Posted by on 11/28/2012 in Inheritance Scam, Other


Tags: , , , , , , , , , , , , , , , , , , , , , ,

%d bloggers like this: