RSS

Tag Archives: Pere Hart

“David Smith Esq”

NIGERIAN SCAM – ADVANCE FEE FRAUD

ATTENTION: This scammer sent the scam in a form of a file. However, after investigating a little, I found out that this scammer is also Pere Hart <> Paul Kunet — I have posted dozens of emails from this fraudster alone. Each email contained different IP addresses, email addresses, fake agent names, fake customer care officers, etc. — Be careful, this Nigerian scammer is very persistent.

stop_scams

Return-Path: <olamido@aol.com>

X-YahooFilteredBulk: 98.138.90.78
Received-SPF: neutral (98.138.90.78 is neither permitted nor denied by domain of aol.com)
X-YMailISG: e8MvdNMWLDv1UmRT2_yweytc9ZTc_ZwqDMeIu2NLuvWpaL77 IXvbEWYBku_Fw_FIM7jarAKbSJoLgONZnfZWULAwNPpTl7mclzYJocNVuTDv QeEiLt309pJerpStd3BuurXMwfEZFWgjSRiLKqEuYco2u4WYAppkLAvZQU8P oKBZKhdpP5iTX36Ml3b1HQxniq1rIstqovR7THaYb2wOO8G72FQPyg6t9X34 JW2nSLH2qa5QUcyBDqlaZjcvr7Z8KW9BtxIKiI9fbt0zpJnCIz0huvfLT92Q GaueuzIJzXfURnOiLlryp49g5ZRGbTBDwuDtZ4X7mycmBCEBUDiZapCeOKKY OevtMSmjP8.RHYivp17LtvJx9CBtbSh6O2_xOYGPf3yiBf7jBNd4Lfww0kwb QR1VY2RtnP4k30iGppPCfrNxWDgwJ9jh.G1CPf99JXmUlCP_vI5mHldv0.FW cWfDQH4j00WrIHnWTeZMMLczGStYgeog4.T3UDBhApRONqd2hbjXbLNKco3d x_77MAXQ07vdrA47Yo97r4MyDdiWJV_q8LrTz3xgoBeNpt4fof3H5mrW7kdS tcpAI9nBa2HpBhMzLSeDRzRI5NVviYTcPG0wMA03L6.vkeserIhBCz7_hbH5 Guol_ZlsZAdFtBu3.Zs_vuA7SgGEBSZyO4ydtTAJ63firC9ocWPciH5iCYnO 7dj4kxFk8bSdlPTIJMF8nSQT8yF2qkLU9pttEFHPuA62Vv51Lbrjh6igEC_f Y0WQs4r4ICid.W1KkMChbwrsU.BwHw6Ss3vDtra.hyNLvWYdabGc4iKGRfGm BreLJR6dZ7Py2MtcKjUaRHbgFVSBx7VCMENyylhlMy9WKnPAFiikXbFh6EE7 KTmVRhV7YpOweuf2vvzEo0qXf52CScMVQRRydZfu0KgxKugfSyVSQCZXq.a2 m0c9QwPL2C2q0BlIVtuEXhmOMmzAEdHrO26wEsR0gata3yv8SYHn4Jf0oaKj YbnQyQWg7nxxRuziWpF7M0f4SdSwOaFGaolejCWtx76vb8vEFsGQsqJNSXbg vfD7C3CT47GGi.Be4Whef2cPtwCdQqbK0lrI.UD2e24vuv3lyp1iAJWgGiWd AhHm2yRofrXOAv2iE3DzAx4Mi1uP3Cir1SpE0roN6QpR2jLvts1LvS1r5Qtu cfyFky2THJ8CX7VpywFHK33PVFmF8DOtc_E-
X-Originating-IP: [98.138.90.78]
Authentication-Results: mta1343.mail.bf1.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=aol.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ne1.yahoo.com) (98.138.90.78) by mta1343.mail.bf1.yahoo.com with SMTP; Fri, 12 Oct 2012 04:18:55 -0700
Received: from [98.138.90.52] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 12 Oct 2012 11:18:53 -0000
Received: from [98.138.226.129] by tm5.bullet.mail.ne1.yahoo.com with NNFMP; 12 Oct 2012 11:18:53 -0000
Received: from [127.0.0.1] by smtp216.mail.ne1.yahoo.com with NNFMP; 12 Oct 2012 11:18:53 -0000
X-Yahoo-Newman-Id: 119889.56474.bm@smtp216.mail.ne1.yahoo.com
Message-ID: <119889.56474.bm@smtp216.mail.ne1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: GvHM4Z4VM1mrbNwvke0jp863UTCgDCY1wHCSXwd85GN_lOE .QZV7mw5IIG6L6_reF51VKCmxNWpmuPoT6ao46AkPunGEX9v3i04.4IMBYMA K46HpTI8XV28lObvztL8r__FXT1bJCYaGNIH3nB84VporEjKTPkgt7.SmRRA asMIW8rHwpeqs.f40J4.eXAhBVS5btiQz4X5YL7Qjx4K2zj1yultECeGC.7F fjdl0ihjhQPJjeG9Q.w5Y9fs3V6Xi4wHWxauBTt7KCNmxQGvYmjBcsr3hCsD xdslhXqOAx7c6vXleH23zT9aIP6qr0TCIEVOQomGL2rh3LoXKfqTVL6HpPuw 2DYZIHcSgNZJCgFmxZ0KLhPmnFnbIPwdD8.eNYoAKU8O_wyRuMtoruUBJ.oC BrxIcN.hW3HQgfJ530zSd7DVUzS5PjUFzTV4Eki2dNiGSpBtq8bYcLbQojah ssVFU1W20Sj86IHdr32XHGaHIoSZ6jk4ndJVCq_qI9l6DpSlvWA–
X-Yahoo-SMTP: ELlqi7WswBBJ3HhQsmFiH_77CcMUU32BiwPxZDD_RvxPEYhI
Received: from User (olamido@41.58.27.102 with login) by smtp216.mail.ne1.yahoo.com with SMTP; 12 Oct 2012 04:18:53 -0700 PDT
Reply-To: <davidsmith5421@gmail.com>
From: “David Smith Esq”<olamido@aol.com>
Subject: Read Attache File Of David Smith Esq.txt

David Smith Esq olamido@aol.com REPLY-ADDRESS: davidsmith5421@gmail.com RETURN-ADDRESS: olamido@aol.com

IP_USED: 98.138.90.78 RECEIVED_IP: 41.58.27.102 LOCATION: NIGERIA

 
Leave a comment

Posted by on 01/30/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , ,

“Hart”

LOTTERY / INHERITANCE SCAM – NIGERIAN SCAMMER – ADVANCE FEE FRAUD

EMAIL: Attached Information Circular concern your inheritance payment funds from Central Bank of Nigeria. Open the attached message and read carefully by following the instructions

The attached file was titled From CBN.txt

HEADER:

Return-Path: <centralmessage.info@e-mail.ua>
X-YahooFilteredBulk: 98.136.216.183
Received-SPF: none (domain of e-mail.ua does not designate permitted sender hosts)
X-YMailISG: LCUay28WLDsXVnOIpfCgBYTNfUXrE2LzwaL2yegEkWenpW4X SBC_EuDaR.w80oTiRw0ETbWjvP.oR9xLNcD7JUMv_xI1fNeJP8k.KcZ.dqTR __CHSWogq6Y_qJChRBP51wqiJprgGE6Mb26FPmLdxsI19IKF5MhcLCzgz9GZ 3upzi_Ggbhkx_e3AU_ldOE7IjHvUEtfkyyUafscGRUZedVhSP724ErueRN2I 7ApPQGxnfFiOtG.dibMzZJI3Su.kp6G8iOWXb2FGW0vPwm3toR_flnLYadVP nnu6ZkppI8WzKexY6Z5ljQvaC7ibS3tNTjvvgqGeCBLy3ggRYTuqRdNUgv_o u2sVjXiNgoGbtBZPa.5yk3VWGdgVbHDtx1oLpa0Wh9L1tHBn.5s1of3So1ip 5gIjzhWrgo.JckvFtRMuZG26_mlOj4ygNpptgIajS._Lw3klr26swSLCCRri AnVgqAAF5T3Wdj3BVRBG3M96yG_ZlDXb7Jn97xRrReXrvxv7D.tL9vUQ5JcT WffcRC9NOnNc6eDWKlkueUcyGhcpb63wnettpvysZo.99iN2MvMfZBL01NBO atm5VrDsFhdS4cD9ib15fVbBeFxzW9NReDqTzONBUhGxLesQfAA1KOcuXrI2 gC..B0r7T1qgztq0Ju0EeAkkvO2IyRwoukFjWljhIbuGJZqAT0bYhMwX74T6 dKnM_2oeqrmxZBspkNnK4vxHP2XQdyu4kWV8.CoGdS8.VYITfT.USxCmjR9W oEAq5dbf22iPkCLvRMXRl4AeQi_gsL_kCH6CfzyOZMLxZYyFEPr8n.aIYDVW YyJtqybgme9zxTBZ3vhJZA6vJ51x2KHav65hdOU5w.ys0gti7YQ9VUmm0nLc veTHe1RMnICMIFT2sJiTVgeXBAPwxh72ypfOv3S2CbifYFxKoEbwhZ1vWSQq Ou7vnqZUiHMjgjOL2gDZhHThAtEgbhASmRAJV1mcCfD.rA2xUUvAuABp5EhZ KDwQNQOBSSAbb6LMwTdJutCMSX3UV2JGPsTdNxApKbDdElB4X.Dp.ltkOFpW xiwJ9Ca_QYezP9RF.0aZuiwvthXDfB1Z0LE9TSitaiDn8dU4.DK1qReYxkqv Bg2YMCOuvQXMCKn8N4OFQev40jW74tjGkhwxAiJJU88IDDc-
X-Originating-IP: [98.136.216.183]
Authentication-Results: mta1198.mail.gq1.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm29-vm8.bullet.mail.gq1.yahoo.com) (98.136.216.183) by mta1198.mail.gq1.yahoo.com with SMTP; Thu, 11 Oct 2012 10:40:45 -0700
Received: from [98.137.12.56] by nm29.bullet.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
Received: from [208.71.42.194] by tm1.bullet.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
Received: from [127.0.0.1] by smtp205.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
X-Yahoo-Newman-Id: 454267.58831.bm@smtp205.mail.gq1.yahoo.com
Message-ID: <454267.58831.bm@smtp205.mail.gq1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: sOZOVKMVM1mnA9AK4aaLG13dw.2te_jOnoIlkFSo78oTN3g yI.ys52b1V4VsGigPYxlplzI2Rs3TVbBAn.RWDpO0rj1fhfJmsdfaoXQmnis py73qobzWcXu4_GfpxCdEjTRZ6ejB3dbb.R94ACw1ti_ojo8XsTHy.KWnbLX NSdN5e.LRbtRUgaegUmCah5EI0VYpVmWcekFbCGwQGmfWOSGlb04qa7FBlyy XcOh6c5GuIqvhM1wDjDoKUtf7oSMaa6ozaTNU00Z_y8KeSBonZROIe1D10l3 43tNvsoJ7v6A7kguKsNOT3zh_pWXFWPmI8YNiC9jfnlDYqAdt8n38xv84WYB bzPE0uio7lRXj4HPPpWmp11SYYlKHj2SuJ0fTgQHMKkQsZO2Lb0EzjX9xuT1 0aRkaaqfYIKxuquOeXqq8ENytIue2XIpeTeLAf84qlSyv4CMyDIjw02HSUgW 2quxD829qRALehBycbxfAZscfqIKIs.BrdjgD7.bDbpTpU3jrs_hUis45VTc Pua5HfCU-
X-Yahoo-SMTP: zDMiCVOswBDcK9OIGzmdQnoU.CR0Quer1VzIrWkm300MMv4-
Received: from User (centralmessage.info@41.58.12.225 with login) by smtp205.mail.gq1.yahoo.com with SMTP; 11 Oct 2012 10:40:42 -0700 PDT
Reply-To: <drperehartcentralbank.org@e-mail.ua>
From: “Hart” <centralmessage.info@e-mail.ua>
Subject: Open the attached message and read carefully by following the instructions

Hart centralmessage.info@e-mail.ua – REPLY-ADDRESS: drperehartcentralbank.org@e-mail.ua RETURN-PATH:   centralmessage.info@e-mail.ua

RECEIVING IP: 41.58.12.225 ORIGINATING-IP: 98.136.216.183 — 208.71.42.194

BELOW IS ADDITIONAL IP’S AND ADDRESSES USED BY PERE HART

FROM: Dr Pere Hart dr.perehartoffice@gmail.com REPLY-TO: <dr.perehart@yahoo.com.ph> RETURN-PATH: <drperehartoffice@gmail.com>

RECEIVED-IP: 125.88.125.201 ORIGINATING-IP: 77.238.189.207 — 72.51.25.85

CLICK HERE to read a list of emails and headers sent by the same scammer as above. Hart also goes by Pere Hart as well as NNPC and Paul Kunert / Paul Kunet — Etc

 

Tags: , , , , , , , , , , , , , , ,

“Dr.Pere Hart”

WARNING: NIGERIAN SCAMMER – LOTTERY SCAM – ADVANCE FEE FRAUD

This Nigerian scammer has sent multiple emails which have all ended in my spam filter. I’ve posted many on Scammer419 if you would like to view please click: Pere Hart Lottery Scam

SUBJECT: Open The Attached File From Dr.Pere Hart Deputy Governor CBN .

EMAIL: An attached file that said Central Bank of Nigeria txt 
NOTE: Pere Hart has sent me numerous spam with alot of the same scams but also alot of different scams. Each email is ALWAYS under different email addresses and IP addressess.

HEADER:

Return-Path: <dr.perehartoffice@gmail.com>
X-YahooFilteredBulk: 77.238.189.207
Received-SPF: neutral (77.238.189.207 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: aFvgY08WLDsdt5GEWB08iqN25WjppamFxrHT0t6_0N2fkOBF FzidCIQIlbcPvcyAoh0AWBdtiRPiNMrcplz6CR1xvf0tawY7M_z3kfTPpt_8 Rnz7K3MFuq2x1513KdvJCE7VrrVu4jzXzkJEnSBPbEcRVQrjsskSQzuk4xpa 3Tqr4rGJDM9H03XoyCBuOPFUHEhTc8aaRckhUnlUQjtFCLZ2qkuU34Whp0_w tDbnpSmCf8ildUEOOoqomaJSQMyaewKE2dQIHrxtOQDSj7OOlbyZ3f2jWzyj z3EqhmRPl6uNgLfQ41waAc_9SNR0cRUiul06bobLUz2z4.ikD7GF0wR4vk3M aIY96_Ff0MOJPTdBQiyWQe.j8aVPW1kIABfUw9lqrr7B4qLG66QuDM8tOk0c WBWFD.TGelcRBQaKhvrZW5Xlo_0sGSJBWID7WsM3GKjSviKtuuuC7.FJEp4y TH1qObGdqeBqMki8m48h4Ab_Q_kzvnR4NaMK_QEQktrZCu0Z9nOz3qdxu8rr HTHza7FmLmbawWaOUpHGSb18aGC71mXZLHzhmVjl3nYUMCK99mi4P.NgPYkB rgNek.fUdQdBdNiLkc62oRfadQdtmaoi2tZG9ERIZnpTCQIYai71_JQSztz5 KkOUBfhYnjxrdKg.Pw.m8i652qSF2lAjAueIlsqboml2Mi4APzEeosB_Y5eZ oZNZppZ7njL5Y2CtfnNj7bC3WlEq9wOXZaC1PBAtqpTMdfkGpHieE.X_MC5y 0g9ObiHaxveGvb1WMGs6zkv3PburNhdxxg7fGXHu5DMWhVwv1ymrreIFU_qz HOkqvtQGNAX5vE1F49lARyzJoc8NXgk7i1CQzjfabioalciPRsLBF3fzFGUE DsaNqXkuw7RgahBRUqMHducqbGKl2WLdvr9nJGe8ZaxetJaBLtAgK0pGZwMS 3Bhb14Uo8a_q3YYdz_cIonE5F.zTbYV6hoE5kC4IYa6h0umQJ_SrkUg.YTxw ss94Tb6hXsFQB05hSugL6uelLhMsaalKka0rN5syvNMxuv_fwsZ1W0ebqz0Q kZcCZ.nHt4O4A0_coPlS0RAB3TMB_dTwETt4qDuXvbxGwa6JnUpw1Ujm3FtX mQk5M68mDH4ol4L_zxTM0PCe2o_4mrGb6yvZd4.meO4EscwQDbQR.ddCOan7 cSrYWOW36HFfEEyzKKmOSlZYHs5FKx0DpQ–
X-Originating-IP: [77.238.189.207]
Authentication-Results: mta1308.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm5-vm0.bullet.mail.ird.yahoo.com) (77.238.189.207) by mta1308.mail.bf1.yahoo.com with SMTP; Wed, 17 Oct 2012 09:51:58 -0700
Received: from [77.238.189.230] by nm5.bullet.mail.ird.yahoo.com with NNFMP; 17 Oct 2012 16:51:55 -0000
Received: from [217.146.188.160] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 17 Oct 2012 16:51:55 -0000
Received: from [127.0.0.1] by smtp128.mail.ird.yahoo.com with NNFMP; 17 Oct 2012 16:51:55 -0000
X-Yahoo-Newman-Id: 51876.17474.bm@smtp128.mail.ird.yahoo.com
Message-ID: <51876.17474.bm@smtp128.mail.ird.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: qwmBW6kVM1nms64QgbWA5bp2sqd6.mO.E2LD93nho6QZV5b 7PkJoQhPYQ9IzelN_ePvcEmyy2ky0yYMt4XNOXvDOv6kfTmDyp7xzMxgk63u 15wu8pSGklKRYSQfsoFfSII_hGfIW2lxSkdXqOXoNT9LRd8p.ZorUY4b4rlO gPnLLwlUP5DsHwaSJbgHk8EnOy9QtzLibG0iwdnB7.wbq0i2FRouCYeG18F6 QIG.NVESEK5UImRV7LeUJEuFPR0wrLK061AA0WiUI_8FcH4fpawrYlbROxPy .10YEtwJdEP_47_eeFa7sgYhCTZP3iMVandZisYDOWPev5H8lSzUO1uyCAj3 gBZnS_LyNy8cJMPuMqXtPQ3A_OoW13nHW9NW5_rNY99sC4.qyVnr.tkc4KXd zKlpU3yY42WL8Go9pbOvvhifnx5zJP9IVbdZ6lsh2QlSWZgHRrI7M1BqczRF CyHbYtvlaZiIuUuab2kcB9_odigpUPutpAT1UNgE-
X-Yahoo-SMTP: 3PKY2KeswBCOaex1k5NL_UpUxzw.w_JM.rvihsImDOhymg–
Received: from User (dr.perehartoffice@125.88.125.201 with login) by smtp128.mail.ird.yahoo.com with SMTP; 17 Oct 2012 09:51:54 -0700 PDT
Reply-To: <dr.perehart@yahoo.com.ph>
From: “Dr.Pere Hart”<dr.perehartoffice@gmail.com> Add sender to Contacts
Subject: Open The Attached File From Dr.Pere Hart Deputy Governor CBN.
Date: Wed, 17 Oct 2012 17:51:40 +0100

FROM: Dr Pere Hart dr.perehartoffice@gmail.com REPLY-TO: <dr.perehart@yahoo.com.ph> RETURN-PATH: <drperehartoffice@gmail.com>

RECEIVED-IP: 125.88.125.201 ORIGINATING-IP: 77.238.189.207

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

“NNPC” also known as PAUL KUNERT

WARNING: SCAM – FRAUD

UPDATE: Paul Kunert (Kunet) is a scammer that I posted yesterday, December 3, 2012. Paul Kunert sent the same exact email’s as this scammer and sent them under the same IP (213.230.19.136) for additional information click his linked name.

Dr. Pere Hart – Lottery Scam posted on scammer419 on October 21, 2012 is the same scammer as NNPC, different scam.  Click the link for more information

Warning Caution Icon Sign Glassy Shiney Clip Art

EMAIL: An attached file was linked to this email that had the same title as another scammer that i posted on this site a month earlier. the email addresses and ip’s have been reported by other internet users and websites as well.

HEADER:

Return-Path: <mabiola@nnpcgroup.com>
X-YahooFilteredBulk: 202.181.246.218
Received-SPF: permerror (encountered permanent error during SPF processing of domain of nnpcgroup.com)
X-YMailISG: FuucFhgWLDshkfFuV5fDevDyn0hi2_MU3I8l8IWaMLVIEIuz NKf3NWKmyNhQdLoE56sqj8U_3Ubcj8OfUmEFjup1EZpdSK0QKIWMlJjD6ABw 7RYdhreTv2Bm4i.WRJxqaI0MPQwCPlp29KJ2sgBKpJV1hkZTSz6ZVm2U97j8 hZMBu5k5IgASzO0ibvoEpponfvo.fQVeXf7B0.M_i8VEA_4e257ilsiYu04h 8YUO4QtW642l62.Je8YwZuKUn1ZFZqU5NkM55tAWaCUAvXIitjWlZKS0TRxg kHmPUQeyT7LZzjb59EMoHsjU7zFjBEM1bb_f18xH7cnhQuSTyNVkrOYUAj0C 5fkR3of5DkTEEbE3OTx1ME_x3kR4nfE7TfhkkzmZulEMAJLsOcmmRLTPeb6s 4MfwuntLGCQj9ZYRJYqqB83K_KO0JzyGuXfkhuClo_rEdpgh9TAfD_mGRH76 solGibHIJsucJTq1_cxMM.Ko9drDCwHdE5Y6gaUhU23S025ANpPVyriGKFzz _MUPRqNK3n_03dMu_13EZBndFyKJX4.4l0XLdfNnS06kd93FOR5u8_tsY9KY SRiu5X_QzjoxTy8v416neLCsRo0vwyWzM50Xn5_0f5wXAoOnavzSsMhgo7HE pwxrmk_Vhc6ENKP9LVOFQfMvL1ZAHOefrtPe_kvWlDqLpykthbrnRTmXkuxz M7XTEhPwrFQKcIKqTbWXnGImhyCQzqpmsH_X5p_uUIRlzIe41Ybs89FihVU. Y4lUG8XrysjZJqdc2ndbb7cWLW1Q5b_QnA7Hft6j4f3vh25LU6AAvBigVyTm f.FRgXxeQNP4HoKfstNkkCMvFVumZ0Ikl7o5iSCeuCaJfiVRMcBsDN1uSRFw qQQWF2_RYPIArf4KAZIEBsmq1AlrdElzPywpFxhJgrD7a6V.cjIzD9vjrdO9 ljaQGFLCS.q8y51qBFZpFYYseaEMnt3jJgYEcpjLNKVR6YmjFfSTmT.rFD2b zte6AWqyGobaKMgQL9gHMVwpGhFOM5v5y6IDKAUIbw8NP5GSEZiAQiFElzPW a4LuP.XQSSNxvBNHWfZGSe5eqH_YcCZZH2dS5C2dZrmGNERb5L.1HvIpwPNT f3EtOddYQyqUWS.TC3u1CuUDrcR66ObHy9uf8_Hqf5VJb2Bj4tOfRthCbD.p 3nYD0Uat.DIAXprmX6VjcsfM3sN1.Dg0XNw9lTxYi4651.m0.7XkBTYP5Tr9 JMIOiOX9IVEjig5yKN1XMGz3r_ODg0gnhbtmZt.ImVY4vLOP_FpEgduDVWNb hwiXH6xZT_nW1XOcfEazL0Zw9nUCA9Cexq4iyKw0NTo7Xkr8dSL8JXsAyzTG _uVbL0x8nXYjeewDIAuS7dKHUK5M20jUpAUNthLTONSumeoGbggbpJFTlHIz AxPp3v077Qod7NiVkG4dQ68knDKplPdecjla_7QQxr.UamzZ2qvomY7zIXvd 9Se0G4ohmnYSsxoXR7UMLwiFK29oKb7egIrYKq.i7Im0nMWLXIn2k7KgajfU 0q_0jsVF_VKyfKoI02yc4rE8qucMPLgNZ5H2p9NQYr.vA8itbI7WCfKhUFPq 3269QnfwB8kqKpwkS09SOXPWvKRtQqUKSyQOpA–
X-Originating-IP: [202.181.246.218]
Authentication-Results: mta1388.mail.bf1.yahoo.com from=nnpcgroup.com; domainkeys=neutral (no sig); from=nnpcgroup.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.hkscholar.com) (202.181.246.218) by mta1388.mail.bf1.yahoo.com with SMTP; Wed, 21 Nov 2012 08:51:29 -0800
Received: from ([213.230.19.136]) by mail.hkscholar.com (Merak 4.4.2) with SMTP id 21320A3A; Wed, 21 Nov 2012 14:43:11 +0800
Reply-To: <mabiola2@e-mail.ua>
From: “NNPC” <mabiola@nnpcgroup.com>
Subject: Message from NNPC
Date: Wed, 21 Nov 2012 09:43:55 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_00CD_01C2A9A6.671FFFB0″
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

X-Originating-IP: [202.181.246.218]
Authentication-Results: mta1231.mail.bf1.yahoo.com from=nnpcgroup.com; domainkeys=neutral (no sig); from=nnpcgroup.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.hkscholar.com) (202.181.246.218) by mta1231.mail.bf1.yahoo.com with SMTP; Wed, 21 Nov 2012 19:30:34 -0800
Received: from ([41.190.3.128]) by mail.hkscholar.com (Merak 4.4.2) with SMTP id 21320A3A; Wed, 21 Nov 2012 14:37:08 +0800
Reply-To: <mabiola2@e-mail.ua>
From: “NNPC”<m.abiola@nnpcgroup.com> Add sender to Contacts
Subject: Attached message from NNPC
Date: Wed, 21 Nov 2012 07:40:53 +0100

“NNPC” <m.abiola@nnpcgroup.com> RECEIVED: from ([41.190.3.128]) by mail.hkscholar.com (Merak 4.4.2) with SMTP id 21320A3A; Wed, 21 Nov 2012 14:37:08 +0800

NNPC – mabiola@nnpcgroup.com – mabiola2@e-mail.ua – m.abiola@nnpcgroup.com – <mabiola2@e-mail.ua> 202.181.246.218  – 41.190.3.128 – 213.230.19.136 – Email addresses and IP’s used by NNPC a.k.a Paul Kunert a.k.a Dr Pere Hart officeonline82@yahoo.com Reply-address: dr.pereh@yahoo.com — 72.51.25.85 – 213.230.19.136 – <kunert03@e-mail.ua> – <kunert01@e-mail.ua> –  77.238.189.210 – 213.230.19.136 (note paul kunet sent numerous emails and each email had different reply-to addresses and ips. click here for more information.)

 

Some Scam Messages Sent From The Above IPs

From: “Elsie Carroll” <amadowindsurfvalencia@webstersonl
Subject: You can have happiness for hours
From: “Better Business Bureau” <info@bbb.org>
Subject: BBB assistance Re: Case # 66139090
From: “Better Business Bureau” <info@bbb.org>
Subject: BBB assistance Re: Case # 64924263
From: “Better Business Bureau” <info@bbb.org>
Subject: BBB assistance Re: Case # 35201806

From: cradlekx7@bmatter.com
Subject: Groupon dicount gifts
From: Горшков
Subject: Мастер-класс на тему “Функции
From: “Ester Snow” <langg2@reincarnatietherapie.com>
Subject: Your buddy is too small? Not a problem with modern
From: “Sharlene Montes” <liberalizationspff0@8bitandroid
Subject: Long buddy will bring you a lot of unforgettable n

From: noreply@breitling.com
Subject: tammyiversage@amail.bulock.com © BREITLING Inc ® T
From: noreply@rolex.com
Subject: psychology4321@cli.metraimmobiliare.com � Rolex In
From: З
Subject: Разрешения на работу, граждан
From: gabriele_hail@afternoon.kfm-sa.com
Subject: gabriele_hail@afternoon.kfm-sa.com Breitling Disco
From: <alonso.rusten@england.shortcutter.com>

From: “Santander”<notice@security.org>
Subject: Your account was accesed by a third part
From: “PayPal”<notice@ppal.com>
Subject: You have changed your PayPal email address
From: “PayPal”<notice@security.org>
Subject: You have changed your PayPal email address
From: “ECONOMIC & FINANCIAL CRIMES COMMISSION (EFCC)
Subject: Dear Beneficiary,contact Mr.Robinson

Associated IPs174.5.213.253 — 208.66.195.3 — 129.10.156.203 — 64.94.177.214 — 67.52.189.82 —  31.222.169.29 — 68.22.33.134 — 129.63.210.141 — 91.183.41.102 — 41.251.31.139 — 91.118.19.50 — 41.141.36.169 — 80.255.46.3 –41.190.2.218 — 41.190.2.159 — 41.190.3.221 — 41.190.2.161

41.190.3.29
41.190.2.163
41.190.3.66
41.190.3.116
41.190.2.166
41.190.2.167
41.190.2.168
41.190.2.169
41.190.2.170
41.190.2.171
41.190.2.172
41.190.3.135
41.190.3.213
41.190.2.175
41.190.2.176
41.190.2.177
41.190.2.180
41.190.3.97

41.190.4.95

 
1 Comment

Posted by on 12/04/2012 in Other

 

Tags: , , , , , , , , , , , , , , , ,

Paul Kunet (Kunert)

EMAIL SCAMMER – PAUL KUNERT (KUNET) – EACH HEADER IS USING A FAKE ADDRESS TO CONFUSE (POTENTIAL) VICTIMS. AND EACH EMAIL HEADER HAD A RECEIVING IP WITH A NIGERIAN LOCATION

UPDATE: Paul Kunet also sends out scam under NNPC under various addresses and ip’s including – mabiola@nnpcgroup.com – mabiola2@e-mail.ua – m.abiola@nnpcgroup.com – <mabiola2@e-mail.ua> 202.181.246.218  – 41.190.3.128 – 213.230.19.136 — for more information click: NNPC – SCAMMER

Paul Kunet and/or Paul Kunert has sent MANY emails. Therefore, I am going to post each of the headers because the return email-address and IP’s on each email are different. If you receive a email from an unknown Internet user and googled the address and/or IP address and ended up here, then you’re most likely talking to a scammer.

NOTE: I didn’t post the actual email’s but I do have them saved. I just posted the headers because posting the email’s would take up more room below so if you would like to compare emails just let me know!

________________________________________

Return-Path: <kunert03@e-mail.ua>
X-YahooFilteredBulk: 77.238.189.210
Received-SPF: none (domain of e-mail.ua does not designate permitted sender hosts)
X-YMailISG: uz2zgCQWLDvA5U9Wv9gDEl6GyPs4LNxRzvAj8opVuoq7p6zv twi2EFEinL1GuboSa2t022Py3ynOSCyVShKHCBfM9Gu.cTZ7EaVnYwEMSZBL htJqs2gZsJi9Kx7GAkqpUxFJtfotfU_ilBgTeUv7U5TaBNMfsbCL4KHoKqMX 4GcN7rdYltCILT5XzRlICjzMSN4LxyzL1sFz71rYrHnvYkVcdFM.t0kKvbHU sq4nsZ3elrFZ8LmRTvePsqavTLXwtFQZfZdUs5GFZOZtzjSDe69XtLY7oGN1 cUuUltsLnI8DockY.vYcelJInb2PCuFViVqkp3Ri5v_lbjEY1UtXSIKV5..7 IVKcEWv9g5PUSKRfIbLm7.RETJx4j8GOrmJLLgT4D32gwUKs22oVJGzB39v5 Y7HcCe2FiGc23kdYvA.3cICY0pfYtp3rPzd53eh8HqU7CTlhQt7XNCKuYsCF OqfxcpuCDSLf6UlmAcJKT0wEFj.r39Zjci1dM1cOD6XQZhi0TTOwfSwP4hmU j7TZAkTSBLZK_3lvXcxWq5eQ5P_JWaPnbOC9ObAfUB7RZr3.TUoymzm5mlnk yRy2p4oskqshMyi9tW0WuUdCYbxezLKAkZlJ9lxQWq5omS2ynsUMcYJSXvbl AiW6ZzMM6W4cyQwURLStzEoMD5gpf8ypjNGJFwdwLxR1DK4DvXhWT_x9EHKc rSmegcFO8fpnxDgiMp5yOsczZEnNdckNPmeey_BVBUyDbKLyHegwYAW83hyO IP7LphF9SVql87P9XR2Ku5oNswP5Eicv2McSCobp3G_PgsTpNZqzhiBg4I.S f6AsTb0AfLc74jwWN4kr456j3a8EBM0iSSVuBPIl3kpBZmGRRHp00Lh5unmq bllWrDyn..DRLmJr_muz0kGwTxUsf8T5lSTIjqas9qcFRvn_breAvnZ162mM 1JZz8hDIhACLQRT62j_pjhOKAcnnY0VCkL.WNfly7yANzAbjHyrZnyvoXGEQ PUWLFME71uSlaTcmdSFMPOH4al6E.lv8WYw34x_HL4z2czpmtNNykF.xodjz ak2Brvkaf3Dde9CXarJ8yz_2il8FcSdFus8DpwbF8RQ8gXUv.JRAZmUCQTdh 4EVdkAo9fM8XAZ5PVivjHMZVlyHHYgYu8gycPzgmI4SG7B.9uUdWqvb52IpY AjoNigpPuGFRJI142SI-
X-Originating-IP: [77.238.189.210]
Authentication-Results: mta1116.mail.gq1.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO nm6-vm0.bullet.mail.ird.yahoo.com) (77.238.189.210) by mta1116.mail.gq1.yahoo.com with SMTP; Fri, 05 Oct 2012 08:21:48 -0700
Received: from [77.238.189.51] by nm6.bullet.mail.ird.yahoo.com with NNFMP; 05 Oct 2012 15:21:45 -0000
Received: from [217.146.189.99] by tm4.bullet.mail.ird.yahoo.com with NNFMP; 05 Oct 2012 15:21:45 -0000
Received: from [127.0.0.1] by smtp115.mail.ird.yahoo.com with NNFMP; 05 Oct 2012 15:21:45 -0000
X-Yahoo-Newman-Id: 47619.90145.bm@smtp115.mail.ird.yahoo.com
Message-ID: <47619.90145.bm@smtp115.mail.ird.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: 0T5NBy0VM1kObUTZkAyVC3luZHJ3SlVhEh3tWoWRJ3d24ls jHB8Aep7i9YeDAOY6yIIpCbSZOs_WXyRTE89oDaHY27Da7hcpXmer5p71H5j 4oW1AfazM0GYJd4ULRwC4kaorrUAb.MUV490Th1OEabhOtFu3b6XFu6Lv5Bg bKmyQ3E2TuW080GxWyY8nOr1NeGBCMpy6GKg4S2xRYrykSweH597_.HeVhCg DsM6JtquNv9H1c3jVs_i7KzTi0LzOAXyStU88cQp4Hwi4EbHP1tztLcVCZCS in8cVpzBhZnfi1QfhhfXGh0QT_ZIHg0a3KWpfrN7vhLgG6IApEGrtz4QZT_H DHQOMWSbtrt68XIRkNRjon5QuC6S1HD4_AvnxtQJgoZBALp24K.NPV42kl.7 8Um2rh8XD9YDzZJ8J.v5Q34e8O9pSa1lb6hcSWtaXsSLFxathXZY602JuCUp JQQFx2G9Bo3ldXD1zNLYjY0CS9z1KwWgAvA–
X-Yahoo-SMTP: O6_qdwuswBACWAKqY5WV46rcRuRKcFD_Xf.u0UBJ
Received: from User (kunert03@213.230.19.136 with login) by smtp115.mail.ird.yahoo.com with SMTP; 05 Oct 2012 08:21:44 -0700 PDT
Reply-To: <kunert01@e-mail.ua>
From: “Paul Kunert” <kunert03@e-mail.ua>
Subject: Attached message from Paul Kunert
Date: Fri, 5 Oct 2012 18:18:55 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_0102_01C2A9A6.72E28560″
X-Priority: 3

213.230.19.136 —-  77.238.189.210

Example Messages Sent From 77.238.189.210
From: Miss Sarah Coulibaly <angbozansarah@dvaar.com>
Subject: Dearest One,
From: Phillipe Ouattarra <phillipeouatt@gmail.com>
Subject: Dear friend
From: “chamillionare718@yahoo.com” <chamillionare718@yah
Subject: FW:
From: Blaise Samake <blaise.samake40@gmail.com>
Subject: Good day,
From: “Mr.James Morgan” <mr.jamesmorgan815@yahoo.dk>
Subject: I await your response.
From: sandra <sanmorg263@yahoo.co.jp>
Subject: My Dearest One,
From: Ibrahim Sanogo <ibrahimsanogo@voila.fr>
Subject: GREAT CONFIDENTIAL BUSINESS
From: Josephine Hadi <josephine.hadi1@live.fr>
Subject: From Miss Princess Josephine Hadi
From: Miss Nancy Luke Attah <nancy2012attah0@yahoo.co.jp
Subject: From Miss Nancy Attah
From: Catherine Hermann <catherin_hermann@voila.fr>
Subject: DONACION PARA EL TRABAJO DEL DIOS
From: “work.mission@yahoo.com.ph” <work.mission@yahoo.co
Subject: Request from Dave’s Wife, Julie writing from hospi
From: Ms Estel Bedie <msbediehenry@zipmail.com.br>
Subject: Mrs Estel’s Private Investment Fund
From: “sha_ali_4_u@yahoo.com” <sha_ali_4_u@yahoo.com>
Subject: You have (1) unread message
From: “SB Artists Management” <sbam555@yahoo.com>
Subject: =?windows-1252?B?Q29uY2VybjogTmFkaXIgQUxJRVYgLSBhc=?=
From: Bahi Arafat <bahiarafat01@sify.com>
Subject: From Mr Arafat
From: “Mrs Vick A. Melind” <drmrsntcarlos@gmail.com>
Subject: My Donation €4,000,000
From: “Mrs. Anna Robinson” <annarob00@gmail.com>
Subject: Reply-To-My-Private-Mailbox
From: Mr Souhel Youssif <mrsohy691974@gmail.com>
Subject: DEAL OF TRUST.
From: “Mr Boromo Williams.” <bwse2008@gmail.com>
Subject: CAREFULLY READ THIS & REPLY BACK,
From: MR JOSHUA BLAISE <mrjoshua.blaise@gmail.com>
Subject: YOUR HELP PLS.($4.5M DOLLARS)
From: Sam Kandolo <hlttr12@gmail.com>
Subject: My Proposal…
From: Robert Makou <drjaviskona@gmail.com>
Subject: My Business Proposal For You.
From: Chantal Akissi <chantal_akiss20@yahoo.com>
Subject: Please think about this offer.
From: Mme Kelly Osbourne <kelly.bourne01@gmail.com>
Subject: =?utf-8?B?QSBsaXJlIGF0dGVudGl2ZW1lb=?=
From: Mr Collins Musa <mrcollins.mus04@gmail.com>
Subject: PLEASE DO REPLY FOR MORE DETAILS / CALL ME AT (+22

Associated Harvesters
85.120.152.208 | H
207.150.196.48 | HS
173.45.70.178 | HSD
174.121.47.129 | HSW
109.14.54.107 | H
41.202.76.174 | HD
41.236.249.134 | H
67.19.122.2 | H
216.12.207.226 | HC
41.189.39.157 | HS
91.105.37.76 | H
62.163.32.190 | H
62.163.37.157 | H
74.86.14.10 | H
70.87.196.242 | H
208.53.147.89 | H
209.160.32.70 | H
194.72.9.17 | HC
208.66.195.2 | H

41.66.6.74 | HS
41.206.85.34 | H
74.222.4.133 | H
208.66.195.6 | H
41.218.251.251 | HSD
195.229.242.53 | HCR
210.49.239.89 | H
196.29.105.9 | HR
207.150.196.53 | HS
115.124.113.134 | HS
74.12.48.142 | HSD
75.125.194.194 | HS
41.189.38.204 | HSD
41.82.173.158 | H
209.160.72.139 | HS
208.66.195.4 | H
75.37.116.174 | H
41.82.75.98 | H
74.53.243.18 | HC
208.66.195.7 | H
216.40.220.34 | H
69.46.20.87 | HS
173.45.77.106 | HS
174.142.104.81 | HS
208.65.60.105 | H
66.235.180.7 | HS
74.222.11.76 | H
24.69.53.23 | H
81.195.121.253

________________________________________

“Paul Kunert” <kunert03@e-mail.ua>

X-Originating-IP: [98.138.91.37]
Authentication-Results: mta1265.mail.ac4.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO nm18-vm0.bullet.mail.ne1.yahoo.com) (98.138.91.37) by mta1265.mail.ac4.yahoo.com with SMTP; Sun, 07 Oct 2012 00:21:23 -0700
Received: from [98.138.226.177] by nm18.bullet.mail.ne1.yahoo.com with NNFMP; 07 Oct 2012 07:21:20 -0000
Received: from [98.138.226.132] by tm12.bullet.mail.ne1.yahoo.com with NNFMP; 07 Oct 2012 07:21:20 -0000
Received: from [127.0.0.1] by smtp219.mail.ne1.yahoo.com with NNFMP; 07 Oct 2012 07:21:20 -0000
X-Yahoo-Newman-Id: 925237.87603.bm@smtp219.mail.ne1.yahoo.com
Message-ID: <925237.87603.bm@smtp219.mail.ne1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: aMaIVAsVM1mcsPMBdHpy_Od726OlFwrt4i.RfI70J1kdbqn lFLa2cnB.svc062TsBmOwspfg8MzbnuuPt9GdSc7W0m_lX5DN86Rb3Lpg4s_ _XvSGAe89EYvhPqKRyOZNs8NGgNVVhAJBZNXUpnWmltay8aXE8FmBgybQznG Bwzed.xFuAACKwn9Tr9YzEQ0A4nuqwPi3E49j6pOIvK8_ezRxWNpCyEQl7Wd 4bw3yOUinFkBsS.prFqAEm0jX.s2ddwxObQ0C.Xp5LqHBHhQMe0yWoT8B0g1 YgIVTskyjv46gHqToDLrxgiJn0Ku46w5qzL98Puphv5moQjizry6l.D47ke9 ZhtoU7xZq_nZpu4bdHxSVIGDPt494z784uLQ0WAl9afUUcHrSTHaqErBGxPf 058iZcBa3iP_1SSm6YPk4mxvcr1.9G6r4D7RlwX26QDL7aEuxoQRb_1h5FMU yxrkJQO80h6HkZYijGeOP_Cb_El2rYqDC9Wvn8J5tKnY-
X-Yahoo-SMTP: cgj1Dz6swBAPotAFLnguhWhhyXRXcWKIb_80lDs-
Received: from User (kunert03@41.190.2.188 with login) by smtp219.mail.ne1.yahoo.com with SMTP; 07 Oct 2012 00:21:20 -0700 PDT
Reply-To: <kunert02@e-mail.ua>
From: “Paul Kunert”<kunert03@e-mail.ua> Add sender to Contacts
Subject: Attached mail from Paul Kunert
Date: Sun, 7 Oct 2012 08:21:19 +0100

IP: 41.190.2.188 LOCATION: NIGERIA

RETURN-PATH: 98.138.91.37

________________________________________

Attached message from Paul Kunert

Return-Path: <kunert03@e-mail.ua>
X-YahooFilteredBulk: 98.136.217.65

Received: from [98.137.12.60] by nm22.bullet.mail.gq1.yahoo.com with NNFMP; 05 Oct 2012 12:44:42 -0000
Received: from [208.71.42.214] by tm5.bullet.mail.gq1.yahoo.com with NNFMP; 05 Oct 2012 12:44:42 -0000
Received: from [127.0.0.1] by smtp225.mail.gq1.yahoo.com with NNFMP; 05 Oct 2012 12:44:42 -0000
X-Yahoo-Newman-Id: 255385.13736.bm@smtp225.mail.gq1.yahoo.com
Message-ID: <255385.13736.bm@smtp225.mail.gq1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: oeD.OjAVM1nT5.oYbwvoQZ0_sc1r8Tj.RdorTUt2RW_PkRI fJgoiRocZ7uhixUjQ0FF_1KTxyAv3b6U6OuWV0.MGXQkLH81RrTGQ6avKn6W 2v0f.O0DS5w3Y3_NWbRmnzYUwR766kWEblokyKpl8a61i1ZslIwztHVG_kju RfFCbeZdCuNPlrzWwgPgDcZunb1tDgMcdCEsXNvP3vJKTJphjko6NuaUmKB_ heVSO_8PCHoMeqFtkFvUtqb.K6W6wFUxAoGkOhOq1fN3qVH3HdHIigpH57d8 3jzBznM8gSPsRBLKi4lHQSFJes.lb5Umop6wIOIL.Xix4yLvEfF3tZIhpoIb 90z.XGESS2NWURgttG.O4_96iJf5.LzEO8TsWvrhm0AYWO8OUiKjT0K67KKC GOqe8tNIma2jW.OO4Eaqo_GfNs1poBVVRbF7K95eZbjzOf2Mo3dzk4stm5XP diXR_p9O7rsPRodPiOWtcDuinet9mNOFXtoIeoSLkX8l9
X-Yahoo-SMTP: lSXdSeSswBBwbDV745xUu6IpKX26HqApS7oconBY
Received: from User (kunert03@41.190.3.165 with login) by smtp225.mail.gq1.yahoo.com with SMTP; 05 Oct 2012 05:44:42 -0700 PDT
Reply-To: <kunert01@e-mail.ua>
From: “Paul Kunert”<kunert03@e-mail.ua> Add sender to Contacts
Subject: Attached message from Paul Kunert
Date: Fri, 5 Oct 2012 05:44:41 -0700

_____________________________________________

Return-Path: <kunert03@e-mail.ua>
X-YahooFilteredBulk: 98.139.213.161
Received-SPF: none (domain of e-mail.ua does not designate permitted sender hosts)
X-YMailISG: cmGpZdAWLDuxhP.iqEaa9hAPGRa7FDSu6mKyBNeCuVXpnSJL bjMzL_qiIyvMwVs1HFVVp4xDWbv7yThN9n0bcVL4xWrKyksSD9oNZ0RUcJpn affnLXiZOkHjgoHUSICBEtTdEsKY1RNiYcChXiinSxzw6du7sE_WvjaYxQVk yw9y34KHlY3pulbnfXDlrVTl0lxshO40cJPuNGo0lDa8WyDCC1PBOAfzsEsC DBPVOvKYzIbQfeaWDwp_ErlrS3u2U2AKDSIRicaneVAqNNoJKrYkpN1n.0D8 UNVrRn8Mt3JWZW5jrC1wTCmbYdNJDbgG113hruz9H04jp66GvKN3ksjVjQYN ._6lLMmiYZkde3u4yiG2ojXinZwg9kATvy7iYA_3LPwRmihx8WGM_1YMb6fu YzEU8fb7XgwPqGKAefJ6xlBWpipKfg.tNvOVXxN9gPomjlS.pbxTQjT5UMoH k6hoAPL9HIsmz0Mf6ROA.X7WgLSoJl83Fxec85ypa8x6weHcUUTOp.HSbH8. W1RPb0KwlHM9wexdTm.6KjggK0tSMFSnb89xIjIe84aXUcssrRZcpO03pFpe l51hzoRCVqHq_i0Vskr9aDrq3wKQCZ0vHtmhOGxJA3gDCpaXykNgzr5LENT6 kkQsU11syfxI3jO4xTmqDcXC_QyISEFCA5cl7OPX.UJ9g_ONMyah2WmyWslX uQXHH377pfTQ8Gxe8hDKzW0VolCEeZm72Y9KmqmhNoO9jeGa31ggxgOIgGHJ Qk0RZcw2rugsmas7BfDnoR0TDq9dc5AA8Yinyc1Boj_RH4wlC8qebzUGOJDY 8UciI4JVQI3u7YyOirpWVoTBgDglNFTIottwB1QTlw2sDwMOLUPP1p1DGlfk P9uydeWWba2XZv6DOz9Wk77DbBvR_1VIPrcv7bPXAevBO0LboTPo7dGlEh07 .pwPcgXmt.0iqRB.DOOCTqMySjWvNwN0h0gTlP6hCdQGEmNqu8zsSPOGI28g IjKxrieezARgq.wP2aJKS5jgG7H.Elmg3FuQ0eQ_Xe0h2SxmOcglx12p0Wn_ yaD7AXCfB94tf3NdE1gpVREEgP6qOxtMF7ADw8mfOPFMwlLFR4GIcmgAL0Sw ModCoimq6Jt4.j6yMqf_YeFtkidSKuebGU.HcRtQ0.2KWUU3Mu6vUgrsfSDu 9E.S3OywXMw-
X-Originating-IP: [98.139.213.161]
Authentication-Results: mta1100.mail.bf1.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm24-vm0.bullet.mail.bf1.yahoo.com) (98.139.213.161) by mta1100.mail.bf1.yahoo.com with SMTP; Thu, 04 Oct 2012 23:09:43 -0700
Received: from [98.139.212.153] by nm24.bullet.mail.bf1.yahoo.com with NNFMP; 05 Oct 2012 06:09:41 -0000
Received: from [98.139.211.203] by tm10.bullet.mail.bf1.yahoo.com with NNFMP; 05 Oct 2012 06:09:41 -0000
Received: from [127.0.0.1] by smtp212.mail.bf1.yahoo.com with NNFMP; 05 Oct 2012 06:09:41 -0000
X-Yahoo-Newman-Id: 817690.47386.bm@smtp212.mail.bf1.yahoo.com
Message-ID: <817690.47386.bm@smtp212.mail.bf1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: _hcV7D8VM1n9YE09yFWe62AboF5Kb8cFhEATGW16Q.syCCA X7.0spNKn2a_o0V0Lq88Wi37chDLESMjlxy0aaP1IdU77Dj1nMSpcDNvvZED pBVnGOXclLBXJxVN9BCi7I1WsE2IqV2cJCBVsVRIPqHGgp69hKrh0CKtsENX 3wc9mwTQK43tOX7xJXT_lbUKgZ75wJEf907uWOHyCpeiaFpEEHO16ie1Y16W 9ZWBi9aW0ScL0ObY2FXdXuQWjWZjlu_i.kAICFadZL5YiTWdFxK2UgsWinuA nQq5iwpgfwA34Zm2vVxjnBPXxVKVZqiH1VE1muKK8a30kWVedIcXx9gTY8CR SCI9S11DIBCc4Q5pDEv6D8ic1Pdd4q_c8eWrPRnTfrUbMjp.l5eCcdre0UJ7 uKCndg0O13TtfmxfzcdDR.nipcmCDeLUW7Z4hEPTmrFcKZPAEW6jRHIO6Hkp hWd2wOAol5j_5pf4f64rIRXDLWzgx3S2bfmpZR0ruBg–
X-Yahoo-SMTP: qVA2512swBCvmquTqBHkYVRza6AhdQ.MGvYxddLi
Received: from User (kunert03@41.190.3.28 with login) by smtp212.mail.bf1.yahoo.com with SMTP; 04 Oct 2012 23:09:41 -0700 PDT
Reply-To: <kunert01@e-mail.ua>
From: “Paul Kunert”<kunert03@e-mail.ua>
Subject: Attached message from Paul Kunet
Date: Fri, 5 Oct 2012 07:09:41 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_00E5_01C2A9A6.55CD3D6A”
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

IP: 41.190.3.28

_________________________________________________

“Paul Kunert” <joanwist4real1@e-mail.ua>

Return-Path: <joanwist4real1@e-mail.ua>
X-YahooFilteredBulk: 98.136.216.237
Received-SPF: none (domain of e-mail.ua does not designate permitted sender hosts)
X-YMailISG: mcctkXUWLDtDBcCYFXyusvuSgrzFpMqvkeuWu9htMhHl8L.K 5YIRzBIVhx0oA05ld.6Q.BJh8iTiffWbPFKQmHOqIcHvw2mQoN61PLvs1b8e 4W6FFmu4BPUdeEb2iIQids6T9dm3XmeGB2T15zR1WZS4hlWauF0qRowgmzdw .SdMZDvB5_EfOSqYk9R_9475iXykkBcjC6Hd_NWjQS1uBYrbXxb0dD746MAU ynTavjd3MYbSWK3pzHVuAqz.Q1nSaESVDU0rWgTj8EO3_FkcObebI5c0Rmwr hoMkm_doO9xfzIl6e7O4h7vKeRaBy0DPQE9_J6vpIAaRW4gTOv3RzZeAOr4c ZZmjDPzABu2rVAQtXfyb.aPEcjqde4BhDWcS4Pg4Eb.rI7szR57OHfbFN3ik 1FgzxbiTrTn1J0BlVoBcWM8uGOylF9nUZU911L2sUinBQlPTGvsQEcbh0nvj S0toI7cTEUr9qGXVF99LRA5h4904X5Y311NeRoQQMWG3Dye94uyEys6ZXeRP k0sbLI1fx0IbCH_sNjUZN6SAYp.LH2gDpRRa.idtzw5sg5s7FW8RmoKHPcjL EAYbu2kRLYo_b6vG0Xjs233lCtG9DRUj5orGliopm6NEO_9AOpjhWZvXBFtM d27hzooUpvD28rH..BGqGs_jITjsz9gjxJ6fPtj5UnC4Tt61_rXdYlp8knGs QgYrqKE4kbdu9JaNByQR4.Nl9LFTT2ZPk47uefF3xc74pV14zQuw.qHgrbIQ QZep1j_spZ6q8v5mcxm0173WkGYnA46dVL33TilqKCYRBuUC2isMiPXX36FC g8RIzmS5zW_1cSFvSyYnDQ4xzCk3oc6kA2MJaJfQ6sK0cAtCJJ4Ss4wHDs6s QmsctzuR1JHkrHuZ4xf1f5voPC0W8rudMyA9IT3AvHlf32iMW_5BdGdHFYzT JiCJOk9pxlUl0SXDTyUszHtDel2I276QAm1gaJEBLpgW6sBZG8OOeY0W4Jw0 OgVma3kGBMQCw3I2hWKcesFLCXV1W9_03RsZampz6GFQMaan8Uk.PIuhlJSq ut7ByzIDGILM4VvkE4rY4xXE0OzD3.tmZgl7pBzjUR_g6TSnToS.aylHoXBJ Z1zmaTBwNb1EM0xgXinOiB4BbtTtdeMQ6iWy6ZTvHgxpHLtAGaz95SKtm13d jmZTPs2YUhvHswbGeMJLWU.jR2DWf1wiT9n64C0kPiSXSQ–
X-Originating-IP: [98.136.216.237]
Authentication-Results: mta1149.mail.mud.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO nm37-vm2.bullet.mail.gq1.yahoo.com) (98.136.216.237) by mta1149.mail.mud.yahoo.com with SMTP; Thu, 27 Sep 2012 05:27:13 -0700
Received: from [98.137.12.57] by nm37.bullet.mail.gq1.yahoo.com with NNFMP; 27 Sep 2012 12:27:11 -0000
Received: from [208.71.42.214] by tm2.bullet.mail.gq1.yahoo.com with NNFMP; 27 Sep 2012 12:27:11 -0000
Received: from [127.0.0.1] by smtp225.mail.gq1.yahoo.com with NNFMP; 27 Sep 2012 12:27:11 -0000
X-Yahoo-Newman-Id: 218385.41445.bm@smtp225.mail.gq1.yahoo.com
Message-ID: <218385.41445.bm@smtp225.mail.gq1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: WH9WPKEVM1kXp4ok_6hfSESP1Oy4n8qpfic1jgXeMETkr65 0LxNnqyeJzxQLwjMLKtzLB4xxzfs9keFhjydzSUGqYzC_54tl_veKc9jF6CA Jcm.T7dAxelog49SJAoCiPnyjFQN9nYfp_T6SMx95JnqV4323X7sROdgFTbg 5AYbSHVpppVW2Dty_GxOFpzB9c2kqbd8BnE8RRvvOOHql5qMin06X5blqHLo RiC696JMsMfvORU9Fp12gc0cO.CyCbiHpfRH1.fTR8If7L2aPikBNEXVj3Mw 0xquCew8HKks1IdrcVzwyadxQukP8R8ctb07B8C9DqcfU.87Ei_C6rouVvaD Rh5Au3LhTcNFJDJvlt4.HvYEstN18iK9yLjPqhCC4yfUXrdF1bDZKKQjcFLD wJGgm3VRv03bSHTxcKuooA4VdqULjMuAr4w–
X-Yahoo-SMTP: 8QgoOC.swBD5DCtAAG.6DhGxZ8qf1FhoxJ9cCycI1w–
Received: from User (joanwist4real1@41.190.3.220 with login) by smtp225.mail.gq1.yahoo.com with SMTP; 27 Sep 2012 05:27:11 -0700 PDT
Reply-To: <paulkunert42@yahoo.com>
From: “Paul Kunert” <joanwist4real1@e-mail.ua>
Subject: Attached message from Paul Kunert
Date: Thu, 27 Sep 2012 13:25:56 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_00DC_01C2A9A6.74B8CD6E”

IP: 41.190.3.220 (NIGERIA)

OTHER SCAM / SPAM SENT FROM 41.190.3.220 ARE:

From: Dell Crowe via LinkedIn <member@linkedin.com>
Subject: Re: FW: End of Aug. Stat.
From: <accounting@smashedstack.com>
Subject: Re: FW: End of Aug. Statement Required
From: “Bridgett W. Navarro” <coopercurtis@glassoc.com>
Subject: Buy Cialis Online – the LOWEST PRICES GUARANTEED,

__________________________________________________

Associated Harvesters
67.228.80.90 | H
208.66.195.11 | H
66.90.101.61 | H
75.125.52.66 | H
65.111.169.191 | H
208.66.195.10 | H
209.160.32.68 | HS
87.118.98.62 | H
213.103.243.157 | H
67.86.138.59 | HC
216.40.222.50 | H
67.228.115.170 | H
71.158.134.213 | HC
216.40.222.82 | HSD
216.40.220.34 | H
77.160.89.4 | H
208.66.195.5 | H
24.37.14.73
208.101.44.3 | H
87.210.12.92
74.86.209.74 | H
75.125.47.162 | HSDW
194.237.165.84 | H
70.85.113.242 | H
24.10.35.67 | H
74.124.192.3 | H
68.103.197.12 | H
216.40.220.18 | H
67.19.250.26 | H
208.66.195.2 | H
209.11.244.162 | H
189.152.69.96 | H
208.53.147.89 | H
216.40.222.98 | H
209.160.65.42 | H
74.53.243.18 | HC
87.244.228.251
216.12.207.226
75.125.194.178
208.66.195.6
74.53.249.34
74.86.14.10

_________________________________________________

OTHER EMAIL SPAM SENT USING THE SAME IP’s AS THE ABOVE SCAMMER

From: “Dirk Clinton” <backyards6@tattoogalaxy.com>
Subject: We change your life to a better.
From: “OctaviaAngeles” <dorineleda@ge-smart.com>
Subject: Buy Brand & Generic Levitra Online :: OVERNIGHT Sh
From: <WhitlockyfdO8FUMIKO@aol.com>
Subject: V1aagra 150mg, 90 pills, USD 5.06 per pill + FREE
From: “Amazon.com” <account-update@amazon.com>
Subject: Re: End of Aug. Statement Required
From: <LeonardoHundley@mail.com>
Subject: Re: FW: End of Aug. Statement Required
From: ВЭД: НДС с��ав��а 0
Subject: Бухгалтерский учет внешнеэкон
From: Но��ый зако�� о бу��учет��
Subject: Новшества в бухгалтерии
From: “Terri Reyes” <prefectpc78@gordonsglassltd.com>
Subject: Your long item will enliven your life.
From: Tagged<Tagged@taggedmail.com>
Subject: UPS: Your Package H2158853444
From: “ВО��О
Subject: РАСПРОДАЖА ДЕРЕВЯНН
From: “36 ��оток”
Subject: ЗЕМЛЯ даром (реально!) под ИЖ

 
1 Comment

Posted by on 12/02/2012 in Business Proposal

 

Tags: , , , , , , , , , , , , , , , , , , , , ,

A list of Several Email Scams

I continue to get bombarded with spam mail on my (fake) email account that I’ve set-up to scam-bait. I can’t keep up lol. — I’ve decided to post a list of 5 email scams In one post. (I can show you the emails if you request them but I’m going to post the names, email-addresses, IP’s and any other relevant information.)

If you’ve received an email scam under any of the information listed, please let me know by posting it in the comments. Thank you!

Dear Winner:
Your email-address has just won MICROSOFT IN-CONJUNCTION WITH FACEBOOK/YAHOO&WINDOWS LIVE AWARD”
Prize money of 650,000.00 Great Britian Pounds
It has Winning number,Reference numberFACEBOOK/YWL/004/055
,Batch number: YWL/YAHOO/FACEBOOK/025
,Award Organizing File Code: UK/YWL/FACEBOOK
and contact person is Mrs Gloria Abby
Fiduciary Manager
Tel: +27 71 953 3072
Fax: +27 86 542 2833
E-mail:gloriabby114@msn.com
Please tell me if this is just another scam
Thank you
Pamella Koep
pjkoep@yahoo.com
16905 County Hwy 65
Vining,MN 56588
218-769-4389 +27719533072

___________________________

FACEBOOK AWARD CREATING HOPE AND SUPPORT TO INTERNET USERS
Dear Winner:
Your email-address has just won MICROSOFT IN-CONJUNCTION WITH FACEBOOK/YAHOO&WINDOWS LIVE AWARD”
Prize money of 650,000.00 Great Britian Pounds
It has Winning number,Reference numberFACEBOOK/YWL/004/055
,Batch number: YWL/YAHOO/FACEBOOK/025
,Award Organizing File Code: UK/YWL/FACEBOOK
and contact person is Mrs Gloria Abby
Fiduciary Manager
Tel: +27 71 953 3072
Fax: +27 86 542 2833
E-mail:gloriabby114@msn.com
Please tell me if this is just another scam
Thank you
Pamella Koep
pjkoep@yahoo.com
16905 County Hwy 65
Vining,MN 56588
218-769-4389

+27719533072
+27865422833
gloriabby114@msn.com
Pamella Koep

___________________________

SURVEY SCAM – “Sandra Harris” <sandraharris3434@excite.com> IP USED: 208.89.132.143 by mta1115.mail.bf1.yahoo.com SUBJECT: Job: CSR $25-$175/hr [no exp] REPLY-TO: psteele@yellowbrickfinancial.com FROM: from sandraharris3434.excite [64.79.101.178] by web005.roc2.bluetie.com (BlueTie WebMail ); Fri, 16 Nov 2012 13:40:34 -0500

Sandra Harris sent a fake survey email with a suspicious link that I didn’t click on. The link said http://tinyurl.com/now-2013 and the actual URL looked similar expect there was no ”http” – Also fraudsters like to use capital i’s so they look like L’s and lower case L’s so they look like upper-case ”i’s” — try to guess which is which – I or l ?

info@uk.org and <uk_online6@myway.com> <– Has also sent out lottery scam under the same IP

Fraudster’s love online surveys because it’s an easy way for them to trick people into handing over money or personal information in the belief they’re going to be paid for taking part. To learn other dangers regarding this fraud, click: The Real Deal About Online Survey Scams

____________________________________

2) LOTTERY SCAM –  “ATM payment” <webxl19917xx@att.net> REPLY-ADDRESS: atmpaymentcenttt@e-mail.ua

SUBJECT: your(atm) card worth of $5.5M is ready, send your Address and cell Phone

IP: 98.139.44.156

RECEIVED: from [75.125.40.18] by web181105.mail.ne1.yahoo.com via HTTP; Thu, 15 Nov 2012 06:13:02 PST

This is a lottery scam and this scammer is very persistent and will continue to email and harrass you for money. You’ll find a new email daily from this scammer under his numerous free email accounts.

____________________________________

3) PHISHING ATTACK –  “CHASE ONLINE” <accountcheck@chaseonline.com> REPLY-TO: <no-reply@chaseonline.com>

SUBJECT: Important Notice: New Message From Chase OnlineSM

EMAIL: Dear Chase OnlineSM Customer, Please download and read the attached document carefully Thank You. Online Services Team

173.192.75.104 – 

mta1376.mail.mud.yahoo.com from=chaseonline.com; domainkeys=neutral (no sig); from=smtp.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO node-sl2899.smtp.com) (173.192.75.104) by mta1376.mail.mud.yahoo.com with SMTP; Sun, 21 Oct 2012 23:52:54

DKIM-Signature: v=1; a=rsa-sha256; d=smtp.com; s=smtpcomcustomers; c=relaxed/simple; q=dns/txt; i=@smtp.com; t=1350751857; h=From:Subject:To:Date:MIME-Version:Content-Type; bh=gYgrv8ESNcy3BfHUH4Rg8rCCgF5ymGpSHMzHhg/pLWo=; b=HSIwZxK69S4CNqk2LsUSGWButnxW25XWJ1uPhXcSznfTLj2Dw7rpIy+Ld4QA02wZ 1wixERPHB6Tnkzi3GFmN23StdIywpxqfR2XuGTb8d26ZPrhGG8bzhp3bm+/5XO7o SIU54ypzzxJQnmSKDFlkzTEtHmveatLXMczMH52Vx2k=;
Received: from [208.109.198.93] ([208.109.198.93:45348] helo=User) by sl-mta05 (envelope-from <accountcheck@chaseonline.com>) (ecelerity 3.3.2.44647 r(44647)) with ESMTPA id AB/B8-30383-E46D2805; Sat, 20 Oct 2012 16:50:57 +0000

____________________________________

4) EMAIL SCAM – “SANUSI LAMIDO” <lamidosanusi316@hotmail.co.uk>

KINDLY VIEW ATTACHMENT FOR COMPREHENSIVE DETAILS. (I don’t like posting or clicking on any attached files that require downloading.)

EMAIL-ADDRESSES & IP – Return-Path: <lamidosanusi316@hotmail.co.uk> X-YahooFilteredBulk: 98.139.212.171

Received: from User (lamidosanusi316@60.190.189.214 with login) by smtp109.mail.bf1.yahoo.com with SMTP; 18 Oct 2012 11:04:03 -0700 PDT
Reply-To: <lamidosanusi316@yahoo.com>
From: “SANUSI LAMIDO”<lamidosanusi316@hotmail.co.uk>
Subject: IMMEDIATE CONTRACT FUND RELEASE ORDER.

Associated addresses:  jesksoito@mail.ru

____________________________________

5) “NNPC” <mabiola1@e-mail.ua>

Return-Path: <mabiola1@e-mail.ua>
X-YahooFilteredBulk: 217.12.10.75

X-Originating-IP: [217.12.10.75] 

Received: from User (mabiola1@41.190.2.39 with login) by smtp133.mail.ukl.yahoo.com with SMTP; 18 Oct 2012 05:29:28 +0000 GMT
Reply-To: <mabiola2@e-mail.ua>
From: “NNPC”
<mabiola1@e-mail.ua>

Subject: Attacched message from NNPC
Date: Thu, 18 Oct 2012 06:29:29 +0100

____________________________________

6) “Dr. Pere Hart” <dr.perehartofficeonline01@e-mail.ua>

Return-Path: dr.perehartofficeonline01@e-mail.ua
X-YahooFilteredBulk: 98.139.213.157

X-Yahoo-SMTP: Q0etPY.swBCIvNsasj.Txo_Zd8q.xZ.384ofxazXAHrY_jjdPRJW
Received: from User (dr.perehartofficeonline01@41.58.27.102 with login) by smtp113.mail.bf1.yahoo.com with SMTP; 12 Oct 2012 05:00:19 -0700 PDT
Reply-To: <dr.perehart@yahoo.com.ph>
From: “Dr.Pere Hart”<dr.perehartofficeonline01@e-mail.ua>
Subject: Open The Attached File From Dr.Pere Hart Deputy Governor CBN

41.58.27.102

 
Leave a comment

Posted by on 12/01/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , ,

Dr.Pere Hart officeonline82@yahoo.com dr.pereh@yahoo.com

Lottery Scam (Central Bank Of Nigeria) ↔ Nigerian (419) Scammer

Name: Pere Hart

Email-Address: officeonline82@yahoo.com Reply-To-EmailAddress: dr.pereh@yahoo.com (drpereh) 

Subject line: Hello Dear

Email: Hello Dear,

I wish to inform you that all matters relating to the release of your payment is now under my control and supervision. I am the deputy governor CBN.I was mandated by the President Federal Republic in conjunction with the Federal Executive Council (FEC), the Senate Committee on Foreign Debts Reconciliation and Implementation Panel on Contract/inheritance/compensation funds to complete the entire unpaid Contract/inheritance/lottery fund.
This development has become necessary due to the activities of unpatriotic government/CBN officials and impostors who keep on frustrating every benefiry’s effort to settle our clients by making requests for unauthorized fees and levies from them. That we have resolved to put a stop to in the current payment schedule to ensure total transparency and orderliness in the release of all pending payment. We sincerely apologize for any delay you might have encountered in the past but be rest assured your payment is now 100% Guaranteed.
To this effect, you are required as a matter of urgency to reconfirm your information including your name, phone number and your address for verification and immediate release of your payment within 24 hours. On a progressive note, the sum of US$10.7 Million (Ten MILLION, SEVEN HUNDRED THOUSAND UNITED STATES DOLLARS) has been approved for you. Kindly choose from these three modes of payment (wire transfer, diplomatic cash payment and ATM card) for the release of your fund to you.

Kindly get back to me ASAP.

Best Regards,
Dr.Pere Hart
Deputy Governor
Central Bank of Nigeria

Return-Path: <officeonline82@yahoo.com>
X-YahooFilteredBulk: 72.51.25.85
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: lulAo4gWLDs9SSEM7lCzQwzbp34RZEjmH2pULm4LNNKVcbym VovXEgWn34Pbiwbi92_xnQ4PmMgqkDe7N5o8_DYqEFFBNyZenOxpUEYQSEST ofGfirqofKE7p3cAPaF.THmlV7JF2Ye5k_jDq4X6VcnkI6GLs._QdayLdZDk j4Rq1M97hYtWGK6ouZmfKgQNZPF_vYzD1bdq1vWMYuQ3ZxIC8liyUMiSFH7s eepp0QXe50e9H8syB4fD6KOHTfWo0uwabBocBE5k0xrFG8SBd1SRfEdjDyOz LjzgImDo.NjgQE_Ib_RScC2m5duMFBSwRHJqsNryDExJO5YVzszGDey4lP7T c24FO5D6rB1sDSPSB2Oxf8e7Vb2Xa6VXAKEES1mM5PolzMbEvSMASso4dxxk g.sILhJRheHVnIgaS.rMXdngtRtPw7ipSuQgD3hg6ngCtpVNmbt71U6NMV0s 2NglUyDtfsT9ItHgrzbPewuqCuCXvFs_aXTdgaMDQ2ddPRukxlNzjAVnARrP 02ntXZiRQNYmrDjQlvYlEaAUo29tzo5W_4Lo6WCQFQP.JdKJdiVO6RMFCToL alelKfcdh4mxCecayl9Zag6tDypVUj6D5DxGJU8lZlhHXl5wAsbiwh5zraN1 C5BwNUOLQQdz6aTzhZxgKiwvGRQXQQprBagDApvpUHgzs44OZNfToBKtGYom d7xhPrw5YxttYtB499siOaR6YnExq6pDDqnvfK.4A4PEOPEZUnSEAMTViJjb HnwnR6I91AD0LjUPAmEvebvb2Xkw0lziYYl6VcQBo6P9HrC025Y8eU1uLD.V V6TjHgeSpAZW8qSRgz8R5sGgNILTVxyIqfQz02AFiqJoSX6hQXakdRnuJ5gB XD2ygdSvz53ilZyOzLbJz1RCVJ7HBP42_tdtTS2t0axFaSYho30iAgV37oOb n5CpxiQBI46Ht6jHZUddJANzUii5Mo2SoMinnabJvU0EPVs5d_y4B2Y5tzbl Y3yn.Sjy6vp_6HpoLBBaRS5BPlCnuP67ESVumZ3Zlf4mqSRlcvMEJZ2CUY80 r61pMRw7k1B1LKHUrZAATYRDvfQm5_JPwDao3rEEYXAj71SK51CojNPXGh9i RhNW38VC7uxVy17kMrqr4ri6v_T5KH6XrgZ.cg7B6kj0mzX7LAMAalcbrFQd Z8wU2jQ8aVziE1gswXuz0LVfP786mgUEQujQZlwqTPz4Mti8QnfWfX3VqVNp CCOwn2QPleB5_ikfuIYjPjkkIFxzvvOIrx.FMX4hwReTDBOP_t6T9MwLZN2h .pWtTBqa16ol5IHIHbK_GAm.
X-Originating-IP: [72.51.25.85]
Authentication-Results: mta1076.mail.ac4.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO vps.funlearneng.com) (72.51.25.85) by mta1076.mail.ac4.yahoo.com with SMTP; Tue, 16 Oct 2012 22:11:43 -0700
Received: (qmail 13397 invoked from network); 15 Oct 2012 17:03:30 +0400
Received: from unknown (HELO User) (213.230.19.136) by ballebc.com with SMTP; 15 Oct 2012 17:03:29 +0400
Reply-To: <dr.pereh@yahoo.com>
From: “Dr.Pere Hart”<officeonline82@yahoo.com>
Subject: Hello Dear,
Date: Mon, 15 Oct 2012 16:00:40 +0300
MIME-Version: 1.0
Content-Type: text/html; charset=”Windows-1251”
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Content-Length: 1943

Read the rest of this entry »

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: