RSS

“Mr. Gordon Chen”

23 Nov

INHERITANCE SCAM – ADVANCE FEE FRAUD

EMAIL: I want you to come in as the Next of Kin/Beneficiary to this account (Attached file also came with this email titled Legal Inheritance)

 

HEADER:

Return-Path:   <offfice@live.com>
X-YahooFilteredBulk:   106.10.148.151
Received-SPF:   softfail (transitioning domain of live.com does not designate 106.10.148.151 as permitted sender)
X-YMailISG:   27h5RaIWLDtcfEfxeOWcB.UWqQCwRUZ.QTFz7C4wIIcpIIYs Yev6iT1dSSHaJZFeF68fgj0QO2UhtMK9T9eNQWLRRPyvrJqw3zNo95hpWKPX aV4fSQFs.MM9vVO4fGexiKzUhGl5oXCAY.34zMf_PZTEuVrsoWCGnAu5Pfwe sUdqJg9wdi1wIZZlhOwoakLt0OGjXrBmzFR831FWB_7ZhO7Drme1PUiXxoD1 5dyCr5KvD_j0QEiPP.My_V1Wie5ODTBCNcEQbHoAxhdC1b0GxPT9OCvY_Xrf koMFO5KQy4ExAfBQ5j7NErnakQEzmf1aK9kA52zsk9xHNlk15t2g9tNMRphY StaHTTcY1j6UlIadfAdBw89D8o7slUNvBn4vRX5aCw4HQ1H5E2uTUtLO1Nbx 7Erj9VpkYR4WNZictqzvHFm992d3oo6eNV.MJyU5d0LCV.wp3AWlMpEqmYyB 1vWsBbnOpN4qGlL8pRdZaSnPZRPGe.hzNX__bzyp9Q3I7NJ2ALeBBxNE62Ox tXHrqQDM4ViFHaEBtaI19GKxwUj5y4FHGHgqx0TsUx1Hll2lCYZ27HYvIcX0 9BIjqQU38YPEAp3ozTQfHFAZh9pKmVxc9fGOUFJq1za8C_6VqJTdFK1uxeco qVlgmmjTwljDH_1b7EPsM_24eDpybuGd0Z6z3r.hRV3nCofV9myLZ5R1U4CN 61EbYwJp_RUD41EPHKWxSfV8mEZvhNKxQr.oEv.Ssz8fOeDIca23WvIAeqqW 2zRkCmVBvY39_0.XTyEgLhq.0E93w33QR4rroJoWxGXSjp5LJ9TAeBoyyvWU 7WcLnkeoyIsW8h7lUXVcJp_YXTAG8eYyNRsZxoZXM1eC2zOp1wBE3gXRpoLQ gQqcyl_fOZj45RoPwLdSsDVdXsRzcoFp6V3r.U4gYh2qPhYhqOlsjVx9oLdr vQwkiE7K61ggat79bsM9vNJNpBTmoGNrflksDnkwokRjmXTlaKBfDtKubnA7 YuBWx2ZHXbbyXIPq_g3kLw2OPTOw4cb2E3nPTVZ09ozz_HfqLXPbClUtihB1 fD1KHRXPFhT1QuBsWlY0CQUkSQGJmzSegKmrP382d8NM5M1lpfy6YtoUZBku VzyYKWNhQZ70tmx8f9UmHjEZgiMlc2xk9yfzx5IrQ_z1jqFJ.Kk_hgKevv4s 0zuDFrNThmG6R6yTTCoNJ2fpYof1vJwasKYb9CGis4egtJXhTwqnCAj0I37G kfGyt8hAjgWSlOasSg6aHRjXzsdhGLhG4Bw-
X-Originating-IP:   [106.10.148.151]
Authentication-Results:   mta1132.mail.bf1.yahoo.com from=live.com; domainkeys=neutral (no sig); from=live.com; dkim=neutral (no sig)
Received:   from 127.0.0.1 (EHLO nm5-vm8.bullet.mail.sg3.yahoo.com) (106.10.148.151) by mta1132.mail.bf1.yahoo.com with SMTP; Thu, 22 Nov 2012 08:17:21 -0800
Received:   from [106.10.166.112] by nm5.bullet.mail.sg3.yahoo.com with NNFMP; 22 Nov 2012 16:17:16 -0000
Received:   from [106.10.167.207] by tm1.bullet.mail.sg3.yahoo.com with NNFMP; 22 Nov 2012 16:17:16 -0000
Received:   from [127.0.0.1] by smtp180.mail.sg3.yahoo.com with NNFMP; 22 Nov 2012 16:17:16 -0000
X-Yahoo-Newman-Id:   360831.74249.bm@smtp180.mail.sg3.yahoo.com
Message-ID:   <360831.74249.bm@smtp180.mail.sg3.yahoo.com>
X-Yahoo-Newman-Property:   ymail-3
X-YMail-OSG:   o2T42rMVM1mEeIi6Ts2rnNQznaWoZEnnkcvHMQIhGgb1eRL ToyMC5B6aOkVi.BFLhgll_D7k.wwZnaFAqkXgSEjhyqOAI_B0AQqvqZyPYbN hzrV1o.Any0HeHdQUKcth6J9TEqHokT012QmC3YWqdnIynVaTUVYslqVG8rV bovPlTWEA_VH7wygGuxKTY4ygC9k2SV3GlquGSqJvq.QjBG_EG_Q1v4l4SGF BWvE5NK_PJPNQy_J1YPtJnS.iVKlpBHFi9jA7bDjNu2Go96uCQCGe4lMiLXw djgMRUQiEn7j2z4ni9BVyTzeNCPQN0EsPduIAsGqLPI49JUJ30pA.K5ucoNV zRBp30IJCCQazLcSbSGPpHvUW0lUmz4YqDmPQ77SaoOWrK8B41PSplqDHD9j 2MppiogeuP_lg9TEZmrXwzh6.tuwjf89_JyuZBTjgCqERwTbUQmcvt7H0wZs U0d_srT8lhcYh.NMtPire1dDKrp76U3wHQUtfwkmM.XKLcO_JNRBQwNbD7A- –
X-Yahoo-SMTP:   vS68oJaswBB0pb532Km3RRaYrwG2nnlHW00rxq2r
Received:   from User (offfice@121.14.155.106 with login) by smtp180.mail.sg3.yahoo.com with SMTP; 22 Nov 2012 08:17:16 -0800 PST
Reply-To:   <gordon-chen00@live.com>
From:  
“Mr. Gordon Chen”<offfice@live.com>
Subject:   My purpose of contacting you
Date:   Fri, 23 Nov 2012 16:18:36 -0000
MIME-Version:   1.0
Content-Type:   multipart/mixed; boundary=”—-=_NextPart_000_012A_01C2A9A6.768566C0″
X-Priority:   3
X-MSMail-Priority:   Normal
X-Mailer:   Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE:   Produced By Microsoft MimeOLE V6.00.2600.0000
Content-Length:   4706

Mr Gordon Chen <> offfice@live.com <> gordon-chen00@live.com

Project Honey Pot has detected behavior from the IP address consistent with that of a mail server, dictionary attacker and comment spammer. Below we’ve reported some other data associated with this IP. This interrelated data helps map spammers’ networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment

Spam URLs & Keywords Posted From 121.14.155.106
Domainanoxic.funhost.org.ua
URLhttp://anoxic.funhost.org.ua/test.html
Keywordsready
Domainwww.ortho.ohio-state.edu
URLhttp://www.ortho.ohio-state.edu/search.cfm?q=http%3A%2F%2Fwww.pujckaponetu.cz%2F%3Fp%3D90%2F+p%C5%AF …
Keywordsbowdle
Domainweb.commicro.com
URLhttp://web.commicro.com/post/teto-casti-muzete-popsat-historii-vaseho-projektu-co-vas-2
Keywordschimneys
Domainweb.commicro.com
URLhttp://web.commicro.com/post/kvalitni-znacka-oboje-je-zcela-nove-nenosene-vcetne
Keywordscydfs
Domaintwitter.com
URLhttp://twitter.com/statuses/user_timeline/culcelriXXU_.rss
Keywordsswords
Domainweb.commicro.com
URLhttp://web.commicro.com/post/pujcky-kterych-strong-neni-potreba-dokazovat
Keywordsbookmarked
Domainweb.commicro.com
URLhttp://web.commicro.com/post/air-tech-air-conditioning-heating-2
Keywordsr?publique
Domainweb.commicro.com
URLhttp://web.commicro.com/post/zaroven-budete-zapsani-do-insolvencniho-rejstriku-coz-vede-zastaveni
Keywordsolrf
Domainwww.miclab.org
URLhttps://www.miclab.org/node/703381
Keywordsbcp soma
Domainwww.miclab.org
URLhttps://www.miclab.org/node/703372
Keywordsbcp soma
Domainwww.miclab.org
URLhttps://www.miclab.org/node/703392
Keywordsbcp soma
Domainwww.miclab.org
URLhttps://www.miclab.org/node/703367
Keywordsbcp soma
Domainwww.miclab.org
URLhttps://www.miclab.org/node/703378
Keywordsbcp soma
Domainwww.miclab.org
URLhttps://www.miclab.org/node/703382
Keywordsbcp soma
Domainwww.miclab.org
URLhttps://www.miclab.org/node/703374
Keywordsbcp soma

Other email addresses used by this ip address include, but are not limited too:

mbaecsszw@softbank.ne.jp <>  baku-nyuI17@softbank.ne.j <> y“c Œ‹”üŒb — hu61gdo4i6@hotmail.com <>    oqqqymiksvrr@softbank.ne.j <> ulsiizraq@i.softbank.jp <> disbp@docomo.ne.jp <>

For additional email addresses and information, please click: Project Honey Pot

 

Advertisements
 
Leave a comment

Posted by on 11/23/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: