RSS

Tag Archives: 72.64.146.136

Nigerian SCAMS

These are scams I received back in October, 2012. They got piled down in my spam filter so I’d figure I post two or three of these scams in each post.

email_scas

LOAN OFFER SCAM –

Are you Interested of getting a Loan if yes contact us now?

HEADER DETAILS:

Return-Path: <web.offfice_000332@verizon.net>
X-YahooFilteredBulk: 98.138.90.73
Received-SPF: neutral (98.138.90.73 is neither permitted nor denied by domain of verizon.net)
X-Originating-IP: [98.138.90.73]
Authentication-Results: mta1377.mail.gq1.yahoo.com from=verizon.net; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm10.bullet.mail.ne1.yahoo.com) (98.138.90.73) by mta1377.mail.gq1.yahoo.com with SMTP; Tue, 23 Oct 2012 03:03:16 -0700
Received: from [98.138.90.54] by nm10.bullet.mail.ne1.yahoo.com with NNFMP; 23 Oct 2012 10:03:15 -0000
Received: from [98.138.89.245] by tm7.bullet.mail.ne1.yahoo.com with NNFMP; 23 Oct 2012 10:03:15 -0000
Received: from [127.0.0.1] by omp1059.mail.ne1.yahoo.com with NNFMP; 23 Oct 2012 10:03:15 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 357052.79815.bm@omp1059.mail.ne1.yahoo.com
Received: (qmail 4776 invoked by uid 60001); 23 Oct 2012 10:03:15 -0000
Received: from [72.64.146.136] by web84611.mail.ne1.yahoo.com via HTTP; Tue, 23 Oct 2012 03:03:15 PDT
From: A Line Best Loan Firm web.offfice_000332@verizon.net
Reply-To: alinebestloanfirm@yahoo.com.hk

JOB SCAM –

Your assistant please

Attention please,

My name is Kim Wong, The Owner of Kim Wong Trading LLC,Kuala Lumpur Malaysia. I have been into Manufacturing of Fabrics,Textiles and Furniture Wares since I was a little child that gives me about 23 years of experience, I majored in art in high school and took a few college art courses, Most of my work is done in hand neatings mixed with Machine Embroidery.

I have recently added designing and creating artwork on the computer, I have been selling my Works for the last 3 years and have had my work featured on trading cards, prints and in magazines. I have sold in galleries and to private collectors from all around the world, I am always facing serious difficulties when it comes to selling my works to Americans, they are always offering to pay with MONEY ORDERS OR CASHIER CHECKS which is difficult for me to cash here in Malaysia.

I am looking for a representative in the United States, Canada and Europe who will be working for me as a part time worker and I will be willing to pay 15% for every transaction, this will not affect your present state of work. Someone who would help me receive payments from my customers in the united states, I mean someone that is responsible and reliable, because the cost of coming to the state and getting this payments is very expensive and time consuming, I am working on setting up a branch in the states for now I need a representative in United States who will be handling the payment aspect for my company.

These payments are in money orders and cashier checks and they will come to you in your name, If you are willing to WORK as our representative, All you need to do is cash the money orders and Cashier Checks, deduct your 15% and wire the rest to my company cashier here in Malaysia.

If you are interested in this PART TIME JOB OFFER, Please get back to me as soon as possible and send to me the listed information below:

1.Your Full Name:
2.Your Full Home Address
3.Your Direct Cell, Home and Office Number
4.Your Age, Gender and Present Occupation
4.Your Marital Status

The only problem which I have is trust, It will not cost you any amount, you are to receive payments from customers for my company which will be sent to you by FedEx or Ups from my debtors, which would come in Money Order and cashier Cheques depending on the of the payment my customers wants to use, then you are to cash it, deduct your 15% and wire the balance back to us.
NB: All charges to wire the Balance to us will be deducted from our money, so you are rest assured that you wouldn’t spend a dime out of your 15% or your personal money.

Thanks for your assistant and God bless,

Mr Kim Wong
Kim Wong Trading LLC
Lot 925 Jalan Kepong
Kuala Lumpur 52100 Malaysia

Return-Path: <mr_kimwong@etorq.net>
X-YahooFilteredBulk: 211.154.152.136
Received-SPF: none (domain of etorq.net does not designate permitted sender hosts)
X-YMailISG: yoXgebkWLDvhvSfGpf994bmowTFZpMDPw.1lseHkGA6T1SnA p1t3YxvxJS8N8EA6awflpA_S2QDZLDNMysomaZ_MhaETYuaVnjK1VCJfTVKg GS9W.3ZA3E0Nh3jVpAmuwHhVIFDW4md6Ih9TNntrWk8ZC7..jVHc9sonfVfW kOEygm8wmiN5oXRKB.x2mDSGgaNgpBu41IjFp3gBszrQIbsrDvNrrbX9uTH_ p7Rmx_l0Zrnd9FnqK.6C.zDTZyUuBsTQzCnWsM8tN1i_VRV0x_8_U6RqsTFm msR1VVPtNvDefm9IQjfYvdwJi5u2l5cNzeXjhEbiJmh2X_yK3vkalx4gjUjh AA_sYJdx7rgzLQ4_6TUXm96XQ0h4Dj_q9q4rAkf4ng0GzIJuMbhIWz9SSyc9 ky06NEAdJ.cBOsYY9pgrcAknG7Y1E2ecsvgQVSvIFQkstnNfG6BfSLt4dUe5 P1m.zXjK0.Lt9okfVcAJD33H_m0P1BCnItM4qwEFQmK91MxCGzCumuWqjPgY mJB_mcLtk3GZYcEf5z6pgS4q0NcL5BxMZ9pRg2jSIh6L8.EofXjDJ0QLTH2F oIvu9VLDtSm9CGm4dH3bF.fLuKCzPWcIR0W.cTJ1lx5E6.3cSpC6tu3xvrKT 3wtlgnidfUeFjY_B40NbWu7gSyUVmUYqSZcI53AkvjJhGr8UVgQZeZQz3_dF G3IKjw1ZbJO_m6WGSUENcg71vx7nFW7LeSncqg_yPEKXpNHTZoqUy4vNPlJB .edCKetnFzhsNi.fpSYxgKwiY4zAB7lAAnGVv_LTSiuNHY8Gq4_BjbG7TUVh 1jEbBhPSdv6h2Xn2d_a7_wluSypmlmmijiwoAyjJIzXIQRxOGyAQUpLNt3ic kidbPtvVlp9C5BxHHlSC4l_TaH2audAFdA61K6KkLpVzKbs7aDlwAG_4JY.P eHDCSLcxciwXAbIVMDhDjZzvgAxY9jnt1sY71l7n7d1dl6ufMrE_o0_qDe1j gk.030j9Eoh1E1ERfEHIOI85Czc2grhxp1jZP1GPEcz_HcFqrSn_eKAq.2ab BfXWVSKD5C53t6ibYYh55uQciKnQjLdW1DfMxvcOadU56IUCpJhN_X3tzBgB Vq7jtWkEC6p8UoTEaiFTL_bWrElyr4fvGLTgBOPVxMvn1t.ZmSAZquSUnn4E qSyewFfWh_6vi30xuvWs7yvkhvzMwEH_vHf6qrBNx2h8JRqQ
X-Originating-IP: [211.154.152.136]
Authentication-Results: mta1468.mail.mud.yahoo.com from=etorq.net; domainkeys=neutral (no sig); from=etorq.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO mail.giantsea.com) (211.154.152.136) by mta1468.mail.mud.yahoo.com with SMTP; Mon, 08 Oct 2012 13:09:44 -0700
Received: from User ([82.128.3.119]) (envelope-sender <mr_kimwong@etorq.net>) by 211.154.152.136 with ESMTP for <pondillobelle@aol.com>; Tue, 09 Oct 2012 01:25:27 +0800
Reply-To: mr_kimwong@yahoo.co.jp
From: “Mr Kim Wong”<mr_kimwong@etorq.net>
Subject: Your assistant please  Mr Kim Wong mr_kimwong@etorq.net

The two emails below is Nigerian scammer Larry Williams (fake name) – I was baiting this scammer for awhile, and the emails below is the actual Nigerian typing (you can tell by the 1st grade spelling and grammar.) By this point, he was getting frustrated.

EMAIL – Guy, U want make i help u carry ur address abi . Notin do u …. Give me ur id make we talk. U be Olodo. I go tell u how to always do it.

EMAIL: I just called you now and you said wrong number. Why?… Reply me back right now.

Return-Path: <larrywilliams5006@yahoo.com>
X-YahooFilteredBulk: 98.139.212.177
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: wf2nLmYWLDs3qR0JAX1f4HjPHq3NuuRQcNTSjH3Z.pPEUz.a 9rHAXJ7Sv4Uq6HjJ7xuQaV0_pJ5m.Zr5yDGFBVB4mrS7iyKJHgfpaf48oZQk BFVUO_LS9G1acpoTgNSBtI9HRzCaTT5uJZgp7MYxBvTKnJZMIEpEGbd2Kl.w pGI4.YKJgBA3nQcaEPzi2eUip2ta3NkaRPlcxd_IpV0G3G4lmy9BI2F6YSkg ypIpwNVUb1jnL1ZzpOPulVZdSmIyXSpZcRfViLDXJLIVOl4fUKI2tOiFx_eA kWxeQTpgp5ZZoKzmy5hV_ssT_BNHQ9.QNPlGl6UuEl7FNKieEe1c7SYa57Na ZXcIwaAcjbre7qSUwjS2O.DD3OgZrrHKgh7kDhUw_fOi_5Rog0BUaRKp1h7v 0pQELtDSixap80k1KTKHuO2nqtV7j_HP8b2FG0NbNLZ0OVv6p4bWAyShZPmt WZwpm0F3vRIwlbnaosXMrHhBkWHY1.t4l.Yq3JsXOByY6A2tlPbZAXpKeo8S qXbhT428jubkQ6mlC01rKJUWUpLwhVyrDZF2zu8yXLSOI9TjwMMSrB5rSDkC h2.WGx1TcOCpvqsetXWokoW8AApr.r50K5m5Z4tKS_tNNWxR52oB.QBJa74C 7GNDsPp6dKncsiwKdSqmnpJ6BEClV4OLcGYpMywNCytYIvl1ikkCQPFQW3U. zfkmrM8L7bDTcLLQAa3NE4nCCYn7CqlOFJ61NvVMH97Zbue9o1ZRj4oDrXGr BbLrc12FpDL51MgNwUW79.liQXjKs1T6cfWmNox2Uget10hkdzVg6lx6HI6q wL0LFwdJ4lkKDZr1T8VRBtde8V_ZqjylxffNEwlyvdKG90IjT5FRbUkxeQyR ENUdOLEdpOvtJYeI4yMgxGWvBy45JjtdYMiXLsvQw7eNdfGKRsbZOUblFU6m OYozogK_bsXY3d37eqPo2.4k9.RemO1Ka8tzOniUmEuCgo8QmbtGMi0OPUzb kJGULSRzcVTug8rxEeLvOU1yIiYGwhx5tqG8YmYZPbinGTFh_ff9GyHuYx63 Fy66y9G6ao_dbq46q.If0nRuq0Z4WQxyrE6h6e8.vNV3vhEuRQW2LSp40Jkf mnz2tS0TrVy8_OMyFRrTseYGqXGORN09YOqZEcnWPcC6GVQqmCKEpaUDh25D Uu2ex9YV0EvnhGXGTH8FDK7iMjBj0FrpypKfvQed3u7dhX5.rSuKlxPT4Zqc 5dZha_8bpSC0U.28bMvqZaSN6g–
X-Originating-IP: [98.139.212.177]
Authentication-Results: mta1025.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm18.bullet.mail.bf1.yahoo.com) (98.139.212.177) by mta1025.mail.bf1.yahoo.com with SMTP; Wed, 19 Sep 2012 23:12:35 -0700
Received: from [98.139.212.149] by nm18.bullet.mail.bf1.yahoo.com with NNFMP; 20 Sep 2012 06:12:35 -0000
Received: from [98.139.212.233] by tm6.bullet.mail.bf1.yahoo.com with NNFMP; 20 Sep 2012 06:12:35 -0000
Received: from [127.0.0.1] by omp1042.mail.bf1.yahoo.com with NNFMP; 20 Sep 2012 06:12:35 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 173365.6902.bm@omp1042.mail.bf1.yahoo.com
Received: (qmail 82993 invoked by uid 60001); 20 Sep 2012 06:12:35 -0000
References: <1348064519.61035.YahooMailNeo@web140804.mail.bf1.yahoo.com> <1348121186.11997.YahooMailClassic@web161002.mail.bf1.yahoo.com>
From: Larry Williams <larrywilliams5006@yahoo.com>
Reply-To: Larry Williams <larrywilliams5006@yahoo.com>
Subject: Re: Personal Assistant position !!! { Part Time }

Larry Williams larrywilliams5006@yahoo.com

Return-Path: <larrywilliams5006@yahoo.com>
X-YahooFilteredBulk: 72.30.238.140
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: HyeaIAcWLDtfNCO1svkUmhVBkFJHwGMUricck25evtn3K1b3 ndZL3YDqBF5YbkgmhHpHsffVi0jUdb6.6GPUg9bl4zWnmd2mZkTH3NaD47.0 JKF80tcuiQB7KdzWMFMMIjFyP4CDXorgOglr8fZjxAA5Uby1l5Q2D2HQ4jFc 8yPlaah7Jxby3uhefuPqpgUgUFFhgZukeLlSmwsANIigWnFEhJCdl7sE_Pvz sR6PjWlY9wxKGSfv5U.XFWcIeXUs9qY_fwu7txcvEil_Pwqsw0tgL2NcqOf7 zpwZHBbD8uwh2dIl3ls40qbosdtV8mfrE9DZ.3pGfiY9BopT.B.3QTLGHysx NU3vX8vAYBV6PtcN0.pHrDLNzhilR7k.7fYIOfBY_Ayz5h4JTXljX7HOctfp 1nxDbDrgq3TDC0iuW3IFxZ3IPUktJof7lGeXOiv5n_t7N3WbXf0dxR6e.Dpu x26gb_bnXOGl0Gn0gLs.D27hsxl1golvVvBNFxuMpLgthizl7gty35Q7Uh6c TlTX2f1amQ1FqVJ7MX_aXOe1VkVMHhI_ll8jEHmtK6oN0XwKSE6tYUL.a9WO 9_9yGjzYZoY_UPA0A3Xx5dm7EJSWpj9Tcm8dDiCuU0rHisHINEG6suQFc._X nbr5zyr1Omp2VCFlwntfW3esBMdDcMQ10l0Bu6Wb89aLuwJIx5aIHE6Af8Ec Ad8T2OCN6L.RpL4aCFkkTD71Ev7YElLEgwuHr3feH.FU3mUePSBaZ3pKpJMX vFL0hkM5h56SCEXFBXftNN8z5z51YdkmUiitYV0HwJMtixzTSXSwJtD9d5QH TKRPDm0fk_MepcTJBrMebMnBqxf8Ve0snB_zH7Vqm.OgQCIkAbFxF1aHLQRb ygq2S5wGdstNAA3tKdC8jTpg7E1EfCokad8dCr71CemROD4mLGDWTdsMLoFQ 1Z.zDX37qwl_HdxsGcYbvgXmkGCBkzQ89Gv5fouI4ENPXlf.PBTOoZx39opB Wahded5p4TQs1JbkcaxuTKBMg90YVVI0JnoAxqkvBqAkRDv4zWa6C6J9mWTg eYrZSk52Wuqnh9D43zDgJfLb9M_PfN5o8FafMbwi..96GXuh50CDZT7yuTX3 MQenFjdGrcvm1yhvzZWrmMKrTdt7l7uD10QAhr3wYxi87ck6F6KwRnYS4E5u Vy4PHYt0MHkgZNcfuLcbHTf1KkBiXSqKhkVZ27U7Oe6R7rv2ebOQX84S3R_C HvqzYzvrp3laTkgnFsgNuPc5RYLqwwdmy_WVNjMgms.Ls8TCPa7qGf9.Sgqa lW8t.wrKtQFiYqRuoycP9.JyguyKuF48grSW0YY-
X-Originating-IP: [72.30.238.140]
Authentication-Results: mta1115.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm36-vm4.bullet.mail.bf1.yahoo.com) (72.30.238.140) by mta1115.mail.gq1.yahoo.com with SMTP; Wed, 19 Sep 2012 23:45:26 -0700
Received: from [98.139.215.140] by nm36.bullet.mail.bf1.yahoo.com with NNFMP; 20 Sep 2012 06:45:25 -0000
Received: from [98.139.212.197] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 20 Sep 2012 06:45:25 -0000
Received: from [127.0.0.1] by omp1006.mail.bf1.yahoo.com with NNFMP; 20 Sep 2012 06:45:25 -0000
Received: from [41.138.179.224] by web140801.mail.bf1.yahoo.com via HTTP; Wed, 19 Sep 2012 23:45:24 PDT
X-Mailer: YahooMailWebService/0.8.121.416
From: This sender is DomainKeys verified Larry Williams <larrywilliams5006@yahoo.com>
Reply-To: Larry Williams <larrywilliams5006@yahoo.com>
Subject: Re: Personal Assistant position !!! { Part Time }

 
Leave a comment

Posted by on 02/10/2013 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

“Agent David Jackson”

NIGERIAN SCAM – FBI IMPOSTER – ADVANCE FEE FRAUD

UPDATE: THIS SCAMMER EMAILED ME AGAIN — BOTH EMAILS ARE IDENICAL BUT WERE SENT UNDER DIFFERENT IP ADDRESSES — I’VE POSTED BOTH HEADER DETAILS BELOW THE EMAILS.

NOTE: AN ATTACHED FILE WAS ALSO SENT WITH THESE EMAILS TITLED “FBI AGENT”

PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY 

HEADER INFORMATION:

Return-Path: <webxcc14@att.net>
X-YahooFilteredBulk: 66.94.236.142
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: xoKjTDIWLDuBkmVXmCPlfbv_WZIjE5wra.dGk.EGLHd0_Ik. pzXPk3w2kzAxCK7MZDCnIjPAHX4nkOLUWkVgvqANtwsS4AgS4bOVG8Lv99o6 3BMAirzElljzLZY4wdsWw9WleH1CZEp5.UMq53jijuMwtIYd7x.ExSbD27Ot r3_dTsJdFRmlrUqFnlFrxRjc4clsrYTx8MHP8xgBArE0aAgckgmkh_NFaXes eFxkLeTk8B2toXNzOIeea16MI2RpMzkNQqVdZlAbQv9U61_3c.oKDxZ4sV.5 gY8pcctoBsIZGG9tOZpijSRxkY_VNxPwzsIyYElyeo1jXVFkDNpuiHONH_U3 ApMQzh.wDU.jhNuXBYpwGIlhfv9oTEq_hUh8LCwDygA8_4mjrCUa0F.lWk.R FtrDdBD3ltOXTwhRO32pjVB1CPDt6LTZ8YdYZkkguJVLCSNZdLESt5PiVvd6 lGX8smgbIpn7foNPQkAZVH9SBLePPnJ0LgJ60bsjU83T4qfyrukgl9KdXub7 MABdwmieVghKVFJMzfloN9dLl3RNh.YOCUdkfqwYsgMbeNtb5H7_eCFoK7OP D7gfZPsFtVjEXCNrOM0LafoFgGhsN8EKmcfG2ezRE4LEMYJCNNTmTHWcR57P jIP1Um.Sqshw1pFjj1DLniKvydPsCH3Ss_G6feYrvRrZQNOYYsMXe7s4p14o d9cxRoG0dZtitQC0n3nLFx4qiuT2TFhofBB.T.t1sPhZQdnHcBuQzEmbw1i1 xoI73b1xEwHowauOTWfTtt9TFec9QoAuR69SdrMYaMquwaBt.7t3JqTeIs3B V2nXriD8bMHx3ZE7uBxrrmHVS1GX7GYQgT.k3k.6tvB.2iG91etu1UizkS0X 9k4tNRukg_JqZO3GaUA4m9_by.IJ2P6ysrjfW5D4Cdk0a40F1JmzcsALitH5 khgOiV_0COJR5YLbv80xYavNu8lx5CcGP2ls_jfPSGGVbec3_kdLutEoMV3b wnZyd3FgAPiF46OlBp6wWlEU4ArRRbe4io1JVzBUJJyEfH19Rn_rSE7QLov8 CCmTFPY0xi4mWBEnBbzqZMBQ.2BgATYUweIU9yCuYLbnrAo10iRptjeTPSHA kthPnAzgcpRZn8pVoo_4jpjojKgxrTHoXjOlKzuAULhX2atdExaU5Sh_gJzC pfBqTBC04EV5r4qQEO12X4W7YTkZMSgisiCHupFcs9RXCE7u4lBAm7jVSZzk H8UZHkKp6JWDlPMGbgmKLnzIKNn.Uv1xksWV28YWO2S.3H_reW8aFmqzUlYo fqpup8uBX7hERv.02iQgBflO9NRe48RUorCY2YsBeBUqEz3UYD_FL8yNVGz7 wfXDZjkeJwjKpvZjlyR62Bcp6CNEaS_VeNV51bbgrMtOyPv95FYzuVIVQnXa J6AQ735T
X-Originating-IP: [66.94.236.142]
Authentication-Results: mta1133.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm23-vm1.access.bullet.mail.mud.yahoo.com) (66.94.236.142) by mta1133.mail.bf1.yahoo.com with SMTP; Fri, 11 Jan 2013 05:00:52 -0800
Received: from [66.94.237.199] by nm23.access.bullet.mail.mud.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
Received: from [98.139.44.93] by tm10.access.bullet.mail.mud.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
Received: from [127.0.0.1] by omp1030.access.mail.sp2.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 296482.1479.bm@omp1030.access.mail.sp2.yahoo.com
Received: (qmail 37215 invoked by uid 60001); 11 Jan 2013 13:00:50 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1357909250; bh=AMv2pcNcaeNlJVqHQriJ4Ri1HfCs/cWs5cs0YO/zIGY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=dOKri5+JYYcxJT9h7uxBXePMdTKL9LgDJaDxXAXuKXkol/FHCkW7VSrnFN/3MjPpf5yDolF9ISRT3voPGp6JR3IPgQ6gQn09IbTLKDTDiZCJtIt6LZ6Nh5IFb/P7xZF91BeaW6wRFYV9bDF79MeUxbR1nBQ9Uxx+tDmuc2EHvuA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=IJMFPznKpHxDIYQ9bzl24Q3XMLcjmLv3vEQCNFIYPov7S/flRvjby7HCwZuoE1DPiKcsiN1BxsM/0aotpqOdM0QTrBTCejq8SrPEheI4TCwU7Ow9eW7VZcnTNDZH4zvHDSWPf1dZ4Lt/aiO8S5x9o4N5yeWcTXUfe7p83oGb8hE=;
X-YMail-OSG: TDmS3ggVM1nfAjpQSEiVdV88KjCqKzlApmBtrsiihrc8lyv SQXEYaC4icuKbPOXdw0EDFm2oJY1QxbTQ9LQNzqiBT8cLE1ctrswApbp5smO UN.d_cYwa7eVA.2gprfdTU5BLUnee57BJB7mmSZ6cdmaK0zaCmqtEjZOFNCy IEjbDJzhAllb4ufC.JkScVlCUEAYHdm47QsJ29uunh.nwHbpwD5Aqc7OZPRd g1HSfA.SpgPudxZKy7x5x9C1zF5i3wRJiGN.hUGxF_orR7J1wxmW6uixQ4Q8 HcuUu9Inx20Xp7X1gWIXpxSKuGG2i5sX2GIEe.jDAXtXKBES6vuBRUc81DV_ WU8Pu2Bzqt5ECCkCZyrlYveBNfRo2anoYH00EU0JO7uvnmLlC82wp9tEtKHK F0IlSIOGPTMvMsscdUYj79v3PD3P2dZ.SuKoSdB.9fq5nJK1xTUKEg6T9jcI 9PgL80ABFGZFlkHIbPNHXy_0Qku6Wbj0YoV79stu043EWcSjVc..30TYjf_G ZyVd1eNlz
Received: from [72.64.146.136] by web185002.mail.gq1.yahoo.com via HTTP; Fri, 11 Jan 2013 05:00:50 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357909250.70203.YahooMailClassic@web185002.mail.gq1.yahoo.com>
Date: Fri, 11 Jan 2013 05:00:50 -0800 (PST)
From: Agent David Jackson <webxcc14@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

Agent David Jackson webxcc14@att.net 72.64.146.136 >< 66.94.236.142 REPLY-ADDRESS: david_jackson141@yahoo.co.jp

___________

FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY

Return-Path: <webxcc14@att.net>
X-YahooFilteredBulk: 98.139.44.167
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: jjzWyiIWLDvQAq1bz5qLzCO2.QJuQdBJN6zZ8UglWMf8e7nM 9jdFsjujbwAPbjhWkM9RYr5QgmMx_7ksYyMP7Jjs3XZYq8QJ.JOCflql1Phg uIEC1jKdcia99ibuuIZ1iyTS.YAWVHLQm773M33.9zH3akABbi3OAxcFZdPa _TyUllSVHN5uC3.lOCrpSjlvoHAKplQ8reqYGh_wUeyz8biM7zko0f2p3pdz bZsUy.1wsFHQaiIztozIyIdoXX8_dQr9O0DwjrcYx8_mrsoohQXDmv0Qd0F7 bo.bDYicT6riOqq72kZPXTe5UREAcMQnls_gqnDfYn2tNUkhIP.JFtt3kFOD NQ1lhN3.C2p0oKrVYvZPPwJltKHjidAvCn4Q8ihWax_B3SnFA7QB73pYOvjy mJmU_WrXbJXxa1H3lKu1OYy8eYc5trelPUzNd06xUgb5u.q4lsRv4pEMuhlC 3EIjl6qhXHmCkyjNzL0guKnsS_nNfVyv6IhA_UoAdGURE8PYvSRu.uKVpE5s PuFvknOdTp5VKOqZlPWZRtIwAFiiuFeTyBC7d2LpH8MRTjRMq0LLXjaeDRRf 27t1hfEygTEKI84MjRY31u6pEyJVx_f14A14xGLL2R8a7nBQnoTZ6xqa2PVy ifE_vufn7zejkeijo26POkYD14lPWROAf34bIoR6VvEMzvGGmgldWYKtP6_T OdwC8QgTaGzINGVLw.oBXZ5QLgJjOuRIwZ8ZglAmJKEmuuzzOp4khM4oIbwN Xm0i_P90x5x8kAmH8507dNT2yBBXcT2C0nj_gWggOL8NO9LfVtPUMC_UPviL GfefUvwQgd73k4k8woYRnAC5xVKMX6DZpW1mACwOFYmO3ukpLYaih0AW7ZN2 WGty8iF7Ra1AQp0HRbTxBV1uNd13_qvS8BpSUt0FxtwWBk3zZuJmd8ZdL1EW Mj5JrL8GFK_uz7NU71hIndLApqMh453FEbGnqUXiDVvaIPzku.a1ncAWuacT xHju1mSZQzcrmbN7jHnFzE8inD6aIBDf5BKcN7xa.w.KsGbrgwHT9dyTWCiB U.oXyIM72g4dZkOOe5WYd3MIpUw0a_YM6Lv.X.4CzTJAALD0jm5_ffFE4hzX UIusKF5370W9qtmDSI6cpy59NfzqeNA8T1FVQzuvHCzSV0IbXk4Y7LyOPCOF jYe7w2CWd8xrD2EBt.d5BEAupDSqk9bUSxQsNtDD_eN9Cq9Ka_NEMmnj2y6l FY.ygqon9EjdQ0HJdOB8CSLRsd.OpSSwWu9h0JRBaFxn4gZebvUrtEAWma6B wV6WwPJGCV1rsIa3NaCj2xumef.yT.F73q3WzUWX2qU66IvuMLYSHN5qNLmi 42Ez_5GDASpIpdzYuA_x._xh1oo-
X-Originating-IP: [98.139.44.167]
Authentication-Results: mta1045.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm16-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.167) by mta1045.mail.bf1.yahoo.com with SMTP; Mon, 14 Jan 2013 05:27:27 -0800
Received: from [98.139.44.105] by nm16.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
Received: from [98.139.44.73] by tm10.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
Received: from [127.0.0.1] by omp1010.access.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 252445.15343.bm@omp1010.access.mail.sp2.yahoo.com
Received: (qmail 27093 invoked by uid 60001); 14 Jan 2013 13:27:23 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1358170043; bh=Zm+DJwrwGZlIA/LG24aCrFEpyMJ8dMFzxwrXD14xR1w=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=5ml0Xm3/BrZ7EuPmGpWRgsPNYtHEUNpHsbSSLkkKDgu0u9cI10VSDqgFfoGsE2hrjAML3CC4/aUra7VOYh1GwZZmELiL2PnYvSrBDs508LqoJo0Jk0c40hixsaQO+7NRh0ui3n9wKVixAzfuMuBORXUz4isAM9Uj2r8RRq2OPvo=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=5Cl+v6lPr2mrClM1Tr3uoEcxJGT6po046oHmJqVXsidvAjGm2h818ba09wHtcX4h6be+zslui+s2f0LUbzuCsqrDY9DxKTWX/P0a5jX1HE5fg8cg2gWioTCmUnizj5Hnpk8JXnSQBmXO05ybxFll6OTtEZ8KJfQhTw0INVCPdGE=;
X-YMail-OSG: .au7dWcVM1mjbQkta19wLaNG8g565zmamCIhdNrIz5J4oiR Ei87Eg4zRlKOTdWciw.equT5lByIRZtVJfezeL10GmmrKTYeitYPptLbUICU 3Anf.JK_3NAzOf99bdmAe2djTDVFpgkFD82cg4kjZTZjr5gofpaquzxJRp3i DRy5pvhmKi0SE6TRfn1x7wsGYnfPcKA3cWENK_oBoLL3yv37iM860nmaqUCk ppgmkkgx1JZEmdnTtvjUzzdkfWPoN_LLOJiuKRtHby4bABJGJwhzpQEebrFJ 6GriB_Yhx74xtLzYjZL3gtysoUF0QZN4xJRBYjkGbB_kNsbH_XjgdYxlJFzs WOYEZ0HTWXt2ZO19n_285v1Lpod0jDlJGke15uWv2QkBAdb8npYY0TJpxV0u Gqj4IxurvaVeU0V1zj30cyHHuIeX4sW_mftM7AI3WRXykHTZiLe.e4mZ8PJW 9krGUKD5CM.vs2nGKr0tUFPFhuaZ1B18Mc.me7eflQ2zq.F92sv8c2mNAADB Qbpuzc04-
Received: from [64.72.78.27] by web185001.mail.gq1.yahoo.com via HTTP; Mon, 14 Jan 2013 05:27:23 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358170043.12150.YahooMailClassic@web185001.mail.gq1.yahoo.com>
Date: Mon, 14 Jan 2013 05:27:23 -0800 (PST)
From: Agent David Jackson <webxcc14@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

Agent David Jackson webxcc14@att.net RECEIVED_IP: 64.72.78.27 ORIGINATING: 98.139.44.167

_______

Message contains attachments1 File (36KB)
FEDERAL BUREAU OF INVESTIGATION IN NIGERIA.rtf
PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY

Return-Path: <webxccccx4@att.net>
X-YahooFilteredBulk: 98.139.44.169
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 9LjqTrgWLDsWa.HbSNWNBH8jAOpaObL1Edc7fNdmRImcUBZv xZofYsr2bdMW1WQHSWtYRWXFljhG0QgPPk.D7mX2yHJMul_Vd6cPN4lzpqBR QObxIsLNz908K0NbbkGfnPzo77OMUH6cdcV4k3GrPli1vAdxeFm_iNCu4EDE FIohu2_hWwnjV9DF4dxpCK9yrXrnp4W7oLuqKByLsWDTXHH6PuvHUZ9HRRDl InKZ3SeEQJ1Ruj8sAnn2stoWc6z4W3KN2OPEA7a5uUjI5dzAM21Xj1uOGpKn PmSpxJRQPUhDOK6xgSRVwyJxqFSS5akOAejt94XnGPVkOcdxHVZuK0VxXlpb aD1YL2o6EPhq3kXV9S1eje77SfpxGupfC4WxqpyyuWTyI38uHjGGkQoK3992 yz7cogcpQzLdN9xoT9jYkoR9VGRUHMeY36p5xjZai0NB4CrYoNSaeXPCOWz9 4fRkfNe_WL2yLRLLYbyQhCJ0UJvG8yqZL2BE.9kW1SCfI0pt.25Kqw2tZ2Sx H8lRk0x5_GRlZ06JVi1AqY21IHiD5uwSxqPliBBh98MJ.xID7VjJTa9nlnTk HJr8QB5cLaID3qIjqNk1TtKW6GXe.c7lDu3EdhMMFN6V1Eu6h7_HWdUegkgw BLcuC9zufbTkI5Q1A03yx8bbdtfB1PtDR.FkI8LtsxChfPPRp7jP20Ql0Akb 7qAvyLlGfPS.Em8lyeU67O5P2NZR8hhQqnykedIJ2jU7X1rhPpFDhkyyDGQD RhIG3n76WgTWbxraLq337f4HO8U.CZkBxLB4vk4nNGHzwNBy9WkQoi8PaOxy mttNuXtL5PTI9BzPEA57na.7RC4HxDvsk.vrwy2TM9TKoZpvtOlZQN3R11zc 4Sg8aWHhUgbKGr3uLdUDb6YO5bfdhgW_5irq_AFLOV3pF0KgJPKaFVK32Zsv gpdAFBGqKnR4aVtz66hNwydDm8MSTEveB9s36Um1t3KeRpi3r5dzMWbIrMdE h7uhz4Lptww7j34aj5BEjFYZWAFOquX54B5wcukO9m6Uh25R_TmWAywlRYkU R.qQMKfyzIoeOyIH2.3LrhEnVI2eJgi02ubeV07iw0AxahIbojmQgKC_4ykW lA9Et8DKXwa8AtthOC7iTi_u8GVYySxoQXybEeg6YJZy54nVe2S_i3EBEuoX Kglb.lN7Lb8mnxfg2Va1gc5C87kw1Fao1EPlxuW2lFHw7TFBkPztB4gqXZ53 yyZVMfuJNVH0MqwFKzHmlMiOnvSzUAUeaQdPJw7aLMQfmhaw2GAGhai1dXgv mt0.4i7IWKBrgvWMq33efz2j0eP3j__qyRDv1KvA_P8s3mo_km1zL9AxVcJz Ck5iaJSS4FgdahKCBDhjVVOMDzJHUb32fHn._RHdHjVfeVjCdOdqGvaxffXR nh_xZpfMuA–
X-Originating-IP: [98.139.44.169]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm17-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.169) by mta1285.mail.ac4.yahoo.com with SMTP; Wed, 16 Jan 2013 05:46:47 -0800
Received: from [98.139.44.97] by nm17.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:45 -0000
Received: from [98.139.44.66] by tm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:44 -0000
Received: from [127.0.0.1] by omp1003.access.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:44 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 938289.74941.bm@omp1003.access.mail.sp2.yahoo.com
Received: from [216.171.90.22] by web181401.mail.ne1.yahoo.com via HTTP; Wed, 16 Jan 2013 05:46:43 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358344003.16284.YahooMailClassic@web181401.mail.ne1.yahoo.com>
From: AGENT DAVID JACKSON <webxccccx4@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

DAVID JACKSON webxccccx4@att.net REPLY_ADDRESS: david_jackson141@yahoo.co.jp RETURN_PATH: webxccccx4@att.net RECEIVED_IP: 216.171.90.22 IP_USED: 98.139.44.169

FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

 
Leave a comment

Posted by on 01/16/2013 in Other

 

Tags: , , , , , , , , , , , , , , ,

“YAHOO MSN LOTTERY AWARD” yamsnltry@gmail.com

WARNING – Yahoo & MSN Lottery Scam

UPDATE: Same scammer, different scam — YAHOO MSN LOTTERY SCAM is also under Mrs Marika White <> web.office.76835@verizon.net <> mwlc@uneta.org — LOAN SCAM OFFER

Name & Email Address:  YAHOO MSN LOTTERY AWARD <> web.offfice_297938@verizon.net <> yamsnltry@gmail.com <>
Email: VIEW ATTACHMENT FILL ON HOW TO CLAIM YOUR WINNING PRICE. (I didn’t post the attached document)
HEADER:
Return-Path: <web.offfice_297938@verizon.net>
X-YahooFilteredBulk: 98.139.91.211
Received-SPF: neutral (98.139.91.211 is neither permitted nor denied by domain of verizon.net)
X-YMailISG: Zsyr_wQWLDuEOOR1NaKyY_oBKZ37LKhQ8E2oQYEySigknPqK k9D6cpNLJZG_BpWUYUrJK_13IbO6F2cwu0NdZUgFHsfdlBF2C_dY2LzlOFZm 1JHjYm2nt8r1TfUBQnHfb8I9AUlc_TORp9W.HgQYitOkE2hqUsGDkfrCuMDK DxM3_kxC1G0y9YuwlQ88LYK2N1cmfqnh6DyJr_rjxthFVpfPINYFlTZ9Gfuc ADYFdazto8WrGC8i9vrIWN9WZfWDwFONq5hJIJIIhqbaW8MfJoWeK2JIvkDP M1CYc0eevzZ_Adx1MDBBNelRnSr.vJSmUOwvJ6zQoWRlo4NgzOgFdBx8umEv jTO89nvzJD37UFWarpT59cdImqjiqLI0TB1E45jD15WCEX64ZB1Kln8hiaU4 .CCbyQpy7Ejsn7.W4n2lwvvlczK_R5o_vXJi3oCILudIaYnmwNt9EJ9DJmEZ mBMzXWFKyx9lH2nydX65fY_Q.JtjwJNlF4x2TjQlpMPTfrdKqwhWG_Klh3fR 3n63BOLG9BL8BQ.nLhlc1JvTvE22i4sUX9xyZKmLBFN8AZHjRfoLWiMkj2Xs sLXbSKZXrRdFzqI2_n0iCZVNHY6fDzOdBFg6QR8VysmkWs4dB4wAIeQ69Rmh Af72L8BXmXvs8.HrRPOsQnF8u524lck_LJJRpcmkMuAO54uGy2pwm6caB9FS sKQZOWwp_U8QkDL8N98rJG7xaMUkN1R64dRNvetL6mzCosxKo2FzICda_wHA LHsgGzNHEJ2sNFenGGjuJbiytfFEMpBH3yJUhO1vVKsdm7z60MbhrJRySNOM XOdXnWKdvCDWOQR0HSaBsIRIyxvGvenRMSXWDT4LasvnebD1tBJPseZsrBsZ YHg7hxAgbAuOHrFh.mgMe4rdRKr2xPdD3YGkatTu8t57eiZTMB8W63zW9SpF PyHX6f_tzIye0e8_7v91nVqSdqtWSJxNXsWw0zjqbU5A27.pbD_jLO3C7BmN cTDixi3lrIhNF.6uxxmXfrMY0iJDLZFCpszrUyaLkj2J_gbXiJ5A4APr0u6H jN90S41j9NjeKltQgIesZccd8ai38FkuFPPSgVQg7gAKeTJ8.HhXqnyNmKag do1r6x.wQWJvpjyX1cERpQiFWYG1ll52U8vm_s9sL1QxfzpknziQ0ovd3EFy tn10R8UwjtbP2uQW30npI62WZ1n.THsyrN7bAUHzDprK4z6cagfARVXtLyb0 0PCwWTmXMmOpJF.REjy.0wacWzDKexj8Xyk_a5lmm1VsUHBR7W3nsMvGsKVr cXgYKVt3
X-Originating-IP: [98.139.91.211]
Authentication-Results: mta1233.mail.sk1.yahoo.com from=verizon.net; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm16-vm1.bullet.mail.sp2.yahoo.com) (98.139.91.211) by mta1233.mail.sk1.yahoo.com with SMTP; Thu, 01 Nov 2012 09:43:22 -0700
Received: from [72.30.22.77] by nm16.bullet.mail.sp2.yahoo.com with NNFMP; 01 Nov 2012 16:43:19 -0000
Received: from [98.139.44.72] by tm11.bullet.mail.sp2.yahoo.com with NNFMP; 01 Nov 2012 16:43:19 -0000
Received: from [127.0.0.1] by omp1009.access.mail.sp2.yahoo.com with NNFMP; 01 Nov 2012 16:43:19 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 544878.38546.bm@omp1009.access.mail.sp2.yahoo.com
Received: (qmail 38451 invoked by uid 60001); 1 Nov 2012 16:43:18 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351788198; bh=+BQMkEUCkDI2VtC72aG597OihJthi8rb/rYyQFpeEQg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=aNHRB8WdCQEwnQg70kLRCvCEUFE+uHv8IJac3i7Dk8S2EgUmO+DBnGU+YRcgpwpX9oh4Pvxd4VrXxjcu838HWEjbI+sEy1kl/e6p+1fJdpav3oqdBwpxR7InNnGP7+hSWL7I1I4P0bSC6LZybpaVqwkOr1DbuhBSJ5XCTIAgfCs=
X-YMail-OSG: 9GmeWBYVM1m_z1iUg7uZUlUSFiIeKFpvpN8AJCtmVieCHI2 cRuIdKT2YMYQZMDD9xbq4TFvWF3tJ4NHMAEiKveJnqIeEKkxxE9_0pR_MJlt aKNENjj12NPTRtBewD9cSPqW0bYw8JunmrgvPpiQmGvp4D9gLMtAWHLy0uKC DmN9_B77Yj0w0E1dfN.gWVUc6KZM0NRqqfdxrMQXidqH__p1bdXcjmRsG36T I4BF68LKdh.kJP1BnQThneGDj33t8kfPbES0EaVGUzKdBG_7O9AgQJ86VceJ RMGNiXwJ.LXdTcogyxq5QHA3663yCoqxlHZDIup2aJWpAurwfyp.Fvs5UpJ8 0Xztz9spbZJsk2fd.H6tkCR1T0EdP8zrUb7mZ2EIv9awZAPEETGIzorem9Vf XAmAXiAV5gprc5OJ3hN9BecbpInTiwr.lyB1Ag71B9Zutr5roGfRivZ6hZMq sVdtlmiPfdqX1OiFr7aNWocK2oa20ZPBl0tdv5nIFlm60c03bBHbt_GmsKf8 exVl4ZdMtLmPbYfe_DnzZ2HDAf5LhuMEoMHZ51f05
Received: from [72.64.146.136] by web84506.mail.ne1.yahoo.com via HTTP; Thu, 01 Nov 2012 09:43:18 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1351788198.35520.YahooMailClassic@web84506.mail.ne1.yahoo.com>
Date: Thu, 1 Nov 2012 09:43:18 -0700 (PDT)
From:
YAHOO MSN LOTTERY AWARD web.offfice_297938@verizon.net
Reply-To: yamsnltry@gmail.com
Subject: Fw: YAHOO MSN AWARD LOTTERY PROMO SEPTEMBER 2012 DRAWN

98.138.90.254 ← Project Honey Pot has detected malicious behavior from this IP address. This address has also been reported by multiple online users and websites. Nigerian 419 spam activity being sent from this IP

OTHER SCAMMERS SENDING FROM THIS IP: 98.138.91.174
From: Xmas Loan Offer at 3% <web.office.nextlin@att.net>
Subject: none/blank
From: Yahoo Msn Award <web.office_689374@verizon.net>
Subject: none/blank
From: “Frank Jimmy Loans Co”  web.office.003-10@rogers.
Subject: none/blank
From: Cons <00o11constance@att.net>
Subject: hi
From: John Vidyapin <JohnVidyapin25@rocketmail.com>
Subject: Re:
From: “Lt. General Kenny”<sssssgfee@hotmail.com>
Subject: URGENT REPLY
From: Kafando Idriss <kafandoidriss@gmail.com>
Subject: VERY URGENT CALL FOR MORE INFORMATION +226 75 44 8
From: “Ukos” <stolze016@yahoo.dk>
Subject: Gvzdjos Hzcgkotx FnquyBycfjosw Wjnr JruycgPtxbfjn
From: 李���姐
Subject: =?gb2312?B?xNDFriDD++VsIc/Iv7TYmyAg1Nm4tuVYIWd1Y2N=?
From: Victoria mandi <victoria01mandi@yahoo.com>
Subject: Hallo mijn liefste
From: zvgcdby <zengchuanxedm@yahoo.cn>
Subject: 2011年11月28日17时47分53
From: “a_just_my_world@yahoo.com” <a_just_my_world@yahoo
Subject: Search for Anyone’s Arrest Record
From: wggi <hanchoujwxv@yahoo.cn>
Subject: |散頭|辦
From: “Mrs. Sharon Crawford” <sharoncrwfrd1191@skymail.mn
Subject: Scam Victim Compensation Alert, Open Attachment To
From: Sgt JASON CAMPBELL <web.jasoncam104444@att.net>
Subject: Urgent Mail From Sgt Jason Campbell.
From: mercyjohnson <lindabenbella@yahoo.com>
Subject: Good day my Love
From: “bittapain@yahoo.com” <bittapain@yahoo.com>
Subject: FWD: You have a secret admirer – GUESS WHO
From:  torn_016@yahoo.com <torn_016@yahoo.com>
Subject: FW: Money
From: ahmad2joachimugkt <ahmad2joachimugkt@yahoo.com>
Subject: FW:GreatLoveForEveryMan! did at Court though she w
From: ionsas chrograde <chrogradeille757@yahoo.com>
Subject: genevievebuehl, Verifizierte Online Swissapotheke
From: glory adams <weboo444@att.net>
Subject: Ol
From: “Rev.John Ibe” <revibejohn1@live.com>
Subject: Attention: Honorable Beneficiary
From: Idris <mridrislukman@gmail.com>
Subject: BANK TRANSFER VIEW ATTACHMENT FOR DETAILS

Associated SPAM IPs
89.122.224.52 | HSD
209.160.72.139 | HS
207.150.196.50 | HS
208.66.195.3 | H
207.150.194.146 | HS
173.45.70.178 | HSD
208.53.147.89 | H
24.64.199.108 | HS
115.124.113.132 | HS
66.199.236.50 | H
74.86.209.74 | H
208.101.44.3 | H
74.124.192.3 | H
216.40.220.34 | H
207.150.196.55 | HS
115.124.113.133 | HS
173.45.74.234 | HS
221.218.114.138 | HS
70.85.113.242 | H
76.64.126.197 | H
58.248.29.247 | H
58.248.29.217 | H
64.231.136.67 | H
74.12.60.71 | H
117.205.85.130 | H
91.105.35.138 | H
75.125.47.162 | HSDW
41.82.95.220 | HS
207.150.196.48 | HS

 
1 Comment

Posted by on 11/14/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , ,

“Mrs Marika White Loan Company” mwlc@uneta.org

WARNING: Loan Offer Scam – ”Loan Company” – Nigerian 419 Scammer

UPDATE: Same scammer, different scam — ”MARIKA WHITE” IS ALSO SCAMMING UNDER  YAHOO MSN LOTTERY AWARD  <> web.offfice_297938@verizon.net <> yamsnltry@gmail.com

Name/Email-Address: Mrs Marika White <> web.office.76835@verizon.net <> mwlc@uneta.org
Subject: Loan Company

Email: DO YOU NEED A LOAN TO PAY OFF YOUR BILLs OR START UP A BUSINESS?

HEADER:

Return-Path: <web.office.76835@verizon.net>
X-YahooFilteredBulk: 98.138.90.254
Received-SPF: neutral (98.138.90.254 is neither permitted nor denied by domain of verizon.net)
X-YMailISG: 1rccvcMWLDvwwkDPi1wOr05Wj4gQviOJDGKA.1i73_OolCyJ AIIlRo3P0Ksj.ASRtNNoeGsPA3ng79BJC4KSPPY2cKJmtSiyaO9p_2Gl6D9p KObaIr3h1rSJqZJtUWYKiUblIXp2C_AVI626ToDSMv07dQ_gJRa9_1mGJyzE 7r40FDbtvz_yB9A9.NHHDeM2iKxRVY4nua_X5Ed75fTZKPbtnTihqFFIsYzF ujLU9y8Y18H5cK7A8W6CQ7JrpCZL.zKbq_kNlj8HAhBv1jH5BnVA2ly1ebuI _9Ea7VizY_wANAhb3s2.6iifKVVVAO9rNPIsWHlTMvE6SHb8QJ6ulc674OXT tt37ekR0jxkNBXR0jgJdcYUs_aGyNP479WSp4zXCs7Ze.J2O_En0MQz_jgGj x5YLcacY3jehFs4C_MrSGEVAQOdDqp6L4zrtUtka_EJpyIT7eGwy5Sdr8cmG I_DgYc8vHfyvc9E_rkYu3JF35jAmqLU9cXx6wCO6uj37_TrU7u8Y9QZBL2O0 IT_06WFjLfOpT1Upk3uY4gIb9wcfw2QIQlDrpPnRZaLeg5D_P.fZdy9ZiUWG NAthLPa2dEX2t8jrBH1oAE2YXAKWNU3pNKD_7SiifEzT84h5Elwq2OHWRuJP IDbHLNrzmEk1qUNnYWEIF9rSxF1ghHHskstylaX8FXxRd7q7Nh7HRQAZZeEB HqSwPna3HbK7lluYsrzPEQXazlxcHdgklhWhFUE6m4.CkHrM1gErfL3aTM48 AunpFYoHEUut1CsqaK8G6yTEcKTxy.R0dG8AEmJ3rF1mJl2juH_MEOdliZ2U kWtVRS13J12.Gjfsw0.K_.mQE5Ns1SPY4XsqbFvoM54Zu9rZXWRdgLW0R.Jd BYdh.pFOiRY3Q1UigZapTc3x7asJRS767DUqSsLYRr_tP1rW5uqBttzHWYvC b7WRvJxQPEse4ssUVrxwkpMpe5Thz.YG5od_fkwHDZPfZNUQvx1lq9n9DoMC ON6XbLf7tz.kYkTT2amkr5TgG.7H1FYiff4cJ52Y_QhrlbmHPMpIzLH5v00h DQ2XofIrgBkFMmjpPSM4kLz.tIQadfYhtUtF1dRkRik2t8eFG48Pt2uurmng ciYCQZ2QbXFwxDJm7s_jgCuaaDphJcK8zBr1RtpVM2RtKz93LK0ffFUZl9M7 o9lnOxNgN71fbX6fF1ZyL7RaXQrLD_ahUhjSooa3ufwV7AGDjcmE5vnPzt0T 1hjFF1VEvTEsxPHJRroE3s4Ol.843VnRYEMul7UcKBKNDw–
X-Originating-IP: [98.138.90.254]
Authentication-Results: mta1319.mail.bf1.yahoo.com from=verizon.net; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15-vm1.bullet.mail.ne1.yahoo.com) (98.138.90.254) by mta1319.mail.bf1.yahoo.com with SMTP; Mon, 29 Oct 2012 01:57:01 -0700
Received: from [98.138.226.178] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
Received: from [66.94.237.101] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
Received: from [127.0.0.1] by omp1006.access.mail.mud.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 30294.68904.bm@omp1006.access.mail.mud.yahoo.com
Received: (qmail 89378 invoked by uid 60001); 29 Oct 2012 08:56:57 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351501017; bh=e7TPDsqolxdOXd+HQzrG2hNH4MUYxcgDXnSPz6Y8MYY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=S6/hrpGO0ydEf4hSQ7WjaAmQInuuCAKfvMSsvZ0XS0Ov4TRWjzWGBNXFyW77+X+V8/YyNSzLI21RcqyPrLYT8EnW8BEnqJ8WpAUNvumsMDSbo5i30f/2XLT5qHvIvcR23wmuVHVjVNwTMsysjaZ2E5frgnnMP06OYrvqxNptM0o=
X-YMail-OSG: xMBSpZUVM1kIRXuAjHgZbmAaovBVSk5eAFjFEevdiEknuMn uDEOw.0Co.m8vI5PZCw7DsxhJN0JUjUAfUKoR0NBqFZtrCvYJNVDAFkJnZ9r O3l8_IptDedNQleNN7u4GS21Jrt1VXT.7EIuaqBBvfYhmeBKDXsVQE_vJCTr OxQjQGHYGCzKlWPL_X_kkO_XpszI3mErScnhmbs_nIvqSVOegsbBMaeW.VOj UnLfwICoveMAz0JiOGClf4ZsO1t4_kD1ObkEb4L2mblFkgk9CHEebmunRZAK Xcr7_Y5_tNywAxz1tBI3HRe2YTVilPFzXNCReKYcuuMdLy4f6xvBQilPUGP6 HPr1KaxsdqlqsThn988RToeuJPivHlpxBZHhFfrwy_eRjT2VgvXYksHYOLp9 CS0zMN.CLJ8R11gH1ACo2JT6of3FUlzotv8ehcdNLfdu1aiNpfSMIKpa43vT Ynd2tYi7uArwgX_vtXoKO.vJ1x8lBQq8f0yXH.Ke0XesM79uUq5MG7j.8rJ6 ETIunLPAqxYZaDbywbA–
Received: from [72.64.146.136] by web84610.mail.ne1.yahoo.com via HTTP; Mon, 29 Oct 2012 01:56:57 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1351501017.25035.YahooMailClassic@web84610.mail.ne1.yahoo.com>
Date: Mon, 29 Oct 2012 01:56:57 -0700 (PDT)
From:
Mrs Marika White Loan Company <web.office.76835@verizon.net>
Reply-To: mwlc@uneta.org
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1644280220-398030313-1351501017=:25035″
Content-Length: 465
 

Tags: , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: