RSS

Tag Archives: Yahoo MSN Lottery Award

“DR FRANK COLLINS” – DR COLLINS PETER

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: Below will show two email headers sent to two different people (including myself) – It’s the same scammer, same scam as well. The header information is different however so check both for the different IP’s and addresses the scammer is currently using.

UPDATE: Dr Frank Collins is also going by “Dr Collins Peter” and “Collins Peter E” under the email addresses / IP’s – “Collins, Peter E” <collinsp@newtrier.k12.il.us> <info@notice.com>  YAHOO-FILTERBULK: 157.55.116.165 RECEIVED: by 192.168.194.152 — X-ORIGINATING-IP: 41.71.173.93 Also,  Dr Collins Peter web52644778980000x@att.net REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com – Scammers number: +2347030115459 X-YAHOOFILTERBULK: 98.136.218.126 — For more information click: Dr Collins Peter

UPDATE EMAIL FROM DR FRANK COLLINS A.K.A DR COLLINS PETER (I dont even think he realizes who he has emailed because he emails me with different, similar names on a daily basis.)

EMAIL: Attn: ,
This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-703-011-5459

_______________________________________

SUBJECT: PAYMENT VIA ATM CARD.

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $10.M

HEADER:

Return-Path: <webxx120999xxxxxxx@att.net>
X-YahooFilteredBulk: 98.138.91.88
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: FaLTslcWLDv_37lDMJwvUepYgmnqCzD2WWiLYIVYEvzWiVdj yeMdZg1sVqQZNMLZIrI8jrEhVaMXPsJIY6kRf0cbjnqQCPsaLbBdN2aERrfI RwOChZVFmKW9DzDxir.njJLHD.QY8j_y83jLRI4.AuI7k8QKdHjPvXXJYEFV 3YQAPmqS_78yqhLNbejZcKD5irk7feyqBo.GgWWRjUtr0XeJzJNqaql0h8sA e8RvUpWShCVHN2SyD1tuM0Deb4D1Ji8Vbh6LO0l1rw9cI0_sIz.vHpe_EiGP kHJSq4cVZ_zI24xSaJVH2nairx_S7dPagQ15pHcUhTSBMqGEgXXNeB1Y2oeP 3JU6qx6vSLkN2q.zt9EL5Vwas.VQ3VnnTXDqHLBdVcKU94hP0GlXAupk.DHM obtlUYCC1aCFRuuf3fyqc0LusjLnspK7JnjoOa4trRGPkJ_SlfDp0ggLrEaT v9a7lqaWeBT9EICtLA0FkLq3C2n40JFv19b2vJ8kTWkPK9_CQXXHvPmE9PZ3 kFs1luoQlTk_lzaBG6mXtSkUeA_7vvUTiNlT90e4_xcWHLkMi_qHUB6.MOXY KpjgBBptr6h8HH8BTrub.bb.IWuBN9wzFL2saNzKwsyxCm4lKMw9.xwDm5uJ Gq5wsKY8oAk.ZAm83V.RXXdQZhrYHzq2HI4TEsDuXnxCeBPNS3yCscgHGdua .5bviyYzefeg3tnvzHHkzRlzxSKw4QvlmuuqcChqscR9kCPiJLD.cgAs4kGP VstUFHd.bksAH552CD3i0lwkON5VfmeiESgRCGTPFvptnIKly2v3rZiX6esg GPPtVuH2VF9JGdJc2Ymbkp7azmUteBWNDdU3UBhVs441.EpCaWrI_sm_fe57 OiQyUOywnO1yRAtKJ_SFta4rGiPKLZ0KmWOm2iWxo40gyrpOgSF7vvvDlD.8 TTvxrpElU4SLFTn.GO1zFIFIOghPlKF4MTDaE1.cfSBA7OvaqPPhZB7CbD_P PbifHGwGIUcvjwXFo2GX_MJ9efyRaqwJ8RNv5bv_PmOjBSyxnqzPybf5N4_3 8R6NtlZnqM1b4Enrf9rnVdKOJneQ2FJhZVcYPrtDlcrfum9mFoOorxfoQHmz TE17GM57C0B.ILT43WlnmpnQdle96RtuSiqxmvsRzRStRdaGzDZuic8L7wei rjZENREYOwxD5PakTFL_xFmWBDMWOtezwqcs9j2HaBsIHEPGCa_w1BQb4H7T Rhg.rsLZhUpnUmz3kwbcPdV9Pc8UNCPtAWRE0QCMgwjeBn0ZXdINEcVudxSA YTcOMC4k95wVfJ8oF7eiOod5Qae2n5Ov7WwjD_lXqOtSBIc3J87zhs.HmSjX 7WlsWTwwXn.I_l4fa3NQ.mKYBKo-
X-Originating-IP: [98.138.91.88]
Authentication-Results: mta1228.mail.sk1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.88) by mta1228.mail.sk1.yahoo.com with SMTP; Wed, 05 Dec 2012 09:33:37 -0800
Received: from [98.138.226.178] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [98.139.44.92] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 198054.18868.bm@omp1029.access.mail.sp2.yahoo.com
Received: (qmail 22514 invoked by uid 60001); 5 Dec 2012 17:33:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1354728815; bh=2E+CXVEN1MfcfJaq2e/eZV5TviX4n2QY/x1KeAa5kws=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=f9JOS/YO8YXlmc9hJrpoWT06BSgD+eIddQyPZn984pugXI47aiHJ+HigDAW5KKMMOSqrOWONnAJiCoEyKoSjzteAYzjouKnJuSd9FFAPV7YDDY5OHZP5iSipgSUv3aNEhW/Rsnl4Ln0GS2YFkeMhoGRqYTKiUP5YtCqljvaDNow=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TW9B75gLmG8YEH2Fs0wWUR6quUgNgKf4vKcOC0lU58OuZZxvfbAEilc6hFgOyOvoldI//PR2xiJZNGeYJsT5o76o0CJS8W8mbj8ANAI1PafbE8IT034u3iHRas9fZymmyVV0ARoaM4Pmz0UzVZK0Jim/YrB1484O5fKsUOiyGTM=;
X-YMail-OSG: WdGt0KwVM1lOyB0NVRZY5rrxYN4NyBpT08THjv3T0blrAYl g.fSaOnJGDgT6qOWJLehIImpPX16weUxpsraTUfiislliLwCl2K7v8Pp.iJQ a9TSaK3Cg8mAMGQLpgboaXsnY0P.gbcdPD9a2TYU3MLMz9.msdkdNVne7srD CGKrYap1ePNIkrvsumj.6_CYvw30FkImKkDHHf5IXtzUrxF4x8.QVPZL.F5P 1sCi9c6SjI1P.GeZm2DnWTw.VoPokMuHr44zOJyF208V.uJqcKGplN1blft8 NRD73m_UrMPrQXsfdMEk9IKg0jGHRledxyRP7NbPnmUmTJk5sWb6g7mibQcN lZBmrszbkEqY7Gci4Eh5lmEYhM0EH9ITd3rAkZfbRlBlo5s8MbxSVEa73EvH muyMHoTdJMpwvibAS8LsfWhBVw4Fzpyj.JdfnQdukkFQX5QRnWlt3FtcARkq hyy26DJRYTbzGN4Eyk0EL9EDXp1SGqp9Lk4FU_Cz6Hw4qjqgVzWqnIza_ijq nvI9omJY1Dw0WycuWs.OkVnfl
Received: from [108.174.51.231] by web184901.mail.gq1.yahoo.com via HTTP; Wed, 05 Dec 2012 09:33:35 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354728815.12889.YahooMailClassic@web184901.mail.gq1.yahoo.com>
Date: Wed, 5 Dec 2012 09:33:35 -0800 (PST)
From: DR FRANK COLLINS <webxx120999xxxxxxx@att.net>
Reply-To: drfranklcollin@kimo.com
Subject: PAYMENT VIA ATM CARD

FIRST EMAIL – “DR FRANK COLLINS” <webxx120999xxxxxxx@att.net> REPLY-TO: drfranklcollin@kimo.com RETURN-PATH: webxx120999xxxxxxx@att.net

SECOND EMAIL – Dr Collins Peter <webxixxxxx266xxxxx@att.net> REPLY-TO: collinpeterclaim1@yahoo.com RETURN-PATH: webxixxxxx266xxxxx@att.net

BELOW HEADER FROM COLLIN PETER EMAIL:

Return-Path: <webxixxxxx266xxxxx@att.net>
X-YahooFilteredBulk: 98.136.217.214
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 2lU7wkQWLDvBCg5Cg1wZtIwDNUzuGrZVVXK9H6ZxiRnCF9q8 3T_Z2xZXeKmdhjE03ZY1nNRa1P6Zz09tc3Suud6PVBq3vexxPmov8AXjPV9n h21FBi8fEfSTSwVFhhvzk7V6R63Puryrkha1Mb3jaVwNputKdVPkDPhjUMeo RVMMb4_9ds7LkdO1tAhp2nowUz6sKBD4buJmSanxkzHUpRwUVtPLKq8B09eN Rl25hxMaIQHn74TwJlEJoWwVxtvh8Jkr9b8xgoPVsHTD4d3rIEAmrBO8jRyd GelLKjDpe6gEZSWQukIvbii_.zMj02LUFMIXNqSXg2JTLp15U5_jUlo0usw3 1Q9ij8R.SuZ80..F80EMLcQO1SXMjqWDf6xkVHWwRChYckM8P0zLXQwmLzCh cXZIqLnw6xfz6lcwu0_mQkN.aX.hIIycQN9E431bkyzpAK8Sh0ATdnfKruuc hDUY3uEtvred._LLnnYkhYpxqfc_nSy4oYmmhRytYX5eJDo3.jrNS61KZPV6 YQ56CR6JtF_A6Hafi5rSLv5qgM4p8VJZi7448tERIhykcwaijsPjcAOenatn YK3BKAuoLWZ0KHPHNvGKAWVEbv9QWSQF39Q.EEP1LmrPyvSdcGkLUJurop.B aYWv4YFGCdGxSazNRDxvtgoiaK6SIwQ.bpgk7uq2vF3rcb50kF6JNxWrLg.n 7Tth7XBQ.W0dZ6SeRl5BddGt0PedKs6csdJXP3rAEuRx9HhVbiFWVgdNijR3 _dNog5Qebj0UNBN3_ZYEN_KnDptPkNdpsJ8OGplwzrinpWeXcnwHVgAbUTdo 18VmNYVRbtilZoPybybViqmTdRB30nDou7y.RzfJPpp93GHAGPmJapCeotd7 c17h.xTgmXwnesQYx8oH1A8HMZj9YMgj2Hn78UbjDz5iO3dLZZQwGJc37EEe Irpsy5SaXtVD8MbmmPkhMrhk8K30Dviwqq4hDE5WgxBlGVonuDQoGK3aEt2T nvWx.JhFmNOhCyTBWuANJwIBh0YVHlt7UHVip3l.jut4onQ9R4CDyP6sbX2c lfshiCRIJ9lEvHbvGo40N55AdITysTVwpsKYdhO1zKO2KEhE2HbINU3NSVAp mVO8xztcsAawulFbZ5PKA.HviU.utyPlT0yMvzwTHn_QINVPcYodx0NOT_5q eROgjgZ35jOw55jeTpgP2qOvmDNkeadY.RrCfkVM_h_Ewvbns5N8m8wKWn4F 71xz.y4o8QBLLz0jb4jMAFmUekk5PrMNZ0E-
X-Originating-IP: [98.136.217.214]
Authentication-Results: mta1191.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm9.bullet.mail.gq1.yahoo.com) (98.136.217.214) by mta1191.mail.bf1.yahoo.com with SMTP; Fri, 14 Dec 2012 03:36:45 -0800
Received: from [98.137.12.58] by nm19.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [98.139.44.70] by tm3.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [127.0.0.1] by omp1007.access.mail.sp2.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 191480.20265.bm@omp1007.access.mail.sp2.yahoo.com
Received: (qmail 75889 invoked by uid 60001); 14 Dec 2012 11:36:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355485002; bh=2TQXuFSDKzJQh2ItoNfMPDU7xRHv3E+CGrBMw/1Ns0g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=MdiZ1jC0egJ3jeK8x+wAmlqoZyMp98AiD2wzzG+et6zE3r4jYBfuYUoMttuA+gtIjRNvWXQLaTtg0u215rggtB9Wpx8OQWJMI3iQKHU+C0WdAONnnis/01rbGL8rLVp8QUEopIB3M6ep93e/l0o2GTcA+2tm8NmXdnIzOrTvHgs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tLrXvMlZ1AfWS1oRs/q6h6HUMYi/LUcbnjbU0+wRSPWQr/1rUxJ+mPFD5IS+2J+xhqTW8fnpv0P89+O46Kg0ZaIi52L7OqBpBWUtxGIOrGGuRKY65NxHoyuM/9fcPmg6OxN2t9IVr/IQmo5FIYMQAlTgtLYGxzIx8tus9kjh4UE=;
X-YMail-OSG: 3ICaliMVM1ngoXiqNpguRRh2iYwL78sXplySeVxex0hGQX. 9amYG0XA4OBV26LpGFUMshO4W2d_k7Z_a2Ijy9UC4MhQCts27.mEJf9MSo4o gLC1yrqEZW2qVfkENJcHqLvP6x22811UE_jYQp539eFIcLW5RWUDAU4t9CGn OdkUZ.I3db4Y0_pc3qHbfrO34x9zDWKUFRwLqnQ.wNCnHD8dS3WSTofCFWm8 DRISKdISfGE2ytoF4IzvXsFuyje2c_qd6tqdnmTw5Z9mBhssXb94A4biy5CF qnxB_1TEOjTWqKHDrBY4BU1EdgOFfYQNqvwQ4XtGhinDlu0jMGic.YAmQBDt z00_WMAOIdc6llHVKxJwh0yh_xgWL5D6rgLOTnmN2Mo2vI.t3Ls.zQwRBRhe SaGInzRlMMto6OJd7AVEbCSpnmZYicQHhMCbjMxGPX2KPd4Tv0fL_cU_plDm egb7i9XYQocNBXLDzdzIfmk9Um9FTZk5b6spv87aUQEG.1MjrCbB7UdYQ0uO JpvS8DhYL5XyxrsNNIFxmRpV2b8I07Jm9LTn8wKS_hqGegIf5feMr.9cGJzH 7hgKyGs0sihPG_k5JCSaI1yCjgZYK79b_xhXuvMQeLOYyQDygzxrr8813RrH cC8L9RfM7BsB3QMN75qyv.pCG1ZbybDazG.TyLuGLgdSNZ6KwYSh_mQ–
Received: from [172.162.63.104] by web185004.mail.gq1.yahoo.com via HTTP; Fri, 14 Dec 2012 03:36:42 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355485002.70723.YahooMailClassic@web185004.mail.gq1.yahoo.com>
Date: Fri, 14 Dec 2012 03:36:42 -0800 (PST)
From: Dr Collins Peter <webxixxxxx266xxxxx@att.net>
Reply-To: collinpeterclaim1@yahoo.com
Subject: ATTN:BENEFICIARY

108.174.51.231 << 98.138.91.88 <<

________________________________________

Click SCAMWARNERS for email to below header which was sent by the same scammer as above.

Return-Path: <web1xxxxx12000bvvv@att.net>
Received: from nm12-vm4.bullet.mail.gq1.yahoo.com (nm12-vm4.bullet.mail.gq1.yahoo.com [98.136.218.191])
(8.14.4/8.14.4) with ESMTP id qBAFqXcC024177
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from web1xxxxx12000bvvv@att.net)
Received: from [98.137.12.190] by nm12.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [98.139.44.75] by tm11.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [127.0.0.1] by omp1012.access.mail.sp2.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 169461.26588.bm@omp1012.access.mail.sp2.yahoo.com
Received: (qmail 11627 invoked by uid 60001); 10 Dec 2012 15:52:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355154752; bh=6IEXAnuDHUzPM2GG6BZxFSMMGXUzzTJH/x0iCKn3gNM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ZNpQDXqA6YKLygx/Mgp0kaQY3hShe48iYfThTEb8Iru1MOJkFmAxYG7WRpbG0vEzb8sVOXBWUD70FlpkHY32sc3lcnQRUH9EWyjF33/6bxeK6Wl/Hf7syjgMKen3IrPrVrQM7QP70aIkEYevI/L1VoeaKi0X05zrl/mkFKlZJB8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=C3u05KWRUG4yec6yjYc58jVUZqKqPra/xpCRYFkhi2pi73G7p5xYJt3avwhjC1pd5gHT2g6XMST7DkGiaRchRZYYa/jODcoZt4R+AhzCt86vNfdJ8r54ZScNvyU4Y+I8mpF49mKbuYWh9Qw+6o/yW3f8qclaMsyNAu3ATH2SDAs=;
X-YMail-OSG: p5tUyUsVM1nSNbno0XpFEzLZade1sG0k1LIN6NkNDDbP4ts
LfsdXeXxUn6OgEkvAzJFUKDvuIBVeFzZtgkksCNzN7YM7NYxZZELCIFArcbu
_mj1sx3mmaRRFlhLnDPO0Ud9acKn6RdXUuy0Z2D2THjsSnJnY9sU7qqlRMsY
RFxlusC6GZdc5g0kSlEJ9Q6m1NFt621vubnU3dlWx9BHYYswZA3GlYEoIQOZ
znu.EmXiL_e6NkgO6Xi3U8TlgxDHH.J2V.gjmQeJjgeleOz.cmjSiQf65.01
pFSPJQ.uJV2ZQQDmhoA_f4DIGHOLzIEM54oMAKodxlcGehFjRCB.Otx7qJ99
LLzSejt_DN_c3T7KOCmzn30gBLvM4NW04V6Q7K4N69QA7XOIUNPQflttOcPQ
QUh_J5vkppPwzXQ7X5ZwbRUsdfsHhuaz1XhXMvrY6vOWGj_WLL3kyxKoNNTD
o2PEbuViIVuMH9ocliCObq_Z7Olxp0coTXqA6vhkTd_030aE_Rclf5k8sFU.
neOYXj1nWJo0ZcsSoOLW7
Received: from [64.72.78.27] by web181404.mail.ne1.yahoo.com via HTTP; Mon, 10 Dec 2012 07:52:32 PST
X-Rocket-MIMEInfo: 001.001,DQoNClJlY29uZmlybSB5b3VyIEFkZHJlc3MsbW9iaWxlIGZvciBkZWxpdmVyeSBvZiB5b3VyIEFUTSBjYXJkICQxMC5NATABAQEB
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355154752.62957.YahooMailClassic@web181404.mail.ne1.yahoo.com>
Date: Mon, 10 Dec 2012 07:52:32 -0800 (PST)
From: DR FRANK COLLINS <web1xxxxx12000bvvv@att.net>
Reply-To: dcollins@kimo.com
Subject: PAYMENT VIA ATM CARD.

 
1 Comment

Posted by on 12/11/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“YAHOO MSN LOTTERY AWARD” yamsnltry@gmail.com

WARNING – Yahoo & MSN Lottery Scam

UPDATE: Same scammer, different scam — YAHOO MSN LOTTERY SCAM is also under Mrs Marika White <> web.office.76835@verizon.net <> mwlc@uneta.org — LOAN SCAM OFFER

Name & Email Address:  YAHOO MSN LOTTERY AWARD <> web.offfice_297938@verizon.net <> yamsnltry@gmail.com <>
Email: VIEW ATTACHMENT FILL ON HOW TO CLAIM YOUR WINNING PRICE. (I didn’t post the attached document)
HEADER:
Return-Path: <web.offfice_297938@verizon.net>
X-YahooFilteredBulk: 98.139.91.211
Received-SPF: neutral (98.139.91.211 is neither permitted nor denied by domain of verizon.net)
X-YMailISG: Zsyr_wQWLDuEOOR1NaKyY_oBKZ37LKhQ8E2oQYEySigknPqK k9D6cpNLJZG_BpWUYUrJK_13IbO6F2cwu0NdZUgFHsfdlBF2C_dY2LzlOFZm 1JHjYm2nt8r1TfUBQnHfb8I9AUlc_TORp9W.HgQYitOkE2hqUsGDkfrCuMDK DxM3_kxC1G0y9YuwlQ88LYK2N1cmfqnh6DyJr_rjxthFVpfPINYFlTZ9Gfuc ADYFdazto8WrGC8i9vrIWN9WZfWDwFONq5hJIJIIhqbaW8MfJoWeK2JIvkDP M1CYc0eevzZ_Adx1MDBBNelRnSr.vJSmUOwvJ6zQoWRlo4NgzOgFdBx8umEv jTO89nvzJD37UFWarpT59cdImqjiqLI0TB1E45jD15WCEX64ZB1Kln8hiaU4 .CCbyQpy7Ejsn7.W4n2lwvvlczK_R5o_vXJi3oCILudIaYnmwNt9EJ9DJmEZ mBMzXWFKyx9lH2nydX65fY_Q.JtjwJNlF4x2TjQlpMPTfrdKqwhWG_Klh3fR 3n63BOLG9BL8BQ.nLhlc1JvTvE22i4sUX9xyZKmLBFN8AZHjRfoLWiMkj2Xs sLXbSKZXrRdFzqI2_n0iCZVNHY6fDzOdBFg6QR8VysmkWs4dB4wAIeQ69Rmh Af72L8BXmXvs8.HrRPOsQnF8u524lck_LJJRpcmkMuAO54uGy2pwm6caB9FS sKQZOWwp_U8QkDL8N98rJG7xaMUkN1R64dRNvetL6mzCosxKo2FzICda_wHA LHsgGzNHEJ2sNFenGGjuJbiytfFEMpBH3yJUhO1vVKsdm7z60MbhrJRySNOM XOdXnWKdvCDWOQR0HSaBsIRIyxvGvenRMSXWDT4LasvnebD1tBJPseZsrBsZ YHg7hxAgbAuOHrFh.mgMe4rdRKr2xPdD3YGkatTu8t57eiZTMB8W63zW9SpF PyHX6f_tzIye0e8_7v91nVqSdqtWSJxNXsWw0zjqbU5A27.pbD_jLO3C7BmN cTDixi3lrIhNF.6uxxmXfrMY0iJDLZFCpszrUyaLkj2J_gbXiJ5A4APr0u6H jN90S41j9NjeKltQgIesZccd8ai38FkuFPPSgVQg7gAKeTJ8.HhXqnyNmKag do1r6x.wQWJvpjyX1cERpQiFWYG1ll52U8vm_s9sL1QxfzpknziQ0ovd3EFy tn10R8UwjtbP2uQW30npI62WZ1n.THsyrN7bAUHzDprK4z6cagfARVXtLyb0 0PCwWTmXMmOpJF.REjy.0wacWzDKexj8Xyk_a5lmm1VsUHBR7W3nsMvGsKVr cXgYKVt3
X-Originating-IP: [98.139.91.211]
Authentication-Results: mta1233.mail.sk1.yahoo.com from=verizon.net; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm16-vm1.bullet.mail.sp2.yahoo.com) (98.139.91.211) by mta1233.mail.sk1.yahoo.com with SMTP; Thu, 01 Nov 2012 09:43:22 -0700
Received: from [72.30.22.77] by nm16.bullet.mail.sp2.yahoo.com with NNFMP; 01 Nov 2012 16:43:19 -0000
Received: from [98.139.44.72] by tm11.bullet.mail.sp2.yahoo.com with NNFMP; 01 Nov 2012 16:43:19 -0000
Received: from [127.0.0.1] by omp1009.access.mail.sp2.yahoo.com with NNFMP; 01 Nov 2012 16:43:19 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 544878.38546.bm@omp1009.access.mail.sp2.yahoo.com
Received: (qmail 38451 invoked by uid 60001); 1 Nov 2012 16:43:18 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351788198; bh=+BQMkEUCkDI2VtC72aG597OihJthi8rb/rYyQFpeEQg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=aNHRB8WdCQEwnQg70kLRCvCEUFE+uHv8IJac3i7Dk8S2EgUmO+DBnGU+YRcgpwpX9oh4Pvxd4VrXxjcu838HWEjbI+sEy1kl/e6p+1fJdpav3oqdBwpxR7InNnGP7+hSWL7I1I4P0bSC6LZybpaVqwkOr1DbuhBSJ5XCTIAgfCs=
X-YMail-OSG: 9GmeWBYVM1m_z1iUg7uZUlUSFiIeKFpvpN8AJCtmVieCHI2 cRuIdKT2YMYQZMDD9xbq4TFvWF3tJ4NHMAEiKveJnqIeEKkxxE9_0pR_MJlt aKNENjj12NPTRtBewD9cSPqW0bYw8JunmrgvPpiQmGvp4D9gLMtAWHLy0uKC DmN9_B77Yj0w0E1dfN.gWVUc6KZM0NRqqfdxrMQXidqH__p1bdXcjmRsG36T I4BF68LKdh.kJP1BnQThneGDj33t8kfPbES0EaVGUzKdBG_7O9AgQJ86VceJ RMGNiXwJ.LXdTcogyxq5QHA3663yCoqxlHZDIup2aJWpAurwfyp.Fvs5UpJ8 0Xztz9spbZJsk2fd.H6tkCR1T0EdP8zrUb7mZ2EIv9awZAPEETGIzorem9Vf XAmAXiAV5gprc5OJ3hN9BecbpInTiwr.lyB1Ag71B9Zutr5roGfRivZ6hZMq sVdtlmiPfdqX1OiFr7aNWocK2oa20ZPBl0tdv5nIFlm60c03bBHbt_GmsKf8 exVl4ZdMtLmPbYfe_DnzZ2HDAf5LhuMEoMHZ51f05
Received: from [72.64.146.136] by web84506.mail.ne1.yahoo.com via HTTP; Thu, 01 Nov 2012 09:43:18 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1351788198.35520.YahooMailClassic@web84506.mail.ne1.yahoo.com>
Date: Thu, 1 Nov 2012 09:43:18 -0700 (PDT)
From:
YAHOO MSN LOTTERY AWARD web.offfice_297938@verizon.net
Reply-To: yamsnltry@gmail.com
Subject: Fw: YAHOO MSN AWARD LOTTERY PROMO SEPTEMBER 2012 DRAWN

98.138.90.254 ← Project Honey Pot has detected malicious behavior from this IP address. This address has also been reported by multiple online users and websites. Nigerian 419 spam activity being sent from this IP

OTHER SCAMMERS SENDING FROM THIS IP: 98.138.91.174
From: Xmas Loan Offer at 3% <web.office.nextlin@att.net>
Subject: none/blank
From: Yahoo Msn Award <web.office_689374@verizon.net>
Subject: none/blank
From: “Frank Jimmy Loans Co”  web.office.003-10@rogers.
Subject: none/blank
From: Cons <00o11constance@att.net>
Subject: hi
From: John Vidyapin <JohnVidyapin25@rocketmail.com>
Subject: Re:
From: “Lt. General Kenny”<sssssgfee@hotmail.com>
Subject: URGENT REPLY
From: Kafando Idriss <kafandoidriss@gmail.com>
Subject: VERY URGENT CALL FOR MORE INFORMATION +226 75 44 8
From: “Ukos” <stolze016@yahoo.dk>
Subject: Gvzdjos Hzcgkotx FnquyBycfjosw Wjnr JruycgPtxbfjn
From: 李���姐
Subject: =?gb2312?B?xNDFriDD++VsIc/Iv7TYmyAg1Nm4tuVYIWd1Y2N=?
From: Victoria mandi <victoria01mandi@yahoo.com>
Subject: Hallo mijn liefste
From: zvgcdby <zengchuanxedm@yahoo.cn>
Subject: 2011年11月28日17时47分53
From: “a_just_my_world@yahoo.com” <a_just_my_world@yahoo
Subject: Search for Anyone’s Arrest Record
From: wggi <hanchoujwxv@yahoo.cn>
Subject: |散頭|辦
From: “Mrs. Sharon Crawford” <sharoncrwfrd1191@skymail.mn
Subject: Scam Victim Compensation Alert, Open Attachment To
From: Sgt JASON CAMPBELL <web.jasoncam104444@att.net>
Subject: Urgent Mail From Sgt Jason Campbell.
From: mercyjohnson <lindabenbella@yahoo.com>
Subject: Good day my Love
From: “bittapain@yahoo.com” <bittapain@yahoo.com>
Subject: FWD: You have a secret admirer – GUESS WHO
From:  torn_016@yahoo.com <torn_016@yahoo.com>
Subject: FW: Money
From: ahmad2joachimugkt <ahmad2joachimugkt@yahoo.com>
Subject: FW:GreatLoveForEveryMan! did at Court though she w
From: ionsas chrograde <chrogradeille757@yahoo.com>
Subject: genevievebuehl, Verifizierte Online Swissapotheke
From: glory adams <weboo444@att.net>
Subject: Ol
From: “Rev.John Ibe” <revibejohn1@live.com>
Subject: Attention: Honorable Beneficiary
From: Idris <mridrislukman@gmail.com>
Subject: BANK TRANSFER VIEW ATTACHMENT FOR DETAILS

Associated SPAM IPs
89.122.224.52 | HSD
209.160.72.139 | HS
207.150.196.50 | HS
208.66.195.3 | H
207.150.194.146 | HS
173.45.70.178 | HSD
208.53.147.89 | H
24.64.199.108 | HS
115.124.113.132 | HS
66.199.236.50 | H
74.86.209.74 | H
208.101.44.3 | H
74.124.192.3 | H
216.40.220.34 | H
207.150.196.55 | HS
115.124.113.133 | HS
173.45.74.234 | HS
221.218.114.138 | HS
70.85.113.242 | H
76.64.126.197 | H
58.248.29.247 | H
58.248.29.217 | H
64.231.136.67 | H
74.12.60.71 | H
117.205.85.130 | H
91.105.35.138 | H
75.125.47.162 | HSDW
41.82.95.220 | HS
207.150.196.48 | HS

 
1 Comment

Posted by on 11/14/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , ,

 
%d bloggers like this: