RSS

Monthly Archives: November 2012

“Michael Brewer”

SUSPICIOUS EMAIL – Sending unknown links in emails – I don’t trust it and i’d advise you not to click on any unknown links sent by unidentified online users (or bots) (FYI, I havn’t had a Craigslist ad up in months so any emails i’m receiving by people claiming to be from Craigslist are liars.)

Hello, my name is Michael.  I am a US Marine veteran, and I was just viewing your ad on craigslist.
I would like to show you something that I believe can help you.

I didn’t believe it when my friend approached me.  
After seeing his results I decided to follow his link.
My life has changed because of it.
But don’t take my word for it. Visit my link and see for yourself.

Best Regards,
Michael Brewer
612-5597501
Here’s the link.

Link was here

I didn’t click on the link and didn’t want to post it and have someone else accidentally click it. The Link said http://networthgain(dot)com and the URL was networthgain(dot)com with no ‘http’

 

HEADER:

Return-Path: <msbrewer@gmail.com>
X-YahooFilteredBulk: 67.222.50.208
Received-SPF: neutral (67.222.50.208 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: S6Vh9hcWLDubgDGy_xQOlA8KEUP57lQplXkxzdnkuUs5UTL8 IHAmaELNCB5lqzGFOk5uiGRU.rDHF4wjb849pP2PZroMduwL2hY8.ksxIG04 IjjzxTS5BJRc6bn04pfF6hvl8OavbAl3NpZcoSSUColwAiiO1fhMWBNOUc_N grTMJdWNiFrmvDGExWJaTIIlpapw82RvCqcWkE.nMMM7KX1OIQLFiEPIfL9u U0jkH5hFS52wiy7TTFfnfFGPMWMQWJXkRYUs8kohLVKvDLtsk4fg5ZwdjBko D4ZclazthTgrDeMj6ps1EqHkQVQesZk9rBGKs4wrK.zQuJj52qe26VENjFjl PZjE2RcBAS.g_dOPyyBcOtpKBawWyHz08_X42qtLaCBlcDmt2XBb7iyCf3yE XYhV1SNVLWAG1BwoAQ_ufTQOrotoQEtwbMcPPlKU2.LXyvZMCDdt9exzI7au LaedSKChCnq0bl5V1JVfM8Ub2K1Ugla2_9YgIK4wveaD7V1uKe1sGBCfGaa5 alRTJJ2zl4uwynAFwDmLEWro1SOqIgchab.FaYsfGJCU8VPfnrFv.VzLSfKl 5uEKniX.4dBvbP4SeqH84n5AzGze8hjt_KiNu1J4hp5J_Cy_48ValPe0Dk9a G4LRVcHWvoKEIv4BPWO5OoHras6XYBAuDUuZDf9pffMJlLzkHoHDyoD6V8ef JF70e8WwFK73wvj9cqOHFKvjMlzeQjUuJ6w34nfVfo5dhNNPPr6GTEA5hkaR 3k3VvU67uh2ecUQytwpal02AaqEPS2ksVwA_zwByf286er2U7Vva1CZztWog .1eecc2V6fPlTTCuNn0XdGXRaFuUUIqx81_qXKcwLEl9em_a4cc2T9yzKVtL PqMDRBlyLXbH_WAwRl5fcjr9ifrbyGtd.IorpAF7NSl4wxwaUHlWpxwo44Fs ZoSh.Sgq69SxyDrwW2YrBff5dZWNCGfdMKJP8naMy46AhWb07SAlFFxj6im. T_1V6EdBnONACh36oCI8Efa99ahNQX8bbJK3pHygTBGqb5LBUdA2bkvt6G0p mursgi3SHF053GAxCeiy8srOdJ5n8keAADLFNNpwCcuNmvWvaYXMRmw3MFow cbSbl.tUYo3.cWhOgQVTUBUq0O3.keasOT9HNv5.4zfVcm7HNe5g4bUhlUMm VNxc0U_pF4LspgcPAWVMMyHCBSRVJXZ0sHMyxAAj0FTGXBp3TKoha4ENrFe2 5wgQk.8VMBQxL83aMQBCEejwHcBwVz8QQDROc9RHs_NmpZgDQ0vSSDzttOX. fvFTVavHkYCbvPUbkVpd.j49mA–
X-Originating-IP: [67.222.50.208]
Authentication-Results: mta1173.mail.mud.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO outbound-ss-1353.hostmonster.com) (67.222.50.208) by mta1173.mail.mud.yahoo.com with SMTP; Fri, 12 Oct 2012 01:20:40 -0700
Received: (qmail 28821 invoked by uid 0); 12 Oct 2012 08:20:40 -0000
Received: from unknown (HELO box587.bluehost.com) (66.147.242.187) by soproxy1.bluehost.com with SMTP; 12 Oct 2012 08:20:40 -0000
Received: from [66.41.126.218] (port=63105 helo=Kokunai-PC) by box587.bluehost.com with esmtpa (Exim 4.76) (envelope-from <msbrewer@gmail.com>) id 1TMaU3-0001Wc-VB for deleted@yahoo.com  Fri, 12 Oct 2012 02:20:40 -0600
Message-ID: <024463a9-41194-06891390529514@kokunai-pc>
Reply-To: “Michael Brewer” <msbrewer@gmail.com>
From:
“Michael Brewer” <msbrewer@gmail.com>
To: deleted@yahoo.com
Subject: Craigslist Reply…
Date: Fri, 12 Oct 2012 03:20:14 -0500
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-Identified-User: {2654:box587.bluehost.com:exceptk3:exceptionalismofamerica.com} {sentby:smtp auth 66.41.126.218 authed with exceptk3}

ORIGINATING-IP – 67.222.50.208 Host: outbound-ss-1353.hostmonster.com

IP – 66.147.242.187 Host: box587.bluehost.com

IP – 66.41.126.218 Host: c-66-41-126-218.hsd1.mn.comcast.net

Michael Brewer — msbrewer@gmail.com —

 

Tags: , , , , , , , , , ,

“UNITED NATIONS COMPENSATION AWARD.”

WARNING: 419 Scammer – Re-compensation Scam

For some reason, I continue to get get these types of scams. I’ve never been scammed in my life but I must of been mistaken for some other unfortunate victim.

EMAIL: UNITED NATIONS COMPENSATION AWARD.
Under the United Nations scam victims rehabilitation scheme, You are listed and
approved to receive payment of $1.2 million as one of the scammed victims.
This is to Inform you that ATM Card worth of $1.2 million has been accredited to your favor Has been approved in your name in the United Nation National Sweeptakes Compensation Award 2012.
Send this information to the agent:

1. Your full name:.
2. Your Residential Address:.
3. Age:.
4. Cell Phone.
5. Occupation:.

Best Regard.
Mr. David Mixon

HEADER:

Return-Path: <un@gmx.com>
X-YahooFilteredBulk: 62.179.121.33
Received-SPF: fail (domain of gmx.com does not designate 62.179.121.33 as permitted sender)
X-YMailISG: ZRMohCgWLDuXlYwGR85er8xxNYjPQxwFe7BYQnDByx9SicDE grzQ0eM34XjG95w6LCcNUuop4ysJg8UAq4HRpolmJqb4xwSrNs7x4njtbbG0 pUWbTrPHZaSQ0hATIk6OiZ3TpThu57cfQQnGYlUpOoXPHML4NL6QfkajrVUP lXxJtK.hnbtiCSEISgrejngeJy8UhTyBVIFAa0byv_3TBvMZLVS6gcQhvvvm 9mIN7eo5pmlj4MDiLkPH5BFJgQfyDhzAUfZbqIl0Ata3TGpIYD1QAEnOnCzY JbTo6R3_Lda5VRJpa1nPas_bcRIdn6oBJAV0TTTN6zwr4Wxr4fBS_4FGzYNb kBIodwzyUx6gdGXkI8ljCrYQ4CfZoOJdwHuB9Waf5HbGheCog0CNhD1xMpmL 038Q.zC.jl.cFyE8YXW4veCSmk7IBfzJM93nVzWt93iF4fPE3XUacheqAK0z NYQ6uDoTYyeXhxgCVhtLR4VPau64SlxJISxLn8YQVXnEi1nnkFG1NpYR.vvZ RzLw1cdM5fycyQQUrSXhsLpdLJPg7xKtr9ZtvnWwYzFbFnz8_DgGFXjr_NQx O67gxxZgB2.Dvq7comAemP4yzmuKNVJiev4OJqfR7clERVwG19pBXWalm7l5 FFuQnapbzpyNqIufVOeMzcuSuDiPxzANRvlDCVV5UoCGiTNwGP0oTCq1JGbV U7tvnesmJ8GzmddfG3pgybKCOYqT6qhpjnS7UwtoVRfI7GPIN3r8o1CniXi6 Ac7AO3PIa_wAcFQQ0u6_.hxLRDs6KUKQesQOjMBABolhyooaand.PvA3hM77 GBcVKcJt4coJUo4KBmzK6fkbEviYJZN2y3bkWx0wPp2NDQX9DyPIG.6PCOBA tfw5D5wpV8xsJXXKP.gfkUkyCPVxRv0pJQ_lJtlnqbEVwCUFkOZd5YwHbGhN q5hFjrvUkYJ8OD7txRQsErxDBqlAl2tmwzfhTA79ECnI7.nyAzbfDW.XM0rw fGnxppdhFlx4AJ.XTXdSCMiGqtjJ02OaCjCse0HqCIfZTr6O0GfrQiQ3Od6h QexhHvqaBc7IAnLl2xwCuRNcxi.0HZKar356HEhc9Q2h9ANWtr4MeGYGIWqg Wl0Vqv1wGUVNQhe208h24Ns1Zo.LiHOamSjXk_.3gSqwNyKtzZf4N.MsoU7N ZVnyNqRmX9dD1.BPWmp47as1b022cJnpd1rtEnfaZM0u2zt00Lm.K5yENyVQ tV_QDLm715OHWHAJLhnwDoDrCRRLWrVySOTqhm5JzU36_LrlzPxn5rqF_8pK gsPck8gijSmnPfxe4BoEU0dF25HlFua_t3PiXIKaHa6SqedeHjJj.KqLrTUF vQWd_JIEqhVK0uqEbleBU2qz42gBHcgRNrfpRa6WIp7sRx6oL._E.Gy8k8Dk UBuQ_HoNI7Wl2MnMBH_jv8tX4eG1gLJAYEab5RIk7RDbWra0OTP.lsamxTcC _gmS6hJgeYHl4qWxiG4.vc2UOFI8QGdZbBAgyDcT24hYH9ZBbpk6kStB2qvR irjBjDT5dWBxHAMTUTO..9x6xoHZjPsidEhSZp7FdYrs0Sx9..PczXd8EMog MLVgOfxIUElEdRlYXC3sbavu1LZn0pCCzhuy
X-Originating-IP: [62.179.121.33]
Authentication-Results: mta1405.mail.mud.yahoo.com from=gmx.com; domainkeys=neutral (no sig); from=gmx.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO fep13.mx.upcmail.net) (62.179.121.33) by mta1405.mail.mud.yahoo.com with SMTP; Sat, 13 Oct 2012 03:51:33 -0700
Received: from edge04.upcmail.net ([192.168.13.239]) by viefep13-int.chello.at (InterMail vM.8.01.05.05 201-2260-151-110-20120111) with ESMTP id <20121013105127.BWBF3518.viefep13-int.chello.at@edge04.upcmail.net>; Sat, 13 Oct 2012 12:51:27 +0200
Received: from User ([89.78.32.44]) by edge04.upcmail.net with edge id Aaoy1k0160x7NyZ04ap5Vm; Sat, 13 Oct 2012 12:51:27 +0200
X-SourceIP: 89.78.32.44
Reply-To: <atmcardunit@e-mail.ua>
From:
“UNITED NATIONS COMPENSATION AWARD.”<un@gmx.com>
Subject: Notification From United nations.
Date: Sat, 13 Oct 2012 18:51:25 +0800
MIME-Version: 1.0
Content-Type: text/plain; charset=”_iso-2022-jp$ESC”
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-Id: <20121013105127.BWBF3518.viefep13-int.chello.at@edge04.upcmail.net>
Content-Length: 539

 

UNITED NATIONS COMPENSATION AWARD — un@gmx.com — atmcardunit@e-mail.ua —

 
Leave a comment

Posted by on 11/30/2012 in Other

 

Tags: , , , , , , , , , , , ,

Smartphone users should be aware of malware targeting mobile phones

The IC3 has been made aware of various malware attacking Android operating systems for mobile devices. Some of the latest known versions of this type of malware are Loozfon and FinFisher. Loozfon is an information-stealing piece of malware. Criminals use different variants to lure the victims. One version is a work-at-home opportunity that promises a profitable payday just for sending out e-mail. A link within these advertisements leads to a website that is designed to push Loozfon on the user’s device. The malicious application steals contact details from the user’s address book and the infected device’s phone number.

FinFisher is a spyware capable of taking over the components of a mobile device. When installed the mobile device can be remotely controlled and monitored no matter where the Target is located. FinFisher can be easily transmitted to a smartphone when the user visits a specific web link or opens a text message masquerading as a system update.

Loozfon and FinFisher are just two examples of malware used by criminals to lure users into compromising their devices.

Safety tips to protect your mobile device:

  • When purchasing a smartphone, know the features of the device, including the default settings. Turn off features of the device not needed to minimize the attack surface of the device.
  • Depending on the type of phone, the operating system may have encryption available. This can be used to protect the user’s personal data in the case of loss or theft.
  • With the growth of the application market for mobile devices, users should look at the reviews of the developer/company who published the application.
  • Review and understand the permissions you are giving when you download applications.
  • Passcode protect your mobile device. This is the first layer of physical security to protect the contents of the device. In conjunction with the passcode, enable the screen lock feature after a few minutes of inactivity.
  • Obtain malware protection for your mobile device. Look for applications that specialize in antivirus or file integrity that helps protect your device from rogue applications and malware.
  • Be aware of applications that enable geo-location. The application will track the user’s location anywhere. This application can be used for marketing, but can also be used by malicious actors, raising concerns of assisting a possible stalker and/or burglaries.
  • Jailbreak or rooting is used to remove certain restrictions imposed by the device manufacturer or cell phone carrier. This allows the user nearly unregulated control over what programs can be installed and how the device can be used. However, this procedure often involves exploiting significant security vulnerabilities and increases the attack surface of the device. Anytime an application or service runs in “unrestricted” or “system” level within an operation system, it allows any compromise to take full control of the device.
  • Do not allow your device to connect to unknown wireless networks. These networks could be rogue access points that capture information passed between your device and a legitimate server.
  • If you decide to sell your device or trade it in, make sure you wipe the device (reset it to factory default) to avoid leaving personal data on the device.
  • Smartphones require updates to run applications and firmware. If users neglect this, it increases the risk of having their device hacked or compromised.
  • Avoid clicking on or otherwise downloading software or links from unknown sources.
  • Use the same precautions on your mobile phone as you would on your computer when using the Internet.

If you have been a victim of an Internet scam or have received an e-mail that you believe was an attempted scam, please file a complaint at www.IC3.gov.

 
Leave a comment

Posted by on 11/30/2012 in Other

 

Tags: , , ,

“John Davis Johnson”

WARNING: ATM VISA CARD FRAUD – SCAM – MONEY TRANSACTION – 419 SCAMMER

EMAIL: Nat west Bank Pl c London I35 Bishops gate Plaza London,United Kingdom Attention : Dear How are you doing please can you assist me to receive the sum of $15.5M through ATM VISA CARD,and i will compensate you with 20% of this total fund.If you are interested please let me know so that i tell you the requirement. Cheers. (1) full names:——————– (2) phone line:————————– (3) country of origin:————————— (4) age:————————————— (5) occupation:————————————- yours Sincerely:———————————————– Respectfully. John Davis Johnson Natwest Bank Plc London
 

HEADER:

Return-Path: <anonymous@server001.activetvnetworks.com>
X-YahooFilteredBulk: 68.71.33.130
Received-SPF: none (domain of server001.activetvnetworks.com does not designate permitted sender hosts)
X-YMailISG: HRWGCx0WLDsKx3ztwqMj4elWIR6MrQT98M4Rl2HJhI57TqOY 4BuwZ2tjoKmv5HnGK78C1mnqA8smOczRSChzTqkNM_ZhpRr_SodcbozXWz3l vVO9Do3AF.KqdDhR4MUeRrECde.8LBIajxgBk6IvM24Gz382sjOf2xZ_PxbQ xLWdC6zBRBUR9lG2t8Oj3FoL80pWfPf_IT06r2VCu.b5Q_GOqkyxs1cx_ovD NhDvegBnTBURCs3pUPnFzItuHxFLlsD0_GSz3EQMYzOO47ZoZ2fAiHkiR.L5 f8STVrIjPAxoM_yK.7fWQRuVR_uLCIARN.hiyGYSZoaz25B1VPpoYTa7pQLO RKBC0ME0NuDpd7Rp6MWkNv.HMuzjCRXgn1tnZw1KeN97rzj1ADAUQxjhxuVD RjJ10KQzVVuRHt07W3HatR8tpL0vYX3OyssFsuPib_6tS7shYng9sCd.LxxI JwEtVgP1ZF6Y6zPXkBpf0QGkgZsuNW03QpY86ruywgd73sb7kci9OEs05eY9 4WRH_XeEgjL9QANadmDthQqjhRqfBHGcHjS7DtTpkNltTJnyto9yeMTOahSH gTHFHQtOATmn4Fsi_rQdm_svV1QOreltllC8a8g1Q1AJXgrWze90hQknxoSe EokPentr3HPiQ4kavy5C2PtBwu85PlCLw4QQDAMSVUF36PiaJA8mVVuhxNKJ idqaN2CwNKoIh0cgSHOK8rsBYVtXHm1hzcZ20wbQt5NdOpqTOKgzQ0DTgDLP BDPTXGxzRutyboz1q7dbNXh6bIOnGv4UxuNQ2BnWH8rWRdlzhw8_SX21Jskw 7g0TBV3sR6eGHDbp_yVWA4WLzn9IPobFch0B57p9ZtzdQpSFRUVsNcjYA_NU e7IsQGDbFAY9j3NXNfDaQ6infwdO2FQrb9cieRO96UUezGKj6qjcxfOhRxRC HtHhKlnGnGPH9De67NHdlOJNPt7pm9EBsa5CU0U2749iJu0bVS5j.jqz2EoG l9ACo8YFFUqI.EyqJV9wkczwLC3Tu1yqHfqOXO1T_m8I42IV4NhEVZ98lz2y vjqRS4zLJbmULoukyQbu7mS9bygLqudlhY_cRoer4xFXYd90pqklnxFQZZGB AHt4e5blMeDtX_BtglYv2rrdqzMTH93nnd3gXY.wb5V6BeL7L6n3AefhPLQ6 VsLqPr_Eju9D4IH5KqlrvkkZgPs_vujPsme_ivulVXKCZIXIQCcz_1nRlC6c vDDajg–
X-Originating-IP: [68.71.33.130]
Authentication-Results: mta1399.mail.mud.yahoo.com from=yahoo.co.jp; domainkeys=neutral (no sig); from=yahoo.co.jp; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO server001.activetvnetworks.com) (68.71.33.130) by mta1399.mail.mud.yahoo.com with SMTP; Wed, 28 Nov 2012 17:35:14 -0800
Received: (qmail 25028 invoked by uid 48); 27 Nov 2012 11:05:27 -0500
Date: 27 Nov 2012 11:05:27 -0500
Message-ID: <20121127160527.25026.qmail@server001.activetvnetworks.com>
To: deleted@yahoo.com*
Subject: Attention: Beneficiary $15.5M through ATM VISA CARD From Natwest Bank Plc London
From:
John Davis Johnson <johndavidnatwestbankplc222@yahoo.co.jp>
MIME-Version: 1.0
Content-Type: text/html
Content-Length: 681

Below – same scammer, different scAM

My Dearest, I am away on holiday and for investment purposes in Brazil, I want to thank you for your effort in assisting my community on the crude oil spillage issue, I am sending you $1.2 million dollars for your efforts. So feel free to contact my secretary Mr. kingsley Akpan whom will send you an Citi bank international certified draft, so feel free to contact him for your money. Best regards, HRH. Dr Innocent Masi

HRH.Dr Innocent Masi hrh.masi@yahoo.com

Received: by 10.58.69.116 with SMTP id d20csp232572veu;
Sat, 10 Nov 2012 08:12:53 -0800 (PST)
Received: by 10.220.210.193 with SMTP id gl1mr15606586vcb.58.1352563972178;
Sat, 10 Nov 2012 08:12:52 -0800 (PST)
Return-Path: <anonymous@server001.activetvnetworks.com>
Received: from server001.activetvnetworks.com ([68.71.33.130])
by mx.google.com with ESMTPS id eg8si1748202vdb.57.2012.11.10.08.12.51
(version=TLSv1/SSLv3 cipher=OTHER);
Sat, 10 Nov 2012 08:12:52 -0800 (PST)
Received-SPF: neutral (google.com: 68.71.33.130 is neither permitted nor denied by best guess record for domain of anonymous@server001.activetvnetworks.com) client-ip=68.71.33.130;
Authentication-Results: mx.google.com; spf=neutral (google.com: 68.71.33.130 is neither permitted nor denied by best guess record for domain of anonymous@server001.activetvnetworks.com)smtp.mail=anonymous@server001.activetvnetworks.com
Received: (qmail 13386 invoked by uid 48); 10 Nov 2012 04:44:39 -0500
Date: 10 Nov 2012 04:44:39 -0500
Message-ID: <20121110094439.13384.qmail@server001.activetvnetworks.com>
To: [redacted]
Subject: Your compensation money
From: HRH.Dr Innocent Masi <hrh.masi@yahoo.com>
MIME-Version: 1.0
Content-Type: text/html

HRH.Dr Innocent Masi hrh.masi@yahoo.com

Source: Dr. Innocent Masi – Scamwarners

____________________________________________________

Another header below received by the same scammer as the above emails

Delivered-To: me 
Received: by 10.112.2.40 with SMTP id 8csp182519lbr; 
Mon, 5 Nov 2012 04:06:10 -0800 (PST) 
Received: by 10.224.9.138 with SMTP id l10mr14467309qal.58.1352117170095; 
Mon, 05 Nov 2012 04:06:10 -0800 (PST) 
Return-Path: <anonymous@server001.activetvnetworks.com> 
Received: from server001.activetvnetworks.com ([68.71.33.130]) 
by mx.google.com with ESMTPS id ku8si4746969qeb.7.2012.11.05.04.06.09 
(version=TLSv1/SSLv3 cipher=OTHER); 
Mon, 05 Nov 2012 04:06:10 -0800 (PST) 
Received-SPF: neutral (google.com: 68.71.33.130 is neither permitted nor denied by best guess record for domain of anonymous@server001.activetvnetworks.com) client-ip=68.71.33.130; 
Authentication-Results: mx.google.com; spf=neutral (google.com: 68.71.33.130 is neither permitted nor denied by best guess record for domain ofanonymous@server001.activetvnetworks.com) smtp.mail=anonymous@server001.activetvnetworks.com 
Received: (qmail 17875 invoked by uid 48 ); 5 Nov 2012 05:18:56 -0500 
Date: 5 Nov 2012 05:18:56 -0500 
Message-ID: <20121105101856.17873.qmail@server001.activetvnetworks.com> 
To: me 
Subject: HOLOCAUST PAYMENT THROUGH NATIONAL BANK OF IRELAND 
From: Holocaust Claims Processing Center Switzerland <hcpc@swissmail.com> 
MIME-Version: 1.0 
Content-Type: text/html

John Davis Johnson – johndavidnatwestbankplc222@yahoo.co.jp – anonymous@server001.activetvnetworks.com – 

 
2 Comments

Posted by on 11/30/2012 in Other

 

“Mr Jude Anoma”

WARNING: BUSINESS PROPOSAL SCAMMER – 419 SCAM

EMAIL: From: Mr Jude Anoma 

Address: Abidjan, Cote d’Ivoire.

Hello Dear,
My name is Mr Jude Anoma the principal treasury officer with one of the prime banks in Cote d’Ivoire. I have decided to contact you through this medium based on a business proposal, which will be of mutual benefit to both of us. I discovered your email through comprehensive web email search on directory so I decided to contact you. I know this might sound like scam to you because of a lot of activities going on in the internet today. But I assure you that this is real.

I am the personal accounts manager to one of our late client a national of your country, who used to work with an oil servicing company here in Cote d’Ivoire, the late client made a numbered time (fixed) deposited for twelve calendar months, valued at €8,200,000.00 (Eight Million Two Hundred Thousand European Euros) in my branch. Upon maturity, we sent a routine notification to his forwarding address but got no reply.

After a month, we sent a reminder and finally we discovered from his contract employers, PETRO-CI Corporation that my client died from an automobile accident. On further investigation, I found out that he did not leave a will and all attempts to trace his next of kin were fruitless. I therefore made further investigation and discovered that the deceased person did not declare any next of kin in all his official documents, including his bank deposit paperwork.

This sum of (€8,200,000.00) is still sitting in the bank and the interest is rolled over with the principal sum at the end of each year. No one will come forward to claim it. According to the law of Cote d’Ivoire, at the expiration of 5{five} years, the money will l revert to the ownership of the Cote d’Ivoire government if nobody claims the funds.

Consequently, my proposal is that I will like you as a foreigner to stand in as the next of kin to deceased person for the fact that you have same last name with him so that this money will not be reverted by the government. If this request matches with your inward intention for success and greatness, then you are urged to make a quick response indicating your interest and readiness to participate and work with me to make this successful.

Please observe utmost confidentiality, and be rest assured that this transaction would be most profitable for both of us because I shall require your assistance to invest my share in your country. In your return mail, please do forward your information as listed below if you are willing to complete this deal with me, to enable me put the total fund in your name for claim as the next of kin to the deceased person:

Your full name:
Your contact address:
Occupation;
Your phone number:
Date of Birth:

I wait for your urgent reply.

Best Regards,

Mr Jude Anoma

Rue 18 Avenue 11 Angre
Cocody-BP 982 Abidjan 01
Abidjan-Ivory Coast.

HEADER:

Return-Path: <jonascalcario@terra.com.br>
X-YahooFilteredBulk: 208.84.243.152
Received-SPF: pass (domain of terra.com.br designates 208.84.243.152 as permitted sender)
X-YMailISG: jti0k3AWLDtAdhHtJ8DBla5B6hhhFN9uNDQ2xLXFYHSDgkJi 7091ufrq_TjZrOiPrIOKj63_2IGN54yIjV6tPOKOaA6MQSboGMb3.VLa4ihD VnHZP15ln0etwMeg7Ci.AHtAcejrAaHkHsdimXH6nHUCToobObG6Y1nFpvhN YzhroWrqXo6MKSYtliiA0U9V6A2I1Kwwqwpv0Pj3cCTUHsUk5g3HncHSDXIs AJZnh.AnBpeOUzENdbp17DqRO.VAnev620wLyUqzo6nzBcDmyDQ9ge0XC51x 6Gk464rg8soUZ5CW7qmTGxtjySpOcyF_kXDJNgyVvVD89kfj_3W5s6rW3VNJ 1jbYOfSGg8wCLFkEpz4173rLvHHCEneC1V0DZOZ7rq3jq1qEXJGlFMjbnnWU 3LXOf5slQOrXlGFbhVqo6iIqbl5AB8GlX_ZlFoC.lKuGmoXrBjqtXKpDvMlk MklDV6TNAagWg4jWScFYCvIKbXv5GgpmGOs4NKE1n035dYZH0vFYE7Q4CO8p nLA5_rWWFq2Itdi1rOajDMEmtAJaHSTH_wwiW.uppyXVfQIm9_Lb6wyIqZky M9t4Flaeo8BgTmjv1UIdzzcFdW9peAlD3_Cs5iGh8PoUh52WBmxGzRjpZi7D JSKQWws3v53dJ7_9utqZ_O1GZbTKsOv29zxXQvkYl.KQVv30tAhTD6wdO17Q OSPkTBFG_jjquu.H0ptd03O_fcZKY2BXtNMUEQE1GuC2UNX9rCzmH52aGKBw USxd1kGEfDq5AyAG3k51CDMLqzgo9rO2cQlIEKqlnUHa_dKUT0tnLxTcNchV bUXZ8oj4RFOWrDoiWQj5GlzXdpdKuMkkdpk8tBDWgUXEoPsysImLLUoCy9qL ttxZg8T0hp_3_zj4xV8i.u5bGHRCOv90scNgBI0L0JKcnBKIByE6kC6iCycR eFLx73Arn1lYN5j7s02rDk6qtyRm.3PTa5PGnB3rZL7rhz.8TcdTWS2j76Be TKxKJsLdB1874.e8Bu2pwoO.eF7ZqgBrAo9E4AGT7Gd5CF9nT0SOZkyZHgw. wncFODEu_b99Il0M3745JzjWwtoOu63qJOh5mn5IUtX1I7yBiZfB70mcTMYn BZo6c9nguq3T66pAkJzFOjfGWujBAeLEULJy7gawozWyGNHLYJjHY3cVnVfm S2BoiAgKFV0qj0l6jHpd1MyuVFJU7UChSQW5hUW92gu8k1GtYJhABJLzxL2u PEQEKTnyNGtCaOs6Nxx0KFqfIjOZWwzcH3r6xogufNcVBtXPVYGTs3G_kTZg Rlsq1UtVgUXiduwFfZYJt3_9H7416xVCC1o3WMOLOqd.qg56fXXcL7_iQH2t 0ZqeV5XmohxjsTtR1p6F
X-Originating-IP: [208.84.243.152]
Authentication-Results: mta1333.mail.mud.yahoo.com from=terra.com.br; domainkeys=neutral (no sig); from=terra.com.br; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO if01-mail-fb08-mia.mta.terra.com) (208.84.243.152) by mta1333.mail.mud.yahoo.com with SMTP; Thu, 29 Nov 2012 08:33:18 -0800
Received: from if02-mail-sr08-mia.mta.terra.com (unknown [208.84.243.35]) by mail-fb08-mia.tpn.terra.com (Postfix) with ESMTP id 31F5018002998; Thu, 29 Nov 2012 16:32:59 +0000 (UTC)
Received: from 1gr.tpn.terra.com (unknown [10.235.200.44]) by mail-sr08-mia.tpn.terra.com (Postfix) with ESMTP id 6EC5B40104A1; Thu, 29 Nov 2012 16:32:20 +0000 (UTC)
X-Terra-Karma: -2%
X-Terra-Hash: 18156cd98356fb6c44cc10b60c2b8ee4
Received-SPF: pass (1gr.tpn.terra.com: domain of terra.com.br designates 208.84.242.62 as permitted sender) client-ip=208.84.242.62; envelope-from=jonascalcario@terra.com.br; helo=terra.com.br;
Received: from terra.com.br (18h.terra.com [208.84.242.165]) (authenticated user jonascalcario!terra) by 1gr.tpn.terra.com (Postfix) with ESMTPA id E7F104000014D; Thu, 29 Nov 2012 16:32:19 +0000 (UTC)
MIME-Version: 1.0
X-Mailer: TerraMail PHP 5.2
Message-ID: <4236.1354206739@terra.com.br>
To:
Reply-To: jude_anoma41@yahoo.com
Content-Type: multipart/alternative; boundary=”=_1e3c6d7761ec54535f40b301bdebe3a6″
X-Origin: 41.202.90.93
Date: Thu, 29 Nov 2012 16:32:19 +0000
Subject: Hello Dear,
From:
Mr Jude Anoma <jonascalcario@terra.com.br>
X-Milter-Version: master.39-g1fd3ecd+
X-CLX-Rate-Response: fh=1gr; fi=10.235.200.247:2001;
X-CLX-ID: a123GLF8i43m0VH-AT1632K6
X-Abaca-Score-Saida: -7
Content-Length: 6555

Mr Jude Anoma – jonascalcario@terra.com.br – jude_anoma41@yahoo.com – 

 

Example Messages Sent From 41.202.90.93
From: “Replica Pens” <tandyb@austin.rr.com>
Subject: Replica watches 25% price off 
From: “Hiram Swanson” <loses36@sanchitech.net>
Subject: Attention from beautiful women is guaranteed to yo 
From: “Internal Revenue Service” <no-reply@irs.gov>
Subject: Notice of Underreported Income 
From: pamelia.n.schilawski@yubaba.ggpsystems.co.uk
Subject: pamelia.n.schilawski@yubaba.ggpsystems.co.uk Rolex 
From: “ANASTACIA AUDRIE” <margaritamelina@bv.com>
Subject: Best Buy Viagra Generic Online – Viagra 100mg x 60 
208.84.243.152 – This IP is also known for sending scam
 

Tags: , , , , , , , , , , , , , , , , , , , ,

“MR.BARRY GRANT”

WARNING: NIGERIAN SCAMMER – 419 SCAM – Also known as “Advance Fee Fraud”

EMAIL: Attention:My dear:
I am Mr.Barry G. Diplomatic Agent Dhl Courier delivery company Benin Republic, Please I miss placed your original address I had due to CUSTOMS /FBI/ CIA and POLICE searching and scanning on the Box as if I am a terrorist.

They have confirmed that my movement is clear and with out any suspicious intentions to this country only to deliver this Box to you and the documents are updated.

I have just cleared the Box from the Customs and they are now demanding for the certificate of ownership and the international consignment delivery permit (ICDP) from country of Fund origin and I told them that it will be forwarded to them as soon as possible to enable complete your delivery today, so please call me with my number so that you will direct me on how to reach your destination today.
Here is my direct number +229-986-782-98 , do not fail to call me Asap!
and also, Please,I want you to call my director in Benin Republic and forward your name and your address to him and to enable him secure the requested certificate in your name and send to me immediately for immediate release of your consignment box, So I will proceed to your house today.

Dhl: OFFICE
BENIN REPUBLIC
PLOT 56 RIVER LANE B
COTONOU
+229-98678298
+229-98729299
(imfoffice746@rocketmail.com)

DR. SABASTIN BENSON (director)
REGARDS
MR.BARRY GRANT (diplomatic agent)

HEADER:

X-Apparently-To: deleted@yahoo.com* Thu, 29 Nov 2012
Return-Path: <uchchiprofiter@yahoo.fr>
X-YahooFilteredBulk: 77.238.189.62
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: NTGtSB8WLDtYe65NR4uqunNnNs1MnyQjJouu19QOPQiUCKBV iSNFmgSYwDxkZDphFkZ8qTPjtfQsE.VTghXgxkJi9sVSPaY4TRbGj65rRLPS GXdig1MgB2wt8lAGvYD10SHAVkoz2MIqVNfKTBWX9.KJ.DXO4G2QNi34Gpbb bgIgx0pD1iVSopgEHsS44.bm8jy_chVSueCF8covE_k1YiuqGB9d8D_LdyDW mLvIDUABg8b6AboLq5XL.d7EDJfoRmIx0VaAxbL5E4Nc4XJB343st782HvfI tbiiwSMOWQpcIwavggsnBVrw.umkpEEGqtaXh6rgnW5A3UjR4wcAAF1AUCcF sAqovRtP41UJGd6uWB5Gdady8xYCItaRxxNyzTPtkNo7Mt0.L69HwHkpJP8y Et2sy8TWoRdou1TyW3AtzuaAQEmugOXJAdxwKygqBA24byinS5hNH_.CbkdF Nz0Tfc7aZxxQpHNmxCBqNDxkAjefLiX9mOaB34dozt_XM_82Muy1YalbrE8T PauKbjCZyMgwxf2zmA_xrnvWIK.xlUOQV3EFQKzhEl4eyHJgK7.eLLmgoLcX eErytdN1RTfIesVJHBbwZ9jgBZGpm5Mj6S5ZwtHabECmhPOp0vCOcvvbaxap DMSVZQ4uXFj6il.ss7GBfQZl4OGCibUqjZ8KncgbjxrkHRxu_qK5LndNgbp2 1.xH8UVF7MR.Zkcd5m6a1fC2DlmlwIXeR2K04N4iAGmQyMsFWd0dbk6.3NN4 JZ1tpQcpE8YOrKS1vyIrPVXMOPX8WzVRBCqrfkD_XvEynVx99cpMslValOfP 7My9yCQLJC_YIxdhB_YS3zhFlKAAEp8vtBcILbBoSC5LxOnYnrnChUmnw9dQ USsvP0On4.UFMV_LBHJmHl6VwzQpwlNr.7D0z8o8gpK1K7vtapaSabT9eyNt zcrDkhSF76oo51L0czJTXehdLDHt3uvVYg_f3TUsI7t2xgw.9mmHI2pE3GvI B.qzf.4if9jt2WZhqtas6MDs3yaxmixXpCBChDMHVUq_PC4fl1ouSCjwbkFK vr4RtPvkq4vRQlbofJmfuBr9FXPF5q7AypwnGF9jJVbzC._gHOtv87hiTuV4 Oh_RgZ7PUx6ZSfjPqQbjhPveL5mWS1v.wGxCjxsPT7tnOI3ZY6lbPrpMNaAW 2npS1KJA56P.wvXsPGKESpzCzSPBl62qs6IHB0t_XVUh8BLNHzTFWOMfbYUT YwkP9qT6i9w1vgJUB1ego_WTUlgShxLQVURZmw3ydr6pQSyCfoE6cvQqtHbG ABAFdkn61M2uadHeObpjtSNtzit8NXzx_pNlNBmGN1MjJZo-
X-Originating-IP: [77.238.189.62]
Authentication-Results: mta1038.mail.gq1.yahoo.com from=live.com; domainkeys=fail (bad syntax); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm5.bullet.mail.ird.yahoo.com) (77.238.189.62) by mta1038.mail.gq1.yahoo.com with SMTP; Thu, 29 Nov 2012 09:26:27 -0800
Received: from [212.82.105.224] by nm5.bullet.mail.ird.yahoo.com with NNFMP; 29 Nov 2012 17:26:22 -0000
Received: from [212.82.108.125] by tm20.bullet.mail.ird.yahoo.com with NNFMP; 29 Nov 2012 17:26:22 -0000
Received: from [127.0.0.1] by omp1034.mail.ird.yahoo.com with NNFMP; 29 Nov 2012 17:26:22 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 534566.19832.bm@omp1034.mail.ird.yahoo.com
Received: (qmail 10255 invoked by uid 60001); 29 Nov 2012 17:26:22 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1354209982; bh=41J/k28ahEQMiiBQfZyiXVElzLvnyuotQtahBg+PFuY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=0sV8pjAIQVcACX3lou9apROdVhzBGBVgh4kwk6YHFS7Zvql0JZ0gxBckRKyNXHKl4TciLv2phdOrGvURRhCYvOkU6ZmWunYfnJGKnW4iYBDnEP/Mpf2SFIJoyq1ymyW2da3Qiab+WFyy7B396OnMmwesUwcJI8+KWjARl6bNUfg=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=42Co41ucafGl9HGkAWmgaORIvVGA38VT0Z8wrglrvdfGHQvoONCTMVE3h6sqTIFGf9MhLy58sEOE4NN5RXMHSQnqJm28UcvBsjI4Etmru9vB50o9/tri0E91bpzFvrI6yaEHz/Z0OFx/aUg6NzX2jy/3Peu1Ij+TZ/DvQpRonnY=;
X-YMail-OSG: n0667UEVM1lXGt1BS21iUoxCrxGgxkC6Pvo2gK.xHi32qcI kYMr.dZSLbV.Xkx0-
Received: from [41.216.63.171] by web171302.mail.ir2.yahoo.com via HTTP; Thu, 29 Nov 2012 17:26:22 GMT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.127.475
Message-ID: <1354209982.35602.YahooMailClassic@web171302.mail.ir2.yahoo.com>
Date: Thu, 29 Nov 2012 17:26:22 +0000 (GMT)
From:
“MR.BARRY GRANT” <western786union00money1transfer@live.com>
Reply-To: imfoffice746@rocketmail.com
Subject: I am Mr.Barry G. Diplomatic Agent Dhl Courier delivery company Benin Republic
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1670751155-715523683-1354209982=:35602″
Content-Length: 3482

 

IP – 41.216.63.171 – Location: Nigeria – NOTE: According to Spam IP, this IP address has already been Recorded along with the email western2union1money0transfer@live.com under the name barry grant — as well as: johneric777777@yahoo.com.ph — under the name Mr. john eric.

MR BARRY GRANT – western786union00money1transfer@live.com – uchchiprofiter@yahoo.fr – imfoffice746@rocketmail.com – 

Felicia Aime <felicia_aime@yahoo.co.uk> — Blaise Samake <blaise.samake1@gmail.com> — joyceawuse@yahoo.fr — barr_roger55@superposta.com — maria_ruben@voila.fr — 

 
Leave a comment

Posted by on 11/30/2012 in Other

 

Tags: , , , , , , , , , , , ,

“Mr Dominic Fred”

Business Proposal Scam – FRAUD

EMAIL: Your Kind Attention
My name is Mr Dominic Fred, I am the regional manager of the Internationale commercial Bank of Ghana Takoradi branch in the western region of Ghana. I got your contact on a bank conference that was held in Namibia. I am a man of peace, married with two lovely kids.

In ever want problems in my life, it was just because of my present financial situation that I have planned to utilize this opportunity that came my way and I only hope you can assist me not to persecute me.If you don’t want this proposal can you kindly forget that I ever contacted you? I will be glad you did for the sake of my job.

Ihave packaged a financial transaction that will benefit you and I, as the regional manager of the International commercial Bank it is my dutyto send in a financial report to my head office in the capital city Accra at the end of each business year.

On the course of thelast year 2011 business report, I discovered that my branch in which Iam the manager made Twenty one Million US Dollars ($21,000,000.00M)which my head office are not aware of and will never be aware of. Ihave placed this funds on what we call escrow call account with nobeneficiary.

As an officer of this bank I cannot be directly connected to this money, so my aim of contacting you is to assist me receive this money in your bank account and get 30% of the total funds as commission. There are practically no risk involved, it will be a bank to bank transfer,all I need from you is to stand claim as the original depositor of this funds who made the deposit with my branch so that my head office can order the transfer to your designated bank account.

If you accept to work with me I will appreciate it very much if you think we can work together so that we can go over the details. Thank you in advance and may God bless you and your family.
Yours truly,
Mr Dominic Fred,

HEADER:

Return-Path: <hassanmensah2003@yahoo.ca>
X-YahooFilteredBulk: 98.139.213.134
Received-SPF: none (domain of yahoo.ca does not designate permitted sender hosts)
X-YMailISG: hFOHHpIWLDvYrys.R4II_IH734enh8SDWp6sn2JEhnWIc7xi Tpz_JYyBRgfwsAjR_cerMBaV9xkV6QAwLxtPFK2eZK4_0e8ufY0GIuF_RoMy NBOmLhb63SxfgM8U959ryHfLlRcfY7_VWbWmgnVs1_I5oPqcO4CnhzkiIEh_ wBILSnhjuFzpJLQ28lkQPP.2nlCGQ9TXIKiYvfrdNHVcAdmf6SQsZ8vvpu9t 9O.j5u2FsyJNGMAoBUvL3XcUfuFAAps_eTzfskKalhvkTs3VVPDHhrhO3Gd0 o5yn6wx3unyocSeTxWWywXvCEk79x5CV3sehZu.esi6s7BxN2IFTHe80Fqke KtqYMcBJevqibo4AIjeK_pwh_gfmQlNWVkJ_Ik3m1MSte8EC87g8jeZ8zvve 8tFgN80qzIsIUyjYBZCpJsGaFQaHf3sTaW1qhHMdLq0gnLaFw0Dm2uT4ZFtN hY3dmbX4EUSrEJcJMw7NsKsbcxkmKRnLI53sUQgH3PmGftxO6V7gTNFQ7r3t tCHyMjUwrNCoMByhDZtbgg6J.t1BNaY2JLmn7bVepnEZh_OPOdvtGG3UV5nx wpW1I_YftS1pKXr2vyQw.YQsnfY8xjpgu6tVjo9LWPEBPcXN_CQ0XQmDUrOF ZKv6QG_a3VVkGFFluFts421OtB2uG9Vfr95BZCgyza0b_dXG_Wrx4GxICboI luojiHUPVJp0uvEj05WwEHPAwZ3QJPWnUJcyiVpCSUQPmTqzkFlHfDyVHFjD ZRQsj2wZ5OhY8eaGD1T0ZjJRazFTZJrfo8tMwRoaJqcSGo.de5346aLcwRT6 tUd2FpqJVtY90CGGcq.1JU3nsrXOGGYv0Qwe13cwVApv0oJy1l64iNBQskw3 YDlqeJr_FYMsVf7p7hCmKpR5SAfi7RR4wNY89SDg5PHrQFh_iEdlKhhuY5Qm SpMn07jhgTV5uG4efv2o4L8in.UHgdIJcSm6MwfFSGUc0dpbSVbGgwwW285Q j7Mrury7e.RlMN5DFaYT.aKl5zHULWRzIr5yqwbSy5SLdNcZuH6YcQxCxMDd _ub051OMFdhZc1nHqD6JGeGBf5VEX5YXoHDDqHBEiCdZ.YP3c_vpxvEK4Lp3 uyADD6oN1vBB4B6qqWlK32dwfxWKNE0qXaABnrNakFPUwmMe1c8khg_pP.lb cIteutvZLV9YxB54SF4uRHoYp0ZJeb9oxsGuG9MQtWmwr6q6oKGgq6_YNTbT SKHRNytp2Ixc38jfiEb1Q2X5PH2tIM9Xua.znD30HUVjXeQpK5gdcbQGIAJz ZVQNJJX.nHlagepZ5qy5xPcuzx8cjB7tvK65rjslV1J1BMvQkhJRExOdFdhL S0hXK4Osv7EyLeJ8vA–
X-Originating-IP: [98.139.213.134]
Authentication-Results: mta1416.mail.mud.yahoo.com from=yahoo.ca; domainkeys=pass (ok); from=yahoo.ca; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm24-vm1.bullet.mail.bf1.yahoo.com) (98.139.213.134) by mta1416.mail.mud.yahoo.com with SMTP; Wed, 28 Nov 2012 03:53:47 -0800
Received: from [98.139.215.140] by nm24.bullet.mail.bf1.yahoo.com with NNFMP; 28 Nov 2012 11:53:45 -0000
Received: from [98.139.212.247] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 28 Nov 2012 11:53:45 -0000
Received: from [127.0.0.1] by omp1056.mail.bf1.yahoo.com with NNFMP; 28 Nov 2012 11:53:45 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 727332.23262.bm@omp1056.mail.bf1.yahoo.com
Received: (qmail 36425 invoked by uid 60001); 28 Nov 2012 11:53:45 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.ca; s=s1024; t=1354103625; bh=XB9Yk3BKHTI0kV4hbXyRr8jRO0kQ6FFaRCksgkNhnZs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=hw0duFtM1PYxIBty0zwoOcxltc8iSsjMs61rEsL+rg4LmuN3PohAMUYBO2x/1+oUEZWW2fV5TX/JFfoRVR6K1i8atGPjx+rlxCRtMvlB8nDExMNecq2gxUsBJa/FOj74RAXeeE6dG/p9WeUotKepkWulN1bNZnAIcmNH9J8fIq0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.ca; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=vYnDdsRIm68Ioedb00qBOfBfLCr0qkQjQQh/Je0ulmwXlTE9kDd1KxFJNBobnz1mF68oDluwrSqRUe+HntOqFu2Q4DPKEkLjPzusuy8VrubPxhQm9xUkrgrnIuCPhLYekXZ5MHH13OCzCsHDFVw9kk/vFNGQ7dntZLX+V/BIZ2s=;
X-YMail-OSG: qayhNhAVM1l3yt7svfy603962BMJnxta75w_nmeyj.TaOIy f_.0HwunLEfrsU_isQQbJDVMqeSZLlJ7zwNSEymccVyZXaBiRAvH2Ulp0MSt WBTJM4N311tuoNwFw2ydPm6sjYbybGS7MoMN4yP_AcBGFZcO70M14644M9L4 aVYfhvsGGB_JUaX3nc9FvZnXETlws60z1zwWvavZDqJRx2Ym1.hpg5SWlCb8 aYgo4YZO7hEHJhELGFjUKgS9SuLRFHJsUhQ0MycE3tO4iDGbxWIOMkhrQWsq F_rHDbdDceb2RofS9t2eNiJNbrLf6stlmz7Gw6fzjt9pxuK25kz33OM0bPYN nzmEgX914peRkdB8ZHk5ht6BRbZNKb00SyqPqvUvdpTH3SXFR_iW.8rRQ1zb jmvH6ygBCc5RbSUZcq0CQY8Qut46hJaOPR4YrjvQX6Q7orwfyvqMeAWXEA.Y Mj6adgutiShn.rixjCUeZO9LIG7_VUNR7mwA3R6AnwFqlpDbReSORyngXBbD CrKik9pOtsfkKYXgNUGLcgzR2B5dRsr3Hrld3ZM_3YH_hqwDQCGqwAoN6zV4 uK74zBVhGnUA1lbROwrmpu7HPTz_tAGzHidxs1w–
Received: from [80.87.92.55] by web162505.mail.bf1.yahoo.com via HTTP; Wed, 28 Nov 2012 03:53:45 PST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.127.475
Message-ID: <1354103625.19975.YahooMailClassic@web162505.mail.bf1.yahoo.com>
Date: Wed, 28 Nov 2012 03:53:45 -0800 (PST)
From: “Mr Dominic Fred,” <hassanmensah2003@yahoo.ca>
Reply-To: dominicfred67@yahoo.com
Subject: Your Kind Attention
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1024699347-1195129299-1354103625=:19975″
Content-Length: 4133

Mr Dominic Fred – hassanmensah2003@yahoo.ca – dominicfred67@yahoo.com –

Both of the scammers IP address are  black listed on DNSBL – and other websites including PSBL, Project Honey Pot, etc.

The IP address 80.87.92.55 was banned on site4dating.com. An online dating website. The IP was blocked due to reports of scam activity.

Other email-addresses used by scammers under the same IP address – auto-contact@habbo.com – TedGorman” <farmerali@amd.com> – orpha.formanek@mailhp.intrusion.org – washington.smith40@yahoo.com – vu.ong_tu@yahoo.com – malikshops80@gmail.com – matthew.tunde@yahoo.com –

Georgette Housman <GeorgetteHousmanps92@yahoo.com> – UNITED NATIONS COMPENSATION UNIT,” web.rew.1.2.6 – “Mr.Steve Gulliver” <stevegulliver001@gmail.com – Mr Harrison Mark <harrisonmarkbclys@gmail.com> – Helen <webi019@att.net> – YAHOO & FACEBOOK AWARDS CENTER <farmpetcotroloffic Subject: WINNING NOTIFICATION –  William Nii Offori <douglaakana12@gmail.com> – United Nations <unpfaprommo@gmail.com> –  First Commercial Bank London <firstcommercialbankk Subject: PAYMENT APPROVED – Barclays Bank Plc <barclaysfinanceonline@live.com> Subject: LOAN/BG/SBLC/MTN/LC/POF/PPP/AGENT –  “Agent James Duru”<www.08733@hotmail.com> – Gain Trust Finance <gaintrustfinance.loan@gmail.com –
Subject: GET FINANCIAL ASSISTANCE WITHIN 48HOURS

 
 

Tags: , , , , , , , , , , , , , ,

 
%d bloggers like this: