RSS

Tag Archives: Paul Johnson

“Dr. Robert Williams” a.k.a “Mr. John Williams” a.k.a “Peter John” a.k.a “Mr. John Mark”

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: This fraudster has been very persistent, spamming my inbox for months under various names, addresses and IPs including Barrister Nector FBI OFFICE Scam as well as (MR) Paul Johnson Lottery Scam – Below is a list of several emails sent by this scammer.

Subject: HELLO ,
From: Mr. John F. Williams peterjohn848@yahoo.cn

HELLO ,

I have contacted you because I’ve sent you the first payment of $5,000 today from your winning funds total amount of $1.5Million USD,Therefore you need to contact western union agent Mr. John Mark for him to give you the transfer payment information and MTCN.

Agent: Mr. John Mark
Email: ( nunionwester165@yahoo.fr )
Phone: +229 68433916 nunionwester165@yahoo.fr

Please try to contact him today for him to forward the payment information to you, Remember to Indicate the registration code of EB-2520 to him when e-mailing or calling him, Also he will be sending you $5,000.00 daily as per my discussion with him, this is what he needed from you to send you the first payment.

You’re full Name…………
Your Country………………..
You’re Telephone Number……..
Your Age……………………..
You’re Copy of Your ID………..
Your Sex …………………….

Do get in touch with me once you have got the transfer.
Sincerely,
Mr. John F. Williams.

Return-Path: <peterjohn848@yahoo.cn>
X-YahooFilteredBulk: 106.10.151.65
X-Originating-IP: [106.10.151.65]
Authentication-Results: mta1575.mail.ne1.yahoo.com
Received: from 127.0.0.1 (EHLO nm23-vm2.bullet.mail.sg3.yahoo.com) (106.10.151.65) by mta1575.mail.ne1.yahoo.com with SMTP; Tue, 09 Apr 2013 13:53:54 +0000
Received: from [106.10.166.120] by nm23.bullet.mail.sg3.yahoo.com with NNFMP; 09 Apr 2013 13:53:51 -0000
Received: from [106.10.151.138] by tm9.bullet.mail.sg3.yahoo.com with NNFMP; 09 Apr 2013 13:53:51 -0000
Received: from [127.0.0.1] by omp1006.mail.sg3.yahoo.com with NNFMP; 09 Apr 2013 13:53:51 -0000
Received: from [41.79.217.121] by web15303.mail.cnb.yahoo.com via HTTP; Tue, 09 Apr 2013 21:53:46 CST
From: “Mr. John F. Williams” <peterjohn848@yahoo.cn>
Reply-To: nunionwester165@yahoo.fr
Subject: HELLO ,

 +22968433916 nunionwester165@yahoo.fr Mr. John F. Williams
FBI OFFICE INHERITANCE LOTTERY SCAM

Subject: TRANSFER MTCN

Hello,

I am contacting you because I have sent you the first payment of Euro 5, 000 today from your winning funds total amount of Euro1.5Million , Therefore you need to contact the western union agent Rev. Jerry Young for him to give you the transfer payment information and MTCN to pick up the money at WU Branch over there.

W.U Agent: Rev. Jerry Young
Email: wu_payment0@yahoo.com.my
Phone: +229 98644349

Please try to contact him today and ask him to forward the payment information to you, remember to indicate the funds registration code of EB-2520 to him when e-mailing or calling him, Also he will be sending you Euro5,000.00 daily as per our board discussion with him.

Do get in touch with me once you have received the transfer.

Sincerely,
Dr. Robert Williams
IMF Managing Director Benin.
E-mail: bobwilliamson@superposta.com

HEADER:

Return-Path: <yiyu2016@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.71
X-Originating-IP: [203.188.201.71]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=superposta.com; domainkeys=fail (bad syntax); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15-vm3.bullet.mail.tp2.yahoo.com) (203.188.201.71) by mta1285.mail.ac4.yahoo.com with SMTP; Wed, 12 Dec 2012 02:55:25 -0800
Received: from [203.188.200.82] by nm15.bullet.mail.tp2.yahoo.com with NNFMP; 12 Dec 2012 10:55:20 -0000
Received: from [202.165.102.49] by tm3.bullet.mail.tp2.yahoo.com with NNFMP; 12 Dec 2012 10:55:20 -0000
Received: from [127.0.0.1] by omp103.mail.cnb.yahoo.com with NNFMP; 12 Dec 2012 10:55:20 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 348533.56547.bm@omp103.mail.cnb.yahoo.com
Received: (qmail 16962 invoked by uid 60001); 12 Dec 2012 10:55:19 -0000
Message-ID: <1355309719.81269.YahooMailClassic@web92104.mail.cnh.yahoo.com>
Date: Wed, 12 Dec 2012 18:55:19 +0800 (CST)
From: “Dr. Robert Williams” <officefilepayment@superposta.com>
Reply-To: westernunionmoneytransfer403@yahoo.fr Western Union Money Transfer
Subject: TRANSFER MTCN

FROM: Dr. Robert Williams <officefilepayment@superposta.com> REPLY-TO: westernunionmoneytransfer403@yahoo.fr RETURN-PATH: yiyu2016@yahoo.cn
ANOTHER ADDRESS GIVEN BY SCAMMER – bobwilliamson@superposta.com
RECEIVED IP: 41.223.248.96 LOCATION: Benin, Nigeria

Below is a phishing scam email / header sent by the same received IP as the scammer above. The originating (fake) IP are different but if you receive a unknown email with any IP’s shown on this post, you’re more than likely dealing with a scammer.

Return-Path: <carecustomer625@yahoo.com>
X-YahooFilteredBulk: 98.139.91.80
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-Originating-IP: [98.139.91.80]
Authentication-Results: mta1031.sbc.mail.sp1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 8.224.216.104 (EHLO fgateway15.isp.att.net) (207.115.11.45)
by mta1031.sbc.mail.sp1.yahoo.com with SMTP; Sun, 23 Sep 2012 07:26:25 -0700
Received: from nm10.bullet.mail.sp2.yahoo.com ([98.139.91.80])
by att.net (frfwmxc15) with SMTP
id <20120923141959f01008dmffe>; Sun, 23 Sep 2012 14:19:59 +0000
X-Originating-IP: [98.139.91.80]
Received: from [72.30.22.77] by nm10.bullet.mail.sp2.yahoo.com with NNFMP; 23 Sep 2012 14:19:59 -0000
Received: from [66.94.237.111] by tm11.bullet.mail.sp2.yahoo.com with NNFMP; 23 Sep 2012 14:19:59 -0000
Received: from [127.0.0.1] by omp1016.access.mail.mud.yahoo.com with NNFMP; 23 Sep 2012 14:19:59 -0000
Message-ID: <1348409998.34442.YahooMailClassic@web182201.mail.bf1.yahoo.com>
Date: Sun, 23 Sep 2012 07:19:58 -0700 (PDT)
From: Yahoo Member Services <carecustomer625@yahoo.com>
Reply-To: carecustomer625@yahoo.com
Subject: Yahoo Warning

EMAIL: Dear Subscriber,
Your E-mail account has exceeded its limit and needs to be verified, if not verified within 24 hours, 
we shall suspend your account.Click to verify your email account.
Please note: You serve the risk of losing your account permanently if it is not verified.
Thank you for your usual co-operation.
We apologize for the inconvenience

Sincerely,
Yahoo! Mail Product Management.
Copyright © 2012 Mail! Inc. (Co. Reg. No. 2344507D)All Rights
Reserved. Intellectual Property Rights Policy

 
Leave a comment

Posted by on 12/14/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

“Mr PAUL JOHNSON”

LOTTERY SCAM – NIGERIAN 419 SCAMMER – ADVANCE FEE FRAUD

UPDATE: SAME SCAMMER – DR.CHINEYE NWACHUKWU <office_dooog@yahoo.cn> [203.188.201.73] “Office Customerscare” <officecustomerscare@yahoo.com> [98.139.212.160] RECEIVED: From from [41.216.44.199] by web161602.mail.bf1.yahoo.com via HTTP; Sun, 02 Dec 2012 22:54:16 PST

Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

More IPs and information at the bottom of this post.

EMAIL: FROM DESK OF MONEYGRAM OFFICE TRANSFER  BENIN REPUBLIC

CONTACT: Mr PAUL JOHNSON.
ADDRESS; AVENUE STERMETZ  RUE 8812
E-MAI :  (officepost466@yahoo.fr)
TEL: +229 98677751

ATTENETION: BENEFICIARY,
Honestly iam just dissapointed at your behaviour because you know that i am a man of God and cannot deceive you. just pay the $139 and leave me and my God because God is watching me if i am telling you lies.

I know it is because of your past exprience that make you not to believe me but i told you before my God who is my withness that i cannot deceive you because my bible says what shall it profit a man to gain material things and loose your soul. i told you ealier just drop your old exprience and follow my intruction a man of God and you will know what it means to follow somebody that fear God.

I swear to God almight  Father. if i fail to TRANFER you fund through MoneyGram Office within 48hours after you send the $139 as i promise let God Take my life, i cannot fail you,i promise you. dont fear as soon as you sent the $139 today  please leave the rest to me and see if i am lie to you or not because i can not use my life swear because of $139

How can i swear against my life because of thistransfer of your $6000.00 per Day,but is to show you that i am telling you the truth. so please try to understand me this $139 is big amount but is too small for the amount you have to receive within 48hours okey.
Here is the informations to use send the money so that we will complete the matter once and for all.$139 only no more payment i swear to God and your your first payment will leave here immediately i receive the payment here okey. I here by giving you 100% Assurance that your  fund  is valid and you can start receing  it once you send the fee,
Here is the informations to make the payment through  moneyGram  transfer below:
RECEIVE NAME::::::::::::::::::::Anthony O IKWUNNE
COUNTRY:::::::::::::::::::::::::::::::BENIN REPUBLIC
CITY::::::::::::::::::::::::::::::::::::::COTONOU
TEXT QUESTION:::::::::::::::::::::: Almight
ANSWER::::::::::::::::::::::::::::::::::God
Amount::::::::::::::::::::::::::::::::::::::::::$139
MTCN::::::::::::::::::::::::::::::::::::::::
I am looking forward to hear from you right now and know what is holding not to make the payment as you said because i hate any thing promise and fail .
I am waiting to hear from you now.
Mr PAUL JOHNSON 
MoneyGram
COTONOU BENIN REPUBLIC: NO: 192 AKIL ROAD
TELEPHONE NUMBER +229-98677751

HEADER:

Return-Path: <westernu749@gmail.com>
X-YahooFilteredBulk: 212.82.109.207
Received-SPF: neutral (212.82.109.207 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: mAPd.zUWLDsRpeHBoGVp39xaBbCEO531WL0nnksrVHuTorC1 mHvNt1jnBO5VbOOflZxW11t5JXU8oRgD5y.Ek6z.AyRS7mQfuGPo8IjmIGR0 ohIn3_sLE_Pq68kScnHc1KZYU5UXn6B.yM2Ihxog426HDgyiTcbGG_9sjA71 f6K8ZejXSg95rtRTMvv7ZGJqYfZkjTCzWH3BhZTC3_5kWyzCnH4firB8ygWx T7Qu6_RCwUhme44PRRWA4wSJuKWOjdt02D9zfR72OjHLWZ8q34ahd6ZaytwZ SLC7UeD1TZrKFzF.ac4CUDKxdukkPu9K9bOurdcioZl8oO2KycOKnadXRAQV Y69vmBLy8vNW71oebupTdxOHYGAmYobPE0LD.3miWSIlUUjLHCYwSD8P9IQL q5.evioqyABcll0P7iJEPW3dtf5cmIG25r4U5bZc0yGW8Bxvdu6XeGBOQW7d MPnHs_2banHcLu87VJm04tIojLHMtZtAuj9oDw6ltYZd_nVP80zshGtZ9xnK .VkhkDqqlCM.WYznVnmnC5ry6p_vQsj54RNqWGVkTWiuRRjpu4RqWBuA01p. AI6aNLm4oLSoJwH3or0crtKG.bb_Qvazm5KGToT2mSkwinx6LKXWY9UnxjrS I9Fi8jIgtuOyszcjZK4F99AGOWyzksDrnBcgTUEHqbZWPBW0PQkPOZxP2vIg fVlTC0DJK0jQ3E21EhA8SSVSV5SOmVSyY42piupYs0Cd346txlWlnYSTdD1t 1ax0KHJ_LxZKndjq_deTZ4OU5KcLguYbxNwNr.NBOA.j.yYAG7pyxTis02IO 1pn0sBicFuH2pqKFG9Jdg9Qr.qigDD20if3tT1XkzzuD8_kqqBrwWFrB9oXJ L7JIpg5L5WmZr6D5K_eCWC6ws4DttkwQFMITgNRj.s_teM3IVa271lSGdhUS rYOEgg5VQy38E3wFWWAVP8ExN9GjoVA.STjq2B0oed37fRo5lRUDhKAm9NCh MmpuP0OdSKyjcSBuMWVDsCvqkmULNm277yauVgHaqPGeoWfTahUuBphuEkCf p7RuBRtDnFaiSozZSCpSyYU0o84HDT5UsdupJ7CQ3uI0AMVywoc9Qof2NVYZ ikdQvaJVP4otpZlEhnlKYrI4MFnQhmd3Y6DsNf17EnQVmOUA_7jNx6xiLkK5 RJx0ZWZTgMQb.XqhdG.NvAmbEreDqEib58rZXi7sqP4vfp65O2cX973dN6EC Me3UQOvhpqcVuTuJiYrphZ45i2vkh9YY3.pectoIkQ–
X-Originating-IP: [212.82.109.207]
Authentication-Results: mta1179.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm25-vm6.bullet.mail.ird.yahoo.com) (212.82.109.207) by mta1179.mail.bf1.yahoo.com with SMTP; Mon, 19 Nov 2012 10:08:27 -0800
Received: from [77.238.189.57] by nm25.bullet.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 18:08:23 -0000
Received: from [212.82.108.243] by tm10.bullet.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 18:08:23 -0000
Received: from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 18:08:23 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 353950.72023.bm@omp1008.mail.ird.yahoo.com
Received: (qmail 89519 invoked by uid 60001); 19 Nov 2012 18:08:22 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353348502; bh=VtTxWO99qmgFXC+U9mZGcc8fJuIFk1rs7b48t39FXvs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Q3wJNOT7jZyDuKNEONPsW5buywODWICBLkHQu3kBitYXpk4LKXjWK0KLfw0EUkfWMVhOwWdy+5nlGbdhqLLlltc+K/TdeIXjLcsc7fGaqDx1IjBcjqJ3zemO/dFRnU7YCAnVCE3QfPjB6NnKGRRjZQavB5Ww6ngF0E21ln+VDOI=
X-YMail-OSG: gKJenGAVM1m5yvXDjYGZq6FKSO3LQ6WOe9EyxxlKdIobrTi x7eRybZPH
Received: from [41.216.44.199] by web171303.mail.ir2.yahoo.com via HTTP; Mon, 19 Nov 2012 18:08:22 GMT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353348502.84732.YahooMailClassic@web171303.mail.ir2.yahoo.com>
Date: Mon, 19 Nov 2012 18:08:22 +0000 (GMT)
From:
Mr PAUL JOHNSON <westernu749@gmail.com>
Reply-To: officepost466@yahoo.fr
Subject: CONTACT: Mr PAUL JOHNSON.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”-1953309981-1231263434-1353348502=:84732″
Content-Length: 7829

Mr PAUL JOHNSON <> westernu749@gmail.com <> Reply-to: officepost466@yahoo.fr <>

41.216.44.199 – Nigerian Scammer’s IP address has a ‘BAD’ reputation according to Reputation Authority – The IP location is in Cotonou – Atlantique – Benin – Nigerian — between Lagos & Lome — IP points nexts to Benin Marina Hotel

The number of this IP address is 41.216.44.199. This IP address is related to Benin, and registered in Cotonou, Littoral. IP Country code is BJ. IP address is assigned to “Benin Telecom SA”. In organization “Benin Telecom SA”. IP address longitude is 2.4333 and latitude is 6.35.

Some other names and email addresses used in scams under the IP 41.216.44.199 – emb.asty@yahoo.co.uk <> 77.238.189.59 – Nigerian Immigration Service <> Mr Joshua Alexander emb.asty@yahoo.co.uk <> nigeriaimmigration_services@yahoo.com <> 98.139.91.100 <> western_ubb@yahoo.fr <> 41.216.44.199 – web164610.mail.gq1.yahoo.com <> 41.216.44.199 – web29904.mail.ird.yahoo.com <> 41.216.44.199 – web164610.mail.gq1.yahoo.com <> 98.139.91.100 <> western_ubb@yahoo.fr <> 106.10.151.198 – vms172055.mailsrvcs.net <>  41.216.44.199 –  web190602.mail.sg3.yahoo.com <> 106.10.151.198 – post1369@yahoo.com.hk <>nm7.bullet.mail.ird.yahoo.com <> 77.238.189.21 – vms169127.mailsrvcs.net <> 77.238.189.21 <> peterusman8@yahoo.fr <> Rev Tony Johnson <> [115.178.12.209 <> plcuu3@yahoo.fr <> 41.216.44.199 – web190606.mail.sg3.yahoo.com <> 41.216.44.199 – web190805.mail.sg3.yahoo.com <> DR JIM LOWRENCE
RE: IRREVOCABLE RELEASE OF YOUR PAYMENT – 115.178.12.209 – wstrnnnoffice79@gmail.com <> 41.216.44.199 –  web171512.mail.ir2.yahoo.com — REV FRANK EZE — Subject: Re : WEB SITE.WWW.WESTERNUNION.COM – 77.238.189.35 — Reply-to: w.iont_ernunion2011@yahoo.com.hk <> 41.216.44.199 – web29104.mail.ird.yahoo.com — 77.238.189.196 — post1369@yahoo.com.hk <> Mr Allen Bells – 41.216.44.199 – web27506.mail.ukl.yahoo.com — 
217.146.182.249 — atmmasterdepartmentoffice@yahoo.com <> 41.216.44.199 – web95215.mail.in2.yahoo.com – WESTERN UNION OFFICE – 121.101.151.239 – www.western40@yahoo.fr <> 41.216.44.199 – web29305.mail.ird.yahoo.com – MR MIKE OBI  – Money Gram International Bank Transfer – 77.238.189.196 – moneygramofficebenin45@yahoo.fr <>  41.216.44.199 – web65804.mail.ac4.yahoo.com – DIPLOMATIC MR ERICI BROWN – 98.139.52.215 – diplomatericb@ymail.com <>

web171303.mail.ir2.yahoo.com –  – 188.125.83.118

[203.188.201.73] mta1299.mail.sk1.yahoo.com RECEIVED: from [41.216.44.199] by web92416.mail.cnh.yahoo.com

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
Follow

Get every new post delivered to your Inbox.

Join 59 other followers

%d bloggers like this: