RSS

“MR. D.P.O JOHNSON” dhl_compay@yahoo.com

27 Nov

419 NIGERIAN SCAM – EMAIL SCAM – FRAUD

The below Nigerian Scammer is VERY Persistent and doesn’t easily give up. I’ve been ignoring him for at-least a month and still receive at-least one email daily. I’ve posted his emails and info but he is always changing email addresses and giving me ‘agent’ names, and it’s always under different Originating-IPs. below the email and header is a list of other scams posted under the same nigerian ip address.

 

EMAIL: DHL COURIER SERVICE COMPANY BENIN DU REPUBLIC 

Avenue Mgr Isidore de Souza 41 Blvd Du Mongo Cotonou Benin.
E-mail: 
dhl_compay@yahoo.com
Tel: +229-68377742
Attn: Customer:

how are you today i hope that all is well, my dear be advice that you should  go head and send the $149usd immediately to enable us. Delivery you package within 24 hours ok. So we look to hear from you immediately with the payment information before End of today ok.
USE THIS INFORMATION AND SEND THE FEE VIA WESTERN UNION 
Receivers Name………… Anthony O Ikwunne
Country………………….. BENIN REPUBLIC City …………………….. … COTONOUText Question…………….BEST COLOURAnswer…………………… YELLOW   
 
And as soon as you send the US$149.00 then send us the Western union Details/ MTCN Number / Sender’s Name. Because  as soon as the fee  is received we will dispatch your package and  provide you the tracking details for you to monitor the movement of your package while on the transit to know that its coming to you.
The US$149.00 requested is for our security keeping fee and All necessary documents has been tendered by depositor.
Below is picture of your registered box.

Type: Diplomatic Package Size: L W H / 04:10:13 CM Weight: 0.29kg Color: Brown

Yours Sincerely, Mr. D.P.O Johnson DHL International Express Courier Company Director Benin Republic Tel; +22968377742

CAUTION: THIS INFORMATION MAY BE CONFIDENTIAL OR PRIVILEGED INFORMATION. IF YOU ARE NOT ADDRESSED OR AUTHORISED TO RECEIVE THIS MESSAGE, YOU MUST NOT USE, COPY, DISCLOSE OR TAKE
 

The last part is the funniest. The scammer doesn’t want this information out in the public.. Well it is

HEADER:

Return-Path:   <westernu749@gmail.com>
X-YahooFilteredBulk:   212.82.109.193
Received-SPF:   neutral (212.82.109.193 is neither permitted nor denied by domain of gmail.com)
X-YMailISG:   ri8PeTQWLDufFhNVhMTKz7_9F04BnNPKMD8_fY0rGbtLSXJW 2Pbq0l7atG1.hyuzi790ASC5QcdKtobIYk1Emzm23zOEmZWyB_QYAoMJrlQE JCigHjfZ.uVRqOfitmh7hqbF6ku0hRzE36wXA0iGcobufDqI_2XjI1WLjY5A CuOT7lQUcYGPQdbxO2dBuslK6JEDuIP9YIWBxK0ijt3bLo9sR2AQDJkxU4Fq cPNN_P1vA_YFF5UhKmkIaHFQIdRXeDCOzSuM2NJStZ6b5GVnsA0t9e.J51F1 zigvYjLvpgIx_I5kcJOHSGitXn.4y0wcD_N0nZpF7Avx7jf1nY_Im1TSUxOY S8MWIZ7NUSJJMViMcj9Ay9NDEjAWeOJjCDPSBBzMqS3Vpk5b3lec.zeG5pKq pU5v1HSxR5T5E5bwURikWETXII4ld3dKwdzVP7Upe3QseNP4GT1QHx9kL6CK Xk.X.e7Aa6cNQ3L9TxgIsjUilXKYa8o7E8qKKcNU6D_98AGffgl1eZkgDzCy lMpbCCTYDVw4QTM.8IUdx1ULjC1w40akJCsX2sHujICyUszeB86UlrIQZnDq KhYDG2AfcFfiW0l9Rw5ARGXmWkEdscDKh6A6459_x2Yu9JgrpW6zppgPSOAh hSlXsUjusqP1zzhxSqKfLLZyA137OjiF97QcF5Tduy6wPi.yzRcVQBjbJJ4B 3bXU6xLpHo4WwdtBdG54zXaw2G70ZlBAvEBp9yU6DafCZmFHVQeRDixpQqv4 bKjA2uNQQspdfQCCXHhhrPvYmHvnJ4VZ87yPghyMDwEPpY4s762sujxnFKIj l5XEuJ.KaUsYFTT77LJnvhIOUbhgyuv9NqFypvKmZmLBWLnK9GxVDkvn_LT6 DYR7MtExqgQVje677.OXoYHXT0on4nycmOyRQpP9pe4CUuqYJ0yW30aeJlR4 n0FxIGbVWywqEqDczxtn5wNAvZiRFhyepfac_SQVNH64s2FK7KmJaWatwRWW DaL.8YrTOVb_rTkdlJNObrl9l2ck3JwF01eG3Rso_Lif_IXLZVN.iynqCRJG rRL4yig6Zabl0DUQmQ6e3yg2QNcUKAk9NIEwRdgNHq39w6v4Z4qe.kFBW2GT yjCJjOkQXB9STMOxGHHfA5LAfbAA53qApakMIsYlmPcepbOVE_yATLnzGL_t ig4l_1ukkpigli19hliexvsOA3HrPynT8RtJjUqqDJbDitCF.cn43eGgDJP2 6IAgP6BQ4Oky_IufQVuc8suattlG98TSmuEMOo5BhmCtBerVtFda60lMRM3y YFMmzUyjZn5OacwqMQ–
X-Originating-IP:   [212.82.109.193]
Authentication-Results:   mta1086.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm24-vm2.bullet.mail.ird.yahoo.com) (212.82.109.193) by mta1086.mail.bf1.yahoo.com with SMTP; Wed, 14 Nov 2012 08:53:45 -0800
Received:   from [77.238.189.233] by nm24.bullet.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
Received:   from [212.82.108.243] by tm14.bullet.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
Received:   from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
X-Yahoo-Newman-Property:   ymail-3
X-Yahoo-Newman-Id:   795423.69197.bm@omp1008.mail.ird.yahoo.com
Received:   (qmail 71248 invoked by uid 60001); 14 Nov 2012 16:53:42 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1352912022; bh=YJdP0B3ArGUfIDfK+tFdY4usbtMSeMfxOIR+VL1Y3Iw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=KSOalfFpTYzmrFm8ucVEArfJ6A09mSCj6QSfJ/bmBjx3ntM85nIw49yOHwPEo8d8aKg0OiX/hx+yBZNf2WVOyNe2DRMb1gWujp4KLWpJxujHaH21UU7+pRrqUh5c4mpJQSKVWVQ7IXseBsU5x5L/tQRTj4sYnZA5r5GZOePZ+Co=
X-YMail-OSG:   OZ7LhD0VM1klb3DjyvlFkhMZSOF9Kk5yIkuHnN.ReaQhz8A 2eEq4WVU4
Received:   from [41.216.50.26] by web171306.mail.ir2.yahoo.com via HTTP; Wed, 14 Nov 2012 16:53:41 GMT
X-Mailer:   YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID:   <1352912021.69977.YahooMailClassic@web171306.mail.ir2.yahoo.com>
Date:   Wed, 14 Nov 2012 16:53:41 +0000 (GMT)
From:  
“MR. D.P.O JOHNSON” <westernu749@gmail.com>
Reply-To:   dhl_compay@yahoo.com
Subject:   MR. D.P.O JOHNSON
To:   undisclosed recipients: ;
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”-1132928367-462696281-1352912021=:69977″
Content-Length:   19629

Below is other email addresses, NAMES, scams, etc being used by the same IP as Mr. DPO Johnson

FROM INTERNPOL POLICE FORCE UNIT. 
desk of Dr,Daniel Alexander, 
International Interpol Police Force 
Investigating Unit Benin Rep 
Email: officeunion2012@yahoo.fr 
Phone +22999867566 
International Remittance Department funds Transfer Section 
United Bank For Africa International plc. Republique du Benin 
in West African State /Address:rue 7741 unesvia avenue kotoungbe cotonou. 
Email: atmcarddepartment132@yahoo.fr 
Email: atmcarddepartment132@yahoo.fr 
Website http://www.ubagroup.com 
DIRECTOR NAME: MR frank johnson s-MAIL:(www.westernunionrichard@yahoo.ca) 
OFFICE LINE:((+229)-99231994, OFFICE FAX: (+229)-98414204, Visit:westernunion.com 
BEST REGARDS.

Head Office RUE 84, ABAPKA MISERBO <<

western_ubb@yahoo.fr << activationcard@rocketmail.com << 

X-Originating-IP: [106.10.151.181] X-Originating-IP: [217.146.176.150]  X-Originating-IP: [217.146.183.95]beninhigh.court@rocketmail.com

Received: from [41.216.50.26] by web190606.mail.sg3.yahoo.com via HTTP; Thu, 
05 Apr 2012 05:25:48 +0800 (SGT)

Received: from [41.216.50.26] by web171002.mail.ukl.yahoo.com via HTTP; Wed, 
04 Apr 2012 20:54:00 +0100 (BST)

Received: from [41.216.50.26] by web171005.mail.ukl.yahoo.com via HTTP; Fri, 
30 Mar 2012 09:49:18 +0100 (BST)

 [98.138.91.212] 
To: undisclosed recipients: ; FROM: Mr. Mark Dennis
Reply-to: westerotransfer@skymail.mn

Received: from [41.216.50.26] by web112311.mail.gq1.yahoo.com via HTTP; Thu, 
29 Mar 2012 13:31:47 -0700 (PDT)

From: “FEDERAL BUREAU OF INVESTIGATION \(FBI\)” 
Subject: FBI SIGNED AGAINST YOU 
X-Originating-IP: [106.10.151.20] 
To: undisclosed recipients: ; 
Reply-to: msanusigoverno@yahoo.com

Received: from [41.216.50.26] by web190605.mail.sg3.yahoo.com via HTTP;

From: BENJAMIN NWEKE 
Subject: Welcome to Western Union 
X-Originating-IP: [106.10.149.38] 
To: undisclosed recipients: ; 
Reply-to: western_ub@yahoo.com.hk

From: WESTERN UNION 
Subject: CALL MR BENJAMIN FOR YOUR MTCN NUMBER +22998892244 
X-Originating-IP: [115.178.12.225] 
To: undisclosed recipients: ; 
Reply-to: western_ubb@yahoo.fr

From: chigoeze2007@yahoo.co.uk 
Subject: PAYMENT NOTIFICATION OF YOUR FUNDS. 
X-Originating-IP: [77.238.189.207] 
To: undisclosed recipients: ; 
Reply-to: sahelsaharabank@rocketmail.com

From: Mr Andrew thomaas 
Subject: Welcome to the Albany Division of the Federal Bureau of Investigation 
X-Originating-IP: [77.238.189.70] 
To: undisclosed recipients: ; 
Reply-to: investigationbeninfederalbureau@yahoo.com

From: ECO BANK PLC 
Subject: Hello Dear Beneficiary,Good News 
X-Originating-IP: [115.178.12.201] 
To: undisclosed recipients: ; 
Reply-to: plcecobank118@yahoo.com.hk 
Message-id: 
MIME-version: 1.0 
X-Mailer: YahooMailClassic/15.0.4 YahooMailWebService/0.8.116.331537 
Content-type: multipart/alternative; 
boundary=”Boundary_(ID_vIbW/TiNhur4KDUcmvroXA)” 
X-Yahoo-Newman-Property: ymail-3 
X-Yahoo-Newman-Id: 723015.62700.bm@omp1005.mail.sg1.yahoo.com

From: MAIL POST OFFICE 
Subject: Regarding Your ATM CARD Deposited Here on the 11th 
X-Originating-IP: [77.238.189.59] 
To: undisclosed recipients: ; 
Reply-to: mailpostoffice1369@yahoo.fr

From: Dr Thomas Yayi Boni 
Subject: His Excellency Dr Thomas Yayi Boni 
X-Originating-IP: [77.238.189.64] 
To: undisclosed recipients: ; 
Reply-to: hisexcellency.drthomasyayiboni@yahoo.fr

From: “Mr.terry smith,” 
Subject: MTCN.764-057-6456 PICK UP YOUR FIRST PAYMENT OF $5,000.00 IMMEDIATLY 
X-Originating-IP: [115.178.12.223] 
To: undisclosed recipients: ; 
Reply-to: transferfund@yahoo.cn

From: “Dr. Destiny Mike” 
Subject: FUND APPROVAL / PICKUP @BANK OF AMERICA. 
X-Originating-IP: [115.178.12.240] 
To: undisclosed recipients: ; 
Reply-to: atmbank@globomail.com

MR D.P.O JOHNSON IS USING THE IP 41.216.50.26 – WHICH IS A KNOWN SCAMMER IP ADDRESS –  interpol_police_force_unit187@qatar.io  IS A SCAMMER — NAME: NWALIEJI MARCEL — USED NAME: JEFF ROBERT CARL — IP 41.216.50.26 BENIN – KNOWN SCAMMER

FOR MORE INFORMATION REGARDING THE ABOVE IP CLICK HERE.

 

212.82.109.193 – This IP which shows up as ‘originating-ip’ in the header, is a Ireland IP address and not the actual location of the scammer although they try to confuse (potential) victims into thinking they’re not African (because 95% of scammers are from Africa) This IP address has been reported and blacklisted numerous times due to scam activity. For additional information on this IP address, please click here.

41.216.50.26 – This IP which is one of the IP’s being used by the scammer, has been blacklisted on numerous sites due to alot of malicious activity including fraud, phishing scams, etc. Location of the IP is Benin Nigeria

Associated Email-addresses – dbankbenin97@yahoo.com – vytransfer@ymail.com

MR D P O JOHNSON << westernu749@gmail.com << 

41.216.50.26 has been blocked/blacklisted on Spamhaus as well as the following IPs: 41.85.169.5 << 41.85.176.19 << 41.216.50.33 << 81.91.229.189 << 41.85.161.126 << 41.216.48.17 << 41.216.40.128 << 41.216.44.198 << 41.222.192.64 << 81.91.228.131 << 81.91.228.78 <<

If you have received any scam email’s under different email addresses, names, etc under the IP address used in the email above, please let me know by copy and pasting them into the comment section. Thank you!

 
Leave a comment

Posted by on 11/27/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: