RSS

Monthly Archives: October 2012

Judy Peterson (and other fake names/email-addresses)

Online Dating Scam – Nigerian Romance Scammer

This is the second email from ”Judy Peterson” – Nigerian Romance Scammer –

SCAM PHONE NUMBER – +221772093435

Email: Hello (name of potential victim),

It warms my heart to hear from you, my heart accepts you from the very first time i don’t know what you have done to me to make me feel like this, i am aware of our age difference, i will be 26 years old by next month, to me age is not a problem at all, age are nothing but just numbers, what matters to me most is the heart, love, happiness, maturity, i need a real and sincere friend that i can trust and talk to, i have kept this secrete for too long i need to open up my heart  to you because my heart chooses you as my helper, Sometimes the world seems to be upside down, things seems to be so unusual, sometimes i feel like am living in this world all alone,
My heart has been so lonely  ever since my parents was assassinated and i was left in this world all by myself,i am the only surviving child of chief John Peterson, my late father was the owner of Guarantee project company but his was assassinated by his business partner and i was left alone in this world all by myself, i did,nt have any  friend or family to turn to  and i was so scared that the people that killed my parents will come after my life,  that was why i left my country to this country i am now, I’m presently in Dakar, Senegal.

Getting  here i don’t know anybody or have any where to stay so i was taken to the Church hostel where i live presently, though here in this hostel i don’t have freedom and the living here is very bad but what choice do i have, i have to keep myself alive, when i came to this country the first thing i did was to try and claim my inheritance that my late parents left for me  but i couldn’t because of my status here in this country but i believe with time i will be able to claim my inheritance hopefully when i get somebody to help me claim it, my inheritance is enough for us to invest on any kind of business we choose, i like to sing, cook and walk on the beach, please tell me more about yourself and your country,
I would really love to hear your voice sweetie  but is so unfortunate that i don’t have a phone of my own, but you can call me  with the Rev father’ s phone here in the camp,
the number is ( +221 772 093 435 )  when you call just tell the Rev  Father that you want to talk to Judy he will send for me, i really cant wait to hear from you again  my heart really looks up to you, i hope my present situation will not scare you away or make you abandon me here, because hard times don’t last long,  please don’t let my color, distance or our age difference stop you from helping me, this is the truth of my heart and my real feelings to you, i don’t care about wealth, i just want to live free and happy again, i hope you understand me, everything will be alright soon, hope you like my pics,
until i hear from you again,

Take care,

Judy.

NOTE: When this scammer sent the second email she sent it with a different reply-to email address which was similar to her first email address (judy4me@ymail.com) her other email is judy4melove@ymail.com 

The IP’s associated with her second her have all been blacklisted – These headers are:

41.208.186.164 ↔ This IP has also been reported on anti-scam websites and a scammer pretending to be Juliet Samuel <julietamuel56@yahoo.com>  ( username: julietsamuel )

106.10.148.215 ↔ This IP has been blacklisted and reported multiple times. – Anyone getting a suspicious email from an unidentified person named ‘ Joy Olu ‘ should stay away. Some of the email addresses used in this scam are – compensation.unit@compensation.unit.com also known as mrs.joy.olu@gmail.com 

 

 

Additional information below

__________ __________ __________ ___________ __________

Name: Judy Peterson

Email-Address: judy4me@ymail.com <>  treyryu556dyruur@gmail.com

Subject: Hello sweetie

Email: Hello sweetie,

My name is Judy, i am 25yrs old, i’m a free minded,open hearted girl, i like to take life as easy as i could, i’m one of the few that still believes in friendship, love, trust and signs, am very much single and ready to mingle. was browsing through the internet and came across your contact,it will be my sincere pleasure to be your friend if you don’t mind, i hope you will not take my request for granted, i look forward to hear from you soon.

Take care.

judy

+221 772093435

Example Messages Sent From 209.85.219.66 (look in header for additional IP’s associated with this email. Theres a few.
From: KEN SAMBO <samboken2012@gmail.com>
Subject: Investment Proposition 
From: Judy Ann raon <mercury.jud89@gmail.com>
Subject: Invitation:Network Vulnerability Assessment and Pe 
From: lela ferti <lelaferti@gmail.com>
Subject: ΕΦΤΑΣΕ ΚΑΙ ΣΤΗΝ ΕΛΛΑΔΑ ΤΟ 
From: Research Workshops <ctd2@irp.edu.pk>
Subject: On-line Workshop: MANAGING PATENTABLE RESEARCH 

HEADER:

Return-Path: <treyryu556dyruur@gmail.com>
X-YahooFilteredBulk: 209.85.219.66
Received-SPF: pass (domain of gmail.com designates 209.85.219.66 as permitted sender)
X-YMailISG: q2qYtNAWLDuVSliclPG5tcO7nEoGKi5QYFCg69rYHH2VIdBy VTGT68loHQov0AS5V32290CnFtJHWscSkPkzj45YquUWmUdGHSh1GQ8AL6Db KvFO0DGTAGcAhutR33.CEfdLDYNZdHDS6GipjSkzr1mCJmcMUu.O42WA4k5b E.3rhSrZ1c_.hX5ian4u3UGSOWj7bLbej9r9vViHPAiSNBEUvxfODrP8j7f2 1VgICRlqg9bCWAjSMi_BLTUeAKKR.gyOll3CQC7T.IyxfGK1YLk24xLnVQpx odaPqgRr8koQ4tg3Ql8.ZEeW3Kjcvb_sv5.Q5Pu41AYPwgruiRN6MTLI8m69 0G7R0IWD2egAbioIjdLyTxp5ZbkC9N8RBqa55A9MU.6mDjB5F6zd4PjbSWGE 7buqFXxgMdsFwikhUnnpKAaIphI_44ciWDopJ_iY6lrI_u9jAtrMaqvUj5NQ EaEz4MhCkqi.NUGSBeuSzxRhydUYorxZ72vzWjABszn7TZ4W9T3zu_YqG0zC O2n6EO_EyJO2bx5DPopdLwaywq5kZcgDDw.qn_7ArgGGZE6d8A6BtlYXd35W 64M4gg3WBGkrPD3AFdZf7GDkob5Xk22oZJdW5u5C6FzsK9C5JH.HChDaJP_n aZTPx8MFLbUAw9.LZGopJDYKNYmyTlKZUD.tCMLJLsliU4pkuPieT9r8OrXT 0m5BgRyxf2F7BfGtcAPy2wauERAikAi7HBdkyRnVPYR_4igS_woofNSqFjbS .u_O6VXClMtqvU5tC4SfO1Mgcu83lcYaA1d_sBt_VehKqOHnePbWIOtMW5Df TICBoGWPJHz7.mlWQEPUG0ccuPShpeZib7wdbvTbi8IxL8POah3nSCWruyzd ewGLtz4nMoKXMRoNqObt6ZAMKZSztJ8ixeJjThmw6OqfWeyPNiFygw4QeDEP e7dlaqJjda86niyQAyOrkJy61_fuYt526LH8TiMzNqCYk1AzbFol3fe3g7XW TZKgZQa2E6JbGY22QLVssZNHERNimeKOZCwDpb2ktQj59zJOPt4yuRzDyiCX 1Nk3qE6vhoFq8hK4cv4RzdV2._09MMVc9vHifj7Fvx3ub6h9ZrpcMr5ioFu. 2LKmBGgtsQN2ID2hjxQ8fm4v_YJgOTNznQoZ1MLh3H5SgRhIrQXqWPjhHBzt zOjm8f1EZu4QVRmOD9e_M1dPeKzKj7zh2CwGQZNr..v5kPzxiqAn9EAxjUT5 gk9ketJDYajX2Z9HWuig8ZlQTg–
X-Originating-IP: [209.85.219.66]
Authentication-Results: mta1275.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-oa0-f66.google.com) (209.85.219.66) by mta1275.mail.bf1.yahoo.com with SMTP; Tue, 30 Oct 2012 06:05:33 -0700
Received: by mail-oa0-f66.google.com with SMTP id k14so38347oag.1 for; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:x-google-sender-auth:message-id:subject :from:to:content-type; bh=rtKRnDa9SZkm1mtqi2HyK1eEedIzlkc4Z7bZKWbp2DA=; b=CgTZtR7uUda95WOzVKC0+Gaf9dcyZBpbd/N50LBy+LndRDyJv4JcqGBCKE3hb+plDc FlbO4GRPE/2adPH5xg7D6Nacryb10aI1lLB64GU0qDddD2TbFH5Ll0WIkfvhURnFDukC JIQTZ6eq8Jw7YhWK4xfAZihPEOIWobubj80omLFXjH37aFPXi/lGdTozzQ7IG+GZo35P U/CLn0drJRyWiYDWvqPLivEWOEV2BmEzWCZlA+Qfua/k84OXebexc72Yu7tXme+hdD+8 Ktc4A9XnmsnDVDFWuJmqV8BmqLIAU1/82tfRTDXGPlxRBdirPzw7d4r6UHsnMk7s25qD tttQ==
MIME-Version: 1.0
Received: by 10.182.21.135 with SMTP id v7mr28031346obe.101.1351602332600; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
Sender: treyryu556dyruur@gmail.com
Received: by 10.76.92.102 with HTTP; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
Date: Tue, 30 Oct 2012 13:05:32 +0000
X-Google-Sender-Auth: ajA2UwthwZYsSy_kttSY7nR4zHM
Message-ID: <CAD6XNVzah5yKWD-87NpAvaFZqc5y9uWRVWM30LA7_a7X2=Lruw@mail.gmail.com>
Subject: Hello sweetie
From:
judy peterson <judy4me@ymail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=14dae93b6374e98c1104cd467089
Bcc: (deleted for privacy reasons)
Content-Length: 1280
 
1 Comment

Posted by on 10/31/2012 in Romance Scam

 

Tags: , , , , , , , , , , , , ,

“Mrs Marika White Loan Company” mwlc@uneta.org

WARNING: Loan Offer Scam – ”Loan Company” – Nigerian 419 Scammer

UPDATE: Same scammer, different scam — ”MARIKA WHITE” IS ALSO SCAMMING UNDER  YAHOO MSN LOTTERY AWARD  <> web.offfice_297938@verizon.net <> yamsnltry@gmail.com

Name/Email-Address: Mrs Marika White <> web.office.76835@verizon.net <> mwlc@uneta.org
Subject: Loan Company

Email: DO YOU NEED A LOAN TO PAY OFF YOUR BILLs OR START UP A BUSINESS?

HEADER:

Return-Path: <web.office.76835@verizon.net>
X-YahooFilteredBulk: 98.138.90.254
Received-SPF: neutral (98.138.90.254 is neither permitted nor denied by domain of verizon.net)
X-YMailISG: 1rccvcMWLDvwwkDPi1wOr05Wj4gQviOJDGKA.1i73_OolCyJ AIIlRo3P0Ksj.ASRtNNoeGsPA3ng79BJC4KSPPY2cKJmtSiyaO9p_2Gl6D9p KObaIr3h1rSJqZJtUWYKiUblIXp2C_AVI626ToDSMv07dQ_gJRa9_1mGJyzE 7r40FDbtvz_yB9A9.NHHDeM2iKxRVY4nua_X5Ed75fTZKPbtnTihqFFIsYzF ujLU9y8Y18H5cK7A8W6CQ7JrpCZL.zKbq_kNlj8HAhBv1jH5BnVA2ly1ebuI _9Ea7VizY_wANAhb3s2.6iifKVVVAO9rNPIsWHlTMvE6SHb8QJ6ulc674OXT tt37ekR0jxkNBXR0jgJdcYUs_aGyNP479WSp4zXCs7Ze.J2O_En0MQz_jgGj x5YLcacY3jehFs4C_MrSGEVAQOdDqp6L4zrtUtka_EJpyIT7eGwy5Sdr8cmG I_DgYc8vHfyvc9E_rkYu3JF35jAmqLU9cXx6wCO6uj37_TrU7u8Y9QZBL2O0 IT_06WFjLfOpT1Upk3uY4gIb9wcfw2QIQlDrpPnRZaLeg5D_P.fZdy9ZiUWG NAthLPa2dEX2t8jrBH1oAE2YXAKWNU3pNKD_7SiifEzT84h5Elwq2OHWRuJP IDbHLNrzmEk1qUNnYWEIF9rSxF1ghHHskstylaX8FXxRd7q7Nh7HRQAZZeEB HqSwPna3HbK7lluYsrzPEQXazlxcHdgklhWhFUE6m4.CkHrM1gErfL3aTM48 AunpFYoHEUut1CsqaK8G6yTEcKTxy.R0dG8AEmJ3rF1mJl2juH_MEOdliZ2U kWtVRS13J12.Gjfsw0.K_.mQE5Ns1SPY4XsqbFvoM54Zu9rZXWRdgLW0R.Jd BYdh.pFOiRY3Q1UigZapTc3x7asJRS767DUqSsLYRr_tP1rW5uqBttzHWYvC b7WRvJxQPEse4ssUVrxwkpMpe5Thz.YG5od_fkwHDZPfZNUQvx1lq9n9DoMC ON6XbLf7tz.kYkTT2amkr5TgG.7H1FYiff4cJ52Y_QhrlbmHPMpIzLH5v00h DQ2XofIrgBkFMmjpPSM4kLz.tIQadfYhtUtF1dRkRik2t8eFG48Pt2uurmng ciYCQZ2QbXFwxDJm7s_jgCuaaDphJcK8zBr1RtpVM2RtKz93LK0ffFUZl9M7 o9lnOxNgN71fbX6fF1ZyL7RaXQrLD_ahUhjSooa3ufwV7AGDjcmE5vnPzt0T 1hjFF1VEvTEsxPHJRroE3s4Ol.843VnRYEMul7UcKBKNDw–
X-Originating-IP: [98.138.90.254]
Authentication-Results: mta1319.mail.bf1.yahoo.com from=verizon.net; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15-vm1.bullet.mail.ne1.yahoo.com) (98.138.90.254) by mta1319.mail.bf1.yahoo.com with SMTP; Mon, 29 Oct 2012 01:57:01 -0700
Received: from [98.138.226.178] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
Received: from [66.94.237.101] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
Received: from [127.0.0.1] by omp1006.access.mail.mud.yahoo.com with NNFMP; 29 Oct 2012 08:56:58 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 30294.68904.bm@omp1006.access.mail.mud.yahoo.com
Received: (qmail 89378 invoked by uid 60001); 29 Oct 2012 08:56:57 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351501017; bh=e7TPDsqolxdOXd+HQzrG2hNH4MUYxcgDXnSPz6Y8MYY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=S6/hrpGO0ydEf4hSQ7WjaAmQInuuCAKfvMSsvZ0XS0Ov4TRWjzWGBNXFyW77+X+V8/YyNSzLI21RcqyPrLYT8EnW8BEnqJ8WpAUNvumsMDSbo5i30f/2XLT5qHvIvcR23wmuVHVjVNwTMsysjaZ2E5frgnnMP06OYrvqxNptM0o=
X-YMail-OSG: xMBSpZUVM1kIRXuAjHgZbmAaovBVSk5eAFjFEevdiEknuMn uDEOw.0Co.m8vI5PZCw7DsxhJN0JUjUAfUKoR0NBqFZtrCvYJNVDAFkJnZ9r O3l8_IptDedNQleNN7u4GS21Jrt1VXT.7EIuaqBBvfYhmeBKDXsVQE_vJCTr OxQjQGHYGCzKlWPL_X_kkO_XpszI3mErScnhmbs_nIvqSVOegsbBMaeW.VOj UnLfwICoveMAz0JiOGClf4ZsO1t4_kD1ObkEb4L2mblFkgk9CHEebmunRZAK Xcr7_Y5_tNywAxz1tBI3HRe2YTVilPFzXNCReKYcuuMdLy4f6xvBQilPUGP6 HPr1KaxsdqlqsThn988RToeuJPivHlpxBZHhFfrwy_eRjT2VgvXYksHYOLp9 CS0zMN.CLJ8R11gH1ACo2JT6of3FUlzotv8ehcdNLfdu1aiNpfSMIKpa43vT Ynd2tYi7uArwgX_vtXoKO.vJ1x8lBQq8f0yXH.Ke0XesM79uUq5MG7j.8rJ6 ETIunLPAqxYZaDbywbA–
Received: from [72.64.146.136] by web84610.mail.ne1.yahoo.com via HTTP; Mon, 29 Oct 2012 01:56:57 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1351501017.25035.YahooMailClassic@web84610.mail.ne1.yahoo.com>
Date: Mon, 29 Oct 2012 01:56:57 -0700 (PDT)
From:
Mrs Marika White Loan Company <web.office.76835@verizon.net>
Reply-To: mwlc@uneta.org
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1644280220-398030313-1351501017=:25035″
Content-Length: 465
 

Tags: , , , , , , , , , , , , , , , , , , ,

“Mary John” maryjohn879@yahoo.com

Charity Scam (Inheritance) – Nigerian (419) Scam

Name/Email-Address: Mary John <> maryjohn001@rediffmail.com <> maryjohn879@yahoo.com

Subject: [No Subject]

Email: Dearest In the Lord Jesus Christ

Greetings,I am Mrs,Mary John. an aging widow suffering from long time illness. i am currently admitted in a private hospital here in Abidjan cote d’ Ivory, I have some funds I inherited from my late loving husband Mr.Frank John morgan. The amount of US$7.500, 000.00 which he deposited in one of the Bank Here and I need a honest and God fearing person who have the feelings of human that can use this funds for God’s work and 15% out of the total funds will be for your compasation for doing this work of God. Please if you would be able to use these funds for the Lord’s work kindly reply to me.

May the Grace of our Lord Jesus Christ the love of God and the sweet fellowship of the 
Lord be with you and your family’s Amen.

Your Sister In The Lord.
Mrs.Mary John

HEADER:

Return-Path:   <maryjohn001@rediffmail.com>
X-YahooFilteredBulk:   77.238.189.194
Received-SPF:   softfail (transitioning domain of rediffmail.com does not designate 77.238.189.194 as permitted sender)
X-YMailISG:   VwHPk1AWLDtvNW663eNLY5dsoQldKMI5N5_m3yFIIV_DpZHl RYmd85fyG.iGhZYA0z6Wg4mVHxBpCQbB7irFq7WS00FnRYpGDN9Y85NUuC6S Vph58xDr97n9_1RNWYS7aXHmIPmhb6ICg6zQ5l7OvcmJDWdppv19RuUJwWA. fTUNBJnOyKqk.1TCd_yNPWjb1wDXLvbZy9J3QVWQfNBvxvQ.JJbwkzRFVADD mY8m5jJH4Tx3Yvxxix77sVT3nvaxBRyBPTMJNNS4k4uYE_tim.6kUomSSpXm OsG5.srdU3CPZzyErCvfggJUgcUEuoGekJ2eCe2VnQDXgsk3ZpGlwgQRAoNE 39gXjqm_Hxatcgw5EalMDyJWdLX6yFkuy.3FWfPo4ZJ5rWhCS9HKmJ4VYA_6 5x3MDuniCTGs4AIldh7W.YTEKa.WcGOikd75DF3JyVd2DH91D6L1zCqPqGw3 XUbAT.Jc9Yh58q7F5GuajmgjS8xnXjxz5C_1_kvAaIkC2xxs7x_G6TaZukM5 vt8vKU8I3i25HkiaT1hak0Tg5JrBJ5XgE1sjFEjoLoXWgRzmfsRj0ZZVGSpX V3mGrNhIlz9l4T5el8TGsSQ6rxexFz0S3BcdEuvP.oELaq0_srEz3b3NSY3P HQWhVl9LOHjdAAHwmgIHDtvws6yEknFMPzpnkCXKso1KEg246xIq9LRpUaiI SHgFfBrImKcP000AdLl99mp8LzD6vV5nGqxbPPvspKRcpw7YaukO4GITh7Oj B.OTN.behzmCZ739h5zRi7scQnd06Mlw9FrEaMnd.AcK78m6HRUna8Wp6ms0 XC96IE7Lkm1cVutuqpP.GGiZl493CLnofviwWjTDT2hSXhSbvRlXA604exPj pHuHiDh5uJbDxnaYaa47b9.PIrfH2XSJdByUC9.4WGT1.eTmx7rA.2ybK.BY HVxw850Htss.fW3fEAN0KeZAZIaJXgTjWtpYjMriPlnS_czjW3bD53gsnqi9 aSOWYNsiruzLyIbVLMdodR5Vs.CNDMFmvXZj6a8qv8Q_AEALR7rWfnhcaRLB oEFjguGiL6UYmm6xDMzCvVJl.cYseAxClS1EIunPvQ_HIodwvb5BeS6whcw_ 17Gm
X-Originating-IP:   [77.238.189.194]
Authentication-Results:   mta1110.mail.gq1.yahoo.com from=rediffmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm15-vm1.bullet.mail.ird.yahoo.com) (77.238.189.194) by mta1110.mail.gq1.yahoo.com with SMTP; Mon, 29 Oct 2012 02:38:17 -0700
Received:   from [212.82.105.224] by nm15.bullet.mail.ird.yahoo.com with NNFMP; 29 Oct 2012 09:38:15 -0000
Received:   from [212.82.108.135] by tm20.bullet.mail.ird.yahoo.com with NNFMP; 29 Oct 2012 09:38:15 -0000
Received:   from [127.0.0.1] by omp1040.mail.ird.yahoo.com with NNFMP; 29 Oct 2012 09:38:15 -0000
X-Yahoo-Newman-Property:   ymail-5
X-Yahoo-Newman-Id:   903744.64353.bm@omp1040.mail.ird.yahoo.com
Received:   (qmail 52334 invoked by uid 60001); 29 Oct 2012 09:38:15 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351503495; bh=oEkXtj1A+FIFgbgVChcPPuy5C2Uey7tr+qtZqjlJiEg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=jQwlpBxns6WFwSoW5fBXnvoN9tGKFTr0g5/CDYOla5ZIHRCKjMOkY4nxz6BpdJ7nA90aM6PalfJPBrfQR84e0AdOhe4TRsffKYUH9+CagaZUg90pfuvxrr5SPmG6obgrMwbzIH6wlkeqWt1rDSlwL4Ai2MV9bjMo4hqHb4qc0tY=
X-YMail-OSG:   qXqqHOsVM1mEhS0D970rnAKdUMPJ8XNMa3aoX2zab9XgtBK xcmO.CH8R
Received:   from [41.202.86.146] by web171302.mail.ir2.yahoo.com via HTTP; Mon, 29 Oct 2012 09:38:14 GMT
X-Mailer:   YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID:   <1351503494.52002.YahooMailClassic@web171302.mail.ir2.yahoo.com>
Date:   Mon, 29 Oct 2012 09:38:14 +0000 (GMT)
From:  
Mary John <maryjohn001@rediffmail.com>  
Reply-To:   maryjohn879@yahoo.com
To:   undisclosed recipients: ;
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”1670751155-71809592-1351503494=:52002″
Content-Length:   1976
 

Tags: , , , , , , , , , ,

“Dr. Kwesi EDMalik.”

Employment (Business) Scam – Nigerian 419 Scammer

NOTE: Project Honey Pot has detected malicious behavior with the IP Address (58.211.138.27) associated with this scammer. Additional information posted at end of this post.

Name/Email-Address: Kwesi EDMalik <> achizitii@primariacovasna.ro <> kwesied.malik@voila.fr
Subject: Business Partnership
Email: Dear Friend,
 I know that this message will come to you as a surprise, I am the Auditing and Accounting section manager with a Bank here in Accra Ghana which the name will be introduce to you. I Hope that you will not expose or betray this trust and confident that I am about to repose on you for the mutual benefit of our both families. I need your urgent assistance in transferring the sum of($10.5)Million to your account within 10 or 14 banking days. This money has been dormant for years in our Bank without claim, I want the bank to release the money to you as the nearest person to our deceased customer late Kipkalya Kones. who died in plane crash Six-seater Cessna crashed in western Kenya since 10 June 2008.
 
You can read more about the crash through this website:     http://edition.cnn.com/2008/WORLD/africa/06/10/kenya.crash/index.html
 
I don’t want the money to go into government treasury as an abandoned fund. So this is the reason why I am contacting you so that the bank can release the money to you as the next of kin to the deceased customer. Please I would like you to keep this proposal as atop secret and delete it if you are not interested. Upon receipt of your reply, I will give you full details on how the business will be executed and also note that you will have 40% of the above mentioned sum if you agree to handle this business with me.
 
I am expecting your urgent response as soon as you receive my message.
 
Best Regard,
 Dr. Kwesi EDMalik.
 
HEADER:
Return-Path:   <achizitii@primariacovasna.ro>
X-YahooFilteredBulk:   202.123.2.16
Received-SPF:   none (domain of primariacovasna.ro does not designate permitted sender hosts)
X-YMailISG:   .Z.SqFMWLDuW0E474YOI52xevJuOZipRmrKTgD1gQFwpq6uO t3C3k3VRbX.gDsBPJ8.8xxCbkw9N.Ol_tyut4wqxVqQVFQGUUbZ.wZcRTI_W MaF7K7NeC9yJCqe_eAyxre.qtz4nUJP058YKonDIHHnljfHtLevbaaHg7L3v wdELHFRdd_l20xa1B3yCqjt6q4ko8wNxJ9lur7r2T049nWFdAsn6gB1AwUHT rEqEZWPHB57v94q31wWXZTjMTZk0uP4dq6zoW.H_hlGcwuouHH6ovzDetBZi fXitUaTg75lSxiYOpzSRZQ7DOfBZzFq4TkuEB9boYYawJUira5nqVUr8mRIL OmYp0pMr9wpkYMwebNxUCNVzprcqcrzmrFYFNWOE7zAeuz8Hib83p0UcFFGC uAoPh8H5Wll7j.VNvYHQ60CmVgevzPCXGcy6vqrXSAO8S9nRL7jiDEB6.iHB V.TonraT.Lu3dVVgHDFanHWWIV2HxsjeBviphL.u2s0t7l7p5.lPqGVTITk1 GUfFOIcze_y3G0piauFl.BXthQECCfiFTWKwSpnKIEbASe.LHNs.XJBQpGIu Dv4OeC88OM4Db2b5.tCzBfo69PyPoKDl1UTvTQIp2ISeMBjJvbbg5rO.v2AC XrE_7mPGotbdHy5FgBwjeBXvPolzBf0nMbWjTsgKvc8RV0CacrNshe6_iR1c WtbtoE4dwjR3Ar2u0PWAJeug3MlJkZJr8VeY1PW0ScD3.OZ.53kGi2bQ4uX5 AlAtntJzOT1820BYgh1HoLKRZhkPIr5sEyrvJQTv2lXqzcnGUOL5bahaKk3U 90.1aDWHO6gae0mla84L0pVzKUWVVvVBs7TNmjv64qdHVd2C3pz8U6nxwNj1 JrCQOoV0._ZxacnkhHN_ileYpZKotPQPqA.Y7SH5vnW6K4nS1LozZEyb71Kd nxKfAmcu2DED7.F2MAkiyYGY5.3GwxYvKt2JSDgnN6NBAKZN_YOmg.uFNvZF JhQMoyfhcJg3CICSPj0oeH_3gcz3sqzYgusN2PlPjV21XwcHT6jZZIiE1KUL m3PW4HVzyohE4qirpRrnKd1kXgaEw5yNy66UfW8_BmjT35vTPXeNp79kOMAJ UcbvcHkIiLyPJ5rFdVzQ39fR3gaRAj1LkO1o1vsJt5IieRe13_iR2JD67.YJ jWhIugRnSJ.3jugQv3h9HLL8mEiuGn9tq1LGjm1QShBwV5w3cmtn4ZQLOKX_ u9NgSS7gYJV0ZumkHLMVhR.ylBJB_T4TeL8vKp9vROjzxQBVgA_5wjdBmvpW LngyLkqEyVabwcGD2kt0H92u4dUHvhs4kzEJg_OQUz1bvgKMQ0Plr7561IVa qC5jy45DuSaHPJV_oNfXBxVf.IftafmRt0pe_lqS6AEn1VO9a1jENUIFOqh8 2Rp4U2tzdQi0nW1MM4hh_Au2RN9UBpaxQoZmhj4IvpU4WvDzliYrmOUyRGxq tnoon_tfTc2arfAjEWU2D8v_nC3DpmDw8Z1gduU2b4fPce5oCUpccw79h52m f.ECZT9H1aU_nuQ1ox6.bSgD.unq7DdlLnUmtxmJqpiI9mWbIEOnk04df70f 1N4m1ecVKypzxQUdkWNyeze0k8pDbizgcS4XeYX5gnW4B6iaFweIyBIWvS4H 8oMAjfv8zpcVqcaGffx_TMoFjDegdXgp8SAG95w0oA4F6fsVRtaf.6EAnHAX H_zzSBv7Ucuewy_ZdOVlYqcRSZ97PxqXgQCWO_DuM.ZSqbtbuvWneFohDLOE YrW5.xoNuugDcef992N4yv2UjI.tsqlVK6nlb0O7BeZnhVBGQ857REwFbZLz mkcM7BRaAQNN7kfSsmXEl0ta95mrtvtUyOC6kg1U1U3mwxcxeYWsgDZCBAmr P._RVjoWtcVJ
X-Originating-IP:   [202.123.2.16]
Authentication-Results:   mta1186.mail.gq1.yahoo.com from=primariacovasna.ro; domainkeys=neutral (no sig); from=primariacovasna.ro; dkim=neutral (no sig)
Received:   from 127.0.0.1 (EHLO smtp1.intnet.mu) (202.123.2.16) by mta1186.mail.gq1.yahoo.com with SMTP; Sun, 21 Oct 2012 04:01:36 -0700
Message-Id:   <11500a$9f9g56@smtpauth.intnet.mu>
Received:   from unknown (HELO User) ([58.211.138.27]) by smtpauth.intnet.mu with ESMTP; 20 Oct 2012 22:20:39 +0400
Reply-To:   <kwesied.malik@voila.fr>
From:  
“Dr. Kwesi EDMalik.”<achizitii@primariacovasna.ro>  
Subject:   Business Partnership
Date:   Sat, 20 Oct 2012 19:21:29 +0100
MIME-Version:   1.0
Content-Type:   text/html; charset=”Windows-1251″
Content-Transfer-Encoding:   7bit
X-Priority:   3
X-MSMail-Priority:   Normal
X-Mailer:   Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE:   Produced By Microsoft MimeOLE V6.00.2600.0000
Content-Length:   1865

Read the rest of this entry »

 

Tags: , , , , , , , , , , ,

“Donella” (has multiple names/emails)

WARNING – Craigslist JOB SCAM – Nigerian Scammer

Donella also sends scams under the names  
Nieves Baltimore nievesbaltimore@yahoo.com in a Craigslist rental scam
Lilia Rahall
Liliara Hall
Dixie Cleasby

From: dixiecleasby@yahoo.com
To:
Sent: Monday, January 7, 2013 6:21 AM
Subject: $550 / 2br – 1150ft&sup2; – Breezy House in Spanish Fork Move in special (Spanish Fork)

Hi

The property is a bedroom bath with garage and washer + dryer. Dogs and cats are allowed with a $100 pet fee.

The requirements to rent our property are as follows:

1. PhotoID
2. First months rent and optional fee for pets
3. Rental Agreement, I will bring this to the viewing
(Options are month-to-month, 6 month or a 1 year lease)
4. Background check for each applicant

The provider we use is Tenant Verified, here is a link.

This is an affordable way for me to screen applicants based on previous rental history and employment information. If you have a criminal record or bad tenant history, I’m flexible and I will work with you.

Contact me once you’ve completed your background check. It’s in a .pdf, you can print it and bring to the viewing or email it to me. I’m looking for real tenants not window shoppers or tire kickers, right now I have 3 rental properties and a full-time job.

What’s the best contact number for you? Are you available tomorrow?

Enjoy your Monday!

Dixie Cleasby

From: liliarahall@yahoo.com
To:
Sent: Thursday, March 14, 2013 12:23 PM

Subject: $500 / 2br – 1150ft&sup2; – 2 bed / 2 bath available now in Lindon (Lindon)
Hi R*******,
Did you receive my last email?
The property is a 2 bedroom 2.0 bath with garage and washer + dryer. Dogs and cats are allowed with a $100 cleaning fee.
Requirements to rent our property are as follows:
1. PhotoID
2. First months rent and optional fee for pets
3. Rental Agreement, I will bring it to the showing
(Options are month-to-month, 6 month or a 1 year lease)
4. Background check for each applicant
The service we use is Tenant Verified, here is a link.
This is an affordable way for me to screen applicants based on prior tenant history and job history. If you have a felony or bad tenant history, I am flexible and I will help you out.
Contact me when you have your background check. It is in a .pdf, you can print it and bring to the showing or email it to me. I am looking for real tenants not window shoppers or tire kickers, right now I have 3 rental properties and a full time job.
What is the best contact number for you? Are you available tomorrow?
Enjoy your Thursday!
Lilia Rahall

The name listed is “ Nieves Baltimore ” It seemed suspicious to me. Here is a copy of the email, sent from nievesbaltimore@yahoo.com on 1/8/13 at 8:11 a.m.

“The property is a 1 bedroom 1.5 bath with garage and full size washer and dryer. Cats and dogs are accepted with a $100 additional deposit.

Requirements to rent our property are as follows:

1. A copy of your drivers license
2. 1st months rent and optional fee for pets
3. Lease Agreement, I will bring it to the viewing
(Options are month-to-month, 6 month or a 1 year lease)
4. Background check for each applicant

The service we use is Tenant Verified, here is a link.

This is an affordable way for me to screen applicants based on previous addresses and employment information. If you have a felony or bad rental history, I am flexible and I will work with you.

Let me know when you have your background check. It is in a .pdf, you can print it and bring to the viewing or email it to me. I am looking for real tenants not window shoppers or tire kickers, I have 3 rentals and a full-time job.

What is the best contact number for you? Are you available tomorrow?

Enjoy your Wednesday!

Nieves Baltimore”

_______________

UPDATE: Donella’s newest name and email address is  DONELLA WEINGARTNER donellaweingartner@yahoo.com

NOTE: ”Donella” also known as ” Donella Pomponi ” also pretends to be Kembo009 – kelmo009@yahoo.com and Kelmo009@yahoo.com – Kelmo/Kembo009 also pretend’s to be a Craigslist Admin in a Craigslist Scam. The Craigslist email is Info@Craigslist.com and other fake corps. Donepom09 is also BernardOBI@lawyer.com and analonzo090@yahoo.com donepom09@yahoo.com

The last IP – 208.179.199.135 – has been blacklisted and 173.221.123.190 and 209.216.206.176 are most likely just associated with the scam-email. But regarding, if you come across either of the IP’s mentioned, STAY FAR AWAY. For a list of other scam/spam usernames and IP’s that are associated with this scammer, please click: 208.179.199.135

This Nigerian Scammer has been spamming my (made-up) email address under various names, emails and scams. I’m sure she is also some of the other scams I’ve posted on this site but unfortunately I can’t keep up with all of them so if you know of any other names/email addresses that Donella-Pomponi goes by, please leave them in the comment section. Thank you.

Name/Email-Address: Donella <> donepom09@yahoo.com <> 

Subject: RESUME
Email: We got your resume and email from CRAIGSLIST and we’ll like to offer you a Job with our Company after thorough review of your resume.

PRUDENT POLLS LLC is a well established Evaluating Firm, Our Primary Business is to provide exceptional Customer Service Evaluation. Our company is solely responsible for hiring survey agents and recommending them to our Clients. The clients are companies that have a wide network of businesses across America, most of our clients have retail outlet in major cities across America. What your job (Survey Agent’s Position) entails is to conduct surveys at any of our client’s retail outlet assigned to you. you will be patronizing their business and conducting a survey at the same time which mostly is in regards to the customer relationship their staffs offer.

We will therefore like to offer you the job position as a survey Agent to conduct customer service surveys in your area.

Your Job will involve you providing feedback to us about the customer experience at any client’s locations. Companies use this survey for many reasons. During a typical survey session, you will make observations at a specific store/office, restaurant, or other type of location, while acting like an average customer.

A typical survey report will include

1) How long it took you to get services.
2) Smartness of the attendant
3) Customer service professionalism

Most companies employ our expertise when people give complaints about their services, or when they feel there are needs for them to improve their customer service. Your Identity would be kept confidential as a safety measure. You will receive $400 on each survey you conduct at any time for any of our clients, and with the number of clients we currently work with, you could be conducting as much as 5-10 surveys weekly, which will earn you between $1200-$2400 weekly. That means you can earn about $78,000/year doing part time.

Our clients include:

McDonalds
Starbucks
Dunkin’ Donuts
Washington Mutual
ACME Check Cashing
Chase Financial
Walmart
MoneyGram America
Victoria’s Secret
Dell America
Western Union America
FTD Florists

No commitment is involved, no start up fees, no paper works, and you would have flexible working hours.

If you are interested, email me your full name, address and phone number, so that we can add your mailing address to our Regional
database.

First name.
Last name.
Address ….(No P.O Box)
City, State, Zip Code
Cell phone Only.

Once we receive this information and confirm your interest, we will introduce you to our clients immediately.

A swift acknowledgment of this email will be appreciated.
Warm Regards,

HEADER:

Return-Path: <donepom09@yahoo.com>
X-YahooFilteredBulk: 208.179.199.135
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: ifQ22vcWLDsHu7YfnZRFP18bufrCnJDst_adfOBeTlqEdXJ4 CJhid64YeK.WgpD5YK0F27QmPohwh0k7AZ.qJ97E0.PBfpjpnrk2v1TwNHHE 6muDb6o6LOjLCmv0eT.1MM2u.qGkT5ChOfFaU.8fQI4bc2g0aCHTyvCKWdX6 4.x5utKcq5B90ULEt0JZf29dqU.9dYg7w52uPh2nN5tiHEMgJiDfIGzM7s69 KFhzHdJSxuLBPq5L2nXV8H9ceVUyCpiFZD_l14dwmdpGnRayJQp_2JqVeON7 HYoObwxXEH0h98bC9y8qepGIaubu0l9rswQS94BppZzWL7RAS1bxW0Fs.ysg IR8ZGGRoN4zS4lulMsOfKVLEcX8noH3JeMLwN1nVYVS2urG30xRZ_9qGmdOM xTO07MYSjs7iIIwLOZfGxe0T60BL_yDnuaaDMhJeO_41N_H5f_6XiFjURgrZ dfUGFKNj5LxSSboKHOjTD5lfZDYZ_IuhR6_CtziXJfzHz1iSqggTjMPzwrr6 hu9tQzmggOdIfpAu2qnzVGFHfgrDkwWPZwkVXXEF7nIgzWK8A2wU2vsq1qG5 aLBQSmTf_ZH7kMREkBZKyPi0A77XgF_100pPycHaJa410UQph5Z8S71ChYWT 4exOa0ihWFptdLKihIii8WF.zc29QOb1_896zrxUVEBTP0lBkH8Gb2qQou2S HBXAUNiK4BHj43MhtXjEmq29qxUI_WJ8MnA5VdyRtXBippIWpSxIoWDmO_x_ sCoV2n7_Yn5fc0.RRbUM6iSH4cFyQwweFNfu4WrCPAnUhL7mMfAlGowdfk0F f.BRn7VTx8tvkFs_pjEgeLEzBD6nLjV0fZ4mg74pvMiRNABmYxvTIwSMESa8 o1qULvM.B6Sw32Jl24EIs5sgQmOj3Q64q0ZjseLCBcqcx42flja0S76NM9_m WRvO1racmCrdt7OEFaZaXFYVsY20hZeqUAbzjA_9mbXC_BzJAhnyYtwConGv eyjR0UsOBvNVTcBMgOHCrVLLNPWxKc.WDTrqFiCs8z5k4wPzTIpYwD7wFTJv svg5HWNtslqFqdMkROFFuOjgE4xVhH25kUA5U4XqCxGSbJnCa8RwnI6c30nn A7lmpehZmrs7hz2FfzZnBk3EpRrq91giaxRiMK4G8l5MXkWiSosLxpujt65e .NHOyUCU4jf2IJhccOv67Lsse1qQo1OdBe4kVxxATCOpdqN0G8XwDePIn8P9 tfqxsrsX4L8KatpIz3iDx8jlRZ19bRI9pRDvqEByy0PE09HGtL2YpziRDENY V_CoFQfik7_sBSeNJm4gl2HS8bf7O20H6M.p8ClKX8hCazws5cxs.1A22Qtl LKqRW2_GF.eTSvjIMqqNCbytz4bOYeF9UM_C6RZsTg09dtWK.hBd.KNCgyqy HTbxRfF_hp3tv6xxf2UjKioAzL1Y7Ti8zDHYetuyiaE7bY89_ABQP4Ry601n NDR51DcDR6WBZavcLijEoJtzuaR6DkE.GtJviLGWf0coGa4DFcx7m8q6_72J LpllBUuk
X-Originating-IP: [208.179.199.135]
Authentication-Results: mta1167.mail.bf1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO postoffice.altimages.com) (208.179.199.135) by mta1167.mail.bf1.yahoo.com with SMTP; Sat, 27 Oct 2012 15:31:58 -0700
Received: from 173.221.123.190.nw.nuvox.net [173.221.123.190] by postoffice.altimages.com with SMTP; Sat, 27 Oct 2012 15:06:30 -0700
Reply-To: <donepom09@yahoo.com>
From:
“Donella”<donepom09@yahoo.com>
Subject: Resume
Date: Sat, 27 Oct 2012 18:07:07 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset=”Windows-1251″
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Content-Length: 2652

Return-Path:
X-YahooFilteredBulk: 209.216.206.176
Received-SPF: fail (domain of craigslist.org does not designate 209.216.206.176 as permitted sender)
X-YMailISG: _lHCni8WLDvrWGy3pDHtD5dtHxniB5IuSukY6RXLo5vdacie UPFwjA8fJv5cizR3utChLxu9PHSc59olCOxJUTQgMPQ.z8_Y1ENjSGlVt2a. ua5VrRGyzbTzICpYi9MrHtC3EU9M8LPq8RCN.vOK0fI1z1xdIktCD8MaYnpb KYZ8I18TrDdiNeXX8JGLjfYAyrrBisnJxxOXzIcHcGzsE4YrSoQPgqzTlxmn MsM_a0K6b_DZB2Df1WiGYa5LWe1kBaxJaSp5m7b8nlFaKT9XDkPImbOXmccM jmnyhbeUrWIouL7nilPXBeFu_z6KW157UERKlhHTLoqWXOfnBV1ZQafCWpIY HIGQH0H6t6K4pFipFA3hKjct405xDONOZbI5TFCYs.9tIykzGJMQnHWiRzWr BS3nBNe7XDKlg67SWiWgxTeyGc0xUp1iPazCgZ8pbDqTpOHDuu_sq_Dg4yXE y3qdoS5Lj.xymkOj4WPl8.PnQ1eypg8AIFbkOfYV7hv9tMWUvJVhb8IQNEHx 4aVpSzCVFIB7V8lLk4TceRTqd_ORtidR51Xf_n5dhsDUWs6MdZLLVPLN0E2D VjcQLfHNwVxBNQ6ymqn2cxLmj77jDOaGV8L5V1eHEmxLai_7J9nb0wRzliNG GdE_chCpWBLr1s1dDVuBSvoDl3ozrhc47cZr2k749sosTrl7g1CwOEEYh.0y SlfLGavGBzsby5iR9pETyupE3IlKqqxBFSqU2xK9X_G5ghLyMomqlgk1MTIo qnQDPwJ6qMQw16S1QpJ4_iYxh2adUupwfPSYYHGik5bGMjiFgoNwfajBjcy0 5Pi7GwvkQ.Z9eJTOiJzZOidkheR3kC5H6XgpHcCI9asNyS01ELN.43sajJCy YTz7.Xj_.5iZUV5B3_L.e5mvslDSI0R6_0oGvC5yxihSGMKtVAD8L8neewwz qY2EcJ99eHw3a7QdxQoDtBk.UsZA5nAl.Kv9oK2kBw6PriDAwP193cOJSzjM zEIAM8EHJPbYD9p4v5Ym7R3B6DLjuaQxduSQj6aROxlKYO_F34ebVucBHhwI mvpO8DxcfbHhaQAyVzC_w33sYiopdaB1sPkGk1sYf6BU7BKJenRwm8S0neTv KNvHqxH0rx64GLjr
X-Originating-IP: [209.216.206.176]
Authentication-Results: mta1413.mail.mud.yahoo.com from=craigslist.org; domainkeys=neutral (no sig); from=craigslist.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO witt.m5hosting.com) (209.216.206.176) by mta1413.mail.mud.yahoo.com with SMTP; Mon, 01 Oct 2012 04:36:37 -0700
Received: (qmail 590 invoked from network); 1 Oct 2012 04:36:37 -0700
Received: from 173.221.123.190.nw.nuvox.net (HELO User) (173.221.123.190) by michaelmccafferty-com.m5computersecurity.com with SMTP; 1 Oct 2012 04:36:37 -0700
Reply-To:
From: “Craigslist”

173.221.123.190 <> 209.216.206.176 <> 208.179.199.135

 

Tags: , , , , , , , , , , , , , , , , , , , ,

“REV TONY JOHNSON” uba_bankof_africa591@yahoo.fr

Nigerian Scam – This Scammer has been posted on many Anti-Scam websites. Beware.

Name/Email-Address: REV TONY JOHNSON <> 00000.peter3836@att.net <>

Subject: FORM UNITED BANK FOR AFRICA

 Email: (Scammer sent link/document that I was not comfortable posting, or clicking for that matter.)

Header:

Return-Path:   <00000.peter3836@att.net>
X-YahooFilteredBulk:   98.139.91.85
Received-SPF:   none (domain of att.net does not designate permitted sender hosts)
X-YMailISG:   9kknV9oWLDtv8vRtznpLL4tOSNsNqpkx60GsStjuE6MxcWbj pwKfClOL.QTMvcLM1DeCTRRCA58LtJ3qsLU261jczA6zscd5va4dFrPXCd0e J3jD9vdjczMRii5W78ivqinobrAaYifVgOGJzc8eGNlfCB0IG7RF8xZy9Z3_ iZpVOQYkFvZXGD90QbB_p.zqu3MCfvT0wS_vX3ZJ1pqCDzkEcMzGlN0kqMpC 16EgDaXweYUo5fKTL38RIuCu5O_k4GygqaCqbeqngwNehIk5uERyD4K.7WYv PKYFhv6EfPEkyp64.VI5T8EROKUkxqumzRlhsoJhhMUl83p2kPNMJjtXCcnE JlXG6x0e.fpi.fFKOWIeDD.zlOZ3VtStaNdsjejyUT2ha4EakBxhfaKWYrMX tYvkj8JpKOkDBLLA06tbsz0GfTWtnX9V402tYzUJ_zvyyDAQfxUpB6K6Xmer xb7RqlSvfLOIJWXx9vR8SpfT7hEn_bYBw4J9XzSMYZgO7006VgsKp0dSwJ.s p.B_bA8.hH4DQA0Yg.wCKGALoWcPTn0zm5I2UDjHOBaVnY9.tk4gHzyC8H32 VEMQ6jutQLR2gbqd.itrzexsuIEniQYaWg1qHPn_rqNedC_ZnMVppjE.1WzY 5D2RM1L7eMXAMdDdGPL5gdutZzb9SkIH5jZIAJ3nIx4102lqPmyTUMInHTc. eUDYUu7YfSqk4VxKUYli.ApgiSOoXOH83lp2UcR9Wegth_8meGXF2_cIV9XP BBkmuBMAQ7joz5ya_0LDhw03vscqEdZAlK5y.KfZ2tucnRp.einNgBpu6ne_ FmPmUINhGqAB7OGbHqhDw4O158ZND2DPbboEOY8SPBLfhonxT4nwc8oqjBa0 Ab3lBM_hZvp5aDnkqFLO4KA5gYfZugmxqx0TOSKc12P6i7g45lDyKuXomZZ2 G43GuzqwuQt14qUmHlrKRdYq2yEPXEH9HaToxqss2HeHA1PsnlWNV9jw5oYp j1vBLZWwOqtiNjFEsl0hXW3EfeuRHb1BRO6NESnBDIe91yn8G0L2MYHhDLuZ MhnBVdrtp5X0oE35jbf9JdlLWTZYL..d4T.Unersk9POawr73vVcS.NZvu2D dE7hkPjIPcxHwWOrIgn17R8qM5.e.upECnZFt.z98diR5uuOjbuIMLHRn8x8 GksEysN6D60pNz2tWoYD8L4gHj.Ffqs2s7NN88la50ekFXvleEO1jPQKsI.. 2RbtSb.841SOsCklvwH9l2k2TUT.QYFFgF97c7rA7OkzVqJ6Oasna_lVtyGE Q_8ddeakp77c_sFfNSi0ZJkrn.SvWb_D
X-Originating-IP:   [98.139.91.85]
Authentication-Results:   mta1330.mail.gq1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm15.bullet.mail.sp2.yahoo.com) (98.139.91.85) by mta1330.mail.gq1.yahoo.com with SMTP; Fri, 26 Oct 2012 13:01:29 -0700
Received:   from [72.30.22.78] by nm15.bullet.mail.sp2.yahoo.com with NNFMP; 26 Oct 2012 20:01:28 -0000
Received:   from [98.139.44.92] by tm12.bullet.mail.sp2.yahoo.com with NNFMP; 26 Oct 2012 20:01:28 -0000
Received:   from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 26 Oct 2012 20:01:28 -0000
X-Yahoo-Newman-Property:   ymail-3
X-Yahoo-Newman-Id:   178330.64391.bm@omp1029.access.mail.sp2.yahoo.com
Received:   (qmail 52467 invoked by uid 60001); 26 Oct 2012 20:01:27 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1351281687; bh=RQIxipjXyx4BouKhwZOYvYRcKeMe+7hwEu6HG+WEL+o=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=YZ6JpD3YSQW1ibUtJpE7WgIV1VrnJ90JseU9ZViOOVLf6Cwsk8RgOwafTBfWS+Uy6bTqXVvhSh03CC6I/LLOGLpKngyOthP+BN1IYzVNvjlFd0ZVjXyLd1aRLdx0Rr6sfpRkGGjV5ExDdWZijT4IgBHWCLxZnctkK7iKHCWWkyI=
DomainKey-Signature:   a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=YdiXJPTNfi57rrAvl2qFQqgos7B12berpWMr2sjI4Hyx+SllX+6ACrFNrdVKEOyBwlgWyRfgm0yaZMalSMnn3/k9SRc2XU5cWZ7kQ0Aq6blIHnrdQl8XdUU048EOnxEDC4Uo9L+IdkvJx5Qmw2O4A7Rt4yh5Ak1hj81J6pUf+UM=;
X-YMail-OSG:   CnrxdaUVM1kVlJI7EBoIvg6DvDRmUrFoxHg3.LWENJwvaGh s52Ne4N3.F0QuS0uqUm9xAw.qaQBj2jQvrfc1RQ.zEoUxwIwIioTNq5.zWIZ Atm5BzoA1b3FsK_xbxh922lpBOVGOGxlTyVjvIHO_Ew.cFsCqDsmSezRjj2l v6da5CpsgQRCN.99Mu7SiuWLTB6Pw1DXFvHD1JFdfum3WpSUnWOzghoyWqK_ V7imNRSOUnU3Z8oo02aa8dSDCnAGK5Wkqivu5pQFxY46IXjuNHLPfYJeToFF dGOIHdYvIujkkxI1BBV34TMc.j.wwdayKG0stw49yi_MIXl1lByRByL223VQ DDOk4eWHjXldkzEuCAykD3o5bQKu7MiESONz4FfwfUbguimznyRHkqI46WsA _xBOXBhpH6y5LEdEIS_bGD5NFh3G2oKC_VEKX1_bEE4YzZAUXFuBShOZqNm9 7SUHvBOoj_CXwUcvNVkn8mngqHWUf0eaDzPK61dqFAuoJJH_eVpkO4teYlka jwC.r
Received:   from [173.13.200.181] by web181005.mail.ne1.yahoo.com via HTTP; Fri, 26 Oct 2012 13:01:27 PDT
X-Mailer:   YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID:   <1351281687.63772.YahooMailClassic@web181005.mail.ne1.yahoo.com>
Date:   Fri, 26 Oct 2012 13:01:27 -0700 (PDT)
From:  
REV TONY JOHNSON <00000.peter3836@att.net>  
Reply-To:   uba_bankof_africa591@yahoo.fr
Subject:   FORM UNITED BANK FOR AFRICA
To:   undisclosed recipients: ;
MIME-Version:   1.0
Content-Type:   multipart/mixed; boundary=”2044483418-1914170016-1351281687=:63772″
Content-Length:   4944

 

 
Leave a comment

Posted by on 10/27/2012 in Uncategorized

 

Tags: , , , , , , , , , ,

“Mr. Burichin J. John” a.k.a “Mr. John Abu”

419 SCAM / ADVANCE FEE FRAUD

credit_card_scam

Subject: This is to Officially Inform You
From: “JOHN ABU” <golden2un@konin.lm.pl>

Dear Beneficiary

This is to officially inform you that we have written to you before without getting respond from you and we believe that our previous mail did not get to you therefore we write you again. We are contacting you concerning the release of your inheritance fund / Draft /Cheque /ATM Card which have been delayed for transfer by some officials who claim to be in position of your fund thereby extorting money from you in one way or the other.

Your Fund has finally been approved for transfer by the West Africa Fund Monitoring Unit. Your fund will be transfer to you via MasterCard ATM/Draft/Cheque/ (any of your preferred option) which is cash able in any ATM machine or Bank anywhere in the world.

We hereby inform you that the Inheritance Funds worth of US$7,500,000.00 (Seven Million Five Hundred Thousand U.S Dollars) only has been credited in your favour as the first part payment of your inheritance fund which has been delayed by these officers who claim to be in position of your fund.

Therefore you are warned to stop any further communication with anybody concerning your inheritance fund.

Your fund to be released via MasterCard ATM/Draft /Cheque / (any of your preferred option) in act to uphold the rule of law which we represent.You have to reconfirm the information’s below for security reasons. The only money you are obliged to pay is $250 dollars which is the cost of the Delivery.

Send them the following information’s of yours for the conclusion of your ATM Card/Draft/Cheque – any of your preferred option:

Reply to the following email address: westafricafundmonitoring@live.com
I repeat reply to the following email address: westafricafundmonitoring@live.com

Full Name:__________
Delivery Address:____
Country:_______
Occupation:_____
Phone Number:____
Age:______
sex:______

Regards

Mr. John Abu

Return-Path: golden2un@konin.lm.pl
X-YahooFilteredBulk: 83.242.127.230
X-Originating-IP: [83.242.127.230]
Authentication-Results: mta1278.mail.ne1.yahoo.com from=konin.lm.pl; domainkeys=neutral (no sig); from=konin.lm.pl; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smok.lm.pl) (83.242.127.230) by mta1278.mail.ne1.yahoo.com with SMTP;
Received: from User (unknown [202.118.236.178]) by smok.lm.pl (Postfix) with ESMTP id DF6CF191B9D; Fri, 17 May 2013 23:55:44 +0200 (CEST)
Reply-To: <westafricafundmonitoring@live.com>
From: “JOHN ABU”<golden2un@konin.lm.pl>
Subject: This is to Officially Inform You
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Mr. John Burichin westafricafundmonitoring@live.com West Africa Fund Monitoring

Name/Email-Address: Mr Burichin J  John dl46988@bellsouth.net  jburichin.john00@yahoo.com 
Subject: YOU ONLY HAVE YOURSELF TO BLAME
EMAIL: FEDERAL MINISTRY OF FINANCE NATIONAL HOUSE OF ASSEMBLY COMPLEX SENATE HOUSE – UPPER CHAMBERS WUSE DISTRICT, ABUJA FCT- NIGERIA Our Ref: FGN /SNT/STB I have to inform you again, that we are not playing over this, I know my reason for the continuous sending of this notification to you, the fact is that you can’t seem to trust any one again over this payment For what you have been in cantered in many months ago, but I want you to trust me, I cannot scam you for $79.99 it is for bank processing of your payment, the fees of $79.99 is clearly written to you before, I didn’t invent the bill to defraud you of $79.99 it is an official bank payment processing fee, and the good part of this, is that you will never, ever be disturbed again over any kind of payment, this is final, and the forms from there becomes effective once we submit your payment application processing fee and pay the form fee of $79.99 I don’t want you to loose this fund this time, because you may never get another such good opportunity, the federal government is keen and very determined to pay your overdue debts, this is not a fluke, I would not want you to loose this fund out of ignorance, I will send you all the documents as soon as bank payment processing fee is paid, you have to trust me, you will get your fund, find a way to get $79.99 you will not loose it, instead it will bring your financial breakthrough, find the money and send it to our bursary. The reason why am sending you this, is because I want you to receive your USD 1.7M immediately we are trying to round up for this payment program. Here Is the Payment Information through Western Union NOTE: MONEY GRAM NOT ACCEPTED Finally my advice to you is not to abandon this transaction because of the requirement of ($79.99) Receivers Name: Ekenedirichukwu Emeka Address: Lagos Nigeria Test Question: God Is Good Answer: To Me MTCN________________ Send all the details of the MTCN direct to this email. Yours in service Mr. Burichin J. John CHIEF AUDITOR TO THE PRESIDENT http://www.nigeria.gov.ng
HEADER: 
Return-Path:   <dl46988@bellsouth.net>
X-YahooFilteredBulk:   217.146.183.189
X-Originating-IP:   [217.146.183.189]
Authentication-Results:   mta1142.mail.gq1.yahoo.com from=bellsouth.net; domainkeys=neutral (no sig); from=bellsouth.net; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm15.bullet.mail.ukl.yahoo.com) (217.146.183.189) by mta1142.mail.gq1.yahoo.com with SMTP; Fri, 26 Oct 2012 22:57:07 -0700
Received:   from [217.146.183.213] by nm15.bullet.mail.ukl.yahoo.com with NNFMP; 27 Oct 2012 05:57:05 -0000
Received:   from [77.238.184.71] by tm6.bullet.mail.ukl.yahoo.com with NNFMP; 27 Oct 2012 05:57:05 -0000
Received:   from [127.0.0.1] by smtp140.mail.ukl.yahoo.com with NNFMP; 27 Oct 2012 05:57:05 -0000
X-Yahoo-Newman-Id:   688540.23795.bm@smtp140.mail.ukl.yahoo.com
Message-ID:   <688540.23795.bm@smtp140.mail.ukl.yahoo.com>
X-Yahoo-SMTP:   Upd.lqSswBCX7afte7DsensppMhRuN6HxniFKWm1.X3_6Q–
Received:   from USER-PC (dl46988@62.193.162.122 with login) by smtp140.mail.ukl.yahoo.com with SMTP; 27 Oct 2012 05:57:05 +0000 GMT
From:  
“Mr. Burichin J. John” <dl46988@bellsouth.net>
Subject:   YOU ONLY HAVE YOUR SELF TO BLAME.
 
Leave a comment

Posted by on 10/27/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , ,

 
%d bloggers like this: