Inbox - trabajo/ˆ 3002 por mes (estafador en la misma , misma carta pero de Nelson@es-citezen.com y todavía roba nuestro nombre de dominio)

El estafador devuelve como un huevo podrido hoy tan solo cambiando el nombre en el correo electrónico Tristan@es-citezen.com a Nelson@es-citezen.com. El phishing, robo de identidad, lavado de dinero correo  electrónico que no ha enviado a nosotros mismos

From: webmaster@itccommunications.net

To: webmaster@itccommunications.net

Sent: Wednesday, August 18, 2010 10:15 AM

Subject: trabajo/ˆ 3002 por mes

Le pedimos disculpas por la demora en nuestra respuesta.
Nuestra empresa esta reclutando agentes en plantilla para trabajar a tiempo parcial.
Actualmente tenemos varias vacantes en Europa (Espana).

Para mayor informacion complete, por favor, los datos siguientes, y invielos al correo electronico, expuesto mas abajo.

 Eliminar no se completa
1. Apellido, nombre.
2. Edad.
3. Pais de residencia.
4. Movil

Contacto - Nelson@es-citezen.com

Lunes - Tristan@es-citezen.com

Nuestro personal se comunicara con Usted con mas informacion detallada sobre las respuestas a todas sus preguntas, que Usted puede preparar.
Seguro que los ingresos adicionales no estaran de mas!
Gracias y buen dia!

Información de la Policía, Interpol,

Return-Path:
Received: from aerovironment.com (vc-41-27-211-152.umts.vodacom.co.za [41.27.211.152] (may be forged))
    by mailer.ran.es (8.14.2/8.13.8) with SMTP id o7I8FJ2N014140;
    Wed, 18 Aug 2010 10:15:31 +0200
Date: Wed, 18 Aug 2010 10:15:19 +0200
Message-Id: <201008180815.o7I8FJ2N014140@mailer.ran.es>
To:
Subject: trabajo/ˆ 3002 por mes
From:
MIME-Version: 1.0
Importance: High
Content-Type: text/html
X-UIDL: 2J[!!f$,!!7:)!!#34"!
Status: U
Old-X-EsetId: E74D982990713469F84B987D9D2576
X-EsetId: E74D982990713469F84B987D9D2576
X-EsetScannerBuild: 7667

De lunes 16 Agosto 2010

Return-Path: esta dirección no existe en itccommunications.net
Return-Path:
Received: from dynamicip-94-181-230-136.pppoe.kirov.ertelecom.ru (dynamicip-94-181-230-136.pppoe.kirov.ertelecom.ru [94.181.230.136])
    by mailer.ran.es (8.14.2/8.13.8) with SMTP id o7GFjfeo021694;
    Mon, 16 Aug 2010 17:46:03 +0200
Date: Mon, 16 Aug 2010 17:46:02 +0200
Message-Id: <201008161546.o7GFjfeo021694@mailer.ran.es>
To:
Subject: trabajo/ˆ 3002 por mes
From:   no es cierto
MIME-Version: 1.0
Importance: High
Content-Type: text/html
X-UIDL: 5*(!!])~"!"FS"!A-,"!
Old-X-EsetId: E74D982990713469F84B987D9D2676
Old-X-EsetId: E74D982990713469F84B987D9D2676
X-EsetScannerBuild: 7659
X-EsetId: E74D982990713469F84B987D9D2678
 

seguridad internautas - Un peligro en auge. El fraude puede venir disfrazado de oferta de trabajo.

• El delincuente “gracioso” de phishing de Caja Madrid.
• Listado de dominios falsos que simulan ser entidades financieras españolas en el extranjero.
• Descubrimos una nueva web falsa de recargas de móvil que simula ser Movistar.
• La Asociación de Internautas descubre y alerta de una web falsa de recargas de móvil.
• Varias web falsas para robar claves de usuarios de Hotmail
• Descubierta una red de venta de entradas falsas que suplantan sitios web oficiales de eventos deportivos.
• Malware disfrazado de video X de la actriz española Penélope Cruz.
• Pharming bancario, un caso real y activo.
• Nuevo antivirus falso.
• Caixa Galicia, publicidad y seguridad parecen ser incompatibles.

 

Inbox - trabajo/Euro 3000 por mes (estafador en la misma, dominio nuevo, misma carta, todavía roba nuestro nombre de dominio)

El phishing, robo de identidad, lavado de dinero correo  electrónico que no ha enviado a nosotros mismos

From: webmaster@itccommunications.net

To: webmaster@itccommunications.net

Sent: Sunday, August 15, 2010 4:58 PM

Subject: trabajo/Euro 3000 por mes

 buenos dias!

Nuestra compania admite los colaboradores aut?nomos con un sueldo de 1041-2000 Eur por semana.
Los requisitos de los aspirantes son: edad de 18 a 55 anos, hombres y mujeres, residentes en Espania o en los paises vecinos, el acceso a Internet y correo electronico.

Para mayor informacion complete, por favor, los datos siguientes, y invielos al correo electronico, expuesto mas abajo.
 Eliminar no se completa
1. Apellido, nombre.
2. Edad.
3. Pais de residencia.
4. Movil

Envie los datos a la direccion Celina@es-citezen.com
 
Dentro de 1-3 jornadas laborales recibira una descripcion detallada. Nuestra propuesta es valida hasta 31/08/2010
 
Por favor, envie a la direccion indicada solo la informacion necesaria, y nada mas.

Saludos

Información de la Policía, Interpol,

Return-Path: esta dirección no existe en itccommunications.net
Received: from alcoa.com.br (187.114.98.150.static.host.gvt.net.br [187.114.98.150] (may be forged))
    by mailer.ran.es (8.14.2/8.13.8) with SMTP id o7FEwX6R027189;
    Sun, 15 Aug 2010 16:58:39 +0200
Date: Sun, 15 Aug 2010 16:58:37 +0200
Message-Id: <201008151458.o7FEwX6R027189@mailer.ran.es>
To:
Subject: trabajo/Euro 3000 por mes
From: no es cierto
MIME-Version: 1.0
Importance: High
Content-Type: text/html
X-UIDL: 9fW"!E~L!!=h8!!%V+!!
Old-X-EsetId: E74D982990713469F84B987D9D2670
X-EsetId: E74D982990713469F84B987D9D2670
X-EsetScannerBuild: 7651
 

seguridad internautas - Un peligro en auge. El fraude puede venir disfrazado de oferta de trabajo.

• El delincuente “gracioso” de phishing de Caja Madrid.
• Listado de dominios falsos que simulan ser entidades financieras españolas en el extranjero.
• Descubrimos una nueva web falsa de recargas de móvil que simula ser Movistar.
• La Asociación de Internautas descubre y alerta de una web falsa de recargas de móvil.
• Varias web falsas para robar claves de usuarios de Hotmail
• Descubierta una red de venta de entradas falsas que suplantan sitios web oficiales de eventos deportivos.
• Malware disfrazado de video X de la actriz española Penélope Cruz.
• Pharming bancario, un caso real y activo.
• Nuevo antivirus falso.
• Caixa Galicia, publicidad y seguridad parecen ser incompatibles.

Inbox - trabajo/eur 3000 por mes (esto es una estafa)

Esto es una estafa de correo electrónico y la investigación indica que el pasado tiene su origen en Lagos, Nigeria y otro sitio ha dicho que este tipo de cartas es la búsqueda de personas para el blanqueo de dinero en concepto de sus actividades ilegales de piratería informática en las cuentas bancarias de personas. Por supuesto que usted solicitó para el trabajo y se aceptaron que no sería consciente de lo que se te piden que hagas. Sólo dile eso al juez y ver lo que dice. Han tenido la cara dura de usar nuestro nombre de dominio como remitente del correo electrónico.

 From: webmaster@itccommunications.net

To: webmaster@itccommunications.net

Sent: Thursday, August 05, 2010 12:43 PM

Subject: trabajo/eur 3000 por mes

iHola!

Nuestra compania admite los colaboradores aut?nomos con un sueldo de 1010-2053 euro por semana.
 
Los requisitos de los aspirantes son: edad de 18 a 55 anos, hombres y mujeres, residentes en Espania o en los paises vecinos, el acceso a Internet y correo electronico.
.

No complete esta sección. Acaban de cambiar el nombre de dominio desde el intento de estafa cartas última

.
Para mayor informacion complete, por favor, los datos siguientes, y invielos al correo electronico, expuesto mas abajo.
1. Apellido, nombre.
2. Edad.
3. Pais de residencia.

Envie los datos a la direccion Osmaro@es-position.net
 
Dentro de 1-3 jornadas laborales recibira una descripcion detallada. Nuestra propuesta es valida hasta 31/05/2009
 
Por favor, envie a la direccion indicada solo la informacion necesaria, y nada mas.

Hasta la vista
.

Información de la Policía, Interpol,

Return-Path:
Received: from alysis.nl ([109.167.85.203])
    by mailer.ran.es (8.14.2/8.13.8) with SMTP id o75AhAYa001025;
    Thu, 5 Aug 2010 12:43:12 +0200
Date: Thu, 5 Aug 2010 12:43:10 +0200
Message-Id: <201008051043.o75AhAYa001025@mailer.ran.es>
To:
From:
Subject: trabajo/eur 3000 por mes
MIME-Version: 1.0
Importance: High
Content-Type: text/html
X-UIDL: R)%#!!ll!!C^*"!pTK"!
Old-X-EsetId: E74D982990713469F84B987D9E2A78
X-EsetId: E74D982990713469F84B987D9E2A78
X-EsetScannerBuild: 7599
.

Pensamos que el estafador sabe que hemos expuesto su primera carta a nosotros esta mañana aquí en el presente, la segunda es más informal

Inbox - trabajo/eur 3002 por mes (esto es una estafa)

Esto es una estafa de correo electrónico y la investigación indica que el pasado tiene su origen en Lagos, Nigeria y otro sitio ha dicho que este tipo de cartas es la búsqueda de personas para el blanqueo de dinero en concepto de sus actividades ilegales de piratería informática en las cuentas bancarias de personas. Por supuesto que usted solicitó para el trabajo y se aceptaron que no sería consciente de lo que se te piden que hagas. Sólo dile eso al juez y ver lo que dice. Han tenido la cara dura de usar nuestro nombre de dominio como remitente del correo electrónico.

 From: webmaster@itccommunications.net

To: webmaster@itccommunications.net

Sent: Thursday, August 05, 2010 7:51 AM

Subject: trabajo/eur 3002 por mes
. 
Le saludo!

Nuestra compania admite los colaboradores aut?nomos con un sueldo de 1060-2071 EURO por semana.

.
Los requisitos de los aspirantes son: edad de 18 a 55 anos, hombres y mujeres, residentes en Espania o en los paises vecinos, el acceso a Internet y correo electronico.

No complete esta sección. Acaban de cambiar el nombre de dominio desde el intento de estafa cartas última

Para mayor informacion complete, por favor, los datos siguientes, y invielos al correo electronico, expuesto mas abajo.
1. Apellido, nombre.
2. Edad.
3. Pais de residencia.

Envie los datos a la direccion Remedios@es-position.net
.
Dentro de 1-3 jornadas laborales recibira una descripcion detallada. Nuestra propuesta es valida hasta 31/05/2009
.
Por favor, envie a la direccion indicada solo la informacion necesaria, y nada mas.

Esperamos la cooperacion

Información para la Policia / Interpol

Received: from 10-49-94-178.pool.ukrtel.net (10-49-94-178.pool.ukrtel.net [178.94.49.10])
    by mailer.ran.es (8.14.2/8.13.8) with SMTP id o755pS9S028482
    for ; Thu, 5 Aug 2010 07:51:29 +0200
Date: Thu, 5 Aug 2010 07:51:28 +0200
Message-Id: <201008050551.o755pS9S028482@mailer.ran.es>
To:
From:
Subject: trabajo/eur 3002 por mes
MIME-Version: 1.0
Importance: High
Content-Type: text/html
X-UIDL: kQ:"!p>9"!*_6"!QT\!!
Status: U
Old-X-EsetId: E74D982990713469F84B987D9E2A76
Old-X-EsetId: E74D982990713469F84B987D9E2A76
X-EsetScannerBuild: 7599
X-EsetId: E74D982990713469F84B987D9E2A78

Inbox - Info (delete email as this is a Scam - Phishing attempt)

1st email

From: "National Lottery" <info@irnl.org>

Sent: Wednesday, August 04, 2010 1:04 PM

Subject: info

You are a winner of 750:000 pounds,

Please acknowledge the receipt of this mail with the details below to
Mrs, Doris Fred On
Email::irsn_dorisdc@btinternet.com

do not complete as this is a phishing attempt
Name
Address
Age
Occupation
Tel
City/State
Country
--
This mail was scanned by BitDefender
For more information please visit http://www.bitdefender.com/

Checking on JBMail there were no recipients named. We were requested to acknowledge 
receipt of email which we did not

Information for the Police / Interpol

Return-Path:
Received: from mailsrv.mmediu.ro (mailsrv.mmediu.ro [194.102.67.7])
    by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o750RQvw004754
    for ; Thu, 5 Aug 2010 02:27:27 +0200
Received: (qmail 14640 invoked by uid 210); 4 Aug 2010 11:04:30 -0000
Received: from 127.0.0.1 by mailsrv (envelope-from , uid 201) with qmail-scanner-2.05st
 (clamdscan: 0.95.3/11492. spamassassin: 3.2.5. perlscan: 2.05st. 
 Clear:RC:1(127.0.0.1):.
 Processed in 0.018145 secs); 04 Aug 2010 11:04:29 -0000
Received: from unknown (HELO webmail.mmediu.ro) (127.0.0.1)
  by 0 with SMTP; 4 Aug 2010 11:04:29 -0000
Received: from 174.34.174.4
        (SquirrelMail authenticated user iozefina.lipan)
        by webmail.mmediu.ro with HTTP;
        Wed, 4 Aug 2010 14:04:29 +0300
Message-ID: <8031ef0082a343248dd6517e67efe266.squirrel@webmail.mmediu.ro>
Date: Wed, 4 Aug 2010 14:04:29 +0300
Subject: info
From: "National Lottery"
Reply-To: irsn_dorisdc@btinternet.com
User-Agent: SquirrelMail/1.4.20
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Confirm-Reading-To: info@irnl.org
Disposition-Notification-To: info@irnl.org
X-Priority: 1 (Highest)
Importance: High
Return-Receipt-To: info@irnl.org
X-BitDefender-Spam: No (441)
X-BitDefender-SpamStamp: v1, build 2.8.85.101066, SQMD Hits: Timeout,
 rbl score: 0(0), bayes score: 500(0), pbayes score: 230(0), neunet
 score: 441(441), flags: [NN_F_SPAMLIKE], SQMD:
 27ad85f4d7f854e8315818b3003bd942.fuzzy.fzrbl.org, total: 441(775)
X-BitDefender-CF-Stamp: none
X-BitDefender-Scanner: Clean, Agent: BitDefender qmail 3.1.0 on
 mailsrv.mmediu.ro, sigver: 7.33184
X-UIDL: 4lb"!2UV!!fY*"!)H>!!
Status: U
Old-X-EsetId: E74D982990713469F84B987D9E2A76
Old-X-EsetId: E74D982990713469F84B987D9E2A76
X-EsetScannerBuild: 7599
X-EsetId: E74D982990713469F84B987D9E2A78

2nd email

From: "National Lottery" <info@irnl.org>

Sent: Wednesday, August 04, 2010 12:13 PM

Subject: info

You are a winner of 750:000 pounds,

Please acknowledge the receipt of this mail with the details below to
Mrs, Doris Fred On
Email::irsn_dorisdc@btinternet.com

do not complete as this is a phishing attempt
Name
Address
Age
Occupation
Tel
City/State
Country
--
This mail was scanned by BitDefender
For more information please visit http://www.bitdefender.com/


Checking on JBMail there were no recipients named. We were requested to acknowledge 
receipt of email which we did not
 .

Information for the Police / Interpol

Return-Path:
Received: from mailsrv.mmediu.ro (mailsrv.mmediu.ro [194.102.67.7])
    by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o752gPWX011077
    for ; Thu, 5 Aug 2010 04:42:26 +0200
Received: (qmail 30899 invoked by uid 210); 4 Aug 2010 10:13:44 -0000
Received: from 127.0.0.1 by mailsrv (envelope-from , uid 201) with qmail-scanner-2.05st
 (clamdscan: 0.95.3/11492. spamassassin: 3.2.5. perlscan: 2.05st.
 Clear:RC:1(127.0.0.1):.
 Processed in 0.039024 secs); 04 Aug 2010 10:13:43 -0000
Received: from unknown (HELO webmail.mmediu.ro) (127.0.0.1)
  by 0 with SMTP; 4 Aug 2010 10:13:43 -0000
Received: from 41.219.254.4
        (SquirrelMail authenticated user iozefina.lipan)
        by webmail.mmediu.ro with HTTP;
        Wed, 4 Aug 2010 13:13:43 +0300
Message-ID: <14a64f06f25e1e88db0de8d9305f92d9.squirrel@webmail.mmediu.ro>
Date: Wed, 4 Aug 2010 13:13:43 +0300
Subject: info
From: "National Lottery"
Reply-To: irsn_dorisdc@btinternet.com
User-Agent: SquirrelMail/1.4.20
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Confirm-Reading-To: info@irnl.org
Disposition-Notification-To: info@irnl.org
X-Priority: 3 (Normal)
Importance: Normal
Return-Receipt-To: info@irnl.org
X-BitDefender-Spam: No (441)
X-BitDefender-SpamStamp: v1, build 2.8.85.101057, SQMD Hits: Timeout,
 rbl score: 0(0), bayes score: 500(0), pbayes score: 230(0), neunet
 score: 441(441), flags: [NN_F_SPAMLIKE], SQMD:
 26909541088ffde5b9a37ad679e61914.fuzzy.fzrbl.org, total: 441(775)
X-BitDefender-CF-Stamp: none
X-BitDefender-Scanner: Clean, Agent: BitDefender qmail 3.1.0 on
 mailsrv.mmediu.ro, sigver: 7.33183
X-UIDL: ;"$!!b,W!!&bQ!!QMe!!
Status: U
Old-X-EsetId: E74D982990713469F84B987D9E2A76
Old-X-EsetId: E74D982990713469F84B987D9E2A76
X-EsetScannerBuild: 7599
X-EsetId: E74D982990713469F84B987D9E2A78
 

Inbox - part-time employment (we believe that the sender has used the law firm www.relmanlaw.com as a front & are investigating)

Speech of welcome


I work as a manager at a large company. Our company takes an active part in the life of its subsidiaries, for example:
- companies setting-up
– companies winding-up
– opening accounts in Europe
– etc.

We need employees in Europe:
- salary 2.500 euro + bonus
- 1-2 working hours per day
- flexible work time


If you are ready to work as a regional manager in Europe send us the below information on email:

h r @ e u r j o b s . o r g [please delete spaces before sending]

Do not complete as we believe this is a Phishing attempt  Scammers use a know respectable name in the industry - in this casetheir domain leaving out the eurojobs.com  "O"
Name:
Surname:
Country:
E-mail:
Mobile phone-number:
Attention! We are looking for the people who have a right to work in Europe!

Please, write your name and Telephone Number so that our manager could contact you and conduct an interview.  

Information for the Police / Interpol
Return-Path: <sicknessesru@relmanlaw.com>
Received: from dsldevice.lan (adsl190-28-77-244.epm.net.co [190.28.77.244])
 by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o6THQErY024890
 for ; Thu, 29 Jul 2010 19:26:32 +0200
Received: from 190.28.77.244 by relmanlaw.com.s5b1.psmtp.com; Thu, 29 Jul 2010 12:26:12 -0500
Message-ID: <000d01cb2f43$23f5b290$6400a8c0@sicknessesru>
From: "Pryor0BRNIS" <Pryor0BRNIS@we-help-u.biz>
To: <?>Subject: part-time employment
Date: Thu, 29 Jul 2010 12:26:12 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="----=_NextPart_000_0007_01CB2F43.23F5B290"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-UIDL: 0SM"!L9N!!^,$"!%PY!!
Old-X-EsetId: E74D982990713469F84B987D9E2570
Old-X-EsetId: E74D982990713469F84B987D9E2570
X-EsetScannerBuild: 7563
X-EsetId: E74D982990713469F84B987D9E2572

We have contacted the law firm www.relmanlaw.com  to ascertain whether or not they sent this letter. They have used the respectable law firms name for the Return Path sicknessru@relmanlaw.com - the sicknessru not existing @relmanlaw.com being genuine
Of course they know that the potential victim will not go looking for this information in "Archives" having placed the mouse over the Subject heading and then Properties

 Relman, Dane & Colfax PLLC

1225 19th St. NW, Suite 600
Washington, DC 20036
USA

(202) 728-1888

(202) 728-0848

info@relmanlaw.com

Inbox - CONTACT US FOR MORE INFORMATION - Don´t bother it is a Phishing Scam

The English Minister of Security is to announce a competition to fight against Internet crime such as Phishing

An email sent to our South American correspondent

We wish to inform you that We have sent $5000.00 USD already ,that was given to you by the United Nations,(ECOWAS ) as we are mandated to send you the total sum  of $300,000USD through Western Union.

send name, address,phone number.Processing  your first payment of 5,000 USD.to collect / Sender:irst Name LAWRENCE CHIBUZO Surname ANIEGBOKO MTCN 2012511731

Regards

Mr Frank Amos

Phone:+234-8070700985 E- mail:western-money_transfer@live.hk

Information for the Police / Interpol

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9NA==

X-Message-Status: n:0

X-SID-PRA: WESTERN UNION MONEY TRANSFER

X-AUTH-Result: NONE

X-Message-Info: I4Ca42no503lmxUSWR6NgA+088du0XLu14U+xUhH6cX9ol6blWvFPYqdPT96HUAGvjIDBEFA/1y/ChqRSvdDI/wv4tCJ+tDa1DuopzDi4kQ=

Received: from aa011msr.fastwebnet.it ([85.18.95.71]) by snt0-mc4-f26.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);

             Thu, 22 Jul 2010 15:17:21 -0700

Received: from pr005msr (10.31.174.234) by aa011msr.fastwebnet.it (8.5.016.6)

        id 4C163E1A05420995; Fri, 23 Jul 2010 00:16:40 +0200

Message-ID: <19319733.2573921279837000155.JavaMail.root@pr005msr>

Date: Fri, 23 Jul 2010 00:16:40 +0200 (CEST)

From: WESTERN UNION MONEY TRANSFER

Reply-To: western-money_transfer@live.hk

Subject: CONTACT US FOR MORE INFORMATION

MIME-Version: 1.0

Content-Type: text/plain;charset="UTF-8"

Content-Transfer-Encoding: 7bit

X-Originating-IP: 216.66.59.47

Bcc:

Return-Path: maputo@fastwebnet.it

X-OriginalArrivalTime: 22 Jul 2010 22:17:21.0516 (UTC) FILETIME=[A78B2AC0:01CB29EB]

Inbox - SCAM email Received by our South American Correspondent

An Atm card containing £654,000.00 Great British Pounds have been awarded to you

Do not complete this is a phishing attempt

Contact with your [Names,Address,Country,Tel],

Email:atm.card14@qatar.io

Tel:+2348062836733

Sincerely,

Dr.John Oboh

Information for the Police / Interpol
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9NA==
X-Message-Status: n:0
X-SID-PRA: Oceanic Bank Plc
X-AUTH-Result: NONE
X-Message-Info: oem3jKoZKwoIVmFc1VnAC7bWSlzVDxAo+6bD8EWdWQVMBAslw2TxHivkdqXazgxLFF5edo7XpfiCIGRPR3UrvR4JktHPOsHNwiHs3hw5ecQ=
Received: from aa012msr.fastwebnet.it ([85.18.95.72]) by bay0-mc1-f10.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Mon, 19 Jul 2010 08:04:55 -0700
Received: from pr006msr (10.31.174.235) by aa012msr.fastwebnet.it (8.5.016.6)
id 4BF551DA075BA5A2; Mon, 19 Jul 2010 17:04:31 +0200
Message-ID: 10549840.168351279551870768.JavaMail.defaultUser@defaultHost
Date: Mon, 19 Jul 2010 17:04:30 +0200 (CEST)
From: Oceanic Bank Plc
Reply-To: atm.card09@qatar.io
Subject: Atm card
MIME-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: 64.62.196.33
Bcc:
Return-Path: giorgiotagliabue@fastwebnet.it
X-OriginalArrivalTime: 19 Jul 2010 15:04:55.0756 (UTC) FILETIME=[BF6D20C0:01CB2753]

Inbox - Recipient Directives On Foreign Payment FROM THE OFFICE OF MR. TIMOTHY F. GEITHNER No it is a scam

I hope that Mr Timothy Geithner can get the FBI active on this scam attempt
FROM THE OFFICE OF MR. TIMOTHY F. GEITHNER

Senior Secretary, Foreign Assets Control

The U.S. Department of the Treasury

Treasury Annex

1500 Pennsylvania Avenue, NW

Washington, DC 20220

United States of America

Tel: +1-(206) 203-5862

Fax: +1-(202) 478-0979

Tuesday, July 13, 2010

Our Ref: USA/TREAS/898ATCP

Your ref: USA/IMF/7890/121

COMMITTEE ON FOREIGN PAYMENT RESOLUTION PANEL ON WITHHELD PAYMENTS

After reviewing your online email communication messages on your unsuccessful transactions with most European and other foreign banks in Africa, we wish to let you know that we have communicated with most of these foreign banks that withheld most international payments to individual accounts so as to find out why these funds were withheld and the source of the funds.

Conclusively, we discovered that most of these withheld and/or unpaid funds being remitted to individual accounts abroad originated from lottery organizations, international trading companies and deceased personals.

Such transfer suspension was placed on these funds because majority of these international fund remittance/transfer of over the total sum of $500,000 and above to private individuals account abroad, usually carried out by foreign Banks, Private or Commercial Courier Companies were never properly recorded by the paying institution for future file reference/assessment by Crime Monitoring Units/Agencies.

In joint alliance with the HMRC Treasury Europe, the European Financial Service Commission & the International Monetary Fund (IMF) to resolve this issue, we wish to let you know that we have approved to release only the total sum of Seven Million United States Dollars ($7,000,000.00 USD) to enable you start up your own business.

Through the assistance of the International Criminal Police Organization (ICPO) to investigate and release suspended, withheld and/or unpaid Inheritance/Award Winning/Contract funds to its beneficiaries account abroad, we were able to gain an approval authorization letter from the International Monetary Fund (IMF) which stated that these funds will be released by these European and other foreign banks to its beneficiary on proper confirmation of its claim.

By the virtue of the provision of the law which confer on us powers to advocate, adjudicate suspend and authorize an immediate transfer of your funds internationally, we hereby state emphatically and without prejudice that should there be any information that may succeed your application for fund release that are currently deposited in most European and other foreign banks, please do not hesitate to provide us the information so that we will know how to help you receive your funds.

Kindly provide your personal contact details by sending us the information below along with a scanned copy of your international passport or drivers license so that we will forward it for verification and payment.

Do not complete - this is a phishing attempt

PERSONAL DETAILS;	ANSWERS;
1. Your Full Name, Nationality & Current Location.
2. Your Age & Current Occupation.
3. Your Phone & Fax Number.
4. Your ID Number (or Attach Identification Documents).

Important Notice: Your inability to make this clarification for fund transfer with the International Monetary Fund (IMF) will continue to suspend your chances of receiving any international payment directed to your local bank account from any foreign bank until this clarification is made.

Failure to properly apply for the funds release for transfer to you within 7 days, will nullify your chances of receiving this funds, and this funds will be confiscated and made to be forfeited under the Money Laundering and Other Financial Crime Prohibition Act of 2003.

Also note that due to my position as the Secretary of the US Department of the Treasury, I will not be available to answer any of your calls because i am not always in my office due to the states political matters and my office numbers are usually engaged until i return after few days. If you have any issue to discuss regarding your funds, kindly email me and i will always get back to you as soon as possible.

Email: ( Click here to eMail )

Regards,

Senior Secretary,

Foreign Assets Control.

U.S. Department of the Treasury.

============================================

Questions about this information should be directed to

The U.S. Department of the Treasury

Telephone: +1-(206) 259-6650. or | By eMail |

For the attention of the Police FBI
Return-Path:
Received: from acward-srv01.ACWard.local (77-76-67-26.static.dsl.as8607.net [77.76.67.26] (may be forged))
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o6EC8Wfv031184
for no recipients; Wed, 14 Jul 2010 14:08:33 +0200
Received: from User ([41.217.66.4]) by acward-srv01.ACWard.local with Microsoft SMTPSVC(6.0.3790.1830);
Wed, 14 Jul 2010 13:07:16 +0100
Reply-To:
From: "U.S Department of the Treasury"
Subject: Recipient Directives On Foreign Payment
Date: Wed, 14 Jul 2010 05:05:36 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID:
X-OriginalArrivalTime: 14 Jul 2010 12:07:17.0250 (UTC) FILETIME=[1A656E20:01CB234D]
X-UIDL: Xb%"!a^b!!;6'!!&Ai"!
Old-X-EsetId: E74D982990713469F84B987D9F2576
X-EsetId: E74D982990713469F84B987D9F2576
X-EsetScannerBuild: 7467

Inbox - SPAM OR SCAM? IMAGEN IF YOU COULD EARN $750.00 A DAY!

They continue to poor in - similar wording similar style with the url from time to time changed
I have not personally tested the links but they could be phishing and or money laundering via these emails and if it is the latter you might end up in prison - best not to click on and delete the email. Please note that in the section labelled information for the police you will see the phrase may be forged That should be a warning to you

The Nigerian scammer will pass your email address around to other gangs in Lagos Nigeria - for a fee or percentage

THE PROGRAM WHICH MAKE ME

RICH I'D LIKE TO SHARE IT TO YOU!

UNBELIEVABLE BUT IT'S TRUE...................

FOR MORE INFO: VISIT THE LINK BELOW

==>>>wealthonemailbizpro.50webs.com/

Information for the Police
Return-Path:
Received: from mail.com (gui.maxihost.com.br [189.1.169.32] (may be forged))
by mailer.ran.es (8.14.2/8.13.8) with SMTP id o6C0AZMc011692
for undisclosed-recipients <undisclosed-recipients>; Mon, 12 Jul 2010 02:10:38 +0200
Message-Id: <201007120010.o6c0azmc011692@mailer.ran.es>
From: "AMEI PEREZ"
Subject: IMAGEN IF YOU COULD EARN $750.00 A DAY!
Date: Mon, 12 Jul 2010 08:15:38 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-UIDL: j-&!!$F]"!f^T!!d@g!!
Status: U
Old-X-EsetId: E74D982990713469F84B987D9F2670
Old-X-EsetId: E74D982990713469F84B987D9F2670
X-EsetScannerBuild: 7459
Old-X-EsetId: E74D982990713469F84B987D9F2676
X-EsetId: E74D982990713469F84B987D9F2678

Inbox - Comience a construir su carrera inmediatamente! UN TIMOR

Estos estafadores se dice que son residentes de Nigeria en España, legales o ilegales. Cuando se les pille la policía deben ser deportados a su país preferible a la selva que en realidad es donde deben estar

Hay una crisis de desempleo en España con veinte por ciento por lo que están colgando el trabajo delante de la gente con la esperanza de robar su identidad de las personas, muy posiblemente desempleados. Estas personas son los más bajos de los más bajos en este planeta.

La organización necesita un manager.

La Compañía se ocupa de consultas, elabora resoluciones creativas para el negocio, gestiona las inversiones. Nosotros estamos trabajando tanto con las personas privadas como con las firmas.

Requerimientos:

Edad de 22 a 70 años, sociabilidad y carácter comunicativo, dinamismo, propensión al resultado, ciudadanía europea, derecho de trabajo en el territorio de Europa. Experirncia de trabajo no es obligatoria. Saber hablar español.

Nosotros estamos desarrollando en el mercado europeo y estamos abiertos para los especialistas jóvenes y estudiantes de los centros de enseñanza superior.

Obligaciones:

Realización de las investigaciones de marketing a solicitud del cliente, procesamiento de los pagos, celebración de las negociaciones no complejas, trabajo con la correspondencia.

Condiciones:

Gráfico laboral: flexible, es posible la ocupación tanto completa como parcial.
Paquete social, formalización oficial.
En la Compañía se presta mucha atención al desarrollo de carrera. Apreciamos mucho a la gente que sea capaz de lograr buenos resultados

Salario:

2,000 euros fijos más premios mensuales.

Información de contacto:

Si Ud. desee ocupar esta vacante, envíeme su resumen a la dirección:
m a i l @ w e s t u n i o n h i r i n g . c o m [por favor elimine los espacios en la direccion de email]

Con saludos cordiales,
Ruy Santiago

Información para la Policia
Return-Path:
Received: from 41.subnet110-136-160.speedy.telkom.net.id (41.subnet110-136-160.speedy.telkom.net.id [110.136.160.41] (may be forged))
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o6BI30IG012756;
Sun, 11 Jul 2010 20:03:03 +0200
Message-ID: <000d01cb2123$4b7a2860$6400a8c0@rankingeazi060>
From: "Ruy Santiago"
To:
Subject: Comience a construir su carrera inmediatamente!
Date: Mon, 12 Jul 2010 01:02:58 +0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01CB2123.4B7A2860"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-UIDL: _UG"!?MU!!6hQ"!fW_!!
Old-X-EsetId: E74D982990713469F84B987D9F2778
X-EsetId: E74D982990713469F84B987D9F2778
X-EsetScannerBuild: 7449

Inbox - NOTE :The Diplomatic agent does not know that the content of the consignment THE TYPICAL SCAM LETTER!

Attn: Beneficiary,

We wish to inform you that the diplomatic agent conveying the consignment
box valued the sum of $2.5 Million United States Dollars misplaced your
address and he is currently stranded at your JF Kennedy International
Airport New York City. We required you to reconfirm the following
informations below to him so that he can deliver your consignment box to
you today.

PHISHING/IDENTITY THEFT
NAME: ========
ADDRESS: ======
MOBILE NO.:======
NAME OF YOUR NEAREST AIRPORT:======
A COPY OF YOUR IDENTIFICATION :=======

Please do contact the diplomatic agent through his email address or phone
below with the required informations.

Contact person : mr john willis
EMAIL:(johnwillis150@yahoo.com )
Tellphone number 716 240 8806. He is waiting to hear from you today with
the informations.

NOTE :The Diplomatic agent does not know that the content of the
consignment box is $2.5 Millions United States Dollars and on no
circumstances should you let him know the content. The consignments was
moved from here as African Cloths, so never allow him to open the box.

Thanks,

MY BEST REGARDS

Stephen Kally, Managing Director Delivering Department.
Tel;+229 98 56 21 87

Information for the Police this information can assist in tracking the sender if a Bot has not been used, but still may assist
Return-Path:
Received: from sunx4200.dtwwwhosting.com (ns1.dtwwwhosting.com [209.107.194.208] (may be forged))
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o6BCUbca022901
for ; Sun, 11 Jul 2010 14:30:38 +0200
Received: from localhost.localdomain ([127.0.0.1] helo=209.107.194.208)
by sunx4200.dtwwwhosting.com with esmtp (Exim 4.60)
(envelope-from )
id 1OUjky-0007xo-BR; Fri, 02 Jul 2010 10:10:28 -0700
Received: from 41.191.85.137
(SquirrelMail authenticated user kelly)
by 209.107.194.208 with HTTP;
Fri, 2 Jul 2010 10:10:28 -0700 (PDT)
Message-ID: <53674.41.191.85.137.1278090628.squirrel@209.107.194.208>
Date: Fri, 2 Jul 2010 10:10:28 -0700 (PDT)
Subject: NOTE :The Diplomatic agent does not know that the content of the
consignment
From: kelly@194.208
User-Agent: SquirrelMail/1.4.6
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-UIDL: T7+"!?4f!!WdG!!O`Q!!
Old-X-EsetId: E74D982990713469F84B987D9F2778
X-EsetId: E74D982990713469F84B987D9F2778
X-EsetScannerBuild: 7449

Inbox - Buena oferta a los europeos! Un timor!

La organización necesita un manager.

La Compañía se ocupa de consultas, elabora resoluciones creativas para el negocio, gestiona las inversiones. Nosotros estamos trabajando tanto con las personas privadas como con las firmas.

Requerimientos:

Edad de 22 a 70 años, sociabilidad y carácter comunicativo, dinamismo, propensión al resultado, ciudadanía europea, derecho de trabajo en el territorio de Europa. Experirncia de trabajo no es obligatoria. Saber hablar español.

Nosotros estamos desarrollando en el mercado europeo y estamos abiertos para los especialistas jóvenes y estudiantes de los centros de enseñanza superior.

Obligaciones:

Realización de las investigaciones de marketing a solicitud del cliente, procesamiento de los pagos, celebración de las negociaciones no complejas, trabajo con la correspondencia.

Condiciones:

Gráfico laboral: flexible, es posible la ocupación tanto completa como parcial.
Paquete social, formalización oficial.
En la Compañía se presta mucha atención al desarrollo de carrera. Apreciamos mucho a la gente que sea capaz de lograr buenos resultados

Salario:

2,000 euros fijos más premios mensuales.

Información de contacto:

Si Ud. desee ocupar esta vacante, envíeme su resumen a la dirección:
m a i l @ w e s t u n i o n h i r i n g . c o m [por favor elimine los espacios en la direccion de email]
hemos visto esta formato antes en español y ingles

Con saludos cordiales,
Amparo Lovato

Información para la Policia
Return-Path:
Received: from bd7bd565.virtua.com.br (bd7bd565.virtua.com.br [189.123.213.101] (may be forged))
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o6A0MktL022478;
Sat, 10 Jul 2010 02:22:47 +0200
Message-ID: <000d01cb1fc6$055da540$6400a8c0@letsc099>
From: "Amparo Lovato"
To:
Subject: Buena oferta a los europeos!
Date: Fri, 9 Jul 2010 21:22:46 -0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01CB1FC6.055DA540"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-UIDL: 4&9!!M$[!!;?A"!Z4""!
Status: U
Old-X-EsetId: E74D982990713469F84B987D9F2772
X-EsetId: E74D982990713469F84B987D9F2772
X-EsetScannerBuild: 7443

Inbox - SPAM OR SCAM? It could be Phishing or Money Laundery so do not reply to it

to: Undisclosed recipients so it is SPAM - ===>>> 20 WAYS TO MAKE $100 DOLLARS PER DAY ONLINE!

Hi!

If you'd like to make money from home working

part-time on the Internet, we have a solution for you.

In fact, we have 20 solutions — 20 different ways

ordinary people can get started right away.

Our goal is to introduce you to the worldwide

marketplace of ideas and get you to say:

"WOW ! I Can Do that Easily!"

"20 Ways To Make $100 Per Day Online" shows

you real-life methods used by people from all corners

of the globe to make money part-time on the Internet.

Choice is the hallmark. Our easy-to-read publication

will inspire you and motivate you to get started.

You'll want to turn to it again and again for guidance

and vital, profitable information.

GET INSTANT ACCESS HERE

pathway100.com/?e=boomprofit

Information for the Police
Return-Path:
Received: from Sender ([218.55.4.96])
by mailer.ran.es (8.14.2/8.13.8) with SMTP id o6A5ndsr017475
for ; Sat, 10 Jul 2010 07:49:42 +0200
Message-Id: <201007100549.o6a5ndsr017475@mailer.ran.es>
From: "Evanne"
Subject: ===>>> 20 WAYS TO MAKE $100 DOLLARS PER DAY ONLINE!
Date: Sat, 10 Jul 2010 12:49:46 +0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
X-UIDL: DVR!!-[d"!g>M!!&nZ!!
Status: U
Old-X-EsetId: E74D982990713469F84B987D9F2772
X-EsetId: E74D982990713469F84B987D9F2772
X-EsetScannerBuild: 7443

the format is the same despite different urls etc., as the other e-mails published here this week
See this post http://bit.ly/cQ5fkq and I repeat this:

http://www.phishbucket.org/main/content/blogsection/16/34/12/0/

Articles

Mystery Company - Jennifer Jones

Mystery Phish

Monday, 05 July 2010

We don't know of a single legitimate employer who'd be stupid enough to shorten the URL to their site in an email to a prospective job candidate. We also noticed the email was relayed through several mail servers before reaching its destination, something that normally shouldn't happen. We've filed it under mystery phish because we don't know what they mean by "processing" emails. A real employer would have sent a proper list of responsibilities along with the skills that would be required, and would have given you a link to their corporate Web site, which you'd be able to research before visiting to ensure they're who they say they are. We suspect this will lead to money muling, which will lead to you getting in all kinds of trouble financially and with law enforcement, so we'd caution against it. Looks to us like it was sent in bulk, and since there's no opt-out (not that you could trust it if there was), it's spam, and the sender is in violation of the CAN-SPAM act. Instead of clicking the URL, have a look at our PDF dump of the site, but don't click any of the links you find inside, since we don't want you to compromise yourself. As you'll see, they continue to be ambiguous about who THEY are (we couldn't find a single reference to a company name), so we don't think you should go giving them YOUR info or let them deposit anything to your PayPal account. They're strangers. Don't play with them!

Inbox - SPAM OR SCAM? <>> You've Got Cash <<>

Successful Payment Notification

Received Every Moment

You Can Make It Too.

==>> http://cash4emailhomebiz.cz.cc/

Information for the Police
Return-Path:
Received: from mail.com ([80.90.196.11])
by mailer.ran.es (8.14.2/8.13.8) with SMTP id o68NnqCi020132
for ; Fri, 9 Jul 2010 01:49:57 +0200
Message-Id: <201007082349.o68nnqci020132@mailer.ran.es>
From: "***eMail4Cash***"
Subject: >> You've Got Cash <<
Date: Sat, 10 Jul 2010 07:52:08 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-UIDL: _6f!!dik"!oQ~#!+bL"!
Status: U
Old-X-EsetId: E74D982990713469F84B987D9F2074
Old-X-EsetId: E74D982990713469F84B987D9F2074
X-EsetScannerBuild: 7441
Old-X-EsetId: E74D982990713469F84B987D9F2076
X-EsetId: E74D982990713469F84B987D9F2770

the format is the same despite different urls etc., as the other e-mails published here this week
See this post http://bit.ly/cQ5fkq and I repeat this:

http://www.phishbucket.org/main/content/blogsection/16/34/12/0/

Articles

Mystery Company - Jennifer Jones

Mystery Phish

Monday, 05 July 2010

We don't know of a single legitimate employer who'd be stupid enough to shorten the URL to their site in an email to a prospective job candidate. We also noticed the email was relayed through several mail servers before reaching its destination, something that normally shouldn't happen. We've filed it under mystery phish because we don't know what they mean by "processing" emails. A real employer would have sent a proper list of responsibilities along with the skills that would be required, and would have given you a link to their corporate Web site, which you'd be able to research before visiting to ensure they're who they say they are. We suspect this will lead to money muling, which will lead to you getting in all kinds of trouble financially and with law enforcement, so we'd caution against it. Looks to us like it was sent in bulk, and since there's no opt-out (not that you could trust it if there was), it's spam, and the sender is in violation of the CAN-SPAM act. Instead of clicking the URL, have a look at our PDF dump of the site, but don't click any of the links you find inside, since we don't want you to compromise yourself. As you'll see, they continue to be ambiguous about who THEY are (we couldn't find a single reference to a company name), so we don't think you should go giving them YOUR info or let them deposit anything to your PayPal account. They're strangers. Don't play with them!