RSS

Tag Archives: Cotonou Benin Republic

“Ali Musa”

FRAUD – INHERITANCE SCAM – NIGERIAN 419 SCAMMER

Dear Friend,

Thanks for your mail, i am Mr Ali Musa from Burkina Faso. I assure you once again that you stand no risk in assisting in this project as we are going to follow all the official and legal procedures to get all approvals in your favor as the beneficiary. I am a professional Accountant and with my position, am the Chief Auditor in this bank, we will surely succeed in this project. I am married with 3 children

2 girls and a boy. I am working with AFRICAN DEVELOPMENT BANK (A.D.B) here in Burkina Faso where this money is. I have been following this file in the bank here and have seen that everything is perfect before contacting you for you assistance in the transfer of the fund.

The money has been in the account without any withdrawals and deposits. This made me to have special interest in the account. I followed up the account file only to discover that it is dormant and in the course of my investigation about the account, i found out that the owner of the account died with his wife and their only daughter in a plane crash.

Following the discovery of this account and the bank’s recommendation that after this fiscal year that the fund will be transferred to the apex bank as unclaimed bill, this warranted my search for an honest person who will apply for the release of the

fund and claim it so that we share it together in the ratio of 60:30, that is, 60% for me and 30% for your assistance while 10% will be used to settled any form expenditure inured in this transaction. I have worked here in the bank for a period of time now without

achieving anything that is why I want to utilize this opportunity.
I know very well that you might be weary of the fact that you are not in any way related to the deceased man but according to the laws of inheritance in Burkina Faso one must not be a relative to
the deceased in order to be able to apply for inheritance, having taken note of this laws I have decided to present you to my bank as a business associate and next of kin to the deceased, of which you know that one’s business associate can come from any part of the world. So it doesn’t matter where you are from, this will certainly rule out all your fears.

However, this transaction will be strictly based on the following terms and conditions as stated below:
(a) My conviction of your transparent honesty and diligence.
(b) That you would treat this transaction with utmost secrecy and confidentiality that it deserves.

(c) That you will not ask for more percentage or try to sit on the funds once it is under your custody, or fix up any form of blackmail to take the money alone.
(d) That upon receipt of the funds you will release the funds as instructed by me after you have removed your share from the total amount before my arrival in your country as it might take me little time to retire and get my travel documents ready before arriving in your country.

This transaction is 100% legal and risk free and we hope to conclude it deal within 7-14 working days if you accord me your unalloyed support and co-operation. I give you my word that you are completely safe in doing business with me.

Note, i will send the text of application form that you will complete and forward to the bank as soon as i receive your response of full cooperation with me in this transaction. Please respond and

assure me of your credibility and capability of handling this project with me. Call me upon the receipt of this mail for confirmation. Call me +226 78 33 47 68.
Regards,
Mr Ali Musa

HEADER:

Return-Path: <ali.musa54@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts) IE1yIEFsaSBNdXNhIGZyb20gQnVya2luYSBGYXNvLiBJIGFzc3VyZSB5b3Ug b25jZSBhZ2FpbiB0aGF0IHlvdSBzdGFuZCBubyByaXNrIGluIGFzc2lzdGlu ZyBpbiB0aGlzIHByb2plY3QgYXMgd2UgYXJlIGdvaW5nIHRvIGZvbGxvdyBh bGwgdGhlIG9mZmljaWFsIGFuZCBsZWdhbCBwcm9jZWR1cmVzIHRvIGdldCBh bGwgYXBwcm92YWxzIGluIHlvdXIgZmF2b3IgYXMgdGhlIGJlbgEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: RvAW0Z0WLDsI_APwhjzB7d1z1SWpv1xLl7K09Ih5k34IRwa9 qYNlCBe3bhRIU7II1uXFUXHaJme8oMdqqlX1PZDOEAWqApc0HLVgncW6bjw5 bZDkWqbMPRC0MkVaO7QN3bzDbZnxZ.ww_ZK4Cw0y307rjMLAtgEFZ260ED.b 9q6qyTGg2KPZG_VA4e2PP4KgcvWmhmIsjUPTUQTbrY0pwJnriBUc77rC8oYl ISr1IrqM1bqnh92hgGZuyOefWKxUAWxJEKY8q9J7k4bIu5lqAiUjS1f9BcM8 XwhSucRLHvYv98IsXyx44Aynt1MNiKfvt5xvjxXoUwW28yoW_rKs7E7B9Kg7 SKgUdVl766mVkvgT.mUnwqddtO_X8NkeIsNihGKY8g5R2IyQ7FExCraZQZ5X woaPdxLH0JDN5yWkDhNVZMq3zwueEAK28zwwSoK6bL4kvKpmuEp0502rFqUR dwdt1HUek2_F_Wr9B0nGZtVaG7Hju3M1iMT5YMvBC0bCVybhtklS8iHgfF4F DUhXib3bl0ly.ICJkBPqcXwoEM6_wk18iSaV2mzeFg6gk7WBIrhzlnBTuQCz g6CNN1uzti0uridxWJOLwDDi.2VtRz_yglYOD1oePYQUaYroUbfSsTNKxR6Y tKiv_z1Uu_PgxOI7rhhZNIIuajteBbdYMmsKWDLhlqVSuzBNpA68.NfK6j.2 kP5pAKC7eOqhMcsOmumZax8rOVSqUGAUjqzGUfAZs55E30swDvKTvd8GNHZc nUlZ_UrVcvCyZa08wGwseJIxrxumbJKB07ekmJs0a4fIBxTY.B4FSGrS2Tw9 ateRQ3qATFr.Gz6LcI2tm5mit.M5thcKko9G5LeNb6xEjuzIqxq7YQA1KBJI jNg.S1VIj2kycUqfPObLOQyPdif83y1FPp2_OcZtqeIVlrvmf543Kt.7jR9n .qsuvwXgVE6kJ645VeeAZKHMh_xUURW3GvFiISb7tfv6cqnyBRjwjtETmt2A e1kUYm6pmoTEuNUCy3bLLrnPNJx8ChGpAHhDQWIyGdF3g92gKCxgfvKBQIlC GFGksbObE7cLSMHXo8aF9LmjLp70VZXbapvv8xTQYCBqGb.PRQ4Ekn..UEk3 UYXmRIhROM__tEY2LWfk1P7Cc7LSaUNXjaJRkTheyuIoB9c4m2ecvs13q3w6 HjxcaYKDHCvQChbJvuS2t0lsg1HwWgu1btSWieHg66IrjSSBPFL5aeho9qc6 9eca9j6dutx0cKFfte04..iZgWlGARrAEYsoN0suwJWq_lXJBqbu3i48tBLt IKz7_zyEImnWh1tdxV_xRu3RMB1_U8r1oMgB.9RcAFE-
X-Originating-IP: [98.139.212.182]
Authentication-Results: mta1464.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm23.bullet.mail.bf1.yahoo.com) (98.139.212.182) by mta1464.mail.mud.yahoo.com with SMTP; Mon, 07 Jan 2013 01:10:17 -0800
Received: from [98.139.212.145] by nm23.bullet.mail.bf1.yahoo.com with NNFMP; 07 Jan 2013 09:10:12 -0000
Received: from [98.139.212.245] by tm2.bullet.mail.bf1.yahoo.com with NNFMP; 07 Jan 2013 09:10:12 -0000
Received: from [127.0.0.1] by omp1054.mail.bf1.yahoo.com with NNFMP; 07 Jan 2013 09:10:12 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 807051.83119.bm@omp1054.mail.bf1.yahoo.com
Received: (qmail 32975 invoked by uid 60001); 7 Jan 2013 09:10:12 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357549812; bh=4yj2PwldENRKiW2TchR5BbJ0SMYMQH4LfvNRGk2aM+Y=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=lK50aCWWOwjISNoxyM99JOL6Jz2mizEGDBpnLSBbGmTW8fbulPLrCayVV5nH1TYizUXXJ5ytD+3T+FNumLTbxqBDLVlXYEwbLnKTVxaUeV1C4x3G/QRuYE/RJ5tWqJKT9F6iuaovxipZE9IC0r3Bp+tE/a4nnZoshAIgM7upVHI=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=2+4TCljhPd7arMtLnP5rlNG4s2Hv0ph9NG6sYfgA471K9b+wSrvimUSMjnZYHORA1/4Z9zqTF6IVhfg7SahSgYoSyFmFPHPAUPI4RyYiGEK+Mqu0AoC6BeHU6nzhenDnagKKs/MCwzK1XNX7mt9zgVuAwTFNzF9jVRdbpW2smGQ=;
X-YMail-OSG: Vlw4mwkVM1mqoYI_JdQbmVh2H4gGDyWoB_fZCixovxobtI_ M.0iT0Q..Ece_gHM9G1MgeRPOBPYzEbtzzb3zn7Nlr1BbLFt6RzAK0vk4F3I glwBWE9QwLEKsSwxZitH0_8WQGVmM31TN3Y_PGzR0PYUPVQh3eIvvMxWkCZA KGzJySFfpS_wOFpl1bcab0bEyLWKyLFbqH3R8yKtCIsSR6O2PE1ABXewwdrH GSsnVkAtMs1AmB1kK2wrGm6r4J5CZRQEtul2DS4CFa3MiFmySs4q.mWVJRXP QbfTq8m1XIlcAOf_9Jexs2pzxsyHZuFoMvxV5qUaQ7HSmC.SCBdyFcFjP66n PPD7mHX_UkU_qsQnA8y4Fq4bD25BWUYTr23itS.m3PuO32J_0C6KKXzqlo14 3p0BM_ZuonQf9yAVE6fJ_9JauVbaPp0nkRSJOnhKfE4OS7mht3yAzXrkVolG xZWlzU0Z2Ey1Ez9kUg0RKK_KE37rmtAo9hfTlhqDw
Received: from [41.203.224.83] by web164902.mail.bf1.yahoo.com via HTTP; Mon, 07 Jan 2013 01:10:12 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357549812.31914.YahooMailClassic@web164902.mail.bf1.yahoo.com>
Date: Mon, 7 Jan 2013 01:10:12 -0800 (PST)
From: Ali Musa <ali.musa54@yahoo.com>
Subject: Dear More details about the transaction // Reply urgently

FROM: Ali Musa ali.musa54@yahoo.com RETURN-ADDRESS: ali.musa54@yahoo.com

RECEIVED-IP: 41.203.224.83 ORIGINATING/FILTER-BULK: 98.139.212.182

 
Leave a comment

Posted by on 01/08/2013 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , ,

“DHL COSTUMER CARE”

WARNING – NIGERIAN 419 SCAM – ONLINE FRAUD

THIS SCAMMER IS AT IT AGAIN!! UNDER YET ANOTHER NAME AND USERNAME.. OVER THE PAST COUPLE MONTHS, I HAVE POSTED OVER A DOZEN EMAILS ON SCAMMER419 SENT BY THIS NIGERIAN SCAMMER — EACH EMAIL I RECEIVED HAD A DIFFERENT IP ADDRESS AND EMAIL-ADDRESS.   

SPOOFED LINKS WERE ALSO ATTACHED TO THIS EMAIL, PRETENDING TO BE ‘WESTERN UNION CUSTOMER CARE’ — THE ACTUAL URL OF THE LINKS WERE GOOGLE.BJ/IMGRES/YADIG.COM/UPLOADS/BIZLOGO/DHL_EXPRESS_ALGARHOUD-ETCETCETC

EMAIL: DEAR CUSTOMER,

THIS EMAIL IS COMING TO YOU AS A REMINDER CONCERNING YOUR PENDING, PACKAGE THAT HAS BEEN WITH US FOR A LONG TIME. AS YOU ALREADY KNOW THAT THIS PACKAGE IS CONTAINING AN ATM CARD IN THE AMOUNT OF $1.5 MILLION USD.

THIS EMAIL IS TO LET YOU KNOW THAT OUR DELIVERY TEAM HAS FINALLY CARRIED OUT DELIVERY OF YOUR PACKAGE. THE PACKAGE LEFT COTONU BENIN ON WEDNESDAY, NOVEMBER 21, 2012 AND SINCE THEN ATM CARD HAS BEEN IN CINCINNATI HUB, OH – USA , UNITED STATES AWAITING CUSTOM CLEARANCE.

TO TRACK YOUR PACKAGE, GO TO HTTP://WWW.DHL.COM AND INSERT THE TRACKING NUMBER BELOW TO VIEW DELIVERY STATUS.

HTTP://WWW.DHL.COM
TRACKING NUMBER: 1736996225

ON THE TRACKING PAGE YOU WILL SEE THAT THIS PACKAGE IS GOING TO A WRONG ADDRESS. THIS IS BECAUSE YOU HAVE REFUSED TO GIVE US YOUR COOPERATION. YOU ARE HEREBY ADVISED TO PROVIDE US WITH THE BELOW DETAILS SO WE CAN IMMEDIATELY HAVE IT SEND OUT TO OUR DELIVERYMEN IN CINCINNATI HUB, OH – USA .

YOU’RE NAME (IN FULL):
YOU’RE DELIVERY ADDRESS:
YOUR DIRECT TELEPHONE NUMBER:

PLEASE NOTE THAT YOU ARE REQUIRED TO PROVIDE A REDIRECTION FEE OF $65 WHEN REPLYING THIS EMAIL WITH THE MTCN NUMBER WHICH YOU ARE TO MAKE AVAILABLE TO THIS OFFICE VIA WESTERN UNION MONEY TRANSFER OR MONEY GRAM IN THE NAME OF OUR RECEIVING ACCOUNTING OFFICER STATED BELOW.

RECEIVERS NAME: MR. Mike Osita
COUNTRY: BENIN REPUBLIC
CITY: COTONOU
AMOUNT: $65 .00
TEXT QUESTION: URGENT
TEXT ANSWER: TODAY
MTCN…….
SENDER’S NAME…….

UPON RECEIVING YOUR CORRECT DETAILS AND THE PAYMENT MTCN FROM YOU, WE WILL IMMEDIATELY NOTIFY THE AIRPORT AUTHORITIES IN USA AND THE PACKAGE WILL BE REDIRECTED TO YOUR CORRECT ADDRESS IMMEDIATELY. EMAIL ME ONLY ON THIS EMAIL ADDRESS: (dhl2@superposta.com) THIS IS IMPORTANT AND AS SUCH YOUR IMMEDIATE RESPONSE WILL DO YOU GOOD.

MANAGEMENT,
MR. WILLIAMS FORSTER
THE DHL MANAGER BENIN REPUBLIC
ADDRESS: 455 AGBOKOU ANKPA ROAD COTONOU

HEADER:

Return-Path: <webtzzzz.office@att.net>
X-YahooFilteredBulk: 98.136.217.70
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: p8lVcL4WLDvewhzIrylP8xI3a9LPPhDBhDME1lzPGGvQontc ktbWdxpu_gs6JvDnQScDSWwl56kzWHusRAx2Ds_pdgSzG9Qe04L2o21e8_33 wUq2MqkyNEx3NWbeKyr3FpnTLQfAwBWI71cd7utjFjL.A3xFMZ9DtZdd3UEU ekjqbavtNkSGPy17ayqcXYXFzXhtJ6z9igt8f98FmG4Iou1.caQ8bTP64g24 3VffbJI0URmoUkaMy45c_9hdEee.Abk1kXU.QJdCFbmvEuy1JRNl6ZrRPxOA AutA0VeLSsTanI5L4EcjxGG05bvrIUMNLGi.mrjRkZctW1DW7DSkfvbYZqZ6 tG9wvfA2YLxIdIUcpNu2IF_LnReU_5g7ltkMJt43H5.rMm5V5dsb_nL.D_Jq _MRVXp5JNGwNDvxmeSpK9_XTGiq45o5UiRG5dCWpQGCkeTFz5q0sbbPw_mR2 97MAsA0lSc30BuGg_nmZ02Zu.kogPIf9.i26DQ.Q4ghuvRXbQ4sc8TdNTsq6 5FJEydJCkX.3ERwsGZBCHEv94bxh77acpC3.Pb0iCCYgEPcDGzGJHNwFZvA4 caVPp81ffhDY0vIoV03.eQ_rOSwXToPiu_U_IjpLDp2iVn6Nz.bCHHw6zjVz KnzWiD5Bk6oQI3BQZNAR_ZJAAmyWpRMCc.js4hRh8lbFpW.jCESgm6iGyaQD w6BuEQrnBd70DRv2iEnTyTWBKuuUnZIHFoq2JwHGktXkIUFvB3DbgNUIAqnQ gu_oJnjFdEp3F7diZo.5HZgi_UannfhTI1EJLtRWoaPAZxMizPkKl8_5cp_h .YCe.LH1Ygvl3S2FMktaLvvciuhuarxlw_fYfjVX8Ve1LjDzL9WVBf9evyt5 880sRXKXNBUG5PgxcRID6GynXX0mVwdkd09X1ypVCDK28e7pjnzoqwuMHpn. jV3a7Njk9OcYeeHu9GnmTbSIKrhvUV73WYth8geL0xmT45cVlwQl6L4HzLrh kXhpWUuQJXhUO44K9dZIPqg2Ca7RNsqpQV9eVW3L.XxLmj99CvbaAX.oJeub kxkq.VYo33MlLbo1q.JQGFIIGAYfkO7pRfZEFjbIJ4D38NYL55jgyIeRCUDw Cr_zDxDX1LBlGy9cmQHMQWf4Jg9.f_xh95HWujLyQce6hVJ4z8PoY1ChEYRp aKlgoRxtBn7DkH256xF3QI55u1JZfy9Hg.atUmcIsq91wp2ky_pdpD0wtsVQ RAVN2CCt7_CgdV.TG8cbizBTOX.JawUCRcj_nWQeQ5c7KG81hMoQtPydgoYs PLnEOFNgyGQaHeKYmrQUr9b00tdgdGGyBuNfP5r5jFujaTMIl9F8dj6ZCJGi hB_YsBJ0_4dphtAG7w.rvToXz93tmmanQsk9ACdm_N.1OEETOtYUtZKZI1if lMj.aCK8RaPrX3zyBnqxHFBkT4lTZBv3.7tsJcMX0UwjqfmkMEkcnCfqZIWc Fzb6F1kKphS6VCk5D3x.55eRTt_1e5GnkpMWuA–
X-Originating-IP: [98.136.217.70]
Authentication-Results: mta1019.mail.gq1.yahoo.com from=superposta.com; domainkeys=fail (bad syntax); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm22-vm7.bullet.mail.gq1.yahoo.com) (98.136.217.70) by mta1019.mail.gq1.yahoo.com with SMTP; Thu, 03 Jan 2013 02:27:26 -0800
Received: from [98.137.12.63] by nm22.bullet.mail.gq1.yahoo.com with NNFMP; 03 Jan 2013 10:27:26 -0000
Received: from [98.139.44.82] by tm8.bullet.mail.gq1.yahoo.com with NNFMP; 03 Jan 2013 10:27:26 -0000
Received: from [127.0.0.1] by omp1019.access.mail.sp2.yahoo.com with NNFMP; 03 Jan 2013 10:27:26 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 72063.61201.bm@omp1019.access.mail.sp2.yahoo.com
Received: (qmail 22369 invoked by uid 60001); 3 Jan 2013 10:27:25 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1357208845; bh=lmIBzo8pehjJsD539T9RFIDhRXWzlDcc3BSQ0Igdr2w=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=l/M9cJxrlpIXZpNBdM1sj/yVjEflcd/UJzeIGcUPojiLE7DY0UnFDztt1kD0gVw7Q1EhV+xvpnonQnPGIOIR7ix4Of4kBityUsjL65NuLb0bAIK7ARGY9FVuBDui+wJA+PcgpytkrxLXPPlcb/I58hCmlZhvumPUUKYJEPRwprM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=WpuFi53revO4dlTGjmLXeGSXpTg5q7twxkK4tWto5mJzy2lW+XcZLfrd22TMs/evyh/HS0iT9suPjqthzByLcn3eaH/Svo9KOt03y8KibBn9ComYtN54hkjgjClRIPlnB6ujaucXL8O/ilqfRh0w5ZfqM8Hw+S5K8oPLxaDu99U=;
X-YMail-OSG: X94oLdAVM1m3RFepMGMdx7qyT2Jc7tIr3A9LR8KPGHJW1GV phobi8N5t3h84tC6e.f1qyRXMUJtrPu5VPhp7pb7gMMGA21NwAdKb66PmBas 4UCb1R3JFaI48Id46IPLscQH_i_q88UY9_Z7o._SoDBnfMKqBawzo6a6c_IY 3pWsPFCvcjyopXUwjZhQN4DxhWMXVmEHJbKCv5F26akn7VGzfeyx9bgeHVsT w7ooyrJiFWIVcXOWCTI8pk1BVlTP4j.r_WCUsWbIeRWsbt4C95hThw4Ol7S3 JqQVe1iXz8cmWn3ftbA6Z52Xb7UlQI_QGO5dYeU8bFsOT3tfikU2AxI7ex5C Cpy1K4MSV_9Z.rKmBf5wiXdJQWfvs_LWugO54wwph9CFvLuKnniUd5f0..A4 Fr_23dyFIJ6QokMJ8Mve5dM9ovEAG9YY1z9LgXkreXJS88oIAQtE_KkVKVU0 gWFoKAbYkt35HaPUYUmlN4zGwfKweMqQUxEmy4ptw67JlVv67qvnZvUwWsKA RwJfyCwx9h.SVITFhM7DRx.O8zzjMzLixz2DDNKk_8mL_VWx0j3q1TsA7FE2 ytLMjsiuly1.Di2.3YqFGRNAHUwhktYRY3IOyl0eTeGsUEEiD07RW1Kcdcxo 3VFkSCLQ9y7DX84iRiiAhV54qkyiVqg2CfSSe5uoZYmvzzig5Udn_pPo16dX 428XiGVli01fNur44l.DejLkila7cCZhQB150XLi7Vl3SuTgQ5gXR5WG4P9s yJCBRRF7NmxiBzr5uaNr9tadVYQWUdv9QKM6pOZqbY3.SIdMCxcHSzvPbyMN NXvDTQZDY0DcD3wNyVBYPwwsuZMlNs6EPEpPB.GGCPyeESv1PBlNXSRfhY6u kuAaz0FrOt588U_D1DnKbeMKqtST5p6qNbzMxIYEuncmXn10pEXKs2xEWV9x pKo3l71HmCFiNuI3Ld3wnSFPKeu2oBJEEi7vtqGPQWVAUbrWI1vl0V.O6B8N akSZIyzpkQPmibzAAFNXDyn7r1mmOeZHeDRw1Me3ivMm6jlx3T5qZ6E4EIhj y1yPHgLwcgMWExjz3rUAHUXE20NVpipk6mrKdiQnVAbamcYnTwXr30vti372 w_tlPlNlEsEzGhuiSRXHA2de7xApjoyrRouwpkkBGdGxN5jcOh2Bcm1L50Po gTPn6njfBxnHuzLfXxkLChhv4zRej8FyTIxwOTmUmUDQPZMun8Zk4njcVeY7 aPEnUTyk19.Viob5P.M4.wC1JRvqPI9a47Gux6m3Be28C1xTjk0PR9sP5eNX b1jZstUa5LUyKtkRPkOaQ.RMyDYhbZpHye7RnyI65T5UZ9yvh2GGAj6wb02I IeuaekkQcOipGGmykNcXcyC45tRaMp6FHUj6uCcTwMhixIEhC8w9iH1qBM96 GsD5rVlXiLvwI6F8D6durYVBgsh9KuWAGlMhVwED_P8Jet.U9cbWyubFwehp xnyOJE3jp4cztVwV5UWA43qTPTTwQQb5BTXf8Yc3Wk68MG_sYLAvrDrHnYjq c3NV1ESe49OSQrV7goXKLwa.rHHX61y8EaI0gOP9kVrJnkKLfuXa7S5GOA8Y cztYklpTNxq9fZmA0XtMQuzfQGnLKZeCoCJlNjmg4zrV2SBW0d8D14x1LAyT ccfz4E3ew4mPJXPK1IzZRAxwjtvL_.NeTiK2.vgL2oDJgl25.YkqB5cilOLt Oy_qy.6uwFEf00zP4TVLfV9vLSoQSDKNk0VY.zAn29lE6ERR_pPa1uYU64yU eXuqZEwB0.BLV2kAeWWw1FDtacrwAq9x5GoCBHtYaGCd65Q8KxmTVib6BNnt og6uqfVwLY7OIYdSXZ6OtPuCNXtBHLZ2WVK8uGguXuoeBDlnySbiUMey9CBI vZjMvlKF8Z.KLCM.AJQLOljzfUf1xXmjVbbRiA6cUiYS6c37wirwGDy8gM3Q gwdUdOlP0wRwXEKQbePmN9IM7Uqr9ThtUnd7oFWDQs2jkLA_XXco_EdWPUyx x8Nx6QFKBtp_LKzQCxKrT2bgAr4am.c3WrmkhXBNecGDFhuA3npM0P4jAj93 RZ9wM_FKrhb1jZ0g_utpMzjo1wfmvHOuZ4a9Ky9vBw6_gjhptbH5lxXChwj1 9Ik.apCbmh6FheKDuFyxL30K3ocRkfkX7_gTNyY_NhDPa1bEhTLmyZi7OYbl LHLanewYFIU8QnJ0ai8TKLU5SDS66ba0_K8EbfwFnaYPGCzs9hBaVuz7rfz_ ITxJyTORuOmUu_3iMg6rpO8Ld1ljXko7_baLHZYxsm41aISCNe9i5bZMEK9a 1bbnQKptpjurAYbNct4LXnNR.4U8HwI7cmxbKRkyzJObqKHmDEh63c7a28Tj 6rCqpJkf017cEFjeZ9JVerHgfnnaNeDypbqoyrpZXknyMYMfPv6sKdn2dQCT FogwMPiW1HT2lEveJVs0ZRkKsb.KmCGelImLgCnVUmsnvH7E.N_clj.Du2i8 58xoGAlimQLf6XyorSU22o2AzVaO2TyVRrxE5yOGZuZCkTJ8Jp0Znj_eXfrp oVmdqgptN9BZ92.p.6T0Keprim5vvTAuebyqrSHxmTFLVnt72cGaEADfQ1yX eUt89x1QjLONr6VnUEsH_pabnd_Iby2AfY9PKyG7mm4jBOUWkoe0u2KS.6Mc e.g58lXFrRrPH_zaJNMr3BMrEszqPAa9VE1tHGCKqtWkrQvxuqrQOhpECkXH c1.wybhocLijGr9LkOJYbM58_dL_awf.VtORuO5qT_Dvag93V2.ngMf145EN jfRnuTSMLWQ4VbAilC1r5WCxzGlyKM5GnUz8HsEkO6JOSRFNZF1v5dRLDwVv q9hH7QxSGTqNQHG5lNWyEM_.h8t3gWBrJuY6j8BLV038OdDDfUPTSpO.TPRW 95RVlFFHcHrxvIoT6jm7SaQ–
Received: from [173.13.200.181] by web185005.mail.gq1.yahoo.com via HTTP; Thu, 03 Jan 2013 02:27:25 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1357208845.7111.YahooMailClassic@web185005.mail.gq1.yahoo.com>
Date: Thu, 3 Jan 2013 02:27:25 -0800 (PST)
From: DHL COSTUMER CARE <goodwservices@superposta.com>
Reply-To: dhl2@superposta.com
Subject: Your Atm Package Tracking Number Is 1736996225

DHL COSTUMER CARE goodwservices@superposta.com REPLY-ADDRESS: dhl2@superposta.com RETURN-ADDRESS: webtzzzz.office@att.net

ORIGINATING-IP: 98.136.217.70 RECEIVED-IP: 173.13.200.181

 
Leave a comment

Posted by on 01/05/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , ,

“Mrs. Suzan Chapman”

RECOVERY (LOTTERY) SCAM – NIGERIAN 419 SCAMMER

NOTE: I’ve never been scammed by anyone but get alot of ‘recovery’ scam emails and because scammers are very unorganized, it’s possible I slipped on the ”suckers list” lol.. Oh well, the more emails the better because then that means I can post them on here and possibly save a (potential) victim.

Below are two emails sent by the same scammer under a different name, email-address and IP location. ( Suzan Chapman sends out scam mail under Williams Johnson & Ruben Maxwell )

Hello My Dear
I am Mrs. Suzan Chapman; I am a US citizen, 48 years Old. My residential address is as follows P.O. Box 1920 Hazelton Drive Germantown, Tennessee 38138, United States, am thinking of moving since I am now wealthy. I am one of those that took part in the Compensation in Benin Republic many years ago and they refused to pay me, I had paid over $99,000, while in the United State, trying to get my payment all to no avail.

So I decided to travel down to West Africa precisely Benin Republic with all my compensation documents, and I was directed to meet Barr. Ruben Maxwell, who is the member of OUTSTANDING PAYMENT AWARD COMMITTEE and a Human Rights Activist (Lawyer), and I contacted him and he explained everything to me. He said whoever is contacting us through emails are Bogus (Fake).

He took me to the paying bank for the claim of my Compensation payment. Right now I am the happiest woman on earth because I have received my compensation funds amount of $1,5,000,000.00. Moreover, Mr. Williams Johnson, showed me the full information of those that won lottery, and those whose inheritance had not been paid and the list of all outstanding contractor that were owed that are yet to receive their payments and I saw your information’s as one of the scam victims, that is why I decided to email you to stop dealing with those people, they are not with your fund, they are only making money out of you. I will advise you to contact Mr. Ruben Maxwell directly on this information below.

Name: Mr. Ruben Maxwell (Barrister)
Email’s: (ruben.maxwell@ymail.com) (rubenmaxwell@globomail.com)
Phone: +229 94 99 53 77

You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing.
The only money I paid after I met Dr. Thomas Boni Yayi was just $280 for the paper works, take note of that.

Thank You and Be Blessed.
Mrs. Suzan Chapman.
P.O. Box 1920 Hazelton Drive Germantown, Tennessee 38138 USA. Add me on your YM mrssuzanjohnson@kimo.com

HEADER:

Return-Path: <officefilee@yandex.kz>
X-YahooFilteredBulk: 1.235.121.101
Received-SPF: softfail (transitioning domain of yandex.kz does not designate 1.235.121.101 as permitted sender)
X-YMailISG: dDycFlwWLDuyVY7iGmbjhHLp63OyDyVfDBlkWhu.O8tDMNe8 .KZdKCQyBsBR3UVDRBm3mEBWxOY_W.pr1wP_2PpoKNSTQc6JYyYaxT9R.wo. pKhHHHTKbg8VL7n89IabyGdU14jxsyXQm_WCEdkiGXxhoi723kfHIhqGErmu C1wEl_0NFP5G117BvHIT1hjWC8nAUDC.Ss49pIWmuGy5Lt2wyd2VTw_riam6 qx0Cu_Ip.kxhtpTztlr3V6SUoy8pcLnXb1YqadcFCZ4DjoovqQAc2py2yv0C PqmaNnj_it4cm8o6zDrC2oZUHqMRCGH1QzTsS2YpK7g2tIJCJ5XGwZrQPjis 9bndf9IOky9SDCCjEhTeIwFHAhFH9ZZNPbI5q7YRnewPj_wNghTYvrhZK8Rq simwKqvZpy7DG65Zrm_m08LyQHk_eaTEjM_0YbPb5QfHDWWSzJEhTkI1nhuH 8tUDZ4K10zrgl.haug02JN3yQrRN08twJySYdR5b88Uc.MhFPnDiijveZWYO 30C2ldqANVmu.PHHqcF_1nsCQDkEtGm90jeuawzh43jWt_2iqmFZ_eDZeV4O mo0cKxhRB8BZO6d9ehNvkv5zZ35mFDOHNjYPRWWBPjZbTLBuhKYN421F4KJV DKZ2GriawmFqfiBj7v.ao4ZBHiDJNv.9s38pItexc24reUEdozNn3_xz0gmf 0Ks_WhC1qDL4AK4atiNFrbUVzr.FAR0texoUgEl4SxIoPvf7OqciGLhxfpcT ZMHyiD8BE6WD8gRzl9hy1gPGDnBU6V9bzIKmMnU7RZr7o.9pQpzPUKdfhU2S ET2vZYAGHgwh6137UvE.8ZrhFnzxviczTqRxxm7gnGedWa8_d4FtfNwV_B4Q bYmN0yXkeTEVRpTaYccqMWvKTjhYnlDhLaCDGqUIHoEujwkCScLPvVYJ65xs Pfn4NY3lA1sX3ibAkOA6HTJM091ZHWFmrFTjdVT7kOD4rOLM55xWGOkJh2vu NwW3mHj5147dKNNgGGOPCDKsK7udJ6A6fmSdzTTuTvH3eo4HaI30jwzr3SpS pm7380yEfjnaablGbS.6_y9_3pzS0G0gB._FWfCkALDPXyDfOJJJkTTG3sbR 45KKjw6vHRk4sXYWQjrpXwr_Y99c7Sc6x488YUE30psfWBYx4V3ArdJVgwLG bTTZE55Z2vS9g67xRo7AiXCxnjnhyAidwlyrMO5llsg8INgBHAMBzOiCYe26 uUsScAguvqr2epPVCH1dSAuLymdxChsKMqeKo0.n6BxNgzy6WXRlVqWo8z1I GBUsPRJOQEtaBR9LZpfAnAuf_8mH4GDqMySGKRAfltcAd4ZlFxx.hvmrOpUp IlJojtl2UhEm8kbQ_LtbXXOBo1fkuLw-
X-Originating-IP: [1.235.121.101]
Authentication-Results: mta1215.mail.bf1.yahoo.com from=yandex.kz; domainkeys=neutral (no sig); from=yandex.kz; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO localhost.localdomain) (1.235.121.101) by mta1215.mail.bf1.yahoo.com with SMTP; Fri, 12 Oct 2012 22:32:41 -0700
Received: from User (69-2-73-170.static.networktel.net [69.2.73.170]) (authenticated bits=0) by localhost.localdomain (8.13.8/8.13.8) with ESMTP id q9D5Lnlc022212; Sat, 13 Oct 2012 14:21:51 +0900
Message-Id: <201210130521.q9D5Lnlc022212@localhost.localdomain>
Reply-To: <ruben.maxwell@ymail.com>
From: “Mrs. Suzan Chapman”<officefilee@yandex.kz>
Subject: I am Mrs. Suzan Chapman

“Mrs. Suzan Chapman” <officefilee@yandex.kz>  mrssuzanjohnson@kimo.com   ruben.maxwell@ymail.com  rubenmaxwell@globomail.com
Mrs. Suzan Chapman officefilee@yandex.kz +22994995377
+229-94995377 - 1.235.121.101 - 69.2.73.170 -
Ruben Maxwell ruben.maxwell@ymail.com RECEIVED-IP: 41.138.90.38 ORIGINATING-IP: 98.139.212.188

______________________________________

BELOW IS AN UPDATED EMAIL SENT YESTERDAY (CHRISTMAS EVE, 2012) — SUZAN IS NOW PRETENDING TO BE RUBEN MAXWELL – 

SUBJECT: forward us your full information okay

EMAIL: Hello, forward us your full information okay

HEADER:

Return-Path: <ruben.maxwell@ymail.com>
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts) IG9rYXkgSGVsbCBNcnMuIENoYXBtYW4gaXMgdGhpcyBlbWFpbCBhY2NvdW50 IHN0aWxsIGluIG9yZGVyPyBQbGVhc2UgZ2V0IGJhY2sgdG8gbWUuIFRoYW5r IHlvdS4gLS0tIE9uIFNhdCwgMTAvMTMvMTIsIE1ycy4gU3V6YW4gQ2hhcG1h biA8b2ZmaWNlZmlsZWVAeWFuZGV4Lmt6PiB3cm90ZTogRnJvbTogTXJzLiBT dXphbiBDaGFwbWFuIDxvZmZpY2VmaWxlZUB5YW5kZXgua3o.IAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: 22Z_9qwWLDsY6dOxAcdBWiirU.HBD0chVME2CmG76KkKnVmX DTsbTWTWMU.wSMcs02UEJ26Ng27cLJWJFdyEH7WFV6ST0ZZc6uPXnnre2Jq_ Z45CVIHIEp1a5sUP92F7GeCVqnJFJpFg2tu3se4EY61shx2dl4I0LI8s_W97 CvPMsbClpd3SqC2NJXabPjCerJN5lIbbSsbZVmNl3cOR8ginxqb18O8M8Nny aqWmiO1hHohFC9TqQAR0LE_s0TvDyLSQFK9S09T7l._iKRPJNsMFGdFFr_cG f0y4wIZoiGLXFCsd3_uFqHnTJ.xcVrC5KHqJmTZz2maAzWv3E26eM97eVJhD 3ZKU5sB2iPzv989D5rBw0JQMZicbAXsr6WZH_HsyN8N_GB6D92iajLh7YsIz p_uQBuZHmtCV7M4zoUWJg.bUdz_c5Cvps_Qfz_tTgfxdonCltVPa_aYCI6po 4U71OPJT45TI_mYmdvJ55EmVYMZAtEzEAOW3AUo4MhSQKrrppoUN4PPx7v45 A_SW_V7edo4ktDgKZ.LQpRsrtYlp2GJGMaeLtSLJnh8KeZNfoZd5YQRNItz. wFm_E3hdjJyPAPD29zwNbyM7txX_gkncMbcPe4x2MYRYJ5V.4dB_dh8z_9kT m0tV.ROg.v0LR8tMPDreBuJs0SrVfHyGWcap7bccqH.BMvAC4iu5QkIwoEVs V42zjW7rZdqwnV8TZB2wjkP4grYULIjys1Pn8SFWCXnds1fwbbOxIHDxNuCA lEqL0d4aWu2maqCE5.yAoiuyz5l7McmLVmHnYyRavDp9XXmWKefzRdlKyzzg CNvkchxgwmdRXkQUFYeuV4yJsmTUUG6j_iOuZx.Wiy2eh0N9.Xo9ACXiAa4P FibrDI6GfuDiH1nyUMSk3px3sdr0GWZEhm_qqq..c1jOEYGeTMQ71URwh0i1 FgZB6HLhJM5bBWRNHcFiZ.wpvnQukj1nYtdxhgLPeDLLBZ9WcnVzz44HQ5rs Byq43NR9_j.m19pa5eiTVvULqiHqXszT4H1Vp7vOG2pt9V.u7YkI1xhcY8YM 0BOLmQapn0GHg8DrvzkCIQ9VBpKtwu4GvklsoElZqcu.PeAJxGObA5HeZwul z89GNE.CuxN1Y1Gg5J_yQ4X1InWqvMZcfv5YTg0c2Qi4E40Fkwm6pbuffqps Pru89Q_j6rIi9ePVlNJmSFdUqHdAI71RuAjC.hcBryDfYyN60DISieJFtcdx o7MDfQuzM338IXGUYzq5Gp5jaZaNQouOuAkqKhOOGVz4u0lhbwhFIKUatRsn 7g_UAvrzOsnTW7xNuGSb0ihq5N_Q4OOZPhyePRhwZthrg7qGxMISOLHnKd63 LEtLmyU1o_Qe3EqrAqYyRK2toRTT_w2N.MPzeZUK4JAqVrKhGlGPPwqmJsSe wuHl5HIkDe7wYsh4OZo9xHAasS.3_fipRr2n_1eX
X-Originating-IP: [98.139.212.188]
Authentication-Results: mta1020.mail.ne1.yahoo.com from=ymail.com; domainkeys=pass (ok); from=ymail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm29.bullet.mail.bf1.yahoo.com) (98.139.212.188) by mta1020.mail.ne1.yahoo.com with SMTP; Mon, 24 Dec 2012 09:40:59 +0000
Received: from [98.139.215.141] by nm29.bullet.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
Received: from [98.139.212.237] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
Received: from [127.0.0.1] by omp1046.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 216004.90175.bm@omp1046.mail.bf1.yahoo.com
Received: (qmail 46683 invoked by uid 60001); 24 Dec 2012 09:40:59 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ymail.com; s=s1024; t=1356342059; bh=lUv5r9kJp9yZzRpM4GROp5bn+gKsvtE9FduO0AEBgyk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=m3GdCZCLmhxjaA6YFaKQJU4PQoEGQ6FC+JnukCXQqvx4eBOMHfwgLrA7BvAkHqu2oBrbvTUcsFMrOmxTxEMed3VBSdtnlTSoqyLmgBztakNEH6kLqsWfASfCCGB7JQ3z5n3vrUr0SvqnSa5qUL2vRYraGWQa0WuLa0k2Z/7tG04=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=ymail.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=IntzzZSK+/bm4sc+SMkbYGpAutn2Gk82SPjwF3pNjFpdzjvvyIWLiro73WdvajESwH8vZdtjIrW6iJbGuN8RLbi/GyArM9lQnGMVS4pcCpO8pRx7YLqWWEHdm18Aq0On6ojBqb4t2L83VjtV2UscTa3iWBExbfdtCf+z7kiTd/4=;
X-YMail-OSG: lNvx.3AVM1n2Fq76qv_FwECW8MNzlRB_LiglR.6ta9dnFty Z0zJ_K2SxMrm9vGID55ARBd4aNIEwFDXueDVWjESCOG_g3f6YVTtpyL0n5CN WU2W6dZppKirH4yJyOYPnAk5cHwkuGdzGpy_FYExHQh1nGyikbUWvFribOxm 6ls7wGoYb.1JEPohoQ_Slmz9drjFCVciWuq25x_oWa843XANsNGyF6tCAGed h7QgYlgOi7DV35BKoGP5DnrL1UhL6w3AJS7ZqG2NuXoH2flTKH8uCgi3gYET PZzp_cXB7nSH3vGoQxHhscj9jWfvZM8Ca8AGpa9PmKmtcJ3GV.l3EELLvlIO kDuUqZn2XcWpkImKqFSk_em00J5oounzJR9Mm1feeZx0SK9HGJYy1G16MKvN wHo5Umb9.xLy1Z9y3twv1RQwdDj_ha.vPND0DatGu_o4HN9ABudbpWWQGPc5 L_Wz2HOU5YrD8e1zVWZZep7GbOBB5oFIuxQ7I0um0tOvwhvs6vBr50XI-
Received: from [41.138.90.38] by web161203.mail.bf1.yahoo.com via HTTP; Mon, 24 Dec 2012 01:40:58 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356342058.37287.YahooMailClassic@web161203.mail.bf1.yahoo.com>
Date: Mon, 24 Dec 2012 01:40:58 -0800 (PST)
From: Ruben Maxwell <ruben.maxwell@ymail.com>
Subject: forward us your full information okay
Content-Type: multipart/alternative; boundary=”-852950040-498957605-1356342058=:37287″

 
Leave a comment

Posted by on 12/21/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“Geraldine Mead”

EMPLOYMENT SCAM – MYSTERY SHOPPER – SECRET SHOPPER – FRAUD

EMAIL: Hello, There is a part time secret Shopping job available for you with a $200 salary Per Assignment pay if interested contact email:mrsneedham@live.com

HEADER:

Return-Path: <gmead@chipublib.org>
X-YahooFilteredBulk: 64.107.3.197
Received-SPF: pass (domain of chipublib.org designates 64.107.3.197 as permitted sender)
X-YMailISG: CpHLBTAWLDtoOrioXVpIJdZ7_UPTN5gg.zIryc6IPeIMVwy5 7.7iWvsHSbZnz35A4YfQXivayLPXn58O5eRc7Rz0gwIBorMUSbTKEneTqcmQ 66WF.gXOqlhN.g.QXkwo8_9rooXUJs08ZWwEEKryEd43d2lUOr7LfCR_SiEt .CAqpNhjUuHwjp.cD.TYb4xldFWnl_FsYyX7ae7b.lDYsCNfqv.XVQJkmWVi goUAG0V4J2ijRULQ_vF43Q6BU.RC_Dtt_yE8.WLN92txaKDDRkQp7uZFr7Ih X8QVOgWtUvPC1XGcvFcV5ZwnHgrb2F14LS6xtVCsMxmS4r89BWdRp2VA3toa f0xcuYk.j7zkuwRmVjktCCI.osqDCzmnafiunuywWkHYXGft9LZwRi1mNmpn L_CfxBsjW6hzpIpxp_G.5uTJrEtC.Eo.lHRb0q_6njfS0owtpz1PXAUQOslv s6nLAqs9mdamEEtEH1X8hAN4QcMWZHgCVXoKZRWkjYCnaR0SfB9NlFyEmo66 R1IKrme4beUhDCgTY8EPbxFGkhxgQul3PVhHyfb6fSGLBjxaPGQkaAW1bhtG OeNM1YbgT9OLDC1L7l94g7bf8CZu4w8_9SWEs7BadOuv0kZvGwYjaIVk1l8t GK8uNOzEPiEnorvUzn795KbSrcvfemWCcW0L4XnpfEGc7O8EDT5CG_Tggb2D J9K_9PG_thK.c4bOYgYasbM16r6XqT_k_I7htvBXGufLLYYktSJmpCrha5qY S_0ajgtvp.JIpyES70sxCwbGCGIU0BD5LDFuAmS659Vs21QuYu2E0ZF1gnzs WXRx5jtQByD_Nz6xr8DIWRcCF321e5n73R_kuXcev3xHn6lP7Ut09eNM54Db 4H2ElgE_0EtzWovfl83eU4BjTu4SU6PLsZjLi_hgTrVV2IIgp3Gqc17G1Ua. j7UeISWiY6tZpmDwIzkQClo7JDYMmxI35c4R8wlNoxJr6KGzCMDSE7vE2GC3 OTZCOwaV29hkYQAWys1V8jkxoGkZ5ZWEgDDJmFl295te3xUYs3K4uQma5ROE bFprfUxaBBRERqcSgbrvAHoKtgE5GnrkW8TD_.Bhnxd3UkM7ZuaTZ3JITqcM MsFY4cDSkaU49tMRsRv9SfhWFoK7tz7ozvVCDOYPgHV6Es78fVzhdmRd3EQQ rwSRpdqv.TjeLYq1A0l_TF0CXRRNVOeslm0A05qL7W0Db.uWfYIAqIBo57IP c7IO7xPLn.Vx_BP.pVQLX3ysQ4crsPb6H1takaFslL7EO6kscylvlkksX4.y lx2zWQ–
X-Originating-IP: [64.107.3.197]
Authentication-Results: mta1049.mail.gq1.yahoo.com from=chipublib.org; domainkeys=neutral (no sig); from=chipublib.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO Lorica5.chipublib.org) (64.107.3.197) by mta1049.mail.gq1.yahoo.com with SMTP; Thu, 18 Oct 2012 05:27:48 -0700
Received: from LEGATUS5.chipublib.org ([fe80::fc3e:bbbd:f296:732e]) by Gerulus.chipublib.org ([fe80::c93b:83ab:2900:a856%11]) with mapi id 14.02.0318.004; Wed, 17 Oct 2012 14:50:39 -0500
From: Geraldine Mead <gmead@chipublib.org>
REPLY-TO: “info@notice.com” <info@notice.com>
Thread-Index: Ac2soK5auidISj8cQgqi+vjL9J/VBA==
Date: Wed, 17 Oct 2012 19:50:38 +0000
Message-ID: <D70D3E6F95B6504C995A8296FD6C94520553054A@Legatus5.chipublib.org>
x-originating-ip: [172.19.3.235]

Geraldine Mead gmead@chipublib.org - info@notice.com - mrsneedham@live.com - gmead@chipublib.org 172.19.3.235 - 64.107.3.197 - 64.107.3.197

Below information provided by Zee, an online-user who received emails by the same scammer as above.

Email #1 offering £3.8 million

our mail is well received coupled with your contact details on where your consignment box will be delivered,Instruction has been placed to deliver your consignment box worth of £3.8 million once you comply with our instruction by choosing one of the delivery option below, Be inform that once the delivery charges is being received from you our International diplomat will proceed to your destination address to hand over your consignment box to you.

Email #3

FedEx Courier service office, Cotonou, Republicdu Benin
Contact CourierFEDEX INTERNATIONAL SARLLOT 20/22 HOSPITAL ROUTE COTONOU BENINREPUBLIQUE
TELL: +229 6644 7691
Email: fedex_d@y7mail.com
Motto: Honest & safty.

Your consignment box is now ready to be delivered to you and all you have to do now is to wait for the arrival of the diplomatic Agent and once he gets to your home address then he will help you to contact the money exchangers as to convert the money to dollars.

The delay we have here now is the delivery fee and once you remit it I promise not to fail you in this delivery. All you need to do is just send the fee so that the Agent wills takeoff to complete the delivery. Fail not to choose one option from those options given

Listen once he comes to you, take him to the bank you operate with so that he will present all the documents that proves the legality of the money to the bank for them to convert it and put the money in your account without any question.

Thanks

Mr. Maxwell Shargan

 
2 Comments

Posted by on 12/15/2012 in Employment (Job) Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , ,

Dr Paul Owen

NIGERIAN 419 SCAMMER – BENEFICIARY – INVESTMENT SCAM – FRAUD

EMAIL: From Dr Paul Owen

African Development Bank Republic Du Benin
Cotonou Benin Republic.
Email pauolowem@e-mail.ua

Dear Good Friend,

How are you doing? hope fine.

I have interest of investing in your country as well as seek your services
in a private and confidential matter. I am Auditor General in African
Development Bank Republic Du Benin On my routine inspection I discovered a
dormant domiciliary account with the deposit of ($9.6Million USD) by late
Mr Khalead without any heir. I write to seek your indulgence and
assistance in moving this funds to your country through legal means.

NOTE: My plan is to invest my own share of the money in your country.

1. What other lucrative investments would you suggest as I intend to
invest on REAL ESTATE AND HOTELS if they are good business venture in your
Country?

2. Can you be able to make residential documents and purchase a house for
me and my family to relocate and settle in your country after my
retirement in 3months time.

Let me know if you can handle it so that we can discuss your own %.please
provide your Phone No. I wait for your urgent response.

Regards,

Dr Paul Owen.
Auditor General

HEADER:

Return-Path: <10@my.dxdelivery.com>
X-YahooFilteredBulk: 208.67.16.254
Received-SPF: pass (domain of my.dxdelivery.com designates 208.67.16.254 as permitted sender)
X-YMailISG: ofps_6cWLDtJDF9azSUKKmCZvl1SE.MyUmiAMv_InQQUHwwc oXqEhf4HrpKk9HMBTAy7ysWExs1Dfimgdi399c8yY6f_FJRUlyeHHPR0Wl4q zaRJVeRVwneSbI8F3uVv7u7Nr6TuyLCdc_vtfBIAS2Jw2UcTY0uSdklgq1D8 73ZUKgwrlDirs7gAs44naR3efjg7GJCKjyMFEVRdBmrGOKj3NPHCJLi.MW8x 2X7jInWnVx9G5NSsPlHX5AoqNcT7etkvV05oGjS8KhSwtIgx.6BQTnbMYYuN yD1YwilOE7zkpJiHJ4gjoQmGjN77olxjq5ccrUNQkHMNbwY1sVlPLgV6Vec2 6IdvOhUY817LYdJe3j4ct_vpMXYYwr7gKftftyw00orHH5MCLmVfK5ammofj zGS4OCrR3HHV1IWvCxiEYhd9xnFyyVGYL05bxZmINLNtbZULXlkPInUtc99Z RcM4UH8rKiKr.XLZCZFAvyUArQc.NAR4Apljsr0E4vrr0Tc3CkgaHUyD42mf 3h5cDsOQ_wPQKGEs84PCSwtp5fkLMmvsp6et3jYjY7NV5B204XnN1l1U8DfM 1kmyUqeW0tIu2zVtzQ0rpbi_zyuLB30JmXKK.YA.pdt76XlsHjMgI.a22DVT .68eAVzicc7htVqzvNAjuRH8.o.0TkgNnJ0feGs5CC1JINDWfLWzRf.NFObu 9_HMtwqBt_aLBg.h15e8xbWTVquLydexnE_qpr6.dy6SWmXuYz9zG7iyT68S XwLMte7TM1fnPpG_HblTCRCM9haxJFB253vMnrZjHra7.Ih6dOtDfx59hyrH ZWpgvD5h6iiGIMxs7POEibdsvfR3zjc7u7PGsQJyQDVyGK35hrb_bbRDsZ0o hymwJfuzLYL5LE4eIl6Wju6wR7nhxGINQhwmkYwqlDO3l3kHHCYir3499VbJ XzNF7uOU1dBz2kYguGvTZyqWTLEI7Hljr8ehe0QF226CoavI_KwoWfGZb1yB 2F_sWs1xbHcDS770dxLPxqnhngHHGXF9upYzjsFZkztbgk9EacZ1r9Jcc4Gr 63EpdYj3EZQCLH48CczxIuVkTZzDwVABdrnMX1K_h_B72voTpZG2pcgnEBnI 6QNkU2Y.ThdBXIMfv.4sojsZyEd86NKz69btB69RcZQpcQ.Ad_Cq8bOG2VVm 9Het_NpZ7s14piXT2p7nWo5l6zCaI_P95cDENN9dWilTg86r4dmo.YB8IgpQ mefFr3..NfX8w7V5QAJvItvSUmE1ehie4_bIIN_UJEsmbt6Uxr8GfwadMN28 Bf1DHHLrKRpuE00ZKFojKCtOC48iNywogRtSUWAhZXc3uDKt8j4tyiMBpod2 WdRA0e7B88Wuv5qLU_tEFAVa6Kxgm0O6SOfXJxfaLT7JsVeHmnJXf1E4._fe 2zjoX.N_bO3k5gy4dQ01pInxBR3J48C9Cn0GJ7YlrBnU_sxw5R9KGZPklx_d .NqQXEhMT8j3yKyjYyvIlb7YweIGcWBR
X-Originating-IP: [208.67.16.254]
Authentication-Results: mta1054.mail.ac4.yahoo.com from=my.dxdelivery.com; domainkeys=neutral (no sig); from=my.dxdelivery.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO my.dxdelivery.com) (208.67.16.254) by mta1054.mail.ac4.yahoo.com with SMTP; Thu, 06 Dec 2012 01:50:09 -0800
X-No-Relay: not in my network
Received: from User (unknown [41.85.165.245]) by my.dxdelivery.com (Postfix) with ESMTPA id F2CB31C47121; Thu, 6 Dec 2012 00:56:08 -0800 (PST)
Reply-To: <pauolowem@e-mail.ua>
From: “Dr Paul Owen”<10@my.dxdelivery.com>
Subject: Dear Good Friend,
Date: Thu, 6 Dec 2012 09:56:24 +0100

 

“Dr Paul Owen” <10@my.dxdelivery.com> <pauolowem@e-mail.ua> pauolowem@e-mail.ua

RECEIVED IP: 41.85.165.245 – Benin / Nigeria

YAHOO-FILTERBULK: 208.67.16.254

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

“Office Customerscare”

ADVANCE FEE FRAUD – LOTTERY SCAM

This post shows 4 different emails from the same scammer. I’ve been scam-baiting this one but stopped over a month ago and I still receive emails daily so it’s hard to keep up. This particular scammer(s) always emails under different IP’s and email-addresses so I have posted each header in order as well.

1st EMAIL –

WESTERN UNION MONEY
HELLO MY DEAR
THIS IS SEVERAL TIMES WE WESTERN UNION BENIN REPUBLIC ARE SENDING YOU THIS THE SAME EMAIL TO START PICKING UP YOUR PAYMENT AS WE TOLD YOU BEFORE THIS INFORMATION REACH US SINCE LAST THREE WEEK AGO FROM OUR CORPORATE HEADQUARTERS ECO BANK WESTERN UNION,
STATES THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST $5,000:00 FROM YOUR TOTAL (FUND) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND PAY WHATEVER YOU HAVE FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM $250, TIME IS OF THE ESSENCE HERE,
SINCE YOU DON’T HAVE THE REQUIRE SUM OF$250, SO GO AND SEND ANY AMOUNT OF MONEY THAT YOU HAVE AT HAND STARTED FROM $40 TO UP $250, WE WILL ACTIVATE YOUR MTCN AND SEND TO YOU TODAY, UPON RECEIPT OF THIS PAYMENT,
BELOW IS THE MTCN OF YOUR FIRST PAYMENT, SO YOU ARE TO TIPE WWWW.WESTERNUNION.COM AND PUT THE SENDER FIRST NAME AND SENDER LAST NAME BEFORE THE MONEY TRANSFER CONTROL NUMBER (MTCN): THEN CLICK THE STATUS THEN YOU WILL SEE THE AVAILABILITY OF THE FUND ONLINE BUT IT CAN NOT BE PICKED UP DUE TO THE TRANSFER NEED TO BE ACTIVATED OKAY

1.WWW.WESTERNUNION.COM
2.MTCN 0560139994
3.SENDER EMMANUEL OKOYE
4.AMOUNT $5,000
BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST 5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP THE BALANCE SUM. SO I WANT YOU TO SEND THE AMOUNT YOU HAVE AT HAND. WITH THIS INFORMATION BELLOW. AND UPDATE US AMOUNT THAT YOU SEND AND THE MTCN.SEND THE PAYMENT DETAIL TO THIS EMAIL,(officecustomerscare@yahoo.com)
1. RECEIVER NAME… Ikwunne O Anthony
2. COUNTRY… BENIN REPUBLIC.
3. CITY… COTONOU.
4. TEST QUESTION…HONEST
5. ANSWER…TRUST.

THIS LAST NOTICE TO YOU IF YOU FAIL TO SEND THE MONEY TODAY YOUR PAYMENT FILE WILL BE CANCEL FINAL SO RUSH TO WESTERN UNION OR MONEY GRAM NOW AND SEND ANY MONEY THAT YOU HAVE AT HAND NOW START FROM $40 TO UP $250,
CALL ME ON THIS LINE AS SOON AS YOU SEND THE MONEY  +229 68377742
DR.CHINEYE NWACHUKWU
OPRATION MANAGER.
WESTERN UNION DEPARTMENT
PHONE NO.. +229 98677751

2nd EMAIL (RESPONSE) – Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

3rd EMAIL (RESPONSE) – Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

(The 3rd email is the same as the second but was sent on a seperate day with seperate header information)

4TH EMAIL – ATTENTION BENEFICIARY; THIS IS TO INFORM YOU THAT WE HAVE CONCLUDED TO EFFECT YOUR PAYMENT VIA WESTERN UNION BY $5000USD DAILY UNTIL THE TOTAL PAYMENT OF$1,500,000,00USD IS COMPLETELY SEND TO YOU.THE DIRECTOR ADMINISTRATOR OF FUND RELEASE HAS ALREADY SIGNED YOUR PAYMENT.NOW CONTACT WESTERN UNION PAYMENT OFFICER WITH YOUR FULL INFORMATION TO START RECEIVING YOUR MONEY AND ALSO FOLLOW THEIR INSTRUCTION.

YOUR FULL NAME :::::::
YOUR PHONE NUMBER:::::
YOUR COUNTRY:::::::::::
YOUR ADDRESS:::::::::::

CONTACT PERSON MR TERRY SAMSON
E MAIL ADDRESS (western_union09@wss-id.org)
PHONE NUMBER +229 98841150

Regard
Mark James.
WESTERN UNION PAYMENT
SECRETARY HEADQUARTER

1ST EMAIL HEADER:

Return-Path: <office_dooog@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.73
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: YTQQLVYWLDtr8GvJiSxswwRjP7wnkQFwbp2etVmaNl0FiaXv WEWUyzcgnOMV_Qxqdh9W6bDVUk0oJ2n4H_.OqH3FVMd.Y5SeQLY8WPB3FzvF PDksuUJsc8jsOTNRuyWFfYR3l5wAZDJgIWuiiGdSmgdTu68C3rqyg3O3KdWs h.EODC.8..TyOEAnTAvAstMaGS8Ncy0SIJObOaOjtoBxXs6HTVJjL2nLqQq. V8jcqhibon.BQ9tsji3ubP5LyOllUnFxk7kElsMu7n0vVWWSlivsKIy_S5n1 TnjjQsj6Z6unrH0LPjxjeSxKbAjjeU63LUw4W.D9he2EEs26JXAWNlSyN_RA mHtPVevectbOeAKgC.m._frVA4tVlBJnUDlnVGkTYGWpICSFxTT9LPW_EEeJ l2XotLG4IwrFUfDfi_oT5YhbAo7jPwjxliFYxO_jm1h_wnaqEAIoQUqbckjp VIOOy.9bM6cUUjn4sXuLElKl.HyFw3R3uBNExQYnmx4RLVovyUrURD0ciS64 y4A8HjS0d8vV45llBD7G.G.oahtQT4gZsScBryrPWxrTQ3pLGp8tSk2zK.n2 eeTHvEQSRnZIbN0eOuFt75vrczEzEp24_Wxy.kkTt24Ghr67RLbx14T8AWJX oN_fjH0I4fLe4bZg9kWJjC5AIUtbrQ2yjsGa8Rqmniy4tDcDdplQBJNCIttH Y6iPtc8dzN6XRG89qgna5ydQU4LybEz.EW03VSf5bIAK7G7wCnLMhQCLLxgk ly1aVYK.aBw2ZGGdBfsnGxEQGmjWgPW9Y8yaS38MKaKk5BlVKjdKTv4Du9tr 7v1Q0Ahg1rbEQYh8bXhTn4R03SCnAeBhjAproiLkSzIk_nlJpbqzYS_tDYFN eublP_kgPayXAilWx.ksYpuHs_SFNkLaI2tWIn4oFvj8Hul6cqhvS1pJwTK2 8xjAkTjf5BRCJ73jx3wjykpTf9CXKVLe4qVn43MdJwIGfeb9p6tuMcY5ae7w c0GAOM3ZK4N_pO93ZKX2sJA.aGW8uNMDRTGyX1W7L7EKmy.ZYJQMjrOnd1Pp 8VcXJpyj7WUoKAXFir41peZR3kuJAGhW1GbparzRRCsM53A5wxeRRRvbeQlP o9SRMR9hJ7G68eklKQlZiNlLHYAN75iIROMHam0GQkoQl658wOksxxV0w1yE mwld8PgOs6.ieT5hfoq6JOm_CZnFaWvDCuNdzu7iw15xSb996aG1QW0ovKDm ivdO.r3OOe2nezrbgWHscU8DcPD0SD__8p7aOAMpHGW.0iovFBMBhXwhAkfD _c5Tjzjt4SpvsBLMK1O5olWM9ZTOgPGebcxgdbmbvX9l8w–
X-Originating-IP: [203.188.201.73]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm9-vm7.bullet.mail.tp2.yahoo.com) (203.188.201.73) by mta1299.mail.sk1.yahoo.com with SMTP; Thu, 15 Nov 2012 00:06:47 -0800
Received: from [203.188.200.142] by nm9.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
X-Yahoo-Newman-Id: 597653.91745.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 1033 invoked by uid 60001); 15 Nov 2012 08:06:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1352966804; bh=sqgSO8xP/LR+hXQMdA2e6Ah1eNeIaTHiSoq/jXQJhqw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Yws8UW5RVEL2oPJjowNq8quCXz9OzL0CxZrfGMUtTLq9P49zyzmh4cHIIaccgUS6cadGW2uanBjRYI1LgN7qnDfXWjIk1fJUorh8XSrtSnhaoUyUmvLuinqV/FZQLQV6ArVs06/OCE6rJG6RrChDzUt4hI5ALQRFiJ3ZkZnKHy8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Lytcrsw3vUiLafw/lAGi2G0Q0Tb6yrnlT4ruv+ReTjQFhJriBDR+YxFNsAJmBt2mYpnus+zpYYvm4eYTFIsF0fqvBhc21W3x1a+iiSAPgC+CPtqGdn9cWtDgfR5n6UI9cuY9jwzCd+BU5PzXNKOXbca69Rp1IZVW4Uh5V+L0jKc=;
X-YMail-OSG: O7Gnv7UVM1lkD_jTVvQ9yvdVYlFxea2vZYOteXXHXMW9Qko jdT9UCaq6
Received: from [41.216.44.199] by web92416.mail.cnh.yahoo.com via HTTP; Thu, 15 Nov 2012 16:06:43 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1352966803.94317.YahooMailClassic@web92416.mail.cnh.yahoo.com>
Date: Thu, 15 Nov 2012 16:06:43 +0800 (CST)
From: “DR.CHINEYE NWACHUKWU” <office_dooog@yahoo.cn>
Reply-To: officecustomerscare@yahoo.com
Subject: WESTERN UNION MONEY

2ND EMAIL HEADER:

Return-Path: <officecustomerscare@yahoo.com>
X-YahooFilteredBulk: 98.139.212.254
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: VLLNlMkWLDtUbQTbov0porruXohSlGjiyaNfjajWB0Cduvem OEGnfKhhlF4xKrU2tbM7tHSjRtnksOtCmBni7.2lTKxqM.zJc0kyzLSmp0nG i_CbXXHC8eh56HcFkIULD.BdzbjU3UfTNf7R.IJyVWYbK4FdG2DbERiFQ4AL 2W3kyMd2NrGNWVi84alfEJaPHmLcuiCe1dLIUuBMMg3BNKZYFjFuj1Cbr1QS fmYvDQcEL9QkVQFRA1r4HQalx1x.gCGsnuJ2c9o5WMKTqxEw1lfIpbsWdvZb 0oKivkDXKT0HKUzKdomv4xD1rCw13jYJ0yXJK0BLZfjeePYsPyENUOsfKq9Y Nsoj1dG59zkCJKyLFnd4kgct.GcOBFGPoqpevxYvub8VNcT0gOhnFqLdU38G 72Wja4aTwyX2PGzlzRnU6lmTFEBVcSg3lAYandBAzew3G7Yidyq9q1dnArb3 aue0WfEzyULn8QnrFCgUnH0L2oQF5ev9nBRp.V7MwiTHNOL02o3SMhpcTzSL 52bdZyM3GnxXlVmICHIGyw3cjZkp4_5N.3WtCcf84ScjcaJVKOWt4ReEQVXz 1BtjyULP_fiWN1GESbbrTsmE5WwCpijqJaFqFw45b6wli268.1f0LfkNr.4z YlGykrhi5NCIpY_7esUOObjfjns3nvhb2j5mCdx7_hWj9lolzI2w0DcE3rdp sgN2GDBvVZ680RMztbImaCT.cTURBiiCwvdgTcUy0Mu0E.lTCpJPstDT6ZlW Di1Hoob5dN4ln1HGBipY7Z5mrwTFmtlfI1gjFum_SEDYSmuHGh7eTWZ.BoSU ..k.g0Z8apbapJclKdfT1VK5b1PTmnhtp0OwH3TkTAIf_pAo19ji1fUKzKDZ EMdkEFWD_lfFSXaZjN5LQxHHk0l0N6rCojsf0_lY0srKWve2SaahYAwGBjAV tPNotMOJ51vzMiyw9Zlgyn_jFQ6KxZb5_8Jf8wqtd85wZFjSV6QXpmyxDCKT BahVlS5eGljKzuKTRb0dPV1.M9TxnEImZOHOKCzELtPfnvAeYRoQI25sr133 QlJUxK4HOn1WdLoMNCYBk5J9fmNaV4mS4MQtnFmyIz6wEMbpqkh5CYIrF_8a 5wUl2MuedcVKiMKjzJ2tIETeEsnKcOIDytHmAkQDqTOW2ji6B9lvQQmqB4Ad A9EnFyF4tcz6dmhzNuJh.b_dhtlKSZ.m4PC6WeOEvnrqaf5k3Sy5nN11UGqE 6ok1.QuDzlLWvjzFTfU4a4QZxV5a7pd64zvhBsFGvxUQSVvpBL.8YqBW77Wu hit9.w–
X-Originating-IP: [98.139.212.254]
Authentication-Results: mta1227.mail.sk1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15-vm0.bullet.mail.bf1.yahoo.com) (98.139.212.254) by mta1227.mail.sk1.yahoo.com with SMTP; Sun, 02 Dec 2012 22:55:27 -0800
Received: from [98.139.215.141] by nm15.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:55:26 -0000
Received: from [98.139.212.223] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:55:23 -0000
Received: from [127.0.0.1] by omp1032.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:55:23 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 790906.43532.bm@omp1032.mail.bf1.yahoo.com
Received: (qmail 63457 invoked by uid 60001); 3 Dec 2012 06:55:23 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354517723; bh=D22VWzs/hPiPuo7CTSZY9WVrAb3WF520cs1fAxQD+yQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=M+WHRGyJ+Obkc6ezHvdZOt7XhENLPL3udu25sOZBN2bEv8bvyklwtQ6DLpmKzRRpBXOT706jn4vx+mPHl7Ss1QRzP9+0Wo6Ei7G3drwBg4JNSK0krATXorvXYUy6GzTqTOR3umwdQ0HSFEkjOZOm/e7lrZzQypAAF2HsfzCs/yE=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-
Received: from [41.216.44.199] by web161601.mail.bf1.yahoo.com via HTTP; Sun, 02 Dec 2012 22:55:23 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354517723.57854.YahooMailClassic@web161601.mail.bf1.yahoo.com>
Date: Sun, 2 Dec 2012 22:55:23 -0800 (PST)
From: Office Customerscare <officecustomerscare@yahoo.com>
Subject: Re: WESTERN UNION MONEY
In-Reply-To: <1354346435.35920.YahooMailClassic@web161004.mail.bf1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”-83809723-1967636313-1354517723=:57854″

3RD EMAIL HEADER:

Return-Path: <officecustomerscare@yahoo.com>
X-YahooFilteredBulk: 72.30.239.148
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: 19QBmTwWLDt95EV2ebP6OidYWqd1j1U2Pdisxv.rlfwDDGY5 69ILUE_kjRPOWAe40.wXl4PoTGUhChdXTKcgusQIibh0IPY_D0Ei53Wrj3P2 DDAmqC8G56tWm3H_2xzLI52rgBO8bDRU9eSbv2pm3Azd_QOUM2JKPXkfNgvF tl4uGNQOLg59unuxlWy7GcvTf7k_qoqXCzJmrjoh8hal1wltXqDrPCdnPvy. gFAaiJyTkAU00qxgTiQBoHammaTYZ4ZKrv1Bj7dJ1Ay0unZZGeZ_8m2Gszaf Hwkx24CP1NPhsf3bn1yuJzkA3iUs9lmwihY8jKVEyWkaKzas.DMkI_qi4SpH ZcprZOz7Wo6Ip0Xe7ngKq.DJvGhyKa6y3Mo9rBfkwPSE1QwldTeMrv.HiKNc J7.fdByCHPm9iuieID3uhsZuZxJJIk_dE_HSPw5N3kU3zc7fJYmx.cnjr3Wf 2ypCCkWSg4Xl.J_9t27tMPFXSJSoGwnm1vLC91UKaZD.u1dtZUXXxB5tay_6 GXotgxrPGmqkwvJ1U.b3XhbbjAW7JSmUeiIRB4cduWQUVHj_rnXP_czMPQVD 4N5bIlcCPjZh3eSRW3gf3AEFVFfPfJx8dm3puMNiCNIHEOWM.KXpLJkyXgwj CXCCZTVhjugOJr6sn4MUCKseOTSyKsr9xa8mUcQ7Ob3w7yUH9YsolFteJokZ 791VNvwM.fuDRTa4C7_GNiOQkrjQtbT08_fPhS4e5p8AUbAPtXoVVhGyrysS WNwPxxltk8XRhk_dX67wDsZjyOfXPmDB3HLalZHqy18lbOcSTBFWISoihgww mPfGu3xD9UWTgN63IDe.rcwpwuXNg9AUAD4WI2TC1TkLuaiTIMBHc1hUskD6 YD46YkgYu9COqzPN4SopL_xQJrvUF.PV5BY4NQB5A_ZB2qJd1gRrxiH7F2oM WMR0CXNOYrY9TXM7XVLamxfO0CSlGMEfV72DaaT_VdZEOlfYoPd4lJDJmB_N sx2jYYAEsdbk4xs6H_9732N8KEwn6jyiAlysubWeSNzm_bnMmkZWyun_skUk lz4XKNVqrbYacm35w2StbbyHFWA8Oo1zW2qh9zv_DmYJfZdb6uGfCzwiuoY3 n24tw2e56bUSpjpwHGWyNJG5h17GA.7b0IXQjO.t5i4rXNFLy4dlPo8Ql.KL 7o3hOnvqv8SS3l.1ctFHuH50C0Qb8SFAoSBMFFfAJNxfMjdPOZxRzdCI54Rr wbWeyGdrtM3CPB2GdyVVli6zsFLRpSNohN6nXHYzK_sThaAO.uWlopq9Mi7R 7gMJVHuSRow-
X-Originating-IP: [72.30.239.148]
Authentication-Results: mta1368.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm39-vm4.bullet.mail.bf1.yahoo.com) (72.30.239.148) by mta1368.mail.mud.yahoo.com with SMTP; Mon, 03 Dec 2012 06:21:13 -0800
Received: from [98.139.215.140] by nm39.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 14:21:11 -0000
Received: from [98.139.212.194] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 14:21:11 -0000
Received: from [127.0.0.1] by omp1003.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 14:21:11 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 750916.31792.bm@omp1003.mail.bf1.yahoo.com
Received: (qmail 15592 invoked by uid 60001); 3 Dec 2012 14:21:11 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354544471; bh=+YYliwmsShAvNwhPLyzJNYE1MPX34bjAR9RvOUaGZQw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=T9KwqKkebNxfAW3bEGZimvC7gz9wDwXYuJCHcFJKyIMKz+2fgGWIXJY7hbmEDeCEDL5nkFpao0O8/BJLEktQpgL/Oc8jlwc4lhbKFPAsVSV5XtdqnIgfQv+QUZOwGSNXAEzCLteM/75epq2GVgFNFQgSBnbamPziTry6CjeHtGA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=o9sVFcOkfqm1EvfSTDuAbchXwIrh1CcZ/q9lVAsMZNG9iKgZzGUjcyCwN6W2BlBR/8N1BCU063PBnoZz65AMfqMww9vx0tKyy44myRUE6CCrpuSb6Q4IvBJvmXmIBv8uMwFHW7T9qQ9GntFtNWZAEBsJEOoiU1w2LqVEwcJ/LaA=;
X-YMail-OSG: 01EGTb8VM1m0Oj0eiFuBd82hpLH5OcmVrv4NLOE.DGTQuBD xtJPpsSc0mVlekI3jqbZq
Received: from [41.216.50.26] by web161604.mail.bf1.yahoo.com via HTTP; Mon, 03 Dec 2012 06:21:11 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354544471.96769.YahooMailClassic@web161604.mail.bf1.yahoo.com>
Date: Mon, 3 Dec 2012 06:21:11 -0800 (PST)
From: Office Customerscare <officecustomerscare@yahoo.com>
Subject: Re: WESTERN UNION MONEY
In-Reply-To: <1354346435.35920.YahooMailClassic@web161004.mail.bf1.yahoo.com>

4TH HEADER:

Return-Path: <yajie3128198@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.9
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: emIYTZsWLDsWBcwgel.WAdTfmAz7lIDU50.tyqE5VPt1VGpv VeukhIjY1Cn.KU8zhzCD_Pw_36n4JbpBBnAvEduvgl5qSCqKBsweGyX_h2Ds wNqtHkWk84quxCURRbnzMjvGUohntskqKJ9WLPygNjL0APgEgATzpDrLvj8k VuA9FW29oKwfhjurxzDZCcZH2Oo2zAfZnsdooccof.1DHRU8.6up3Noi8BNz 8uT6vrZfuFUPZ8DeDut0XwFw6QVwjr1qEX04NI..JcSraqBEfIQfTaoAwHus vr6Lj_dvPNX5tWGkfcNnjurajknIRROwwtXaASLQ7Cx8Uh3N5NoiCPSRcyUG yKVTej8g1qqyPvMgRR.Xg5HP87.bsB_o_vmswcSNF8KDt9Xkig3exi2o.Llu bLaJLyQxnGQMqS2eBdVt7G9icsk0YsTnLfPjvmsUkuS7kjMMvIL8AvgT8Wld 0y2mIrI71WQLbuCmqFVBhujChu2eWJ200uDJKrDtjv9_yZnFECzHIn02pCyw CDCDxpVA63zdAbSelgfxij7sHg1_jZCnlbyUm2cEPdLk15uFHsM.7nvxrgUY 5LsHbzlOaBg0rJ9x6AjwIurAG9AqXXMS28ewOfH2p.VXst11fH7r9U5jjOcl nrsDfP6NHDykG0m5xL.B6nKv_VGrJFtJ2d7bJ49SJD3fHvm08HTy3IukXkbR _af4nG35A546UhnaBoCPZY2XgqgjyqfjS7wIp_.Xpne8dHrzvdiv2fGZoxNs cdmCT929aSNoBVS7qmf.Vqh4Ba0Cq0iGPC69oPzjoseElXh_w.rLeV3Vhtmh v4w396qlHszg2qTh1ti6kqxrlGBJ5Es5_rFAUpfV_Iyc523_g9gcXSF639qk 5L5ibU_TC20R6g7C8emmS0Xz4A881Mgir2IBDvlQCykLm36iOT7Jt3KtGd0Q 8zo2IoPSQNQeUnRVvOOs_1u4tawNtF3beclZPl1jNKjb13l6FkwaL.Pl0fMr 0zPIZaLlHadKxr2LSmAlVNFkwxzVF.ejbaqH1T4Bf.HF1_4vrPHyGwypU4oT _Rd9trwPjtmiazFmvyW4zVt6P3uo6oNViHQvSKESLhBEb0dp1mJ24JmpYudY 9FOXDLAfJNTHD0OBlfo4j0ZN5tFbVqku8MM2wJkkVdHXcav.NP88edHCmGkG 3hnvwRmaS.xRh57w.78MDdmqgr8JsPvQbi7hbuZbxtyPysPjavf.Mn1dKiU8 MDzL6_L.ARVxcwWXZuD__sEtleqB
X-Originating-IP: [203.188.201.9]
Authentication-Results: mta1048.mail.ac4.yahoo.com from=rediffmail.com; domainkeys=fail (bad syntax); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm8-vm7.bullet.mail.tp2.yahoo.com) (203.188.201.9) by mta1048.mail.ac4.yahoo.com with SMTP; Fri, 30 Nov 2012 06:06:08 -0800
Received: from [203.188.200.80] by nm8.bullet.mail.tp2.yahoo.com with NNFMP; 30 Nov 2012 14:06:04 -0000
Received: from [203.209.230.76] by tm1.bullet.mail.tp2.yahoo.com with NNFMP; 30 Nov 2012 14:06:03 -0000
Received: from [127.0.0.1] by omp105.mail.cnb.yahoo.com with NNFMP; 30 Nov 2012 14:06:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 676497.39980.bm@omp105.mail.cnb.yahoo.com
Received: (qmail 62200 invoked by uid 60001); 30 Nov 2012 14:06:03 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1354284362; bh=y53EsIyh7n71+dZ/04bpw8ev0uIRHfZGOGFr7f2xT6g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=2YdCEBsGYX6t8lq6v3RHWBeQNjh949+Bf0uHOzdQF4HHzc99e4R1GTkk82F+ACxM92FYk6ciYRMBFJjgw2vTXqxajDQF2mGe9gcYWTzOWlcMZcKOpAlTdfZ0a/Q5L57cgywjlceOUq8CTwQTYdP7c8C7RolTF4JhNYOVKXiweg8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=GvTvbvzMaFegUf3UU+0sN9uBuXGXz9nGn8DJZsM7LuwwyYt/3ZLa/bfYTxLdIOMSKzvNeyVM1QZb+7O0P99zR4/vnljfB45mZ1c63OSyAeHSYzBLiIpy7fSSyVzqdmyGQmITI9SAFiL0VKPGWWc8GDdA8JtUfxELE16aQoEAntI=;
X-YMail-OSG: uMubNSsVM1lY53F0TXaMY83uS7TEq6JQlDsaehAolKSsGNi urJ9D0OkSh22JWyfGoQTj
Received: from [41.216.63.171] by web92205.mail.cnh.yahoo.com via HTTP; Fri, 30 Nov 2012 22:06:01 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.127.475
Message-ID: <1354284361.58719.YahooMailClassic@web92205.mail.cnh.yahoo.com>
Date: Fri, 30 Nov 2012 22:06:01 +0800 (CST)
From: OFFICE <offficialofficee@rediffmail.com>
Reply-To: western_union09@wss-id.org
Subject: REPY TO WESTERN UNION PAYMENT OFFICER

“Office Customerscare” <officecustomerscare@yahoo.com> <> DR.CHINEYE NWACHUKWU <> westernunion09@wss-id.org <> offficialofficee@rediffmail.com <> +22998841150 -  +22998677751 – +22968377742<office_dooog@yahoo.cn>

_______________________________________________

Associated Email: western2union1money0transfer@live.com
Associated User Account: Mr.Barry Grant
IP: 41.216.63.171

Associated Email: johneric777777@yahoo.com.ph; western_union2011@superposta.com
Associated User Account: Mr. JOHN ERIC.

The ip address 41.216.63.171 has been recorded as a spammers ip. If you have had a member sign up with this address you may want to consider contacting them, and possibly banning them from your site.

Other scammer IP’s in this range:

41.216.50.26
41.216.44.198
41.216.44.37
41.216.50.204
41.216.50.32
41.216.192.148
41.216.133.26
41.216.50.182
41.216.63.171
41.216.44.196
41.216.50.181
41.216.63.171
41.216.50.33
41.216.50.33

________________________________________________

Associated Email: kennethkuye58@yahoo.com.ph; emscompany78@yahoo.com.au
Associated User Account: Kenneth Kuye
IP: 41.216.44.199
The ip address 41.216.44.199 has been recorded as a spammers ip. If you have had a member sign up with this address you may want to consider contacting them, and possibly banning them from your site.

_______________________________________________

Associated Email: office.filemail21@yahoo.com.ph; western_union3852253@yahoo.com.au
Associated User Account: Mr Kenneth Kuye
IP: 41.216.50.26
The ip address 41.216.50.26 has been recorded as a spammers ip. If you have had a member sign up with this address you may want to consider contacting them, and possibly banning them from your site.

_______________________________________________

The additional IP’s have been blacklisted on atleast one anti-spam (scam) website and reported by other internet users.

Spammers Sent From 72.30.239.207
From: Standard Credit International Finance <thomasdavid
Subject: none/blank
From: Nadia kallon mbembe <nadimbem@rambler.ru>
Subject: Hello dear
From: Ibrahim Sanogo <ibrahimsanogo@voila.fr>
Subject: GREAT CONFIDENTIAL BUSINESS
From: “DR. B.S RUMA”<bsruma1@hotmail.com>
Subject: Call for assistance Tel: +44 (702) 401 6959
From: 郑���阳
Subject: 艳君
From: “ypyqv” <zabelvineewm@yahoo.com>
Subject: 何丽壤何丽壤
From: 唐湘祁
Subject: 楊家團
From: “Mrs. Sharon Crawford”<info203932@skymail.mn>
Subject: COMPENSATION ALERT, OPEN ATTACHMENT TO READ ALERT
From: YAHOO MICROSF 2012 <claimagent45@gmail.com>
Subject: Co
From: EURO LOTTERY PROMOTION AWARD <drmartins123@gmail.c
Subject: YOU HAVE WON
From: MATHEW SILVER <mathewsilver1290@gmail.com>
Subject: DETAILS OF THE MONEY IS ATTACHED
From: “AGENT JAMES BURTON”< kjhguigu@hotmail.com>
Subject: FROM FEDERAL BUREAU OF INVESTIGATION {FBI}SOLID PR
From: UNTED NATION PAYOUT <anthonymark.clyd@gmail.com>
Subject: (FIND ATTACHED) TO CONFIRM YOUR PAYMENT INSTRUCTIO
From: dso <obregonhjmou@yahoo.cn>
Subject: 请查收!
From: “Mr.Law Kanu” <lawkanuu@gmail.com>
Subject: AT LAST YOUR PART PAYMENT HAS BEEN APPROVED
From: “MR. SUNNY LUCAS” <sunluccas111222@rediffmail.com>
Subject: SOUTH AFRICAN NETWORK FOR WOMEN
From: “CARD OFFICE”<drgoodluck001@aol.com>
Subject: payment of US$2.182.Million Dollars only via ATM C
From: “Mr.Ibrahim”<lamored.ibrahim8442@live.com>
Subject: VIEW THE ATTACH OF YOUR COMPENSATION FUND
From: “MS GRACE SMALLWOOD”<mr.johnwalker444@hotmail.com>
Subject: HIS IS TO NOTIFY YOU THAT YOUR FUNDS ARE CURRENTLY

From: COMMITTEE ON FOREIGN PAYMENT <web.np@att.net>
Subject: ATTENTION
From: john graig <web66778822@att.net>
Subject: GOOD DAY
From: Nadia kallon mbembe <nadimbem@rambler.ru>
Subject: hello dear
From: “Mr.Steve Gulliver” <stevegulliver001@gmail.com>
Subject: INVESTMENT PROPOSAL
From: “Mr. Donald Wilson”<michealscolls25@att.net>
Subject: Confidential Account information
From: UNITED NATIONS ORGANIZATION <unitednations22010@gm
Subject: PAYMENT ORDER VIA ATM CARD
From: pavel_stuleanic_12@yahoo.com
Subject: Curs Italiana – Invata italiana fara profesor
From: Zana Clement <zanaclement2011@yahoo.com>
Subject: From Miss Zana Clement
From: e_x_t_r_a2000@yahoo.com
Subject: Economizor de energie electrica!
From: emo_love191@yahoo.com
Subject: Economizorul care reduce factura la curent cu cel
From: “United Nations�”<publication@un.org>
Subject: Attn: BENEFICIARY, Notification of Your Unclaimed
From: Oferta zilei <alexandra1975stefan@yahoo.com>
Subject: Tigaia magica Dry Cooker
From: Google Corporation <claims.sector@webname.com>
Subject: Google’s 14th Happy Anniversary
From: POWER-BALL ONLINE PROMOTION <info.pball.promotion1
Subject: CONGRATULATIONS. (VIEW THE ATTACHMENT FILE FOR MOR
From: MICROSOFT AWARD <awardm2012@gmail.com>
Subject: Good News And Congratulations You Are Lucky Winner
From: CANADA UK LOTTERY PROMOTION
Subject: Congratulation,[Kindly Open The Attach File
From: Musa Ahmed <musaahmed20222@gmail.com>
Subject: CAN WE WORK TOGETHER WITH TRUST?
From: William Nii Offori <douglaakana12@gmail.com>
Subject: Dear friend kindly view the attached file and get
From: “tristardamith@yahoo.com” <tristardamith@yahoo.com
Subject: GUESS WHO HAS A CRUSH ON YOU!
From: HEINEKEN PREMIUM PROJECT 2012
Subject: HEINEKEN PREMIUM PROJECT 2012
From: Felix Hachel <felll_hachel@hotmail.com>
Subject: Your transfer is ready
From: “#10090246 _____Get-a,holiday-bonus!_____Last<Hour
Subject: Last Hours to Save! 40% Off! Order #10090246Exp|re
From: MRS GRACE MANDA <gracemanda147@gmail.com>
Subject: I NEED YOUR ASSISTANCE ON THIS TRANSITION

Other Spammers IPs in this Range

41.216.50.33
41.216.133.26
41.216.50.204
41.216.50.182
41.216.44.198
41.216.50.33
41.216.50.26
41.216.50.79
41.216.50.33
41.216.160.135
41.216.44.37
41.216.50.26
41.216.38.164
41.216.40.128

 
Leave a comment

Posted by on 12/05/2012 in Lottery Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“HOUSE OF LORD’S ORGANIZATION UK LONDON”

INHERITANCE / LOTTERY SCAM – COUNTERFEIT CHECK

ATTENTION: This scammer had previously sent me a similar email on November 13, 2012 under the same email-address of info@lordsdept.org but the reply-address was managementfile1@gmail.com IP 41.216.50.32 (location: Nigeria) and 213.154.64.102 – For more information click: HOUSE OF LORD’S ORGANIZATION UK LONDON 11/13/12

EMAIL: ATTN PLEASE
The HOUSE OF LORD’S ORGANIZATION UK LONDON Have just concluded the meeting
with the board of Trustees of United Nations Organization and
Representative of all the financial institutions, The meeting that has
been for the past eight months on financial matters, It has been agreed to
release all long terms debt, These are the classes we are looking into:
those whom has been one way or the other denied their Inheritance or
Contract payment/award payment due to corrupt official services,

After our mutual investigation in the recent schedule for payment of
outstanding debts incurred since 1999 to 2012 according to your file
record where we got your email address; your payment is categorized under
section {B}: Contract type: Lottery/inheritance/ unpaid contract funds/
Undelivered Lottery fund, Attn: Beneficiary, We have decided to bring to
your attention, that you were listed as one of the beneficiary, The
executive council Have decided to pay as many they have their file record
on their desk on a direct wired transfer, The total sum of $5.5usd has
been approved under your file according to elect,

Contact the processing/paying manager for your direct payment of US$5.5M
(five Million Five Hundred Thousand United States Dollars), you are
directed to contact the International Remittance Department of Benin
Republic who is In-charge of the payment
via E-mail:
E-mail: olusegunoniwon@ymail.com
E-mail: consultationdept@yahoo.com
Phone: +229 674 067 42.
CONTACT PERSON: MRS. ANDRIANA U. OLUSEG
INTERNATIONAL FUND REMITTING DIRECTOR.
HOUSE OF LORDS BENIN REPUBLIC.
Also provide the following detail to her for immediate release of your fund,
Also it is very necessary and important that you send us an e-mail
containing your vital information?? As requested below so that you will be
given an immediate response and directives on what to do next:

Full Names:
Address:
City:
Zip/Postal Code:
State:
Country:
Present Occupation:
Company Owner:
Company Name:
Gender:
Age:
Reachable Tel#/Mob:…………..*No Voice Mail Service*
Fax:

THIS REQUIREMENT MUST BE PROVIDED TO HER COMPLETELY,
As soon as the International Remittance Department in your file location
receives your information, your US$5.5M will be Transfer to your nominated
Bank account. this payment terms is to keep a clean slate of all debts
owned by the government and company to individuals either by contract or
award fund, we hereby plead for any inconvenient that you might have
received by any of this corrupt officials, The United Nations Organization
will not be interested in your story of not receiving your payment if you
fail to abide to this Instruction.
Yours Faithful,
Mr. Anderson Paul
Public Relation Officer
Strand Bridge House 138-142 Strand,
City of London,
E-mail: com.unit@net.hr
Hot line +44 020 8759 9090
OUR REF: H/L/UNN/APXB/TF/08
IMMEDIATE PAYMENT
#:WB/PC/FMF/MIN/UN/APXB/08.
HOUSE OF LORDS LIAISON HEADQUARTERS UK LONDON OFFICE.

SORRY IF YOU RECEIVED THIS MESSAGE IN JUNK BOX IS DUE TO OUR SLOW NETWORK

HEADER:

Return-Path: <info@lordsdept.org>
X-YahooFilteredBulk: 213.154.64.102
Received-SPF: none (domain of lordsdept.org does not designate permitted sender hosts)
X-YMailISG: n17TtrcWLDsdDEuSkY_HSkT51L21bPdZBMwxi6AQhYevQE6n 5AHJGUMCXxFcQWA_8b.NyHFBqZMcO.UjZ8FCertxLymBdRPX5yB160N2TGnm qwaPHWExX39Nk3fcXAu.PafkPhJjSLuBXZu9PORr5C.y390tBzQRaxX_Ajeo 7Hur_RtoMBNsEKEcS1NY_jJ7MVItgwhEdNv6BMjqx_b1MlG92f5bS_CtuAVd .oh_JKiqCucKnJdR_vA8__9UE.1fwuLwZ2jBdATHKGRXWA9jdgOwV3Ib69fT EOd7eaFTWdb_5Z16_.TYe.j7ArE3IJKpEKIk4E3slNCtWmGIRFmTka.H7YVU kHIFWlOe90o2tvuCYr8RvUv71WE0TgPgVl6Khq6RD5q1jIaXuAGNiZL303nP R7TIfXxur5a8ZC_2oHyszcv9WRLQjWFSCzGvGQYUJrk_g_Fa1qrpUjRjeM2i l0G7FO2XeR9HCwaTT2znjIqPkdy2KwzEIIjCz.N4kogQKc2kG9n6xWFpcpLo 74MXi2XlqMqfjw4Cj80wiP3jwE0ktGXxBGMSU_2n3YAQ21o2uVONL1mXGIl5 4bMmhVshiHKswZJfj1BN.SBP2D3c53qVkVjkIDCET06u1nIveivDP4Y_oe4g Gp0bTWt5y_R1RqFMmD.AIwh_MS5N2hQgXY2q7xk1_gsgMw2uKxCqk5wcw1df NMnauhxNQjJs0_tgmkT.nJ.KTOhA_qgdK986CusmuMctpQOH_ihBK.jvNTSK btYCtI0byx3BytVo7snXt8QYK6E5Jx9k3ZzauOFpR59.AeWK_EuKrJxb5kp_ 3EZ1tBGHB.ss6mypa8vfMvhb8TINeip6CZPnWI2wlXwUR.ZEKIJrohmFVHFm KFYVmymAMCOdWOLWh2A.dyJSUrjLje2_aZ.DSuRVGpoAtJLHe0QsBF20RzyD 7dC25DeBhkcO8UHLsvng7wFO2coQ2XMhsp.ayEqCe4X2lpjsh2lah9Xo7V7L pPiABw_yasLUGHztyfOUYJ9OSusCqxN.k2MPixuf1vKCB7pq65Iyc4p2uGVC K6bnKMICrei.rxdj1vvTYbKEmvHVsmn.tfhS5B0nTlah3FmibbEpZKHX7Upe wqrzGbwYMdD9LSIDpmkIqF3bRJMX91BdA08UsLs4_E931bhwDffu1ERuYjIw WyEwbhIfjONgETEO8gEzvb42sZbk90Wsxo5b2y1F4ypAzD7R2VyYuQIFQHpb _kcoyrCgQZolEt10hXFRxy0X5MWOAFCOxnDTvDjoJuR2m5Q4DJk8Ic5xuXp8 QCyFyE5lHJPSNnKZ9A15ErmDah0X_ZcVtz5Ri2C_TQNylkHidCSUd8sG0SJb Mg567n3VzIfX6JYHtqlSY9NbCE.G8GC_kNiS.WMe0oeKI7OGev6vbuV8Hzjf yRICVnPIJjSU56vQ91Rk6elLYGnonbkMLw–
X-Originating-IP: [213.154.64.102]
Authentication-Results: mta1349.mail.mud.yahoo.com from=lordsdept.org; domainkeys=neutral (no sig); from=lordsdept.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtpgp.orange.sn) (213.154.64.102) by mta1349.mail.mud.yahoo.com with SMTP; Sat, 01 Dec 2012 01:51:12 -0800
Received: from sunumail.sn (HELO srv1-smtfree-msg.orange.sn) ([213.154.64.61]) by smtpgp.orange.sn with ESMTP; 01 Dec 2012 09:17:34 +0000
Received: from [213.154.64.43] (helo=www.sunumail.sn) by srv-smtfree.orange.sn with smtp (Exim 4.43) id 1Tejj5-000827-EM; Sat, 01 Dec 2012 09:51:11 +0000
Received: from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)
Message-ID: <55073.41.203.79.249.1354355471.sunumail@www.sunumail.sn>
Date: Sat, 1 Dec 2012 09:51:11 -0000 (GMT)
Subject: NOW CONTACT THE GLOBAL FUND REMITTING OFFICE FOR YOUR APPROVED CHEQUE.
From: HOUSE OF =?iso-8859-1?Q?LORD=92S_ORGANIZATION_UK_LONDON?= <info@lordsdept.org>
Reply-To: consultationdept@yahoo.com
User-Agent: SUNUMAIL/1.4.2
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: info@lordsdept.org
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to false
Content-Length: 3749

HOUSE OF LORD’S ORGANIZATION UK LONDON

Some other email addresses and IP’s used by HOUSE OF LORD’S ORGANIZATION UK LONDON SCAM – info@lordsdept.org <> com.unit@net.hr <> managementfile1@gmail.com <>  olusegunoniwon@ymail.com <>  freshtools@wanadoo.fr <> hackk@smtp.com <> 213.154.64.102 <> 213.154.64.43 <> from 41.216.50.32 (SquirrelMail authenticated user david_fletcher) by http://www.sunumail.sn <>

RECEIVED: from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)

MESSAGE-ID: <55073.41.203.79.249.1354355471.sunumail@www.sunumail.sn>

More scammers who’ve sent out email spam under 41.203.79.249 are:

From: <sales1@home.fanwrestling.com>
Subject: Fwd: Re: Wire Transfer Confirmation
From: Tagged<Tagged@taggedmail.com>
Subject: Re: Fwd: Wire Transfer Confirmation (FED REFERENCE
From: <hien_u_spine@hhp.sugarmotor.net>
Subject: hien_u_spine@hhp.sugarmotor.net � ROLEX Inc � Disc
From: <kathytessendorf@mailfront.cbulock.com>
Subject: kathytessendorf@mailfront.cbulock.com � ROLEX Inc
From: LinkedIn Password <password@linkedin.com>
Subject: Reset Your LinkedIn Password
From: <Harrietjeancy@gmail.com>
Subject: Fwd: Re: Your Flight US 66-56833
From: “Purchase Vigara” <EAF01C7@tennlandforsale.com>
Subject: Weekend sale

western_uniontransfer121@hotmail.com – Received: from col0-omc4-s16.col0.hotmail.com ([unknown] [65.55.34.218]) by vms172065.mailsrvcs.net

From: Western Union Payment Center western_uniontransfer121@hotmail.com
Subject: FROM WESTERN UNION AGENT MR.PAUL EZE
X-Originating-IP: [65.55.34.218]
X-Originating-IP: [41.203.79.249]

From: Office Ups Courier
Subject: Urgent Delivery of your ATM Card Payment Through UPS Company Delivery.
X-Originating-IP: [77.238.189.61]
To: undisclosed recipients: ;
Reply-to: upsofficecourier@yahoo.com.hk

Received: from [41.203.79.249] by web29301.mail.ird.yahoo.com

From: Money Gram
Subject: Dear Customer.
X-Originating-IP: [77.238.189.216]

Received: from [41.203.79.249] by web132219.mail.ird.yahoo.com

Received: from nm25-vm8.bullet.mail.ukl.yahoo.com ([unknown] [217.146.177.154])
by vms169119.mailsrvcs.net
(Sun Java(tm) System Messaging Server
Received: from [127.0.0.1] by omp1016.mail.ukl.yahoo.com with NNFMP; Tue,
29 Nov 2011 19:54:16 +0000
Received: (qmail 69819 invoked by uid 60001); Tue, 29 Nov 2011 19:54:16 +0000
Received: from [41.203.79.249] by web26303.mail.ukl.yahoo.com
Date: Tue, 29 Nov 2011 19:54:15 +0000 (GMT)
From: “Mr.Edwin Aja”
Subject: CONTACT DIPLOMATIC AGENT IMMEDIATELY
X-Originating-IP: [217.146.177.154]
Reply-to: adamsvictor14@yahoo.fr

IP 209.239.47.191 as relay: IP: 41.203.79.249

YOUR BANK DRAFT DELIVERY NOTIFICATION!!!
Contact Person: REV.TEDDY HARRIS
UPS Courier Company.
E-mail: upscompainy1133@hotmail.com

419 from above IP, using 3 Yahoo IP addresses, including 98.138.91.34, as relays:

YOUR WESTERN UNION PAYMENT CALL TO CONFIRM @ +229-98679197
Vital Finance Bank Western Union Department.
Location Address; Plot 1261, Adeola Hopewell Street CO/B/REP,
Contact Person: Mr Chris Mike.
Tele phone Number: +229-98679197
Email Address: ( westernuniontransfe6@globomail.com )

“Western Union” Spam from above IP (Lagos, Nigeria), using IP 196.1.218.76 as relay:

Call Mr Kevin Anthony For Your Mtcn.
webmail address:( western_union001@qatar.io)
tele phone.+229-984-168-39
Contact person Mr Kevin Anthony.
November 17 2010 03:11 PM
H.User7043 commented…
“Western Union” SpamScam from above IP (Lagos, Nigeria), using IP 211.55.29.156 as relay:

MESSAGE FROM WESTERN UNION
Director; Tuker Hans
E-Mail :(cbbj@ymail.co)
Direct line: +229-66-614-055
October 09 2010 09:39 AM
H.User7043 commented…
From “Tony Chris,” purporting to be a poatmaster in Ghana, as a follow-up to an email from a “Barrister Paule Eze,” offering me an ATM card worth 2.4 million Euros.

“Attention Beneficiary,
From: TONY CHRIS “

 

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Bonjour”

419 SCAM – FRAUD – NIGERIAN SCAMMER

 

Bonjour , 

Je vous contacte de la sorte car je souhaite communiquer avec le monde et fais une chose que je devrais peut être pas dû. Je souffre d’une maladie très grave que je n’arrive presque pas à trouver le sommeil. J’envisage de vous mettre en possession de mes biens.J’avais travaillé dans le secteur pétrolier au Koweït. Ensuite j’avais décidé de mettre en place plusieurs centres. J’ai une mallette remplir et cerlé,soit 2.500.000 d’Euros qui sont jusqu’à ce jour dans une banque étrangère en AFRIQUE . Je sais qu’on se connait pas, mais ce que je demande à DIEU c’est de rendre votre cœur saint afin de réaliser mes projets avec ce don c’est à dire, construire des centres d’aide sociale. Je veux que vous rentriez en contacte avec mon notaire puisque Je l’ai acquise toute ma vie et la seule chose que je pourrai faire de bien sur cette terre avant de m’en aller c’est de savoir que ce don servira à rendre heureux la personne a qui je le ferai. En effet je suis gravement malade et je suis à l’approche de ma mort c’est ce que mon docteur me la confirmer ce qui me laisse un peu perplexe, pour avoir vous contacter a été une grande réflexion. Malheureusement nous n’avons pas eu la chance d’avoir des enfants mon marie et moi. Après Cinq années de vie commune, mon époux est mort dans un accident. Si Vous êtes d’accord j’attends alors votre réponse à ma lettre. Veuillez prier pour moi car je suis dans une situation critique.

 

Return-Path:   <blackweardesign@moov.mg>
X-YahooFilteredBulk:   196.192.32.61
Received-SPF:   pass (domain of moov.mg designates 196.192.32.61 as permitted sender)
X-YMailISG:   bwx8weMWLDsQQjWKBr4l3K0Yd4C43qxN3b20kfCMcGiIqGuk 0gY3_xmQAxfrzOtgq5RR_ZHnJrfYGkXVam1pZ.qmn41GVoggO7hqYAgq82.I qgcjt6DkUaIlzZXQ7rFc4AWCdFB2R69fuLNVrBCdy3ud1WIJq477k_4nj1K7 MKn2.p2l5Y7BD7qRoGZGYBnwYq1kWDZeCLoh8pCoFpZyjll58BFUG5GQYtF5 OZd4KPWPkbhvqU_7c.rUINpXGzadiVuyVBYKGofNZjrbT24_yWJuRPOu2V6Y U6uPYiidl0E5biW21rQViDH1e1u_cCqrZ1.HKIb6b2HWV3yfqdGznzFRGWso s_hmrGBS.VtxYRPxzLJHg8Z_gzdJ4jsWAoOirJf46dxz38t2mGlyJUZf9t0w DCvbGIdrK6UTLqR8VIwIRn4bQyuIMxN7DJXaRHVlHaK7_1friBmBmc.rh9xo AxsbPaT5GGS3bUPa97zmEmxt01o.DEKms.qpi3lUQ_uoAZhvitVcXIzm3VFc 3szSbmehvZ._y_R59TV2mXwtu9t6CHTYlsNsxTGqrs2NRMP8eBB343DwmxMh Mt.JL8jXgsgjaI0HMHQ3E3vLaQdYW0aFIGO4u02o8IdM5YzoAl9itSHMUkmL AruASq.PsnK9JEZOTrfcxicBHE3N1V9xqfsObfl73czGxL_OXUZ4rYZ9lQAU osqZFKjGj6SkGUjBPfo87SqrZ5jhRYxogex3D922HcqO.RJMN0ONh_MULrPh iyPk.asB35xgmxXiXsmvqvMLaWdO2JBT6sxeL0QeGO1xwnyFTHyFL5xhUjxC SGCj_MGa0TReEEgWjR__N_tOhOH_iWP2hzKHCIJX5ZdyKjV1zkqWd_.PLiRs I.Kx4zw1e9dLwholt.bUglOjupabBLEvNHt0tN6F.mptefUFMeqi0wZ1i.Dw hDU.FcQQjfhK1mB6KQYNr8TfCZbIMbEjga_QSIouuAaHuEYGzPdbSjAtyfnt hc7ybPX7c7XMgOPK4nhPBDnzke9RP9E2aaVZ5A4tcBt3GgkwKShjeuDOTF_h JwUlOE3GBER5r0we9ikY8uGQAmvu17w2t_f7UrnZyKzzH6qRm_uRWy3R15J3 VMGhQkTXyylzEWXLG586Z8tlYbFSG7Saq1nC8VDb5U3kAy_ntU6wZfj694t5 DeSrL21XdJiP55VWzyc7OF3wBC92kfaQspQRt9XQ.MHBKTfmlqgYxIfwcZHn MstkNPPAsjivDR9iBbzANn.lRnu1NBVlHK87P5Frr5XXkXLXaSxSBWUnIfM5 E7j_84Cjx9RGRenRcKZCC70fBwXZuzSbyw6Wu6cZYhkA6A.Q2k.0rJa.
X-Originating-IP:   [196.192.32.61]
Authentication-Results:   mta1005.mail.ac4.yahoo.com from=unknown; domainkeys=neutral (unknown); from=unknown; dkim=neutral (unknown)
Received:   from 127.0.0.1 (EHLO mx-out.dts.mg) (196.192.32.61) by mta1005.mail.ac4.yahoo.com with SMTP; Tue, 27 Nov 2012 11:25:30 -0800
Received:   from localhost (localhost [127.0.0.1]) by mx-out.dts.mg (Postfix) with ESMTP id C7B96803876; Tue, 27 Nov 2012 15:17:21 +0300 (EAT)
X-Virus-Scanned:   Debian amavisd-new at mx-out.dts.mg
Received:   from mx-out.dts.mg ([127.0.0.1]) by localhost (mx-out.dts.mg [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v5mcG8rOEEAS; Tue, 27 Nov 2012 15:17:21 +0300 (EAT)
Received:   from smtp.dts.mg (smtp.dts.mg [196.192.32.27]) by mx-out.dts.mg (Postfix) with ESMTP id A5EB8803871; Tue, 27 Nov 2012 15:17:15 +0300 (EAT)
Received:   from z01.dts.mg (z01.dts.mg [196.192.32.50]) by smtp.dts.mg (Postfix) with ESMTP id A6A521D99093; Tue, 27 Nov 2012 15:19:01 +0300 (EAT)
Date:   Tue, 27 Nov 2012 15:18:55 +0300 (EAT)
From:  
MARIE <blackweardesign@moov.mg>
Reply-To:   “marieb.pouvost@yahoo.ca” <marieb.pouvost@yahoo.ca>
Message-ID:   <1595992550.635399.1354018735157.JavaMail.root@moov.mg>
Subject:   Bonjour ,
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”—-=_Part_635398_1213173424.1354018735148″
X-Originating-IP:   [41.79.217.122]
X-Mailer:   Zimbra 7.2.0_GA_2669 (ZimbraWebClient – GC16 (Win)/7.2.0_GA_2669)
To:   undisclosed-recipients:;
X-SpamTest-Envelope-From:   blackweardesign@moov.mg
X-SpamTest-Group-ID:   00000000
X-SpamTest-Info:   Profiles 24807 [Sep 11 2011]
X-SpamTest-Info:   {TO: undisclosed}
X-SpamTest-Method:   none
X-SpamTest-Rate:   20
X-SpamTest-Status:   detected
X-SpamTest-Status-Extended:   detected
X-SpamTest-Version:   SMTP-Filter Version 3.0.0 [0284], KAS30/Release
Content-Length:   4529

SAME SCAMMER – DIFFERENT EMAIL INFORMATION –

Yolaine Provot (sonema@moov.mg) Bonjour,

 
Bonjour,
Je suis une veuve d’origine française née le 24 Février 1946 à CHENOVE (21) pour la raison de mon état de santé qui ne cesse pas de se dégradé de jour en jour. Je vous écris parce que je recherche une personne à qui faire confiance pour la bonne réalisation de mon projet de donation. Je veux vraiment donner de moi ma fortune d’argent actuellement disponible sous section de gardiennage auprès d’une Banque en République du BÉNIN B.O.A . Mon état de santé si vraiment critique ne me permet plus de sortir de l’hôpital où cette ma maladie me confine, je souffre de CANCER du cerveau qui se traite depuis plus de 1 An pour aujourd’hui. Je ne comprends plus rien de ma vie, c’est des raisons qui me poussent à vous contacter et de savoir si je peux bien sûr vous faire confiance et vous faire part de cette donation. Si oui, écrivez moi directement à mon adresse e_mail que voici ( yolaineprovot@yahoo.fr  )

Veuillez beaucoup m’excuser quant à ma façon de prendre ce contact avec vous. Je m’en vais bien vous faire savoir que je parle couramment le français.
Je suis Yolaine Provot, née le 24 Février 1946 à CHENOVE (21).

Je souhaite vous lire très bientôt,

Yolaine Provot, ( yolaineprovot@yahoo.fr  ) Pour avoir plus d’info sur mon etat de santé  contacté moi (+44 703 5944 846 )

(sender IP is 196.192.32.61) header.from=sonema@moov.mg
 
Received: from mx-out.dts.mg ([196.192.32.61]) 
Received: from localhost (localhost [127.0.0.1])
 by mx-out.dts.mg (Postfix) with ESMTP id 6DB97800E6B;
 Mon, 29 Oct 2012 15:13:27 +0300 (EAT)
X-Virus-Scanned: Debian amavisd-new at mx-out.dts.mg
Received: from mx-out.dts.mg ([127.0.0.1])
 by localhost (mx-out.dts.mg [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id nkYxWdxBvbJa; Mon, 29 Oct 2012 15:13:27 +0300 (EAT)
Received: from smtp.dts.mg (smtp.dts.mg [196.192.32.27])
 by mx-out.dts.mg (Postfix) with ESMTP id E0910800E7B;
 Mon, 29 Oct 2012 15:10:36 +0300 (EAT)
Received: from z04.dts.mg (z04.dts.mg [196.192.32.54])
 by smtp.dts.mg (Postfix) with ESMTP id 606B21D98E16;
 Mon, 29 Oct 2012 15:00:36 +0300 (EAT)
Date: Mon, 29 Oct 2012 15:10:33 +0300 (EAT)
From: Yolaine Provot <sonema@moov.mg>
Reply-To: Yolaine Provot <yolaineprovot@yahoo.fr> 

Email Scam Scammers Scamming

MARIE <blackweardesign@moov.mg>  blackweardesign@moov.mg — “marieb.pouvost@yahoo.ca” <marieb.pouvost@yahoo.ca> Financialbank130@ymail.com << TONY OSITA << bocononfa@yahoo.fr << mail@cervicalcancer-symptoms.info << sonema@moov.mg <<

41.79.217.122 – NIGERIA

TONY OSITA – Nigerian 419 (same IP)

From FINANCIAL BANK INTERNATIONAL PLC Tue Nov 13 06:20:03 2012
X-Apparently-To: via 72.30.239.49 – Scam Warners - > 77.238.189.90 << Received: from [41.79.217.122] by web133106.mail.ir2.yahoo.com via HTTP; Tue, 13 Nov 2012 14:20:03 GMT 
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460 – Bonjour

The above scammers are also attempting to fraud others in an Inheritance Scam (41.79.217.122) for more details on this scammer, please click: Mr. Mark Brown

 
1 Comment

Posted by on 11/28/2012 in Inheritance Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

Mr. Mark Brown <> Western Union Office

Inheritance “Beneficiary” Scam – 419 Nigerian Scammer

This IP is being used by more than one scammer and if you received an idenical IP from an unknown online user then it’s a scammer. For some other emails, email-addresses, names, etc under the same Nigerian IP, please click: Bonjour 41.79.217.122

From: mr.dango.dangi1@gmail.com
IP: 41.79.217.122
Subject: WESTERN UNION BENIN REPUBLIC hr1-8nw24
Tel: Not found

Western Union Administrative Office®
Porto Novo , Benin Republic

Attention Beneficiary:
This is to officially inform you that, We are still waiting for the details of the western union payment information as soon as you send the charge of US$200 only.

You are hereby ask to remit the fees US$200 to the following information below:

Receiver Name::: Victoria Nnamdi
Receiving Country::: Benin Republic
City:::::  Porto Novo
Question::::: Payment?
Answer::::: Completed
Amount:::: $200.USD (Only)

On the receipt of the US$200 ,your payment shall be release to you within 24 hours. I wait to hear from you as soon as possible, send me the payment
information via E-mail.

Best Regards.
Mr. Mark Brown
Chief Managing Director
Western Union Head Office,
Benin Republic

 
2 Comments

Posted by on 11/28/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“FedEx Online®”

NIGERIAN SCAM – 419 – FRAUD

EMAIL: We have been waiting for you to contact us for your confirm package that
is registered with us for shipping to your residential location. We had
thought that your sender gave you our contact details. It may interest you
to know that a letter is also added to your package. We understand that
the content of your package itself is a Bank Draft. The package is
registered with us for mailing by your colleague, and your colleague
explained that he is from the U.S.A but he is currently in Africa for a
three (3) months Surveying Project as he works with a consultant firm in
Nigeria, We are sending you this email because your package is been
registered on a Special Order. For your information, the VAT & Shipping
Charges as well as Insurance fees have been paid by your colleague before
your package was registered. Note that the payment that is made on the
Insurance, Premium & Clearance Certificates, are to certify that the Bank
Draft is not a Drug Affiliated Fund (DAF) neither is it funds to sponsor
Terrorism in your country. This will help you avoid any form of query from
the Monetary Authority of your country. However, you will only have to pay
a sum of $125 USD to the FedEx Delivery Department being full payment for
the Security Keeping Fee of the FedEx Company as stated in our privacy
terms & condition page. Please note that packages are not shipped nor
delivered on Saturdays, Sundays and on holidays. If your order has been
placed on any of these days, then it may be shipped the following business
day.

Kindly complete the below form and send it to the FedEx Online team. This
is mandatory to reconfirm your Postal address and telephone numbers.

1: FULL NAMES:
2: TELEPHONE:
3: POSTAL ADDRESS:
4: COUNTRY/STATE:

Contact Us between:

Mondays-Fridays: 9:00am – 9:00pm EST
Saturdays: 10:00am – 5:00pm EST
Sundays: 10:00am – 4:00pm EST

Have a great day!

Mr. Thompson Williams.
Direct Tel: +2347033356828
fedexonline_01@yahoo.com.hk

FedEx Online®
©Copy Right Reserved 1994-2012.

HEADER:

Return-Path: <karuiz@fices.unsl.edu.ar>
X-YahooFilteredBulk: 200.41.60.169
Received-SPF: none (domain of fices.unsl.edu.ar does not designate permitted sender hosts)
X-YMailISG: o5TE0VcWLDs6A2iGWRrKiXjvpJ9iJzbVh0d6tg62Wj0icTj9 vmZMCQOukMdUDCGoZuIRp9z0IxNUHMgxvIvYYj2aIPbsDGNdoASLbiisEdUj QBEi1ddHF1qDGdoXfPO5fGq3r96t6.3EMAlu.gZYrqage8higRm6BtMly.rw mIfRU6DCgMO6xe2wenEds3y7f6jkHz8PujZvzVXG06KZXqLfUgswmKyLgCBr XoMranvoL1UpF2zrp9IkEggsDk.stcAvIzVsHemNO52EoccEi9gmti7.KoIW FADXVh5rt92uodAMmY0yUyx5SH8xuTnS8HVA1jqbABSY05OsZuiqD2tnbAyL bLlh4CNm20SRui2X4Xy8KYvHstQSJ2JED57ifWlUyjgIAc0kmiT8UPezvxUv IWwuGwuz0cdnaBz9yWtkze4VsD7mfNV5e55TkF1PnlOQV80xSuZBMTspTRHI Rt3llF72gAFNpNhgBjq1mr36YDryiv6cVF80QRdJY_AvV0JqeMTxkYepk7Zo ZibOOHy5tUxHe1RaLqqXs0WImOyiFBDXjq7mpvYjAYsdHOQOyqNLUN6Hg6u1 tVFo3zVplBVnDXYMSRMyggTOWeOwUWkEw0lYPrWCvkmgmSLj_PXFULib.MPx K7S5XbZpInbFirVmMyQMMjCReCffKzB5eKrZIIbECa1FeVd9PHa6ZIj_LsD0 Yq1pZsf06cF3tpdiRlgAzGrJolauz8y8xqW1iCEc8cvOJudahvuRDsb09YaP DEdo6Nd8twXlDmXqNqVY77QtOAFP6Z6QZzgxq5yu9O6Mv1mI4NhapzzH1k3. afEn6fF4JN4HxcuOEp2Rr_U3ikODeO8VSsJ.qEVvjRitKUHx_V6pncw6HkWN tB7_Lr2JJDj37KsTC9ntsBwAVvF26zHppnpw5jw8jYccPfUnUtzPoWlp6Bi9 o6ZrjPB.DXes_i1kpLdprNB8ehDnWXVLwqQqH31W4qYFuFnyZuj3rhLaUUx3 3J3Vqm2tYLv7DmSdzbfkolSriSZ4yVm_POZLOrsbax7kfm6oXgbPLD2cKab3 ObsRlQiaLIEsfxk7nsR8nxE4NzateWWVNkdKO1n40_7N80WGh_yoBa692ABI HHJO2MTarJriQnZz7soxNKn8AuVrxZVZRo_ebnck6pA4Rfh_0R1sUQIjroJI Pw6gJD2qGOTgx1edsoeYVA6oBf_5ab34B9EC0w80NN8JA8nOVBzVJMhtm.8z 6LOwSdTnFg0X3pOkrEr51x.Gto.BuQNSGp6tYNIzckUKiL24O3dxUNaf4_gX k28hY3hB2zgdLlorQVCWrA5.YESR7.ZspdMBR0exRen9wmIK48IOaFt5H.DR dA–
X-Originating-IP: [200.41.60.169]
Authentication-Results: mta1183.mail.mud.yahoo.com from=fices.unsl.edu.ar; domainkeys=neutral (no sig); from=fices.unsl.edu.ar; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO scooby.fices.unsl.edu.ar) (200.41.60.169) by mta1183.mail.mud.yahoo.com with SMTP; Tue, 27 Nov 2012 02:01:25 -0800
Received: (qmail 24449 invoked by uid 33); 26 Nov 2012 15:51:22 -0300
Cc: recipient list not shown: ;
Received: from 41.71.190.77 (SquirrelMail authenticated user karuiz) by correo.fices.unsl.edu.ar with HTTP; Mon, 26 Nov 2012 15:51:22 -0300 (ARGSL-ST)
Message-ID: <2322.41.71.190.77.1353955882.squirrel@correo.fices.unsl.edu.ar>
Date: Mon, 26 Nov 2012 15:51:22 -0300 (ARGSL-ST)
Subject:
From:
FedEx =?iso-8859-1?Q?Online=AE?= <karuiz@fices.unsl.edu.ar>
Reply-To: fedexonline_01@yahoo.com.hk
User-Agent: SquirrelMail/1.4.9a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Content-Length: 2014

41.71.190.77+ << 2347033356828 << FedEx Online®  << karuiz@fices.unsl.edu.ar << fedexonline_01@yahoo.com.hk <<
A scammer(s) under the email-address <mcmunoz@fices.unsl.eu.ar> and graniteloans1010@xnmsn.com sent scam mail out under the same Originating-IP as the above sender. The receiving IP’s location was Nigeria (just like the above senders receiving IP) as well. 200.41.60.169 and 41.203.64.132

Other spam/scam sent under the same IP address are:

 “Sampaio” <SharofSampaio@acupunctureinfo.net>
Subjectnone/blank
From: “Lynnette Grover” <AmparoloreleiVick@centraloregon
Subject: Enlarge At Home Today
From: postmaster@sagemuller.com.ar
Subject: Notificaci=?unicode-1-1-utf-7?Q?+APM-n de es
From: Sewell <inwglae@bluegrassjunction.com>
Subject: Software discounts
From: Pill <lrshipley@instuttgart.de>
Subject: When you need it
From: <caesargq6@clickfoc.us>
Subject: More games, more chances, bigger jackpots 1500 eur
From: <limitlessi2@pip.com.au>
Subject: Best casino games 1500 euro bonus!
From: <politicizingwwk86@fiemg.com.br>
Subject: Best casino games 1500 euro bonus!
From: <misspends@biolconseils.ch>
Subject: Biggest casino online 1500 euro bonus!
From: <thule107@buhrmann.com>
Subject: Biggest casino online 1500 euro bonus!
From: <venousuu@pacunion.com>
Subject: Euro casino online 1500 euro bonus!
From: Валентин ��
Subject: мы тoльko делaеm рekлaмy
From: До��на Павл��ва
Subject: Прoдaжa бaзы в Кoлoмнe. Цeнa
From: Артемий В��но��ра��ов
Subject: КАЧЕСТВЕНН
From: <mainmastsu20@cochamber.com>
Subject: Best erect pills
From: <tunnelingh@mc2school.org>
Subject: Best erect pills
From: <stileskp1161@barronheating.com>
Subject: Get some penis pills
From: <loftwp@blomnet.com>
Subject: Get some penis pills
From: <josiea8@alumni.insead.edu>
Subject: Find pills for cheap prices
From: “Sarahi LAMBERT” <MaciPetet@online.no>
Subject: Re: 62735418449971656

Some previous names and email-addresses under the IP 41.203.64.132 – Location: Nigeria

5-Jul-12 11:36 41.203.64.132 mcoxman gsterling123@gmail.com Nigeria
22-Jun-12 21:56 41.203.64.132 Mike001 phonesmartltd8@gmail.com Nigeria Evidence
17-May-12 03:08 41.203.64.132 pemmy pemmy004@yahoo.com Nigeria
10-May-12 16:57 41.203.64.132 kingcxt cxtblade2@hotmail.co.uk Nigeria
10-May-12 16:53 41.203.64.132 king cxtblade2@hotmail.co.uk Nigeria
5-May-12 03:52 41.203.64.132 ohison ohiluckyson@yahoo.com Nigeria
2-May-12 16:41 41.203.64.132 Frank Richards frankimobiletech98orders@gmail.com Nigeria
23-Apr-12 08:07 41.203.64.132 infotech shecool174@yahoo.com

FYI, the REAL FedEX doesn’t sign up with free Yahoo email-addresses. They have their own domain. And they don’t send out email’s like the one above. Only scammers get into irrelevant details.

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

 
Follow

Get every new post delivered to your Inbox.

Join 50 other followers

%d bloggers like this: