Sunday, February 21, 2010

Keywords & Phrases 20 February 2010 hopefully saved you being scammed

Courtesy www.histats.com Click on a referer to open it in new window
Rank Motor de Búsqueda: Palabra Clave Visitantes Paginas V. Ppv Tpp Rv
1 Google (uk) : your order has been paid
2 2 1
0 (0%)

2 Google (com) : amazon your order has been paid
2 2 1
0 (0%)

3 Google (pl) : lukechamberlaw@live.co.uk
2 2 1
0 (0%)

4 Google (com) : postal_package_nr8422.zip
2 2 1
0 (0%)

5 Google (com) : postal_package_nr8422.exe
2 8 4 2' 41'' 0 (0%)

6 Google (com) : amazon your order has been paid!
2 2 1
0 (0%)

7 Google (gr) : your order has been paid!
1 1 1
0 (0%)

8 Google (com) : postal_package_nr8422
1 2 2 17'' 0 (0%)

9 Google (com) : amazon shop! your order has been paid
1 1 1
0 (0%)

10 Google (com) : your order has been paid parcel nr
1 1 1
0 (0%)

11 Google (com) : win32/kryptic.cnc
1 1 1
0 (0%)

12 Google (se) : sweetru83@yahoo.com
1 1 1
1 (100%)

13 Google (com) : "your order has been paid! "
1 1 1
0 (0%)

14 Google (com) : email with subject: your order has been paid!
1 1 1
0 (0%)

15 Google (com) : your order has been paid!
1 1 1
0 (0%)

16 Google (uk) : postal_package_nr8422.exe
1 1 1
0 (0%)

17 Google (com) : your order has been paid! parcel
1 1 1
0 (0%)

18 Google (in) : your order has been paid! parcel amazon
1 1 1
0 (0%)

19 Google (com) : your order has been paid amazon
1 1 1
0 (0%)

20 Google (com) : amazon "your order has been paid!"
1 1 1
0 (0%)

21 Google (com) : your order has been paid! amazon
1 1 1
0 (0%)

22 Google (com) : amazon mail parcel nr
1 1 1
0 (0%)

23 Google (com) : amazon shop! your order has been paid! parcel
1 1 1
0 (0%)

24 Google (uk) : lukechamberlaw@live.co.uk
1 1 1
0 (0%)

25 Google (ch) : amazon shop! your order has been paid!
1 1 1
0 (0%)

26 Google (com) : what to do if you have been scammed
1 1 1
0 (0%)

27 Google (hr) : amazon shop! your order has been paid! parcel
1 1 1
0 (0%)

28 Google (il) : postal_package_nr8422.zip
1 2 2 1' 31'' 0 (0%)

29 Google (se) : postal_package_nr8422.zip
1 1 1
0 (0%)

30 Google (fr) : virus mail amazon.com your order has been paid
1 1 1
0 (0%)

31 Google (fr) : your order has been paid! amazon
1 1 1
0 (0%)

32 Google (pl) : postal_package_nr8422.zip
1 5 5 14'' 0 (0%)

33 Google (com) : "your order has been paid! parcel nr"
1 1 1
0 (0%)

34 Google (com) : your order has been paid! parcel nr.0607
1 1 1
0 (0%)

35 Google (com) : the free lotto sweepstakes, 12 bridge street, staines middlesex
1 1 1
0 (0%)

36 Google (nz) : greetings, i natalia from russia. i think, that have surprised you with the letter and it is v
1 2 2 2' 33'' 0 (0%)


Saturday, February 20, 2010

Tarot - John next 7 days

Click for Details


The One Card spread is the most concise of all spreads, intended to provide a quick take on a situation, or to reduce it to a single point of meditation. The William Blake Tarot explores the mystical vision and artistry of the renowned English painter and poet. Through rich interpretations focused on creative undertakings, it has long been the deck of choice for artists, writers, musicians, and thinkers. There are only a few autographed copies of the Blake Tarot left, so if you want one, buy it now!
Click for DetailsThe card represents the critical factor for the issue at hand. Moon: Psychic insights. Relying on your instincts. Using your dreams and musings as sources of inspiration. Hidden conditions and unknown circumstances. Cyclic patterns and influences.

Inbox - OFFICIAL NOTIFICATION FROM MICROSOFT AWARD Phishing attempt

MAILER-DAEMON@mailer.ran.es>
Received: from omr9.networksolutionsemail.com (omr9.networksolutionsemail.com [205.178.146.59])
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o1KCdq6l008049
for <xxxxxx@xxxxxx>; Sat, 20 Feb 2010 13:39:53 +0100
Received: from mail.networksolutionsemail.com (mail.networksolutionsemail.com [205.178.146.59])
by omr9.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id o1KCdp0A028802
for <<xxxxxx@xxxxxx>; Sat, 20 Feb 2010 07:39:52 -0500
Message-Id: <201002201239.o1KCdp0A028802@omr9.networksolutionsemail.com>
Received: (qmail 13917 invoked by uid 78); 20 Feb 2010 12:39:50 -0000
Received: from unknown (HELO User) (marrymarrywest@kennethkennethwi13.com@41.213.63.23)
by ns-omr3.lb.hosting.dc2.netsol.com with SMTP; 20 Feb 2010 12:39:50 -0000
Reply-To: <cpinnaclefinagent@gmail.com>
From: "MICROSOFT"<"MICROSOFT"@omr9.networksolutionsemail.com>
Subject:
OFFICIAL NOTIFICATION FROM MICROSOFT AWARD
Date: Sat, 20 Feb 2010 04:39:42 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-UIDL: m$8!!&S##!TFd!!]!["!
Old-X-EsetId: E74D982990713469F84B987C9D2172
Old-X-EsetId: E74D982990713469F84B987C9D2172
X-EsetScannerBuild: 6625
X-EsetId: E74D982990713469F84B987C9D2174
Microsoft Award Team If this was genuine it would come from the USA where Microsoft has it´s HQ
Baley House, Har Road Sutton,
Greater London SMI 4te
United Kingdom
FILE REF: TN/7855/05/07/DINS
BATCH: KP23/857/NDL5 /EU

MICROSOFT AOL ANNIVERSARY AWARD NOTIFICATION.

Dear Lucky Winner,

It is obvious that this notification will come to you as a surprise but please find time to read it carefully as we congratulate you over your success in the following official publication of results of the E-mail electronic online Sweepstakes organized by Microsoft and AOL Corporation, in conjunction with the foundation for the promotion of software products, (F.P.S.) held thisin United Kingdom London.The prestigious MicrosoftAOL has set out and successfully organized a Sweepstakes marking the 2010 Anniversary, from the Board of Microsoft AOL Corporations Award Lottery,we rolled out over 750,000.00 GBP (Seven Hundred and Fifty Thousand Great Britain Pounds) Draws.

Participants for the draws were randomly selected and drawn from a wide range of web hosts which we enjoy their patronage. Your email address as indicated was drawn and attached to ticket number 94857390735 with serial numbers GPT/97846565392/08 and drew the lucky numbers 70-35-15-18-21-70 which subsequently won you 750,000.000 GBP (Seven fifty Thousand Great Britain Pounds).

These are your identification numbers:KVP-9078/145
CATEGORY NO.OF WINNERS WINNING PRIZES
1st. 2 ? 750,000.00 pounds each
2nd. 8 ? 450.000.00 pounds each
3rd. 13 ? 350,000.00 pounds each
4th. 27 ? 270,000.00 pounds each

You are to send down your Claims Requirements and your option of Remittance/Mode Of Collection to Dr.Frank Cole your Claims Agent.

Do not complete it is a phishing scam
CLAIMS REQUIREMENTS:
1. Full names:
2. Residential address:
3. Phone number:
4. Fax number:
5. Occupation:
6. Sex:
7. Age:
8. Nationality:
9. Present Country:
10.Next of kin name/address:
11.How Do you Feel As winner:

Mode Of Price Remittance/Mode Of Collection.
(1)Through A Courier Delivery Of Your Certified Winning Cheque Name And Other.
Winning Documents Safely To You.
(2) Bank Wire Transfer in your nominated bank account.

CONTACT:
********************************************************
FOREIGN TRANSFER MANAGER
DR.FRANK COLE.
MICROSOFT SECURITY DEPARTMENT (UK).

E-mail:
agentbbrian@gmail.com
E-mail: infodiskclaimagentoffice@gmail.com
Check IP 81.47.8.140
IP Address Location results for 81.47.8.140
IP Address: 81.47.8.140 WhoIs Lookup IP BlackList Lookup
Hostname: 140.Red-81-47-8.staticIP.rima-tde.net Reverse DNS
[See complete information about your system with our IP Information tool!]

IP Address Conversion - IP Convert for 81.47.8.140 to Hex & to Dec
IP to Dec [IP Address to decimal]: 1362036876
IP to Hex [IP Address to hexadecimal]: 512f088c
IP to Bin [IP to binary]: 1010001001011110000100010001100

IP Address Lookup results for Europe
IP Address Continent: Europe
IP Continent Code:(EU)
IP Continent Population: 731,000,000
IP Continent Area: 10,180,000 km²
IP Continent Total Population: 11%
IP Continent Density People: 70.00 per km²
IP Continent Latitude: (48.69083)
IP Continent Longitude: (9.1405)

IP Location Lookup results for Spain
IP Country Name: Spain
IP Country Capital: Madrid
IP Language: Spanish
IP Currency: Euro(€) (EUR)
IP Country Latitude: (40)
IP Country Longitude: (-4)
IP Country Code: ESP (ES)

IP Location Lookup results for 81.47.8.140 in Galicia
IP Address Region: Galicia
IP Address City: Lugo
IP Address Latitude: (43)
IP Address Longtitude: (-7.5667)

Additional IP Location information for 81.47.8.140
IP Address Organization: Telefonica de Espana
IP Address ISP: Telefonica de Espana

Time zone for 81.47.8.140: Europe/Madrid
Local time zone for 81.47.8.140: Europe/Madrid

#haveplayed - Duffy Rockferry

To be honest after my visit to hospital I was not really in the mood to play music having quite a long session translating to the nurse my friends problems! Choosing a CD this afternoon was difficult but I did not want to let my followers down on Twitter and I think I made the right choice. I hope that you enjoyed Duffy this afternoon

Rockferry CD MP3



#nowplaying Duffy "Rockferry" MP3 http://bit.ly/bxICIK
Lyrics http://bit.ly/aWaddd
#nowplaying Duffy "Warwick Avenue" MP3 http://bit.ly/cY1TI8
Lyrics http://bit.ly/bEHN7p
#nowplaying Duffy "Serious" MP3 http://bit.ly/des1Zh
Lyrics http://bit.ly/ajX5Xb
#nowplaying Duffy "Stepping Stone" MP3 http://bit.ly/audq79
Lyrics http://bit.ly/ahrYie
#nowplaying Duffy ".Syrup & Honey" MP3 http://bit.ly/cUCUKa
Lyrics http://bit.ly/bkD9fj
#nowplaying Duffy "Hanging On Too Long" MP3 http://bit.ly/949n2G
Lyrics http://bit.ly/cAGzsB
#nowplaying Duffy "Mercy" MP3 http://bit.ly/9v3bxO
Lyrics http://bit.ly/cG2OGX
#nowplaying Duffy "Delayed Devotion" MP3 http://bit.ly/9YvVsq
Lyrics http://bit.ly/deJUiw
#nowplaying Duffy "I'm Scared" MP3 http://bit.ly/9Zbwro
Lyrics http://bit.ly/b3q9j2
#nowplaying Duffy "Distant Dreamer" MP3 http://bit.ly/d2uTh5
Lyrics http://bit.ly/cEmUPM

Inbox - accountant request / IP address 194.25.134.83 seems to belong to a Suspicious (1) with threat level 26, last malicious activity 13 days ago

cnn@hotelseimler.homepage.t-online.de>
Received: from mailout07.t-online.de (mailout07.t-online.de [194.25.134.83])
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o1K56igY015717
for <xxxxx@xxxxxx>; Sat, 20 Feb 2010 06:06:44 +0100
Received: from fwd09.aul.t-online.de (fwd09.aul.t-online.de )
by mailout07.t-online.de with smtp
id 1NihX2-0002Qi-8A; Sat, 20 Feb 2010 06:05:32 +0100
Received: from User (VgkU2wZQrt71ga8qfvCHq54Wx9JsyKLOX2WkPMiC6vYscLWSo9b8+8XaMjHYWM62mZAZmEVnbH@[77.38.29.86]) by fwd09.t-online.de
with esmtp id 1NihLj-0X1F7A0; Sat, 20 Feb 2010 05:53:51 +0100
Reply-To: <unlimited2@centrum.cz>
From: "john gelsthorp" <cnn@hotelseimler.homepage.t-online.de>
Subject: accountant request
Date: Fri, 19 Feb 2010 22:53:54 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <1NihLj-0X1F7A0@fwd09.t-online.de>
X-ID: VgkU2wZQrt71ga8qfvCHq54Wx9JsyKLOX2WkPMiC6vYscLWSo9b8+8XaMjHYWM62mZAZmEVnbH
X-TOI-MSGID: 9b16cbf9-280b-4ca8-b09d-93520ad82c62
X-UIDL: gcE"!WJV!!)DJ"!~1O!!
Old-X-EsetId: E74D982990713469F84B987C9D2172
X-EsetId: E74D982990713469F84B987C9D2172
X-EsetScannerBuild: 6623
Dear friend,

My name is Mr. John Gelsthorp. I am the accountant of the FinBank Plc Victoria Island Lagos. I am married with two kids.

I am writing to solicit your assistance in the noble transfer of US$3,800,000.00 (Three Million, Eight Hundred Thousand US Dollars). This fund is the excess of what my branch in which I am the accountant made as profit last year. I have already submitted an approved end year report for 2008 and also submitted report of first quarter of this year 2009 to my Head Office here in Lagos and they will never know of this Excess. I have placed this fund on a SUSPENCE ACCOUNT without a beneficiary.

As an officer of the bank, I cannot be directly connected to this money thus I am impelled to request for your assistance to receive this money into your bank account. I intend to part with 30% of this fund to you while 70% shall be for me. I do need to stress that there are practically no risk involved in this. It is going to be a bank-to-bank transfer to your nominated bank account anywhere you feel safe. All I need from you is to stand as the original depositor of this fund.

If you accept this offer, I will appreciate your timely response.

Best regards,

Mr. John Gelsthorp
IP Check IP address 194.25.134.83 seems to belong to a Suspicious (1) with threat level 26, last malicious activity 13 days ago
http://www.find-ip-address.org/ip-address-locator.php34.83
IP Address Location results for 194.25.134.83
IP Address: 194.25.134.83 WhoIs Lookup IP BlackList Lookup
Hostname: mailout07.t-online.de Reverse DNS
[See complete information about your system with our IP Information tool!]

IP Address Conversion - IP Convert for 194.25.134.83 to Hex & to Dec
IP to Dec [IP Address to decimal]: 3256452691
IP to Hex [IP Address to hexadecimal]: c2198653
IP to Bin [IP to binary]: 11000010000110011000011001010011

IP Address Lookup results for Europe
IP Address Continent: Europe
IP Continent Code:(EU)
IP Continent Population: 731,000,000
IP Continent Area: 10,180,000 km²
IP Continent Total Population: 11%
IP Continent Density People: 70.00 per km²
IP Continent Latitude: (48.69083)
IP Continent Longitude: (9.1405)

IP Location Lookup results for Germany
IP Country Name: Germany
IP Country Capital: Berlin
IP Language: German
IP Currency: Euro(€) (EUR)
IP Country Latitude: (51.5)
IP Country Longitude: (10.5)
IP Country Code: DEU (DE)

IP Location Lookup results for 194.25.134.83 in Hessen
IP Address Region: Hessen
IP Address City: Weiterstadt
IP Address Latitude: (49.9078)
IP Address Longtitude: (8.5953)

Additional IP Location information for 194.25.134.83
IP Address Organization: www.t-online.de
IP Address ISP: Deutsche Telekom AG

Time zone for 194.25.134.83: Europe/Berlin
Local time zone for 194.25.134.83: Europe/Berlin

Inbox - Your order has been paid! Parcel NR.7507. email contains Virus Win32/Kryptik.CNC Trojan

From: Shop Manager Tracy Drake
To: xxxxxx
Date: sábado, 20 de febrero de 2010 4:50
Subject: Your order has been paid! Parcel NR.7507 (Well I never made an order with amazon.com so the first warning sign)

Good afternoon!

Thank you for shopping at Amazon.com

Goodafternoon!

Thank you for shopping at Amazon.com

We have successfully received your payment.

Your order has been shipped to your billing address.

You have ordered " Microsoft LifeCam NX-6000 "

You can find your tracking number in attached to the e-mail document.

Print the postal label to get your package.


We hope you enjoy your order!
Amazon.com



__________ Alerta de ESET NOD32 Antivirus, versión de la base de firmas de virus 4881 (20100219) __________

Alerta, ESET NOD32 Antivirus ha encontrado las siguientes amenazas en este mensaje:

Postal_package_NR8422.zip - una variante de Win32/Kryptik.CNC Troyano - eliminado
Postal_package_NR8422.zip > ZIP > Postal_package_NR8422.exe - una variante de Win32/Kryptik.CNC Troyano - era parte de un objeto eliminado

http://www.eset.com

Thursday, February 18, 2010

Vodafone.co.uk Nokia X6 is available on pre-order from today!

Nokia X6

The Nokia X6 is available on pre-order from today!



FREE on tariffs from £30

Copy:
Feeling good? Bit down? Need a burst of energy? Let the Nokia X6's built in DJ choose the music for your mood. Then let it treat your eyes as well as your ears - its stunning touchscreen brings everything to life, from videos to the web. That huge widescreen also makes photos taken with the X6's five megapixel camera look stunning. The high quality Carl Zeiss lens gives you super sharp pictures - and the dual LED flash is perfect for those night time shots. All this in a slim, head-turning phone with a massive 16GB of storage - plus a standard headphone socket, so you can plug in your favourite pair.

Order yours today and we will aim to deliver by 1 March

Best sellers
BlackBerry Bold 9700
Samsung Genio Touch Pink
Sony Ericsson W595

Inbox - Receipt for Your Payment to busyne623@msn.com Paypal scam

service@paypals.co.uk>
Received: from mail.gtventura.com (adsl-76-243-55-198 invalid IP adress.dsl.irvnca.sbcglobal.net [76.243.55.198])
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o1H6FJL4020625
for <xxxxxx@xxxxxx>; Wed, 17 Feb 2010 07:15:21 +0100
Received: from User ([203.131.139.66]) by mail.gtventura.com with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 16 Feb 2010 07:40:35 -0800
Reply-To: <service@paypals.co.uk>
From: "PayPal"<service@paypals.co.uk>
To: customer@paypal.co.uk
Subject: Receipt for Your Payment to busyne623@msn.com
Date: Tue, 16 Feb 2010 23:40:27 +0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <SERVERB37QfZxjAUWcs00001ff9@mail.gtventura.com>
X-OriginalArrivalTime: 16 Feb 2010 15:40:35.0530 (UTC) FILETIME=[61A0FAA0:01CAAF1E]
X-UIDL: Y!K!!d1)!!X)##!A!G"!
Status: U
Old-X-EsetId: E74D982990713469F84B987C9D2270
X-EsetId: E74D982990713469F84B987C9D2270
X-EsetScannerBuild: 6611
Dear PayPal Member,

This email confirms that you have sent an eBay payment of GBP 347.85 to
busyne623@msn.com for an eBay item.

Payment Details
-----------------------------------

Amount: GBP 347.85

Transaction ID: 2LC956793J776333Y

Subject: New 32GB Iphone Touch
-----------------------------------

Note:

If you haven't authorized this charge ,click the link below to cancel transaction

Cancel Transaction:

https://www.paypal.co.uk/cgi-bin/webscr?login-run.webscrcmd=_account-run.CaseIDNumberPP-046-631-789

*SSL connection:
PayPal automatically encrypts your confidential information
in transit from your computer to ours using the Secure
Sockets Layer protocol (SSL) with an encryption key length
of 128-bits (the highest level commercially available)

IP Checks

76-243-55-198 invalid IP adress - It is a SCAM
203.131.139.66
IP Address Location results for 203.131.139.66
IP Address: 203.131.139.66 WhoIs Lookup IP BlackList Lookup
Hostname: adsl-131.139.66.info.com.ph Reverse DNS
[See complete information about your system with our IP Information tool!]

IP Address Conversion - IP Convert for 203.131.139.66 to Hex & to Dec
IP to Dec [IP Address to decimal]: 3414395714
IP to Hex [IP Address to hexadecimal]: cb838b42
IP to Bin [IP to binary]: 11001011100000111000101101000010

IP Address Lookup results for Asia
IP Address Continent: Asia
IP Continent Code:(AS)
IP Continent Population: 3,879,000,000
IP Continent Area: 44,579,000 km²
IP Continent Total Population: 60%
IP Continent Density People: 89.00 per km²
IP Continent Latitude: (29.8405)
IP Continent Longitude: (89.296)

IP Location Lookup results for Philippines
IP Country Name: Philippines
IP Country Capital: Manila
IP Language: Filipino, English
IP Currency: Peso (Filipino: peso ) (PHP)
IP Country Latitude: (13)
IP Country Longitude: (122)
IP Country Code: PHL (PH)

IP Location Lookup results for 203.131.139.66 in Manila
IP Address Region: Manila
IP Address City: Makati
IP Address Latitude: (14.5667)
IP Address Longtitude: (121.0333)

Additional IP Location information for 203.131.139.66
IP Address Organization: RMD Kiwkform Philippines Inc
IP Address ISP: Infocom Technologies, Inc.

Time zone for 203.131.139.66: Asia/Manila
Local time zone for 203.131.139.66: Asia/Manila