RSS

Tag Archives: Partnership

David George

SCAM – BUSINESS PROPOSAL PARTNER – FRAUD

12/17/12 – UPDATE: Below the first email and header is another email/header from the same scammer. The second header shows “David George” using different information including different email addresses and IPs

animated scam credit card

EMAIL #1

SUBJECT: View This Attach File And Get Back To Me.
EMAIL: There was an attached file in the email titled “Open Attach”
HEADER:

Return-Path: <dtito4539@gmail.com>
X-YahooFilteredBulk: 98.138.91.101
Received-SPF: neutral (98.138.91.101 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: 7_YIhlkWLDu90wKhHyyxw6zpHyxycgdiAAa4YwuNukVVetoh J_IC5bWWEgUUtuhkKfPFe.tMo1UbGmenMhF03EOzfaw7eIqqmetRMEZ4oGzb VHndlb9o.U94PesgTXj0QFOJCMffAurCH346kPPPTRxPpLhWIvTbXtLQmcLU BJRJ7U.Y2xNjjaxrdUgitDHDq9IqyHsyg4GUmdsg3DViiS7ug05icIpm6zZY 15TpdzMEk.dloUVHX4X5colstMK9o8cj3S6Dy9pG7og_pb6ByLAZIAqEHLpo Qrt.EOlrMjtuxj6DMzYzX6qi7YUmXO6vp_kcU1yMNz_itYP0LPLIngyQJ9NR F9BtNikASLmNJUDU2gyctMSy57nj9hjVmDozpZ4SlaFLigd6460ujdc9AfVi hcf493q5bq_ZcAvKBRSCYoY6H17gmiybGwA1Khd9zAXSHVK8F75gmOwlsEZV IBiRI7_8cwpOzDmLinvmzXZXyhS74F1IGrQL0JL_g_B8yk_DdeAIVgtpmkWT SOyia.1O5nayDgWlpWgkc9xwpbznXoUZvHcnTtjc2XYTLmnJQ8S4hVt0qTTZ crIyoxAQagIeC25yzg0JCFsY59rQIKfAQyzBB_dFL25lOA0qsaMem1h_o9zk ZBPXQLLazUI7iFCdePeIve0r3vADC3LxQNzSlOPqJh0rTb1eB5fupXG2v1Ix xZBev0wEsghKQ9aPi.hlpyfq7HOUj8KFbB08w1Tjncfn0ptfICfi7514.4Fg TSdWVFftXF3MEp7ZEs9kbkHD3vSv2kpBtB2MerhvoZ7YA3ofF7.OWStPDNVB OrPE.u0Q.U0tEEAQ8iTF6050DJCFNZnDYnIILvXWIGEAkunQxqF9kKM_xXI8 3KlZFhO3_00Tk3sekKyuw0XPQg60zPVbwwgTRlRdwn7UvN8kpoULxNaPA_Ld gDblLsidCE_opoBENVrcfvBmbF5_klg.e.4FELw9x92L8QUsYR_vOJp7DL6N XIRfvT6BnyWcmwHQIPhFrTi_ajCRjhKzLrE5_z7dzThVKmD0TVht07F1osXa iHFcLu8f6Uu.hDz8iEGyJ09KaC8RRVoFS8f4nm_MkxSu9bk0k1Lu3fvkNQfx L847swtQsIiC4wlsRCHwYrj6piDtl8GyRQ9uCPivXpH2ifGbXg.e2f71TCaa PIrQGY7xCDbzDq7OYaYggzfEcgPgqPR_7YCNsmbez_LC5eUKq9b13OTQWCzo 50lAe__6EAfKTnwSImZds2a6pw–
X-Originating-IP: [98.138.91.101]
Authentication-Results: mta1209.mail.ac4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm8-vm6.bullet.mail.ne1.yahoo.com) (98.138.91.101) by mta1209.mail.ac4.yahoo.com with SMTP; Mon, 03 Dec 2012 14:34:36 +0000
Received: from [98.138.226.180] by nm8.bullet.mail.ne1.yahoo.com with NNFMP; 03 Dec 2012 14:34:29 -0000
Received: from [66.94.237.109] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 03 Dec 2012 14:34:29 -0000
Received: from [127.0.0.1] by omp1014.access.mail.mud.yahoo.com with NNFMP; 03 Dec 2012 14:34:29 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 280493.47606.bm@omp1014.access.mail.mud.yahoo.com
Received: (qmail 25551 invoked by uid 60001); 3 Dec 2012 14:34:28 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354545268; bh=o0AZy5NFBNZAPup6KgDmVQaETpPB/49bLptSj+IPDic=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=32q637yHtI3YkIIUG0C9gxQUCjXIvqiWJRRigd35qEzsDn9zlFniWa3HMPoBUfjKydfgoK4wuW2mGqPnVVijEQGQCtwPbhawwF8cwcoiHruJB/v+H3KOd5+9A3/t46tBgFI0hvqee/6n9jY3cr4P3JAeAwmfDyQv0qlkeJ/z+/o=
X-YMail-OSG: oYLOaBAVM1nTTiR5riPoVSq50.JwVtNy0eFdRApEKzvilWE UKgXcXt.fJt6NELENVzUePzHgeoyn.jo2uoDWFq1MobkNjWJynQ8rz9gFdE3 3b6Ty2cyiU.Wh5LRVuJclL2GuLEuHeBlPXgbqmxZ94K4wNVfZJKMHaHVLvA5 hCOhKDclOO.Sv5qigihI9Ia4kFYnCQM5ABMh5fyj8fxU8IHc_ba4Gy.fxUn5 Od6ndKsyQeCR_ATVtgZYfQ_BuLBFJHZFbCNu2HiwU7gMRTPYva.qn7F0Q1eD _3yFpW8Fz2g_M5AuyffKQxssk9QhnThpttFJt7OU15ixxdNgL9lMiNZvq5.Z 2vZh_hlZvmgPi1GOY_XIELkH16uG_YOYgSQYmOW8Ai0Jix96FT4x9FFvl0aG gZzkNI1cD4engrONgudP_kyUY.oNSoxqQcheo1_WoO.KMUloBwuab2GXbqBB 3280I_3PrRVaBGGd6onJrDq4AgDhVBX._XtCWGr3RpOEtyTWV6yZqGKc-
Received: from [69.163.96.25] by web5703.biz.mail.ne1.yahoo.com via HTTP; Mon, 03 Dec 2012 06:34:28 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354545268.64346.YahooMailClassic@web5703.biz.mail.ne1.yahoo.com>
Date: Mon, 3 Dec 2012 06:34:28 -0800 (PST)
From: David George <dtito4539@gmail.com>
Reply-To: gdavid484@gmail.com
Subject: View This Attach File And Get Back To Me.

______________________________________________________________________-

EMAIL #2

SUBJECT: PROCEDURE

EMAIL: Dear Partner,

I thank you for showing your interest to assist me in transferring
this money to your overseas account, which i expect you to keep
absolutely confidential at all times in order to avoid eyebrows in the
course of transfer.

May it please you to know that all about the transfer is legal and
bank to bank transfer, vital clearance certificates that authenticates
international remittance of funds shall be secured in the course of
transfer. Which will prove authenticity of our transfer to any country
we wish to transfer the money without any questioning.

In order to proceed, an attorney will be appointed for you here who
will open non resident account for you and act on your behalf in
signing vital transfer documents in the bank. Please provide your
overseas account as listed below in order for me to secure needed
documentation and submit to transferring bank.

BENEFICIARY NAME:

BANK NAME:

ACCOUNT NUMBER:

OCCUPATION:

ROUTING CODE:

AGE AND MARITAL STATUS:

DIRECT MOBILE NUMBER:

As soon as i have above details the process of transfer will commence
immediately. Soon the money is transferred to your overseas account, i
will fly with my wife and three children to start our new life in your
country and for investment purposes.

My kind regards.

Mr David George

HEADER:

Return-Path: <gdavid484@gmail.com>
X-YahooFilteredBulk: 209.85.216.43
Received-SPF: pass (domain of gmail.com designates 209.85.216.43 as permitted sender)
X-YMailISG: Naz6iTcWLDtPafJG3frokkXc3ukEHhTq3qYpgF4eNnaak8._ lMhg6dmlYkLbunyfJ2F_ScLNOHbc.0PforP346SREmeFE8IvdMZBPKTsIGXx CbQDb8lVKkwl.kO43q3gpPWPohkmyy8ID.rGWIMGOWKgYrqKEaO9EgvfFYiZ Qu4GT7I8XH9drvzgQci_ZjQjIFABMS_wDvrLwYlm6pL31xkYfGV4KtQ45Q17 6g6HkfRXCIp4JDr7XnpdtH2Czvj4zj9znDFQ3x6P8SqMrz8x5TqQ_iS7iE0C 9IJK0laSaCncr702mWVPBm9ZII2OBFnib.tYKZd6AIdxEprwdaIN_Alsb5aw uxoIpUVTUmqOLvwmBLWCNCTAzcLpzc6Xa7lDBKyte9RANBJsS.JX1G74pVBe c2jCIR4MVCSaq0ki0Ymx6HnD01j3yBAWdZBr6QIjrl9BmO_YxU0ZpI8KHg8v g4MGA6yZq7RUZnuxbg0BDtYLGxZ8pWu4fSC_FjT6_ozHRaNjrLhjHryfj764 GM0WodRCK.ymMN9l_auWKrOyvg0d1FIjW_ZHST.QiHFdAjai1PRQfdfOkplg cPL.hs.6qugujGYT_9Y3cog2d0Bf.6neEArkKtqTi4DXSEJAaqbIGI6DMfBA 74O1YUYtMNgG6uBS1FhLoQ2Zo4mLCfbfXgzie63M71RjS1BQBX4VQubxWRJ6 QNLNoMVq3Yt9799SxL9fcwO18ShYH_.eJi10eLcNOCIh29StJXS_N1QlThEu QDraPzGmksoQdRhUZUblTH9j7neXT_718NX4pTZ_143xkGaDN6S5U4XjGE_R TahgKTyjL_UYjTwC7Ie0xbAWDVShPe.Eh_fHWUqIC4BEr2k3QLzzLeBIPgIq NzDejCpoF8AmkidTUBQ3zqy5vHDAG_3o8qDzOJSP3O4PEIWSLbd9VxNMF5SP 9DAHxJNQKmm1db9h5VS.ZHSur7394iWoRwpnvc3rv0fgKGdWi7_iC8j2j04U UUfSWS8XnHRp2Ov7OLVRIyY4bD1bGfSc8qBd6lCZ_EveqsWvp8J4QfJ_4qu6 zHBUmHXdb7m3JvsqoP4YBA8bR2XATJ_G4yX7iYX2BDmVs9EDKlFY43timvNb f4QS3R.8ADY1LdCdHLgVa2k2nRYwvAwHKpsJlEIH3hHKc_gWVI.jCc0VyYsb ARtIvjvHW7gexxEknP99axWYdJqBDM8lKBZZMnj_h5pFfs3fWjqsajaFygl1 sX9m.16Q97x71A3RLSMND3Xs1x4cT_4nY.ZbYipkvK2MHXCUC1_TZ4VDoVKV HJe2vrRB60r_osW1Bi5PBvDgV_56kvoYhWpbiDH1Jn5l3Bz1Ok95wI34bsAn lo1dhmFylFc-
X-Originating-IP: [209.85.216.43]
Authentication-Results: mta1359.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-qa0-f43.google.com) (209.85.216.43) by mta1359.mail.bf1.yahoo.com with SMTP; Mon, 17 Dec 2012 06:45:58 -0800
Received: by mail-qa0-f43.google.com with SMTP id cr7so2408219qab.16 for ________ Mon, 17 Dec 2012 06:45:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=2d2+rDEpHVoIcbezyBoHjZjajUgVJN0jJTtW6tVL+8M=; b=c9F0p9ivfWP9MIx23K2tt92FCTeKFDYw/DHZCWSSwamsLNrPItTa9A+/XlZ6H0ninC e/zmvrCMhba/vyLt3wZtRX9O+1Zjl3DpOJNXmLmIaGdr0Bmznfk2OAHMeqYPs8rG5X2M GNTj1lLfg81srKJESlVsvYeR9RegXlcxhHC4pulkwAdQKWf8LbL93dDyMJRlNsXWu0EY 00aqZe4GuS0H0IdEKYeTmiI1DqeBSLcaXXLSl2uueSyb8nWpe6O/k6eoqJx6HfeoISxn myvnAy1y2tyLK8ZoppV8hV7IDGOF5tfNt66/9v13A95R7A8RrYYI9JZwLvXaZraPD5uN mglw==
MIME-Version: 1.0
Received: by 10.229.195.81 with SMTP id eb17mr1446091qcb.93.1355755238484; Mon, 17 Dec 2012 06:40:38 -0800 (PST)
Received: by 10.49.86.10 with HTTP; Mon, 17 Dec 2012 06:40:38 -0800 (PST)
Date: Mon, 17 Dec 2012 16:40:38 +0200
Message-ID: <CAOsNjvqCda1OyXrR7PZPsHz61bqgzO=W=_uOc2NTp8KsQXZGJA@mail.gmail.com>
Subject: PROCEDURE.
From: david george <gdavid484@gmail.com>

david george gdavid484@gmail.com 209.85.216.43

“David George” dtito4539@gmail.com RETURN-PATH: dtito4539@gmail.com REPLY-TO-ADDRESS:  gdavid484@gmail.com

X-YahooFilteredBulk: 98.138.91.101

RECEIVED IP: 69.163.96.25

ASSOCIATED IP: 41.137.20.4

Most recent scammer addresses who’ve sent spam under the same received IP (69.163.96.25) as the above scammer include: 

11-Dec-12 06:42 69.163.96.25 Robcsz14 whywenti@gmail.com
11-Dec-12 06:08 69.163.96.25 barobertoswifta9291 retireasw@gmail.com
11-Dec-12 05:34 69.163.96.25 dfrhihmcn retireasw@gmail.com
11-Dec-12 05:28 69.163.96.25 bbobbyshtolzeay2369 swaytyh7@gmail.com
11-Dec-12 04:18 69.163.96.25 baangelastexxd3595 shiqyxr12t@126.com
11-Dec-12 03:45 69.163.96.25 bbobyshulze7823 pefexafeGat@xe6mxun.mil.pl
11-Dec-12 03:39 69.163.96.25 bajanesstivnov2066 redeassenry@xe6mxun.mil.pl
11-Dec-12 03:27 69.163.96.25 velesyttsa1943 ajlovedoratheexplorer@gmail.com
11-Dec-12 03:18 69.163.96.25 bjanessmaareyy333 lilin206@mailondandan.com
11-Dec-12 03:13 69.163.96.25 pitytop8408 adalia0130@new-purse.com
11-Dec-12 03:13 69.163.96.25 bjanssdarky5157 adalia0130@new-purse.com
11-Dec-12 03:08 69.163.96.25 baannatunior1266 adalia0130@new-purse.com
11-Dec-12 02:59 69.163.96.25 aolautivanovy3790 adalia0130@new-purse.com
11-Dec-12 02:55 69.163.96.25 anatjunior1022 adalia0130@new-purse.com
11-Dec-12 02:53 69.163.96.25 avelesygoglety3513 adalia0130@new-purse.com
11-Dec-12 02:48 69.163.96.25 Irraphfrarelp adalia0130@new-purse.com
11-Dec-12 02:44 69.163.96.25 bobbysulzeay4833 adalia0130@new-purse.com
11-Dec-12 02:39 69.163.96.25 bradadaka6821 adalia0131@new-purse.com
11-Dec-12 00:00 69.163.96.25 brianiup ugugoo100@gmail.com
10-Dec-12 23:55 69.163.96.25 bbbbyshulzeay3925 superpogirl@gmail.com
10-Dec-12 22:26 69.163.96.25 aImmilajenanew29 Immilajenanew2@gmail.com
10-Dec-12 20:30 69.163.96.25 anntaecahvs787 adalia0127@new-purse.com
10-Dec-12 20:01 69.163.96.25 Keycleotherce adalia0127@new-purse.com
10-Dec-12 19:53 69.163.96.25 baanatyandexta8617 adalia0127@new-purse.com
10-Dec-12 19:50 69.163.96.25 gregorasmaarlyay4510 babala752@new-purse.com
10-Dec-12 18:13 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 18:12 69.163.96.25 adizzyclttle8389 prodvizheniesaytovpt@gmail.com
10-Dec-12 18:12 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 18:12 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:57 69.163.96.25 bbbbypetrovy649 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:57 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:48 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:47 69.163.96.25 beveasdark1744 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:45 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:45 69.163.96.25 bangelasunior1313 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:44 69.163.96.25 aaleeytopy3312 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:44 69.163.96.25 bptrickmshtolzea688 prodvizheniesaytovpt@gmail.com
10-Dec-12 17:42 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:34 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:29 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 17:00 69.163.96.25 Babimatty ktgz846@new-purse.com
10-Dec-12 16:50 69.163.96.25 asemCoemyJex67 semCoemyJex2@gmail.com
10-Dec-12 16:45 69.163.96.25 prodvizheniesaytov prodvizheniesaytovpt@gmail.com
10-Dec-12 16:22 69.163.96.25 adaasjnr3096 newoktosanz12@gmail.com lasufuv@weboka.info

For more spammer addresses sent from 69.163.96.25 please click: Stop Forum Scam

SCAM MESSAGES SENT FROM 98.138.91.101
From: Mr George LUis <0000officedesk769@att.net>
Subject: URGENT REPLY NEEDED
From: heesoen_21@yahoo.com
Subject: Curs Engleza fara profesor
From: Microsoft Office <web.microffices01@att.net>
Subject: You have been selected as a potential winner of Mi
From: sefolo <sefoloedward@gmail.com>
Subject: PLEASE VIEW YOUR ATTACHED LETTER AND READ CAREFU
From: popularipehi5@yahoo.com
Subject: Trusa de machiaj profesionala – Reducere 30%
From: popularipehi5@yahoo.com
Subject: Tigaia magica Dry Cooker
From: YAHOO MAIL LOTTERY <webde_0012@hotmail.com>
Subject: Congratulations : Congratulations ; Open An Attach
From: =?iso-8859-1?Q=?=
Subject: ProV – Erectii pana la 72 de ore
From: Popa Maria <sylviu28@yahoo.com>
Subject: Scapa de negi, alunite si oricealt semn al pielii
From: CANADA UK LOTTERY PROMOTION <drjohnpatrickagt5@gma
Subject: Congratulation,[Kindly Open The Attach File
From: “xcvbcfsdfss@yahoo.com” <xcvbcfsdfss@yahoo.com>
Subject: Your Criminal Record may have been updated recentl
From: Popescu Maria <relisword_99@yahoo.com>
Subject: Ochelari de soare Ray-Ban !
From: popescu <andreea16thebest@yahoo.com>
Subject: Ochelari de soare Ray-Ban !
From: “Department of Minerals & Energy, South Africa” <w
Subject: CONTRACT AGREEMENT/ $14.5M
From:
Subject: From: Mrs. Bridget Hills & Francis Hills (Son) OPE
From: YAHOO AWARD PROMOTION <mrsmartins66@gmail.com>
Subject: congratulations,kindly open the attachment
From: FREE LOTTO EMAIL PROMO OFFICE <freelottery03@redif
Subject: Fw: Congratulations!! Please Kindly Read In Good F
From: SJPUB <pjmom1@yahoo.com>
Subject: PUBLISH RESEARCH STUDIES ARTIC
From: James Kunta <jamkzm1@gmail.com>
Subject: KUNTA INVEST.ASSISTANCE
From: “FROM: MUSA AHMED” <ahmdmsa@rediffmail.com>
Subject: URGENT REPLY, PLEASE I NEED HELP!!!
From: MICROSOFT AWARD LOTTERY 2012 <drjohnpatrickglo@gma
Subject: CONGRATULATIONS, {Kindly View The Attach File For
From: Australian International Lottery Program <web90901
Subject: Congratulations Check Your Attachment
From: MSCLARA <msclaraglory2004@gmail.com>
Subject: YOUR EMAIL HAVE WON $1,000,000MUSD
From: MRS GRACE MANDA <gracemanda147@gmail.com>
Subject: I NEED YOUR ASSISTANCE ON THIS TRANSITION

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

“Mr Collins Edward”

WARNING: BUSINESS PARTNER – PROPOSAL – SCAM – FRAUD

NIGERIAN SCAMMER CLAIM’S  TO BE IN BUSINESS AT The NNPC TOWERS IN NIGERIA. YOU’D THINK THEY’D USE THEIR REAL IP INSTEAD OF ONE THAT SAYS WASHINGTON D.C. – THEY’RE TO LAZY TO SWITCH THEIR FAKE IP’S AFTER SENDING DIFFERENT SCAMS TO PEOPLE. THE RECEIVED IP HOWEVER, IS LAGOS, NIGERIA (obviously, that’s where all the cowards who scam live at)

 

EMAIL: FROM: Dr Collins Edward

NNPC Towers, Central
Business District,
Herbert Macaulay Way,
P.M.B. 190, Garki, Abuja.
TEL: (withheld)

Dear Friend,

RE: PARTNERSHIP BUSINESS PROPOSAL

I am the senior accountant with the Nigeria National Petroleum Cooperation
(NNPC ) I am not contacting you on my official capacity.I am emailing you
on my personal capacity for a
business facilitation.

There is a certain amount to be claimed as over-invoiced amount from an
original contract done by a foreign firm.The over-invoiced amount is to the tune of
US$65,500,000,00 million.(sixty five million Five hundred Thousand united states dollars)The claim should be filed in three tranches by a foreign firm.I will guide the foreign firm that will be interested in this claim on how best to file it for easy actualization.This is a personal arrangement between me and some of my colleagues.Some of us are interested in politics and will resign to go into politics full time.Therefore, we need money seriously for this aim.

I want you to be our confidant and partner. If you are interested in working with us to claim
this over-invoiced amount, feel free to contact me immediately so that I will itemize the
procedures.You have a stake in this transaction if concluded and it will be agreed upon before starting the whole transaction. All the terms and conditions will
be discussed and agreed before commencement, possibly, we may arrange to meet face to face for a roundtable talk before proceeding. It is risk-free and foolproof.

Your immediate reply is needed via this email .

Regards

Dr Collins Edward
Senior Accountant

HEADER:

Return-Path: <www.nnpc.ng.org@ws.blancspot.com>
X-YahooFilteredBulk: 75.101.130.49
Received-SPF: none (domain of ws.blancspot.com does not designate permitted sender hosts)
X-YMailISG: MY6nI5sWLDsgKXzuiml5nM2gUrCCajWO7yQdSvWZywbgxDo. Qr4Nh6x8LAC4ShkJW_e1W7xcXsNM5._czJ.RYSlVB1v1J8Vwt8Rp.FHEK6QC dyLa8A_5hlm2B3jxsBlV_9VDSruZkENSEI0p2Uq9zcUUjzJgIQ1M6uxOJLDp 4wys.wFec8k3UrBVt..2ehAnh4wcs7VsCO0_ugDAzNH_5kAsk9slUGXF5fvM tImc7FGqI1STxEI1Eo.pW_5mtZfJajcfu10EDVmvlBb4yKptyx_fP3a72pXG 4OBOLX7UywP4OPkFXaL6F2s42.5pB3jx4cp1qYN5RyMOdFZcGCXtKMQFtHik eqp_HAMjBmLjksn.QAgfeCYIhh57JkAov2M70PaVRNYejCxFJFv.pdzDAhLq BeovMruu4KX1j_w.Ry7Pcs.zkOdvYk.EByTaJ0d.5JHbHySQVy.rx6yo.Ytg I7Y2JCvd68nWlllttkimSU1dYilERQE.hDMHnAIAt5waCeQAOznm8sF.m9kA sGDsYc_Odl0S0D9VYocIhrhCuGckdwjUD3VEPycqjyuihbNthaBdIqGGw81n thkOeHaaV7Hko4qvi1A8JoNKG94E2BOBa1.htkrHwAaQVW5Jyxqgq7TBV0KX OIs6iQjGrUiGpCUh0HTRCEBah4nhwZtbJMmQV0Mhtw8cgxRvC1R_MfHn_45n 8yrpn8AaMx5haAaKisGAHbFLfIp0dq_UJYC4EaWwit50XxrEGQIQ4XrV1IcN GB0MN110Gmm.2Yafc.znhGhJNoqzsqRTYvvx679TWCM.4g8nh0FhdfmhUspJ foa0hPhpsiMNqSFMhV1Y9RjX7iy0FJhylyyRXxJd5fhtoOBYUJF8xnsd8iP3 fCnEh2yKn05sCxlAXMbKTcTAVNjQQ3Cbe2e2BSAZi5iiFYxvwizKOnkIuGeJ 0F14woAWNABf_tIjTnvLYFtqP5ZJirQu50OIC1mliUGz9JGN5pzC2Er7mJ8A TsHxhqY_X_Dw47M1jSXXsb4zUBznHjUKrU1h0_I11Eg22zdzN.PsB8h5Hzuu IeCyLIR3TZ6KHSSX9coD.dax.YaC7U3Ij..ruJOcM3e6Gkc0Tqn.ffXZf19J 0RFeVH7sSN7fSNXYBJr3prmYZyvxYZ6yOIUN3P6oo1_n5ah7GjcLvO_ag8Xc .M8gkaHMQN5ycpAV6hnNTcmhHjWf78ocVT4VsZQllgLmsmjxRuM7hShIWxoO zu5aCzM6YxcLDVKkqQyrLsHGtGjlTvV2N0eN5XRUBAo00NW4qe12oL5sT_5I BtuDwZAA7_ov7TbNNONiHUq5unUDlRpUmC0ywOrXpIUjKwOnkLepHSaiQEtS TICJg5bAKMywB2LXxjTn2HUEnMbeXbrUHIn_XO_CtLPP5q0ror3wLabRbn6r YdFd8incsZpS_zd2rANS.BArmcvGBny7LPjXzxKve66yqRb2aVsy.WGOKUuH DuJ_0AF12hSNLnS3jwBd0JMBccay79_6svmIKqB5lxZjDNjF1KkzHboibhFI sTFOauQtH99_2i6u_NLkHVT44vOkpMMnyUCeGRyOqVZK9Qb7Oe_GeKJ4gAMH Mi8mZsb_UjUE.KbfaNgpifAw2BoexV1TFepdOBSsYwgD10FfHq7MKIS3feHS 5UB4k6VpkXHGowUkTEJ2GWS._Fsh1LMffITs4LZjj3ByNlVkLJYZ_gpIWA.d J.TQ8Jgx0I0p7XLe16OEz34NvUaprgA-
X-Originating-IP: [75.101.130.49]
Authentication-Results: mta1381.mail.mud.yahoo.com from=ws.blancspot.com; domainkeys=neutral (no sig); from=ws.blancspot.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO domU-12-31-39-09-B0-21.compute-1.internal) (75.101.130.49) by mta1381.mail.mud.yahoo.com with SMTP; Tue, 04 Dec 2012 21:02:54 -0800
Received: from domU-12-31-39-09-B0-21.compute-1.internal (localhost [127.0.0.1] (may be forged)) by domU-12-31-39-09-B0-21.compute-1.internal (8.13.8/8.13.8) with ESMTP id qB4E83iI005582; Tue, 4 Dec 2012 09:08:03 -0500
Received: (from apache@localhost) by domU-12-31-39-09-B0-21.compute-1.internal (8.13.8/8.13.8/Submit) id qB4E820j005577; Tue, 4 Dec 2012 09:08:02 -0500
X-Authentication-Warning: domU-12-31-39-09-B0-21.compute-1.internal: apache set sender to http://www.nnpc.ng.org@ws.blancspot.com using -f
Received: from 41.71.176.146 (SquirrelMail authenticated user test) by 75.101.130.49 with HTTP; Tue, 4 Dec 2012 09:08:02 -0500 (EST)
Message-ID: <1290.41.71.176.146.1354630082.squirrel@75.101.130.49>
Date: Tue, 4 Dec 2012 09:08:02 -0500 (EST)
Subject: PARTNERSHIP BUSINESS PROPOSAL
From: “Mr Collins Edward” <www.nnpc.ng.org@ws.blancspot.com>
Reply-To: collins@rocketmail.com

“Mr Collins Edward” <www.nnpc.ng.org@ws.blancspot.com> RETURN-PATH: collins@rocketmail.com

RECEIVED-IP: 41.71.176.146 LOCATION: NIGERIA (SOUTH AFRICA) — X-ORIGINATING-IP: 75.101.130.49 REVERSED DNS: ec2-75-101-130-49.compute-1.amazonaws.com. LOCATION: WASHINGTON D.C. (USA) (Not the fraudsters real address. IP used to mask their real location.)

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“EBNERHARD TROST” e_trost1@yahoo.com

WARNING: NIGERIAN (419) SCAMMER ↔ Beneficiary / Partnership Scam

Name/Email-Address: EBNERHARD TROST <> ebnerhardtrost@grupodycs.com.mx <> e_trost1@yahoo.com

Subject: URGENT PLEASE!

Email: –Attn: Guten Tag Freund,
Obwohl Sie vielleicht besorgt über meine E-Mail, da wir vorher noch nicht treffen, Bin ich Mr. Ebnerhard Trost a Deutsch Bürger und ein Banker mit dem AFG Finance & Private Bank hier in den Vereinigten Königreich. Es ist die Summe von ? 50.000.000,00 Million in meiner Bank, gab es keine nächsten Angehörigen / Empfänger angegebenen Was diese Mittel vor dem Tod meines Mandanten, die niemanden bedeutet, jemals nach vorne kommen, um es ist. Ich habe Sie kontaktiert, weil ich deine aufrichtigen und vertrauensvollen Partnerschaft in der Übertragung des 50.000.000,00 ? Million in Ihrem persönlichen Bankkonto rechtlich zum Wohle der uns beide dringend in dieser neuen Woche mit allen rechtlichen Dokumente, die von meinem Anwalt vorbereitet benötigen. Der Austausch wird ? 25.000.000,00 Millionen für Sie und die anderen ? 25.000.000,00 Million für mich sein. Wenn Sie interessiert sind und es wirklich ernst sind, kontaktieren Sie mich sofort!

Hier ist meine private E-Mail-Adresse: (e_trost1@yahoo.com) und denken Sie daran, es vertraulich behalten.

Grüße
Mr. Ebnerhard Trost.
+44-70-4573-9682 (Büro)
================================
Attn: Good-day friend,

Although you might be apprehensive about my email as we have not meet before, I Am Mr. Ebnerhard Trost a german citizen and a Banker with the AFG Finance & Private  Bank here in the  United Kingdom . There is the sum of ?50,000,000.00 Million in my Bank which there were no next of kin/beneficiaries stated Concerning these funds  before the death of my client which means no one would ever come forward to claim it. I have contacted you because I need your sincere and faithful partnership in the  transfer of the ?50,000,000.00 Million into your personal bank account legally for the benefit of both of us urgently within this new week with all legal documents  prepared by my lawyer. The sharing will be ?25,000,000.00 Million for you and the other ?25,000,000.00 Million for me. If you are interested and really serious contact  me immediately!

Here is my private email address: (e_trost1@yahoo.com) and remember to keep it confidential.

Regards
Mr. Ebnerhard Trost.
+44-70-4573-9682 (office)

If you believe this scammer has also contacted you under another name/email address then please post the information in the comment section (name, email address, email, header/ip, etc.) Thank you!

Read the rest of this entry »

 
Leave a comment

Posted by on 11/07/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

“Eduard Castaño” (AKA) Wang Chien (AKA) Christman Debra

NIGERIAN SCAMMER SENDING BUSINESS PROPOSAL AND LOTTERY SCAM EMAILS

anti_scam

01/26/13 UPDATE – Eduard Castano also known as Wang Chien has sent me a new business proposal offer under new email_addresses and  IP_addresses — (I’ll post the email’s from newest to oldest and will add this scammers header details under each email.)

Partnership with You Tuesday, January 15, 2013 1:11 PM
From: Christman Debra dchristman@mosineeschools.org

I have an urgent business deal worth of ******* to discuss with
you, contact me for more details for your interest at
wangchien2004@yahoo.com.hk
Thanks
Wang Chien

HEADER DETAILS:

Return-Path: <dchristman@mosineeschools.org>
X-YahooFilteredBulk: 209.62.173.211
Received-SPF: pass (domain of mosineeschools.org designates 209.62.173.211 as permitted sender)
X-YMailISG: i0VLM7kWLDsLfLCywSaSSYx.tSpTBcjTXuGpJZV.D8GRtK4G hbwwRCRgZQgk_cw85gry83cgekJVMrrg3pbltquix.8MA3xnlWVESreBORPy vcSKT.7YBAacVrEqZ.AdIZRUTeOavSVzclLQVSZ6NoRcl04EzUF_IvPbMXa1 yzAJfw8_2dmSgDo_nbe03cbOzpbeo3ufws6Oz8XaNvF2fzou4byjAFwnt0pb u4tTJeAqSAO7hg0ABqNewmtkT4glFaA4HVALqkT0ZUxvJd61F7ML9AfK_dQ1 WJJiiDZBEVosDV5OHjNMv8yRucX6rGF7z0vz4PLU6kd2lgCvrD5KH4SeyH9K 2re9FukaR5tE19lX2005zunxwBcf7WIDCLMkBrHWN0NYpCgXPItS3olsR1td EnBfvHzS1UW2bcPOly5KbL0SvC2rRQE9HKEW214YZz1kjT_4NPIja64yTQme 21Sqp07nP5GHdPQ7JhDuZ09MEKsEY1pRbaU56.FM2fbQAzut2VaaNYRLVil9 jA0ZZwyuZSpmAG245uTo_ULrUhYXK_K5J5LVx2pQlpDmOsjI6k4VlPjyR29E nyDid6ld3dqr4PPmSpA6HZNwCodLFFByYaGqVyYzGNtP7RN.HCrHixcWJJYL YEzbczPRsNBuACSyRl7qYeauGjnt9_Tp5JUUATQqD36Xol8_uCTbMlljqob5 hGPArKHIUprI5xCgdPifF_b9g6Oa9Xp6r_OvT.Xpv4zXmJNC5natiHjfNmFB GDKrNO2zvTHbNnmQw2s7h17s3DheRH9FYgcoy4z.h5ZqXQGhyxjlovl33rvj FZUsmzAVz3.OCdRq683c.ZhcoyD7.cO5vb1egOG9yhE.wlTOXcywrKOBVxmU uvJTlvO0aryX75p4M9lgy2UFVAetNBUoPKf4xury0kOc9slsVIKmXlHyj6hh rlzVmREfCJfHug4QZvuYiAlEQP6IGF8HKdCZnUkxuCu0Kzeq8OGHmOCZVETc Zl5vp5SEFR1ZrUBIO_In6NhVo5kgk.r7_ILNmh_Ns7XHVq6TdWBHzq4ZKP.t pZWgrQEUsCz.4hP9Wc5y2UfkNN31v.5Iq0t7JJoRsQNG0PtE3Q.WV8FmrgnM gGP69Cg5gda2zztCGPQh489ozPxmwoUwSpNJQGOXQDV2jzA8BiNQSDLrq3t4 k.tQVYkqqug3yQHVnPYwC6P7eFXlXf5iHujq42PMfIKkSZR9zQhuROokQb80 IAOsttMEil_yLf0q3rlf0aKBBZ7L2w3PT8lFTtKqwCiDr3T0iCUk2ndfzwkx kibLb2_B9Az2BPj1HO_7ZfnlP0Tch_LkrWyDVtRmdBIR24XFNgAmLjRHP7hR HXo32ZTBHvG33dJq_hAIkMG8hqZzEZ8fALrBC1S5lod8KxHrnRMwjhdTWJ4n UDbmDUJKwTFe.CfRtm5G4cBUEEl6_AmsEvIgzToO_Q_FRdIdauBS1ax10S1Z WiyZcsZR6A0l2KXGTdRaXl62_eKU_P.t2VOXHDRBgmkdu.7DHNI7CLZYhVhS 59OXOQrgRNVMGocvAp7wz6szJRzZxRwOa041fyptbnYzY2X55RNoe7Nkq9Fv Zrjd01_3fMCBdYaaR3szVRwST2DcLpeazg4gpGnah7Jmj4_5fPFb5LIB.J7W vB21EURhkzKyWKcew3HiLkVDNWEwdVgnGKUpo.D7ue3HqJbEvZkPYY4kfqZ3 ARA4Sy.EKNMVv5Zv8Z5NygjbaHYpvM3pIGpAtXia6QRvUBuZAaEI3P79PwWw 8O9ogSwTTrtKNbyN98Bx4QZMMIhHasZdHQX6zjcICBTQ5Lt2d8NalJnpbNab Iw–
X-Originating-IP: [209.62.173.211]
Authentication-Results: mta1361.mail.mud.yahoo.com from=mosineeschools.org; domainkeys=neutral (no sig); from=mosineeschools.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO SMTP.MOSINEESCHOOLS.ORG) (209.62.173.211) by mta1361.mail.mud.yahoo.com with SMTP; Tue, 15 Jan 2013 09:00:20 -0800
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AtcZACJb9VCsFAHS/2dsb2JhbABFqnGPSoJVgQhzghEBAwUBBQIDHBEDQRoBCwEeBhgHVwEXCIVBAQGCMAELA6hkjk6MCIRPYQOFJoI4TjWFHIY9hyqFX4gm
Received: from exchange.mosinee.k12.wi.us (HELO mail.mosineeschools.org) ([172.20.1.210]) by SMTP.MOSINEESCHOOLS.ORG with ESMTP; 15 Jan 2013 07:40:55 -0600
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
Content-Type: multipart/alternative; boundary=”—-_=_NextPart_001_01CDF321.EE6304C1″
Subject: Partnership with You
Message-ID: <99F32978A02442469AB1EFE86C8F05430A5F1380@exchange.mosinee.k12.wi.us>
Thread-Topic: Partnership with You
Thread-Index: Ac3zIcwf/dSkUHjIQFuS8kkg0/8gvw==
From: “Christman Debra” <dchristman@mosineeschools.org>

Below are earlier emails sen by Wang Chien a.k.a Eduard Castano a.k.a Christman Debra trying to get potential victims to “transfer funds” only the funds will be a fake check and the victim will be stuck with the debt once the check bounces and the scammer will waddle off with the cash. He is scamming under multiple names, email address and IP_addresses. Some earlier addresses: wangchienrxm@yahoo.com.hk <>  jcubillos@cardioinfantil.org <> Eduard Castaño  <> ymailverificationdept@yahoo.com.hk <> wangchienrxm@yahoo.com.hk <> ecastano@cardioinfantil.org <> for more information on this scammer click: Nigerian Scammer – Wang Chien 

__________

Subject: DEAR LUCKY WINNER

You won 750.000.00 USD in the on going yahoo

online promo. For claim and verification contact
Michael Helmond via
ymailverificationdept@yahoo.com.hk
immediately.
Eduard.

HEADER DETAILS:

Return-Path: <ecastano@cardioinfantil.org>
X-YahooFilteredBulk: 200.74.147.148
Received-SPF: pass (domain of cardioinfantil.org designates 200.74.147.148 as permitted sender)
X-YMailISG: w7jQS0wWLDs4rKN5WjiJ_ZKbTd2L97P2Y0uL01g1WiV1CDor dgWkAO9_fiPTZBpI2Dncv6CfBNQEL5j_4Qo9Zz5xGtZiIj6aRD.4vOSwrWVD 6zLxCpXc6lVi6XYFjgdiQ5D04jrUdVdoRXxwLcJe_GhRh.CxXGQZ6gCdVU.K jIe4j1I0k5laWsUZ0IYtpuLVyhWajq3q0tzFhMXzK1DUxXIR.r00bGJ95t2r 0Riw.p0NDOlGvuY.fqWvShXqU8NHPKonuKGayLtzbqXY9FMQtpSffvQeGRUK _DOBJZ71HAz7LKJdZQ45KtvFkxPxlLnVEskpYANPzRTs5kUwmQNR_vCByLzu Dtzu.dAwtApsJ3UVRSBJ07M1prOLFWMkHNhm5q1_suuVPHL6eX9ZIDZSijSH 3dWwf3B8wMS8U5RDCrRO06Ar2y86Hr0PxaZMnEaVmcVE77Yqvs2_hf7JopF5 ztBjkEyZyBSVaUecjeP6SL8TX7hU0x9yB4dzW2jsqBzKh_HN1U4FsKtEsdC2 GLpebba4hglNMXJZEbcsERVbuJG1KOIJktvt7j8ftKPhMh7QZOKU9afi_riN l4nyEWKp9pzSCYV.mZsFgK._AUIQ1u4gR2dvhZ81VY1VbKzhJW5mgncCDmlR UiL.VhXtPO3huQkTSWq1tqNB88P4Vn7e7p7IisvZXNtNUZ1vRUhWmSNAKYxU EvwCkBgLlmEsADIGFS9t9gpTRdQMWTvZtd11XUOI6B_7DLRt9nFQSYrP1i.l tEDNAENOqlrJvHkZ2IqN1NVpt9A2phEJo1KMmCk31ZTMrsjzvTF.cXmYkthM jkI.atru4ABpo9qQiCAF3rWKzs7e319PpMX97MnQ9MWhszDrBKDfvhDlShnZ C1PTAscAHjTwTP9H9fsinWjm23yuxsD1Gg.B4AgLx48oIo_ME6HOv2XIKIxI gEe0fztYAlsat9YjLRA39kZlDhCaalAVk0WufQof6wwR4Qix48xjR4s3PUJJ 8__Vb2YT.mrfFyklexAjaAUBdaYvMghlOlSCkrajfWl01893USlHAgfVzd3v ayAvPrCrSiYgywtyXE4JUVwAM6P0HyUKG8mdXVdjf.F6t1Eu1iV0d22fhhwX F7ilx.a5IAiZ8kmZwTZc9RXYUwdRv5wGi5EgNqkyaN1Xxq0YNIUtnLgtt2UE dQoJzykdkGmLD.0RuZla3xgyVZ8fhZj0WzZUHDX9v4MgMIr6dNBLQh60Oym8 cV7lvZxSa1079gJlOlbVDcoRZEMzGRZUfguqQPNJrB6mPnhotirxB2sVttwO zUX4K4o8iyxPaboEHDvszRRCfV.3nJbk2kOcImybh86GiO0lZKBR3fm1zyhY O46e8WnmQx20FLYv3kSrfWAPmPm67AEK731bw6phc0AWvAqOEO65aX9IUFI4 .coCX9WmtGhkwYIxUnlZy_QGGO_j5c4fyKTs4WGTu3_mY.Hm0DtRQv8rBC91 .Vt53mi7GFpsmFNel7JLas_l7y8DcjJDjAtjrKCisCfLddY9kE50c9xRd4sR qpGAIm1oIoGxsCWO61r6At4pIvp3TPdbdMm5rhhuGgruQuoqGebtOelE3GqR lnHZRQox9m4MRgyS4d2Nf8OzK2cXW2I-
X-Originating-IP: [200.74.147.148]
Authentication-Results: mta1032.mail.bf1.yahoo.com from=cardioinfantil.org; domainkeys=neutral (no sig); from=cardioinfantil.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO correo1.cardioinfantil.org) (200.74.147.148) by mta1032.mail.bf1.yahoo.com with SMTP; Tue, 06 Nov 2012 07:17:28 -0800
Received: from correo1.cardioinfantil.org (localhost [127.0.0.1]) by correo1.cardioinfantil.org (Proxmox) with ESMTP id 8573154268; Tue, 6 Nov 2012 10:17:25 -0500 (COT)
X-Virus-Scanned: amavisd-new at cardioinfantil.org
Date: Tue, 6 Nov 2012 10:17:21 -0500 (COT)
From:
Eduard =?utf-8?Q?_Casta=C3=B1o?= <ecastano@cardioinfantil.org>
Message-ID: <2045381316.8532495.1352215041750.JavaMail.root@cardioinfantil.org>
Subject: DEAR LUCKY WINNER
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [78.108.63.46]
X-Mailer: Zimbra 7.2.0_GA_2669 (ZimbraWebClient – FF3.0 (Win)/7.2.0_GA_2669)
To: undisclosed-recipients:;
Content-Length: 178
Electric Blue Bar

200.74.147.148 ↔ Malicious behavior detected from this IP and others have posted this IP as well.

Electric Blue Bar

78.108.63.46 has been white-listed and malicious behavior has been detected from this IP

Sample Spam URLs & Keywords Posted From 78.108.63.46
Domain: gaygalls.net
URL: http://gaygalls.net/?gallery-BRIANNA
Domain: bitly.uk.pn
URL: http://bitly.uk.pn/hRElSh
Domain: bitly.uni.me
URL: http://bitly.uni.me/eQeGHrqL
Domain: adultgalls.com
URL: http://adultgalls.com/?sexy-CHARMAINE
Domain: adultgalls.com
URL: http://adultgalls.com/?sexy-NATHAN
Domain: bitly.uni.me
URL: http://bitly.uni.me/nEdPFf
Domain: 8adb9886.rqq.co
URL: http://8adb9886.rqq.co
Domain: adultgalls.com
URL: http://adultgalls.com/?sexy-NADIA
Domain: adultgalls.com
URL: http://adultgalls.com/?girl-CHERIE
Domain: finance.uni.me
URL: http://finance.uni.me/?post-gx.html
Domain: bitly.uni.me
URL: http://bitly.uni.me/HlnDQE
Domain: gaygalls.net
URL: http://gaygalls.net/?gallery-LYNNETTE
Domain: adultgalls.com
URL: http://adultgalls.com/?profile-DELORES
Domain: adultgalls.com
URL: http://adultgalls.com/?sexy-TRINA
Domain: bitly.uni.me
URL: http://bitly.uni.me/nEdPFf
Electric Blue Bar

Wang Chien’s IP information below

Delivered-To: [my.redacted.address]
Received: by 10.58.74.4 with SMTP id p4csp1549300vev;
Sun, 14 Oct 2012 14:47:46 -0700 (PDT)
Received: by 10.236.191.135 with SMTP id g7mr9187637yhn.83.1350251265182;
Sun, 14 Oct 2012 14:47:45 -0700 (PDT)
Return-Path: <jcubillos@cardioinfantil.org>
Received: from correo1.cardioinfantil.org (correo1.cardioinfantil.org. [200.74.147.148])
by mx.google.com with ESMTPS id b62si13082962yho.125.2012.10.14.14.47.44
(version=TLSv1/SSLv3 cipher=OTHER);
Sun, 14 Oct 2012 14:47:45 -0700 (PDT)
Received-SPF: pass (google.com: domain of jcubillos@cardioinfantil.org designates 200.74.147.148 as permitted sender) client-ip0.74.147.148;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of jcubillos@cardioinfantil.orgdesignates 200.74.147.148 as permitted sender) smtp.mail=jcubillos@cardioinfantil.org
Received: from correo1.cardioinfantil.org (localhost [127.0.0.1])
by correo1.cardioinfantil.org (Proxmox) with ESMTP id 0E273542B2;
Sun, 14 Oct 2012 16:47:43 -0500 (COT)
Received: from correo.cardioinfantil.org (unknown [172.17.1.25])
by correo1.cardioinfantil.org (Proxmox) with ESMTP id EC30F542AF;
Sun, 14 Oct 2012 16:47:42 -0500 (COT)
Received: from localhost (localhost.localdomain [127.0.0.1])
by correo.cardioinfantil.org (Postfix) with ESMTP id 934363AF4050;
Sun, 14 Oct 2012 16:47:42 -0500 (COT)
X-Virus-Scanned: amavisd-new at cardioinfantil.org
Received: from correo.cardioinfantil.org ([127.0.0.1])
by localhost (correo.cardioinfantil.org [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id p8ibmghSTrxO; Sun, 14 Oct 2012 16:47:42 -0500 (COT)
Received: from correo.cardioinfantil.org (localhost.localdomain [127.0.0.1])
by correo.cardioinfantil.org (Postfix) with ESMTP id 509173AF404B;
Sun, 14 Oct 2012 16:47:41 -0500 (COT)
Date: Sun, 14 Oct 2012 16:47:41 -0500 (COT)
From: Wang Chien <jcubillos@cardioinfantil.org>
Reply-To: wangchienrxm@yahoo.com.hk
Message-ID: <891039962.7121111.1350251261294.JavaMail.root@cardioinfantil.org>
Subject: GOOD DAY
X-Originating-IP: [173.254.216.69]
X-Mailer: Zimbra 7.2.0_GA_2669 (ZimbraWebClient – FF3.0 (Win)/7.2.0_GA_2669)
To: [redacted]

 

Tags: , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: