  | No Name Wellington, Somerset, United Kingdom 2013-02-26 14:12:08 Nigerian/419 Scam |  Subject: YOUR PAYMENT IS READY !!; From User of IP 66.228.32.90 Scammer Information Date: Mon, 25 Feb 2013. FRAUD & SCAM:INTERNATIONAL MONETARY FUND 419 scam with attachment supposedly sent by internationalmonetaryfundgosborne@imf.org , actually sent by internationalmonetaryfundgosborne@66.228.32.90 from Source host li282-90.members.linode.com via numerous yahoo servers. Reply to:osborrne.george@e-mail.ua * NB: DO NOT OPEN ATTACHMENT --------------------- IP: 66.228.32.90 IP address belongs to a High Risk Hosting Provider (http://www.abuseipdb.com/check/66.228.32.90) ISP: Linode Host Name: li282-90.members.linode.com Organization: Linode Location: Absecon, New Jersey, NJ 08205, United States. ------------------------- Received: from nm14-vm0.bullet.mail.ird.yahoo.com ([77.238.189.193]) by COL0-MC4-F34.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900); Mon, 25 Feb 2013 13:25:05 -0800 Received: from [212.82.105.246] by nm14.bullet.mail.ird.yahoo.com with NNFMP; 25 Feb 2013 21:25:04 -0000 Received: from [46.228.39.68] by tm18.bullet.mail.ird.yahoo.com with NNFMP; 25 Feb 2013 21:25:04 -0000 Received: from [127.0.0.1] by smtp105.mail.ir2.yahoo.com with NNFMP; 25 Feb 2013 21:25:04 -0000 X-Yahoo-Newman-Id: 897087.14410.bm@smtp105.mail.ir2.yahoo.com Message-ID: <897087.14410.bm@smtp105.mail.ir2.yahoo.com> X-Yahoo-Newman-Property: ymail-3 ******* X-Yahoo-SMTP: nZ51qi.swBA.dKWkEJfGMnejbNjeyEJc.D6ROwWI Received: from User (internationalmonetaryfundgosborne@66.228.32.90 with login) by smtp105.mail.ir2.yahoo.com with SMTP; 25 Feb 2013 21:25:04 +0000 UTC Reply-To: <osborrne.george@e-mail.ua> From: \"INTERNATIONAL MONETARY FUND\"<internationalmonetaryfundgosborne@imf.org> Subject: YOUR PAYMENT IS READY !! Date: Mon, 25 Feb 2013 22:24:40 -0800 ******* Return-Path: internationalmonetaryfundgosborne@imf.org X-OriginalArrivalTime: 25 Feb 2013 21:25:06.0110 (UTC) FILETIME=[94B6EDE0:01CE139E] VIEW THE ATTACHED FILE..</FONT> </BODY></HTML> ------=_NextPart_000_00EC_01C2A9A6.3C71C26E Content-Type: application/octet-stream; name=\"GOOD NEWS FROM IMF.txt\" |