RSS

“Mr Paul White” is ”Judy Peterson”

16 Nov

Inheritance (Beneficiary) & Romance SCAM – NIGERIAN 419 SCAMMER – Advance Fee Fraud

 

Mr Paul White <> mrwhitepaul2090@gmail.com <> mrwhitepaul456@juno.com <>


EMAIL: 

I received your email and note that your ATM CARD has been issued by the presidency and we have been giving the go ahead by the president to deliver it to you but the only thing you are to do is for you to fill out your details and also send the fee to pay for the delivery  of the courier and also the document which is the INSURANCE BOND  CERTIFICATE that has to be on your name to backup your card for successful delivery,as soon as this is done your ATM CARD will be delivered to you.

 

Note I do not want you to loose your funds now that the president has approved your ATM CARD and also make sure you do not contact any one because they do not have your CARD with them.

 

I await you

 

Mr Paul White

 

 

 

> — On Thu, 11/1/12, Mr Paul White  mrwhitepaul456@juno.com wrote:

 

 

> From: Mr Paul White  mrwhitepaul456@juno.com

 

> Subject: Dear Beneficiary

 

> To: 

 

> Date: Thursday, November 1, 2012, 1:05 AM

 

 

> Dear Beneficiary

 

 

> Good day?This is Mr Paul White From Nigeria,We have your ATM CARD here

 

> loaded with the sum of $4.5 million and has to be delivered to you at your

 

> residential address over there and what you have to do now is to obtain the

 

> INSURANCE BOND CERTIFICATE that has to be on your name to back up your card

 

> for successful delivery and also pay for the delivery fee of the courier,It

 

> will cost you $250 usd and that is all.

 

 

> What you need to do is to re-confirm your information to us

 

 

> Your full name:

 

> Your resident address:

 

> Your telephone number:

 

 

> Here is the information of payment

 

 

> Receiving name: Teke James

 

> Receiving address: Lagos Nigeria

 

> Text question: How are you

 

> Text answer: Fine

 

 

> I await you

 

 

> Mr Paul White

 

>

HEADER:

Return-Path:   <mrwhitepaul2090@gmail.com>
Received-SPF:   pass (domain of gmail.com designates 74.125.83.68 as permitted sender) ciBBVE0gQ0FSRCBoYXMgYmVlbiBpc3N1ZWQgYnkgdGhlIHByZXNpZGVuY3kg YW5kIHdlIGhhdmUgYmVlbiBnaXZpbmcgdGhlIGdvIGFoZWFkIGJ5IHRoZSBw cmVzaWRlbnQgdG8gZGVsaXZlciBpdCB0byB5b3UgYnV0IHRoZSBvbmx5IHRo aW5nIHlvdSBhcmUgdG8gZG8gaXMgZm9yIHlvdSB0byBmaWxsIG91dCB5b3Vy IGRldGFpbHMgYW5kIGFsc28gc2VuZCB0aGUgZmVlIHRvIHBheQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzM-
X-YMailISG:   MSoeIOkWLDtHW9x0uNSzc8WZD3.nVCiKVcVohr.aWgYn72kH eJWC6.A9hRLcAq23yQedUmxaJzRQ.DNVGXp2SEa3GHFh1A9iuiXYzQqH.gq6 Td46np_gRqR53wCozKHxgNzdZbg4luN.RyPsoP4bjImZAsnSrblllDwZlVuQ EICLfPld8FKnO23XqDwyWAjHUOxJCB1TMfIzDyEpbbiHwV39Gl0gBasJ1R3T bx.D7_QtpXMEQzgFoO_3DsAvaps2Bx2pS4m7DdRZHHH80GMERFfQRpuueqxH ICVfJ3yX8pcEEn2gc6LmsLRH16nCssdktKnLtw3mE51zrPAwb7pOrlD0dnej 1TP7oCh16SzhPKv14xnRESwc6HEIRygpNVOHchmSl3zXyxt2O_kGGYovp2JH 1J3vq6DdJ91xvazftL50ectADF0E.3FKs2u6W1cicqXovuMvnV9_pNWSsPb4 ajlzIueNmdRHME2nsnKKiwv1km64iUTzabNIEDASk_r0MmeYV0v76dBM.UfZ NagAolmzFqz9KDJbmFgEuFadBybLWjlFdSRifiHN4gcjisEtW_b_WLd13qad Tw4YoOTLpbXDdqwdA3kG8jXTJIVCYYH5guOAvzudlsiSc2xV8PfI66aGS_U9 dj.UMGjdqGYy4Pgh2ep8B5DgbS6cfTLMLIFMh6hWLf9m_3psXKIBHT6qGUbj OW9G0_47Uy7B2DWfW22cY9JJ49eBOfHwEdS51wAN6lvU27Trzcz3GKV0lkT2 RXfx4IxB2oJIAh4KytQMAVsE8mkeT7YJVn.O4DGtQxVOsnyiX9tytrtkFjuY kpmlllgDDn6B_23jo5VoW_8S0dhknm5DLXJQrNOPlgaZrQl.dD4fnH48qW9p 0KmpXQljdhA6Bxw62aCQPGmOLYv9gvOyp46p.VLKCPVeXvjYG_3uFH2MI5rU HRrlu0yaQ6R7uVVSvgv.0kq8bdayy1MnaM_yGn_4lZOiQWZeF3pE1aLYnqCm _QvVSVETwVKchhj7vwjntq44ilD2bXzSDP8JNVsBLAvxeb1n8ycewx_s7nSD UuRdqHEYPoniz9WeT6Vpz_AR.zMb_C6CsXYS1noLgE0ySe5xmqbnAtX0eMhx sZERJ8YZudt1MGy16PS9EWP2e6HHSJiUljbtNFf19MZz3epZiPxRo2265S7r tf0FfI6w_0jpJISzknbgPIsYLbYrwykW._T5
X-Originating-IP:   [74.125.83.68]
Authentication-Results:   mta1394.mail.gq1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO mail-ee0-f68.google.com) (74.125.83.68) by mta1394.mail.gq1.yahoo.com with SMTP; Tue, 13 Nov 2012 03:29:17 -0800
Received:   by mail-ee0-f68.google.com with SMTP id e51so278686eek.7  Tue, 13 Nov 2012 03:29:16 -0800 (PST)
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=yoKQDks/uFHuxfhYNKZpQL4lIC5qc+0JVRs4GKfkO98=; b=vuehpmABqm8daObVgvMVW+79wLJ6TTSdmb5emB5CxOckqFCO1ZoLVeaM4fKpt7IjTM M32e7uhU7G5pwt0/aJDbhL2OLzKb55TCpRqT/LyjXfq+YzRgOwqMLvOVsHN1UK3E0zXU aIj2hG/ovnMTlOpIPmvcc2mJCmGeQmK2cxTVVikeRGQv8t8GRuACOT91y51UaIUa/VAG qbVt3GKn1J+NMDLhfnhQ3NCrwtBnpdmWaI4PwR9sDVY2/xDM9E5SegGOEDixl5qaVuV3 2VfJXDa68Ng8m1KAt5asrurwp8k1iwcQW8HGqnv6rzlNkSaT8fpgx4ybCzAu2+KE53b5 yvPA==
MIME-Version:   1.0
Received:   by 10.14.213.65 with SMTP id z41mr73219533eeo.29.1352806156559; Tue, 13 Nov 2012 03:29:16 -0800 (PST)
Received:   by 10.14.219.67 with HTTP; Tue, 13 Nov 2012 03:29:16 -0800 (PST)
Date:   Tue, 13 Nov 2012 03:29:16 -0800
Message-ID:   <CAJ=7cqikeaxhhrrg14=JhgNMecePFv0qE-rfJYU71mCdv+fOMA@mail.gmail.com>
Subject:   Dear Beneficiary
From:  
Mr Paul White <mrwhitepaul2090@gmail.com>
To:   Me
Content-Type:   multipart/alternative; boundary=047d7b621ee269652704ce5eba2a
Bcc:    
Content-Length:   4662

 

Example Messages Sent From 74.125.83.68
From: “Alex” <volonter1964@gmail.com> 
Subject: RE: 
From: luis pedro <luispedro53@gmail.com>
Subject: GEWINNBENACHRITIGUNG 
From: Angelina Keith <gtcxxxx@gmail.com>
Subject: Charity Assistance 
From: serap caliskan <ingilizce06@gmail.com>
Subject: Hediye Kitabiniz Hazir 
From: Zara Camino <zracamino77@gmail.com>
Subject: offizielle sieger 
From: “Mike J” <rockwellalummj@gmail.com>
Subject: Your Reliable Aluminum Company 
From: judy peterson <judy4me@ymail.com>
Subject: Hello sweetie 
From: “Tom Bell” <danielbroody@gmail.com>
Subject: We’re Hiring! 
From: Super akcija <akcija@akvafors.lv>
Subject: Spasibo za pokupku! 
From: 班���组
Subject: 国家发改委培训中心[ 
From: Judy Raon <9ymercury@gmail.com>
Subject: Secure Web Application and Coding Workshop 
From: 3U Pet Supply <latoyia7o6b@gmail.com>
Subject: dog supply 
From: AL QADRI TAMMER <alqadri_tammer@yahoo.com.ph>
Subject: BUSINESS CONTRACT OF $16.5 MILLION USD OPEN THIS A 
Example User Names Used By 74.125.83.68
User-name: beijing
User-name: personnel

 

Paul White is also Judy Peterson who goes under numerous email addresses including: judy4me@ymail.com —- judy4melove@ymail.com —- treyryu556dyruur@gmail.com —–

Judy is already posted on this site and is under the category ” Romance Scam ” – You can get to her post by clicking here.

ROMANCE SCAM HEADER:

Return-Path:   <treyryu556dyruur@gmail.com>
X-YahooFilteredBulk:   209.85.219.66
Received-SPF:   pass (domain of gmail.com designates 209.85.219.66 as permitted sender)
X-YMailISG:   q2qYtNAWLDuVSliclPG5tcO7nEoGKi5QYFCg69rYHH2VIdBy VTGT68loHQov0AS5V32290CnFtJHWscSkPkzj45YquUWmUdGHSh1GQ8AL6Db KvFO0DGTAGcAhutR33.CEfdLDYNZdHDS6GipjSkzr1mCJmcMUu.O42WA4k5b E.3rhSrZ1c_.hX5ian4u3UGSOWj7bLbej9r9vViHPAiSNBEUvxfODrP8j7f2 1VgICRlqg9bCWAjSMi_BLTUeAKKR.gyOll3CQC7T.IyxfGK1YLk24xLnVQpx odaPqgRr8koQ4tg3Ql8.ZEeW3Kjcvb_sv5.Q5Pu41AYPwgruiRN6MTLI8m69 0G7R0IWD2egAbioIjdLyTxp5ZbkC9N8RBqa55A9MU.6mDjB5F6zd4PjbSWGE 7buqFXxgMdsFwikhUnnpKAaIphI_44ciWDopJ_iY6lrI_u9jAtrMaqvUj5NQ EaEz4MhCkqi.NUGSBeuSzxRhydUYorxZ72vzWjABszn7TZ4W9T3zu_YqG0zC O2n6EO_EyJO2bx5DPopdLwaywq5kZcgDDw.qn_7ArgGGZE6d8A6BtlYXd35W 64M4gg3WBGkrPD3AFdZf7GDkob5Xk22oZJdW5u5C6FzsK9C5JH.HChDaJP_n aZTPx8MFLbUAw9.LZGopJDYKNYmyTlKZUD.tCMLJLsliU4pkuPieT9r8OrXT 0m5BgRyxf2F7BfGtcAPy2wauERAikAi7HBdkyRnVPYR_4igS_woofNSqFjbS .u_O6VXClMtqvU5tC4SfO1Mgcu83lcYaA1d_sBt_VehKqOHnePbWIOtMW5Df TICBoGWPJHz7.mlWQEPUG0ccuPShpeZib7wdbvTbi8IxL8POah3nSCWruyzd ewGLtz4nMoKXMRoNqObt6ZAMKZSztJ8ixeJjThmw6OqfWeyPNiFygw4QeDEP e7dlaqJjda86niyQAyOrkJy61_fuYt526LH8TiMzNqCYk1AzbFol3fe3g7XW TZKgZQa2E6JbGY22QLVssZNHERNimeKOZCwDpb2ktQj59zJOPt4yuRzDyiCX 1Nk3qE6vhoFq8hK4cv4RzdV2._09MMVc9vHifj7Fvx3ub6h9ZrpcMr5ioFu. 2LKmBGgtsQN2ID2hjxQ8fm4v_YJgOTNznQoZ1MLh3H5SgRhIrQXqWPjhHBzt zOjm8f1EZu4QVRmOD9e_M1dPeKzKj7zh2CwGQZNr..v5kPzxiqAn9EAxjUT5 gk9ketJDYajX2Z9HWuig8ZlQTg–
X-Originating-IP:   [209.85.219.66]
Authentication-Results:   mta1275.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO mail-oa0-f66.google.com) (209.85.219.66) by mta1275.mail.bf1.yahoo.com with SMTP; Tue, 30 Oct 2012 06:05:33 -0700
Received:   by mail-oa0-f66.google.com with SMTP id k14so38347oag.1 for; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:x-google-sender-auth:message-id:subject :from:to:content-type; bh=rtKRnDa9SZkm1mtqi2HyK1eEedIzlkc4Z7bZKWbp2DA=; b=CgTZtR7uUda95WOzVKC0+Gaf9dcyZBpbd/N50LBy+LndRDyJv4JcqGBCKE3hb+plDc FlbO4GRPE/2adPH5xg7D6Nacryb10aI1lLB64GU0qDddD2TbFH5Ll0WIkfvhURnFDukC JIQTZ6eq8Jw7YhWK4xfAZihPEOIWobubj80omLFXjH37aFPXi/lGdTozzQ7IG+GZo35P U/CLn0drJRyWiYDWvqPLivEWOEV2BmEzWCZlA+Qfua/k84OXebexc72Yu7tXme+hdD+8 Ktc4A9XnmsnDVDFWuJmqV8BmqLIAU1/82tfRTDXGPlxRBdirPzw7d4r6UHsnMk7s25qD tttQ==
MIME-Version:   1.0
Received:   by 10.182.21.135 with SMTP id v7mr28031346obe.101.1351602332600; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
Sender:   treyryu556dyruur@gmail.com
Received:   by 10.76.92.102 with HTTP; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
Date:   Tue, 30 Oct 2012 13:05:32 +0000
X-Google-Sender-Auth:   ajA2UwthwZYsSy_kttSY7nR4zHM
Message-ID:   <CAD6XNVzah5yKWD-87NpAvaFZqc5y9uWRVWM30LA7_a7X2=Lruw@mail.gmail.com>
Subject:   Hello sweetie
From:  
judy peterson <judy4me@ymail.com>
To:   undisclosed-recipients:;
Content-Type:   multipart/alternative; boundary=14dae93b6374e98c1104cd467089
Bcc:   (deleted for privacy reasons)
Content-Length:   1280

98.136.216.26 added

 

 

Advertisements
 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: