RSS

Tag Archives: Scam

“Dr. David Mark”

EMAIL SCAM – PROPOSAL – FRAUD

no-scammers

THIS SCAMMER ALSO SENT AN ATTACHED FILE WITH THE EMAIL.

VIEW THE ATTACHMENT FOR BETTER READING AND UNDERSTANDING 

Return-Path: <WAYNESSTAR06@aol.com>
X-YahooFilteredBulk: 113.105.185.152
Received-SPF: neutral (113.105.185.152 is neither permitted nor denied by domain of aol.com)
X-Originating-IP: [113.105.185.152]
Authentication-Results: mta1453.mail.mud.yahoo.com from=AOL.COM; domainkeys=neutral (no sig); from=AOL.COM; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.szyfd.com) (113.105.185.152) by mta1453.mail.mud.yahoo.com with SMTP; Sat, 19 Jan 2013 22:54:55 -0800
Received: from User (unknown [68.213.28.167]) by mail.szyfd.com (Postfix) with ESMTP id CFE29-BC0E-50FA5274-26363; Sat, 19 Jan 2013 15:59:48 +0800 (CST)
Reply-To: <davidmark.pay@freenet.de>
From: “Dr. David Mark”<WAYNESSTAR06@AOL.COM>
Subject: YOU’RE PART OF THE MONEY. AT LAST
Message-Id: <20130119075948.CFE29-BC0E-50FA5274-26363@mail.szyfd.com>

RECEIVED_IP: 68.213.28.167 IP_USED: 113.105.185.152 FROM: DR. DAVID MARK <> WAYNESSTAR06@AOL.COM REPLY-ADDRESS: davidmark.pay@freenet.de

 
Leave a comment

Posted by on 01/29/2013 in Other

 

Tags: , , , , , , , ,

IRS Phishing Scam

IRS PHISHING ATTACK – ONLINE FRAUD

WARNING – IRS does not initiate contact with taxpayers by email to request personal or financial information. 

NOTE: As soon as I received this email I thought it was highly suspicious because not only did I receive it on my “fake bait account” that I use for scam baiting but also because IRS doesn’t send emails and they warn about phishing scams right on their website.I’ve looked up the IP(s) and header information and noticed it was blacklisted on anti fraud websites. Regardless, if you receive a email or any unidentified online user contacts you regarding money and personal/financial information, DO NOT GIVE IT OUT!

THE EMAIL I RECEIVED

animated arrow down2

 

Where’s My Refund opens January 30, 2013.

Due to recent tax law changes, we will open refunding season and start processing individual income tax returns on January 30.
This applies to tax returns filed on paper or electronically.
Our new system calculate your taxes of your fiscal activity from last year and you are eligible to recive a tax refund of $550.
In order to claim your refund you will need to follow the next steps:
* Download the attached form.
* Open it in a new secure window, and follow the instructions on the screen .
You will get your refund within 24 hours after we’ve received your e-filed tax return.
Generally, tax returns and return information are confidential, as required by section 6103 we may disclose your tax information to the Department of Justice for civil and criminal litigation if you are submitting invalid records .
Sincerily ,
Internal Revenue Services .

This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

HEADER DETAILS:

Internal Revenue Service – Where’s My Refund opens January 30, 2013Wednesday, January 23, 2013 3:51 PM
From IRS Wed Jan 23 07:51:23 2013
X-Apparently-To: deleted@yahoo.com via 98.139.220.247; Wed, 23 Jan 2013 08:51:41 -0800
Return-Path: <notify@irs.gov.e.com>
X-YahooFilteredBulk: 109.202.152.250
Received-SPF: none (domain of irs.gov.e.com does not designate permitted sender hosts)
X-YMailISG: e9gWdlIWLDsVuDoRgzBswxOsNA_ALUCiZ94Yo_GWveDhkE5H XMWm0qDjKA74EzfR2v4U39GjLKyY.tLS2ERBwh8QfEiw6xtMQXuQlwVzLl2d RJ3G2gcy7YXo.kiHr1zYnAy2phBJz_svN95DBa5tLrgMj_bguPLUoWjbWku2 WAqROTpCvFZl9JwRJTYprkGQitCDIECEy4SJb_z54DL7hpJgjQ2pFAzsPIuQ ntA6vloWDZzpvBpH2wh3_xeONQ_83lFE00nr94l652jT_oOgIkiCGpIUBhnB P5tPsFERmMNOP1tIr6NRzxaAEk7nQn7V2u4JV7Ybda6Y6bLNYkJZNLBLI_GG CyMYgwEK0i8V0o0wI4GgnP6uf7UbAfoxYgnZczb4hF9EFmVbF0WQAkU4KP2w OF6HwlRTgczkc1o7S33xg9j47cCXwOVlXdlv5hwqFteGOC4dSmZqQpGciX8C DN834OELrIAaYJtx23oJxUuAt88m.8H3hhZmRbAU24Fa3KsaQoZn23MKMfwW odS9yjtrg.dALJN0VFh2EDOZMMdZG1IZUnCdJ4MQeMPyCndMUyE_Cpa_spZM JeRmb9TtYwNR04S2SOXjuanwLGIVuGu34vuIeHPO56KUuYaWZbtY5M8yymat .jFENS3LsYyRFXCOzLkTPq2cDzaLq76wdP3mfS8tlk488DRSpv04enXKstEg fq9A5vXAKHWgltsPDcWP25RZfcwSbDriislv0nwXBGJUWVLY0StIhyKfRLF1 et9V4Zcgy0wdwJAco7r9l5V6Tw9tfgBzsgE.zQ6C3MgC9NI0X84COjoglzOE F7CDHeeyx3723DnU_UCfp5pOphQKbUG3xJoWaHFEOV7lPjqt8LEE88vGIgoU _9o08aQIgGQUrFN3O_ZMiszwr8_m_jiFoykiwN4WSGBphovmuOArcvkMXJ.L KjZu.3humATM922Yy2TWCEdqHSaYsMsYV2W39z60iB_M0WxJhm2WSOIDHyg3 HQ2JpAIZ7wXvKqM886pUR50I297J32RCrQlr5IPcjbWZgwRllKOmTWhsOypI fjUUAk6cVKzJZlfEN7z8.cFKHlb1DigaMk3pSsADkBR_H2IW..2q9s4KbDsp Gco3D4lqHYqtFP9Uz_YkWUrbEmomVSv8IK5e_WgpHQfvDr9YyN9Et2UICzDr sSfAo3ezKUpFVBBHWDkQ.fyMhOtsLQ5HN1hzllJY7g6Bgc6DB_v4VGT1_.gW 4b_tnAE9_YWWUs.eyUvShqtRkhyPaXyK7FFqsOAC3FpxKHKDgYRwQK64fd7R kPLbN0JKNZCeCPHbVmwe_GQW39dVvaVXug5_Zx3XGsMx1hPW09VmQf7NPoCc AoCQKkw98gK9lSR6bb7fU8jVMtj40VPTVtfp5smsqyGRolgJ3bd0PZRv9itq O7hpNMrthaB2UEWKjni1NJmSMXSSkde0hbkRVphD8FWlp0arA8J1QQgN13.H uA_Mzfe4twcZfdJs3GbKXSdInR_DqmLsTumkAyqZ3LWdCU_Ns9DsJIsto6yu _f0IinFxSMriLOu0kDSTloYWoeQpIA1PBNgwuLggbq_MbM2BLJIcImMRhXL5 p.4zXTWpD2vkWwx4NjgH9QeOKcLVjzNrW8WI6.IxR3e.4VuOI.OqFJ3wdcbO D.CK6vPMS_r6SSXira5mqPN0MyL3XcR5NL_LyIrqHCcYiPK84c3hHzyPlPEh N1KWe8joijPKhNdcXjMTcM.MASnrhuACslmceToaExR54srG93YLv.GTGDiw 2VVTs.9eTBD1_6uc4fgYpta0y3pQ8aUCWRdGwa2jGXASuy8JawOen9OFIkvW iyalHrsiXFG9PkdNtwWBwaO.FhNJlSbr4q7pqQpZSVVuqeKsdD_ojtuUVMma W29GIuqeXO4Zj9lrmyfWswzCe34jeEgVHZoAcURQZBU.ZU9jHn0yRw–
X-Originating-IP: [109.202.152.250]
Authentication-Results: mta1247.mail.ac4.yahoo.com from=irs.gov.e.com; domainkeys=neutral (no sig); from=irs.gov.e.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ltidkex01.LumasenseInc.com) (109.202.152.250) by mta1247.mail.ac4.yahoo.com with SMTP; Wed, 23 Jan 2013 08:51:37 -0800
Received: from User ([185.11.132.8] RDNS failed) by ltidkex01.LumasenseInc.com with Microsoft SMTPSVC(6.0.3790.4675); Wed, 23 Jan 2013 16:52:59 +0100
From: “IRS” <notify@irs.gov.e.com>
Subject: Internal Revenue Service – Where<92>s My Refund opens January 30, 2013
Date: Wed, 23 Jan 2013 19:51:23 +0400
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_0094_01C2A9A6.03D1B7DA”
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Return-Path: notify@irs.gov.e.com
Message-ID: <LTIDKEX01jnzi95HfqR0000003a@ltidkex01.LumasenseInc.com>
X-OriginalArrivalTime: 23 Jan 2013 15:52:59.0099 (UTC) FILETIME=[B7A89AB0:01CDF981]

notify@irs.gov.e.com IP_USED: 109.202.152.250 RECEIVED_IP: 185.11.132.8

 
 

Tags: , , , , , , , , , , , , ,

“Kelvin Brandon”

WARNING – SCAM

monkeyscamgif

i looked you up on online and i believe i would need your service in a few days from now. please confirm your availability and drop me a number to reach you.
Kelvin

HEADER INFORMATION:

Return-Path: <financeftu@s2.ftu.edu.vn>
X-YahooFilteredBulk: 117.6.174.35
Received-SPF: none (domain of s2.ftu.edu.vn does not designate permitted sender hosts)
X-YMailISG: SHu.UKQWLDt8Lj.RL8cuJE8s5SmMYeNE_GSC3gBE.AAPfo3Q JTbUAOtvOp1pb1FoCgUJrNPaRDAfNrmnHAyPsJVtuctbloimHcaW2INBliqu R_3TAzz.2b6Nc9ukSL8Qytu0A.7YcDb5OzfASqQxIU0cbh2bMewUSHnmt0ti 5lIHWbHtta2bao5_xQvl4XACpjravK.Oorr842LtjkhnTqNgvcMQH1TecAPI Sx2lVTZayf9TE6UaYaFmeEQeifBJ4POe_gxGr1jw643Luzfvdpu4rKlkT262 _4MlG7DXHdTamVIG42mE7.Xno.lTCwq1brmSwQ0uLvJaKtKBIYAQgmX2qu0J JG2hbCYcrXj2jWWAZshSGps5.1BZsBAhDorPwUTmgVnQGHABZxJSjiELLM6F GDFeRtDRlMSs2TOCZ4QsTZORGzH6hyccoLgejZzbLHOhzojZzGv1MEDnzgIf Qsi8.sM7xwCxsabBIFZrdQkK13uFCH5Mb87THVKdtOZbWexapM_bfXNVC4e5 oUgjMckiak47atgMSB9CX_UUbUTQ2F_Nqe08nSRdf9nNkLEruW5mOduA_j6R ve7zNy0l7x6D72Xo1ps_qiu3mUeYmGeQlOxpAOMFjLF1fYblomomHb6JnXjj gzqi2.pSlauQrwmGJNsLClsFcsrHHH61PD0OQ1IyxxLaBGjlNZ2IxZsEhWj_ m8hVe386aCYhatCrewEr6BP5TuyAsEVWBL3wytSlV3e1S6tTbJcjvvzHtmEp sCQF.anFFU5YaF8XiPgHSWAlLsmgxn8k_pPyfadoopXRH7czFvRJiuBVRqfV VCcSNLt8HVPpMSIBjh0JslJMVvtAFZ4cRJVJ70Iyt5mp8Iq_no_m_vniT_z4 rZBraU14NTeD7SU6QVC_glrFpcBsqBp3N6nBI_pwVFO5bEJ5Fikt10P4nUKl HT6d_xizdWJa1NPDS1mJZjnlf.CCL12eMfdxDKG23CWSciK8Hxh3y8wbP1iY V.8LXSVGRACBS6Pi6xwAk2ZpguMd7XgHEthFueApZiGeQtp6BKTqjZa5l2mF FXFCRWwiJQBeumFGK3vM6bdWmo6Sk2QbbdkMyUvNCvutfzJeMNsZLbwWKpge CCPZmEFaUyYWzFk2IKEykMrBX3Nm284-
X-Originating-IP: [117.6.174.35]
Authentication-Results: mta1342.mail.mud.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO s2.ftu.edu.vn) (117.6.174.35) by mta1342.mail.mud.yahoo.com with SMTP;
Received: by s2.ftu.edu.vn (Postfix, from userid 539) id 736443ED0EE5; Fri, 11 Jan 2013 06:27:40 +0700 (ICT)
Subject: Service
From: Kelvin Brandon <kmosh00@hotmail.com>
Reply-To: kmosh00@hotmail.com
Message-Id: <20130110232740.736443ED0EE5@s2.ftu.edu.vn>

FROM: Kelvin Brandon kmosh00@hotmail.com RETURN-ADDRESS: financeftu@s2.ftu.edu.vn O_IP: 117.6.174.35

This scammers most likely used the name KELVIN MOSH at a previous point. Scammers change up their fake names once they’ve been reported. They for some reason keep it similar for example “John Doe” with change his name to “John Smith” or “James Doe”

 
1 Comment

Posted by on 01/16/2013 in Other

 

Tags: , , , ,

“Agent David Jackson”

NIGERIAN SCAM – FBI IMPOSTER – ADVANCE FEE FRAUD

UPDATE: THIS SCAMMER EMAILED ME AGAIN — BOTH EMAILS ARE IDENICAL BUT WERE SENT UNDER DIFFERENT IP ADDRESSES — I’VE POSTED BOTH HEADER DETAILS BELOW THE EMAILS.

NOTE: AN ATTACHED FILE WAS ALSO SENT WITH THESE EMAILS TITLED “FBI AGENT”

PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY 

HEADER INFORMATION:

Return-Path: <webxcc14@att.net>
X-YahooFilteredBulk: 66.94.236.142
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: xoKjTDIWLDuBkmVXmCPlfbv_WZIjE5wra.dGk.EGLHd0_Ik. pzXPk3w2kzAxCK7MZDCnIjPAHX4nkOLUWkVgvqANtwsS4AgS4bOVG8Lv99o6 3BMAirzElljzLZY4wdsWw9WleH1CZEp5.UMq53jijuMwtIYd7x.ExSbD27Ot r3_dTsJdFRmlrUqFnlFrxRjc4clsrYTx8MHP8xgBArE0aAgckgmkh_NFaXes eFxkLeTk8B2toXNzOIeea16MI2RpMzkNQqVdZlAbQv9U61_3c.oKDxZ4sV.5 gY8pcctoBsIZGG9tOZpijSRxkY_VNxPwzsIyYElyeo1jXVFkDNpuiHONH_U3 ApMQzh.wDU.jhNuXBYpwGIlhfv9oTEq_hUh8LCwDygA8_4mjrCUa0F.lWk.R FtrDdBD3ltOXTwhRO32pjVB1CPDt6LTZ8YdYZkkguJVLCSNZdLESt5PiVvd6 lGX8smgbIpn7foNPQkAZVH9SBLePPnJ0LgJ60bsjU83T4qfyrukgl9KdXub7 MABdwmieVghKVFJMzfloN9dLl3RNh.YOCUdkfqwYsgMbeNtb5H7_eCFoK7OP D7gfZPsFtVjEXCNrOM0LafoFgGhsN8EKmcfG2ezRE4LEMYJCNNTmTHWcR57P jIP1Um.Sqshw1pFjj1DLniKvydPsCH3Ss_G6feYrvRrZQNOYYsMXe7s4p14o d9cxRoG0dZtitQC0n3nLFx4qiuT2TFhofBB.T.t1sPhZQdnHcBuQzEmbw1i1 xoI73b1xEwHowauOTWfTtt9TFec9QoAuR69SdrMYaMquwaBt.7t3JqTeIs3B V2nXriD8bMHx3ZE7uBxrrmHVS1GX7GYQgT.k3k.6tvB.2iG91etu1UizkS0X 9k4tNRukg_JqZO3GaUA4m9_by.IJ2P6ysrjfW5D4Cdk0a40F1JmzcsALitH5 khgOiV_0COJR5YLbv80xYavNu8lx5CcGP2ls_jfPSGGVbec3_kdLutEoMV3b wnZyd3FgAPiF46OlBp6wWlEU4ArRRbe4io1JVzBUJJyEfH19Rn_rSE7QLov8 CCmTFPY0xi4mWBEnBbzqZMBQ.2BgATYUweIU9yCuYLbnrAo10iRptjeTPSHA kthPnAzgcpRZn8pVoo_4jpjojKgxrTHoXjOlKzuAULhX2atdExaU5Sh_gJzC pfBqTBC04EV5r4qQEO12X4W7YTkZMSgisiCHupFcs9RXCE7u4lBAm7jVSZzk H8UZHkKp6JWDlPMGbgmKLnzIKNn.Uv1xksWV28YWO2S.3H_reW8aFmqzUlYo fqpup8uBX7hERv.02iQgBflO9NRe48RUorCY2YsBeBUqEz3UYD_FL8yNVGz7 wfXDZjkeJwjKpvZjlyR62Bcp6CNEaS_VeNV51bbgrMtOyPv95FYzuVIVQnXa J6AQ735T
X-Originating-IP: [66.94.236.142]
Authentication-Results: mta1133.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm23-vm1.access.bullet.mail.mud.yahoo.com) (66.94.236.142) by mta1133.mail.bf1.yahoo.com with SMTP; Fri, 11 Jan 2013 05:00:52 -0800
Received: from [66.94.237.199] by nm23.access.bullet.mail.mud.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
Received: from [98.139.44.93] by tm10.access.bullet.mail.mud.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
Received: from [127.0.0.1] by omp1030.access.mail.sp2.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 296482.1479.bm@omp1030.access.mail.sp2.yahoo.com
Received: (qmail 37215 invoked by uid 60001); 11 Jan 2013 13:00:50 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1357909250; bh=AMv2pcNcaeNlJVqHQriJ4Ri1HfCs/cWs5cs0YO/zIGY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=dOKri5+JYYcxJT9h7uxBXePMdTKL9LgDJaDxXAXuKXkol/FHCkW7VSrnFN/3MjPpf5yDolF9ISRT3voPGp6JR3IPgQ6gQn09IbTLKDTDiZCJtIt6LZ6Nh5IFb/P7xZF91BeaW6wRFYV9bDF79MeUxbR1nBQ9Uxx+tDmuc2EHvuA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=IJMFPznKpHxDIYQ9bzl24Q3XMLcjmLv3vEQCNFIYPov7S/flRvjby7HCwZuoE1DPiKcsiN1BxsM/0aotpqOdM0QTrBTCejq8SrPEheI4TCwU7Ow9eW7VZcnTNDZH4zvHDSWPf1dZ4Lt/aiO8S5x9o4N5yeWcTXUfe7p83oGb8hE=;
X-YMail-OSG: TDmS3ggVM1nfAjpQSEiVdV88KjCqKzlApmBtrsiihrc8lyv SQXEYaC4icuKbPOXdw0EDFm2oJY1QxbTQ9LQNzqiBT8cLE1ctrswApbp5smO UN.d_cYwa7eVA.2gprfdTU5BLUnee57BJB7mmSZ6cdmaK0zaCmqtEjZOFNCy IEjbDJzhAllb4ufC.JkScVlCUEAYHdm47QsJ29uunh.nwHbpwD5Aqc7OZPRd g1HSfA.SpgPudxZKy7x5x9C1zF5i3wRJiGN.hUGxF_orR7J1wxmW6uixQ4Q8 HcuUu9Inx20Xp7X1gWIXpxSKuGG2i5sX2GIEe.jDAXtXKBES6vuBRUc81DV_ WU8Pu2Bzqt5ECCkCZyrlYveBNfRo2anoYH00EU0JO7uvnmLlC82wp9tEtKHK F0IlSIOGPTMvMsscdUYj79v3PD3P2dZ.SuKoSdB.9fq5nJK1xTUKEg6T9jcI 9PgL80ABFGZFlkHIbPNHXy_0Qku6Wbj0YoV79stu043EWcSjVc..30TYjf_G ZyVd1eNlz
Received: from [72.64.146.136] by web185002.mail.gq1.yahoo.com via HTTP; Fri, 11 Jan 2013 05:00:50 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357909250.70203.YahooMailClassic@web185002.mail.gq1.yahoo.com>
Date: Fri, 11 Jan 2013 05:00:50 -0800 (PST)
From: Agent David Jackson <webxcc14@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

Agent David Jackson webxcc14@att.net 72.64.146.136 >< 66.94.236.142 REPLY-ADDRESS: david_jackson141@yahoo.co.jp

___________

FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY

Return-Path: <webxcc14@att.net>
X-YahooFilteredBulk: 98.139.44.167
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: jjzWyiIWLDvQAq1bz5qLzCO2.QJuQdBJN6zZ8UglWMf8e7nM 9jdFsjujbwAPbjhWkM9RYr5QgmMx_7ksYyMP7Jjs3XZYq8QJ.JOCflql1Phg uIEC1jKdcia99ibuuIZ1iyTS.YAWVHLQm773M33.9zH3akABbi3OAxcFZdPa _TyUllSVHN5uC3.lOCrpSjlvoHAKplQ8reqYGh_wUeyz8biM7zko0f2p3pdz bZsUy.1wsFHQaiIztozIyIdoXX8_dQr9O0DwjrcYx8_mrsoohQXDmv0Qd0F7 bo.bDYicT6riOqq72kZPXTe5UREAcMQnls_gqnDfYn2tNUkhIP.JFtt3kFOD NQ1lhN3.C2p0oKrVYvZPPwJltKHjidAvCn4Q8ihWax_B3SnFA7QB73pYOvjy mJmU_WrXbJXxa1H3lKu1OYy8eYc5trelPUzNd06xUgb5u.q4lsRv4pEMuhlC 3EIjl6qhXHmCkyjNzL0guKnsS_nNfVyv6IhA_UoAdGURE8PYvSRu.uKVpE5s PuFvknOdTp5VKOqZlPWZRtIwAFiiuFeTyBC7d2LpH8MRTjRMq0LLXjaeDRRf 27t1hfEygTEKI84MjRY31u6pEyJVx_f14A14xGLL2R8a7nBQnoTZ6xqa2PVy ifE_vufn7zejkeijo26POkYD14lPWROAf34bIoR6VvEMzvGGmgldWYKtP6_T OdwC8QgTaGzINGVLw.oBXZ5QLgJjOuRIwZ8ZglAmJKEmuuzzOp4khM4oIbwN Xm0i_P90x5x8kAmH8507dNT2yBBXcT2C0nj_gWggOL8NO9LfVtPUMC_UPviL GfefUvwQgd73k4k8woYRnAC5xVKMX6DZpW1mACwOFYmO3ukpLYaih0AW7ZN2 WGty8iF7Ra1AQp0HRbTxBV1uNd13_qvS8BpSUt0FxtwWBk3zZuJmd8ZdL1EW Mj5JrL8GFK_uz7NU71hIndLApqMh453FEbGnqUXiDVvaIPzku.a1ncAWuacT xHju1mSZQzcrmbN7jHnFzE8inD6aIBDf5BKcN7xa.w.KsGbrgwHT9dyTWCiB U.oXyIM72g4dZkOOe5WYd3MIpUw0a_YM6Lv.X.4CzTJAALD0jm5_ffFE4hzX UIusKF5370W9qtmDSI6cpy59NfzqeNA8T1FVQzuvHCzSV0IbXk4Y7LyOPCOF jYe7w2CWd8xrD2EBt.d5BEAupDSqk9bUSxQsNtDD_eN9Cq9Ka_NEMmnj2y6l FY.ygqon9EjdQ0HJdOB8CSLRsd.OpSSwWu9h0JRBaFxn4gZebvUrtEAWma6B wV6WwPJGCV1rsIa3NaCj2xumef.yT.F73q3WzUWX2qU66IvuMLYSHN5qNLmi 42Ez_5GDASpIpdzYuA_x._xh1oo-
X-Originating-IP: [98.139.44.167]
Authentication-Results: mta1045.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm16-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.167) by mta1045.mail.bf1.yahoo.com with SMTP; Mon, 14 Jan 2013 05:27:27 -0800
Received: from [98.139.44.105] by nm16.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
Received: from [98.139.44.73] by tm10.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
Received: from [127.0.0.1] by omp1010.access.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 252445.15343.bm@omp1010.access.mail.sp2.yahoo.com
Received: (qmail 27093 invoked by uid 60001); 14 Jan 2013 13:27:23 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1358170043; bh=Zm+DJwrwGZlIA/LG24aCrFEpyMJ8dMFzxwrXD14xR1w=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=5ml0Xm3/BrZ7EuPmGpWRgsPNYtHEUNpHsbSSLkkKDgu0u9cI10VSDqgFfoGsE2hrjAML3CC4/aUra7VOYh1GwZZmELiL2PnYvSrBDs508LqoJo0Jk0c40hixsaQO+7NRh0ui3n9wKVixAzfuMuBORXUz4isAM9Uj2r8RRq2OPvo=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=5Cl+v6lPr2mrClM1Tr3uoEcxJGT6po046oHmJqVXsidvAjGm2h818ba09wHtcX4h6be+zslui+s2f0LUbzuCsqrDY9DxKTWX/P0a5jX1HE5fg8cg2gWioTCmUnizj5Hnpk8JXnSQBmXO05ybxFll6OTtEZ8KJfQhTw0INVCPdGE=;
X-YMail-OSG: .au7dWcVM1mjbQkta19wLaNG8g565zmamCIhdNrIz5J4oiR Ei87Eg4zRlKOTdWciw.equT5lByIRZtVJfezeL10GmmrKTYeitYPptLbUICU 3Anf.JK_3NAzOf99bdmAe2djTDVFpgkFD82cg4kjZTZjr5gofpaquzxJRp3i DRy5pvhmKi0SE6TRfn1x7wsGYnfPcKA3cWENK_oBoLL3yv37iM860nmaqUCk ppgmkkgx1JZEmdnTtvjUzzdkfWPoN_LLOJiuKRtHby4bABJGJwhzpQEebrFJ 6GriB_Yhx74xtLzYjZL3gtysoUF0QZN4xJRBYjkGbB_kNsbH_XjgdYxlJFzs WOYEZ0HTWXt2ZO19n_285v1Lpod0jDlJGke15uWv2QkBAdb8npYY0TJpxV0u Gqj4IxurvaVeU0V1zj30cyHHuIeX4sW_mftM7AI3WRXykHTZiLe.e4mZ8PJW 9krGUKD5CM.vs2nGKr0tUFPFhuaZ1B18Mc.me7eflQ2zq.F92sv8c2mNAADB Qbpuzc04-
Received: from [64.72.78.27] by web185001.mail.gq1.yahoo.com via HTTP; Mon, 14 Jan 2013 05:27:23 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358170043.12150.YahooMailClassic@web185001.mail.gq1.yahoo.com>
Date: Mon, 14 Jan 2013 05:27:23 -0800 (PST)
From: Agent David Jackson <webxcc14@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

Agent David Jackson webxcc14@att.net RECEIVED_IP: 64.72.78.27 ORIGINATING: 98.139.44.167

_______

Message contains attachments1 File (36KB)
FEDERAL BUREAU OF INVESTIGATION IN NIGERIA.rtf
PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY

Return-Path: <webxccccx4@att.net>
X-YahooFilteredBulk: 98.139.44.169
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 9LjqTrgWLDsWa.HbSNWNBH8jAOpaObL1Edc7fNdmRImcUBZv xZofYsr2bdMW1WQHSWtYRWXFljhG0QgPPk.D7mX2yHJMul_Vd6cPN4lzpqBR QObxIsLNz908K0NbbkGfnPzo77OMUH6cdcV4k3GrPli1vAdxeFm_iNCu4EDE FIohu2_hWwnjV9DF4dxpCK9yrXrnp4W7oLuqKByLsWDTXHH6PuvHUZ9HRRDl InKZ3SeEQJ1Ruj8sAnn2stoWc6z4W3KN2OPEA7a5uUjI5dzAM21Xj1uOGpKn PmSpxJRQPUhDOK6xgSRVwyJxqFSS5akOAejt94XnGPVkOcdxHVZuK0VxXlpb aD1YL2o6EPhq3kXV9S1eje77SfpxGupfC4WxqpyyuWTyI38uHjGGkQoK3992 yz7cogcpQzLdN9xoT9jYkoR9VGRUHMeY36p5xjZai0NB4CrYoNSaeXPCOWz9 4fRkfNe_WL2yLRLLYbyQhCJ0UJvG8yqZL2BE.9kW1SCfI0pt.25Kqw2tZ2Sx H8lRk0x5_GRlZ06JVi1AqY21IHiD5uwSxqPliBBh98MJ.xID7VjJTa9nlnTk HJr8QB5cLaID3qIjqNk1TtKW6GXe.c7lDu3EdhMMFN6V1Eu6h7_HWdUegkgw BLcuC9zufbTkI5Q1A03yx8bbdtfB1PtDR.FkI8LtsxChfPPRp7jP20Ql0Akb 7qAvyLlGfPS.Em8lyeU67O5P2NZR8hhQqnykedIJ2jU7X1rhPpFDhkyyDGQD RhIG3n76WgTWbxraLq337f4HO8U.CZkBxLB4vk4nNGHzwNBy9WkQoi8PaOxy mttNuXtL5PTI9BzPEA57na.7RC4HxDvsk.vrwy2TM9TKoZpvtOlZQN3R11zc 4Sg8aWHhUgbKGr3uLdUDb6YO5bfdhgW_5irq_AFLOV3pF0KgJPKaFVK32Zsv gpdAFBGqKnR4aVtz66hNwydDm8MSTEveB9s36Um1t3KeRpi3r5dzMWbIrMdE h7uhz4Lptww7j34aj5BEjFYZWAFOquX54B5wcukO9m6Uh25R_TmWAywlRYkU R.qQMKfyzIoeOyIH2.3LrhEnVI2eJgi02ubeV07iw0AxahIbojmQgKC_4ykW lA9Et8DKXwa8AtthOC7iTi_u8GVYySxoQXybEeg6YJZy54nVe2S_i3EBEuoX Kglb.lN7Lb8mnxfg2Va1gc5C87kw1Fao1EPlxuW2lFHw7TFBkPztB4gqXZ53 yyZVMfuJNVH0MqwFKzHmlMiOnvSzUAUeaQdPJw7aLMQfmhaw2GAGhai1dXgv mt0.4i7IWKBrgvWMq33efz2j0eP3j__qyRDv1KvA_P8s3mo_km1zL9AxVcJz Ck5iaJSS4FgdahKCBDhjVVOMDzJHUb32fHn._RHdHjVfeVjCdOdqGvaxffXR nh_xZpfMuA–
X-Originating-IP: [98.139.44.169]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm17-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.169) by mta1285.mail.ac4.yahoo.com with SMTP; Wed, 16 Jan 2013 05:46:47 -0800
Received: from [98.139.44.97] by nm17.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:45 -0000
Received: from [98.139.44.66] by tm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:44 -0000
Received: from [127.0.0.1] by omp1003.access.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:44 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 938289.74941.bm@omp1003.access.mail.sp2.yahoo.com
Received: from [216.171.90.22] by web181401.mail.ne1.yahoo.com via HTTP; Wed, 16 Jan 2013 05:46:43 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358344003.16284.YahooMailClassic@web181401.mail.ne1.yahoo.com>
From: AGENT DAVID JACKSON <webxccccx4@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

DAVID JACKSON webxccccx4@att.net REPLY_ADDRESS: david_jackson141@yahoo.co.jp RETURN_PATH: webxccccx4@att.net RECEIVED_IP: 216.171.90.22 IP_USED: 98.139.44.169

FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

 
Leave a comment

Posted by on 01/16/2013 in Other

 

Tags: , , , , , , , , , , , , , , ,

“Irish National Lottery”

WARNING: IRISH LOTTERY SCAM – FRAUD

Your email has won 891,934.00 Pound Sterlings in the Irish National Lottery Draws For Internet Users.
To Begin Send:Name,Age, Address, Tel, Country

To Mr. Sean James

HEADER:

Return-Path: <vkaparin@ioc.ee>
X-YahooFilteredBulk: 193.40.251.126
Received-SPF: none (domain of ioc.ee does not designate permitted sender hosts)
X-YMailISG: GjURVuYWLDti7FqksVEcfrcUuiwXJ01CXghm0WMGyyGlWyzH RX2gFSg0UJCPrDHWmK__t_qSsBKH4DfsiDdH4yrmabt0bpAI4fRxRxJy3h1r XFTLq6QEzKsLCE1JOPjzx_eGQ4LSBAuombNEnVxQok8BCK2H89ZABe8JQev9 nMhfgM8I3pIuFMJtaBqaqI5N0ROCrEIFPL3oGr58.7MGSbZ1u_wduMTG41cr Z6.v61qay04E0PW.g2QNX1.N.m.i9nCMptZXPCzDHQ4goouXZB5i2J1QTS79 HmxsvYVjVhyq0L2IOpJeTDh8vRhvm8ViIJF8iltZI_wYuOxbaqYVjnuUoYce C6uNdaTJr5rGdUflAk9jcMfHpsh6zt5D..RYqrd_xFTaovaOjoqSgtRpw_pC FF3CRiGlH.rhX87C5f2HTile9Oj8SNt3_HQXwlmMXap494b8PpFmSlYxcNH7 0uDWGloiSnUS86MzorTK0SfyjQD0y85eNZoj14Tj13bcPdTpz2e6ZJxwvxsM G5T1CCLmhSZhK1h_RDnHCxVimKlk2TSVzk.aLZ9biU.p7qn6re1BrfI9VYss dJPFo.sm7BoO2TAKqckPrlkFtm9pQUizfBHU3svT.iAXReCw4eYQTV2hLgMR poeuxBOTjUZCt3l3dJkhvVyiUnxJPdCDNmZ.R.E_r0SItNUBt9o_pkeggjfu 1Da1bswNSRybUL5T0Qkz4KXsvXK.vIbMC7cnpP0WHKEdy_rjKTblhVTw83Kd bb9YhB.RCD48ld2QZE01gxa2TaN5iOdA_EEG2DeAudULtGaBOMarhGiSNo.4 cNNWTtBY6U4ImPv8DSZfgH_wEnSvocuGCQ33ZbqPOYVYmgQUMAwFn_Bp4MaE 0CQb4Gh.gonPDw..BtxKEnYEI1QNnBacSKHXCimT7ThhPZY5KCj3k0fei.aw sBUpYXv6ED7RbfRrlv8UfrCN1.n.4YzwTL2aZWt1egOU.zxDhJdojMSfAXN6 SS.mFTwrVh_WtsaI1Ev_hoqoT5xUqpcjrrczmttNkFsByxykxZm0TNGKzufX WOzivG_J6oSwMq7rNoNG_PTz_nrfkgfwhzWjPbko4IJkcUIGeHfzIZo_OfNH tqqbRYSyy6_YipayR_OicldlBb1IHN25iXYDUmW6kRVVXQIDakTaUvPw.Yvz rtf8F7asVGyv3Su9Ed3juajpBnnPiJa8sdmoHxDmlLfA9QqlZo_xFaMgCCrL 5YL_cz.pu3puzok6xFTr5mytP7eyYqWBgMF3NSdxJn2S2WdqeyXqgHTkCPZ3 3bKSlT333bSV7.3eyYs2F6w8dAazTCm9URuUoitNeFVXJs_RgTxNs1q_FKnv kh5M1_QaPYGyl07SJRUCqHq_Wddo0KXSZDbodBreMjJqtBxe0V5XvXmkriUQ ObZIfBAC0HPD4eWo6EyGmzEfq7ErbBkRxUNiQF8PFOZz9qdmxbS3Z1ovzZmO 57v1hBJLfQzLKapRsuB1z7yNIzDOZ3iD
X-Originating-IP: [193.40.251.126]
Authentication-Results: mta1070.mail.ne1.yahoo.com from=ioc.ee; domainkeys=neutral (no sig); from=ioc.ee; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp.ioc.ee) (193.40.251.126) by mta1070.mail.ne1.yahoo.com with SMTP; Fri, 11 Jan 2013 14:40:09 +0000
Received: from User (unknown [182.62.170.196]) by smtp.ioc.ee (Postfix) with ESMTPSA id EB19534197F; Tue, 8 Jan 2013 20:47:16 +0200 (EET)
Reply-To: <ir.irsclim@hotmail.com>
From: “Irish National Lottery”<vkaparin@ioc.ee>
Subject: Congratulation!!!!!!!!!!!
Date: Wed, 9 Jan 2013 02:45:46 -0800

Irish National Lottery vkaparin@ioc.ee REPLY-ADDRESS: ir.irsclim@hotmail.com RETURN-ADDRESS: vkaparin@ioc.ee RECEIVED IP: 182.62.170.196 ORIGINATING-IP: 193.40.251.126

 
Leave a comment

Posted by on 01/12/2013 in Lottery Scam

 

Tags: , , , , , ,

“Marcus-Ashley HR”

EMPLOYMENT (JOB) SCAM

Click here to view the first email sent by Marcus Ashley

Hi ,

Happy New Year and thanks for your response to our job offer.

I am sorry for the late response as we just resumed yesterday so i haven’t been able to get back to you sooner.

Basically the position available currently is for the Payment Dispatcher / Coordinator.

You will need an active internet connection, a printer and some spare time, say 2hrs twice a day.

I would like for us to chat and have an online interview so i can explain the job description to you in details and we can take things up from there (if you are interested)

we can chat using :

GOOGLE MESSENGER: hr.marcusashley@gmail.com
YAHOO MESSENGER: hr.marcusashley@ymail.com

I have added you to my yahoo messenger, so accept the request and we can chat on there

Please add me on any of the above so we can chat , i will add you likewise.

Looking forward to discussing with you!.

Marcus Ashley.

Return-Path: <hr.marcusashley@ymail.com>
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts) IHJlc3BvbnNlIHRvIG91ciBqb2Igb2ZmZXIuIEkgYW0gc29ycnkgZm9yIHRo ZSBsYXRlIHJlc3BvbnNlIGFzIHdlIGp1c3QgcmVzdW1lZCB5ZXN0ZXJkYXkg c28gaSBoYXZlbid0IGJlZW4gYWJsZSB0byBnZXQgYmFjayB0byB5b3Ugc29v bmVyLiBCYXNpY2FsbHkgdGhlIHBvc2l0aW9uIGF2YWlsYWJsZSBjdXJyZW50 bHkgaXMgZm9yIHRoZSBQYXltZW50IERpc3BhdGNoZXIgLyBDbwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: zQ62lroWLDtS30tyTrKcz6ETGWEPEll0CPtd7QF6Ds_mm7Kk vJd1yKT1Uj.9CN3aovlketDd0SqBa3kKlEtl1PsId..UbgdKprrTA87m5DVa bJkRINkW4GHCEJu_fJxh6TxGzCWvjxFYlOQgz223VhLThFOtVn26pgPI66nb _6v0gBs1KwjjoEqMrWc8xOlJwW5K8GFlCMW8U0m6laV8Be8kRzzS9QSBYZ8L V3mhKAuEeDYKTwaH1Wa7UfWiKB9pDudlC8JF5MzV5.FtCuvi1YX5zu7TYMcI EHhUlMCbDHOS55ejcYGtYMJzDf5eSUjqFduWEH3VpDrzfEr.72S1W5ZKz_Td kDXX.WjV6j2SB_pOH9WonemwZSKRhEBnJH4RgD3_xRpFB9NSB_PsWsHo2bOf i4x5GDmbcSQFF2qhDn7Zb6lAziTSSuXjUTyNiKiWEmuvuM6Bmiuj8oDjfuAN am1BBidBEvAyUBdliCc_K5..iyTQ8bVZ27g8KK2gJ.Lizb7j5nhc4aqz9qhF JQkzFAZQFMcZjhIpojiJkmWXoAR0dgRyJVpgKhw1GZrQT.Kbh.9rm8atBpRp 3HU6XBvmJKyBCGmVt2hYAP0qopmywT3KcqaCoaMJzXkauXCdkJPhf0oNTU6U k2QjBwur6DghHH.ootexZrGW8k68YUXLUYZnpWTDHaqBom8zQolsFRcoh8Fv QHInTaQ4_UhVv3GVdgddmWf9K53NLg.yQeXEJa0lSUBaMktVIZjwUVBFuX6c 3tpSIAU0AwEftbIKZm0HGPEIcTO56EnR2BnNvTvVK510yON1Sr_r0HeXE.oQ DbpmQIYOU4kRgQpIn0f38nSV.BxCSwGymzvN2wK_koID.7vYU2RPytGI4gyE QakaLkIb7qISJA7.HNyYckX0LCFLVJXPKwJmLgN3VN6B6wssFH3mTjLPhevf Nv8NhTITfYcFnTYAsjE69M3GPKoNoaEIfb9zGQOuw1tzXp5CZXGEUTwsK0DK 8xm1_A5ZlG6pheeboKQ0wXlMIc8fbGl3qUib1K7VQSpin1wp66NDIXTkeflS 5MxU6doTIaOXERfuqKkuKlTVuttaud3RIlqn7mWyu._VILz4dQvVGwmGJOyw n6m00.m.3BWEOFV.g.J49LRPWB.stwVvnIBiMGWwzvzKMFR121vgpCU_mXle 557Sy46Q1CvcNoE3zFiyiBHCq8f93KY5jQDsfGpkYgFAJQLbDuD3Lh3XX0Ka GzqNLP5cUlc6CugW.vcvktOoVdMGEs6y3YxJW4eGViBT2v3opv0bdwGSAl03 yySqeLD6p5tr7urAtT4OFCw6WFt946jXGqzOK7LieIvxx3qMmK3YyKt99Ref DQtkXLCRpFvROOvROC6RQJiip9NDoy3.zMvXE1Bv
X-Originating-IP: [98.139.212.183]
Authentication-Results: mta1129.mail.gq1.yahoo.com from=ymail.com; domainkeys=pass (ok); from=ymail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm24.bullet.mail.bf1.yahoo.com) (98.139.212.183) by mta1129.mail.gq1.yahoo.com with SMTP; Mon, 07 Jan 2013 23:35:57 -0800
Received: from [98.139.215.140] by nm24.bullet.mail.bf1.yahoo.com with NNFMP; 08 Jan 2013 07:35:56 -0000
Received: from [98.139.212.239] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 08 Jan 2013 07:35:56 -0000
Received: from [127.0.0.1] by omp1048.mail.bf1.yahoo.com with NNFMP; 08 Jan 2013 07:35:56 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 265247.46231.bm@omp1048.mail.bf1.yahoo.com
Received: (qmail 23963 invoked by uid 60001); 8 Jan 2013 07:35:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ymail.com; s=s1024; t=1357630556; bh=pQacON5ieHyZtsPi//b8ogYyq3geJA9HYiZFY+DNiSI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=OyoThpnA/P1ENZLGmGc+HWr5EgmuOphE50ZiZdeuu0XRm69GaYbXZt35eezHukfyUntessMZQ0wBxrdWFR3bT0MVALzJF9tRg5sdoj18EnOGDE1qDwm8EWFEAMoB9NiVUHgvrh3+Hau9aCycwXlB74swsbE30XrtO6/UrwhqqlY=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=ymail.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=5ykyVM2sfT/KhXVN6gL4HMDnTZo80NwU8/rsfyetNWHeRurZcKhiFr0O3GMT3sBCVNdY4l3z+wOSL6iXzL4Qj8paqME0tn0l7ippjBVW4nym+2yxDNm0bDrW+C7e85Yq6dtJiOngnYFrCIT0hS5+8z5Mq8mi01LVDZn74LR3iwA=;
X-YMail-OSG: FpExrSYVM1lbnUuT3K_0hbyN1DNGS0_bp9QF9xW_L2pr1pP 0g1ZL7aP45jeLTNhb6jBx_TqNZA00bEj562_acfwerJw2N53RymFMqQhbIRh pwLM2sXlLEQxslGpsVfIIl3FhbPIl7P3mWjyzWnGtkw68KUeOZ30Bu4suvpe Z_xCZWyAz6UhFY2ZSTjcSJ_zzRsPZQiMyysUIK0Sl1qJcJ545DmHVExZ3JX8 A5Q84KQzTbguPRj2A7qSfwWZlj7XBpAZqvnMTowDOJk4ZTeX60isjt6CUELO TIBXTDGkHBySmNwY5NiuU8.mNL4YWv4.jJJEcVWtJ2qvR063y1UgDQk0j5nf nHJBzReIXTEIe0k8NRFUfDLPS.jP0cB_XkyFEswObd75jds3EijEpijrwtsy fOBTOgCZ_K9ob2WSlmDkXPPxI1EoKIXjrP0HwkRyh8uZR2R0sTtqhjPgfFf8 NwiZag2D1FHYfAkQcrtjFC1_IDYx0NxuvxWmy
Received: from [196.27.113.22] by web162206.mail.bf1.yahoo.com via HTTP; Mon, 07 Jan 2013 23:35:56 PST
X-Mailer: YahooMailWebService/0.8.130.494
References: <1357276996.27629.YahooMailClassic@web161003.mail.bf1.yahoo.com>
Message-ID: <1357630556.3934.YahooMailNeo@web162206.mail.bf1.yahoo.com>
Date: Mon, 7 Jan 2013 23:35:56 -0800 (PST)
From: Marcus-Ashley HR <hr.marcusashley@ymail.com>
Reply-To: Marcus-Ashley HR <hr.marcusashley@ymail.com>
Subject: Job Offer.

Marcus-Ashley HR hr.marcusashley@ymail.com <> hr.marcusashley@gmail.com

RECEIVED IP: 196.27.113.22 ORIGINATING-IP: 98.139.212.183

The IPs used in the last email sent by this scammer are: 201.17.162.7 <and> 150.176.200.164

 
 

Tags: , , , , , , , ,

“Daniel@seotechno.in”

WARNING – ONLINE MARKETING SCAM

Hi,

I am Daniel Ross, Business development manager. We are a Delhi-NCR, India based, leading SEO company. We provides Guaranteed first page ranking in Google.

We use only ethical SEO techniques. Our organic search engine optimization consultants (SEO Experts) ensures a high ROI (return on investment) by achieving maximum visibility within major search engines including Google, MSN & Yahoo! Search. We analyze your sites web traffic and all other online marketing activities to find the most optimized path to increase your sales leads.

We use 100% white hat stuff. We offer complete Search Engine Optimization solutions:

On Page Optimization:

1. A detailed keyword research (if necessary)
2. Header text with h1 tag.
3. Write Meta title, Meta description and keywords.
4. Write header text and footer text with right keywords.
5. Optimize alt tag with right keywords.
6. Optimize the body content through appropriate use of keywords in the right place.
7. Modify the footer links

We Use Various Off Page Optimization Techniques. If you are interested reply this mail.

Within 24 Hours we will contact with quotation & time Frame to bring your keyword to front page.

Kind Regards,

Daniel Ross

P.S. This is an advertisement and a promotional mail strictly on the guidelines of CAN-SPAM act of 2003. We have clearly mentioned the source mail-id of this mail, also clearly mentioned the subject lines and they are in no way misleading in any form. We have found your mail address through our own efforts on the web search and not through any illegal way. If you find this mail unsolicited, please reply with “Remove” in the subject line and we will take care that you do not receive any further promotional mail.

HEADER:

Return-Path: <webbrand@nl3.nlkoddos.com>
X-YahooFilteredBulk: 46.249.57.80
Received-SPF: none (domain of nl3.nlkoddos.com does not designate permitted sender hosts)
X-YMailISG: wAJ10VYWLDsBpCER3uk2qfs5T1g6RTB7qddOIEWNPSNzKpBg iV2YUdZjiC53xBw.vp123LvSBRzzALFoh_ntPkvR0qIHS8BUoF52iETPzMji wkTLy.5R5DeNLB4lhgvwzJID0tvfXhxedamve62Qrx2iMQ4baO8pz5rVCCvb 4TQ9OeK8Zn2t2UU_9MUWXPj6vmf_7hWT3ISslggx.zhHsbsvfiGKD3knsqxL Qh1cdHvcPHuUUfweogWm6_eFf.l8oeLH4twm9OfWjWFgk1ayXIfZHqERxfC5 y9f9j3kUuZw8p1EPjgOx2wGlQEkTeOpxuIz0YjiboibCBWBLE4BAS_l7vjDe sEdR34E5xSSqjLnnSc_Yir2v6ERlx75VKc_mBHTtPsbdH5sVdAJBEQ9x8oOJ ildmOsG04aDZaebxddl.73zV4qiqi3XevwXeU.JYWfnT3VFrjWrQz7HF97Ro fF2T2K19rNuUPOy8JClzD4Hz8u81qGtRem1p7pZpeasZ8o_xAnodttyyphq6 FUyRdgTGdT8vB2Nga0g0lT4Sm9cRjrTSK_vjNg9ONJ47x_gmNk87GfsXs4Bi eq7MWL9HIc5IwQIOQhbAg2Hfl3QaIQiQlhsYvQb724m07o1FNcl3AqUR16kQ muvf9KgsdNTre7veDfEKaduwwanjqxWXSPyWAzHgrbQsXg4i99RiTnfb1czY N1qnjYtC7_02Nljs28IBQlygQovG4QMGEImjwnldT3NBnNe_LwXE_O0u9tIh m9KM3y84mjIM8ATcWNxmO6W7Kpp7V2QhCtBLtcRaTvdx17qYeYLDYdtG55kx PVRyJYHCvnccPx_8LnaNS4j_3FraXyyUWxHleRsFWTqIymqzMXzriNXGkdbJ 5s6Ok8uU8Qhxocmwt7c1jKD8kRmEpUmz_ZN8tsdMo9dubRuDSD46rM7GMu5q P6V3D7hlcHbPhLZrRhfGGpCdCOpUT6j3s4RsFm4u0_WYzB9VOLzm5EzRTzWi Dus1s65AAJJdwLJEm_x5HC7469IogXIPwa1YKWDbsiWARYhmT_K_og47Laaw xPBB6Dg45vdMe_5hwU9AQP0Lk7h7gzNox5jgZcpCMG6YzBuQLCbhZ8SKLcBw 7W3wuumtf_LxHNYgyq.oENICtE9RQIbmG47YDlESVPSmRrW8TIEUW2lAHqM_ yRC8slnz1ZHaqrBB
X-Originating-IP: [46.249.57.80]
Authentication-Results: mta1271.mail.sk1.yahoo.com from=seotechno.in; domainkeys=neutral (no sig); from=seotechno.in; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nl3.nlkoddos.com) (46.249.57.80) by mta1271.mail.sk1.yahoo.com with SMTP; Fri, 04 Jan 2013 17:46:16 -0800
Received: from webbrand by nl3.nlkoddos.com with local (Exim 4.80) (envelope-from <webbrand@nl3.nlkoddos.com>) id 1TrIpw-0005LN-TV for deleted@yahoo.com; Sat, 05 Jan 2013 02:46:13 +0100
Subject: SEO services offer
From: Daniel@seotechno.in
Reply-To: Daniel@seotechno.in
X-Mailer: NotOneBit.com Simple Mailer
Message-Id: <E1TrIpw-0005LN-TV@nl3.nlkoddos.com>
Date: Sat, 05 Jan 2013 02:46:12 +0100
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – nl3.nlkoddos.com
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [738 738] / [47 12]
X-AntiAbuse: Sender Address Domain – nl3.nlkoddos.com
X-Get-Message-Sender-Via: nl3.nlkoddos.com: authenticated_id: webbrand/only user confirmed/virtual account not confirmed

FROM: Daniel@seotechno.in <Daniel@seotechno.in> RETURN-ADDRESS: webbrand@nl3.nlkoddos.com

ORIGINATING IP: 46.249.57.80

 
Leave a comment

Posted by on 01/09/2013 in Other

 

Tags: , , , , , ,

 
%d bloggers like this: