RSS

Tag Archives: Benin

“Mr Jude Anoma”

WARNING: BUSINESS PROPOSAL SCAMMER – 419 SCAM

EMAIL: From: Mr Jude Anoma 

Address: Abidjan, Cote d’Ivoire.

Hello Dear,
My name is Mr Jude Anoma the principal treasury officer with one of the prime banks in Cote d’Ivoire. I have decided to contact you through this medium based on a business proposal, which will be of mutual benefit to both of us. I discovered your email through comprehensive web email search on directory so I decided to contact you. I know this might sound like scam to you because of a lot of activities going on in the internet today. But I assure you that this is real.

I am the personal accounts manager to one of our late client a national of your country, who used to work with an oil servicing company here in Cote d’Ivoire, the late client made a numbered time (fixed) deposited for twelve calendar months, valued at €8,200,000.00 (Eight Million Two Hundred Thousand European Euros) in my branch. Upon maturity, we sent a routine notification to his forwarding address but got no reply.

After a month, we sent a reminder and finally we discovered from his contract employers, PETRO-CI Corporation that my client died from an automobile accident. On further investigation, I found out that he did not leave a will and all attempts to trace his next of kin were fruitless. I therefore made further investigation and discovered that the deceased person did not declare any next of kin in all his official documents, including his bank deposit paperwork.

This sum of (€8,200,000.00) is still sitting in the bank and the interest is rolled over with the principal sum at the end of each year. No one will come forward to claim it. According to the law of Cote d’Ivoire, at the expiration of 5{five} years, the money will l revert to the ownership of the Cote d’Ivoire government if nobody claims the funds.

Consequently, my proposal is that I will like you as a foreigner to stand in as the next of kin to deceased person for the fact that you have same last name with him so that this money will not be reverted by the government. If this request matches with your inward intention for success and greatness, then you are urged to make a quick response indicating your interest and readiness to participate and work with me to make this successful.

Please observe utmost confidentiality, and be rest assured that this transaction would be most profitable for both of us because I shall require your assistance to invest my share in your country. In your return mail, please do forward your information as listed below if you are willing to complete this deal with me, to enable me put the total fund in your name for claim as the next of kin to the deceased person:

Your full name:
Your contact address:
Occupation;
Your phone number:
Date of Birth:

I wait for your urgent reply.

Best Regards,

Mr Jude Anoma

Rue 18 Avenue 11 Angre
Cocody-BP 982 Abidjan 01
Abidjan-Ivory Coast.

HEADER:

Return-Path: <jonascalcario@terra.com.br>
X-YahooFilteredBulk: 208.84.243.152
Received-SPF: pass (domain of terra.com.br designates 208.84.243.152 as permitted sender)
X-YMailISG: jti0k3AWLDtAdhHtJ8DBla5B6hhhFN9uNDQ2xLXFYHSDgkJi 7091ufrq_TjZrOiPrIOKj63_2IGN54yIjV6tPOKOaA6MQSboGMb3.VLa4ihD VnHZP15ln0etwMeg7Ci.AHtAcejrAaHkHsdimXH6nHUCToobObG6Y1nFpvhN YzhroWrqXo6MKSYtliiA0U9V6A2I1Kwwqwpv0Pj3cCTUHsUk5g3HncHSDXIs AJZnh.AnBpeOUzENdbp17DqRO.VAnev620wLyUqzo6nzBcDmyDQ9ge0XC51x 6Gk464rg8soUZ5CW7qmTGxtjySpOcyF_kXDJNgyVvVD89kfj_3W5s6rW3VNJ 1jbYOfSGg8wCLFkEpz4173rLvHHCEneC1V0DZOZ7rq3jq1qEXJGlFMjbnnWU 3LXOf5slQOrXlGFbhVqo6iIqbl5AB8GlX_ZlFoC.lKuGmoXrBjqtXKpDvMlk MklDV6TNAagWg4jWScFYCvIKbXv5GgpmGOs4NKE1n035dYZH0vFYE7Q4CO8p nLA5_rWWFq2Itdi1rOajDMEmtAJaHSTH_wwiW.uppyXVfQIm9_Lb6wyIqZky M9t4Flaeo8BgTmjv1UIdzzcFdW9peAlD3_Cs5iGh8PoUh52WBmxGzRjpZi7D JSKQWws3v53dJ7_9utqZ_O1GZbTKsOv29zxXQvkYl.KQVv30tAhTD6wdO17Q OSPkTBFG_jjquu.H0ptd03O_fcZKY2BXtNMUEQE1GuC2UNX9rCzmH52aGKBw USxd1kGEfDq5AyAG3k51CDMLqzgo9rO2cQlIEKqlnUHa_dKUT0tnLxTcNchV bUXZ8oj4RFOWrDoiWQj5GlzXdpdKuMkkdpk8tBDWgUXEoPsysImLLUoCy9qL ttxZg8T0hp_3_zj4xV8i.u5bGHRCOv90scNgBI0L0JKcnBKIByE6kC6iCycR eFLx73Arn1lYN5j7s02rDk6qtyRm.3PTa5PGnB3rZL7rhz.8TcdTWS2j76Be TKxKJsLdB1874.e8Bu2pwoO.eF7ZqgBrAo9E4AGT7Gd5CF9nT0SOZkyZHgw. wncFODEu_b99Il0M3745JzjWwtoOu63qJOh5mn5IUtX1I7yBiZfB70mcTMYn BZo6c9nguq3T66pAkJzFOjfGWujBAeLEULJy7gawozWyGNHLYJjHY3cVnVfm S2BoiAgKFV0qj0l6jHpd1MyuVFJU7UChSQW5hUW92gu8k1GtYJhABJLzxL2u PEQEKTnyNGtCaOs6Nxx0KFqfIjOZWwzcH3r6xogufNcVBtXPVYGTs3G_kTZg Rlsq1UtVgUXiduwFfZYJt3_9H7416xVCC1o3WMOLOqd.qg56fXXcL7_iQH2t 0ZqeV5XmohxjsTtR1p6F
X-Originating-IP: [208.84.243.152]
Authentication-Results: mta1333.mail.mud.yahoo.com from=terra.com.br; domainkeys=neutral (no sig); from=terra.com.br; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO if01-mail-fb08-mia.mta.terra.com) (208.84.243.152) by mta1333.mail.mud.yahoo.com with SMTP; Thu, 29 Nov 2012 08:33:18 -0800
Received: from if02-mail-sr08-mia.mta.terra.com (unknown [208.84.243.35]) by mail-fb08-mia.tpn.terra.com (Postfix) with ESMTP id 31F5018002998; Thu, 29 Nov 2012 16:32:59 +0000 (UTC)
Received: from 1gr.tpn.terra.com (unknown [10.235.200.44]) by mail-sr08-mia.tpn.terra.com (Postfix) with ESMTP id 6EC5B40104A1; Thu, 29 Nov 2012 16:32:20 +0000 (UTC)
X-Terra-Karma: -2%
X-Terra-Hash: 18156cd98356fb6c44cc10b60c2b8ee4
Received-SPF: pass (1gr.tpn.terra.com: domain of terra.com.br designates 208.84.242.62 as permitted sender) client-ip=208.84.242.62; envelope-from=jonascalcario@terra.com.br; helo=terra.com.br;
Received: from terra.com.br (18h.terra.com [208.84.242.165]) (authenticated user jonascalcario!terra) by 1gr.tpn.terra.com (Postfix) with ESMTPA id E7F104000014D; Thu, 29 Nov 2012 16:32:19 +0000 (UTC)
MIME-Version: 1.0
X-Mailer: TerraMail PHP 5.2
Message-ID: <4236.1354206739@terra.com.br>
To:
Reply-To: jude_anoma41@yahoo.com
Content-Type: multipart/alternative; boundary=”=_1e3c6d7761ec54535f40b301bdebe3a6″
X-Origin: 41.202.90.93
Date: Thu, 29 Nov 2012 16:32:19 +0000
Subject: Hello Dear,
From:
Mr Jude Anoma <jonascalcario@terra.com.br>
X-Milter-Version: master.39-g1fd3ecd+
X-CLX-Rate-Response: fh=1gr; fi=10.235.200.247:2001;
X-CLX-ID: a123GLF8i43m0VH-AT1632K6
X-Abaca-Score-Saida: -7
Content-Length: 6555

Mr Jude Anoma – jonascalcario@terra.com.br - jude_anoma41@yahoo.com - 

 

Example Messages Sent From 41.202.90.93
From: “Replica Pens” <tandyb@austin.rr.com>
Subject: Replica watches 25% price off 
From: “Hiram Swanson” <loses36@sanchitech.net>
Subject: Attention from beautiful women is guaranteed to yo 
From: “Internal Revenue Service” <no-reply@irs.gov>
Subject: Notice of Underreported Income 
From: pamelia.n.schilawski@yubaba.ggpsystems.co.uk
Subject: pamelia.n.schilawski@yubaba.ggpsystems.co.uk Rolex 
From: “ANASTACIA AUDRIE” <margaritamelina@bv.com>
Subject: Best Buy Viagra Generic Online – Viagra 100mg x 60 
208.84.243.152 – This IP is also known for sending scam
 

Tags: , , , , , , , , , , , , , , , , , , , ,

“Bonjour”

419 SCAM – FRAUD – NIGERIAN SCAMMER

 

Bonjour , 

Je vous contacte de la sorte car je souhaite communiquer avec le monde et fais une chose que je devrais peut être pas dû. Je souffre d’une maladie très grave que je n’arrive presque pas à trouver le sommeil. J’envisage de vous mettre en possession de mes biens.J’avais travaillé dans le secteur pétrolier au Koweït. Ensuite j’avais décidé de mettre en place plusieurs centres. J’ai une mallette remplir et cerlé,soit 2.500.000 d’Euros qui sont jusqu’à ce jour dans une banque étrangère en AFRIQUE . Je sais qu’on se connait pas, mais ce que je demande à DIEU c’est de rendre votre cœur saint afin de réaliser mes projets avec ce don c’est à dire, construire des centres d’aide sociale. Je veux que vous rentriez en contacte avec mon notaire puisque Je l’ai acquise toute ma vie et la seule chose que je pourrai faire de bien sur cette terre avant de m’en aller c’est de savoir que ce don servira à rendre heureux la personne a qui je le ferai. En effet je suis gravement malade et je suis à l’approche de ma mort c’est ce que mon docteur me la confirmer ce qui me laisse un peu perplexe, pour avoir vous contacter a été une grande réflexion. Malheureusement nous n’avons pas eu la chance d’avoir des enfants mon marie et moi. Après Cinq années de vie commune, mon époux est mort dans un accident. Si Vous êtes d’accord j’attends alors votre réponse à ma lettre. Veuillez prier pour moi car je suis dans une situation critique.

 

Return-Path:   <blackweardesign@moov.mg>
X-YahooFilteredBulk:   196.192.32.61
Received-SPF:   pass (domain of moov.mg designates 196.192.32.61 as permitted sender)
X-YMailISG:   bwx8weMWLDsQQjWKBr4l3K0Yd4C43qxN3b20kfCMcGiIqGuk 0gY3_xmQAxfrzOtgq5RR_ZHnJrfYGkXVam1pZ.qmn41GVoggO7hqYAgq82.I qgcjt6DkUaIlzZXQ7rFc4AWCdFB2R69fuLNVrBCdy3ud1WIJq477k_4nj1K7 MKn2.p2l5Y7BD7qRoGZGYBnwYq1kWDZeCLoh8pCoFpZyjll58BFUG5GQYtF5 OZd4KPWPkbhvqU_7c.rUINpXGzadiVuyVBYKGofNZjrbT24_yWJuRPOu2V6Y U6uPYiidl0E5biW21rQViDH1e1u_cCqrZ1.HKIb6b2HWV3yfqdGznzFRGWso s_hmrGBS.VtxYRPxzLJHg8Z_gzdJ4jsWAoOirJf46dxz38t2mGlyJUZf9t0w DCvbGIdrK6UTLqR8VIwIRn4bQyuIMxN7DJXaRHVlHaK7_1friBmBmc.rh9xo AxsbPaT5GGS3bUPa97zmEmxt01o.DEKms.qpi3lUQ_uoAZhvitVcXIzm3VFc 3szSbmehvZ._y_R59TV2mXwtu9t6CHTYlsNsxTGqrs2NRMP8eBB343DwmxMh Mt.JL8jXgsgjaI0HMHQ3E3vLaQdYW0aFIGO4u02o8IdM5YzoAl9itSHMUkmL AruASq.PsnK9JEZOTrfcxicBHE3N1V9xqfsObfl73czGxL_OXUZ4rYZ9lQAU osqZFKjGj6SkGUjBPfo87SqrZ5jhRYxogex3D922HcqO.RJMN0ONh_MULrPh iyPk.asB35xgmxXiXsmvqvMLaWdO2JBT6sxeL0QeGO1xwnyFTHyFL5xhUjxC SGCj_MGa0TReEEgWjR__N_tOhOH_iWP2hzKHCIJX5ZdyKjV1zkqWd_.PLiRs I.Kx4zw1e9dLwholt.bUglOjupabBLEvNHt0tN6F.mptefUFMeqi0wZ1i.Dw hDU.FcQQjfhK1mB6KQYNr8TfCZbIMbEjga_QSIouuAaHuEYGzPdbSjAtyfnt hc7ybPX7c7XMgOPK4nhPBDnzke9RP9E2aaVZ5A4tcBt3GgkwKShjeuDOTF_h JwUlOE3GBER5r0we9ikY8uGQAmvu17w2t_f7UrnZyKzzH6qRm_uRWy3R15J3 VMGhQkTXyylzEWXLG586Z8tlYbFSG7Saq1nC8VDb5U3kAy_ntU6wZfj694t5 DeSrL21XdJiP55VWzyc7OF3wBC92kfaQspQRt9XQ.MHBKTfmlqgYxIfwcZHn MstkNPPAsjivDR9iBbzANn.lRnu1NBVlHK87P5Frr5XXkXLXaSxSBWUnIfM5 E7j_84Cjx9RGRenRcKZCC70fBwXZuzSbyw6Wu6cZYhkA6A.Q2k.0rJa.
X-Originating-IP:   [196.192.32.61]
Authentication-Results:   mta1005.mail.ac4.yahoo.com from=unknown; domainkeys=neutral (unknown); from=unknown; dkim=neutral (unknown)
Received:   from 127.0.0.1 (EHLO mx-out.dts.mg) (196.192.32.61) by mta1005.mail.ac4.yahoo.com with SMTP; Tue, 27 Nov 2012 11:25:30 -0800
Received:   from localhost (localhost [127.0.0.1]) by mx-out.dts.mg (Postfix) with ESMTP id C7B96803876; Tue, 27 Nov 2012 15:17:21 +0300 (EAT)
X-Virus-Scanned:   Debian amavisd-new at mx-out.dts.mg
Received:   from mx-out.dts.mg ([127.0.0.1]) by localhost (mx-out.dts.mg [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v5mcG8rOEEAS; Tue, 27 Nov 2012 15:17:21 +0300 (EAT)
Received:   from smtp.dts.mg (smtp.dts.mg [196.192.32.27]) by mx-out.dts.mg (Postfix) with ESMTP id A5EB8803871; Tue, 27 Nov 2012 15:17:15 +0300 (EAT)
Received:   from z01.dts.mg (z01.dts.mg [196.192.32.50]) by smtp.dts.mg (Postfix) with ESMTP id A6A521D99093; Tue, 27 Nov 2012 15:19:01 +0300 (EAT)
Date:   Tue, 27 Nov 2012 15:18:55 +0300 (EAT)
From:  
MARIE <blackweardesign@moov.mg>
Reply-To:   “marieb.pouvost@yahoo.ca” <marieb.pouvost@yahoo.ca>
Message-ID:   <1595992550.635399.1354018735157.JavaMail.root@moov.mg>
Subject:   Bonjour ,
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”—-=_Part_635398_1213173424.1354018735148″
X-Originating-IP:   [41.79.217.122]
X-Mailer:   Zimbra 7.2.0_GA_2669 (ZimbraWebClient – GC16 (Win)/7.2.0_GA_2669)
To:   undisclosed-recipients:;
X-SpamTest-Envelope-From:   blackweardesign@moov.mg
X-SpamTest-Group-ID:   00000000
X-SpamTest-Info:   Profiles 24807 [Sep 11 2011]
X-SpamTest-Info:   {TO: undisclosed}
X-SpamTest-Method:   none
X-SpamTest-Rate:   20
X-SpamTest-Status:   detected
X-SpamTest-Status-Extended:   detected
X-SpamTest-Version:   SMTP-Filter Version 3.0.0 [0284], KAS30/Release
Content-Length:   4529

SAME SCAMMER – DIFFERENT EMAIL INFORMATION –

Yolaine Provot (sonema@moov.mg) Bonjour,

 
Bonjour,
Je suis une veuve d’origine française née le 24 Février 1946 à CHENOVE (21) pour la raison de mon état de santé qui ne cesse pas de se dégradé de jour en jour. Je vous écris parce que je recherche une personne à qui faire confiance pour la bonne réalisation de mon projet de donation. Je veux vraiment donner de moi ma fortune d’argent actuellement disponible sous section de gardiennage auprès d’une Banque en République du BÉNIN B.O.A . Mon état de santé si vraiment critique ne me permet plus de sortir de l’hôpital où cette ma maladie me confine, je souffre de CANCER du cerveau qui se traite depuis plus de 1 An pour aujourd’hui. Je ne comprends plus rien de ma vie, c’est des raisons qui me poussent à vous contacter et de savoir si je peux bien sûr vous faire confiance et vous faire part de cette donation. Si oui, écrivez moi directement à mon adresse e_mail que voici ( yolaineprovot@yahoo.fr  )

Veuillez beaucoup m’excuser quant à ma façon de prendre ce contact avec vous. Je m’en vais bien vous faire savoir que je parle couramment le français.
Je suis Yolaine Provot, née le 24 Février 1946 à CHENOVE (21).

Je souhaite vous lire très bientôt,

Yolaine Provot, ( yolaineprovot@yahoo.fr  ) Pour avoir plus d’info sur mon etat de santé  contacté moi (+44 703 5944 846 )

(sender IP is 196.192.32.61) header.from=sonema@moov.mg
 
Received: from mx-out.dts.mg ([196.192.32.61]) 
Received: from localhost (localhost [127.0.0.1])
 by mx-out.dts.mg (Postfix) with ESMTP id 6DB97800E6B;
 Mon, 29 Oct 2012 15:13:27 +0300 (EAT)
X-Virus-Scanned: Debian amavisd-new at mx-out.dts.mg
Received: from mx-out.dts.mg ([127.0.0.1])
 by localhost (mx-out.dts.mg [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id nkYxWdxBvbJa; Mon, 29 Oct 2012 15:13:27 +0300 (EAT)
Received: from smtp.dts.mg (smtp.dts.mg [196.192.32.27])
 by mx-out.dts.mg (Postfix) with ESMTP id E0910800E7B;
 Mon, 29 Oct 2012 15:10:36 +0300 (EAT)
Received: from z04.dts.mg (z04.dts.mg [196.192.32.54])
 by smtp.dts.mg (Postfix) with ESMTP id 606B21D98E16;
 Mon, 29 Oct 2012 15:00:36 +0300 (EAT)
Date: Mon, 29 Oct 2012 15:10:33 +0300 (EAT)
From: Yolaine Provot <sonema@moov.mg>
Reply-To: Yolaine Provot <yolaineprovot@yahoo.fr> 

Email Scam Scammers Scamming

MARIE <blackweardesign@moov.mg>  blackweardesign@moov.mg — “marieb.pouvost@yahoo.ca” <marieb.pouvost@yahoo.ca> Financialbank130@ymail.com << TONY OSITA << bocononfa@yahoo.fr << mail@cervicalcancer-symptoms.info << sonema@moov.mg <<

41.79.217.122 – NIGERIA

TONY OSITA – Nigerian 419 (same IP)

From FINANCIAL BANK INTERNATIONAL PLC Tue Nov 13 06:20:03 2012
X-Apparently-To: via 72.30.239.49 – Scam Warners - > 77.238.189.90 << Received: from [41.79.217.122] by web133106.mail.ir2.yahoo.com via HTTP; Tue, 13 Nov 2012 14:20:03 GMT 
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460 – Bonjour

The above scammers are also attempting to fraud others in an Inheritance Scam (41.79.217.122) for more details on this scammer, please click: Mr. Mark Brown

 
1 Comment

Posted by on 11/28/2012 in Inheritance Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

Mr. Mark Brown <> Western Union Office

Inheritance “Beneficiary” Scam – 419 Nigerian Scammer

This IP is being used by more than one scammer and if you received an idenical IP from an unknown online user then it’s a scammer. For some other emails, email-addresses, names, etc under the same Nigerian IP, please click: Bonjour 41.79.217.122

From: mr.dango.dangi1@gmail.com
IP: 41.79.217.122
Subject: WESTERN UNION BENIN REPUBLIC hr1-8nw24
Tel: Not found

Western Union Administrative Office®
Porto Novo , Benin Republic

Attention Beneficiary:
This is to officially inform you that, We are still waiting for the details of the western union payment information as soon as you send the charge of US$200 only.

You are hereby ask to remit the fees US$200 to the following information below:

Receiver Name::: Victoria Nnamdi
Receiving Country::: Benin Republic
City:::::  Porto Novo
Question::::: Payment?
Answer::::: Completed
Amount:::: $200.USD (Only)

On the receipt of the US$200 ,your payment shall be release to you within 24 hours. I wait to hear from you as soon as possible, send me the payment
information via E-mail.

Best Regards.
Mr. Mark Brown
Chief Managing Director
Western Union Head Office,
Benin Republic

 
2 Comments

Posted by on 11/28/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“FedEx Online®”

NIGERIAN SCAM – 419 – FRAUD

EMAIL: We have been waiting for you to contact us for your confirm package that
is registered with us for shipping to your residential location. We had
thought that your sender gave you our contact details. It may interest you
to know that a letter is also added to your package. We understand that
the content of your package itself is a Bank Draft. The package is
registered with us for mailing by your colleague, and your colleague
explained that he is from the U.S.A but he is currently in Africa for a
three (3) months Surveying Project as he works with a consultant firm in
Nigeria, We are sending you this email because your package is been
registered on a Special Order. For your information, the VAT & Shipping
Charges as well as Insurance fees have been paid by your colleague before
your package was registered. Note that the payment that is made on the
Insurance, Premium & Clearance Certificates, are to certify that the Bank
Draft is not a Drug Affiliated Fund (DAF) neither is it funds to sponsor
Terrorism in your country. This will help you avoid any form of query from
the Monetary Authority of your country. However, you will only have to pay
a sum of $125 USD to the FedEx Delivery Department being full payment for
the Security Keeping Fee of the FedEx Company as stated in our privacy
terms & condition page. Please note that packages are not shipped nor
delivered on Saturdays, Sundays and on holidays. If your order has been
placed on any of these days, then it may be shipped the following business
day.

Kindly complete the below form and send it to the FedEx Online team. This
is mandatory to reconfirm your Postal address and telephone numbers.

1: FULL NAMES:
2: TELEPHONE:
3: POSTAL ADDRESS:
4: COUNTRY/STATE:

Contact Us between:

Mondays-Fridays: 9:00am – 9:00pm EST
Saturdays: 10:00am – 5:00pm EST
Sundays: 10:00am – 4:00pm EST

Have a great day!

Mr. Thompson Williams.
Direct Tel: +2347033356828
fedexonline_01@yahoo.com.hk

FedEx Online®
©Copy Right Reserved 1994-2012.

HEADER:

Return-Path: <karuiz@fices.unsl.edu.ar>
X-YahooFilteredBulk: 200.41.60.169
Received-SPF: none (domain of fices.unsl.edu.ar does not designate permitted sender hosts)
X-YMailISG: o5TE0VcWLDs6A2iGWRrKiXjvpJ9iJzbVh0d6tg62Wj0icTj9 vmZMCQOukMdUDCGoZuIRp9z0IxNUHMgxvIvYYj2aIPbsDGNdoASLbiisEdUj QBEi1ddHF1qDGdoXfPO5fGq3r96t6.3EMAlu.gZYrqage8higRm6BtMly.rw mIfRU6DCgMO6xe2wenEds3y7f6jkHz8PujZvzVXG06KZXqLfUgswmKyLgCBr XoMranvoL1UpF2zrp9IkEggsDk.stcAvIzVsHemNO52EoccEi9gmti7.KoIW FADXVh5rt92uodAMmY0yUyx5SH8xuTnS8HVA1jqbABSY05OsZuiqD2tnbAyL bLlh4CNm20SRui2X4Xy8KYvHstQSJ2JED57ifWlUyjgIAc0kmiT8UPezvxUv IWwuGwuz0cdnaBz9yWtkze4VsD7mfNV5e55TkF1PnlOQV80xSuZBMTspTRHI Rt3llF72gAFNpNhgBjq1mr36YDryiv6cVF80QRdJY_AvV0JqeMTxkYepk7Zo ZibOOHy5tUxHe1RaLqqXs0WImOyiFBDXjq7mpvYjAYsdHOQOyqNLUN6Hg6u1 tVFo3zVplBVnDXYMSRMyggTOWeOwUWkEw0lYPrWCvkmgmSLj_PXFULib.MPx K7S5XbZpInbFirVmMyQMMjCReCffKzB5eKrZIIbECa1FeVd9PHa6ZIj_LsD0 Yq1pZsf06cF3tpdiRlgAzGrJolauz8y8xqW1iCEc8cvOJudahvuRDsb09YaP DEdo6Nd8twXlDmXqNqVY77QtOAFP6Z6QZzgxq5yu9O6Mv1mI4NhapzzH1k3. afEn6fF4JN4HxcuOEp2Rr_U3ikODeO8VSsJ.qEVvjRitKUHx_V6pncw6HkWN tB7_Lr2JJDj37KsTC9ntsBwAVvF26zHppnpw5jw8jYccPfUnUtzPoWlp6Bi9 o6ZrjPB.DXes_i1kpLdprNB8ehDnWXVLwqQqH31W4qYFuFnyZuj3rhLaUUx3 3J3Vqm2tYLv7DmSdzbfkolSriSZ4yVm_POZLOrsbax7kfm6oXgbPLD2cKab3 ObsRlQiaLIEsfxk7nsR8nxE4NzateWWVNkdKO1n40_7N80WGh_yoBa692ABI HHJO2MTarJriQnZz7soxNKn8AuVrxZVZRo_ebnck6pA4Rfh_0R1sUQIjroJI Pw6gJD2qGOTgx1edsoeYVA6oBf_5ab34B9EC0w80NN8JA8nOVBzVJMhtm.8z 6LOwSdTnFg0X3pOkrEr51x.Gto.BuQNSGp6tYNIzckUKiL24O3dxUNaf4_gX k28hY3hB2zgdLlorQVCWrA5.YESR7.ZspdMBR0exRen9wmIK48IOaFt5H.DR dA–
X-Originating-IP: [200.41.60.169]
Authentication-Results: mta1183.mail.mud.yahoo.com from=fices.unsl.edu.ar; domainkeys=neutral (no sig); from=fices.unsl.edu.ar; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO scooby.fices.unsl.edu.ar) (200.41.60.169) by mta1183.mail.mud.yahoo.com with SMTP; Tue, 27 Nov 2012 02:01:25 -0800
Received: (qmail 24449 invoked by uid 33); 26 Nov 2012 15:51:22 -0300
Cc: recipient list not shown: ;
Received: from 41.71.190.77 (SquirrelMail authenticated user karuiz) by correo.fices.unsl.edu.ar with HTTP; Mon, 26 Nov 2012 15:51:22 -0300 (ARGSL-ST)
Message-ID: <2322.41.71.190.77.1353955882.squirrel@correo.fices.unsl.edu.ar>
Date: Mon, 26 Nov 2012 15:51:22 -0300 (ARGSL-ST)
Subject:
From:
FedEx =?iso-8859-1?Q?Online=AE?= <karuiz@fices.unsl.edu.ar>
Reply-To: fedexonline_01@yahoo.com.hk
User-Agent: SquirrelMail/1.4.9a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Content-Length: 2014

41.71.190.77+ << 2347033356828 << FedEx Online®  << karuiz@fices.unsl.edu.ar << fedexonline_01@yahoo.com.hk <<
A scammer(s) under the email-address <mcmunoz@fices.unsl.eu.ar> and graniteloans1010@xnmsn.com sent scam mail out under the same Originating-IP as the above sender. The receiving IP’s location was Nigeria (just like the above senders receiving IP) as well. 200.41.60.169 and 41.203.64.132

Other spam/scam sent under the same IP address are:

 “Sampaio” <SharofSampaio@acupunctureinfo.net>
Subjectnone/blank
From: “Lynnette Grover” <AmparoloreleiVick@centraloregon
Subject: Enlarge At Home Today
From: postmaster@sagemuller.com.ar
Subject: Notificaci=?unicode-1-1-utf-7?Q?+APM-n de es
From: Sewell <inwglae@bluegrassjunction.com>
Subject: Software discounts
From: Pill <lrshipley@instuttgart.de>
Subject: When you need it
From: <caesargq6@clickfoc.us>
Subject: More games, more chances, bigger jackpots 1500 eur
From: <limitlessi2@pip.com.au>
Subject: Best casino games 1500 euro bonus!
From: <politicizingwwk86@fiemg.com.br>
Subject: Best casino games 1500 euro bonus!
From: <misspends@biolconseils.ch>
Subject: Biggest casino online 1500 euro bonus!
From: <thule107@buhrmann.com>
Subject: Biggest casino online 1500 euro bonus!
From: <venousuu@pacunion.com>
Subject: Euro casino online 1500 euro bonus!
From: Валентин ��
Subject: мы тoльko делaеm рekлaмy
From: До��на Павл��ва
Subject: Прoдaжa бaзы в Кoлoмнe. Цeнa
From: Артемий В��но��ра��ов
Subject: КАЧЕСТВЕНН
From: <mainmastsu20@cochamber.com>
Subject: Best erect pills
From: <tunnelingh@mc2school.org>
Subject: Best erect pills
From: <stileskp1161@barronheating.com>
Subject: Get some penis pills
From: <loftwp@blomnet.com>
Subject: Get some penis pills
From: <josiea8@alumni.insead.edu>
Subject: Find pills for cheap prices
From: “Sarahi LAMBERT” <MaciPetet@online.no>
Subject: Re: 62735418449971656

Some previous names and email-addresses under the IP 41.203.64.132 – Location: Nigeria

5-Jul-12 11:36 41.203.64.132 mcoxman gsterling123@gmail.com Nigeria
22-Jun-12 21:56 41.203.64.132 Mike001 phonesmartltd8@gmail.com Nigeria Evidence
17-May-12 03:08 41.203.64.132 pemmy pemmy004@yahoo.com Nigeria
10-May-12 16:57 41.203.64.132 kingcxt cxtblade2@hotmail.co.uk Nigeria
10-May-12 16:53 41.203.64.132 king cxtblade2@hotmail.co.uk Nigeria
5-May-12 03:52 41.203.64.132 ohison ohiluckyson@yahoo.com Nigeria
2-May-12 16:41 41.203.64.132 Frank Richards frankimobiletech98orders@gmail.com Nigeria
23-Apr-12 08:07 41.203.64.132 infotech shecool174@yahoo.com

FYI, the REAL FedEX doesn’t sign up with free Yahoo email-addresses. They have their own domain. And they don’t send out email’s like the one above. Only scammers get into irrelevant details.

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

“MR. D.P.O JOHNSON” dhl_compay@yahoo.com

419 NIGERIAN SCAM – EMAIL SCAM – FRAUD

The below Nigerian Scammer is VERY Persistent and doesn’t easily give up. I’ve been ignoring him for at-least a month and still receive at-least one email daily. I’ve posted his emails and info but he is always changing email addresses and giving me ‘agent’ names, and it’s always under different Originating-IPs. below the email and header is a list of other scams posted under the same nigerian ip address.

 

EMAIL: DHL COURIER SERVICE COMPANY BENIN DU REPUBLIC 

Avenue Mgr Isidore de Souza 41 Blvd Du Mongo Cotonou Benin.
E-mail: 
dhl_compay@yahoo.com
Tel: +229-68377742
Attn: Customer:

how are you today i hope that all is well, my dear be advice that you should  go head and send the $149usd immediately to enable us. Delivery you package within 24 hours ok. So we look to hear from you immediately with the payment information before End of today ok.
USE THIS INFORMATION AND SEND THE FEE VIA WESTERN UNION 
Receivers Name………… Anthony O Ikwunne
Country………………….. BENIN REPUBLIC City …………………….. … COTONOUText Question…………….BEST COLOURAnswer…………………… YELLOW   
 
And as soon as you send the US$149.00 then send us the Western union Details/ MTCN Number / Sender’s Name. Because  as soon as the fee  is received we will dispatch your package and  provide you the tracking details for you to monitor the movement of your package while on the transit to know that its coming to you.
The US$149.00 requested is for our security keeping fee and All necessary documents has been tendered by depositor.
Below is picture of your registered box.

Type: Diplomatic Package Size: L W H / 04:10:13 CM Weight: 0.29kg Color: Brown

Yours Sincerely, Mr. D.P.O Johnson DHL International Express Courier Company Director Benin Republic Tel; +22968377742

CAUTION: THIS INFORMATION MAY BE CONFIDENTIAL OR PRIVILEGED INFORMATION. IF YOU ARE NOT ADDRESSED OR AUTHORISED TO RECEIVE THIS MESSAGE, YOU MUST NOT USE, COPY, DISCLOSE OR TAKE
 

The last part is the funniest. The scammer doesn’t want this information out in the public.. Well it is

HEADER:

Return-Path:   <westernu749@gmail.com>
X-YahooFilteredBulk:   212.82.109.193
Received-SPF:   neutral (212.82.109.193 is neither permitted nor denied by domain of gmail.com)
X-YMailISG:   ri8PeTQWLDufFhNVhMTKz7_9F04BnNPKMD8_fY0rGbtLSXJW 2Pbq0l7atG1.hyuzi790ASC5QcdKtobIYk1Emzm23zOEmZWyB_QYAoMJrlQE JCigHjfZ.uVRqOfitmh7hqbF6ku0hRzE36wXA0iGcobufDqI_2XjI1WLjY5A CuOT7lQUcYGPQdbxO2dBuslK6JEDuIP9YIWBxK0ijt3bLo9sR2AQDJkxU4Fq cPNN_P1vA_YFF5UhKmkIaHFQIdRXeDCOzSuM2NJStZ6b5GVnsA0t9e.J51F1 zigvYjLvpgIx_I5kcJOHSGitXn.4y0wcD_N0nZpF7Avx7jf1nY_Im1TSUxOY S8MWIZ7NUSJJMViMcj9Ay9NDEjAWeOJjCDPSBBzMqS3Vpk5b3lec.zeG5pKq pU5v1HSxR5T5E5bwURikWETXII4ld3dKwdzVP7Upe3QseNP4GT1QHx9kL6CK Xk.X.e7Aa6cNQ3L9TxgIsjUilXKYa8o7E8qKKcNU6D_98AGffgl1eZkgDzCy lMpbCCTYDVw4QTM.8IUdx1ULjC1w40akJCsX2sHujICyUszeB86UlrIQZnDq KhYDG2AfcFfiW0l9Rw5ARGXmWkEdscDKh6A6459_x2Yu9JgrpW6zppgPSOAh hSlXsUjusqP1zzhxSqKfLLZyA137OjiF97QcF5Tduy6wPi.yzRcVQBjbJJ4B 3bXU6xLpHo4WwdtBdG54zXaw2G70ZlBAvEBp9yU6DafCZmFHVQeRDixpQqv4 bKjA2uNQQspdfQCCXHhhrPvYmHvnJ4VZ87yPghyMDwEPpY4s762sujxnFKIj l5XEuJ.KaUsYFTT77LJnvhIOUbhgyuv9NqFypvKmZmLBWLnK9GxVDkvn_LT6 DYR7MtExqgQVje677.OXoYHXT0on4nycmOyRQpP9pe4CUuqYJ0yW30aeJlR4 n0FxIGbVWywqEqDczxtn5wNAvZiRFhyepfac_SQVNH64s2FK7KmJaWatwRWW DaL.8YrTOVb_rTkdlJNObrl9l2ck3JwF01eG3Rso_Lif_IXLZVN.iynqCRJG rRL4yig6Zabl0DUQmQ6e3yg2QNcUKAk9NIEwRdgNHq39w6v4Z4qe.kFBW2GT yjCJjOkQXB9STMOxGHHfA5LAfbAA53qApakMIsYlmPcepbOVE_yATLnzGL_t ig4l_1ukkpigli19hliexvsOA3HrPynT8RtJjUqqDJbDitCF.cn43eGgDJP2 6IAgP6BQ4Oky_IufQVuc8suattlG98TSmuEMOo5BhmCtBerVtFda60lMRM3y YFMmzUyjZn5OacwqMQ–
X-Originating-IP:   [212.82.109.193]
Authentication-Results:   mta1086.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm24-vm2.bullet.mail.ird.yahoo.com) (212.82.109.193) by mta1086.mail.bf1.yahoo.com with SMTP; Wed, 14 Nov 2012 08:53:45 -0800
Received:   from [77.238.189.233] by nm24.bullet.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
Received:   from [212.82.108.243] by tm14.bullet.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
Received:   from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
X-Yahoo-Newman-Property:   ymail-3
X-Yahoo-Newman-Id:   795423.69197.bm@omp1008.mail.ird.yahoo.com
Received:   (qmail 71248 invoked by uid 60001); 14 Nov 2012 16:53:42 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1352912022; bh=YJdP0B3ArGUfIDfK+tFdY4usbtMSeMfxOIR+VL1Y3Iw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=KSOalfFpTYzmrFm8ucVEArfJ6A09mSCj6QSfJ/bmBjx3ntM85nIw49yOHwPEo8d8aKg0OiX/hx+yBZNf2WVOyNe2DRMb1gWujp4KLWpJxujHaH21UU7+pRrqUh5c4mpJQSKVWVQ7IXseBsU5x5L/tQRTj4sYnZA5r5GZOePZ+Co=
X-YMail-OSG:   OZ7LhD0VM1klb3DjyvlFkhMZSOF9Kk5yIkuHnN.ReaQhz8A 2eEq4WVU4
Received:   from [41.216.50.26] by web171306.mail.ir2.yahoo.com via HTTP; Wed, 14 Nov 2012 16:53:41 GMT
X-Mailer:   YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID:   <1352912021.69977.YahooMailClassic@web171306.mail.ir2.yahoo.com>
Date:   Wed, 14 Nov 2012 16:53:41 +0000 (GMT)
From:  
“MR. D.P.O JOHNSON” <westernu749@gmail.com>
Reply-To:   dhl_compay@yahoo.com
Subject:   MR. D.P.O JOHNSON
To:   undisclosed recipients: ;
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”-1132928367-462696281-1352912021=:69977″
Content-Length:   19629

Below is other email addresses, NAMES, scams, etc being used by the same IP as Mr. DPO Johnson

FROM INTERNPOL POLICE FORCE UNIT. 
desk of Dr,Daniel Alexander, 
International Interpol Police Force 
Investigating Unit Benin Rep 
Email: officeunion2012@yahoo.fr 
Phone +22999867566 
International Remittance Department funds Transfer Section 
United Bank For Africa International plc. Republique du Benin 
in West African State /Address:rue 7741 unesvia avenue kotoungbe cotonou. 
Email: atmcarddepartment132@yahoo.fr 
Email: atmcarddepartment132@yahoo.fr 
Website http://www.ubagroup.com 
DIRECTOR NAME: MR frank johnson s-MAIL:(www.westernunionrichard@yahoo.ca) 
OFFICE LINE:((+229)-99231994, OFFICE FAX: (+229)-98414204, Visit:westernunion.com 
BEST REGARDS.

Head Office RUE 84, ABAPKA MISERBO <<

western_ubb@yahoo.fr << activationcard@rocketmail.com << 

X-Originating-IP: [106.10.151.181] X-Originating-IP: [217.146.176.150]  X-Originating-IP: [217.146.183.95]beninhigh.court@rocketmail.com

Received: from [41.216.50.26] by web190606.mail.sg3.yahoo.com via HTTP; Thu, 
05 Apr 2012 05:25:48 +0800 (SGT)

Received: from [41.216.50.26] by web171002.mail.ukl.yahoo.com via HTTP; Wed, 
04 Apr 2012 20:54:00 +0100 (BST)

Received: from [41.216.50.26] by web171005.mail.ukl.yahoo.com via HTTP; Fri, 
30 Mar 2012 09:49:18 +0100 (BST)

 [98.138.91.212] 
To: undisclosed recipients: ; FROM: Mr. Mark Dennis
Reply-to: westerotransfer@skymail.mn

Received: from [41.216.50.26] by web112311.mail.gq1.yahoo.com via HTTP; Thu, 
29 Mar 2012 13:31:47 -0700 (PDT)

From: “FEDERAL BUREAU OF INVESTIGATION \(FBI\)” 
Subject: FBI SIGNED AGAINST YOU 
X-Originating-IP: [106.10.151.20] 
To: undisclosed recipients: ; 
Reply-to: msanusigoverno@yahoo.com

Received: from [41.216.50.26] by web190605.mail.sg3.yahoo.com via HTTP;

From: BENJAMIN NWEKE 
Subject: Welcome to Western Union 
X-Originating-IP: [106.10.149.38] 
To: undisclosed recipients: ; 
Reply-to: western_ub@yahoo.com.hk

From: WESTERN UNION 
Subject: CALL MR BENJAMIN FOR YOUR MTCN NUMBER +22998892244 
X-Originating-IP: [115.178.12.225] 
To: undisclosed recipients: ; 
Reply-to: western_ubb@yahoo.fr

From: chigoeze2007@yahoo.co.uk 
Subject: PAYMENT NOTIFICATION OF YOUR FUNDS. 
X-Originating-IP: [77.238.189.207] 
To: undisclosed recipients: ; 
Reply-to: sahelsaharabank@rocketmail.com

From: Mr Andrew thomaas 
Subject: Welcome to the Albany Division of the Federal Bureau of Investigation 
X-Originating-IP: [77.238.189.70] 
To: undisclosed recipients: ; 
Reply-to: investigationbeninfederalbureau@yahoo.com

From: ECO BANK PLC 
Subject: Hello Dear Beneficiary,Good News 
X-Originating-IP: [115.178.12.201] 
To: undisclosed recipients: ; 
Reply-to: plcecobank118@yahoo.com.hk 
Message-id: 
MIME-version: 1.0 
X-Mailer: YahooMailClassic/15.0.4 YahooMailWebService/0.8.116.331537 
Content-type: multipart/alternative; 
boundary=”Boundary_(ID_vIbW/TiNhur4KDUcmvroXA)” 
X-Yahoo-Newman-Property: ymail-3 
X-Yahoo-Newman-Id: 723015.62700.bm@omp1005.mail.sg1.yahoo.com

From: MAIL POST OFFICE 
Subject: Regarding Your ATM CARD Deposited Here on the 11th 
X-Originating-IP: [77.238.189.59] 
To: undisclosed recipients: ; 
Reply-to: mailpostoffice1369@yahoo.fr

From: Dr Thomas Yayi Boni 
Subject: His Excellency Dr Thomas Yayi Boni 
X-Originating-IP: [77.238.189.64] 
To: undisclosed recipients: ; 
Reply-to: hisexcellency.drthomasyayiboni@yahoo.fr

From: “Mr.terry smith,” 
Subject: MTCN.764-057-6456 PICK UP YOUR FIRST PAYMENT OF $5,000.00 IMMEDIATLY 
X-Originating-IP: [115.178.12.223] 
To: undisclosed recipients: ; 
Reply-to: transferfund@yahoo.cn

From: “Dr. Destiny Mike” 
Subject: FUND APPROVAL / PICKUP @BANK OF AMERICA. 
X-Originating-IP: [115.178.12.240] 
To: undisclosed recipients: ; 
Reply-to: atmbank@globomail.com

MR D.P.O JOHNSON IS USING THE IP 41.216.50.26 – WHICH IS A KNOWN SCAMMER IP ADDRESS -  interpol_police_force_unit187@qatar.io  IS A SCAMMER – NAME: NWALIEJI MARCEL – USED NAME: JEFF ROBERT CARL – IP 41.216.50.26 BENIN – KNOWN SCAMMER

FOR MORE INFORMATION REGARDING THE ABOVE IP CLICK HERE.

 

212.82.109.193 – This IP which shows up as ‘originating-ip’ in the header, is a Ireland IP address and not the actual location of the scammer although they try to confuse (potential) victims into thinking they’re not African (because 95% of scammers are from Africa) This IP address has been reported and blacklisted numerous times due to scam activity. For additional information on this IP address, please click here.

41.216.50.26 – This IP which is one of the IP’s being used by the scammer, has been blacklisted on numerous sites due to alot of malicious activity including fraud, phishing scams, etc. Location of the IP is Benin Nigeria

Associated Email-addresses - dbankbenin97@yahoo.com – vytransfer@ymail.com

MR D P O JOHNSON << westernu749@gmail.com << 

41.216.50.26 has been blocked/blacklisted on Spamhaus as well as the following IPs: 41.85.169.5 << 41.85.176.19 << 41.216.50.33 << 81.91.229.189 << 41.85.161.126 << 41.216.48.17 << 41.216.40.128 << 41.216.44.198 << 41.222.192.64 << 81.91.228.131 << 81.91.228.78 <<

If you have received any scam email’s under different email addresses, names, etc under the IP address used in the email above, please let me know by copy and pasting them into the comment section. Thank you!

 
Leave a comment

Posted by on 11/27/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

“FBI OFFICE”

WARNING – INHERITANCE SCAM – ATM CARD FRAUD – NIGERIAN SCAMMER

ATTENTION: THIS SCAMMER’S IP IS BLACKLISTED AND IS CONSIDERED 100% MALICIOUS ON A SCALE FROM 1-100 – - If you’ve received a email/contact and put their IP, email address, host, etc and got brought to this post then you’re dealing with a scammer/phisher One of the anti-spam websites warning against this IP address is Spamhaus

EMAIL: Show Details
Attn please,
This message is coming to you from FBI office here, We are writing this mail to inform you that your (Inheritance winning awarded funds of $1.5million) has been totally converted into a ATM Master card and it’s to be delivered to your address via courier service, Be inform that the courier delivery company will deliver the card with all the manual and instruction both with PIN code to access the Card upon receipt. It’s the best option to receive this amount since every attempt failed, therefore you will need to contact the Barrister that helped in re-claiming the check back and converted it into an ATM visa card with his address below:

Barrister Necter Polimars
Email: barristernecter@yahoo.fr
Phone: +229-98651731

Send him your current address where the check should be delivered to and remember to indicate the Reg:code of ATM-0034 to him when making contact with him. Please also choose the courier service you would like to deliver the Card Post office is also working but could take the card much time to get to you.

Please endeavor to inform us once you have received the ATM Card.

Sincere regards
Robert S. Mueller
FBI Monitoring Team Service

HEADER:

Return-Path: <offilcefile1905@superposta.com>
X-YahooFilteredBulk: 203.188.201.151
Received-SPF: fail (domain of superposta.com does not designate 203.188.201.151 as permitted sender)
X-YMailISG: ezBF7kAWLDtzu.6WTiJebVEzmQUIcG_PNd1CwpI.7FK_4hEN Zny7zbsYgSrvRNEkKNAHyjYIgbXGVFrTSy5c9pyJLJT.I2rbeu56O.55aNRc EQ4OjPa65stTyuXMWPdmbc2Jchn20MKDdUhbt5XnuXvouwATkklv.if4Srwf PhgPk6NBUSLZVJfqBHUhuwGMHUb_GfrNTpQsO.6RIv6rP_BimD0cQ0sROi15 H3py5nbXAc.b_y9E7OCFREZrAT3GEMeHuzInLPwjPODQ7PFjnt8wP97VPfLP C3D6i4CW_Q9zsBV5HRucchEEUqIWMBzzTuLi6zi_ltdXIdLGccljYIUkibmP Ed6kSsw6JvdOn8x62zffgS3BLW6CK4UJ2WrxTzHnGsLVxdxZBcThqC8CcB.n 3tmyMvUm028RDYEH6y5spoHom3ZCQydyZ8aZ6a2CdE5op4jpI2fdBhU7ZyZN Dqdib4ZxEPlV37MS9RCDeUqBndpsXjq39haZEpSj.pWiwS_jeQggSyiCfzLA Du8yPKoCdbgkqs4xpA6z1bLRYqSSeiMETFaBAYVfqIhhHnCuGnRdSjKKcRfa QSyPrDLSrtpTgCxTxf8Wmlv5r9qoSzqTBs8y3639xGJz_TaqCvv2WGK2d0eL _2p6QjsaA6XBRYyI1olJHaBZnBshmo67FuoNCPeg2JBFZC9bJuLhNahvSF4K d9N2c5ipVC9pAsSeyKG_PiKl4ql1Y7q3l7f5IfZhlPgbTIJmn2Yxc78Fs.7b MF1ui8Dgn7t3rQehQiKwWpFk0q7WCC0IWZAAoZgM1h6Q.FP6orLyiR.Exv8D RiD.Oc4IbsY5WKoCy8ZMH.q.4LpS2Pyom.ERBABavo2ov5JSoNDBVWW6ss0t ySPJiqvMCEULgheeKtHOlWD1UGNWn5g77TqNnx8dnYwLT_Y2ONb0zrgj4.Qe TLuVJ7nQYutC4IN2EKxquWdtY9lDDBNt3EYmZ0jwRErSqsr1dKjHBzBUdu_s _0O.oK5IqEYhs8zBOHcckO_uJSRW.SQmfbTZF069RPGOwEu5ckgWIGwo
X-Originating-IP: [203.188.201.151]
Authentication-Results: mta1091.mail.ac4.yahoo.com from=superposta.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm13-vm5.bullet.mail.tp2.yahoo.com) (203.188.201.151) by mta1091.mail.ac4.yahoo.com with SMTP; Sat, 17 Nov 2012 02:43:59 -0800
Received: from [203.188.200.142] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 17 Nov 2012 10:43:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 977911.45325.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 39060 invoked by uid 60001); 17 Nov 2012 10:43:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353149034; bh=4NHRjGox1llxlGTpuwwzaXz2wAEyMSFQlVe/RepWfVQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=P0DhZFg9Mjj05/vqaDc0igv+GPAlNxBBckhxEzU4PJ/OEqkdNXv8cHYOGIrX06GRSxiYBDEXksxF+7O6itMLQryiu63e3X/TBdnGMXPpsJmwW89Nu0b5IpbVDCyBNfuzLVNzU62iHNFjxppWoL8m/2ohhLEweTQDE86CwjMFUjc=
X-YMail-OSG: UNddAlUVM1kvGGStE1FY34uiMeKn2clDYRgV8R.tDHiC3Gd LJa0arT0C
Received: from [41.223.248.96] by web92408.mail.cnh.yahoo.com via HTTP; Sat, 17 Nov 2012 18:43:53 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353149033.34956.YahooMailClassic@web92408.mail.cnh.yahoo.com>
Date: Sat, 17 Nov 2012 18:43:53 +0800 (CST)
From:
FBI OFFICE <offilcefile1905@superposta.com>
Reply-To: barristernecter@yahoo.fr
Subject: YOUR ATM MASTER CARD OF 1.5MILLION
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”176961417-1892065883-1353149033=:34956″
Content-Length: 14962

This list below shows many bad IP addresses (sending out spam, virsus, scam, phishing, fraud, etc) that are being used by web92408.mail.cnh.yahoo.com 41.223.248.98 <– The IP/Host at this IP is being used by scammers sending out 419 scams

210.169.153.71 SOFTBANK TELECO ODN.NE.JP JP 5% 95% 2% 98%
200.13.169.3 AMNET DATOS EL AMNETSAL.C SV 49% 51% 46% 54%
203.115.0.14 INTERNET SERVIC RADIUS1.SL LK 13% 87% 25% 75%
202.147.75.21 POWERLAN LIMITE DOT.NET.AU AU 18% 82% 38% 62%
202.147.75.25 POWERLAN LIMITE DOT.NET.AU AU 18% 82% 39% 61%
116.50.64.53 WAN NETWORK FOR - IN 59% 41% 61% 39%
213.210.218.169 SERVICES COMPAN NESMA.NET. SA 65% 35% 68% 32%
85.95.235.101 INETMAR INTERNE - TR 6% 94% 4% 96%
124.74.42.242 CHINANET SHANGH JWS.COM CN 51% 49% 63% 37%
217.146.183.251 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.227 YAHOO! EUROPE YAHOO.COM UK 36% 64% 58% 42%
217.146.183.253 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.233 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.88 YAHOO! EUROPE YAHOO.COM UK 36% 64% 58% 42%
217.146.183.114 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.225 YAHOO! EUROPE YAHOO.COM UK 36% 64% 60% 40%
217.146.183.243 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.235 YAHOO! EUROPE YAHOO.COM UK 36% 64% 61% 39%
217.146.183.92 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.229 YAHOO! EUROPE YAHOO.COM UK 35% 65% 58% 42%
217.146.183.112 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.247 YAHOO! EUROPE YAHOO.COM UK 35% 65% 59% 41%
217.146.183.239 YAHOO! EUROPE YAHOO.COM UK 36% 64% 57% 43%
217.146.183.249 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.231 YAHOO! EUROPE YAHOO.COM UK 35% 65% 59% 41%

barristernecter@yahoo.fr

From  41.223.248.96 – web92408.mail.cnh.yahoo.com — Cotonou – BENIN – BJ – 

Reverse DNS: 203.209.250.172 - web92408.mail.cnh.yahoo.com  – IP address originates from China and has a score of 50/100 which means approx half of the activity is BAD

From: Jonathon Finn <mooretudepo33@livedoor.net>
Subject: Ermaessigte Preise fuer Top Armbanduhkopien
From: Kelvin Richardson <pricesajebi29@lunatico.it>
Subject: Genaue Kopien von Schweizer Armbanduhren
From: Leo Grady <bakerlixiru48@cerviaambiente.it>
Subject: Top Chronometer zum ermaessigten Preis
From: Adrian Childers <perezbuxuva66@hotelclocchiatti.it
Subject: Ideale Kopien von Schweizer Zeitmessern
From: Shirley Stroud <robertssacoly93@texsaca.it>
Subject: Dieselbe hohe Qualitaet vom Edelzubehoer guenstige
From: Amy Christopher <hughesbumoco27@cooparche.com>
Subject: Sommerpreise fuers edel aussehendes Zubehoer
From: Sophia Walden <phillipsjimome53@pgelettroimpianti.
Subject: Teuer aussehendes Zubehoer zum ermaessigten Preis
Associated Harvesters for IP - 41.223.248.48
75.125.18.178 | H
70.85.113.242 | H
208.66.195.2 | H
70.85.172.170 | H
74.53.249.34 | HW
74.86.249.98 | H
74.53.243.18 | HC
74.86.209.74 | H
218.186.13.1 | H
75.125.47.162 | HSDW
67.19.250.26 | H
91.190.94.246 | HSD
216.40.222.98 | H
81.195.121.253 | HSDC
Sent From 41.223.248.96 – SOURCE: Project Honey Pot
From:  Customer Service – upsaccountservices@ups.com
Subject: Re: FW: End of Aug. Statement Reqiured
From: Logistics UPS  accountservices@ups.com
Subject: Re: FW: End of Aug. Statement Reqiured
From:  Express – upsdelivercompanyb@ups.com
Subject: Re: End of Aug. Statmeent required
From: WendyDillahunt@mailusers.make-tracks.com
Subject: Re: End of Aug. Statmeent required
From: LinkedIn Email Confirmation – emailconfirm@linkedin
Subject: Re: FW: End of Aug. Statement Required
From: Customer Support ups  upsdeliveryservices@ups.com
Subject: Re: FW: End of Aug. Stat. required
From:  accounting@graco.dhbit.ca
Subject: Re: FW: End of Aug. Stat. required
From: Sook Ritchie via LinkedIn – member@linkedin.com
Subject: Re: changelog UPD.
From:  accounting@mail420.minnesotageeks.com
Subject: RE: MAYRA – Copies of Policies.
From: Marisol Friend via LinkedIn – member@linkedin.com
Subject: RE: CARMAN – Copies of Policies.
From:  raccounting@mail2.mounted.net
Subject: RE: MEGHANN – Copies of Policies.
From: DarwinZarling@hotmail.com
Subject: Re: Security update for banking accounts.
From:  DIONNE ROBERTSON – ROBERTSONpmjgDIONNE@hotmail.co
Subject: Your tax return appeal is declined.
From:  IsmaelLAKEEQFFK2B@aol.com
Subject: IRS notification of your tax appeal status.
From: “MYUPS” <ups-shippingagency@ups.com>
Subject: Re: Fwd: Scan from a Hewlett-Packard ScanJet #575
From: UPS <customerdesk_upsdeliveryservices@ups.com>
Subject: Don’t forget about meeting tomorrow
From: Kathlene Donaldson – MiraDinehart@w-link.net
Subject: Don’t forget about meeting tomorrow
From: Milford Hinkle – RamonGriebling@heale.net
Subject: Don’t forget about meeting tomorrow
From:  Amazon.com – account-update@amazon.com
Subject: Re: Your Flight A189-45644
From:  JabariKinnon@mail.igretec.net
Subject: Re: Your Flight A07-8295
From:  LEON Doherty – DohertyLEON@hotmail.com
Subject: Re: Fwd: Your Flight A268-625505
From: Badoo – noreply@badoo.com
Subject: Fwd: Re: Your Flight A18-77208
From: “craigslist – automated message, do not reply” <ro
Subject: Fwd: Wire Transfer (30331FY38)
Example Messages Sent From 203.209.250.172 – SOURCE: Project Honey Pot
From: Mrs Purity Qaume – mrs.purityqaume2011@terra.com
Subject: From: Madam Purity Qaume
From: Mrs Purity Qaume – mrs.purityqaume2011@terra.com
Subject: From: Madam Purity Qaume.
From: jxdguq – caolaeuva@yahoo.cn
Subject: 9税4

FBI OFFICE <> offilcefile1905@superposta.com <> barristernecter@yahoo.fr <>

41.223.248.96 by web92402.mail.cnh.yahoo.com <> bobwilliamson@superposta.com <> wunion617@superposta.com <> Received: from [41.223.248.96] by web92402.mail.cnh.yahoo.com via HTTP;
X-RocketYMMF: redwoodcapitalbank@yahoo.cn
Date: Thu, 15 Nov 2012 18:51:29 +0800 (CST)
From: “Rev. Robert Williamson, ESQ.” <offilcefile1905@superposta.com>
Reply-To: wunion617@superposta.com
Subject: TRANSFER MTCN

Attention Beneficiary,

I am contacting you because I’ve sent you the first payment of $5,000 this morning from your winning funds total amount of $1.5Million USD, Therefore you need to contact a Western Union agent Mr. Jerry Young, and ask him to give you the transfer payment information and MTCN.

Agent: Mr. Jerry Young
Email: wunion617@superposta.com
Phone: +229 98644349

Please try to contact him today request him to forward the payment information to you, Remember to Indicate the registration code of EB-2520 to him when E-mailing or calling him, Also he will be sending you $5,000.00 daily as per our office discussion with him.

Do get in touch with me once you have received the transfer. Please copy this email: wunion617@superposta.com, and paste before replying to him or simply call him at his number: +229 98644349

Sincerely

Rev. Robert Williamson, ESQ.

IMF MANAGING DIRECTOR

BENIN REPUBLIC

E-mail: bobwilliamson@superposta.com
+22998644349

________________________________________

Fraudster is also pretending to be Yahoo Member Services <carecustomer625@yahoo.com> Reply-to: carecustomer625@yahoo.com — YFB - 98.139.91.80 Received from: 41.223.248.96 – web182201.mail.bf1.yahoo.com

An FBI agent would contact you by phone or atleast by your name. They also have there own domain and wouldn’t use ‘superposta’ as an email-server.

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Mr PAUL JOHNSON”

LOTTERY SCAM – NIGERIAN 419 SCAMMER – ADVANCE FEE FRAUD

UPDATE: SAME SCAMMER - DR.CHINEYE NWACHUKWU <office_dooog@yahoo.cn> [203.188.201.73] “Office Customerscare” <officecustomerscare@yahoo.com> [98.139.212.160] RECEIVED: From from [41.216.44.199] by web161602.mail.bf1.yahoo.com via HTTP; Sun, 02 Dec 2012 22:54:16 PST

Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

More IPs and information at the bottom of this post.

EMAIL: FROM DESK OF MONEYGRAM OFFICE TRANSFER  BENIN REPUBLIC

CONTACT: Mr PAUL JOHNSON.
ADDRESS; AVENUE STERMETZ  RUE 8812
E-MAI :  (officepost466@yahoo.fr)
TEL: +229 98677751

ATTENETION: BENEFICIARY,
Honestly iam just dissapointed at your behaviour because you know that i am a man of God and cannot deceive you. just pay the $139 and leave me and my God because God is watching me if i am telling you lies.

I know it is because of your past exprience that make you not to believe me but i told you before my God who is my withness that i cannot deceive you because my bible says what shall it profit a man to gain material things and loose your soul. i told you ealier just drop your old exprience and follow my intruction a man of God and you will know what it means to follow somebody that fear God.

I swear to God almight  Father. if i fail to TRANFER you fund through MoneyGram Office within 48hours after you send the $139 as i promise let God Take my life, i cannot fail you,i promise you. dont fear as soon as you sent the $139 today  please leave the rest to me and see if i am lie to you or not because i can not use my life swear because of $139

How can i swear against my life because of thistransfer of your $6000.00 per Day,but is to show you that i am telling you the truth. so please try to understand me this $139 is big amount but is too small for the amount you have to receive within 48hours okey.
Here is the informations to use send the money so that we will complete the matter once and for all.$139 only no more payment i swear to God and your your first payment will leave here immediately i receive the payment here okey. I here by giving you 100% Assurance that your  fund  is valid and you can start receing  it once you send the fee,
Here is the informations to make the payment through  moneyGram  transfer below:
RECEIVE NAME::::::::::::::::::::Anthony O IKWUNNE
COUNTRY:::::::::::::::::::::::::::::::BENIN REPUBLIC
CITY::::::::::::::::::::::::::::::::::::::COTONOU
TEXT QUESTION:::::::::::::::::::::: Almight
ANSWER::::::::::::::::::::::::::::::::::God
Amount::::::::::::::::::::::::::::::::::::::::::$139
MTCN::::::::::::::::::::::::::::::::::::::::
I am looking forward to hear from you right now and know what is holding not to make the payment as you said because i hate any thing promise and fail .
I am waiting to hear from you now.
Mr PAUL JOHNSON 
MoneyGram
COTONOU BENIN REPUBLIC: NO: 192 AKIL ROAD
TELEPHONE NUMBER +229-98677751

HEADER:

Return-Path: <westernu749@gmail.com>
X-YahooFilteredBulk: 212.82.109.207
Received-SPF: neutral (212.82.109.207 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: mAPd.zUWLDsRpeHBoGVp39xaBbCEO531WL0nnksrVHuTorC1 mHvNt1jnBO5VbOOflZxW11t5JXU8oRgD5y.Ek6z.AyRS7mQfuGPo8IjmIGR0 ohIn3_sLE_Pq68kScnHc1KZYU5UXn6B.yM2Ihxog426HDgyiTcbGG_9sjA71 f6K8ZejXSg95rtRTMvv7ZGJqYfZkjTCzWH3BhZTC3_5kWyzCnH4firB8ygWx T7Qu6_RCwUhme44PRRWA4wSJuKWOjdt02D9zfR72OjHLWZ8q34ahd6ZaytwZ SLC7UeD1TZrKFzF.ac4CUDKxdukkPu9K9bOurdcioZl8oO2KycOKnadXRAQV Y69vmBLy8vNW71oebupTdxOHYGAmYobPE0LD.3miWSIlUUjLHCYwSD8P9IQL q5.evioqyABcll0P7iJEPW3dtf5cmIG25r4U5bZc0yGW8Bxvdu6XeGBOQW7d MPnHs_2banHcLu87VJm04tIojLHMtZtAuj9oDw6ltYZd_nVP80zshGtZ9xnK .VkhkDqqlCM.WYznVnmnC5ry6p_vQsj54RNqWGVkTWiuRRjpu4RqWBuA01p. AI6aNLm4oLSoJwH3or0crtKG.bb_Qvazm5KGToT2mSkwinx6LKXWY9UnxjrS I9Fi8jIgtuOyszcjZK4F99AGOWyzksDrnBcgTUEHqbZWPBW0PQkPOZxP2vIg fVlTC0DJK0jQ3E21EhA8SSVSV5SOmVSyY42piupYs0Cd346txlWlnYSTdD1t 1ax0KHJ_LxZKndjq_deTZ4OU5KcLguYbxNwNr.NBOA.j.yYAG7pyxTis02IO 1pn0sBicFuH2pqKFG9Jdg9Qr.qigDD20if3tT1XkzzuD8_kqqBrwWFrB9oXJ L7JIpg5L5WmZr6D5K_eCWC6ws4DttkwQFMITgNRj.s_teM3IVa271lSGdhUS rYOEgg5VQy38E3wFWWAVP8ExN9GjoVA.STjq2B0oed37fRo5lRUDhKAm9NCh MmpuP0OdSKyjcSBuMWVDsCvqkmULNm277yauVgHaqPGeoWfTahUuBphuEkCf p7RuBRtDnFaiSozZSCpSyYU0o84HDT5UsdupJ7CQ3uI0AMVywoc9Qof2NVYZ ikdQvaJVP4otpZlEhnlKYrI4MFnQhmd3Y6DsNf17EnQVmOUA_7jNx6xiLkK5 RJx0ZWZTgMQb.XqhdG.NvAmbEreDqEib58rZXi7sqP4vfp65O2cX973dN6EC Me3UQOvhpqcVuTuJiYrphZ45i2vkh9YY3.pectoIkQ–
X-Originating-IP: [212.82.109.207]
Authentication-Results: mta1179.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm25-vm6.bullet.mail.ird.yahoo.com) (212.82.109.207) by mta1179.mail.bf1.yahoo.com with SMTP; Mon, 19 Nov 2012 10:08:27 -0800
Received: from [77.238.189.57] by nm25.bullet.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 18:08:23 -0000
Received: from [212.82.108.243] by tm10.bullet.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 18:08:23 -0000
Received: from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 18:08:23 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 353950.72023.bm@omp1008.mail.ird.yahoo.com
Received: (qmail 89519 invoked by uid 60001); 19 Nov 2012 18:08:22 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353348502; bh=VtTxWO99qmgFXC+U9mZGcc8fJuIFk1rs7b48t39FXvs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Q3wJNOT7jZyDuKNEONPsW5buywODWICBLkHQu3kBitYXpk4LKXjWK0KLfw0EUkfWMVhOwWdy+5nlGbdhqLLlltc+K/TdeIXjLcsc7fGaqDx1IjBcjqJ3zemO/dFRnU7YCAnVCE3QfPjB6NnKGRRjZQavB5Ww6ngF0E21ln+VDOI=
X-YMail-OSG: gKJenGAVM1m5yvXDjYGZq6FKSO3LQ6WOe9EyxxlKdIobrTi x7eRybZPH
Received: from [41.216.44.199] by web171303.mail.ir2.yahoo.com via HTTP; Mon, 19 Nov 2012 18:08:22 GMT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353348502.84732.YahooMailClassic@web171303.mail.ir2.yahoo.com>
Date: Mon, 19 Nov 2012 18:08:22 +0000 (GMT)
From:
Mr PAUL JOHNSON <westernu749@gmail.com>
Reply-To: officepost466@yahoo.fr
Subject: CONTACT: Mr PAUL JOHNSON.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”-1953309981-1231263434-1353348502=:84732″
Content-Length: 7829

Mr PAUL JOHNSON <> westernu749@gmail.com <> Reply-to: officepost466@yahoo.fr <>

41.216.44.199 – Nigerian Scammer’s IP address has a ‘BAD’ reputation according to Reputation Authority – The IP location is in Cotonou – Atlantique – Benin - Nigerian — between Lagos & Lome — IP points nexts to Benin Marina Hotel

The number of this IP address is 41.216.44.199. This IP address is related to Benin, and registered in Cotonou, Littoral. IP Country code is BJ. IP address is assigned to “Benin Telecom SA”. In organization “Benin Telecom SA”. IP address longitude is 2.4333 and latitude is 6.35.

Some other names and email addresses used in scams under the IP 41.216.44.199 - emb.asty@yahoo.co.uk <> 77.238.189.59 – Nigerian Immigration Service <> Mr Joshua Alexander emb.asty@yahoo.co.uk <> nigeriaimmigration_services@yahoo.com <> 98.139.91.100 <> western_ubb@yahoo.fr <> 41.216.44.199 – web164610.mail.gq1.yahoo.com <> 41.216.44.199 – web29904.mail.ird.yahoo.com <> 41.216.44.199 – web164610.mail.gq1.yahoo.com <> 98.139.91.100 <> western_ubb@yahoo.fr <> 106.10.151.198 - vms172055.mailsrvcs.net <>  41.216.44.199 –  web190602.mail.sg3.yahoo.com <> 106.10.151.198 - post1369@yahoo.com.hk <>nm7.bullet.mail.ird.yahoo.com <> 77.238.189.21 - vms169127.mailsrvcs.net <> 77.238.189.21 <> peterusman8@yahoo.fr <> Rev Tony Johnson <> [115.178.12.209 <> plcuu3@yahoo.fr <> 41.216.44.199 - web190606.mail.sg3.yahoo.com <> 41.216.44.199 - web190805.mail.sg3.yahoo.com <> DR JIM LOWRENCE
RE: IRREVOCABLE RELEASE OF YOUR PAYMENT - 115.178.12.209 - wstrnnnoffice79@gmail.com <> 41.216.44.199 -  web171512.mail.ir2.yahoo.com -- REV FRANK EZE -- Subject: Re : WEB SITE.WWW.WESTERNUNION.COM - 77.238.189.35 -- Reply-to: w.iont_ernunion2011@yahoo.com.hk <> 41.216.44.199 - web29104.mail.ird.yahoo.com -- 77.238.189.196 -- post1369@yahoo.com.hk <> Mr Allen Bells - 41.216.44.199 - web27506.mail.ukl.yahoo.com -- 
217.146.182.249 -- atmmasterdepartmentoffice@yahoo.com <> 41.216.44.199 - web95215.mail.in2.yahoo.com - WESTERN UNION OFFICE - 121.101.151.239 - www.western40@yahoo.fr <> 41.216.44.199 - web29305.mail.ird.yahoo.com - MR MIKE OBI  - Money Gram International Bank Transfer - 77.238.189.196 - moneygramofficebenin45@yahoo.fr <>  41.216.44.199 - web65804.mail.ac4.yahoo.com - DIPLOMATIC MR ERICI BROWN - 98.139.52.215 - diplomatericb@ymail.com <>

web171303.mail.ir2.yahoo.com -  - 188.125.83.118

[203.188.201.73] mta1299.mail.sk1.yahoo.com RECEIVED: from [41.216.44.199] by web92416.mail.cnh.yahoo.com

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Don Bright”

WARNING – NIGERIAN 419 SCAMMER

INFO: Don Bright <> fredwilliams3@rediffmail.com <> expressprocessatmcardbenin53@yahoo.com.tw

SUBJECT: FROM ECO WAS ATTORNEY  MR JAMES GEORGE ATM DEPARTMENT

FROM ECO WAS (ATTORNEY ) MR. .JAMES GEORGE
IN COTONOU BENIN REPUBLIC:
 NO:171 AKIL ROAD
 
Attn; Dear Customer,
 Greeting !! 
I wish to acknowledged you that we have finally succeeded in getting your Over due Payment worth’s of $3.8million’s United State Dollars out from Economic Community of West African States (E.C.O.W.A.S) department with the help of Mr.James George Attorney General of Federal High Court of Justice Benin Republic which acts as your foreign Attorney representative here in Benin Republic before his back to Paris France to compete his job there. 
However I am bring to your attention today that we are finally instructed for the immediate conversion of your ($3.800.000.00 USD) into an ATM VISA CARD by which you can easily received it via United Bank for Africa  Cotonou Benin Republic
Regards your fund lump sum of $3.800, 000.00USD via ATM VISA CARD has being approved and mandated by the Government of Benin. So this instruction is reaching you right now to kindly Contact  the Director of ATM VISA CARD CENTER of United Bank for Africa PLC : Cotonou  an “ATM VISA CARD CENTER”contact information’s is below.
ATM Visa Card Claiming Department
United Bank for Africa ( U B A)
Director: Mr. Ken Brown
Visa Card claiming Department
Email expressprocessatmcardbenin53@yahoo.com.tw    Tel: +229-97804183

While contact him immediately  request for the card copy and get back to us and below is the needed information’s or form to fill  for the Card processing and production which they demanded you to re-confirm to them by yourself as the beneficiary by using this code of conduct  “ATM-0321″, As Subject alright.
Your Full Name::::::::
Country::::::::
City::::::::
Home address::::::::
Telephone::::::::
Fax::::::::
Code::::::::
A copy of your id::::::::

Note that because of impostors, The bank also issued you their code of conduct,which is “ATM-0321″ so remember to indicate this code while contacting the ATM VISA CARD CENTER whereby using it as your subject alright.
Thanks for your maximum understanding co-operation and may God Bless you.
Regards
Don Bright
Chief Justice of Benin

 

HEADER:

Return-Path:   <fredwilliams3@rediffmail.com>
X-YahooFilteredBulk:   203.188.201.151
Received-SPF:   softfail (transitioning domain of rediffmail.com does not designate 203.188.201.151 as permitted sender)
X-YMailISG:   kXm_l1sWLDulJeDnOLmSYdHmIqwp9r2k_ROYymTodmz266na zbWmm1RAwqAGvVzdkwDVIbDT8aDMccE0hDmzwJtDnlV4iJuFz0KcXVf1dBak x98QBBYy.rvg1pyEHXGwIyg0vfjfZzaH0cL2NhozBoR7T_SswQDqjPkpilTa 9zxjg2xwxJWYGVKBP6a2QUEmK3WpQosxrAVpSWwkGBZg7eVeoGsZDVA8NS5L GXQxxkjBDQK2EhPR0e6buJvQZBVYdWxOjzJaKeW3LkzKD_L.cqJXriH9pi0N a9gjHsvYsVZYjN5HmL7qbB1fOyNvL7A0y_kkrCIzGnq7tQWDOYsY8Szbpt6. wUI265q4YMhRGPG57mtQh4MqOj5vTQWQ7k8GODjOiFp0HD8EaShYjft3mra2 C_47mjLCermdzu7q8jRpFeuy.iiolsQV79zOfbeSP12ZhqrSPSaF4T2cx2Je dcVjk6guaZJMhSdnV5vjprupXr65wFz.T4l_kWsL446Pp5D.MrHn6DFmr.QQ wwbxEuJf.dYTCjEdTv3pR6agpyKx0H6efevBOMagtK391o8pFLXmZwl7eCTJ N_96Hs_mtE9u6YvXmTwAhNuDzbCI9bZq9lOiUg5Je0lnK9ECjTz6wN8DhErI _HKSfh6HYtEWjX41pyCBu_AqC.BPf9.apP4wnqPa4Swvf6nK_yd4JLPy5hQ4 QZk87kD3_aGkwheBtgxJYtaIXuBDZArx6K7eibTJR4wEWXCKoEMZKqfIfuTg E5J50THp.313pUu1skrpRY4W9mneEQYmVYnei3tje.0qjxtMAnE8EF0NFBPu 6C512x7CKXMg5jX8NC3U6dUxxQwBPkMGfXFkB1uLcKbz20aZCm3XVSe2RCwJ MiTkcht7A8Mh1uKqPfT03S4_W57g12Vd0rr8nAtzPoa7PReYYsq8cRUJWwOQ YTUr4LnYBE1VgmlOXv6cF_H9DZgwjMUFn7Jjwko_VAscFQcVfBtSqwzh7aF_ a2Myv2f0jlv.x8iqZtoJdMZ4QFeqm2lyK.z5vT_fjtINJACHdd.c.rYMFjIs s2Ki0.H4pWR9AlbhLbzWzS6We6y8GR84DuP8bfLv9tnzxPI6Y8wXeNX_PGPU ngcHDVItOGamaK8YRs3UA6Hh47uLPhQQ_bR6QtxSQ9dylIHZyGC2LFEezNIB sO95KtmJdbtuFkwDPvP498wr.UEGHikyo6zfrcF6sMvSRqO_qSFK9WL6di.Q cSu_k8mhBhCBX7UflKUBgnJpVLOjNapnlBuYCIUAdlJfPyzAb7qCXLBfIO61 ufTgbAVKdinUnJtyqf2z2ocHbeY8x7k3RtTt407n6zAyJnuWdacA4JR12kuR GzIeiw–
X-Originating-IP:   [203.188.201.151]
Authentication-Results:   mta1219.mail.mud.yahoo.com from=rediffmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm13-vm5.bullet.mail.tp2.yahoo.com) (203.188.201.151) by mta1219.mail.mud.yahoo.com with SMTP; Mon, 12 Nov 2012 20:05:36 -0800
Received:   from [203.188.200.80] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 13 Nov 2012 04:05:33 -0000
Received:   from [203.209.230.76] by tm1.bullet.mail.tp2.yahoo.com with NNFMP; 13 Nov 2012 04:05:33 -0000
Received:   from [127.0.0.1] by omp105.mail.cnb.yahoo.com with NNFMP; 13 Nov 2012 04:05:29 -0000
X-Yahoo-Newman-Property:   ymail-3
X-Yahoo-Newman-Id:   882944.40828.bm@omp105.mail.cnb.yahoo.com
Received:   (qmail 23703 invoked by uid 60001); 13 Nov 2012 04:05:29 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1352779529; bh=ZStJQptkpiRtW9IHly4mG/teeC4Vi9ewmbkLGyxQEnw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=s41UtQ0D/KXQzDMgifijBIXVjLNxUR1ahFoNSwOa5shnso/PYBkPTZZBb2hauAI82cgX1+T8RA0TCkf5LfBmjlbI1n6GWWodpb9OueyaXHgU7l7t1hgqlXHBbeUDAAxLdDowSoVrHuaexcgdtaReePY0PgpW6Gn1rBq1SI+rbvo=
X-YMail-OSG:   i3LOjoUVM1lxIQLS9kVi4Y8kX8wV_wAnVTfrRQhVear54pa qPUcdSwwe
Received:   from [41.138.90.38] by web92402.mail.cnh.yahoo.com via HTTP; Tue, 13 Nov 2012 12:05:28 CST
X-Mailer:   YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID:   <1352779528.23247.YahooMailClassic@web92402.mail.cnh.yahoo.com>
Date:   Tue, 13 Nov 2012 12:05:28 +0800 (CST)
From:  
Don Bright <fredwilliams3@rediffmail.com>
Reply-To:   expressprocessatmcardbenin53@yahoo.com.tw
Subject:   FROM ECO WAS (ATTORNEY ) MR. .JAMES GEORGE ATM DEPARTMENT
To:   undisclosed recipients: ;
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”373869220-595389065-1352779528=:23247″
Content-Length:   22280
 
1 Comment

Posted by on 11/20/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

”UNITED NATION FUND ORGANIZATION”

UPDATED: This scammer is already posted on scammer419 under the name ”Philip John” – below is one of his newest Identities. To view the other post please click: Three Nigerian Scammers bundled into one post

NIGERIAN 419 SCAM – ADVANCE FEE FRAUD

sign scissors 01

IF YOU GET A SIMILAR LOOKING EMAIL, RUN!!!

Name(s) & Email-Addresses: MRS MARIA JONATHAN <> Mr John L Williams <> Mr. Obiorah U. Nwakacha <>  xxxx447@yahoo.cn <> mrjohnwiliam@hotmail.com <> homelandservce@yahoo.com <> <> westnun1@kimo.com   <> obionwakacha@rocketmail.com <>  mrs.rosepink@yahoo.cn <> officef54@yahoo.cn <> ikjim840@yahoo.com.cn <> western.union_ben@ws-loei.ac.th <>

 

EMAIL: ATTENTION DEAR,

THIS EMAIL IS FROM THE UNITED NATION FUND APPROVAL ORGANIZATION BENIN REPUBLIC AND THIS IS TO BRING TO YOUR NOTICE THAT AFTER CONSIDERING THE DIFFICULTIES THAT YOU ARE FACING RECEIVING YOUR FEDERAL GOVERNMENT APPROVAL ORGANIZATION HAVE APPOINTED OUR SPECIAL DIPLOMATIC AGENT TO DELIVER YOUR FUND

AND THE ONLY POSSIBLE MEANS OF DELIVERING THIS FUND TO YOU IS CREDITING YOUR TOTAL FUND OF $5.5 MILLION USD INTO AN ATM VISA CARD WHICH THE CREDITING BANK HAS ALREADY DONE LAST WEEK THURSDAY AND AS WE ARE SPEAKING RIGHT NOW YOUR TOTAL FUND HAS BEEN CREDITED INTO THIS CARD AND ALL THE NECESSARY DOCUMENT THAT WILL COVER THE FUND INCLUDING THE PIN TO THE CARD IS SEALED WITH THE CARD WHICH OUR SPECIAL DIPLOMAT WILL BE DELIVERING TO YOU

NOW WE WISH TO INFORM YOU THAT OUR DIPLOMATIC AGENT LEFT WITH YOUR ATM VISA CARD CONTAINING USD $5.5 MILLION DOLLARS (FIVE MILLION FIVE HUNDRED THOUSAND UNITED STATES DOLLARS) SINCE YESTERDAY HOWEVER THE DIPLOMATIC AGENT CONVEYING THE PACKAGE HAS ALREADY ARRIVED (BUFFALO NIAGARA INTERNATIONAL AIRPORT NEW YORK) OVER THERE IN USA. WE REQUIRED YOU TO RECONFIRM THE FOLLOWING INFORMATION BELOW SO THAT HE CAN DELIVER YOUR ATM VISA CARD TO YOU TODAY.

NAME: ————————————————
ADDRESS: ——————————————–
MOBILE NO: ——————————————-
NAME OF YOUR NEAREST AIRPORT: —————
A COPY OF YOUR IDENTIFICATION: —————-

PLEASE CONTACT THE DIPLOMATIC AGENT WITH HIS EMAIL ADDRESS AS RECONFIRMED BELOW: CONTACT PERSON: MR. JOHN L. WILLIAM, EMAIL mrjohnwiliam@hotmail.com THIS IS THE TELEPHONE NUMBER TO REACH HIM OVER THERE IN NEW YORK 315 308 7554.

THANKS
MRS MARIA JONATHAN
UNITED NATION FUND ORGANIZATION

HEADER:
Return-Path: <xxxx447@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.65
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: EMlqt1UWLDtZET_mPxYKDlV.v3wh0.QwI2KpPMwwp.r4LqYb 4MJmJ8fs.2LeOi0Fa1e_askuznQngqlNDImZdIF3wSJF80EFUccXr2VmNr72 NMocjMDhhb6TUVdKx78xmtLA7vywOvm2trjRN5_YFoYEPRd2vMhCz7DskcvD 3_Dyg_3e8dG4Q1vld1wDeyJQ6S5F9dosZtq1qY2WsgD8SEHpujHV3dIjRmtv SAQbbWMZEdlPZ00GYExOEkYrHCr.krcuSQSE77nbXULTdwcxaPdVrww0bJTr pXVStt6KAsVC2icaciLKxMt9KzvjvXC9RFdipsCmmqvRee_XhnMP4vNrJXoU Ho0_WANMZ12nkYUlVGhRV1OX9NJpKx6UlgRg5EwMBghTclvjo4TPMKRpK9O0 kd4OX4qXIcLOmKswuP60pZbxhv.6h9ESr_bWwWuGU8cdcKTgDl0gxFW1q3CK OArsCREfdwO1cHXLPZgiwbhA1SbWG81VDlii8SuHqZ2GIc.W6ONxw0FhjyzK oKvkMpGT6BiyW3ckbplbM5nvpgSrPK3J3HVwy81XsTSJQwrtoMrRiqYaKCzD arvKnb.YUOcgJMcQR_UOy7Whn29vkuyEY7LvKCgtG1rPO8SN2JXfJBm0Zlik rcw6OM7kCnqWdKRuv6FXtrHFbGdak6vLVonw4j9eEMfdWS85Op71IrIw.lN7 FOgBL1igo3bwuz.xGPFVTFMckZNpDqJnaXc6xsRaNEvm6oHejtlfR4wFd7Y4 stqA.lqnnbj.gf_xsXa.s662qbc8opuj7fIsbXhqHy_.x93kN_vZNHVWII7r Qi0gzDruW5_S9CITWELLS46gydHEA7lHf0gTJkp7ZOlJ.yrdKTl3vMFQjJ98 1ivHhPXhGruJlUah88lCqGAZr5JtKZuBXh623OS9ZKZtOwoLvnsfQL2dWeH6 lZCXkQwIrc7k1LaOEvXt3rcBzuPQ6A1TJuYr1ZPdW2JNL6kprewiTRFGHSwQ A_wOXEALpw.PsajK32OjMz9yT7.URIACL8xYp9_W9YNJYq67mdgUK6vs6JbE 2Gj44YxaOEQJoXgIl3B8qCSbct2qgUB9JEjKZ97uYdh8C.1Z5D5KsjxzA4lJ tOCkCJ8shdv1df9tGSLvEYImoFZhlta_vu92Rz8YxoL7mGIvybh3EjoOw35T oaidVvY.TIzRNMpc6H_jrb2V74MA6PLVJotlkzPkfDGCG6vK93QCRMAcuCkZ uIVBrFGFJr0welQrcb2nkGlFkr3kIIX2oR6ND0Iup_K1V_DTZL2id0OHN5Qq XjbXb6oMbYfFcRcRyyIZ8JDYwhTDOjI7WtPrHxwUTBjj7TTCr1R1SeXc2OA-
X-Originating-IP: [203.188.200.65]
Authentication-Results: mta1270.mail.bf1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15-vm7.bullet.mail.tp2.yahoo.com) (203.188.200.65) by mta1270.mail.bf1.yahoo.com with SMTP; Sun, 18 Nov 2012 03:47:37 -0800
Received: from [203.188.200.82] by nm15.bullet.mail.tp2.yahoo.com with NNFMP; 18 Nov 2012 11:47:34 -0000
Received: from [202.165.102.48] by tm3.bullet.mail.tp2.yahoo.com with NNFMP; 18 Nov 2012 11:47:34 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 18 Nov 2012 11:47:34 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 411219.13945.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 38581 invoked by uid 60001); 18 Nov 2012 11:47:33 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1353239253; bh=5yttUB4L01wa2QtUAXh1WApojheP9bJ4fZkV/+A6ezk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=3rFzD1GS164uUALWKvlVlcN4P8wWwZbY4ZqFGZ3d6ocVghYpWQEobrUwsPal2MDFCLc+jaJjmeBd28siWp7CBtdo37c3D/Z2pHvKOgjbn4co0LSqVWxiQ26G3ISrKSLeU84oYKr2Bn4K8RRYyCsyxNKxWVnXLavosR+BJAXgjSI=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=sckgXknejuKgmvuB2i6x2XBj0fmiOGULJ1hiU926Ar7IrWmSYt3+9vuaKUI+xNiyBsU7XAPjVsZS2hx7krr7sterx1MMahldL760za3WODaUzpLUXS09HWg0Vj30YfnR7vmKPyLwJxWL3EJurWqjEeN5/RqPU2fCzxxfOFqQn0A=;
X-YMail-OSG: WUmLRzkVM1kJCxFIjDBpyIQiQMVzC00rDEhLCDEoR7GL_7. oHz2pehh3
Received: from [8.21.6.226] by web92416.mail.cnh.yahoo.com via HTTP; Sun, 18 Nov 2012 19:47:32 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353239252.38370.YahooMailClassic@web92416.mail.cnh.yahoo.com>
Date: Sun, 18 Nov 2012 19:47:32 +0800 (CST)
From:
MRS MARIA JONATHAN <xxxx447@yahoo.cn>
Reply-To: mrjohnwiliam@hotmail.com
Subject: UNITED NATION FUND ORGANIZATION
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1574124242-185449683-1353239252=:38370″
Content-Length: 7586

Below is information from another email sent by the same Nigerian scammer. IP’s and names listed below are all from the same scammer

Abonnes Adsl De Benin Telecoms A Adjarra Benin

Received: from 41.79.217.121 and 41.216.50.196 by web92416.mail.cnh.yahoo.com via HTTP; Tue, November 14, 2012 ———-  81.91.228.125

Return-Path: <homelandservce@yahoo.com>
X-YahooFilteredBulk: 203.188.200.190

Reply-To: westnun1@kimo.com   – Subject: Your Inheritance/Contract Payment : obionwakacha@rocketmail.com

U.S Department Of Homeland Security
The House Committee on Homeland Security
Department of Homeland Security
U.S. Department of Homeland Security
Washington, D.C. 20528
Website: http://homeland.house.gov/

Report Receive This Afternoon From Organizations Africa Unity.

We hereby to know whether you have received the payment of $2.5Million released from  Organization of African Unity – Mr. Obiorah U. Nwakacha  was the appointed person who’s supposedly to release the payment for you. Have you received the payment yet? Kindly update us urgent.

We have completed this investigation and you are hereby approved to receive the payment as we have verified the entire transaction and 100% risk free, due to the fact that the funds have been deposited at USA Federal Reserve you will be required to settle the following bills directly to the appointed Agent in-charge of this transaction whom is located in Cotonou Benin. According to our discoveries, you were required to pay for the following -

Shipping Fee’s ( This charge for shipping the ATM Card to your home address and includes Insurance )

We have tried our possible best to indicate that this $195 should be deducted from your payment but we found out that the funds have already been deposited at USA Federal Reserve and cannot be accessed by anyone apart from you the beneficiary, therefore you will be required to pay the required fee’s to the Agent in-charge of this transaction via Western Union Money Transfer Or Money Gram.

In order to proceed with this transaction, you will be required to contact the agent in-charge ( Mr. Obiorah U. Nwakacha) via e-mail. Kindly look below to find appropriate contact information:

CONTACT AGENT NAME: Mr. Obiorah U. Nwakacha
E-MAIL ADDRESS: obionwakacha@rocketmail.com
Telephone Number : +229-68351456

You will also be required to request Western Union or Money Gram details – EA2948-910.

Mr Obiorah U Nwakacha

Yours In Service
Secretary: Janet Napolitano

 

UPDATE: PHILIP JOHN — ANOTHER EMAIL RECEIVED:

Attention:  Beneficiary,


We have concluded to Send your payment through western union $5,000.00 daily
until the ($900,000.00USD ) is completely transfered. Meanwhile, Mrs  Ruth Duke
has instructed to Send you $5,000.00 in your name today. So contact our Western union
payment Agent to SEND you the mtcn to pick up this $5000 now:

CONTACT PERSON: MR.FRANK BENSON
Cell Phone +229 98-845962
Email Address: ( western.union_ben@ws-loei.ac.th )
Please remenber to Call and ask him to give you the mtcn, sender name,
question and answer to pick you to $5,000.00. Also you should send to him
your informations.

Your receiver name:::::::::::
Your full name:::::::::::::::::
Your address::,::::::::::::::::::
Yourcountry!::::::::::::::::::
Your direct phone number::::::::
Text question and answer::::::::

Thanks
Mr Philip John

WESTERN UNION HEAD OFFICE DEPARTMENT
REPUBLIC OF BENIN. CALL ME :+229-98845962

FOREGN CONTRACTOR PAYMENT OFFICE

HEADER TO SECOND EMAIL:

Return-Path: <ikjim840@yahoo.com.cn>
X-YahooFilteredBulk: 203.188.200.45
Received-SPF: none (domain of yahoo.com.cn does not designate permitted sender hosts)
X-YMailISG: i2GmapEWLDsZSJyJxmVnLEu2tIGQMaYEibsBS7i1YO00ole5 .AYxLx2fYqX_kDgREKk8QAQCbQ3qtD1Bl0gDCQCfaSDyT49BlP7ZL_XQ.C0_ RPKzTr9WKAmv8JOZICk6x04V3vadtrmhC3_Nph_sFyyFlD_S4ciwLGa7RZiw 8pc9eRa.64L0VwoMPYzaNRCEHg6S1E38SOpXjcocHXGoeOXYqBRu_Z2tSBmG 8yXyTFL531obnuNSCdlUI7Ha8t18tk10pohXX04UJpLdlrY55_3Rl6G.J4AK Q0IFM.ONL9SVYhbnsTVjgJNXn59mv.SY2BnIx9XT4Nv4vIGHcd4NYu7giwac MuWEKBV5rEsnsoVMgYxcp3EbiGDgbemAi6dQevMZsabPgPHKKayYkrdXJNHn ngg1TwvWt1S5XYnsaBR2AsJEvOW1XNfM4gdpCFRntAIP7zsS5QWH8g4scNTc 5At6CcC51NbiUdETvNWHJqvuuWYMy6m2lHUGRYWgiXqnoxXgB5FG05jAxxiH tdfi.FdEPO9.sBBgjPzgJ.GrEjJ1w_O1pqJSOmxSoNEbnC5lemaVIj36L8rm eVnMLpg6bqasiHWmI.u0.kn2Ky8Kg0mZ8I_M2Gel1flWENJLzgV.iI95mCim WFL7blRp4Q.c.zBdWaB3SyUbfvoaA8ZYmBclhxKp2pa2oqyxAyqUgeQUm10o e9DchKzPHzXjZm.RCzEHldEkqqaYyVFni12qOsbU5hA_Tt1I8JJRzOtJARC8 2zNFnFrGqD7rDALsXP5c3fYevwQc.WeCf5Vt7ZDClHTS40VsffAm6din_u.I d4xhcylKowdhl09uCAWcvWGOQxLbi0m3u5yAgTW.gAVv_syosgb4.3kYNXWL Ha6_xSAoeqyEoF19W8s2HTQoNby1g0i6VyESrfpon84osjaZ3b7EARUAx8lM 0vtG55dpayZ.EWhSBRRB4815ThMLS5faiLvmTyFx4UkN9N3nD452h2T4u0jd 5RJ6RkaSEVAMSQh8e01vRMPy0yTXzu5xCoMWL33pPVjcYK7MEJGnzBbWJ82t 5xNU2YaQ4iDwHJqhgsqx9FTnzrK6xlR5cODq5NTA3dRwJ9kADbx_jr27p4KW 4oxH7HPbSuanFJiUFhI0jcOXLUxls7SxKAB2sC5Losp7LcVLuQOnm.K8bOaz vWpDO0qWgR7gesDv.M5CPq412b0nzJ9eQcCtcmp_PyRwunyC0HLlME_DPPPx 3QRSow1dYUwP7.6sNh8oYl7uZh1VOXNVZt7wLzvlB6N.spJfirPVNgDZ5Ivx sRE47gWsB3_vReMMweBBV5E9QgQFDPgQTR8I297Vx7KNfXYbGePH69Bl3Lvf AdubkPWK.FG62A–
X-Originating-IP: [203.188.200.45]
Authentication-Results: mta1368.mail.mud.yahoo.com from=yahoo.com.cn; domainkeys=pass (ok); from=yahoo.com.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm13-vm7.bullet.mail.tp2.yahoo.com) (203.188.200.45) by mta1368.mail.mud.yahoo.com with SMTP; Fri, 09 Nov 2012 05:55:07 -0800
Received: from [203.188.200.80] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 09 Nov 2012 13:55:05 -0000
Received: from [202.165.102.49] by tm1.bullet.mail.tp2.yahoo.com with NNFMP; 09 Nov 2012 13:55:05 -0000
Received: from [127.0.0.1] by omp103.mail.cnb.yahoo.com with NNFMP; 09 Nov 2012 13:55:04 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 948264.10514.bm@omp103.mail.cnb.yahoo.com
Received: (qmail 78778 invoked by uid 60001); 9 Nov 2012 13:55:04 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.cn; s=s1024; t=1352469304; bh=/AtSL6wgkyS5mVhrEX1U8YEz1RJtA+HeXvTheH7oj1Y=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=19oGG0ElThGl5cNPIVh/kXFAWHsZrUfqj59iOTRBHGYe7ol+egcP/nTKisEqd/klQfDxD+p+6RqdgjA2G0frfzLy7NRA0K3tWPiwQ4wYaXdo/fGyYYpVW6mxHHNy4uvN1ETBT697UmFU1wPTn+ZRcIMv81T4EslDyJLFD4LqRag=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ErqiYsTshENS/I64yqR9QPXNplL2DgY1qoEv7l+OmOY0qraB9/vMeGEQAReyWHHy+2i6i/Vu3RfROkmRWMUUtZsAmJsfkcOTt8vZ1qn+ueFBaPsAYdNyXu2M6PNdhwn8o9/cQ2q4pS6d1wMBUbQKznhKwaytYD8tT10ZBNjKCwE=;
X-YMail-OSG: lcyzTr0VM1nYAi4xo6e5lxnx612Nv1aV9diMel0OEtpwHVe UuFhYHi4E
Received: from [81.91.228.125] by web92409.mail.cnh.yahoo.com via HTTP; Fri, 09 Nov 2012 21:55:03 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1352469303.73644.YahooMailClassic@web92409.mail.cnh.yahoo.com>
Date: Fri, 9 Nov 2012 21:55:03 +0800 (CST)
From: Philip John <ikjim840@yahoo.com.cn>
Reply-To: western.union_ben@ws-loei.ac.th
Subject: About your ($900,000.00USD payment !!!
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”385065327-1802772295-1352469303=:73644″
Content-Length: 10405
 
1 Comment

Posted by on 11/19/2012 in Inheritance Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , ,

 
Follow

Get every new post delivered to your Inbox.

Join 50 other followers

%d bloggers like this: