RSS

Tag Archives: 213.230.19.136

“NNPC” also known as PAUL KUNERT

WARNING: SCAM – FRAUD

UPDATE: Paul Kunert (Kunet) is a scammer that I posted yesterday, December 3, 2012. Paul Kunert sent the same exact email’s as this scammer and sent them under the same IP (213.230.19.136) for additional information click his linked name.

Dr. Pere Hart – Lottery Scam posted on scammer419 on October 21, 2012 is the same scammer as NNPC, different scam.  Click the link for more information

Warning Caution Icon Sign Glassy Shiney Clip Art

EMAIL: An attached file was linked to this email that had the same title as another scammer that i posted on this site a month earlier. the email addresses and ip’s have been reported by other internet users and websites as well.

HEADER:

Return-Path: <mabiola@nnpcgroup.com>
X-YahooFilteredBulk: 202.181.246.218
Received-SPF: permerror (encountered permanent error during SPF processing of domain of nnpcgroup.com)
X-YMailISG: FuucFhgWLDshkfFuV5fDevDyn0hi2_MU3I8l8IWaMLVIEIuz NKf3NWKmyNhQdLoE56sqj8U_3Ubcj8OfUmEFjup1EZpdSK0QKIWMlJjD6ABw 7RYdhreTv2Bm4i.WRJxqaI0MPQwCPlp29KJ2sgBKpJV1hkZTSz6ZVm2U97j8 hZMBu5k5IgASzO0ibvoEpponfvo.fQVeXf7B0.M_i8VEA_4e257ilsiYu04h 8YUO4QtW642l62.Je8YwZuKUn1ZFZqU5NkM55tAWaCUAvXIitjWlZKS0TRxg kHmPUQeyT7LZzjb59EMoHsjU7zFjBEM1bb_f18xH7cnhQuSTyNVkrOYUAj0C 5fkR3of5DkTEEbE3OTx1ME_x3kR4nfE7TfhkkzmZulEMAJLsOcmmRLTPeb6s 4MfwuntLGCQj9ZYRJYqqB83K_KO0JzyGuXfkhuClo_rEdpgh9TAfD_mGRH76 solGibHIJsucJTq1_cxMM.Ko9drDCwHdE5Y6gaUhU23S025ANpPVyriGKFzz _MUPRqNK3n_03dMu_13EZBndFyKJX4.4l0XLdfNnS06kd93FOR5u8_tsY9KY SRiu5X_QzjoxTy8v416neLCsRo0vwyWzM50Xn5_0f5wXAoOnavzSsMhgo7HE pwxrmk_Vhc6ENKP9LVOFQfMvL1ZAHOefrtPe_kvWlDqLpykthbrnRTmXkuxz M7XTEhPwrFQKcIKqTbWXnGImhyCQzqpmsH_X5p_uUIRlzIe41Ybs89FihVU. Y4lUG8XrysjZJqdc2ndbb7cWLW1Q5b_QnA7Hft6j4f3vh25LU6AAvBigVyTm f.FRgXxeQNP4HoKfstNkkCMvFVumZ0Ikl7o5iSCeuCaJfiVRMcBsDN1uSRFw qQQWF2_RYPIArf4KAZIEBsmq1AlrdElzPywpFxhJgrD7a6V.cjIzD9vjrdO9 ljaQGFLCS.q8y51qBFZpFYYseaEMnt3jJgYEcpjLNKVR6YmjFfSTmT.rFD2b zte6AWqyGobaKMgQL9gHMVwpGhFOM5v5y6IDKAUIbw8NP5GSEZiAQiFElzPW a4LuP.XQSSNxvBNHWfZGSe5eqH_YcCZZH2dS5C2dZrmGNERb5L.1HvIpwPNT f3EtOddYQyqUWS.TC3u1CuUDrcR66ObHy9uf8_Hqf5VJb2Bj4tOfRthCbD.p 3nYD0Uat.DIAXprmX6VjcsfM3sN1.Dg0XNw9lTxYi4651.m0.7XkBTYP5Tr9 JMIOiOX9IVEjig5yKN1XMGz3r_ODg0gnhbtmZt.ImVY4vLOP_FpEgduDVWNb hwiXH6xZT_nW1XOcfEazL0Zw9nUCA9Cexq4iyKw0NTo7Xkr8dSL8JXsAyzTG _uVbL0x8nXYjeewDIAuS7dKHUK5M20jUpAUNthLTONSumeoGbggbpJFTlHIz AxPp3v077Qod7NiVkG4dQ68knDKplPdecjla_7QQxr.UamzZ2qvomY7zIXvd 9Se0G4ohmnYSsxoXR7UMLwiFK29oKb7egIrYKq.i7Im0nMWLXIn2k7KgajfU 0q_0jsVF_VKyfKoI02yc4rE8qucMPLgNZ5H2p9NQYr.vA8itbI7WCfKhUFPq 3269QnfwB8kqKpwkS09SOXPWvKRtQqUKSyQOpA–
X-Originating-IP: [202.181.246.218]
Authentication-Results: mta1388.mail.bf1.yahoo.com from=nnpcgroup.com; domainkeys=neutral (no sig); from=nnpcgroup.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.hkscholar.com) (202.181.246.218) by mta1388.mail.bf1.yahoo.com with SMTP; Wed, 21 Nov 2012 08:51:29 -0800
Received: from ([213.230.19.136]) by mail.hkscholar.com (Merak 4.4.2) with SMTP id 21320A3A; Wed, 21 Nov 2012 14:43:11 +0800
Reply-To: <mabiola2@e-mail.ua>
From: “NNPC” <mabiola@nnpcgroup.com>
Subject: Message from NNPC
Date: Wed, 21 Nov 2012 09:43:55 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_00CD_01C2A9A6.671FFFB0″
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

X-Originating-IP: [202.181.246.218]
Authentication-Results: mta1231.mail.bf1.yahoo.com from=nnpcgroup.com; domainkeys=neutral (no sig); from=nnpcgroup.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.hkscholar.com) (202.181.246.218) by mta1231.mail.bf1.yahoo.com with SMTP; Wed, 21 Nov 2012 19:30:34 -0800
Received: from ([41.190.3.128]) by mail.hkscholar.com (Merak 4.4.2) with SMTP id 21320A3A; Wed, 21 Nov 2012 14:37:08 +0800
Reply-To: <mabiola2@e-mail.ua>
From: “NNPC”<m.abiola@nnpcgroup.com> Add sender to Contacts
Subject: Attached message from NNPC
Date: Wed, 21 Nov 2012 07:40:53 +0100

“NNPC” <m.abiola@nnpcgroup.com> RECEIVED: from ([41.190.3.128]) by mail.hkscholar.com (Merak 4.4.2) with SMTP id 21320A3A; Wed, 21 Nov 2012 14:37:08 +0800

NNPC – mabiola@nnpcgroup.com – mabiola2@e-mail.ua – m.abiola@nnpcgroup.com – <mabiola2@e-mail.ua> 202.181.246.218  – 41.190.3.128 – 213.230.19.136 – Email addresses and IP’s used by NNPC a.k.a Paul Kunert a.k.a Dr Pere Hart officeonline82@yahoo.com Reply-address: dr.pereh@yahoo.com — 72.51.25.85 – 213.230.19.136 – <kunert03@e-mail.ua> – <kunert01@e-mail.ua> –  77.238.189.210 – 213.230.19.136 (note paul kunet sent numerous emails and each email had different reply-to addresses and ips. click here for more information.)

 

Some Scam Messages Sent From The Above IPs

From: “Elsie Carroll” <amadowindsurfvalencia@webstersonl
Subject: You can have happiness for hours
From: “Better Business Bureau” <info@bbb.org>
Subject: BBB assistance Re: Case # 66139090
From: “Better Business Bureau” <info@bbb.org>
Subject: BBB assistance Re: Case # 64924263
From: “Better Business Bureau” <info@bbb.org>
Subject: BBB assistance Re: Case # 35201806

From: cradlekx7@bmatter.com
Subject: Groupon dicount gifts
From: Горшков
Subject: Мастер-класс на тему “Функции
From: “Ester Snow” <langg2@reincarnatietherapie.com>
Subject: Your buddy is too small? Not a problem with modern
From: “Sharlene Montes” <liberalizationspff0@8bitandroid
Subject: Long buddy will bring you a lot of unforgettable n

From: noreply@breitling.com
Subject: tammyiversage@amail.bulock.com © BREITLING Inc ® T
From: noreply@rolex.com
Subject: psychology4321@cli.metraimmobiliare.com � Rolex In
From: З
Subject: Разрешения на работу, граждан
From: gabriele_hail@afternoon.kfm-sa.com
Subject: gabriele_hail@afternoon.kfm-sa.com Breitling Disco
From: <alonso.rusten@england.shortcutter.com>

From: “Santander”<notice@security.org>
Subject: Your account was accesed by a third part
From: “PayPal”<notice@ppal.com>
Subject: You have changed your PayPal email address
From: “PayPal”<notice@security.org>
Subject: You have changed your PayPal email address
From: “ECONOMIC & FINANCIAL CRIMES COMMISSION (EFCC)
Subject: Dear Beneficiary,contact Mr.Robinson

Associated IPs174.5.213.253 — 208.66.195.3 — 129.10.156.203 — 64.94.177.214 — 67.52.189.82 —  31.222.169.29 — 68.22.33.134 — 129.63.210.141 — 91.183.41.102 — 41.251.31.139 — 91.118.19.50 — 41.141.36.169 — 80.255.46.3 –41.190.2.218 — 41.190.2.159 — 41.190.3.221 — 41.190.2.161

41.190.3.29
41.190.2.163
41.190.3.66
41.190.3.116
41.190.2.166
41.190.2.167
41.190.2.168
41.190.2.169
41.190.2.170
41.190.2.171
41.190.2.172
41.190.3.135
41.190.3.213
41.190.2.175
41.190.2.176
41.190.2.177
41.190.2.180
41.190.3.97

41.190.4.95

 
1 Comment

Posted by on 12/04/2012 in Other

 

Tags: , , , , , , , , , , , , , , , ,

Paul Kunet (Kunert)

EMAIL SCAMMER – PAUL KUNERT (KUNET) – EACH HEADER IS USING A FAKE ADDRESS TO CONFUSE (POTENTIAL) VICTIMS. AND EACH EMAIL HEADER HAD A RECEIVING IP WITH A NIGERIAN LOCATION

UPDATE: Paul Kunet also sends out scam under NNPC under various addresses and ip’s including – mabiola@nnpcgroup.com – mabiola2@e-mail.ua – m.abiola@nnpcgroup.com – <mabiola2@e-mail.ua> 202.181.246.218  – 41.190.3.128 – 213.230.19.136 — for more information click: NNPC – SCAMMER

Paul Kunet and/or Paul Kunert has sent MANY emails. Therefore, I am going to post each of the headers because the return email-address and IP’s on each email are different. If you receive a email from an unknown Internet user and googled the address and/or IP address and ended up here, then you’re most likely talking to a scammer.

NOTE: I didn’t post the actual email’s but I do have them saved. I just posted the headers because posting the email’s would take up more room below so if you would like to compare emails just let me know!

________________________________________

Return-Path: <kunert03@e-mail.ua>
X-YahooFilteredBulk: 77.238.189.210
Received-SPF: none (domain of e-mail.ua does not designate permitted sender hosts)
X-YMailISG: uz2zgCQWLDvA5U9Wv9gDEl6GyPs4LNxRzvAj8opVuoq7p6zv twi2EFEinL1GuboSa2t022Py3ynOSCyVShKHCBfM9Gu.cTZ7EaVnYwEMSZBL htJqs2gZsJi9Kx7GAkqpUxFJtfotfU_ilBgTeUv7U5TaBNMfsbCL4KHoKqMX 4GcN7rdYltCILT5XzRlICjzMSN4LxyzL1sFz71rYrHnvYkVcdFM.t0kKvbHU sq4nsZ3elrFZ8LmRTvePsqavTLXwtFQZfZdUs5GFZOZtzjSDe69XtLY7oGN1 cUuUltsLnI8DockY.vYcelJInb2PCuFViVqkp3Ri5v_lbjEY1UtXSIKV5..7 IVKcEWv9g5PUSKRfIbLm7.RETJx4j8GOrmJLLgT4D32gwUKs22oVJGzB39v5 Y7HcCe2FiGc23kdYvA.3cICY0pfYtp3rPzd53eh8HqU7CTlhQt7XNCKuYsCF OqfxcpuCDSLf6UlmAcJKT0wEFj.r39Zjci1dM1cOD6XQZhi0TTOwfSwP4hmU j7TZAkTSBLZK_3lvXcxWq5eQ5P_JWaPnbOC9ObAfUB7RZr3.TUoymzm5mlnk yRy2p4oskqshMyi9tW0WuUdCYbxezLKAkZlJ9lxQWq5omS2ynsUMcYJSXvbl AiW6ZzMM6W4cyQwURLStzEoMD5gpf8ypjNGJFwdwLxR1DK4DvXhWT_x9EHKc rSmegcFO8fpnxDgiMp5yOsczZEnNdckNPmeey_BVBUyDbKLyHegwYAW83hyO IP7LphF9SVql87P9XR2Ku5oNswP5Eicv2McSCobp3G_PgsTpNZqzhiBg4I.S f6AsTb0AfLc74jwWN4kr456j3a8EBM0iSSVuBPIl3kpBZmGRRHp00Lh5unmq bllWrDyn..DRLmJr_muz0kGwTxUsf8T5lSTIjqas9qcFRvn_breAvnZ162mM 1JZz8hDIhACLQRT62j_pjhOKAcnnY0VCkL.WNfly7yANzAbjHyrZnyvoXGEQ PUWLFME71uSlaTcmdSFMPOH4al6E.lv8WYw34x_HL4z2czpmtNNykF.xodjz ak2Brvkaf3Dde9CXarJ8yz_2il8FcSdFus8DpwbF8RQ8gXUv.JRAZmUCQTdh 4EVdkAo9fM8XAZ5PVivjHMZVlyHHYgYu8gycPzgmI4SG7B.9uUdWqvb52IpY AjoNigpPuGFRJI142SI-
X-Originating-IP: [77.238.189.210]
Authentication-Results: mta1116.mail.gq1.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO nm6-vm0.bullet.mail.ird.yahoo.com) (77.238.189.210) by mta1116.mail.gq1.yahoo.com with SMTP; Fri, 05 Oct 2012 08:21:48 -0700
Received: from [77.238.189.51] by nm6.bullet.mail.ird.yahoo.com with NNFMP; 05 Oct 2012 15:21:45 -0000
Received: from [217.146.189.99] by tm4.bullet.mail.ird.yahoo.com with NNFMP; 05 Oct 2012 15:21:45 -0000
Received: from [127.0.0.1] by smtp115.mail.ird.yahoo.com with NNFMP; 05 Oct 2012 15:21:45 -0000
X-Yahoo-Newman-Id: 47619.90145.bm@smtp115.mail.ird.yahoo.com
Message-ID: <47619.90145.bm@smtp115.mail.ird.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: 0T5NBy0VM1kObUTZkAyVC3luZHJ3SlVhEh3tWoWRJ3d24ls jHB8Aep7i9YeDAOY6yIIpCbSZOs_WXyRTE89oDaHY27Da7hcpXmer5p71H5j 4oW1AfazM0GYJd4ULRwC4kaorrUAb.MUV490Th1OEabhOtFu3b6XFu6Lv5Bg bKmyQ3E2TuW080GxWyY8nOr1NeGBCMpy6GKg4S2xRYrykSweH597_.HeVhCg DsM6JtquNv9H1c3jVs_i7KzTi0LzOAXyStU88cQp4Hwi4EbHP1tztLcVCZCS in8cVpzBhZnfi1QfhhfXGh0QT_ZIHg0a3KWpfrN7vhLgG6IApEGrtz4QZT_H DHQOMWSbtrt68XIRkNRjon5QuC6S1HD4_AvnxtQJgoZBALp24K.NPV42kl.7 8Um2rh8XD9YDzZJ8J.v5Q34e8O9pSa1lb6hcSWtaXsSLFxathXZY602JuCUp JQQFx2G9Bo3ldXD1zNLYjY0CS9z1KwWgAvA–
X-Yahoo-SMTP: O6_qdwuswBACWAKqY5WV46rcRuRKcFD_Xf.u0UBJ
Received: from User (kunert03@213.230.19.136 with login) by smtp115.mail.ird.yahoo.com with SMTP; 05 Oct 2012 08:21:44 -0700 PDT
Reply-To: <kunert01@e-mail.ua>
From: “Paul Kunert” <kunert03@e-mail.ua>
Subject: Attached message from Paul Kunert
Date: Fri, 5 Oct 2012 18:18:55 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_0102_01C2A9A6.72E28560″
X-Priority: 3

213.230.19.136 —-  77.238.189.210

Example Messages Sent From 77.238.189.210
From: Miss Sarah Coulibaly <angbozansarah@dvaar.com>
Subject: Dearest One,
From: Phillipe Ouattarra <phillipeouatt@gmail.com>
Subject: Dear friend
From: “chamillionare718@yahoo.com” <chamillionare718@yah
Subject: FW:
From: Blaise Samake <blaise.samake40@gmail.com>
Subject: Good day,
From: “Mr.James Morgan” <mr.jamesmorgan815@yahoo.dk>
Subject: I await your response.
From: sandra <sanmorg263@yahoo.co.jp>
Subject: My Dearest One,
From: Ibrahim Sanogo <ibrahimsanogo@voila.fr>
Subject: GREAT CONFIDENTIAL BUSINESS
From: Josephine Hadi <josephine.hadi1@live.fr>
Subject: From Miss Princess Josephine Hadi
From: Miss Nancy Luke Attah <nancy2012attah0@yahoo.co.jp
Subject: From Miss Nancy Attah
From: Catherine Hermann <catherin_hermann@voila.fr>
Subject: DONACION PARA EL TRABAJO DEL DIOS
From: “work.mission@yahoo.com.ph” <work.mission@yahoo.co
Subject: Request from Dave’s Wife, Julie writing from hospi
From: Ms Estel Bedie <msbediehenry@zipmail.com.br>
Subject: Mrs Estel’s Private Investment Fund
From: “sha_ali_4_u@yahoo.com” <sha_ali_4_u@yahoo.com>
Subject: You have (1) unread message
From: “SB Artists Management” <sbam555@yahoo.com>
Subject: =?windows-1252?B?Q29uY2VybjogTmFkaXIgQUxJRVYgLSBhc=?=
From: Bahi Arafat <bahiarafat01@sify.com>
Subject: From Mr Arafat
From: “Mrs Vick A. Melind” <drmrsntcarlos@gmail.com>
Subject: My Donation €4,000,000
From: “Mrs. Anna Robinson” <annarob00@gmail.com>
Subject: Reply-To-My-Private-Mailbox
From: Mr Souhel Youssif <mrsohy691974@gmail.com>
Subject: DEAL OF TRUST.
From: “Mr Boromo Williams.” <bwse2008@gmail.com>
Subject: CAREFULLY READ THIS & REPLY BACK,
From: MR JOSHUA BLAISE <mrjoshua.blaise@gmail.com>
Subject: YOUR HELP PLS.($4.5M DOLLARS)
From: Sam Kandolo <hlttr12@gmail.com>
Subject: My Proposal…
From: Robert Makou <drjaviskona@gmail.com>
Subject: My Business Proposal For You.
From: Chantal Akissi <chantal_akiss20@yahoo.com>
Subject: Please think about this offer.
From: Mme Kelly Osbourne <kelly.bourne01@gmail.com>
Subject: =?utf-8?B?QSBsaXJlIGF0dGVudGl2ZW1lb=?=
From: Mr Collins Musa <mrcollins.mus04@gmail.com>
Subject: PLEASE DO REPLY FOR MORE DETAILS / CALL ME AT (+22

Associated Harvesters
85.120.152.208 | H
207.150.196.48 | HS
173.45.70.178 | HSD
174.121.47.129 | HSW
109.14.54.107 | H
41.202.76.174 | HD
41.236.249.134 | H
67.19.122.2 | H
216.12.207.226 | HC
41.189.39.157 | HS
91.105.37.76 | H
62.163.32.190 | H
62.163.37.157 | H
74.86.14.10 | H
70.87.196.242 | H
208.53.147.89 | H
209.160.32.70 | H
194.72.9.17 | HC
208.66.195.2 | H

41.66.6.74 | HS
41.206.85.34 | H
74.222.4.133 | H
208.66.195.6 | H
41.218.251.251 | HSD
195.229.242.53 | HCR
210.49.239.89 | H
196.29.105.9 | HR
207.150.196.53 | HS
115.124.113.134 | HS
74.12.48.142 | HSD
75.125.194.194 | HS
41.189.38.204 | HSD
41.82.173.158 | H
209.160.72.139 | HS
208.66.195.4 | H
75.37.116.174 | H
41.82.75.98 | H
74.53.243.18 | HC
208.66.195.7 | H
216.40.220.34 | H
69.46.20.87 | HS
173.45.77.106 | HS
174.142.104.81 | HS
208.65.60.105 | H
66.235.180.7 | HS
74.222.11.76 | H
24.69.53.23 | H
81.195.121.253

________________________________________

“Paul Kunert” <kunert03@e-mail.ua>

X-Originating-IP: [98.138.91.37]
Authentication-Results: mta1265.mail.ac4.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO nm18-vm0.bullet.mail.ne1.yahoo.com) (98.138.91.37) by mta1265.mail.ac4.yahoo.com with SMTP; Sun, 07 Oct 2012 00:21:23 -0700
Received: from [98.138.226.177] by nm18.bullet.mail.ne1.yahoo.com with NNFMP; 07 Oct 2012 07:21:20 -0000
Received: from [98.138.226.132] by tm12.bullet.mail.ne1.yahoo.com with NNFMP; 07 Oct 2012 07:21:20 -0000
Received: from [127.0.0.1] by smtp219.mail.ne1.yahoo.com with NNFMP; 07 Oct 2012 07:21:20 -0000
X-Yahoo-Newman-Id: 925237.87603.bm@smtp219.mail.ne1.yahoo.com
Message-ID: <925237.87603.bm@smtp219.mail.ne1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: aMaIVAsVM1mcsPMBdHpy_Od726OlFwrt4i.RfI70J1kdbqn lFLa2cnB.svc062TsBmOwspfg8MzbnuuPt9GdSc7W0m_lX5DN86Rb3Lpg4s_ _XvSGAe89EYvhPqKRyOZNs8NGgNVVhAJBZNXUpnWmltay8aXE8FmBgybQznG Bwzed.xFuAACKwn9Tr9YzEQ0A4nuqwPi3E49j6pOIvK8_ezRxWNpCyEQl7Wd 4bw3yOUinFkBsS.prFqAEm0jX.s2ddwxObQ0C.Xp5LqHBHhQMe0yWoT8B0g1 YgIVTskyjv46gHqToDLrxgiJn0Ku46w5qzL98Puphv5moQjizry6l.D47ke9 ZhtoU7xZq_nZpu4bdHxSVIGDPt494z784uLQ0WAl9afUUcHrSTHaqErBGxPf 058iZcBa3iP_1SSm6YPk4mxvcr1.9G6r4D7RlwX26QDL7aEuxoQRb_1h5FMU yxrkJQO80h6HkZYijGeOP_Cb_El2rYqDC9Wvn8J5tKnY-
X-Yahoo-SMTP: cgj1Dz6swBAPotAFLnguhWhhyXRXcWKIb_80lDs-
Received: from User (kunert03@41.190.2.188 with login) by smtp219.mail.ne1.yahoo.com with SMTP; 07 Oct 2012 00:21:20 -0700 PDT
Reply-To: <kunert02@e-mail.ua>
From: “Paul Kunert”<kunert03@e-mail.ua> Add sender to Contacts
Subject: Attached mail from Paul Kunert
Date: Sun, 7 Oct 2012 08:21:19 +0100

IP: 41.190.2.188 LOCATION: NIGERIA

RETURN-PATH: 98.138.91.37

________________________________________

Attached message from Paul Kunert

Return-Path: <kunert03@e-mail.ua>
X-YahooFilteredBulk: 98.136.217.65

Received: from [98.137.12.60] by nm22.bullet.mail.gq1.yahoo.com with NNFMP; 05 Oct 2012 12:44:42 -0000
Received: from [208.71.42.214] by tm5.bullet.mail.gq1.yahoo.com with NNFMP; 05 Oct 2012 12:44:42 -0000
Received: from [127.0.0.1] by smtp225.mail.gq1.yahoo.com with NNFMP; 05 Oct 2012 12:44:42 -0000
X-Yahoo-Newman-Id: 255385.13736.bm@smtp225.mail.gq1.yahoo.com
Message-ID: <255385.13736.bm@smtp225.mail.gq1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: oeD.OjAVM1nT5.oYbwvoQZ0_sc1r8Tj.RdorTUt2RW_PkRI fJgoiRocZ7uhixUjQ0FF_1KTxyAv3b6U6OuWV0.MGXQkLH81RrTGQ6avKn6W 2v0f.O0DS5w3Y3_NWbRmnzYUwR766kWEblokyKpl8a61i1ZslIwztHVG_kju RfFCbeZdCuNPlrzWwgPgDcZunb1tDgMcdCEsXNvP3vJKTJphjko6NuaUmKB_ heVSO_8PCHoMeqFtkFvUtqb.K6W6wFUxAoGkOhOq1fN3qVH3HdHIigpH57d8 3jzBznM8gSPsRBLKi4lHQSFJes.lb5Umop6wIOIL.Xix4yLvEfF3tZIhpoIb 90z.XGESS2NWURgttG.O4_96iJf5.LzEO8TsWvrhm0AYWO8OUiKjT0K67KKC GOqe8tNIma2jW.OO4Eaqo_GfNs1poBVVRbF7K95eZbjzOf2Mo3dzk4stm5XP diXR_p9O7rsPRodPiOWtcDuinet9mNOFXtoIeoSLkX8l9
X-Yahoo-SMTP: lSXdSeSswBBwbDV745xUu6IpKX26HqApS7oconBY
Received: from User (kunert03@41.190.3.165 with login) by smtp225.mail.gq1.yahoo.com with SMTP; 05 Oct 2012 05:44:42 -0700 PDT
Reply-To: <kunert01@e-mail.ua>
From: “Paul Kunert”<kunert03@e-mail.ua> Add sender to Contacts
Subject: Attached message from Paul Kunert
Date: Fri, 5 Oct 2012 05:44:41 -0700

_____________________________________________

Return-Path: <kunert03@e-mail.ua>
X-YahooFilteredBulk: 98.139.213.161
Received-SPF: none (domain of e-mail.ua does not designate permitted sender hosts)
X-YMailISG: cmGpZdAWLDuxhP.iqEaa9hAPGRa7FDSu6mKyBNeCuVXpnSJL bjMzL_qiIyvMwVs1HFVVp4xDWbv7yThN9n0bcVL4xWrKyksSD9oNZ0RUcJpn affnLXiZOkHjgoHUSICBEtTdEsKY1RNiYcChXiinSxzw6du7sE_WvjaYxQVk yw9y34KHlY3pulbnfXDlrVTl0lxshO40cJPuNGo0lDa8WyDCC1PBOAfzsEsC DBPVOvKYzIbQfeaWDwp_ErlrS3u2U2AKDSIRicaneVAqNNoJKrYkpN1n.0D8 UNVrRn8Mt3JWZW5jrC1wTCmbYdNJDbgG113hruz9H04jp66GvKN3ksjVjQYN ._6lLMmiYZkde3u4yiG2ojXinZwg9kATvy7iYA_3LPwRmihx8WGM_1YMb6fu YzEU8fb7XgwPqGKAefJ6xlBWpipKfg.tNvOVXxN9gPomjlS.pbxTQjT5UMoH k6hoAPL9HIsmz0Mf6ROA.X7WgLSoJl83Fxec85ypa8x6weHcUUTOp.HSbH8. W1RPb0KwlHM9wexdTm.6KjggK0tSMFSnb89xIjIe84aXUcssrRZcpO03pFpe l51hzoRCVqHq_i0Vskr9aDrq3wKQCZ0vHtmhOGxJA3gDCpaXykNgzr5LENT6 kkQsU11syfxI3jO4xTmqDcXC_QyISEFCA5cl7OPX.UJ9g_ONMyah2WmyWslX uQXHH377pfTQ8Gxe8hDKzW0VolCEeZm72Y9KmqmhNoO9jeGa31ggxgOIgGHJ Qk0RZcw2rugsmas7BfDnoR0TDq9dc5AA8Yinyc1Boj_RH4wlC8qebzUGOJDY 8UciI4JVQI3u7YyOirpWVoTBgDglNFTIottwB1QTlw2sDwMOLUPP1p1DGlfk P9uydeWWba2XZv6DOz9Wk77DbBvR_1VIPrcv7bPXAevBO0LboTPo7dGlEh07 .pwPcgXmt.0iqRB.DOOCTqMySjWvNwN0h0gTlP6hCdQGEmNqu8zsSPOGI28g IjKxrieezARgq.wP2aJKS5jgG7H.Elmg3FuQ0eQ_Xe0h2SxmOcglx12p0Wn_ yaD7AXCfB94tf3NdE1gpVREEgP6qOxtMF7ADw8mfOPFMwlLFR4GIcmgAL0Sw ModCoimq6Jt4.j6yMqf_YeFtkidSKuebGU.HcRtQ0.2KWUU3Mu6vUgrsfSDu 9E.S3OywXMw-
X-Originating-IP: [98.139.213.161]
Authentication-Results: mta1100.mail.bf1.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm24-vm0.bullet.mail.bf1.yahoo.com) (98.139.213.161) by mta1100.mail.bf1.yahoo.com with SMTP; Thu, 04 Oct 2012 23:09:43 -0700
Received: from [98.139.212.153] by nm24.bullet.mail.bf1.yahoo.com with NNFMP; 05 Oct 2012 06:09:41 -0000
Received: from [98.139.211.203] by tm10.bullet.mail.bf1.yahoo.com with NNFMP; 05 Oct 2012 06:09:41 -0000
Received: from [127.0.0.1] by smtp212.mail.bf1.yahoo.com with NNFMP; 05 Oct 2012 06:09:41 -0000
X-Yahoo-Newman-Id: 817690.47386.bm@smtp212.mail.bf1.yahoo.com
Message-ID: <817690.47386.bm@smtp212.mail.bf1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: _hcV7D8VM1n9YE09yFWe62AboF5Kb8cFhEATGW16Q.syCCA X7.0spNKn2a_o0V0Lq88Wi37chDLESMjlxy0aaP1IdU77Dj1nMSpcDNvvZED pBVnGOXclLBXJxVN9BCi7I1WsE2IqV2cJCBVsVRIPqHGgp69hKrh0CKtsENX 3wc9mwTQK43tOX7xJXT_lbUKgZ75wJEf907uWOHyCpeiaFpEEHO16ie1Y16W 9ZWBi9aW0ScL0ObY2FXdXuQWjWZjlu_i.kAICFadZL5YiTWdFxK2UgsWinuA nQq5iwpgfwA34Zm2vVxjnBPXxVKVZqiH1VE1muKK8a30kWVedIcXx9gTY8CR SCI9S11DIBCc4Q5pDEv6D8ic1Pdd4q_c8eWrPRnTfrUbMjp.l5eCcdre0UJ7 uKCndg0O13TtfmxfzcdDR.nipcmCDeLUW7Z4hEPTmrFcKZPAEW6jRHIO6Hkp hWd2wOAol5j_5pf4f64rIRXDLWzgx3S2bfmpZR0ruBg–
X-Yahoo-SMTP: qVA2512swBCvmquTqBHkYVRza6AhdQ.MGvYxddLi
Received: from User (kunert03@41.190.3.28 with login) by smtp212.mail.bf1.yahoo.com with SMTP; 04 Oct 2012 23:09:41 -0700 PDT
Reply-To: <kunert01@e-mail.ua>
From: “Paul Kunert”<kunert03@e-mail.ua>
Subject: Attached message from Paul Kunet
Date: Fri, 5 Oct 2012 07:09:41 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_00E5_01C2A9A6.55CD3D6A”
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

IP: 41.190.3.28

_________________________________________________

“Paul Kunert” <joanwist4real1@e-mail.ua>

Return-Path: <joanwist4real1@e-mail.ua>
X-YahooFilteredBulk: 98.136.216.237
Received-SPF: none (domain of e-mail.ua does not designate permitted sender hosts)
X-YMailISG: mcctkXUWLDtDBcCYFXyusvuSgrzFpMqvkeuWu9htMhHl8L.K 5YIRzBIVhx0oA05ld.6Q.BJh8iTiffWbPFKQmHOqIcHvw2mQoN61PLvs1b8e 4W6FFmu4BPUdeEb2iIQids6T9dm3XmeGB2T15zR1WZS4hlWauF0qRowgmzdw .SdMZDvB5_EfOSqYk9R_9475iXykkBcjC6Hd_NWjQS1uBYrbXxb0dD746MAU ynTavjd3MYbSWK3pzHVuAqz.Q1nSaESVDU0rWgTj8EO3_FkcObebI5c0Rmwr hoMkm_doO9xfzIl6e7O4h7vKeRaBy0DPQE9_J6vpIAaRW4gTOv3RzZeAOr4c ZZmjDPzABu2rVAQtXfyb.aPEcjqde4BhDWcS4Pg4Eb.rI7szR57OHfbFN3ik 1FgzxbiTrTn1J0BlVoBcWM8uGOylF9nUZU911L2sUinBQlPTGvsQEcbh0nvj S0toI7cTEUr9qGXVF99LRA5h4904X5Y311NeRoQQMWG3Dye94uyEys6ZXeRP k0sbLI1fx0IbCH_sNjUZN6SAYp.LH2gDpRRa.idtzw5sg5s7FW8RmoKHPcjL EAYbu2kRLYo_b6vG0Xjs233lCtG9DRUj5orGliopm6NEO_9AOpjhWZvXBFtM d27hzooUpvD28rH..BGqGs_jITjsz9gjxJ6fPtj5UnC4Tt61_rXdYlp8knGs QgYrqKE4kbdu9JaNByQR4.Nl9LFTT2ZPk47uefF3xc74pV14zQuw.qHgrbIQ QZep1j_spZ6q8v5mcxm0173WkGYnA46dVL33TilqKCYRBuUC2isMiPXX36FC g8RIzmS5zW_1cSFvSyYnDQ4xzCk3oc6kA2MJaJfQ6sK0cAtCJJ4Ss4wHDs6s QmsctzuR1JHkrHuZ4xf1f5voPC0W8rudMyA9IT3AvHlf32iMW_5BdGdHFYzT JiCJOk9pxlUl0SXDTyUszHtDel2I276QAm1gaJEBLpgW6sBZG8OOeY0W4Jw0 OgVma3kGBMQCw3I2hWKcesFLCXV1W9_03RsZampz6GFQMaan8Uk.PIuhlJSq ut7ByzIDGILM4VvkE4rY4xXE0OzD3.tmZgl7pBzjUR_g6TSnToS.aylHoXBJ Z1zmaTBwNb1EM0xgXinOiB4BbtTtdeMQ6iWy6ZTvHgxpHLtAGaz95SKtm13d jmZTPs2YUhvHswbGeMJLWU.jR2DWf1wiT9n64C0kPiSXSQ–
X-Originating-IP: [98.136.216.237]
Authentication-Results: mta1149.mail.mud.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO nm37-vm2.bullet.mail.gq1.yahoo.com) (98.136.216.237) by mta1149.mail.mud.yahoo.com with SMTP; Thu, 27 Sep 2012 05:27:13 -0700
Received: from [98.137.12.57] by nm37.bullet.mail.gq1.yahoo.com with NNFMP; 27 Sep 2012 12:27:11 -0000
Received: from [208.71.42.214] by tm2.bullet.mail.gq1.yahoo.com with NNFMP; 27 Sep 2012 12:27:11 -0000
Received: from [127.0.0.1] by smtp225.mail.gq1.yahoo.com with NNFMP; 27 Sep 2012 12:27:11 -0000
X-Yahoo-Newman-Id: 218385.41445.bm@smtp225.mail.gq1.yahoo.com
Message-ID: <218385.41445.bm@smtp225.mail.gq1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: WH9WPKEVM1kXp4ok_6hfSESP1Oy4n8qpfic1jgXeMETkr65 0LxNnqyeJzxQLwjMLKtzLB4xxzfs9keFhjydzSUGqYzC_54tl_veKc9jF6CA Jcm.T7dAxelog49SJAoCiPnyjFQN9nYfp_T6SMx95JnqV4323X7sROdgFTbg 5AYbSHVpppVW2Dty_GxOFpzB9c2kqbd8BnE8RRvvOOHql5qMin06X5blqHLo RiC696JMsMfvORU9Fp12gc0cO.CyCbiHpfRH1.fTR8If7L2aPikBNEXVj3Mw 0xquCew8HKks1IdrcVzwyadxQukP8R8ctb07B8C9DqcfU.87Ei_C6rouVvaD Rh5Au3LhTcNFJDJvlt4.HvYEstN18iK9yLjPqhCC4yfUXrdF1bDZKKQjcFLD wJGgm3VRv03bSHTxcKuooA4VdqULjMuAr4w–
X-Yahoo-SMTP: 8QgoOC.swBD5DCtAAG.6DhGxZ8qf1FhoxJ9cCycI1w–
Received: from User (joanwist4real1@41.190.3.220 with login) by smtp225.mail.gq1.yahoo.com with SMTP; 27 Sep 2012 05:27:11 -0700 PDT
Reply-To: <paulkunert42@yahoo.com>
From: “Paul Kunert” <joanwist4real1@e-mail.ua>
Subject: Attached message from Paul Kunert
Date: Thu, 27 Sep 2012 13:25:56 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_00DC_01C2A9A6.74B8CD6E”

IP: 41.190.3.220 (NIGERIA)

OTHER SCAM / SPAM SENT FROM 41.190.3.220 ARE:

From: Dell Crowe via LinkedIn <member@linkedin.com>
Subject: Re: FW: End of Aug. Stat.
From: <accounting@smashedstack.com>
Subject: Re: FW: End of Aug. Statement Required
From: “Bridgett W. Navarro” <coopercurtis@glassoc.com>
Subject: Buy Cialis Online – the LOWEST PRICES GUARANTEED,

__________________________________________________

Associated Harvesters
67.228.80.90 | H
208.66.195.11 | H
66.90.101.61 | H
75.125.52.66 | H
65.111.169.191 | H
208.66.195.10 | H
209.160.32.68 | HS
87.118.98.62 | H
213.103.243.157 | H
67.86.138.59 | HC
216.40.222.50 | H
67.228.115.170 | H
71.158.134.213 | HC
216.40.222.82 | HSD
216.40.220.34 | H
77.160.89.4 | H
208.66.195.5 | H
24.37.14.73
208.101.44.3 | H
87.210.12.92
74.86.209.74 | H
75.125.47.162 | HSDW
194.237.165.84 | H
70.85.113.242 | H
24.10.35.67 | H
74.124.192.3 | H
68.103.197.12 | H
216.40.220.18 | H
67.19.250.26 | H
208.66.195.2 | H
209.11.244.162 | H
189.152.69.96 | H
208.53.147.89 | H
216.40.222.98 | H
209.160.65.42 | H
74.53.243.18 | HC
87.244.228.251
216.12.207.226
75.125.194.178
208.66.195.6
74.53.249.34
74.86.14.10

_________________________________________________

OTHER EMAIL SPAM SENT USING THE SAME IP’s AS THE ABOVE SCAMMER

From: “Dirk Clinton” <backyards6@tattoogalaxy.com>
Subject: We change your life to a better.
From: “OctaviaAngeles” <dorineleda@ge-smart.com>
Subject: Buy Brand & Generic Levitra Online :: OVERNIGHT Sh
From: <WhitlockyfdO8FUMIKO@aol.com>
Subject: V1aagra 150mg, 90 pills, USD 5.06 per pill + FREE
From: “Amazon.com” <account-update@amazon.com>
Subject: Re: End of Aug. Statement Required
From: <LeonardoHundley@mail.com>
Subject: Re: FW: End of Aug. Statement Required
From: ВЭД: НДС с��ав��а 0
Subject: Бухгалтерский учет внешнеэкон
From: Но��ый зако�� о бу��учет��
Subject: Новшества в бухгалтерии
From: “Terri Reyes” <prefectpc78@gordonsglassltd.com>
Subject: Your long item will enliven your life.
From: Tagged<Tagged@taggedmail.com>
Subject: UPS: Your Package H2158853444
From: “ВО��О
Subject: РАСПРОДАЖА ДЕРЕВЯНН
From: “36 ��оток”
Subject: ЗЕМЛЯ даром (реально!) под ИЖ

 
1 Comment

Posted by on 12/02/2012 in Business Proposal

 

Tags: , , , , , , , , , , , , , , , , , , , , ,

Dr.Pere Hart officeonline82@yahoo.com dr.pereh@yahoo.com

Lottery Scam (Central Bank Of Nigeria) ↔ Nigerian (419) Scammer

Name: Pere Hart

Email-Address: officeonline82@yahoo.com Reply-To-EmailAddress: dr.pereh@yahoo.com (drpereh) 

Subject line: Hello Dear

Email: Hello Dear,

I wish to inform you that all matters relating to the release of your payment is now under my control and supervision. I am the deputy governor CBN.I was mandated by the President Federal Republic in conjunction with the Federal Executive Council (FEC), the Senate Committee on Foreign Debts Reconciliation and Implementation Panel on Contract/inheritance/compensation funds to complete the entire unpaid Contract/inheritance/lottery fund.
This development has become necessary due to the activities of unpatriotic government/CBN officials and impostors who keep on frustrating every benefiry’s effort to settle our clients by making requests for unauthorized fees and levies from them. That we have resolved to put a stop to in the current payment schedule to ensure total transparency and orderliness in the release of all pending payment. We sincerely apologize for any delay you might have encountered in the past but be rest assured your payment is now 100% Guaranteed.
To this effect, you are required as a matter of urgency to reconfirm your information including your name, phone number and your address for verification and immediate release of your payment within 24 hours. On a progressive note, the sum of US$10.7 Million (Ten MILLION, SEVEN HUNDRED THOUSAND UNITED STATES DOLLARS) has been approved for you. Kindly choose from these three modes of payment (wire transfer, diplomatic cash payment and ATM card) for the release of your fund to you.

Kindly get back to me ASAP.

Best Regards,
Dr.Pere Hart
Deputy Governor
Central Bank of Nigeria

Return-Path: <officeonline82@yahoo.com>
X-YahooFilteredBulk: 72.51.25.85
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: lulAo4gWLDs9SSEM7lCzQwzbp34RZEjmH2pULm4LNNKVcbym VovXEgWn34Pbiwbi92_xnQ4PmMgqkDe7N5o8_DYqEFFBNyZenOxpUEYQSEST ofGfirqofKE7p3cAPaF.THmlV7JF2Ye5k_jDq4X6VcnkI6GLs._QdayLdZDk j4Rq1M97hYtWGK6ouZmfKgQNZPF_vYzD1bdq1vWMYuQ3ZxIC8liyUMiSFH7s eepp0QXe50e9H8syB4fD6KOHTfWo0uwabBocBE5k0xrFG8SBd1SRfEdjDyOz LjzgImDo.NjgQE_Ib_RScC2m5duMFBSwRHJqsNryDExJO5YVzszGDey4lP7T c24FO5D6rB1sDSPSB2Oxf8e7Vb2Xa6VXAKEES1mM5PolzMbEvSMASso4dxxk g.sILhJRheHVnIgaS.rMXdngtRtPw7ipSuQgD3hg6ngCtpVNmbt71U6NMV0s 2NglUyDtfsT9ItHgrzbPewuqCuCXvFs_aXTdgaMDQ2ddPRukxlNzjAVnARrP 02ntXZiRQNYmrDjQlvYlEaAUo29tzo5W_4Lo6WCQFQP.JdKJdiVO6RMFCToL alelKfcdh4mxCecayl9Zag6tDypVUj6D5DxGJU8lZlhHXl5wAsbiwh5zraN1 C5BwNUOLQQdz6aTzhZxgKiwvGRQXQQprBagDApvpUHgzs44OZNfToBKtGYom d7xhPrw5YxttYtB499siOaR6YnExq6pDDqnvfK.4A4PEOPEZUnSEAMTViJjb HnwnR6I91AD0LjUPAmEvebvb2Xkw0lziYYl6VcQBo6P9HrC025Y8eU1uLD.V V6TjHgeSpAZW8qSRgz8R5sGgNILTVxyIqfQz02AFiqJoSX6hQXakdRnuJ5gB XD2ygdSvz53ilZyOzLbJz1RCVJ7HBP42_tdtTS2t0axFaSYho30iAgV37oOb n5CpxiQBI46Ht6jHZUddJANzUii5Mo2SoMinnabJvU0EPVs5d_y4B2Y5tzbl Y3yn.Sjy6vp_6HpoLBBaRS5BPlCnuP67ESVumZ3Zlf4mqSRlcvMEJZ2CUY80 r61pMRw7k1B1LKHUrZAATYRDvfQm5_JPwDao3rEEYXAj71SK51CojNPXGh9i RhNW38VC7uxVy17kMrqr4ri6v_T5KH6XrgZ.cg7B6kj0mzX7LAMAalcbrFQd Z8wU2jQ8aVziE1gswXuz0LVfP786mgUEQujQZlwqTPz4Mti8QnfWfX3VqVNp CCOwn2QPleB5_ikfuIYjPjkkIFxzvvOIrx.FMX4hwReTDBOP_t6T9MwLZN2h .pWtTBqa16ol5IHIHbK_GAm.
X-Originating-IP: [72.51.25.85]
Authentication-Results: mta1076.mail.ac4.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO vps.funlearneng.com) (72.51.25.85) by mta1076.mail.ac4.yahoo.com with SMTP; Tue, 16 Oct 2012 22:11:43 -0700
Received: (qmail 13397 invoked from network); 15 Oct 2012 17:03:30 +0400
Received: from unknown (HELO User) (213.230.19.136) by ballebc.com with SMTP; 15 Oct 2012 17:03:29 +0400
Reply-To: <dr.pereh@yahoo.com>
From: “Dr.Pere Hart”<officeonline82@yahoo.com>
Subject: Hello Dear,
Date: Mon, 15 Oct 2012 16:00:40 +0300
MIME-Version: 1.0
Content-Type: text/html; charset=”Windows-1251”
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Content-Length: 1943

Read the rest of this entry »

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: