RSS

Tag Archives: Cotonou Benin Republic

“MR. D.P.O JOHNSON” dhl_compay@yahoo.com

419 NIGERIAN SCAM – EMAIL SCAM – FRAUD

The below Nigerian Scammer is VERY Persistent and doesn’t easily give up. I’ve been ignoring him for at-least a month and still receive at-least one email daily. I’ve posted his emails and info but he is always changing email addresses and giving me ‘agent’ names, and it’s always under different Originating-IPs. below the email and header is a list of other scams posted under the same nigerian ip address.

 

EMAIL: DHL COURIER SERVICE COMPANY BENIN DU REPUBLIC 

Avenue Mgr Isidore de Souza 41 Blvd Du Mongo Cotonou Benin.
E-mail: 
dhl_compay@yahoo.com
Tel: +229-68377742
Attn: Customer:

how are you today i hope that all is well, my dear be advice that you should  go head and send the $149usd immediately to enable us. Delivery you package within 24 hours ok. So we look to hear from you immediately with the payment information before End of today ok.
USE THIS INFORMATION AND SEND THE FEE VIA WESTERN UNION 
Receivers Name………… Anthony O Ikwunne
Country………………….. BENIN REPUBLIC City …………………….. … COTONOUText Question…………….BEST COLOURAnswer…………………… YELLOW   
 
And as soon as you send the US$149.00 then send us the Western union Details/ MTCN Number / Sender’s Name. Because  as soon as the fee  is received we will dispatch your package and  provide you the tracking details for you to monitor the movement of your package while on the transit to know that its coming to you.
The US$149.00 requested is for our security keeping fee and All necessary documents has been tendered by depositor.
Below is picture of your registered box.

Type: Diplomatic Package Size: L W H / 04:10:13 CM Weight: 0.29kg Color: Brown

Yours Sincerely, Mr. D.P.O Johnson DHL International Express Courier Company Director Benin Republic Tel; +22968377742

CAUTION: THIS INFORMATION MAY BE CONFIDENTIAL OR PRIVILEGED INFORMATION. IF YOU ARE NOT ADDRESSED OR AUTHORISED TO RECEIVE THIS MESSAGE, YOU MUST NOT USE, COPY, DISCLOSE OR TAKE
 

The last part is the funniest. The scammer doesn’t want this information out in the public.. Well it is

HEADER:

Return-Path:   <westernu749@gmail.com>
X-YahooFilteredBulk:   212.82.109.193
Received-SPF:   neutral (212.82.109.193 is neither permitted nor denied by domain of gmail.com)
X-YMailISG:   ri8PeTQWLDufFhNVhMTKz7_9F04BnNPKMD8_fY0rGbtLSXJW 2Pbq0l7atG1.hyuzi790ASC5QcdKtobIYk1Emzm23zOEmZWyB_QYAoMJrlQE JCigHjfZ.uVRqOfitmh7hqbF6ku0hRzE36wXA0iGcobufDqI_2XjI1WLjY5A CuOT7lQUcYGPQdbxO2dBuslK6JEDuIP9YIWBxK0ijt3bLo9sR2AQDJkxU4Fq cPNN_P1vA_YFF5UhKmkIaHFQIdRXeDCOzSuM2NJStZ6b5GVnsA0t9e.J51F1 zigvYjLvpgIx_I5kcJOHSGitXn.4y0wcD_N0nZpF7Avx7jf1nY_Im1TSUxOY S8MWIZ7NUSJJMViMcj9Ay9NDEjAWeOJjCDPSBBzMqS3Vpk5b3lec.zeG5pKq pU5v1HSxR5T5E5bwURikWETXII4ld3dKwdzVP7Upe3QseNP4GT1QHx9kL6CK Xk.X.e7Aa6cNQ3L9TxgIsjUilXKYa8o7E8qKKcNU6D_98AGffgl1eZkgDzCy lMpbCCTYDVw4QTM.8IUdx1ULjC1w40akJCsX2sHujICyUszeB86UlrIQZnDq KhYDG2AfcFfiW0l9Rw5ARGXmWkEdscDKh6A6459_x2Yu9JgrpW6zppgPSOAh hSlXsUjusqP1zzhxSqKfLLZyA137OjiF97QcF5Tduy6wPi.yzRcVQBjbJJ4B 3bXU6xLpHo4WwdtBdG54zXaw2G70ZlBAvEBp9yU6DafCZmFHVQeRDixpQqv4 bKjA2uNQQspdfQCCXHhhrPvYmHvnJ4VZ87yPghyMDwEPpY4s762sujxnFKIj l5XEuJ.KaUsYFTT77LJnvhIOUbhgyuv9NqFypvKmZmLBWLnK9GxVDkvn_LT6 DYR7MtExqgQVje677.OXoYHXT0on4nycmOyRQpP9pe4CUuqYJ0yW30aeJlR4 n0FxIGbVWywqEqDczxtn5wNAvZiRFhyepfac_SQVNH64s2FK7KmJaWatwRWW DaL.8YrTOVb_rTkdlJNObrl9l2ck3JwF01eG3Rso_Lif_IXLZVN.iynqCRJG rRL4yig6Zabl0DUQmQ6e3yg2QNcUKAk9NIEwRdgNHq39w6v4Z4qe.kFBW2GT yjCJjOkQXB9STMOxGHHfA5LAfbAA53qApakMIsYlmPcepbOVE_yATLnzGL_t ig4l_1ukkpigli19hliexvsOA3HrPynT8RtJjUqqDJbDitCF.cn43eGgDJP2 6IAgP6BQ4Oky_IufQVuc8suattlG98TSmuEMOo5BhmCtBerVtFda60lMRM3y YFMmzUyjZn5OacwqMQ–
X-Originating-IP:   [212.82.109.193]
Authentication-Results:   mta1086.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm24-vm2.bullet.mail.ird.yahoo.com) (212.82.109.193) by mta1086.mail.bf1.yahoo.com with SMTP; Wed, 14 Nov 2012 08:53:45 -0800
Received:   from [77.238.189.233] by nm24.bullet.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
Received:   from [212.82.108.243] by tm14.bullet.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
Received:   from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
X-Yahoo-Newman-Property:   ymail-3
X-Yahoo-Newman-Id:   795423.69197.bm@omp1008.mail.ird.yahoo.com
Received:   (qmail 71248 invoked by uid 60001); 14 Nov 2012 16:53:42 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1352912022; bh=YJdP0B3ArGUfIDfK+tFdY4usbtMSeMfxOIR+VL1Y3Iw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=KSOalfFpTYzmrFm8ucVEArfJ6A09mSCj6QSfJ/bmBjx3ntM85nIw49yOHwPEo8d8aKg0OiX/hx+yBZNf2WVOyNe2DRMb1gWujp4KLWpJxujHaH21UU7+pRrqUh5c4mpJQSKVWVQ7IXseBsU5x5L/tQRTj4sYnZA5r5GZOePZ+Co=
X-YMail-OSG:   OZ7LhD0VM1klb3DjyvlFkhMZSOF9Kk5yIkuHnN.ReaQhz8A 2eEq4WVU4
Received:   from [41.216.50.26] by web171306.mail.ir2.yahoo.com via HTTP; Wed, 14 Nov 2012 16:53:41 GMT
X-Mailer:   YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID:   <1352912021.69977.YahooMailClassic@web171306.mail.ir2.yahoo.com>
Date:   Wed, 14 Nov 2012 16:53:41 +0000 (GMT)
From:  
“MR. D.P.O JOHNSON” <westernu749@gmail.com>
Reply-To:   dhl_compay@yahoo.com
Subject:   MR. D.P.O JOHNSON
To:   undisclosed recipients: ;
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”-1132928367-462696281-1352912021=:69977″
Content-Length:   19629

Below is other email addresses, NAMES, scams, etc being used by the same IP as Mr. DPO Johnson

FROM INTERNPOL POLICE FORCE UNIT. 
desk of Dr,Daniel Alexander, 
International Interpol Police Force 
Investigating Unit Benin Rep 
Email: officeunion2012@yahoo.fr 
Phone +22999867566 
International Remittance Department funds Transfer Section 
United Bank For Africa International plc. Republique du Benin 
in West African State /Address:rue 7741 unesvia avenue kotoungbe cotonou. 
Email: atmcarddepartment132@yahoo.fr 
Email: atmcarddepartment132@yahoo.fr 
Website http://www.ubagroup.com 
DIRECTOR NAME: MR frank johnson s-MAIL:(www.westernunionrichard@yahoo.ca) 
OFFICE LINE:((+229)-99231994, OFFICE FAX: (+229)-98414204, Visit:westernunion.com 
BEST REGARDS.

Head Office RUE 84, ABAPKA MISERBO <<

western_ubb@yahoo.fr << activationcard@rocketmail.com << 

X-Originating-IP: [106.10.151.181] X-Originating-IP: [217.146.176.150]  X-Originating-IP: [217.146.183.95]beninhigh.court@rocketmail.com

Received: from [41.216.50.26] by web190606.mail.sg3.yahoo.com via HTTP; Thu, 
05 Apr 2012 05:25:48 +0800 (SGT)

Received: from [41.216.50.26] by web171002.mail.ukl.yahoo.com via HTTP; Wed, 
04 Apr 2012 20:54:00 +0100 (BST)

Received: from [41.216.50.26] by web171005.mail.ukl.yahoo.com via HTTP; Fri, 
30 Mar 2012 09:49:18 +0100 (BST)

 [98.138.91.212] 
To: undisclosed recipients: ; FROM: Mr. Mark Dennis
Reply-to: westerotransfer@skymail.mn

Received: from [41.216.50.26] by web112311.mail.gq1.yahoo.com via HTTP; Thu, 
29 Mar 2012 13:31:47 -0700 (PDT)

From: “FEDERAL BUREAU OF INVESTIGATION \(FBI\)” 
Subject: FBI SIGNED AGAINST YOU 
X-Originating-IP: [106.10.151.20] 
To: undisclosed recipients: ; 
Reply-to: msanusigoverno@yahoo.com

Received: from [41.216.50.26] by web190605.mail.sg3.yahoo.com via HTTP;

From: BENJAMIN NWEKE 
Subject: Welcome to Western Union 
X-Originating-IP: [106.10.149.38] 
To: undisclosed recipients: ; 
Reply-to: western_ub@yahoo.com.hk

From: WESTERN UNION 
Subject: CALL MR BENJAMIN FOR YOUR MTCN NUMBER +22998892244 
X-Originating-IP: [115.178.12.225] 
To: undisclosed recipients: ; 
Reply-to: western_ubb@yahoo.fr

From: chigoeze2007@yahoo.co.uk 
Subject: PAYMENT NOTIFICATION OF YOUR FUNDS. 
X-Originating-IP: [77.238.189.207] 
To: undisclosed recipients: ; 
Reply-to: sahelsaharabank@rocketmail.com

From: Mr Andrew thomaas 
Subject: Welcome to the Albany Division of the Federal Bureau of Investigation 
X-Originating-IP: [77.238.189.70] 
To: undisclosed recipients: ; 
Reply-to: investigationbeninfederalbureau@yahoo.com

From: ECO BANK PLC 
Subject: Hello Dear Beneficiary,Good News 
X-Originating-IP: [115.178.12.201] 
To: undisclosed recipients: ; 
Reply-to: plcecobank118@yahoo.com.hk 
Message-id: 
MIME-version: 1.0 
X-Mailer: YahooMailClassic/15.0.4 YahooMailWebService/0.8.116.331537 
Content-type: multipart/alternative; 
boundary=”Boundary_(ID_vIbW/TiNhur4KDUcmvroXA)” 
X-Yahoo-Newman-Property: ymail-3 
X-Yahoo-Newman-Id: 723015.62700.bm@omp1005.mail.sg1.yahoo.com

From: MAIL POST OFFICE 
Subject: Regarding Your ATM CARD Deposited Here on the 11th 
X-Originating-IP: [77.238.189.59] 
To: undisclosed recipients: ; 
Reply-to: mailpostoffice1369@yahoo.fr

From: Dr Thomas Yayi Boni 
Subject: His Excellency Dr Thomas Yayi Boni 
X-Originating-IP: [77.238.189.64] 
To: undisclosed recipients: ; 
Reply-to: hisexcellency.drthomasyayiboni@yahoo.fr

From: “Mr.terry smith,” 
Subject: MTCN.764-057-6456 PICK UP YOUR FIRST PAYMENT OF $5,000.00 IMMEDIATLY 
X-Originating-IP: [115.178.12.223] 
To: undisclosed recipients: ; 
Reply-to: transferfund@yahoo.cn

From: “Dr. Destiny Mike” 
Subject: FUND APPROVAL / PICKUP @BANK OF AMERICA. 
X-Originating-IP: [115.178.12.240] 
To: undisclosed recipients: ; 
Reply-to: atmbank@globomail.com

MR D.P.O JOHNSON IS USING THE IP 41.216.50.26 – WHICH IS A KNOWN SCAMMER IP ADDRESS -  interpol_police_force_unit187@qatar.io  IS A SCAMMER – NAME: NWALIEJI MARCEL – USED NAME: JEFF ROBERT CARL – IP 41.216.50.26 BENIN – KNOWN SCAMMER

FOR MORE INFORMATION REGARDING THE ABOVE IP CLICK HERE.

 

212.82.109.193 – This IP which shows up as ‘originating-ip’ in the header, is a Ireland IP address and not the actual location of the scammer although they try to confuse (potential) victims into thinking they’re not African (because 95% of scammers are from Africa) This IP address has been reported and blacklisted numerous times due to scam activity. For additional information on this IP address, please click here.

41.216.50.26 – This IP which is one of the IP’s being used by the scammer, has been blacklisted on numerous sites due to alot of malicious activity including fraud, phishing scams, etc. Location of the IP is Benin Nigeria

Associated Email-addresses - dbankbenin97@yahoo.com – vytransfer@ymail.com

MR D P O JOHNSON << westernu749@gmail.com << 

41.216.50.26 has been blocked/blacklisted on Spamhaus as well as the following IPs: 41.85.169.5 << 41.85.176.19 << 41.216.50.33 << 81.91.229.189 << 41.85.161.126 << 41.216.48.17 << 41.216.40.128 << 41.216.44.198 << 41.222.192.64 << 81.91.228.131 << 81.91.228.78 <<

If you have received any scam email’s under different email addresses, names, etc under the IP address used in the email above, please let me know by copy and pasting them into the comment section. Thank you!

 
Leave a comment

Posted by on 11/27/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

“FBI OFFICE”

WARNING – INHERITANCE SCAM – ATM CARD FRAUD – NIGERIAN SCAMMER

ATTENTION: THIS SCAMMER’S IP IS BLACKLISTED AND IS CONSIDERED 100% MALICIOUS ON A SCALE FROM 1-100 – - If you’ve received a email/contact and put their IP, email address, host, etc and got brought to this post then you’re dealing with a scammer/phisher One of the anti-spam websites warning against this IP address is Spamhaus

EMAIL: Show Details
Attn please,
This message is coming to you from FBI office here, We are writing this mail to inform you that your (Inheritance winning awarded funds of $1.5million) has been totally converted into a ATM Master card and it’s to be delivered to your address via courier service, Be inform that the courier delivery company will deliver the card with all the manual and instruction both with PIN code to access the Card upon receipt. It’s the best option to receive this amount since every attempt failed, therefore you will need to contact the Barrister that helped in re-claiming the check back and converted it into an ATM visa card with his address below:

Barrister Necter Polimars
Email: barristernecter@yahoo.fr
Phone: +229-98651731

Send him your current address where the check should be delivered to and remember to indicate the Reg:code of ATM-0034 to him when making contact with him. Please also choose the courier service you would like to deliver the Card Post office is also working but could take the card much time to get to you.

Please endeavor to inform us once you have received the ATM Card.

Sincere regards
Robert S. Mueller
FBI Monitoring Team Service

HEADER:

Return-Path: <offilcefile1905@superposta.com>
X-YahooFilteredBulk: 203.188.201.151
Received-SPF: fail (domain of superposta.com does not designate 203.188.201.151 as permitted sender)
X-YMailISG: ezBF7kAWLDtzu.6WTiJebVEzmQUIcG_PNd1CwpI.7FK_4hEN Zny7zbsYgSrvRNEkKNAHyjYIgbXGVFrTSy5c9pyJLJT.I2rbeu56O.55aNRc EQ4OjPa65stTyuXMWPdmbc2Jchn20MKDdUhbt5XnuXvouwATkklv.if4Srwf PhgPk6NBUSLZVJfqBHUhuwGMHUb_GfrNTpQsO.6RIv6rP_BimD0cQ0sROi15 H3py5nbXAc.b_y9E7OCFREZrAT3GEMeHuzInLPwjPODQ7PFjnt8wP97VPfLP C3D6i4CW_Q9zsBV5HRucchEEUqIWMBzzTuLi6zi_ltdXIdLGccljYIUkibmP Ed6kSsw6JvdOn8x62zffgS3BLW6CK4UJ2WrxTzHnGsLVxdxZBcThqC8CcB.n 3tmyMvUm028RDYEH6y5spoHom3ZCQydyZ8aZ6a2CdE5op4jpI2fdBhU7ZyZN Dqdib4ZxEPlV37MS9RCDeUqBndpsXjq39haZEpSj.pWiwS_jeQggSyiCfzLA Du8yPKoCdbgkqs4xpA6z1bLRYqSSeiMETFaBAYVfqIhhHnCuGnRdSjKKcRfa QSyPrDLSrtpTgCxTxf8Wmlv5r9qoSzqTBs8y3639xGJz_TaqCvv2WGK2d0eL _2p6QjsaA6XBRYyI1olJHaBZnBshmo67FuoNCPeg2JBFZC9bJuLhNahvSF4K d9N2c5ipVC9pAsSeyKG_PiKl4ql1Y7q3l7f5IfZhlPgbTIJmn2Yxc78Fs.7b MF1ui8Dgn7t3rQehQiKwWpFk0q7WCC0IWZAAoZgM1h6Q.FP6orLyiR.Exv8D RiD.Oc4IbsY5WKoCy8ZMH.q.4LpS2Pyom.ERBABavo2ov5JSoNDBVWW6ss0t ySPJiqvMCEULgheeKtHOlWD1UGNWn5g77TqNnx8dnYwLT_Y2ONb0zrgj4.Qe TLuVJ7nQYutC4IN2EKxquWdtY9lDDBNt3EYmZ0jwRErSqsr1dKjHBzBUdu_s _0O.oK5IqEYhs8zBOHcckO_uJSRW.SQmfbTZF069RPGOwEu5ckgWIGwo
X-Originating-IP: [203.188.201.151]
Authentication-Results: mta1091.mail.ac4.yahoo.com from=superposta.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm13-vm5.bullet.mail.tp2.yahoo.com) (203.188.201.151) by mta1091.mail.ac4.yahoo.com with SMTP; Sat, 17 Nov 2012 02:43:59 -0800
Received: from [203.188.200.142] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 17 Nov 2012 10:43:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 977911.45325.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 39060 invoked by uid 60001); 17 Nov 2012 10:43:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353149034; bh=4NHRjGox1llxlGTpuwwzaXz2wAEyMSFQlVe/RepWfVQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=P0DhZFg9Mjj05/vqaDc0igv+GPAlNxBBckhxEzU4PJ/OEqkdNXv8cHYOGIrX06GRSxiYBDEXksxF+7O6itMLQryiu63e3X/TBdnGMXPpsJmwW89Nu0b5IpbVDCyBNfuzLVNzU62iHNFjxppWoL8m/2ohhLEweTQDE86CwjMFUjc=
X-YMail-OSG: UNddAlUVM1kvGGStE1FY34uiMeKn2clDYRgV8R.tDHiC3Gd LJa0arT0C
Received: from [41.223.248.96] by web92408.mail.cnh.yahoo.com via HTTP; Sat, 17 Nov 2012 18:43:53 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353149033.34956.YahooMailClassic@web92408.mail.cnh.yahoo.com>
Date: Sat, 17 Nov 2012 18:43:53 +0800 (CST)
From:
FBI OFFICE <offilcefile1905@superposta.com>
Reply-To: barristernecter@yahoo.fr
Subject: YOUR ATM MASTER CARD OF 1.5MILLION
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”176961417-1892065883-1353149033=:34956″
Content-Length: 14962

This list below shows many bad IP addresses (sending out spam, virsus, scam, phishing, fraud, etc) that are being used by web92408.mail.cnh.yahoo.com 41.223.248.98 <– The IP/Host at this IP is being used by scammers sending out 419 scams

210.169.153.71 SOFTBANK TELECO ODN.NE.JP JP 5% 95% 2% 98%
200.13.169.3 AMNET DATOS EL AMNETSAL.C SV 49% 51% 46% 54%
203.115.0.14 INTERNET SERVIC RADIUS1.SL LK 13% 87% 25% 75%
202.147.75.21 POWERLAN LIMITE DOT.NET.AU AU 18% 82% 38% 62%
202.147.75.25 POWERLAN LIMITE DOT.NET.AU AU 18% 82% 39% 61%
116.50.64.53 WAN NETWORK FOR - IN 59% 41% 61% 39%
213.210.218.169 SERVICES COMPAN NESMA.NET. SA 65% 35% 68% 32%
85.95.235.101 INETMAR INTERNE - TR 6% 94% 4% 96%
124.74.42.242 CHINANET SHANGH JWS.COM CN 51% 49% 63% 37%
217.146.183.251 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.227 YAHOO! EUROPE YAHOO.COM UK 36% 64% 58% 42%
217.146.183.253 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.233 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.88 YAHOO! EUROPE YAHOO.COM UK 36% 64% 58% 42%
217.146.183.114 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.225 YAHOO! EUROPE YAHOO.COM UK 36% 64% 60% 40%
217.146.183.243 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.235 YAHOO! EUROPE YAHOO.COM UK 36% 64% 61% 39%
217.146.183.92 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.229 YAHOO! EUROPE YAHOO.COM UK 35% 65% 58% 42%
217.146.183.112 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.247 YAHOO! EUROPE YAHOO.COM UK 35% 65% 59% 41%
217.146.183.239 YAHOO! EUROPE YAHOO.COM UK 36% 64% 57% 43%
217.146.183.249 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.231 YAHOO! EUROPE YAHOO.COM UK 35% 65% 59% 41%

barristernecter@yahoo.fr

From  41.223.248.96 – web92408.mail.cnh.yahoo.com — Cotonou – BENIN – BJ – 

Reverse DNS: 203.209.250.172 - web92408.mail.cnh.yahoo.com  – IP address originates from China and has a score of 50/100 which means approx half of the activity is BAD

From: Jonathon Finn <mooretudepo33@livedoor.net>
Subject: Ermaessigte Preise fuer Top Armbanduhkopien
From: Kelvin Richardson <pricesajebi29@lunatico.it>
Subject: Genaue Kopien von Schweizer Armbanduhren
From: Leo Grady <bakerlixiru48@cerviaambiente.it>
Subject: Top Chronometer zum ermaessigten Preis
From: Adrian Childers <perezbuxuva66@hotelclocchiatti.it
Subject: Ideale Kopien von Schweizer Zeitmessern
From: Shirley Stroud <robertssacoly93@texsaca.it>
Subject: Dieselbe hohe Qualitaet vom Edelzubehoer guenstige
From: Amy Christopher <hughesbumoco27@cooparche.com>
Subject: Sommerpreise fuers edel aussehendes Zubehoer
From: Sophia Walden <phillipsjimome53@pgelettroimpianti.
Subject: Teuer aussehendes Zubehoer zum ermaessigten Preis
Associated Harvesters for IP - 41.223.248.48
75.125.18.178 | H
70.85.113.242 | H
208.66.195.2 | H
70.85.172.170 | H
74.53.249.34 | HW
74.86.249.98 | H
74.53.243.18 | HC
74.86.209.74 | H
218.186.13.1 | H
75.125.47.162 | HSDW
67.19.250.26 | H
91.190.94.246 | HSD
216.40.222.98 | H
81.195.121.253 | HSDC
Sent From 41.223.248.96 – SOURCE: Project Honey Pot
From:  Customer Service – upsaccountservices@ups.com
Subject: Re: FW: End of Aug. Statement Reqiured
From: Logistics UPS  accountservices@ups.com
Subject: Re: FW: End of Aug. Statement Reqiured
From:  Express – upsdelivercompanyb@ups.com
Subject: Re: End of Aug. Statmeent required
From: WendyDillahunt@mailusers.make-tracks.com
Subject: Re: End of Aug. Statmeent required
From: LinkedIn Email Confirmation – emailconfirm@linkedin
Subject: Re: FW: End of Aug. Statement Required
From: Customer Support ups  upsdeliveryservices@ups.com
Subject: Re: FW: End of Aug. Stat. required
From:  accounting@graco.dhbit.ca
Subject: Re: FW: End of Aug. Stat. required
From: Sook Ritchie via LinkedIn – member@linkedin.com
Subject: Re: changelog UPD.
From:  accounting@mail420.minnesotageeks.com
Subject: RE: MAYRA – Copies of Policies.
From: Marisol Friend via LinkedIn – member@linkedin.com
Subject: RE: CARMAN – Copies of Policies.
From:  raccounting@mail2.mounted.net
Subject: RE: MEGHANN – Copies of Policies.
From: DarwinZarling@hotmail.com
Subject: Re: Security update for banking accounts.
From:  DIONNE ROBERTSON – ROBERTSONpmjgDIONNE@hotmail.co
Subject: Your tax return appeal is declined.
From:  IsmaelLAKEEQFFK2B@aol.com
Subject: IRS notification of your tax appeal status.
From: “MYUPS” <ups-shippingagency@ups.com>
Subject: Re: Fwd: Scan from a Hewlett-Packard ScanJet #575
From: UPS <customerdesk_upsdeliveryservices@ups.com>
Subject: Don’t forget about meeting tomorrow
From: Kathlene Donaldson – MiraDinehart@w-link.net
Subject: Don’t forget about meeting tomorrow
From: Milford Hinkle – RamonGriebling@heale.net
Subject: Don’t forget about meeting tomorrow
From:  Amazon.com – account-update@amazon.com
Subject: Re: Your Flight A189-45644
From:  JabariKinnon@mail.igretec.net
Subject: Re: Your Flight A07-8295
From:  LEON Doherty – DohertyLEON@hotmail.com
Subject: Re: Fwd: Your Flight A268-625505
From: Badoo – noreply@badoo.com
Subject: Fwd: Re: Your Flight A18-77208
From: “craigslist – automated message, do not reply” <ro
Subject: Fwd: Wire Transfer (30331FY38)
Example Messages Sent From 203.209.250.172 – SOURCE: Project Honey Pot
From: Mrs Purity Qaume – mrs.purityqaume2011@terra.com
Subject: From: Madam Purity Qaume
From: Mrs Purity Qaume – mrs.purityqaume2011@terra.com
Subject: From: Madam Purity Qaume.
From: jxdguq – caolaeuva@yahoo.cn
Subject: 9税4

FBI OFFICE <> offilcefile1905@superposta.com <> barristernecter@yahoo.fr <>

41.223.248.96 by web92402.mail.cnh.yahoo.com <> bobwilliamson@superposta.com <> wunion617@superposta.com <> Received: from [41.223.248.96] by web92402.mail.cnh.yahoo.com via HTTP;
X-RocketYMMF: redwoodcapitalbank@yahoo.cn
Date: Thu, 15 Nov 2012 18:51:29 +0800 (CST)
From: “Rev. Robert Williamson, ESQ.” <offilcefile1905@superposta.com>
Reply-To: wunion617@superposta.com
Subject: TRANSFER MTCN

Attention Beneficiary,

I am contacting you because I’ve sent you the first payment of $5,000 this morning from your winning funds total amount of $1.5Million USD, Therefore you need to contact a Western Union agent Mr. Jerry Young, and ask him to give you the transfer payment information and MTCN.

Agent: Mr. Jerry Young
Email: wunion617@superposta.com
Phone: +229 98644349

Please try to contact him today request him to forward the payment information to you, Remember to Indicate the registration code of EB-2520 to him when E-mailing or calling him, Also he will be sending you $5,000.00 daily as per our office discussion with him.

Do get in touch with me once you have received the transfer. Please copy this email: wunion617@superposta.com, and paste before replying to him or simply call him at his number: +229 98644349

Sincerely

Rev. Robert Williamson, ESQ.

IMF MANAGING DIRECTOR

BENIN REPUBLIC

E-mail: bobwilliamson@superposta.com
+22998644349

________________________________________

Fraudster is also pretending to be Yahoo Member Services <carecustomer625@yahoo.com> Reply-to: carecustomer625@yahoo.com — YFB - 98.139.91.80 Received from: 41.223.248.96 – web182201.mail.bf1.yahoo.com

An FBI agent would contact you by phone or atleast by your name. They also have there own domain and wouldn’t use ‘superposta’ as an email-server.

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Mr PAUL JOHNSON”

LOTTERY SCAM – NIGERIAN 419 SCAMMER – ADVANCE FEE FRAUD

UPDATE: SAME SCAMMER - DR.CHINEYE NWACHUKWU <office_dooog@yahoo.cn> [203.188.201.73] “Office Customerscare” <officecustomerscare@yahoo.com> [98.139.212.160] RECEIVED: From from [41.216.44.199] by web161602.mail.bf1.yahoo.com via HTTP; Sun, 02 Dec 2012 22:54:16 PST

Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

More IPs and information at the bottom of this post.

EMAIL: FROM DESK OF MONEYGRAM OFFICE TRANSFER  BENIN REPUBLIC

CONTACT: Mr PAUL JOHNSON.
ADDRESS; AVENUE STERMETZ  RUE 8812
E-MAI :  (officepost466@yahoo.fr)
TEL: +229 98677751

ATTENETION: BENEFICIARY,
Honestly iam just dissapointed at your behaviour because you know that i am a man of God and cannot deceive you. just pay the $139 and leave me and my God because God is watching me if i am telling you lies.

I know it is because of your past exprience that make you not to believe me but i told you before my God who is my withness that i cannot deceive you because my bible says what shall it profit a man to gain material things and loose your soul. i told you ealier just drop your old exprience and follow my intruction a man of God and you will know what it means to follow somebody that fear God.

I swear to God almight  Father. if i fail to TRANFER you fund through MoneyGram Office within 48hours after you send the $139 as i promise let God Take my life, i cannot fail you,i promise you. dont fear as soon as you sent the $139 today  please leave the rest to me and see if i am lie to you or not because i can not use my life swear because of $139

How can i swear against my life because of thistransfer of your $6000.00 per Day,but is to show you that i am telling you the truth. so please try to understand me this $139 is big amount but is too small for the amount you have to receive within 48hours okey.
Here is the informations to use send the money so that we will complete the matter once and for all.$139 only no more payment i swear to God and your your first payment will leave here immediately i receive the payment here okey. I here by giving you 100% Assurance that your  fund  is valid and you can start receing  it once you send the fee,
Here is the informations to make the payment through  moneyGram  transfer below:
RECEIVE NAME::::::::::::::::::::Anthony O IKWUNNE
COUNTRY:::::::::::::::::::::::::::::::BENIN REPUBLIC
CITY::::::::::::::::::::::::::::::::::::::COTONOU
TEXT QUESTION:::::::::::::::::::::: Almight
ANSWER::::::::::::::::::::::::::::::::::God
Amount::::::::::::::::::::::::::::::::::::::::::$139
MTCN::::::::::::::::::::::::::::::::::::::::
I am looking forward to hear from you right now and know what is holding not to make the payment as you said because i hate any thing promise and fail .
I am waiting to hear from you now.
Mr PAUL JOHNSON 
MoneyGram
COTONOU BENIN REPUBLIC: NO: 192 AKIL ROAD
TELEPHONE NUMBER +229-98677751

HEADER:

Return-Path: <westernu749@gmail.com>
X-YahooFilteredBulk: 212.82.109.207
Received-SPF: neutral (212.82.109.207 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: mAPd.zUWLDsRpeHBoGVp39xaBbCEO531WL0nnksrVHuTorC1 mHvNt1jnBO5VbOOflZxW11t5JXU8oRgD5y.Ek6z.AyRS7mQfuGPo8IjmIGR0 ohIn3_sLE_Pq68kScnHc1KZYU5UXn6B.yM2Ihxog426HDgyiTcbGG_9sjA71 f6K8ZejXSg95rtRTMvv7ZGJqYfZkjTCzWH3BhZTC3_5kWyzCnH4firB8ygWx T7Qu6_RCwUhme44PRRWA4wSJuKWOjdt02D9zfR72OjHLWZ8q34ahd6ZaytwZ SLC7UeD1TZrKFzF.ac4CUDKxdukkPu9K9bOurdcioZl8oO2KycOKnadXRAQV Y69vmBLy8vNW71oebupTdxOHYGAmYobPE0LD.3miWSIlUUjLHCYwSD8P9IQL q5.evioqyABcll0P7iJEPW3dtf5cmIG25r4U5bZc0yGW8Bxvdu6XeGBOQW7d MPnHs_2banHcLu87VJm04tIojLHMtZtAuj9oDw6ltYZd_nVP80zshGtZ9xnK .VkhkDqqlCM.WYznVnmnC5ry6p_vQsj54RNqWGVkTWiuRRjpu4RqWBuA01p. AI6aNLm4oLSoJwH3or0crtKG.bb_Qvazm5KGToT2mSkwinx6LKXWY9UnxjrS I9Fi8jIgtuOyszcjZK4F99AGOWyzksDrnBcgTUEHqbZWPBW0PQkPOZxP2vIg fVlTC0DJK0jQ3E21EhA8SSVSV5SOmVSyY42piupYs0Cd346txlWlnYSTdD1t 1ax0KHJ_LxZKndjq_deTZ4OU5KcLguYbxNwNr.NBOA.j.yYAG7pyxTis02IO 1pn0sBicFuH2pqKFG9Jdg9Qr.qigDD20if3tT1XkzzuD8_kqqBrwWFrB9oXJ L7JIpg5L5WmZr6D5K_eCWC6ws4DttkwQFMITgNRj.s_teM3IVa271lSGdhUS rYOEgg5VQy38E3wFWWAVP8ExN9GjoVA.STjq2B0oed37fRo5lRUDhKAm9NCh MmpuP0OdSKyjcSBuMWVDsCvqkmULNm277yauVgHaqPGeoWfTahUuBphuEkCf p7RuBRtDnFaiSozZSCpSyYU0o84HDT5UsdupJ7CQ3uI0AMVywoc9Qof2NVYZ ikdQvaJVP4otpZlEhnlKYrI4MFnQhmd3Y6DsNf17EnQVmOUA_7jNx6xiLkK5 RJx0ZWZTgMQb.XqhdG.NvAmbEreDqEib58rZXi7sqP4vfp65O2cX973dN6EC Me3UQOvhpqcVuTuJiYrphZ45i2vkh9YY3.pectoIkQ–
X-Originating-IP: [212.82.109.207]
Authentication-Results: mta1179.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm25-vm6.bullet.mail.ird.yahoo.com) (212.82.109.207) by mta1179.mail.bf1.yahoo.com with SMTP; Mon, 19 Nov 2012 10:08:27 -0800
Received: from [77.238.189.57] by nm25.bullet.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 18:08:23 -0000
Received: from [212.82.108.243] by tm10.bullet.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 18:08:23 -0000
Received: from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 18:08:23 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 353950.72023.bm@omp1008.mail.ird.yahoo.com
Received: (qmail 89519 invoked by uid 60001); 19 Nov 2012 18:08:22 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353348502; bh=VtTxWO99qmgFXC+U9mZGcc8fJuIFk1rs7b48t39FXvs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Q3wJNOT7jZyDuKNEONPsW5buywODWICBLkHQu3kBitYXpk4LKXjWK0KLfw0EUkfWMVhOwWdy+5nlGbdhqLLlltc+K/TdeIXjLcsc7fGaqDx1IjBcjqJ3zemO/dFRnU7YCAnVCE3QfPjB6NnKGRRjZQavB5Ww6ngF0E21ln+VDOI=
X-YMail-OSG: gKJenGAVM1m5yvXDjYGZq6FKSO3LQ6WOe9EyxxlKdIobrTi x7eRybZPH
Received: from [41.216.44.199] by web171303.mail.ir2.yahoo.com via HTTP; Mon, 19 Nov 2012 18:08:22 GMT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353348502.84732.YahooMailClassic@web171303.mail.ir2.yahoo.com>
Date: Mon, 19 Nov 2012 18:08:22 +0000 (GMT)
From:
Mr PAUL JOHNSON <westernu749@gmail.com>
Reply-To: officepost466@yahoo.fr
Subject: CONTACT: Mr PAUL JOHNSON.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”-1953309981-1231263434-1353348502=:84732″
Content-Length: 7829

Mr PAUL JOHNSON <> westernu749@gmail.com <> Reply-to: officepost466@yahoo.fr <>

41.216.44.199 – Nigerian Scammer’s IP address has a ‘BAD’ reputation according to Reputation Authority – The IP location is in Cotonou – Atlantique – Benin - Nigerian — between Lagos & Lome — IP points nexts to Benin Marina Hotel

The number of this IP address is 41.216.44.199. This IP address is related to Benin, and registered in Cotonou, Littoral. IP Country code is BJ. IP address is assigned to “Benin Telecom SA”. In organization “Benin Telecom SA”. IP address longitude is 2.4333 and latitude is 6.35.

Some other names and email addresses used in scams under the IP 41.216.44.199 - emb.asty@yahoo.co.uk <> 77.238.189.59 – Nigerian Immigration Service <> Mr Joshua Alexander emb.asty@yahoo.co.uk <> nigeriaimmigration_services@yahoo.com <> 98.139.91.100 <> western_ubb@yahoo.fr <> 41.216.44.199 – web164610.mail.gq1.yahoo.com <> 41.216.44.199 – web29904.mail.ird.yahoo.com <> 41.216.44.199 – web164610.mail.gq1.yahoo.com <> 98.139.91.100 <> western_ubb@yahoo.fr <> 106.10.151.198 - vms172055.mailsrvcs.net <>  41.216.44.199 –  web190602.mail.sg3.yahoo.com <> 106.10.151.198 - post1369@yahoo.com.hk <>nm7.bullet.mail.ird.yahoo.com <> 77.238.189.21 - vms169127.mailsrvcs.net <> 77.238.189.21 <> peterusman8@yahoo.fr <> Rev Tony Johnson <> [115.178.12.209 <> plcuu3@yahoo.fr <> 41.216.44.199 - web190606.mail.sg3.yahoo.com <> 41.216.44.199 - web190805.mail.sg3.yahoo.com <> DR JIM LOWRENCE
RE: IRREVOCABLE RELEASE OF YOUR PAYMENT - 115.178.12.209 - wstrnnnoffice79@gmail.com <> 41.216.44.199 -  web171512.mail.ir2.yahoo.com -- REV FRANK EZE -- Subject: Re : WEB SITE.WWW.WESTERNUNION.COM - 77.238.189.35 -- Reply-to: w.iont_ernunion2011@yahoo.com.hk <> 41.216.44.199 - web29104.mail.ird.yahoo.com -- 77.238.189.196 -- post1369@yahoo.com.hk <> Mr Allen Bells - 41.216.44.199 - web27506.mail.ukl.yahoo.com -- 
217.146.182.249 -- atmmasterdepartmentoffice@yahoo.com <> 41.216.44.199 - web95215.mail.in2.yahoo.com - WESTERN UNION OFFICE - 121.101.151.239 - www.western40@yahoo.fr <> 41.216.44.199 - web29305.mail.ird.yahoo.com - MR MIKE OBI  - Money Gram International Bank Transfer - 77.238.189.196 - moneygramofficebenin45@yahoo.fr <>  41.216.44.199 - web65804.mail.ac4.yahoo.com - DIPLOMATIC MR ERICI BROWN - 98.139.52.215 - diplomatericb@ymail.com <>

web171303.mail.ir2.yahoo.com -  - 188.125.83.118

[203.188.201.73] mta1299.mail.sk1.yahoo.com RECEIVED: from [41.216.44.199] by web92416.mail.cnh.yahoo.com

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Don Bright”

WARNING – NIGERIAN 419 SCAMMER

INFO: Don Bright <> fredwilliams3@rediffmail.com <> expressprocessatmcardbenin53@yahoo.com.tw

SUBJECT: FROM ECO WAS ATTORNEY  MR JAMES GEORGE ATM DEPARTMENT

FROM ECO WAS (ATTORNEY ) MR. .JAMES GEORGE
IN COTONOU BENIN REPUBLIC:
 NO:171 AKIL ROAD
 
Attn; Dear Customer,
 Greeting !! 
I wish to acknowledged you that we have finally succeeded in getting your Over due Payment worth’s of $3.8million’s United State Dollars out from Economic Community of West African States (E.C.O.W.A.S) department with the help of Mr.James George Attorney General of Federal High Court of Justice Benin Republic which acts as your foreign Attorney representative here in Benin Republic before his back to Paris France to compete his job there. 
However I am bring to your attention today that we are finally instructed for the immediate conversion of your ($3.800.000.00 USD) into an ATM VISA CARD by which you can easily received it via United Bank for Africa  Cotonou Benin Republic
Regards your fund lump sum of $3.800, 000.00USD via ATM VISA CARD has being approved and mandated by the Government of Benin. So this instruction is reaching you right now to kindly Contact  the Director of ATM VISA CARD CENTER of United Bank for Africa PLC : Cotonou  an “ATM VISA CARD CENTER”contact information’s is below.
ATM Visa Card Claiming Department
United Bank for Africa ( U B A)
Director: Mr. Ken Brown
Visa Card claiming Department
Email expressprocessatmcardbenin53@yahoo.com.tw    Tel: +229-97804183

While contact him immediately  request for the card copy and get back to us and below is the needed information’s or form to fill  for the Card processing and production which they demanded you to re-confirm to them by yourself as the beneficiary by using this code of conduct  “ATM-0321″, As Subject alright.
Your Full Name::::::::
Country::::::::
City::::::::
Home address::::::::
Telephone::::::::
Fax::::::::
Code::::::::
A copy of your id::::::::

Note that because of impostors, The bank also issued you their code of conduct,which is “ATM-0321″ so remember to indicate this code while contacting the ATM VISA CARD CENTER whereby using it as your subject alright.
Thanks for your maximum understanding co-operation and may God Bless you.
Regards
Don Bright
Chief Justice of Benin

 

HEADER:

Return-Path:   <fredwilliams3@rediffmail.com>
X-YahooFilteredBulk:   203.188.201.151
Received-SPF:   softfail (transitioning domain of rediffmail.com does not designate 203.188.201.151 as permitted sender)
X-YMailISG:   kXm_l1sWLDulJeDnOLmSYdHmIqwp9r2k_ROYymTodmz266na zbWmm1RAwqAGvVzdkwDVIbDT8aDMccE0hDmzwJtDnlV4iJuFz0KcXVf1dBak x98QBBYy.rvg1pyEHXGwIyg0vfjfZzaH0cL2NhozBoR7T_SswQDqjPkpilTa 9zxjg2xwxJWYGVKBP6a2QUEmK3WpQosxrAVpSWwkGBZg7eVeoGsZDVA8NS5L GXQxxkjBDQK2EhPR0e6buJvQZBVYdWxOjzJaKeW3LkzKD_L.cqJXriH9pi0N a9gjHsvYsVZYjN5HmL7qbB1fOyNvL7A0y_kkrCIzGnq7tQWDOYsY8Szbpt6. wUI265q4YMhRGPG57mtQh4MqOj5vTQWQ7k8GODjOiFp0HD8EaShYjft3mra2 C_47mjLCermdzu7q8jRpFeuy.iiolsQV79zOfbeSP12ZhqrSPSaF4T2cx2Je dcVjk6guaZJMhSdnV5vjprupXr65wFz.T4l_kWsL446Pp5D.MrHn6DFmr.QQ wwbxEuJf.dYTCjEdTv3pR6agpyKx0H6efevBOMagtK391o8pFLXmZwl7eCTJ N_96Hs_mtE9u6YvXmTwAhNuDzbCI9bZq9lOiUg5Je0lnK9ECjTz6wN8DhErI _HKSfh6HYtEWjX41pyCBu_AqC.BPf9.apP4wnqPa4Swvf6nK_yd4JLPy5hQ4 QZk87kD3_aGkwheBtgxJYtaIXuBDZArx6K7eibTJR4wEWXCKoEMZKqfIfuTg E5J50THp.313pUu1skrpRY4W9mneEQYmVYnei3tje.0qjxtMAnE8EF0NFBPu 6C512x7CKXMg5jX8NC3U6dUxxQwBPkMGfXFkB1uLcKbz20aZCm3XVSe2RCwJ MiTkcht7A8Mh1uKqPfT03S4_W57g12Vd0rr8nAtzPoa7PReYYsq8cRUJWwOQ YTUr4LnYBE1VgmlOXv6cF_H9DZgwjMUFn7Jjwko_VAscFQcVfBtSqwzh7aF_ a2Myv2f0jlv.x8iqZtoJdMZ4QFeqm2lyK.z5vT_fjtINJACHdd.c.rYMFjIs s2Ki0.H4pWR9AlbhLbzWzS6We6y8GR84DuP8bfLv9tnzxPI6Y8wXeNX_PGPU ngcHDVItOGamaK8YRs3UA6Hh47uLPhQQ_bR6QtxSQ9dylIHZyGC2LFEezNIB sO95KtmJdbtuFkwDPvP498wr.UEGHikyo6zfrcF6sMvSRqO_qSFK9WL6di.Q cSu_k8mhBhCBX7UflKUBgnJpVLOjNapnlBuYCIUAdlJfPyzAb7qCXLBfIO61 ufTgbAVKdinUnJtyqf2z2ocHbeY8x7k3RtTt407n6zAyJnuWdacA4JR12kuR GzIeiw–
X-Originating-IP:   [203.188.201.151]
Authentication-Results:   mta1219.mail.mud.yahoo.com from=rediffmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm13-vm5.bullet.mail.tp2.yahoo.com) (203.188.201.151) by mta1219.mail.mud.yahoo.com with SMTP; Mon, 12 Nov 2012 20:05:36 -0800
Received:   from [203.188.200.80] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 13 Nov 2012 04:05:33 -0000
Received:   from [203.209.230.76] by tm1.bullet.mail.tp2.yahoo.com with NNFMP; 13 Nov 2012 04:05:33 -0000
Received:   from [127.0.0.1] by omp105.mail.cnb.yahoo.com with NNFMP; 13 Nov 2012 04:05:29 -0000
X-Yahoo-Newman-Property:   ymail-3
X-Yahoo-Newman-Id:   882944.40828.bm@omp105.mail.cnb.yahoo.com
Received:   (qmail 23703 invoked by uid 60001); 13 Nov 2012 04:05:29 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1352779529; bh=ZStJQptkpiRtW9IHly4mG/teeC4Vi9ewmbkLGyxQEnw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=s41UtQ0D/KXQzDMgifijBIXVjLNxUR1ahFoNSwOa5shnso/PYBkPTZZBb2hauAI82cgX1+T8RA0TCkf5LfBmjlbI1n6GWWodpb9OueyaXHgU7l7t1hgqlXHBbeUDAAxLdDowSoVrHuaexcgdtaReePY0PgpW6Gn1rBq1SI+rbvo=
X-YMail-OSG:   i3LOjoUVM1lxIQLS9kVi4Y8kX8wV_wAnVTfrRQhVear54pa qPUcdSwwe
Received:   from [41.138.90.38] by web92402.mail.cnh.yahoo.com via HTTP; Tue, 13 Nov 2012 12:05:28 CST
X-Mailer:   YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID:   <1352779528.23247.YahooMailClassic@web92402.mail.cnh.yahoo.com>
Date:   Tue, 13 Nov 2012 12:05:28 +0800 (CST)
From:  
Don Bright <fredwilliams3@rediffmail.com>
Reply-To:   expressprocessatmcardbenin53@yahoo.com.tw
Subject:   FROM ECO WAS (ATTORNEY ) MR. .JAMES GEORGE ATM DEPARTMENT
To:   undisclosed recipients: ;
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”373869220-595389065-1352779528=:23247″
Content-Length:   22280
 
1 Comment

Posted by on 11/20/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“HOUSE OF LORD’S ORGANIZATION UK LONDON”

NIGERIAN 419 SCAM – COUNTERFEIT CHECK – FRAUD

UPDATE: This Nigerian scammer has emailed once again with a similar email but different IP and header information. He is still going under the email address of info@lordsdept.org but with the reply to address: consultationdept@yahoo.com - [213.154.64.102] -  41.203.79.249 – For more information on the updated email please click: HOUSE OF LORD’S ORGANIZATION UK LONDON 12/01/12

EMAIL: ATTN PLEASE

The HOUSE OF LORD’S ORGANIZATION UK LONDON Have just concluded the meeting with the board of Trustees of United Nations Organization and
Representative of all the financial institutions, The meeting that has
been for the past eight months on financial matters, It has been agreed to
release all long terms debt, These are the classes we are looking into:
those whom has been one way or the other denied their Inheritance or
Contract payment/award payment due to corrupt official services,

After our mutual investigation in the recent schedule for payment of
outstanding debts incurred since 1999 to 2012 according to your file
record where we got your email address; your payment is categorized under
section {B}: Contract type: Lottery, inheritance, unpaid contract funds
Undelivered Lottery fund, Attn: Beneficiary, We have decided to bring to
your attention, that you were listed as one of the beneficiary, The
executive council Have decided to pay as many they have their file record
on their desk on a direct wired transfer, The total sum of $5.5usd has
been approved under your file according to elect,

Contact the processing/paying manager for your direct payment of US$5.5M
(five Million Five Hundred Thousand United States Dollars), you are
directed to contact the International Remittance Department of Benin
Republic who is In-charge of the payment
via E-mail:
E-mail: managementfile1@gmail.com
E-mail: olusegunoniwon@ymail.com
Phone: +229-67406742
CONTACT PERSON: MRS. ANDRIANA U OLUSEG
INTERNATIONAL FUND REMITTING DIRECTOR
HOUSE OF LORDS BENIN REPUBLIC
Also provide the following detail to her for immediate release of your fund,
================================================================
Also it is very necessary and important that you send us an e-mail
containing your vital information?? As requested below so that you will be
given an immediate response and directives on what to do next:

Full Names:
Address:
City:
Zip/Postal Code:
State:
Country:
Present Occupation:
Company Owner:
Company Name:
Gender:
Age:
Reachable Tel#/Mob:…………..*No Voice Mail Service*
Fax:

THIS REQUIREMENT MUST BE PROVIDED TO HER COMPLETELY,
================================================================
As soon as the International Remittance Department in your file location
receives your information, your US$5.5M will be Transfer to your nominated
Bank account. this payment terms is to keep a clean slate of all debts
owned by the government and company to individuals either by contract or
award fund, we hereby plead for any inconvenient that you might have
received by any of this corrupt officials, The United Nations Organization
will not be interested in your story of not receiving your payment if you
fail to abide to this Instruction.

Yours Faithful,
Mr. Anderson Paul
Public Relation Officer
Strand Bridge House 138-142 Strand,
City of London,
E-mail: com.unit@net.hr
Hot line +440-2087599090
OUR REF: H/L/UNN/APXB/TF/08
IMMEDIATE PAYMENT
#:WB/PC/FMF/MIN/UN/APXB/08
HOUSE OF LORDS LIAISON HEADQUARTERS UK LONDON OFFICE

SORRY IF YOU RECEIVED THIS MESSAGE IN JUNK BOX IS DUE TO OUR SLOW NETWORK.

HEADER:
Return-Path: <info@lordsdept.org>
X-YahooFilteredBulk: 213.154.64.102
Received-SPF: none (domain of lordsdept.org does not designate permitted sender hosts)
X-YMailISG: 5SdGaNQWLDvvYHp8wyYLuM2f3bwOEdaSUKV6XBBVe6hWpcz0 mFuo8Y2oaNrqDj22Ohzu0oL9_xUAUGpVAT9WTkrNfXpfhRZhAzaCMjFQLZSZ l9VFNPyEtPWan6MvVjrQ3ovhzmJHN_1SHU9AVi3jpqKvS2wEdVTlvyfMK8KR jksTXAKUE6Sf_5IfpN0xy9ui5SAV6IU5HKJsLFDw3Z.dBMout_YpKyucZmaB AO2wv.9CZjpQRw.VjOZWwN35uNWrk3TMozf51DdpKZ1OB4eKabo2WddedkBH TzgtRYd0FWnyKtcvDybxiULHFetbGZdL74D0tCktUsIVKWdpPwfkpXrItOIp zqhg_wl3_nNK2oKL7.24CKdBAuNMBd1bZAvYKGykECCpUPFKVWPWYInEY8sp hjGiu7iZL2ezBTU34qSjLbwrvzINuGB0HXwR7sXDMku0XaFl8AxSvgtqK5jz iyroR6IZtROq8oQo_G0S0WtcxQJqBq_tqYfuU1yL5Q1y9Vv8gBYfO2ZKQIsn 4tp78g9ek5p_ldZjrH0H3pb8VSFzwgb1YlPWdfwjz3V4eUdQ8Wc6LvdV1Bk3 Ebo9LOewB28iJlr3vRdbuEP7jJYkRurMtiENPZ4OpAWrsgtTHRjh4.K9ZGW. YbbOacCIzO5V3F7GGXiZ3ScdhF3XWt9pIfdx7b_Wf72rsHQbLIGERr2OtDWc HC.sJVS7KnS13B5ZG9Kw9r3fAwduJ756DJIokZ6T02UQ4BV94Boh4HVm2nE1 rLLM202..KURsn2Y56xHwWZkl2OJ5KeL_KOdbw0T2xg59OQbkPJ4U7p2px0P wrE_MqHYmHnNPEeeGkdQMoHrpfTvX_VA5sN9gyuiEvFEQH3SeHLl1bujoh2q JPDhnCU8MyU1VNw0mglmQU8ukdVaXyvmw6iCU.ExiST2nU7sAVrTpyZD3T74 mHMQIzhhccOtUfYNdc5ieCMjdeiFYrtiWSn1M7C.1.5FZl3UHh557It28nRc kyO9hTQahnXehBhBIBLgX0SeUbuX1c2xyPeHZ0hS1KWadku2Btw_i7MM7d8u lRdz9hQK9tvzJ0e3THNbwaRLGKGDi0dDufeH0dm.f8aUYH6DOHAMk4d_Q62o E0TcNsdP3qstS7isosqDtZ6nzZ5d.0O.RyEx.YQGNuz6ij7ZXKtqAMzjU6il qqd3oatNO8mZOrrt345Mymz1hOG36kPJm4xF1uV9VYG8TCUv_bpceIPN_PZa L1npBNUz14RSXUwVtzWamCoGiX7lkXvz9mcWS5fmuXatiSF3kJrFJrjScfz9 xVNjcF3S4JFC6hBkQvZng1YkHWIo5Q52g0ZaHBNKayYrFvDGZ_umEobzZyMU wdXaZlsiAHL3Squ1Mzqo3pWml0BcKp5SpZVuIvRTSVTPSJ0nSfrQkKTUNn1L 7QIg9MknXIB5xWPBPFih6H6mqsgWZXdyEEHeMVvDDqQqrOymGLlnkSeQyTjT ku6cuXmXNnnj41LaKoxjWbx0mNJ4PijZaELLzJfDnAoEuiDFi6PNesR4vUe3 rg–
X-Originating-IP: [213.154.64.102]
Authentication-Results: mta1132.mail.bf1.yahoo.com from=lordsdept.org; domainkeys=neutral (no sig); from=lordsdept.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtpgp.orange.sn) (213.154.64.102) by mta1132.mail.bf1.yahoo.com with SMTP; Tue, 13 Nov 2012 08:46:37 -0800
Received: from sunumail.sn (HELO srv1-smtfree-msg.orange.sn) ([213.154.64.61]) by smtpgp.orange.sn with ESMTP; 13 Nov 2012 00:17:42 +0000
Received: from [213.154.64.43] (helo=www.sunumail.sn) by srv-smtfree.orange.sn with smtp (Exim 4.43) id 1TY4iV-0006iG-FO; Tue, 13 Nov 2012 00:51:03 +0000
Received: from 41.216.50.32 (SquirrelMail authenticated user david_fletcher) by http://www.sunumail.sn with HTTP; Tue, 13 Nov 2012 00:51:03 -0000 (GMT)
Message-ID: <55106.41.216.50.32.1352767863.sunumail@www.sunumail.sn>
Date: Tue, 13 Nov 2012 00:51:03 -0000 (GMT)
Subject: NOW CONTACT THE GLOBAL FUND REMITTING OFFICE FOR YOUR APPROVED CHEQUE.
From:
HOUSE OF =?iso-8859-1?Q?LORD=92S_ORGANIZATION_UK_LONDON?= <info@lordsdept.org>
Reply-To: managementfile1@gmail.com
User-Agent: SUNUMAIL/1.4.2
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: info@lordsdept.org
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to false
Content-Length: 3748
702034464
9291969056
Below is a list of other email headers which were sent by this same scammer.

Return-path: freshtools@wanadoo.fr
Received: from smtpgp.orange.sn ([unknown] [213.154.64.102])
by vms172061.mailsrvcs.net
(Sun Java(tm) System Messaging Server 7u2-7.02 32bit (built Apr 16 2009))
with ESMTP id 0M4M00FBGCMOLW80@vms172061.mailsrvcs.net for x;
Sat, 26 May 2012 02:25:37 -0500 (CDT)
Received: from sunumail.sn (HELO srv-smtfree.orange.sn) ([213.154.64.61])
by smtpgp.orange.sn with ESMTP; Fri, 25 May 2012 07:52:17 +0000
Received: from [213.154.64.43] (helo=sunumail.sn) by srv-smtfree.orange.sn with
smtp (Exim 4.43) id 1SXpo6-0007u1-1u; Fri, 25 May 2012 08:23:34 +0000
Received: from 197.251.184.232 (SquirrelMail authenticated user hackk)
by sunumail.sn with HTTP; Fri, 25 May 2012 08:23:34 +0000 (GMT)
Date: Fri, 25 May 2012 08:23:34 +0000 (GMT)
From: “HACK TOOLS FOR SALE” freshtools@wanadoo.fr
Subject: SELLING WORLD WIDE EMAILS, MAILER, SMTP, WEB MAIL, BANK LO GIN,
ATM TRACK 1&2, CC V, RD P, SHELL, CC,
ALIBABA HACKING SOFTWARE OF ID AND PASSWORD.
X-Originating-IP: [213.154.64.102]
Reply-to: hackk@smtp.com
Message-id: 28154.197.251.184.232.1337934214.sunumail@sunumail.sn
MIME-version: 1.0
Content-type: text/plain; CHARSET=US-ASCII
Content-transfer-encoding: 7BIT
Importance: Normal
X-Priority: 3
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: freshtools@wanadoo.fr
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to
false
User-Agent: SUNUMAIL/1.4.2
Original-recipient: rfc822;x

Return-path: freshtools@wanadoo.fr
Received: from smtpgp.orange.sn ([unknown] [213.154.64.102])
by vms172075.mailsrvcs.net
(Sun Java(tm) System Messaging Server 7u2-7.02 32bit (built Apr 16 2009))
with ESMTP id 0M4M000XKBUHW020@vms172075.mailsrvcs.net for x;
Sat, 26 May 2012 02:08:43 -0500 (CDT)
Received: from sunumail.sn (HELO srv-smtfree.orange.sn) ([213.154.64.61])
by smtpgp.orange.sn with ESMTP; Fri, 25 May 2012 07:52:17 +0000
Received: from [213.154.64.43] (helo=sunumail.sn) by srv-smtfree.orange.sn with
smtp (Exim 4.43) id 1SXpo6-0007u1-1u; Fri, 25 May 2012 08:23:34 +0000
Received: from 197.251.184.232 (SquirrelMail authenticated user hackk)
by sunumail.sn with HTTP; Fri, 25 May 2012 08:23:34 +0000 (GMT)
Date: Fri, 25 May 2012 08:23:34 +0000 (GMT)
From: “HACK TOOLS FOR SALE” freshtools@wanadoo.fr
Subject: SELLING WORLD WIDE EMAILS, MAILER, SMTP, WEB MAIL, BANK LO GIN,
ATM TRACK 1&2, CC V, RD P, SHELL, CC,
ALIBABA HACKING SOFTWARE OF ID AND PASSWORD.
X-Originating-IP: [213.154.64.102]
Reply-to: hackk@smtp.com
Message-id: 28154.197.251.184.232.1337934214.sunumail@sunumail.sn
MIME-version: 1.0
Content-type: text/plain; CHARSET=US-ASCII
Content-transfer-encoding: 7BIT
Importance: Normal
X-Priority: 3
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: freshtools@wanadoo.fr
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to
false
User-Agent: SUNUMAIL/1.4.2
Original-recipient: rfc822;x

This Scammer has sent more then one email and according to ProjectHoneyPot this IP address is malicious and is considered a ”Dictionary Attacker”

Location: BENIN – NIGERIA (BJ)

Example User Names Used By 41.216.50.32 – AS28683
User-namebuh
User-namebuhg
User-namebuhgalter
User-namebuhgalteria
User-namenastya
User-namenatalya
User-namenatasha
User-namenataly
User-namenatah
User-namenaumov
User-nameburov
User-namenatash
User-namenazarov
User-namenataha
User-namenasty
User-namenaumovsvetlana
User-namenationalpf223
User-nameneddi
User-namendrey.lashenov
User-namendrew
User-namenationwidedk1
User-namenataly1
User-namenekol

NAME & EMAIL-ADDRESS: HOUSE OF LORD’S ORGANIZATION UK LONDON <> info@lordsdept.org <> com.unit@net.hr <> managementfile1@gmail.com <>  olusegunoniwon@ymail.com <>  freshtools@wanadoo.fr <> hackk@smtp.com <>

from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
Follow

Get every new post delivered to your Inbox.

Join 58 other followers

%d bloggers like this: