RSS

“Collins, Peter E”

21 Nov

FRAUD – ATM CARD – INHERITANCE SCAM – NIGERIAN 419 SCAMMER

UPDATE FROM DR COLLINS PETER Also known as DR FRANK COLLINS Note: each time ‘Collins’ email’s me he has different addresses and IP’s so make sure you check both headers posted below. (the second email/header sent by Mr. Collins is below the first email and header.)

 

FIRST NAME USED: Collin Peter E

FIRST EMAIL: I am Mrs. Priscillia Thomas,i need your help to transfer 20,142,728.00 Million Dollars I inherited from my husband for more information, Please reply to me: priscitomas@hotmail.com

FIRST EMAIL HEADER:

Return-Path: <>
X-YahooFilteredBulk: 157.55.116.165
Received-SPF: none (domain of CH1EHSNDR002.bigfish.com does not designate permitted sender hosts)
X-YMailISG: A8zSEdIWLDtDE2pBn2j7Mg7kVH0A9HcFcs_CGir7I3SWxOc5 gWFUT56g4PVV_fYdmJLC_HKbSpMU7ZlnMSp.RDhVee.MNOhihGcSxyRoIl.s h6nlC5NSrJjmy7eLGgAsow5X9spU6qzeZp4jCw1j3fbQxUky6z3TDnF3Dt2U UDb0p6z2p81lNt9OqcaMss3JjSEU.6BtleBgn6A23X8_c3ZWGemeyqoFU2EG DZEtBOrrP2.kZTxusR8pGzCgaGz6q9wgn6yXwDNXrIwautUdkAqT8tjZL7Xh PWlBIZGZlvrAUg7Klkkpr1mE9Ewz7fvRydyT_qFe88ODYOzOUd_7K9r7rIFw WNnxXF6Emx9IT9YaVn_Da1TA9wSp.yW_dQ65dI4zKxZlU16lFNXqlFLRB2pL yMKLBNdHCwSFBMbBGHokSoGoPF17OwMCOhPCtq.j37SCgPcELPvXhSWwolvt 7bqlQi3Hw8YbvwYLf9.zqlOAeUpXnUrUdAi6QN8PZqiaX1n4iMdn4FtBljbj YLTi3zClm5roQl.nb8sQYt6aZk3NoByYY9cQh7.TQMPvxElS8Yu7_FjvLiu9 rt0yTGDn2Zf1TPJQPK0YQRKI8C7gkdptWgQWMf_F32RQ9TerVELP1viC02UZ H2S1A9tQbqx.Z2sn_mk09Y6uhE7I3SX4KQSN0wHuo1WQZnGEEKRNtsQFXvN4 cmL5hzjvvcWBA0EAle2sWoL.uCChUKZEPOVxjVmXm.R9k8zBTaqEYY2im5uT .MXfm1SafJFJsUchPRU87v4Yj1uVOwOj3lAOJqPdvJbYZo2TmbdWHoXt51oT QqxYcXFOdmoXGKxmi.8bVyfeMpVt36US39BF6DazGDGHgaZedgZSxBfmvglX pH4lP8oFyu6XLLGxYXmvt5xdANUgDfOtVOrIuwvLsFqYyM.paTffw_ETh1vH 1R5hDKC1QEK1NJ2p1DqEZeyZsg6HF5lX6_I2aRVUz7S4s1RA9J_BEl51Ogcj z.MK6mBQ5.hjrEOQX6ODF6FB03iGcl7OwUriiBtlLl8v3OEf2EAPAYrCil.R QVP8AtsL.clvE0E6NmhAb9fL9etnCiDSfhDjbsD8vMfqOQ2s6tVJuuPU.qT7 vO2B2ICarig2UYK3AbG4oBlxDLHrUoUIA0hv_CvvqfDKCGD7gS4DJSLGEWJV 2A.dFV.0A.4emCoABS.0Qv1o1n9sDqGO5ADD2aloIkWc.WLwcw–
X-Originating-IP: [157.55.116.165]
Authentication-Results: mta1217.mail.mud.yahoo.com from=newtrier.k12.il.us; domainkeys=neutral (no sig); from=newtrier.k12.il.us; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO CH1EHSNDR002.bigfish.com) (157.55.116.165) by mta1217.mail.mud.yahoo.com with SMTP; Tue, 20 Nov 2012 12:09:47 +0000
Received: from ch1outboundpool.messaging.microsoft.com (10.43.68.240) by CH1EHSNDR002.bigfish.com (10.43.69.241) with Microsoft SMTP Server (TLS) id 14.1.225.23; Tue, 20 Nov 2012 12:08:35 +0000
Received: from mail131-ch1-R.bigfish.com (10.43.68.242) by CH1EHSOBE001.bigfish.com (10.43.70.51) with Microsoft SMTP Server id 14.1.225.23; Tue, 20 Nov 2012 12:08:35 +0000
Received: from mail131-ch1 (localhost [127.0.0.1]) by mail131-ch1-R.bigfish.com (Postfix) with ESMTP id 147B0401A6; Tue, 20 Nov 2012 12:08:35 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:50.201.16.151;KIP:(null);UIP:(null);IPV:NLI;H:NTMAIL01.nths.net;RD:ntexch01.nths.net;EFVD:NLI
X-BigFish: VPS48(zzc85dha398ivzz1de0h1d18h1202h1d1ah1d2ahzz8275bh17b1eeiz2dh2a8h443h668h839hd25hf0ah1288h12a5h12bdh137ah1441h14ddh1504h1537h153bh162dh1631hbe3k15d0l15cma02m)
X-FB-OUTBOUND-SPAM: yes
X-SpamScore: 48
Received: from mail131-ch1 (localhost.localdomain [127.0.0.1]) by mail131-ch1 (MessageSwitch) id 1353413312648742_16690; Tue, 20 Nov 2012 12:08:32 +0000 (UTC)
Received: from CH1EHSMHS016.bigfish.com (snatpool1.int.messaging.microsoft.com [10.43.68.244]) by mail131-ch1.bigfish.com (Postfix) with ESMTP id 57645260079; Tue, 20 Nov 2012 12:08:32 +0000 (UTC)
Received: from NTMAIL01.nths.net (50.201.16.151) by CH1EHSMHS016.bigfish.com (10.43.70.16) with Microsoft SMTP Server (TLS) id 14.1.225.23; Tue, 20 Nov 2012 12:08:32 +0000
Received: from NTMAIL02.nths.net ([192.168.194.152]) by NTMAIL01.nths.net ([192.168.194.150]) with mapi id 14.02.0309.002; Tue, 20 Nov 2012 06:08:31 -0600
From:
“Collins, Peter E” <collinsp@newtrier.k12.il.us>
To: “info@notice.com” <info@notice.com>
Subject:
Thread-Index: Ac3HF8EFf0hwi3SMRaeT/rgft5INsA==
Date: Tue, 20 Nov 2012 12:08:30 +0000
Message-ID: <38A096FD7555034E86C81153095D831B015C15A5@NTMAIL02.nths.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [41.71.173.93]
Content-Type: multipart/alternative; boundary=”_000_38A096FD7555034E86C81153095D831B015C15A5NTMAIL02nthsnet_”
MIME-Version: 1.0
Return-Path: collinsp@newtrier.k12.il.us
Reply-To: <collinsp@newtrier.k12.il.us>
X-OriginatorOrg: newtrier.k12.il.us
Content-Length: 1152

NAME USED: Dr Collins Peter

SECOND EMAIL: Attn: This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-7030115459 ,

HEADER:

Return-Path: <web52644778980000x@att.net>
X-YahooFilteredBulk: 98.136.218.126
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: YxwxuscWLDtYRBlEuwlWrBw_0ByFAfeYeEaKlhKmf_Pqo3oQ VZ4RzgKvia0dbtrf82vD2MygMgJipAOcg0xhghxyhvviIGLdwL7O9HeA_MVd CTYGLOwuYMZNFxvjFm62VKjODYvnptlR8EP2Eq4bl7k5b40vuAKQlN.VEPv6 Jj6Hv94NjiaoP1DqZkJ9niVr4amHA2Krz7hUiu7nb4dKm5FksoBvOjLiu5c6 LHxAgL_1HwQC1Kj94cY6qI2QeZMVbZE8q4fnq1zWg.nXZRhqSr2Z3IE99Vfw wZ56W_kHMqjve3BFqLHqrBq8RKFRrEA0LIWoTxzT.SXuavzNzee4EgDmzQFG Azw55EUT4_L8CQh3Yvuo2mQqsL5b0DvfvtZgLcOjD60.rbyLf51x.t.t1fsa 1oEjZhoHjxxQ_bG_Ud44UCim9Aad_eUMKDNhKnRDHkyuvhq6981x7wC3Wrki zhD6OWa.KVTqY6RVBWhX6fgWm.qUZFTXpIDTFRgSjZTcIVgOmcPtIsNbPbks gayTqPf4rqmt_33Dez5Oe0dBUM.TJUwDanFeN7Az8x9JN5pNWjxybYOZ6mu0 1EzAgiuYd0zc_wF1bS1fDmTpxrbXcalKzBvT_GAZ1Rge1P.T9Ju5Z.wvtoRi wqzLdIQR.OJ4R4ADjlXDt_6MY.sWxwWbrsh62pdNCgNpoAJM9IcaoldrE6Wy xAeVMkTvdzh0OLi.r2AWk71jpv78aC7kn_vonZ1YHhV0armnTXgZAHbnbO6F ms6.bhBcpysOsOdkJuQ8l0llDNW0anfgunue24vR2UyAsfvxa5D_2e7D5Vuz dyXvxJC9q2wxkkR17TCc1eWwmBV2WC0OGQA0lPnYwXC9.yEVofWQKNjgsss7 0wjyMZ7LN98TSaNp_4JnxMT0HF2Fhhpbh7YY80jc5n_FyXP0AAt26MYs6aBK T.qEDebCeFuzB40HJcGbnJO.J4a8XjwVoysy3i5nTd6ax3p1fCHqMU3tR9jh b.i8Qr4pUCBGxaNBhT1_dQ3b1sYVNd7pMi9b6dvEmmGH9dTOtRewwZvd2nvn 8oDpVXiYIzqx6Rq9ZSZIkJxb9HOhpjhN8mq3Guaq.mQ2YUN_.q2034AQmjzY 8YOUg8CZFXzXJY38jakTJIjuiXD8BOagQvhFHUIiK07F7luKu0vFisMrqAvg oNshOmGpcxznwZ9u.c9DnN2tcjL0OgzDpvg3Unkg3p29sDV6CMFXqf2v1QpQ sKcLP7oQKRmcKvaXxNN6.tyYsNUkH1Bksqg-
X-Originating-IP: [98.136.218.126]
Authentication-Results: mta1033.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm11-vm9.bullet.mail.gq1.yahoo.com) (98.136.218.126) by mta1033.mail.bf1.yahoo.com with SMTP; Tue, 11 Dec 2012 06:46:42 -0800
Received: from [98.137.12.55] by nm11.bullet.mail.gq1.yahoo.com with NNFMP; 11 Dec 2012 14:46:41 -0000
Received: from [98.139.44.74] by tm15.bullet.mail.gq1.yahoo.com with NNFMP; 11 Dec 2012 14:46:41 -0000
Received: from [127.0.0.1] by omp1011.access.mail.sp2.yahoo.com with NNFMP; 11 Dec 2012 14:46:41 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 713612.98465.bm@omp1011.access.mail.sp2.yahoo.com
Received: (qmail 53233 invoked by uid 60001); 11 Dec 2012 14:46:41 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355237201; bh=1Tsupv5caskqf9mge0R5RXi2qnrZiMm1Aq74YLv1THA=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=d0RbFWDQ2rV8/8EXXlMR7i2VOjKilYeOBFydV1IW16ocBNPVQMUNHFzIM6L3A2h4gqL3Grzh8MgbGkhwqhOlWMu7My6F8FKiIf+Pg5ye5iuwah/8G6S1Ado8CChFMhmECHbzGAwLDbrxPlRFKvz5joLrsKMtRzKRtcE5eXphoGA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=vjMzxQxarqcqmShOCLgE0HDBbv9eGBiPHgQKKYF4O5TCYrCvNT3eU9W0hvngieNBEGMbuiR2/ZoXPq873PanQzZD0By1gxA2Fmf/8Sthuei1fyBqDwvcd6nl3Dvv7uynmy0Ya+st1wQ6JH/BShU88SffXHjTLkjLkt6lxEEktr0=;
X-YMail-OSG: pgvQF3QVM1mLxZmT73VMfxmEGdzXaRnQRMYeQPC63iaQjwW 4K__5URLbF_yynhsaAouwFbc08adA0R4mnNqiV7YHyxU0tr11LXo4Ta_0KiQ TxVS..r_9SsgbyOZjhMSXrjXbXJ0GHf47ktIl028sBsTjWbcxtPXSQqbPyMQ F4QNhvxM.BVDpOh5T5oFYwuoORrB1NLSM3csjYOg8LvqCtdnvTTwoYkxokns 9xiHNLl83SO2R2DHSayC.6oNQLjvYMPxh8Aeym4t_6ajnBr4DfRGx1TPrs23 gQrSqww3hv.xnu5ggtpJ3j15R6o.gHcdWPsXslYVUJHwh0WtHcK7MkQZw7gc 8sBseuqMwUeoGZ113dC7howF0iEEmrCoduq8mPsfH7mFEZz7g4oJrkl0w_n6 kX1dWfnuQ3LPbUf1PgsoqlP7nCEQ3ZEpKGet6VglOMgncopioOk8Z_fVN5Hw lmdaAPfS91ze0AWfaLqWRth2qUVz8sPz.TjOgloZYT28Sq1yGuMg5uezQIzD OZBs0oZs_Pza2bTonu1swUyBd3jlvdll5CUc-
Received: from [172.163.86.61] by web180804.mail.gq1.yahoo.com via HTTP; Tue, 11 Dec 2012 06:46:41 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355237201.98816.YahooMailClassic@web180804.mail.gq1.yahoo.com>
Date: Tue, 11 Dec 2012 06:46:41 -0800 (PST)
From: Dr Collins Peter <web52644778980000x@att.net>

SECOND EMAIL FROM: “Dr Collins Peter” <web52644778980000x@att.net> REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com

Scammers number – +2347030115459 (prepaid throwaway phone most likely)
info@notice.com — 41.71.173.93 Location: NIGERIA – RIVERS – PORT HARCOURT (LAGOS) Scammer using fake IP with the location: United States (not scammers REAL location) 157.55.116.165
Example Messages Sent From 157.55.116.165
From: “Parekh, Hardik M” <hardik.parekh@mavs.uta.edu>
Subjectnone/blank
From: “Gordon, Anne Catherine” <anne.c.gordon@Vanderbilt
Subjectnone/blank
From: “Mr. Adams Mensah” <adams37mensah@hotmail.com>
Subject: IN GOOD FAITH…
From: “Stobbs, James, R (Jim)” <JStobbs@azdes.gov>
Subject: Your mailbox has exceeded the storage limit
From: SWISS LOTTO <swisslotto1978@gmail.com>
Subject: FINAL NOTIFICATION!! YOUR SWISS LOTTO WINNING NOTI
From: “Gritzmacher, Linda” <GritL@wawm.k12.wi.us>
Subject: Mailbox quota limit exceeded
From: Shankar Pant <srp0005@tigermail.auburn.edu>
Subject: System Administrator.
From: hlb.com.my <access.services@hlb.com.my>
Subject: 1 urgent alert
From: “Tutkowski, Elisabeth” <tutke@wawm.k12.wi.us>
Subject: PC-HELP
From: Hong Leong Connect <alamb@bsu.edu>
Subject: Important Security Message From Hong Leong Connect
From: cj1eufv6ql <volunteers@delautism.org>
Subject: 销N售8主
From: 侯绚丽
Subject: =?utf-8?B?Yjky5YiG6Kej5o6=?
From: “Hall, Carole” <CaroleHall@azdes.gov>
Subject: Mailbox Quota Storage Limit
From: Shankar Pant <srp0005@tigermail.auburn.edu>
Subject: Thanks System Administrator.
From: Chase Bank Alert <info@chase.org>
Subject: YOUR ONLINE ACCESS HAS BEEN SUSPENDED
From: “Ender, Allison” <EnderA@wawm.k12.wi.us>
Subject: Mailbox quota limit exceeded
From: <postmaster@go.local>
Subject: Undeliverable: Разработка инв
From: “Ender, Allison” <EnderA@wawm.k12.wi.us>
Subject: Mailbox quota limit exceeded?
From: =?utf-8?B?QWxlc=?=
Subject: segera
From: “Van Deusen, James” <VanDeusenJ@wawm.k12.wi.us> onlineme20@gmail.com
Subject: Mailbox Folder

 

Advertisements
 
Leave a comment

Posted by on 11/21/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: