RSS

Monthly Archives: January 2013

“Mr. Martin Kobler” a.k.a “Craig Williams”

ATM CARD LOTTERY SCAM – NIGERIAN SCAM

UPDATE – Martin Kobler a.k.a Craig Williams has emailed me again. The emails are below along with the header details.

freemoney

 

IN REGARD TO YOUR ATM MASTER CREDIT CARD PACKAGE WITH FEDEX

Attn: Dear Beneficiary,

Due to your long over-due payment which you have been finding it difficult to receive via Wire transfer or Bank Draft, We have arranged your payment through International ATM Card Payment Center,this is part of an instruction passed by the United Nations in respect to all over delayed payment. The Director, ATM Payment Center will send your ATM Card valued sum of $10,000,000.00USD which you are to use in accessing your fund in any ATM MACHINE location any where in the world, and the maximum withdrawal daily limit is $15,000.00 So kindly contact the Payment Center with the below information;

Contact Person: Mr. Craig Williams
Director,ATM Payment Center Africa
Telephone: +2347063480508
Email: mr.craigwilliamss@gmail.com

Make sure to reconfirm to him your details as your Full Name,Current Address, Direct Phone number and brief introduction of yourself so as to facilitate the immediate release of your ATM Card to you immediately. Please be aware that you are the only person left to receive your ATM Card out of the (5) five beneficiaries and for your confirmation go to FedEx Express Delivery Services website and you will see that other beneficiary have already received their ATM
Card that was sent to them through FedEx Express Delivery Services. http://www.fedex.com/Tracking; with Tracking Numbers: 871972637653 ,873238087330 ,873448022361

I stated the above for you to know that you are the only person left to receive your ATM Card.So contact Director, ATM Payment Center: Mr.Craig Williams and Email: mr.craigwilliamss@gmail.com , You have to stop any further communication with anybody or office.

Thanks for your co-operation.
Best regards,
Mr. Martin Kobler
Secretary-General’s
Special Representative

Return-Path: <millionboy4u1@yahoo.com>
X-YahooFilteredBulk: 77.238.189.92
X-Originating-IP: [77.238.189.92]
Authentication-Results: mta1006.mail.bf1.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm19-vm0.bullet.mail.ird.yahoo.com) (77.238.189.92) by mta1006.mail.bf1.yahoo.com with SMTP; Tue, 05 Feb 2013 23:58:48 -0800
Received: from [212.82.105.245] by nm19.bullet.mail.ird.yahoo.com with NNFMP; 06 Feb 2013 07:58:48 -0000
Received: from [212.82.108.114] by tm17.bullet.mail.ird.yahoo.com with NNFMP; 06 Feb 2013 07:58:47 -0000
Received: from [127.0.0.1] by omp1023.mail.ird.yahoo.com with NNFMP; 06 Feb 2013 07:58:47 -0000
X-Yahoo-Newman-Id: 960308.89699.bm@omp1023.mail.ird.yahoo.com
Received: (qmail 15101 invoked by uid 60001); 6 Feb 2013 07:52:06 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1360137126; bh=KmcdE+HxeOrPDSDrpcVsmYJBvC58byXBslDZgk1OAl8=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=euP4ZIyHrozVZ8Nc2E0IgnTbnt8dLtKyh+GtdSePjYmj9SRqWqvOhgn+Esb+TyF0NW5Gn73z6GY9vOpUn3tFLfLglNFSIGKIF9QlB0jEUx4AFGUFioLtcBpIPY7Bfi8Llvxt98a7fsTseeEOED8uFdqBiNMEtV8hsMAtQtZzJkg=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=P5lNiReLFwKWBUl9exFM1UaxiH+26FDbPR0TgYmJf8hE7EYvYDRrsfSQiTm2IeDbsEt/KOiwIW1j/gSwGfD4XuCm59Wt0+V/HYN7e8UAM0a05LCHb6bX5hiku3sadg1h5UVCVtjuWroimipRVv/lIe4u16K8ZYWfa7GU/2ynq+I=;
Received: from [41.138.165.12] by web172302.mail.ir2.yahoo.com via HTTP; Wed, 06 Feb 2013 07:52:06 GMT
Message-ID: <1360137126.90931.YahooMailClassic@web172302.mail.ir2.yahoo.com>
From: “MR.MARTINS KOBLER” <brandnewoffi1@gmail.com>
Reply-To: mr.craigwilliamss@yahoo.es
Subject: IN REGARD TO YOUR ATM MASTER CREDIT CARD PACKAGE WITH FEDEX
MR MARTINS KOBLER brandnewoffi1@gmail.com

Attn: Dear Beneficiary,

Due to your long over-due payment which you have been finding it difficult to receive via Wire transfer or Bank Draft, We have arranged your payment through International ATM Card Payment Center,this is part of an instruction passed by the United Nations in respect to all over delayed payment. The Director, ATM Payment Center will send your ATM Card valued sum of $10,000,000.00USD which you are to use in accessing your fund in any ATM MACHINE location any where in the world, and the maximum withdrawal daily limit is $15,000.00 So kindly contact the Payment Center with the below information;

Contact Person: Mr.Craig Williams
Director,ATM Payment Center Africa
Telephone: +2347063480508
Email: mr.craigwilliamss@gmail.com

Make sure to reconfirm to him your details as your Full Name,Current Address, Direct Phone number and brief introduction of yourself so as to facilitate the immediate release of your ATM Card to you immediately. Please be aware that you are the only person left to receive your ATM Card out of the (5) five beneficiaries and for your confirmation go to FedEx Express Delivery Services website and you will see that other beneficiary have already received their ATM
Card that was sent to them through FedEx Express Delivery Services. http://www.fedex.com/Tracking; with Tracking Numbers: 871972637653 ,873238087330 ,873448022361

I stated the above for you to know that you are the only person left to receive your ATM Card.So contact Director, ATM Payment Center: Mr.Craig Williams and Email: mr.craigwilliamss@gmail.com , You have to stop any further communication with anybody or office.

Thanks for your co-operation.
Best regards,
Mr.Martin Kobler
Secretary-General’s
Special Representative

HEADER DETAILS:

Return-Path: <millionboy4u1@yahoo.com>
X-YahooFilteredBulk: 77.238.189.21
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: FbJ90YoWLDvSmhXjp0Oa48qN3lvFZVpz6LWhEVI0lrzkom6O TDTnQXU.G_GMSrccxHHY1ejj.SESv1v8N2NTKs9vVvbmgK9RjcBxOeI6J0t8 aFcoWtU3bXaWhb9bKxO.ubScPULvkM2G_KrJpMcplEpA_Dh0fGbIsFVJHqWh oNITDiYMgZnMECJ.0GM2Zk4_F2Bhlvzr5Kroz4NeAS2153QJY4deClfV1FmH xg4RnQdC_JU49UwVgVOPUQ2JJ477UNqRwfBNWwApyalVht8XyQlXsVFSs3V8 58EnPp9ZpHQNtmlwv97ZkPEfZVeMy.13U.i9QrRsAsqxPEB85xBHNX4vTz5a MB_b64_cSyRusUuXqBxxQnChoe6pMHspYqjICW6egTmY6EaqUnaLDsxvnTz5 absE65eW37MaRgbK1_.n0Nb5AK4edTZFHCS_LmS1ionKc_OwK2Sw22e8ygBe sQB8Ch_g4qobOwrI8AJ4jO36m6glZRLE9HLj3FNITUq8qpDgkmL3DnI9HTAB 37tsP_LFPBm9Vx0CeGXLLzAubLLxBCH63SYKuVfHR4nTiwFjFHE3Ga5iyogK kFfeL_hCpzk3libe9lRILHORBtGCgW9DplciP.Pm27Uz.yvUHWqRK7k6jmP_ wwB_lKMByld8WIB8lypNUE5x44VngmWznXbUEGP9bnKO4G672.bYKV0x9hvg xrS6sjwbixPDRN9ZrCEHyfaWdYecPAbdcO96vgtH9_rn5T8_suc49F_iVL6Y NE6WIsbb0UxwsQKpIIa_BKzGbmjFGfkCxE608Q1nKM6pNCQZTmdTLXsz7jkN g5YrHwOB0HX8_oXXYWqGEF9sl5AypyaNfb9qgcNYXpC51SCrPZN9wcvvRyF5 0.m1lVdkWzLWgFxPrid8pppXhWxmYFQ7zF3HrFG3Sl75EqVn7qiexyhzAdaL kkbyhO_Z1NZNSGF6Eyi_QcWyOaWSeenotIshJioehfjkzbRiFRSPq86DHvU9 TBfM1fGC3eJfyKrqYN8S6vrCqpVBPaCS6J5VdNBUflc1nCtlpkWc..46bBxx SsdZRcf02QpSHAnjQWNqjovQhkpUxAv1kx9.bffVwBnUaVgzt0ITar48BwdK rLNqfyBBPja2I3IidzUf.6TJVnem.1oou7WPZFacNEDqM0E0h1PoMN.9LZEX OOXfk9X_Q2w66EnnIB4v2wb65XecaTB1Bms69jz6c72LeTqZHgvnnCfIhRS6 mTvq65L9Z2M3fs_ZItUp0PGNG95b0RYclCzLJ466zlKOwyT4zqAwRY5eLo1M kqWGPsMx3Qi_2Z9xFxLhUqCYS2qkaTK6VsUd2Ss.KprfS477P7HqwsgNPKY_ qAggijUoGzAo4lw6Xm0O5.fPnRS6ZYHzEB_ewjeIVgJAoskG3VhJ_vXrU.hd HKXkjivzlP6NkjSX4QtmdTa7VOA6nhv2UXYCi4EEXTEl
X-Originating-IP: [77.238.189.21]
Authentication-Results: mta1066.mail.ac4.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm7.bullet.mail.ird.yahoo.com) (77.238.189.21) by mta1066.mail.ac4.yahoo.com with SMTP; Mon, 28 Jan 2013 13:08:51 -0800
Received: from [77.238.189.55] by nm7.bullet.mail.ird.yahoo.com with NNFMP; 28 Jan 2013 21:08:45 -0000
Received: from [212.82.108.249] by tm8.bullet.mail.ird.yahoo.com with NNFMP; 28 Jan 2013 21:08:44 -0000
Received: from [127.0.0.1] by omp1014.mail.ird.yahoo.com with NNFMP; 28 Jan 2013 21:08:44 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 938502.88402.bm@omp1014.mail.ird.yahoo.com
Received: (qmail 66440 invoked by uid 60001); 28 Jan 2013 21:08:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1359407324; bh=6A3jwoCaEsjg+FzQWOwdM+KYUakQf4ALvV3AdVEnhKI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=EpKrPDUrvcUSPD4d661hwk7rdbXSHwDAwz2Ns9mkvIUDgt7uYagV2Zd+m+p/O9CINGazq+ZejO4WHPU3mmACbGDZsJLOvq1/OeyrQZAWC82NtBF+NcJXzhXRzKF+/Pp2naeeKuHMXQ56SlTqvEPn7hFS8Aje6n51Odm7xIXy5TU=
Received: from [41.138.168.223] by web172301.mail.ir2.yahoo.com via HTTP; Mon, 28 Jan 2013 21:08:44 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1359407324.65692.YahooMailClassic@web172301.mail.ir2.yahoo.com>
Date: Mon, 28 Jan 2013 21:08:44 +0000 (GMT)
From: “Mr.Martin Kobler” <jjackhilson@gmail.com>
Reply-To: mr.craigwilliamss@gmail.com
Subject: IN REGARD TO YOUR ATM MASTER CREDIT CARD PACKAGE WITH FEDEX

Mr Martin Kobler jjackhilson@gmail.com REPLY_ADDRESS: mr.craigwilliamss@gmail.com RETURN_PATH: millionboy4u1@yahoo.com RECEIVED_IP: 41.138.168.223 IP_USED: 77.238.189.21 <> +234-7063480508

 
Leave a comment

Posted by on 01/30/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , ,

Suspicious Spam – Scrappers Attic

PHISHY EMAIL – I’VE RECEIVED SIMILAR EMAILS IN MY SPAM FILTER IN THE PAST. I’VE NEVER CLICKED ON ANY LINKS – POSSIBLE MALWARE OR VIRUS.

safe_or_not

Your friend : YOU’ve Been Selected (Free Private Training) has recommended this great product from Scrappers Attic

Hi …!

Your friend, : YOU’ve Been Selected (Free Private Training), thought that
you would be interested in Hooked on Fishing-Fishing Title accessory sheet
from Scrappers Attic.

: YOU’ve Been Selected (Free Private Training) sent a note saying:

Our computer has randomly selected 100 people to
qualify for exclusive access today.

The spots are limited so please click the link below to see if you qualified to access the product today, before everyone else.

Your special invitation is below…

ACCESS UNIQUE INVITATION: #G52BMT

==_ http://0t.se/dollarcode

PS : Remember positions are available on a strictly first come first serve basis.

Your link will only allow 1 person to join, so please
do not pass it on to others.

ACCESS UNIQUE INVITATION: #G52BMT (Link Copy To Browsers)

==_ http://0t.se/dollarcode

List Marketers,

Theresa M. Langford
864 Henry Ford Avenue
New York, NY 10016

—————————————————————————————-

To view the product, click on the link below or copy and paste the link into
your web browser:

http://scrappersattic.net/index.php?main_page=product_info&products_id=1457&zenid=3cgturf7hnc0ual026562f72q7

Regards,

Scrappers Attic
http://scrappersattic.net/

—–
IMPORTANT: For your protection and to prevent malicious use, all emails sent
via this web site are logged and the contents recorded and available to the
store owner. If you feel that you have received this email in error, please
send an email to thescrappersattic@yahoo.com

This email address was given to us by you or by one of our customers. If you
feel that you have received this email in error, please send an email to
thescrappersattic@yahoo.com
This email is sent in accordance with the US CAN-SPAM Law in effect
01/01/2004. Removal requests can be sent to this address and will be honored
and respected.

HEADER DETAILS:

Return-Path: <do_notreply@ymail.com>
X-YahooFilteredBulk: 72.47.233.67
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts)
X-YMailISG: CuuLYm0WLDsQh_nHM5WHCzP0f7_Mj.VKI6eWJQh1YZpCUKQU 5SAFelkhH2lHx1pB00UDVEzBtsRUb1DL7BGZS.tf8XZRPltztoODR1HG6Khm AngxUNqCJlprCdmpXYX2k0p2Adzyjy1ke0G_amoyMeBPxXqYu1IR9bX8cFTg tGGc9tWOjoGw7AC2c1yFfLhKkE4LaClAOIAAjyD1OdGFZBF5aijcKQ42ElZ8 1ZcbkbwGyMZXywW8H9iNxv7TpYD3PaaW14AUPewJE68buX52x7ithwTBuno7 RtAsYh7TPhgWn5hU3bmp90FuTTLu.vbdgRVYrR9ncpXyDIRJIa4Co6Qgj7E5 NnUH_kYirB.y8LQVuHNpGLhpsjL1KrSpWqqFTkRSDFinCTZPRT57U8fj1VJr eGICh2WdDqVJaqp1ZP08zMbE1CBMplm1eFPWu.jUj3xz1cJ2ABv6M3GO16fo NmqT5aldpdzAmp85IGyDC719ZSgCmIUfzjXzawGC_gq9qbucOZpceO6EA4v6 PaeTllQwCd2bfG48ZJb30JmOnsY9OS3pm9NsrJa8QeQVZOVnx_eCWkPUhKCk ZgCra_ORBqn7VLPbaigN8VwiL7NCL_vN2lrMMppQnUm9W7BudVdWfFcGKMnT ruo7Ydw_df_Y3tx.fFlPw_XmSY4PquJFRjGfcbYKLmbPWlTVwlHwsxelvt4m VwIj6PDnTzAb99xwbViUV4r7Ams8m3doHtcNy.gVriI359g0SxklbKQRCO9. 5eGQ3lyqIRNv2hspuoLcXbCdXCX9Npe54YeauRb7PRU5WB53_VoIt6gZowiC e9WYWlo_772FESIc7Qoz.ULWKgyPv7VtlhhECqPY9Ngb_5hzW9RzCltYTuD7 fW8VOTMwdHhjCgsfeAN2Q0l1uzOr54dwXuV9H3PXOl9b_eKvQBO7.SZV9z2v aBHDR8g.ZjPVjkP9Th31a1GAiYmdfoFGqV7gg_DiUIHM.W7kHuMgg34by9Mj SmxMCPpqeFO_vBLgFOuj8zz6SyeDq0R3AGsFC34HiqLP2q8_klenAY74FsjA PvcwOzipFKj9SQyRpoVTPUa26rtjOrfEewxTxX8bsQHBU5MRFux2lYgKm.bf fOaiyW0tqabfep43pgteG17ZDrurUy7tfdCwI.z6_Aq1Rl_Q.Q3zc8xrgX3D S5IOF2cwbfm5ziWlB1PtV3tZtSUzDzUHOniWf72KwTmkJOEuAkkzDtihfkoX DEShz3G_XZ1UdnP9xNOsYUelyl.fo4JMGGlwm8heS89x_Fk8CuLGFJK.2yHE UaarVQ–
X-Originating-IP: [72.47.233.67]
Received: from 127.0.0.1 (EHLO ft11i.com) (72.47.233.67) by mta1163.mail.bf1.yahoo.com with SMTP; Wed, 30 Jan 2013 03:41:38 -0800
Subject: Your friend : YOU’ve Been Selected (Free Private Training) has recommended this great product from Scrappers Attic
From: “: YOU’ve Been Selected \(Free Private Training\)” <do_notreply@ymail.com>
Reply-to: “: YOU’ve Been Selected \(Free Private Training\)” <do_notreply@ymail.com>
Message-ID: <e9094b7d93592d7eebdbd819ec05e1b3@scrappersattic.net>

72.47.233.67 do_notreply@ymail.com thescrappersattic@yahoo.com RECEIVED_IP: 72.47.233.67

 
2 Comments

Posted by on 01/30/2013 in Uncategorized

 

Tags: , , , , , , , ,

“Mrs.Roselin Moore”

WARNING – FRAUD – INHERITANCE – CHARITY SCAM – SCAMMER

NOTE: This scammer along with other scammers will also send scams in the form of an attached file. It makes it more difficult to post, esp because I do not ever click on anything from scammers. However, I’ve had this scammer email me before under more then one email address and It’s always the same scam, different tune. Names of her dead husband have changed as well. So beware!

scams_target_you_scammer419

Message contains attachments1 File (12KB)
My Dear Friend.docx

I AM MRS.ROSELIN MOORE,PLEASE READ THE ATTACHED FOR MORE DETAILS.

HEADER DETAILS:

Return-Path: <mrs.roselinmoore365@gmail.com>
X-YahooFilteredBulk: 66.94.236.26
Received-SPF: neutral (66.94.236.26 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: VZMHXjkWLDtIyu7acPcagRCCSrO1.W8T.jswFTmLP4ENUw4B dX36i1zbCN5CWQ4fGm6B.K0Agw3Rrv2XP3OdsQ3.jA9Iv_62_dXBVQexRuVB PHmAiEwlrgqLBlrEP6kcn35V5xtqRce1DDAPrAUziBrr4mDLVtdzWOPGg9ip oxu1eU7aGo8oHhS89YF5f68BkOA.MnwPQz8bAVpLlPGNJK3H7.DpVVW5scdb McHJPiuIyv12.QDn1dNAKinsSpAa1Hozk0tV.uV2uGZB_y6oiOeWmOcuEXnW NeKBhUb1xUzzVCT7zmXX9Y8M8HncSkgxyx56eZJCVCiaMcbpSSRX1waopZ97 QAl_AFCDCsK5hMt.FJlqIkg4eyexwDICOI60mkAzR3dfYEpDkfe00sAMywD5 CDZfBa3SIYteEYObkVEYjT1KBChvWannt7_.6UZIOAMVEERu_2m0O1hWJ3Ot TVtTH0_wpyyehThXMe1ghaR3T6SnE9xY6_ZgpgM9j.MXp2lJ874aTt2tIinQ XXmIspPsEv5ZByCjbQvC4kwJdCeZgfv.STpiiigffHNq3PkO0mmzuCFnzIUS L8qmwcD8Sfx4LkRjrIRYhROixi0687adDqP1OgGijO98I87I4V__W49XrWGU dR3h7bAPsf1NXckaztZ0LSFmOWIPSRi2ARIejAluShZ_lKkuPzyRvrWqFqrx lIgsAHUjzspInEGIMLWZe1Un9TAGKbvlLZJIEebsoaPDcZRhGmGTTMMJWoqZ IO5uWVH8fSrs.DquFgEUF1TEzQq0bVeq8wBOgGFT6p.J_zn0eRC_1KfKz0UV 935fFYXgNTFKf6aefY6L0t15urrUIVumTTe1SUkFxGyrqvH2IsbroF_v9.48 Zdqc4I9y6b4PBE_594k3GZ5FxW6NoioAEdqCxT2A2KD2nD0GmWiyGbK8hzXP zvkqprdXud1brup1fPXg7H6tdvukcdRx9u6_Bm0L7bE34rjN9z4XKjsZQRIc cNtDxw.vm5_e4F3DWPxbgntYJSv.hwR1ak2UZYOHN0.XtslOEb.xrb7uVBUG 55dmI_LGYUymGf9gvoPXTHhrSxauTUmQrgyaOn2NdPKSu3aCivNfZneCgMAW FYNgOQ8kaH_5BGjkaCjxmo1aP7pEKFtoO2joE24hUEOJnRImMnbvXQ–
X-Originating-IP: [66.94.236.26]
Authentication-Results: mta1053.mail.ac4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm1.access.bullet.mail.mud.yahoo.com) (66.94.236.26) by mta1053.mail.ac4.yahoo.com with SMTP; Wed, 30 Jan 2013 07:31:48 +0000
Received: from [66.94.237.195] by nm19.access.bullet.mail.mud.yahoo.com with NNFMP; 30 Jan 2013 07:30:17 -0000
Received: from [66.94.237.97] by tm6.access.bullet.mail.mud.yahoo.com with NNFMP; 30 Jan 2013 07:30:17 -0000
Received: from [127.0.0.1] by omp1002.access.mail.mud.yahoo.com with NNFMP; 30 Jan 2013 07:30:17 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 394975.10750.bm@omp1002.access.mail.mud.yahoo.com
Received: from [63.141.199.185] by web5702.biz.mail.ne1.yahoo.com via HTTP; Tue, 29 Jan 2013 23:30:14 PST
X-Mailer: YahooMailRC/718 YahooMailWebService/0.8.131.499
Message-ID: <1359531014.46116.YahooMailRC@web5702.biz.mail.ne1.yahoo.com>
From: “Mrs.Roselin Moore” <mrs.roselinmoore365@gmail.com>
Reply-To: “Mrs.Roselin Moore” <mrs.roselinmoore09@gmail.com>

Mrs Roselin Moore mrs.roselinmoore365@gmail.com REPLY_ADDRESS: mrs.roselinmoore09@gmail.com RECEIVED_IP: 63.141.199.185 IP_USED: 66.94.236.26

 
 

Tags: , , , , , , , ,

“VONDA MRS ZINOVIA”

BUSINESS PROPOSAL SCAM – NIGERIAN SCAMMER

ATTENTION: Vonda Zinovia has sent me multiple scams in the passed, under different email and IP addresses. She has also changed her name around and put the MRS in the middle in an attempt to not show up on the first few pages of search results when a potential victim looks her up. Click here for additional emails sent to me by Vonda Zinovia

Dear Kenneth,

Good day.You said I should give you some time to finish your work before we start with my business proposal and I think I have given you alot of time,so please get back to me to enable us proceed,and if you are no longer interested in doing business with me,please kindly let me know so I can look for someone else.

I wait to hear from you.
God bless

Regards,

Mrs Zinovia Vonda.

NOTE: I NEVER TOLD THIS SCAMMER TO ‘GIVE ME SOME TIME’ — I SAID I’LL HAVE MY LAWYER TALK TO HIS LAWYER, LOL, HE THEN DISAPPEARED AND CAME BACK THINKING MAYBE HE COULD TRY AGAIN.

HEADER DETAILS:

Return-Path: <mrszinoviavonda557@yahoo.com.hk>
X-YahooFilteredBulk: 106.10.148.181
X-YMailISG: 3KvslCEWLDumoU1jBBZu6mLdbU_ybScClOtsyiUO18CwWty2 J5O9wfDaSxeVneQYLhuj5M8oolALV70xw5zOJlrzee2IoupU6bQH8MRasgXx gqPYRnZSVGmbi0vPKzroW9Xt_tCM2Napz0w_3YYILRZws2ceklNqSVuBaQh9 8CzvoJlncIlpnDZk1p24MvzW_JRCUJsJThpTUeQoR3hMHARC.cMfeYYx7oc4 Qm5NsFCOTM_9W9HgeF_atz8MoeBZ4zNL05Tm8TmOiI8H5JbFSl3NSlcm1FkX RFyHpmNWzqiMmFXWHM4rOr8xQqkeJx8xLsZ04fj5dT8RL37l79vRgMOit07O afKNdSN3A1yj7QXAEokCKVYse.ijZHmn8itv8s_c.rqbS00781e2xAKoHGn4 X3iJxnSOy3M3NHg7yzS9_BHqAp0UsFQzUg0DHVrA94Mn0PwDOwJ8OokN0Z9v muXPYrD36o7L3w8Rcf2c8MqdJ9g9jOfYggF2Map.VLbcQTCv1ZGi0uRHkw7A ZxpNmc5kLNv2TsfyOjfx2BujvISwl9Qa5e8VKOgxnLqZvIAQ7Exuul.1ilnb tJIpOIN7NlCQAAhb7AlYYPPXbVdTRsL5NwjjgAzZGsGdCFYiTkugFObM_d5d 1RxMYVMQCO7xmYN5p8cRkdw5BQFVLnYS8UN9KvG_CwoaHRDPSM1ahKGuRv4T suT0XxcBEtmCn2PGwwiv35kFQ2J5_YTj37Wrixt27yrPaYPf8gAzWo.jSR4T DZCU2WpHBfUDaEdgmFSjwMGv0uEy5z0CM.zy.2UsNrLV0NqxCpua6v6bGFfS LuHNV2R7ixYssYMbXgk19hdALrx.8zF4b9K12aInm3fipebv.YqhH_BW619R hvW56PUYrJis8Ou14DXsKo2hpAcuvV9_2F_kkYOL2S7VzzDl.HUMv26sZekH zRH2Os4RfXgQE0RBqOtro.d7xGL6ijk_3oK2q6CR5_bj6KPQcLF4fgbcmUaE cp_cWXqAunRcUHQxAmbtzT5RPL7I1OaGoPEIWbhdnk3Vt6rZFwAxdSqpnDY3 NyeaVcPFWf1ykLlUbRU0MViBGiL6MxSvaD1ax8Cn5pZrCr_JUUgQu1F8DzWl s7vVr0uIev5Pzoh712KjE9ChvlxjEEHup7yMNDbRgEeTg0QsIVepK8jBb9.3 TTTL0rwGnPvj5VosDCCTUO131fmJIUfsVB5UuUaWC0ReWUBfd4XMv02MSWK. i28uqx2fp4cHsbt0cBGxNbUxvb2529FnOCWiwfR2Mgd.rGCPh8GghKPyMPDq MWS2xBfGvYzq9p7S3VXnHw9YI_2SMXxzulibCPKJyeCSco5equw595g9bhyd B61YNHnFvnoA0uSmtU5ol6S_eqRHRL4XpwWkNxRz9dYU8D0QcD23UVI2iocz Q8JrVi._0RQQNU69ojQ4ELEZXeHqvDIE42Mkt7wCu9Nm.H89ZzzDIdCZtyDJ VtXUhlOMgPreEQ2XY.Vt7tlWonejMGHsxPxK8.70vID8
X-Originating-IP: [106.10.148.181]
Received: from 127.0.0.1 (EHLO nm7-vm6.bullet.mail.sg3.yahoo.com) (106.10.148.181) by mta1108.mail.gq1.yahoo.com with SMTP; Wed, 16 Jan 2013 04:36:10 -0800
Received: from [106.10.166.113] by nm7.bullet.mail.sg3.yahoo.com with NNFMP; 16 Jan 2013 12:36:05 -0000
Received: from [106.10.150.24] by tm2.bullet.mail.sg3.yahoo.com with NNFMP; 16 Jan 2013 12:36:05 -0000
Received: from [127.0.0.1] by omp1025.mail.sg3.yahoo.com with NNFMP; 16 Jan 2013 12:36:05 -0000
X-Yahoo-Newman-Id: 540893.84637.bm@omp1025.mail.sg3.yahoo.com
bh=whkkNpIHTRD8GwQKMfvYoCgZ3S/+9GNtvNDCD06UyPI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=us7ys85a88SQtTeTE6mZSclZkfg7Z3tvDY+WrpGPA6ljeTBkScYXB0w1EirlWNiLlzq9ookLQJIEMmNlp4l/YHf6gCOQyp/5jGQBuvZ8dfZ9cBC0onLOUBQg3PXHu3PF1LbeICF5QXFZHsG6ep9HDwQQehKArCn99MWpCaiUmuI=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.hk; h=X-YMail-OSG:Received:X-
Received: from [41.58.68.95] by web194601.mail.sg3.yahoo.com via HTTP; Wed, 16 Jan 2013 20:36:04 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358339764.67157.YahooMailClassic@web194601.mail.sg3.yahoo.com>
From: VONDA MRS ZINOVIA <mrszinoviavonda557@yahoo.com.hk>
Subject: BE MY BUSINESS PARTNER

VONDA MRS ZINOVIA mrszinoviavonda557@yahoo.com.hk RETURN-ADDRESS: mrszinoviavonda557@yahoo.com.hk IP_USED: 106.10.148.181 RECEIVED_IP: 41.58.68.95

 
 

Tags: , , , , , , , , ,

“BARRISTER MARK DANIEL”

INHERITANCE SCAM – PROPOSAL – NIGERIAN SCAMMER

NOTE: This scammer, who has sent me previous spam under different IP and email addresses, has sent this email in the form of an attached file that I refuse to click on. This is a proposal that the scammer wants me to fall for. Theres no money, they want your money and will lie, cheat and steal to get it.

Message contains attachments1 File (27KB)
GREAT DEAL THANK YOU!!!.doc

HEADER DETAILS:

Return-Path: <mark2020daniel_22@live.com>
X-YahooFilteredBulk: 66.94.237.154
Received-SPF: softfail (transitioning domain of live.com does not designate 66.94.237.154 as permitted sender)
X-YMailISG: frRkp6IWLDspe8yywm.9Z9oJotSLufznle0xkCQtxCfDVOBk P13ccLuVLt4XHyfiKxYF_QqNhrfmx1sg8MZI9.i0niQ.qVgmq7GXq57wOWev QiTRGMGz0cfpw2iKEgdvgruLvgJZuoQXQcK1AlLoYyLdloEPRXHbuRJcvPe_ fkcwqd5NPE5j_NCQOrkPmtT.CSxhSHm7OWgtQW2Mew0y.HiqTQNULKnS2pP8 KsD.SCAl.5.rjW4TymHOrQ5GbNcRvV0zydbE0astO5mStVwUJwAeRIlgjNHG tGxWOq6sxQ3oMJxvWzHGaMNZydLmrqlE9GfGfa4M0g.ImFTgvCnwQeEh44O1 7_otXRrnTaOxun8R5TdDT3Fla4T0czavNG56SMA_M07FOi0.rynqEz2P0QM2 B4vXLCv8uHRCMHGyr21_g9iVkjXqsDe6CK53Ig.rCwm54reYCBRRMRNwp_q1 I9XxYZSVuhJ03MhwH1LFjcz0ot29CWDfBpc93pxbAlwon7bg16oHh7le6PtQ TUgwlkERZMwvP9.mPQU7FoJYQhPbYDMZ3K5oIO8CdFyqCIRd_HNgfQnS_glY YVVNwfglNVItO9T5VVwW_s5lZ0fcE14NdJIKZex7F67Hwu46e0tTKGTqP6L3 Bx7AgKIgvBpsJFlT3e7ezA6SSutto7SyTnYrym950m6sNiq8kE_wXySibcCV vuheZ0nVoYpcJeVPSIt7fBQI3bz80N06kxJUsFtEcs.iW1DgusOzHyipgQp5 _6C9L8sN3OPOaHmBjnnc1hBupxu4jzthUtoSosCLc1X0D9acxxmoWO3w2Sy1 JlLLlyST3ML57pdE5h2FJQfuYK4aW51j6rijoSNqSfiKZQeIBD4ssr_hHmra 2j_CcjvxtKQo0LXw_cYULr3ciGX50kJU3wj.pe_LHlVTCP6pabqQKAr7ACkM aLV3KKt00XRkH5wxES1BGnB8C92GE1BLj2soEY_9gsicoGPYgIEXa5iJ5Lta WIjeF5cYakIGjeLmYSS9_WTWqhyMil6f87HjCJkz1JTdWyGG3johVD.q3qA8 5BNupSKMe4DWlitLpQi8jRClZSPCq4NY7uQ-
X-Originating-IP: [66.94.237.154]
Authentication-Results: mta1006.mail.gq1.yahoo.com from=live.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm4-vm1.access.bullet.mail.mud.yahoo.com) (66.94.237.154) by mta1006.mail.gq1.yahoo.com with SMTP; Tue, 29 Jan 2013 01:04:15 -0800
Received: from [66.94.237.126] by nm4.access.bullet.mail.mud.yahoo.com with NNFMP; 29 Jan 2013 09:04:14 -0000
Received: from [66.94.237.113] by tm1.access.bullet.mail.mud.yahoo.com with NNFMP; 29 Jan 2013 09:04:14 -0000
Received: from [127.0.0.1] by omp1018.access.mail.mud.yahoo.com with NNFMP; 29 Jan 2013 09:04:14 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 624170.70042.bm@omp1018.access.mail.mud.yahoo.com
Received: (qmail 68119 invoked by uid 60001); 29 Jan 2013 09:04:12 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1359450252; bh=CaQvdWWxbiQ7p7MF0rP5A47P4pcOhZa/zVsLrYH4gbY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=WF9YaF88Dexk0SkGG80n11PWNWn2WG2IcmV8aB19nYg+jrGgJFN45FIZkj2AmMVHIrQoeLpqG6biZwff4T5CuLRc3FMt+6kVx225LfjaTTtgUcJJAK5jxcUGm6cawmhb8Ir1tIKulKwybshZxaO4o1qZMvwUuJl6NGZbbKNQOi4=
X-YMail-OSG: wKEjCoAVM1lgENvi5E6d76T1PncMMXvfp7Llq9NHAp8mPMK LT.Q5PuDJlmQ2x9QuXfwEy95AF1YorgnRYEOfdIjbVsMGQ4aWQ7WhkdK29uZ gafBOl_oB2xe9J6Rv_duHiXAppeFUr18YB7CnYP7tZDy.qOEo3M1Oq4t_PLD IUlEbAATs.n3_XA8EhOmIBC4AH98QHqkKYyjr8PbKhDeC40JTaCObmQLPeRo wMA7E8832Jc8T0rS_m9cVYyq7hO7.Vto21i_uoxOhaIDPyCKLLTbuucAh9hc WDzxAIHDiZs14Mg.WFibFlO5n3YM06nGuumoj8EIwMcxVXMPS5IJq8Ws2Hlg r4TWvO9kV0rf._swW4l7OpDetvekH9pVw.gzU3GntDvcBOlqjyV.KKPJqCOs LHsH.8Byo2F4.BAoSWl1hPW5OWpeNRZmcZHy.i5E8Hy96KT_glDLJGIntdZL okuAisL9StG3Z9FF_xIqgrquLm2ED.L.2A5dOaYEYXDoVn8noyYDS59Dl1AS 7Ww–
Received: from [204.93.60.106] by web5707.biz.mail.ne1.yahoo.com via HTTP; Tue, 29 Jan 2013 01:04:12 PST
X-Mailer: YahooMailRC/718 YahooMailWebService/0.8.131.499
Message-ID: <1359450252.48493.YahooMailRC@web5707.biz.mail.ne1.yahoo.com>
From: BARRISTER MARK DANIEL <mark2020daniel_22@live.com>
Reply-To: BARRISTER MARK DANIEL <bar_mark333daniel@live.com>
Subject: GREAT DEAL THE SUM OF $23.5 MILLION THANK YOU!!!

FROM: BARRISTER MARK DANIEL mark2020daniel_22@live.com REPLY_ADDRESS: bar_mark333daniel@live.com RETURN_PATH: mark2020daniel_22@live.com IP_USED: 66.94.237.154 RECEIVED_IP: 204.93.60.106

 
Leave a comment

Posted by on 01/30/2013 in Inheritance Scam

 

Tags: , , , , , , , , , ,

“David Smith Esq”

NIGERIAN SCAM – ADVANCE FEE FRAUD

ATTENTION: This scammer sent the scam in a form of a file. However, after investigating a little, I found out that this scammer is also Pere Hart <> Paul Kunet — I have posted dozens of emails from this fraudster alone. Each email contained different IP addresses, email addresses, fake agent names, fake customer care officers, etc. — Be careful, this Nigerian scammer is very persistent.

stop_scams

Return-Path: <olamido@aol.com>

X-YahooFilteredBulk: 98.138.90.78
Received-SPF: neutral (98.138.90.78 is neither permitted nor denied by domain of aol.com)
X-YMailISG: e8MvdNMWLDv1UmRT2_yweytc9ZTc_ZwqDMeIu2NLuvWpaL77 IXvbEWYBku_Fw_FIM7jarAKbSJoLgONZnfZWULAwNPpTl7mclzYJocNVuTDv QeEiLt309pJerpStd3BuurXMwfEZFWgjSRiLKqEuYco2u4WYAppkLAvZQU8P oKBZKhdpP5iTX36Ml3b1HQxniq1rIstqovR7THaYb2wOO8G72FQPyg6t9X34 JW2nSLH2qa5QUcyBDqlaZjcvr7Z8KW9BtxIKiI9fbt0zpJnCIz0huvfLT92Q GaueuzIJzXfURnOiLlryp49g5ZRGbTBDwuDtZ4X7mycmBCEBUDiZapCeOKKY OevtMSmjP8.RHYivp17LtvJx9CBtbSh6O2_xOYGPf3yiBf7jBNd4Lfww0kwb QR1VY2RtnP4k30iGppPCfrNxWDgwJ9jh.G1CPf99JXmUlCP_vI5mHldv0.FW cWfDQH4j00WrIHnWTeZMMLczGStYgeog4.T3UDBhApRONqd2hbjXbLNKco3d x_77MAXQ07vdrA47Yo97r4MyDdiWJV_q8LrTz3xgoBeNpt4fof3H5mrW7kdS tcpAI9nBa2HpBhMzLSeDRzRI5NVviYTcPG0wMA03L6.vkeserIhBCz7_hbH5 Guol_ZlsZAdFtBu3.Zs_vuA7SgGEBSZyO4ydtTAJ63firC9ocWPciH5iCYnO 7dj4kxFk8bSdlPTIJMF8nSQT8yF2qkLU9pttEFHPuA62Vv51Lbrjh6igEC_f Y0WQs4r4ICid.W1KkMChbwrsU.BwHw6Ss3vDtra.hyNLvWYdabGc4iKGRfGm BreLJR6dZ7Py2MtcKjUaRHbgFVSBx7VCMENyylhlMy9WKnPAFiikXbFh6EE7 KTmVRhV7YpOweuf2vvzEo0qXf52CScMVQRRydZfu0KgxKugfSyVSQCZXq.a2 m0c9QwPL2C2q0BlIVtuEXhmOMmzAEdHrO26wEsR0gata3yv8SYHn4Jf0oaKj YbnQyQWg7nxxRuziWpF7M0f4SdSwOaFGaolejCWtx76vb8vEFsGQsqJNSXbg vfD7C3CT47GGi.Be4Whef2cPtwCdQqbK0lrI.UD2e24vuv3lyp1iAJWgGiWd AhHm2yRofrXOAv2iE3DzAx4Mi1uP3Cir1SpE0roN6QpR2jLvts1LvS1r5Qtu cfyFky2THJ8CX7VpywFHK33PVFmF8DOtc_E-
X-Originating-IP: [98.138.90.78]
Authentication-Results: mta1343.mail.bf1.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=aol.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ne1.yahoo.com) (98.138.90.78) by mta1343.mail.bf1.yahoo.com with SMTP; Fri, 12 Oct 2012 04:18:55 -0700
Received: from [98.138.90.52] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 12 Oct 2012 11:18:53 -0000
Received: from [98.138.226.129] by tm5.bullet.mail.ne1.yahoo.com with NNFMP; 12 Oct 2012 11:18:53 -0000
Received: from [127.0.0.1] by smtp216.mail.ne1.yahoo.com with NNFMP; 12 Oct 2012 11:18:53 -0000
X-Yahoo-Newman-Id: 119889.56474.bm@smtp216.mail.ne1.yahoo.com
Message-ID: <119889.56474.bm@smtp216.mail.ne1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: GvHM4Z4VM1mrbNwvke0jp863UTCgDCY1wHCSXwd85GN_lOE .QZV7mw5IIG6L6_reF51VKCmxNWpmuPoT6ao46AkPunGEX9v3i04.4IMBYMA K46HpTI8XV28lObvztL8r__FXT1bJCYaGNIH3nB84VporEjKTPkgt7.SmRRA asMIW8rHwpeqs.f40J4.eXAhBVS5btiQz4X5YL7Qjx4K2zj1yultECeGC.7F fjdl0ihjhQPJjeG9Q.w5Y9fs3V6Xi4wHWxauBTt7KCNmxQGvYmjBcsr3hCsD xdslhXqOAx7c6vXleH23zT9aIP6qr0TCIEVOQomGL2rh3LoXKfqTVL6HpPuw 2DYZIHcSgNZJCgFmxZ0KLhPmnFnbIPwdD8.eNYoAKU8O_wyRuMtoruUBJ.oC BrxIcN.hW3HQgfJ530zSd7DVUzS5PjUFzTV4Eki2dNiGSpBtq8bYcLbQojah ssVFU1W20Sj86IHdr32XHGaHIoSZ6jk4ndJVCq_qI9l6DpSlvWA–
X-Yahoo-SMTP: ELlqi7WswBBJ3HhQsmFiH_77CcMUU32BiwPxZDD_RvxPEYhI
Received: from User (olamido@41.58.27.102 with login) by smtp216.mail.ne1.yahoo.com with SMTP; 12 Oct 2012 04:18:53 -0700 PDT
Reply-To: <davidsmith5421@gmail.com>
From: “David Smith Esq”<olamido@aol.com>
Subject: Read Attache File Of David Smith Esq.txt

David Smith Esq olamido@aol.com REPLY-ADDRESS: davidsmith5421@gmail.com RETURN-ADDRESS: olamido@aol.com

IP_USED: 98.138.90.78 RECEIVED_IP: 41.58.27.102 LOCATION: NIGERIA

 
Leave a comment

Posted by on 01/30/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , ,

 
%d bloggers like this: