RSS

Tag Archives: December 2012

David George

SCAM – BUSINESS PROPOSAL PARTNER – FRAUD

12/17/12 – UPDATE: Below the first email and header is another email/header from the same scammer. The second header shows “David George” using different information including different email addresses and IPs

animated scam credit card

EMAIL #1

SUBJECT: View This Attach File And Get Back To Me.
EMAIL: There was an attached file in the email titled “Open Attach”
HEADER:

Return-Path: <dtito4539@gmail.com>
X-YahooFilteredBulk: 98.138.91.101
Received-SPF: neutral (98.138.91.101 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: 7_YIhlkWLDu90wKhHyyxw6zpHyxycgdiAAa4YwuNukVVetoh J_IC5bWWEgUUtuhkKfPFe.tMo1UbGmenMhF03EOzfaw7eIqqmetRMEZ4oGzb VHndlb9o.U94PesgTXj0QFOJCMffAurCH346kPPPTRxPpLhWIvTbXtLQmcLU BJRJ7U.Y2xNjjaxrdUgitDHDq9IqyHsyg4GUmdsg3DViiS7ug05icIpm6zZY 15TpdzMEk.dloUVHX4X5colstMK9o8cj3S6Dy9pG7og_pb6ByLAZIAqEHLpo Qrt.EOlrMjtuxj6DMzYzX6qi7YUmXO6vp_kcU1yMNz_itYP0LPLIngyQJ9NR F9BtNikASLmNJUDU2gyctMSy57nj9hjVmDozpZ4SlaFLigd6460ujdc9AfVi hcf493q5bq_ZcAvKBRSCYoY6H17gmiybGwA1Khd9zAXSHVK8F75gmOwlsEZV IBiRI7_8cwpOzDmLinvmzXZXyhS74F1IGrQL0JL_g_B8yk_DdeAIVgtpmkWT SOyia.1O5nayDgWlpWgkc9xwpbznXoUZvHcnTtjc2XYTLmnJQ8S4hVt0qTTZ crIyoxAQagIeC25yzg0JCFsY59rQIKfAQyzBB_dFL25lOA0qsaMem1h_o9zk ZBPXQLLazUI7iFCdePeIve0r3vADC3LxQNzSlOPqJh0rTb1eB5fupXG2v1Ix xZBev0wEsghKQ9aPi.hlpyfq7HOUj8KFbB08w1Tjncfn0ptfICfi7514.4Fg TSdWVFftXF3MEp7ZEs9kbkHD3vSv2kpBtB2MerhvoZ7YA3ofF7.OWStPDNVB OrPE.u0Q.U0tEEAQ8iTF6050DJCFNZnDYnIILvXWIGEAkunQxqF9kKM_xXI8 3KlZFhO3_00Tk3sekKyuw0XPQg60zPVbwwgTRlRdwn7UvN8kpoULxNaPA_Ld gDblLsidCE_opoBENVrcfvBmbF5_klg.e.4FELw9x92L8QUsYR_vOJp7DL6N XIRfvT6BnyWcmwHQIPhFrTi_ajCRjhKzLrE5_z7dzThVKmD0TVht07F1osXa iHFcLu8f6Uu.hDz8iEGyJ09KaC8RRVoFS8f4nm_MkxSu9bk0k1Lu3fvkNQfx L847swtQsIiC4wlsRCHwYrj6piDtl8GyRQ9uCPivXpH2ifGbXg.e2f71TCaa PIrQGY7xCDbzDq7OYaYggzfEcgPgqPR_7YCNsmbez_LC5eUKq9b13OTQWCzo 50lAe__6EAfKTnwSImZds2a6pw–
X-Originating-IP: [98.138.91.101]
Authentication-Results: mta1209.mail.ac4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm8-vm6.bullet.mail.ne1.yahoo.com) (98.138.91.101) by mta1209.mail.ac4.yahoo.com with SMTP; Mon, 03 Dec 2012 14:34:36 +0000
Received: from [98.138.226.180] by nm8.bullet.mail.ne1.yahoo.com with NNFMP; 03 Dec 2012 14:34:29 -0000
Received: from [66.94.237.109] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 03 Dec 2012 14:34:29 -0000
Received: from [127.0.0.1] by omp1014.access.mail.mud.yahoo.com with NNFMP; 03 Dec 2012 14:34:29 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 280493.47606.bm@omp1014.access.mail.mud.yahoo.com
Received: (qmail 25551 invoked by uid 60001); 3 Dec 2012 14:34:28 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354545268; bh=o0AZy5NFBNZAPup6KgDmVQaETpPB/49bLptSj+IPDic=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=32q637yHtI3YkIIUG0C9gxQUCjXIvqiWJRRigd35qEzsDn9zlFniWa3HMPoBUfjKydfgoK4wuW2mGqPnVVijEQGQCtwPbhawwF8cwcoiHruJB/v+H3KOd5+9A3/t46tBgFI0hvqee/6n9jY3cr4P3JAeAwmfDyQv0qlkeJ/z+/o=
X-YMail-OSG: oYLOaBAVM1nTTiR5riPoVSq50.JwVtNy0eFdRApEKzvilWE UKgXcXt.fJt6NELENVzUePzHgeoyn.jo2uoDWFq1MobkNjWJynQ8rz9gFdE3 3b6Ty2cyiU.Wh5LRVuJclL2GuLEuHeBlPXgbqmxZ94K4wNVfZJKMHaHVLvA5 hCOhKDclOO.Sv5qigihI9Ia4kFYnCQM5ABMh5fyj8fxU8IHc_ba4Gy.fxUn5 Od6ndKsyQeCR_ATVtgZYfQ_BuLBFJHZFbCNu2HiwU7gMRTPYva.qn7F0Q1eD _3yFpW8Fz2g_M5AuyffKQxssk9QhnThpttFJt7OU15ixxdNgL9lMiNZvq5.Z 2vZh_hlZvmgPi1GOY_XIELkH16uG_YOYgSQYmOW8Ai0Jix96FT4x9FFvl0aG gZzkNI1cD4engrONgudP_kyUY.oNSoxqQcheo1_WoO.KMUloBwuab2GXbqBB 3280I_3PrRVaBGGd6onJrDq4AgDhVBX._XtCWGr3RpOEtyTWV6yZqGKc-
Received: from [69.163.96.25] by web5703.biz.mail.ne1.yahoo.com via HTTP; Mon, 03 Dec 2012 06:34:28 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354545268.64346.YahooMailClassic@web5703.biz.mail.ne1.yahoo.com>
Date: Mon, 3 Dec 2012 06:34:28 -0800 (PST)
From: David George <dtito4539@gmail.com>
Reply-To: gdavid484@gmail.com
Subject: View This Attach File And Get Back To Me.

______________________________________________________________________-

EMAIL #2

SUBJECT: PROCEDURE

EMAIL: Dear Partner,

I thank you for showing your interest to assist me in transferring
this money to your overseas account, which i expect you to keep
absolutely confidential at all times in order to avoid eyebrows in the
course of transfer.

May it please you to know that all about the transfer is legal and
bank to bank transfer, vital clearance certificates that authenticates
international remittance of funds shall be secured in the course of
transfer. Which will prove authenticity of our transfer to any country
we wish to transfer the money without any questioning.

In order to proceed, an attorney will be appointed for you here who
will open non resident account for you and act on your behalf in
signing vital transfer documents in the bank. Please provide your
overseas account as listed below in order for me to secure needed
documentation and submit to transferring bank.

BENEFICIARY NAME:

BANK NAME:

ACCOUNT NUMBER:

OCCUPATION:

ROUTING CODE:

AGE AND MARITAL STATUS:

DIRECT MOBILE NUMBER:

As soon as i have above details the process of transfer will commence
immediately. Soon the money is transferred to your overseas account, i
will fly with my wife and three children to start our new life in your
country and for investment purposes.

My kind regards.

Mr David George

HEADER:

Return-Path: <gdavid484@gmail.com>
X-YahooFilteredBulk: 209.85.216.43
Received-SPF: pass (domain of gmail.com designates 209.85.216.43 as permitted sender)
X-YMailISG: Naz6iTcWLDtPafJG3frokkXc3ukEHhTq3qYpgF4eNnaak8._ lMhg6dmlYkLbunyfJ2F_ScLNOHbc.0PforP346SREmeFE8IvdMZBPKTsIGXx CbQDb8lVKkwl.kO43q3gpPWPohkmyy8ID.rGWIMGOWKgYrqKEaO9EgvfFYiZ Qu4GT7I8XH9drvzgQci_ZjQjIFABMS_wDvrLwYlm6pL31xkYfGV4KtQ45Q17 6g6HkfRXCIp4JDr7XnpdtH2Czvj4zj9znDFQ3x6P8SqMrz8x5TqQ_iS7iE0C 9IJK0laSaCncr702mWVPBm9ZII2OBFnib.tYKZd6AIdxEprwdaIN_Alsb5aw uxoIpUVTUmqOLvwmBLWCNCTAzcLpzc6Xa7lDBKyte9RANBJsS.JX1G74pVBe c2jCIR4MVCSaq0ki0Ymx6HnD01j3yBAWdZBr6QIjrl9BmO_YxU0ZpI8KHg8v g4MGA6yZq7RUZnuxbg0BDtYLGxZ8pWu4fSC_FjT6_ozHRaNjrLhjHryfj764 GM0WodRCK.ymMN9l_auWKrOyvg0d1FIjW_ZHST.QiHFdAjai1PRQfdfOkplg cPL.hs.6qugujGYT_9Y3cog2d0Bf.6neEArkKtqTi4DXSEJAaqbIGI6DMfBA 74O1YUYtMNgG6uBS1FhLoQ2Zo4mLCfbfXgzie63M71RjS1BQBX4VQubxWRJ6 QNLNoMVq3Yt9799SxL9fcwO18ShYH_.eJi10eLcNOCIh29StJXS_N1QlThEu QDraPzGmksoQdRhUZUblTH9j7neXT_718NX4pTZ_143xkGaDN6S5U4XjGE_R TahgKTyjL_UYjTwC7Ie0xbAWDVShPe.Eh_fHWUqIC4BEr2k3QLzzLeBIPgIq NzDejCpoF8AmkidTUBQ3zqy5vHDAG_3o8qDzOJSP3O4PEIWSLbd9VxNMF5SP 9DAHxJNQKmm1db9h5VS.ZHSur7394iWoRwpnvc3rv0fgKGdWi7_iC8j2j04U UUfSWS8XnHRp2Ov7OLVRIyY4bD1bGfSc8qBd6lCZ_EveqsWvp8J4QfJ_4qu6 zHBUmHXdb7m3JvsqoP4YBA8bR2XATJ_G4yX7iYX2BDmVs9EDKlFY43timvNb f4QS3R.8ADY1LdCdHLgVa2k2nRYwvAwHKpsJlEIH3hHKc_gWVI.jCc0VyYsb ARtIvjvHW7gexxEknP99axWYdJqBDM8lKBZZMnj_h5pFfs3fWjqsajaFygl1 sX9m.16Q97x71A3RLSMND3Xs1x4cT_4nY.ZbYipkvK2MHXCUC1_TZ4VDoVKV HJe2vrRB60r_osW1Bi5PBvDgV_56kvoYhWpbiDH1Jn5l3Bz1Ok95wI34bsAn lo1dhmFylFc-
X-Originating-IP: [209.85.216.43]
Authentication-Results: mta1359.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-qa0-f43.google.com) (209.85.216.43) by mta1359.mail.bf1.yahoo.com with SMTP; Mon, 17 Dec 2012 06:45:58 -0800
Received: by mail-qa0-f43.google.com with SMTP id cr7so2408219qab.16 for ________ Mon, 17 Dec 2012 06:45:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=2d2+rDEpHVoIcbezyBoHjZjajUgVJN0jJTtW6tVL+8M=; b=c9F0p9ivfWP9MIx23K2tt92FCTeKFDYw/DHZCWSSwamsLNrPItTa9A+/XlZ6H0ninC e/zmvrCMhba/vyLt3wZtRX9O+1Zjl3DpOJNXmLmIaGdr0Bmznfk2OAHMeqYPs8rG5X2M GNTj1lLfg81srKJESlVsvYeR9RegXlcxhHC4pulkwAdQKWf8LbL93dDyMJRlNsXWu0EY 00aqZe4GuS0H0IdEKYeTmiI1DqeBSLcaXXLSl2uueSyb8nWpe6O/k6eoqJx6HfeoISxn myvnAy1y2tyLK8ZoppV8hV7IDGOF5tfNt66/9v13A95R7A8RrYYI9JZwLvXaZraPD5uN mglw==
MIME-Version: 1.0
Received: by 10.229.195.81 with SMTP id eb17mr1446091qcb.93.1355755238484; Mon, 17 Dec 2012 06:40:38 -0800 (PST)
Received: by 10.49.86.10 with HTTP; Mon, 17 Dec 2012 06:40:38 -0800 (PST)
Date: Mon, 17 Dec 2012 16:40:38 +0200
Message-ID: <CAOsNjvqCda1OyXrR7PZPsHz61bqgzO=W=_uOc2NTp8KsQXZGJA@mail.gmail.com>
Subject: PROCEDURE.
From: david george <gdavid484@gmail.com>

david george gdavid484@gmail.com 209.85.216.43

“David George” dtito4539@gmail.com RETURN-PATH: dtito4539@gmail.com REPLY-TO-ADDRESS:  gdavid484@gmail.com

X-YahooFilteredBulk: 98.138.91.101

RECEIVED IP: 69.163.96.25

ASSOCIATED IP: 41.137.20.4

Most recent scammer addresses who’ve sent spam under the same received IP (69.163.96.25) as the above scammer include: 

11-Dec-12 06:42 69.163.96.25 Robcsz14 whywenti@gmail.com
11-Dec-12 06:08 69.163.96.25 barobertoswifta9291 retireasw@gmail.com
11-Dec-12 05:34 69.163.96.25 dfrhihmcn retireasw@gmail.com
11-Dec-12 05:28 69.163.96.25 bbobbyshtolzeay2369 swaytyh7@gmail.com
11-Dec-12 04:18 69.163.96.25 baangelastexxd3595 shiqyxr12t@126.com
11-Dec-12 03:45 69.163.96.25 bbobyshulze7823 pefexafeGat@xe6mxun.mil.pl
11-Dec-12 03:39 69.163.96.25 bajanesstivnov2066 redeassenry@xe6mxun.mil.pl
11-Dec-12 03:27 69.163.96.25 velesyttsa1943 ajlovedoratheexplorer@gmail.com
11-Dec-12 03:18 69.163.96.25 bjanessmaareyy333 lilin206@mailondandan.com
11-Dec-12 03:13 69.163.96.25 pitytop8408 adalia0130@new-purse.com
11-Dec-12 03:13 69.163.96.25 bjanssdarky5157 adalia0130@new-purse.com
11-Dec-12 03:08 69.163.96.25 baannatunior1266 adalia0130@new-purse.com
11-Dec-12 02:59 69.163.96.25 aolautivanovy3790 adalia0130@new-purse.com
11-Dec-12 02:55 69.163.96.25 anatjunior1022 adalia0130@new-purse.com
11-Dec-12 02:53 69.163.96.25 avelesygoglety3513 adalia0130@new-purse.com
11-Dec-12 02:48 69.163.96.25 Irraphfrarelp adalia0130@new-purse.com
11-Dec-12 02:44 69.163.96.25 bobbysulzeay4833 adalia0130@new-purse.com
11-Dec-12 02:39 69.163.96.25 bradadaka6821 adalia0131@new-purse.com
11-Dec-12 00:00 69.163.96.25 brianiup ugugoo100@gmail.com
10-Dec-12 23:55 69.163.96.25 bbbbyshulzeay3925 superpogirl@gmail.com
10-Dec-12 22:26 69.163.96.25 aImmilajenanew29 Immilajenanew2@gmail.com
10-Dec-12 20:30 69.163.96.25 anntaecahvs787 adalia0127@new-purse.com
10-Dec-12 20:01 69.163.96.25 Keycleotherce adalia0127@new-purse.com
10-Dec-12 19:53 69.163.96.25 baanatyandexta8617 adalia0127@new-purse.com
10-Dec-12 19:50 69.163.96.25 gregorasmaarlyay4510 babala752@new-purse.com
10-Dec-12 18:13 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 18:12 69.163.96.25 adizzyclttle8389 prodvizheniesaytovpt@gmail.com
10-Dec-12 18:12 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 18:12 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:57 69.163.96.25 bbbbypetrovy649 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:57 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:48 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:47 69.163.96.25 beveasdark1744 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:45 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:45 69.163.96.25 bangelasunior1313 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:44 69.163.96.25 aaleeytopy3312 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:44 69.163.96.25 bptrickmshtolzea688 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:42 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:34 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:29 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:00 69.163.96.25 Babimatty ktgz846@new-purse.com
10-Dec-12 16:50 69.163.96.25 asemCoemyJex67 semCoemyJex2@gmail.com
10-Dec-12 16:45 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 16:22 69.163.96.25 adaasjnr3096 newoktosanz12@gmail.com lasufuv@weboka.info

For more spammer addresses sent from 69.163.96.25 please click: Stop Forum Scam

SCAM MESSAGES SENT FROM 98.138.91.101
From: Mr George LUis <0000officedesk769@att.net>
Subject: URGENT REPLY NEEDED
From: heesoen_21@yahoo.com
Subject: Curs Engleza fara profesor
From: Microsoft Office <web.microffices01@att.net>
Subject: You have been selected as a potential winner of Mi
From: sefolo <sefoloedward@gmail.com>
Subject: PLEASE VIEW YOUR ATTACHED LETTER AND READ CAREFU
From: popularipehi5@yahoo.com
Subject: Trusa de machiaj profesionala – Reducere 30%
From: popularipehi5@yahoo.com
Subject: Tigaia magica Dry Cooker
From: YAHOO MAIL LOTTERY <webde_0012@hotmail.com>
Subject: Congratulations : Congratulations ; Open An Attach
From: =?iso-8859-1?Q=?=
Subject: ProV – Erectii pana la 72 de ore
From: Popa Maria <sylviu28@yahoo.com>
Subject: Scapa de negi, alunite si oricealt semn al pielii
From: CANADA UK LOTTERY PROMOTION <drjohnpatrickagt5@gma
Subject: Congratulation,[Kindly Open The Attach File
From: “xcvbcfsdfss@yahoo.com” <xcvbcfsdfss@yahoo.com>
Subject: Your Criminal Record may have been updated recentl
From: Popescu Maria <relisword_99@yahoo.com>
Subject: Ochelari de soare Ray-Ban !
From: popescu <andreea16thebest@yahoo.com>
Subject: Ochelari de soare Ray-Ban !
From: “Department of Minerals & Energy, South Africa” <w
Subject: CONTRACT AGREEMENT/ $14.5M
From:
Subject: From: Mrs. Bridget Hills & Francis Hills (Son) OPE
From: YAHOO AWARD PROMOTION <mrsmartins66@gmail.com>
Subject: congratulations,kindly open the attachment
From: FREE LOTTO EMAIL PROMO OFFICE <freelottery03@redif
Subject: Fw: Congratulations!! Please Kindly Read In Good F
From: SJPUB <pjmom1@yahoo.com>
Subject: PUBLISH RESEARCH STUDIES ARTIC
From: James Kunta <jamkzm1@gmail.com>
Subject: KUNTA INVEST.ASSISTANCE
From: “FROM: MUSA AHMED” <ahmdmsa@rediffmail.com>
Subject: URGENT REPLY, PLEASE I NEED HELP!!!
From: MICROSOFT AWARD LOTTERY 2012 <drjohnpatrickglo@gma
Subject: CONGRATULATIONS, {Kindly View The Attach File For
From: Australian International Lottery Program <web90901
Subject: Congratulations Check Your Attachment
From: MSCLARA <msclaraglory2004@gmail.com>
Subject: YOUR EMAIL HAVE WON $1,000,000MUSD
From: MRS GRACE MANDA <gracemanda147@gmail.com>
Subject: I NEED YOUR ASSISTANCE ON THIS TRANSITION

Advertisements
 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

KB LOAN FINANCE COMPANY

LOAN SCAM – FRAUD

no scams animation

SUBJECT: GUARANTEE LOAN OFFER
EMAIL: Do you need a Loan? Have you been trying to obtain a Loan from any of the Bank or Loan Companies and got Ripped off and they have refuse to grant you the Loan? I want you to Thank God for given you this great opportunity to find a Copany called KELLY BROWN LOAN FINANCE COMPANY because we offer all types of Loan at low Interest Rate of 3%, Categories of Loan issued out: Business Loan, Personal Loan, Company 
Loan, Student Loan, Mortgage Loan, E.T.C. If you are interested in getting a Loan from us do contact us via Email:- kb_loan@msn.com

HEADER:

Return-Path: <un@salle.url.edu>
X-YahooFilteredBulk: 84.88.232.246
Received-SPF: pass (domain of salle.url.edu designates 84.88.232.246 as permitted sender)
X-YMailISG: gQirYdQWLDtDVUNPaItBnf8GENlTcud3Zd202KI_PmNCNTmw WdrBJD7kuvqZgFBpQj6dWL5tvRLNpOmK70VdKGZpGGVaO565y9dCJBZ9xkIY xrLF6OWEf_qR_6_qyxtuSWWJOaWDTzP6kRppmjTHgBXxkvtt01FqmPXZ6xi4 .gI7iBYu1NAsjY0_geE4xEtQII2QKGm5MnI.2HZN20BJkviz1ucYW1e_hbn7 Zrzxb3DRqvetEBh2LHyi0K0JY068W69L40UE1s4r9T_NqJFEHnlSxoi9lB.C Vza8KbtusmZ1dpcg_1Kc9eSbkOTahw63RQUQoxo6JURlaxXbseA0WtTKiJhY B5gU0wi_BDjfVW7a1kI3HLpBqDucAX84sBMdi.SG7uJMPwKfMP4quwA1uR74 SdIL4FEv.U8ecSACq0FeUKLIs_1DiKD8XtZGRNpgYPZ19UI7tGWPR2BBZVRh lOIgZfEqN6vQk481tHbqLIA6f5AENxyU7vkJxvta4oig9P29AF6uNL3z3UBV RrUdTi.HO4fsDHNCgCJg0oAJk.CfYPwShPgeS3cK7eH_VYnv57Q0ERSpCdqA FbmruWOdbc28VKy.RA.bazude5H6gXk1G9n6rhvxuVbu38chOkpfX0PmfcPh SzfEfcvTy6XXz7eCurY_SD0jIld.Eh1ILqfJTpc2miupaIZCXgTe7hoC4h.g zLV6_zIIBA_mJkQ0dqho5D4zMlq81QBT_7OT7baIIpJK9eMSBtAxuY61k3Pm lewyOuQNxGMBGui4Z3dsdDQSXeNK46lOIPXB01CMI8mydzeEjkTyGyF6IkJY kqnUKuybBurvRuCL583OL4gXI91NG6Kpm2wC7ubtElu.DqTumnHjL1NIFQnW 7.asqm4Htil5ZUPgc.ffEcCwvIuzgY3jr3eUcycvE395fTw6IaC0mPLlAtIZ Nbuc5uUl2k53DCxoIjcWIh2PCtvH2YJsMA09JuCggg8TgppE08Y6ZSquwDLd 1CwHHFb6_m9SyWcP0OJ2fDLu3CuPMClHfy1hHuXgLCcwYnDKa3d9TnBcX722 aysZWMbFcaPuSvTGoA0ywqsJ2wdyxEp2fhS03tL0f.Jzr1490.Fl2mb_V7Vt eZBDN_Nm_a8OEJYghOijmavSWDvmErokbuMWak4gm6Sco6dVkSOtSM9XLuNI aof1MSl93CSJdSSy3QE5OZSgZCH25LdEe3Tlpp4P45I0ju6vyqt71sjWVi76 dA–
X-Originating-IP: [84.88.232.246]
Authentication-Results: mta1250.mail.sk1.yahoo.com from=salle.url.edu; domainkeys=neutral (no sig); from=salle.url.edu; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO relay1.salle.url.edu) (84.88.232.246) by mta1250.mail.sk1.yahoo.com with SMTP; Mon, 10 Dec 2012 21:38:00 -0800
Received: from User ([115.240.60.147]) (authenticated bits=0) by relay1.salle.url.edu (8.14.3/8.14.3/Debian-9.4) with ESMTP id qBB5YNqS012291; Tue, 11 Dec 2012 06:34:27 +0100
Message-Id: <201212110534.qBB5YNqS012291@relay1.salle.url.edu>
Reply-To: <kb_loan@msn.com>
From: “KB LOAN FINANCE COMPANY”<un@salle.url.edu>
Subject: GUARANTEE LOAN OFFER
Date: Tue, 11 Dec 2012 03:34:50 -0200

“KB LOAN FINANCE COMPANY” un@salle.url.edu RETURN-PATH: un@salle.url.edu Reply-To: kb_loan@msn.com

X-YahooFilteredBulk: 84.88.232.246

RECEIVED IP: 115.240.60.147

 
Leave a comment

Posted by on 12/11/2012 in Other

 

Tags: , , , , , , , , , , , ,

“DR FRANK COLLINS” – DR COLLINS PETER

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: Below will show two email headers sent to two different people (including myself) – It’s the same scammer, same scam as well. The header information is different however so check both for the different IP’s and addresses the scammer is currently using.

UPDATE: Dr Frank Collins is also going by “Dr Collins Peter” and “Collins Peter E” under the email addresses / IP’s – “Collins, Peter E” <collinsp@newtrier.k12.il.us> <info@notice.com>  YAHOO-FILTERBULK: 157.55.116.165 RECEIVED: by 192.168.194.152 — X-ORIGINATING-IP: 41.71.173.93 Also,  Dr Collins Peter web52644778980000x@att.net REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com – Scammers number: +2347030115459 X-YAHOOFILTERBULK: 98.136.218.126 — For more information click: Dr Collins Peter

UPDATE EMAIL FROM DR FRANK COLLINS A.K.A DR COLLINS PETER (I dont even think he realizes who he has emailed because he emails me with different, similar names on a daily basis.)

EMAIL: Attn: ,
This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-703-011-5459

_______________________________________

SUBJECT: PAYMENT VIA ATM CARD.

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $10.M

HEADER:

Return-Path: <webxx120999xxxxxxx@att.net>
X-YahooFilteredBulk: 98.138.91.88
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: FaLTslcWLDv_37lDMJwvUepYgmnqCzD2WWiLYIVYEvzWiVdj yeMdZg1sVqQZNMLZIrI8jrEhVaMXPsJIY6kRf0cbjnqQCPsaLbBdN2aERrfI RwOChZVFmKW9DzDxir.njJLHD.QY8j_y83jLRI4.AuI7k8QKdHjPvXXJYEFV 3YQAPmqS_78yqhLNbejZcKD5irk7feyqBo.GgWWRjUtr0XeJzJNqaql0h8sA e8RvUpWShCVHN2SyD1tuM0Deb4D1Ji8Vbh6LO0l1rw9cI0_sIz.vHpe_EiGP kHJSq4cVZ_zI24xSaJVH2nairx_S7dPagQ15pHcUhTSBMqGEgXXNeB1Y2oeP 3JU6qx6vSLkN2q.zt9EL5Vwas.VQ3VnnTXDqHLBdVcKU94hP0GlXAupk.DHM obtlUYCC1aCFRuuf3fyqc0LusjLnspK7JnjoOa4trRGPkJ_SlfDp0ggLrEaT v9a7lqaWeBT9EICtLA0FkLq3C2n40JFv19b2vJ8kTWkPK9_CQXXHvPmE9PZ3 kFs1luoQlTk_lzaBG6mXtSkUeA_7vvUTiNlT90e4_xcWHLkMi_qHUB6.MOXY KpjgBBptr6h8HH8BTrub.bb.IWuBN9wzFL2saNzKwsyxCm4lKMw9.xwDm5uJ Gq5wsKY8oAk.ZAm83V.RXXdQZhrYHzq2HI4TEsDuXnxCeBPNS3yCscgHGdua .5bviyYzefeg3tnvzHHkzRlzxSKw4QvlmuuqcChqscR9kCPiJLD.cgAs4kGP VstUFHd.bksAH552CD3i0lwkON5VfmeiESgRCGTPFvptnIKly2v3rZiX6esg GPPtVuH2VF9JGdJc2Ymbkp7azmUteBWNDdU3UBhVs441.EpCaWrI_sm_fe57 OiQyUOywnO1yRAtKJ_SFta4rGiPKLZ0KmWOm2iWxo40gyrpOgSF7vvvDlD.8 TTvxrpElU4SLFTn.GO1zFIFIOghPlKF4MTDaE1.cfSBA7OvaqPPhZB7CbD_P PbifHGwGIUcvjwXFo2GX_MJ9efyRaqwJ8RNv5bv_PmOjBSyxnqzPybf5N4_3 8R6NtlZnqM1b4Enrf9rnVdKOJneQ2FJhZVcYPrtDlcrfum9mFoOorxfoQHmz TE17GM57C0B.ILT43WlnmpnQdle96RtuSiqxmvsRzRStRdaGzDZuic8L7wei rjZENREYOwxD5PakTFL_xFmWBDMWOtezwqcs9j2HaBsIHEPGCa_w1BQb4H7T Rhg.rsLZhUpnUmz3kwbcPdV9Pc8UNCPtAWRE0QCMgwjeBn0ZXdINEcVudxSA YTcOMC4k95wVfJ8oF7eiOod5Qae2n5Ov7WwjD_lXqOtSBIc3J87zhs.HmSjX 7WlsWTwwXn.I_l4fa3NQ.mKYBKo-
X-Originating-IP: [98.138.91.88]
Authentication-Results: mta1228.mail.sk1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.88) by mta1228.mail.sk1.yahoo.com with SMTP; Wed, 05 Dec 2012 09:33:37 -0800
Received: from [98.138.226.178] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [98.139.44.92] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 198054.18868.bm@omp1029.access.mail.sp2.yahoo.com
Received: (qmail 22514 invoked by uid 60001); 5 Dec 2012 17:33:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1354728815; bh=2E+CXVEN1MfcfJaq2e/eZV5TviX4n2QY/x1KeAa5kws=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=f9JOS/YO8YXlmc9hJrpoWT06BSgD+eIddQyPZn984pugXI47aiHJ+HigDAW5KKMMOSqrOWONnAJiCoEyKoSjzteAYzjouKnJuSd9FFAPV7YDDY5OHZP5iSipgSUv3aNEhW/Rsnl4Ln0GS2YFkeMhoGRqYTKiUP5YtCqljvaDNow=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TW9B75gLmG8YEH2Fs0wWUR6quUgNgKf4vKcOC0lU58OuZZxvfbAEilc6hFgOyOvoldI//PR2xiJZNGeYJsT5o76o0CJS8W8mbj8ANAI1PafbE8IT034u3iHRas9fZymmyVV0ARoaM4Pmz0UzVZK0Jim/YrB1484O5fKsUOiyGTM=;
X-YMail-OSG: WdGt0KwVM1lOyB0NVRZY5rrxYN4NyBpT08THjv3T0blrAYl g.fSaOnJGDgT6qOWJLehIImpPX16weUxpsraTUfiislliLwCl2K7v8Pp.iJQ a9TSaK3Cg8mAMGQLpgboaXsnY0P.gbcdPD9a2TYU3MLMz9.msdkdNVne7srD CGKrYap1ePNIkrvsumj.6_CYvw30FkImKkDHHf5IXtzUrxF4x8.QVPZL.F5P 1sCi9c6SjI1P.GeZm2DnWTw.VoPokMuHr44zOJyF208V.uJqcKGplN1blft8 NRD73m_UrMPrQXsfdMEk9IKg0jGHRledxyRP7NbPnmUmTJk5sWb6g7mibQcN lZBmrszbkEqY7Gci4Eh5lmEYhM0EH9ITd3rAkZfbRlBlo5s8MbxSVEa73EvH muyMHoTdJMpwvibAS8LsfWhBVw4Fzpyj.JdfnQdukkFQX5QRnWlt3FtcARkq hyy26DJRYTbzGN4Eyk0EL9EDXp1SGqp9Lk4FU_Cz6Hw4qjqgVzWqnIza_ijq nvI9omJY1Dw0WycuWs.OkVnfl
Received: from [108.174.51.231] by web184901.mail.gq1.yahoo.com via HTTP; Wed, 05 Dec 2012 09:33:35 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354728815.12889.YahooMailClassic@web184901.mail.gq1.yahoo.com>
Date: Wed, 5 Dec 2012 09:33:35 -0800 (PST)
From: DR FRANK COLLINS <webxx120999xxxxxxx@att.net>
Reply-To: drfranklcollin@kimo.com
Subject: PAYMENT VIA ATM CARD

FIRST EMAIL – “DR FRANK COLLINS” <webxx120999xxxxxxx@att.net> REPLY-TO: drfranklcollin@kimo.com RETURN-PATH: webxx120999xxxxxxx@att.net

SECOND EMAIL – Dr Collins Peter <webxixxxxx266xxxxx@att.net> REPLY-TO: collinpeterclaim1@yahoo.com RETURN-PATH: webxixxxxx266xxxxx@att.net

BELOW HEADER FROM COLLIN PETER EMAIL:

Return-Path: <webxixxxxx266xxxxx@att.net>
X-YahooFilteredBulk: 98.136.217.214
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 2lU7wkQWLDvBCg5Cg1wZtIwDNUzuGrZVVXK9H6ZxiRnCF9q8 3T_Z2xZXeKmdhjE03ZY1nNRa1P6Zz09tc3Suud6PVBq3vexxPmov8AXjPV9n h21FBi8fEfSTSwVFhhvzk7V6R63Puryrkha1Mb3jaVwNputKdVPkDPhjUMeo RVMMb4_9ds7LkdO1tAhp2nowUz6sKBD4buJmSanxkzHUpRwUVtPLKq8B09eN Rl25hxMaIQHn74TwJlEJoWwVxtvh8Jkr9b8xgoPVsHTD4d3rIEAmrBO8jRyd GelLKjDpe6gEZSWQukIvbii_.zMj02LUFMIXNqSXg2JTLp15U5_jUlo0usw3 1Q9ij8R.SuZ80..F80EMLcQO1SXMjqWDf6xkVHWwRChYckM8P0zLXQwmLzCh cXZIqLnw6xfz6lcwu0_mQkN.aX.hIIycQN9E431bkyzpAK8Sh0ATdnfKruuc hDUY3uEtvred._LLnnYkhYpxqfc_nSy4oYmmhRytYX5eJDo3.jrNS61KZPV6 YQ56CR6JtF_A6Hafi5rSLv5qgM4p8VJZi7448tERIhykcwaijsPjcAOenatn YK3BKAuoLWZ0KHPHNvGKAWVEbv9QWSQF39Q.EEP1LmrPyvSdcGkLUJurop.B aYWv4YFGCdGxSazNRDxvtgoiaK6SIwQ.bpgk7uq2vF3rcb50kF6JNxWrLg.n 7Tth7XBQ.W0dZ6SeRl5BddGt0PedKs6csdJXP3rAEuRx9HhVbiFWVgdNijR3 _dNog5Qebj0UNBN3_ZYEN_KnDptPkNdpsJ8OGplwzrinpWeXcnwHVgAbUTdo 18VmNYVRbtilZoPybybViqmTdRB30nDou7y.RzfJPpp93GHAGPmJapCeotd7 c17h.xTgmXwnesQYx8oH1A8HMZj9YMgj2Hn78UbjDz5iO3dLZZQwGJc37EEe Irpsy5SaXtVD8MbmmPkhMrhk8K30Dviwqq4hDE5WgxBlGVonuDQoGK3aEt2T nvWx.JhFmNOhCyTBWuANJwIBh0YVHlt7UHVip3l.jut4onQ9R4CDyP6sbX2c lfshiCRIJ9lEvHbvGo40N55AdITysTVwpsKYdhO1zKO2KEhE2HbINU3NSVAp mVO8xztcsAawulFbZ5PKA.HviU.utyPlT0yMvzwTHn_QINVPcYodx0NOT_5q eROgjgZ35jOw55jeTpgP2qOvmDNkeadY.RrCfkVM_h_Ewvbns5N8m8wKWn4F 71xz.y4o8QBLLz0jb4jMAFmUekk5PrMNZ0E-
X-Originating-IP: [98.136.217.214]
Authentication-Results: mta1191.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm9.bullet.mail.gq1.yahoo.com) (98.136.217.214) by mta1191.mail.bf1.yahoo.com with SMTP; Fri, 14 Dec 2012 03:36:45 -0800
Received: from [98.137.12.58] by nm19.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [98.139.44.70] by tm3.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [127.0.0.1] by omp1007.access.mail.sp2.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 191480.20265.bm@omp1007.access.mail.sp2.yahoo.com
Received: (qmail 75889 invoked by uid 60001); 14 Dec 2012 11:36:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355485002; bh=2TQXuFSDKzJQh2ItoNfMPDU7xRHv3E+CGrBMw/1Ns0g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=MdiZ1jC0egJ3jeK8x+wAmlqoZyMp98AiD2wzzG+et6zE3r4jYBfuYUoMttuA+gtIjRNvWXQLaTtg0u215rggtB9Wpx8OQWJMI3iQKHU+C0WdAONnnis/01rbGL8rLVp8QUEopIB3M6ep93e/l0o2GTcA+2tm8NmXdnIzOrTvHgs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tLrXvMlZ1AfWS1oRs/q6h6HUMYi/LUcbnjbU0+wRSPWQr/1rUxJ+mPFD5IS+2J+xhqTW8fnpv0P89+O46Kg0ZaIi52L7OqBpBWUtxGIOrGGuRKY65NxHoyuM/9fcPmg6OxN2t9IVr/IQmo5FIYMQAlTgtLYGxzIx8tus9kjh4UE=;
X-YMail-OSG: 3ICaliMVM1ngoXiqNpguRRh2iYwL78sXplySeVxex0hGQX. 9amYG0XA4OBV26LpGFUMshO4W2d_k7Z_a2Ijy9UC4MhQCts27.mEJf9MSo4o gLC1yrqEZW2qVfkENJcHqLvP6x22811UE_jYQp539eFIcLW5RWUDAU4t9CGn OdkUZ.I3db4Y0_pc3qHbfrO34x9zDWKUFRwLqnQ.wNCnHD8dS3WSTofCFWm8 DRISKdISfGE2ytoF4IzvXsFuyje2c_qd6tqdnmTw5Z9mBhssXb94A4biy5CF qnxB_1TEOjTWqKHDrBY4BU1EdgOFfYQNqvwQ4XtGhinDlu0jMGic.YAmQBDt z00_WMAOIdc6llHVKxJwh0yh_xgWL5D6rgLOTnmN2Mo2vI.t3Ls.zQwRBRhe SaGInzRlMMto6OJd7AVEbCSpnmZYicQHhMCbjMxGPX2KPd4Tv0fL_cU_plDm egb7i9XYQocNBXLDzdzIfmk9Um9FTZk5b6spv87aUQEG.1MjrCbB7UdYQ0uO JpvS8DhYL5XyxrsNNIFxmRpV2b8I07Jm9LTn8wKS_hqGegIf5feMr.9cGJzH 7hgKyGs0sihPG_k5JCSaI1yCjgZYK79b_xhXuvMQeLOYyQDygzxrr8813RrH cC8L9RfM7BsB3QMN75qyv.pCG1ZbybDazG.TyLuGLgdSNZ6KwYSh_mQ–
Received: from [172.162.63.104] by web185004.mail.gq1.yahoo.com via HTTP; Fri, 14 Dec 2012 03:36:42 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355485002.70723.YahooMailClassic@web185004.mail.gq1.yahoo.com>
Date: Fri, 14 Dec 2012 03:36:42 -0800 (PST)
From: Dr Collins Peter <webxixxxxx266xxxxx@att.net>
Reply-To: collinpeterclaim1@yahoo.com
Subject: ATTN:BENEFICIARY

108.174.51.231 << 98.138.91.88 <<

________________________________________

Click SCAMWARNERS for email to below header which was sent by the same scammer as above.

Return-Path: <web1xxxxx12000bvvv@att.net>
Received: from nm12-vm4.bullet.mail.gq1.yahoo.com (nm12-vm4.bullet.mail.gq1.yahoo.com [98.136.218.191])
(8.14.4/8.14.4) with ESMTP id qBAFqXcC024177
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from web1xxxxx12000bvvv@att.net)
Received: from [98.137.12.190] by nm12.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [98.139.44.75] by tm11.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [127.0.0.1] by omp1012.access.mail.sp2.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 169461.26588.bm@omp1012.access.mail.sp2.yahoo.com
Received: (qmail 11627 invoked by uid 60001); 10 Dec 2012 15:52:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355154752; bh=6IEXAnuDHUzPM2GG6BZxFSMMGXUzzTJH/x0iCKn3gNM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ZNpQDXqA6YKLygx/Mgp0kaQY3hShe48iYfThTEb8Iru1MOJkFmAxYG7WRpbG0vEzb8sVOXBWUD70FlpkHY32sc3lcnQRUH9EWyjF33/6bxeK6Wl/Hf7syjgMKen3IrPrVrQM7QP70aIkEYevI/L1VoeaKi0X05zrl/mkFKlZJB8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=C3u05KWRUG4yec6yjYc58jVUZqKqPra/xpCRYFkhi2pi73G7p5xYJt3avwhjC1pd5gHT2g6XMST7DkGiaRchRZYYa/jODcoZt4R+AhzCt86vNfdJ8r54ZScNvyU4Y+I8mpF49mKbuYWh9Qw+6o/yW3f8qclaMsyNAu3ATH2SDAs=;
X-YMail-OSG: p5tUyUsVM1nSNbno0XpFEzLZade1sG0k1LIN6NkNDDbP4ts
LfsdXeXxUn6OgEkvAzJFUKDvuIBVeFzZtgkksCNzN7YM7NYxZZELCIFArcbu
_mj1sx3mmaRRFlhLnDPO0Ud9acKn6RdXUuy0Z2D2THjsSnJnY9sU7qqlRMsY
RFxlusC6GZdc5g0kSlEJ9Q6m1NFt621vubnU3dlWx9BHYYswZA3GlYEoIQOZ
znu.EmXiL_e6NkgO6Xi3U8TlgxDHH.J2V.gjmQeJjgeleOz.cmjSiQf65.01
pFSPJQ.uJV2ZQQDmhoA_f4DIGHOLzIEM54oMAKodxlcGehFjRCB.Otx7qJ99
LLzSejt_DN_c3T7KOCmzn30gBLvM4NW04V6Q7K4N69QA7XOIUNPQflttOcPQ
QUh_J5vkppPwzXQ7X5ZwbRUsdfsHhuaz1XhXMvrY6vOWGj_WLL3kyxKoNNTD
o2PEbuViIVuMH9ocliCObq_Z7Olxp0coTXqA6vhkTd_030aE_Rclf5k8sFU.
neOYXj1nWJo0ZcsSoOLW7
Received: from [64.72.78.27] by web181404.mail.ne1.yahoo.com via HTTP; Mon, 10 Dec 2012 07:52:32 PST
X-Rocket-MIMEInfo: 001.001,DQoNClJlY29uZmlybSB5b3VyIEFkZHJlc3MsbW9iaWxlIGZvciBkZWxpdmVyeSBvZiB5b3VyIEFUTSBjYXJkICQxMC5NATABAQEB
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355154752.62957.YahooMailClassic@web181404.mail.ne1.yahoo.com>
Date: Mon, 10 Dec 2012 07:52:32 -0800 (PST)
From: DR FRANK COLLINS <web1xxxxx12000bvvv@att.net>
Reply-To: dcollins@kimo.com
Subject: PAYMENT VIA ATM CARD.

 
1 Comment

Posted by on 12/11/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

Dr Paul Owen

NIGERIAN 419 SCAMMER – BENEFICIARY – INVESTMENT SCAM – FRAUD

EMAIL: From Dr Paul Owen

African Development Bank Republic Du Benin
Cotonou Benin Republic.
Email pauolowem@e-mail.ua

Dear Good Friend,

How are you doing? hope fine.

I have interest of investing in your country as well as seek your services
in a private and confidential matter. I am Auditor General in African
Development Bank Republic Du Benin On my routine inspection I discovered a
dormant domiciliary account with the deposit of ($9.6Million USD) by late
Mr Khalead without any heir. I write to seek your indulgence and
assistance in moving this funds to your country through legal means.

NOTE: My plan is to invest my own share of the money in your country.

1. What other lucrative investments would you suggest as I intend to
invest on REAL ESTATE AND HOTELS if they are good business venture in your
Country?

2. Can you be able to make residential documents and purchase a house for
me and my family to relocate and settle in your country after my
retirement in 3months time.

Let me know if you can handle it so that we can discuss your own %.please
provide your Phone No. I wait for your urgent response.

Regards,

Dr Paul Owen.
Auditor General

HEADER:

Return-Path: <10@my.dxdelivery.com>
X-YahooFilteredBulk: 208.67.16.254
Received-SPF: pass (domain of my.dxdelivery.com designates 208.67.16.254 as permitted sender)
X-YMailISG: ofps_6cWLDtJDF9azSUKKmCZvl1SE.MyUmiAMv_InQQUHwwc oXqEhf4HrpKk9HMBTAy7ysWExs1Dfimgdi399c8yY6f_FJRUlyeHHPR0Wl4q zaRJVeRVwneSbI8F3uVv7u7Nr6TuyLCdc_vtfBIAS2Jw2UcTY0uSdklgq1D8 73ZUKgwrlDirs7gAs44naR3efjg7GJCKjyMFEVRdBmrGOKj3NPHCJLi.MW8x 2X7jInWnVx9G5NSsPlHX5AoqNcT7etkvV05oGjS8KhSwtIgx.6BQTnbMYYuN yD1YwilOE7zkpJiHJ4gjoQmGjN77olxjq5ccrUNQkHMNbwY1sVlPLgV6Vec2 6IdvOhUY817LYdJe3j4ct_vpMXYYwr7gKftftyw00orHH5MCLmVfK5ammofj zGS4OCrR3HHV1IWvCxiEYhd9xnFyyVGYL05bxZmINLNtbZULXlkPInUtc99Z RcM4UH8rKiKr.XLZCZFAvyUArQc.NAR4Apljsr0E4vrr0Tc3CkgaHUyD42mf 3h5cDsOQ_wPQKGEs84PCSwtp5fkLMmvsp6et3jYjY7NV5B204XnN1l1U8DfM 1kmyUqeW0tIu2zVtzQ0rpbi_zyuLB30JmXKK.YA.pdt76XlsHjMgI.a22DVT .68eAVzicc7htVqzvNAjuRH8.o.0TkgNnJ0feGs5CC1JINDWfLWzRf.NFObu 9_HMtwqBt_aLBg.h15e8xbWTVquLydexnE_qpr6.dy6SWmXuYz9zG7iyT68S XwLMte7TM1fnPpG_HblTCRCM9haxJFB253vMnrZjHra7.Ih6dOtDfx59hyrH ZWpgvD5h6iiGIMxs7POEibdsvfR3zjc7u7PGsQJyQDVyGK35hrb_bbRDsZ0o hymwJfuzLYL5LE4eIl6Wju6wR7nhxGINQhwmkYwqlDO3l3kHHCYir3499VbJ XzNF7uOU1dBz2kYguGvTZyqWTLEI7Hljr8ehe0QF226CoavI_KwoWfGZb1yB 2F_sWs1xbHcDS770dxLPxqnhngHHGXF9upYzjsFZkztbgk9EacZ1r9Jcc4Gr 63EpdYj3EZQCLH48CczxIuVkTZzDwVABdrnMX1K_h_B72voTpZG2pcgnEBnI 6QNkU2Y.ThdBXIMfv.4sojsZyEd86NKz69btB69RcZQpcQ.Ad_Cq8bOG2VVm 9Het_NpZ7s14piXT2p7nWo5l6zCaI_P95cDENN9dWilTg86r4dmo.YB8IgpQ mefFr3..NfX8w7V5QAJvItvSUmE1ehie4_bIIN_UJEsmbt6Uxr8GfwadMN28 Bf1DHHLrKRpuE00ZKFojKCtOC48iNywogRtSUWAhZXc3uDKt8j4tyiMBpod2 WdRA0e7B88Wuv5qLU_tEFAVa6Kxgm0O6SOfXJxfaLT7JsVeHmnJXf1E4._fe 2zjoX.N_bO3k5gy4dQ01pInxBR3J48C9Cn0GJ7YlrBnU_sxw5R9KGZPklx_d .NqQXEhMT8j3yKyjYyvIlb7YweIGcWBR
X-Originating-IP: [208.67.16.254]
Authentication-Results: mta1054.mail.ac4.yahoo.com from=my.dxdelivery.com; domainkeys=neutral (no sig); from=my.dxdelivery.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO my.dxdelivery.com) (208.67.16.254) by mta1054.mail.ac4.yahoo.com with SMTP; Thu, 06 Dec 2012 01:50:09 -0800
X-No-Relay: not in my network
Received: from User (unknown [41.85.165.245]) by my.dxdelivery.com (Postfix) with ESMTPA id F2CB31C47121; Thu, 6 Dec 2012 00:56:08 -0800 (PST)
Reply-To: <pauolowem@e-mail.ua>
From: “Dr Paul Owen”<10@my.dxdelivery.com>
Subject: Dear Good Friend,
Date: Thu, 6 Dec 2012 09:56:24 +0100

 

“Dr Paul Owen” <10@my.dxdelivery.com> <pauolowem@e-mail.ua> pauolowem@e-mail.ua

RECEIVED IP: 41.85.165.245 – Benin / Nigeria

YAHOO-FILTERBULK: 208.67.16.254

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

Pashkevich Dmitry

DONATION – CHARITY SCAM

COUNTERFEIT CHECK – FRAUD

EMAIL: .. I am J. Bolten, diagnosed of cancer,I DONATE USD$10 Million to YOU.Contact my Attorney Gates,for claims via email;( ssgatesinc@aol.com ). Do Send in your alternative email and telephone number

HEADER:

Return-Path: <DMP@euro.who.int>
X-YahooFilteredBulk: 91.199.113.6
Received-SPF: none (domain of euro.who.int does not designate permitted sender hosts)
X-YMailISG: Ao5.wDgWLDsZ4cMIeQW.sQlPw55Z2dNFt22fEIu7DJVbZaqA UzCcDvGBfRInt90R78WVCWd.idvYkMo0U227P_A.Jn9eK0h1tBzxJCySb0FE I6bl_MH4hDrjTVrLOP5vqFGyOv489ub7cKKte3xXjVUznrOTzHQVH8Fs28oE Nmmlt5OB7NQFBDfxby00hWkRKB6hT3.drLYQ.e8LunmpdpM2BVc7l2BmZkyP OaAsUblPBjFASGlEYkWtPGS6EL8F37.M9eCnpqhq5_Uqx506in25AvdH1yQh O_Ja2y6FIrc6gGVPG.e86diI9fQ9twK58BXL_MDmqNHFelpUjZksQtNRrcn_ prA0DQWcuzdb7M9QrKIGw.WR0NMeh6YUQnJj_eO7nNqWTNDzm6yJvyOcewvW hQ9pumbRIAi63hmdHop3i5hvCuZt6K6niQyk7jRzYdPp2JmODQjwEl98AouT XNKhlXdv8A4O0PtFbWF0dGOC8YnGQqIZ2yXlBjSGgRqLRnfmzD5pNc7pm8DR 7sUzN5xZMKvEh6iYM4.NCEasq.z1X4MXNIjBaWaXYWWXc4CUNLAx2bDQuEom Q5xsu3nHz2kggZBIVWGyhtwvVX4GRnhT7a6rWP9hRN22NjPVxBIpJO0a5nlA npUwYEjjM0mU.D8EkXrPx4bVOcc304Y2TZMZ_DP3Koxex.XY79N90UMZkNq4 W4tbIHp0nwk80BS2R6FhxDF4ySdcxdW5QWQU5mgaIKZSxAElpzUtho4IuaCo a39c7EL_PAVMDNOyTvKX_sNVWFOx9DnyVirlUCuksehelaT7kYieNbMWMeTJ 4jQoOPJnijWZCIKGAyNZTk5RksWDMEYk_5FnRqYkr_xJQxOewVi9yP20HFU. UlE9eIGUaPmfIbDXv2GRNgbEG7Jc2MzFihM9aSE0UgGAuaivUADynRJ948gk txjo3EIx8p3fHH8BFVgWjhkoAGlKm2yYjGDMX9OmJBzB86u2.6LUcEPcAMwf wpM94DbsE3bSlRR5Yvac9QK5fCRSkc6BsNnfzlX8AoNmFWbb27VgVHyRKmw9 SiQ59zFa8lRrE_eHMW3X8_18oXxLJxjJnF1fT7prjZLonXZbHihgHbyDyyv7 aXMSXCWH5f5rvn6cdi0pfg5oi.KhlABYA0CCZHh1y.EoECvtVRCx2KDTKKmM Ou1Ar9j1iuI8L83wXzTQIKBq_gLUol9.4CI8gXlwgBgQHXAH0YiQmSdWszl0 vgazYEuDFXq5G9Roc5U2hxSbpXxnoicku6bzlGNw2mprfsQpgCiisgZ19V4k 65DY670gqW23RfgIzZepHSvFArjVqfMNOtvk6Ey7mkaj2DvcSg3Hc3lIFafl 2uvLCNRzauD9x7KX7RR7mbsCobqXlGJSVDp0yIz_S5ZaG9eMGQplxiBD.O1m 7KcnU..z7yd3K.fBtThNFUtsiAxLA9WjabOQUk6rj6yh9aAQ5RSofgidJf7n 4GQz3U.FNVy4pGcaPT39sBSv8uhc3K_Osqn8PxFV5I080KEqAqp3QJypKf.T NWnG4U_swzPXh13I8BlVUBBYvk8WK8wAkdkVtEY0qkQfkcC9pD9lPAt0jccf mT1N0tTvnsOHIPopN8MYTaqPhndOLF9966AE8ptJ9LMocJGSzxA86VSA_2wl yg4eXNwrwh.o.uohdBfsbX8LgGwFKIVOnlgV8EgfOEMvRyE1N6efqOQ_5TEi MotBvX4AWL04HgN0JOZVZU99sh1ZdKyb0ui7tvLNnAo7TQCKr1sg9EME65e3 rUpHDBdi8x6azJgyOBBvJTAVayYomIj4mHMdBlOi.CPCImjeqyNreo8HkEEK HEKz9xrp8g–
X-Originating-IP: [91.199.113.6]
Authentication-Results: mta1284.mail.mud.yahoo.com from=euro.who.int; domainkeys=neutral (no sig); from=euro.who.int; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO owa.euro.who.int) (91.199.113.6) by mta1284.mail.mud.yahoo.com with SMTP; Sun, 09 Dec 2012 05:48:14 -0800
Received: from EUROS68.CPH.EURO.WHO ([10.16.16.168]) by EUROS68.CPH.EURO.WHO ([10.16.16.168]) with mapi; Sun, 9 Dec 2012 14:29:30 +0100
From: “Pashkevich, Dmitry (CCC-UZB)” <DMP@euro.who.int>
Date: Sun, 9 Dec 2012 14:29:29 +0100
Subject: ..I am J. Bolten, diagnosed of cancer,I DONATE USD$10 Million to YOU.Contact my Attorney Gates,for claims via email;( ssgatesinc@aol.com ). Do Send in your alternative email and telephone number
Thread-Topic: ..I am J. Bolten, diagnosed of cancer,I DONATE USD$10 Million to YOU.Contact my Attorney Gates,for claims via email;( ssgatesinc@aol.com ). Do Send in your alternative email and telephone number
Thread-Index: AQHN1hE35ld3Zw5cX0KVxtG1x9PaWg==
Message-ID: <CF86913904B1E946A7A09054DF60CD8BDB464F2F61@EUROS68.CPH.EURO.WHO>
Accept-Language: en-US, da-DK
Content-Language: en-US

“Pashkevich, Dmitry (CCC-UZB)”  <DMP@euro.who.int> ssgatesinc@aol.com 

RETURN-PATH: DMP@euro.who.int

RECEIVED IP/ORIGINATING IP: 91.199.113.6 – This IP address is listed and blacklisted on many anti-scam websites

 
 

Tags: , , , , , , , , , , ,

Monica Glover

WARNING: CITY AD CAR SCAM – FRAUD

NOTE: Another scam email sent to my spam filter and then posted on Scammer419 September 30th, shares some of the same information as Monica Glover, including the proxy IP address – – for more information on this fraudster, click: JOB SCAM – Hiring:~Data Axis Virtual

 

 

SUBJECT: City Ads on your Car $1,200 paid

EMAIL: City Ads on your Car $1,200 paid

m<href=”http://bit.ly/TPNZug”&gt; </a>
vUse our Car with an Ad on it Or we pay u to put an Ad on your Car
$600 paid every 2-weeks

Monica Glover /hr
remove in subjectline

HEADER:

Return-Path: <monicaglover@excite.com>
X-YahooFilteredBulk: 208.89.132.141
Received-SPF: pass (domain of excite.com designates 208.89.132.141 as permitted sender)
X-YMailISG: 9Nwzyr0WLDv0OQ3Ui7B8D7xm7lzSa_NSFGGWM3G8_0.y_.f6 81ZQ58.NmyaYb9_flb12Sunx9Wp7ah8812lMg1pnsf8vdb2fyK3jVxHN4lPC QsGz_xk6_T30hsXVDhDTeb8Wx9_YK_xn1ego9wp2mMEm5aj6UpgHkLJYLw8A xFpPKHxhJQd26F5ze6NE84CwwD2UfEhxbVIvh4UZzgnr19y3wo3HVV30ZMeG LIRNPuL7gLpxT6J1Z_XHQRtjreqh6YjuC3wNHw5pACrqgSqfGPmuaEWXpQRC j9sk7_IAGgRK17x8SrdsKqOfrS7GD7VU2JRh2DQdDlsBycISjfFaruWX_ucZ ojSkmNQM0WQjKuCyLtjVIJ5yLIr.9U09Hwol2OyQF1i7rnsiBES8w34D8e3f fxt2XJkn5gj8QaYtmvAjgGZ77cWas5cjZi1rU9HnpJ_ItWU42gq1_EvTM3RK m3xjo7xkVEnaJCDjhgvTPi_d6VvvDK1YmmArBGRnHEOMzXlTd_MHDa1sYr3p BMhYQxr.EoIrvE3lH_XQ7B2RG9d1yin9U2NQYWrZ.XKKl.rPc9HdYdsT6J7l BgEdk9QbK_q3RQIG2.4aGMupxpDehgwlx0YO0_AXgnRq1U1JaZIX0O.86Se6 i5y_5oASVKVZEV05M359IGokbgluYUW0HF.iJv9bbczv4ZXVb44LVuIlwJZW kUey65UGwY5ixWZ2i6ZOsYOJ03SuAwrsITr2Hc7uZTaHAby_wQ7cugyCqvhG 4D1edndG08htdTHmvnJDLaT3dUZGW5bA7TVx8pMFZezkA4KAHve9EjqxsVTS kRDexqqyK3.bqtV3bt2lfwBOeGxSUx90tORKKa.wxBqzSMbhNh73pzevIUu7 2zumDt5H3m0gegC96sIdcWI0e1wClhWCAXZwyRDrQ.4cZ9BTXSpbGMEdbVpM 1iFsOZxrq0xOSusC2Q2ktLL9r4GZjqxYYW3eC85W0w0LhiaFFLzNpHcWrtHN E.0.q8jpN25H2YgjudlLJYZdrzuRwbAGL0iDHggTogKspVwWUggvWyI6km9M rJ38shxTp74mms.CK.Xkx0f80BBKV_6o0nBLP0Qi1s5kBa7I.ecGl1c9CkUo MI5R_zEw5h98TbN04RXufj_qFyy.hYYHwjzpoOBcgMzqrjVg9l2AP4UHpO5y Yv0yDKPxsMVrvUZ.GNVu0X6ffzW2epJUg_WliJO6Q2EdgYjlF_z6_ltI1YB8 YYN5XCOyKr6hjwkrRz.MzQL30y2.u9xwzqABdQgkNtqnv_nGjuRDnJMqJO.K nzt9FGzs3mUYyULddB4_
X-Originating-IP: [208.89.132.141]
Authentication-Results: mta1376.mail.bf1.yahoo.com from=excite.com; domainkeys=neutral (no sig); from=excite.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO outbound001.roc2.bluetie.com) (208.89.132.141) by mta1376.mail.bf1.yahoo.com with SMTP; Sun, 09 Dec 2012 17:46:23 -0800
Received: from web007.roc2.bluetie.com ([10.200.2.101]) by outbound001.roc2.bluetie.com with outbound001 id ZdmP1k0062Alkky01dmPZg; Sun, 09 Dec 2012 20:46:23 -0500
X-CMAE-OUT-Analysis: v=2.0 cv=UejTuduN c=1 sm=1 a=dQoNIrimAEwA:10 a=i-wQWBNYtOgA:10 a=FmX3VfpdAAAA:8 a=QoHJ8kPOAAAA:8 a=H-gxlunUoGwA:10 a=ObCx71v0AAAA:20 a=k1jASxCPtPb7Rh8cyAgA:9 a=QEXdDO2ut3YA:10 a=eXSbejlkubQA:10 a=IawXvI9lP1MA:10 a=bIZyQ9ZLpJ03m6HMhOEA:9 a=tXsnliwV7b4A:10 a=JWhqF-O9MfO5SqHS:21 a=7X69+Egs4aEeFnNAy6RSag==:117
X-CMAE-OUT-Score: 0.00
Received: from web007.roc2.bluetie.com (localhost.localdomain [127.0.0.1]) by web007.roc2.bluetie.com (Postfix) with ESMTP id 97A0B160125 Sun, 9 Dec 2012 20:46:23 -0500 (EST)
Message-ID: <20121209204619.8539@web007.roc2.bluetie.com>
X-HTTP-Received: from monicaglover.excite [78.129.250.121] by web007.roc2.bluetie.com (BlueTie WebMail ); Sun, 09 Dec 2012 20:46:19 -0500
X-Mailer: BlueTie MTA
Date: Sun, 09 Dec 2012 20:46:19 -0500
Reply-Path: prettybull909@aol.com
From: “Monica Glover” <monicaglover@excite.com>
Subject: City Ads on your Car $1,200 paid

“Monica Glover” <monicaglover@excite.com> RETURN-PATH: monicaglover@excite.com REPLY-TO: prettybull909@aol.com

RECEIVED IP – 78.129.250.121 ORIGINATING IP – 208.89.132.141

Another email/forum scammer who shares the same IP (78.129.250.121) – 10-Dec-12 02:51 78.129.250.121 diegofotch diegofotch@hotmail.co.uk

 
 

Tags: , , , , , , , , , ,

“Mr Collins Edward”

WARNING: BUSINESS PARTNER – PROPOSAL – SCAM – FRAUD

NIGERIAN SCAMMER CLAIM’S  TO BE IN BUSINESS AT The NNPC TOWERS IN NIGERIA. YOU’D THINK THEY’D USE THEIR REAL IP INSTEAD OF ONE THAT SAYS WASHINGTON D.C. – THEY’RE TO LAZY TO SWITCH THEIR FAKE IP’S AFTER SENDING DIFFERENT SCAMS TO PEOPLE. THE RECEIVED IP HOWEVER, IS LAGOS, NIGERIA (obviously, that’s where all the cowards who scam live at)

 

EMAIL: FROM: Dr Collins Edward

NNPC Towers, Central
Business District,
Herbert Macaulay Way,
P.M.B. 190, Garki, Abuja.
TEL: (withheld)

Dear Friend,

RE: PARTNERSHIP BUSINESS PROPOSAL

I am the senior accountant with the Nigeria National Petroleum Cooperation
(NNPC ) I am not contacting you on my official capacity.I am emailing you
on my personal capacity for a
business facilitation.

There is a certain amount to be claimed as over-invoiced amount from an
original contract done by a foreign firm.The over-invoiced amount is to the tune of
US$65,500,000,00 million.(sixty five million Five hundred Thousand united states dollars)The claim should be filed in three tranches by a foreign firm.I will guide the foreign firm that will be interested in this claim on how best to file it for easy actualization.This is a personal arrangement between me and some of my colleagues.Some of us are interested in politics and will resign to go into politics full time.Therefore, we need money seriously for this aim.

I want you to be our confidant and partner. If you are interested in working with us to claim
this over-invoiced amount, feel free to contact me immediately so that I will itemize the
procedures.You have a stake in this transaction if concluded and it will be agreed upon before starting the whole transaction. All the terms and conditions will
be discussed and agreed before commencement, possibly, we may arrange to meet face to face for a roundtable talk before proceeding. It is risk-free and foolproof.

Your immediate reply is needed via this email .

Regards

Dr Collins Edward
Senior Accountant

HEADER:

Return-Path: <www.nnpc.ng.org@ws.blancspot.com>
X-YahooFilteredBulk: 75.101.130.49
Received-SPF: none (domain of ws.blancspot.com does not designate permitted sender hosts)
X-YMailISG: MY6nI5sWLDsgKXzuiml5nM2gUrCCajWO7yQdSvWZywbgxDo. Qr4Nh6x8LAC4ShkJW_e1W7xcXsNM5._czJ.RYSlVB1v1J8Vwt8Rp.FHEK6QC dyLa8A_5hlm2B3jxsBlV_9VDSruZkENSEI0p2Uq9zcUUjzJgIQ1M6uxOJLDp 4wys.wFec8k3UrBVt..2ehAnh4wcs7VsCO0_ugDAzNH_5kAsk9slUGXF5fvM tImc7FGqI1STxEI1Eo.pW_5mtZfJajcfu10EDVmvlBb4yKptyx_fP3a72pXG 4OBOLX7UywP4OPkFXaL6F2s42.5pB3jx4cp1qYN5RyMOdFZcGCXtKMQFtHik eqp_HAMjBmLjksn.QAgfeCYIhh57JkAov2M70PaVRNYejCxFJFv.pdzDAhLq BeovMruu4KX1j_w.Ry7Pcs.zkOdvYk.EByTaJ0d.5JHbHySQVy.rx6yo.Ytg I7Y2JCvd68nWlllttkimSU1dYilERQE.hDMHnAIAt5waCeQAOznm8sF.m9kA sGDsYc_Odl0S0D9VYocIhrhCuGckdwjUD3VEPycqjyuihbNthaBdIqGGw81n thkOeHaaV7Hko4qvi1A8JoNKG94E2BOBa1.htkrHwAaQVW5Jyxqgq7TBV0KX OIs6iQjGrUiGpCUh0HTRCEBah4nhwZtbJMmQV0Mhtw8cgxRvC1R_MfHn_45n 8yrpn8AaMx5haAaKisGAHbFLfIp0dq_UJYC4EaWwit50XxrEGQIQ4XrV1IcN GB0MN110Gmm.2Yafc.znhGhJNoqzsqRTYvvx679TWCM.4g8nh0FhdfmhUspJ foa0hPhpsiMNqSFMhV1Y9RjX7iy0FJhylyyRXxJd5fhtoOBYUJF8xnsd8iP3 fCnEh2yKn05sCxlAXMbKTcTAVNjQQ3Cbe2e2BSAZi5iiFYxvwizKOnkIuGeJ 0F14woAWNABf_tIjTnvLYFtqP5ZJirQu50OIC1mliUGz9JGN5pzC2Er7mJ8A TsHxhqY_X_Dw47M1jSXXsb4zUBznHjUKrU1h0_I11Eg22zdzN.PsB8h5Hzuu IeCyLIR3TZ6KHSSX9coD.dax.YaC7U3Ij..ruJOcM3e6Gkc0Tqn.ffXZf19J 0RFeVH7sSN7fSNXYBJr3prmYZyvxYZ6yOIUN3P6oo1_n5ah7GjcLvO_ag8Xc .M8gkaHMQN5ycpAV6hnNTcmhHjWf78ocVT4VsZQllgLmsmjxRuM7hShIWxoO zu5aCzM6YxcLDVKkqQyrLsHGtGjlTvV2N0eN5XRUBAo00NW4qe12oL5sT_5I BtuDwZAA7_ov7TbNNONiHUq5unUDlRpUmC0ywOrXpIUjKwOnkLepHSaiQEtS TICJg5bAKMywB2LXxjTn2HUEnMbeXbrUHIn_XO_CtLPP5q0ror3wLabRbn6r YdFd8incsZpS_zd2rANS.BArmcvGBny7LPjXzxKve66yqRb2aVsy.WGOKUuH DuJ_0AF12hSNLnS3jwBd0JMBccay79_6svmIKqB5lxZjDNjF1KkzHboibhFI sTFOauQtH99_2i6u_NLkHVT44vOkpMMnyUCeGRyOqVZK9Qb7Oe_GeKJ4gAMH Mi8mZsb_UjUE.KbfaNgpifAw2BoexV1TFepdOBSsYwgD10FfHq7MKIS3feHS 5UB4k6VpkXHGowUkTEJ2GWS._Fsh1LMffITs4LZjj3ByNlVkLJYZ_gpIWA.d J.TQ8Jgx0I0p7XLe16OEz34NvUaprgA-
X-Originating-IP: [75.101.130.49]
Authentication-Results: mta1381.mail.mud.yahoo.com from=ws.blancspot.com; domainkeys=neutral (no sig); from=ws.blancspot.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO domU-12-31-39-09-B0-21.compute-1.internal) (75.101.130.49) by mta1381.mail.mud.yahoo.com with SMTP; Tue, 04 Dec 2012 21:02:54 -0800
Received: from domU-12-31-39-09-B0-21.compute-1.internal (localhost [127.0.0.1] (may be forged)) by domU-12-31-39-09-B0-21.compute-1.internal (8.13.8/8.13.8) with ESMTP id qB4E83iI005582; Tue, 4 Dec 2012 09:08:03 -0500
Received: (from apache@localhost) by domU-12-31-39-09-B0-21.compute-1.internal (8.13.8/8.13.8/Submit) id qB4E820j005577; Tue, 4 Dec 2012 09:08:02 -0500
X-Authentication-Warning: domU-12-31-39-09-B0-21.compute-1.internal: apache set sender to http://www.nnpc.ng.org@ws.blancspot.com using -f
Received: from 41.71.176.146 (SquirrelMail authenticated user test) by 75.101.130.49 with HTTP; Tue, 4 Dec 2012 09:08:02 -0500 (EST)
Message-ID: <1290.41.71.176.146.1354630082.squirrel@75.101.130.49>
Date: Tue, 4 Dec 2012 09:08:02 -0500 (EST)
Subject: PARTNERSHIP BUSINESS PROPOSAL
From: “Mr Collins Edward” <www.nnpc.ng.org@ws.blancspot.com>
Reply-To: collins@rocketmail.com

“Mr Collins Edward” <www.nnpc.ng.org@ws.blancspot.com> RETURN-PATH: collins@rocketmail.com

RECEIVED-IP: 41.71.176.146 LOCATION: NIGERIA (SOUTH AFRICA) — X-ORIGINATING-IP: 75.101.130.49 REVERSED DNS: ec2-75-101-130-49.compute-1.amazonaws.com. LOCATION: WASHINGTON D.C. (USA) (Not the fraudsters real address. IP used to mask their real location.)

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: