RSS

“FedEx Online®”

28 Nov

NIGERIAN SCAM – 419 – FRAUD

EMAIL: We have been waiting for you to contact us for your confirm package that
is registered with us for shipping to your residential location. We had
thought that your sender gave you our contact details. It may interest you
to know that a letter is also added to your package. We understand that
the content of your package itself is a Bank Draft. The package is
registered with us for mailing by your colleague, and your colleague
explained that he is from the U.S.A but he is currently in Africa for a
three (3) months Surveying Project as he works with a consultant firm in
Nigeria, We are sending you this email because your package is been
registered on a Special Order. For your information, the VAT & Shipping
Charges as well as Insurance fees have been paid by your colleague before
your package was registered. Note that the payment that is made on the
Insurance, Premium & Clearance Certificates, are to certify that the Bank
Draft is not a Drug Affiliated Fund (DAF) neither is it funds to sponsor
Terrorism in your country. This will help you avoid any form of query from
the Monetary Authority of your country. However, you will only have to pay
a sum of $125 USD to the FedEx Delivery Department being full payment for
the Security Keeping Fee of the FedEx Company as stated in our privacy
terms & condition page. Please note that packages are not shipped nor
delivered on Saturdays, Sundays and on holidays. If your order has been
placed on any of these days, then it may be shipped the following business
day.

Kindly complete the below form and send it to the FedEx Online team. This
is mandatory to reconfirm your Postal address and telephone numbers.

1: FULL NAMES:
2: TELEPHONE:
3: POSTAL ADDRESS:
4: COUNTRY/STATE:

Contact Us between:

Mondays-Fridays: 9:00am – 9:00pm EST
Saturdays: 10:00am – 5:00pm EST
Sundays: 10:00am – 4:00pm EST

Have a great day!

Mr. Thompson Williams.
Direct Tel: +2347033356828
fedexonline_01@yahoo.com.hk

FedEx Online®
©Copy Right Reserved 1994-2012.

HEADER:

Return-Path: <karuiz@fices.unsl.edu.ar>
X-YahooFilteredBulk: 200.41.60.169
Received-SPF: none (domain of fices.unsl.edu.ar does not designate permitted sender hosts)
X-YMailISG: o5TE0VcWLDs6A2iGWRrKiXjvpJ9iJzbVh0d6tg62Wj0icTj9 vmZMCQOukMdUDCGoZuIRp9z0IxNUHMgxvIvYYj2aIPbsDGNdoASLbiisEdUj QBEi1ddHF1qDGdoXfPO5fGq3r96t6.3EMAlu.gZYrqage8higRm6BtMly.rw mIfRU6DCgMO6xe2wenEds3y7f6jkHz8PujZvzVXG06KZXqLfUgswmKyLgCBr XoMranvoL1UpF2zrp9IkEggsDk.stcAvIzVsHemNO52EoccEi9gmti7.KoIW FADXVh5rt92uodAMmY0yUyx5SH8xuTnS8HVA1jqbABSY05OsZuiqD2tnbAyL bLlh4CNm20SRui2X4Xy8KYvHstQSJ2JED57ifWlUyjgIAc0kmiT8UPezvxUv IWwuGwuz0cdnaBz9yWtkze4VsD7mfNV5e55TkF1PnlOQV80xSuZBMTspTRHI Rt3llF72gAFNpNhgBjq1mr36YDryiv6cVF80QRdJY_AvV0JqeMTxkYepk7Zo ZibOOHy5tUxHe1RaLqqXs0WImOyiFBDXjq7mpvYjAYsdHOQOyqNLUN6Hg6u1 tVFo3zVplBVnDXYMSRMyggTOWeOwUWkEw0lYPrWCvkmgmSLj_PXFULib.MPx K7S5XbZpInbFirVmMyQMMjCReCffKzB5eKrZIIbECa1FeVd9PHa6ZIj_LsD0 Yq1pZsf06cF3tpdiRlgAzGrJolauz8y8xqW1iCEc8cvOJudahvuRDsb09YaP DEdo6Nd8twXlDmXqNqVY77QtOAFP6Z6QZzgxq5yu9O6Mv1mI4NhapzzH1k3. afEn6fF4JN4HxcuOEp2Rr_U3ikODeO8VSsJ.qEVvjRitKUHx_V6pncw6HkWN tB7_Lr2JJDj37KsTC9ntsBwAVvF26zHppnpw5jw8jYccPfUnUtzPoWlp6Bi9 o6ZrjPB.DXes_i1kpLdprNB8ehDnWXVLwqQqH31W4qYFuFnyZuj3rhLaUUx3 3J3Vqm2tYLv7DmSdzbfkolSriSZ4yVm_POZLOrsbax7kfm6oXgbPLD2cKab3 ObsRlQiaLIEsfxk7nsR8nxE4NzateWWVNkdKO1n40_7N80WGh_yoBa692ABI HHJO2MTarJriQnZz7soxNKn8AuVrxZVZRo_ebnck6pA4Rfh_0R1sUQIjroJI Pw6gJD2qGOTgx1edsoeYVA6oBf_5ab34B9EC0w80NN8JA8nOVBzVJMhtm.8z 6LOwSdTnFg0X3pOkrEr51x.Gto.BuQNSGp6tYNIzckUKiL24O3dxUNaf4_gX k28hY3hB2zgdLlorQVCWrA5.YESR7.ZspdMBR0exRen9wmIK48IOaFt5H.DR dA–
X-Originating-IP: [200.41.60.169]
Authentication-Results: mta1183.mail.mud.yahoo.com from=fices.unsl.edu.ar; domainkeys=neutral (no sig); from=fices.unsl.edu.ar; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO scooby.fices.unsl.edu.ar) (200.41.60.169) by mta1183.mail.mud.yahoo.com with SMTP; Tue, 27 Nov 2012 02:01:25 -0800
Received: (qmail 24449 invoked by uid 33); 26 Nov 2012 15:51:22 -0300
Cc: recipient list not shown: ;
Received: from 41.71.190.77 (SquirrelMail authenticated user karuiz) by correo.fices.unsl.edu.ar with HTTP; Mon, 26 Nov 2012 15:51:22 -0300 (ARGSL-ST)
Message-ID: <2322.41.71.190.77.1353955882.squirrel@correo.fices.unsl.edu.ar>
Date: Mon, 26 Nov 2012 15:51:22 -0300 (ARGSL-ST)
Subject:
From:
FedEx =?iso-8859-1?Q?Online=AE?= <karuiz@fices.unsl.edu.ar>
Reply-To: fedexonline_01@yahoo.com.hk
User-Agent: SquirrelMail/1.4.9a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Content-Length: 2014

41.71.190.77+ << 2347033356828 << FedEx Online®  << karuiz@fices.unsl.edu.ar << fedexonline_01@yahoo.com.hk <<
A scammer(s) under the email-address <mcmunoz@fices.unsl.eu.ar> and graniteloans1010@xnmsn.com sent scam mail out under the same Originating-IP as the above sender. The receiving IP’s location was Nigeria (just like the above senders receiving IP) as well. 200.41.60.169 and 41.203.64.132

Other spam/scam sent under the same IP address are:

 “Sampaio” <SharofSampaio@acupunctureinfo.net>
Subjectnone/blank
From: “Lynnette Grover” <AmparoloreleiVick@centraloregon
Subject: Enlarge At Home Today
From: postmaster@sagemuller.com.ar
Subject: Notificaci=?unicode-1-1-utf-7?Q?+APM-n de es
From: Sewell <inwglae@bluegrassjunction.com>
Subject: Software discounts
From: Pill <lrshipley@instuttgart.de>
Subject: When you need it
From: <caesargq6@clickfoc.us>
Subject: More games, more chances, bigger jackpots 1500 eur
From: <limitlessi2@pip.com.au>
Subject: Best casino games 1500 euro bonus!
From: <politicizingwwk86@fiemg.com.br>
Subject: Best casino games 1500 euro bonus!
From: <misspends@biolconseils.ch>
Subject: Biggest casino online 1500 euro bonus!
From: <thule107@buhrmann.com>
Subject: Biggest casino online 1500 euro bonus!
From: <venousuu@pacunion.com>
Subject: Euro casino online 1500 euro bonus!
From: Валентин ��
Subject: мы тoльko делaеm рekлaмy
From: До��на Павл��ва
Subject: Прoдaжa бaзы в Кoлoмнe. Цeнa
From: Артемий В��но��ра��ов
Subject: КАЧЕСТВЕНН
From: <mainmastsu20@cochamber.com>
Subject: Best erect pills
From: <tunnelingh@mc2school.org>
Subject: Best erect pills
From: <stileskp1161@barronheating.com>
Subject: Get some penis pills
From: <loftwp@blomnet.com>
Subject: Get some penis pills
From: <josiea8@alumni.insead.edu>
Subject: Find pills for cheap prices
From: “Sarahi LAMBERT” <MaciPetet@online.no>
Subject: Re: 62735418449971656

Some previous names and email-addresses under the IP 41.203.64.132 – Location: Nigeria

5-Jul-12 11:36 41.203.64.132 mcoxman gsterling123@gmail.com Nigeria
22-Jun-12 21:56 41.203.64.132 Mike001 phonesmartltd8@gmail.com Nigeria Evidence
17-May-12 03:08 41.203.64.132 pemmy pemmy004@yahoo.com Nigeria
10-May-12 16:57 41.203.64.132 kingcxt cxtblade2@hotmail.co.uk Nigeria
10-May-12 16:53 41.203.64.132 king cxtblade2@hotmail.co.uk Nigeria
5-May-12 03:52 41.203.64.132 ohison ohiluckyson@yahoo.com Nigeria
2-May-12 16:41 41.203.64.132 Frank Richards frankimobiletech98orders@gmail.com Nigeria
23-Apr-12 08:07 41.203.64.132 infotech shecool174@yahoo.com

FYI, the REAL FedEX doesn’t sign up with free Yahoo email-addresses. They have their own domain. And they don’t send out email’s like the one above. Only scammers get into irrelevant details.

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: