RSS

Tag Archives: Scam

“Dr. David Mark”

EMAIL SCAM – PROPOSAL – FRAUD

no-scammers

THIS SCAMMER ALSO SENT AN ATTACHED FILE WITH THE EMAIL.

VIEW THE ATTACHMENT FOR BETTER READING AND UNDERSTANDING 

Return-Path: <WAYNESSTAR06@aol.com>
X-YahooFilteredBulk: 113.105.185.152
Received-SPF: neutral (113.105.185.152 is neither permitted nor denied by domain of aol.com)
X-Originating-IP: [113.105.185.152]
Authentication-Results: mta1453.mail.mud.yahoo.com from=AOL.COM; domainkeys=neutral (no sig); from=AOL.COM; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.szyfd.com) (113.105.185.152) by mta1453.mail.mud.yahoo.com with SMTP; Sat, 19 Jan 2013 22:54:55 -0800
Received: from User (unknown [68.213.28.167]) by mail.szyfd.com (Postfix) with ESMTP id CFE29-BC0E-50FA5274-26363; Sat, 19 Jan 2013 15:59:48 +0800 (CST)
Reply-To: <davidmark.pay@freenet.de>
From: “Dr. David Mark”<WAYNESSTAR06@AOL.COM>
Subject: YOU’RE PART OF THE MONEY. AT LAST
Message-Id: <20130119075948.CFE29-BC0E-50FA5274-26363@mail.szyfd.com>

RECEIVED_IP: 68.213.28.167 IP_USED: 113.105.185.152 FROM: DR. DAVID MARK <> WAYNESSTAR06@AOL.COM REPLY-ADDRESS: davidmark.pay@freenet.de

 
Leave a comment

Posted by on 01/29/2013 in Other

 

Tags: , , , , , , , ,

IRS Phishing Scam

IRS PHISHING ATTACK – ONLINE FRAUD

WARNING – IRS does not initiate contact with taxpayers by email to request personal or financial information. 

NOTE: As soon as I received this email I thought it was highly suspicious because not only did I receive it on my “fake bait account” that I use for scam baiting but also because IRS doesn’t send emails and they warn about phishing scams right on their website.I’ve looked up the IP(s) and header information and noticed it was blacklisted on anti fraud websites. Regardless, if you receive a email or any unidentified online user contacts you regarding money and personal/financial information, DO NOT GIVE IT OUT!

THE EMAIL I RECEIVED

animated arrow down2

 

Where’s My Refund opens January 30, 2013.

Due to recent tax law changes, we will open refunding season and start processing individual income tax returns on January 30.
This applies to tax returns filed on paper or electronically.
Our new system calculate your taxes of your fiscal activity from last year and you are eligible to recive a tax refund of $550.
In order to claim your refund you will need to follow the next steps:
* Download the attached form.
* Open it in a new secure window, and follow the instructions on the screen .
You will get your refund within 24 hours after we’ve received your e-filed tax return.
Generally, tax returns and return information are confidential, as required by section 6103 we may disclose your tax information to the Department of Justice for civil and criminal litigation if you are submitting invalid records .
Sincerily ,
Internal Revenue Services .

This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

HEADER DETAILS:

Internal Revenue Service – Where’s My Refund opens January 30, 2013Wednesday, January 23, 2013 3:51 PM
From IRS Wed Jan 23 07:51:23 2013
X-Apparently-To: deleted@yahoo.com via 98.139.220.247; Wed, 23 Jan 2013 08:51:41 -0800
Return-Path: <notify@irs.gov.e.com>
X-YahooFilteredBulk: 109.202.152.250
Received-SPF: none (domain of irs.gov.e.com does not designate permitted sender hosts)
X-YMailISG: e9gWdlIWLDsVuDoRgzBswxOsNA_ALUCiZ94Yo_GWveDhkE5H XMWm0qDjKA74EzfR2v4U39GjLKyY.tLS2ERBwh8QfEiw6xtMQXuQlwVzLl2d RJ3G2gcy7YXo.kiHr1zYnAy2phBJz_svN95DBa5tLrgMj_bguPLUoWjbWku2 WAqROTpCvFZl9JwRJTYprkGQitCDIECEy4SJb_z54DL7hpJgjQ2pFAzsPIuQ ntA6vloWDZzpvBpH2wh3_xeONQ_83lFE00nr94l652jT_oOgIkiCGpIUBhnB P5tPsFERmMNOP1tIr6NRzxaAEk7nQn7V2u4JV7Ybda6Y6bLNYkJZNLBLI_GG CyMYgwEK0i8V0o0wI4GgnP6uf7UbAfoxYgnZczb4hF9EFmVbF0WQAkU4KP2w OF6HwlRTgczkc1o7S33xg9j47cCXwOVlXdlv5hwqFteGOC4dSmZqQpGciX8C DN834OELrIAaYJtx23oJxUuAt88m.8H3hhZmRbAU24Fa3KsaQoZn23MKMfwW odS9yjtrg.dALJN0VFh2EDOZMMdZG1IZUnCdJ4MQeMPyCndMUyE_Cpa_spZM JeRmb9TtYwNR04S2SOXjuanwLGIVuGu34vuIeHPO56KUuYaWZbtY5M8yymat .jFENS3LsYyRFXCOzLkTPq2cDzaLq76wdP3mfS8tlk488DRSpv04enXKstEg fq9A5vXAKHWgltsPDcWP25RZfcwSbDriislv0nwXBGJUWVLY0StIhyKfRLF1 et9V4Zcgy0wdwJAco7r9l5V6Tw9tfgBzsgE.zQ6C3MgC9NI0X84COjoglzOE F7CDHeeyx3723DnU_UCfp5pOphQKbUG3xJoWaHFEOV7lPjqt8LEE88vGIgoU _9o08aQIgGQUrFN3O_ZMiszwr8_m_jiFoykiwN4WSGBphovmuOArcvkMXJ.L KjZu.3humATM922Yy2TWCEdqHSaYsMsYV2W39z60iB_M0WxJhm2WSOIDHyg3 HQ2JpAIZ7wXvKqM886pUR50I297J32RCrQlr5IPcjbWZgwRllKOmTWhsOypI fjUUAk6cVKzJZlfEN7z8.cFKHlb1DigaMk3pSsADkBR_H2IW..2q9s4KbDsp Gco3D4lqHYqtFP9Uz_YkWUrbEmomVSv8IK5e_WgpHQfvDr9YyN9Et2UICzDr sSfAo3ezKUpFVBBHWDkQ.fyMhOtsLQ5HN1hzllJY7g6Bgc6DB_v4VGT1_.gW 4b_tnAE9_YWWUs.eyUvShqtRkhyPaXyK7FFqsOAC3FpxKHKDgYRwQK64fd7R kPLbN0JKNZCeCPHbVmwe_GQW39dVvaVXug5_Zx3XGsMx1hPW09VmQf7NPoCc AoCQKkw98gK9lSR6bb7fU8jVMtj40VPTVtfp5smsqyGRolgJ3bd0PZRv9itq O7hpNMrthaB2UEWKjni1NJmSMXSSkde0hbkRVphD8FWlp0arA8J1QQgN13.H uA_Mzfe4twcZfdJs3GbKXSdInR_DqmLsTumkAyqZ3LWdCU_Ns9DsJIsto6yu _f0IinFxSMriLOu0kDSTloYWoeQpIA1PBNgwuLggbq_MbM2BLJIcImMRhXL5 p.4zXTWpD2vkWwx4NjgH9QeOKcLVjzNrW8WI6.IxR3e.4VuOI.OqFJ3wdcbO D.CK6vPMS_r6SSXira5mqPN0MyL3XcR5NL_LyIrqHCcYiPK84c3hHzyPlPEh N1KWe8joijPKhNdcXjMTcM.MASnrhuACslmceToaExR54srG93YLv.GTGDiw 2VVTs.9eTBD1_6uc4fgYpta0y3pQ8aUCWRdGwa2jGXASuy8JawOen9OFIkvW iyalHrsiXFG9PkdNtwWBwaO.FhNJlSbr4q7pqQpZSVVuqeKsdD_ojtuUVMma W29GIuqeXO4Zj9lrmyfWswzCe34jeEgVHZoAcURQZBU.ZU9jHn0yRw–
X-Originating-IP: [109.202.152.250]
Authentication-Results: mta1247.mail.ac4.yahoo.com from=irs.gov.e.com; domainkeys=neutral (no sig); from=irs.gov.e.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ltidkex01.LumasenseInc.com) (109.202.152.250) by mta1247.mail.ac4.yahoo.com with SMTP; Wed, 23 Jan 2013 08:51:37 -0800
Received: from User ([185.11.132.8] RDNS failed) by ltidkex01.LumasenseInc.com with Microsoft SMTPSVC(6.0.3790.4675); Wed, 23 Jan 2013 16:52:59 +0100
From: “IRS” <notify@irs.gov.e.com>
Subject: Internal Revenue Service – Where<92>s My Refund opens January 30, 2013
Date: Wed, 23 Jan 2013 19:51:23 +0400
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_0094_01C2A9A6.03D1B7DA”
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Return-Path: notify@irs.gov.e.com
Message-ID: <LTIDKEX01jnzi95HfqR0000003a@ltidkex01.LumasenseInc.com>
X-OriginalArrivalTime: 23 Jan 2013 15:52:59.0099 (UTC) FILETIME=[B7A89AB0:01CDF981]

notify@irs.gov.e.com IP_USED: 109.202.152.250 RECEIVED_IP: 185.11.132.8

 
 

Tags: , , , , , , , , , , , , ,

“Kelvin Brandon”

WARNING – SCAM

monkeyscamgif

i looked you up on online and i believe i would need your service in a few days from now. please confirm your availability and drop me a number to reach you.
Kelvin

HEADER INFORMATION:

Return-Path: <financeftu@s2.ftu.edu.vn>
X-YahooFilteredBulk: 117.6.174.35
Received-SPF: none (domain of s2.ftu.edu.vn does not designate permitted sender hosts)
X-YMailISG: SHu.UKQWLDt8Lj.RL8cuJE8s5SmMYeNE_GSC3gBE.AAPfo3Q JTbUAOtvOp1pb1FoCgUJrNPaRDAfNrmnHAyPsJVtuctbloimHcaW2INBliqu R_3TAzz.2b6Nc9ukSL8Qytu0A.7YcDb5OzfASqQxIU0cbh2bMewUSHnmt0ti 5lIHWbHtta2bao5_xQvl4XACpjravK.Oorr842LtjkhnTqNgvcMQH1TecAPI Sx2lVTZayf9TE6UaYaFmeEQeifBJ4POe_gxGr1jw643Luzfvdpu4rKlkT262 _4MlG7DXHdTamVIG42mE7.Xno.lTCwq1brmSwQ0uLvJaKtKBIYAQgmX2qu0J JG2hbCYcrXj2jWWAZshSGps5.1BZsBAhDorPwUTmgVnQGHABZxJSjiELLM6F GDFeRtDRlMSs2TOCZ4QsTZORGzH6hyccoLgejZzbLHOhzojZzGv1MEDnzgIf Qsi8.sM7xwCxsabBIFZrdQkK13uFCH5Mb87THVKdtOZbWexapM_bfXNVC4e5 oUgjMckiak47atgMSB9CX_UUbUTQ2F_Nqe08nSRdf9nNkLEruW5mOduA_j6R ve7zNy0l7x6D72Xo1ps_qiu3mUeYmGeQlOxpAOMFjLF1fYblomomHb6JnXjj gzqi2.pSlauQrwmGJNsLClsFcsrHHH61PD0OQ1IyxxLaBGjlNZ2IxZsEhWj_ m8hVe386aCYhatCrewEr6BP5TuyAsEVWBL3wytSlV3e1S6tTbJcjvvzHtmEp sCQF.anFFU5YaF8XiPgHSWAlLsmgxn8k_pPyfadoopXRH7czFvRJiuBVRqfV VCcSNLt8HVPpMSIBjh0JslJMVvtAFZ4cRJVJ70Iyt5mp8Iq_no_m_vniT_z4 rZBraU14NTeD7SU6QVC_glrFpcBsqBp3N6nBI_pwVFO5bEJ5Fikt10P4nUKl HT6d_xizdWJa1NPDS1mJZjnlf.CCL12eMfdxDKG23CWSciK8Hxh3y8wbP1iY V.8LXSVGRACBS6Pi6xwAk2ZpguMd7XgHEthFueApZiGeQtp6BKTqjZa5l2mF FXFCRWwiJQBeumFGK3vM6bdWmo6Sk2QbbdkMyUvNCvutfzJeMNsZLbwWKpge CCPZmEFaUyYWzFk2IKEykMrBX3Nm284-
X-Originating-IP: [117.6.174.35]
Authentication-Results: mta1342.mail.mud.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO s2.ftu.edu.vn) (117.6.174.35) by mta1342.mail.mud.yahoo.com with SMTP;
Received: by s2.ftu.edu.vn (Postfix, from userid 539) id 736443ED0EE5; Fri, 11 Jan 2013 06:27:40 +0700 (ICT)
Subject: Service
From: Kelvin Brandon <kmosh00@hotmail.com>
Reply-To: kmosh00@hotmail.com
Message-Id: <20130110232740.736443ED0EE5@s2.ftu.edu.vn>

FROM: Kelvin Brandon kmosh00@hotmail.com RETURN-ADDRESS: financeftu@s2.ftu.edu.vn O_IP: 117.6.174.35

This scammers most likely used the name KELVIN MOSH at a previous point. Scammers change up their fake names once they’ve been reported. They for some reason keep it similar for example “John Doe” with change his name to “John Smith” or “James Doe”

 
1 Comment

Posted by on 01/16/2013 in Other

 

Tags: , , , ,

“Agent David Jackson”

NIGERIAN SCAM – FBI IMPOSTER – ADVANCE FEE FRAUD

UPDATE: THIS SCAMMER EMAILED ME AGAIN — BOTH EMAILS ARE IDENICAL BUT WERE SENT UNDER DIFFERENT IP ADDRESSES — I’VE POSTED BOTH HEADER DETAILS BELOW THE EMAILS.

NOTE: AN ATTACHED FILE WAS ALSO SENT WITH THESE EMAILS TITLED “FBI AGENT”

PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY 

HEADER INFORMATION:

Return-Path: <webxcc14@att.net>
X-YahooFilteredBulk: 66.94.236.142
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: xoKjTDIWLDuBkmVXmCPlfbv_WZIjE5wra.dGk.EGLHd0_Ik. pzXPk3w2kzAxCK7MZDCnIjPAHX4nkOLUWkVgvqANtwsS4AgS4bOVG8Lv99o6 3BMAirzElljzLZY4wdsWw9WleH1CZEp5.UMq53jijuMwtIYd7x.ExSbD27Ot r3_dTsJdFRmlrUqFnlFrxRjc4clsrYTx8MHP8xgBArE0aAgckgmkh_NFaXes eFxkLeTk8B2toXNzOIeea16MI2RpMzkNQqVdZlAbQv9U61_3c.oKDxZ4sV.5 gY8pcctoBsIZGG9tOZpijSRxkY_VNxPwzsIyYElyeo1jXVFkDNpuiHONH_U3 ApMQzh.wDU.jhNuXBYpwGIlhfv9oTEq_hUh8LCwDygA8_4mjrCUa0F.lWk.R FtrDdBD3ltOXTwhRO32pjVB1CPDt6LTZ8YdYZkkguJVLCSNZdLESt5PiVvd6 lGX8smgbIpn7foNPQkAZVH9SBLePPnJ0LgJ60bsjU83T4qfyrukgl9KdXub7 MABdwmieVghKVFJMzfloN9dLl3RNh.YOCUdkfqwYsgMbeNtb5H7_eCFoK7OP D7gfZPsFtVjEXCNrOM0LafoFgGhsN8EKmcfG2ezRE4LEMYJCNNTmTHWcR57P jIP1Um.Sqshw1pFjj1DLniKvydPsCH3Ss_G6feYrvRrZQNOYYsMXe7s4p14o d9cxRoG0dZtitQC0n3nLFx4qiuT2TFhofBB.T.t1sPhZQdnHcBuQzEmbw1i1 xoI73b1xEwHowauOTWfTtt9TFec9QoAuR69SdrMYaMquwaBt.7t3JqTeIs3B V2nXriD8bMHx3ZE7uBxrrmHVS1GX7GYQgT.k3k.6tvB.2iG91etu1UizkS0X 9k4tNRukg_JqZO3GaUA4m9_by.IJ2P6ysrjfW5D4Cdk0a40F1JmzcsALitH5 khgOiV_0COJR5YLbv80xYavNu8lx5CcGP2ls_jfPSGGVbec3_kdLutEoMV3b wnZyd3FgAPiF46OlBp6wWlEU4ArRRbe4io1JVzBUJJyEfH19Rn_rSE7QLov8 CCmTFPY0xi4mWBEnBbzqZMBQ.2BgATYUweIU9yCuYLbnrAo10iRptjeTPSHA kthPnAzgcpRZn8pVoo_4jpjojKgxrTHoXjOlKzuAULhX2atdExaU5Sh_gJzC pfBqTBC04EV5r4qQEO12X4W7YTkZMSgisiCHupFcs9RXCE7u4lBAm7jVSZzk H8UZHkKp6JWDlPMGbgmKLnzIKNn.Uv1xksWV28YWO2S.3H_reW8aFmqzUlYo fqpup8uBX7hERv.02iQgBflO9NRe48RUorCY2YsBeBUqEz3UYD_FL8yNVGz7 wfXDZjkeJwjKpvZjlyR62Bcp6CNEaS_VeNV51bbgrMtOyPv95FYzuVIVQnXa J6AQ735T
X-Originating-IP: [66.94.236.142]
Authentication-Results: mta1133.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm23-vm1.access.bullet.mail.mud.yahoo.com) (66.94.236.142) by mta1133.mail.bf1.yahoo.com with SMTP; Fri, 11 Jan 2013 05:00:52 -0800
Received: from [66.94.237.199] by nm23.access.bullet.mail.mud.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
Received: from [98.139.44.93] by tm10.access.bullet.mail.mud.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
Received: from [127.0.0.1] by omp1030.access.mail.sp2.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 296482.1479.bm@omp1030.access.mail.sp2.yahoo.com
Received: (qmail 37215 invoked by uid 60001); 11 Jan 2013 13:00:50 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1357909250; bh=AMv2pcNcaeNlJVqHQriJ4Ri1HfCs/cWs5cs0YO/zIGY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=dOKri5+JYYcxJT9h7uxBXePMdTKL9LgDJaDxXAXuKXkol/FHCkW7VSrnFN/3MjPpf5yDolF9ISRT3voPGp6JR3IPgQ6gQn09IbTLKDTDiZCJtIt6LZ6Nh5IFb/P7xZF91BeaW6wRFYV9bDF79MeUxbR1nBQ9Uxx+tDmuc2EHvuA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=IJMFPznKpHxDIYQ9bzl24Q3XMLcjmLv3vEQCNFIYPov7S/flRvjby7HCwZuoE1DPiKcsiN1BxsM/0aotpqOdM0QTrBTCejq8SrPEheI4TCwU7Ow9eW7VZcnTNDZH4zvHDSWPf1dZ4Lt/aiO8S5x9o4N5yeWcTXUfe7p83oGb8hE=;
X-YMail-OSG: TDmS3ggVM1nfAjpQSEiVdV88KjCqKzlApmBtrsiihrc8lyv SQXEYaC4icuKbPOXdw0EDFm2oJY1QxbTQ9LQNzqiBT8cLE1ctrswApbp5smO UN.d_cYwa7eVA.2gprfdTU5BLUnee57BJB7mmSZ6cdmaK0zaCmqtEjZOFNCy IEjbDJzhAllb4ufC.JkScVlCUEAYHdm47QsJ29uunh.nwHbpwD5Aqc7OZPRd g1HSfA.SpgPudxZKy7x5x9C1zF5i3wRJiGN.hUGxF_orR7J1wxmW6uixQ4Q8 HcuUu9Inx20Xp7X1gWIXpxSKuGG2i5sX2GIEe.jDAXtXKBES6vuBRUc81DV_ WU8Pu2Bzqt5ECCkCZyrlYveBNfRo2anoYH00EU0JO7uvnmLlC82wp9tEtKHK F0IlSIOGPTMvMsscdUYj79v3PD3P2dZ.SuKoSdB.9fq5nJK1xTUKEg6T9jcI 9PgL80ABFGZFlkHIbPNHXy_0Qku6Wbj0YoV79stu043EWcSjVc..30TYjf_G ZyVd1eNlz
Received: from [72.64.146.136] by web185002.mail.gq1.yahoo.com via HTTP; Fri, 11 Jan 2013 05:00:50 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357909250.70203.YahooMailClassic@web185002.mail.gq1.yahoo.com>
Date: Fri, 11 Jan 2013 05:00:50 -0800 (PST)
From: Agent David Jackson <webxcc14@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

Agent David Jackson webxcc14@att.net 72.64.146.136 >< 66.94.236.142 REPLY-ADDRESS: david_jackson141@yahoo.co.jp

___________

FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY

Return-Path: <webxcc14@att.net>
X-YahooFilteredBulk: 98.139.44.167
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: jjzWyiIWLDvQAq1bz5qLzCO2.QJuQdBJN6zZ8UglWMf8e7nM 9jdFsjujbwAPbjhWkM9RYr5QgmMx_7ksYyMP7Jjs3XZYq8QJ.JOCflql1Phg uIEC1jKdcia99ibuuIZ1iyTS.YAWVHLQm773M33.9zH3akABbi3OAxcFZdPa _TyUllSVHN5uC3.lOCrpSjlvoHAKplQ8reqYGh_wUeyz8biM7zko0f2p3pdz bZsUy.1wsFHQaiIztozIyIdoXX8_dQr9O0DwjrcYx8_mrsoohQXDmv0Qd0F7 bo.bDYicT6riOqq72kZPXTe5UREAcMQnls_gqnDfYn2tNUkhIP.JFtt3kFOD NQ1lhN3.C2p0oKrVYvZPPwJltKHjidAvCn4Q8ihWax_B3SnFA7QB73pYOvjy mJmU_WrXbJXxa1H3lKu1OYy8eYc5trelPUzNd06xUgb5u.q4lsRv4pEMuhlC 3EIjl6qhXHmCkyjNzL0guKnsS_nNfVyv6IhA_UoAdGURE8PYvSRu.uKVpE5s PuFvknOdTp5VKOqZlPWZRtIwAFiiuFeTyBC7d2LpH8MRTjRMq0LLXjaeDRRf 27t1hfEygTEKI84MjRY31u6pEyJVx_f14A14xGLL2R8a7nBQnoTZ6xqa2PVy ifE_vufn7zejkeijo26POkYD14lPWROAf34bIoR6VvEMzvGGmgldWYKtP6_T OdwC8QgTaGzINGVLw.oBXZ5QLgJjOuRIwZ8ZglAmJKEmuuzzOp4khM4oIbwN Xm0i_P90x5x8kAmH8507dNT2yBBXcT2C0nj_gWggOL8NO9LfVtPUMC_UPviL GfefUvwQgd73k4k8woYRnAC5xVKMX6DZpW1mACwOFYmO3ukpLYaih0AW7ZN2 WGty8iF7Ra1AQp0HRbTxBV1uNd13_qvS8BpSUt0FxtwWBk3zZuJmd8ZdL1EW Mj5JrL8GFK_uz7NU71hIndLApqMh453FEbGnqUXiDVvaIPzku.a1ncAWuacT xHju1mSZQzcrmbN7jHnFzE8inD6aIBDf5BKcN7xa.w.KsGbrgwHT9dyTWCiB U.oXyIM72g4dZkOOe5WYd3MIpUw0a_YM6Lv.X.4CzTJAALD0jm5_ffFE4hzX UIusKF5370W9qtmDSI6cpy59NfzqeNA8T1FVQzuvHCzSV0IbXk4Y7LyOPCOF jYe7w2CWd8xrD2EBt.d5BEAupDSqk9bUSxQsNtDD_eN9Cq9Ka_NEMmnj2y6l FY.ygqon9EjdQ0HJdOB8CSLRsd.OpSSwWu9h0JRBaFxn4gZebvUrtEAWma6B wV6WwPJGCV1rsIa3NaCj2xumef.yT.F73q3WzUWX2qU66IvuMLYSHN5qNLmi 42Ez_5GDASpIpdzYuA_x._xh1oo-
X-Originating-IP: [98.139.44.167]
Authentication-Results: mta1045.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm16-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.167) by mta1045.mail.bf1.yahoo.com with SMTP; Mon, 14 Jan 2013 05:27:27 -0800
Received: from [98.139.44.105] by nm16.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
Received: from [98.139.44.73] by tm10.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
Received: from [127.0.0.1] by omp1010.access.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 252445.15343.bm@omp1010.access.mail.sp2.yahoo.com
Received: (qmail 27093 invoked by uid 60001); 14 Jan 2013 13:27:23 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1358170043; bh=Zm+DJwrwGZlIA/LG24aCrFEpyMJ8dMFzxwrXD14xR1w=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=5ml0Xm3/BrZ7EuPmGpWRgsPNYtHEUNpHsbSSLkkKDgu0u9cI10VSDqgFfoGsE2hrjAML3CC4/aUra7VOYh1GwZZmELiL2PnYvSrBDs508LqoJo0Jk0c40hixsaQO+7NRh0ui3n9wKVixAzfuMuBORXUz4isAM9Uj2r8RRq2OPvo=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=5Cl+v6lPr2mrClM1Tr3uoEcxJGT6po046oHmJqVXsidvAjGm2h818ba09wHtcX4h6be+zslui+s2f0LUbzuCsqrDY9DxKTWX/P0a5jX1HE5fg8cg2gWioTCmUnizj5Hnpk8JXnSQBmXO05ybxFll6OTtEZ8KJfQhTw0INVCPdGE=;
X-YMail-OSG: .au7dWcVM1mjbQkta19wLaNG8g565zmamCIhdNrIz5J4oiR Ei87Eg4zRlKOTdWciw.equT5lByIRZtVJfezeL10GmmrKTYeitYPptLbUICU 3Anf.JK_3NAzOf99bdmAe2djTDVFpgkFD82cg4kjZTZjr5gofpaquzxJRp3i DRy5pvhmKi0SE6TRfn1x7wsGYnfPcKA3cWENK_oBoLL3yv37iM860nmaqUCk ppgmkkgx1JZEmdnTtvjUzzdkfWPoN_LLOJiuKRtHby4bABJGJwhzpQEebrFJ 6GriB_Yhx74xtLzYjZL3gtysoUF0QZN4xJRBYjkGbB_kNsbH_XjgdYxlJFzs WOYEZ0HTWXt2ZO19n_285v1Lpod0jDlJGke15uWv2QkBAdb8npYY0TJpxV0u Gqj4IxurvaVeU0V1zj30cyHHuIeX4sW_mftM7AI3WRXykHTZiLe.e4mZ8PJW 9krGUKD5CM.vs2nGKr0tUFPFhuaZ1B18Mc.me7eflQ2zq.F92sv8c2mNAADB Qbpuzc04-
Received: from [64.72.78.27] by web185001.mail.gq1.yahoo.com via HTTP; Mon, 14 Jan 2013 05:27:23 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358170043.12150.YahooMailClassic@web185001.mail.gq1.yahoo.com>
Date: Mon, 14 Jan 2013 05:27:23 -0800 (PST)
From: Agent David Jackson <webxcc14@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

Agent David Jackson webxcc14@att.net RECEIVED_IP: 64.72.78.27 ORIGINATING: 98.139.44.167

_______

Message contains attachments1 File (36KB)
FEDERAL BUREAU OF INVESTIGATION IN NIGERIA.rtf
PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY

Return-Path: <webxccccx4@att.net>
X-YahooFilteredBulk: 98.139.44.169
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 9LjqTrgWLDsWa.HbSNWNBH8jAOpaObL1Edc7fNdmRImcUBZv xZofYsr2bdMW1WQHSWtYRWXFljhG0QgPPk.D7mX2yHJMul_Vd6cPN4lzpqBR QObxIsLNz908K0NbbkGfnPzo77OMUH6cdcV4k3GrPli1vAdxeFm_iNCu4EDE FIohu2_hWwnjV9DF4dxpCK9yrXrnp4W7oLuqKByLsWDTXHH6PuvHUZ9HRRDl InKZ3SeEQJ1Ruj8sAnn2stoWc6z4W3KN2OPEA7a5uUjI5dzAM21Xj1uOGpKn PmSpxJRQPUhDOK6xgSRVwyJxqFSS5akOAejt94XnGPVkOcdxHVZuK0VxXlpb aD1YL2o6EPhq3kXV9S1eje77SfpxGupfC4WxqpyyuWTyI38uHjGGkQoK3992 yz7cogcpQzLdN9xoT9jYkoR9VGRUHMeY36p5xjZai0NB4CrYoNSaeXPCOWz9 4fRkfNe_WL2yLRLLYbyQhCJ0UJvG8yqZL2BE.9kW1SCfI0pt.25Kqw2tZ2Sx H8lRk0x5_GRlZ06JVi1AqY21IHiD5uwSxqPliBBh98MJ.xID7VjJTa9nlnTk HJr8QB5cLaID3qIjqNk1TtKW6GXe.c7lDu3EdhMMFN6V1Eu6h7_HWdUegkgw BLcuC9zufbTkI5Q1A03yx8bbdtfB1PtDR.FkI8LtsxChfPPRp7jP20Ql0Akb 7qAvyLlGfPS.Em8lyeU67O5P2NZR8hhQqnykedIJ2jU7X1rhPpFDhkyyDGQD RhIG3n76WgTWbxraLq337f4HO8U.CZkBxLB4vk4nNGHzwNBy9WkQoi8PaOxy mttNuXtL5PTI9BzPEA57na.7RC4HxDvsk.vrwy2TM9TKoZpvtOlZQN3R11zc 4Sg8aWHhUgbKGr3uLdUDb6YO5bfdhgW_5irq_AFLOV3pF0KgJPKaFVK32Zsv gpdAFBGqKnR4aVtz66hNwydDm8MSTEveB9s36Um1t3KeRpi3r5dzMWbIrMdE h7uhz4Lptww7j34aj5BEjFYZWAFOquX54B5wcukO9m6Uh25R_TmWAywlRYkU R.qQMKfyzIoeOyIH2.3LrhEnVI2eJgi02ubeV07iw0AxahIbojmQgKC_4ykW lA9Et8DKXwa8AtthOC7iTi_u8GVYySxoQXybEeg6YJZy54nVe2S_i3EBEuoX Kglb.lN7Lb8mnxfg2Va1gc5C87kw1Fao1EPlxuW2lFHw7TFBkPztB4gqXZ53 yyZVMfuJNVH0MqwFKzHmlMiOnvSzUAUeaQdPJw7aLMQfmhaw2GAGhai1dXgv mt0.4i7IWKBrgvWMq33efz2j0eP3j__qyRDv1KvA_P8s3mo_km1zL9AxVcJz Ck5iaJSS4FgdahKCBDhjVVOMDzJHUb32fHn._RHdHjVfeVjCdOdqGvaxffXR nh_xZpfMuA–
X-Originating-IP: [98.139.44.169]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm17-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.169) by mta1285.mail.ac4.yahoo.com with SMTP; Wed, 16 Jan 2013 05:46:47 -0800
Received: from [98.139.44.97] by nm17.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:45 -0000
Received: from [98.139.44.66] by tm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:44 -0000
Received: from [127.0.0.1] by omp1003.access.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:44 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 938289.74941.bm@omp1003.access.mail.sp2.yahoo.com
Received: from [216.171.90.22] by web181401.mail.ne1.yahoo.com via HTTP; Wed, 16 Jan 2013 05:46:43 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358344003.16284.YahooMailClassic@web181401.mail.ne1.yahoo.com>
From: AGENT DAVID JACKSON <webxccccx4@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

DAVID JACKSON webxccccx4@att.net REPLY_ADDRESS: david_jackson141@yahoo.co.jp RETURN_PATH: webxccccx4@att.net RECEIVED_IP: 216.171.90.22 IP_USED: 98.139.44.169

FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

 
Leave a comment

Posted by on 01/16/2013 in Other

 

Tags: , , , , , , , , , , , , , , ,

“Irish National Lottery”

WARNING: IRISH LOTTERY SCAM – FRAUD

Your email has won 891,934.00 Pound Sterlings in the Irish National Lottery Draws For Internet Users.
To Begin Send:Name,Age, Address, Tel, Country

To Mr. Sean James

HEADER:

Return-Path: <vkaparin@ioc.ee>
X-YahooFilteredBulk: 193.40.251.126
Received-SPF: none (domain of ioc.ee does not designate permitted sender hosts)
X-YMailISG: GjURVuYWLDti7FqksVEcfrcUuiwXJ01CXghm0WMGyyGlWyzH RX2gFSg0UJCPrDHWmK__t_qSsBKH4DfsiDdH4yrmabt0bpAI4fRxRxJy3h1r XFTLq6QEzKsLCE1JOPjzx_eGQ4LSBAuombNEnVxQok8BCK2H89ZABe8JQev9 nMhfgM8I3pIuFMJtaBqaqI5N0ROCrEIFPL3oGr58.7MGSbZ1u_wduMTG41cr Z6.v61qay04E0PW.g2QNX1.N.m.i9nCMptZXPCzDHQ4goouXZB5i2J1QTS79 HmxsvYVjVhyq0L2IOpJeTDh8vRhvm8ViIJF8iltZI_wYuOxbaqYVjnuUoYce C6uNdaTJr5rGdUflAk9jcMfHpsh6zt5D..RYqrd_xFTaovaOjoqSgtRpw_pC FF3CRiGlH.rhX87C5f2HTile9Oj8SNt3_HQXwlmMXap494b8PpFmSlYxcNH7 0uDWGloiSnUS86MzorTK0SfyjQD0y85eNZoj14Tj13bcPdTpz2e6ZJxwvxsM G5T1CCLmhSZhK1h_RDnHCxVimKlk2TSVzk.aLZ9biU.p7qn6re1BrfI9VYss dJPFo.sm7BoO2TAKqckPrlkFtm9pQUizfBHU3svT.iAXReCw4eYQTV2hLgMR poeuxBOTjUZCt3l3dJkhvVyiUnxJPdCDNmZ.R.E_r0SItNUBt9o_pkeggjfu 1Da1bswNSRybUL5T0Qkz4KXsvXK.vIbMC7cnpP0WHKEdy_rjKTblhVTw83Kd bb9YhB.RCD48ld2QZE01gxa2TaN5iOdA_EEG2DeAudULtGaBOMarhGiSNo.4 cNNWTtBY6U4ImPv8DSZfgH_wEnSvocuGCQ33ZbqPOYVYmgQUMAwFn_Bp4MaE 0CQb4Gh.gonPDw..BtxKEnYEI1QNnBacSKHXCimT7ThhPZY5KCj3k0fei.aw sBUpYXv6ED7RbfRrlv8UfrCN1.n.4YzwTL2aZWt1egOU.zxDhJdojMSfAXN6 SS.mFTwrVh_WtsaI1Ev_hoqoT5xUqpcjrrczmttNkFsByxykxZm0TNGKzufX WOzivG_J6oSwMq7rNoNG_PTz_nrfkgfwhzWjPbko4IJkcUIGeHfzIZo_OfNH tqqbRYSyy6_YipayR_OicldlBb1IHN25iXYDUmW6kRVVXQIDakTaUvPw.Yvz rtf8F7asVGyv3Su9Ed3juajpBnnPiJa8sdmoHxDmlLfA9QqlZo_xFaMgCCrL 5YL_cz.pu3puzok6xFTr5mytP7eyYqWBgMF3NSdxJn2S2WdqeyXqgHTkCPZ3 3bKSlT333bSV7.3eyYs2F6w8dAazTCm9URuUoitNeFVXJs_RgTxNs1q_FKnv kh5M1_QaPYGyl07SJRUCqHq_Wddo0KXSZDbodBreMjJqtBxe0V5XvXmkriUQ ObZIfBAC0HPD4eWo6EyGmzEfq7ErbBkRxUNiQF8PFOZz9qdmxbS3Z1ovzZmO 57v1hBJLfQzLKapRsuB1z7yNIzDOZ3iD
X-Originating-IP: [193.40.251.126]
Authentication-Results: mta1070.mail.ne1.yahoo.com from=ioc.ee; domainkeys=neutral (no sig); from=ioc.ee; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp.ioc.ee) (193.40.251.126) by mta1070.mail.ne1.yahoo.com with SMTP; Fri, 11 Jan 2013 14:40:09 +0000
Received: from User (unknown [182.62.170.196]) by smtp.ioc.ee (Postfix) with ESMTPSA id EB19534197F; Tue, 8 Jan 2013 20:47:16 +0200 (EET)
Reply-To: <ir.irsclim@hotmail.com>
From: “Irish National Lottery”<vkaparin@ioc.ee>
Subject: Congratulation!!!!!!!!!!!
Date: Wed, 9 Jan 2013 02:45:46 -0800

Irish National Lottery vkaparin@ioc.ee REPLY-ADDRESS: ir.irsclim@hotmail.com RETURN-ADDRESS: vkaparin@ioc.ee RECEIVED IP: 182.62.170.196 ORIGINATING-IP: 193.40.251.126

 
Leave a comment

Posted by on 01/12/2013 in Lottery Scam

 

Tags: , , , , , ,

 
%d bloggers like this: