RSS

Tag Archives: Marika White

“YAHOO MSN LOTTERY AWARD” yamsnltry@gmail.com

WARNING – Yahoo & MSN Lottery Scam

UPDATE: Same scammer, different scam — YAHOO MSN LOTTERY SCAM is also under Mrs Marika White <> web.office.76835@verizon.net <> mwlc@uneta.org — LOAN SCAM OFFER

Name & Email Address:  YAHOO MSN LOTTERY AWARD <> web.offfice_297938@verizon.net <> yamsnltry@gmail.com <>
Email: VIEW ATTACHMENT FILL ON HOW TO CLAIM YOUR WINNING PRICE. (I didn’t post the attached document)
HEADER:
Return-Path: <web.offfice_297938@verizon.net>
X-YahooFilteredBulk: 98.139.91.211
Received-SPF: neutral (98.139.91.211 is neither permitted nor denied by domain of verizon.net)
X-YMailISG: Zsyr_wQWLDuEOOR1NaKyY_oBKZ37LKhQ8E2oQYEySigknPqK k9D6cpNLJZG_BpWUYUrJK_13IbO6F2cwu0NdZUgFHsfdlBF2C_dY2LzlOFZm 1JHjYm2nt8r1TfUBQnHfb8I9AUlc_TORp9W.HgQYitOkE2hqUsGDkfrCuMDK DxM3_kxC1G0y9YuwlQ88LYK2N1cmfqnh6DyJr_rjxthFVpfPINYFlTZ9Gfuc ADYFdazto8WrGC8i9vrIWN9WZfWDwFONq5hJIJIIhqbaW8MfJoWeK2JIvkDP M1CYc0eevzZ_Adx1MDBBNelRnSr.vJSmUOwvJ6zQoWRlo4NgzOgFdBx8umEv jTO89nvzJD37UFWarpT59cdImqjiqLI0TB1E45jD15WCEX64ZB1Kln8hiaU4 .CCbyQpy7Ejsn7.W4n2lwvvlczK_R5o_vXJi3oCILudIaYnmwNt9EJ9DJmEZ mBMzXWFKyx9lH2nydX65fY_Q.JtjwJNlF4x2TjQlpMPTfrdKqwhWG_Klh3fR 3n63BOLG9BL8BQ.nLhlc1JvTvE22i4sUX9xyZKmLBFN8AZHjRfoLWiMkj2Xs sLXbSKZXrRdFzqI2_n0iCZVNHY6fDzOdBFg6QR8VysmkWs4dB4wAIeQ69Rmh Af72L8BXmXvs8.HrRPOsQnF8u524lck_LJJRpcmkMuAO54uGy2pwm6caB9FS sKQZOWwp_U8QkDL8N98rJG7xaMUkN1R64dRNvetL6mzCosxKo2FzICda_wHA LHsgGzNHEJ2sNFenGGjuJbiytfFEMpBH3yJUhO1vVKsdm7z60MbhrJRySNOM XOdXnWKdvCDWOQR0HSaBsIRIyxvGvenRMSXWDT4LasvnebD1tBJPseZsrBsZ YHg7hxAgbAuOHrFh.mgMe4rdRKr2xPdD3YGkatTu8t57eiZTMB8W63zW9SpF PyHX6f_tzIye0e8_7v91nVqSdqtWSJxNXsWw0zjqbU5A27.pbD_jLO3C7BmN cTDixi3lrIhNF.6uxxmXfrMY0iJDLZFCpszrUyaLkj2J_gbXiJ5A4APr0u6H jN90S41j9NjeKltQgIesZccd8ai38FkuFPPSgVQg7gAKeTJ8.HhXqnyNmKag do1r6x.wQWJvpjyX1cERpQiFWYG1ll52U8vm_s9sL1QxfzpknziQ0ovd3EFy tn10R8UwjtbP2uQW30npI62WZ1n.THsyrN7bAUHzDprK4z6cagfARVXtLyb0 0PCwWTmXMmOpJF.REjy.0wacWzDKexj8Xyk_a5lmm1VsUHBR7W3nsMvGsKVr cXgYKVt3
X-Originating-IP: [98.139.91.211]
Authentication-Results: mta1233.mail.sk1.yahoo.com from=verizon.net; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm16-vm1.bullet.mail.sp2.yahoo.com) (98.139.91.211) by mta1233.mail.sk1.yahoo.com with SMTP; Thu, 01 Nov 2012 09:43:22 -0700
Received: from [72.30.22.77] by nm16.bullet.mail.sp2.yahoo.com with NNFMP; 01 Nov 2012 16:43:19 -0000
Received: from [98.139.44.72] by tm11.bullet.mail.sp2.yahoo.com with NNFMP; 01 Nov 2012 16:43:19 -0000
Received: from [127.0.0.1] by omp1009.access.mail.sp2.yahoo.com with NNFMP; 01 Nov 2012 16:43:19 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 544878.38546.bm@omp1009.access.mail.sp2.yahoo.com
Received: (qmail 38451 invoked by uid 60001); 1 Nov 2012 16:43:18 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351788198; bh=+BQMkEUCkDI2VtC72aG597OihJthi8rb/rYyQFpeEQg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=aNHRB8WdCQEwnQg70kLRCvCEUFE+uHv8IJac3i7Dk8S2EgUmO+DBnGU+YRcgpwpX9oh4Pvxd4VrXxjcu838HWEjbI+sEy1kl/e6p+1fJdpav3oqdBwpxR7InNnGP7+hSWL7I1I4P0bSC6LZybpaVqwkOr1DbuhBSJ5XCTIAgfCs=
X-YMail-OSG: 9GmeWBYVM1m_z1iUg7uZUlUSFiIeKFpvpN8AJCtmVieCHI2 cRuIdKT2YMYQZMDD9xbq4TFvWF3tJ4NHMAEiKveJnqIeEKkxxE9_0pR_MJlt aKNENjj12NPTRtBewD9cSPqW0bYw8JunmrgvPpiQmGvp4D9gLMtAWHLy0uKC DmN9_B77Yj0w0E1dfN.gWVUc6KZM0NRqqfdxrMQXidqH__p1bdXcjmRsG36T I4BF68LKdh.kJP1BnQThneGDj33t8kfPbES0EaVGUzKdBG_7O9AgQJ86VceJ RMGNiXwJ.LXdTcogyxq5QHA3663yCoqxlHZDIup2aJWpAurwfyp.Fvs5UpJ8 0Xztz9spbZJsk2fd.H6tkCR1T0EdP8zrUb7mZ2EIv9awZAPEETGIzorem9Vf XAmAXiAV5gprc5OJ3hN9BecbpInTiwr.lyB1Ag71B9Zutr5roGfRivZ6hZMq sVdtlmiPfdqX1OiFr7aNWocK2oa20ZPBl0tdv5nIFlm60c03bBHbt_GmsKf8 exVl4ZdMtLmPbYfe_DnzZ2HDAf5LhuMEoMHZ51f05
Received: from [72.64.146.136] by web84506.mail.ne1.yahoo.com via HTTP; Thu, 01 Nov 2012 09:43:18 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1351788198.35520.YahooMailClassic@web84506.mail.ne1.yahoo.com>
Date: Thu, 1 Nov 2012 09:43:18 -0700 (PDT)
From:
YAHOO MSN LOTTERY AWARD web.offfice_297938@verizon.net
Reply-To: yamsnltry@gmail.com
Subject: Fw: YAHOO MSN AWARD LOTTERY PROMO SEPTEMBER 2012 DRAWN

98.138.90.254 ← Project Honey Pot has detected malicious behavior from this IP address. This address has also been reported by multiple online users and websites. Nigerian 419 spam activity being sent from this IP

OTHER SCAMMERS SENDING FROM THIS IP: 98.138.91.174
From: Xmas Loan Offer at 3% <web.office.nextlin@att.net>
Subject: none/blank
From: Yahoo Msn Award <web.office_689374@verizon.net>
Subject: none/blank
From: “Frank Jimmy Loans Co”  web.office.003-10@rogers.
Subject: none/blank
From: Cons <00o11constance@att.net>
Subject: hi
From: John Vidyapin <JohnVidyapin25@rocketmail.com>
Subject: Re:
From: “Lt. General Kenny”<sssssgfee@hotmail.com>
Subject: URGENT REPLY
From: Kafando Idriss <kafandoidriss@gmail.com>
Subject: VERY URGENT CALL FOR MORE INFORMATION +226 75 44 8
From: “Ukos” <stolze016@yahoo.dk>
Subject: Gvzdjos Hzcgkotx FnquyBycfjosw Wjnr JruycgPtxbfjn
From: 李���姐
Subject: =?gb2312?B?xNDFriDD++VsIc/Iv7TYmyAg1Nm4tuVYIWd1Y2N=?
From: Victoria mandi <victoria01mandi@yahoo.com>
Subject: Hallo mijn liefste
From: zvgcdby <zengchuanxedm@yahoo.cn>
Subject: 2011年11月28日17时47分53
From: “a_just_my_world@yahoo.com” <a_just_my_world@yahoo
Subject: Search for Anyone’s Arrest Record
From: wggi <hanchoujwxv@yahoo.cn>
Subject: |散頭|辦
From: “Mrs. Sharon Crawford” <sharoncrwfrd1191@skymail.mn
Subject: Scam Victim Compensation Alert, Open Attachment To
From: Sgt JASON CAMPBELL <web.jasoncam104444@att.net>
Subject: Urgent Mail From Sgt Jason Campbell.
From: mercyjohnson <lindabenbella@yahoo.com>
Subject: Good day my Love
From: “bittapain@yahoo.com” <bittapain@yahoo.com>
Subject: FWD: You have a secret admirer – GUESS WHO
From:  torn_016@yahoo.com <torn_016@yahoo.com>
Subject: FW: Money
From: ahmad2joachimugkt <ahmad2joachimugkt@yahoo.com>
Subject: FW:GreatLoveForEveryMan! did at Court though she w
From: ionsas chrograde <chrogradeille757@yahoo.com>
Subject: genevievebuehl, Verifizierte Online Swissapotheke
From: glory adams <weboo444@att.net>
Subject: Ol
From: “Rev.John Ibe” <revibejohn1@live.com>
Subject: Attention: Honorable Beneficiary
From: Idris <mridrislukman@gmail.com>
Subject: BANK TRANSFER VIEW ATTACHMENT FOR DETAILS

Associated SPAM IPs
89.122.224.52 | HSD
209.160.72.139 | HS
207.150.196.50 | HS
208.66.195.3 | H
207.150.194.146 | HS
173.45.70.178 | HSD
208.53.147.89 | H
24.64.199.108 | HS
115.124.113.132 | HS
66.199.236.50 | H
74.86.209.74 | H
208.101.44.3 | H
74.124.192.3 | H
216.40.220.34 | H
207.150.196.55 | HS
115.124.113.133 | HS
173.45.74.234 | HS
221.218.114.138 | HS
70.85.113.242 | H
76.64.126.197 | H
58.248.29.247 | H
58.248.29.217 | H
64.231.136.67 | H
74.12.60.71 | H
117.205.85.130 | H
91.105.35.138 | H
75.125.47.162 | HSDW
41.82.95.220 | HS
207.150.196.48 | HS

 
1 Comment

Posted by on 11/14/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , ,

“Mrs Marika White Loan Company” mwlc@uneta.org

WARNING: Loan Offer Scam – ”Loan Company” – Nigerian 419 Scammer

UPDATE: Same scammer, different scam — ”MARIKA WHITE” IS ALSO SCAMMING UNDER  YAHOO MSN LOTTERY AWARD  <> web.offfice_297938@verizon.net <> yamsnltry@gmail.com

Name/Email-Address: Mrs Marika White <> web.office.76835@verizon.net <> mwlc@uneta.org
Subject: Loan Company

Email: DO YOU NEED A LOAN TO PAY OFF YOUR BILLs OR START UP A BUSINESS?

HEADER:

Return-Path: <web.office.76835@verizon.net>
X-YahooFilteredBulk: 98.138.90.254
Received-SPF: neutral (98.138.90.254 is neither permitted nor denied by domain of verizon.net)
X-YMailISG: 1rccvcMWLDvwwkDPi1wOr05Wj4gQviOJDGKA.1i73_OolCyJ AIIlRo3P0Ksj.ASRtNNoeGsPA3ng79BJC4KSPPY2cKJmtSiyaO9p_2Gl6D9p KObaIr3h1rSJqZJtUWYKiUblIXp2C_AVI626ToDSMv07dQ_gJRa9_1mGJyzE 7r40FDbtvz_yB9A9.NHHDeM2iKxRVY4nua_X5Ed75fTZKPbtnTihqFFIsYzF ujLU9y8Y18H5cK7A8W6CQ7JrpCZL.zKbq_kNlj8HAhBv1jH5BnVA2ly1ebuI _9Ea7VizY_wANAhb3s2.6iifKVVVAO9rNPIsWHlTMvE6SHb8QJ6ulc674OXT tt37ekR0jxkNBXR0jgJdcYUs_aGyNP479WSp4zXCs7Ze.J2O_En0MQz_jgGj x5YLcacY3jehFs4C_MrSGEVAQOdDqp6L4zrtUtka_EJpyIT7eGwy5Sdr8cmG I_DgYc8vHfyvc9E_rkYu3JF35jAmqLU9cXx6wCO6uj37_TrU7u8Y9QZBL2O0 IT_06WFjLfOpT1Upk3uY4gIb9wcfw2QIQlDrpPnRZaLeg5D_P.fZdy9ZiUWG NAthLPa2dEX2t8jrBH1oAE2YXAKWNU3pNKD_7SiifEzT84h5Elwq2OHWRuJP IDbHLNrzmEk1qUNnYWEIF9rSxF1ghHHskstylaX8FXxRd7q7Nh7HRQAZZeEB HqSwPna3HbK7lluYsrzPEQXazlxcHdgklhWhFUE6m4.CkHrM1gErfL3aTM48 AunpFYoHEUut1CsqaK8G6yTEcKTxy.R0dG8AEmJ3rF1mJl2juH_MEOdliZ2U kWtVRS13J12.Gjfsw0.K_.mQE5Ns1SPY4XsqbFvoM54Zu9rZXWRdgLW0R.Jd BYdh.pFOiRY3Q1UigZapTc3x7asJRS767DUqSsLYRr_tP1rW5uqBttzHWYvC b7WRvJxQPEse4ssUVrxwkpMpe5Thz.YG5od_fkwHDZPfZNUQvx1lq9n9DoMC ON6XbLf7tz.kYkTT2amkr5TgG.7H1FYiff4cJ52Y_QhrlbmHPMpIzLH5v00h DQ2XofIrgBkFMmjpPSM4kLz.tIQadfYhtUtF1dRkRik2t8eFG48Pt2uurmng ciYCQZ2QbXFwxDJm7s_jgCuaaDphJcK8zBr1RtpVM2RtKz93LK0ffFUZl9M7 o9lnOxNgN71fbX6fF1ZyL7RaXQrLD_ahUhjSooa3ufwV7AGDjcmE5vnPzt0T 1hjFF1VEvTEsxPHJRroE3s4Ol.843VnRYEMul7UcKBKNDw–
X-Originating-IP: [98.138.90.254]
Authentication-Results: mta1319.mail.bf1.yahoo.com from=verizon.net; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15-vm1.bullet.mail.ne1.yahoo.com) (98.138.90.254) by mta1319.mail.bf1.yahoo.com with SMTP; Mon, 29 Oct 2012 01:57:01 -0700
Received: from [98.138.226.178] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
Received: from [66.94.237.101] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
Received: from [127.0.0.1] by omp1006.access.mail.mud.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 30294.68904.bm@omp1006.access.mail.mud.yahoo.com
Received: (qmail 89378 invoked by uid 60001); 29 Oct 2012 08:56:57 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351501017; bh=e7TPDsqolxdOXd+HQzrG2hNH4MUYxcgDXnSPz6Y8MYY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=S6/hrpGO0ydEf4hSQ7WjaAmQInuuCAKfvMSsvZ0XS0Ov4TRWjzWGBNXFyW77+X+V8/YyNSzLI21RcqyPrLYT8EnW8BEnqJ8WpAUNvumsMDSbo5i30f/2XLT5qHvIvcR23wmuVHVjVNwTMsysjaZ2E5frgnnMP06OYrvqxNptM0o=
X-YMail-OSG: xMBSpZUVM1kIRXuAjHgZbmAaovBVSk5eAFjFEevdiEknuMn uDEOw.0Co.m8vI5PZCw7DsxhJN0JUjUAfUKoR0NBqFZtrCvYJNVDAFkJnZ9r O3l8_IptDedNQleNN7u4GS21Jrt1VXT.7EIuaqBBvfYhmeBKDXsVQE_vJCTr OxQjQGHYGCzKlWPL_X_kkO_XpszI3mErScnhmbs_nIvqSVOegsbBMaeW.VOj UnLfwICoveMAz0JiOGClf4ZsO1t4_kD1ObkEb4L2mblFkgk9CHEebmunRZAK Xcr7_Y5_tNywAxz1tBI3HRe2YTVilPFzXNCReKYcuuMdLy4f6xvBQilPUGP6 HPr1KaxsdqlqsThn988RToeuJPivHlpxBZHhFfrwy_eRjT2VgvXYksHYOLp9 CS0zMN.CLJ8R11gH1ACo2JT6of3FUlzotv8ehcdNLfdu1aiNpfSMIKpa43vT Ynd2tYi7uArwgX_vtXoKO.vJ1x8lBQq8f0yXH.Ke0XesM79uUq5MG7j.8rJ6 ETIunLPAqxYZaDbywbA–
Received: from [72.64.146.136] by web84610.mail.ne1.yahoo.com via HTTP; Mon, 29 Oct 2012 01:56:57 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1351501017.25035.YahooMailClassic@web84610.mail.ne1.yahoo.com>
Date: Mon, 29 Oct 2012 01:56:57 -0700 (PDT)
From:
Mrs Marika White Loan Company <web.office.76835@verizon.net>
Reply-To: mwlc@uneta.org
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1644280220-398030313-1351501017=:25035″
Content-Length: 465
 

Tags: , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: