RSS

Tag Archives: FedEX

“Mr. Stephen Fred”

LOTTERY SCAM – FBI IMPOSTER – ATM CARD MONEY TRANSFER – FRAUD

CLICK HERE for an earlier post which lists two more emails and headers of Stephen Fred

UPDATED RESPONSE FROM STEPHEN FRED RECEIVED ON 12/27/12 (below) — Also, check all headers, because you’ll notice different IP addresses being used with each email he sends.

12/27/12 EMAIL: Dear Friend

We are writing you to inform you that someone came to our office claiming that he is your Next of Kin and wants to claim your ATM CARD which is in our custody, for he said that you just died of a deadly diseases, we from the Finance House keeping your ATM CARD worth US$3.5 MILLION UNITED STATE DOLLAR can’t just release the ATM CARD to him because we should have received a call from a member of your family or you could have stated this to us since you have failed to pay just the sum of US$180 for the delivery and insurance fee. When he said he wanted to claim your ATM CARD despite your inability to respond back to us and that he was willing to pay the sum of $180USD for the delivery and insurance fee, the Board members were so skeptical about this and has asked me to contact you once again to know if you are still alive and to know if he is trying to steal your money from us.

Do get back to us if you are still there so that we will not foolishly handover your ATM CARD to someone else who claims to be your next of Kin. We will be glad to send you your ATM CARD iF you are still there so that we can arrest this person who says he is from your family.

Your response will make a difference and sort this out. This will be best if you are alive and if you are dead , we want who ever that receives this mail , to have a Rest in peace and we are going to have a change of ownership to the next of Kin.

Regards,
Mr Stephen Fred

_________________________________________________

12/19/12 EMAIL: Dear:

Thanks for emailing us, i pray this email gets to you in good state of mind.

First of all i want you to understand that this email you are about you read is directly from the F.B.I (Federal Bureau of Investigation) Office, so that is why i will appreciate it if you pay attention to what ever in have to say to you.

Am Mr. Stephen Mark the new correspondent delivery officer who is in charge of making sure your funds gets to you right at your door front, and am assuring you that this no scam, this is my profession for the past 25 years.Transferring money to people who are been compensated by the FBI round the world.

If you will like to know! your email address was gotten by the FBI last week after passing out an investigation on a fraudster here in Africa, and your email address was among the emails of those that has been scammed by this heartless fraudster, so after series of meetings has been made with the secretary general of the United Nations Organization and the FBI they have come to a final conclusion to release the sum of$150,000,000,000 MILLION USD to the scammed victims.

The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Nigeria his Excellency President Good luck Jonathan to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes.Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card?
ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $5,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2016. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account.

Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via UPS. Because we have signed a contract with UPS which should expire in next three weeks you will only need to pay $180 instead of $420 saving you $285 So if you pay before the three weeks June 2012 you save $285 Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $180.00 nothing more! Nothing less! And we guarantee the receipt of your fund to be successfully delivered to you within the next 24 hours after the receipt of payment has been confirmed.

You are advised to contact me with the information’s as stated below:

Your full Name..
Your Address:…..
Home/Cell Phone:……..
Preferred Payment Method (ATM / Cashier Check)

I await your immediate reply so as to move ahead with the delivery of your funds to your door front in the next 24 hours.

Best Regards:
Mr Stephen Mark
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

12/19/12 HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
X-YahooFilteredBulk: 77.238.189.196
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts)
X-YMailISG: miz.PSkWLDvm8OHiL48MwW7HgCGZcY9wyYfPB0bWgcwKjEva TQwyGMTEfGBukWTJXp6K3_lMdOr8o3lm7TXrmPoc4SYUT3RVw6rGmRAryrmR vzFdPJ7nWMn8LKQrp74PYAgJV4aKVfzqyjt6AWzoohYTZOMagwlgMOTaPzTw rGipFSZ5Eobv4U_GlaNlE_77Ddk6T98GFT9V.aLJnAc0Ph4j3q6vJfarMtOQ NrJ0NJrxpVmlky589fuZQPic.EkeCD30o7kG6qwUIV44GPS5N2hb9u3CnUKO Idl.D9s3x8My32Vjz8f8SthSPf2bIAF159pdZwtc98SBOvRla.GQlOJ_qc1g BVwFqn5SUVXM9a5hmQj.BXKYJuCZuxSquLjVxtHH1rBh9EGqnA09aSKtoHSH bKbHNSkq6SkKdYfbF6ymr7Xg546oVhvmCv37ZGcxagiSNzoXXOrMTZgeQvdn LUhuKcL3GG1fQFdFazm82hezg0qQk7RdFP5xxpsuNTPgXrIUDMpFXjcjiQX. 56SsbW2xWvtdWS4tKKkLwaoVOEBhN8oFDaAjWHad_O77JiouWVwI9UZVRnsb epl8cLnKbZF6ir3kuH5sRj17HH1TFrTI_Yn0ON8OGQMcql6xsFmzGVuDmNVU 9NzXr3WX4wwnq1eIKU7Rlrf0i4MYsNZGO5VNVHNJ_lscTQGsyOd8Qb5ZQn4T 3GuOsvDM_mbrBpHu79D8ihDJ4z9GyDjWZAWAwent8y9HXlBijC8p9BCkVvz9 7bsWQfsNlFjIjrBa_msrlpK1AcwxQ3thkIw8XJ7ZZg7WO9VyRxTxOOVVzkqe quk8zEmWht_j_AFgtqjtBshl1ZBXWvjnUy7EbyyXzurKVIEFwtDGX8PDfX0i nhenxR8A.Cc4Tx6lAc3WrDHC_nhTnCdkdOu4QoHc2YAhQLsnDHrVNu1A5I8s BdFXnu5qPsLugzcNIIcjqcV3jdGpTvem9lKvB.26V8q9QxjHW6kAc7QhiRCj oTNYV1SlvAJcZuT8K8NAnkkB87v1nGfSSlVMpObPRdAUF85rgPEzQxr.WC4v _lVsNv_bFAENAGxZQEUa5peHi9bk3SUoYl839PLfNH42AWyqw.r.uEDGgYgt YVf3htF6YiWLWvMqeK0vFhXSbGSUeNWQejxn4bLX4hKc7dcNPN2X4lxDHV4Z TtgqG4qSWGI0T31Ja328K7tD0tv.6MoNpwNtC7rR_ZYySGuxBSy65pYmhzn7 fD5hzdiIiAums7aVzssL3et4ky6.RBgIHcG4CxHLGTeA6UnT.gF7oZRWMY8b 4efHUmr2._obPGoTIsNZrbXF0k5iLpTUAKgu_6ZfsR_ayUUr8XC.Y7JvnlGf Qj7GhkHo12CIBoSS2qKhAFSH9vHhX0Xx86FPWuv84Dun4Hw-
X-Originating-IP: [77.238.189.196]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm0.bullet.mail.ird.yahoo.com) (77.238.189.196) by mta1299.mail.sk1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:48:41 -0800
Received: from [77.238.189.232] by nm12.bullet.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
Received: from [212.82.108.126] by tm13.bullet.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
Received: from [127.0.0.1] by omp1035.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 955255.21914.bm@omp1035.mail.ird.yahoo.com
Received: (qmail 872 invoked by uid 60001); 18 Dec 2012 19:48:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1355860117; bh=8wr5+nuRl/ns3gTGRezUcxkLMAwD+/aKdXnRIi6o6TY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=6oJFhfa3p393I0xyrjhWQkUUjMFtdPImK5K243mP8aw2j2Ggo3ikcPl1+eRnjxs7VpIY5Mz0F5DSU0EE/k/BweIBKvdlUq2Lri6CqF4vqu2RlNRlEilW5g8O1z5wLje7bh7lo9Al99Bl2UQ+o+5LRnSqsydSUBCepF1X9HSMiX4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=cxaqwhvwCd3wwPtAVfKDnME1KkqzhntFJbBJXbDovmDNwyaVmX+FfJ2NhERfEIIpGd4n8o4ciZPL7kvjkyGgXsmTH1riWPjOmGcRURgnnscU5QMg64kJTobNnMXFiA8qhYFfLrHWgNE6qkx0mpKBiGQCJ6+MIiFbgBmp2v1SV7s=;
X-YMail-OSG: BjMYFAMVM1mnis_308ZVtMLR8Q8RKjoBERe2MAKplDV68cK RggpmS3_GIfS.MlTnm3NSn4KH2I7R1Pw8szBwplBfRNwRJe8f9qo0KvFmbIa XNyfXRa3a.3CF_.LzUvsypRymwmrvV2iaeh_kvvwQpu6zyZ1XZ6FIsJfkpYg TLvlzNdVM3ET7UUGV.zw8Qp8J.Toaem6Caq3aLMS.eA.BQfMs0UJTlPt6wUd mQRAWgRagh1QXMK1QVys_1Xj1NJ.bhuSPOXPhUTRSuN37VSXzysseRAnOvEq v9pWabsobdmSltAtLZbMm2NBz9OQMCID1e8Prxaa.vZQLIckB8OdFabnmGqG cPs.6D04GXE_gwrx2SRP3lTHI2TZFEOmJKHiPu0fRVZ0Iwyo0drq_UXofLZi CeWryBPYEBpAIZSPRIVnfB_TfD74keU.3FCnK.xFQiVraI7XdRsQxC9ffPg- –
Received: from [87.248.115.210] by web171905.mail.ir2.yahoo.com via HTTP; Tue, 18 Dec 2012 19:48:37 GMT
X-Mailer: YahooMailWebService/0.8.129.483
References: <E1Tkafo-0004nX-Uf@dmghost.dmg-hosting.com.ar> <1355817424.21167.YahooMailClassic@web161003.mail.bf1.yahoo.com>
Message-ID: <1355860117.783.YahooMailNeo@web171905.mail.ir2.yahoo.com>
Date: Tue, 18 Dec 2012 19:48:37 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Reply-To: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
In-Reply-To: <1355817424.21167.YahooMailClassic@web161003.mail.bf1.yahoo.com>

“Mr. Stephen Fred” <mr.stephenfred@yahoo.dk> 87.248.115.210 — 77.238.189.196  mr.stephenfred@yahoo.dk Stephen Fred also sends out scam mail under: vikhadd068@aol.com – albanesi@dmghost.dmg-hosting.com.ar – 64.12.227.42 – 172.29.96.160 – 172.29.104.4 – 200.58.125.17

_____________________________________-

12/27/12 HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts) bSB5b3UgdGhhdCBzb21lb25lIGNhbWUgdG8gb3VyIG9mZmljZSBjbGFpbWlu ZyB0aGF0IGhlIGlzIHlvdXIgTmV4dCBvZiBLaW4gYW5kIHdhbnRzIHRvIGNs YWltIHlvdXIgQVRNIENBUkQgd2hpY2ggaXMgaW4gb3VyIGN1c3RvZHksIGZv ciBoZSBzYWlkIHRoYXQgeW91IGp1c3QgZGllZCBvZiBhIGRlYWRseSBkaXNl YXNlcywgd2UgZnJvbSB0aGUgRmluYW5jZSBIb3VzZSBrZWVwaQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzk-
X-YMailISG: L0eJ1l0WLDsrmzhsNc4ma_ZTXhvmHQ2AKw1S.hbjK7f0cFYW 9CyYcBU7kl_AGjll0mshaAP10b6HHWwmyr9NHIlVfiz7naOArbwf87HAw5k3 9ZezwwxiQSn4Lh.0FELX.Gv7N9cLWGfm7FzsbwAHegFAuQ0MKWAVoejRLT4h Mva1W4NkDaUXxkm7lo6wQpYGPnrh1K29QdN7hMvxGaW3l828rdEa8u7R8tSF P4hN0LiGmfNFwx6QzZuEf6A2NwhmTwMxG9LGWort8xV0_dR.OhnQJhmjuBsc 9oIinp2hK1fR6VBZJthF5_gO2Ec_LX4HyhlnJbJtts4p8lgQTMe7REbczek3 JiKVpW7iC3Dl0cJmqyvbbaKQv_d6aYyCdG44SAiKQgTmIL6Q7kOxmbX5E9oX VHkWJ_n0X.iXcwGRTEKSP3N9Db.XTjTantv3oyhi4UKKjHCgO9L3K48vqx.y lykB.B__.iVEcJGgz2YelmZhbBJNrlsIo7PxJEUxWEzxTZXrAZwV5WM1ED12 7in.6D0uDbboS5zNAKWDInTs4lGmB48ZR_SPDK_.8iJUyJcPBLptswWDIfVy SG3KXeDQEq_gRLrZJQu.GvdtTETqw6J9MoijRpq50_OqvaiigEPjEVGea1.i 2NV5sTGYsiQuUkTJ0EwtBLKGaOcnFciopJ6uqRPA06N_bjwNg6bwirsb0.Pw TyM8CwA3kUeNU0ZAsAcZzlcdl56wTn12drIQyW0n7OP7S0lSvMdiuaGC_j4a NxJSv42fKw4LYMQO5OIPzV78fRppt9C0BSUplNoqZVt8Izbpi88gTHeIPbBd Zyb2SDqGMH9jiwZ5bWrrFCbgYSwl3tQfxosaZFrdf0OIQo901XDPItNnBGln b1o9tF_x8WLFMysnHJKkFaC0Duf0SBaJm4aHuia8YORRHroLa5yXpeLS6y59 WEFMio5sBul0wafKisJEVvqNHjXqzbAzfaehELW1CGdGkLU24xPfHgSA8vxA eqXvjzr7To3C8EkjD5lUYc3NBvtTlqALkVn68dQdQsag6x7JLFNcdac7JGMv oNECu157ZIvAfMtLBOV0OvC9nLIefLT0g_J8jUItQ32lvNCyl.D_2YSwpccJ AcP9rORLXX_lWEayqQq_5nrNbRCCqVtfXVRUQQYwP1bRTvXisvVzpPt1c73S 3bqDK_hTagtrLh9ePwchtdyyMd6EzPV4QOu3aFqkRTm57XswMGOlt7oqZhqk wio.Ss9vFlZffudcNSzbJyVIkseXhkuln9rOZe0MJ14LXV3wBx49OW5XVvPX AIb6lHsnsSEfOQ_EyOiYrvmr6M.zA9MjVNS6ciGoAjDICt35c..p9yBcEx3C IJWyVUBwpr9ahbKgag9UyARGPO52F2gQuE1UmZTpda31lkajMG.ABKRPfA9O 75Kr9w–
X-Originating-IP: [77.238.189.68]
Authentication-Results: mta1014.mail.ac4.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ird.yahoo.com) (77.238.189.68) by mta1014.mail.ac4.yahoo.com with SMTP; Thu, 27 Dec 2012 14:37:06 -0800
Received: from [77.238.189.230] by nm15.bullet.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
Received: from [212.82.108.112] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
Received: from [127.0.0.1] by omp1021.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 965884.6310.bm@omp1021.mail.ird.yahoo.com
Received: (qmail 43155 invoked by uid 60001); 27 Dec 2012 22:37:03 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1356647823; bh=1SbVX8ahIFjSZR3xschcHhVMo6cKx+s+O0qsgJDfn88=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=ku28W2L4rzibEW8KJtxQ8GYY3RM9A2ysRyCDI2Gln9rf6xXk1lWOnKtbTMIIJazEsPbkuoYGbW5QhPyb8stsKii95Pitv0qXFms/i/j3yu6f20ZJk1yqJYZFu8o4FHUd/rIZOrSxXgO0hP0Tv0Z0ohOWTbhm6KDmDemVNqUgwOE=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=SwE6kjNZXtdDz4oisXUvfUkWuvKIwQMtTjCPaUvGZX1g+a1kloixYRBnYnLpM10PHrqlXbp5P0n/Q2fnRYk8ADDaUInNU0wJw5TF7LxaejP592OppJq8wF4GzljgrEKqR4d/FwgPUcycDjnS/pJ9NWMfoCNj1KQaXv0nnjMn3aE=;
X-YMail-OSG: a7CZw8EVM1nb9WgP6LjiWSeVEjNQvjeH9d6HH4HQwVNgho2 Yo454QVEoYdNFuzr.uK.l3dR3Cv.Dsa8amnGZAj6ylZn9ciNvp.JGiOuMA7O kMzUr2COJi5oHfEhJxsNrnx3l67pCUj0kES.IcUPALk66ryXMPiPelATHZjW jheZwLOczwYgem_oZGZkyfJwUyo54l8hkyLUvt4BJ.Linr5MnYn80kleDkbf x72B5ccMKFq.hc4SMdXR1tjKas2_SlDVr4gflKAbKC8PZy7gtgYi_QCSTJSn sbBawKc1HjL.YEEtHJ8tbpi6gNjrqAgc7lPL3QeJctjTZR6G.3FH3TOPgPFn DUQovSsYQbJDEiEZXrLOScPlRVX_gjEW.73r5k7Mwt8RS1Bh6fZB1JvsxGd_ 7D9fNBLRoecCPHV6kyertDGeUXXUPI4ScTmPDrLXwFuzNM5uGL8t3Osvfrw- –
Received: from [41.138.184.157] by web171905.mail.ir2.yahoo.com via HTTP; Thu, 27 Dec 2012 22:37:03 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356647823.42332.YahooMailClassic@web171905.mail.ir2.yahoo.com>
Date: Thu, 27 Dec 2012 22:37:03 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: SEASONS GREETINGS——-PLEASE GET BACK TO US IMMEDIATELY!
Content-Type: multipart/alternative; boundary=”1200650283-1721883567-1356647823=:42332″

41.138.184.157 >< 77.238.189.68

Advertisements
 
Leave a comment

Posted by on 12/19/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , ,

“UNITED NATION CLAIMS DEPARTMENT”

RECOVERY SCAM – COUNTERFEIT CHECK FRAUD – 419 SCAMMER

NOTE: YOU WILL NOTICE TWO HEADERS UNDER THE EMAIL. THAT IS BECAUSE I’VE RECEIVED MORE THAN ONE EMAIL BY THIS SCAMMER AND EACH EMAIL HEADER IS DIFFERENT BECAUSE THE FRAUDSTER IS USING FAKE IPS TO AVOID DETECTION. IF YOU RECEIVE ANY EMAIL’S FROM AN UNKNOWN INDIVIGUAL AND THE IP’S MATCH ANY OF THE IPS BELOW, YOU’RE MOST LIKELY DEALING WITH A SCAMMER.

freemoney

EMAIL: United Nations Habitat Office

3 Whitehall Court
London
SW1A 2EL
Tel: +447017419229
Email: un_msn@msn.com

Good Day,

This is to inform you that we have received your email contact as one of the successful claimants for the UN-HABITAT compensation payments.

For your information, this compensation payment is being made to all of you who have lost your money through any on-line banking transactions or as a result of internet fraudulent activities. It has come to the notice of the Governing Council of the United Nations Human Settlement Programme that many of you have lost your money by falling victim to some internet fraudsters.

The United Nations Human Settlements Programme, UN-HABITAT, is the United Nations agency for human settlements. It was created in 1991 as a subsidiary organ of the UN Security Council and it’s mandated by the UN General Assembly to promote humanly, socially and to process claims and pay compensation for the losses and damages suffered by beneficiaries.

We were officially contracted by the Governing Council of the UN-HABITAT to convey the delivery of Check payment to your resident address. We guarantee your safety in this transaction as we have concluded every arrangement to dispatch your Check parcel for delivery to you through our FEDEX Delivery. With this delivery option, your check parcel will get to your door-step within 2 working days of shipment from our office.

In accordance with the procedures established by the Governing Council of the United Nations Human Settlements Programme you are expected to provide the below information.

Full Name:
Address:
City:
State:
Zip Code:
Country:
Mobile Number:

A shipping/handling fee of $500 USD to enable us deliver your cashier check parcel to your provided address.

We recommend that you send the required shipping/handling charges ($500 USD) via Western Union Money Transfer® using the below information.

NAME: Ben Smith
COUNTRY: london, United Kingdom
Text Question: Color
Text Answer: White
MTCN #:___________

Money Transfer Control Numbers (MTCN) are to be provided by you after payment with the western union.

Also, you are required to send us a scan copy of your passport or Identity card. This is to confirm your identity by our delivery officers during delivery in your country.

Upon our receipt/confirmation of the above requirements, your check parcel will be insured and dispatched for delivery to your address within 48 hours.

Your satisfaction is our priority and we look forward to provide you with the best of our quality services. Do have a wonderful day in anticipation of hearing from you soon.

Regards,

Marcus Wright
Dispatch Officer)

HEADER:

Return-Path: <unclaims@msn.com>
X-YahooFilteredBulk: 65.55.90.110
Received-SPF: pass (domain of msn.com designates 65.55.90.110 as permitted sender)
X-YMailISG: Q4P8yzQWLDsIYkC2RV9ZvS_EDjC245d9dFAmW2vnK4a6Jm0Y DIqOn7BURltdMROsZSDYHKLiW3Ge4URNT9rVB5bC9egwdn27lwj096smGSaH S6XoI420qujbv8PXR26Q.e1pRyO1zEcJXn1m51WwnG_FW9V7gM1_dsQCZKuw hYt7biegQCY3CoZECESZ6u4H0HUqz.7IrIAlyQOZtMhiF8nIj6Lml82qqZs0 Ze2_E09oOSsMYRP0nkJDUjs9.g0UWMwi527505334PvuqSu9EUJSU3yRDTFw 8gNEUnw1qYZsxZrJe0GfoPpn7NR1Zl8mij58BhSaTEqjzjXJR3u3J1wDOeWe CjzAm4OyFt4SZh.B.6tNsLmXkb8vMhS4Ubqyv2zZC5kDDKnfNDFxs53g.Ykb N0OsTfsk2GwqwJEGMg2xs1WPt4BnZeN0y21C2C0_oWt50sUSSpC7BDHwhghD _xlVIp.gPfgZvpG99j9mKZNCmNMU3gN2kARj4a_H6qgI1ZbHBpb1NDBTFu8K XHtU9lre5CA4ejNXxXqgjmAMZbtq5buf8bM80ZGkcuCMFpD.htXTL8jAj55p wU8c91G1eVGexCnTTvmGbVKi6UtRaIJFUZX7XphQjb.5.7MNitICPqBSZsdp wRcoJ7fDJrdFG4kJV9NMluCn9JgjTdCm_zMIOFgWbTr58VSJ9EjtMUEJBwTN sWsHkCoy90KG.PKF6so73QsQA7Ob0Fx3YK_nJZA3VZ5dbzlNhiMyu4xt3F33 MChOB1OqMJ2z.STCaGCXfWj1g0jUiLWoWRUZZPQt8WQY6STWZUg6PBOAqvJl MgYbB7hhkAzm.GAwusD0_NOYA84gd3j6VNkDNhFnLQS0uh3i3aDEQSg5bwdT ffh6DnxtkQXOCX3UhlfMhacIpMC9NOv5lH7WsU5xX8KoGtKGTXWQGWIbTq8r XO8COK5DqvVSfSfPn_vwfR0D1QJnb1gb1ZgKLg4jwNY_.FgUGOXjUBGuruaF aRpmJtibDZlGtLyXhJKZxyp48GpQ2brrjWiXCK_yH1udci3Y9N_1qRDEDqKt eJayK1Phc9RAWhCRPyTGXIUpbcLJhyh7X8.J72EN6E0ZP.q2YF4t23r1l62i ivcgCEL3CUcAFMqAYQuWlAqOHGmX7J1d3JcQMNL3XcOM5IGQ1rtH0i4cbCvE M1xypCSrQ4vycwVCrK3L9DzlvXxY2Vslvr.CScSV79f1HsV6q_K12VN7M7jz RaQXDif9C_tFxLVy7tImzSHNIEtAY4dwfH5rrr55PmTUtEUz.6KEQJbAs8lz N3eK.l9Gp9cBVG0-
X-Originating-IP: [65.55.90.110]
Authentication-Results: mta1019.mail.bf1.yahoo.com from=msn.com; domainkeys=neutral (no sig); from=msn.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO snt0-omc2-s35.snt0.hotmail.com) (65.55.90.110) by mta1019.mail.bf1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:51:23 -0800
Received: from SNT143-W32 ([65.55.90.71]) by snt0-omc2-s35.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 Dec 2012 11:51:22 -0800
X-EIP: [/TV7qSeM3qmM9iU1AqKrwfvgxpWqD2/e]
X-Originating-Email: [unclaims@msn.com]
Message-ID: <SNT143-W32684D9215E2ED28219FD9C7310@phx.gbl>
Return-Path: unclaims@msn.com
Content-Type: multipart/alternative; boundary=”_3dea15d0-14b7-43d8-8b0a-3b827210a014_”
From: UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com>
Subject: RE: Contact Name: Marcus Wright Tel: +447017419229
Date: Tue, 18 Dec 2012 19:51:22 +0000
In-Reply-To: <1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
References: <B353BE0D877992409CB2153398733B81635C6E54@winxbeus26.exchange.xchg>,<1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 18 Dec 2012 19:51:22.0097 (UTC) FILETIME=[0E09E610:01CDDD59]

UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com> 65.55.90.71 – 65.55.90.110

HEADER NUMBER TWO:

Return-Path: <unclaims@msn.com>
X-YahooFilteredBulk: 65.54.61.94
Received-SPF: pass (domain of msn.com designates 65.54.61.94 as permitted sender)
X-YMailISG: FbVe49gWLDvy_H0HGyCvr5GlHi1Ad0EQxycJEWfEdPYeo2hb TF_L7_0plwdxv1FO_5ZBxOLniR5jVE1h.Fy8kvu._4ctcsh.b._rZqUnvBaZ X3jaWCnb1qKO18FS_hNsKnY7Zd_VhBurPjPk72clM6bgMjU.tIIfnG4H8Y4M J661nkVpIy6scF5iyZ_GtYTr4aKug9cqZtjYPGPyFDjks_s2MbDdye5pGdWG DNiifYQQC.X.8Lfr3c7DCNRxhtb6wQBckrCai9vFX9DWGhIWU4gvrrWtMML5 aMLnx.ocyyiIjfwYCHTVeCsCpSCRBsEoCxIwjdzPnYUg069I9LA0b.Gh9jiA Pe.d6H2UjS60goCV8fBpX69A1doeRqa2Y9LScgym.dUPsUJy4ATjT7QTuAHc 4LVPQqoI0V2kyvVfsnWyCY4QWmfxjXW8IFP_ZQ.Pdr.3MF39DG.ximBCtFDB v0UlcQVxTx5jRRWFZvtISd95osVXPSgqvQoOsC4YRH1845P1Rs_ByeUJDRfE _tQ_jczjUU7nR8fn20CTAo5.dyCcQfmAwOR9AVVs7MzLiW0traI.LpUA89fy bHEZCaTkLehGymHINA9NUGDAccQ_VQpl0joPk8Tpw5FN3DyQNv6pop4mPkmL PJ69l.U0rjFWVzF3YwW78bz2XkOLXEfFs6qfitxwgm4I3fyzY_YHUWyRVXFR DDIVZ0HqVr_5ZE5OFIciU6l4V9dDQXfqWDCpRncHUSQDWKeEMdERxCKSNl9C _6e35DXg33zuEZlZYa50TRBmAVKpsQGNUmSW3GYBCBN0ihRATbuElph8v9pU QVRmuY6oveo0raJa2rkRGJrEGz3wQ9XLORIvcscVZySSknoQ9Ve2aYvrduAe QBAyZ4uirjeHwVMzjYys4h7eq6JBETWlTtpRc.3lAYcKY3jJ.EgCYFyWNPCN eVZD85NyDiPOyrhqWPpt2bClbZBoD1SfQIqIRxgXdO._RwfGgzc6OFa4lGim o0bUfhMeNF07.hDW3nmiVifthixlaquaTOnI..wktt4FcthmXKKNNSICQuJu 2fMdzGtBVBBQBdhMgHbLlLWPlDqrAKG7OZ0c6iY69UmZ3vGrM.4XBiheikmW D0J47Vter1FQ5G5Cu0nRX0pkGOfciptQ3zzWDCmhirn4Xqz1ME2QLJKcPWMx Dhoxhp8LQbKf7MIrGXe1py2l4w6oEPVx9g5TDeMnmB18XieUygWNBP6cY8Kf yapRNq6T7bsUDhMHYL4be1aMw5GhnU7UmSnTECLhRYU7BY4au7Gm5Uw6PrJy J5ZFFqn7hmjJjguP_A–
X-Originating-IP: [65.54.61.94]
Authentication-Results: mta1246.mail.sk1.yahoo.com from=msn.com; domainkeys=neutral (no sig); from=msn.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO snt0-omc2-s43.snt0.hotmail.com) (65.54.61.94) by mta1246.mail.sk1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:52:58 -0800
Received: from SNT143-W65 ([65.55.90.73]) by snt0-omc2-s43.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 Dec 2012 11:52:03 -0800
X-EIP: [8WRfF9W/4HCKBPDNLPwgkZDO+b8LtgkB]
X-Originating-Email: [unclaims@msn.com]
Message-ID: <SNT143-W65AD9B7BD38231E89E80F7C7310@phx.gbl>
Return-Path: unclaims@msn.com
Content-Type: multipart/alternative; boundary=”_d77f1b5b-2b70-4219-8474-4777ba3e7f12_”
From: UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com>
Subject: UN-HABITAT PAYMENT RELEASE DETAILS
Date: Tue, 18 Dec 2012 19:52:03 +0000
In-Reply-To: <1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
References: <B353BE0D877992409CB2153398733B81635C6E54@winxbeus26.exchange.xchg>,<1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 18 Dec 2012 19:52:03.0050 (UTC) FILETIME=[2672D4A0:01CDDD59]

65.55.90.73 – 65.54.61.94 –

 
Leave a comment

Posted by on 12/19/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Geraldine Mead”

EMPLOYMENT SCAM – MYSTERY SHOPPER – SECRET SHOPPER – FRAUD

EMAIL: Hello, There is a part time secret Shopping job available for you with a $200 salary Per Assignment pay if interested contact email:mrsneedham@live.com

HEADER:

Return-Path: <gmead@chipublib.org>
X-YahooFilteredBulk: 64.107.3.197
Received-SPF: pass (domain of chipublib.org designates 64.107.3.197 as permitted sender)
X-YMailISG: CpHLBTAWLDtoOrioXVpIJdZ7_UPTN5gg.zIryc6IPeIMVwy5 7.7iWvsHSbZnz35A4YfQXivayLPXn58O5eRc7Rz0gwIBorMUSbTKEneTqcmQ 66WF.gXOqlhN.g.QXkwo8_9rooXUJs08ZWwEEKryEd43d2lUOr7LfCR_SiEt .CAqpNhjUuHwjp.cD.TYb4xldFWnl_FsYyX7ae7b.lDYsCNfqv.XVQJkmWVi goUAG0V4J2ijRULQ_vF43Q6BU.RC_Dtt_yE8.WLN92txaKDDRkQp7uZFr7Ih X8QVOgWtUvPC1XGcvFcV5ZwnHgrb2F14LS6xtVCsMxmS4r89BWdRp2VA3toa f0xcuYk.j7zkuwRmVjktCCI.osqDCzmnafiunuywWkHYXGft9LZwRi1mNmpn L_CfxBsjW6hzpIpxp_G.5uTJrEtC.Eo.lHRb0q_6njfS0owtpz1PXAUQOslv s6nLAqs9mdamEEtEH1X8hAN4QcMWZHgCVXoKZRWkjYCnaR0SfB9NlFyEmo66 R1IKrme4beUhDCgTY8EPbxFGkhxgQul3PVhHyfb6fSGLBjxaPGQkaAW1bhtG OeNM1YbgT9OLDC1L7l94g7bf8CZu4w8_9SWEs7BadOuv0kZvGwYjaIVk1l8t GK8uNOzEPiEnorvUzn795KbSrcvfemWCcW0L4XnpfEGc7O8EDT5CG_Tggb2D J9K_9PG_thK.c4bOYgYasbM16r6XqT_k_I7htvBXGufLLYYktSJmpCrha5qY S_0ajgtvp.JIpyES70sxCwbGCGIU0BD5LDFuAmS659Vs21QuYu2E0ZF1gnzs WXRx5jtQByD_Nz6xr8DIWRcCF321e5n73R_kuXcev3xHn6lP7Ut09eNM54Db 4H2ElgE_0EtzWovfl83eU4BjTu4SU6PLsZjLi_hgTrVV2IIgp3Gqc17G1Ua. j7UeISWiY6tZpmDwIzkQClo7JDYMmxI35c4R8wlNoxJr6KGzCMDSE7vE2GC3 OTZCOwaV29hkYQAWys1V8jkxoGkZ5ZWEgDDJmFl295te3xUYs3K4uQma5ROE bFprfUxaBBRERqcSgbrvAHoKtgE5GnrkW8TD_.Bhnxd3UkM7ZuaTZ3JITqcM MsFY4cDSkaU49tMRsRv9SfhWFoK7tz7ozvVCDOYPgHV6Es78fVzhdmRd3EQQ rwSRpdqv.TjeLYq1A0l_TF0CXRRNVOeslm0A05qL7W0Db.uWfYIAqIBo57IP c7IO7xPLn.Vx_BP.pVQLX3ysQ4crsPb6H1takaFslL7EO6kscylvlkksX4.y lx2zWQ–
X-Originating-IP: [64.107.3.197]
Authentication-Results: mta1049.mail.gq1.yahoo.com from=chipublib.org; domainkeys=neutral (no sig); from=chipublib.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO Lorica5.chipublib.org) (64.107.3.197) by mta1049.mail.gq1.yahoo.com with SMTP; Thu, 18 Oct 2012 05:27:48 -0700
Received: from LEGATUS5.chipublib.org ([fe80::fc3e:bbbd:f296:732e]) by Gerulus.chipublib.org ([fe80::c93b:83ab:2900:a856%11]) with mapi id 14.02.0318.004; Wed, 17 Oct 2012 14:50:39 -0500
From: Geraldine Mead <gmead@chipublib.org>
REPLY-TO: “info@notice.com” <info@notice.com>
Thread-Index: Ac2soK5auidISj8cQgqi+vjL9J/VBA==
Date: Wed, 17 Oct 2012 19:50:38 +0000
Message-ID: <D70D3E6F95B6504C995A8296FD6C94520553054A@Legatus5.chipublib.org>
x-originating-ip: [172.19.3.235]

Geraldine Mead gmead@chipublib.org – info@notice.com – mrsneedham@live.com – gmead@chipublib.org 172.19.3.235 – 64.107.3.197 – 64.107.3.197

Below information provided by Zee, an online-user who received emails by the same scammer as above.

Email #1 offering £3.8 million

our mail is well received coupled with your contact details on where your consignment box will be delivered,Instruction has been placed to deliver your consignment box worth of £3.8 million once you comply with our instruction by choosing one of the delivery option below, Be inform that once the delivery charges is being received from you our International diplomat will proceed to your destination address to hand over your consignment box to you.

Email #3

FedEx Courier service office, Cotonou, Republicdu Benin
Contact CourierFEDEX INTERNATIONAL SARLLOT 20/22 HOSPITAL ROUTE COTONOU BENINREPUBLIQUE
TELL: +229 6644 7691
Email: fedex_d@y7mail.com
Motto: Honest & safty.

Your consignment box is now ready to be delivered to you and all you have to do now is to wait for the arrival of the diplomatic Agent and once he gets to your home address then he will help you to contact the money exchangers as to convert the money to dollars.

The delay we have here now is the delivery fee and once you remit it I promise not to fail you in this delivery. All you need to do is just send the fee so that the Agent wills takeoff to complete the delivery. Fail not to choose one option from those options given

Listen once he comes to you, take him to the bank you operate with so that he will present all the documents that proves the legality of the money to the bank for them to convert it and put the money in your account without any question.

Thanks

Mr. Maxwell Shargan

 
2 Comments

Posted by on 12/15/2012 in Employment (Job) Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , ,

“FedEx Online®”

NIGERIAN SCAM – 419 – FRAUD

EMAIL: We have been waiting for you to contact us for your confirm package that
is registered with us for shipping to your residential location. We had
thought that your sender gave you our contact details. It may interest you
to know that a letter is also added to your package. We understand that
the content of your package itself is a Bank Draft. The package is
registered with us for mailing by your colleague, and your colleague
explained that he is from the U.S.A but he is currently in Africa for a
three (3) months Surveying Project as he works with a consultant firm in
Nigeria, We are sending you this email because your package is been
registered on a Special Order. For your information, the VAT & Shipping
Charges as well as Insurance fees have been paid by your colleague before
your package was registered. Note that the payment that is made on the
Insurance, Premium & Clearance Certificates, are to certify that the Bank
Draft is not a Drug Affiliated Fund (DAF) neither is it funds to sponsor
Terrorism in your country. This will help you avoid any form of query from
the Monetary Authority of your country. However, you will only have to pay
a sum of $125 USD to the FedEx Delivery Department being full payment for
the Security Keeping Fee of the FedEx Company as stated in our privacy
terms & condition page. Please note that packages are not shipped nor
delivered on Saturdays, Sundays and on holidays. If your order has been
placed on any of these days, then it may be shipped the following business
day.

Kindly complete the below form and send it to the FedEx Online team. This
is mandatory to reconfirm your Postal address and telephone numbers.

1: FULL NAMES:
2: TELEPHONE:
3: POSTAL ADDRESS:
4: COUNTRY/STATE:

Contact Us between:

Mondays-Fridays: 9:00am – 9:00pm EST
Saturdays: 10:00am – 5:00pm EST
Sundays: 10:00am – 4:00pm EST

Have a great day!

Mr. Thompson Williams.
Direct Tel: +2347033356828
fedexonline_01@yahoo.com.hk

FedEx Online®
©Copy Right Reserved 1994-2012.

HEADER:

Return-Path: <karuiz@fices.unsl.edu.ar>
X-YahooFilteredBulk: 200.41.60.169
Received-SPF: none (domain of fices.unsl.edu.ar does not designate permitted sender hosts)
X-YMailISG: o5TE0VcWLDs6A2iGWRrKiXjvpJ9iJzbVh0d6tg62Wj0icTj9 vmZMCQOukMdUDCGoZuIRp9z0IxNUHMgxvIvYYj2aIPbsDGNdoASLbiisEdUj QBEi1ddHF1qDGdoXfPO5fGq3r96t6.3EMAlu.gZYrqage8higRm6BtMly.rw mIfRU6DCgMO6xe2wenEds3y7f6jkHz8PujZvzVXG06KZXqLfUgswmKyLgCBr XoMranvoL1UpF2zrp9IkEggsDk.stcAvIzVsHemNO52EoccEi9gmti7.KoIW FADXVh5rt92uodAMmY0yUyx5SH8xuTnS8HVA1jqbABSY05OsZuiqD2tnbAyL bLlh4CNm20SRui2X4Xy8KYvHstQSJ2JED57ifWlUyjgIAc0kmiT8UPezvxUv IWwuGwuz0cdnaBz9yWtkze4VsD7mfNV5e55TkF1PnlOQV80xSuZBMTspTRHI Rt3llF72gAFNpNhgBjq1mr36YDryiv6cVF80QRdJY_AvV0JqeMTxkYepk7Zo ZibOOHy5tUxHe1RaLqqXs0WImOyiFBDXjq7mpvYjAYsdHOQOyqNLUN6Hg6u1 tVFo3zVplBVnDXYMSRMyggTOWeOwUWkEw0lYPrWCvkmgmSLj_PXFULib.MPx K7S5XbZpInbFirVmMyQMMjCReCffKzB5eKrZIIbECa1FeVd9PHa6ZIj_LsD0 Yq1pZsf06cF3tpdiRlgAzGrJolauz8y8xqW1iCEc8cvOJudahvuRDsb09YaP DEdo6Nd8twXlDmXqNqVY77QtOAFP6Z6QZzgxq5yu9O6Mv1mI4NhapzzH1k3. afEn6fF4JN4HxcuOEp2Rr_U3ikODeO8VSsJ.qEVvjRitKUHx_V6pncw6HkWN tB7_Lr2JJDj37KsTC9ntsBwAVvF26zHppnpw5jw8jYccPfUnUtzPoWlp6Bi9 o6ZrjPB.DXes_i1kpLdprNB8ehDnWXVLwqQqH31W4qYFuFnyZuj3rhLaUUx3 3J3Vqm2tYLv7DmSdzbfkolSriSZ4yVm_POZLOrsbax7kfm6oXgbPLD2cKab3 ObsRlQiaLIEsfxk7nsR8nxE4NzateWWVNkdKO1n40_7N80WGh_yoBa692ABI HHJO2MTarJriQnZz7soxNKn8AuVrxZVZRo_ebnck6pA4Rfh_0R1sUQIjroJI Pw6gJD2qGOTgx1edsoeYVA6oBf_5ab34B9EC0w80NN8JA8nOVBzVJMhtm.8z 6LOwSdTnFg0X3pOkrEr51x.Gto.BuQNSGp6tYNIzckUKiL24O3dxUNaf4_gX k28hY3hB2zgdLlorQVCWrA5.YESR7.ZspdMBR0exRen9wmIK48IOaFt5H.DR dA–
X-Originating-IP: [200.41.60.169]
Authentication-Results: mta1183.mail.mud.yahoo.com from=fices.unsl.edu.ar; domainkeys=neutral (no sig); from=fices.unsl.edu.ar; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO scooby.fices.unsl.edu.ar) (200.41.60.169) by mta1183.mail.mud.yahoo.com with SMTP; Tue, 27 Nov 2012 02:01:25 -0800
Received: (qmail 24449 invoked by uid 33); 26 Nov 2012 15:51:22 -0300
Cc: recipient list not shown: ;
Received: from 41.71.190.77 (SquirrelMail authenticated user karuiz) by correo.fices.unsl.edu.ar with HTTP; Mon, 26 Nov 2012 15:51:22 -0300 (ARGSL-ST)
Message-ID: <2322.41.71.190.77.1353955882.squirrel@correo.fices.unsl.edu.ar>
Date: Mon, 26 Nov 2012 15:51:22 -0300 (ARGSL-ST)
Subject:
From:
FedEx =?iso-8859-1?Q?Online=AE?= <karuiz@fices.unsl.edu.ar>
Reply-To: fedexonline_01@yahoo.com.hk
User-Agent: SquirrelMail/1.4.9a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Content-Length: 2014

41.71.190.77+ << 2347033356828 << FedEx Online®  << karuiz@fices.unsl.edu.ar << fedexonline_01@yahoo.com.hk <<
A scammer(s) under the email-address <mcmunoz@fices.unsl.eu.ar> and graniteloans1010@xnmsn.com sent scam mail out under the same Originating-IP as the above sender. The receiving IP’s location was Nigeria (just like the above senders receiving IP) as well. 200.41.60.169 and 41.203.64.132

Other spam/scam sent under the same IP address are:

 “Sampaio” <SharofSampaio@acupunctureinfo.net>
Subjectnone/blank
From: “Lynnette Grover” <AmparoloreleiVick@centraloregon
Subject: Enlarge At Home Today
From: postmaster@sagemuller.com.ar
Subject: Notificaci=?unicode-1-1-utf-7?Q?+APM-n de es
From: Sewell <inwglae@bluegrassjunction.com>
Subject: Software discounts
From: Pill <lrshipley@instuttgart.de>
Subject: When you need it
From: <caesargq6@clickfoc.us>
Subject: More games, more chances, bigger jackpots 1500 eur
From: <limitlessi2@pip.com.au>
Subject: Best casino games 1500 euro bonus!
From: <politicizingwwk86@fiemg.com.br>
Subject: Best casino games 1500 euro bonus!
From: <misspends@biolconseils.ch>
Subject: Biggest casino online 1500 euro bonus!
From: <thule107@buhrmann.com>
Subject: Biggest casino online 1500 euro bonus!
From: <venousuu@pacunion.com>
Subject: Euro casino online 1500 euro bonus!
From: Валентин ��
Subject: мы тoльko делaеm рekлaмy
From: До��на Павл��ва
Subject: Прoдaжa бaзы в Кoлoмнe. Цeнa
From: Артемий В��но��ра��ов
Subject: КАЧЕСТВЕНН
From: <mainmastsu20@cochamber.com>
Subject: Best erect pills
From: <tunnelingh@mc2school.org>
Subject: Best erect pills
From: <stileskp1161@barronheating.com>
Subject: Get some penis pills
From: <loftwp@blomnet.com>
Subject: Get some penis pills
From: <josiea8@alumni.insead.edu>
Subject: Find pills for cheap prices
From: “Sarahi LAMBERT” <MaciPetet@online.no>
Subject: Re: 62735418449971656

Some previous names and email-addresses under the IP 41.203.64.132 – Location: Nigeria

5-Jul-12 11:36 41.203.64.132 mcoxman gsterling123@gmail.com Nigeria
22-Jun-12 21:56 41.203.64.132 Mike001 phonesmartltd8@gmail.com Nigeria Evidence
17-May-12 03:08 41.203.64.132 pemmy pemmy004@yahoo.com Nigeria
10-May-12 16:57 41.203.64.132 kingcxt cxtblade2@hotmail.co.uk Nigeria
10-May-12 16:53 41.203.64.132 king cxtblade2@hotmail.co.uk Nigeria
5-May-12 03:52 41.203.64.132 ohison ohiluckyson@yahoo.com Nigeria
2-May-12 16:41 41.203.64.132 Frank Richards frankimobiletech98orders@gmail.com Nigeria
23-Apr-12 08:07 41.203.64.132 infotech shecool174@yahoo.com

FYI, the REAL FedEX doesn’t sign up with free Yahoo email-addresses. They have their own domain. And they don’t send out email’s like the one above. Only scammers get into irrelevant details.

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: