RSS

Tag Archives: Scammer

“Mr. Alex Richardson”

NIGERIAN SCAM – PROPOSAL – FRAUD

NOTE: This scammer has been spamming me under various names, email and IP addresses. The scam for the most part, has been the same business proposal but the scammer has sent other types of scams.

Burning-Moneyscam-alert

SUBJECT LINE: Re: Important Notice From (UN)

Message contains attachments1 File (3KB)
Important.rtf
I AM MR. ALEX OF UNITED NATIONS, OPEN ATTACHED NOTICE AND GET BACK TO US

HEADER DETAILS:

Return-Path: <webxxxxx76544xxx54@att.net>
X-YahooFilteredBulk: 98.139.44.195
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 6CDWYrAWLDvRjsG.fDpZNZEB9LjwzlHltp38zm.6V5NctzdJ FOtssglDtJq6UrL5pvYzHyy2Tf7k7d7yMOOT8VzQjaqNCvk4wpOC2yym0yLz u113rljCb6ZODlEssDpWAongpOPC.ttYXYFjTPYD8woA5Kg.2y8f59ZcFN96 GzFX1_Wzi24B1VkhSmBQn9uGx2MYmVOpGjsrv8xZzG8s1t0Qfw.wPVuGDT0D 7Z2aSbspfpw6mkS_o.ZAayV1HLIkjPln1Hg1.QhDm_tZ3otm0qIq3LawBmBg Ll7NAWPrQBSCs1jYHV6qaq5SOhEHb4oeJNtRKWisH.9F5kS4oWD0.NRwBEnu gqxyanjfc2VJpkvDtoor4hGeicr3qhS8VySUowierb1cNXJwUObmzNxq88BP k1awAM8.m1ZXI3fpqtj69qgGZ5gx8ZkHmIvU3I5NK3.TWqd.zn_nxjs6mN_U 2OcCCX6bUzL3f.3UNxEaSeNTkdogqGiisIhA58AHg9pdbzKA3iXyvviE3qdW X12Z6sRKpymeXyfcHbXPNawlWHxjF6ngndEQm4urdhcFu2w9yFmhfyFzUDcM jtB0Z_Lq.YKMMKz5YgdzL.FTkReA80BwW9D_NzKyWhkvb5hE1R_8DvdTwWf4 cfbAxQ8A4yRWYRnL2bqam7.1ap3FtQ45U0ik2TaOOjuTSgJwp55sGFigK25e Zh9y9sAIXuNkMbQQy1DLz2GqezwaQwDwTNx.8dGz1GzMb3mB58NFoY32bsmL QoPXbLzgUfvaEBuI_LlzjTHSyaex4RiKJD.V8f4YsKufsDFcVfLjcc4g2Up3 rkxUJbJbNzZGd4K2JgKEHIf5bksa__UD23XDFCkqFkt1B.Qs.NT0Tmk.i0by Zrn0UW1xqnRaxDqnYzG5i2ztBGmeh6nhrK4QKAGcMtJi9Me5ZSOEWBXGBqPk Is4wbhueEfZ.ztvuqTERIdhAYwYveNiVR.BLW9gwpbpxhmAwP.BteY0wx_Qh h0v4.LTUaqBRRaOKobD4pM75h7vjrjczJ2l4QsXTefTmDacMXHm.AgMKO6uK Yi3uI8JS6od80XqfnAXhFcC3q5vmbawkKv2OQeBOz2IzsEdwvRRleyp_EKuy 9l.DG3gQYtFTrW8AMlJ4TI4iZcXoaGFoEJSDJ8gZHWOE9E6bkhg2nNSqv0qx 5rajo6V2DNqlWdGs18exmGHKkFrYQ95yeR1Q7k_8mL45kj2qCOClM1p6NhOr 3GQzVLH1avHv9BRks1rNJNSOkG0wwcn0_m1z53F97rpT1f0KFaBa3JTSFMpE TQtUHpqcJZ2mrOhYm0zILsm4vh4xcSuEXL8XGxfJyVPRnle9qDHKD30WfmPx mpR6D9pqfi7LiPn6kvLiIoDtZ1TL5q1l2O9H_ju26VfmSIbNlpAFI_6zl4Mu 4YPLx1btF7qEEZQzcGSgvkOe1paKafbXc7sqBAqFcxSHO.DCww7zFl8nb8I2 EFVwWhjONXbQdkI-
X-Originating-IP: [98.139.44.195]
Authentication-Results: mta1153.mail.gq1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm30-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.195) by mta1153.mail.gq1.yahoo.com with SMTP; Tue, 22 Jan 2013 18:45:11 -0800
Received: from [98.139.44.104] by nm30.access.bullet.mail.sp2.yahoo.com with NNFMP; 23 Jan 2013 02:45:11 -0000
Received: from [98.139.44.79] by tm9.access.bullet.mail.sp2.yahoo.com with NNFMP; 23 Jan 2013 02:45:11 -0000
Received: from [127.0.0.1] by omp1016.access.mail.sp2.yahoo.com with NNFMP; 23 Jan 2013 02:45:11 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 411948.50942.bm@omp1016.access.mail.sp2.yahoo.com
Received: (qmail 486 invoked by uid 60001); 23 Jan 2013 02:45:10 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1358909110; bh=GRvf9voWS3izJGh9/qJ9rm29taabKBVoDXsMABRDYJM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=45BGngO+nSNPrWr+KG5v9MvZTOixv9j+gtU+TkqFzKG1LpXV4s5WKf0QZuVGdrHJNfNKEpiG5leYYyRoHmRkS+p2KRqo+l/xBb9mhdqIe5gdw8FpooQmapgQnvCoG7wV/wLyba+ij6w8EAw4i5qTOrAsRCwtsMb3ZZhyBqaWA4U=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=29+3wEv+D11HgYw3UG+rHHmyOK/M9cDNzzo6fzvvzU/8PSaJn+zyp03daxpbEwhf8BWAXB8KEfEWrx5O0v+SlFn5f0xNHb8Nv4ZJ67nnq5SGTTl/08Fyrvm+I95FPFQwXk91EpXCXiz8YD7etm2+IK5Hj/qPs/4uvXIjcVfPcng=;
X-YMail-OSG: z0gQ.40VM1nP13j4E8oj8FeYXtfj2hwsHR670obNBHuNQMr zKW8g8zKMyCB_8CTJvNKovnYYUa3CBVc7erGMfZg1kQ7zqnidX3E4qLd_L4J 6gt2bt4W3uK7J_mq2cuwNWr32PKcLmJubWEAEKCpi17glw3ywJ7MrV_ywKYm 0LcfRkur0fZhuzXyzpGRUz_0VNkbfvWm2pJF1gC9MOeJ8BbN7IPC9CVt7eXq MD.jSnpUHmh2aStzAMUstIdP6h28HJ4oycaOdlGjN.AUzJ7mb1bMpek49EGi PtdHEZ3GKzcoEjXUexjA0himXcMFCSC6QXqJFyIsFeCmsu.kvSGU6EGfuHxZ ScG718Uyb_PBwwuU3H0aYMAID4R_cxEBaKxD_e2KPTI7HSgvu4JiOKAkjYeJ X6jIuH_DB1pO4aqy.u70KfKG3ZqF1nslTAp6JUpX.UdSf0jhcT7crlhPQM_p Z.IkWPmnu3vT3l6cgH0obRc6tewKX936oN1Yv8Szq.gxgeXru.17YSDoziEl DmK5Pl_RCNaXpOpcUHt5K85ibbpzWTbLbI8rhES4MHBM-
Received: from [17.169.37.72] by web181306.mail.ne1.yahoo.com via HTTP; Tue, 22 Jan 2013 18:45:10 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.496
Message-ID: <1358909110.95572.YahooMailClassic@web181306.mail.ne1.yahoo.com>
From: “Mr. Alex Richardson” <webxxxxx76544xxx54@att.net>
Reply-To: u_nationheadoffice@yahoo.co.jp
Subject: Re: Important Notice From (UN)

Mr Alex Richardson webxxxxx76544xxx54@att.net RETURN_PATH: webxxxxx76544xxx54@att.net REPLY_ADDRESS: u_nationheadoffice@yahoo.co.jp RECEIVED_IP: 17.169.37.72 IP_USED: 98.139.44.195

Advertisements
 
 

Tags: , , , , , , , , , ,

“Sherry Croft”

WARNING – JOB SCAM – FRAUD

SUBJECT LINE: Evaluation shopper: Now recruiting in your area

Earn $200 a week as a shopper

HEADER DETAILS:

Return-Path: <bounce-cgi-nf.innovahomecenter@eigbox.net>
X-YahooFilteredBulk: 66.96.185.14
Received-SPF: pass (domain of eigbox.net designates 66.96.185.14 as permitted sender)
X-YMailISG: ow0v7fwWLDvOkTZ_ziHcWwQu8NHwkWTnobRcU8fqZWs6c.Pq 5VoVxA1VFWWi2vbz3XZOFK6zyRqi3sBPAUlMxzF4bqvu8AGGLOQfPl7xI9bv ZBM4jOn1.gfr4LsCaHamzmGT08766xbtWdt3GxN881M_lnH0CWvUeQZ7RQpC CrOPSKpYFgKNF9DZEcl1phBU33SYCQ1kbEBFyK1BhyFl_B4kNcEw_2bWuIY2 olKze6Fph.9WfbOxR8EqTXzpEPaKiJn_zkBLUzjxYozt1k2hMrVEz6ndP5W3 eGzxh76HxsyZA5mlfo2IX_XWkctTtfNRDwlhkjXyrSNl_39xGTSZ084YhevR MjFv3NQQxL.BAWomUilvFPLPsKd4U.K3fXkTknbHdlvYVtG2uMwe4Zi6jh07 Ob_hJxEfSAqC2MuIhEVFPgjTE3sDDw953QEeBCVNPT.kS.5TKHVP.9EX5BfG vmJCEQ7_TKLUT7GAP0HC.8gQEgP_DKmgRMlyMy6kCLEBVYChprVbHAouh9sB 640GY6CmgLQuFuantLfH2qrUtcPLZazyhtnKifx9__tFytv7zGYnHlB1jgnX bJik4_i9Q_mIzcrQdORz41n2N.lEO7.orq20yv0XW4ND8SD0WWjGNHedU96U ZVgvPq7gzRzk2CzGT.2UuX0B9pYRRbdYsOGC9ALxGQHdApr9LZuBjac0MxLx _0JZUWglH4ZoBsJZzTscVxAC5ocrJQlctL2SBroRjno9Pq0NFz1hODqL6ZnV 95KzUfb0niaRKyPmgwv3.KG.VuEX.3OqJP5YrkYq9ZEGUgZYhHWlo2p.iU3m HhqzMg.fe7FEB4ATxqjgRLa.RG51Ms0LF4sQZh5hWvE0H_xtm2fo8uQ45hC8 LTd3uAqVMnglb_K62ekar95MLNEqGUl8Cu0X4vpWHXYGsn27yggGA0aXEsXU ZaWCxUHTRER71TnQRgypF_oIlqXbn8M_Hf20p_3zbHEOm2I47ZayWMYoLxak Wjxh_vMm1EVzOJTxA4z_lPWzu7jTib4.b0eYaqUuo7R7pdN84bWoxX0_3pKl FY18GdigdmkagbyHbGAZZbb0ZIwBGhJ1m_qx93wKwAQTpJssi1N59_6QeabZ CDQcE3sa_J9ZLvcGaiAAEyrY.WRGcSViWtpbimt4SEqtuTISkJfyFfBFuk39 1hjJgjOvUKk4z2dtApaddQ–
X-Originating-IP: [66.96.185.14]
Authentication-Results: mta1226.mail.sk1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bosmailout14.eigbox.net) (66.96.185.14) by mta1226.mail.sk1.yahoo.com with SMTP; Fri, 01 Feb 2013 02:07:06 -0800
Received: from bosmailscan05.eigbox.net ([10.20.15.5]) by bosmailout14.eigbox.net with esmtp (Exim) id 1U1DWU-00049p-26 for deleted@yahoo.com; Fri, 01 Feb 2013 05:07:06 -0500
Received: from bosimpout03.eigbox.net ([10.20.55.3]) by bosmailscan05.eigbox.net with esmtp (Exim) id 1U1DWU-0001mT-54 for deleted@yahoo.com; Fri, 01 Feb 2013 05:07:06 -0500
Received: from boscgi4201.eigbox.net ([10.20.12.108]) by bosimpout03.eigbox.net with NO UCE id uy5S1k00M2KsGMW01y5ScB; Fri, 01 Feb 2013 05:05:26 -0500
X-Authority-Analysis: v=2.0 cv=Rt9H3VaK c=1 sm=1 a=G3xyMPWyPh0A:10 a=pe0irAIzKBIA:10 a=nDghuxUhq_wA:10 a=ecbj2ccWRGgA:10 a=d3ZwFMNkyaEA:10 a=pGLkceISAAAA:8 a=QPcu4mC3AAAA:8 a=5r8fxAsfy9EA:10 a=1Ba24gaqfRe7yr1H7EQA:9 a=DwlDvmn/BrGTgMMELokLFw==:117
X-EN-OrigOutIP: 10.20.12.108
X-EN-IMPSID: uy5S1k00M2KsGMW01y5ScB
Received: from nf.innovahomecenter by boscgi4201.eigbox.net with local (Exim) id 1U1DVy-0005as-WD for deleted@yahoo.com; Fri, 01 Feb 2013 05:06:34 -0500
X-EN-Info: U=nf.innovahomecenter P=/design/wp-includes/js/mailist.php
X-EN-CGIUser: nf.innovahomecenter
X-EN-CGIPath: /design/wp-includes/js/mailist.php
X-EN-OrigIP: 38.108.116.7
Message-Id: <1359713194-902-nf.innovahomecenter@boscgi4201.eigbox.net>
Subject: Evaluation shopper: Now recruiting in your area.
From: Sherry Croft <sherryc247@gmail.com>
Reply-To: sherryc247@gmail.com
Sender: Sherry Croft <sherryc247@gmail.com>

FROM: Sherry Croft sherryc247@gmail.com RETURN_PATH: bounce-cgi-nf.innovahomecenter@eigbox.net IP_USED: 66.96.185.14 <> 38.108.116.7 <> 10.20.12.108

 
 

Tags: , , , , , , , , ,

“Kathy Hanes”

JOB SCAM – WORK AT HOME – ONLINE FRAUD

IRONIC employment offer looking to hire employees for their FRAUD department – LOL – As well as their cellular department — This alone shows how callously confident these scammers are. — I sent a reponse letting them know I was “very interested, blah blah”, and will update with further details on this con artist.

online_job_scams

SUBJECT LINE: Job~Customer Service $15-18/hr

Job~Customer Service $15-18/hr
As a CSAgent, you will listen to recordings of sales calls to determine if the sale was valid or if there is evidence of sales
fraud or undue customer confusion. $14.00-$15.00/hr.paid .
You work from your home using your computer and Internet access.
We supply all needed training and software.
Choose own work hours Monday-Sunday. Start ASAP.
compensation: $15.00-$1800/hr. paid
****************************** ****************************** ***
$14hr paid Celluar Customer Service
Cellular Communications is now hiring customer service for payment processing/handle general customer complaints & answer questions about service accounts.
Must answer one call after another and have flexabilty,adaptabilty to handle sometimes irate customers. full or partime [holiday overtime] pay $14.00 hr + bonus

<href=”http://bit.ly/SVhFaB”>&lt; /a>

Kathy Hanes /hr
CJC
reply remove in subjectline

HEADER DETAILS:

Return-Path: <k_hanes9@excite.com>
X-YahooFilteredBulk: 208.89.132.143
Received-SPF: pass (domain of excite.com designates 208.89.132.143 as permitted sender)
X-YMailISG: NwSC9CQWLDtIk2DTqTDWJY1rkqoiayaIKBJ7yDW2dVh0zKSC bvEIqtBSDU27rNNNjV.LHVrsYPejhKFa2L07uXc.6AXMqCP9Frm4r9mzJ02K 2xoW1DfuWuobW0VzDaHOZhqKQ4mbnX7kITtwSqaNfDaTXgQeFlLJtkX1Cp_F f.Mk4ND3rnE1ONBpRADCzAYT9gGJemRCWk.TXRI7ASVENgn4DeRbmSendTxM yUKu2lWxdBCXr9crJIaC9ETY3Hr71rJgxk_CzNDPf3ZPSe.HpkMl.Py8iQHP WrhOuXO_jK4EKuMZ5qQ9HE__Vu5aELgFmLeJ4H5CHwR9_Rk3MK7RyZexLvTy YmTgiqkWa.jLr4w6j608nSt4HGoai4hb9RbTv2k8DeFMX3SjC7zTfeKAJQJj w.KKV.GBnyOeaMYneqAvvpFh0MgFvXV1pIuGCfUD2S2OnuVFt80KMELhvVqH Iy1N8BoFuJaYJvHdDc2sA4bIBZCkzfFfdY4cVdjXdi2FaXSOIM7iFcVj9Oty 4Aefa0T4nQ3I8O19ENbgx9KlzhQGTLKR6XAWMRMklImYZLm5u84sA7A54bpA j64GEw5St3SK6xxcTScOp8ahFfiNXIdtrys012CEoqTuRY2QawHoB7UR0VAo YwIYmrdGGSMSl0MTjr.f0FFVfj7jAc3kMYmSOZq4ri6ec4r6ixZHf8zjVSoF 2U6XROrUZnQYv3JCGEh_0hy03fAJsgSOnMslJ61DyH9T1KX9dFThiI.mr5GL Hh2e7Q9oDDF1.GfalyW1Boo4ZWwfAPm.pUC2MkkfJ8Hz51Eb8LHxIp4bMvCq zmv41maBKF5sQCARBn36kRVEJbhm4zKHtPFLRh_MJAgVjG99UtpG6PLZMxn_ 4KSaL0vAtaDxZFv4NUysFJouLIb10Lo0_f3Ditcrra.XygnYlO9Ntuv6dO.p Ha8O_mZ8Tr5W0TPUsYj0x9.jUN9FnFe.N9YmYS1C0QyWxGEobM0IeSjmjhrL bWXDetx0om81p9J0HnaJhW.aQoxEVmtRcqmenRIoFUrwc0yN62RAjG.8e3Ll B2hbernLa1.7UeOANeaL2yVyg9LedrwH6gLJLvXyH1ZXGAVc_Y47HHjVJkiH .ewIZ7LM_sYIWbjo4.ptIungFmqvUkSuo9rWWQ–
X-Originating-IP: [208.89.132.143]
Authentication-Results: mta1111.mail.bf1.yahoo.com from=excite.com; domainkeys=neutral (no sig); from=excite.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO outbound003.roc2.bluetie.com) (208.89.132.143) by mta1111.mail.bf1.yahoo.com with SMTP; Sun, 27 Jan 2013 08:27:02 -0800
Received: from web007.roc2.bluetie.com ([10.200.2.101]) by outbound003.roc2.bluetie.com with outbound003 id t4T21k0012Alkky014T22y; Sun, 27 Jan 2013 11:27:02 -0500
X-CMAE-OUT-Analysis: v=2.0 cv=KO/Y/S5o c=1 sm=1 a=FEhTArTaBcEA:10 a=i-wQWBNYtOgA:10 a=FmX3VfpdAAAA:8 a=QoHJ8kPOAAAA:8 a=BccQIOACJiwA:10 a=Q3DIDtWcAAAA:20 a=EayM_pMngw29Fcn_my0A:9 a=QEXdDO2ut3YA:10 a=otSbmZrKiY0A:10 a=Ej1W5oQFB_lmPtYj:21 a=gyhHITpVaGM5rqYN:21 a=tXsnliwV7b4A:10 a=SmGauVGvY7CJt9i0:21 a=caMOIsLHZfnky-pd:21 a=K1UWZqsGkJopgV8U:21 a=7X69+Egs4aEeFnNAy6RSag==:117
X-CMAE-OUT-Score: 0.00
Received: from web007.roc2.bluetie.com (localhost.localdomain [127.0.0.1]) by web007.roc2.bluetie.com (Postfix) with ESMTP id 3B8D7160163 for <deleted@yahoo.com>; Sun, 27 Jan 2013 11:27:02 -0500 (EST)
Message-ID: <20130127112649.19679@web007.roc2.bluetie.com>
X-HTTP-Received: from k_hanes9.excite [72.20.28.31] by web007.roc2.bluetie.com (BlueTie WebMail ); Sun, 27 Jan 2013 11:26:49 -0500
X-Mailer: BlueTie MTA
Cc:
Reply-To: prestidge07@aol.com
From: “Kathy Hanes” <k_hanes9@excite.com>
Subject: Job~Customer Service $15-18/hr
Content-Type: multipart/alternative; boundary=”321133446-1359304009=:19679″

Kathy Hanes k_hanes9@excite.com REPLY_ADDRESS: prestidge07@aol.com RETURN_ADDRESS: k_hanes9@excite.com RECEIVED_IP: 72.20.28.31 IP_USED: 208.89.132.143

 
 

Tags: , , , , , , , ,

“Mrs.Roselin Moore”

WARNING – FRAUD – INHERITANCE – CHARITY SCAM – SCAMMER

NOTE: This scammer along with other scammers will also send scams in the form of an attached file. It makes it more difficult to post, esp because I do not ever click on anything from scammers. However, I’ve had this scammer email me before under more then one email address and It’s always the same scam, different tune. Names of her dead husband have changed as well. So beware!

scams_target_you_scammer419

Message contains attachments1 File (12KB)
My Dear Friend.docx

I AM MRS.ROSELIN MOORE,PLEASE READ THE ATTACHED FOR MORE DETAILS.

HEADER DETAILS:

Return-Path: <mrs.roselinmoore365@gmail.com>
X-YahooFilteredBulk: 66.94.236.26
Received-SPF: neutral (66.94.236.26 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: VZMHXjkWLDtIyu7acPcagRCCSrO1.W8T.jswFTmLP4ENUw4B dX36i1zbCN5CWQ4fGm6B.K0Agw3Rrv2XP3OdsQ3.jA9Iv_62_dXBVQexRuVB PHmAiEwlrgqLBlrEP6kcn35V5xtqRce1DDAPrAUziBrr4mDLVtdzWOPGg9ip oxu1eU7aGo8oHhS89YF5f68BkOA.MnwPQz8bAVpLlPGNJK3H7.DpVVW5scdb McHJPiuIyv12.QDn1dNAKinsSpAa1Hozk0tV.uV2uGZB_y6oiOeWmOcuEXnW NeKBhUb1xUzzVCT7zmXX9Y8M8HncSkgxyx56eZJCVCiaMcbpSSRX1waopZ97 QAl_AFCDCsK5hMt.FJlqIkg4eyexwDICOI60mkAzR3dfYEpDkfe00sAMywD5 CDZfBa3SIYteEYObkVEYjT1KBChvWannt7_.6UZIOAMVEERu_2m0O1hWJ3Ot TVtTH0_wpyyehThXMe1ghaR3T6SnE9xY6_ZgpgM9j.MXp2lJ874aTt2tIinQ XXmIspPsEv5ZByCjbQvC4kwJdCeZgfv.STpiiigffHNq3PkO0mmzuCFnzIUS L8qmwcD8Sfx4LkRjrIRYhROixi0687adDqP1OgGijO98I87I4V__W49XrWGU dR3h7bAPsf1NXckaztZ0LSFmOWIPSRi2ARIejAluShZ_lKkuPzyRvrWqFqrx lIgsAHUjzspInEGIMLWZe1Un9TAGKbvlLZJIEebsoaPDcZRhGmGTTMMJWoqZ IO5uWVH8fSrs.DquFgEUF1TEzQq0bVeq8wBOgGFT6p.J_zn0eRC_1KfKz0UV 935fFYXgNTFKf6aefY6L0t15urrUIVumTTe1SUkFxGyrqvH2IsbroF_v9.48 Zdqc4I9y6b4PBE_594k3GZ5FxW6NoioAEdqCxT2A2KD2nD0GmWiyGbK8hzXP zvkqprdXud1brup1fPXg7H6tdvukcdRx9u6_Bm0L7bE34rjN9z4XKjsZQRIc cNtDxw.vm5_e4F3DWPxbgntYJSv.hwR1ak2UZYOHN0.XtslOEb.xrb7uVBUG 55dmI_LGYUymGf9gvoPXTHhrSxauTUmQrgyaOn2NdPKSu3aCivNfZneCgMAW FYNgOQ8kaH_5BGjkaCjxmo1aP7pEKFtoO2joE24hUEOJnRImMnbvXQ–
X-Originating-IP: [66.94.236.26]
Authentication-Results: mta1053.mail.ac4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm1.access.bullet.mail.mud.yahoo.com) (66.94.236.26) by mta1053.mail.ac4.yahoo.com with SMTP; Wed, 30 Jan 2013 07:31:48 +0000
Received: from [66.94.237.195] by nm19.access.bullet.mail.mud.yahoo.com with NNFMP; 30 Jan 2013 07:30:17 -0000
Received: from [66.94.237.97] by tm6.access.bullet.mail.mud.yahoo.com with NNFMP; 30 Jan 2013 07:30:17 -0000
Received: from [127.0.0.1] by omp1002.access.mail.mud.yahoo.com with NNFMP; 30 Jan 2013 07:30:17 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 394975.10750.bm@omp1002.access.mail.mud.yahoo.com
Received: from [63.141.199.185] by web5702.biz.mail.ne1.yahoo.com via HTTP; Tue, 29 Jan 2013 23:30:14 PST
X-Mailer: YahooMailRC/718 YahooMailWebService/0.8.131.499
Message-ID: <1359531014.46116.YahooMailRC@web5702.biz.mail.ne1.yahoo.com>
From: “Mrs.Roselin Moore” <mrs.roselinmoore365@gmail.com>
Reply-To: “Mrs.Roselin Moore” <mrs.roselinmoore09@gmail.com>

Mrs Roselin Moore mrs.roselinmoore365@gmail.com REPLY_ADDRESS: mrs.roselinmoore09@gmail.com RECEIVED_IP: 63.141.199.185 IP_USED: 66.94.236.26

 
 

Tags: , , , , , , , ,

“Dr. David Mark”

EMAIL SCAM – PROPOSAL – FRAUD

no-scammers

THIS SCAMMER ALSO SENT AN ATTACHED FILE WITH THE EMAIL.

VIEW THE ATTACHMENT FOR BETTER READING AND UNDERSTANDING 

Return-Path: <WAYNESSTAR06@aol.com>
X-YahooFilteredBulk: 113.105.185.152
Received-SPF: neutral (113.105.185.152 is neither permitted nor denied by domain of aol.com)
X-Originating-IP: [113.105.185.152]
Authentication-Results: mta1453.mail.mud.yahoo.com from=AOL.COM; domainkeys=neutral (no sig); from=AOL.COM; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.szyfd.com) (113.105.185.152) by mta1453.mail.mud.yahoo.com with SMTP; Sat, 19 Jan 2013 22:54:55 -0800
Received: from User (unknown [68.213.28.167]) by mail.szyfd.com (Postfix) with ESMTP id CFE29-BC0E-50FA5274-26363; Sat, 19 Jan 2013 15:59:48 +0800 (CST)
Reply-To: <davidmark.pay@freenet.de>
From: “Dr. David Mark”<WAYNESSTAR06@AOL.COM>
Subject: YOU’RE PART OF THE MONEY. AT LAST
Message-Id: <20130119075948.CFE29-BC0E-50FA5274-26363@mail.szyfd.com>

RECEIVED_IP: 68.213.28.167 IP_USED: 113.105.185.152 FROM: DR. DAVID MARK <> WAYNESSTAR06@AOL.COM REPLY-ADDRESS: davidmark.pay@freenet.de

 
Leave a comment

Posted by on 01/29/2013 in Other

 

Tags: , , , , , , , ,

“Roberts Draska”

WARNING – LOAN SCAM – FAKE LOAN OFFER

The more time, the more money.

EMAIL: Do you need a loan of 2% to pay off your bills?Or for your Business if yes Email us : roberts.draskas@gmail.com Information needed

(1)Name:
(2)Amount needed as loan:
(3)Phone number:
(4)Duration:
(5)Country:
Note:that all mail must be sent to roberts.draskas@gmail.com
Mr roberts draskas .

HEADER DETAILS:

Return-Path: <roberts.draskas@gmail.com>
X-YahooFilteredBulk: 209.85.212.68
Received-SPF: pass (domain of gmail.com designates 209.85.212.68 as permitted sender)
X-YMailISG: U2eLDAIWLDsjZhwoKPbfZ96Uzru1.zOZ9rPn8mlp6_vjbLhK VRmafQjuGfWP4LrXIIW4XtTCvU62ZRrxLENhQmPzo0eVh6BglJRyOvXqMyXW _k7Ap__4a8XiwVUtwCNFmSkG.rjOfDjhEg6iwTPYsgGfLp16DV7.ZWVjM9jn LYoFAI_hXSYYKy.xRCPhkndKojfGxXUtid30fAj.jYcUcz6OSq1yQGNWrzCr yBoSXTinJtX7.qmaXKAbY8ztnjyfX4mk31DQzUlzz6YG4aJIUoAnbpAy2IyF mi2Z6484WXfZN5RFkpVbSIjtKKrMtVrC8GLEz4VEYn_ge8e1IUnneRqZP74x RuOPci27NjuEwwVu9xzR9jHDjmh8dBrRrHT9D9J_yrjEHLOSoMbkWpEnR3xv k5ZgzHnXz.J0sO3u5lYw5pbrQqMrV.3QJm3IgPfkBV.dizk_msh0CEpJgLUG CBoELK71r1HmvUgPv42aX3FJ.yLSVS1wm4CVS306QwvBWc5nrMLsRiN0tZNX WgDL1.paR_JXcj._hYDi8e_hvDgZDb.hmohaMy2bZYsLr9jhW0ol1AvXUjXC IcmgUPSdZcR1qkC.YD5hroASt796f59UxO3.r3hWRY86jGGNh2NARSUAd9Vi vNUSzbnIzt_ynXCPww5h.3DQxgMEut.5B3tMLvK4s6WEuLmecpbbGzjc2D8U NdqrsIptkaRgwZjFm4sESUJ0qiLwFovy6kOHbd56WelY2khIT_5OzE8kdxxz hjbwmK1bVC0_I1a6dVaDQioy0d3Sp_IitmBMWV0zamfTvzB52z_tKQFlxVTo vSGZ2sx8ogcy1TTJQ3ba0gdxEEpcZxmy2PVpOAzqWRdMhP9KDorkFxXylq0r 5dXnSZ1o9xRaUDo_a_hlqtXPPS613ZnoAJ9vCjZ3TPkBdea0spQsAG99DogD Tn1SzqAc75jNPrRzw5a4qhf9N8hASOXfDP7.WxG.30UXdkmhiOeI2VCne8lC OTnQ96p6KaFCojDbnxpYA5WTzQu9y.NiwfOFqZeufZRHDVPoywInnZuFDmKL eQ2tWORU8vFOlUNgp7qxh67n_2BoCj9C6jMelwErW7vtSoYPgRsLzfbwy5Zm iI2JE1gVhhtk6PWopeiBDCT22HXBjyHWrMOpC.EVxDCdx30Jcc9est0L7IOJ oCEtBcOCceE_ttSKAV31HpsPV0gkAY3ZCid18YhBzC_kDFHLr7ol4JYmCt57 AloP5IXgCVSI1g2e_.QiJHEW5BmdG1CBWbKsrZA0YPgUEQdtaz0K7e31g13W tt_e6I7Azg–
X-Originating-IP: [209.85.212.68]
Authentication-Results: mta1094.mail.ac4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-vb0-f68.google.com) (209.85.212.68) by mta1094.mail.ac4.yahoo.com with SMTP; Thu, 17 Jan 2013 07:22:59 -0800
Received: by mail-vb0-f68.google.com with SMTP id fq11so288225vbb.7 for <deleted@yahoo.com>; Thu, 17 Jan 2013 07:22:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:date:message-id:subject:from:to :content-type; bh=hpFxrNRnnIiIcWD+EhHsTadALiBX6lSQf41OsuB5+uo=; b=HqHur0c3YoWiIwlO+WzHZf97CVNlfLOZA7Fr7KRgCzdkCFS7/lCTwK5WtkDLx2E8tV XvXPTIpVvPkYYNk95Jt7zpSXdGNGM4wjSi+T5w8ccJWzlZmkqfjmuQGaz8gqndfQxuuf 2K7XjZDX8YOGsQhdBThKhNwmKCLUBE0x+XHnUY33QGetG9MDp9b6TyFD3CoPAE+8M/rT VknDaHcvkvNstFguje20HJd6d/bYs0qbm9Wz2/jMzKXflo5qqlUmzazMIOiK5XcRZ/CT 5LPSmtAAcd6N4ntrac95GvrMUwIukB5XD+wnl65KHDcMNPTiZfRDCRFZqSvP8fwuqDcK 7OWw==
X-Received: by 10.52.66.75 with SMTP id d11mr5170548vdt.63.1358436178573; Thu, 17 Jan 2013 07:22:58 -0800 (PST)
Received: by 10.59.3.106 with HTTP; Thu, 17 Jan 2013 07:22:58 -0800 (PST)
Date: Thu, 17 Jan 2013 07:22:58 -0800
Message-ID: <CAJEXoSA2CdBeTWgnPPJqJoshxrZ+bPTb8-tDeL+K5ob9fAiFnw@mail.gmail.com>
Subject: loan offer 2%
From: Roberts Draska <roberts.draskas@gmail.com>

Robert Draska roberts.draskas@gmail.com

 
Leave a comment

Posted by on 01/27/2013 in Other

 

Tags: , , , , , , , ,

IRS Phishing Scam

IRS PHISHING ATTACK – ONLINE FRAUD

WARNING – IRS does not initiate contact with taxpayers by email to request personal or financial information. 

NOTE: As soon as I received this email I thought it was highly suspicious because not only did I receive it on my “fake bait account” that I use for scam baiting but also because IRS doesn’t send emails and they warn about phishing scams right on their website.I’ve looked up the IP(s) and header information and noticed it was blacklisted on anti fraud websites. Regardless, if you receive a email or any unidentified online user contacts you regarding money and personal/financial information, DO NOT GIVE IT OUT!

THE EMAIL I RECEIVED

animated arrow down2

 

Where’s My Refund opens January 30, 2013.

Due to recent tax law changes, we will open refunding season and start processing individual income tax returns on January 30.
This applies to tax returns filed on paper or electronically.
Our new system calculate your taxes of your fiscal activity from last year and you are eligible to recive a tax refund of $550.
In order to claim your refund you will need to follow the next steps:
* Download the attached form.
* Open it in a new secure window, and follow the instructions on the screen .
You will get your refund within 24 hours after we’ve received your e-filed tax return.
Generally, tax returns and return information are confidential, as required by section 6103 we may disclose your tax information to the Department of Justice for civil and criminal litigation if you are submitting invalid records .
Sincerily ,
Internal Revenue Services .

This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

HEADER DETAILS:

Internal Revenue Service – Where’s My Refund opens January 30, 2013Wednesday, January 23, 2013 3:51 PM
From IRS Wed Jan 23 07:51:23 2013
X-Apparently-To: deleted@yahoo.com via 98.139.220.247; Wed, 23 Jan 2013 08:51:41 -0800
Return-Path: <notify@irs.gov.e.com>
X-YahooFilteredBulk: 109.202.152.250
Received-SPF: none (domain of irs.gov.e.com does not designate permitted sender hosts)
X-YMailISG: e9gWdlIWLDsVuDoRgzBswxOsNA_ALUCiZ94Yo_GWveDhkE5H XMWm0qDjKA74EzfR2v4U39GjLKyY.tLS2ERBwh8QfEiw6xtMQXuQlwVzLl2d RJ3G2gcy7YXo.kiHr1zYnAy2phBJz_svN95DBa5tLrgMj_bguPLUoWjbWku2 WAqROTpCvFZl9JwRJTYprkGQitCDIECEy4SJb_z54DL7hpJgjQ2pFAzsPIuQ ntA6vloWDZzpvBpH2wh3_xeONQ_83lFE00nr94l652jT_oOgIkiCGpIUBhnB P5tPsFERmMNOP1tIr6NRzxaAEk7nQn7V2u4JV7Ybda6Y6bLNYkJZNLBLI_GG CyMYgwEK0i8V0o0wI4GgnP6uf7UbAfoxYgnZczb4hF9EFmVbF0WQAkU4KP2w OF6HwlRTgczkc1o7S33xg9j47cCXwOVlXdlv5hwqFteGOC4dSmZqQpGciX8C DN834OELrIAaYJtx23oJxUuAt88m.8H3hhZmRbAU24Fa3KsaQoZn23MKMfwW odS9yjtrg.dALJN0VFh2EDOZMMdZG1IZUnCdJ4MQeMPyCndMUyE_Cpa_spZM JeRmb9TtYwNR04S2SOXjuanwLGIVuGu34vuIeHPO56KUuYaWZbtY5M8yymat .jFENS3LsYyRFXCOzLkTPq2cDzaLq76wdP3mfS8tlk488DRSpv04enXKstEg fq9A5vXAKHWgltsPDcWP25RZfcwSbDriislv0nwXBGJUWVLY0StIhyKfRLF1 et9V4Zcgy0wdwJAco7r9l5V6Tw9tfgBzsgE.zQ6C3MgC9NI0X84COjoglzOE F7CDHeeyx3723DnU_UCfp5pOphQKbUG3xJoWaHFEOV7lPjqt8LEE88vGIgoU _9o08aQIgGQUrFN3O_ZMiszwr8_m_jiFoykiwN4WSGBphovmuOArcvkMXJ.L KjZu.3humATM922Yy2TWCEdqHSaYsMsYV2W39z60iB_M0WxJhm2WSOIDHyg3 HQ2JpAIZ7wXvKqM886pUR50I297J32RCrQlr5IPcjbWZgwRllKOmTWhsOypI fjUUAk6cVKzJZlfEN7z8.cFKHlb1DigaMk3pSsADkBR_H2IW..2q9s4KbDsp Gco3D4lqHYqtFP9Uz_YkWUrbEmomVSv8IK5e_WgpHQfvDr9YyN9Et2UICzDr sSfAo3ezKUpFVBBHWDkQ.fyMhOtsLQ5HN1hzllJY7g6Bgc6DB_v4VGT1_.gW 4b_tnAE9_YWWUs.eyUvShqtRkhyPaXyK7FFqsOAC3FpxKHKDgYRwQK64fd7R kPLbN0JKNZCeCPHbVmwe_GQW39dVvaVXug5_Zx3XGsMx1hPW09VmQf7NPoCc AoCQKkw98gK9lSR6bb7fU8jVMtj40VPTVtfp5smsqyGRolgJ3bd0PZRv9itq O7hpNMrthaB2UEWKjni1NJmSMXSSkde0hbkRVphD8FWlp0arA8J1QQgN13.H uA_Mzfe4twcZfdJs3GbKXSdInR_DqmLsTumkAyqZ3LWdCU_Ns9DsJIsto6yu _f0IinFxSMriLOu0kDSTloYWoeQpIA1PBNgwuLggbq_MbM2BLJIcImMRhXL5 p.4zXTWpD2vkWwx4NjgH9QeOKcLVjzNrW8WI6.IxR3e.4VuOI.OqFJ3wdcbO D.CK6vPMS_r6SSXira5mqPN0MyL3XcR5NL_LyIrqHCcYiPK84c3hHzyPlPEh N1KWe8joijPKhNdcXjMTcM.MASnrhuACslmceToaExR54srG93YLv.GTGDiw 2VVTs.9eTBD1_6uc4fgYpta0y3pQ8aUCWRdGwa2jGXASuy8JawOen9OFIkvW iyalHrsiXFG9PkdNtwWBwaO.FhNJlSbr4q7pqQpZSVVuqeKsdD_ojtuUVMma W29GIuqeXO4Zj9lrmyfWswzCe34jeEgVHZoAcURQZBU.ZU9jHn0yRw–
X-Originating-IP: [109.202.152.250]
Authentication-Results: mta1247.mail.ac4.yahoo.com from=irs.gov.e.com; domainkeys=neutral (no sig); from=irs.gov.e.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ltidkex01.LumasenseInc.com) (109.202.152.250) by mta1247.mail.ac4.yahoo.com with SMTP; Wed, 23 Jan 2013 08:51:37 -0800
Received: from User ([185.11.132.8] RDNS failed) by ltidkex01.LumasenseInc.com with Microsoft SMTPSVC(6.0.3790.4675); Wed, 23 Jan 2013 16:52:59 +0100
From: “IRS” <notify@irs.gov.e.com>
Subject: Internal Revenue Service – Where<92>s My Refund opens January 30, 2013
Date: Wed, 23 Jan 2013 19:51:23 +0400
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_0094_01C2A9A6.03D1B7DA”
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Return-Path: notify@irs.gov.e.com
Message-ID: <LTIDKEX01jnzi95HfqR0000003a@ltidkex01.LumasenseInc.com>
X-OriginalArrivalTime: 23 Jan 2013 15:52:59.0099 (UTC) FILETIME=[B7A89AB0:01CDF981]

notify@irs.gov.e.com IP_USED: 109.202.152.250 RECEIVED_IP: 185.11.132.8

 
 

Tags: , , , , , , , , , , , , ,

 
%d bloggers like this: