“Mr. Gordon Chen”

INHERITANCE SCAM – ADVANCE FEE FRAUD

EMAIL: I want you to come in as the Next of Kin/Beneficiary to this account (Attached file also came with this email titled Legal Inheritance)

 

HEADER:

Return-Path:		<offfice@live.com>
X-YahooFilteredBulk:		106.10.148.151
Received-SPF:		softfail (transitioning domain of live.com does not designate 106.10.148.151 as permitted sender)
X-YMailISG:		27h5RaIWLDtcfEfxeOWcB.UWqQCwRUZ.QTFz7C4wIIcpIIYs Yev6iT1dSSHaJZFeF68fgj0QO2UhtMK9T9eNQWLRRPyvrJqw3zNo95hpWKPX aV4fSQFs.MM9vVO4fGexiKzUhGl5oXCAY.34zMf_PZTEuVrsoWCGnAu5Pfwe sUdqJg9wdi1wIZZlhOwoakLt0OGjXrBmzFR831FWB_7ZhO7Drme1PUiXxoD1 5dyCr5KvD_j0QEiPP.My_V1Wie5ODTBCNcEQbHoAxhdC1b0GxPT9OCvY_Xrf koMFO5KQy4ExAfBQ5j7NErnakQEzmf1aK9kA52zsk9xHNlk15t2g9tNMRphY StaHTTcY1j6UlIadfAdBw89D8o7slUNvBn4vRX5aCw4HQ1H5E2uTUtLO1Nbx 7Erj9VpkYR4WNZictqzvHFm992d3oo6eNV.MJyU5d0LCV.wp3AWlMpEqmYyB 1vWsBbnOpN4qGlL8pRdZaSnPZRPGe.hzNX__bzyp9Q3I7NJ2ALeBBxNE62Ox tXHrqQDM4ViFHaEBtaI19GKxwUj5y4FHGHgqx0TsUx1Hll2lCYZ27HYvIcX0 9BIjqQU38YPEAp3ozTQfHFAZh9pKmVxc9fGOUFJq1za8C_6VqJTdFK1uxeco qVlgmmjTwljDH_1b7EPsM_24eDpybuGd0Z6z3r.hRV3nCofV9myLZ5R1U4CN 61EbYwJp_RUD41EPHKWxSfV8mEZvhNKxQr.oEv.Ssz8fOeDIca23WvIAeqqW 2zRkCmVBvY39_0.XTyEgLhq.0E93w33QR4rroJoWxGXSjp5LJ9TAeBoyyvWU 7WcLnkeoyIsW8h7lUXVcJp_YXTAG8eYyNRsZxoZXM1eC2zOp1wBE3gXRpoLQ gQqcyl_fOZj45RoPwLdSsDVdXsRzcoFp6V3r.U4gYh2qPhYhqOlsjVx9oLdr vQwkiE7K61ggat79bsM9vNJNpBTmoGNrflksDnkwokRjmXTlaKBfDtKubnA7 YuBWx2ZHXbbyXIPq_g3kLw2OPTOw4cb2E3nPTVZ09ozz_HfqLXPbClUtihB1 fD1KHRXPFhT1QuBsWlY0CQUkSQGJmzSegKmrP382d8NM5M1lpfy6YtoUZBku VzyYKWNhQZ70tmx8f9UmHjEZgiMlc2xk9yfzx5IrQ_z1jqFJ.Kk_hgKevv4s 0zuDFrNThmG6R6yTTCoNJ2fpYof1vJwasKYb9CGis4egtJXhTwqnCAj0I37G kfGyt8hAjgWSlOasSg6aHRjXzsdhGLhG4Bw-
X-Originating-IP:		[106.10.148.151]
Authentication-Results:		mta1132.mail.bf1.yahoo.com from=live.com; domainkeys=neutral (no sig); from=live.com; dkim=neutral (no sig)
Received:		from 127.0.0.1 (EHLO nm5-vm8.bullet.mail.sg3.yahoo.com) (106.10.148.151) by mta1132.mail.bf1.yahoo.com with SMTP; Thu, 22 Nov 2012 08:17:21 -0800
Received:		from [106.10.166.112] by nm5.bullet.mail.sg3.yahoo.com with NNFMP; 22 Nov 2012 16:17:16 -0000
Received:		from [106.10.167.207] by tm1.bullet.mail.sg3.yahoo.com with NNFMP; 22 Nov 2012 16:17:16 -0000
Received:		from [127.0.0.1] by smtp180.mail.sg3.yahoo.com with NNFMP; 22 Nov 2012 16:17:16 -0000
X-Yahoo-Newman-Id:		360831.74249.bm@smtp180.mail.sg3.yahoo.com
Message-ID:		<360831.74249.bm@smtp180.mail.sg3.yahoo.com>
X-Yahoo-Newman-Property:		ymail-3
X-YMail-OSG:		o2T42rMVM1mEeIi6Ts2rnNQznaWoZEnnkcvHMQIhGgb1eRL ToyMC5B6aOkVi.BFLhgll_D7k.wwZnaFAqkXgSEjhyqOAI_B0AQqvqZyPYbN hzrV1o.Any0HeHdQUKcth6J9TEqHokT012QmC3YWqdnIynVaTUVYslqVG8rV bovPlTWEA_VH7wygGuxKTY4ygC9k2SV3GlquGSqJvq.QjBG_EG_Q1v4l4SGF BWvE5NK_PJPNQy_J1YPtJnS.iVKlpBHFi9jA7bDjNu2Go96uCQCGe4lMiLXw djgMRUQiEn7j2z4ni9BVyTzeNCPQN0EsPduIAsGqLPI49JUJ30pA.K5ucoNV zRBp30IJCCQazLcSbSGPpHvUW0lUmz4YqDmPQ77SaoOWrK8B41PSplqDHD9j 2MppiogeuP_lg9TEZmrXwzh6.tuwjf89_JyuZBTjgCqERwTbUQmcvt7H0wZs U0d_srT8lhcYh.NMtPire1dDKrp76U3wHQUtfwkmM.XKLcO_JNRBQwNbD7A- –
X-Yahoo-SMTP:		vS68oJaswBB0pb532Km3RRaYrwG2nnlHW00rxq2r
Received:		from User (offfice@121.14.155.106 with login) by smtp180.mail.sg3.yahoo.com with SMTP; 22 Nov 2012 08:17:16 -0800 PST
Reply-To:		<gordon-chen00@live.com>
From:		“Mr. Gordon Chen”<offfice@live.com>
Subject:		My purpose of contacting you
Date:		Fri, 23 Nov 2012 16:18:36 -0000
MIME-Version:		1.0
Content-Type:		multipart/mixed; boundary=”—-=_NextPart_000_012A_01C2A9A6.768566C0″
X-Priority:		3
X-MSMail-Priority:		Normal
X-Mailer:		Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE:		Produced By Microsoft MimeOLE V6.00.2600.0000
Content-Length:		4706

Mr Gordon Chen <> offfice@live.com <> gordon-chen00@live.com

Project Honey Pot has detected behavior from the IP address consistent with that of a mail server, dictionary attacker and comment spammer. Below we’ve reported some other data associated with this IP. This interrelated data helps map spammers’ networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment. 

Spam URLs & Keywords Posted From 121.14.155.106

Domain: anoxic.funhost.org.ua URL: http://anoxic.funhost.org.ua/test.html Keywords: ready

Domain: www.ortho.ohio-state.edu URL: http://www.ortho.ohio-state.edu/search.cfm?q=http%3A%2F%2Fwww.pujckaponetu.cz%2F%3Fp%3D90%2F+p%C5%AF … Keywords: bowdle

Domain: web.commicro.com URL: http://web.commicro.com/post/teto-casti-muzete-popsat-historii-vaseho-projektu-co-vas-2 Keywords: chimneys

Domain: web.commicro.com URL: http://web.commicro.com/post/kvalitni-znacka-oboje-je-zcela-nove-nenosene-vcetne Keywords: cydfs

Domain: twitter.com URL: http://twitter.com/statuses/user_timeline/culcelriXXU_.rss Keywords: swords

Domain: web.commicro.com URL: http://web.commicro.com/post/pujcky-kterych-strong-neni-potreba-dokazovat Keywords: bookmarked

Domain: web.commicro.com URL: http://web.commicro.com/post/air-tech-air-conditioning-heating-2 Keywords: r?publique

Domain: web.commicro.com URL: http://web.commicro.com/post/zaroven-budete-zapsani-do-insolvencniho-rejstriku-coz-vede-zastaveni Keywords: olrf

Domain: www.miclab.org URL: https://www.miclab.org/node/703381 Keywords: bcp soma

Domain: www.miclab.org URL: https://www.miclab.org/node/703372 Keywords: bcp soma

Domain: www.miclab.org URL: https://www.miclab.org/node/703392 Keywords: bcp soma

Domain: www.miclab.org URL: https://www.miclab.org/node/703367 Keywords: bcp soma

Domain: www.miclab.org URL: https://www.miclab.org/node/703378 Keywords: bcp soma

Domain: www.miclab.org URL: https://www.miclab.org/node/703382 Keywords: bcp soma

Domain: www.miclab.org URL: https://www.miclab.org/node/703374 Keywords: bcp soma

Other email addresses used by this ip address include, but are not limited too:

mbaecsszw@softbank.ne.jp <>  baku-nyuI17@softbank.ne.j <> y“c Œ‹”üŒb — hu61gdo4i6@hotmail.com <>    oqqqymiksvrr@softbank.ne.j <> ulsiizraq@i.softbank.jp <> disbp@docomo.ne.jp <>

For additional email addresses and information, please click: Project Honey Pot