RSS

Tag Archives: Business

“eHarmony.com Dating Partner”

POSSIBLE PHISHING ATTACK – ONLINE DATING WEBSITE – PRETENDING TO BE EHARMONY – SPOOFED LINKS

ATTENTION: I’ve been getting fake eHarmony emails sent to my spam filter. I am not, nor have I ever signed up for eHarmony and I received these eHarmony emails the past several days (on my fake scam baiting account, mind you) — I knew immediately that something was phishy. The fact that the URLs weren’t even related to eHarmony, and after looking up the header details I realized this is some type of phishing email. Whether it’s malware, a hacker, a scam, etc, it’s something phishy.
SUBJECT LINE: Singles Looking For Love In 2013

#1 Most Trusted Online Dating Site. Join Now!

©2013 eHarmony, Inc.
If you would no longer wish to receive our special promotions, please click here
or send mail to:
PO Box 3640, Santa Monica, CA 90408

HEADER DETAILS:

Return-Path: <2093192922@portalexport.com>
X-YahooFilteredBulk: 130.93.81.10
Received-SPF: pass (domain of portalexport.com designates 130.93.81.10 as permitted sender)
X-YMailISG: M3AJff0WLDu3gnhmNjiGcWZCDX8VNfF9gVyEVwn0d57lYzYE Qw6i7CSQaV_KniE81oJcBTzfEaYhbhvkkW_3bgeWeNssI0hpTf8pzJVZd4oj DlOjgYNdSbizcBsnGDlAlYOCN3ODZG2M3SCHPtdrCfd2Vkv.uh7LQM7onIIZ EvxzodhiT8tstB4O0meuQ.GeuYvrrsfQ_ykQPIL11z4apR1aDJwKCEP8PjBP NiXMaIWSB6QtdT9r3Nu9RD7FRc_6pNpGJCLqKv6YhG2tAUiA.Z4dU8LaSe.Z 2OSI7J.8etjFW6l1A07wfcOiPhdjpUJfzOKT3gjlPVw0bneSOCbvdf0n0.Ol J53i3G8UtPk._SsOOuRTH0px18vsfKJfAba0qkHMhi4IaS.xyabsVmAj3121 .cFUzW7sBgHPzIHmJwX2hAOHr8n.nzSK05os.fCTkr2VC2dn3adr5CjCK4Cs yTDmaf2XCi7fI_wdhX_VHfQl4n43kCVWkSbr83ioRgw1UxL5OQh648_uW3QA QNZiz09BBkeWzy5hcVIbYeFN6WRAHb554l.AFMQQZSY1F.WzfnoyjbRArlsb 3_YxdMxulbx_UfOHBv2DlGin3XVIA_DASQd3fT.2LlbX02M.sFomz4ikQI5k W4tlvj5kpAYEpDzMjMrSZoz.900y4sxRbFw5kv_dEAZ56_OcfsiD_wTuA6K0 XlRzTlIP27gQ6EoIafDU.GIyYrCNNxBrKCQOXKyTuG7UWLCjf.zAHY5oqjdo sylsaiFmj20f24gNvgwgyUFjwvfC0SAwlCbKIeoXrXVhJDdjQ0ikPMgeeoHg OH7f2Hf6DSdjKB_cFDCPGGbfRscHYLePq_0BmP1zUnM5L1zxzc.EY9CPijgN DsAPkpAoAp5lY7C8GDeqPZOyAvPJuyU2Qt0mmE9q5QiBvRvKlewbvOK7BusZ Z_o5cddS._R1QyJ0J6OfiirXgHbZlGwZGY3VqH2gfGGXZiqrrTVS6uiI0a_F mNiVA5Jdw.Vhose1PnR0ATG3SQJLy0xlgfmCI90TJe3_E6NwubWAWK5YK4OU zwrMdKiLpHu5WM7SHvA8GgPTws4NqwqbYn1gBkNvHgYkTzabyQ7E72vguk7r mCvYXVpJaYrgozv5OGNXnQeCHtL73sQf0IQrQAmkWAIe1pKxBtUS8HkDJki. iNH_vWvqO9_HTPOKGRArVq4FQPKhgoQaS6gXzUpa18fjyytvuzkIjgpnECia dYgtcMwG6TaMfJfnilczjWZ7i19ceCfb26_gGwIqqHEOexzWs42hb3vuiKYd qOStuXI6KVd6Fig5Kkvs5CfzO7NN9d28mgX4EN4UtypmZDvUmY6GSZfX8PHl FqOpIksji3xRa2u1f.Yl6KUArTL0dWTicRIVXiunSnD2uuxuhCUov9fgtuGc b_jAFjk9vsXH27xV
X-Originating-IP: [130.93.81.10]
Authentication-Results: mta1234.mail.ac4.yahoo.com from=; domainkeys=neutral (no sig); from=portalexport.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ul.portalexport.com) (130.93.81.10) by mta1234.mail.ac4.yahoo.com with SMTP; Wed, 30 Jan 2013 16:25:27 -0800
From: eHarmony.com Dating Partner <mailers@portalexport.com>
Message-id: <72704994_2093192922@portalexport.com>
Subject: Singles Looking For Love In 2013
X-mHn9bGc2TnNqC6Sqp8c: NzI3MDQ5OTRfMjA5MzE5MjkyMl8xNDI1ODY0N180ODMyOV82NzQ5MF8xMjI0NTVfMjY3MV83OTU2Mzk3XzBfNjA5DQ
X-Ver: NzI3MDQ5OTQ
X-CampaignDetail: 72704994
X-Log: 0
Errors-To: errors@portalexport.com
<http://portalexport.com/x/MjA5MzE5MjkyMg|NzI3MDQ5OTQ|cG9ya3lleHBvc2VkQHlhaG9vLmNvbQ|NDI|MTUzMQ|Njc0OTA|MTIyNDU1|NDgzMjk||MA|MA|||Nzk1NjM5Nw|MTQyNTg2NDc|MjY3MQ|MA|NjA5|VQ.html>
Content-Type: multipart/alternative; boundary=”—-_=_NextPart_001_FHVBI9TV.45VYWRRW” 88.198.16.166 173.44.133.82

 eHarmony.com Dating Partner mailers@portalexport.com 130.93.81.10

 The links came in forms of images pretending to be eHarmony but the actual URLs were http://www.portalexport.com.br/negocios.htm <> http://webmail.portalexport.com.br/index.php?lang=Latvian — Which is a ”business consultant” looking for partners to buy and sell items. It’s not even a English website, never mind an English dating website like eHarmony. The actual URL can’t be copy and pasted because it came in the form of an image but it started off like portalexport.com/…/with_a_bunch_of_numbers_and_letters

__ __ __ __

SUBJECT LINE: Singles Looking For Love In 2013

©2013 eHarmony, Inc.
If you would no longer wish to receive our special promotions, please click here
or send mail to:
PO Box 3640, Santa Monica, CA 90408

HEADER DETAILS:

Return-Path: <2093192922@devicedigest.com>
X-YahooFilteredBulk: 130.93.80.179
Received-SPF: pass (domain of devicedigest.com designates 130.93.80.179 as permitted sender)
X-YMailISG: qP4_qdIWLDsuod7JBnqDQpOfP0SPPxPAdYLhMttsbbbZhvJ9 fTFBcUBRm31.ArzlDqoCIlKINNvCIZPP.YYUpu38eWQuf1B.f7NKGjT7t_sd dx2s5ERWR8ymbEo8pXEaYNEaZEgtG_imXHo6Cnq1d4OemJo6.fPkm8YH_uVB ET0R1GYNVy5KoonXIyfDW9mtrMRtNj2nfuMJp2qHFgItr2hH0dOfoe08OPvG om5jmFe7TP8l16Rv0r5Ljt5L.X9gPwAiGV5VxLGnhZ49zhl9.upfGLsU9uCl 0GQAGSt8lIUoUBZ0w.Q6MNpIq33IY2fMPHnQjaz3yVk8U3Sv7ZLgvxVo7Tw8 st6vV5zQ36c7YI8AeqnehFxAr2iLjWa475NvjoyXmhGOO.AYJ3wkOvlV1MWu MiS0Zv86zlT1wQeBftcu9ROAl2wZco_tx6kt7Tfm.adYFbjuU6mNNcjTmm1F SKQ8gCHHei6JhHVxXtvoXYCyTaVxkbsmtLu5iC92ggMO5t8kU8ASjX0MWdS8 cx51VgWGHcRMtAMTq.uZWQJHWaYuQLmlqTGLyEg8V7XAGOjv9BYJrZYJNzJ4 wq2kJoyRWCB4qL1akmMI61mSMxEUq3vDjpjo6UERvvYFvHjzRn.dthghsCSB mIXI6xpIzNWnL_LOFNPs3HINsIYORPNYGAAibnrd6rNERchkaaxjqjVdVz0S s4ssR_3Lj1lxP9ncV9aU7gVa_qtegp6br61vnF2TaQ7hBEVXi1pqPxoge37d 2WN5c2pA8fEkfzgf7LQ0Hj7Rk3zRh5h2T4f5FL06JT5_RfSkZ9THFCufOlZp leAWTeA9qBfi2l7OeF6AEMGH1u1Ez4n0fQCkqIesKA_GIDfV1mmhbKQaK3Nf QcdIYfUCEGBbcspg78A_3SYNUXWyH4MS3GfdqBE61Y0jkkPERCHvSXz_RZkf 7KN3SEIXfKDn.VttRA7YEuRtsV_BXZKKEeX3lkfP_JcCEq.g39SC2Zux69L_ DwIw.MIbUbePduUaBC3.9yPNHbbLjTUvglNzyNmhHg5Nny_lLg5Iws_t7bbU FerwxMy0zl6SPwz0X09ztF5pwdxEnNht9xig0rd34yaDf9UYXmiKYbg0W8dS AlfOFPOmBlOo74nXVt8jywbKPE5j_8.niDgLwTXn6XC9fmPnhO_vGE1P7Hus Zn0_0WmKEDdFMyxMqJdt3Gq2lC3FJtzk935BL7bjaBv..azU7iLcHHLGrl4k rssOIt_F8bKMkmXr4xpqNYdd1fI0YpDK4ToJPfiGOQwTDrq1SB_xzppvljtw jCjUlLlzIyu31xor_0G6eb9JcAfynnabJsFsF2_grljdRB0nfKfxbPvWbzaf 2fhu8ZNCj4UngXFA5pKMeJIW
X-Originating-IP: [130.93.80.179]
Authentication-Results: mta1047.mail.gq1.yahoo.com from=devicedigest.com; domainkeys=neutral (no sig); from=devicedigest.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO kl5hbb.devicedigest.com) (130.93.80.179) by mta1047.mail.gq1.yahoo.com with SMTP; Thu, 31 Jan 2013 12:16:30 -0800
From: eHarmony Dating <mailers@devicedigest.com>
Message-id: <72975089_2093192922@devicedigest.com>
Subject: Singles Looking For Love In 2013
X-IK1CRNCvGL5wLAmNh8H: NzI5NzUwODlfMjA5MzE5MjkyMl8xNDI1ODk1Nl80NjQyOF82NTU4OV8xMjI0NTVfMjY3MV83OTU2MzkyXzBfNjA5DQ
X-Ver: NzI5NzUwODk
X-CampaignDetail: 72975089
X-Log: 0
Errors-To: errors@devicedigest.com
List-Unsubscribe: <http://devicedigest.com/x/MjA5MzE5MjkyMg|NzI5NzUwODk|cG9ya3lleHBvc2VkQHlhaG9vLmNvbQ|NDI|MTUzMQ|NjU1ODk|MTIyNDU1|NDY0Mjg||MA|MA|||Nzk1NjM5Mg|MTQyNTg5NTY|MjY3MQ|MA|NjA5|VQ.html>
Content-Type: multipart/alternative; boundary=”—-_=_NextPart_001_9EEATPXW.CKJHBHDT”

eHarmony Dating mailers@devicedigest.com RETURN_PATH: 2093192922@devicedigest.com

This email came in the form of a link as well. The URL is something along the lines of devicedigest.com/…/_bunch_of_numbers_and_letters — At first, it looks like a legitimate website, however, the .com/…/_numbers_letters are what’s making me suspicious. And the website the above email (portalexport) brought me too, was nothing more then a login page and business consultant looking for business partners (supposely a french website, not even English, and definitely NOT eHarmony.

 

If someone has figured out who these unknown emailers are, could you please fill me in. Thank you.

 

Tags: , , , , , , , , , , , , , , ,

“Cynthia Reynolds”

FRAUD – BUSINESS PARTNER – PROPOSAL SCAM

Mr. Odisah Craig.
#5 park road.
Plot 16 block D flat4
Dear Beloved,
This message might meet you in utmost surprise. However, it all just my
urgent need for a foreign partner that made me to contact you for this
transaction. i got your contact from yahoo tourist search while i was
searching for a foreign partner. i assured of your capability. and
reliability to champion this business opportunity when I prayed to good
GOD about you
I am a banker by profession in United Kingdom, And currently holding the
post of assistant foreign remittance director in our bank. i have the
opportunity of transferring the left over funds £3,000,000,00(Three
Million Great British Pounds) of
one of my bank clients who died along with his entire family in a plane
crash.Hence.
I am inviting you for a business deal where this money can be shared
between us in the ratio of 60/40% if you agree to my business proposal.
Further details of the transfer will be forwarded to you as soon as i
receive your return mail immediately you receive this letter.
Please indicate your willingness by sending the below information for more
clarification and easy communication.
Contact me via my private email: odisah.craig@yahoo.com
1.YOUR FULL NAME……….
2.YOUR ADDRESS………..
3.YOUR MOBILE CONTACT NUMBER………
4.YOUR DATE OF BIRTH…….(AGE)………….
5.YOUR STATE…………….
6.YOUR COUNTRY………………..
7.YOUR COMPANY NAME……………..
8.YOUR POSITION……………
9.YOUR SEX……………
10.YOUR MARITAL STATUS………
11.HOW MANY KIDS……..
Hoping to hear from you immediately
Yours
Faithfully
Mr. Odisah Craig.
+44701-005-7132

Return-Path: <e451101027@exchange.1and1.com>
X-YahooFilteredBulk: 74.208.4.194
Received-SPF: none (domain of exchange.1and1.com does not designate permitted sender hosts)
X-YMailISG: .MitVxsWLDthC6oWL5.uJSf3ZwF8l10OGRTN70FE1AmGVFox xmc9B4UWltY9fOh6tvMymLhpmYgTcXEQByb4.uN4HtTlw.s4olOCY.YTUko1 eRHxVqitDWcVrpXHqrH9rrUlA.s5VlOAi.3oYHUruITANC2sgkaYNftjMNc3 EGn3YS0VSOgI58Y5KV_mlDDt_GXU58gJEdWDjQAyoKWpTNKSy6h1YE1E2NKk d58JsYhd5yjU1j7XNFJUzHWGihQ0GrZ871Y9e8dZ12bYBDQwxFTSkGa3_LKD ZiZX6CKI9ZS2Ph.CyExjdH1qppXmXC.zjrJLv3LoKJEO5RJocX5WGZlo4ejc DLXz_WeMgrzxeqKJ76uBYzUaEUtD5F5JuAUcUTSkV1_PyIdVC82sk57gvj97 UQDABix6Tb32xigTzxEuGm2IfQ7KuK2DZxXqcf2bGwan7hsneGyBethz5o_8 cNswwfO21MvHY8bllJ6U_zFMBCHCy8BTvVj56Wz156aJZ3dAU6wN49iOKvc9 CwO2DSAc8nOxKBzO3XqvLnYt3sarPiN_ehg_EuM5NWhpD9u0Rikl5O.TWeyY gLJvdhe7lraAo74ZBom_O75LUbPED1JhtTl21bHMLNpLi3HEBhHJHXAfHLMd 4UQcySVeDcQ5fA3c.w8YimjkK3aUY2HgLb35yhxLlRlhyMUhs0oom3J9gnKX fXu9SMtpzWwIN_hld4wW9dK7UsboULHvyoX.CnCRzVbUR5_t6jy1evOkrrHy 6kLzthYoMFKyHFm5Zk9cufkZ_Hnry_vi8M.Yk6NwS0yew5H6oI07pe4v9Apo .GCNncag1iUrKpP9DAUOarAQTIjSdr2t0KLqkRkAaDGavE9_hIZL.EJxYfTw 396TZzwXNEz9LRzSnMcGKtuG0LR7AIo2niE6X6ERKG4__QnKTM31BEHAra_a Vc3rF9Iw8Y9dtp7py2uDpH2FrwjLSKMKJ550CTl3X4p0ywMr1MJOEjmdTWy9 I6juW2lQjh6ufEXDsxDH6CrQwJApz6Bob2o6AcDVTLf6ZUkqekVLwKvc8izn J8b3uVN92TAHtW4v0hJ0uyXInJwsUrT1jP6FlYK4SiWbqLSYQWakNUInd6Lk NvbgxPM3j9dHhoDPDQkZhDeZijuK2Qr3JDrlTqzqQWc0KfyWe5UUiaCZWaGS GWSFFrgodDcazgYkyOj51r9f3Zm20TGnCyHZL03SE7gVsC1dtv9zTEqrR4bE MuD.gGPus.pMCGMcSXWKZfiUg0bfHK9WsWHXmSN920Kdhg0vGd2E42V.RSmg a.KkIWYqKs_QCWT7nr9OLy9Gnyvz2tVteOdLrb.fx5uC5U6JJy5KOpo3CbUq EjM.0Db4kvr6FsYrvuu7qt.vFEga7zMeKZFHivaSxXH715mUlD5kVw3f0ceF qHjFoSssfBDlvyjgD6RXcRdgnJTdVEL8I_NmrStqfOiD6OKE5FppOEYa8Dyi bis8ZEdOnlO5gAJpmM2a9wdjCWZRVodaP3E2orenGK8xMrTzG42SyeZIVWE_ RQOBWligqDFpDMeSwMf0zNIT0b7HtYEoZEQYboVYBycAXYKw0lI2sOhNdSSd MOBQbqnfngf1._VuTtzPsL.siXHvX7WjtMk-
X-Originating-IP: [74.208.4.194]
Authentication-Results: mta1298.mail.ac4.yahoo.com from=exchange.1and1.com; domainkeys=neutral (no sig); from=exchange.1and1.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mout.perfora.net) (74.208.4.194) by mta1298.mail.ac4.yahoo.com with SMTP; Thu, 17 Jan 2013 03:17:31 -0800
Received: from winxedgeus01.exchange.xchg (winxedgeus01.lxa.perfora.net [172.23.130.53]) by mrelay.perfora.net (node=mrus0) with ESMTP (Nemesis) id 0MH1mk-1Ti3Fr02k6-00EBLh; Thu, 17 Jan 2013 05:31:29 -0500
Received: from WINXHUBUS05.exchange.xchg (172.23.130.24) by winxedgeus01.exchange.xchg (172.23.130.53) with Microsoft SMTP Server (TLS) id 8.3.279.5; Thu, 17 Jan 2013 05:31:27 -0500
Received: from WINXBEUS26.exchange.xchg ([172.23.130.69]) by winxhubus05.exchange.xchg ([fe80::b4d2:7ab6:7111:440c%10]) with mapi; Thu, 17 Jan 2013 05:31:26 -0500
From: Cynthia Reynolds <e451101027@exchange.1and1.com>
Date: Thu, 17 Jan 2013 05:31:25 -0500
Subject: Good Day.
Thread-Topic: Good Day.
Thread-Index: AQHN9J3NRyR+w9WLOE2xhP26R+GL3Q==
Message-ID: <DFC34C36C6000B4ABC59276F9DFFAEA8663498BE@winxbeus26.exchange.xchg>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
X-Provags-ID: V02:K0:H+hMhiRFp6s+bVDL736jRoGWJ5fe+bkBRjn/V2LRUvE aEN6/ksH7u/lH3ybn20dlDXnF1Wfmplf/bQWz67EwzZpnpOG+d STc07w1t5gzptxsVbiu5li4pCmTSUUcV64fvG2GcwsMlEYc/b6 8E0KTpgyMPh+2DCkPjIEGyakz+Mz1H50Kpu6cYGZ3kQKcZgAL6 TLo+ruACJ7RzUexSMy450MmhzP5sgsaCBjIcCVcCSVq2JNXHCZ DENGzOtc9tdIMar+6SZMobZwLhaig0UMquhuTOOit+4L6OOHj/ K4s/drkkJU1oD7gEydHaKZsKu+OGFUIwtzHN+nvhiRr92eAb4T KjN3kag29l4NIG0ZaQCzCCU7VWljZ+28STYCmE990Zwd2vJlDC /veHbTFUpnjurYyT01EHiw3HMgiuwhv1cg=
Content-Type: text/html; charset=”iso-8859-1″
Return-Path: e451101027@exchange.1and1.com

FROM: Cynthia Reynolds e451101027@exchange.1and1.com Mr Odisah Craig RETURN-ADDRESS: e451101027@exchange.1and1.com IP_USED: 74.208.4.194 RECEIVED_IP: 172.23.130.69 PHONE # USED: +447010057132

 
 

Tags: , , , , , , , ,

“Daniel@seotechno.in”

WARNING – ONLINE MARKETING SCAM

Hi,

I am Daniel Ross, Business development manager. We are a Delhi-NCR, India based, leading SEO company. We provides Guaranteed first page ranking in Google.

We use only ethical SEO techniques. Our organic search engine optimization consultants (SEO Experts) ensures a high ROI (return on investment) by achieving maximum visibility within major search engines including Google, MSN & Yahoo! Search. We analyze your sites web traffic and all other online marketing activities to find the most optimized path to increase your sales leads.

We use 100% white hat stuff. We offer complete Search Engine Optimization solutions:

On Page Optimization:

1. A detailed keyword research (if necessary)
2. Header text with h1 tag.
3. Write Meta title, Meta description and keywords.
4. Write header text and footer text with right keywords.
5. Optimize alt tag with right keywords.
6. Optimize the body content through appropriate use of keywords in the right place.
7. Modify the footer links

We Use Various Off Page Optimization Techniques. If you are interested reply this mail.

Within 24 Hours we will contact with quotation & time Frame to bring your keyword to front page.

Kind Regards,

Daniel Ross

P.S. This is an advertisement and a promotional mail strictly on the guidelines of CAN-SPAM act of 2003. We have clearly mentioned the source mail-id of this mail, also clearly mentioned the subject lines and they are in no way misleading in any form. We have found your mail address through our own efforts on the web search and not through any illegal way. If you find this mail unsolicited, please reply with “Remove” in the subject line and we will take care that you do not receive any further promotional mail.

HEADER:

Return-Path: <webbrand@nl3.nlkoddos.com>
X-YahooFilteredBulk: 46.249.57.80
Received-SPF: none (domain of nl3.nlkoddos.com does not designate permitted sender hosts)
X-YMailISG: wAJ10VYWLDsBpCER3uk2qfs5T1g6RTB7qddOIEWNPSNzKpBg iV2YUdZjiC53xBw.vp123LvSBRzzALFoh_ntPkvR0qIHS8BUoF52iETPzMji wkTLy.5R5DeNLB4lhgvwzJID0tvfXhxedamve62Qrx2iMQ4baO8pz5rVCCvb 4TQ9OeK8Zn2t2UU_9MUWXPj6vmf_7hWT3ISslggx.zhHsbsvfiGKD3knsqxL Qh1cdHvcPHuUUfweogWm6_eFf.l8oeLH4twm9OfWjWFgk1ayXIfZHqERxfC5 y9f9j3kUuZw8p1EPjgOx2wGlQEkTeOpxuIz0YjiboibCBWBLE4BAS_l7vjDe sEdR34E5xSSqjLnnSc_Yir2v6ERlx75VKc_mBHTtPsbdH5sVdAJBEQ9x8oOJ ildmOsG04aDZaebxddl.73zV4qiqi3XevwXeU.JYWfnT3VFrjWrQz7HF97Ro fF2T2K19rNuUPOy8JClzD4Hz8u81qGtRem1p7pZpeasZ8o_xAnodttyyphq6 FUyRdgTGdT8vB2Nga0g0lT4Sm9cRjrTSK_vjNg9ONJ47x_gmNk87GfsXs4Bi eq7MWL9HIc5IwQIOQhbAg2Hfl3QaIQiQlhsYvQb724m07o1FNcl3AqUR16kQ muvf9KgsdNTre7veDfEKaduwwanjqxWXSPyWAzHgrbQsXg4i99RiTnfb1czY N1qnjYtC7_02Nljs28IBQlygQovG4QMGEImjwnldT3NBnNe_LwXE_O0u9tIh m9KM3y84mjIM8ATcWNxmO6W7Kpp7V2QhCtBLtcRaTvdx17qYeYLDYdtG55kx PVRyJYHCvnccPx_8LnaNS4j_3FraXyyUWxHleRsFWTqIymqzMXzriNXGkdbJ 5s6Ok8uU8Qhxocmwt7c1jKD8kRmEpUmz_ZN8tsdMo9dubRuDSD46rM7GMu5q P6V3D7hlcHbPhLZrRhfGGpCdCOpUT6j3s4RsFm4u0_WYzB9VOLzm5EzRTzWi Dus1s65AAJJdwLJEm_x5HC7469IogXIPwa1YKWDbsiWARYhmT_K_og47Laaw xPBB6Dg45vdMe_5hwU9AQP0Lk7h7gzNox5jgZcpCMG6YzBuQLCbhZ8SKLcBw 7W3wuumtf_LxHNYgyq.oENICtE9RQIbmG47YDlESVPSmRrW8TIEUW2lAHqM_ yRC8slnz1ZHaqrBB
X-Originating-IP: [46.249.57.80]
Authentication-Results: mta1271.mail.sk1.yahoo.com from=seotechno.in; domainkeys=neutral (no sig); from=seotechno.in; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nl3.nlkoddos.com) (46.249.57.80) by mta1271.mail.sk1.yahoo.com with SMTP; Fri, 04 Jan 2013 17:46:16 -0800
Received: from webbrand by nl3.nlkoddos.com with local (Exim 4.80) (envelope-from <webbrand@nl3.nlkoddos.com>) id 1TrIpw-0005LN-TV for deleted@yahoo.com; Sat, 05 Jan 2013 02:46:13 +0100
Subject: SEO services offer
From: Daniel@seotechno.in
Reply-To: Daniel@seotechno.in
X-Mailer: NotOneBit.com Simple Mailer
Message-Id: <E1TrIpw-0005LN-TV@nl3.nlkoddos.com>
Date: Sat, 05 Jan 2013 02:46:12 +0100
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – nl3.nlkoddos.com
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [738 738] / [47 12]
X-AntiAbuse: Sender Address Domain – nl3.nlkoddos.com
X-Get-Message-Sender-Via: nl3.nlkoddos.com: authenticated_id: webbrand/only user confirmed/virtual account not confirmed

FROM: Daniel@seotechno.in <Daniel@seotechno.in> RETURN-ADDRESS: webbrand@nl3.nlkoddos.com

ORIGINATING IP: 46.249.57.80

 
Leave a comment

Posted by on 01/09/2013 in Other

 

Tags: , , , , , ,

“andy nelson”

BUSINESS SCAM – ONLINE FRAUD

NOTE: Two attached files were also sent along with this email. I didn’t click any of them but the title of the files were “Securedov” & “Download.”

If you no longer wish to receive our emails, reply with “remove”.

Bullseye Local Marketing
The #1 reason businesses fail is because they spend too much time targeting a market that does not want what that business sells.

If you need to market to a targeted audience, we have you covered.
We market by zip-code radius, city, state, geographical area, or country.
Any low-priced package will come with tracking sheets and info on each recipient
your messages are sent to.

Ask us for a FREE test run to see how effective our method is!
(Note: Free test runs are for new customers only)

NOTE: There was an image at the bottom of the email and the url showed the website – localzipcodemarketing.info – I googled the website and spam warning posted by other users popped up.

HEADER:

Return-Path: <jameshull800@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts) ZSB0aGV5IHNwZW5kIHRvbyBtdWNoIHRpbWUgdGFyZ2V0aW5nIGEgbWFya2V0 IHRoYXQgZG9lcyBub3Qgd2FudCB3aGF0IHRoYXQgYnVzaW5lc3Mgc2VsbHMu IEZSRUUgATABAQEBA3RleHQvcGxhaW4DAzACA211bHRpcGFydC9yZWxhdGVk AwM1MwIDdGV4dC9odG1sAwMxMgJzZWN1cmVkb3dubG9hZC5qcGcDaW1hZ2Uv anBlZwMDMzICZG93bmxvYWQuanBnA2ltYWdlL2pwZWcDAzk-
X-YMailISG: mhKe1mQWLDua2Db6ZLz6_cJD2U2KiDVmDCWU_djNHodSjnku N2JqZNkyXjg2_L8ke48c1os0CpuSvlS9XzmhQWxCr7U3WfMvHTsJYES5zS98 50pzmMIJZC.TkyI9N.Vn5CnPtppHvouA58T8xoKAy52d8AHWsJaX6rUri1_w dzgJHIA8.CZEpkZusmOZ3L1DcXotj_CJ10RGWMivMx_NIwx7.banq7FaCBru tqjX5Gs_72H_73_bhmCABlejzaGpQ_pbXMBOEX0KW3BCy1FJnqMDIf7PmYR9 z5hlDLErp0hM8QYoj0Lq3ySojkWqIZN717rstUACXR.fHKcFIPpL0biiyR1n qqbC80NCt6e.OYEpJRNMP1.9BxFMW8IwBuk1AzXp0B1k5i8pG5js6ihXi0Nt VQossScg9yapiz2GxSLuuiC9saNYkSZC6UQYi2X2_Xfrxxt4jMcC2ndec7xc HMRl7TAQkwapW9bhYuWij_jL7W89CWaxCBhmIiR2P2XYLeu_ACdFue_82mwO AAN1a7l4C.DbQ4QJ9MarFh1aNNTMLRQde1G_e6srMIOWVKrft3tSrCzi71L5 9.SLvIvKIUaEL3__yafYnuamV48D8iFNCGTJSXcjoEC4HpYnNsBN5n5LVirc s33zG.JUqF6x1e.hswpcDfjxpzT7fKkpX5lmDquzVzoDimTT5pccxaeQDs5i xYIoGFp4S449zJ.Irze5vYlopyBRCrLqREBufy0Pv_jijbubvm8iWNzCO8.2 VknlGZgjKQ6xrg9T_FbPWEpt0algcs462HzfAdFfOscbWa_RQ_j8EZgG7opM DQlH7.OaPL.p2CvAOcelfuFJItb8J82pp7AYsmPq1lPPw9Lo3xMy5Sl2pVEK _JF_Nky3XGVy.Ge3EMi11RnrxfAvZ459TkdpMbbspxbvUtDFkfSOwfD5Z6lv qn8GH.b03dS0Ml094YF5DL19hsMogWxHA.Y0Vyp2iHasYy6WaMXYyEqeiEQ5 SWAP0saHfq5kQLMuagle5IISYG8mw9b1W.qit0vmknWxmaw_6RG8R2wkrHET NjzcX23imBVS0zHcbuWkqeDnE0qTkyoPbRjY1bSsAJEg_W8VTWktrE4A0C01 wTiknq5J4VM_XuTmqEVfuI7T_Y7S_OBsSuXbQGRTwx1EyqC3vm7ZJBKgD50a IuWJVKpoFfucjIl3t9h59SPrWjFNAXEbrli_jXBG16LM3OXIQEIZL3curPGh P_U9KyAIRxtMvt.xFNBKZiRwWqpx7kL_pxwmohK_M6mn_waqRaVd_2gQN_fK GUf0Qtv1k6htdm7i2cNLWASpS7Q-
X-Originating-IP: [184.82.50.220]
Authentication-Results: mta1349.mail.mud.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO host.businesseasy.us) (184.82.50.220) by mta1349.mail.mud.yahoo.com with SMTP; Sun, 06 Jan 2013 17:06:37 -0800
Received: (qmail 1929 invoked by uid 0); 6 Jan 2013 23:17:14 -0000
Received: from c-68-81-163-130.hsd1.nj.comcast.net (HELO ports?ahead) (postmaster@businesseasy.us@68.81.163.130) by 184-82-50-220.static.hostnoc.net with ESMTPA; 6 Jan 2013 23:17:13 -0000
From: “andy nelson” <jameshull800@yahoo.com>
Subject: why businesses fail
Reply-To: “ajaesterling@ymail.com” <ajaesterling@ymail.com>
Return-Receipt-To: ajaesterling@ymail.com
Disposition-Notification-To: ajaesterling@ymail.com

FROM: andy nelson jameshull800@yahoo.com REPLY-ADDRESS: ajaesterling@ymail.com

ORIGINATING-IP: 184.82.50.220 RECEIVED-IP: 68.81.163.130

 
 

Tags: , , , , , ,

“Global Rich Club Thailand”

EMAIL SCAM SENT IN THAI LANGUAGE (If you received the same email but can’t read the language then translate it, either on google or a translation website.)

EMAIL: คว้าเอาไว้ ต้อนรับปีใหม่

GRC ได้รวม 3 ธุรกิจแห่งอนาคต ไว้ด้วยกัน คือ
…ธุรกิจ อินเตอร์เน็ต
…….ธุรกิจ ท่องเที่ยว
………….ธุรกิจ ทำงานจากที่บ้าน
จึงทำให้เกิดรายได้ที่ง่ายและเร็ว….
ธุรกิจนี้เหมาะสำหรับท่านไหนที่ต้องการเงินเร็วๆ แบบเป็นกอบเป็นกำใช้ระยะเวลาสั้น ๆ
เพื่อความร่ำรวยและต้องการปลดหนี้สิน ไม่ควรพลาดเด็ดขาด มาก่อนได้ก่อน คุณจะอยู่ในอันดับต้นของไทยหรือเปล่าอยู่ที่การตัดสินใจของคุณ
คนรวยกับคนจน ต่างกันที่ความคิด
คนรวยวิ่งหาโอกาส แต่ คนจน รอโอกาสวิ่งมาหา
คนรวยคิดไวทำไวจึงรวยเห็นๆ แต่คนจน คิดมาก คิดนาน จึงเหมือนเดิม
คนรวยชอบลงทุนเพราะได้กำไร แต่คนจนชอบใช้เงินรายได้จึงไม่พอใช้
คุณล่ะ เป็นคนกลุ่มไหน
ถ้าใครต้องการดูหลักฐานการรับรายได้ของจริงเปิดเผยทุกอย่างไม่มีหมกเม็ด ไม่มั่นใจในธุรกิจให้ติดต่อมากับทุกเรายินดีปรึกษา ทุกคำถามมีคำตอบ

ดูแผนการตลาดที่จะทำให้คุณรับเงินแสนได้ ที่
http://www.plodney.com
“กรุณา Copy ลิงค์ไปวางที่บราวเซอร์ของ Internet Explorer”
หรือติดต่อ คุณแอน (user: earn) 086-306-5462 / 087-512-2492

GRC ทำจริง จ่ายจริง ……
และนี่คือความฝันของคุณและครอบครัวใช่หรือไม่

HEADER:

Return-Path: <earnasset00205@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts) reC4meC4o.C4seC4muC4m.C4teC5g.C4q.C4oeC5iCBHUkMg4LmE4LiU4LmJ 4Lij4Lin4LihIDMg4LiY4Li44Lij4LiB4Li04LiI4LmB4Lir4LmI4LiH4Lit 4LiZ4Liy4LiE4LiVIOC5hOC4p.C5ieC4lOC5ieC4p.C4ouC4geC4seC4mSDg uITguLfguK0gLi4u4LiY4Li44Lij4LiB4Li04LiIIOC4reC4tOC4meC5gOC4 leC4reC4o.C5jOC5gOC4meC5h.C4lSDigKYgLi4uLuC4mOC4uAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzIy
X-YMailISG: lh3e5poWLDu3sbvm6qsMtoN.puglqEWTavB2urN3frKCrAOH eLzz4W79LwLLklmnvScXRrAydr.p2PjbYcO6AYbAgpYNeniArwlktgDUEBSg 5mkPp5RfTE.nKKwRX0P0iQFMjSyDfisuVJ6g9kllEp6G0U5NGFpEMjIjAxZN d2t9NOH60AMYr_oTPy_t5_66p3iU8N3nqyUCfwj5gN_nGo0JLDKBPDuGTy0z DAM4OfsPy3avx498Zx2dUQ91UJzDgNKRY.sACxC6zb3YWQFbnhd4Q8qNBt4S r9JG2G_IyKqR2I00RIOXfAzk8VrJX6ayCDIDytI5caWiBSpBC53V.ugYYGQD jLQ96lHXkoTA1rpg5Y1giJHBuwxhvzml8YkOhz1cNnFXfUpxdsWRq17FZsPX jAk2Vvuyn7R1kr_auAfsfHE9FvYVQ0reaMOPjuFuiOnKnroINAn7VYt4AXtD f4n287lAEWB8aH8AvyejC9DzSdyIjKxG8.bGtfS1f6zea.VzjhURfMLByt9k HwScd0LCIi9d3faKpgy6qY1azfK_s1qT.2RBEDh2F7EthKJM96ieNvBcmgph NQc.VToFmvpLiGEK50TQJYQzD8bCYkpOsEM1nmhhWCbqkKsBKuQcVa_yLpir YHHnKGTZM.1HeFmU2m_lRtFdRPjP_rdwU72Tmtich6bQLdL3uHnQim.8Y0Bl J969IdaA5c5B.T_jmJPAUKfCYzKe5a_xCN_RplyA8SS3hjM4YHDn2Hk2ESca E44mpNnzGll7y0P3WwmFWksvkwVIg263est5unTEzv0g7u0T0ssutX3V2fic hKoZ7ZtdpIhoewzzESzqsV2Myp7rL9KUm7JvXQ7dIMUKZAHckkhJwOJksEHa Y52WgyQTdZispT2UBIR39wiRUiGomUYnus04inGBmoBeY7jSMZGZIDwUOSy0 MPEBmxesm9dksL7OuySJqZs8stMYP0ItN6JVHUtRLwfBb3AcnqOpAflIehig jI1Iq1VzBZpwxxibpygpQfzDwk0AUhLRr5cuvBQ_RWeSQDhdi.BD79PF67Mt g23NzeAbQ2FoQbI.funKFz1hEo8p277qTBtHoZDXc8ThLiY6rZ8XeHWw6ONn IgIg1B6eeYr.u7hK1Ul3t.FMlWIHlnUZVymBKtcGxpmxEaTk8XUVLiSjYKDR frlXlDV7gSywqCp1FOXbRt8CCZa7JIEo5.Mj9NelgycHpVE7I8z8IAobbvXT cU1QnRmoRfewae7vchSyN8.JMXzq3O6IiFtqqaFWR76XHUKvgd8QHKHzDjW0 F.4QonslozDOHpI6fVRkcNK2K1jz26Ag73e30K89edlQVpRz2CChr3KhTcw1 cge60mCAFD91Pm6NuU_WgA4F.AyeBRb7OwO0XyEgEY6Wo15H
X-Originating-IP: [98.136.218.85]
Authentication-Results: mta1380.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm1-vm6.bullet.mail.gq1.yahoo.com) (98.136.218.85) by mta1380.mail.gq1.yahoo.com with SMTP; Sat, 29 Dec 2012 21:55:34 -0800
Received: from [98.137.12.175] by nm1.bullet.mail.gq1.yahoo.com with NNFMP; 30 Dec 2012 05:55:33 -0000
Received: from [98.137.12.205] by tm14.bullet.mail.gq1.yahoo.com with NNFMP; 30 Dec 2012 05:55:33 -0000
Received: from [127.0.0.1] by omp1013.mail.gq1.yahoo.com with NNFMP; 30 Dec 2012 05:55:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 707271.65814.bm@omp1013.mail.gq1.yahoo.com
Received: (qmail 18343 invoked by uid 60001); 30 Dec 2012 05:55:33 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1356846933; bh=s3XWSLe0G0Zuz902shQHQ3p2UBU+2Rwtq2HMjdM/M5M=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=KHrdzOo+nnUDB5fDXddlJY+NZ0qD48Ef75KSe8E++vYTh4oBtJjJv8HU70V8i+9F0tWNoOSgW54goKyekgv3Srt5hiuEW9TuDIihAhKJQ+1FksLmPP6CFNPMCrpBuDg+Rk9iGD20hzVD3Zbg05LR4AlM+inzffn/yGufgUv/mvA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=VLAVxBlRP4fbJqpgXd/G1mC3d/LSNep4+RurwdC7qIu/eeD7qlDmA9AlMx+U2/fnUjkWgFx20weCux4wGZQ4db/CtTeDVnNT4Wlb4057g5yYL1W1uNAYVCTd+Y1pRdvRPFp9HbvlTqSDKtjOSAUoUw8ZhOMjGH/7MhzTYpJScUk=;
X-YMail-OSG: 0.g6dOYVM1kqhouzezWUc7L7wbG43kcfvbeZJ3CKtSjOMkJ 3aV9HlwjbQu1f.14yUeVZacFHJUwSM9FuOw0OYI_XdoJlzz8clkTVsCy7W5w 0Twhq0PcrvOLSCFq.WSKs.rowYkQ3RyAHbqPC9zU51qMnxQSXMd5dtgjSy_0 6iVFNiyKMrIIf8Vyfb2VVBJe294L1C35tDbEbYn92pH9R9hRoldP8PLj6TjQ 6Fhi5N52XrMWEO15f_nOLY2Vls1xwXC5gASSdtxJ7WtPTDXTUYBVP5P1fl.A dTqfx0Sy_D1xPhIe05YYCn1yxG3gIKjSXQzKmMEtVicu2F.BhXcmVPDfPtnq xLcpLtj_7uN4j3nDhf2KjPE4Bo5MtyA5MqUiSLMOaXvqstLaWFZUZsYPvqfD _F6GucpZd2Gc1ur.c1X1LjeNmynYVHDtD_3kAIgD8EOHN4kHumfZGie_UWoK eYMFn0vtCVqR1XQYl1lRtPgOQE0LH2eZS6d5ILY4rq.R8jq0apmKVnc7OJyF vphGy2w–
Received: from [61.90.121.181] by web164006.mail.gq1.yahoo.com via HTTP; Sat, 29 Dec 2012 21:55:33 PST
X-Mailer: YahooMailWebService/0.8.129.483
Message-ID: <1356846933.11710.YahooMailNeo@web164006.mail.gq1.yahoo.com>
Date: Sat, 29 Dec 2012 21:55:33 -0800 (PST)
From: Global Rich Club Thailand <earnasset00205@yahoo.com>
Reply-To: Global Rich Club Thailand <earnasset00205@yahoo.com>
Subject: =?utf-8?B?4LiE4Lin4LmJ4Liy4LmA4Lit4Liy4LmE4Lin4LmJIOC4leC5ieC4reC4mQ==?= =?utf-8?B?4Lij4Lix4Lia4Lib4Li14LmD4Lir4Lih4LmI?=

Global Rich Club Thailand earnasset00205@yahoo.com 98.136.218.85 – 61.90.121.181

Other Spam Messages Sent From 98.136.218.85 (note: alot of these names and email addresses including ‘Robert Mueller” and web.office.anet@att.net etc have also emailed me (and who i’ve also posted on scammer419) — If you receive alot of spam, you’re most likely get many different scams, all being sent from the same group of scammers.
From: LOAN OFFER <web.office.anet@att.net>
Subject: none/blank
From: Xmas Loan <web.file.433.3@bellsouth.net>
Subject: none/blank
From: “SCOTT PETERS”<paymentcentrecitibkl@gmail.com>
Subject: U.S.A GOVERNMENT, WORLD BANK, UNITED NATION ORGANI
From: “Mrs. Carman Lapointe-Young”<fbiinvestigation.dept
Subject: UNITED NATIONS OFFICE OF INTERNATIONAL OVERSIGHT S
From: “Robert Mueller“<wwwfbiwashington210@live.com>
Subject: Please open and view the attached messages as rega
From: “omaraljewary@yahoo.com” <omaraljewary@yahoo.com>
Subject: You have (1) new ecard!
From: “np_is_awsome@yahoo.com” <np_is_awsome@yahoo.com>
Subject: You have (1) new ecard!
From: RM <fefdssa001@hotmail.com>
Subject: Hello, An exhaustive and metic

Associated IP’s
209.160.64.186
207.150.196.51
189.242.54.137
66.235.180.7
195.229.236.245
207.150.196.52
207.182.133.106

 
Leave a comment

Posted by on 12/30/2012 in Other

 

Tags: , , , , , , , , , , , , , , ,

“MRS ZINOVIA VONDA” (AKA) Christopher Warren Smith

SCAM – BUSINESS PROPOSAL / PARTNER – FRAUD

UPDATE: I’ve received recent emails from Vonda Zinovia and have posted them below, along with the header information. Also note that this scammer used different IP’s for every email sent so look under each header to see all the IPs and email addresses.

An attached link was also sent along with the emails below. I didn’t click on any of the links, which was titled ‘ MyInternationalPassport.kpg ‘

FIRST EMAIL: Dear Friend,

I have a profiling amount in an excess of US$25.5M, which I seek your
partnership to accommodate and invest for me. You will be rewarded with
30% of the total
sum for your partnership. Can you be my partner on this?

INTRODUCTION OF MY SELF:
I am Mrs ZINOVIA VONDA, a personal secretary to Mikhail Khodorkovsky
the richest man in Russia and owner of the following companies: Chairman CEO:
YUKOS OIL (Russian Most Largest Oil Company) Chairman CEO: Menatep SBP Bank
(A well reputable financial institution with its branches all over the
world).My boss has being in dention for eight years,for political reasons
being a top leader of an opposition party to the ruling party(Government)
here in Russia,on December 7 2010,a moscow court(Judiciary) that was
influence by the Russia Government found my boss guilty and was jailed for
six years.

The present Russia Government continue to view Khodorkovsky(my boss)
release as a threat and seek to prevent his scheduled release in 2011, a
few months before Russia’s 2012 presidential elections,they believe that
if my boss is release it will work against their re-election into office
in 2012.

The U.S(America),Germany Government,the United Nations and almost all the
media in the whole world has condemned the Russia corrupt Government
officials for influencing the judiciary(Court) to give judgement in their
favour,to prevent my boss(Khodorkovsky) release before the Russia general
election in 2012.Bellow is some website regarding to the court rulings on
my boss(Khodorkovsky) case that was held in December 7 2010.

http://www.khodorkovskycenter.com/

http://www.khodorkovskycenter.com/news-resources/stories/guilty-condemnation-russian-injustice

,I am presently on a house-arrest being the confidential secretary to my
boss(Mikhail Khodorkovsky),this is the reason I am seeking your
partnership to help me secure and invest this funds in your country until
I gain my freedom from this house-arrest.

SOURCE OF FUNDS:
The funds in question is my share as compensation in some oil deals that I
and my boss had with some American oil merchant.Already the funds have
been deposited with
a finance institute in western Europe,where the final crediting is
expected to be carried out. While I was on the process, My Boss got
arrested for his involvement on politics in financing the leading and
opposing political parties (the Union of Right Forces, led by Boris
Nemtsov, and Yabloko, a liberal/social democratic party led by Gregor
Yavlinsky) which poses treat to President Dmitry Medvedev second tenure as
Russian president.

YOUR ROLE:
All I need from you is to stand as the beneficiary of the above quoted sum
and I will arrange for the documentation which will enable finance institute
transfer the sum to you. I have decided to use this sum
to relocate to your continent and never to be connected to Russia again.
The transaction has to be concluded in 2 weeks.

With this ugly situation i will not buy idea of phone discussion between
both of us but at time goes on i will introduce you to my only trustee
legal adviser who will be able to speak with you.

As soon as I get your willingness to comply through my bellow private email
address(mrszinoviavonda557@yahoo.com.hk) I will give you more details.

Thank you very much

Regards,
MRS ZINOVIA VONDA

HEADER:

Return-Path: <fanstoyo@fan.fanstoyou.com>
X-YahooFilteredBulk: 198.154.201.90
Received-SPF: none (domain of fan.fanstoyou.com does not designate permitted sender hosts)
X-YMailISG: _7P8Je0WLDv44aUHL9gT2V1yFIgwZiBazaoMuyzCpihMmIuY OO3jvEOFYzS1RBHFFhrKDpWgNUVG7liVFKCr.wv1klIK26ru.CEr7vTlO8kU Mxt66EFJR.QkWh3sN5X_FAhmR51PCPvLxkQc3lLVFf3FPJosapqvn3wSFsVd Kk0SP_iFINTItBWLdvD39pkpv0Ca4alILW09gLbG8HZCoOT7fyRW2ZxOIej8 hvcgUx0_OwMzU8xjXmiPnG9P5guiGfcw36LMEsjwaF19S1fWCeqj0C39hmnz QKZT5GYWsRg9WbrqXGJpczQKnaGUHgyjrtsFkA_2snmnMvUwpPH4Ahz3dJCR ABpVBcXFhGGPxFYqhcaX6NCgS.XIOb4NUvae540SPGOlA2DSEFqHhQ9M9BWD enhD05plK9gZJu_mZlHAcKsUBSx6lDkqWgl97EI0m80m6.qeczxjKFP.2Bkr R_aHNmTLQL.gcod9O.wpLY1Bo7PHSeWlrs6JfSznAqxlv4dNXXUMwGvyzpat v1X1LLudq0XNYYjQo66IUfMxGQz259cTxMET0yWuWEplByD5lk92vjtYEfLi gbdWOoI.zABI2aft_MgC2PRc_xvI4JB6HX8mUEo8LlaSD5eYHiMtH3M8iD8F v_d2KOUdc4G8KAaCBQPWN_DiUP3cFu4VvpJJfzYwTAXYc8jJDb7dtmv7cKa2 D4avyJI5fpqmGBbQhJY3fSJKTmdHjAtOKQYe5lZV5NivhfrJf2_tAk5YolKK 4CxW6I6qiMx8Pra3dfM3WeKnuJUnVaQSrooZvi0_OMAI2leyNKFGZpYSL4WR o9dwW_XDD9AdhnqbnegLQ_ZvYRTwaw0imvVrgiCVfhVJ5nScKlgIfruQHh0z jhWvqVQ3FD9vjj9n0mz3OgHaTcaW3yJzQ1KKlA..PdVNSSJnVXOpSO10VUX. mPcGdyCCuCep0eDIaInQ1jCMvOUdKROyGX6gBVrhhp0AuASAS9KLB8qKIgZQ ikEBaVJyvyxh.KwrzPIyDkVgl2t_Y2VAwTnnhEGrwpy2fJyPdGbT_PmmcOD3 PfDvwtRHT5zgSOuFdwPO0ZrKh2xqoq7WRKOO2kUwmIEnzCBiviAamA8eazWQ S4jDiypOoMSgGbF08lTMrWXL5YqMoaB4FhsbxcTFjCo0trbYbM0j9001ybdT hjaE78GSVt7s1DTXnrvX8XxNAd_LAO1SqbJhMJI5y_kYOWrfuJAAAzCn7nrC NaxOZvZxBJgfrkPn.gX7_Q65GDul2_jnnIga7je6P.WLmqCzd19f9c2FBLly miuWKJaGAvRPa3bOUykJtUfUfOZlwTAsXWToPD0bOMI-
X-Originating-IP: [198.154.201.90]
Authentication-Results: mta1057.mail.ne1.yahoo.com from=yahoo.com.hk; domainkeys=neutral (no sig); from=yahoo.com.hk; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO fan.fanstoyou.com) (198.154.201.90) by mta1057.mail.ne1.yahoo.com with SMTP; Thu, 20 Dec 2012 10:22:26 +0000
Received: from fanstoyo by fan.fanstoyou.com with local (Exim 4.80) (envelope-from <fanstoyo@fan.fanstoyou.com>) id 1TldGi-00012p-5O for <> Thu, 20 Dec 2012 03:22:24 -0700
Subject: BE MY BUSINESS PARTNER,,,
X-PHP-Script: fanstoyou.com/massivetraffic/massmailer/mailer.php for 41.58.0.15
From: MRS ZINOVIA VONDA <mrszino557@yahoo.com.hk>
Reply-To: mrszinoviavonda557@yahoo.com.hk
Message-Id: <E1TldGi-00012p-5O@fan.fanstoyou.com>
Date: Thu, 20 Dec 2012 03:22:24 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – fan.fanstoyou.com
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [502 500] / [47 12]
X-AntiAbuse: Sender Address Domain – fan.fanstoyou.com
X-Get-Message-Sender-Via: fan.fanstoyou.com: authenticated_id: fanstoyo/only user confirmed/virtual account not confirmed

FROM: MRS ZINOVIA VONDA mrszino557@yahoo.com.hk REPLY-ADDRESS: mrszinoviavonda557@yahoo.com.hk RETURN-ADDRESS: fanstoyo@fan.fanstoyou.com

IP: 41.58.0.15 LOCATION: Lagos, Nigeria 

X-YAHOO-FILTER-BULK: 198.154.201.90

____________________________________________

SECOND EMAIL: Dear ,

Good day and thanks for your swift response to my business proposal. All I need from you is your trust and sincerity throughout this transaction and together we are going to build up a business empire that will be inherited by our children.I am presently on a house-arrest,that is why I am seeking your partnership to help me secure and invest this funds on my behalf.I came accross your address when I was searching for someone who can help me secure my funds until I am out of this my present political predicament.

The reason why I am on a house-arrest is because I was the personal secretary to Mikhail Khodorkovsky
the richest man in Russia and owner of the following companies: Chairman CEO:
YUKOS OIL (Russian Most Largest Oil Company) Chairman CEO: Menatep SBP Bank
(A well reputable financial institution with its branches all over the
world).My boss has being in dention for eight years,for political reasons
being a top leader of an opposition party to the ruling party(Government)
here in Russia,on December 7 2010,a moscow court(Judiciary) that was
influence by the Russia Government found my boss guilty and was jailed for
six years.

The present Russia Government continue to view Khodorkovsky(my boss)
release as a threat and seek to prevent his scheduled release in 2011, a
few months before Russia’s 2012 presidential elections,they believe that
if my boss is release it will work against their re-election into office
in 2012.

The U.S(America),Germany Government,the United Nations and almost all the
media in the whole world has condemned the Russia corrupt Government
officials for influencing the judiciary(Court) to give judgement in their
favour,to prevent my boss(Khodorkovsky) release before the Russia general
election in 2012.Bellow is some website regarding to the court rulings on
my boss(Khodorkovsky) case that was held in December 7 2010.

http://www.khodorkovskycenter.com/

http://www.khodorkovskycenter.com/news-resources/stories/guilty-condemnation-russian-injustice

I have attached to this mail my international passport for your own perusal.Please keep this transaction very confidential because of my present political predicament here in Russia.

For my lawyer to proceed with the documentation of my funds in your name as the beneficiary,you are to provide me with the following information’s as stated bellow.As it will take my lawyer three working days to finish with the documentation processes.

1)Your full name and address

2)Your age and marital status

3)Your direct telephone and fax number

4)Your company name and address.

As soon as I get the above informations from you,my lawyer will be contacting you,his name is Mr Christopher Warren Smith,a senior advocate of the British Bar Association,he is my legal trustee.Please note that you will note be required to pay for any fees,but you may be required to travel to the office of the Universal E-Cash Consultant Limited where are deposited my funds to endorse your signature on the original copies of your funds authorisation documents as the beneficiary to my funds before they can transfer funds to your bank account.

I will also appreciate if you tell me a little more about your humble self.

I urgently wait for your swift response.

God bless you and your family

Regards,
Mrs Zinovia Vonda

HEADER:

Return-Path: <mrszinoviavonda557@yahoo.com.hk>
Received-SPF: none (domain of yahoo.com.hk does not designate permitted sender hosts) b3VyIHN3aWZ0IHJlc3BvbnNlIHRvIG15IGJ1c2luZXNzIHByb3Bvc2FsLiBB bGwgSSBuZWVkIGZyb20geW91IGlzIHlvdXIgdHJ1c3QgYW5kIHNpbmNlcml0 eSB0aHJvdWdob3V0IHRoaXMgdHJhbnNhY3Rpb24gYW5kIHRvZ2V0aGVyIHdl IGFyZSBnb2luZyB0byBidWlsZCB1cCBhIGJ1c2luZXNzIGVtcGlyZSB0aGF0 IHdpbGwgYmUgaW5oZXJpdGVkIGJ5IG91ciBjaGlsZHJlbi5JIAEwAQEBAQNt dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzE4AgN0ZXh0L3BsYWluAwMwAgN0ZXh0 L2h0bWwDAzEwAk1ZIElOVEVSTkFUSU9OQUwgUEFTU1BPUlQuanBnA2ltYWdl L3BqcGVnAwMxODM-
X-YMailISG: .gwS_rUWLDvH57WCGihHOxRthjj6Uhvu4.1a1pfy91flJjs4 TeMlMJyBxQ_9WSmcfyBXNhKhC9Oih4U3kVsX1JW7SLfqRvqiY0dXxwWoeHh_ _8b57HH6naqZAcPnz_D4JgWbJmc.UHWCh2pcMf7KvL1Q.GOK.lUECrsaYoYh 4F.osrEAFjALFZAejsDdW4cpHowr35qIND02_vaPOO5tz1dc56IcasaIto0l 9VD1wtezX.CGATiRl3vsVZi8WdKFF_75FAQnOhwt4KPg5yejpYXSc15csSca 8iEwfjRiSLaaHWmULzJl9oFGTvabp6LMVBkCw.QDtQr7lshfNsZTlFaZoqTn 8VLwB1tWHF.Tc_D7ppnJ4rC3ot15O6cBHN62USGp7z848cZBWn0PwllzSl8u UKR_IW9JME1tFTvotmVXsPg4Ay1Rrymr5oZOIc.oNqZ8Mdn5YwOHL5mXoiS9 D5hFzKFHGhM7zRMY_FGZf1mr9s2Ra4bGW4cKRe0wFiGenMkPF0Vbe0QSYy3T PphJko9lqrTLrxnveHNq6A0..Erk9ZONGxbLhmNUQe_nt0ENJIouUu9w.D8e T48jkNAQgipwsxJNimwpEJM9p1wHl1ECp.fvd8bLlkyvow.cnBDoYXj_qAgv GlPkylcYcPFpmonQwFPngaTwbuD7gjNj2mwFuqODDY3uIVUyo.ENOF0Soq82 IyOhGHTn65xKhW_Pm2lrz4aWFAIe6Kvlyy8htzsifQhUC7Jx5C1KiNU3NjiI 9S.7UlQhyvLRUz5GmBDMTnUJ.7BQomOD15EyhSdme1hNbN5MXg6g23kvOCnY cnaZDm7gOvrLuW_X8ONePDt208eu0JGAk4PGezaunVUILAmHjwPeCTBFaGvf upPUw9z26WS.RAVwNXH4nXi0x5.CKJLBcRADjOqewPuL7Facj4ETW03zgzDg uJ3bsmSTxSuOR9mX8q1TIzAjrbgSlhZhaw6.ZgDRBI6w1WYDKIu79av1aGJx 1cA19PRTkaO7KUalj4hcIQkprw.W2NKVlm7vt2zPx7QvesL2ZeYP0f0MEhWO sAPo8e2VtAzJL9.cCTkkpbXlpdaGAaiug_E._wguBMEIbqQCgvePfAEVLOby SR_DApto3NpaJ16L34EJPDstVFGi4P608FlZ2lMrENZ5yAHS9bbe_mIaa_Qv MJ.Ewq1dN2FjOsyW6MXnvkw947MxZfNkL4Su7nM_zDyRGftXyaMxfRWuE85Z g76ALXIMXwhIMqTQsl.PtbUapgve41qr6ZZLhJOJH5fiqQnQn7tGUubGA.U0 EpPBzwis0kAPbNlOKic8nUIjJkKlqoulpXmSllh_LdQ2Ay39vKcwtakoZYuO lxdiNr2y4ng6sJRqtiVBqw0ej_kc0IqPsXDLP9Kd2I.Mx4kcAue9F7N5ZHvP FyNDLGderBK.O7wOb9uZ._iFHLpvgEnoX7B0z3NnT7lCyfmS61hzF2CB4WOl eduHaGQaDfHa_y1hXrQbtgTHvF3I6uq5BA–
X-Originating-IP: [106.10.151.102]
Authentication-Results: mta1363.mail.bf1.yahoo.com from=yahoo.com.hk; domainkeys=pass (ok); from=yahoo.com.hk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm25-vm7.bullet.mail.sg3.yahoo.com) (106.10.151.102) by mta1363.mail.bf1.yahoo.com with SMTP; Mon, 24 Dec 2012 02:26:36 -0800
Received: from [106.10.166.121] by nm25.bullet.mail.sg3.yahoo.com with NNFMP; 24 Dec 2012 10:26:32 -0000
Received: from [106.10.150.27] by tm10.bullet.mail.sg3.yahoo.com with NNFMP; 24 Dec 2012 10:26:32 -0000
Received: from [127.0.0.1] by omp1028.mail.sg3.yahoo.com with NNFMP; 24 Dec 2012 10:26:32 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 602599.77879.bm@omp1028.mail.sg3.yahoo.com
Received: (qmail 97483 invoked by uid 60001); 24 Dec 2012 10:26:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.hk; s=s1024; t=1356344792; bh=rmeCZ+pKyq8LCvdGytDaTB9Eyp8cRYogfwCGTn+M/Ag=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=e0mBHBq34ba0f2H/C1aNdAJ1Gdp+1XJtt71RG26ZInSUQ0lmneA0OrYCNhNmZ/Bg/kAZ1QF+kmBvTILrFrB3AXt0VWKKrLuIJLYlM/nloEwgztB7+jLojJIxTqZukzlfBEHwdUAmIY13o5TZn3L125vo/Bv1Y3eX88F4dmzZkQM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.hk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=APOkFjWZKxMTwNz2FHfvbonkj+UOc6vgsooPpbgry0dQju409C6fUtJn+hV3n+fBGRLbIue5BTTEkNE9BzwuEqy+zgzOSjDWM/FdyEQi8pqXZvh5Rg77HZXRv+NILVmEG3m9hrET5r4sk3PO8yvZmSqmYFc5MTL0L2osdLT6QJU=;
X-YMail-OSG: iWMQKgcVM1mpHo_hUz8cjf9_Fo9gTOGF6uMats7r7q5sy8N yXrpFn3voxZrFE1fNwXnfbO5z6WW_d332cI.mjhSA1YfrSYCIv6_OhXDzgW7 QJATOqPYciFTtUyzfMNGroH7qdCi3u7qMkgEUkrP6lJpG6pr4iT.DHbGN2Rw L0DT9vQimkI0elU9Zh2zcy7410IChlNqw3g0vCQqk_ztl0O3zsYICEo59cTz iC7E8A.1E1MyZFaLCcm60bKDSQgoQR0IC9C3TMgkezhuPMdS9RYsx5VE8jxe 1WDANY5l0gqi0jwNuPxQlcE_KldsaITRxPPhV2eZOdbkPyNkJgiWl7qeFnZ_ rN9B5igYq32cETTWFTLQ_jaf3d4Yq2zA5GcfnBnjIXEWt9TNSyizqCqHOzV2 UFwBQGMq1yGWWOCTAbtGDWgDrGK.ayAzZTxmwHP0b0gB2u.zIg1uGfKAIy5b thLzxwcsnIv1h40PhfVXbH9KP0ELPvtAVyNuOP.V2uOcpkAzxRw54j6UhhMy iBqzPU.1lW2WvmuQZ9iCHQje3EhQgE.c5V0gmEeZ30ea5LC5gEYyDOlzHFLV tCFkdZjpGmbhLmYJ0sTF0HDueDR3idoRpTnwAPouTWeT8OkA3mRJzPCEziSy wwzvRB7hlCAI1hA2RhIBw_ipVILW4khmbQEuBTN3ROFTtJB6ZmxZs27Mtr9u mduiAJMIWUXsd_PYlZZAIdg6VM5jpidsuT_uInNA9_57VjbLA7mQdWAISNsf B45fHDbPWUkT72xw-
Received: from [82.128.45.201] by web194605.mail.sg3.yahoo.com via HTTP; Mon, 24 Dec 2012 18:26:31 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356344791.97461.YahooMailClassic@web194605.mail.sg3.yahoo.com>
Date: Mon, 24 Dec 2012 18:26:31 +0800 (SGT)
From: VONDA MRS ZINOVIA <mrszinoviavonda557@yahoo.com.hk>
Subject: BUSINESS PARTNER(ATTN: )

FROM: VONDA MRS ZINOVIA mrszinoviavonda557@yahoo.com.hk RECEIVED-IP: 82.128.45.201 – X-ORIGINATING-IP: 106.10.151.102

Fraudster sent a duplicate email and although the email was idenical, the originating IP was different. The other IP received was 106.10.151.242 by web194605.mail.sg3.yahoo.com via HTTP; Mon, 24 Dec 2012 18:26:31 SGT

___________________________

THIRD EMAIL: Dear ,

Good day.You said I should give you some time to finish your work before we start with my business proposal and I think I have given you alot of time,so please get back to me to enable us proceed,and if you are no longer interested in doing business with me,please kindly let me know so I can look for someone else.

I wait to hear from you.
God bless

Regards,
Mrs Zinovia Vonda.

NOTE: I NEVER SAID ANYTHING ABOUT FINISHING WORK. I ASKED THE SCAMMER A COUPLE QUESTIONS, QUESTIONS THAT WERE IGNORED BUT I’LL CONTINUE TO PLAY WITH THIS SCAMMERS TIME.

HEADER:

Return-Path: <mrszinoviavonda557@yahoo.com.hk>
X-YahooFilteredBulk: 106.10.151.124
Received-SPF: none (domain of yahoo.com.hk does not designate permitted sender hosts)
X-YMailISG: XJVZO7oWLDtQzrAD1LN.LWWXS1LYd5vi3q0l94zMMVVAOGUX B6ma1X6b0HLJ.jxvoqJ0SQyAxzvpMZ2KZ4rIeQvn.5vFRbVd_l1K7wHmShYr 8FksAARCbHcwnmXEevzG8E.uhAoqGQ9XRhcVSZtPqvM125ccwTmxgYsKTi8w m4Kk9Z1nbZISZW.jzH2HuJ1NaY0dkSG3PpSy.EHomuRlupRhoejM7leOYl9m uAoT9Z4t0R.MQA.4c9aMNGxauB2Vr8G7VZL6VgSl95YhkxtPO7mFkSv_WOw3 0GF_S.VxPqwVW0.37BkxGZTc91z16Kcz4EpnU9GDyUO1wK1bJn4l38dFALev 5QXX6QThyfzMa9Ve1kEpeMEUPNTp9noybZ.q6T4CPQQdb8kr5OSpu49gS6LU XhIiWllFK_8_LnWwA.4SFhCBlBe6NgEXyAAPfgOyLkFmdoNqdH9GD1k.3yL_ XzbKDZskZiSLUFb7RTnHOI0BpzX884bgVXnSNVw5Syi7QvHBLGtSGIA2eXf5 0ZuYNvBep5n_KZyZu1JySO2Ahr9a.1Sk5Vi_gtHzI0IWkq0YuRqJZmrC6.rn qGcpLDzVVR_ajlXq7YgHe3xvopE1Pp5smOqNH4MlYPoQGzTJaeQfUyBY5lpt DAAW937D1wYLOzcPx1YuZ9KLfK6azkXnoIAvmlrrrNuv1EbhMNQfIQUe1nvL 2Rqdep0NmB2CLKsezJJt770eY2cI2bCxaRdi.noEi13djOphxNSAirMH_TlA xLWGm7jq4NL_JFDECF1aNkM9Fg_3IXJelXXxOVmO.bWLpsyNHn2EJ.PjTzb3 Tt_Kc5VF1p3msY1yUvyygzL9obzZHYjfn0WO8Q3vtvrhslJopreTZQuEmM62 mSN0HwUP68MYwaN_x4KAi9TcU3PEHKvP2XOPh6nllgCbGQaHRRFCzlMLk8p5 KLGrL_GqFk0guroWnvyaCEv3hMr4b4sCHbtypNkurQcB5JlYTGlUGl7RGVZI Po25uWE7nuk1fAwm9su4vCdCtbdRZmvyvUnSxvhJS8nXQFTSGkIEA7WfZFLp HW0bfL9zrPfx2t2CaDE8X.QHY1hYMnurfRDPCaedt4fn9s29iGgRhtLSp5st kWD1v_8jy4pZhhrrqcaiInqQhrKfZ3_AKcCdjP0iemu9CtLPXMfylV78vHBM cXv55jFBVl26viR.BOfOp4.p2sm9j65g.jzyCiZzyOQtz2RKM2jLIXKf4xwx d0S_ORK0zmTZu_m6mts6bFhGNuJFvY7aqLTI0XsJRuMuFuff56nFRz7rsKHD SDfpwGTZdgrbF9Ce1MlO5atOPPBm6.lLCSoL449h0nVb7sdW7lHUcmBf1m7i fd4R2E7XQ8TGYifzyn2stWUUwHsx2vlflKlIA38sWqLIXq5TtS9GVd5rt0ii rd65FjhNXFpKWXqOyY3YQ0FxLdkM8dL9GIx8Njdky7rO873Y5TCw0FYnHaup XJdWPKKa4H4Q0vz0uud4XrU-
X-Originating-IP: [106.10.151.124]
Authentication-Results: mta1204.mail.bf1.yahoo.com from=yahoo.com.hk; domainkeys=pass (ok); from=yahoo.com.hk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm37-vm5.bullet.mail.sg3.yahoo.com) (106.10.151.124) by mta1204.mail.bf1.yahoo.com with SMTP; Thu, 27 Dec 2012 05:52:39 -0800
Received: from [106.10.166.124] by nm37.bullet.mail.sg3.yahoo.com with NNFMP; 27 Dec 2012 13:52:37 -0000
Received: from [106.10.150.26] by tm13.bullet.mail.sg3.yahoo.com with NNFMP; 27 Dec 2012 13:52:37 -0000
Received: from [127.0.0.1] by omp1027.mail.sg3.yahoo.com with NNFMP; 27 Dec 2012 13:52:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 554686.33461.bm@omp1027.mail.sg3.yahoo.com
Received: (qmail 99347 invoked by uid 60001); 27 Dec 2012 13:52:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.hk; s=s1024; t=1356616357; bh=zOUb0hkaq0Z0/SGiyDicUpSc023b41HOddophFiNVzk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=TWqn492xHdaC4pJ+1PxcBGvkZStj2d7bbXcsDkWTTu6BTpREzZcME/fgUKNbCyCGKCVZfhPPrpIBzhT5WnwYSvSg+n1doYlpq/WMMXMydDuP113YszSJ1lL5RCvotD+kmkWO8dQ4thDEXR+W4gnF0KAUw3I2a35WzVggYXHih2s=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.hk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=4ST7/+dMsw7ZZF3+3bY5I1ep2f81gyHm8NZnEtsiPZiH4nGrcauRT6kHQ4GujJEIw4GutJiLkq1HH+KR/JK+g6snGFveE0BbFHNJMclpd0LUVQV9oNjDCs5OwdcMwdBmK3CRBBfOTtcxJNjUVVnhA4QKhWmIZ1/lb8EQtKX3fkE=;
X-YMail-OSG: .9ADldIVM1nLoKHmfRAcfWw90536vRtM6nxUjqYl7iy7wm4 .KEfBy.IWAOHUl6lAL4UhDvBXeKYgKamgAHASTWi0kYU1vKHq5BfXbAWtaAp FWfmg3NHnM11ngSVadVOjX2SxSh2YU0uKMLvDzx7Z8caaUUuPghq5MTR8EJG H8i8h7z8MyRHejCp8ki4wMNj.ZAWmu9CGwWcCCB.ZgilZPBbcmrU64HL5wR1 7NJBRWHlEBX_p8PvC213fgqasg_WJoOPEdqBXhUrEIwtgW5NS0608LvJp8O5 qaZedfSrHpzEpI4HCjKpNidEvdLPTTO3KScXWHawNG7Vbq7WpLxUAKkfwgPT GYQveeC8uhHKGeC8sE_Aps9WjjUI5nQ.h.rSXcv8NqDfeRDOM3.oxkR7ekNO CniM267rfGQevSnuTw7bjpRvTxA_vMGbYmui9ot0gUIu2HL0waGmrvfsBiGn bgBIYj1T9ERc0OQ.E6c89Wqn_pF2DGNpyzFxaBn070Fkj9Z66mSfmc3gepSR FTvBRL.Yg_TlFQN.7dbSvPfTSJzzQ8veTV7gXjLmyvHraBx8w
Received: from [82.128.44.48] by web194606.mail.sg3.yahoo.com via HTTP; Thu, 27 Dec 2012 21:52:37 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356616357.96130.YahooMailClassic@web194606.mail.sg3.yahoo.com>
Date: Thu, 27 Dec 2012 21:52:37 +0800 (SGT)
From: VONDA MRS ZINOVIA <mrszinoviavonda557@yahoo.com.hk>
Subject: MY BUSINESS PARTNER

RECEIVED IP: 82.128.44.48 <> ORIGINATING IP: 106.10.151.124

Return-Path: mrszinoviavonda557@yahoo.com.hk
Received-SPF: none (domain of yahoo.com.hk does not designate permitted sender hosts) ZCBnaXZlIHlvdSBzb21lIHRpbWUgdG8gZmluaXNoIHlvdXIgd29yayBiZWZv cmUgd2Ugc3RhcnQgd2l0aCBteSBidXNpbmVzcyBwcm9wb3NhbCBhbmQgSSB0 aGluayBJIGhhdmUgZ2l2ZW4geW91IGFsb3Qgb2YgdGltZSxzbyBwbGVhc2Ug Z2V0IGJhY2sgdG8gbWUgdG8gZW5hYmxlIHVzIHByb2NlZWQsYW5kIGlmIHlv dSBhcmUgbm8gbG9uZ2VyIGludGVyZXN0ZWQgaW4gZG9pbmcgYgEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzY-
X-YMailISG: H.1LfsEWLDvxQRM5Yf8Dd4P2Rptv9dsH78wGqqAhwXj4y91S .mc64n6jqBTvfTUFx3swUU2bRXxDHqJh1SM62MnmgHB0i9Gsv3VkGxOXb9vB 0DQJqiv9kvP3Add0oY1gFGVnkp3gYymptiFKgLS9_pMxgi_H7q9XEqh_HqG3 yN_.kmIHr32TWpYRkBGJtJAMMBtzhAXHxUR1mwveKOPBMPY.dwflF0LoE7I0 hpa8vivM.1gujjMHJVCnLn8uUOX_1dFmjeV5urAD8EN.2c21OSBRMbmd7ZpP CVt.RRZiQCJM7K5.VBEKUt5Qkk9pOZQ8z5s.fNuP9C.Xc_wYiARbL37Nuz22 8pBIqeuJcVNpZ9_mf0HjV5AwQUWw_q9IF9HGaFqzydUOyt51JjP3JxklLvoc K5EtBpWD5Uptm4FkxtG.2ebFgo4Ktmc5IwzTtdwDvBzXk0DvO.zcowMlTHs_ RoMlVwN1zTBo5Xy73Y3biOdJwUCDmprPdB7paHbx8xvsBM5Xt1QJlCrMFkX9 8W2uGL_BEOF4XVQkJePK6AK8_V5lAhk5F8d6vMrEGMxoOiEUU0SB0N_RYvTV huGdkl6u.8OVS77wLGlUrNc6XdQxNdqBR6INFbOWve7OjrYWOGULwhvJEPzo 1jmp7Vu2qXt3sjhzva0iN8GpUTSUGhXpf1y4b2lKZqFPvOkEH.eoJUiEezj5 QKDEOBx17mE.17RfTPBAKWRX8t0XTI0sff0l8Xn1Uji4VPSEppelVhwBVTd. CTv7dLMskc10PDaWT6cN9Hg4XdaNfjPTKgifSrrF.LelG.Hfkq1h6bvuBIdy 99FT6Dojpee7Ty5GiN0za1XzC9qkMfwJHcT9OrlNrjBiWnm2q4WZL0whG1PD 94ifQY4EkJJb_if3zfPFVP4f6WRzQbT2_bhC0f1m6bLbUZ4fLoEQvGW88_jA gZT91g.bO_c51i1fnfbN8UWjqY7YCpkZzG35clY31wfTlr06_w38TdXXy3cY FxWzmqBU8mZxeRMFeIBx73aS3jBhrPi2ermGhn6n7VKkWjU2CuybP7BICXQ6 ej3MTKPeC8UMGMj0APdard7FbattiAXh4FUsojO2ztryCV5y6f8QVERXEy8X QU0L4tP8M3HOPNOoXA0qk83PpQ7KD95ZH27p0oFQbsA.ip1cJ8cfYkd5ueGR SCHf1IBgO_SBznYyV_bW6_MzTqRBmezM8QpwpM9TQLK67P56MSXU7yNBC7WK Rkz.guQCcEwf0MU0an5tqxFVdrhO9nHmuavSbhVEfx5PYSqPvNN5jdxVzz1_ rZpLF.tm4OUUkvl47W7a1Z9wqFttlZBl7F5g.Zc3FnopVj_3dDiAGyod.ag9 Id0SopXlPFEmNWozc4RE4S7iGKSwpGQ0z4Gyf.DXFYXWYlrt_bIcvNkxCRW1 2O2TbjGnhhZl.Z0uRcCqocfckHMBytQ3JKuOddC0AMTo0ifBJyuCYyNMg_uY 4ToM7U8mlUrvSTDXYbu8
X-Originating-IP: [106.10.151.241]
Authentication-Results: mta1292.mail.sk1.yahoo.com from=yahoo.com.hk; domainkeys=pass (ok); from=yahoo.com.hk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm34-vm2.bullet.mail.sg3.yahoo.com) (106.10.151.241) by mta1292.mail.sk1.yahoo.com with SMTP; Mon, 31 Dec 2012 02:48:15 -0800
Received: from [106.10.166.125] by nm34.bullet.mail.sg3.yahoo.com with NNFMP; 31 Dec 2012 10:48:13 -0000
Received: from [106.10.151.171] by tm14.bullet.mail.sg3.yahoo.com with NNFMP; 31 Dec 2012 10:48:13 -0000
Received: from [127.0.0.1] by omp1011.mail.sg3.yahoo.com with NNFMP; 31 Dec 2012 10:48:13 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 292709.67546.bm@omp1011.mail.sg3.yahoo.com
Received: (qmail 44541 invoked by uid 60001); 31 Dec 2012 10:48:13 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.hk; s=s1024; t=1356950893; bh=6Ptl4tSEGn9Vh42PwvB6YCoTDecoE7jFQrh/4hIhUYk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=FXypFTKINylQvJREB4yY8du3haVodcMFyvF/wxNrOBI5xyzqZ9Q2dW8yBwDGsR0YITs373UPHqh5l3C7WdhTiF5qMXJ2za06hpVFnR6vzb0tuEwsgdX4T21X+CMDDvR8aAdC0K77WfO0QxzD7YNMjsEYNqgoB9ikYnd6WDZmD0M=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.hk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=vYxRWJLnicRqoMdId5MiQ/tTHvLOujKM6DA5WwD8Dnc0iDZbXkg8ydTOBeuxbRLTWRZsH9iYXkFUZcCdplXXWM5/X9eWrDUGtpx7EYnWMw3QKuRcAv+8NTOzUa7lWgspx+SkbeRD6OHmGDQSFrNYcJFEhf0x1SQEBKlwZtCQ8ZY=;
X-YMail-OSG: AgPNPjUVM1mQf2lFmWj6j2L5n3dzznh9scRoxw5sr3cPUN1 ygECoPd.csPYFONCeTe4q8xj9wT24h4381Xb3JdNxHui17P4pahwsHG5eqkm HztuW.jr2hBd.gn_vdB3W5dt75rhMrhyIxf98LbLOZDwzxO4ZTrsKottzM0n 3yaJdiBwus3rNkFnBdKx5l0wVmzQ9JmdrZ1VXwOTc0Hyw3OPHAwAR18WJYEN pLvx_x1D4nDHe0vhuAS4Ed9eVzctNFoAxRU_YbwRQe9VimcbU7o_TYKn4lWk ZcRMxExghLUf2WOOGWatF0nXKzzwfEcv7QkAI3V1cNNR5xNsCR.mJ8.TFqJy 7rRKrzVzgnsQqXL06rHBnSTLunFC4SNWtTXgmC419O1LINPBa1LgN662D7v. 19EOLh3n9KCNVipPmg9SrR34L8ndltUIdO0xREbjKUine25eHqmQuz3_wXXp jfeIWriRzwxVX2RFA7zbx790lkpAZFO1TVQ7BGcLOYqWQoc_iX05tx9PeRWZ GPwtQuyVTsoj6IOwLWA.LxMQlllZPpbrFwzbVhSco7LscHiq0cxlNjAz5x9a dZEOZVMpxGSe3IUqqeCGuqpQdjJ0Rt9ZTihGGeJ9TBTTrr34QOaX9RounSEZ qH7IBrgK7QRzoEAjjLi4qCs.ipo97dECfCLhB1vyatF.6NA–
Received: from [41.139.126.108] by web194604.mail.sg3.yahoo.com via HTTP; Mon, 31 Dec 2012 18:48:12 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356950892.43573.YahooMailClassic@web194604.mail.sg3.yahoo.com>
Date: Mon, 31 Dec 2012 18:48:12 +0800 (SGT)
From: VONDA MRS ZINOVIA <mrszinoviavonda557@yahoo.com.hk>
Subject: BE MY BUSINESS PARTNER

RECEIVED-IP: 41.139.126.108 ORIGINATING-IP: 106.10.151.241

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Sgt Loeza Roberto”

SCAM – BUSINESS PROPOSAL – FRAUD

EMAIL: REPLY TO: sgt.loeza@ymail.com

Hello,

My name is Sgt. Loeza with a desperate need for an mutual business proposal that will benefit both of us, I have been blessed to come about some cash here in Afghanistan and i want to work with you to ship it out of this country and invest my own share into lucrative
business with your advice and assistance, please get back to me if you are interested to hear my plans and sharing method

Sgt Loeza Roberto

HEADER:

Return-Path: <doornx@worldsolution.webair.com>
X-YahooFilteredBulk: 67.55.90.164
Received-SPF: none (domain of worldsolution.webair.com does not designate permitted sender hosts)
X-YMailISG: V9BEr1AWLDuMHVXmRN1Rau0E0ld_donCQtFutsL6NlIEyqlv kg0uTlIvMoUlCltTGAWIgpdkZzf1FrepNtvSHfQyWK5YUixtIxsrsxSddUzn mRAiUlyZsfPWi27FpvHtUpeQ311glHFp9V1bb.5WO8.JtDoG2tfBJX3JxLbP 4qSvklDfnQKXxdIRAy7Z6R6Q6HDSCauxs3XIlsfskkBDn.EnKStlbQDmfKr5 AVm2FuscESrhBFA8z4Zb9fXWdCI_DiiTty16ycMzRi4wFZ4lKlU9fUhUpDVO Ks5m0IFrlELXwVaduvxMSdEsQ7lSyjdFkUkvuqC5.wWK4Q6g2P49KeXRCxLq Jic0UASToauPBi0YvxqcRUhjb5Bd6r28F4AfoXZF2SGsp4NnjERSbq8cMvkz 3alc25pdZkta2EaKg5aclK2488hl2dLOIGi_zwx85SS3uaLsMpic1bILRr1I FXEyGYwubEH9_vVX5oqqGcI1REcKJ.JBc5HOIuG1rewW5Rtdj0IeVZcWgvxX 2nYlZ8NneBSkA_CNfJRE8YPo70NxWpI3isatN9gcktg5npBvXN0c.ZOhY91c 0f8OAU1tZ7jtYEybdjrclNnqV5.0IPXI5FgzbM8J2jNJE0ezep9ZjmAs3gBA VYsmElJ516cVzr3m8oI_ZjqRxfervttXsmjv_Ph3odCu3sCBwqp8mLWP_S.S n8R_Vr9muosIQcrGOakuTIScgjrmnp156y1jp53q3pXk4QImqCUl.7.GlHIG Wyc4Bcd3cF7Da5zTvha2R_z0VqTvoF8rhXUPRQ7OYnYumPgnYxGQj.B_.7ch .SPI_HUDb0ODUEVb0aoCtGlziSW5JATDC.TfsbKlQT7v5z.AwaHvAXjpfwUL 2swMCn8xPlfkJBbfbmTq8m6GBNxYcc0F3ZQDgDI6wG3ZNe3Va50IIZXrjerT sGz__2AcCMJNv9it0QnNvz2pcfRVdbQ9Um5vX8..fCbYBGgaeI9tftG1ZkyQ pRaCVDhgTaZUlmqRMRlySpe5TLpg_h_qeKl97Sz0561AjS1Z2XpAGVAFIk3r brkP3wdHCbn6FnBkAJ9mMppVnQ4_EHP0jo7G
X-Originating-IP: [67.55.90.164]
Authentication-Results: mta1481.mail.mud.yahoo.com from=us.army.mil; domainkeys=neutral (no sig); from=us.army.mil; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO worldsolution.webair.com) (67.55.90.164) by mta1481.mail.mud.yahoo.com with SMTP; Fri, 12 Oct 2012 15:10:47 -0700
Received: from worldsolution.webair.com (localhost [127.0.0.1]) by worldsolution.webair.com (Postfix) with ESMTP id 3052D3D73 for <> Thu, 11 Oct 2012 18:22:42 -0400 (EDT)
Received: (from doornx@localhost) by worldsolution.webair.com (8.14.3/8.14.3/Submit) id q9BMMfbP023124; Thu, 11 Oct 2012 18:22:41 -0400 (EDT) (envelope-from doornx)
Message-Id: <201210112222.q9BMMfbP023124@worldsolution.webair.com>
Subject: To You
From: Sgt Loeza Roberto <sgt.loeza@us.army.mil>
Reply-To: sgt.loeza@zoho.com

Sgt Loeza Roberto sgt.loeza@us.army.mil – sgt.loeza@ymail.com – sgt.loeza@zoho.com – doornx@worldsolution.webair.com – 67.55.90.164

___________

RESPONSE EMAIL FROM LOEZA ROBERTO –

SUBJECT LINE: Re: To You

I have been in the hospital for 3 Months just getting to check my email, please let me know if you are still interested to participate and help me receive this fund
Sgt. L. Roberto

HEADER DETAILS:

Return-Path: <sgt.loeza@zoho.com>
Received-SPF: pass (domain of zoho.com designates 72.5.230.95 as permitted sender) cyBqdXN0IGdldHRpbmcgdG8gY2hlY2sgbXkgZW1haWwsIHBsZWFzZSBsZXQg bWUga25vdyBpZiB5b3UgYXJlIHN0aWxsIGludGVyZXN0ZWQgdG8gcGFydGlj aXBhdGUgYW5kIGhlbHAgbWUgcmVjZWl2ZSB0aGlzIGZ1bmQgU2d0LiBMLiBS b2JlcnRvIC0tLS0gT24gRnJpLCAyMSBEZWMgMjAxMiAxOTo0Njo1NSAtMDgw MCBQb3JreSBQaWcgPHBvcmt5ZXhwb3NlZEB5YWhvby5jb20.IAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzI-
X-YMailISG: SnULMs0WLDsg13LFSKR6aUfWonG1RSJjRYUSr7FuJ90_EVmW 55e8Uf9FvjypDKaDaIRghAHiTVmEqYxH4ucmXEaMSIIjkTgHHm__f4Jk34o0 3mOyRFgy3l7ZnS3znQVt1xfQ_TFXRbIxNMsImQVugaQo.PXIP3W9C0cDEpbh CzN_Zf0VH_RKLdn41XH_2d1NM070Ouyv5r_pmOhFzW4X7X__uHrqp7tdP6kh CX_rZsqh1evoz0LwS3g4B_SCQvnjTAoPJT_A3yisl8bULAfdN_HdsITRBDbY SeARZcCl1CGbkOADZ.tbCEYOlesRb5ExQh3GlREj9IPIzXG2zfw3mCbIkNoq WvKKP4tutfmTZatQa2DdDxiRVCMTYNlwgtH14XlQkFw4JiQiHcByXy.FaBpE zxKRG2_OAWVDCWbFMf81Va43olvDFOaB6BkTcfmvqcCVvEUwScEgHfHsyyMw kVKUiF2JB3uq_GOgCOsx44BAHLTDiVpyHrR7F50EzVhcMZ1CfY0EvBeQgfhC gSp1TYb4qmziMJRX6SC2fiSMhdNPWljhsnko8R4IV8Tj4RltAg8url.lWEHW _r3_VIiiCqzYoD5fzrzGxmLBmw0JVX773QI33ZJbYwZTYtld58y5jq5s33rF zDDDBGwnsUEmtcJTp9l.ThK052fls1G8RRaDF0eHAXB7X7yxgAZrasicqUiu AeZ0_CfBdDKw9FbpkqFAMbtNC_KrPikNGyoHiJ.x5NYs20xlHgaKIOUMOLaM zMxnEC1j4I_5AAE1W4Cxbu_WtCp8K9xfz0xXLpGXnKJd3LBlYxkEJIo0fjLL qldnlO9zqv5YJ2e1sa76QzloDNGX8YyguLP0Q.JjWVn4HUIGCiPyNH0vqbez b3izfwAZxU6uJV2U51AffTKYxov2HyFVWNhxTtL77iqX7jv4XV9dOf80Jt.g 8x.eavBtG.6EtOLQXtueRGrarwN4JWrcUv0RUGUEFLelKOZEtq0kUK1A1iwV zNS7CvN2i0wzFYR33jebh5D0sBN_8G_pOh.yIJM.qhUns6nHYU6gXhwAMxQX 7vDmzjrCSLbFMNQlJ1e6Q3JFKdLpXNbAqgPcW1QruP1OFya6DDusp0mL_QoB IuHY3Xana6ffbqpgGwmSE3wrmUcTPjz7yAe7ofI_9OD050tQJ4JpLmuunW2c DOD501lpOZ2KGrvYYagBlsRfAZDDghSNmUdT59HYlOSOWdhY7ykS6eaNljdA tottq5z2ld4VGMKu17UMm8b.CfvWMpUgrAH4Og14JFhyzQMbgIr._3h3P1qx qkr0GwlqRQy6JrNDocEZrcX6Mj96iF__XJxDcvsXfjuY3QlM0VGXrnNuDsAr rvEgZFPvlD4MDlJKdWlgzO88eMdIif90mTxvI5s-
X-Originating-IP: [72.5.230.95]
Authentication-Results: mta1474.mail.mud.yahoo.com from=zoho.com; domainkeys=pass (ok); from=zoho.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO sender1.zohomail.com) (72.5.230.95) by mta1474.mail.mud.yahoo.com with SMTP; Sun, 03 Feb 2013 01:40:56 -0800
Received: from mail.zoho.com by mx.zohomail.com with SMTP id 1359884454590283.71307396697136; Sun, 3 Feb 2013 01:40:54 -0800 (PST)
From: “sgt.loeza” <sgt.loeza@zoho.com>
Message-ID: <13c9f6e0a90.7736598231342721514.7880037174310209180@zoho.com>
Subject: Re: To You

“sgt.loeza” sgt.loeza@zoho.com sgt.loeza RETURN_ADDRESS: sgt.loeza@zoho.com IP_USED: 72.5.230.95

 
 

Tags: , , , , , , , , , , ,

 
%d bloggers like this: