RSS

Tag Archives: Spam

“Oliva Brawn”

WARNING – EMAIL SPAM – PHONY JOB OFFER

This doesn’t appear to be a Nigerian scam however, olivabrawn@yahoo.com is NOT a legit company and the spammer is using more then one email addresses sending out these emails.

Return-Path: <apache@thvitweb06.vitals.com>
X-YahooFilteredBulk: 72.26.208.134
Received-SPF: none (domain of thvitweb06.vitals.com does not designate permitted sender hosts)
X-Originating-IP: [72.26.208.134]
Authentication-Results: mta1221.mail.sk1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO thvitweb06.vitals.com) (72.26.208.134) by mta1221.mail.sk1.yahoo.com
Received: by thvitweb06.vitals.com (Postfix, from userid 48) id 90CB9EF95
Subject: Rcruitment sumit
X-PHP-Originating-Script: 500:email.php
From: olivabrawn@yahoo.com
Message-Id: <20130307172807.90CB9EF95@thvitweb06.vitals.com>

Job Vancacies. Dangote Group is recruiting 20,000 graduates all over the world! contact olivia.
Asthma Patients Guide

If the above link doesn’t work, paste this link in your browser’s address bar: http://www.vitals.com/patient-education/asthma
Vitals offers an in-depth evaluation of doctor qualifications, experience, education, hospital affiliations and much more.

Visit http://vitals.com to research, compare and rate more than 700,000 doctors across the U.S.

Thanks!
The Vitals Team

Vitals
http://vitals.com
Where doctors are examined

 
 

Tags: , , , , ,

“Martin Demai”

FRENCH SPAM

spam

SUBJECT LINE: 2013 l’ année du changement ? 10 minutes de Voyance gratuite

Bonjour,
Je m’ apelle Martin Demai et je suis voyant de naissance. Mes dons de voyance se sont amplifiés avec la magnitude cosmique de ces derniers jours incroyables. Je sais que cela a l’air tiré par les cheveux mais c’est la vérité.
L’ année 2013 s’ annonce toute particulière, certains évènements vont se déclencher pour vous dans les prochains jours, les prochains semaines et vous le sentez.
Vous avez déja eu autour de vous récement dans votre entourage personnel ou professionnel un évènement particulier qui vous tient à coeur et qui était inatendu n’ est ce pas ?
Appelez-moi et vous verrez, vous allez être étonnée de ce que je vais vous dire car j’ ai décidé de commencer cette année pour vous offrir 10 Minutes de voyance gratuite.
Pour profiter de mon offre ils vous suffit de saisir ce code de promotion 5060
Il n’ y a pas d’ arnaque je suis un medium qui exerce mon activité de façon légale et je vous propose de me contacter gratuitement pendant 10 minutes à ce numéro :
01.75.75.20.10
Appelez-moi à tout moment de la journée, il n’est pas trop tard pour en discuter, n’ oubliez pas le code promotionnel 5060 pour profiter pleinement de 10 MINUTES GRATUITES DE VOYANCE SANS ENGAGEMENT.
Vous pouvez bien sur reporter votre appel, mais si vous remettez à plus tard cet appel, ne pensez vous pas que vous pourriez le regretter ?
à bientôt,
Martin.
Site des Voyants de Naissance
— Déclaration CNIL N° 1570404 — Pour vous désinscrire cette adresse http://mailboost.edu.wf/lists/?p=unsubscribe
Selon la loi Informatique et Liberté n°78-17 du 6 janvier 1978, les informations relatives aux utilisateurs du site peuvent donner lieu à l’exercice du droit individuel d’accès, de rectification ou de supression Pour cela, il suffit de vous rendre via http://mailboost.edu.wf/lists/?p=unsubscribe

Return-Path: <martin.demai@edu.wf>
X-YahooFilteredBulk: 88.191.159.166
Received-SPF: pass (domain of edu.wf designates 88.191.159.166 as permitted sender)
X-YMailISG: viX_ZQQWLDvZftoLO98Ed0DTWE8mlM8UXdvS_fLRtbGllNnb .L1CZO0xjM9ssHOalBP46TXCUwPwEt.JAz5LGJdwPrporGaoB4L.Riy57UVs DrxjGZ3lwQw4PKZYpNR46f3uh_Yp8js3DgdP_ccwpPZ76EEVHL0D41e6WYFo sFBh3QOCrXAh7JYaZtH.Ngpnxa3u5LPvSQIHm.RAt4lX.ApBxeO9n_E5UEGU YosH.p9ASqhLFiOWCwTw7kNyZXE.bnUKKp7fEMu6eF7oBPDDJ7a2WMljZbLX fxZDgLbJFiVl84aIvEpZJpJBYde6kTYWoQzB_zAOwc48ZQsi2EB4sd2QkotZ Fu95u2Yu28OvCoP7nCw.fni2hOB_.i7I8MxxcTNcL7wcQZD3xPt.3KFZBl1M 7PVHK2NkHS8h3IcohV9ZtOAraWtVySb9oHIfRTXyguTyEw58KFt2wDIvuFNb 0C9L88Ev3nVhyL.ib47EkS8AyXcenI9bLPGltR0LMe30uYMxn0UJQiCET920 4jxZctWAmGDFLpIVWtVCPILaD_9SzRxLLYCJ0WgRXVWg574TdTx.ETEOZgcS E50SEb8Irj2oas5pG9bX5GFRHbz6vzIgOPB6mvophgYvmkG1YcWoJhLwF9Wn mBBv22lqeT4HiCOx9nIrzYffruwxwYg1k93cN5rNHIFifEFoaQhXZ9MsMaz_ eU.3wW4S7AQgBbwHXN7okKmARGYRJYqaXL.amG4tRkoyElxcu6DyjWVtNIrA _ZUDBI5eZl0XMDBSesZtwoOfcUBITa6.tYADghNNigk3..At0rsoA2uxBCa2 8n7NTi7QFe6N5UsY2hdpyzdNu4IpaYUS7gGSdUGyC7fM1pYJbSlWn2DezI79 qm0gcSVmuqpowQWtppOQv61ofSLwn1UvKXA0kmDCgqMGTtHtNyL856QyxlnY fMZ65IL7gmqzE6wVmnfBbXlH90OJzyzQyU4PfxsEyHUFaJNxhb3psByBgYch UoN5LR5s69ETW4iJzb72KiohGpPufSUKH1cDkAdKWiy4IKoELjLzfnxcg8tV 497h2wrgVgpE3PqlW4plpTrmyrO8MastnidOcyFqBjsb.kRFZ1lwJC6mAuSJ Qx7VxTqqUYXwfMBpun8A6OfMs_U0Az0rfruxrDxdBG936enNZV.ze5Dpg_7X g7cVm_50d.bypyGj4ispjPz52rjRPbeHygCEoR4-
X-Originating-IP: [88.191.159.166]
Authentication-Results: mta1014.mail.bf1.yahoo.com from=edu.wf; domainkeys=neutral (no sig); from=edu.wf; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO edu.wf) (88.191.159.166) by mta1014.mail.bf1.yahoo.com with SMTP; Tue, 08 Jan 2013 10:01:52 -0800
Received: by edu.wf (Postfix, from userid 0) id 728727DC146; Tue, 8 Jan 2013 19:01:51 +0100 (CET)
Subject: =?iso-8859-1?Q?2013_l’_ann=E9e_du_changement_=3F_10_minutes_de_Voyance_gr?= =?iso-8859-1?Q?atuite?=
X-PHP-Originating-Script: 10000:class.phpmailer.php
From: Martin Demai <martin.demai@edu.wf>
Message-ID: <d4ade78ca59154924cd2471455715953@localhost.localdomain>
Errors-To: martin.demai@edu.wf

Martin Demai martin.demai@edu.wf IP_USED: 88.191.159.166

 
Leave a comment

Posted by on 02/02/2013 in Other

 

Tags: , , , ,

“Dr.Pere Hart”

WARNING: NIGERIAN SCAMMER – LOTTERY SCAM – ADVANCE FEE FRAUD

This Nigerian scammer has sent multiple emails which have all ended in my spam filter. I’ve posted many on Scammer419 if you would like to view please click: Pere Hart Lottery Scam

SUBJECT: Open The Attached File From Dr.Pere Hart Deputy Governor CBN .

EMAIL: An attached file that said Central Bank of Nigeria txt 
NOTE: Pere Hart has sent me numerous spam with alot of the same scams but also alot of different scams. Each email is ALWAYS under different email addresses and IP addressess.

HEADER:

Return-Path: <dr.perehartoffice@gmail.com>
X-YahooFilteredBulk: 77.238.189.207
Received-SPF: neutral (77.238.189.207 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: aFvgY08WLDsdt5GEWB08iqN25WjppamFxrHT0t6_0N2fkOBF FzidCIQIlbcPvcyAoh0AWBdtiRPiNMrcplz6CR1xvf0tawY7M_z3kfTPpt_8 Rnz7K3MFuq2x1513KdvJCE7VrrVu4jzXzkJEnSBPbEcRVQrjsskSQzuk4xpa 3Tqr4rGJDM9H03XoyCBuOPFUHEhTc8aaRckhUnlUQjtFCLZ2qkuU34Whp0_w tDbnpSmCf8ildUEOOoqomaJSQMyaewKE2dQIHrxtOQDSj7OOlbyZ3f2jWzyj z3EqhmRPl6uNgLfQ41waAc_9SNR0cRUiul06bobLUz2z4.ikD7GF0wR4vk3M aIY96_Ff0MOJPTdBQiyWQe.j8aVPW1kIABfUw9lqrr7B4qLG66QuDM8tOk0c WBWFD.TGelcRBQaKhvrZW5Xlo_0sGSJBWID7WsM3GKjSviKtuuuC7.FJEp4y TH1qObGdqeBqMki8m48h4Ab_Q_kzvnR4NaMK_QEQktrZCu0Z9nOz3qdxu8rr HTHza7FmLmbawWaOUpHGSb18aGC71mXZLHzhmVjl3nYUMCK99mi4P.NgPYkB rgNek.fUdQdBdNiLkc62oRfadQdtmaoi2tZG9ERIZnpTCQIYai71_JQSztz5 KkOUBfhYnjxrdKg.Pw.m8i652qSF2lAjAueIlsqboml2Mi4APzEeosB_Y5eZ oZNZppZ7njL5Y2CtfnNj7bC3WlEq9wOXZaC1PBAtqpTMdfkGpHieE.X_MC5y 0g9ObiHaxveGvb1WMGs6zkv3PburNhdxxg7fGXHu5DMWhVwv1ymrreIFU_qz HOkqvtQGNAX5vE1F49lARyzJoc8NXgk7i1CQzjfabioalciPRsLBF3fzFGUE DsaNqXkuw7RgahBRUqMHducqbGKl2WLdvr9nJGe8ZaxetJaBLtAgK0pGZwMS 3Bhb14Uo8a_q3YYdz_cIonE5F.zTbYV6hoE5kC4IYa6h0umQJ_SrkUg.YTxw ss94Tb6hXsFQB05hSugL6uelLhMsaalKka0rN5syvNMxuv_fwsZ1W0ebqz0Q kZcCZ.nHt4O4A0_coPlS0RAB3TMB_dTwETt4qDuXvbxGwa6JnUpw1Ujm3FtX mQk5M68mDH4ol4L_zxTM0PCe2o_4mrGb6yvZd4.meO4EscwQDbQR.ddCOan7 cSrYWOW36HFfEEyzKKmOSlZYHs5FKx0DpQ–
X-Originating-IP: [77.238.189.207]
Authentication-Results: mta1308.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm5-vm0.bullet.mail.ird.yahoo.com) (77.238.189.207) by mta1308.mail.bf1.yahoo.com with SMTP; Wed, 17 Oct 2012 09:51:58 -0700
Received: from [77.238.189.230] by nm5.bullet.mail.ird.yahoo.com with NNFMP; 17 Oct 2012 16:51:55 -0000
Received: from [217.146.188.160] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 17 Oct 2012 16:51:55 -0000
Received: from [127.0.0.1] by smtp128.mail.ird.yahoo.com with NNFMP; 17 Oct 2012 16:51:55 -0000
X-Yahoo-Newman-Id: 51876.17474.bm@smtp128.mail.ird.yahoo.com
Message-ID: <51876.17474.bm@smtp128.mail.ird.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: qwmBW6kVM1nms64QgbWA5bp2sqd6.mO.E2LD93nho6QZV5b 7PkJoQhPYQ9IzelN_ePvcEmyy2ky0yYMt4XNOXvDOv6kfTmDyp7xzMxgk63u 15wu8pSGklKRYSQfsoFfSII_hGfIW2lxSkdXqOXoNT9LRd8p.ZorUY4b4rlO gPnLLwlUP5DsHwaSJbgHk8EnOy9QtzLibG0iwdnB7.wbq0i2FRouCYeG18F6 QIG.NVESEK5UImRV7LeUJEuFPR0wrLK061AA0WiUI_8FcH4fpawrYlbROxPy .10YEtwJdEP_47_eeFa7sgYhCTZP3iMVandZisYDOWPev5H8lSzUO1uyCAj3 gBZnS_LyNy8cJMPuMqXtPQ3A_OoW13nHW9NW5_rNY99sC4.qyVnr.tkc4KXd zKlpU3yY42WL8Go9pbOvvhifnx5zJP9IVbdZ6lsh2QlSWZgHRrI7M1BqczRF CyHbYtvlaZiIuUuab2kcB9_odigpUPutpAT1UNgE-
X-Yahoo-SMTP: 3PKY2KeswBCOaex1k5NL_UpUxzw.w_JM.rvihsImDOhymg–
Received: from User (dr.perehartoffice@125.88.125.201 with login) by smtp128.mail.ird.yahoo.com with SMTP; 17 Oct 2012 09:51:54 -0700 PDT
Reply-To: <dr.perehart@yahoo.com.ph>
From: “Dr.Pere Hart”<dr.perehartoffice@gmail.com> Add sender to Contacts
Subject: Open The Attached File From Dr.Pere Hart Deputy Governor CBN.
Date: Wed, 17 Oct 2012 17:51:40 +0100

FROM: Dr Pere Hart dr.perehartoffice@gmail.com REPLY-TO: <dr.perehart@yahoo.com.ph> RETURN-PATH: <drperehartoffice@gmail.com>

RECEIVED-IP: 125.88.125.201 ORIGINATING-IP: 77.238.189.207

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

“HOUSE OF LORD’S ORGANIZATION UK LONDON”

INHERITANCE / LOTTERY SCAM – COUNTERFEIT CHECK

ATTENTION: This scammer had previously sent me a similar email on November 13, 2012 under the same email-address of info@lordsdept.org but the reply-address was managementfile1@gmail.com IP 41.216.50.32 (location: Nigeria) and 213.154.64.102 – For more information click: HOUSE OF LORD’S ORGANIZATION UK LONDON 11/13/12

EMAIL: ATTN PLEASE
The HOUSE OF LORD’S ORGANIZATION UK LONDON Have just concluded the meeting
with the board of Trustees of United Nations Organization and
Representative of all the financial institutions, The meeting that has
been for the past eight months on financial matters, It has been agreed to
release all long terms debt, These are the classes we are looking into:
those whom has been one way or the other denied their Inheritance or
Contract payment/award payment due to corrupt official services,

After our mutual investigation in the recent schedule for payment of
outstanding debts incurred since 1999 to 2012 according to your file
record where we got your email address; your payment is categorized under
section {B}: Contract type: Lottery/inheritance/ unpaid contract funds/
Undelivered Lottery fund, Attn: Beneficiary, We have decided to bring to
your attention, that you were listed as one of the beneficiary, The
executive council Have decided to pay as many they have their file record
on their desk on a direct wired transfer, The total sum of $5.5usd has
been approved under your file according to elect,

Contact the processing/paying manager for your direct payment of US$5.5M
(five Million Five Hundred Thousand United States Dollars), you are
directed to contact the International Remittance Department of Benin
Republic who is In-charge of the payment
via E-mail:
E-mail: olusegunoniwon@ymail.com
E-mail: consultationdept@yahoo.com
Phone: +229 674 067 42.
CONTACT PERSON: MRS. ANDRIANA U. OLUSEG
INTERNATIONAL FUND REMITTING DIRECTOR.
HOUSE OF LORDS BENIN REPUBLIC.
Also provide the following detail to her for immediate release of your fund,
Also it is very necessary and important that you send us an e-mail
containing your vital information?? As requested below so that you will be
given an immediate response and directives on what to do next:

Full Names:
Address:
City:
Zip/Postal Code:
State:
Country:
Present Occupation:
Company Owner:
Company Name:
Gender:
Age:
Reachable Tel#/Mob:…………..*No Voice Mail Service*
Fax:

THIS REQUIREMENT MUST BE PROVIDED TO HER COMPLETELY,
As soon as the International Remittance Department in your file location
receives your information, your US$5.5M will be Transfer to your nominated
Bank account. this payment terms is to keep a clean slate of all debts
owned by the government and company to individuals either by contract or
award fund, we hereby plead for any inconvenient that you might have
received by any of this corrupt officials, The United Nations Organization
will not be interested in your story of not receiving your payment if you
fail to abide to this Instruction.
Yours Faithful,
Mr. Anderson Paul
Public Relation Officer
Strand Bridge House 138-142 Strand,
City of London,
E-mail: com.unit@net.hr
Hot line +44 020 8759 9090
OUR REF: H/L/UNN/APXB/TF/08
IMMEDIATE PAYMENT
#:WB/PC/FMF/MIN/UN/APXB/08.
HOUSE OF LORDS LIAISON HEADQUARTERS UK LONDON OFFICE.

SORRY IF YOU RECEIVED THIS MESSAGE IN JUNK BOX IS DUE TO OUR SLOW NETWORK

HEADER:

Return-Path: <info@lordsdept.org>
X-YahooFilteredBulk: 213.154.64.102
Received-SPF: none (domain of lordsdept.org does not designate permitted sender hosts)
X-YMailISG: n17TtrcWLDsdDEuSkY_HSkT51L21bPdZBMwxi6AQhYevQE6n 5AHJGUMCXxFcQWA_8b.NyHFBqZMcO.UjZ8FCertxLymBdRPX5yB160N2TGnm qwaPHWExX39Nk3fcXAu.PafkPhJjSLuBXZu9PORr5C.y390tBzQRaxX_Ajeo 7Hur_RtoMBNsEKEcS1NY_jJ7MVItgwhEdNv6BMjqx_b1MlG92f5bS_CtuAVd .oh_JKiqCucKnJdR_vA8__9UE.1fwuLwZ2jBdATHKGRXWA9jdgOwV3Ib69fT EOd7eaFTWdb_5Z16_.TYe.j7ArE3IJKpEKIk4E3slNCtWmGIRFmTka.H7YVU kHIFWlOe90o2tvuCYr8RvUv71WE0TgPgVl6Khq6RD5q1jIaXuAGNiZL303nP R7TIfXxur5a8ZC_2oHyszcv9WRLQjWFSCzGvGQYUJrk_g_Fa1qrpUjRjeM2i l0G7FO2XeR9HCwaTT2znjIqPkdy2KwzEIIjCz.N4kogQKc2kG9n6xWFpcpLo 74MXi2XlqMqfjw4Cj80wiP3jwE0ktGXxBGMSU_2n3YAQ21o2uVONL1mXGIl5 4bMmhVshiHKswZJfj1BN.SBP2D3c53qVkVjkIDCET06u1nIveivDP4Y_oe4g Gp0bTWt5y_R1RqFMmD.AIwh_MS5N2hQgXY2q7xk1_gsgMw2uKxCqk5wcw1df NMnauhxNQjJs0_tgmkT.nJ.KTOhA_qgdK986CusmuMctpQOH_ihBK.jvNTSK btYCtI0byx3BytVo7snXt8QYK6E5Jx9k3ZzauOFpR59.AeWK_EuKrJxb5kp_ 3EZ1tBGHB.ss6mypa8vfMvhb8TINeip6CZPnWI2wlXwUR.ZEKIJrohmFVHFm KFYVmymAMCOdWOLWh2A.dyJSUrjLje2_aZ.DSuRVGpoAtJLHe0QsBF20RzyD 7dC25DeBhkcO8UHLsvng7wFO2coQ2XMhsp.ayEqCe4X2lpjsh2lah9Xo7V7L pPiABw_yasLUGHztyfOUYJ9OSusCqxN.k2MPixuf1vKCB7pq65Iyc4p2uGVC K6bnKMICrei.rxdj1vvTYbKEmvHVsmn.tfhS5B0nTlah3FmibbEpZKHX7Upe wqrzGbwYMdD9LSIDpmkIqF3bRJMX91BdA08UsLs4_E931bhwDffu1ERuYjIw WyEwbhIfjONgETEO8gEzvb42sZbk90Wsxo5b2y1F4ypAzD7R2VyYuQIFQHpb _kcoyrCgQZolEt10hXFRxy0X5MWOAFCOxnDTvDjoJuR2m5Q4DJk8Ic5xuXp8 QCyFyE5lHJPSNnKZ9A15ErmDah0X_ZcVtz5Ri2C_TQNylkHidCSUd8sG0SJb Mg567n3VzIfX6JYHtqlSY9NbCE.G8GC_kNiS.WMe0oeKI7OGev6vbuV8Hzjf yRICVnPIJjSU56vQ91Rk6elLYGnonbkMLw–
X-Originating-IP: [213.154.64.102]
Authentication-Results: mta1349.mail.mud.yahoo.com from=lordsdept.org; domainkeys=neutral (no sig); from=lordsdept.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtpgp.orange.sn) (213.154.64.102) by mta1349.mail.mud.yahoo.com with SMTP; Sat, 01 Dec 2012 01:51:12 -0800
Received: from sunumail.sn (HELO srv1-smtfree-msg.orange.sn) ([213.154.64.61]) by smtpgp.orange.sn with ESMTP; 01 Dec 2012 09:17:34 +0000
Received: from [213.154.64.43] (helo=www.sunumail.sn) by srv-smtfree.orange.sn with smtp (Exim 4.43) id 1Tejj5-000827-EM; Sat, 01 Dec 2012 09:51:11 +0000
Received: from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)
Message-ID: <55073.41.203.79.249.1354355471.sunumail@www.sunumail.sn>
Date: Sat, 1 Dec 2012 09:51:11 -0000 (GMT)
Subject: NOW CONTACT THE GLOBAL FUND REMITTING OFFICE FOR YOUR APPROVED CHEQUE.
From: HOUSE OF =?iso-8859-1?Q?LORD=92S_ORGANIZATION_UK_LONDON?= <info@lordsdept.org>
Reply-To: consultationdept@yahoo.com
User-Agent: SUNUMAIL/1.4.2
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: info@lordsdept.org
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to false
Content-Length: 3749

HOUSE OF LORD’S ORGANIZATION UK LONDON

Some other email addresses and IP’s used by HOUSE OF LORD’S ORGANIZATION UK LONDON SCAM – info@lordsdept.org <> com.unit@net.hr <> managementfile1@gmail.com <>  olusegunoniwon@ymail.com <>  freshtools@wanadoo.fr <> hackk@smtp.com <> 213.154.64.102 <> 213.154.64.43 <> from 41.216.50.32 (SquirrelMail authenticated user david_fletcher) by http://www.sunumail.sn <>

RECEIVED: from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)

MESSAGE-ID: <55073.41.203.79.249.1354355471.sunumail@www.sunumail.sn>

More scammers who’ve sent out email spam under 41.203.79.249 are:

From: <sales1@home.fanwrestling.com>
Subject: Fwd: Re: Wire Transfer Confirmation
From: Tagged<Tagged@taggedmail.com>
Subject: Re: Fwd: Wire Transfer Confirmation (FED REFERENCE
From: <hien_u_spine@hhp.sugarmotor.net>
Subject: hien_u_spine@hhp.sugarmotor.net � ROLEX Inc � Disc
From: <kathytessendorf@mailfront.cbulock.com>
Subject: kathytessendorf@mailfront.cbulock.com � ROLEX Inc
From: LinkedIn Password <password@linkedin.com>
Subject: Reset Your LinkedIn Password
From: <Harrietjeancy@gmail.com>
Subject: Fwd: Re: Your Flight US 66-56833
From: “Purchase Vigara” <EAF01C7@tennlandforsale.com>
Subject: Weekend sale

western_uniontransfer121@hotmail.com — Received: from col0-omc4-s16.col0.hotmail.com ([unknown] [65.55.34.218]) by vms172065.mailsrvcs.net

From: Western Union Payment Center western_uniontransfer121@hotmail.com
Subject: FROM WESTERN UNION AGENT MR.PAUL EZE
X-Originating-IP: [65.55.34.218]
X-Originating-IP: [41.203.79.249]

From: Office Ups Courier
Subject: Urgent Delivery of your ATM Card Payment Through UPS Company Delivery.
X-Originating-IP: [77.238.189.61]
To: undisclosed recipients: ;
Reply-to: upsofficecourier@yahoo.com.hk

Received: from [41.203.79.249] by web29301.mail.ird.yahoo.com

From: Money Gram
Subject: Dear Customer.
X-Originating-IP: [77.238.189.216]

Received: from [41.203.79.249] by web132219.mail.ird.yahoo.com

Received: from nm25-vm8.bullet.mail.ukl.yahoo.com ([unknown] [217.146.177.154])
by vms169119.mailsrvcs.net
(Sun Java(tm) System Messaging Server
Received: from [127.0.0.1] by omp1016.mail.ukl.yahoo.com with NNFMP; Tue,
29 Nov 2011 19:54:16 +0000
Received: (qmail 69819 invoked by uid 60001); Tue, 29 Nov 2011 19:54:16 +0000
Received: from [41.203.79.249] by web26303.mail.ukl.yahoo.com
Date: Tue, 29 Nov 2011 19:54:15 +0000 (GMT)
From: “Mr.Edwin Aja”
Subject: CONTACT DIPLOMATIC AGENT IMMEDIATELY
X-Originating-IP: [217.146.177.154]
Reply-to: adamsvictor14@yahoo.fr

IP 209.239.47.191 as relay: IP: 41.203.79.249

YOUR BANK DRAFT DELIVERY NOTIFICATION!!!
Contact Person: REV.TEDDY HARRIS
UPS Courier Company.
E-mail: upscompainy1133@hotmail.com

419 from above IP, using 3 Yahoo IP addresses, including 98.138.91.34, as relays:

YOUR WESTERN UNION PAYMENT CALL TO CONFIRM @ +229-98679197
Vital Finance Bank Western Union Department.
Location Address; Plot 1261, Adeola Hopewell Street CO/B/REP,
Contact Person: Mr Chris Mike.
Tele phone Number: +229-98679197
Email Address: ( westernuniontransfe6@globomail.com )

“Western Union” Spam from above IP (Lagos, Nigeria), using IP 196.1.218.76 as relay:

Call Mr Kevin Anthony For Your Mtcn.
webmail address:( western_union001@qatar.io)
tele phone.+229-984-168-39
Contact person Mr Kevin Anthony.
November 17 2010 03:11 PM
H.User7043 commented…
“Western Union” SpamScam from above IP (Lagos, Nigeria), using IP 211.55.29.156 as relay:

MESSAGE FROM WESTERN UNION
Director; Tuker Hans
E-Mail :(cbbj@ymail.co)
Direct line: +229-66-614-055
October 09 2010 09:39 AM
H.User7043 commented…
From “Tony Chris,” purporting to be a poatmaster in Ghana, as a follow-up to an email from a “Barrister Paule Eze,” offering me an ATM card worth 2.4 million Euros.

“Attention Beneficiary,
From: TONY CHRIS ”

 

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“MUKHTAR M HUSSAIN” abuse@ispfr.net

Business Partner – Business Proposal – Nigerian 419 SCAM

EMAIL: FROM: MUKHTAR M HUSSAIN EMAIL: mukhtarhussain00@yahoo.it ATTN: MANAGING DIRECTOR REFERENCE: BUSINESS RELATIONSHIP Dear Sir, My name is Mukhtar Hussain, I am one of the Board of Director of the NBAD Private Bank (Suisse) SA in Geneva Branch Switzerland. I am soliciting for your assistance to secure my contract payment for me and I am ready to give you 20% and 80% for me. I realize this money from Contract that is awarded for me with a ghost company name in our Bank and it is against the banking policy to award a contract to a serving Director like me and the contract have been executed and supplied by me to Switzerland and due to this bank policy, the bank cannot pay this contract money into my personal account and it has been approved for immediate payment once we supply/tender the invoice of USD8,370,000.00 on your name and bank account. There are two (2) options to conclude this transaction and these are: (a). If you can come to our Office in Geneva Switzerland in person to sign the release ofthe Fund at the our Bank in UAE and you can open an account with us or in any private bank in UAE where you can transfer the Fund and you can make wire transfer to your account in your country install mentally. (b) You can provide your Bank Account in your Country and we tender invoice of claim With our Bank into your account and wire transfer can now be make from our bank into your account in your Country. But before we commence on the above, there is going to be an original signed agreement Between both of us and I will send you copies for study while I send the original copy by courier for you to sign and return back to me and after receiving, we proceed to execute the transaction. This transaction is 100% risk free and you can contact me at my private/direct number: +971 4 6977400 Email: mukhtarhussain00@yahoo.it. for any question you might wish to ask and I will await your reply, Kindly keep the above confidential as I don’t want my reputation dented even if you are not interested, I will gives you more details when I hear from you. Best Regards MUKHTAR M HUSSAIN

HEADER:

Return-Path: <mukhtarhussain00@yahoo.it>
X-YahooFilteredBulk: 195.114.18.77
Received-SPF: none (domain of yahoo.it does not designate permitted sender hosts)
X-YMailISG: MIc.BWkWLDtjoR2jIN8zLusWmhJAvBnye.BtsoroyyiT_sU9 6N.iDmZWUBKVyA5nSLc8E8MTzhjaNHiMNxiw.FjMcAu.Ki06Pyo9LvE0uheU SyXpw0CFe0lkrktjh1OmZrom0SWEV5F8MQgZ346hCJ2jwSSeAYtU8ehvJo2H V5RMr0Ax22nqgD8PPfN1URRYLjpGzKv.0Po0jpGVCyA4G05wJltNvQRnTb.W gOP7LIMDq0tOw7q51rtiD26TvM7tK7mp0zRU0oFULlKsnOi5F0ahd88tasCd vghtkWR6FlPon9Y2mpbj06.m3XbLgeSsVsphi1jICGwJHSuZHEa3ZJwAxCNf T3YUbtfUj0_3O6TdhQ7iJ055xfgy0W1eT8O2alKFmpV.GcVVLw6.L2i2yxVi X9suRogP2hspQjSjtl0tqkurRa3fhzyo.mY2sP6KvC1GUqjUzOSxLyzimvF8 XddlUiqxOKtHPC.K_JLsJ65wtPsHMTeAulvevbAByORnfnF5jErnuYMK7FGd PY_kRnowRzLBSaSuOTYraLOV7WvK71.UYaJACEmUcOOO6hxQHhPPRWoMdKdm 3oRWjrKBcYciuIakVwcQSmU7EIKOEbmhc1PyccFGx_OQ2Mtaxhmuizlkr0AQ 8XKIraXZHhn1lLeblJ6Vb3CUoO5xUX6SNfrBmVcY2Lj3i0mBFoDvaeFosk23 RB_YkMD3cabUE2mQLDyMMYJ0JVbwv.CDpvdzs8USpteieXYgQV9QLQmCBG8W IV0aQUOpY0MhsAw9TXmVhGkkxP1kSNvUos9OnPbMR5H9B3Hu9BWtm7ALZCza u1hJ8VjblKCf8ApSq9.6zPq8tiptyohL0h727pFSp6JWuWLZ40H0kSSSLbTH _K26Xm5QoKCEcNHrYRyMcrYnncFCN.QwBgRlIZbbzqHlFyOT7j.P4ELBEdvu XEm6HFBpZNIz.hV4w7jVFbH2IMNjLI7aLp3GddxYg9pJX9tcsCV2u_jFozYm vG548W5.xqE1c0BAUVxvqDAZt120JaA6pwe1OLwK9tdbEVjWHfklqJ5v6yy. r3tmeVyDTvgeawtsVZ_mSJBgizRMtYCfuPjR3nCzS52A4sQB08NHfA45edWf PtWknUNTi.tJFe8ryYzqBbQ-
X-Originating-IP: [195.114.18.77]
Authentication-Results: mta1323.mail.bf1.yahoo.com from=yahoo.it; domainkeys=neutral (no sig); from=yahoo.it; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO email2.nuxit.net) (195.114.18.77) by mta1323.mail.bf1.yahoo.com with SMTP; Sat, 24 Nov 2012 05:57:41 -0800
Received: (qmail 24620 invoked from network); 24 Nov 2012 13:31:00 -0000
Received: from unknown (HELO mutu1.nuxit.net) (192.168.3.2) by email2.nuxit.net with SMTP; 24 Nov 2012 13:31:00 -0000
To: deleted@yahoo.com*
Subject: BUSINESS RELATIONSHIP
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From:
MUKHTAR M HUSSAIN <mukhtarhussain00@yahoo.it>
Date: Sun, 24 Nov 2012 13:31:00 -0000
Customer-Id: 51427
Abuse: abuse@ispfr.net (not a real abuse reporting address, it’s a spam/fake email-address)
Content-Length: 2332
It is obvious that this notification will come to you as a surprise but
please find time to read it carefully as we congratulate you over your
success in the following official publication of results of the E-mail
electronic online Sweepstakes organized by Microsoft Corporation,in
conjunction with the foundation for the promotion of software
products,(F.P.S.) held on the 20th Febuary 2010,in United kingdom to  mark
the  new year celebration ,You were selected for the prize of �480,000.00
(Four Hundred And Eighty Thousand Great British Pounds) In the fifth
category .
Contact Claims processing Officer  With Below Information:

CLAIM PROCESSING OFFICER: Barry Prince
EMAIL: msnetworkprocessing@ciudad.com.ar
TEL/FAX:+447045714110

Soon As The Above Information  is Received Through  E-mail: You Will Be
Duly Informed.

return-path:     <info@microsoft.co.uk>
envelope-to:     Submissions@HUN1P0T
delivery-date:     Sun, 21 Feb 2010 08:26:22 -0800
received:     
      from [195.114.18.77] (helo=email2.nuxit.net)by fire.HUN1P0T with smtp (Exim 4.69)(envelope-from <info@microsoft.co.uk>)id 1NjEdR-0004CL-A2for Submissions@HUN1P0T; Sun, 21 Feb 2010 08:26:22 -0800
      (qmail 31810 invoked from network); 21 Feb 2010 16:26:19 -0000
      from unknown (HELO mutu1.nuxit.net) (192.168.3.4) by email2.nuxit.net with SMTP; 21 Feb 2010 16:26:19 -0000
to:     Submissions@HUN1P0T
subject:     Notification!!!
reply-to:     msnetworkprocessing@ciudad.com.ar
mime-version:     1.0
content-type:     text/plain
content-transfer-encoding:     8bit
date:     Mon, 21 Feb 2010 16:26:19 -0000
customer-id:     50494
abuse:     abuse@ispfr.net

The email above is a scam email from the same scammer with the same IP and ”abuse” email. For more information on this email please go to Scamdex

MUKHTAR M HUSSAIN << mukhtarhussain00@yahoo.it << abuse@ispfr.net << mukhtarhussain00@yahoo.it <<

 
Leave a comment

Posted by on 11/28/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , ,

Dey Andrew – info@aucanlink.com

Nigerian (419) – Business Proposal SCAM – Scammer sent file but I didn’t open it. The warning below was actually sent to me by yahoo who detected a scam/spam.

X-Originating-IP: 88.185.225.246

 

Spam detection software, running on the system “Serveur”, has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn’t spam) or label similar future email.  If you have any questions, see admin for details. Content preview:  Andrew Dey Lloyds Bank TSB Red Lion Court 46-48 Red Lion Court    SE1 9EQ 01/10/2012 URGENT BUSINESS PROPOSAL Dear Sir, […] Content analysis details:   (18.0 points, 5.0 required) pts rule name              description —- ———————- ————————————————– -1.4 ALL_TRUSTED            Passed through trusted hosts only via SMTP 0.0 MISSING_MID            Missing Message-Id: header 1.6 MISSING_HEADERS        Missing To: header 2.2 DEAR_SOMETHING         BODY: Contains ‘Dear (something)’ 0.7 URG_BIZ                BODY: Contains urgent matter 1.8 MILLION_USD            BODY: Talks about millions of dollars 1.2 US_DOLLARS_3           BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 2.8 XMAILER_MIMEOLE_OL_1ECD5 XMAILER_MIMEOLE_OL_1ECD5 2.0 ADVANCE_FEE_2          Appears to be advance fee fraud (Nigerian 419) 1.4 ADVANCE_FEE_3          Appears to be advance fee fraud (Nigerian 419) 1.5 ADVANCE_FEE_4          Appears to be advance fee fraud (Nigerian 419) 4.2 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
Forwarded Message: Re Andrew
 

Re Andrew

Friday, October 5, 2012 3:38 AM
 
From:
“Dey Andrew” <info@aucanlink.com>
 
 
To:
undisclosed-recipients
 
Andrew Dey Lloyds Bank TSB Red Lion Court 46-48 Red Lion Court SE1 9EQ                                                                                                                                                                                                                                                               01/10/2012                                URGENT BUSINESS PROPOSAL Dear Sir, I hope this proposal meets you in a good state of health. I need your help to transfer and invest US$10,000,000.00 (Ten Million United States Dollars Only) that accumulated as undeclared profit made by this branch of Lloyds Bank TSB , London under my management. All that is required to get the funds transferred out of here is to put your name on the Non- investment account holding the funds. This practically makes you a Non-Resident customer of  Lloyds Bank TSB, London. I will then guide you on how to apply for Closure of the Account and credit transfer of the funds to your designated bank account. You will get 40% of the funds for your role. If you get back to me with your physical contact address and direct telephone number, we will consummate the funds transfer within one week. I am only to be contacted via Private Telephone Number: +44 702  4032995 Private Fax Number:            +44 700 3900426 Private Email address: andrew2dey@yahoo.com.ph Sincerely, Andrew Dey
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: