RSS

Tag Archives: Yahoo

Nigerian Lotto Scammers

WARNING: LOTTERY SCAM – NIGERIAN 419 SCAMMER

This fraudster also attempts to fraud other people, below are more scams including the Euro Millions Lotto Internation Scam and Gazprom Award Final Notification

 

EMAIL: Confirmed Winning Bruxelles Batch No: 15/3820/MGL
REPLY TO EMAIL: belgiumontanagency@aim.com<mailto:belgiumontanagency@aol.com>
DEAR WINNER
Following the official publication of results of the E-mail electronic On-line Sweepstakes organized by Belgium Montana Lotterij BE in conjunction with the foundation promoting software products in Belgium, we are pleased to inform you that your electronic email address emerged as one of the on-line winning emails in the 1st category held on June the 26th of October 2012: Your email address was attached to a cash award of $1,900.000.00 (One Million Nine Hundred Thousand Dollars), you are advice to contact the processing officer immediately upon receipt of this message.

Contact the claim agents: FOREIGN TRANSFER MANAGER
CONTACT: Mr. Dem Van Putt
CITY/ COUNTRY: Bruxelles Belgium.
TEL:+32-492-521-568 /+1132-492-521-568
Reply to Email: belgiumontanagency@aim.com<mailto:belgiumontanagency@aol.com>

HEADER:
Return-Path: <CWatson@olivetcollege.edu>
X-YahooFilteredBulk: 24.56.220.209
Received-SPF: pass (domain of olivetcollege.edu designates 24.56.220.209 as permitted sender)
X-YMailISG: A0sEKe8WLDul_BGQi.K.uZmoEs8JCU24xCAgvz6CxgQrjsSE 06ca4XCQazKTZny6j6ZyAIYAVYKjHaRaR_6iGOrruKNV9Fue8SL.eUavluab VUcZiT9lfgfL07FFUbKh_95MEOvmCIprS8c4gzoV12YqDprucalFt20ONFOY lLZ6Rj7XpvRxuM6EvgbAISyjMiLPSLpo0rgTzPGEa6LWj3tPAdJvqAwd415O Fgwr2z9Tz_EiKygyOZPOqe.vZb9ZliS11NsVjlHhXoB98jXcc1BaaY2CU0op tNKYafUo6s_GOv1mLoPwkNkuxtUoVuBK4AastDsM1ctBHouGweLWreXJRzH4 Ztr2ri2VBkT6rFTGyJ3spoj46ZnskJjHhZ3MWfQYSVV6hl4QZo.eemcb4RaW cZB45BAJ7nmo30bHEZmtCKxCPto7IXPymDiX9nmJjeCEsrD3H3PT4wJuoNQ6 Bl_6XlZZiQ7eqxqhw.ptLbMzDPeP6GuSBhI0oRm6c2sV11pAYlJzDoSyIxhG 9J7k_2qjq5OR435_crVzDhQW8BSfTyzh5TQeckuJs5.9beAKQnyE_ICUK9ok kqcAV7pZyz5KKf2d00h6kFEoDHWLFdfe3H_3rpGPJnm9UlAujMOU3E38dNr9 CMvejilbI0WdtY8VoLZEvc0_M.LuLPzjG2LyexYzgDBzFTnaxJFNlNKxrH66 NvYAgqijNGFyaiu9cx1JIMht4vnTmPKSHg4wFERL7SWaueBPsDf3hjFWDpfn wSk4UrGSX1COMYEZOMZRfoFX_eKFsyTPe0ir3rgaFN01L9KB1ysl1vPNJDZ0 TnrwCjEc1wXNGIDGrP5i6N8BzSGYBlZA5xqSu1XDGbOGq4EW2VWKKri1hJPX ZcFXyp0_jzs9uy2EBmb6MIQvAa8y70O8wsllG3rT07GnnLYG.obl4YG_A2Xk NzxXo5NtQoryE.AaWbGnLIRhnjlmOR907kITMvXUO2qRtzG0VRL.VCUYdOMV kW.IObyh4MnIIdILkRDxuMlcht2UsSuo_svZ2vh8d67R3SjYFU56PcVZ4YTX CR6aEvShves4yU7SkamhEWMxgeAfRM3_oZu70qn7aeU1sUm6qkN5NmEziW91 FTU8qZtLFV4m9T4MuLuM519gDqilGOkYrtfnK8UnggRclyOBzhpeS_fD1hZ. fFGpUAnIg.7JncCRKQXeBCALIDNctAhW0xEJDotYHtkHdv2jlQ3icAfALuKg iWaRBdyN7B2npDRPo0.U_75Ya4joKFVkZtAQPYX1eyASqMY51wNIsNGpw90U 76YAyW2Lcpj5xGynIF3cvo2.QBkhl0JbZt8vkV7cHgCwR1QjYgeGLAMJBnV8 RoK6oH7XrgxFgK1mUp_TKXiAfV0Ou6SsiGVCfZDZ..8exQwwwaZwCSda0Ubk fP48V3slbPFInXgoLLX.b_c7SVnMn9q7HZi2bLDuvgYK2omRDaDu6l7Q46gs tCHjklo_VkB32cmbGquzPqzFb96gzK_KAA_slUvsftvE74Wzp.47epn.ZThq dt2kYgC1ui3z5HZVSQDePdpP8.LIiddVlrQ58MxfOUBQgzOhVmwYrnUg9h06 56q2xdV8bN4zgiCjm31e_QN0Ld.Yxu72DYrz0ZeDgip2zHZRiwOKofsoCHB7 fVy5hvqPrhljW2EPLymZyWD4auer1d7bki7fcJVkb7QXdbPwx651rUBwK1YG KOrL4G644w–
X-Originating-IP: [24.56.220.209]
Authentication-Results: mta1203.mail.bf1.yahoo.com from=Olivetcollege.edu; domainkeys=neutral (no sig); from=Olivetcollege.edu; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.olivetcollege.edu) (24.56.220.209) by mta1203.mail.bf1.yahoo.com with SMTP; Fri, 02 Nov 2012 06:07:54 -0700
Received: from OC-MAIL-SRV3.OlivetCollege.edu ([0000:0000:0000:0000:0000:0000:0.0.0.1]) by oc-mail-srv2.OlivetCollege.edu ([10.10.2.7]) with mapi; Fri, 2 Nov 2012 07:46:24 -0400
From:
Cassandra N Watson <CWatson@Olivetcollege.edu>
To: “win@helpdesk.be” <win@helpdesk.be>
CC: “win@helpdesk.be” <win@helpdesk.be>
Date: Fri, 2 Nov 2012 07:46:03 -0400
Subject: Confirmed Winning Bruxelles Batch No: 15/3820/MGL
Thread-Topic: Confirmed Winning Bruxelles Batch No: 15/3820/MGL
Thread-Index: AQHNuO+u+TArXi6wlkejz5ONMyf2eA==
Message-ID: <8DD2F198C17DE948A7ACFE632AAC637D01313917E68C@OC-MAIL-SRV3.OlivetCollege.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: multipart/mixed; boundary=”_002_8DD2F198C17DE948A7ACFE632AAC637D01313917E68COCMAILSRV3O_”
MIME-Version: 1.0
Content-Length: 266666

Cassandra N Watson <> CWatson@Olivetcollege.edu <> win@helpdesk.be <> belgiumontanagency@aim.com <> belgiumontanagency@aol.com <>

SAME SCAMMER, DIFFERENT SCAM’S

Lane R Duckworth – LDuckworth@olivetcollege.edu <> LDuckworth@Olivetcollege.edu <> gzpm.access@mail.mn

EMAIL: GAZPROM OIL COMPANY
MALAYSIA PAYOUT CENTER
33114 JALAN KIA PENG
50422 KUALA LUMPUR, MALAYSIA
Your Payment of $920,000.00 USD in the on-going Gazprom Oil & Gas Poverty Alleviation Program has now been aprroved by our head office in russia. Do Re-confirm your claims datas by providing the below informations Via Email at <gzpm.access@mail.mn>
1) Your Full Name.
2) Phone Number.
3) Profession,
4) Age
5) marital status.
6) Winning E-mail Address
7) Any form of identification

NOTE: The required Datas should be sent to the cliams processing office at (gzpm.access@mail.mn) for immidiate confirmation and payment approval

Please take special note of the given contact email address (gzpm.access@mail.mn) OR Dail +601-62453284 for any inquiries on the above message.

Yours truly,
Lane R Duckworth
(Announcer)

This Nigerian scammer also attempted to scam another internet user in a Euro Millions Lotto Winner International Program SCAM

Email-address biglotta1@aim.com <> cfoster@Olivetcollege.edu <> submissions@HUN1P0T

The header is right below, to see the actual email please click Scamdex.

return-path:     <cfoster@Olivetcollege.edu>
envelope-to:     submissions@HUN1P0T
delivery-date:     Fri, 05 Oct 2012 05:37:31 -0700
received:
from mail.olivetcollege.edu ([24.56.220.209]:48573)by lester.HUN1P0T with esmtps (TLSv1:RC4-MD5:128)(Exim 4.77)(envelope-from <cfoster@Olivetcollege.edu>)id 1TK79n-00048u-7ufor submissions@HUN1P0T; Fri, 05 Oct 2012 05:37:31 -0700
from OC-MAIL-SRV3.OlivetCollege.edu([0000:0000:0000:0000:0000:0000:0.0.0.1]) by oc-mail-srv2.OlivetCollege.edu([10.10.2.7]) with mapi; Fri, 5 Oct 2012 08:36:42 -0400
from:     “Chad T. Foster” <cfoster@Olivetcollege.edu>
date:     Fri, 5 Oct 2012 08:37:25 -0400
subject:     ticket Number:008-115-627-609
thread-topic:     ticket Number:008-115-627-609
thread-index:     AQHNovYSfu9mxCi5u0a75i24aSfonQ==
message-id:     <8DD2F198C17DE948A7ACFE632AAC637D012F2316E4CC@OC-MAIL-SRV3.OlivetCollege.edu>
accept-language:     en-US
content-language:     en-US
acceptlanguage:     en-US
content-type:     text/plain; charset=”Windows-1252″
content-transfer-encoding:     quoted-printable

 

Another promo lottery scam by whats-his-face

X-VirusScanner: McAfee
Return-Path: <trogers@Olivetcollege.edu>
Received: from mm02.hccanet.org ([10.245.1.32] verified)
  by hccanet.org (CommuniGate Pro SMTP 5.3.4)
  with ESMTP id 145232440 for mail_treas@hccanet.org; Sun, 04 Mar 2012 18:41:27 -0500
Received: from smtp1.esu.k12.oh.us ([208.108.11.226]) by mm02.hccanet.org
	id <B4f53fede0000>; Sun, 04 Mar 2012 18:46:38 -0500
Received: from mail.olivetcollege.edu ([24.56.220.209])
  by smtp1.esu.k12.oh.us with ESMTP/TLS/RC4-MD5; 04 Mar 2012 18:46:37 -0500
Received: from oc-mail-srv1.OlivetCollege.edu ([10.10.2.6]) by
 oc-mail-srv2.OlivetCollege.edu ([10.10.2.7]) with mapi; Sun, 4 Mar 2012
 18:45:57 -0500
From: Tim Rogers <trogers@Olivetcollege.edu>
Date: Sun, 4 Mar 2012 18:45:56 -0500
Subject: Promo Email; winingclam_012@w.cn 
Thread-Topic: Promo Email; winingclam_012@w.cn 
Thread-Index: AQHM+mDx+qHMNFAFNkqh9WKxT77U4w==
Message-ID: <4E9182140A8946498C13E3BE53DFFB57058BBABEF6@oc-mail-srv1.OlivetCollege.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0

Augustin <traakdna_1952@ASA-G.NET>

222.47.183.24 associated havester to the IP 24.56.220.209
Fraud Sent From IP address – 24.56.220.209
From: Brooke A Sullivan – BSullivan@Olivetcollege.edu
Subject: Hello
From: Brandon Medlen – BMedlen@Olivetcollege.edu
Subject: Geachte klant
From: Alexander B Bailey – ABailey@Olivetcollege.edu
Subject: Geachte klant
From: Billyle T Alman – BAlman@Olivetcollege.edu
Subject: Geachte klant
From: Blake A Krum – BKrum@Olivetcollege.edu
Subject: Geachte klant
From: Charlie M Adams – CMAdams@Olivetcollege.edu
Subject: Geachte klant
From: Alexander B Bailey – ABailey@Olivetcollege.edu
Subject: Hallo liebe
From: Braelyn M Ocwieja – BOcwieja@Olivetcollege.edu
Subject: Geachte klant
FromCassandra N Watson <CWatson@Olivetcollege.edu>
Subject: Hall
From: Bryce W Baase – BBaase@Olivetcollege.edu
Subject: Hall
From: Brittnee E Johnson – BJohnson@Olivetcollege.edu
Subject: This Message is From the Administrator Desk
 
Leave a comment

Posted by on 11/23/2012 in Lottery Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

“yahoo Inc”

WARNING: YAHOO LOTTERY SCAM – ADVANCE FEE FRAUD

UPDATE: Digging up information on this header and posting it in the search engine, for some reason, always brings me to another scammer I posted up weeks ago. ” Juliana Roman Medina ” with the email addresses julianar@pijaos.udea.edu.co <> fedexdeliverydesk@yahoo.cn IP’s used: 200.24.31.84 <> 41.138.172.174 (location Nigeria) — For more information on this scammer, who also sent a lottery scam and is believed to be the same scammer(s) as this post – Click here

NAME/EMAIL-ADDRESS:  Yahoo Inc <> ruthy_financial@yahoo.co.uk <> marystokesuk@gmail.com <>
EMAIL:
WINNING ALERT!!!
Yahoo  Awards Center
124 Stock port Road, Long sight,
Manchester M60 2DB – United Kingdom.
THIS IS FOR YOU!!!
This is to inform you that your email identity has emerged as one of the lucky winner of YAHOO ONLINE free promotion  of  GBP150,000.00  (ONE HUNDRED AND FIFTY THOUSAND GREAT BRITISH POUNDS STERLING ONLY ) for the just concluded online sweepstakes drawn in London recently.
In appreciation to yahoo,hotmail and gmail users! we gathered all the e-mail addresses of the people that are active online during during the draw and among the millions that subscribed to different email addresses and others through Electronic Balloting System (E.B.S) without the candidates applying for it .
PAYMENT OF PRIZE AND CLAIM
You are required to contact our Legal attorney in United Kingdom for representative.Barr Mrs. Mary Stokes
E-MAIL: marystokesuk@gmail.com
TEL: +447024038948
Your winners numbersYAH NO: 498876
DRAW TCK NO: 11098322
E-MAIL POSS: 234876
CATEGORY B: INDEX
SECRET WIN CODE: B32000Congratulations once again.

No virus found in this incoming message.
Checked by AVG – www.avg.com
HEADER: 
Return-Path: <ruthy_financial@yahoo.co.uk>
X-YahooFilteredBulk: 77.238.189.58
Received-SPF: none (domain of yahoo.co.uk does not designate permitted sender hosts)
X-YMailISG: NdS_pu4WLDsNaT3akZ7yPUDozjg1SwutxbxaG4luget.NmUV JAxEPSkjTsUOKhJCaMal.mbjPfmNWLyFXD7.TLbs2YZ5eIyLo.zeprF0yFcG x5vMaZZn05FfxxSba.amT2oGeuZ8SJbWx__ctHkvFOXJKz1fYjsW5RLt0XPH mkvc84ERic.I.V7q8sjMcRkk5BTrt_HFJTngvD0Jz78LiGAKqQU.CwHFLjF_ fCmmO5h.1LLfd.yDlMExYPz6GkeoiqTvJWvvP.SBgDUAm6PfjZak4gnQVUCf sLYWZf0tExv3bp42VphqsqjxZoAEmW4V0fhMYlHEYAJYjPyI3PWjGAbGkSVO vuRTxYFc3.NdAg1DdwtUzh0.xtA64dMzkn_1AfRWNsVECC1Hj4zX3lX8mpq1 aeltHMn5kL3ltEf66.pPp2fs0dyBpVZPzXaWSWH9LxX5JjiH3kS0nN6i2IS0 JTHXmRKtxkXpr8svfJpXQJLB.Fw1l1WYg8MR0y16187p3RSxcR8g.8iPjITg DqO9cm542tUZqnB8eselzVISzwJ7NQKHHpZ1ofSgowc8tehzjb8JszLH2QpE YidhUsXq_JS3lcH0r5X0dx52yLsUv0_Fjy7XvoSXtkv7phso2SOgHwV00iBq qKdi1Vj6OJQdnyUZyAmw.OPqB5poJp_s9p1TQm5tJuRCRksZW2QplD9O35bJ cb6QVwPsKnpTW59y.Y8pi8l2Y5Kw2UWCniZSb1I.Qom7dhoPZ4j_igAAUdIS R_j4.cDW.AR6upgTImY8zaWXAHXhPQZ2AR1ySBg9ha5WZIn6MnmDULjwndxt m0_oFyouUpz5tB4gFXNdp6p8sERAFKMXUfTW72M4oFXAqvWLnbb_S4td2jFq IHAHiGLurlu8OKNG3cddt4A6DBKOrvQZD3lRsXBSftJ8Qw0UNCYmHucneREn WDLmW3vthoLoes7_1LesMlHF2tBw6Vn7Bp7DXl1iiUBbs_kia5EugPumZ6pH rslpq7qR2LfYUoy2BHr7giAFXBoOgzhIJtDJ.Z.rClmM0jMahpESa.FpKzWx yA3tdHNkmVkxBAv6sSjEwAI26Lin92B8IrF2FJoIYAdsGdOz5yiO7yt03sqg ULk57hm94aSyYxqXrOQRsTp2meZgCDOyXI8WCnkdjz2pgdC9Et5M0TObolE7 KW8KmgGNz3oOpwkWbhwekiTRDeNrl4q9BDsnE0nUMcStPwTbb3khwcPlXHIM OTFXwn1ri0HpplotgDk6Ikkf_7PFRSmYzbtGIbp9RtXKaKnloZbI0mEXaYu6 v_5kwAdsNizWUoKrjkUWzGU7DJABRHjpN5UdrXfD3AKS00aoYFBi23Qh3LtP 9eoYgSWyi0.ALKIlExRcq76mMqA-
X-Originating-IP: [77.238.189.58]
Authentication-Results: mta1076.mail.gq1.yahoo.com from=yahoo.co.uk; domainkeys=pass (ok); from=yahoo.co.uk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm1.bullet.mail.ird.yahoo.com) (77.238.189.58) by mta1076.mail.gq1.yahoo.com with SMTP; Mon, 19 Nov 2012 04:13:05 -0800
Received: from [212.82.105.244] by nm1.bullet.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 12:13:02 -0000
Received: from [212.82.108.123] by tm16.bullet.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 12:13:01 -0000
Received: from [127.0.0.1] by omp1032.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 12:13:01 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 927814.13983.bm@omp1032.mail.ird.yahoo.com
Received: (qmail 51996 invoked by uid 60001); 19 Nov 2012 12:13:01 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1353327181; bh=iA41e3cptztcs4OfqEqg3P1UU05elM2wHBJidEewk4I=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=BA0V/lvNb3g8ICmqCmJPbBUDMASq3g7dO9gYsGBxwvNiQfiJmdMmYdtfretP62Y3YdscvpQaL39vLARuPlXvN99RIZLN0s0gVefV8goLjAhV7ELbNIaUrPuAjvE4BvIbcgvuf9zMo1LnYv95FX9O5zgHofwxOTYtFOfiVy5uCaw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=epvk28xWMC/n2L61OGw1a7wjmcirfFCQnXq9wxXrH+mT3HsPQ5dT6BjQdZywvoxVeHdU6StErnnbkFa5TuOf6e0WM+03jfkrprNKUIu3S3UIzeHVWQWWpt2GVyqgGtLdOVSdOpIeVPvXhmwpZMw+17LzolAjKfNQhLjniuulqbc=;
X-YMail-OSG: 6ok6V18VM1miJbWwZPtPmm8sgOI_RgxNr1NGtFmHZw90Mvv 6D7Q-
Received: from [193.164.133.72] by web29802.mail.ird.yahoo.com via HTTP; Mon, 19 Nov 2012 12:13:00 GMT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353327180.51095.YahooMailClassic@web29802.mail.ird.yahoo.com>
Date: Mon, 19 Nov 2012 12:13:00 +0000 (GMT)
From: yahoo Inc <ruthy_financial@yahoo.co.uk>
Subject: “”””” Winning Alert ,from Yahoo Inc! ( Check your mail you have a massage)”””””””””””
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”478945831-1873120208-1353327180=:51095″
Content-Length: 23720

UPDATE: My email server detected viruses from this incoming email received from ‘ Mary Stokes ‘ .. A link was also detected (us.i1(dot)yimg(dot)com/us/yimg(slash)com/i/us/nt/ma/ma-mail-cl_1(dot)g=)

______________________________

The below header is also Mary Stokes scammer pretending to be FBI office in an inheritance scam. Email addresses used: barristernecter@yahoo.fr – REPLY-TO-ADDRESS: offilcefile1905@superposta.com – – – This Nigerian scammer is blacklisted on multiple websites and has been reported under multiple fake addresses.  Click here for more information on this inheritance scam

X-Originating-IP: [203.188.201.151]
Authentication-Results: mta1091.mail.ac4.yahoo.com from=superposta.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm13-vm5.bullet.mail.tp2.yahoo.com) (203.188.201.151) by mta1091.mail.ac4.yahoo.com with SMTP; Sat, 17 Nov 2012 02:43:59 -0800
Received: from [203.188.200.142] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 17 Nov 2012 10:43:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 977911.45325.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 39060 invoked by uid 60001); 17 Nov 2012 10:43:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353149034; bh=4NHRjGox1llxlGTpuwwzaXz2wAEyMSFQlVe/RepWfVQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=P0DhZFg9Mjj05/vqaDc0igv+GPAlNxBBckhxEzU4PJ/OEqkdNXv8cHYOGIrX06GRSxiYBDEXksxF+7O6itMLQryiu63e3X/TBdnGMXPpsJmwW89Nu0b5IpbVDCyBNfuzLVNzU62iHNFjxppWoL8m/2ohhLEweTQDE86CwjMFUjc=
X-YMail-OSG: UNddAlUVM1kvGGStE1FY34uiMeKn2clDYRgV8R.tDHiC3Gd LJa0arT0C
Received: from [41.223.248.96] by web92408.mail.cnh.yahoo.com via HTTP; Sat, 17 Nov 2012 18:43:53 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353149033.34956.YahooMailClassic@web92408.mail.cnh.yahoo.com>
Date: Sat, 17 Nov 2012 18:43:53 +0800 (CST)
From:
FBI OFFICE <offilcefile1905@superposta.com>
Reply-To: barristernecter@yahoo.fr
Subject: YOUR ATM MASTER CARD OF 1.5MILLION

The names, email addresses, IPs/host names below are sent out by Nigerian scammers using the same host/DNS/ETC as ‘ Mary Stokes ‘ pretending to be the Yahoo inc lottery personal above. If you’ve googled any of the information you see here, it’s a SCAM!

Received: from nm19-vm0.bullet.mail.ird.yahoo.com ([77.238.189.92])
  Tue, 18 Sep 2012 15:25:17 -0700
Received: from [212.82.105.245] by nm19.bullet.mail.ird.yahoo.com with NNFMP;
farid_abdul01
41.203.225.136 by web29802.mail.ird.yahoo.com
82.10.220.112 by web29802.mail.ird.yahoo.com
41.138.109.92 (same host as the ones above.)
82.227.153.207 by web29802.mail.ird.yahoo.com
80.87.92.58 by web29802.mail.ird.yahoo.com
laura_deng@yahoo.com
184.171.165.50 by web29803.mail.ird.yahoo.com
d.kabori@live.fr
Dericah Riceh  dericah_rice5@yahoo.fr
jose_riceh@hotmail.com 
41.138.89.38 by web29802.mail.ird.yahoo.com
41.190.88.206 by web29802.mail.ird.yahoo.com

 18 Sep 2012 22:25:16 -0000
Received: from [212.82.108.252] by tm17.bullet.mail.ird.yahoo.com with NNFMP;

847439.61289.bm@omp1017.mail.ird.yahoo.com
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Mrs. Mercy Yoon” lottery_y6777@yahoo.co.jp

LOTTERY SCAM – NIGERIAN 419 SCAMMER

 
Name & Email-Address:  Mrs Mercy Yoon <> webxxoffice2224555@att.net <> lottery_y6777@yahoo.co.jp
 
EMAIL: OPEN THE ATTACHED FILED YAHOO THAILAND LOTTERY 2012 (I didn’t post the file on here)
 
HEADER:
Return-Path:   <webxxoffice2224555@att.net>
X-YahooFilteredBulk:   98.139.53.197
Received-SPF:   none (domain of att.net does not designate permitted sender hosts)
X-YMailISG:   UlDq48gWLDupP8OssTJs7q1AcaZr7K9RTqneC18BEo2DIIPH AdBy8SZOgpHEB4M3cBzkKyi_VqeBLOMink6AizGBzf.ErxeB6_Y4PH66.RBP mVsOepSUmP25C0fS_hl9RB_6uyVTtbvuq57shZjXsnXeAj60D14B42VdJnD. dnD1XgdSM_5yOKwZIViRMoJs2Q9qeJ1ogDGSj9bj_mZAgugT746c2edz0JHk qu6d7ckPa_Wll0vx0Q3iIK3rmY4KVe9JBUk4cZ8whJcANZXMqIXAAKjPRRpy A4dc4CGmYadW_4GlFjDcdoRTlJFnN9dPIS_MYnRpD_TToopEziQmo45pGwzc m3HAEbcexf5rAAKZ2KE9MeCjv_lqyV7W7xJB.OH41OVfejqcNIH99QD7bPCg GPLess0b2dHoqt4aIC1w3zsHD5Ao1wpp7TbXDOOivYA8qjOmEW4Qx4SyrPTQ oZZ.AbUeW0OKlrcPCcyj5JfidGQKKzapIBHa4lixzOyOjPp_mxB_C.WYqqn_ 08yTITtJslgK81gsi_5XaB8BFNSQAiqrHRmb44qz.FWDx_37rvEiJYg5pPC2 OEXIO4w2UWzKGgg8tLhdF_Mb_zUp2Pztc0cOx_N3TNTpgrGYM168fZhIfkVn yBlFB_zR_UowZZ4noEg6hE4Js3AhG.qkrdEfd7W1UqXDyaeNLJXZaLUijkyu mZyWiA5FwbaLsk_WaBRv2kiggDkEHndtSykJjgSVxo.zFOCCt.DS2gWmQCSN AcCV1rfIFQcJ6235vowl4wjWi7a7Y6HvU4uHCR57qVbHvxk.y_YRBifexbGW cQhRsNv7loUKfQYNMOeBZMT_QvEleWd88PTNpVibD1Y7xKtylA1uinv49z_Q JcKGJLx9K.gthQlZHP5yPsO41xJ68MZ2bDpfC9R2TZey4T.ZG6GSBHQrcl5E HW3xK4cjcULfRtET3znLx4Y25zvPcPp7A_5JDs_VsC9414TduyG3WNthN41a cHaEx.RkpnbV3FgzTFN9Hvc9RJIcbiNJll4EtJlDiih0Gfpv0xdXNhwdSbV_ 1UscOWgBEumsZShTcII.juuXD13hXZWHXSe2cFRKLBCaJXROHrctxz7_p2cL 4SJuktzk300XawADPKM0wksw3kLHVcywWm_T2uJwZlOoO2wpzvlJTQqs2KY1 solhj.OXYsw2.l3qfnC5PcW1pN7zNgnR531ScL3k4KFbPH8IaGvozwDsLR8l FaUl4Fw30onhsuKaHGQOTo0vXf05zGmZ.mYy2DqXjSXFWAZ2cs6_iiEkBj79 DbVCcMNo9mgGFu3IILsGrtq12lXhhl3aqg–
X-Originating-IP:   [98.139.53.197]
Authentication-Results:   mta1351.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm11-vm1.bullet.mail.ac4.yahoo.com) (98.139.53.197) by mta1351.mail.bf1.yahoo.com with SMTP; Sat, 10 Nov 2012 06:56:05 -0800
Received:   from [98.139.52.191] by nm11.bullet.mail.ac4.yahoo.com with NNFMP; 10 Nov 2012 14:56:05 -0000
Received:   from [66.94.237.103] by tm4.bullet.mail.ac4.yahoo.com with NNFMP; 10 Nov 2012 14:56:05 -0000
Received:   from [127.0.0.1] by omp1008.access.mail.mud.yahoo.com with NNFMP; 10 Nov 2012 14:56:05 -0000
X-Yahoo-Newman-Property:   ymail-5
X-Yahoo-Newman-Id:   120633.61863.bm@omp1008.access.mail.mud.yahoo.com
Received:   (qmail 18388 invoked by uid 60001); 10 Nov 2012 14:56:04 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1352559364; bh=FTlPdgAYqmSsVwyCPeg9J7GCrnI2sUrwzhLWtdoYscI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=mW9u0hXt4kC8ih4K8s9Nw3res+FMkgSVgMNijnivWVjGOlilbQLHQG9P8hQ9pMG+O7YhykviyoeXtblOX1BS6E9+ECH0U2/mdEvygWuWHIwdsbUIcc9t1E/NXZNiL2FxC8q0Lvss/Zs+lOLmQlzhfsAb9iqDUhtZxbVQNpJ+v4w=
DomainKey-Signature:   a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=xUbEdSaxP13Hp5nbp+HaDUxgzO1owNRSvs8SsRehQr075Vwt5z83MlQd4Mt1T1AO8MYYV4TOwV4ckubNXjqZmfUw0ypkESZg6OoEvCQJxwwVlnKpBwK9jYu83guxOlhddcfYR72zRYfaBXwD4jjRu7gj+f951832Jv/Kur+wjfk=;
X-YMail-OSG:   FOw7ucgVM1mNoD_xprEBmNDy5AKgZfBrDCVpYWlh7xrxein GDKtL8MOTlkD48E7jQOsrbIQh8LnbyaaWG4cjowv8p_dkQh9m3iiNyOCCpn7 EPpq_xUL38zTf3f.tCld90_K72Q62Fe75.bGgl.W4cIz8cNLIg7CCwfTtJRz k62vaFCw_JXbOoM.exh_geCgynIlNyV1bMApEkJkObpVIzMgAkMP8lfKU9vs 8gDmqdlrromX4h2HZkkoWSKuvHmE_Mu0D3_Y3i1BzxyDo_Hz2dXWHmtIgaKo ddxtqZvFaLW4ENh4TYy5KJ6IrH6RXIEtQsCSQYRUTayS0uTpoeqQ9ZEHFFpR 9BlQ0X_GDCO9u5o3QTAs92h0gVNU.bk7EyGCKPMdJRSeLWXmtYn8WrQmZd0T 7NSeajQh0.l5zRv5K0oDO69KtPf_IuhqpANG8A.vwNRcmi6YnuKq9f5kaod7 rv4gmqYQm4NDkw9.Abk.tmAsjlP8.A_TzGe6SmOSHDDqrAm7uG6HeD.BTcX0 MysHhgHZhdJAsLpb82Ti.e82DJwDs
Received:   from [66.109.26.93] by web181304.mail.ne1.yahoo.com via HTTP; Sat, 10 Nov 2012 06:56:04 PST
X-Mailer:   YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID:   <1352559364.12587.YahooMailClassic@web181304.mail.ne1.yahoo.com>
Date:   Sat, 10 Nov 2012 06:56:04 -0800 (PST)
From:  
“Mrs. Mercy Yoon” <webxxoffice2224555@att.net>
Reply-To:   lottery_y6777@yahoo.co.jp
Subject:   OPEN THE ATTACHED FILE YAHOO THAILAND LOTTERY 2012
To:   undisclosed recipients: ;
MIME-Version:   1.0
Content-Type:   multipart/mixed; boundary=”-1455435280-1172775067-1352559364=:12587″
Content-Length:   19109
 
Leave a comment

Posted by on 11/17/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , ,

“Mrs Marika White Loan Company” mwlc@uneta.org

WARNING: Loan Offer Scam – ”Loan Company” – Nigerian 419 Scammer

UPDATE: Same scammer, different scam — ”MARIKA WHITE” IS ALSO SCAMMING UNDER  YAHOO MSN LOTTERY AWARD  <> web.offfice_297938@verizon.net <> yamsnltry@gmail.com

Name/Email-Address: Mrs Marika White <> web.office.76835@verizon.net <> mwlc@uneta.org
Subject: Loan Company

Email: DO YOU NEED A LOAN TO PAY OFF YOUR BILLs OR START UP A BUSINESS?

HEADER:

Return-Path: <web.office.76835@verizon.net>
X-YahooFilteredBulk: 98.138.90.254
Received-SPF: neutral (98.138.90.254 is neither permitted nor denied by domain of verizon.net)
X-YMailISG: 1rccvcMWLDvwwkDPi1wOr05Wj4gQviOJDGKA.1i73_OolCyJ AIIlRo3P0Ksj.ASRtNNoeGsPA3ng79BJC4KSPPY2cKJmtSiyaO9p_2Gl6D9p KObaIr3h1rSJqZJtUWYKiUblIXp2C_AVI626ToDSMv07dQ_gJRa9_1mGJyzE 7r40FDbtvz_yB9A9.NHHDeM2iKxRVY4nua_X5Ed75fTZKPbtnTihqFFIsYzF ujLU9y8Y18H5cK7A8W6CQ7JrpCZL.zKbq_kNlj8HAhBv1jH5BnVA2ly1ebuI _9Ea7VizY_wANAhb3s2.6iifKVVVAO9rNPIsWHlTMvE6SHb8QJ6ulc674OXT tt37ekR0jxkNBXR0jgJdcYUs_aGyNP479WSp4zXCs7Ze.J2O_En0MQz_jgGj x5YLcacY3jehFs4C_MrSGEVAQOdDqp6L4zrtUtka_EJpyIT7eGwy5Sdr8cmG I_DgYc8vHfyvc9E_rkYu3JF35jAmqLU9cXx6wCO6uj37_TrU7u8Y9QZBL2O0 IT_06WFjLfOpT1Upk3uY4gIb9wcfw2QIQlDrpPnRZaLeg5D_P.fZdy9ZiUWG NAthLPa2dEX2t8jrBH1oAE2YXAKWNU3pNKD_7SiifEzT84h5Elwq2OHWRuJP IDbHLNrzmEk1qUNnYWEIF9rSxF1ghHHskstylaX8FXxRd7q7Nh7HRQAZZeEB HqSwPna3HbK7lluYsrzPEQXazlxcHdgklhWhFUE6m4.CkHrM1gErfL3aTM48 AunpFYoHEUut1CsqaK8G6yTEcKTxy.R0dG8AEmJ3rF1mJl2juH_MEOdliZ2U kWtVRS13J12.Gjfsw0.K_.mQE5Ns1SPY4XsqbFvoM54Zu9rZXWRdgLW0R.Jd BYdh.pFOiRY3Q1UigZapTc3x7asJRS767DUqSsLYRr_tP1rW5uqBttzHWYvC b7WRvJxQPEse4ssUVrxwkpMpe5Thz.YG5od_fkwHDZPfZNUQvx1lq9n9DoMC ON6XbLf7tz.kYkTT2amkr5TgG.7H1FYiff4cJ52Y_QhrlbmHPMpIzLH5v00h DQ2XofIrgBkFMmjpPSM4kLz.tIQadfYhtUtF1dRkRik2t8eFG48Pt2uurmng ciYCQZ2QbXFwxDJm7s_jgCuaaDphJcK8zBr1RtpVM2RtKz93LK0ffFUZl9M7 o9lnOxNgN71fbX6fF1ZyL7RaXQrLD_ahUhjSooa3ufwV7AGDjcmE5vnPzt0T 1hjFF1VEvTEsxPHJRroE3s4Ol.843VnRYEMul7UcKBKNDw–
X-Originating-IP: [98.138.90.254]
Authentication-Results: mta1319.mail.bf1.yahoo.com from=verizon.net; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15-vm1.bullet.mail.ne1.yahoo.com) (98.138.90.254) by mta1319.mail.bf1.yahoo.com with SMTP; Mon, 29 Oct 2012 01:57:01 -0700
Received: from [98.138.226.178] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
Received: from [66.94.237.101] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
Received: from [127.0.0.1] by omp1006.access.mail.mud.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 30294.68904.bm@omp1006.access.mail.mud.yahoo.com
Received: (qmail 89378 invoked by uid 60001); 29 Oct 2012 08:56:57 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351501017; bh=e7TPDsqolxdOXd+HQzrG2hNH4MUYxcgDXnSPz6Y8MYY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=S6/hrpGO0ydEf4hSQ7WjaAmQInuuCAKfvMSsvZ0XS0Ov4TRWjzWGBNXFyW77+X+V8/YyNSzLI21RcqyPrLYT8EnW8BEnqJ8WpAUNvumsMDSbo5i30f/2XLT5qHvIvcR23wmuVHVjVNwTMsysjaZ2E5frgnnMP06OYrvqxNptM0o=
X-YMail-OSG: xMBSpZUVM1kIRXuAjHgZbmAaovBVSk5eAFjFEevdiEknuMn uDEOw.0Co.m8vI5PZCw7DsxhJN0JUjUAfUKoR0NBqFZtrCvYJNVDAFkJnZ9r O3l8_IptDedNQleNN7u4GS21Jrt1VXT.7EIuaqBBvfYhmeBKDXsVQE_vJCTr OxQjQGHYGCzKlWPL_X_kkO_XpszI3mErScnhmbs_nIvqSVOegsbBMaeW.VOj UnLfwICoveMAz0JiOGClf4ZsO1t4_kD1ObkEb4L2mblFkgk9CHEebmunRZAK Xcr7_Y5_tNywAxz1tBI3HRe2YTVilPFzXNCReKYcuuMdLy4f6xvBQilPUGP6 HPr1KaxsdqlqsThn988RToeuJPivHlpxBZHhFfrwy_eRjT2VgvXYksHYOLp9 CS0zMN.CLJ8R11gH1ACo2JT6of3FUlzotv8ehcdNLfdu1aiNpfSMIKpa43vT Ynd2tYi7uArwgX_vtXoKO.vJ1x8lBQq8f0yXH.Ke0XesM79uUq5MG7j.8rJ6 ETIunLPAqxYZaDbywbA–
Received: from [72.64.146.136] by web84610.mail.ne1.yahoo.com via HTTP; Mon, 29 Oct 2012 01:56:57 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1351501017.25035.YahooMailClassic@web84610.mail.ne1.yahoo.com>
Date: Mon, 29 Oct 2012 01:56:57 -0700 (PDT)
From:
Mrs Marika White Loan Company <web.office.76835@verizon.net>
Reply-To: mwlc@uneta.org
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1644280220-398030313-1351501017=:25035″
Content-Length: 465
 

Tags: , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: