RSS

Tag Archives: Scammer

“Mr. Alex Richardson”

NIGERIAN SCAM – PROPOSAL – FRAUD

NOTE: This scammer has been spamming me under various names, email and IP addresses. The scam for the most part, has been the same business proposal but the scammer has sent other types of scams.

Burning-Moneyscam-alert

SUBJECT LINE: Re: Important Notice From (UN)

Message contains attachments1 File (3KB)
Important.rtf
I AM MR. ALEX OF UNITED NATIONS, OPEN ATTACHED NOTICE AND GET BACK TO US

HEADER DETAILS:

Return-Path: <webxxxxx76544xxx54@att.net>
X-YahooFilteredBulk: 98.139.44.195
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 6CDWYrAWLDvRjsG.fDpZNZEB9LjwzlHltp38zm.6V5NctzdJ FOtssglDtJq6UrL5pvYzHyy2Tf7k7d7yMOOT8VzQjaqNCvk4wpOC2yym0yLz u113rljCb6ZODlEssDpWAongpOPC.ttYXYFjTPYD8woA5Kg.2y8f59ZcFN96 GzFX1_Wzi24B1VkhSmBQn9uGx2MYmVOpGjsrv8xZzG8s1t0Qfw.wPVuGDT0D 7Z2aSbspfpw6mkS_o.ZAayV1HLIkjPln1Hg1.QhDm_tZ3otm0qIq3LawBmBg Ll7NAWPrQBSCs1jYHV6qaq5SOhEHb4oeJNtRKWisH.9F5kS4oWD0.NRwBEnu gqxyanjfc2VJpkvDtoor4hGeicr3qhS8VySUowierb1cNXJwUObmzNxq88BP k1awAM8.m1ZXI3fpqtj69qgGZ5gx8ZkHmIvU3I5NK3.TWqd.zn_nxjs6mN_U 2OcCCX6bUzL3f.3UNxEaSeNTkdogqGiisIhA58AHg9pdbzKA3iXyvviE3qdW X12Z6sRKpymeXyfcHbXPNawlWHxjF6ngndEQm4urdhcFu2w9yFmhfyFzUDcM jtB0Z_Lq.YKMMKz5YgdzL.FTkReA80BwW9D_NzKyWhkvb5hE1R_8DvdTwWf4 cfbAxQ8A4yRWYRnL2bqam7.1ap3FtQ45U0ik2TaOOjuTSgJwp55sGFigK25e Zh9y9sAIXuNkMbQQy1DLz2GqezwaQwDwTNx.8dGz1GzMb3mB58NFoY32bsmL QoPXbLzgUfvaEBuI_LlzjTHSyaex4RiKJD.V8f4YsKufsDFcVfLjcc4g2Up3 rkxUJbJbNzZGd4K2JgKEHIf5bksa__UD23XDFCkqFkt1B.Qs.NT0Tmk.i0by Zrn0UW1xqnRaxDqnYzG5i2ztBGmeh6nhrK4QKAGcMtJi9Me5ZSOEWBXGBqPk Is4wbhueEfZ.ztvuqTERIdhAYwYveNiVR.BLW9gwpbpxhmAwP.BteY0wx_Qh h0v4.LTUaqBRRaOKobD4pM75h7vjrjczJ2l4QsXTefTmDacMXHm.AgMKO6uK Yi3uI8JS6od80XqfnAXhFcC3q5vmbawkKv2OQeBOz2IzsEdwvRRleyp_EKuy 9l.DG3gQYtFTrW8AMlJ4TI4iZcXoaGFoEJSDJ8gZHWOE9E6bkhg2nNSqv0qx 5rajo6V2DNqlWdGs18exmGHKkFrYQ95yeR1Q7k_8mL45kj2qCOClM1p6NhOr 3GQzVLH1avHv9BRks1rNJNSOkG0wwcn0_m1z53F97rpT1f0KFaBa3JTSFMpE TQtUHpqcJZ2mrOhYm0zILsm4vh4xcSuEXL8XGxfJyVPRnle9qDHKD30WfmPx mpR6D9pqfi7LiPn6kvLiIoDtZ1TL5q1l2O9H_ju26VfmSIbNlpAFI_6zl4Mu 4YPLx1btF7qEEZQzcGSgvkOe1paKafbXc7sqBAqFcxSHO.DCww7zFl8nb8I2 EFVwWhjONXbQdkI-
X-Originating-IP: [98.139.44.195]
Authentication-Results: mta1153.mail.gq1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm30-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.195) by mta1153.mail.gq1.yahoo.com with SMTP; Tue, 22 Jan 2013 18:45:11 -0800
Received: from [98.139.44.104] by nm30.access.bullet.mail.sp2.yahoo.com with NNFMP; 23 Jan 2013 02:45:11 -0000
Received: from [98.139.44.79] by tm9.access.bullet.mail.sp2.yahoo.com with NNFMP; 23 Jan 2013 02:45:11 -0000
Received: from [127.0.0.1] by omp1016.access.mail.sp2.yahoo.com with NNFMP; 23 Jan 2013 02:45:11 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 411948.50942.bm@omp1016.access.mail.sp2.yahoo.com
Received: (qmail 486 invoked by uid 60001); 23 Jan 2013 02:45:10 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1358909110; bh=GRvf9voWS3izJGh9/qJ9rm29taabKBVoDXsMABRDYJM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=45BGngO+nSNPrWr+KG5v9MvZTOixv9j+gtU+TkqFzKG1LpXV4s5WKf0QZuVGdrHJNfNKEpiG5leYYyRoHmRkS+p2KRqo+l/xBb9mhdqIe5gdw8FpooQmapgQnvCoG7wV/wLyba+ij6w8EAw4i5qTOrAsRCwtsMb3ZZhyBqaWA4U=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=29+3wEv+D11HgYw3UG+rHHmyOK/M9cDNzzo6fzvvzU/8PSaJn+zyp03daxpbEwhf8BWAXB8KEfEWrx5O0v+SlFn5f0xNHb8Nv4ZJ67nnq5SGTTl/08Fyrvm+I95FPFQwXk91EpXCXiz8YD7etm2+IK5Hj/qPs/4uvXIjcVfPcng=;
X-YMail-OSG: z0gQ.40VM1nP13j4E8oj8FeYXtfj2hwsHR670obNBHuNQMr zKW8g8zKMyCB_8CTJvNKovnYYUa3CBVc7erGMfZg1kQ7zqnidX3E4qLd_L4J 6gt2bt4W3uK7J_mq2cuwNWr32PKcLmJubWEAEKCpi17glw3ywJ7MrV_ywKYm 0LcfRkur0fZhuzXyzpGRUz_0VNkbfvWm2pJF1gC9MOeJ8BbN7IPC9CVt7eXq MD.jSnpUHmh2aStzAMUstIdP6h28HJ4oycaOdlGjN.AUzJ7mb1bMpek49EGi PtdHEZ3GKzcoEjXUexjA0himXcMFCSC6QXqJFyIsFeCmsu.kvSGU6EGfuHxZ ScG718Uyb_PBwwuU3H0aYMAID4R_cxEBaKxD_e2KPTI7HSgvu4JiOKAkjYeJ X6jIuH_DB1pO4aqy.u70KfKG3ZqF1nslTAp6JUpX.UdSf0jhcT7crlhPQM_p Z.IkWPmnu3vT3l6cgH0obRc6tewKX936oN1Yv8Szq.gxgeXru.17YSDoziEl DmK5Pl_RCNaXpOpcUHt5K85ibbpzWTbLbI8rhES4MHBM-
Received: from [17.169.37.72] by web181306.mail.ne1.yahoo.com via HTTP; Tue, 22 Jan 2013 18:45:10 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.496
Message-ID: <1358909110.95572.YahooMailClassic@web181306.mail.ne1.yahoo.com>
From: “Mr. Alex Richardson” <webxxxxx76544xxx54@att.net>
Reply-To: u_nationheadoffice@yahoo.co.jp
Subject: Re: Important Notice From (UN)

Mr Alex Richardson webxxxxx76544xxx54@att.net RETURN_PATH: webxxxxx76544xxx54@att.net REPLY_ADDRESS: u_nationheadoffice@yahoo.co.jp RECEIVED_IP: 17.169.37.72 IP_USED: 98.139.44.195

 
 

Tags: , , , , , , , , , ,

“Sherry Croft”

WARNING – JOB SCAM – FRAUD

SUBJECT LINE: Evaluation shopper: Now recruiting in your area

Earn $200 a week as a shopper

HEADER DETAILS:

Return-Path: <bounce-cgi-nf.innovahomecenter@eigbox.net>
X-YahooFilteredBulk: 66.96.185.14
Received-SPF: pass (domain of eigbox.net designates 66.96.185.14 as permitted sender)
X-YMailISG: ow0v7fwWLDvOkTZ_ziHcWwQu8NHwkWTnobRcU8fqZWs6c.Pq 5VoVxA1VFWWi2vbz3XZOFK6zyRqi3sBPAUlMxzF4bqvu8AGGLOQfPl7xI9bv ZBM4jOn1.gfr4LsCaHamzmGT08766xbtWdt3GxN881M_lnH0CWvUeQZ7RQpC CrOPSKpYFgKNF9DZEcl1phBU33SYCQ1kbEBFyK1BhyFl_B4kNcEw_2bWuIY2 olKze6Fph.9WfbOxR8EqTXzpEPaKiJn_zkBLUzjxYozt1k2hMrVEz6ndP5W3 eGzxh76HxsyZA5mlfo2IX_XWkctTtfNRDwlhkjXyrSNl_39xGTSZ084YhevR MjFv3NQQxL.BAWomUilvFPLPsKd4U.K3fXkTknbHdlvYVtG2uMwe4Zi6jh07 Ob_hJxEfSAqC2MuIhEVFPgjTE3sDDw953QEeBCVNPT.kS.5TKHVP.9EX5BfG vmJCEQ7_TKLUT7GAP0HC.8gQEgP_DKmgRMlyMy6kCLEBVYChprVbHAouh9sB 640GY6CmgLQuFuantLfH2qrUtcPLZazyhtnKifx9__tFytv7zGYnHlB1jgnX bJik4_i9Q_mIzcrQdORz41n2N.lEO7.orq20yv0XW4ND8SD0WWjGNHedU96U ZVgvPq7gzRzk2CzGT.2UuX0B9pYRRbdYsOGC9ALxGQHdApr9LZuBjac0MxLx _0JZUWglH4ZoBsJZzTscVxAC5ocrJQlctL2SBroRjno9Pq0NFz1hODqL6ZnV 95KzUfb0niaRKyPmgwv3.KG.VuEX.3OqJP5YrkYq9ZEGUgZYhHWlo2p.iU3m HhqzMg.fe7FEB4ATxqjgRLa.RG51Ms0LF4sQZh5hWvE0H_xtm2fo8uQ45hC8 LTd3uAqVMnglb_K62ekar95MLNEqGUl8Cu0X4vpWHXYGsn27yggGA0aXEsXU ZaWCxUHTRER71TnQRgypF_oIlqXbn8M_Hf20p_3zbHEOm2I47ZayWMYoLxak Wjxh_vMm1EVzOJTxA4z_lPWzu7jTib4.b0eYaqUuo7R7pdN84bWoxX0_3pKl FY18GdigdmkagbyHbGAZZbb0ZIwBGhJ1m_qx93wKwAQTpJssi1N59_6QeabZ CDQcE3sa_J9ZLvcGaiAAEyrY.WRGcSViWtpbimt4SEqtuTISkJfyFfBFuk39 1hjJgjOvUKk4z2dtApaddQ–
X-Originating-IP: [66.96.185.14]
Authentication-Results: mta1226.mail.sk1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bosmailout14.eigbox.net) (66.96.185.14) by mta1226.mail.sk1.yahoo.com with SMTP; Fri, 01 Feb 2013 02:07:06 -0800
Received: from bosmailscan05.eigbox.net ([10.20.15.5]) by bosmailout14.eigbox.net with esmtp (Exim) id 1U1DWU-00049p-26 for deleted@yahoo.com; Fri, 01 Feb 2013 05:07:06 -0500
Received: from bosimpout03.eigbox.net ([10.20.55.3]) by bosmailscan05.eigbox.net with esmtp (Exim) id 1U1DWU-0001mT-54 for deleted@yahoo.com; Fri, 01 Feb 2013 05:07:06 -0500
Received: from boscgi4201.eigbox.net ([10.20.12.108]) by bosimpout03.eigbox.net with NO UCE id uy5S1k00M2KsGMW01y5ScB; Fri, 01 Feb 2013 05:05:26 -0500
X-Authority-Analysis: v=2.0 cv=Rt9H3VaK c=1 sm=1 a=G3xyMPWyPh0A:10 a=pe0irAIzKBIA:10 a=nDghuxUhq_wA:10 a=ecbj2ccWRGgA:10 a=d3ZwFMNkyaEA:10 a=pGLkceISAAAA:8 a=QPcu4mC3AAAA:8 a=5r8fxAsfy9EA:10 a=1Ba24gaqfRe7yr1H7EQA:9 a=DwlDvmn/BrGTgMMELokLFw==:117
X-EN-OrigOutIP: 10.20.12.108
X-EN-IMPSID: uy5S1k00M2KsGMW01y5ScB
Received: from nf.innovahomecenter by boscgi4201.eigbox.net with local (Exim) id 1U1DVy-0005as-WD for deleted@yahoo.com; Fri, 01 Feb 2013 05:06:34 -0500
X-EN-Info: U=nf.innovahomecenter P=/design/wp-includes/js/mailist.php
X-EN-CGIUser: nf.innovahomecenter
X-EN-CGIPath: /design/wp-includes/js/mailist.php
X-EN-OrigIP: 38.108.116.7
Message-Id: <1359713194-902-nf.innovahomecenter@boscgi4201.eigbox.net>
Subject: Evaluation shopper: Now recruiting in your area.
From: Sherry Croft <sherryc247@gmail.com>
Reply-To: sherryc247@gmail.com
Sender: Sherry Croft <sherryc247@gmail.com>

FROM: Sherry Croft sherryc247@gmail.com RETURN_PATH: bounce-cgi-nf.innovahomecenter@eigbox.net IP_USED: 66.96.185.14 <> 38.108.116.7 <> 10.20.12.108

 
 

Tags: , , , , , , , , ,

“Kathy Hanes”

JOB SCAM – WORK AT HOME – ONLINE FRAUD

IRONIC employment offer looking to hire employees for their FRAUD department – LOL – As well as their cellular department — This alone shows how callously confident these scammers are. — I sent a reponse letting them know I was “very interested, blah blah”, and will update with further details on this con artist.

online_job_scams

SUBJECT LINE: Job~Customer Service $15-18/hr

Job~Customer Service $15-18/hr
As a CSAgent, you will listen to recordings of sales calls to determine if the sale was valid or if there is evidence of sales
fraud or undue customer confusion. $14.00-$15.00/hr.paid .
You work from your home using your computer and Internet access.
We supply all needed training and software.
Choose own work hours Monday-Sunday. Start ASAP.
compensation: $15.00-$1800/hr. paid
****************************** ****************************** ***
$14hr paid Celluar Customer Service
Cellular Communications is now hiring customer service for payment processing/handle general customer complaints & answer questions about service accounts.
Must answer one call after another and have flexabilty,adaptabilty to handle sometimes irate customers. full or partime [holiday overtime] pay $14.00 hr + bonus

<href=”http://bit.ly/SVhFaB”>&lt; /a>

Kathy Hanes /hr
CJC
reply remove in subjectline

HEADER DETAILS:

Return-Path: <k_hanes9@excite.com>
X-YahooFilteredBulk: 208.89.132.143
Received-SPF: pass (domain of excite.com designates 208.89.132.143 as permitted sender)
X-YMailISG: NwSC9CQWLDtIk2DTqTDWJY1rkqoiayaIKBJ7yDW2dVh0zKSC bvEIqtBSDU27rNNNjV.LHVrsYPejhKFa2L07uXc.6AXMqCP9Frm4r9mzJ02K 2xoW1DfuWuobW0VzDaHOZhqKQ4mbnX7kITtwSqaNfDaTXgQeFlLJtkX1Cp_F f.Mk4ND3rnE1ONBpRADCzAYT9gGJemRCWk.TXRI7ASVENgn4DeRbmSendTxM yUKu2lWxdBCXr9crJIaC9ETY3Hr71rJgxk_CzNDPf3ZPSe.HpkMl.Py8iQHP WrhOuXO_jK4EKuMZ5qQ9HE__Vu5aELgFmLeJ4H5CHwR9_Rk3MK7RyZexLvTy YmTgiqkWa.jLr4w6j608nSt4HGoai4hb9RbTv2k8DeFMX3SjC7zTfeKAJQJj w.KKV.GBnyOeaMYneqAvvpFh0MgFvXV1pIuGCfUD2S2OnuVFt80KMELhvVqH Iy1N8BoFuJaYJvHdDc2sA4bIBZCkzfFfdY4cVdjXdi2FaXSOIM7iFcVj9Oty 4Aefa0T4nQ3I8O19ENbgx9KlzhQGTLKR6XAWMRMklImYZLm5u84sA7A54bpA j64GEw5St3SK6xxcTScOp8ahFfiNXIdtrys012CEoqTuRY2QawHoB7UR0VAo YwIYmrdGGSMSl0MTjr.f0FFVfj7jAc3kMYmSOZq4ri6ec4r6ixZHf8zjVSoF 2U6XROrUZnQYv3JCGEh_0hy03fAJsgSOnMslJ61DyH9T1KX9dFThiI.mr5GL Hh2e7Q9oDDF1.GfalyW1Boo4ZWwfAPm.pUC2MkkfJ8Hz51Eb8LHxIp4bMvCq zmv41maBKF5sQCARBn36kRVEJbhm4zKHtPFLRh_MJAgVjG99UtpG6PLZMxn_ 4KSaL0vAtaDxZFv4NUysFJouLIb10Lo0_f3Ditcrra.XygnYlO9Ntuv6dO.p Ha8O_mZ8Tr5W0TPUsYj0x9.jUN9FnFe.N9YmYS1C0QyWxGEobM0IeSjmjhrL bWXDetx0om81p9J0HnaJhW.aQoxEVmtRcqmenRIoFUrwc0yN62RAjG.8e3Ll B2hbernLa1.7UeOANeaL2yVyg9LedrwH6gLJLvXyH1ZXGAVc_Y47HHjVJkiH .ewIZ7LM_sYIWbjo4.ptIungFmqvUkSuo9rWWQ–
X-Originating-IP: [208.89.132.143]
Authentication-Results: mta1111.mail.bf1.yahoo.com from=excite.com; domainkeys=neutral (no sig); from=excite.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO outbound003.roc2.bluetie.com) (208.89.132.143) by mta1111.mail.bf1.yahoo.com with SMTP; Sun, 27 Jan 2013 08:27:02 -0800
Received: from web007.roc2.bluetie.com ([10.200.2.101]) by outbound003.roc2.bluetie.com with outbound003 id t4T21k0012Alkky014T22y; Sun, 27 Jan 2013 11:27:02 -0500
X-CMAE-OUT-Analysis: v=2.0 cv=KO/Y/S5o c=1 sm=1 a=FEhTArTaBcEA:10 a=i-wQWBNYtOgA:10 a=FmX3VfpdAAAA:8 a=QoHJ8kPOAAAA:8 a=BccQIOACJiwA:10 a=Q3DIDtWcAAAA:20 a=EayM_pMngw29Fcn_my0A:9 a=QEXdDO2ut3YA:10 a=otSbmZrKiY0A:10 a=Ej1W5oQFB_lmPtYj:21 a=gyhHITpVaGM5rqYN:21 a=tXsnliwV7b4A:10 a=SmGauVGvY7CJt9i0:21 a=caMOIsLHZfnky-pd:21 a=K1UWZqsGkJopgV8U:21 a=7X69+Egs4aEeFnNAy6RSag==:117
X-CMAE-OUT-Score: 0.00
Received: from web007.roc2.bluetie.com (localhost.localdomain [127.0.0.1]) by web007.roc2.bluetie.com (Postfix) with ESMTP id 3B8D7160163 for <deleted@yahoo.com>; Sun, 27 Jan 2013 11:27:02 -0500 (EST)
Message-ID: <20130127112649.19679@web007.roc2.bluetie.com>
X-HTTP-Received: from k_hanes9.excite [72.20.28.31] by web007.roc2.bluetie.com (BlueTie WebMail ); Sun, 27 Jan 2013 11:26:49 -0500
X-Mailer: BlueTie MTA
Cc:
Reply-To: prestidge07@aol.com
From: “Kathy Hanes” <k_hanes9@excite.com>
Subject: Job~Customer Service $15-18/hr
Content-Type: multipart/alternative; boundary=”321133446-1359304009=:19679″

Kathy Hanes k_hanes9@excite.com REPLY_ADDRESS: prestidge07@aol.com RETURN_ADDRESS: k_hanes9@excite.com RECEIVED_IP: 72.20.28.31 IP_USED: 208.89.132.143

 
 

Tags: , , , , , , , ,

“Mrs.Roselin Moore”

WARNING – FRAUD – INHERITANCE – CHARITY SCAM – SCAMMER

NOTE: This scammer along with other scammers will also send scams in the form of an attached file. It makes it more difficult to post, esp because I do not ever click on anything from scammers. However, I’ve had this scammer email me before under more then one email address and It’s always the same scam, different tune. Names of her dead husband have changed as well. So beware!

scams_target_you_scammer419

Message contains attachments1 File (12KB)
My Dear Friend.docx

I AM MRS.ROSELIN MOORE,PLEASE READ THE ATTACHED FOR MORE DETAILS.

HEADER DETAILS:

Return-Path: <mrs.roselinmoore365@gmail.com>
X-YahooFilteredBulk: 66.94.236.26
Received-SPF: neutral (66.94.236.26 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: VZMHXjkWLDtIyu7acPcagRCCSrO1.W8T.jswFTmLP4ENUw4B dX36i1zbCN5CWQ4fGm6B.K0Agw3Rrv2XP3OdsQ3.jA9Iv_62_dXBVQexRuVB PHmAiEwlrgqLBlrEP6kcn35V5xtqRce1DDAPrAUziBrr4mDLVtdzWOPGg9ip oxu1eU7aGo8oHhS89YF5f68BkOA.MnwPQz8bAVpLlPGNJK3H7.DpVVW5scdb McHJPiuIyv12.QDn1dNAKinsSpAa1Hozk0tV.uV2uGZB_y6oiOeWmOcuEXnW NeKBhUb1xUzzVCT7zmXX9Y8M8HncSkgxyx56eZJCVCiaMcbpSSRX1waopZ97 QAl_AFCDCsK5hMt.FJlqIkg4eyexwDICOI60mkAzR3dfYEpDkfe00sAMywD5 CDZfBa3SIYteEYObkVEYjT1KBChvWannt7_.6UZIOAMVEERu_2m0O1hWJ3Ot TVtTH0_wpyyehThXMe1ghaR3T6SnE9xY6_ZgpgM9j.MXp2lJ874aTt2tIinQ XXmIspPsEv5ZByCjbQvC4kwJdCeZgfv.STpiiigffHNq3PkO0mmzuCFnzIUS L8qmwcD8Sfx4LkRjrIRYhROixi0687adDqP1OgGijO98I87I4V__W49XrWGU dR3h7bAPsf1NXckaztZ0LSFmOWIPSRi2ARIejAluShZ_lKkuPzyRvrWqFqrx lIgsAHUjzspInEGIMLWZe1Un9TAGKbvlLZJIEebsoaPDcZRhGmGTTMMJWoqZ IO5uWVH8fSrs.DquFgEUF1TEzQq0bVeq8wBOgGFT6p.J_zn0eRC_1KfKz0UV 935fFYXgNTFKf6aefY6L0t15urrUIVumTTe1SUkFxGyrqvH2IsbroF_v9.48 Zdqc4I9y6b4PBE_594k3GZ5FxW6NoioAEdqCxT2A2KD2nD0GmWiyGbK8hzXP zvkqprdXud1brup1fPXg7H6tdvukcdRx9u6_Bm0L7bE34rjN9z4XKjsZQRIc cNtDxw.vm5_e4F3DWPxbgntYJSv.hwR1ak2UZYOHN0.XtslOEb.xrb7uVBUG 55dmI_LGYUymGf9gvoPXTHhrSxauTUmQrgyaOn2NdPKSu3aCivNfZneCgMAW FYNgOQ8kaH_5BGjkaCjxmo1aP7pEKFtoO2joE24hUEOJnRImMnbvXQ–
X-Originating-IP: [66.94.236.26]
Authentication-Results: mta1053.mail.ac4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm1.access.bullet.mail.mud.yahoo.com) (66.94.236.26) by mta1053.mail.ac4.yahoo.com with SMTP; Wed, 30 Jan 2013 07:31:48 +0000
Received: from [66.94.237.195] by nm19.access.bullet.mail.mud.yahoo.com with NNFMP; 30 Jan 2013 07:30:17 -0000
Received: from [66.94.237.97] by tm6.access.bullet.mail.mud.yahoo.com with NNFMP; 30 Jan 2013 07:30:17 -0000
Received: from [127.0.0.1] by omp1002.access.mail.mud.yahoo.com with NNFMP; 30 Jan 2013 07:30:17 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 394975.10750.bm@omp1002.access.mail.mud.yahoo.com
Received: from [63.141.199.185] by web5702.biz.mail.ne1.yahoo.com via HTTP; Tue, 29 Jan 2013 23:30:14 PST
X-Mailer: YahooMailRC/718 YahooMailWebService/0.8.131.499
Message-ID: <1359531014.46116.YahooMailRC@web5702.biz.mail.ne1.yahoo.com>
From: “Mrs.Roselin Moore” <mrs.roselinmoore365@gmail.com>
Reply-To: “Mrs.Roselin Moore” <mrs.roselinmoore09@gmail.com>

Mrs Roselin Moore mrs.roselinmoore365@gmail.com REPLY_ADDRESS: mrs.roselinmoore09@gmail.com RECEIVED_IP: 63.141.199.185 IP_USED: 66.94.236.26

 
 

Tags: , , , , , , , ,

“Dr. David Mark”

EMAIL SCAM – PROPOSAL – FRAUD

no-scammers

THIS SCAMMER ALSO SENT AN ATTACHED FILE WITH THE EMAIL.

VIEW THE ATTACHMENT FOR BETTER READING AND UNDERSTANDING 

Return-Path: <WAYNESSTAR06@aol.com>
X-YahooFilteredBulk: 113.105.185.152
Received-SPF: neutral (113.105.185.152 is neither permitted nor denied by domain of aol.com)
X-Originating-IP: [113.105.185.152]
Authentication-Results: mta1453.mail.mud.yahoo.com from=AOL.COM; domainkeys=neutral (no sig); from=AOL.COM; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.szyfd.com) (113.105.185.152) by mta1453.mail.mud.yahoo.com with SMTP; Sat, 19 Jan 2013 22:54:55 -0800
Received: from User (unknown [68.213.28.167]) by mail.szyfd.com (Postfix) with ESMTP id CFE29-BC0E-50FA5274-26363; Sat, 19 Jan 2013 15:59:48 +0800 (CST)
Reply-To: <davidmark.pay@freenet.de>
From: “Dr. David Mark”<WAYNESSTAR06@AOL.COM>
Subject: YOU’RE PART OF THE MONEY. AT LAST
Message-Id: <20130119075948.CFE29-BC0E-50FA5274-26363@mail.szyfd.com>

RECEIVED_IP: 68.213.28.167 IP_USED: 113.105.185.152 FROM: DR. DAVID MARK <> WAYNESSTAR06@AOL.COM REPLY-ADDRESS: davidmark.pay@freenet.de

 
Leave a comment

Posted by on 01/29/2013 in Other

 

Tags: , , , , , , , ,

“Roberts Draska”

WARNING – LOAN SCAM – FAKE LOAN OFFER

The more time, the more money.

EMAIL: Do you need a loan of 2% to pay off your bills?Or for your Business if yes Email us : roberts.draskas@gmail.com Information needed

(1)Name:
(2)Amount needed as loan:
(3)Phone number:
(4)Duration:
(5)Country:
Note:that all mail must be sent to roberts.draskas@gmail.com
Mr roberts draskas .

HEADER DETAILS:

Return-Path: <roberts.draskas@gmail.com>
X-YahooFilteredBulk: 209.85.212.68
Received-SPF: pass (domain of gmail.com designates 209.85.212.68 as permitted sender)
X-YMailISG: U2eLDAIWLDsjZhwoKPbfZ96Uzru1.zOZ9rPn8mlp6_vjbLhK VRmafQjuGfWP4LrXIIW4XtTCvU62ZRrxLENhQmPzo0eVh6BglJRyOvXqMyXW _k7Ap__4a8XiwVUtwCNFmSkG.rjOfDjhEg6iwTPYsgGfLp16DV7.ZWVjM9jn LYoFAI_hXSYYKy.xRCPhkndKojfGxXUtid30fAj.jYcUcz6OSq1yQGNWrzCr yBoSXTinJtX7.qmaXKAbY8ztnjyfX4mk31DQzUlzz6YG4aJIUoAnbpAy2IyF mi2Z6484WXfZN5RFkpVbSIjtKKrMtVrC8GLEz4VEYn_ge8e1IUnneRqZP74x RuOPci27NjuEwwVu9xzR9jHDjmh8dBrRrHT9D9J_yrjEHLOSoMbkWpEnR3xv k5ZgzHnXz.J0sO3u5lYw5pbrQqMrV.3QJm3IgPfkBV.dizk_msh0CEpJgLUG CBoELK71r1HmvUgPv42aX3FJ.yLSVS1wm4CVS306QwvBWc5nrMLsRiN0tZNX WgDL1.paR_JXcj._hYDi8e_hvDgZDb.hmohaMy2bZYsLr9jhW0ol1AvXUjXC IcmgUPSdZcR1qkC.YD5hroASt796f59UxO3.r3hWRY86jGGNh2NARSUAd9Vi vNUSzbnIzt_ynXCPww5h.3DQxgMEut.5B3tMLvK4s6WEuLmecpbbGzjc2D8U NdqrsIptkaRgwZjFm4sESUJ0qiLwFovy6kOHbd56WelY2khIT_5OzE8kdxxz hjbwmK1bVC0_I1a6dVaDQioy0d3Sp_IitmBMWV0zamfTvzB52z_tKQFlxVTo vSGZ2sx8ogcy1TTJQ3ba0gdxEEpcZxmy2PVpOAzqWRdMhP9KDorkFxXylq0r 5dXnSZ1o9xRaUDo_a_hlqtXPPS613ZnoAJ9vCjZ3TPkBdea0spQsAG99DogD Tn1SzqAc75jNPrRzw5a4qhf9N8hASOXfDP7.WxG.30UXdkmhiOeI2VCne8lC OTnQ96p6KaFCojDbnxpYA5WTzQu9y.NiwfOFqZeufZRHDVPoywInnZuFDmKL eQ2tWORU8vFOlUNgp7qxh67n_2BoCj9C6jMelwErW7vtSoYPgRsLzfbwy5Zm iI2JE1gVhhtk6PWopeiBDCT22HXBjyHWrMOpC.EVxDCdx30Jcc9est0L7IOJ oCEtBcOCceE_ttSKAV31HpsPV0gkAY3ZCid18YhBzC_kDFHLr7ol4JYmCt57 AloP5IXgCVSI1g2e_.QiJHEW5BmdG1CBWbKsrZA0YPgUEQdtaz0K7e31g13W tt_e6I7Azg–
X-Originating-IP: [209.85.212.68]
Authentication-Results: mta1094.mail.ac4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-vb0-f68.google.com) (209.85.212.68) by mta1094.mail.ac4.yahoo.com with SMTP; Thu, 17 Jan 2013 07:22:59 -0800
Received: by mail-vb0-f68.google.com with SMTP id fq11so288225vbb.7 for <deleted@yahoo.com>; Thu, 17 Jan 2013 07:22:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:date:message-id:subject:from:to :content-type; bh=hpFxrNRnnIiIcWD+EhHsTadALiBX6lSQf41OsuB5+uo=; b=HqHur0c3YoWiIwlO+WzHZf97CVNlfLOZA7Fr7KRgCzdkCFS7/lCTwK5WtkDLx2E8tV XvXPTIpVvPkYYNk95Jt7zpSXdGNGM4wjSi+T5w8ccJWzlZmkqfjmuQGaz8gqndfQxuuf 2K7XjZDX8YOGsQhdBThKhNwmKCLUBE0x+XHnUY33QGetG9MDp9b6TyFD3CoPAE+8M/rT VknDaHcvkvNstFguje20HJd6d/bYs0qbm9Wz2/jMzKXflo5qqlUmzazMIOiK5XcRZ/CT 5LPSmtAAcd6N4ntrac95GvrMUwIukB5XD+wnl65KHDcMNPTiZfRDCRFZqSvP8fwuqDcK 7OWw==
X-Received: by 10.52.66.75 with SMTP id d11mr5170548vdt.63.1358436178573; Thu, 17 Jan 2013 07:22:58 -0800 (PST)
Received: by 10.59.3.106 with HTTP; Thu, 17 Jan 2013 07:22:58 -0800 (PST)
Date: Thu, 17 Jan 2013 07:22:58 -0800
Message-ID: <CAJEXoSA2CdBeTWgnPPJqJoshxrZ+bPTb8-tDeL+K5ob9fAiFnw@mail.gmail.com>
Subject: loan offer 2%
From: Roberts Draska <roberts.draskas@gmail.com>

Robert Draska roberts.draskas@gmail.com

 
Leave a comment

Posted by on 01/27/2013 in Other

 

Tags: , , , , , , , ,

IRS Phishing Scam

IRS PHISHING ATTACK – ONLINE FRAUD

WARNING – IRS does not initiate contact with taxpayers by email to request personal or financial information. 

NOTE: As soon as I received this email I thought it was highly suspicious because not only did I receive it on my “fake bait account” that I use for scam baiting but also because IRS doesn’t send emails and they warn about phishing scams right on their website.I’ve looked up the IP(s) and header information and noticed it was blacklisted on anti fraud websites. Regardless, if you receive a email or any unidentified online user contacts you regarding money and personal/financial information, DO NOT GIVE IT OUT!

THE EMAIL I RECEIVED

animated arrow down2

 

Where’s My Refund opens January 30, 2013.

Due to recent tax law changes, we will open refunding season and start processing individual income tax returns on January 30.
This applies to tax returns filed on paper or electronically.
Our new system calculate your taxes of your fiscal activity from last year and you are eligible to recive a tax refund of $550.
In order to claim your refund you will need to follow the next steps:
* Download the attached form.
* Open it in a new secure window, and follow the instructions on the screen .
You will get your refund within 24 hours after we’ve received your e-filed tax return.
Generally, tax returns and return information are confidential, as required by section 6103 we may disclose your tax information to the Department of Justice for civil and criminal litigation if you are submitting invalid records .
Sincerily ,
Internal Revenue Services .

This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

HEADER DETAILS:

Internal Revenue Service – Where’s My Refund opens January 30, 2013Wednesday, January 23, 2013 3:51 PM
From IRS Wed Jan 23 07:51:23 2013
X-Apparently-To: deleted@yahoo.com via 98.139.220.247; Wed, 23 Jan 2013 08:51:41 -0800
Return-Path: <notify@irs.gov.e.com>
X-YahooFilteredBulk: 109.202.152.250
Received-SPF: none (domain of irs.gov.e.com does not designate permitted sender hosts)
X-YMailISG: e9gWdlIWLDsVuDoRgzBswxOsNA_ALUCiZ94Yo_GWveDhkE5H XMWm0qDjKA74EzfR2v4U39GjLKyY.tLS2ERBwh8QfEiw6xtMQXuQlwVzLl2d RJ3G2gcy7YXo.kiHr1zYnAy2phBJz_svN95DBa5tLrgMj_bguPLUoWjbWku2 WAqROTpCvFZl9JwRJTYprkGQitCDIECEy4SJb_z54DL7hpJgjQ2pFAzsPIuQ ntA6vloWDZzpvBpH2wh3_xeONQ_83lFE00nr94l652jT_oOgIkiCGpIUBhnB P5tPsFERmMNOP1tIr6NRzxaAEk7nQn7V2u4JV7Ybda6Y6bLNYkJZNLBLI_GG CyMYgwEK0i8V0o0wI4GgnP6uf7UbAfoxYgnZczb4hF9EFmVbF0WQAkU4KP2w OF6HwlRTgczkc1o7S33xg9j47cCXwOVlXdlv5hwqFteGOC4dSmZqQpGciX8C DN834OELrIAaYJtx23oJxUuAt88m.8H3hhZmRbAU24Fa3KsaQoZn23MKMfwW odS9yjtrg.dALJN0VFh2EDOZMMdZG1IZUnCdJ4MQeMPyCndMUyE_Cpa_spZM JeRmb9TtYwNR04S2SOXjuanwLGIVuGu34vuIeHPO56KUuYaWZbtY5M8yymat .jFENS3LsYyRFXCOzLkTPq2cDzaLq76wdP3mfS8tlk488DRSpv04enXKstEg fq9A5vXAKHWgltsPDcWP25RZfcwSbDriislv0nwXBGJUWVLY0StIhyKfRLF1 et9V4Zcgy0wdwJAco7r9l5V6Tw9tfgBzsgE.zQ6C3MgC9NI0X84COjoglzOE F7CDHeeyx3723DnU_UCfp5pOphQKbUG3xJoWaHFEOV7lPjqt8LEE88vGIgoU _9o08aQIgGQUrFN3O_ZMiszwr8_m_jiFoykiwN4WSGBphovmuOArcvkMXJ.L KjZu.3humATM922Yy2TWCEdqHSaYsMsYV2W39z60iB_M0WxJhm2WSOIDHyg3 HQ2JpAIZ7wXvKqM886pUR50I297J32RCrQlr5IPcjbWZgwRllKOmTWhsOypI fjUUAk6cVKzJZlfEN7z8.cFKHlb1DigaMk3pSsADkBR_H2IW..2q9s4KbDsp Gco3D4lqHYqtFP9Uz_YkWUrbEmomVSv8IK5e_WgpHQfvDr9YyN9Et2UICzDr sSfAo3ezKUpFVBBHWDkQ.fyMhOtsLQ5HN1hzllJY7g6Bgc6DB_v4VGT1_.gW 4b_tnAE9_YWWUs.eyUvShqtRkhyPaXyK7FFqsOAC3FpxKHKDgYRwQK64fd7R kPLbN0JKNZCeCPHbVmwe_GQW39dVvaVXug5_Zx3XGsMx1hPW09VmQf7NPoCc AoCQKkw98gK9lSR6bb7fU8jVMtj40VPTVtfp5smsqyGRolgJ3bd0PZRv9itq O7hpNMrthaB2UEWKjni1NJmSMXSSkde0hbkRVphD8FWlp0arA8J1QQgN13.H uA_Mzfe4twcZfdJs3GbKXSdInR_DqmLsTumkAyqZ3LWdCU_Ns9DsJIsto6yu _f0IinFxSMriLOu0kDSTloYWoeQpIA1PBNgwuLggbq_MbM2BLJIcImMRhXL5 p.4zXTWpD2vkWwx4NjgH9QeOKcLVjzNrW8WI6.IxR3e.4VuOI.OqFJ3wdcbO D.CK6vPMS_r6SSXira5mqPN0MyL3XcR5NL_LyIrqHCcYiPK84c3hHzyPlPEh N1KWe8joijPKhNdcXjMTcM.MASnrhuACslmceToaExR54srG93YLv.GTGDiw 2VVTs.9eTBD1_6uc4fgYpta0y3pQ8aUCWRdGwa2jGXASuy8JawOen9OFIkvW iyalHrsiXFG9PkdNtwWBwaO.FhNJlSbr4q7pqQpZSVVuqeKsdD_ojtuUVMma W29GIuqeXO4Zj9lrmyfWswzCe34jeEgVHZoAcURQZBU.ZU9jHn0yRw–
X-Originating-IP: [109.202.152.250]
Authentication-Results: mta1247.mail.ac4.yahoo.com from=irs.gov.e.com; domainkeys=neutral (no sig); from=irs.gov.e.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ltidkex01.LumasenseInc.com) (109.202.152.250) by mta1247.mail.ac4.yahoo.com with SMTP; Wed, 23 Jan 2013 08:51:37 -0800
Received: from User ([185.11.132.8] RDNS failed) by ltidkex01.LumasenseInc.com with Microsoft SMTPSVC(6.0.3790.4675); Wed, 23 Jan 2013 16:52:59 +0100
From: “IRS” <notify@irs.gov.e.com>
Subject: Internal Revenue Service – Where<92>s My Refund opens January 30, 2013
Date: Wed, 23 Jan 2013 19:51:23 +0400
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_0094_01C2A9A6.03D1B7DA”
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Return-Path: notify@irs.gov.e.com
Message-ID: <LTIDKEX01jnzi95HfqR0000003a@ltidkex01.LumasenseInc.com>
X-OriginalArrivalTime: 23 Jan 2013 15:52:59.0099 (UTC) FILETIME=[B7A89AB0:01CDF981]

notify@irs.gov.e.com IP_USED: 109.202.152.250 RECEIVED_IP: 185.11.132.8

 
 

Tags: , , , , , , , , , , , , ,

“Irish National Lottery”

WARNING: IRISH LOTTERY SCAM – FRAUD

Your email has won 891,934.00 Pound Sterlings in the Irish National Lottery Draws For Internet Users.
To Begin Send:Name,Age, Address, Tel, Country

To Mr. Sean James

HEADER:

Return-Path: <vkaparin@ioc.ee>
X-YahooFilteredBulk: 193.40.251.126
Received-SPF: none (domain of ioc.ee does not designate permitted sender hosts)
X-YMailISG: GjURVuYWLDti7FqksVEcfrcUuiwXJ01CXghm0WMGyyGlWyzH RX2gFSg0UJCPrDHWmK__t_qSsBKH4DfsiDdH4yrmabt0bpAI4fRxRxJy3h1r XFTLq6QEzKsLCE1JOPjzx_eGQ4LSBAuombNEnVxQok8BCK2H89ZABe8JQev9 nMhfgM8I3pIuFMJtaBqaqI5N0ROCrEIFPL3oGr58.7MGSbZ1u_wduMTG41cr Z6.v61qay04E0PW.g2QNX1.N.m.i9nCMptZXPCzDHQ4goouXZB5i2J1QTS79 HmxsvYVjVhyq0L2IOpJeTDh8vRhvm8ViIJF8iltZI_wYuOxbaqYVjnuUoYce C6uNdaTJr5rGdUflAk9jcMfHpsh6zt5D..RYqrd_xFTaovaOjoqSgtRpw_pC FF3CRiGlH.rhX87C5f2HTile9Oj8SNt3_HQXwlmMXap494b8PpFmSlYxcNH7 0uDWGloiSnUS86MzorTK0SfyjQD0y85eNZoj14Tj13bcPdTpz2e6ZJxwvxsM G5T1CCLmhSZhK1h_RDnHCxVimKlk2TSVzk.aLZ9biU.p7qn6re1BrfI9VYss dJPFo.sm7BoO2TAKqckPrlkFtm9pQUizfBHU3svT.iAXReCw4eYQTV2hLgMR poeuxBOTjUZCt3l3dJkhvVyiUnxJPdCDNmZ.R.E_r0SItNUBt9o_pkeggjfu 1Da1bswNSRybUL5T0Qkz4KXsvXK.vIbMC7cnpP0WHKEdy_rjKTblhVTw83Kd bb9YhB.RCD48ld2QZE01gxa2TaN5iOdA_EEG2DeAudULtGaBOMarhGiSNo.4 cNNWTtBY6U4ImPv8DSZfgH_wEnSvocuGCQ33ZbqPOYVYmgQUMAwFn_Bp4MaE 0CQb4Gh.gonPDw..BtxKEnYEI1QNnBacSKHXCimT7ThhPZY5KCj3k0fei.aw sBUpYXv6ED7RbfRrlv8UfrCN1.n.4YzwTL2aZWt1egOU.zxDhJdojMSfAXN6 SS.mFTwrVh_WtsaI1Ev_hoqoT5xUqpcjrrczmttNkFsByxykxZm0TNGKzufX WOzivG_J6oSwMq7rNoNG_PTz_nrfkgfwhzWjPbko4IJkcUIGeHfzIZo_OfNH tqqbRYSyy6_YipayR_OicldlBb1IHN25iXYDUmW6kRVVXQIDakTaUvPw.Yvz rtf8F7asVGyv3Su9Ed3juajpBnnPiJa8sdmoHxDmlLfA9QqlZo_xFaMgCCrL 5YL_cz.pu3puzok6xFTr5mytP7eyYqWBgMF3NSdxJn2S2WdqeyXqgHTkCPZ3 3bKSlT333bSV7.3eyYs2F6w8dAazTCm9URuUoitNeFVXJs_RgTxNs1q_FKnv kh5M1_QaPYGyl07SJRUCqHq_Wddo0KXSZDbodBreMjJqtBxe0V5XvXmkriUQ ObZIfBAC0HPD4eWo6EyGmzEfq7ErbBkRxUNiQF8PFOZz9qdmxbS3Z1ovzZmO 57v1hBJLfQzLKapRsuB1z7yNIzDOZ3iD
X-Originating-IP: [193.40.251.126]
Authentication-Results: mta1070.mail.ne1.yahoo.com from=ioc.ee; domainkeys=neutral (no sig); from=ioc.ee; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp.ioc.ee) (193.40.251.126) by mta1070.mail.ne1.yahoo.com with SMTP; Fri, 11 Jan 2013 14:40:09 +0000
Received: from User (unknown [182.62.170.196]) by smtp.ioc.ee (Postfix) with ESMTPSA id EB19534197F; Tue, 8 Jan 2013 20:47:16 +0200 (EET)
Reply-To: <ir.irsclim@hotmail.com>
From: “Irish National Lottery”<vkaparin@ioc.ee>
Subject: Congratulation!!!!!!!!!!!
Date: Wed, 9 Jan 2013 02:45:46 -0800

Irish National Lottery vkaparin@ioc.ee REPLY-ADDRESS: ir.irsclim@hotmail.com RETURN-ADDRESS: vkaparin@ioc.ee RECEIVED IP: 182.62.170.196 ORIGINATING-IP: 193.40.251.126

 
Leave a comment

Posted by on 01/12/2013 in Lottery Scam

 

Tags: , , , , , ,

“Marcus-Ashley HR”

EMPLOYMENT (JOB) SCAM

Click here to view the first email sent by Marcus Ashley

Hi ,

Happy New Year and thanks for your response to our job offer.

I am sorry for the late response as we just resumed yesterday so i haven’t been able to get back to you sooner.

Basically the position available currently is for the Payment Dispatcher / Coordinator.

You will need an active internet connection, a printer and some spare time, say 2hrs twice a day.

I would like for us to chat and have an online interview so i can explain the job description to you in details and we can take things up from there (if you are interested)

we can chat using :

GOOGLE MESSENGER: hr.marcusashley@gmail.com
YAHOO MESSENGER: hr.marcusashley@ymail.com

I have added you to my yahoo messenger, so accept the request and we can chat on there

Please add me on any of the above so we can chat , i will add you likewise.

Looking forward to discussing with you!.

Marcus Ashley.

Return-Path: <hr.marcusashley@ymail.com>
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts) IHJlc3BvbnNlIHRvIG91ciBqb2Igb2ZmZXIuIEkgYW0gc29ycnkgZm9yIHRo ZSBsYXRlIHJlc3BvbnNlIGFzIHdlIGp1c3QgcmVzdW1lZCB5ZXN0ZXJkYXkg c28gaSBoYXZlbid0IGJlZW4gYWJsZSB0byBnZXQgYmFjayB0byB5b3Ugc29v bmVyLiBCYXNpY2FsbHkgdGhlIHBvc2l0aW9uIGF2YWlsYWJsZSBjdXJyZW50 bHkgaXMgZm9yIHRoZSBQYXltZW50IERpc3BhdGNoZXIgLyBDbwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: zQ62lroWLDtS30tyTrKcz6ETGWEPEll0CPtd7QF6Ds_mm7Kk vJd1yKT1Uj.9CN3aovlketDd0SqBa3kKlEtl1PsId..UbgdKprrTA87m5DVa bJkRINkW4GHCEJu_fJxh6TxGzCWvjxFYlOQgz223VhLThFOtVn26pgPI66nb _6v0gBs1KwjjoEqMrWc8xOlJwW5K8GFlCMW8U0m6laV8Be8kRzzS9QSBYZ8L V3mhKAuEeDYKTwaH1Wa7UfWiKB9pDudlC8JF5MzV5.FtCuvi1YX5zu7TYMcI EHhUlMCbDHOS55ejcYGtYMJzDf5eSUjqFduWEH3VpDrzfEr.72S1W5ZKz_Td kDXX.WjV6j2SB_pOH9WonemwZSKRhEBnJH4RgD3_xRpFB9NSB_PsWsHo2bOf i4x5GDmbcSQFF2qhDn7Zb6lAziTSSuXjUTyNiKiWEmuvuM6Bmiuj8oDjfuAN am1BBidBEvAyUBdliCc_K5..iyTQ8bVZ27g8KK2gJ.Lizb7j5nhc4aqz9qhF JQkzFAZQFMcZjhIpojiJkmWXoAR0dgRyJVpgKhw1GZrQT.Kbh.9rm8atBpRp 3HU6XBvmJKyBCGmVt2hYAP0qopmywT3KcqaCoaMJzXkauXCdkJPhf0oNTU6U k2QjBwur6DghHH.ootexZrGW8k68YUXLUYZnpWTDHaqBom8zQolsFRcoh8Fv QHInTaQ4_UhVv3GVdgddmWf9K53NLg.yQeXEJa0lSUBaMktVIZjwUVBFuX6c 3tpSIAU0AwEftbIKZm0HGPEIcTO56EnR2BnNvTvVK510yON1Sr_r0HeXE.oQ DbpmQIYOU4kRgQpIn0f38nSV.BxCSwGymzvN2wK_koID.7vYU2RPytGI4gyE QakaLkIb7qISJA7.HNyYckX0LCFLVJXPKwJmLgN3VN6B6wssFH3mTjLPhevf Nv8NhTITfYcFnTYAsjE69M3GPKoNoaEIfb9zGQOuw1tzXp5CZXGEUTwsK0DK 8xm1_A5ZlG6pheeboKQ0wXlMIc8fbGl3qUib1K7VQSpin1wp66NDIXTkeflS 5MxU6doTIaOXERfuqKkuKlTVuttaud3RIlqn7mWyu._VILz4dQvVGwmGJOyw n6m00.m.3BWEOFV.g.J49LRPWB.stwVvnIBiMGWwzvzKMFR121vgpCU_mXle 557Sy46Q1CvcNoE3zFiyiBHCq8f93KY5jQDsfGpkYgFAJQLbDuD3Lh3XX0Ka GzqNLP5cUlc6CugW.vcvktOoVdMGEs6y3YxJW4eGViBT2v3opv0bdwGSAl03 yySqeLD6p5tr7urAtT4OFCw6WFt946jXGqzOK7LieIvxx3qMmK3YyKt99Ref DQtkXLCRpFvROOvROC6RQJiip9NDoy3.zMvXE1Bv
X-Originating-IP: [98.139.212.183]
Authentication-Results: mta1129.mail.gq1.yahoo.com from=ymail.com; domainkeys=pass (ok); from=ymail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm24.bullet.mail.bf1.yahoo.com) (98.139.212.183) by mta1129.mail.gq1.yahoo.com with SMTP; Mon, 07 Jan 2013 23:35:57 -0800
Received: from [98.139.215.140] by nm24.bullet.mail.bf1.yahoo.com with NNFMP; 08 Jan 2013 07:35:56 -0000
Received: from [98.139.212.239] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 08 Jan 2013 07:35:56 -0000
Received: from [127.0.0.1] by omp1048.mail.bf1.yahoo.com with NNFMP; 08 Jan 2013 07:35:56 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 265247.46231.bm@omp1048.mail.bf1.yahoo.com
Received: (qmail 23963 invoked by uid 60001); 8 Jan 2013 07:35:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ymail.com; s=s1024; t=1357630556; bh=pQacON5ieHyZtsPi//b8ogYyq3geJA9HYiZFY+DNiSI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=OyoThpnA/P1ENZLGmGc+HWr5EgmuOphE50ZiZdeuu0XRm69GaYbXZt35eezHukfyUntessMZQ0wBxrdWFR3bT0MVALzJF9tRg5sdoj18EnOGDE1qDwm8EWFEAMoB9NiVUHgvrh3+Hau9aCycwXlB74swsbE30XrtO6/UrwhqqlY=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=ymail.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=5ykyVM2sfT/KhXVN6gL4HMDnTZo80NwU8/rsfyetNWHeRurZcKhiFr0O3GMT3sBCVNdY4l3z+wOSL6iXzL4Qj8paqME0tn0l7ippjBVW4nym+2yxDNm0bDrW+C7e85Yq6dtJiOngnYFrCIT0hS5+8z5Mq8mi01LVDZn74LR3iwA=;
X-YMail-OSG: FpExrSYVM1lbnUuT3K_0hbyN1DNGS0_bp9QF9xW_L2pr1pP 0g1ZL7aP45jeLTNhb6jBx_TqNZA00bEj562_acfwerJw2N53RymFMqQhbIRh pwLM2sXlLEQxslGpsVfIIl3FhbPIl7P3mWjyzWnGtkw68KUeOZ30Bu4suvpe Z_xCZWyAz6UhFY2ZSTjcSJ_zzRsPZQiMyysUIK0Sl1qJcJ545DmHVExZ3JX8 A5Q84KQzTbguPRj2A7qSfwWZlj7XBpAZqvnMTowDOJk4ZTeX60isjt6CUELO TIBXTDGkHBySmNwY5NiuU8.mNL4YWv4.jJJEcVWtJ2qvR063y1UgDQk0j5nf nHJBzReIXTEIe0k8NRFUfDLPS.jP0cB_XkyFEswObd75jds3EijEpijrwtsy fOBTOgCZ_K9ob2WSlmDkXPPxI1EoKIXjrP0HwkRyh8uZR2R0sTtqhjPgfFf8 NwiZag2D1FHYfAkQcrtjFC1_IDYx0NxuvxWmy
Received: from [196.27.113.22] by web162206.mail.bf1.yahoo.com via HTTP; Mon, 07 Jan 2013 23:35:56 PST
X-Mailer: YahooMailWebService/0.8.130.494
References: <1357276996.27629.YahooMailClassic@web161003.mail.bf1.yahoo.com>
Message-ID: <1357630556.3934.YahooMailNeo@web162206.mail.bf1.yahoo.com>
Date: Mon, 7 Jan 2013 23:35:56 -0800 (PST)
From: Marcus-Ashley HR <hr.marcusashley@ymail.com>
Reply-To: Marcus-Ashley HR <hr.marcusashley@ymail.com>
Subject: Job Offer.

Marcus-Ashley HR hr.marcusashley@ymail.com <> hr.marcusashley@gmail.com

RECEIVED IP: 196.27.113.22 ORIGINATING-IP: 98.139.212.183

The IPs used in the last email sent by this scammer are: 201.17.162.7 <and> 150.176.200.164

 
 

Tags: , , , , , , , ,

 
%d bloggers like this: