RSS

Tag Archives: Fake

“8TH NOVEMBER 2012” cmdept01@msn.com

Lottery Scam – Nigerian (419) Scammer

 
Name/Email-Address:  8TH NOVEMBER 2012 <> info@mll.com <> cmdept01@msn.com <> harveym50@bigpond.com
Subject: Your mail Id has won
Email: Your mail Id has won 1,000,000 in the Microsoft Promo.send your Names,Address,Sex,Age,Tel;cmdept01@msn.com
 
HEADER:
Return-Path:   <info@mll.com>
X-YahooFilteredBulk:   61.9.189.149
Received-SPF:   none (domain of mll.com does not designate permitted sender hosts)
X-YMailISG:   aXaL4HIWLDsxn8vFqUY282pMVb1wYHjvXmbb7NQYsT9nrMuF quXvLhva2_cxSkbye3tPXVUQbTHYifAB0_RZU1yYzWZuAH6JVXtHQts0BeCx NFPKcZUJr30o6z3W8NU8EotiXWl4T7WhPcQzlad5W2N0nQLzTA_mXw2gBlkk AcTq9mTntdtSAoIlvairZDujmw0Gqu4g8K2DtdbN1Vyag98zeTpQzaKv9BbE dIY.CmtqAu6YEHrCJare0LDcT7Tr4sZK5uGIkZN2PR0itgtJUhRZO4Htyn16 YEx6QNThe5L9AB0X2p9YVpu.z7topwhDiu80oINxKm8ZkVs78Xz31uO3GaU5 JHCCCH4PVN0UDQ_CL9dOM55DBsVepBarwxAjR3HfE_Sk0O541uU6LYo1_f1. 8yambi1eaJXNSXgE041jxMrNPjFp5tv1Jx6xRY8D6iCk0miEs0i4lsQjjxvZ Kmspgk.PGPoggrOxOAeCRoLvYnVJGFD.t4.hQmHC8XlPA5NpekJqZHXlF.Cl Yv8wa7ucJ1BTrCjmCKKkHfvOc9orsg6RW_5yfCOQNOSu5bI31.2igyNUcjef F3IgqotJ4YkkxVJhafmuqvCUt1WM9_Z6DBbEp.4XVgz8wsdHz9ze4IwLZlSr NQm.7ahMTMA5nkjU7_WIOopcCbaeMTbFsJvJNhPaqPbK3M9cLEjX0f4y_Quw V0qFdE.sdkxdsmzFzux4Mr9rKXxWwEWHRBqZBGPwYlaE8_EDOtoMtzI9n2ac 4OkgZOXu_p_grSC6qZq8GoOSmfZwC1B7IThoPptOHBfOSA4WoPMqOodO.244 qbJkk2xwjAxipy.zuQdo3WAkteQIjcetc2QmB1JZ3lZd8NUvS9JuWA9Z3i6w UntBI.xpIGG7O1fvwlcq5HoTq9QiNx7pQzVHOCGH4NZ44D7Nez8rcDY12zwy uyJggz_uWezKSvpCwrgRtgY9l0PgpKhPYi1FCC5RXUylGdHJSSm4fXUL_ksJ rSyUE20Zu6XilvQTmsliHF6HszjI35HZxUYLty.3wRKJKQQNHYdWL4FY0cq0 4hyXUyRh4mt.aqjGf4DjzP87iUeX1ahjHukcogE3bL4hN36ehvq.2wFGdtHq CNsjenHN8hsHRMN94d6N6p47S.ea.zAwYGl.XiTLxDL0UJTPijT8.j8wQKwA V3OoJjlFwjM5b8z3pVK7rQBI5NG.k_sQmAsCNb5sffhnT.Os9UtXpplma4vn F57y57FE8UXUhoPZzi5u5o9OArKP4H4LxPXWHfTWf7AYYrvsLRV.GPbELjOb 5dGNjQn0PZX.jKOA7pRELpRj.kAzBEuuGKu.kUWmdlCF6ilUVJHjhKwdSBDM Gb0mykAM
X-Originating-IP:   [61.9.189.149]
Authentication-Results:   mta1032.mail.bf1.yahoo.com from=mll.com; domainkeys=neutral (no sig); from=mll.com; dkim=neutral (no sig)
Received:   from 127.0.0.1 (EHLO nschwmtas05p.mx.bigpond.com) (61.9.189.149) by mta1032.mail.bf1.yahoo.com with SMTP; Wed, 07 Nov 2012 22:22:26 -0800
Received:   from nschwcmgw08p ([61.9.190.168]) by nschwmtas05p.mx.bigpond.com with ESMTP id <20121108062223.JPRE2821.nschwmtas05p.mx.bigpond.com@nschwcmgw08p>; Thu, 8 Nov 2012 06:22:23 +0000
Received:   from User ([115.242.127.208]) by nschwcmgw08p with BigPond Outbound id LuMr1k00H4VufTn01uMutt; Thu, 08 Nov 2012 06:22:21 +0000
X-Authentication-Info:   Submitted using ID harveym50@bigpond.com
X-Authority-Analysis:   v=2.0 cv=Q/hQEvKa c=1 sm=1 a=nm8somDfye6Il4RvHmLFzQ==:17 a=Dyoqhi_TatcA:10 a=PdgGwxY0KecA:10 a=erfevXAxgKcA:10 a=Cfj4BQAnxiAA:10 a=BjMeFUYSAAAA:8 a=AAvYLDLOAAAA:8 a=_Qdy49GUg_cA:10 a=66vgBn_yP16s0-fJr5IA:9 a=Ft8UYL4EG9YA:10 a=s2loLT2QvaoA:10 a=3iXstkyzPsmxzkzN:21 a=-Y1K7-j07HcbTxHx:21 a=nm8somDfye6Il4RvHmLFzQ==:117
Reply-To:   <cmdept01@msn.com>
From:  
“8TH NOVEMBER 2012″<info@mll.com>  
Subject:   Your mail Id has won
Date:   Thu, 8 Nov 2012 11:52:04 +0530
MIME-Version:   1.0
Content-Type:   text/plain; charset=”Windows-1251″
Content-Transfer-Encoding:   7bit
X-Priority:   3
X-MSMail-Priority:   Normal
X-Mailer:   Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE:   Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id:   <20121108062223.JPRE2821.nschwmtas05p.mx.bigpond.com@nschwcmgw08p>
Content-Length:   107

 

 

Read the rest of this entry »

 
Leave a comment

Posted by on 11/08/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

“COREY, HELENE”

WARNING: Secret Shopper a.k.a Mystery Shopper SCAM

 

Name/Email-Address: COREY HELENE <> COREYH@mailbox.sc.edu <> sshoppers601@gmail.com <> info@mm.com

Subject: Secret shopper seek shoppers for well paying survey jobs (US ONLY)

Email: Ref: US/2012, Secret shopper seek shoppers for well paying survey jobs (US ONLY) You can earn money while shopping If interested in Secret Shopping contact:

John Smith
Email: sshoppers601@gmail.com
Secret Shopper (Recruiting Officer)
John Smith
Phone: 206-350-2835
Fax: 206-350-2835
Fax: 509-694-0129
Secret Shopper Inc

Read the rest of this entry »

 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

“EBNERHARD TROST” e_trost1@yahoo.com

WARNING: NIGERIAN (419) SCAMMER ↔ Beneficiary / Partnership Scam

Name/Email-Address: EBNERHARD TROST <> ebnerhardtrost@grupodycs.com.mx <> e_trost1@yahoo.com

Subject: URGENT PLEASE!

Email: –Attn: Guten Tag Freund,
Obwohl Sie vielleicht besorgt über meine E-Mail, da wir vorher noch nicht treffen, Bin ich Mr. Ebnerhard Trost a Deutsch Bürger und ein Banker mit dem AFG Finance & Private Bank hier in den Vereinigten Königreich. Es ist die Summe von ? 50.000.000,00 Million in meiner Bank, gab es keine nächsten Angehörigen / Empfänger angegebenen Was diese Mittel vor dem Tod meines Mandanten, die niemanden bedeutet, jemals nach vorne kommen, um es ist. Ich habe Sie kontaktiert, weil ich deine aufrichtigen und vertrauensvollen Partnerschaft in der Übertragung des 50.000.000,00 ? Million in Ihrem persönlichen Bankkonto rechtlich zum Wohle der uns beide dringend in dieser neuen Woche mit allen rechtlichen Dokumente, die von meinem Anwalt vorbereitet benötigen. Der Austausch wird ? 25.000.000,00 Millionen für Sie und die anderen ? 25.000.000,00 Million für mich sein. Wenn Sie interessiert sind und es wirklich ernst sind, kontaktieren Sie mich sofort!

Hier ist meine private E-Mail-Adresse: (e_trost1@yahoo.com) und denken Sie daran, es vertraulich behalten.

Grüße
Mr. Ebnerhard Trost.
+44-70-4573-9682 (Büro)
================================
Attn: Good-day friend,

Although you might be apprehensive about my email as we have not meet before, I Am Mr. Ebnerhard Trost a german citizen and a Banker with the AFG Finance & Private  Bank here in the  United Kingdom . There is the sum of ?50,000,000.00 Million in my Bank which there were no next of kin/beneficiaries stated Concerning these funds  before the death of my client which means no one would ever come forward to claim it. I have contacted you because I need your sincere and faithful partnership in the  transfer of the ?50,000,000.00 Million into your personal bank account legally for the benefit of both of us urgently within this new week with all legal documents  prepared by my lawyer. The sharing will be ?25,000,000.00 Million for you and the other ?25,000,000.00 Million for me. If you are interested and really serious contact  me immediately!

Here is my private email address: (e_trost1@yahoo.com) and remember to keep it confidential.

Regards
Mr. Ebnerhard Trost.
+44-70-4573-9682 (office)

If you believe this scammer has also contacted you under another name/email address then please post the information in the comment section (name, email address, email, header/ip, etc.) Thank you!

Read the rest of this entry »

 
Leave a comment

Posted by on 11/07/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

“Eduard Castaño” (AKA) Wang Chien (AKA) Christman Debra

NIGERIAN SCAMMER SENDING BUSINESS PROPOSAL AND LOTTERY SCAM EMAILS

anti_scam

01/26/13 UPDATE – Eduard Castano also known as Wang Chien has sent me a new business proposal offer under new email_addresses and  IP_addresses — (I’ll post the email’s from newest to oldest and will add this scammers header details under each email.)

Partnership with You Tuesday, January 15, 2013 1:11 PM
From: Christman Debra dchristman@mosineeschools.org

I have an urgent business deal worth of ******* to discuss with
you, contact me for more details for your interest at
wangchien2004@yahoo.com.hk
Thanks
Wang Chien

HEADER DETAILS:

Return-Path: <dchristman@mosineeschools.org>
X-YahooFilteredBulk: 209.62.173.211
Received-SPF: pass (domain of mosineeschools.org designates 209.62.173.211 as permitted sender)
X-YMailISG: i0VLM7kWLDsLfLCywSaSSYx.tSpTBcjTXuGpJZV.D8GRtK4G hbwwRCRgZQgk_cw85gry83cgekJVMrrg3pbltquix.8MA3xnlWVESreBORPy vcSKT.7YBAacVrEqZ.AdIZRUTeOavSVzclLQVSZ6NoRcl04EzUF_IvPbMXa1 yzAJfw8_2dmSgDo_nbe03cbOzpbeo3ufws6Oz8XaNvF2fzou4byjAFwnt0pb u4tTJeAqSAO7hg0ABqNewmtkT4glFaA4HVALqkT0ZUxvJd61F7ML9AfK_dQ1 WJJiiDZBEVosDV5OHjNMv8yRucX6rGF7z0vz4PLU6kd2lgCvrD5KH4SeyH9K 2re9FukaR5tE19lX2005zunxwBcf7WIDCLMkBrHWN0NYpCgXPItS3olsR1td EnBfvHzS1UW2bcPOly5KbL0SvC2rRQE9HKEW214YZz1kjT_4NPIja64yTQme 21Sqp07nP5GHdPQ7JhDuZ09MEKsEY1pRbaU56.FM2fbQAzut2VaaNYRLVil9 jA0ZZwyuZSpmAG245uTo_ULrUhYXK_K5J5LVx2pQlpDmOsjI6k4VlPjyR29E nyDid6ld3dqr4PPmSpA6HZNwCodLFFByYaGqVyYzGNtP7RN.HCrHixcWJJYL YEzbczPRsNBuACSyRl7qYeauGjnt9_Tp5JUUATQqD36Xol8_uCTbMlljqob5 hGPArKHIUprI5xCgdPifF_b9g6Oa9Xp6r_OvT.Xpv4zXmJNC5natiHjfNmFB GDKrNO2zvTHbNnmQw2s7h17s3DheRH9FYgcoy4z.h5ZqXQGhyxjlovl33rvj FZUsmzAVz3.OCdRq683c.ZhcoyD7.cO5vb1egOG9yhE.wlTOXcywrKOBVxmU uvJTlvO0aryX75p4M9lgy2UFVAetNBUoPKf4xury0kOc9slsVIKmXlHyj6hh rlzVmREfCJfHug4QZvuYiAlEQP6IGF8HKdCZnUkxuCu0Kzeq8OGHmOCZVETc Zl5vp5SEFR1ZrUBIO_In6NhVo5kgk.r7_ILNmh_Ns7XHVq6TdWBHzq4ZKP.t pZWgrQEUsCz.4hP9Wc5y2UfkNN31v.5Iq0t7JJoRsQNG0PtE3Q.WV8FmrgnM gGP69Cg5gda2zztCGPQh489ozPxmwoUwSpNJQGOXQDV2jzA8BiNQSDLrq3t4 k.tQVYkqqug3yQHVnPYwC6P7eFXlXf5iHujq42PMfIKkSZR9zQhuROokQb80 IAOsttMEil_yLf0q3rlf0aKBBZ7L2w3PT8lFTtKqwCiDr3T0iCUk2ndfzwkx kibLb2_B9Az2BPj1HO_7ZfnlP0Tch_LkrWyDVtRmdBIR24XFNgAmLjRHP7hR HXo32ZTBHvG33dJq_hAIkMG8hqZzEZ8fALrBC1S5lod8KxHrnRMwjhdTWJ4n UDbmDUJKwTFe.CfRtm5G4cBUEEl6_AmsEvIgzToO_Q_FRdIdauBS1ax10S1Z WiyZcsZR6A0l2KXGTdRaXl62_eKU_P.t2VOXHDRBgmkdu.7DHNI7CLZYhVhS 59OXOQrgRNVMGocvAp7wz6szJRzZxRwOa041fyptbnYzY2X55RNoe7Nkq9Fv Zrjd01_3fMCBdYaaR3szVRwST2DcLpeazg4gpGnah7Jmj4_5fPFb5LIB.J7W vB21EURhkzKyWKcew3HiLkVDNWEwdVgnGKUpo.D7ue3HqJbEvZkPYY4kfqZ3 ARA4Sy.EKNMVv5Zv8Z5NygjbaHYpvM3pIGpAtXia6QRvUBuZAaEI3P79PwWw 8O9ogSwTTrtKNbyN98Bx4QZMMIhHasZdHQX6zjcICBTQ5Lt2d8NalJnpbNab Iw–
X-Originating-IP: [209.62.173.211]
Authentication-Results: mta1361.mail.mud.yahoo.com from=mosineeschools.org; domainkeys=neutral (no sig); from=mosineeschools.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO SMTP.MOSINEESCHOOLS.ORG) (209.62.173.211) by mta1361.mail.mud.yahoo.com with SMTP; Tue, 15 Jan 2013 09:00:20 -0800
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AtcZACJb9VCsFAHS/2dsb2JhbABFqnGPSoJVgQhzghEBAwUBBQIDHBEDQRoBCwEeBhgHVwEXCIVBAQGCMAELA6hkjk6MCIRPYQOFJoI4TjWFHIY9hyqFX4gm
Received: from exchange.mosinee.k12.wi.us (HELO mail.mosineeschools.org) ([172.20.1.210]) by SMTP.MOSINEESCHOOLS.ORG with ESMTP; 15 Jan 2013 07:40:55 -0600
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
Content-Type: multipart/alternative; boundary=”—-_=_NextPart_001_01CDF321.EE6304C1″
Subject: Partnership with You
Message-ID: <99F32978A02442469AB1EFE86C8F05430A5F1380@exchange.mosinee.k12.wi.us>
Thread-Topic: Partnership with You
Thread-Index: Ac3zIcwf/dSkUHjIQFuS8kkg0/8gvw==
From: “Christman Debra” <dchristman@mosineeschools.org>

Below are earlier emails sen by Wang Chien a.k.a Eduard Castano a.k.a Christman Debra trying to get potential victims to “transfer funds” only the funds will be a fake check and the victim will be stuck with the debt once the check bounces and the scammer will waddle off with the cash. He is scamming under multiple names, email address and IP_addresses. Some earlier addresses: wangchienrxm@yahoo.com.hk <>  jcubillos@cardioinfantil.org <> Eduard Castaño  <> ymailverificationdept@yahoo.com.hk <> wangchienrxm@yahoo.com.hk <> ecastano@cardioinfantil.org <> for more information on this scammer click: Nigerian Scammer – Wang Chien 

__________

Subject: DEAR LUCKY WINNER

You won 750.000.00 USD in the on going yahoo

online promo. For claim and verification contact
Michael Helmond via
ymailverificationdept@yahoo.com.hk
immediately.
Eduard.

HEADER DETAILS:

Return-Path: <ecastano@cardioinfantil.org>
X-YahooFilteredBulk: 200.74.147.148
Received-SPF: pass (domain of cardioinfantil.org designates 200.74.147.148 as permitted sender)
X-YMailISG: w7jQS0wWLDs4rKN5WjiJ_ZKbTd2L97P2Y0uL01g1WiV1CDor dgWkAO9_fiPTZBpI2Dncv6CfBNQEL5j_4Qo9Zz5xGtZiIj6aRD.4vOSwrWVD 6zLxCpXc6lVi6XYFjgdiQ5D04jrUdVdoRXxwLcJe_GhRh.CxXGQZ6gCdVU.K jIe4j1I0k5laWsUZ0IYtpuLVyhWajq3q0tzFhMXzK1DUxXIR.r00bGJ95t2r 0Riw.p0NDOlGvuY.fqWvShXqU8NHPKonuKGayLtzbqXY9FMQtpSffvQeGRUK _DOBJZ71HAz7LKJdZQ45KtvFkxPxlLnVEskpYANPzRTs5kUwmQNR_vCByLzu Dtzu.dAwtApsJ3UVRSBJ07M1prOLFWMkHNhm5q1_suuVPHL6eX9ZIDZSijSH 3dWwf3B8wMS8U5RDCrRO06Ar2y86Hr0PxaZMnEaVmcVE77Yqvs2_hf7JopF5 ztBjkEyZyBSVaUecjeP6SL8TX7hU0x9yB4dzW2jsqBzKh_HN1U4FsKtEsdC2 GLpebba4hglNMXJZEbcsERVbuJG1KOIJktvt7j8ftKPhMh7QZOKU9afi_riN l4nyEWKp9pzSCYV.mZsFgK._AUIQ1u4gR2dvhZ81VY1VbKzhJW5mgncCDmlR UiL.VhXtPO3huQkTSWq1tqNB88P4Vn7e7p7IisvZXNtNUZ1vRUhWmSNAKYxU EvwCkBgLlmEsADIGFS9t9gpTRdQMWTvZtd11XUOI6B_7DLRt9nFQSYrP1i.l tEDNAENOqlrJvHkZ2IqN1NVpt9A2phEJo1KMmCk31ZTMrsjzvTF.cXmYkthM jkI.atru4ABpo9qQiCAF3rWKzs7e319PpMX97MnQ9MWhszDrBKDfvhDlShnZ C1PTAscAHjTwTP9H9fsinWjm23yuxsD1Gg.B4AgLx48oIo_ME6HOv2XIKIxI gEe0fztYAlsat9YjLRA39kZlDhCaalAVk0WufQof6wwR4Qix48xjR4s3PUJJ 8__Vb2YT.mrfFyklexAjaAUBdaYvMghlOlSCkrajfWl01893USlHAgfVzd3v ayAvPrCrSiYgywtyXE4JUVwAM6P0HyUKG8mdXVdjf.F6t1Eu1iV0d22fhhwX F7ilx.a5IAiZ8kmZwTZc9RXYUwdRv5wGi5EgNqkyaN1Xxq0YNIUtnLgtt2UE dQoJzykdkGmLD.0RuZla3xgyVZ8fhZj0WzZUHDX9v4MgMIr6dNBLQh60Oym8 cV7lvZxSa1079gJlOlbVDcoRZEMzGRZUfguqQPNJrB6mPnhotirxB2sVttwO zUX4K4o8iyxPaboEHDvszRRCfV.3nJbk2kOcImybh86GiO0lZKBR3fm1zyhY O46e8WnmQx20FLYv3kSrfWAPmPm67AEK731bw6phc0AWvAqOEO65aX9IUFI4 .coCX9WmtGhkwYIxUnlZy_QGGO_j5c4fyKTs4WGTu3_mY.Hm0DtRQv8rBC91 .Vt53mi7GFpsmFNel7JLas_l7y8DcjJDjAtjrKCisCfLddY9kE50c9xRd4sR qpGAIm1oIoGxsCWO61r6At4pIvp3TPdbdMm5rhhuGgruQuoqGebtOelE3GqR lnHZRQox9m4MRgyS4d2Nf8OzK2cXW2I-
X-Originating-IP: [200.74.147.148]
Authentication-Results: mta1032.mail.bf1.yahoo.com from=cardioinfantil.org; domainkeys=neutral (no sig); from=cardioinfantil.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO correo1.cardioinfantil.org) (200.74.147.148) by mta1032.mail.bf1.yahoo.com with SMTP; Tue, 06 Nov 2012 07:17:28 -0800
Received: from correo1.cardioinfantil.org (localhost [127.0.0.1]) by correo1.cardioinfantil.org (Proxmox) with ESMTP id 8573154268; Tue, 6 Nov 2012 10:17:25 -0500 (COT)
X-Virus-Scanned: amavisd-new at cardioinfantil.org
Date: Tue, 6 Nov 2012 10:17:21 -0500 (COT)
From:
Eduard =?utf-8?Q?_Casta=C3=B1o?= <ecastano@cardioinfantil.org>
Message-ID: <2045381316.8532495.1352215041750.JavaMail.root@cardioinfantil.org>
Subject: DEAR LUCKY WINNER
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [78.108.63.46]
X-Mailer: Zimbra 7.2.0_GA_2669 (ZimbraWebClient – FF3.0 (Win)/7.2.0_GA_2669)
To: undisclosed-recipients:;
Content-Length: 178
Electric Blue Bar

200.74.147.148 ↔ Malicious behavior detected from this IP and others have posted this IP as well.

Electric Blue Bar

78.108.63.46 has been white-listed and malicious behavior has been detected from this IP

Sample Spam URLs & Keywords Posted From 78.108.63.46
Domain: gaygalls.net
URL: http://gaygalls.net/?gallery-BRIANNA
Domain: bitly.uk.pn
URL: http://bitly.uk.pn/hRElSh
Domain: bitly.uni.me
URL: http://bitly.uni.me/eQeGHrqL
Domain: adultgalls.com
URL: http://adultgalls.com/?sexy-CHARMAINE
Domain: adultgalls.com
URL: http://adultgalls.com/?sexy-NATHAN
Domain: bitly.uni.me
URL: http://bitly.uni.me/nEdPFf
Domain: 8adb9886.rqq.co
URL: http://8adb9886.rqq.co
Domain: adultgalls.com
URL: http://adultgalls.com/?sexy-NADIA
Domain: adultgalls.com
URL: http://adultgalls.com/?girl-CHERIE
Domain: finance.uni.me
URL: http://finance.uni.me/?post-gx.html
Domain: bitly.uni.me
URL: http://bitly.uni.me/HlnDQE
Domain: gaygalls.net
URL: http://gaygalls.net/?gallery-LYNNETTE
Domain: adultgalls.com
URL: http://adultgalls.com/?profile-DELORES
Domain: adultgalls.com
URL: http://adultgalls.com/?sexy-TRINA
Domain: bitly.uni.me
URL: http://bitly.uni.me/nEdPFf
Electric Blue Bar

Wang Chien’s IP information below

Delivered-To: [my.redacted.address]
Received: by 10.58.74.4 with SMTP id p4csp1549300vev;
Sun, 14 Oct 2012 14:47:46 -0700 (PDT)
Received: by 10.236.191.135 with SMTP id g7mr9187637yhn.83.1350251265182;
Sun, 14 Oct 2012 14:47:45 -0700 (PDT)
Return-Path: <jcubillos@cardioinfantil.org>
Received: from correo1.cardioinfantil.org (correo1.cardioinfantil.org. [200.74.147.148])
by mx.google.com with ESMTPS id b62si13082962yho.125.2012.10.14.14.47.44
(version=TLSv1/SSLv3 cipher=OTHER);
Sun, 14 Oct 2012 14:47:45 -0700 (PDT)
Received-SPF: pass (google.com: domain of jcubillos@cardioinfantil.org designates 200.74.147.148 as permitted sender) client-ip0.74.147.148;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of jcubillos@cardioinfantil.orgdesignates 200.74.147.148 as permitted sender) smtp.mail=jcubillos@cardioinfantil.org
Received: from correo1.cardioinfantil.org (localhost [127.0.0.1])
by correo1.cardioinfantil.org (Proxmox) with ESMTP id 0E273542B2;
Sun, 14 Oct 2012 16:47:43 -0500 (COT)
Received: from correo.cardioinfantil.org (unknown [172.17.1.25])
by correo1.cardioinfantil.org (Proxmox) with ESMTP id EC30F542AF;
Sun, 14 Oct 2012 16:47:42 -0500 (COT)
Received: from localhost (localhost.localdomain [127.0.0.1])
by correo.cardioinfantil.org (Postfix) with ESMTP id 934363AF4050;
Sun, 14 Oct 2012 16:47:42 -0500 (COT)
X-Virus-Scanned: amavisd-new at cardioinfantil.org
Received: from correo.cardioinfantil.org ([127.0.0.1])
by localhost (correo.cardioinfantil.org [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id p8ibmghSTrxO; Sun, 14 Oct 2012 16:47:42 -0500 (COT)
Received: from correo.cardioinfantil.org (localhost.localdomain [127.0.0.1])
by correo.cardioinfantil.org (Postfix) with ESMTP id 509173AF404B;
Sun, 14 Oct 2012 16:47:41 -0500 (COT)
Date: Sun, 14 Oct 2012 16:47:41 -0500 (COT)
From: Wang Chien <jcubillos@cardioinfantil.org>
Reply-To: wangchienrxm@yahoo.com.hk
Message-ID: <891039962.7121111.1350251261294.JavaMail.root@cardioinfantil.org>
Subject: GOOD DAY
X-Originating-IP: [173.254.216.69]
X-Mailer: Zimbra 7.2.0_GA_2669 (ZimbraWebClient – FF3.0 (Win)/7.2.0_GA_2669)
To: [redacted]

 

Tags: , , , , , , , , , , , , , , , , , , , , ,

“Aminata Bangali”

Inheritance Scam – Nigerian (419) Scammer

12/13/12 UPDATE: Aminata Bangali who also goes by Fred Williams and Western Union Money Transfer sent me another email only this time she is pretending to be her own lawyer. Click Barrister Mendy Samba for more information.

Subject: Greetings From GHANA!!

Email: ATTENION:

I am writing you from Ghana and my name is Miss Aminata Bangali. Can you be my trustee to help me transfer my inherited financial estate($10.5 million dollars)  deposited by my late father in a company in Spain? I live in Ghana as a refugee. I am required by Spanish Law to provide some legal documents to claim the money, but as a refugee I am not able to cover the fee. I need your assistance to settle the charges to have the money released to me and I will compensate you.

Kindly let me know if you can help me and I will give you full details about the money. PLEASE CONSIDER VERY LEGAL AND CHEATING.

I WILL NEED YOUR CONTACT PHONE NUMBER TO SPEAK WITH YOU FOR MORE DETAILS.

Thank you,
Aminata.

International Flags Divider

(Originating) IP-ADDRESS: 41.138.172.76 is originating from Lagos, Nigeria a.k.a Scamville – Some other reports include Dr. Kelvin Blair with the e-mail address info@eaglegroup.com and dr.kelvinblair@live.com

Another scammer using the same IP 41.138.172.76 is COMPENSATIONAL SETTLEMENT OF ESCROW ACCOUNTS who is using the e-mail address  <imf@uniplac.net> with the Reply-To-Email: greyhound.courier@rocketmail.com
IP-ADDRESS: 64.98.42.56 is also associated with this email and has been reported and blacklisted on various sites as well. Anyone getting an email that lists any of the information i’ve reported on here, its a scam.
HEADER INFORMATION:
Return-Path: <mendy12@sambachambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of sambachambers.com) bmQgbXkgbmFtZSBpcyBNaXNzIEFtaW5hdGEgQmFuZ2FsaS4gQ2FuIHlvdSBi ZSBteSB0cnVzdGVlIHRvIGhlbHAgbWUgdHJhbnNmZXIgbXkgaW5oZXJpdGVk IGZpbmFuY2lhbCBlc3RhdGUoJDEwLjUgbWlsbGlvbiBkb2xsYXJzKSBkZXBv c2l0ZWQgYnkgbXkgbGF0ZSBmYXRoZXIgaW4gYSBjb21wYW55IGluIFNwYWlu PyBJIGxpdmUgaW4gR2hhbmEgYXMgYSByZWZ1Z2VlLiBJIGFtIAEwAQEBAQ–
X-YMailISG: 79tmGeIWLDvLfm2sx.MNzAoj_Bqa7Yqkk9armaH.D_LVVwit .byJ.hpSW75eC82GC.D9ykrTubuPmeUUGkZQnvW40ySl6PN.csEgp0GTtUct 0AvQBwYH0HAOGrNY.Jiix95U3JMObWOVAQF..TlX114N0XvcukY1V7L1uMJj SkoxVP8SqTu_z4zgGYhsPYaKRlsEKiUqvcoSZZ.Vv3IJUeHoq1.PTGkBB3Ns vL6srYOtmwjTjB1NzgzreuGn.IIJjPNpCl8jc.ZKRgJODtlPvWaVsAHZ_9Xp lNMjQkFECr.QxMafpRk7oeY01GnuknDpa4AP5lFzplvur1txRQE9Uy5_b_m2 SavhpdXHnjM6IghUjzQ4CVuNTgB7dYOZqV6gUnrTD1vxuS5JH23tZgWpcAE7 eShJ3QXHrwo4K6zSzNrSlKxe.AIXpOmoHfGRJpRXGDLZ5.L6lxx_OktBrMLA RR9vvcJKJiNrwBil6RUGCynyW1mdSblB00QaWNm6h6AiJ5VttJGnk1g8.LqC VavXOibbWGyV3HsSRQA9GINsXgHtDGaSNDe9bRgF4n4Et41v8swG2l4YbHip 9_RpDY3J3IjaxdYz0TE8AkYrpLsL26vFVuABDqY_.fsgyrbTAdX8zQjANDAu aBhfkAuV6QgG9x7.9AG2B2MTX4WM6v0RCl2mqBXGu7fmJWLeozlIT2qtfRPY YZ8lFV8lDxke2VdnqDeGcIYaHKI_2VemZz3bA0kHtotVLOGKaKB92WUldD2C nGhjxqdDtavZpEuyYx_lvLRku7gbLX7MF4UUQ9eH3jzJCf7zwru3fo13lMer Zj_58kENGE5M5Q_ltIqAgFWkk8THzn4XpGbciBNL5MH0UsGb4VWXSomhvfno fnGIQnAJYcRaHbS5.jLnc2h0EUnFhm9DtQ0IV7Vltz84aIYLkf_eRfxEOvLT _ABwi0GHcIrpKgG7XOtn29hmFvXm48mM7tYYFnxXbPsjgJHlb7tPjV6nnQeR _54VbTG5CdYET6cuLcsZUdAd32QQTUyP5sx17kX.02KQrMJ447ICmqFbWOYT b4BuJcWAWRaocS_3vFq1E1orwp5uNIaxCsoUJMMzJSeA.4ZC7s4EHhaw4mCx NnsBHf5Mhl.Sf68vpBreS5UdC6jMO8hfSHDgRKdCHVQviVRyxJziUBHL_mZO XfWEkJTcbfmW1JIvM0WGRuXtjpxP.MdgD.xzcG5WLaeo4WeRMfrs0ZIGQHV1 yokjjXQqvA–
X-Originating-IP: [64.98.42.56]
Authentication-Results: mta1035.mail.bf1.yahoo.com from=sambachambers.com; domainkeys=neutral (no sig); from=sambachambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.56) by mta1035.mail.bf1.yahoo.com with SMTP; Thu, 01 Nov 2012 14:00:24 -0700
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay02.b.hostedemail.com (Postfix) with SMTP id 82C1D6F53; Thu, 1 Nov 2012 21:00:04 +0000 (UTC)
X-Panda: scanned!
X-Spam-Summary: 2,0,0,,d41d8cd98f00b204,mendy12@sambachambers.com,::::::::::::::::::::::::::::::www.::::::::::livelovelomf01|2271098624|66D5B93
X-Session-Marker: 6D656E647931324073616D62616368616D626572732E636F6D
X-Filterd-Recvd-Size: 1514
Received: from webmail10 (imap-ext [64.98.36.5]) (Authenticated sender: mendy12@sambachambers.com) by omf01.b.hostedemail.com (Postfix) with ESMTPA; Thu, 1 Nov 2012 20:59:54 +0000 (UTC)
Received: from 41.138.172.76 ([41.138.172.76]) by webmail10 (Webmail) with HTTP; Thu, 1 Nov 2012 20:59:54 +0000 (GMT)
Date: Thu, 1 Nov 2012 20:59:54 +0000 (GMT)
From:
Aminata Bangali <mendy12@sambachambers.com>
Reply-To: aminatabangali2@gmail.com
Message-ID: <1292028862.178387.1351803594865.JavaMail.mail@webmail10>
Subject: Greetings From GHANA!!
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Webmail
X-Originating-IP: [41.138.172.76]
Content-Length: 812

Name/Email-Address: Aminata Bangali <> mendy12@sambachambers.com <> aminatabangali2@gmail.com

This scammer is also going under the below IP’s and addresses:

Aminata Bangali has many email addresses. A few handful include <> aminata2@mendyschambers.com <> aminatabangali@africamail.com <> aminatabangali@mendychambers.com <> aminatabangali@yahoo.com <> aminatabangali@msn.com <> aminatabangali@gmail.com <> info@guarantytrustsec.com <> info@guarantytrustsec.com <> aminatabangali7@gmail.co <> <aminatabangali7@gmail.com>

>< Aminata Bangali >< mendy12@sambachambers.com >< aminatabangali2@gmail.com >< aminata22@infonets.info >< aminatabangali6@gmail.com >< info@guarantytrustsec.com >< SeferiaB@trumbullps.org >< go@win.com >< SeferiaB@trumbullps.org ><

Previous IP’s used:

Originating IP:  41.71.177.75 Location: Lagos, Nigeria

Originating IP: 64.98.42.177 Location: Toronto, Canada – smtprelay.b.hostedemail.com – mta1196.mail.mud.yahoo.com

10.5.19.254 >< by smtprelay06.b.hostedemail.com

Mendy Samba also known as Aminata Bangali also pretends to be Western Union Money Transfer – And Fred Williams

Fred Williams >< fredwilliams3@rediffmail.com ><  www_western_uniontransfer276@superposta.com

Some more IP’s used by the above scammer:

Some IPs to avoid –  41.216.50.79 ( web92415.mail.cnh.yahoo.com ) >< 41.218.238.107 >< 41.216.50.209 >< 41.138.172.76 >< 74.125.83.67 ( mail-ee0-f67.google.com ) >< 10.14.193.136 >< 10.14.175.68 >< 64.98.42.56 >< 10.5.19.254 >< 64.98.36.5 >< 64.251.52.6 >< 203.188.201.85 >< 203.188.200.143 >< 119.42.242.156 >< 74.125.83.67
 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Williams, Ann”

WARNING: Charity Scam – Nigerian Scammer

Name: Ann Williams (at-least thats what it states when she emails but but apparently her name is “ Madeline French ”

Email-Address: awilliam0112@post03.curry.edu <> carolbech46@yahoo.com

Subject: [ No Subject ]

Email: I am Mrs. Madeline French,I have charity Offer, reply back to my private email: carolbech46@yahoo.com for details.

Butterfly Divider

HEADER:

Return-Path:   <awilliam0112@post03.curry.edu>
X-YahooFilteredBulk:   64.196.244.161
Received-SPF:   none (domain of post03.curry.edu does not designate permitted sender hosts)
X-YMailISG:   bgb9D8YWLDsmfAKjfEW8uTcDv2FaJXRPi2CfH5GUF8t9N9VQ ceoK7lveCExMltDGE17tAIdPTvr3PzHTJXMjBS8FQiyCEUE6ZJqT4Db9iawM brzOxlYMEYiL8Ry4jf9WO29T7qhtGOv8L_SKaxOeGIC4NclpbqgoXxepVLst iSz.OWoxp7hv2J7WhrKF52fXDQoE4cJOSsZ5rzXVfW11jMtVqAdmbJfmoe8l dvEKUcGRcG6nz5RHvNispJMFWHqI8ynMwxgByHP.CF0Jq_v_yk_l9ZhWmz7L KNxOEpZtjCvIiKa9wkXEZFiIFJHkkhc_nS3mUmv58zpJGehPYnpsE9KiZZod V1RrHRTuDy4Ucn1sK6CojvoKX_yH_Put4ved4XoqQOdQv_ggpSDvmBH8hywT jk53z3MDprSbAJ4mzqQWJdTgq.PqKdFQEbnkpm67EFFoy_WjaKRAk0QiIebl 2SoqF8DOiIXz48dwnteHzMuwUK3ubV8JmqIqwZnRa1CiaseLILNxp6N1f.YB sgUYGHoFZEuqrQujbkqFMknQJeDk_Rb4uY7WNgrLmIR5z0AddpBnhbMPDP_K exla4r7ckunTgE.GzK8wi7YcHJ9lcgGatMvEEj0ZVxm8HcfuG4.UdLAEIDlK J9LCm7g8a24wcqn0k7Ty0E5cuuGdT4Akj_UoIx1srgen10CygKL_4SlwNIIY brrvOLSBxzoEUy7mTiGaOIUPUyBGacVZDlx0cneNYc1boiqWUYlmqolwMbbN BRLudQ4OBcHHStI1z0yMC.XRf79Vn0sbwauoq4whc.Jrr.oGjNyTWzL18BUV rBdymSyTJ04mP5I.nj0usQV_qhP57uI44aVP3YdncphzzjC6gg4JQfOPZhbA zM7wJj.LnNnsCtZfbIgFqr_cVrsu5ASiXYeCxswNiLYM821mgQJWfi0UUk7P eltUf0PmYTonYQqSTDw19m1w3tyD.apxqYDNo4r4HFp1mtmYM.9ysZ1QXYvT W7xqm5b4HvJjF5bnx3YDkM6XvDEM0oDQRlRdOr7jU4JopWhBFD9VIm2DdN4u N2UDWfiC5vmPaVC5pBTPprzFDUj6n9HF8jvQlJxXIu1JvO0jY9uWrCf7cwDx se5G1fXx8EeIC6JWe_E4aC22NRODclQG1DEn_s4Q_.h6t_aghG4q9l8q7Csr 1NWjMODFG5Mih58y5CUP316ghVEXVn6ttqOr4TtWsF2CBARIJIYdGGO4QsHn 7M2FVLK6RNPsweC.s1IYxSfkcBSy2C1_hWneKV02pruEf6vJhLxG0.zFoWHZ KcDjojdjmOkUy.OhqxA81AbvGvnA12uFavLqY9ukfi1zfH0vdO6M9vnfho08 6yyY1wVmZZ.yUDWLpQIkF6T.GnjW8lXBpFoVaFPOlpClA5uOhJYIYTlzxQVK qqs0LWTbOjQXFPgY8ah.v23tttmdM7vIZLAALs7BXgdQXlhd4UmnQ_3BTko_ 5YRrV.kf4vGHNMOwk8ZDXMLI0XUAjZ9fmBHhLoVYB2EvqTGQgkEGnJpjzLmc nXVixDuO.utsTQgximRKu_8N_wkg3bVYYvocjqP9C4PcU56O0Px1qn5_r5F2 rPzY6lH0ibTBKBrPtT.y_0iZ9w.4BuKTncJtmFfG_AjHP4hQWp7pRu0c2X1k l07NWm9SGywqFrsHN_YhhqalwKPtbHEXMsfC89nvIhsJuF_jhRcbwv2WZcsh s_sBU36thAxZwKmzxCx4CWZ.o6WF.Y_YIlHzoE687AYakxPyTvxJfrXea45M TFqs1_B7ps2_trg-
X-Originating-IP:   [64.196.244.161]
Authentication-Results:   mta1161.mail.bf1.yahoo.com from=post03.curry.edu; domainkeys=neutral (no sig); from=post03.curry.edu; dkim=neutral (no sig)
Received:   from 127.0.0.1 (EHLO ASUKA.Currynet.local) (64.196.244.161) by mta1161.mail.bf1.yahoo.com with SMTP; Sat, 03 Nov 2012 00:01:29 -0700
Received:   from exccrmbx01.Currynet.local ([fe80:0000:0000:0000:1d4b:67b3:169.224.66.24]) by ASUKA.Currynet.local ([192.168.1.60]) with mapi; Sat, 3 Nov 2012 01:18:02 -0400
From:  
“Williams, Ann” <awilliam0112@post03.curry.edu>  
Date:   Sat, 3 Nov 2012 01:18:01 -0400
Subject:    
Thread-Index:   AQHNuYKY4p5i4veASEyq2+84/ht9kg==
Message-ID:   <91EF7C1C5D861E41B9DB32530E94C7E4DC5DA1C0BD@EXCCRMBX01.Currynet.local>
Accept-Language:   en-US
Content-Language:   en-US
X-MS-Has-Attach:    
X-MS-TNEF-Correlator:    
acceptlanguage:   en-US
Content-Type:   multipart/alternative; boundary=”_000_91EF7C1C5D861E41B9DB32530E94C7E4DC5DA1C0BDEXCCRMBX01Cur_”
MIME-Version:   1.0
Content-Length:   1233
 
 

Tags: , , , , , , , , , , , ,

“JULIANA ROMAN MEDINA” fedexdeliverydesk@yahoo.cn

Lottery SCAM – Nigerian (419) Scammer

 

Name: JULIANA ROMAN MEDINA ( julianar )

Email Address: julianar@pijaos.udea.edu.co <> fedexdeliverydesk@yahoo.cn

Subject: We won a Jackpot Lottery of $11.3 million

Email: Attention,
This is a personal email directed to you, Let me formally introduce myself
to you, my name is (Mr. Allen Large). I and my dear wife Violet won a
Jackpot Lottery of $11.3 million in July 2010 and have voluntarily decided
to donate the sum of $500,000.00 USD to you as part of our own charity
project to improve the lives of 5 lucky individuals all over the world.

Your email address was submitted to us by the Google Management Team 
and you received this email because we have listed you as one of the lucky
recipients. Kindly send your below details to Federal Express Canada Ltd to 
enable them effect the delivery of your valid Bank Draft of $500,000.00 USD
to you immediately.

We have paid for the necessary delivery fee except that of the Administration
and Handling charges which is $260 only. And this was because we don’t know 
how soon you will be contacting FedEx.

CONTACT FEDEX NOW WITH THE BELOW INFO:
=====================================
Federal Express Canada Ltd.
5985 Explorer Drive. Mississauga, ON L4W 5K6
Delivery Officer: Sir. Philip White.
E-mail: federalexpressdeliveryservice@yahoo.cn 
=====================================

*Your Full Names:
*Your Mobile Number:
*Your Delivery Address:

Ensure you respond to this email using your security code [A7449METP00-010] 
as subject. Reply for claims without this security code will be alerting the 
Anti-fraud Unit and IC3.

verify this by visiting the web pages below.
http://news.sky.com/home/world-news/article/15795402

Kind Regards,
Mr/Mrs. Allen  Violet Large.
Online Co-Ordinator: Juliana Roman Medina

 

HEADER:

Return-Path:   <julianar@pijaos.udea.edu.co>
X-YahooFilteredBulk:   200.24.31.84
Received-SPF:   none (domain of pijaos.udea.edu.co does not designate permitted sender hosts)
X-YMailISG:   iIJXEpkWLDtob25gKQyvD0jGtKLu34F3wBjl86lxqf7kaBFR 4BWvxWQHosZnouglQG.AeTAZxQO5CaICRPCj7kIefeNjYqTag1vYIIzeRxso BV2Sa8XhmTqiRYuVuxrbRHqKhSrU0pICs4SAB6YUIWVp6SwQbR73Bs4hgWlf 7SjVORFAUHZvCWOTGz.g9ngbGIiLV6gdaHSzgM_ihGYdJFGXn._WnS1_P8d7 DEQTQ.omSXpoEh.LVi4SCJL971xbD2i8zTzETDGz.1UrwwBFRQpWaouE3Kgp loGvnyPw_6nQErNakvosri8BV4Q6GE9Hu25Xg9PJB9d2ZehwQ3zhKt01DI60 FJ3ud0qhIVd6yuo0xzEPURhWkJX4t.AXZuevovoI0s.d89u.IgLtL.wV.j0T TudxdwT5vlvPZ7gVfbBtp5Pc0Y2UK.bJCgZKPXIgexPbknBS9YxZu7FfZYZX 8H2D0g1YNQRA12KboyJlBZkpx5Js4UlK757aYU6ybFIHuSnoR1t56jlrbSbG .glJAi7E6lqPlcMOk0J44lWHkyOXX.9uqsfGeIGypy51GpHz2LtqfHz6HDhk 2zCIL5oZNHxfhX4s.DIm6BiIqJVZoOwq1QJSPijGhBW.Ye9YdX5AIjpXwXd1 Ze50u_VN6ksrbQ9qMrZANF6zPw0slBR.gIEM.syliIJ0fZ_maawOJ1RWn1VS OGjGSyQhs3aN_Rc115ZB20qNhNwZvrmk_4M4sEzevDDFUbz4SHlf6WPe87Aa pmsdhtbGJ1NjlAAVGp8kdo.mQQk1RjvS3MjC8PkiFnH0N.SyZwsF56nQRWbN qeKqBN.Knr3cBCPzjNrEoSScNISe1rA3W_Hb68tgneNrawQSNbnTwf8sPQF_ M86uKTT3dJMJ_ObXVCbigOj.gotmLvyfJ.rtaX8MX1317HgfI1sCvuV9lMHe 7LkNdYe.fsn8l0pjKZmM.yxMwlhR.W2auPlxS0xh9p_oeBeckV8_MFJq0GbN Pmzwh.DSRR5fSpqlSSrNJQg6QsPVzfx4QdxAWnoc7.cMn2yjI7YvwaDktp3v EgbcfsLn_cWIJ3WEdMds5LgUFIl8KWY1SYonZfZyLeV1pmiIsTNTYC4F_5mq 8xjLt.ZbOwM9FFYe0ap_K4MNACuByBE12y9ZqFYt6rdEod6JP1UW3gBt1aSZ poEWq9Nbd7N5HGHjgFRlE0HzIf5wbU0pf0bNxEUbFoMlBnEnlrA57ZL14q3G 8SEVGmTtx6RBksmYHYnp8HJc6Xzgq23swb5VSFjd2wkv020efJWZOft6nsUx vjJxF9KwHSqkPC7K1Cq7Rtk5Q99N5k0GeLHiitTctMOQGy3LkjBvCNjioERq 8rdUleupD0jr4Iz.2.fcP0ef217xx8Ns0ja5ZoJfyLER_ORR9zX8SIAow_i2 JTqZZWHVY9tBe7Tgd_GehPB1KUvF.VwDa4H48Z_gbszQ5Wkfu4BLAGTHnKWZ uNXEzZnDZfECnq10B5ApwciCtYJWiOHD73A4GEJfxSud0gTHQgPndLNdhWm7 JPrIU.cg3yHCYdIUD3JJMw_nd8EP5oSmjnr.lBwOKqt.vNhn4vsowUH_pevz PreJKwRHssX8isSvDvSh4SOdb3o62fUriWe9bF5eeEWgTaOsy6mAN.eU_hoJ d2DkbTp6eTLcC4VHqvN0zPA09x72tTYV6qgHjE0gSIxntMAxwa9.zC5TR3wK NS9nTxWKc1Dtgd3RFh70M6oo2MUZm0BrgWwypFg5RBaTPpEHcyP28HaD_tmb Hw–
X-Originating-IP:   [200.24.31.84]
Authentication-Results:   mta1477.mail.mud.yahoo.com from=pijaos.udea.edu.co; domainkeys=neutral (no sig); from=pijaos.udea.edu.co; dkim=neutral (no sig)
Received:   from 127.0.0.1 (EHLO pijaos.udea.edu.co) (200.24.31.84) by mta1477.mail.mud.yahoo.com with SMTP; Sat, 03 Nov 2012 05:18:23 -0700
Received:   from pijaos.udea.edu.co (localhost.localdomain [127.0.0.1]) by pijaos.udea.edu.co (Postfix) with ESMTP id 6208F1B2717; Sat, 3 Nov 2012 06:40:21 -0500 (COT)
From:  
“JULIANA ROMAN MEDINA” <julianar@pijaos.udea.edu.co>  
Reply-To:   fedexdeliverydesk@yahoo.cn
Subject:   We won a Jackpot Lottery of $11.3 million
Date:   Fri, 2 Nov 2012 23:40:21 -1200
Message-Id:   <20121103114021.M55311@pijaos.udea.edu.co>
X-Mailer:   OpenWebMail 2.53
X-OriginatingIP:   41.138.172.174 (julianar)
MIME-Version:   1.0
Content-Type:   text/plain; charset=iso-8859-1
To:   undisclosed-recipients:;
Content-Length:   1593
 
1 Comment

Posted by on 11/05/2012 in Lottery Scam

 

Tags: , , , , , , , , , , ,