RSS

Search results for ‘pere hart’

“Dr.Pere Hart”

WARNING: NIGERIAN SCAMMER – LOTTERY SCAM – ADVANCE FEE FRAUD

This Nigerian scammer has sent multiple emails which have all ended in my spam filter. I’ve posted many on Scammer419 if you would like to view please click: Pere Hart Lottery Scam

SUBJECT: Open The Attached File From Dr.Pere Hart Deputy Governor CBN .

EMAIL: An attached file that said Central Bank of Nigeria txt 
NOTE: Pere Hart has sent me numerous spam with alot of the same scams but also alot of different scams. Each email is ALWAYS under different email addresses and IP addressess.

HEADER:

Return-Path: <dr.perehartoffice@gmail.com>
X-YahooFilteredBulk: 77.238.189.207
Received-SPF: neutral (77.238.189.207 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: aFvgY08WLDsdt5GEWB08iqN25WjppamFxrHT0t6_0N2fkOBF FzidCIQIlbcPvcyAoh0AWBdtiRPiNMrcplz6CR1xvf0tawY7M_z3kfTPpt_8 Rnz7K3MFuq2x1513KdvJCE7VrrVu4jzXzkJEnSBPbEcRVQrjsskSQzuk4xpa 3Tqr4rGJDM9H03XoyCBuOPFUHEhTc8aaRckhUnlUQjtFCLZ2qkuU34Whp0_w tDbnpSmCf8ildUEOOoqomaJSQMyaewKE2dQIHrxtOQDSj7OOlbyZ3f2jWzyj z3EqhmRPl6uNgLfQ41waAc_9SNR0cRUiul06bobLUz2z4.ikD7GF0wR4vk3M aIY96_Ff0MOJPTdBQiyWQe.j8aVPW1kIABfUw9lqrr7B4qLG66QuDM8tOk0c WBWFD.TGelcRBQaKhvrZW5Xlo_0sGSJBWID7WsM3GKjSviKtuuuC7.FJEp4y TH1qObGdqeBqMki8m48h4Ab_Q_kzvnR4NaMK_QEQktrZCu0Z9nOz3qdxu8rr HTHza7FmLmbawWaOUpHGSb18aGC71mXZLHzhmVjl3nYUMCK99mi4P.NgPYkB rgNek.fUdQdBdNiLkc62oRfadQdtmaoi2tZG9ERIZnpTCQIYai71_JQSztz5 KkOUBfhYnjxrdKg.Pw.m8i652qSF2lAjAueIlsqboml2Mi4APzEeosB_Y5eZ oZNZppZ7njL5Y2CtfnNj7bC3WlEq9wOXZaC1PBAtqpTMdfkGpHieE.X_MC5y 0g9ObiHaxveGvb1WMGs6zkv3PburNhdxxg7fGXHu5DMWhVwv1ymrreIFU_qz HOkqvtQGNAX5vE1F49lARyzJoc8NXgk7i1CQzjfabioalciPRsLBF3fzFGUE DsaNqXkuw7RgahBRUqMHducqbGKl2WLdvr9nJGe8ZaxetJaBLtAgK0pGZwMS 3Bhb14Uo8a_q3YYdz_cIonE5F.zTbYV6hoE5kC4IYa6h0umQJ_SrkUg.YTxw ss94Tb6hXsFQB05hSugL6uelLhMsaalKka0rN5syvNMxuv_fwsZ1W0ebqz0Q kZcCZ.nHt4O4A0_coPlS0RAB3TMB_dTwETt4qDuXvbxGwa6JnUpw1Ujm3FtX mQk5M68mDH4ol4L_zxTM0PCe2o_4mrGb6yvZd4.meO4EscwQDbQR.ddCOan7 cSrYWOW36HFfEEyzKKmOSlZYHs5FKx0DpQ–
X-Originating-IP: [77.238.189.207]
Authentication-Results: mta1308.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm5-vm0.bullet.mail.ird.yahoo.com) (77.238.189.207) by mta1308.mail.bf1.yahoo.com with SMTP; Wed, 17 Oct 2012 09:51:58 -0700
Received: from [77.238.189.230] by nm5.bullet.mail.ird.yahoo.com with NNFMP; 17 Oct 2012 16:51:55 -0000
Received: from [217.146.188.160] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 17 Oct 2012 16:51:55 -0000
Received: from [127.0.0.1] by smtp128.mail.ird.yahoo.com with NNFMP; 17 Oct 2012 16:51:55 -0000
X-Yahoo-Newman-Id: 51876.17474.bm@smtp128.mail.ird.yahoo.com
Message-ID: <51876.17474.bm@smtp128.mail.ird.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: qwmBW6kVM1nms64QgbWA5bp2sqd6.mO.E2LD93nho6QZV5b 7PkJoQhPYQ9IzelN_ePvcEmyy2ky0yYMt4XNOXvDOv6kfTmDyp7xzMxgk63u 15wu8pSGklKRYSQfsoFfSII_hGfIW2lxSkdXqOXoNT9LRd8p.ZorUY4b4rlO gPnLLwlUP5DsHwaSJbgHk8EnOy9QtzLibG0iwdnB7.wbq0i2FRouCYeG18F6 QIG.NVESEK5UImRV7LeUJEuFPR0wrLK061AA0WiUI_8FcH4fpawrYlbROxPy .10YEtwJdEP_47_eeFa7sgYhCTZP3iMVandZisYDOWPev5H8lSzUO1uyCAj3 gBZnS_LyNy8cJMPuMqXtPQ3A_OoW13nHW9NW5_rNY99sC4.qyVnr.tkc4KXd zKlpU3yY42WL8Go9pbOvvhifnx5zJP9IVbdZ6lsh2QlSWZgHRrI7M1BqczRF CyHbYtvlaZiIuUuab2kcB9_odigpUPutpAT1UNgE-
X-Yahoo-SMTP: 3PKY2KeswBCOaex1k5NL_UpUxzw.w_JM.rvihsImDOhymg–
Received: from User (dr.perehartoffice@125.88.125.201 with login) by smtp128.mail.ird.yahoo.com with SMTP; 17 Oct 2012 09:51:54 -0700 PDT
Reply-To: <dr.perehart@yahoo.com.ph>
From: “Dr.Pere Hart”<dr.perehartoffice@gmail.com> Add sender to Contacts
Subject: Open The Attached File From Dr.Pere Hart Deputy Governor CBN.
Date: Wed, 17 Oct 2012 17:51:40 +0100

FROM: Dr Pere Hart dr.perehartoffice@gmail.com REPLY-TO: <dr.perehart@yahoo.com.ph> RETURN-PATH: <drperehartoffice@gmail.com>

RECEIVED-IP: 125.88.125.201 ORIGINATING-IP: 77.238.189.207

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

Dr.Pere Hart officeonline82@yahoo.com dr.pereh@yahoo.com

Lottery Scam (Central Bank Of Nigeria) ↔ Nigerian (419) Scammer

Name: Pere Hart

Email-Address: officeonline82@yahoo.com Reply-To-EmailAddress: dr.pereh@yahoo.com (drpereh) 

Subject line: Hello Dear

Email: Hello Dear,

I wish to inform you that all matters relating to the release of your payment is now under my control and supervision. I am the deputy governor CBN.I was mandated by the President Federal Republic in conjunction with the Federal Executive Council (FEC), the Senate Committee on Foreign Debts Reconciliation and Implementation Panel on Contract/inheritance/compensation funds to complete the entire unpaid Contract/inheritance/lottery fund.
This development has become necessary due to the activities of unpatriotic government/CBN officials and impostors who keep on frustrating every benefiry’s effort to settle our clients by making requests for unauthorized fees and levies from them. That we have resolved to put a stop to in the current payment schedule to ensure total transparency and orderliness in the release of all pending payment. We sincerely apologize for any delay you might have encountered in the past but be rest assured your payment is now 100% Guaranteed.
To this effect, you are required as a matter of urgency to reconfirm your information including your name, phone number and your address for verification and immediate release of your payment within 24 hours. On a progressive note, the sum of US$10.7 Million (Ten MILLION, SEVEN HUNDRED THOUSAND UNITED STATES DOLLARS) has been approved for you. Kindly choose from these three modes of payment (wire transfer, diplomatic cash payment and ATM card) for the release of your fund to you.

Kindly get back to me ASAP.

Best Regards,
Dr.Pere Hart
Deputy Governor
Central Bank of Nigeria

Return-Path: <officeonline82@yahoo.com>
X-YahooFilteredBulk: 72.51.25.85
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: lulAo4gWLDs9SSEM7lCzQwzbp34RZEjmH2pULm4LNNKVcbym VovXEgWn34Pbiwbi92_xnQ4PmMgqkDe7N5o8_DYqEFFBNyZenOxpUEYQSEST ofGfirqofKE7p3cAPaF.THmlV7JF2Ye5k_jDq4X6VcnkI6GLs._QdayLdZDk j4Rq1M97hYtWGK6ouZmfKgQNZPF_vYzD1bdq1vWMYuQ3ZxIC8liyUMiSFH7s eepp0QXe50e9H8syB4fD6KOHTfWo0uwabBocBE5k0xrFG8SBd1SRfEdjDyOz LjzgImDo.NjgQE_Ib_RScC2m5duMFBSwRHJqsNryDExJO5YVzszGDey4lP7T c24FO5D6rB1sDSPSB2Oxf8e7Vb2Xa6VXAKEES1mM5PolzMbEvSMASso4dxxk g.sILhJRheHVnIgaS.rMXdngtRtPw7ipSuQgD3hg6ngCtpVNmbt71U6NMV0s 2NglUyDtfsT9ItHgrzbPewuqCuCXvFs_aXTdgaMDQ2ddPRukxlNzjAVnARrP 02ntXZiRQNYmrDjQlvYlEaAUo29tzo5W_4Lo6WCQFQP.JdKJdiVO6RMFCToL alelKfcdh4mxCecayl9Zag6tDypVUj6D5DxGJU8lZlhHXl5wAsbiwh5zraN1 C5BwNUOLQQdz6aTzhZxgKiwvGRQXQQprBagDApvpUHgzs44OZNfToBKtGYom d7xhPrw5YxttYtB499siOaR6YnExq6pDDqnvfK.4A4PEOPEZUnSEAMTViJjb HnwnR6I91AD0LjUPAmEvebvb2Xkw0lziYYl6VcQBo6P9HrC025Y8eU1uLD.V V6TjHgeSpAZW8qSRgz8R5sGgNILTVxyIqfQz02AFiqJoSX6hQXakdRnuJ5gB XD2ygdSvz53ilZyOzLbJz1RCVJ7HBP42_tdtTS2t0axFaSYho30iAgV37oOb n5CpxiQBI46Ht6jHZUddJANzUii5Mo2SoMinnabJvU0EPVs5d_y4B2Y5tzbl Y3yn.Sjy6vp_6HpoLBBaRS5BPlCnuP67ESVumZ3Zlf4mqSRlcvMEJZ2CUY80 r61pMRw7k1B1LKHUrZAATYRDvfQm5_JPwDao3rEEYXAj71SK51CojNPXGh9i RhNW38VC7uxVy17kMrqr4ri6v_T5KH6XrgZ.cg7B6kj0mzX7LAMAalcbrFQd Z8wU2jQ8aVziE1gswXuz0LVfP786mgUEQujQZlwqTPz4Mti8QnfWfX3VqVNp CCOwn2QPleB5_ikfuIYjPjkkIFxzvvOIrx.FMX4hwReTDBOP_t6T9MwLZN2h .pWtTBqa16ol5IHIHbK_GAm.
X-Originating-IP: [72.51.25.85]
Authentication-Results: mta1076.mail.ac4.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO vps.funlearneng.com) (72.51.25.85) by mta1076.mail.ac4.yahoo.com with SMTP; Tue, 16 Oct 2012 22:11:43 -0700
Received: (qmail 13397 invoked from network); 15 Oct 2012 17:03:30 +0400
Received: from unknown (HELO User) (213.230.19.136) by ballebc.com with SMTP; 15 Oct 2012 17:03:29 +0400
Reply-To: <dr.pereh@yahoo.com>
From: “Dr.Pere Hart”<officeonline82@yahoo.com>
Subject: Hello Dear,
Date: Mon, 15 Oct 2012 16:00:40 +0300
MIME-Version: 1.0
Content-Type: text/html; charset=”Windows-1251”
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Content-Length: 1943

Read the rest of this entry »

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Hart”

LOTTERY / INHERITANCE SCAM – NIGERIAN SCAMMER – ADVANCE FEE FRAUD

EMAIL: Attached Information Circular concern your inheritance payment funds from Central Bank of Nigeria. Open the attached message and read carefully by following the instructions

The attached file was titled From CBN.txt

HEADER:

Return-Path: <centralmessage.info@e-mail.ua>
X-YahooFilteredBulk: 98.136.216.183
Received-SPF: none (domain of e-mail.ua does not designate permitted sender hosts)
X-YMailISG: LCUay28WLDsXVnOIpfCgBYTNfUXrE2LzwaL2yegEkWenpW4X SBC_EuDaR.w80oTiRw0ETbWjvP.oR9xLNcD7JUMv_xI1fNeJP8k.KcZ.dqTR __CHSWogq6Y_qJChRBP51wqiJprgGE6Mb26FPmLdxsI19IKF5MhcLCzgz9GZ 3upzi_Ggbhkx_e3AU_ldOE7IjHvUEtfkyyUafscGRUZedVhSP724ErueRN2I 7ApPQGxnfFiOtG.dibMzZJI3Su.kp6G8iOWXb2FGW0vPwm3toR_flnLYadVP nnu6ZkppI8WzKexY6Z5ljQvaC7ibS3tNTjvvgqGeCBLy3ggRYTuqRdNUgv_o u2sVjXiNgoGbtBZPa.5yk3VWGdgVbHDtx1oLpa0Wh9L1tHBn.5s1of3So1ip 5gIjzhWrgo.JckvFtRMuZG26_mlOj4ygNpptgIajS._Lw3klr26swSLCCRri AnVgqAAF5T3Wdj3BVRBG3M96yG_ZlDXb7Jn97xRrReXrvxv7D.tL9vUQ5JcT WffcRC9NOnNc6eDWKlkueUcyGhcpb63wnettpvysZo.99iN2MvMfZBL01NBO atm5VrDsFhdS4cD9ib15fVbBeFxzW9NReDqTzONBUhGxLesQfAA1KOcuXrI2 gC..B0r7T1qgztq0Ju0EeAkkvO2IyRwoukFjWljhIbuGJZqAT0bYhMwX74T6 dKnM_2oeqrmxZBspkNnK4vxHP2XQdyu4kWV8.CoGdS8.VYITfT.USxCmjR9W oEAq5dbf22iPkCLvRMXRl4AeQi_gsL_kCH6CfzyOZMLxZYyFEPr8n.aIYDVW YyJtqybgme9zxTBZ3vhJZA6vJ51x2KHav65hdOU5w.ys0gti7YQ9VUmm0nLc veTHe1RMnICMIFT2sJiTVgeXBAPwxh72ypfOv3S2CbifYFxKoEbwhZ1vWSQq Ou7vnqZUiHMjgjOL2gDZhHThAtEgbhASmRAJV1mcCfD.rA2xUUvAuABp5EhZ KDwQNQOBSSAbb6LMwTdJutCMSX3UV2JGPsTdNxApKbDdElB4X.Dp.ltkOFpW xiwJ9Ca_QYezP9RF.0aZuiwvthXDfB1Z0LE9TSitaiDn8dU4.DK1qReYxkqv Bg2YMCOuvQXMCKn8N4OFQev40jW74tjGkhwxAiJJU88IDDc-
X-Originating-IP: [98.136.216.183]
Authentication-Results: mta1198.mail.gq1.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm29-vm8.bullet.mail.gq1.yahoo.com) (98.136.216.183) by mta1198.mail.gq1.yahoo.com with SMTP; Thu, 11 Oct 2012 10:40:45 -0700
Received: from [98.137.12.56] by nm29.bullet.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
Received: from [208.71.42.194] by tm1.bullet.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
Received: from [127.0.0.1] by smtp205.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
X-Yahoo-Newman-Id: 454267.58831.bm@smtp205.mail.gq1.yahoo.com
Message-ID: <454267.58831.bm@smtp205.mail.gq1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: sOZOVKMVM1mnA9AK4aaLG13dw.2te_jOnoIlkFSo78oTN3g yI.ys52b1V4VsGigPYxlplzI2Rs3TVbBAn.RWDpO0rj1fhfJmsdfaoXQmnis py73qobzWcXu4_GfpxCdEjTRZ6ejB3dbb.R94ACw1ti_ojo8XsTHy.KWnbLX NSdN5e.LRbtRUgaegUmCah5EI0VYpVmWcekFbCGwQGmfWOSGlb04qa7FBlyy XcOh6c5GuIqvhM1wDjDoKUtf7oSMaa6ozaTNU00Z_y8KeSBonZROIe1D10l3 43tNvsoJ7v6A7kguKsNOT3zh_pWXFWPmI8YNiC9jfnlDYqAdt8n38xv84WYB bzPE0uio7lRXj4HPPpWmp11SYYlKHj2SuJ0fTgQHMKkQsZO2Lb0EzjX9xuT1 0aRkaaqfYIKxuquOeXqq8ENytIue2XIpeTeLAf84qlSyv4CMyDIjw02HSUgW 2quxD829qRALehBycbxfAZscfqIKIs.BrdjgD7.bDbpTpU3jrs_hUis45VTc Pua5HfCU-
X-Yahoo-SMTP: zDMiCVOswBDcK9OIGzmdQnoU.CR0Quer1VzIrWkm300MMv4-
Received: from User (centralmessage.info@41.58.12.225 with login) by smtp205.mail.gq1.yahoo.com with SMTP; 11 Oct 2012 10:40:42 -0700 PDT
Reply-To: <drperehartcentralbank.org@e-mail.ua>
From: “Hart” <centralmessage.info@e-mail.ua>
Subject: Open the attached message and read carefully by following the instructions

Hart centralmessage.info@e-mail.ua – REPLY-ADDRESS: drperehartcentralbank.org@e-mail.ua RETURN-PATH:   centralmessage.info@e-mail.ua

RECEIVING IP: 41.58.12.225 ORIGINATING-IP: 98.136.216.183 — 208.71.42.194

BELOW IS ADDITIONAL IP’S AND ADDRESSES USED BY PERE HART

FROM: Dr Pere Hart dr.perehartoffice@gmail.com REPLY-TO: <dr.perehart@yahoo.com.ph> RETURN-PATH: <drperehartoffice@gmail.com>

RECEIVED-IP: 125.88.125.201 ORIGINATING-IP: 77.238.189.207 — 72.51.25.85

CLICK HERE to read a list of emails and headers sent by the same scammer as above. Hart also goes by Pere Hart as well as NNPC and Paul Kunert / Paul Kunet — Etc

 

Tags: , , , , , , , , , , , , , , ,

“David Smith Esq”

NIGERIAN SCAM – ADVANCE FEE FRAUD

ATTENTION: This scammer sent the scam in a form of a file. However, after investigating a little, I found out that this scammer is also Pere Hart <> Paul Kunet — I have posted dozens of emails from this fraudster alone. Each email contained different IP addresses, email addresses, fake agent names, fake customer care officers, etc. — Be careful, this Nigerian scammer is very persistent.

stop_scams

Return-Path: <olamido@aol.com>

X-YahooFilteredBulk: 98.138.90.78
Received-SPF: neutral (98.138.90.78 is neither permitted nor denied by domain of aol.com)
X-YMailISG: e8MvdNMWLDv1UmRT2_yweytc9ZTc_ZwqDMeIu2NLuvWpaL77 IXvbEWYBku_Fw_FIM7jarAKbSJoLgONZnfZWULAwNPpTl7mclzYJocNVuTDv QeEiLt309pJerpStd3BuurXMwfEZFWgjSRiLKqEuYco2u4WYAppkLAvZQU8P oKBZKhdpP5iTX36Ml3b1HQxniq1rIstqovR7THaYb2wOO8G72FQPyg6t9X34 JW2nSLH2qa5QUcyBDqlaZjcvr7Z8KW9BtxIKiI9fbt0zpJnCIz0huvfLT92Q GaueuzIJzXfURnOiLlryp49g5ZRGbTBDwuDtZ4X7mycmBCEBUDiZapCeOKKY OevtMSmjP8.RHYivp17LtvJx9CBtbSh6O2_xOYGPf3yiBf7jBNd4Lfww0kwb QR1VY2RtnP4k30iGppPCfrNxWDgwJ9jh.G1CPf99JXmUlCP_vI5mHldv0.FW cWfDQH4j00WrIHnWTeZMMLczGStYgeog4.T3UDBhApRONqd2hbjXbLNKco3d x_77MAXQ07vdrA47Yo97r4MyDdiWJV_q8LrTz3xgoBeNpt4fof3H5mrW7kdS tcpAI9nBa2HpBhMzLSeDRzRI5NVviYTcPG0wMA03L6.vkeserIhBCz7_hbH5 Guol_ZlsZAdFtBu3.Zs_vuA7SgGEBSZyO4ydtTAJ63firC9ocWPciH5iCYnO 7dj4kxFk8bSdlPTIJMF8nSQT8yF2qkLU9pttEFHPuA62Vv51Lbrjh6igEC_f Y0WQs4r4ICid.W1KkMChbwrsU.BwHw6Ss3vDtra.hyNLvWYdabGc4iKGRfGm BreLJR6dZ7Py2MtcKjUaRHbgFVSBx7VCMENyylhlMy9WKnPAFiikXbFh6EE7 KTmVRhV7YpOweuf2vvzEo0qXf52CScMVQRRydZfu0KgxKugfSyVSQCZXq.a2 m0c9QwPL2C2q0BlIVtuEXhmOMmzAEdHrO26wEsR0gata3yv8SYHn4Jf0oaKj YbnQyQWg7nxxRuziWpF7M0f4SdSwOaFGaolejCWtx76vb8vEFsGQsqJNSXbg vfD7C3CT47GGi.Be4Whef2cPtwCdQqbK0lrI.UD2e24vuv3lyp1iAJWgGiWd AhHm2yRofrXOAv2iE3DzAx4Mi1uP3Cir1SpE0roN6QpR2jLvts1LvS1r5Qtu cfyFky2THJ8CX7VpywFHK33PVFmF8DOtc_E-
X-Originating-IP: [98.138.90.78]
Authentication-Results: mta1343.mail.bf1.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=aol.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ne1.yahoo.com) (98.138.90.78) by mta1343.mail.bf1.yahoo.com with SMTP; Fri, 12 Oct 2012 04:18:55 -0700
Received: from [98.138.90.52] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 12 Oct 2012 11:18:53 -0000
Received: from [98.138.226.129] by tm5.bullet.mail.ne1.yahoo.com with NNFMP; 12 Oct 2012 11:18:53 -0000
Received: from [127.0.0.1] by smtp216.mail.ne1.yahoo.com with NNFMP; 12 Oct 2012 11:18:53 -0000
X-Yahoo-Newman-Id: 119889.56474.bm@smtp216.mail.ne1.yahoo.com
Message-ID: <119889.56474.bm@smtp216.mail.ne1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: GvHM4Z4VM1mrbNwvke0jp863UTCgDCY1wHCSXwd85GN_lOE .QZV7mw5IIG6L6_reF51VKCmxNWpmuPoT6ao46AkPunGEX9v3i04.4IMBYMA K46HpTI8XV28lObvztL8r__FXT1bJCYaGNIH3nB84VporEjKTPkgt7.SmRRA asMIW8rHwpeqs.f40J4.eXAhBVS5btiQz4X5YL7Qjx4K2zj1yultECeGC.7F fjdl0ihjhQPJjeG9Q.w5Y9fs3V6Xi4wHWxauBTt7KCNmxQGvYmjBcsr3hCsD xdslhXqOAx7c6vXleH23zT9aIP6qr0TCIEVOQomGL2rh3LoXKfqTVL6HpPuw 2DYZIHcSgNZJCgFmxZ0KLhPmnFnbIPwdD8.eNYoAKU8O_wyRuMtoruUBJ.oC BrxIcN.hW3HQgfJ530zSd7DVUzS5PjUFzTV4Eki2dNiGSpBtq8bYcLbQojah ssVFU1W20Sj86IHdr32XHGaHIoSZ6jk4ndJVCq_qI9l6DpSlvWA–
X-Yahoo-SMTP: ELlqi7WswBBJ3HhQsmFiH_77CcMUU32BiwPxZDD_RvxPEYhI
Received: from User (olamido@41.58.27.102 with login) by smtp216.mail.ne1.yahoo.com with SMTP; 12 Oct 2012 04:18:53 -0700 PDT
Reply-To: <davidsmith5421@gmail.com>
From: “David Smith Esq”<olamido@aol.com>
Subject: Read Attache File Of David Smith Esq.txt

David Smith Esq olamido@aol.com REPLY-ADDRESS: davidsmith5421@gmail.com RETURN-ADDRESS: olamido@aol.com

IP_USED: 98.138.90.78 RECEIVED_IP: 41.58.27.102 LOCATION: NIGERIA

 
Leave a comment

Posted by on 01/30/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , ,

“NNPC” also known as PAUL KUNERT

WARNING: SCAM – FRAUD

UPDATE: Paul Kunert (Kunet) is a scammer that I posted yesterday, December 3, 2012. Paul Kunert sent the same exact email’s as this scammer and sent them under the same IP (213.230.19.136) for additional information click his linked name.

Dr. Pere Hart – Lottery Scam posted on scammer419 on October 21, 2012 is the same scammer as NNPC, different scam.  Click the link for more information

Warning Caution Icon Sign Glassy Shiney Clip Art

EMAIL: An attached file was linked to this email that had the same title as another scammer that i posted on this site a month earlier. the email addresses and ip’s have been reported by other internet users and websites as well.

HEADER:

Return-Path: <mabiola@nnpcgroup.com>
X-YahooFilteredBulk: 202.181.246.218
Received-SPF: permerror (encountered permanent error during SPF processing of domain of nnpcgroup.com)
X-YMailISG: FuucFhgWLDshkfFuV5fDevDyn0hi2_MU3I8l8IWaMLVIEIuz NKf3NWKmyNhQdLoE56sqj8U_3Ubcj8OfUmEFjup1EZpdSK0QKIWMlJjD6ABw 7RYdhreTv2Bm4i.WRJxqaI0MPQwCPlp29KJ2sgBKpJV1hkZTSz6ZVm2U97j8 hZMBu5k5IgASzO0ibvoEpponfvo.fQVeXf7B0.M_i8VEA_4e257ilsiYu04h 8YUO4QtW642l62.Je8YwZuKUn1ZFZqU5NkM55tAWaCUAvXIitjWlZKS0TRxg kHmPUQeyT7LZzjb59EMoHsjU7zFjBEM1bb_f18xH7cnhQuSTyNVkrOYUAj0C 5fkR3of5DkTEEbE3OTx1ME_x3kR4nfE7TfhkkzmZulEMAJLsOcmmRLTPeb6s 4MfwuntLGCQj9ZYRJYqqB83K_KO0JzyGuXfkhuClo_rEdpgh9TAfD_mGRH76 solGibHIJsucJTq1_cxMM.Ko9drDCwHdE5Y6gaUhU23S025ANpPVyriGKFzz _MUPRqNK3n_03dMu_13EZBndFyKJX4.4l0XLdfNnS06kd93FOR5u8_tsY9KY SRiu5X_QzjoxTy8v416neLCsRo0vwyWzM50Xn5_0f5wXAoOnavzSsMhgo7HE pwxrmk_Vhc6ENKP9LVOFQfMvL1ZAHOefrtPe_kvWlDqLpykthbrnRTmXkuxz M7XTEhPwrFQKcIKqTbWXnGImhyCQzqpmsH_X5p_uUIRlzIe41Ybs89FihVU. Y4lUG8XrysjZJqdc2ndbb7cWLW1Q5b_QnA7Hft6j4f3vh25LU6AAvBigVyTm f.FRgXxeQNP4HoKfstNkkCMvFVumZ0Ikl7o5iSCeuCaJfiVRMcBsDN1uSRFw qQQWF2_RYPIArf4KAZIEBsmq1AlrdElzPywpFxhJgrD7a6V.cjIzD9vjrdO9 ljaQGFLCS.q8y51qBFZpFYYseaEMnt3jJgYEcpjLNKVR6YmjFfSTmT.rFD2b zte6AWqyGobaKMgQL9gHMVwpGhFOM5v5y6IDKAUIbw8NP5GSEZiAQiFElzPW a4LuP.XQSSNxvBNHWfZGSe5eqH_YcCZZH2dS5C2dZrmGNERb5L.1HvIpwPNT f3EtOddYQyqUWS.TC3u1CuUDrcR66ObHy9uf8_Hqf5VJb2Bj4tOfRthCbD.p 3nYD0Uat.DIAXprmX6VjcsfM3sN1.Dg0XNw9lTxYi4651.m0.7XkBTYP5Tr9 JMIOiOX9IVEjig5yKN1XMGz3r_ODg0gnhbtmZt.ImVY4vLOP_FpEgduDVWNb hwiXH6xZT_nW1XOcfEazL0Zw9nUCA9Cexq4iyKw0NTo7Xkr8dSL8JXsAyzTG _uVbL0x8nXYjeewDIAuS7dKHUK5M20jUpAUNthLTONSumeoGbggbpJFTlHIz AxPp3v077Qod7NiVkG4dQ68knDKplPdecjla_7QQxr.UamzZ2qvomY7zIXvd 9Se0G4ohmnYSsxoXR7UMLwiFK29oKb7egIrYKq.i7Im0nMWLXIn2k7KgajfU 0q_0jsVF_VKyfKoI02yc4rE8qucMPLgNZ5H2p9NQYr.vA8itbI7WCfKhUFPq 3269QnfwB8kqKpwkS09SOXPWvKRtQqUKSyQOpA–
X-Originating-IP: [202.181.246.218]
Authentication-Results: mta1388.mail.bf1.yahoo.com from=nnpcgroup.com; domainkeys=neutral (no sig); from=nnpcgroup.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.hkscholar.com) (202.181.246.218) by mta1388.mail.bf1.yahoo.com with SMTP; Wed, 21 Nov 2012 08:51:29 -0800
Received: from ([213.230.19.136]) by mail.hkscholar.com (Merak 4.4.2) with SMTP id 21320A3A; Wed, 21 Nov 2012 14:43:11 +0800
Reply-To: <mabiola2@e-mail.ua>
From: “NNPC” <mabiola@nnpcgroup.com>
Subject: Message from NNPC
Date: Wed, 21 Nov 2012 09:43:55 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_00CD_01C2A9A6.671FFFB0″
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

X-Originating-IP: [202.181.246.218]
Authentication-Results: mta1231.mail.bf1.yahoo.com from=nnpcgroup.com; domainkeys=neutral (no sig); from=nnpcgroup.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.hkscholar.com) (202.181.246.218) by mta1231.mail.bf1.yahoo.com with SMTP; Wed, 21 Nov 2012 19:30:34 -0800
Received: from ([41.190.3.128]) by mail.hkscholar.com (Merak 4.4.2) with SMTP id 21320A3A; Wed, 21 Nov 2012 14:37:08 +0800
Reply-To: <mabiola2@e-mail.ua>
From: “NNPC”<m.abiola@nnpcgroup.com> Add sender to Contacts
Subject: Attached message from NNPC
Date: Wed, 21 Nov 2012 07:40:53 +0100

“NNPC” <m.abiola@nnpcgroup.com> RECEIVED: from ([41.190.3.128]) by mail.hkscholar.com (Merak 4.4.2) with SMTP id 21320A3A; Wed, 21 Nov 2012 14:37:08 +0800

NNPC – mabiola@nnpcgroup.com – mabiola2@e-mail.ua – m.abiola@nnpcgroup.com – <mabiola2@e-mail.ua> 202.181.246.218  – 41.190.3.128 – 213.230.19.136 – Email addresses and IP’s used by NNPC a.k.a Paul Kunert a.k.a Dr Pere Hart officeonline82@yahoo.com Reply-address: dr.pereh@yahoo.com — 72.51.25.85 – 213.230.19.136 – <kunert03@e-mail.ua> – <kunert01@e-mail.ua> –  77.238.189.210 – 213.230.19.136 (note paul kunet sent numerous emails and each email had different reply-to addresses and ips. click here for more information.)

 

Some Scam Messages Sent From The Above IPs

From: “Elsie Carroll” <amadowindsurfvalencia@webstersonl
Subject: You can have happiness for hours
From: “Better Business Bureau” <info@bbb.org>
Subject: BBB assistance Re: Case # 66139090
From: “Better Business Bureau” <info@bbb.org>
Subject: BBB assistance Re: Case # 64924263
From: “Better Business Bureau” <info@bbb.org>
Subject: BBB assistance Re: Case # 35201806

From: cradlekx7@bmatter.com
Subject: Groupon dicount gifts
From: Горшков
Subject: Мастер-класс на тему “Функции
From: “Ester Snow” <langg2@reincarnatietherapie.com>
Subject: Your buddy is too small? Not a problem with modern
From: “Sharlene Montes” <liberalizationspff0@8bitandroid
Subject: Long buddy will bring you a lot of unforgettable n

From: noreply@breitling.com
Subject: tammyiversage@amail.bulock.com © BREITLING Inc ® T
From: noreply@rolex.com
Subject: psychology4321@cli.metraimmobiliare.com � Rolex In
From: З
Subject: Разрешения на работу, граждан
From: gabriele_hail@afternoon.kfm-sa.com
Subject: gabriele_hail@afternoon.kfm-sa.com Breitling Disco
From: <alonso.rusten@england.shortcutter.com>

From: “Santander”<notice@security.org>
Subject: Your account was accesed by a third part
From: “PayPal”<notice@ppal.com>
Subject: You have changed your PayPal email address
From: “PayPal”<notice@security.org>
Subject: You have changed your PayPal email address
From: “ECONOMIC & FINANCIAL CRIMES COMMISSION (EFCC)
Subject: Dear Beneficiary,contact Mr.Robinson

Associated IPs174.5.213.253 — 208.66.195.3 — 129.10.156.203 — 64.94.177.214 — 67.52.189.82 —  31.222.169.29 — 68.22.33.134 — 129.63.210.141 — 91.183.41.102 — 41.251.31.139 — 91.118.19.50 — 41.141.36.169 — 80.255.46.3 –41.190.2.218 — 41.190.2.159 — 41.190.3.221 — 41.190.2.161

41.190.3.29
41.190.2.163
41.190.3.66
41.190.3.116
41.190.2.166
41.190.2.167
41.190.2.168
41.190.2.169
41.190.2.170
41.190.2.171
41.190.2.172
41.190.3.135
41.190.3.213
41.190.2.175
41.190.2.176
41.190.2.177
41.190.2.180
41.190.3.97

41.190.4.95

 
1 Comment

Posted by on 12/04/2012 in Other

 

Tags: , , , , , , , , , , , , , , , ,

A list of Several Email Scams

I continue to get bombarded with spam mail on my (fake) email account that I’ve set-up to scam-bait. I can’t keep up lol. — I’ve decided to post a list of 5 email scams In one post. (I can show you the emails if you request them but I’m going to post the names, email-addresses, IP’s and any other relevant information.)

If you’ve received an email scam under any of the information listed, please let me know by posting it in the comments. Thank you!

Dear Winner:
Your email-address has just won MICROSOFT IN-CONJUNCTION WITH FACEBOOK/YAHOO&WINDOWS LIVE AWARD”
Prize money of 650,000.00 Great Britian Pounds
It has Winning number,Reference numberFACEBOOK/YWL/004/055
,Batch number: YWL/YAHOO/FACEBOOK/025
,Award Organizing File Code: UK/YWL/FACEBOOK
and contact person is Mrs Gloria Abby
Fiduciary Manager
Tel: +27 71 953 3072
Fax: +27 86 542 2833
E-mail:gloriabby114@msn.com
Please tell me if this is just another scam
Thank you
Pamella Koep
pjkoep@yahoo.com
16905 County Hwy 65
Vining,MN 56588
218-769-4389 +27719533072

___________________________

FACEBOOK AWARD CREATING HOPE AND SUPPORT TO INTERNET USERS
Dear Winner:
Your email-address has just won MICROSOFT IN-CONJUNCTION WITH FACEBOOK/YAHOO&WINDOWS LIVE AWARD”
Prize money of 650,000.00 Great Britian Pounds
It has Winning number,Reference numberFACEBOOK/YWL/004/055
,Batch number: YWL/YAHOO/FACEBOOK/025
,Award Organizing File Code: UK/YWL/FACEBOOK
and contact person is Mrs Gloria Abby
Fiduciary Manager
Tel: +27 71 953 3072
Fax: +27 86 542 2833
E-mail:gloriabby114@msn.com
Please tell me if this is just another scam
Thank you
Pamella Koep
pjkoep@yahoo.com
16905 County Hwy 65
Vining,MN 56588
218-769-4389

+27719533072
+27865422833
gloriabby114@msn.com
Pamella Koep

___________________________

SURVEY SCAM – “Sandra Harris” <sandraharris3434@excite.com> IP USED: 208.89.132.143 by mta1115.mail.bf1.yahoo.com SUBJECT: Job: CSR $25-$175/hr [no exp] REPLY-TO: psteele@yellowbrickfinancial.com FROM: from sandraharris3434.excite [64.79.101.178] by web005.roc2.bluetie.com (BlueTie WebMail ); Fri, 16 Nov 2012 13:40:34 -0500

Sandra Harris sent a fake survey email with a suspicious link that I didn’t click on. The link said http://tinyurl.com/now-2013 and the actual URL looked similar expect there was no ”http” – Also fraudsters like to use capital i’s so they look like L’s and lower case L’s so they look like upper-case ”i’s” — try to guess which is which – I or l ?

info@uk.org and <uk_online6@myway.com> <– Has also sent out lottery scam under the same IP

Fraudster’s love online surveys because it’s an easy way for them to trick people into handing over money or personal information in the belief they’re going to be paid for taking part. To learn other dangers regarding this fraud, click: The Real Deal About Online Survey Scams

____________________________________

2) LOTTERY SCAM –  “ATM payment” <webxl19917xx@att.net> REPLY-ADDRESS: atmpaymentcenttt@e-mail.ua

SUBJECT: your(atm) card worth of $5.5M is ready, send your Address and cell Phone

IP: 98.139.44.156

RECEIVED: from [75.125.40.18] by web181105.mail.ne1.yahoo.com via HTTP; Thu, 15 Nov 2012 06:13:02 PST

This is a lottery scam and this scammer is very persistent and will continue to email and harrass you for money. You’ll find a new email daily from this scammer under his numerous free email accounts.

____________________________________

3) PHISHING ATTACK –  “CHASE ONLINE” <accountcheck@chaseonline.com> REPLY-TO: <no-reply@chaseonline.com>

SUBJECT: Important Notice: New Message From Chase OnlineSM

EMAIL: Dear Chase OnlineSM Customer, Please download and read the attached document carefully Thank You. Online Services Team

173.192.75.104 – 

mta1376.mail.mud.yahoo.com from=chaseonline.com; domainkeys=neutral (no sig); from=smtp.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO node-sl2899.smtp.com) (173.192.75.104) by mta1376.mail.mud.yahoo.com with SMTP; Sun, 21 Oct 2012 23:52:54

DKIM-Signature: v=1; a=rsa-sha256; d=smtp.com; s=smtpcomcustomers; c=relaxed/simple; q=dns/txt; i=@smtp.com; t=1350751857; h=From:Subject:To:Date:MIME-Version:Content-Type; bh=gYgrv8ESNcy3BfHUH4Rg8rCCgF5ymGpSHMzHhg/pLWo=; b=HSIwZxK69S4CNqk2LsUSGWButnxW25XWJ1uPhXcSznfTLj2Dw7rpIy+Ld4QA02wZ 1wixERPHB6Tnkzi3GFmN23StdIywpxqfR2XuGTb8d26ZPrhGG8bzhp3bm+/5XO7o SIU54ypzzxJQnmSKDFlkzTEtHmveatLXMczMH52Vx2k=;
Received: from [208.109.198.93] ([208.109.198.93:45348] helo=User) by sl-mta05 (envelope-from <accountcheck@chaseonline.com>) (ecelerity 3.3.2.44647 r(44647)) with ESMTPA id AB/B8-30383-E46D2805; Sat, 20 Oct 2012 16:50:57 +0000

____________________________________

4) EMAIL SCAM – “SANUSI LAMIDO” <lamidosanusi316@hotmail.co.uk>

KINDLY VIEW ATTACHMENT FOR COMPREHENSIVE DETAILS. (I don’t like posting or clicking on any attached files that require downloading.)

EMAIL-ADDRESSES & IP – Return-Path: <lamidosanusi316@hotmail.co.uk> X-YahooFilteredBulk: 98.139.212.171

Received: from User (lamidosanusi316@60.190.189.214 with login) by smtp109.mail.bf1.yahoo.com with SMTP; 18 Oct 2012 11:04:03 -0700 PDT
Reply-To: <lamidosanusi316@yahoo.com>
From: “SANUSI LAMIDO”<lamidosanusi316@hotmail.co.uk>
Subject: IMMEDIATE CONTRACT FUND RELEASE ORDER.

Associated addresses:  jesksoito@mail.ru

____________________________________

5) “NNPC” <mabiola1@e-mail.ua>

Return-Path: <mabiola1@e-mail.ua>
X-YahooFilteredBulk: 217.12.10.75

X-Originating-IP: [217.12.10.75] 

Received: from User (mabiola1@41.190.2.39 with login) by smtp133.mail.ukl.yahoo.com with SMTP; 18 Oct 2012 05:29:28 +0000 GMT
Reply-To: <mabiola2@e-mail.ua>
From: “NNPC”
<mabiola1@e-mail.ua>

Subject: Attacched message from NNPC
Date: Thu, 18 Oct 2012 06:29:29 +0100

____________________________________

6) “Dr. Pere Hart” <dr.perehartofficeonline01@e-mail.ua>

Return-Path: dr.perehartofficeonline01@e-mail.ua
X-YahooFilteredBulk: 98.139.213.157

X-Yahoo-SMTP: Q0etPY.swBCIvNsasj.Txo_Zd8q.xZ.384ofxazXAHrY_jjdPRJW
Received: from User (dr.perehartofficeonline01@41.58.27.102 with login) by smtp113.mail.bf1.yahoo.com with SMTP; 12 Oct 2012 05:00:19 -0700 PDT
Reply-To: <dr.perehart@yahoo.com.ph>
From: “Dr.Pere Hart”<dr.perehartofficeonline01@e-mail.ua>
Subject: Open The Attached File From Dr.Pere Hart Deputy Governor CBN

41.58.27.102

 
Leave a comment

Posted by on 12/01/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , ,

“FBI OFFICE”

WARNING – INHERITANCE SCAM – ATM CARD FRAUD – NIGERIAN SCAMMER

ATTENTION: THIS SCAMMER’S IP IS BLACKLISTED AND IS CONSIDERED 100% MALICIOUS ON A SCALE FROM 1-100 – – If you’ve received a email/contact and put their IP, email address, host, etc and got brought to this post then you’re dealing with a scammer/phisher One of the anti-spam websites warning against this IP address is Spamhaus

EMAIL: Show Details
Attn please,
This message is coming to you from FBI office here, We are writing this mail to inform you that your (Inheritance winning awarded funds of $1.5million) has been totally converted into a ATM Master card and it’s to be delivered to your address via courier service, Be inform that the courier delivery company will deliver the card with all the manual and instruction both with PIN code to access the Card upon receipt. It’s the best option to receive this amount since every attempt failed, therefore you will need to contact the Barrister that helped in re-claiming the check back and converted it into an ATM visa card with his address below:

Barrister Necter Polimars
Email: barristernecter@yahoo.fr
Phone: +229-98651731

Send him your current address where the check should be delivered to and remember to indicate the Reg:code of ATM-0034 to him when making contact with him. Please also choose the courier service you would like to deliver the Card Post office is also working but could take the card much time to get to you.

Please endeavor to inform us once you have received the ATM Card.

Sincere regards
Robert S. Mueller
FBI Monitoring Team Service

HEADER:

Return-Path: <offilcefile1905@superposta.com>
X-YahooFilteredBulk: 203.188.201.151
Received-SPF: fail (domain of superposta.com does not designate 203.188.201.151 as permitted sender)
X-YMailISG: ezBF7kAWLDtzu.6WTiJebVEzmQUIcG_PNd1CwpI.7FK_4hEN Zny7zbsYgSrvRNEkKNAHyjYIgbXGVFrTSy5c9pyJLJT.I2rbeu56O.55aNRc EQ4OjPa65stTyuXMWPdmbc2Jchn20MKDdUhbt5XnuXvouwATkklv.if4Srwf PhgPk6NBUSLZVJfqBHUhuwGMHUb_GfrNTpQsO.6RIv6rP_BimD0cQ0sROi15 H3py5nbXAc.b_y9E7OCFREZrAT3GEMeHuzInLPwjPODQ7PFjnt8wP97VPfLP C3D6i4CW_Q9zsBV5HRucchEEUqIWMBzzTuLi6zi_ltdXIdLGccljYIUkibmP Ed6kSsw6JvdOn8x62zffgS3BLW6CK4UJ2WrxTzHnGsLVxdxZBcThqC8CcB.n 3tmyMvUm028RDYEH6y5spoHom3ZCQydyZ8aZ6a2CdE5op4jpI2fdBhU7ZyZN Dqdib4ZxEPlV37MS9RCDeUqBndpsXjq39haZEpSj.pWiwS_jeQggSyiCfzLA Du8yPKoCdbgkqs4xpA6z1bLRYqSSeiMETFaBAYVfqIhhHnCuGnRdSjKKcRfa QSyPrDLSrtpTgCxTxf8Wmlv5r9qoSzqTBs8y3639xGJz_TaqCvv2WGK2d0eL _2p6QjsaA6XBRYyI1olJHaBZnBshmo67FuoNCPeg2JBFZC9bJuLhNahvSF4K d9N2c5ipVC9pAsSeyKG_PiKl4ql1Y7q3l7f5IfZhlPgbTIJmn2Yxc78Fs.7b MF1ui8Dgn7t3rQehQiKwWpFk0q7WCC0IWZAAoZgM1h6Q.FP6orLyiR.Exv8D RiD.Oc4IbsY5WKoCy8ZMH.q.4LpS2Pyom.ERBABavo2ov5JSoNDBVWW6ss0t ySPJiqvMCEULgheeKtHOlWD1UGNWn5g77TqNnx8dnYwLT_Y2ONb0zrgj4.Qe TLuVJ7nQYutC4IN2EKxquWdtY9lDDBNt3EYmZ0jwRErSqsr1dKjHBzBUdu_s _0O.oK5IqEYhs8zBOHcckO_uJSRW.SQmfbTZF069RPGOwEu5ckgWIGwo
X-Originating-IP: [203.188.201.151]
Authentication-Results: mta1091.mail.ac4.yahoo.com from=superposta.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm13-vm5.bullet.mail.tp2.yahoo.com) (203.188.201.151) by mta1091.mail.ac4.yahoo.com with SMTP; Sat, 17 Nov 2012 02:43:59 -0800
Received: from [203.188.200.142] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 17 Nov 2012 10:43:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 977911.45325.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 39060 invoked by uid 60001); 17 Nov 2012 10:43:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353149034; bh=4NHRjGox1llxlGTpuwwzaXz2wAEyMSFQlVe/RepWfVQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=P0DhZFg9Mjj05/vqaDc0igv+GPAlNxBBckhxEzU4PJ/OEqkdNXv8cHYOGIrX06GRSxiYBDEXksxF+7O6itMLQryiu63e3X/TBdnGMXPpsJmwW89Nu0b5IpbVDCyBNfuzLVNzU62iHNFjxppWoL8m/2ohhLEweTQDE86CwjMFUjc=
X-YMail-OSG: UNddAlUVM1kvGGStE1FY34uiMeKn2clDYRgV8R.tDHiC3Gd LJa0arT0C
Received: from [41.223.248.96] by web92408.mail.cnh.yahoo.com via HTTP; Sat, 17 Nov 2012 18:43:53 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353149033.34956.YahooMailClassic@web92408.mail.cnh.yahoo.com>
Date: Sat, 17 Nov 2012 18:43:53 +0800 (CST)
From:
FBI OFFICE <offilcefile1905@superposta.com>
Reply-To: barristernecter@yahoo.fr
Subject: YOUR ATM MASTER CARD OF 1.5MILLION
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”176961417-1892065883-1353149033=:34956″
Content-Length: 14962

This list below shows many bad IP addresses (sending out spam, virsus, scam, phishing, fraud, etc) that are being used by web92408.mail.cnh.yahoo.com 41.223.248.98 <– The IP/Host at this IP is being used by scammers sending out 419 scams

210.169.153.71 SOFTBANK TELECO ODN.NE.JP JP 5% 95% 2% 98%
200.13.169.3 AMNET DATOS EL AMNETSAL.C SV 49% 51% 46% 54%
203.115.0.14 INTERNET SERVIC RADIUS1.SL LK 13% 87% 25% 75%
202.147.75.21 POWERLAN LIMITE DOT.NET.AU AU 18% 82% 38% 62%
202.147.75.25 POWERLAN LIMITE DOT.NET.AU AU 18% 82% 39% 61%
116.50.64.53 WAN NETWORK FOR IN 59% 41% 61% 39%
213.210.218.169 SERVICES COMPAN NESMA.NET. SA 65% 35% 68% 32%
85.95.235.101 INETMAR INTERNE TR 6% 94% 4% 96%
124.74.42.242 CHINANET SHANGH JWS.COM CN 51% 49% 63% 37%
217.146.183.251 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.227 YAHOO! EUROPE YAHOO.COM UK 36% 64% 58% 42%
217.146.183.253 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.233 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.88 YAHOO! EUROPE YAHOO.COM UK 36% 64% 58% 42%
217.146.183.114 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.225 YAHOO! EUROPE YAHOO.COM UK 36% 64% 60% 40%
217.146.183.243 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.235 YAHOO! EUROPE YAHOO.COM UK 36% 64% 61% 39%
217.146.183.92 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.229 YAHOO! EUROPE YAHOO.COM UK 35% 65% 58% 42%
217.146.183.112 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.247 YAHOO! EUROPE YAHOO.COM UK 35% 65% 59% 41%
217.146.183.239 YAHOO! EUROPE YAHOO.COM UK 36% 64% 57% 43%
217.146.183.249 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.231 YAHOO! EUROPE YAHOO.COM UK 35% 65% 59% 41%

barristernecter@yahoo.fr

From  41.223.248.96 – web92408.mail.cnh.yahoo.com — Cotonou – BENIN – BJ — 

Reverse DNS: 203.209.250.172 – web92408.mail.cnh.yahoo.com  — IP address originates from China and has a score of 50/100 which means approx half of the activity is BAD

From: Jonathon Finn <mooretudepo33@livedoor.net>
Subject: Ermaessigte Preise fuer Top Armbanduhkopien
From: Kelvin Richardson <pricesajebi29@lunatico.it>
Subject: Genaue Kopien von Schweizer Armbanduhren
From: Leo Grady <bakerlixiru48@cerviaambiente.it>
Subject: Top Chronometer zum ermaessigten Preis
From: Adrian Childers <perezbuxuva66@hotelclocchiatti.it
Subject: Ideale Kopien von Schweizer Zeitmessern
From: Shirley Stroud <robertssacoly93@texsaca.it>
Subject: Dieselbe hohe Qualitaet vom Edelzubehoer guenstige
From: Amy Christopher <hughesbumoco27@cooparche.com>
Subject: Sommerpreise fuers edel aussehendes Zubehoer
From: Sophia Walden <phillipsjimome53@pgelettroimpianti.
Subject: Teuer aussehendes Zubehoer zum ermaessigten Preis
Associated Harvesters for IP – 41.223.248.48
75.125.18.178 | H
70.85.113.242 | H
208.66.195.2 | H
70.85.172.170 | H
74.53.249.34 | HW
74.86.249.98 | H
74.53.243.18 | HC
74.86.209.74 | H
218.186.13.1 | H
75.125.47.162 | HSDW
67.19.250.26 | H
91.190.94.246 | HSD
216.40.222.98 | H
81.195.121.253 | HSDC
Sent From 41.223.248.96 – SOURCE: Project Honey Pot
From:  Customer Service – upsaccountservices@ups.com
Subject: Re: FW: End of Aug. Statement Reqiured
From: Logistics UPS  accountservices@ups.com
Subject: Re: FW: End of Aug. Statement Reqiured
From:  Express – upsdelivercompanyb@ups.com
Subject: Re: End of Aug. Statmeent required
From: WendyDillahunt@mailusers.make-tracks.com
Subject: Re: End of Aug. Statmeent required
From: LinkedIn Email Confirmation – emailconfirm@linkedin
Subject: Re: FW: End of Aug. Statement Required
From: Customer Support ups  upsdeliveryservices@ups.com
Subject: Re: FW: End of Aug. Stat. required
From:  accounting@graco.dhbit.ca
Subject: Re: FW: End of Aug. Stat. required
From: Sook Ritchie via LinkedIn – member@linkedin.com
Subject: Re: changelog UPD.
From:  accounting@mail420.minnesotageeks.com
Subject: RE: MAYRA – Copies of Policies.
From: Marisol Friend via LinkedIn – member@linkedin.com
Subject: RE: CARMAN – Copies of Policies.
From:  raccounting@mail2.mounted.net
Subject: RE: MEGHANN – Copies of Policies.
From: DarwinZarling@hotmail.com
Subject: Re: Security update for banking accounts.
From:  DIONNE ROBERTSON – ROBERTSONpmjgDIONNE@hotmail.co
Subject: Your tax return appeal is declined.
From:  IsmaelLAKEEQFFK2B@aol.com
Subject: IRS notification of your tax appeal status.
From: “MYUPS” <ups-shippingagency@ups.com>
Subject: Re: Fwd: Scan from a Hewlett-Packard ScanJet #575
From: UPS <customerdesk_upsdeliveryservices@ups.com>
Subject: Don’t forget about meeting tomorrow
From: Kathlene Donaldson – MiraDinehart@w-link.net
Subject: Don’t forget about meeting tomorrow
From: Milford Hinkle – RamonGriebling@heale.net
Subject: Don’t forget about meeting tomorrow
From:  Amazon.com – account-update@amazon.com
Subject: Re: Your Flight A189-45644
From:  JabariKinnon@mail.igretec.net
Subject: Re: Your Flight A07-8295
From:  LEON Doherty – DohertyLEON@hotmail.com
Subject: Re: Fwd: Your Flight A268-625505
From: Badoo – noreply@badoo.com
Subject: Fwd: Re: Your Flight A18-77208
From: “craigslist – automated message, do not reply” <ro
Subject: Fwd: Wire Transfer (30331FY38)
Example Messages Sent From 203.209.250.172 – SOURCE: Project Honey Pot
From: Mrs Purity Qaume – mrs.purityqaume2011@terra.com
Subject: From: Madam Purity Qaume
From: Mrs Purity Qaume – mrs.purityqaume2011@terra.com
Subject: From: Madam Purity Qaume.
From: jxdguq – caolaeuva@yahoo.cn
Subject: 9税4

FBI OFFICE <> offilcefile1905@superposta.com <> barristernecter@yahoo.fr <>

41.223.248.96 by web92402.mail.cnh.yahoo.com <> bobwilliamson@superposta.com <> wunion617@superposta.com <> Received: from [41.223.248.96] by web92402.mail.cnh.yahoo.com via HTTP;
X-RocketYMMF: redwoodcapitalbank@yahoo.cn
Date: Thu, 15 Nov 2012 18:51:29 +0800 (CST)
From: “Rev. Robert Williamson, ESQ.” <offilcefile1905@superposta.com>
Reply-To: wunion617@superposta.com
Subject: TRANSFER MTCN

Attention Beneficiary,

I am contacting you because I’ve sent you the first payment of $5,000 this morning from your winning funds total amount of $1.5Million USD, Therefore you need to contact a Western Union agent Mr. Jerry Young, and ask him to give you the transfer payment information and MTCN.

Agent: Mr. Jerry Young
Email: wunion617@superposta.com
Phone: +229 98644349

Please try to contact him today request him to forward the payment information to you, Remember to Indicate the registration code of EB-2520 to him when E-mailing or calling him, Also he will be sending you $5,000.00 daily as per our office discussion with him.

Do get in touch with me once you have received the transfer. Please copy this email: wunion617@superposta.com, and paste before replying to him or simply call him at his number: +229 98644349

Sincerely

Rev. Robert Williamson, ESQ.

IMF MANAGING DIRECTOR

BENIN REPUBLIC

E-mail: bobwilliamson@superposta.com
+22998644349

________________________________________

Fraudster is also pretending to be Yahoo Member Services <carecustomer625@yahoo.com> Reply-to: carecustomer625@yahoo.com — YFB – 98.139.91.80 Received from: 41.223.248.96 – web182201.mail.bf1.yahoo.com

An FBI agent would contact you by phone or atleast by your name. They also have there own domain and wouldn’t use ‘superposta’ as an email-server.

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: