Showing posts with label phishing. Show all posts
Showing posts with label phishing. Show all posts

Tuesday, July 6, 2010

Inbox - SPAM OR SCAM? =====<>>> Earn extra ca$h $750.00 Every Day!

Undisclosed receipients so I do not trust it and will publish them until the sender ceases. I have been advised that this is a phishing attempt. You may notice that all published letter bear the words may be forged so I believe that the same crook is behind them all

Earn extra ca$h $750.00 Every Day!
and
You will Receive an Amazing Bonus worth
$10,577.37

+ 1,200,000,000 FRESH OPT-IN EMAIL LISTS
You will be Supplied with all of the Information to Send Out
You Are Guaranteed To Get Paid Instantly
This is an Easy, Profitable Opportunity to
Earn $1000's Every Week
No Experience Required.
Thank you

Information for the Police
return-Path:
Received: from mail.com (32.118.158.98.client.static.strong-in7.reliablehosting.com [98.158.118.32] (may be forged))
by mailer.ran.es (8.14.2/8.13.8) with SMTP id o6618WCl011812
for ; Tue, 6 Jul 2010 03:08:35 +0200
Message-Id: <201007060108.o6618wcl011812@mailer.ran.es>
From: "alfeburgos"
Subject: =====>>> Earn extra ca$h $750.00 Every Day!
Date: Tue, 6 Jul 2010 09:38:09 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-UIDL: XjZ!!^!T"!d[O"!EJL!!
Status: U
Old-X-EsetId: E74D982990713469F84B987D9F2278
X-EsetId: E74D982990713469F84B987D9F2278
X-EsetScannerBuild: 7419


Inbox - "partial employment in Europe" PHISHING SCAM

Looking for a job? My name is Juliette Barnes, I am a recruiting manager of NetTemps Inc, a recruiting agency for direct-hire, contract, and freelance professionals within various professions.

Today I would like introduce some part-time and virtual office vacancies in the spheres of Advertising, Education, Engineering, Finance, Health care, Information technology, Media, Real estate and Transportation.

If you are interested to learn more about the jobs offered, please get back to me, providing your name and contact number.

We are eager to help you find a better job and improve your career!

If you have questions, please do not hesitate to e-mail me on:

e u r o p e @ n e t m p s . c o m [please delete spaces in the email address before sending it to us] this wording was used in the Spanish e-mail work scam so suspect it comes from the same gang

Yours sincerely,
Juliette Barnes
NetTemps Inc

Information for the Police - there were no recipients
Return-Path:
Received: from bb43656c.virtua.com.br (bb43656c.virtua.com.br [187.67.101.108] (may be forged))
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o65Je0Om032448
for ; Mon, 5 Jul 2010 21:40:01 +0200
Date: Mon, 5 Jul 2010 16:39:59 -0300
From: "Nannie.Huffman"
Subject: partial employment in Europe
To: <
xxxxx@xxxxx>
Message-ID: <000d01cb1c79$da9353e0$6400a8c0@ghostliestkp6>
MIME-Version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.0.6001.18049
X-Mailer: Microsoft Windows Mail 6.0.6001.18000
Content-type: text/plain; format=flowed; charset=iso-8859-1; reply-type=original
Content-transfer-encoding: 7bit
X-Priority: 3
X-MSMail-priority: Normal
X-UIDL: "a#!!B!\!!L[!#!Kfh!!
Status: U
Old-X-EsetId: E74D982990713469F84B987D9F2278
X-EsetId: E74D982990713469F84B987D9F2278
X-EsetScannerBuild: 7419


Monday, July 5, 2010

Inbox - SPAM OR SCAM? ***You've Got The Right Choice to Make Unlimited Cash Starting Now***

Undisclosed receipients so I do not trust it and will publish them until the sender ceases. I have been advised that this is a phishing attempt

Sit down, situate yourself comfortably
and get ready to be amazed on how easy
you can start making money from home.
Follow our simple system & do the
following below

Information check
Return-Path:
Received: from Sender (180.126.131.216.client.static.strong-sf9.reliablehosting.com [216.131.126.180] (may be forged))
by mailer.ran.es (8.14.2/8.13.8) with SMTP id o65BQCI3009178
for ; Mon, 5 Jul 2010 13:26:14 +0200
Message-Id: <201007051126.o65bqci3009178@mailer.ran.es>
From: ">Email Cash Pro<"
Subject: ***You've Got The Right Choice to Make Unlimited Cash Starting Now***
Date: Thu, 5 Aug 2010 19:56:46 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
X-UIDL: H\/"!J50"!DiW"!5KJ!!
Status: U
Old-X-EsetId: E74D982990713469F84B987D9F2272
X-EsetId: E74D982990713469F84B987D9F2272
X-EsetScannerBuild: 7413


Saturday, June 12, 2010

Inbox - 2 Scam emails today

Do not click on the link "foto" - It can result in a trojan virus
No haga clic en el enlace "fotos" - Puede resultar en un virus troyano


Hola,
,

Esta es la tua foto o no?!

foto

Information for the Police / información para la policía
Return-Path:
Received: from 1899018625.tvninternet.com.br (1899018625.tvninternet.com.br [189.90.186.25] (may be forged))
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o5C1L8EW027990
for ; Sat, 12 Jun 2010 03:21:10 +0200
Message-ID: <000d01cb09cd$8788db70$6400a8c0@despoticd075>
From: "Custodia"
To:
Subject: tua foto?!!
Date: Fri, 11 Jun 2010 22:21:05 -0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01CB09CD.8788DB70"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-UIDL: YO&#!N'b"!OYS!!gJE"!
Old-X-EsetId: E74D982990713469F84B987D992B72
X-EsetId: E74D982990713469F84B987D992B72
X-EsetScannerBuild: 7283

y

Hola

es esta su foto?

foto

Yazmin


Information for the Police / información para la policía
Return-Path:
Received: from YJZBMBUMV ([93.37.216.43])
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o5C6jla7017653;
Sat, 12 Jun 2010 08:45:52 +0200
Message-ID: <000d01cb09fa$e2d86ea0$6400a8c0@tensorzt02>
From: "Yazmin"
To:
Subject: Fw:
Date: Sat, 12 Jun 2010 08:45:46 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01CB09FA.E2D86EA0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-UIDL: &+8!!nNg"!eh%#!82["!
Old-X-EsetId: E74D982990713469F84B987D992B72
X-EsetId: E74D982990713469F84B987D992B72
X-EsetScannerBuild: 7283

Thursday, April 15, 2010

Inbox - Phishing attempt? hiding behind name of FBI & originating from London!

info.payment.credit033@gmail.com>
Received: from blade207.lb.inty.net (blade207.lb.mxout.inty.net [195.90.97.18])
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o3EKb1DJ016232
for <
xxxxxx@xxxxxx>; Wed, 14 Apr 2010 22:37:02 +0200
Received: from blade207.lb.inty.net (unknown [195.90.97.18])
by blade207.lb.inty.net (Postfix) with ESMTP id E03FD27408D;
Wed, 14 Apr 2010 21:37:00 +0100 (BST)
Received-SPF: neutral (blade207.lb.inty.net: 195.112.47.93 is neither permitted nor denied by domain of gmail.com) client-ip=195.112.47.93;
envelope-from=info.payment.credit033@gmail.com; helo=lb2003sbs.lucybristow.local;
Received: from lb2003sbs.lucybristow.local (unknown [195.112.47.93]) by blade207.lb.inty.net (Postfix) with ESMTP id 83201274073; Wed, 14 Apr 2010 21:32:53 +0100 (BST)
Received: from User ([41.217.65.13]) by lb2003sbs.lucybristow.local with Microsoft SMTPSVC(6.0.3790.3959); Wed, 14 Apr 2010 21:03:25 +0100
Reply-To: <
fbimonitoringunit2000@mail.md>
From: "FBI"<
info.payment.credit033@gmail.com>
To: No Recipients Warning sign - this was seen when I went into JB Mail on server
Subject: FEDERAL BUREAU OF INVESTIGATION
Date: Sun, 14 Mar 2010 21:03:04 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <
LB2003SBSjykeNXXUv100001350@lb2003sbs.lucybristow.local>
X-OriginalArrivalTime: 14 Apr 2010 20:03:28.0122 (UTC) FILETIME=[8C5F45A0:01CADC0D]
To: undisclosed-recipients:;
X-MDF-HostID: 59
X-UIDL: 6KK"!GD)#!&4[!!;__"!
Status: U
Old-X-EsetId: E74D982990713469F84B987C922076
Old-X-EsetId: E74D982990713469F84B987C922076
X-EsetScannerBuild: 6939
X-EsetId: E74D982990713469F84B987C922078
.
.
FEDERAL BUREAU OF INVESTIGATION
WASHINGTON DC ROOM,7367
J. EDGAR HOOVER FBI BUILDING
935 PENNSYLVANIA AVENUE, NW
WASHINGTON, DC 20535

Attn: Honorable Beneficiary.

We the Federal Bureau Of Investigation (FBI Washington DC) United States Of America have discovered through our intelligent monitoring network that you have a transaction going on as either inheritance payment, Lottery or contract payment in a tone of US$25,500,000.00 (Twenty Five Millions, Five Hundred Thousand United States Dollars) which have been approved but have not been settled.

This is to officially inform you that we have verified your contract / inheritance file after close monitoring and found out why you have not received your payment both on your part and on the part of your debtors. Secondly, we have been informed that you are still dealing with the non officials in the bank who are attempting to secure the release of your fund to you. We wish to advise you that this is illegal and you should stop further
communication with them henceforth because such an illegal act like this can lead to the conciliation of your fund.

We have been having so many complains from people who have been scammed around the world, after concluding in a meeting with members of the International Monetary Fund (IMF), we came to a conclusion that every payment will be made through the OCEANIC BANK NIG PLC. We also concluded on the use of ELECTRONIC ATM PAYMENT SYSTEM as the only direct and safer means to pay all beneficiaries.

By this method, your funds will be loaded in TWO BATCHES into an ATM card, and sent to you; from this card you can withdraw a maximum of US$10,000.00 per day from any ATM machine worldwide. So if you would like to receive your funds in this way please send the following information to the paying bank.
Do not complete this is a Phishing attempt to steal your identity

(1)Your Full Name: __________________________________________

(2)Your Complete Address (Physical Address with Zip Code not
P.O.BOX):__________________________________________________

(3)Name of City of Residence : ________________________________

(4)Country: _____________

(5)Mobile Number/Direct Telephone Number: ___________________Fax
Number: ______________

(6)Age: ______Sex:______Occupation:___________________________

(7)Working Identity Card/Int'l Passport: ___________,

Below are the contact details of the Paying Bank (OCEANIC BANK NIG PLC) in the Federal Republic of Nigeria and to whom you will send your information for
the processing of your ATM Card as soon as possible:

CONTACT PERSON IN-CHARGE NAME: REV DR.GEORGE MOORE,
ATM PAYMENT SETLEMENT DEPARTMENT OCEANIC BANK NIG PLC
MOBILE:+234 8026 911 347
OFFICE:+234 70 40662796
EMAIL:
atm.card.department.3.3@hotmail.com
PERSONAL EMAIL: atm.card033@sify.com

The DEBT SETTLEMENT COMMISSION has been mandated to issue out your payment for this fiscal year 2010. Also for your information, you have to stop any further communication with any other person(s) or office(s) who claim to be established agents using it to defraud innocent people worldwide. This is to avoid any hitches in receiving your payment.

THANKS FOR LISTENING TO OUR ADVICE.
YOURS FAITHFULLY,
MR. ROBERT S. MUELLER III
FOR COROPORATE AFFAIRS
FEDERAL BUREAU OF INVESTIGATION
(FBI WASHINGTON DC)
UNITED STATES OF AMERICA.

Check IP 195.90.97.18
IP Address Location results for 195.90.97.18
IP Address: 195.90.97.18 WhoIs Lookup IP BlackList Lookup
Hostname:
blade207.LB.mxout.inty.net Reverse DNS
[See complete information about your system with our IP Information tool!]

IP Address Conversion - IP Convert for 195.90.97.18 to Hex & to Dec
IP to Dec [IP Address to decimal]: 3277480210
IP to Hex [IP Address to hexadecimal]:
c35a6112
IP to Bin [IP to binary]:
11000011010110100110000100010010

IP Address Lookup results for Europe
IP Address Continent: Europe
IP Continent Code:
(EU)
IP Continent Population:
731,000,000
IP Continent Area:
10,180,000 km²
IP Continent Total Population:
11%
IP Continent Density People:
70.00 per km²
IP Continent Latitude:
(48.69083)
IP Continent Longitude:
(9.1405)

IP Location Lookup results for United Kingdom
IP Country Name: United Kingdom
IP Country Capital:
London
IP Language:
English, Irish, Ulster Scots, Scottish Gaelic , Scots, Welsh, Cornish
IP Currency:
Pound sterling (GBP)
IP Country Latitude:
(54)
IP Country Longitude:
(-4.5)
IP Country Code:
GBR (GB)

IP Location Lookup results for 195.90.97.18 in Bristol, City of
IP Address Region: Bristol, City of
IP Address City:
Bristol
IP Address Latitude:
(51.45)
IP Address Longtitude:
(-2.5833)

Additional IP Location information for 195.90.97.18
IP Address Organization: 1st intY PI assignment
IP Address ISP:
London

Time zone for 195.90.97.18: Europe/London
Local time zone for 195.90.97.18:
Europe/London

Thursday, April 8, 2010

Inbox - 3 more letters from this crook / 3 cartas mas de este estafador

Hola!!!

Return-Path:
Received: from bd7a09d7.virtua.com.br (bd7a09d7.virtua.com.br [189.122.9.215] (may be forged))
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o37HZ7eA010803;
Wed, 7 Apr 2010 19:35:17 +0200
Date: Wed, 7 Apr 2010 14:35:06 -0300
From: "Terry Broussard"
Subject: Hola!!!
To: midominio>
Message-ID: <000d01cad678$a98f7090$6400a8c0@technicolorofi856>
MIME-Version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.0.6001.18049
X-Mailer: Microsoft Windows Mail 6.0.6001.18000
Content-type: text/plain; format=flowed; charset=iso-8859-1; reply-type=original
Content-transfer-encoding: 7bit
X-Priority: 3
X-MSMail-priority: Normal
X-UIDL: G:T!!MH=!!@@c!!)(^!!
Status: U
Old-X-EsetId: E74D982990713469F84B987C932A70
X-EsetId: E74D982990713469F84B987C932A70
X-EsetScannerBuild: 6891

.
.
Hola! Estas buscando un sobresueldo? Estoy trabajando ya durante 2 meses en las horas libres del trabajo principal a favor de una compania grande. En el mes pasado he cobrado 2.590 euros. Ellos siguen buscando colaboradores. Si necesitas un trabajo adicional, envia su breve resumen (nombre, apellidos, pais de residencia, ciudad, edad, telefono de contacto - phishing attempt) a la direccion: c v @ n e t t e m p s i n . c o . u k

----------------------------------------------------------------------------------
Hola!!!

Return-Path:
Received: from ip-189-99-188-227.Invalid IP Address Entered! user.vivozap.com.br (ip-187-116-192-12.Invalid IP Address Entered! user.vivozap.com.br [187.116.192.12] (may be forged))
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o384lt0R030189;
Thu, 8 Apr 2010 06:47:58 +0200
Message-ID: <000d01cad6d6$a564ea00$6400a8c0@platoondt6>
From: "Jaime Whitehead"
To:
Subject: Hola!!!
Date: Thu, 8 Apr 2010 01:47:51 -0300
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="Windows-1252";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Spam: Not detected
X-UIDL: ]#P"!c0R!!Wj\!!(T>"!
Status: U
Old-X-EsetId: E74D982990713469F84B987C932A70
X-EsetId: E74D982990713469F84B987C932A70
X-EsetScannerBuild: 6891

.
.
Hola! Estas buscando un sobresueldo? Estoy trabajando ya durante 2 meses en las horas libres del trabajo principal a favor de una compania grande. En el mes pasado he cobrado 2.090 euros. Ellos siguen buscando colaboradores. Si necesitas un trabajo adicional, envia su breve resumen (nombre, apellidos, pais de residencia, ciudad, edad, telefono de contacto - phishing attempt) a la direccion: c v @ e u r t r a b a j o . c o m

------------------------------------------------------------------------------------------------
Cooperacion con la gran compania
The scammer has used my own domain so it is a fraud attempt

Return-Path: <
xxxxxr@xxxxxx>
Received: from ampli.com.pl ([188.59.133.254])
by mailer.ran.es (8.14.2/8.13.8) with SMTP id o37IIRQr004968
for <
xxxxxr@xxxxxx>; Wed, 7 Apr 2010 20:18:35 +0200
Date: Wed, 7 Apr 2010 20:18:27 +0200
Message-Id: <201004071818.o37iirqr004968@mailer.ran.es>
To:
Subject: Cooperacion con la gran compania
From: <
xxxxxr@xxxxxx my email address!>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
X-UIDL: OM0!!ZpL"!S'L"!6HB!!
Status: U
Old-X-EsetId: E74D982990713469F84B987C932A70
X-EsetId: E74D982990713469F84B987C932A70
X-EsetScannerBuild: 6891

.
.
Oferta de colaboracion para los espanoles.

Demandas:
La compania mundial que perfecciona la logistica y avanza el negocio internacional invita a la colaboracion al representante de servicio regional.

Demandas:
- Ensenanza (secundaria, tecnica, superior tecnica)
- Habitos de trabajo en PC: usuario de Windows (2000, XP, Vista), MS Office (Word. Excel, Access, Internet). MS SQL es deseable.
- Experiencia: trabajo colectivo, proyectos de larga duracion, giro bancario, publicidad.

Obligaciones:
- Recogida de informaci?n en lo que se refiere a la necesidad de bienes y servicios que se otorgan por nuestros clientes
- Publicidad de los productos de los clientes
- Elaboracion de los encargos de los clientes a proposito de la apertura de las cuentas bancarias y de elaboracion de pagos.
- Otros servicios de negocio que son necesarios para los clientes (a discutir separadamente).

Condiciones:
- Salario - 2500 euros
- Peroodo de prueba - 1 mes.
- Jornada laboral sin norma.
- Comisiones de servicio a las regiones proximas son posibles.
- Pago de comunicaciones moviles y de materiales combustibles y lubricantes.

Si tiene el interes a esta oferta, Vd. puede mandar la forma siguiente al correo electronico Ivonne@best-union-web.com
phishing attempt - do not complete
Nombre completo:
Edad:
Ciudad de residencia:
Telefono:

Tambien es muy deseable adjuntar su curriculo a la carta.

Check IP´s Hola!!!
IP Address Location results for 189.122.9.215
IP Address: 189.122.9.215 WhoIs Lookup IP BlackList Lookup
Hostname:
bd7a09d7.virtua.com.br Reverse DNS
[See complete information about your system with our IP Information tool!]

IP Address Conversion - IP Convert for 189.122.9.215 to Hex & to Dec
IP to Dec [IP Address to decimal]: 3178891735
IP to Hex [IP Address to hexadecimal]:
bd7a09d7
IP to Bin [IP to binary]:
10111101011110100000100111010111

IP Address Lookup results for South America
IP Address Continent: South America
IP Continent Code:
(SA)
IP Continent Population:
382,000,000
IP Continent Area:
17,840,000 km²
IP Continent Total Population:
'6%
IP Continent Density People:
21.4 per km²
IP Continent Latitude:
(-14.60472)
IP Continent Longitude:
(-57.6561)

IP Location Lookup results for Brazil
IP Country Name: Brazil
IP Country Capital:
Brasília
IP Language:
Portuguese
IP Currency:
Brazilian real (BRL)
IP Country Latitude:
(-10)
IP Country Longitude:
(-55)
IP Country Code:
BRA (BR)

IP Location Lookup results for 189.122.9.215 in Rio de Janeiro
IP Address Region: Rio de Janeiro
IP Address City:
Rio De Janeiro
IP Address Latitude:
(-22.9)
IP Address Longtitude:
(-43.2333)

Additional IP Location information for 189.122.9.215
IP Address Organization: NET Serviços de Comunicação S.A.
IP Address ISP:
NET Serviços de Comunicação S.A.

Time zone for 189.122.9.215: America/Noronha
Local time zone for 189.122.9.215:
America/Noronha

Cooperacion con la gran compania
IP Address Location results for 188.59.133.254
IP Address: 188.59.133.254 WhoIs Lookup IP BlackList Lookup
Hostname:
188.59.133.254 Reverse DNS
[See complete information about your system with our IP Information tool!]

IP Address Conversion - IP Convert for 188.59.133.254 to Hex & to Dec
IP to Dec [IP Address to decimal]: 3158017534
IP to Hex [IP Address to hexadecimal]:
bc3b85fe
IP to Bin [IP to binary]:
10111100001110111000010111111110

IP Address Lookup results for Asia
IP Address Continent: Asia
IP Continent Code:
(AS)
IP Continent Population:
3,879,000,000
IP Continent Area:
44,579,000 km²
IP Continent Total Population:
60%
IP Continent Density People:
89.00 per km²
IP Continent Latitude:
(29.8405)
IP Continent Longitude:
(89.296)

IP Location Lookup results for Turkey
IP Country Name: Turkey
IP Country Capital:
Ankara
IP Language:
Turkish
IP Currency:
Turkish lira (TRY)
IP Country Latitude:
(39)
IP Country Longitude:
(35)
IP Country Code:
TUR (TR)

IP Location Lookup results for 188.59.133.254 in Ankara
IP Address Region: Ankara
IP Address City:
Ankara
IP Address Latitude:
(39.9272)
IP Address Longtitude:
(32.8644)

Additional IP Location information for 188.59.133.254
IP Address Organization: Turkcell Maltepe Plaza
IP Address ISP:
Turkcell Iletisim Hizmetleri A.S.

Time zone for 188.59.133.254: Europe/Istanbul
Local time zone for 188.59.133.254:
Europe/Istanbul


Monday, February 22, 2010

Inbox - Your Message $ 750,000.00 IP address 194.25.134.80 seems to belong to a Suspicious (1) with threat level 25, last malicious activity 20 days

Return-Path:
Received: from mailout01.t-online.de (mailout01.t-online.de [194.25.134.80])
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o1M90KpY014713
for ; Mon, 22 Feb 2010 10:00:29 +0100
Received: from fwd07.aul.t-online.de (fwd07.aul.t-online.de )
by mailout01.t-online.de with smtp
id 1NjU86-00087w-Po; Mon, 22 Feb 2010 09:59:02 +0100
Received: from User (VOsIfBZLrtib6CmWExjiiUBF-dbUFDjwBOJwiB0CStRpYZpXaGX94ZmH-S3G3Gim6vhyeHHiZB@[98.194.187.42]) by fwd07.t-online.de
with esmtp id 1NjTQU-0aEbZY0; Mon, 22 Feb 2010 09:13:58 +0100
Reply-To:
From: "Aspac Promotion Co"
Subject: Your Message
Date: Mon, 22 Feb 2010 09:13:43 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="koi8-u"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <1njtqu-0aebzy0@fwd07.t-online.de>
X-ID: VOsIfBZLrtib6CmWExjiiUBF-dbUFDjwBOJwiB0CStRpYZpXaGX94ZmH-S3G3Gim6vhyeHHiZB
X-TOI-MSGID: 35835a72-de32-4e47-96d5-8cc03199dfc5
X-UIDL: gS-"!LAJ!!$Eo"!d(_!!
Status: U
Old-X-EsetId: E74D982990713469F84B987C9D2072
X-EsetId: E74D982990713469F84B987C9D2072
X-EsetScannerBuild: 6633


Dear Beneficiary,

We the Aspac promotion company are happy to inform you of this year's release of the ASIA INTERNATIONAL PROMOTION; we play with your Email address on the 5th January 2009, the results were released on the 19th February 2010. Your Email address was entered as an alternative Email attached to Reference Number: CC/2010/171MPL with, Batch number REF.NO: EGS/1983-022 NJA drew the lucky numbers 9-13-21-30-31-44, which consequently won the lottery in the 3rd category.

You have therefore been approved a lump sum payment of $ 750,000.00 (SEVEN HUNDRED AND FIVE THOUSAND UNITED STATES DOLLARS) in cash credited to file REF.NO: CC/09/171MPL. This is from a total cash prize of $ 18,671,410.00 (EIGHTEEN MILLION, SIX HUNDRED AND SEVENTY ONE THOUSAND, FOUR HUNDRED AND TEN DOLLARS shared among the winners in this category). CONGRATULATIONS!!!

All participants were selected through a computer ballot system drawn from (Six Million) profiles such as BUKUTAMU E-mail Profiles from Asia, America, Europe, and South Pacific, as part of their New Year International promotion program.

Your winnings are to be paid through Western Union on daily transfers of $5,000 till the total of your winnings $ 750,000.00 is confirmed by you. As a matter of fact, the first transfer has been affected by the paying bank Rakyat Bank of Malaysia.

This transfer has no recipient name and location until we received the below listed requirements. As a matter of fact, this transfer can only be tracked and access online but cannot be accessed or picked through any Western Union Agent until it is fixed on your name and location. You are therefore, advised to forward the following information.

Do not complete this is a phishing attempt
1. Full Name:
2. Full Address:
3. Marital Status:
4. Occupation:
5. Age:
6. Sex:
7. Nationality:
8. Telephone Number:

You are therefore advised to provide us with the following information to enable us submit it to the Rakyat Bank of Malaysia for onward payment of the prize to you.

Congratulations once again!!!

Sincerely,

DR Mohammadali Ahmad Ali Ayasreh


Check IP - IP address 194.25.134.80 seems to belong to a Suspicious (1) with
threat level 25, last malicious activity 20 days ago

IP Address Location results for 194.25.134.80
IP Address: 194.25.134.80 WhoIs Lookup IP BlackList Lookup
Hostname:
mailout01.t-online.de Reverse DNS
[See complete information about your system with our IP Information tool!]

IP Address Conversion - IP Convert for 194.25.134.80 to Hex & to Dec
IP to Dec [IP Address to decimal]: 3256452688
IP to Hex [IP Address to hexadecimal]:
c2198650
IP to Bin [IP to binary]:
11000010000110011000011001010000

IP Address Lookup results for Europe
IP Address Continent: Europe
IP Continent Code:
(EU)
IP Continent Population:
731,000,000
IP Continent Area:
10,180,000 km²
IP Continent Total Population:
11%
IP Continent Density People:
70.00 per km²
IP Continent Latitude:
(48.69083)
IP Continent Longitude:
(9.1405)

IP Location Lookup results for Germany
IP Country Name: Germany
IP Country Capital:
Berlin
IP Language:
German
IP Currency:
Euro(€) (EUR)
IP Country Latitude:
(51.5)
IP Country Longitude:
(10.5)
IP Country Code:
DEU (DE)

IP Location Lookup results for 194.25.134.80 in Hessen
IP Address Region: Hessen
IP Address City:
Weiterstadt
IP Address Latitude:
(49.9078)
IP Address Longtitude:
(8.5953)

Additional IP Location information for 194.25.134.80
IP Address Organization: www.t-online.de
IP Address ISP:
Deutsche Telekom AG

Time zone for 194.25.134.80: Europe/Berlin
Local time zone for 194.25.134.80:
Europe/Berlin

Saturday, February 20, 2010

Inbox - OFFICIAL NOTIFICATION FROM MICROSOFT AWARD Phishing attempt

MAILER-DAEMON@mailer.ran.es>
Received: from omr9.networksolutionsemail.com (omr9.networksolutionsemail.com [205.178.146.59])
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o1KCdq6l008049
for <xxxxxx@xxxxxx>; Sat, 20 Feb 2010 13:39:53 +0100
Received: from mail.networksolutionsemail.com (mail.networksolutionsemail.com [205.178.146.59])
by omr9.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id o1KCdp0A028802
for <<xxxxxx@xxxxxx>; Sat, 20 Feb 2010 07:39:52 -0500
Message-Id: <201002201239.o1KCdp0A028802@omr9.networksolutionsemail.com>
Received: (qmail 13917 invoked by uid 78); 20 Feb 2010 12:39:50 -0000
Received: from unknown (HELO User) (marrymarrywest@kennethkennethwi13.com@41.213.63.23)
by ns-omr3.lb.hosting.dc2.netsol.com with SMTP; 20 Feb 2010 12:39:50 -0000
Reply-To: <cpinnaclefinagent@gmail.com>
From: "MICROSOFT"<"MICROSOFT"@omr9.networksolutionsemail.com>
Subject:
OFFICIAL NOTIFICATION FROM MICROSOFT AWARD
Date: Sat, 20 Feb 2010 04:39:42 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-UIDL: m$8!!&S##!TFd!!]!["!
Old-X-EsetId: E74D982990713469F84B987C9D2172
Old-X-EsetId: E74D982990713469F84B987C9D2172
X-EsetScannerBuild: 6625
X-EsetId: E74D982990713469F84B987C9D2174
Microsoft Award Team If this was genuine it would come from the USA where Microsoft has it´s HQ
Baley House, Har Road Sutton,
Greater London SMI 4te
United Kingdom
FILE REF: TN/7855/05/07/DINS
BATCH: KP23/857/NDL5 /EU

MICROSOFT AOL ANNIVERSARY AWARD NOTIFICATION.

Dear Lucky Winner,

It is obvious that this notification will come to you as a surprise but please find time to read it carefully as we congratulate you over your success in the following official publication of results of the E-mail electronic online Sweepstakes organized by Microsoft and AOL Corporation, in conjunction with the foundation for the promotion of software products, (F.P.S.) held thisin United Kingdom London.The prestigious MicrosoftAOL has set out and successfully organized a Sweepstakes marking the 2010 Anniversary, from the Board of Microsoft AOL Corporations Award Lottery,we rolled out over 750,000.00 GBP (Seven Hundred and Fifty Thousand Great Britain Pounds) Draws.

Participants for the draws were randomly selected and drawn from a wide range of web hosts which we enjoy their patronage. Your email address as indicated was drawn and attached to ticket number 94857390735 with serial numbers GPT/97846565392/08 and drew the lucky numbers 70-35-15-18-21-70 which subsequently won you 750,000.000 GBP (Seven fifty Thousand Great Britain Pounds).

These are your identification numbers:KVP-9078/145
CATEGORY NO.OF WINNERS WINNING PRIZES
1st. 2 ? 750,000.00 pounds each
2nd. 8 ? 450.000.00 pounds each
3rd. 13 ? 350,000.00 pounds each
4th. 27 ? 270,000.00 pounds each

You are to send down your Claims Requirements and your option of Remittance/Mode Of Collection to Dr.Frank Cole your Claims Agent.

Do not complete it is a phishing scam
CLAIMS REQUIREMENTS:
1. Full names:
2. Residential address:
3. Phone number:
4. Fax number:
5. Occupation:
6. Sex:
7. Age:
8. Nationality:
9. Present Country:
10.Next of kin name/address:
11.How Do you Feel As winner:

Mode Of Price Remittance/Mode Of Collection.
(1)Through A Courier Delivery Of Your Certified Winning Cheque Name And Other.
Winning Documents Safely To You.
(2) Bank Wire Transfer in your nominated bank account.

CONTACT:
********************************************************
FOREIGN TRANSFER MANAGER
DR.FRANK COLE.
MICROSOFT SECURITY DEPARTMENT (UK).

E-mail:
agentbbrian@gmail.com
E-mail: infodiskclaimagentoffice@gmail.com
Check IP 81.47.8.140
IP Address Location results for 81.47.8.140
IP Address: 81.47.8.140 WhoIs Lookup IP BlackList Lookup
Hostname: 140.Red-81-47-8.staticIP.rima-tde.net Reverse DNS
[See complete information about your system with our IP Information tool!]

IP Address Conversion - IP Convert for 81.47.8.140 to Hex & to Dec
IP to Dec [IP Address to decimal]: 1362036876
IP to Hex [IP Address to hexadecimal]: 512f088c
IP to Bin [IP to binary]: 1010001001011110000100010001100

IP Address Lookup results for Europe
IP Address Continent: Europe
IP Continent Code:(EU)
IP Continent Population: 731,000,000
IP Continent Area: 10,180,000 km²
IP Continent Total Population: 11%
IP Continent Density People: 70.00 per km²
IP Continent Latitude: (48.69083)
IP Continent Longitude: (9.1405)

IP Location Lookup results for Spain
IP Country Name: Spain
IP Country Capital: Madrid
IP Language: Spanish
IP Currency: Euro(€) (EUR)
IP Country Latitude: (40)
IP Country Longitude: (-4)
IP Country Code: ESP (ES)

IP Location Lookup results for 81.47.8.140 in Galicia
IP Address Region: Galicia
IP Address City: Lugo
IP Address Latitude: (43)
IP Address Longtitude: (-7.5667)

Additional IP Location information for 81.47.8.140
IP Address Organization: Telefonica de Espana
IP Address ISP: Telefonica de Espana

Time zone for 81.47.8.140: Europe/Madrid
Local time zone for 81.47.8.140: Europe/Madrid

Sunday, January 31, 2010

funkyhairmyn did not like his Scam being exposed here earlier this week!

2 work related scam attempts in Spanish yesterday the only difference being the time, title and reply email address. Do not fill in the detail requested or send them to the person. It is a scam that was already exposed here earlier this week.

2 intentos de estafa relacionada con el trabajo en español de ayer la única diferencia es el tiempo, el título y la respuesta de la dirección de correo electrónico. No rellene los detalles solicitados o enviarlos a la persona. Se trata de una estafa que ya se había expuesto aquí esta semana.

sábado, 30 de enero de 2010 23:24

vacante abierta

Apreciados señores:

Nuestra Empresa Internacional cuenta con unas vacantes.

Estas vacantes se proponen sólo para los residentes en Europa.

Estamos ofertándoles la colaboración con nuestra Empresa en forma de representante regional (gerente regional). Este representante tendrá de efectuar las operaciones financieras con nuestros clientes. El trabajo consiste en la recepción y transferencia de los pagos lo más rápido posible.

El labor de este gerente es bastante sencillo y fácil. Los gerentes de nuestra plantilla estarán siempre a sus disposiciones durante todo el período de adiestramiento y les ayudarán para que Uds. obtengan la experiencia referente al trabajo en cuestión.

En nuestra Empresa funciona un sistema flexible de remuneración. El salario por el primer mes de colaboración será de 2,400 euros. En lo adelante el salario dependerá del modo de la colaboración: mientras más tiempo dedique uno al trabajo, más dinero cobrará. En este caso el aumento del salario será notable y se sentirá muy rápido.

Para iniciar su carrera en nuestra empresa sólo hay que hacer el primer paso.

Se les solicita se envíe un mensaje electrónico a la dirección: Bruno.Hargrove@hhunter.cz con la siguiente información:

- Nombre
- Apellidos
- País de residencia
- Ciudad
- Edad
- Teléfono de contacto

Los mensajes sin estos datos no se estudiarán.

Apreciados señores:

Nuestra Empresa Internacional cuenta con unas vacantes.

Estas vacantes se proponen sólo para los residentes en Europa.

Estamos ofertándoles la colaboración con nuestra Empresa en forma de representante regional (gerente regional). Este representante tendrá de efectuar las operaciones financieras con nuestros clientes. El trabajo consiste en la recepción y transferencia de los pagos lo más rápido posible.

El labor de este gerente es bastante sencillo y fácil. Los gerentes de nuestra plantilla estarán siempre a sus disposiciones durante todo el período de adiestramiento y les ayudarán para que Uds. obtengan la experiencia referente al trabajo en cuestión.

En nuestra Empresa funciona un sistema flexible de remuneración. El salario por el primer mes de colaboración será de 2,400 euros. En lo adelante el salario dependerá del modo de la colaboración: mientras más tiempo dedique uno al trabajo, más dinero cobrará. En este caso el aumento del salario será notable y se sentirá muy rápido.

Para iniciar su carrera en nuestra empresa sólo hay que hacer el primer paso.

Se les solicita se envíe un mensaje electrónico a la dirección: Saldana5UXX0L@hhunter.cz con la siguiente información:

Consejos de VISA

- Nombre
- Apellidos
- País de residencia
- Ciudad
- Edad
- Teléfono de contacto

Los mensajes sin estos datos no se estudiarán.

Una vez recibido este mensaje, dentro de 2 ó 3 días nuestros gerentes se comunicarán con Uds. para brindarles más detalles sobre su cargo.

sábado, 30 de enero de 2010 20:52

buena oferta

Apreciados señores:

Nuestra Empresa Internacional cuenta con unas vacantes.

Estas vacantes se proponen sólo para los residentes en Europa.

Estamos ofertándoles la colaboración con nuestra Empresa en forma de representante regional (gerente regional). Este representante tendrá de efectuar las operaciones financieras con nuestros clientes. El trabajo consiste en la recepción y transferencia de los pagos lo más rápido posible.

El labor de este gerente es bastante sencillo y fácil. Los gerentes de nuestra plantilla estarán siempre a sus disposiciones durante todo el período de adiestramiento y les ayudarán para que Uds. obtengan la experiencia referente al trabajo en cuestión.

En nuestra Empresa funciona un sistema flexible de remuneración. El salario por el primer mes de colaboración será de 2,400 euros. En lo adelante el salario dependerá del modo de la colaboración: mientras más tiempo dedique uno al trabajo, más dinero cobrará. En este caso el aumento del salario será notable y se sentirá muy rápido.

Para iniciar su carrera en nuestra empresa sólo hay que hacer el primer paso.

Se les solicita se envíe un mensaje electrónico a la dirección: Saldana5UXX0L@hhunter.cz con la siguiente información:

Consejos de VISA

- Nombre
- Apellidos
- País de residencia
- Ciudad
- Edad
- Teléfono de contacto

Los mensajes sin estos datos no se estudiarán.

Una vez recibido este mensaje, dentro de 2 ó 3 días nuestros gerentes se comunicarán con Uds. para brindarles más detalles sobre su cargo.

Friday, January 15, 2010

Visa Europe - what to do with Fraudulent emails

Fraudulent emails

If you receive an e-mail claiming to come from your bank, or any other bank, requesting personal information, do not provide the details – it could be fraudulent. Instead, contact your bank to determine whether or not the e-mail was from them.

Please be aware that Visa never contacts cardholders directly by phone or e-mail requesting personal information relating to your Visa card. For further information, please visit our Fraudulent emails and websites page.

Report

phishing@visa.com

Example of one that I received
Monday, December 14, 2009
Post
Inbox - VISA Email Alert Recieved (on xxxxxx@mail.com)
This one originated from Moscow and contained a virus - a worm!

Saturday, March 7, 2009

Report a SCAMMER - also report human trafficking

example - 13 Pimps arrested for human trafficking (Europe should have a common phone number for victims to call for help)

Suspicious e-Mail/Phishing

Phishing (as in “fishing for information” and “hooking” victims) is a scam where Internet fraudsters send e-mail messages to trick unsuspecting victims into revealing personal and financial information that can be used to steal the victims’ identity. Current scams include phony e-mails which claim to come from the IRS and which lure the victims into the scam by telling them that they are due a tax refund.
You Can Help Shut Down Phishing Schemes (the irs one)
The good news is that you can help shut down these schemes and prevent others from being victimized. If you receive a suspicious e-mail that claims to come from the IRS, you can relay that e-mail to a new IRS mailbox,
phishing@irs.gov. Follow instructions in the link below for sending the bogus e-mail to ensure that it retains critical elements found in the original e-mail. The IRS can use the information, URLs and links in the suspicious e-mails you send to trace the hosting Web site and alert authorities to help shut down the fraudulent sites. Unfortunately, due to the expected volume, the IRS will not be able to acknowledge receipt or respond to you.
phishing@irs.gov
• Instructions for submitting phishing e-mails to IRS
• IR-2006-49, IRS Establishes e-Mail Box for Taxpayers to Report Phony e-Mails

for more information - http://www.irs.gov/newsroom/article/0,,id=155682,00.html
--------------------------------------------------------------------------------
You should report scams to:

*** Your local police station. They may also advice you what to do and where to report further.

*** FBI. They have a special Internet Crime Complaint Center (IC3)
http://www.ic3.gov/

*** Nigerian scams you can also report to a special organization created in Nigeria to fight 419 and other financial cybercrime, EFCC: The Economic and Financial Crimes Commission
http://www.efccnigeria.org

*** Russian scams you can (and should!) report to the following 2 places:

1) FSB, aka FSS (Federal Security Service). This organization is similar to FBI in Russia.
http://www.fsb.ru/contact/contact.html
Please note, this website is in Russian. You can use online translator, for example http://freetranslation.paralink.com/ to translate the page (recommended). The e-mail you can use is fsb@fsb.ru.

2) Another place to report Russian scammers is MVD of Russia, aka MOI (Ministry of the Interior of Russia). This is like the headquarters of Russian Police:
http://eng.mvdrf.ru/
Send your message through "Public Reception" center. They have a special so-called department "K" dedicated to fight cybercrime.

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Dating Schemes and Marriage Fraud:

The most frequent reports of scams the Embassy and the Department of State receive relate to on-line dating and marriage services. Correspondents who quickly move to professions of romantic interest or discussion of intimate matters could very well be scammers. The anonymity of the Internet means that the U.S. citizen cannot be sure of the real name, age, marital status, nationality, or even gender of the correspondent. In many cases, the correspondent turns out to be a fictitious persona created only to lure the U.S. citizen into sending money.

Typically, once a connection is made, the correspondent asks the U.S. citizen to send money or credit card information for living expenses, travel expenses, or "visa costs." Sometimes, the correspondent notifies the American citizen that a close family member is ill and begins to request monetary assistance. In other instances, the scammer cites the need to pay for travel expenses and “necessary travel documents” or expresses the need for funds to settle a property or other legal dispute in order to leave Ukraine.

A request for funds almost always marks a fraudulent correspondent. American citizens who fall prey to these scams have reported suffering emotional damage as well as losing thousands of dollars. U.S. citizens are cautioned against sending any money to persons they have not actually met. If they do choose to send money, they can take several precautions.

*
They may refer to http://uscis.gov for authoritative information about the immigration process and the true costs involved. For example, U.S. law does not require Ukrainian visitors to have a certain amount of "pocket money" in either local currency or dollars. Any request for money on this account would likely identify a scammer.

*
They may arrange to prepay for a plane ticket directly with the carrier rather than wiring money for transportation to the traveler.

*
If the correspondent provides an image of a purported U.S. visa as proof of intention to travel, the American citizen may contact the U.S. Embassy in Kyiv at kievfpm@state.gov to ascertain the validity of the visa.

*
They should carefully check the address of the bank account to which money is to be wired. If a Ukrainian citizen asks for funds to be deposited in a bank outside of Ukraine, this is an indication of likely fraud.

Reference - http://travel.state.gov/travel/cis_pa_tw/cis/cis_2503.html
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Police in the United Kingdom found organized criminal gangs from Russia, the former Soviet Union and the Balkans using the Internet to advertise women for sale to brothels in Western Europe and also to men as"internet brides."4 A study by Global Survival Network (GSN) found that most mail-order bride agencies in Russia have expanded their activities to include trafficking for prostitution.
read on here .......http://www.online-dating-rights.com/forum/index.php?topic=528.0
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Those behind the Lottery win scam - Suspects pay good money for mailing lists and they do target those lists that deal with the elderly.
Lotto frauds are becoming prevalent in the UK with promises of huge winnings arriving in the form of unsolicited e-mail or letters to UK residents. Invariably the communication will purport to come from an overseas lottery and claim that the recipient has been allocated winning numbers. The recipient will contact the organisers, whether directly through telephone, by post or e-mail and will be invited to send money in to assist in the administration for the release of the winnings.


How it works - These winnings do not exist. This is merely a scam and attempt to elicit money from unsuspecting victims. As the winnings on offer are substantial, so too can be the advance fees required to release the funds.
The real cruel part of this scam is that suspects will build up a rapport with victims through telephone contact in order to continue the flow of money.

UK Links

Reference - http://www.met.police.uk/fraudalert/section/lotto_fraud.htm

New this year - If you are from Britain please forward details of the scam to  The National Fraud Authority (NFA) 
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------

The Job offer scam
In the market for a new job? The Internet has made it easier than ever to find one. It’s also made it easier for criminals to find you.
Think about it: what do you do when you apply for a job? You give out all kinds of personal information: your name, address, home and work telephone numbers, e-mail addresses, sometimes even your date of birth and social security number. Just what you’d want to know if you’re an identity thief or other criminal. 

And what if—heaven forbid—you do fall for one of these cons?

Do damage control immediately: first, close all bank and e-mail accounts linked to the fraud. Then, contact the three major credit bureaus to place fraud alerts on your credit files and to regularly monitor your credit reports for unusual activity. Then, help us clean up the ‘net by reporting the fraud to the job site where the scam was posted and by filing a complaint with the Internet Crime Complaint Center

For more anti-fraud advice, see our Common Frauds webpage and the LooksTooGoodToBeTrue.com website