RSS

Monthly Archives: December 2012

“favor khalifa”

ONLINE DATING SCAM – NIGERIAN ROMANCE SCAMMER

Hi dear
How are you today, I hope all is well with you .I am sorry to worry you with my Proposal for a relationship with you, but I know that you will grant my request in good sense and understanding, My name is miss lorita i saw your profile today in the internet friendship site and became interested in you,i will also like to know more about you. I’m hoping to hear from you soon so that I can send you more details about my self Including my picture. I believe we can move from here. Bear in mind that friendship and Love has no colors barrier, no educational back ground barrier, no socio-economic Barrier, religious, language, nationality or distance barrier, the only important Thing there is love.
Yours Sincerely
lorita

HEADER:

Return-Path: <favorkhalifa06@yahoo.com>
X-YahooFilteredBulk: 98.136.217.39
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: lbR4xrkWLDs4M8pF07ovpMWXUVYTn5ydZVpndH.yYwcgiEg9 qFoIntE3ls47QwUicUSBAM_9TTDS.gGggD0DGSl4ClQz8GDiqyV8qcWOEuUn NFGG87DODBpsWBy3uEc6KTuQsoue2mht3YGnWsHhfW76YE11y5ISq7jb67AM zZ8B3rLlsBdAJbnf40HTc12Ee1r9dj3K6DeR8V5d_vjG3AMDAaPJLT9Bpwj3 rbcFuia.UjwVnveFcKWcDjsF_YrZRNFZcuvjGSJjssQO094aUgl6mSoEcq_s aYyF5EjlsXki77n7cylXvnJxVlh48JWe9kA75azvti7k2JYkRsvsPoldpa_c HhMrBAyZ3BNvFtfRyk8dYPWTyT79J4q.LSS9rcqh9Dqjty2Egbhgce0jQ4xd alXYqy8i5hEgX4ZtEXxmhpO7UYMh3inDeaUR3xWS263jp6jCZD.QsFlXr2rb 8l200_6aHP5tmcd_QJMVoW5acrYTARdTYXy03b812ZnydHwmuWwcpcBHaa4M nSYR8De0pu.Hc7aNAFD.weACpiUDoR0XvyLMq9KYA9nXUUg6YTMKVtxHhloo DKSP1J1F6gEbd3UROyuA2G6N3kddqw700kp_g1R2qwn.XeKXbwLZO7X5EJ3D ITm1qHw2Gq0bYq.2fDpj1OMX72ThYDJqPJM10v.NFZFgM2fSuADRxdU97o3I A3Enw60j1oWQtYwWxiNiP0NNN84SoEjorFrKi8ENFKijDUL80ceXEGp.t1us fJmtsixGl6Naylrs0zl0qb1PxDgBW6mNoxk5rLBaI2CPzPofgg1jnqINZP6D h4311joghCP_uX80iJ2ABDV9HQKzJNrtaLgp.Sz2496nsd.HxnzAZx4_eC.G sn59V.PNzLRUhCzsV_GKD7AFwoetleIUFIfsv1QyAxBQz8WgQH5_dwV.xB_1 JvDD0ZBWyFo3QvYtPwXj0h7X9Iu5P8bOKGIw.b0jEzk5Al2cMtE4jIrAXEVF u6DgFjCqOOmjYWMZAGVWaB0ko4qSjv3KTHPMn.ecrIrLzrpHbiXvzoTITkNh IdJlwBWL3PfF8hRhcIi99fd9mYxMDzyVUm7lDtoH.OF97hDxJsECdiQEfAUB FCneBm915OJ8RP7GrdHCUiRVID4HDg2SYtuOIMcGbqj8ovw3GLuUlx4Z6FbG XeBKrUT.jL.8WiSADZr28uZN0OLUNl5rYbUkjiVOt1YBgvmjrTf40YSGFNvg SFyTdU_dacY.hgwQ99zm657EpU6y.WwPDtw7JUu9uFmeZhjBEAwe4uSovtu8 Qv54OnuJgGfNcyrLKB6GW7VriVdXeskOGF4lJIaj576.BWC75M6ut2cuWuQm VGhKc567_TX2JR9EdgFJVa0nIt_qjLtQXcXxO_IobJSMIjDk3Z1hiAhAMYpK mcGqMHAtuyb4FgpS.Q–
X-Originating-IP: [98.136.217.39]
Authentication-Results: mta1195.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm20-vm8.bullet.mail.gq1.yahoo.com) (98.136.217.39) by mta1195.mail.bf1.yahoo.com with SMTP; Fri, 28 Dec 2012 16:56:10 -0800
Received: from [98.137.12.63] by nm20.bullet.mail.gq1.yahoo.com with NNFMP; 29 Dec 2012 00:56:06 -0000
Received: from [98.137.12.210] by tm8.bullet.mail.gq1.yahoo.com with NNFMP; 29 Dec 2012 00:56:06 -0000
Received: from [127.0.0.1] by omp1018.mail.gq1.yahoo.com with NNFMP; 29 Dec 2012 00:56:06 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 890946.89254.bm@omp1018.mail.gq1.yahoo.com
Received: (qmail 31083 invoked by uid 60001); 29 Dec 2012 00:56:06 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1356742566; bh=+TPw1TXVcPbQNe/lpgbb+9UmHGvANsl9yyGCPtTZrBc=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=j907DVYz0W0x42n7BBsuGeI27yrHnvc6g+0AeBc7fYogBS7O+13DV4NfDq3ImwBkSyjkMXRz6LNNazZ3EAg3I10HkB+rCy8GjgCGy916E0aLLIX6csE058avtWqtQZ4IFztdAtWCzvJv0z3xBoL+qwSgxpwtEQjaNPodti7baYA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=usDKyePvdDP1Zo6LbX5G4thqaWQ4oKSM9Yrw89S+7+WgYcOH1TObARZF87P6he+J9giIf/sufJFQPMDnSNA0aEqJlUz8tQ0YqKm5kQX8WpVg+fa4iGSyR9EBrZE3wUWJKKPutMH3lSiLAC+4atFKbjCES6bp9rI481Bg+/lRaBI=;
X-YMail-OSG: S7DwE7wVM1nBz3AtZJpldRybwjdRghemKEaTYlELDuduwRx Ommw_pAhG26zW4Ks0JIdy7L0Lya_Gc0Nfw.Yf.VR6Oc7JwXaWZPldoLSCpVO adOZL0uqCKRXdFlM3eTF6LVI0HP2A.w8dMmKddKEt48I2aAITWeHOGcTGN8D AA2yik4bk4U_ntaRE3TYFsaI2Dn4D8LXBjCLypC75dPLTVbUDZXAeNGqXwVq 9MBdIgRVLDzoT6Gvg4UE2rAHrTTBXTQpc5frfTEmMH8Uc2ZS0ksplgFdLQ_q 2SlXeG0QZwnblKGy10CDhLAYDFpiomfHoArNkMucolBPD8DxCawNvzw2aspc TltBbkN31mPm8H9ii6HVVb6_NZMflLeDt2YB_7apJdGCi691Ws2IKo2xgAdC _ctYfNtW5nzo8zjPxh8IgScELO4aItfnBloakg.QvMNAPtPY7ZSd4lk09Ddz 797tTshLcRbhQXOCqUtq_OExN.Oe2Sd9hbyc8LQpMCOyHMSoOePSqlJaTRn4 rGFKUntwHLxAA84L6U7vGWMi1KaIVVi6VRw–
Received: from [41.82.125.44] by web163404.mail.gq1.yahoo.com via HTTP; Fri, 28 Dec 2012 16:56:06 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356742566.25710.YahooMailClassic@web163404.mail.gq1.yahoo.com>
Date: Fri, 28 Dec 2012 16:56:06 -0800 (PST)
From: favor khalifa <favorkhalifa06@yahoo.com>
Reply-To: lorita_kasala23@yahoo.com

_______________________________

Favor (Lorita) Khalifa has also sent out romance scams under the name ROSE and username rosebaby24 — including the email below which was written under the same IP as the above (received) IP (41.82.125.44) along with many other IP addresses.

Hello My Dear, My name is rose,i am interested in you, Also I like to know more about you and establish a relationship which based on truth and trust with you.I want you to send me an email to my email address (rosebaby_@yahoo.com) i will give you my picture for you to know whom i am. please i have something very important to tell you.I believe we can start from here. (Remember the distance or color does not matter the age, but love matters a lot in life) I will be happy to see a good resp

 

________________________________

favor khalifa favorkhalifa06@yahoo.com REPLY-ADDRESS: lorita_kasala23@yahoo.com

ORIGINATING-IP: 98.136.217.39 RECEIVED-IP: 41.82.125.44

THE TWO EMAIL ADDRESSES BELOW ARE SCAMMERS WHO HAVE ALSO SENT OUT SPAM UNDER THE IP 41.82.125.44

From: tamara_t_valadez@aol.com
Subject: RE: Wire Transfer cancelled
From: josette_shapley@aol.com
Subject: RE: Your Wire Transfer

 

 

 

 
2 Comments

Posted by on 12/30/2012 in Romance Scam

 

Tags: , , , , , , , , , , ,

“Global Rich Club Thailand”

EMAIL SCAM SENT IN THAI LANGUAGE (If you received the same email but can’t read the language then translate it, either on google or a translation website.)

EMAIL: คว้าเอาไว้ ต้อนรับปีใหม่

GRC ได้รวม 3 ธุรกิจแห่งอนาคต ไว้ด้วยกัน คือ
…ธุรกิจ อินเตอร์เน็ต
…….ธุรกิจ ท่องเที่ยว
………….ธุรกิจ ทำงานจากที่บ้าน
จึงทำให้เกิดรายได้ที่ง่ายและเร็ว….
ธุรกิจนี้เหมาะสำหรับท่านไหนที่ต้องการเงินเร็วๆ แบบเป็นกอบเป็นกำใช้ระยะเวลาสั้น ๆ
เพื่อความร่ำรวยและต้องการปลดหนี้สิน ไม่ควรพลาดเด็ดขาด มาก่อนได้ก่อน คุณจะอยู่ในอันดับต้นของไทยหรือเปล่าอยู่ที่การตัดสินใจของคุณ
คนรวยกับคนจน ต่างกันที่ความคิด
คนรวยวิ่งหาโอกาส แต่ คนจน รอโอกาสวิ่งมาหา
คนรวยคิดไวทำไวจึงรวยเห็นๆ แต่คนจน คิดมาก คิดนาน จึงเหมือนเดิม
คนรวยชอบลงทุนเพราะได้กำไร แต่คนจนชอบใช้เงินรายได้จึงไม่พอใช้
คุณล่ะ เป็นคนกลุ่มไหน
ถ้าใครต้องการดูหลักฐานการรับรายได้ของจริงเปิดเผยทุกอย่างไม่มีหมกเม็ด ไม่มั่นใจในธุรกิจให้ติดต่อมากับทุกเรายินดีปรึกษา ทุกคำถามมีคำตอบ

ดูแผนการตลาดที่จะทำให้คุณรับเงินแสนได้ ที่
http://www.plodney.com
“กรุณา Copy ลิงค์ไปวางที่บราวเซอร์ของ Internet Explorer”
หรือติดต่อ คุณแอน (user: earn) 086-306-5462 / 087-512-2492

GRC ทำจริง จ่ายจริง ……
และนี่คือความฝันของคุณและครอบครัวใช่หรือไม่

HEADER:

Return-Path: <earnasset00205@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts) reC4meC4o.C4seC4muC4m.C4teC5g.C4q.C4oeC5iCBHUkMg4LmE4LiU4LmJ 4Lij4Lin4LihIDMg4LiY4Li44Lij4LiB4Li04LiI4LmB4Lir4LmI4LiH4Lit 4LiZ4Liy4LiE4LiVIOC5hOC4p.C5ieC4lOC5ieC4p.C4ouC4geC4seC4mSDg uITguLfguK0gLi4u4LiY4Li44Lij4LiB4Li04LiIIOC4reC4tOC4meC5gOC4 leC4reC4o.C5jOC5gOC4meC5h.C4lSDigKYgLi4uLuC4mOC4uAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzIy
X-YMailISG: lh3e5poWLDu3sbvm6qsMtoN.puglqEWTavB2urN3frKCrAOH eLzz4W79LwLLklmnvScXRrAydr.p2PjbYcO6AYbAgpYNeniArwlktgDUEBSg 5mkPp5RfTE.nKKwRX0P0iQFMjSyDfisuVJ6g9kllEp6G0U5NGFpEMjIjAxZN d2t9NOH60AMYr_oTPy_t5_66p3iU8N3nqyUCfwj5gN_nGo0JLDKBPDuGTy0z DAM4OfsPy3avx498Zx2dUQ91UJzDgNKRY.sACxC6zb3YWQFbnhd4Q8qNBt4S r9JG2G_IyKqR2I00RIOXfAzk8VrJX6ayCDIDytI5caWiBSpBC53V.ugYYGQD jLQ96lHXkoTA1rpg5Y1giJHBuwxhvzml8YkOhz1cNnFXfUpxdsWRq17FZsPX jAk2Vvuyn7R1kr_auAfsfHE9FvYVQ0reaMOPjuFuiOnKnroINAn7VYt4AXtD f4n287lAEWB8aH8AvyejC9DzSdyIjKxG8.bGtfS1f6zea.VzjhURfMLByt9k HwScd0LCIi9d3faKpgy6qY1azfK_s1qT.2RBEDh2F7EthKJM96ieNvBcmgph NQc.VToFmvpLiGEK50TQJYQzD8bCYkpOsEM1nmhhWCbqkKsBKuQcVa_yLpir YHHnKGTZM.1HeFmU2m_lRtFdRPjP_rdwU72Tmtich6bQLdL3uHnQim.8Y0Bl J969IdaA5c5B.T_jmJPAUKfCYzKe5a_xCN_RplyA8SS3hjM4YHDn2Hk2ESca E44mpNnzGll7y0P3WwmFWksvkwVIg263est5unTEzv0g7u0T0ssutX3V2fic hKoZ7ZtdpIhoewzzESzqsV2Myp7rL9KUm7JvXQ7dIMUKZAHckkhJwOJksEHa Y52WgyQTdZispT2UBIR39wiRUiGomUYnus04inGBmoBeY7jSMZGZIDwUOSy0 MPEBmxesm9dksL7OuySJqZs8stMYP0ItN6JVHUtRLwfBb3AcnqOpAflIehig jI1Iq1VzBZpwxxibpygpQfzDwk0AUhLRr5cuvBQ_RWeSQDhdi.BD79PF67Mt g23NzeAbQ2FoQbI.funKFz1hEo8p277qTBtHoZDXc8ThLiY6rZ8XeHWw6ONn IgIg1B6eeYr.u7hK1Ul3t.FMlWIHlnUZVymBKtcGxpmxEaTk8XUVLiSjYKDR frlXlDV7gSywqCp1FOXbRt8CCZa7JIEo5.Mj9NelgycHpVE7I8z8IAobbvXT cU1QnRmoRfewae7vchSyN8.JMXzq3O6IiFtqqaFWR76XHUKvgd8QHKHzDjW0 F.4QonslozDOHpI6fVRkcNK2K1jz26Ag73e30K89edlQVpRz2CChr3KhTcw1 cge60mCAFD91Pm6NuU_WgA4F.AyeBRb7OwO0XyEgEY6Wo15H
X-Originating-IP: [98.136.218.85]
Authentication-Results: mta1380.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm1-vm6.bullet.mail.gq1.yahoo.com) (98.136.218.85) by mta1380.mail.gq1.yahoo.com with SMTP; Sat, 29 Dec 2012 21:55:34 -0800
Received: from [98.137.12.175] by nm1.bullet.mail.gq1.yahoo.com with NNFMP; 30 Dec 2012 05:55:33 -0000
Received: from [98.137.12.205] by tm14.bullet.mail.gq1.yahoo.com with NNFMP; 30 Dec 2012 05:55:33 -0000
Received: from [127.0.0.1] by omp1013.mail.gq1.yahoo.com with NNFMP; 30 Dec 2012 05:55:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 707271.65814.bm@omp1013.mail.gq1.yahoo.com
Received: (qmail 18343 invoked by uid 60001); 30 Dec 2012 05:55:33 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1356846933; bh=s3XWSLe0G0Zuz902shQHQ3p2UBU+2Rwtq2HMjdM/M5M=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=KHrdzOo+nnUDB5fDXddlJY+NZ0qD48Ef75KSe8E++vYTh4oBtJjJv8HU70V8i+9F0tWNoOSgW54goKyekgv3Srt5hiuEW9TuDIihAhKJQ+1FksLmPP6CFNPMCrpBuDg+Rk9iGD20hzVD3Zbg05LR4AlM+inzffn/yGufgUv/mvA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=VLAVxBlRP4fbJqpgXd/G1mC3d/LSNep4+RurwdC7qIu/eeD7qlDmA9AlMx+U2/fnUjkWgFx20weCux4wGZQ4db/CtTeDVnNT4Wlb4057g5yYL1W1uNAYVCTd+Y1pRdvRPFp9HbvlTqSDKtjOSAUoUw8ZhOMjGH/7MhzTYpJScUk=;
X-YMail-OSG: 0.g6dOYVM1kqhouzezWUc7L7wbG43kcfvbeZJ3CKtSjOMkJ 3aV9HlwjbQu1f.14yUeVZacFHJUwSM9FuOw0OYI_XdoJlzz8clkTVsCy7W5w 0Twhq0PcrvOLSCFq.WSKs.rowYkQ3RyAHbqPC9zU51qMnxQSXMd5dtgjSy_0 6iVFNiyKMrIIf8Vyfb2VVBJe294L1C35tDbEbYn92pH9R9hRoldP8PLj6TjQ 6Fhi5N52XrMWEO15f_nOLY2Vls1xwXC5gASSdtxJ7WtPTDXTUYBVP5P1fl.A dTqfx0Sy_D1xPhIe05YYCn1yxG3gIKjSXQzKmMEtVicu2F.BhXcmVPDfPtnq xLcpLtj_7uN4j3nDhf2KjPE4Bo5MtyA5MqUiSLMOaXvqstLaWFZUZsYPvqfD _F6GucpZd2Gc1ur.c1X1LjeNmynYVHDtD_3kAIgD8EOHN4kHumfZGie_UWoK eYMFn0vtCVqR1XQYl1lRtPgOQE0LH2eZS6d5ILY4rq.R8jq0apmKVnc7OJyF vphGy2w–
Received: from [61.90.121.181] by web164006.mail.gq1.yahoo.com via HTTP; Sat, 29 Dec 2012 21:55:33 PST
X-Mailer: YahooMailWebService/0.8.129.483
Message-ID: <1356846933.11710.YahooMailNeo@web164006.mail.gq1.yahoo.com>
Date: Sat, 29 Dec 2012 21:55:33 -0800 (PST)
From: Global Rich Club Thailand <earnasset00205@yahoo.com>
Reply-To: Global Rich Club Thailand <earnasset00205@yahoo.com>
Subject: =?utf-8?B?4LiE4Lin4LmJ4Liy4LmA4Lit4Liy4LmE4Lin4LmJIOC4leC5ieC4reC4mQ==?= =?utf-8?B?4Lij4Lix4Lia4Lib4Li14LmD4Lir4Lih4LmI?=

Global Rich Club Thailand earnasset00205@yahoo.com 98.136.218.85 – 61.90.121.181

Other Spam Messages Sent From 98.136.218.85 (note: alot of these names and email addresses including ‘Robert Mueller” and web.office.anet@att.net etc have also emailed me (and who i’ve also posted on scammer419) — If you receive alot of spam, you’re most likely get many different scams, all being sent from the same group of scammers.
From: LOAN OFFER <web.office.anet@att.net>
Subject: none/blank
From: Xmas Loan <web.file.433.3@bellsouth.net>
Subject: none/blank
From: “SCOTT PETERS”<paymentcentrecitibkl@gmail.com>
Subject: U.S.A GOVERNMENT, WORLD BANK, UNITED NATION ORGANI
From: “Mrs. Carman Lapointe-Young”<fbiinvestigation.dept
Subject: UNITED NATIONS OFFICE OF INTERNATIONAL OVERSIGHT S
From: “Robert Mueller“<wwwfbiwashington210@live.com>
Subject: Please open and view the attached messages as rega
From: “omaraljewary@yahoo.com” <omaraljewary@yahoo.com>
Subject: You have (1) new ecard!
From: “np_is_awsome@yahoo.com” <np_is_awsome@yahoo.com>
Subject: You have (1) new ecard!
From: RM <fefdssa001@hotmail.com>
Subject: Hello, An exhaustive and metic

Associated IP’s
209.160.64.186
207.150.196.51
189.242.54.137
66.235.180.7
195.229.236.245
207.150.196.52
207.182.133.106

 
Leave a comment

Posted by on 12/30/2012 in Other

 

Tags: , , , , , , , , , , , , , , ,

“samantha kipkalya”

419 BUSINESS SCAM – INHERITANCE – FRAUD – NIGERIAN SCAMMER

Samantha KipKalya Kones is a NIGERIAN SCAMMER who has been reported under the name ADIN KIPKALYA KONES not only by me, but by multiple anti-scam websites and multiple online users. — Infact, this scammer is so persistent with sending out fraud mail, that search engines automatically list the name once you type in the first 3 letters of the last name. You’ll then see a list of emails this scammer has sent out under multiple email addresses and IP addresses. BEWARE!

Click Adin Kipkalya Kones to view spam sent to me by this fraudster.

No-Scams

 

UPDATE: KIPKALYA KONES IS ALSO SCAMMING UNDER THE NAME Miss Aisha Yak <missaishayak@gmail.com> Reply-To: missaishayak1@gmail.com AS WELL AS Aisha Yak <missaishajustinyak@yahoo.com> — ALSO CURRENTLY USING THE SAME FAKE PHONE NUMBER +22674747258 — AND THE SAME SOB STORY — CLICK HERE FOR ADDITIONAL INFORMATION  (This scammer is using more then one phone-line.)

EMAIL: Please my dearest help me! 

MY cry for you
Greetings my dearest one,
I am writing this mail to you with tears and sorrow from my heart. With due respect, trust and humanity, i appeal to you to exercise a little patience and read through my letter, i wish to contact you personally for a long term business relationship and investment assistance in your Country so i feel quite safe dealing with you in this important business having gone through your remarkable profile, honestly i am writing this email to you with pains, tears and sorrow from my heart, i will really like to have a good relationship with you and i have a special reason why i decided to contact you, i decided to contact you due to the urgency of my situation, My name are princess samantha Kipkalya Kones, 24yrs old female and I held from Kenya in East Africa. My father was the former Kenyan road Minister. He and Assistant Minister of Home Affairs Lorna Laboso had been on board the Cessna 210, which was headed to Kericho and crashed in a remote area called Kajong’a, in
western Kenya. The plane crashed on the Tuesday 10th, June, 2008.

You can read more about the crash through the below site:
http://edition.cnn.com/2008/WORLD/africa/06/10/kenya.crash/index.html

After the burial of my father, my stepmother and uncle conspired and sold my father’s property to an Italian Expert rate which the shared the money among themselves and live nothing for me. I am constrained to contact you because of the abuse I am receiving from my wicked stepmother and uncle. They planned to take away all my late father’s treasury and properties from me since the unexpected death of my beloved Father. Meanwhile i wanted to escape to the USA but they hide away my international passport and other valuable travelling documents. Luckily they did not discover where i kept my fathers File which contains important documents. So I decided to run to the refugee camp where i am presently seeking asylum under the United Nations High Commission for the Refugee here in Ouagadougou, Republic of Burkina Faso.

One faithful morning, I opened my father’s briefcase and found out the documents which he has deposited huge amount of money in bank in Burkina Faso with my name as the next of kin. I travelled to Burkina Faso to withdraw the money for a better life so that I can take care of myself and start a new life, on my arrival, the Bank Director whom I met in person told me that my father’s instruction/will to the bank is that the money would only be release to me when I am married or present a trustee who will help me and invest the money overseas. I am in search of an honest and reliable person who will help me and stand as my trustee so that I will present him to the Bank for transfer of the money to his bank account overseas. i have chosen to contact you after my prayers and I believe that you will not betray my trust. But rather take me as your own sister.

Although, you may wonder why I am so soon revealing myself to you without knowing you, well I will say that my mind convinced me that you may be the true person to help me. More so, my father of blessed memory deposited the sum of (US$9.5) Dollars in Bank with my name as the next of kin. However, I shall forward you with the necessary documents on confirmation of your acceptance to assist me for the transfer and statement of the fund in your country. As you will help me in an investment, and i will like to complete my studies, as i was in my 1year in the university when my beloved father died. It is my intention to compensate you with 40% of the total money for your services and the balance shall be my capital in your establishment. As soon as I receive your positive response showing your interest I will put things into action immediately. In the light of the above. I shall appreciate an urgent message indicating your ability and willingness to handle
this transaction sincerely.

AWAITING YOUR URGENT AND POSITIVE RESPONSE, Please do keep this only to yourself for now untill the bank will transfer the fund. I beg you not to disclose it till i come over because I am afraid of my wicked stepmother who has threatened to kill me and have the money alone ,I thank God Today that am out from my country (KENYA) but now In (Burkina Faso) where my father deposited these money with my name as the next of Kin. I have the documents for the claims.
i feel you are only one who can help me out of this
Yours Sincerely
princess samantha Kipkalya Kones
God bless you,

______________________________

SECOND EMAIL SENT BY SAME SCAMMER – My Dearest One,

I Have just received your email with lot’s of excitement, since when i feel Because the letter to you my heart has-been over with right to adequate housing if my thoughts and fear Will touch your heart position to come for my rescue.

Firstly I am emailing you from the office of the Rev. Father in Christ the King From Refugee Camp Mission, the Rev. I Told. Father Otuobiribiri Okogoro about my communication with you and He permitted me to access my email in his office computer Twice a day, Presently I have no phone order if you want to hear my voice you can call me with the office number of the father rev 00226 74 74 72 58 The Refugees camp in here and ask of Miss samantha kipkalya Kone That STAYS in the female hostel block G12 When You Will call me.

life here in the Refugee camp is very difficulty to me, to eat in a day is a talk of war for me, I am really Suffering here, it makes me cry each day and night when i look at my status here, I know purpose That with you i will soon come out from this my present status and Have a new life with you, I Have Been in the bank for Several times and i was Informed by the director of the fund this bank Before That Will Be Transferred I must have to present a trustee That Will Stand unbehalf me of my trustee. Because of my present status as a Refugee and advice from my father aussi history Before death.

I Have Already make up my mind to come over to your country since you Have Already Decided to help me, Even If you want me to come over Before the transaction I Will like it so much because i am in so much surfing here Appreciate all your Regarding promised to hep me, I pray That God Will Give You the Courage and the Heart to help me,
About me:

1) I am Miss samantha kipkalya 24 years old girl from (KENYA) Regarding this transaction, I Have the deposit certificate and the death certificate of my late registration, father presented Which I Have Before the Bank manager and i am Assuring you it is not going to bring Any problem now or future.

About my education, I Was Admitted In The University in 2007 There I did my one year subject in accountancy Before the Death of my beloved parents, and I Will like to continue as soon as i relocate to your country, Because this is a promise i Promised to my father, dear So I need your information Which i will include in the letter of authorization so That You Can send it to my bank as trustee.
YOUR AGE………………
FULL NAME, ……………….
ADDRESS …………………….
OCCUPATION ……… …………
TELEPHONE NUMBER … ………
COUNTRY ………………………….

I am waiting for this information so That I Will send the letter to the bank, and pls remember That You Should keep this only to yourself till the money has-been Transferred, and II do not want anyone to know about it, you Know That They Are So Many wicked people in the world, that ‘Good Thing They Will see you coming to stop it and They Will, I am a living witness, so promise me That You Will Keep It To Yourself so That The Whole Transfer Will Be OK aussi need your peak so That I Will Know Whom i am doing with Some thing look like.

Please you can call me with the office number of the rev father 00226 74 74 72 58 The Refugees camp in here and ask of Miss samantha kipkalya kones That STAYS in the female hostel room G12 When You Will call me. With the attachment is my picture look Best

princess samantha kipkalya

FIRST EMAIL HEADER:

Return-Path: <nasirkohatian@yahoo.co.uk>
X-YahooFilteredBulk: 77.238.189.65
Received-SPF: none (domain of yahoo.co.uk does not designate permitted sender hosts)
X-YMailISG: m9mfVSYWLDssIjwssVv4i9Khm4Q3IZDT8nqPO9fQXrssX6Zc lq_jK4ISt9x5dDopEJoUL.amzc7HrC9AdzryM1YfUY1ugUNh.R5k_X1NPv_6 7mZOpGPPUcVHHPsibA4PfNtelfQA6GWZIZJD4tkGoU0tGNGCaS4RM9xBgh3W FtWltRSC.UfPgzWvuPF8cJd432i0izmeECqa6vcIdDpNjpA_LC9rF_C.5JTj WQvTZLQDSDkYKS2LH6oaZqXIDzkqAmAUM6Agp7V_F65x7FhJKpK.rozqgUn8 9gqdYxU3LnHGCF6lBU826D7nKIfzQ3CmeoVOr6aVVsdHpsp99pLA7N.Ls_Wb qlxcWkK2k_JugvX.9im4uGNLke7N1OGFsLdgAV1tA9IazvlTmkVGJABJBxer lhoq4KoCgFx4tHi5affZyGSWc3qjvcmgWwiXXpndv7A6fB0lIPd3jQaZblZz eh._QZmSQvp0NW4S4I2UnTXDaj9zowzBx0FPL7x8C5.R608AXZpDCyPkXTL3 pCUK3nW2wQ.M6820AR7orUYhczrdEzvJiFiW9zrNOJHtmiwqDgioMTxEeIvI L.Wtstg4EM15ll14uuTx1Hh41HcCpcUYqVJmUg7ZUYsBl3cTTqZgHVsJf62D OTRAX6aPkl8O3urXdhQ1_Yukox61TSA6dpHQbmTX6TrAxUeV3gO9ppVLS6uy dmcY0KvS46zRDdVqk9ub9iBtQVoPiQEbF8zJ.rOjaMvVFinvUveytLHRW76B pLJnNiFcoqyNCZYkLp4tfxKv32FG6pekHwomDtgtmQ5DpqOEKKvKHD4b8mOi 8S8PVRu5KpFnizSI2U5E12x0.yGpWtG2Wb4vxUqbKfd9ct2adqWjbHVQDDPZ QH5jxc0lWmq9_cr9NkyQ7Atpysy5K.NBbiAHQ4mwYZ5Dps8FdzL_L98KaXQI s2vqLi338_8SzFcxW1QNSGeiuFICe2s3VMDqRJnghtN2Irvtzs_RfCkAeaD4 EBdF1XRg.bvaceDF2yiKVEHlftHtzRDbmO7c.dSVvdWC7MgSH4In.WdkUPLu ME5hHfgdI057AdSKJVQrmxgeLjO8RPr9gj7_wSMGt88mKDjpPvslT0l8qgRS 4VzdFfSEZf3HedvsAb38UB1WEZXYGUIM3_36F7qIwsMtm9h1jRKwuRhErSFc YAgaHJdBvcDQdEHxuNoQuJ.JgkGswG3VXOtRzhiaqDePYg_0FQssQW7DvJ9a BWUFlEhEts2l143XK06gVgED
X-Originating-IP: [77.238.189.65]
Authentication-Results: mta1077.mail.gq1.yahoo.com from=yahoo.in; domainkeys=fail (bad syntax); from=yahoo.co.uk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12.bullet.mail.ird.yahoo.com) (77.238.189.65) by mta1077.mail.gq1.yahoo.com with SMTP; Fri, 28 Dec 2012 01:23:52 -0800
Received: from [77.238.189.50] by nm12.bullet.mail.ird.yahoo.com with NNFMP; 28 Dec 2012 09:23:50 -0000
Received: from [212.82.108.239] by tm3.bullet.mail.ird.yahoo.com with NNFMP; 28 Dec 2012 09:23:50 -0000
Received: from [127.0.0.1] by omp1004.mail.ird.yahoo.com with NNFMP; 28 Dec 2012 09:23:50 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 713772.64494.bm@omp1004.mail.ird.yahoo.com
Received: (qmail 35751 invoked by uid 60001); 28 Dec 2012 09:23:50 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1356686630; bh=Qa/2n0SNdSnA/72ZJ4g5zjrNdC6NmAMfyv0VmSgj2Ck=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tF+8wPWx7zcCsS5xRuAhNUEAbP1uVF/1xhgQ1D8j157qGF6MPv5dCG9Te9InZ/jnWbmvitdaUBX0Ic4BaduTV/oMx6uu7dnNbWZ3v2v0PeYektsX8y055HH58fwM50EEfJybOrPqCtWZIEsPIENC2gYDqz3gBz7/Ia10c+ltZmo=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=DAMhNvQLk28+uPELthR7B3yRtX7YQCRi+UN9Yd2rbO1TTGoU1LPII66LsruIiKBecb4+qNGAcQNWSLySgAiYABci5STH7q8zQHfHGmWCrUIZw9mFS8Dyv6n9FXm+JxNJC1AUzSvWQ0V7tijdE8atWP1yO+9pMlUMVmHyIFp1SWw=;
X-YMail-OSG: ic3dDN4VM1nRksA2f1o2._2z9Cvk4RJyOwwgULmw3MBI9j4 PJuRF2lwjirze5bMJUYKVJYfVbsck3CYlLGnAQziY1BJrlGOqQozPnpWFaXx VdvwGJ8dxITnIbVnRjCEoAGgruBQ9QiolvVg32ppkTcwpS6NWRmQynNdMwPA eoNNpl1yYoaxwBoJj1PBR7.Tu46UTrlm7AeJaRaV7xnkLw4qLrVBR9Ki602u QjwfgJP4Q9FAKGvem33CdV16lWfdDcSaMZV27e9wkLKH85HcOb.Epl7AluuM Fzvt.V2C8w1BHL_Wc9HNpup3KllE4BNPfhhTDwCKOVdBVJyQ_oQq2SBLyfC5 3sBBML6rDLRkvoue32YGkiR0TEbiZ3u84uLCkd2KRH2kLaRJxupZNhUKN6iv vvuKaloOQlM.dw_aNVXfjE_pZTmEkORHTAmBfPjwzBrP5svTHwKoZlghUdfj c25ier7wAVaVo3FomJc6_0N9E3X0yUOkTczInTFmVPmBJVG0eHsj1U6ef1ZJ 5AberuZkTppb4hzoq11U_awP7EiVW8BRLUcUD1wn1n..E7ZcreSkZpGg3lZD fUz7atgiFHXbjyIsiV2nAUzH_3jd7aFT0og.2vBUs1Dpo6.dvQkCqBw27IzM rFISBVLG_eH9kIiSeaw_dp0p9H1evCWc5HpdNED.I4errQAn1CKu0WdCisAD CBblQfupF_lhLI17hzqZ51nYWt5eEtVqmSzVj8RyBG9RQGohk0K_PZySmvOw eyOvYEaM-
Received: from [212.52.153.246] by web172605.mail.ir2.yahoo.com via HTTP; Fri, 28 Dec 2012 09:23:50 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356686630.34517.YahooMailClassic@web172605.mail.ir2.yahoo.com>
Date: Fri, 28 Dec 2012 09:23:50 +0000 (GMT)
From: samantha kipkalya <samanthakipkalya@yahoo.in>
Reply-To: samanthakipkalya@yahoo.in
Subject: RE:Greetings my dearest one,

FROM: samantha kipkalya samanthakipkalya@yahoo.in RETURN-PATH: nasirkohatian@yahoo.co.uk

RECEIVED-IP: 212.52.153.246 ORIGINATING/FILTER-BULK: 77.238.189.65

customerscareecobank@yahoo.fr

________________________

SECOND EMAIL HEADER:

Return-Path: <kipkalyasamantha@yahoo.fr>
X-YahooFilteredBulk: 77.238.189.192
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: qbXLW8EWLDsMqB4hxPxueXXcxlCUBQ_yEhEnqWmlExRqI8cx hpll9Pw9OQTJl6CXA6k8AJHmOEw6tp1F0LApIbYrK45.vk761HiG71tX4apf US9IKP_ctb.NOAB0r6Gu12YrVUlx3M3Px.R7jiDw.RzOTkYQw3Lf2fwXW3IR 8yONFBMD7EHcdDbY5GDo5eGg8ODYJsdP4wkZ_U.oypeidBzXOlXbdkU22sXo 56nX6wcz3wd_9rwtEeVV3rkFKQQ..MFi4h8JRm2rOkLaFNjsaHAJ4T.GbYOp Tyx4D8jde4dZWTp0Rq.uGPVJYl.0xZbWntP3QtlBv9Gh3.0UvqooDyFQV.UO Xp0mb..DayI0GkBc5nHbiHHyl3UgGZSH83nXXZhrtW6hod_NJqThFnOvxNlB qZWnP97A4GcWmGs9drnW4jgCXP84FjepFGZW7Si.zsh20SoT6NupmcDKGf1o effQ5I6N9BeeF6UMVnO5IrnjwpdYRIxlo0E.IIFPeSG.z22tbhU64o9XZqeN bGag0dEFxcqE3EOHJKYaR4feVccry2REtdTYeQQZ8FLeU5jzNUWj_rv1SOyH 0pIP2G910ycmEwm0oIJjshrAxGxA7JuXP15qwDiutdUWcKwu6LRLvayvzhMt YN_d3hDB7VvaZyTAZ14xFL6537Y_gDWfK2zHicFe7pJEIXgjUC4KJfZDXY09 jnYJUYOhLTzDVO7bLCqCvIQQGFHR3agb2XNGu6Y.4nuR7FmQ1WhNffHP7PZ5 .07Cg7ObNbBE_PydCkYydWLiisz9X8v58vLeswv3jFPmLXCxBwK59yTjxwP7 H3u9utINQK252x8yP63Ybdrp_PNSqZSvvmfs3.dZI0W3FrSadf13Gm.ohBeX 7Oyi.I7jHbT3tNpwEO4OhgXLP7TTXkLpsPdQxXFzSas5sfNkJXYA.PRGmxY2 04sZEeSq98ocCGRDdEhZQ2JV3ldA6RfU.n8EPXB5I0wYezAH80gwajkX20Aq OWRSWm7fPfr20FXTq5naqsOWjV0jjbn778qpddf4XMK6ELovt8vuNoeoVteE jU3h696AcBhmLFjwShyH7o6Jagg.KTtoXuBnev7yfV7ypL39NddWPhFboCAF tO_I4SsTe6SG0OSOQNZxpGWG6XOkdy4t2Oq3sp7rB_jyBMgZJoyY_LOgXoSA SXo1qsIFvMUpAYs2O4WUCM6ZDhFzI6371kW4BJEqwIiCPNY6GZ_K0b7az8ty t6EqJ7hYWiiFFkwZ37.e162WRd_MWQdomnf5FMKNxO9CCLfJzvAM6W9haBI2 LyBszzKLx1_P6YvPuM9LfQnZobc7Q0r5yq0ePPg1IabNKQnQRxJgopcbNidT PI2urYeSwosNp8stwTqdI20kT5VfiAqf3bv2ub25FRWnvi3IH8jfZD93Qrh4 GVje
X-Originating-IP: [77.238.189.192]
Authentication-Results: mta1014.mail.bf1.yahoo.com from=yahoo.fr; domainkeys=pass (ok); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm16-vm0.bullet.mail.ird.yahoo.com) (77.238.189.192) by mta1014.mail.bf1.yahoo.com with SMTP; Sat, 29 Dec 2012 03:53:25 -0800
Received: from [77.238.189.231] by nm16.bullet.mail.ird.yahoo.com with NNFMP; 29 Dec 2012 11:53:21 -0000
Received: from [212.82.108.114] by tm12.bullet.mail.ird.yahoo.com with NNFMP; 29 Dec 2012 11:53:21 -0000
Received: from [127.0.0.1] by omp1023.mail.ird.yahoo.com with NNFMP; 29 Dec 2012 11:53:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 261986.42635.bm@omp1023.mail.ird.yahoo.com
Received: (qmail 19139 invoked by uid 60001); 29 Dec 2012 11:53:21 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1356782000; bh=XOr1c3a3/YGwvnEKUuD/RbFwdoSQV+TIKOHTkBgwcP0=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=oc+aR9aj4t4TEwlSBahzDITzdrGyz9T0GMjaw5urv03SD/atLWOU+mbDmREXqUOS+x6j1mNhDqZE90bqTFUvLicOzb01YSP60MoZrBYjQOe5FxkTWY1eZYTCXKRSjvF3dRpCwVzWFdaAyBqjp0tNfhPtUiFiDjbCvaxwxbIsrKU=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=j0CCkTLPo6p3mFa9cV2neXl+4qq3tEHqKyIxI3kuH8oOLRw59tDd98Wyj21BGb0cmFX15txD2UOho7tRRZsjBqzOhCi8NVI972Ggp/hZXvxdKP+1LoFRJ+q14dJpHE+bN+1RJ/+4gTlbjQw91hinLv8PI2stFF8RBMMkKQyQjRk=;
X-YMail-OSG: a7dNhzcVM1nL_VDBmUIpRVF7xFr5tOqAILwLO5qWDXmL1nh g6RNPT2n_GDkVbeOpVmboNe6N0Fupmb2bbEaGNvZUWsx7_xE0NRuQqT4CBwN l8ZTT2Fow_0tPxfgaUZ3iXN7WC_AK32qid3M8_f3_nv1mHlQvKIB_BPig.yG UlxhFWxMK8nGudKMP96nFrfuhqEfIYN5dgMbf2inHiMuS68X3pwYSead12ZU OwkaCxYYvFughjTXzngXbY6qjA3p.IFd0vE.qWspBQGTMKaoze3zc_vTTwQG dwa1L72s3f39L0AKrxhMAesDuiVK0MvCm_oBc4L_VBQ4ibk9_18zf3TRefBE m2GnFJrHn9hMjNJtIaFSeO0CMS3Od3URzsGejJSOqMxwZ6nXxjByQ3TDTdBK gqwedyUtxSog0zY01_M32tbpYT3y70CibPQ63t6pNpUIG416oHGdBkzZnK4M sIQ–
Received: from [212.52.153.246] by web172102.mail.ir2.yahoo.com via HTTP; Sat, 29 Dec 2012 11:53:20 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356782000.18878.YahooMailClassic@web172102.mail.ir2.yahoo.com>
Date: Sat, 29 Dec 2012 11:53:20 +0000 (GMT)
From: Samantha Kipkalya <kipkalyasamantha@yahoo.fr>
Subject: RE:Please help me to be my trustee.

Samantha Kipkalya kipkalyasamantha@yahoo.fr RECEIVED-IP: 212.52.153.246 ORIGINATING-IP: 77.238.189.192 +22674747258

A few email addresses and IP’s used by the same scammer — adinkones@hotmail.fr under the IP: 41.138.107.61 Location: Nigeria — This scammer also responded under 65.55.90.103 – 65.55.90.71

Return-Path: <missadinkones2@voila.fr>
IPs – 77.238.189.63 and 196.28.250.57

Miss Adin Kones missadinkones2@voila.fr

Reply-address: missadinkones3@voila.fr

X-Originating-IP: 41.203.237.17
X-Originating-Email: [omar_fff06@msn.com]
Return-Path: omar_fff06@msn.com
From: SAFI OUEDRAOGO safiouedraogo@voila.fr
Reply-To: [ safiouedraogo@voila.fr ]
Subject: Treat As Urgent And Call Me Now +226-7638-8906,
FROM: Miss Safi Ouedraogo
AUDITING / ACCOUNTING DIRECTOR
ISLAMIC DEVELOPMENT BANK (ISDB)
BURKINA FASO WEST AFRICA
PHONE: +22676388906

Also watch out for the fraudsters below who have sent out scam under the same IP address

Sherri Esparza – gooseberriesi99@lighthoose.com << Ervin Velasquez – bankruptingx@simpa.ru << Jamie Lord perfumesh08@skyme.ru << LinkedIn Connections connections@linkedin.com << 41.203.236.107 <<

____________________

Below is another email from Aisha Yak a.k.a (Samantha) Kipkalya Kones.

from: aisha yak 0ooo7199yz7101@att.net
reply-to: aishababytnd2@rocketmail.com

SUBJECT: Hello EMAIL: Hello..

my name is Aisha i seek for an honest
partner for friendship i hope you
don’t mind
if you don’t mind please reply me i will
love to here form you ok so i can tell
you more about myself and we
can exchange picture too, Remember that distance
does not matter what matters is the love we share
with each other.

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“NCT Middle East Trading Service”

WARNING – NIGERIAN SCAM / BUSINESS TRANSACTION SCAM

I am not selling any items and what you see below is a typical Nigerian scam. The scammer is hoping that one gullible online user will fall for the bait. Below are a couple emails I received. The emails were sent by the same 419 scammer who uses the name Benoy Shah and Frank Wilson

Subject: PURCHASE OF NEW PRODUCT
From: NCT Middle East Trading Service <customerservice@ntckenya.net> Reply-Address: benoy.shah@ntckenya.net

Message contains attachments1 File (107b)
picture.htm

Dear Sir,

We got your company recommendation from your customer,and we will like to place some order, we are interested in the purchase of your products and services.

Quality and Delivery is very essential to us so let us know the following:

– Your FOB Prices and FOB Port of loading.
– Your estimated delivery time.
– Your Mode of Payment. ( If by L/C or T/T )

The photos of the item has been uploaded to attachment because of the size of the image, Please confirm by taken a view on the product sample and reply if you can supply exactly the designs and product we need. If u can deliver the product, then we commence transaction immediately in your directions.

Awaiting your prompt reply.

Thanks & Regards,

Frank Wilson

NCT Middle East FZE
(Kenya Liaison office)
ABC Place, 3rd Floor, Waiyaki Way, Westlands,
P. O. Box 78443,Nairobi, Kenya.
Tel: (+254 20) 4443621/2/3/4
Fax: (+254 20) 4443625
Office mobile: (+254) 729 406539, (+254) 731 373802
Wireless: (+254 20) 8047682
URL: http://www.nctww.com

Return-Path: <customerservice@ntckenya.net>
X-YahooFilteredBulk: 216.162.167.133
X-Originating-IP: [216.162.167.133]
Authentication-Results: mta1246.mail.ne1.yahoo.com from=ntckenya.net; domainkeys=neutral (no sig); from=ntckenya.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ditf.com) (216.162.167.133) by mta1246.mail.ne1.yahoo.com with SMTP
Received: from User ([64.95.245.102]) by ditf.com with Microsoft SMTPSVC(6.0.3790.4675); Thu, 28 Mar 2013 02:28:21 -0700
Reply-To: <benoy.shah@ntckenya.net>
From: NCT Middle East Trading Service customerservice@ntckenya.net
Subject: PURCHASE OF NEW PRODUCT
Return-Path: customerservice@ntckenya.net
Message-ID: <DOMAIN-CONTROLLO22Z00001a50@ditf.com>

+254729406539 +254731373802
+254208047682 +25420444362 1234

EMAIL: Dear Sir/Madam,

We got your company recommendation from your customer,and we will like to place some order, we are interested in the purchase of your products and services.

Quality and Delivery is very essential to us so let us know the following:

– Your FOB Prices and FOB Port of loading.
– Your estimated delivery time.
– Your Mode of Payment. ( If by L/C or T/T )

The photos of the item has been uploaded to attachment because of the size of the image, Please confirm by taken a view on the product sample and reply if you can supply exactly the designs and product we need. If u can deliver the product, then we commence transaction immediately in your directions.

Awaiting your prompt reply.

Thanks & Regards,

Benoy Shah

NCT Middle East FZE
(Kenya Liaison office)
ABC Place, 3rd Floor, Waiyaki Way, Westlands,
P. O. Box 78443,Nairobi, Kenya.
Tel: (+254 20) 4443621/2/3/4
Fax: (+254 20) 4443625
Office mobile: (+254) 729 406539, (+254) 731 373802
Wireless: (+254 20) 8047682
URL: http://www.nctww.com
email:benoy.shah@ntckenya.net

HEADER:

Return-Path: <customerservice@ntckenya.net>
X-YahooFilteredBulk: 216.162.167.133
Received-SPF: none (domain of ntckenya.net does not designate permitted sender hosts)
X-YMailISG: iiMRFlIWLDtEpVCM2AT9ckfIewfdk8FxyGydDdGZHaEVCEbw azDs9rcfhbJ68XYRbZgGzIGRBGeTe4aEicGgXxjWA9hDrnwrOk6Q8czexjgo Q.SZdfIwrN5I54u_IPLy9nG4qo9_q02_G.oMutLmBUiRVTjpLALMPzU1KL9a RadqpmkRNAXAC9hYUpZ1c03nGWqK8BotKCi5EPa9DnzQZ2f9MH8k4khF6fyy BNDEdiLWHdJfiWTdQqUU5qz4uHVKmu3OGuix0qdnPC2kJH3FiYWI99B4hB9s lBUVRP5AARsp9ssgUzfAzVcigDizqpy3TiEkM.d.xnGwYq14mUAwkTjf7lCc Av783IV6.hVHHmSMN5qsn8i22Vyv9.UJilskLJzVjklg5vfg5527OqG_rds7 UUmX1fTZGLuOOu58p_vzLbnyI5BPnmeHyDLgAHur9VGRiDz362DLl67I43Mf sTLX0r5JQXRi8KZiHHnGdUDbrtSowZm7_B0BmxWAMJHADLRQiZoH.mpz64r1 w3cRGvhzj5RTCqLE9fu17ysxob.mUGSLul2QV6MxbtAcMTfTTaG4byEmn1nc S9QA5T2gmvH3omY867TMqGvVpbghdxDCAtITf1l6CV2eACjb3l_rsGK5MvnN 734B5S4tlxjGvSqzmUBlER8gBAl7wwZLxrNi3j5XB72Q33AfrvKv4cyRCjQO Wx2CXlRrCL3JgN689H_Q8lQtqpYJQx7oEiya0jiFJi0JiXumeFZu_JcaZPI6 kcn5AjsBWQ53EeAGoCZkxGRwFmwVUrhSiC_qrCWo3b1vKJYDzOvCAVE3_Y1l x75k8btTbOqVc8.E0lJLbrlGkcNg1EgJimyz0RY0pVxMN7HQYsCPfkASlsVe onkMHBBvTj02636VmEYnPRFFThgTu2N4S7TVapLTbU97MCcg1BvYcTfhLCyO RnvnSJU3aeS_HyL7mFtR10KfK6Jq2.HPSavk2crUBzsWewabDXfFe0cWqwyd szDq2r9sO0cSmWa1hF89Mt8NcWZurSalbD_boqVVRyLzAsP5Wnt3tyXyl_Wf FoQSFfsrzaxJsFLgDqUwjvSp0T0WHzZ62cu54tBKd4QLhOiBsi0GhuAi6Yfu lKRCJYCG7PV9NoKL52tCpZ_koEQcOKcPtcsX9sx_A2iSHBHE31BNlqMQTSNM s8kiARXWauvtWc9UjmFapN3eih5PUclOKB1nyQQtKCobJSNo8nkKLdn5l24N Xl2jOhQKF2YD.P2SvMh6bp3iXi5bKpY5xlt3K1SRG6c9GPSaqVGchtOfuqxs 13.IsjI1a91YRJmHFOQ5E.alYQyEqwydz.7Ye1CoPeqB1m9RHoMdwP1U6q_H jLhLJurGlVhkX8K4UNsxZZr8NDNwScUr9Pme4uCYOOpIv9BqtakzsWkZSoBB unCDKSYqYaFjxBDCKISqmLYmGHw_1HnnqIWm94m6H4usfZrqHu9Ge8ymOc.9 VRNeWLVbyALtISm2UtCl7RwFhazYnw–
X-Originating-IP: [216.162.167.133]
Authentication-Results: mta1345.mail.mud.yahoo.com from=ntckenya.net; domainkeys=neutral (no sig); from=ntckenya.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ditf.com) (216.162.167.133) by mta1345.mail.mud.yahoo.com with SMTP; Wed, 26 Dec 2012 10:00:18 -0800
Received: from User ([64.95.245.102]) by ditf.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 24 Dec 2012 11:54:58 -0800
Reply-To: <benoy.shah@ntckenya.net>
From: “NCT Middle East Trading Service” <customerservice@ntckenya.net>
Subject: NEW ORDER,,
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_0029_01C2A9A6.6D02352C”
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Return-Path: customerservice@ntckenya.net
Message-ID: <DOMAIN-CONTROLL7jtr00002034@ditf.com>
X-OriginalArrivalTime: 24 Dec 2012 19:54:59.0177 (UTC) FILETIME=[8DE82D90:01CDE210]

NCT Middle East Trading Service – customerservice@ntckenya.net <> REPLY-ADDRESS: benoy.shah@ntckenya.net RETURN-PATH: customerservice@ntckenya.net

______________________________

HEADER NUMBER TWO:

Return-Path: <customerservice@ntckenya.net>
X-YahooFilteredBulk: 216.162.178.33
Received-SPF: none (domain of ntckenya.net does not designate permitted sender hosts)
X-YMailISG: 8GUS77QWLDucs5g_hbPs44S0.9bxpkkYvnJD9rS19yW9w3yj o05Y6iSAthXGcL1byjP0tQo5GhOaxRXdhVAZhJgypWLw0GJqo6QXlw0mfuxF mvqp.CASjnogQSOjn7csh.dBHhMl5RyoDD_Isbvgnbf4EYTRk7S21oaqyLDT j6qW38azJ_dRFKadT2J1ToyWDMhiCanYUDexRyGXhweKiyqTg3ML9YpWKua. 6ZGqnI3gljI7E9i8spc9LsehNV4S6zVwMid.UuN8Yssopzu.nH.dT9Q4xoHV NwDYhlZW107i5NdPTkjrde5VYt1XkyREUIQk5BpgttKoquMOgqdSNw5XvD_2 fm2CccNo2a_HCkpmt7hSU4nrdRZwUpU_81g0a8BGENTMfIddDEZBHJHqbv9F LXONI9oHypmRReuYFMfO.T4ROqnAOvsX4AaFYmS3hcRWyWC2nVX3bsS2h.AH 0WZrZ2rDOGt4JjjnKc0yoXc1dkGtvQLmaJ8UtwQcx1BlVUDdlwDM5VPhC2wd Hfu3vlBsxoJEgXXkrTPDRsX1Z7Nllq8.XnxXR2WDYHLXMPvInX2qTBlg8W1y p0t7..ua1EiXDsQRRqDZQbZoXpxeD_833LImzPSm1.5UQNwp5zHMy4mYAjNC Fs73OEuNCEA1N0oXREpVYg.C1eX2.h_kUtUxJnQRVcFxkdMhh55HI3tWIPR_ N4d.n6Z4GuaoXPE5bBSPjGCoCCN7WHE6wdZrKWRfiaUG3aCbejeuDofOQeIo MD1VoBE.oMSLYgPjoqqkOHzSGV2xwTUlRnoEWv51j0YCRAbzjL2vop2onUEv 6K6eji8OTQwkkzvj6XKFiDAbqihIs4U6z92Owul30N8bwR_pgeZTlCMBDu3f 2.tdEnrfCKen1dP2uVez294fe2u.yBSyC7XSp2o.8M0R.e8iEF74cTazanD6 3zCfOwsiL2AhcPwgI3fY3JHz9A7zAHRGTGuPnWXnZzSHL2TXe9CkVxzQd_yD yZ54Cdgvw1c2lggTJSwWuKwfc.Z3Rg1o_N1AKrKnj9lbv2qpod.6Qtlw4eZU rTOEtsGLpZunIZVIvG38mke4gvE29YP0BnA4PM.D6_4KOqCQz2.5Juk3Xqi6 fqhJfei2K6BoUiQmgyiPubf2an2JJnjnwRBEROu57qpr0DVNMQE9tvvLBzkA 80ZAJqt0cKWnOuKjZLD6SEeFkh.UNc76ImsY7vDDJ8gWu2Gg5Rfxoxtt2AdF rPhJM5BU0T5ny2fgCFIaqr18TjvmYPwFO_F3b7KcosqStFFvL_OMMqXoFN2B f2hw5V43YqAEMgLFhEy622DRp3o2ZUl12jN4E3lC2DeQNCMcbzUAqGfEyTG3 BqEqu6pGJgwNTZ8SU4qBS_3FnC.gFr0Kh5S2iKyA48f_QrcRGxyHiS4TNn54 FY3wXSj7O83sD.UPPnxlktju5TGzBAi.6P57_xjBkifGm0KNRKsvTAnrH7jJ BM1g7DJgS14jWt10tWsQS9x.VJp1f6E9ekks4CEZ.7Yf2vPw8BvLmQY3yHw1 jlQ2GMIODqYILVcCQ8dAEJYsmfJHPivdrSZUgtFML45IJMrokTmK0F2BgvTb 1blzjX4nOZlFhjacfpVOCu9Sa605L4ia
X-Originating-IP: [216.162.178.33]
Authentication-Results: mta1212.mail.bf1.yahoo.com from=ntckenya.net; domainkeys=neutral (no sig); from=ntckenya.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.jiffyairtool.com) (216.162.178.33) by mta1212.mail.bf1.yahoo.com with SMTP; Wed, 26 Dec 2012 15:26:25 -0800
Received: from User ([64.95.245.102] RDNS failed) by mail.jiffyairtool.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 24 Dec 2012 22:51:24 -0800
Reply-To: <benoy.shah@ntckenya.net>
From: “NCT Middle East Trading Service”<customerservice@ntckenya.net>
Subject: NEW ORDER,,
Return-Path: customerservice@ntckenya.net
Message-ID: <JATPDCbXmdMJOtd3rOE00000368@mail.jiffyairtool.com>

+254204443621234Fax: +254204443 625 — Looked up the fax number given and the name/email belongs to Pan-African Climate Justice Alliance (PACJA) info@pacja.org Westlands, Kenya with the mobile number 0724403555 ( South Africa ) with the name Mithika Mwenda and/or Maria Wanza mkanini@yahoo.com — also, when looking up Maria Wanza MKanini@yahoo.com from an online-user with the name ” Priya Shah ” popped up which makes me wonder if it’s the above scammer, since they both have ” Shah ” as their last name.
Office mobile: (254)729406539 +254731373802
Wireless: +25-420-804-7682

RECEIVED-IP: 64.95.245.102 X-ORIGINATING-IP: 216.162.167.133

Kenya Bank Scams –

http://www.banks-kenya.com/branches-equatorial-commercial-bank — nairobi-banks-kenya.html — www.banks-kenya.com/nairobi-banks-kenya.htmlShare softkenya.com/directory/pan-africa-climate-justice-alliance

_______________________

 
 

Tags: , , , , , , , , , , , , , , , , , , , ,

“Mr.Conor O’Dea, FCA”

WARNING: INHERITANCE SCAM – FRAUD

monkeyscamgif

SUBJECT: Re:SEASON’S GREETINGS-(DID YOU RECEIVE MY EMAIL) ?

EMAIL: Complements of the Season

I have beign trying to reach you for the past few months without success,I
do not know if you received all the emails I sent you in the past months ?
Well I am writing you again now because it is the holliday season and I
believe you will have the time to check your email regularly now. My name
is Conor O’Dea, I am currently the Senior Executive Vice President,
International Banking Butterfield Bank (UK) Limited . Please view the link
below to verify my identity.

http://www.butterfieldgroup.com/About/corporate_governance/mgmt_team/Pages/ConorODea.aspx

I have the opportunity of transferring a substantial amount of money to
you from one of our banks in Europe. The money was deposited in our branch
in United Kingdom a few years back by a wealthy contractor who is now
deceased and fortunately you have the same SURNAME with the
depositor.Considering the fact that the depositor has no traceable
relative who will eventually apply for the claim, I decided to contact you
so that you can apply for claim “WITH MY ASSISTANCE” and take custody of
the funds for our mutual benefit. I will not mention the amount of money
which runs into millions of USDollars presently until we have agreed to
deal. I trust you will understand the need for such precautions.

Please note; in 2001, I succeeded in claiming $32million with the help of
an American, but by the time I went to receive my share of the money from
her 2 days after the money was released into her account, she had changed
her home address and moved out of CALIFORNIA to another state and till
date, I am still searching for her. But because it was a deal and
confidential matter, I could not seek legal action against her or even
inform the authorities. So to ensure that I do not make the same MISTAKE I
made in 2001, I will have to meet with you physically for discussion
before we can proceed with the deal.

I CAN ASSURE YOU THAT MY PROPOSAL IS NOT A HOAX, AS I AM READY TO PROVE MY
IDENTITY TO YOU AND THE REALITY OF THE DEAL WITH VERIFIABLE DOCUMENTS.I AM
SURE OF SUCCESS IN THIS DEAL BECAUSE I HAVE DONE THIS BEFORE. For more
details, here is my direct contact email ID :
conor.odea@ukbutterfieldgroup.com and Call me on my Director Phone number
: +44 7045777868

Thank you in anticipation as I wait to receive your response.

Mr.Conor O’Dea, FCA
Senior Executive Vice President,
International Banking BUTTERFIELD GROUP
Direct Phone : +44 704 5777 868
Direct Email : conor.odea@ukbutterfieldgroup.com

HEADER:

Return-Path: <conorodea_creamsontide@hotmail.com.au>
X-YahooFilteredBulk: 72.3.230.98
Received-SPF: softfail (transitioning domain of hotmail.com.au does not designate 72.3.230.98 as permitted sender)
X-YMailISG: VWfCZooWLDtob_5I7zp.u7JKrasPt6sWIe4W7rBfQ5VjEMGl zVbWn1k6Dej4Yr9vM36uHpWWJQKE8HUZKcYplM5pImARjTdhFkj7gtZgd5Ms uHZXe9xS4PBdI6zrS5d7.VLandDtsQovOxYf.XauaSXfRynmUqODYmjOs1Yv c_3G.ygbLa2clhRoJTpKK81ICqgJxtcDY1eDMITG8w1AqxAQauU5HZ84ZD2w 42Yln7iDMW0t5ItvezGcFxELMjUFZSwGlI1W_ER4unAXaSzPIF96Hf1RR6x6 6_6V0_EsqN9UjXdelpN6.w0kadBov2CjG25dkZUC5EsbClmaRImd3yLrlnMB fzG5EcQlrjdgHAFuXyAMzjzisU6xpxvgd0sRbtIr1fTwWvrUYVkULTg3UkBd AHIEFFXeFsl2tforTZLYlaEpxDHo6g.iUjZzOGo6pH6ELw2lvVCE5wpH21OQ AOk4VF_gBBIJg03rEA9zOFnW4bYJBBMF0CN.jmq2YAm1ktkaMAikVJCghhxM fjauG6C8iB9OPQl1S_bCRS9P3uFl_Rto9Iq5e4v_oqt51K4T89w0Dxyac8Cv KGXUbqsPbO33ZqOuM7b9kLDHhuww2b37qngpWwDmFhkowu9W04TpVmRlJo5M fBI5vL4DtB9XZm5LryRTzqS6REHytBycMgMjhfCckJ4mrDNjUzAFRrSA31sL yT9o58eP8edlGVlTrcZnueQ90cJbb6RSwNiDKLNBqKWYPnAK.oXsnQB89.c3 OSIRGyfiDaT9P19Bwm87VSBkrFPEFmP2Fd_qQRtTcVLEIYdNUNtYYyjWoG3Q tCB2xbTORL4WptfD7RoFLMGp8xb19y3bmd7sVAClvl0aM3IkhHoiIp5pEfA7 lQHSWNVsqpJP58RzbskeM9bQZA.uVm4DvPluFug6lySz6GtFzvH3F2dF.9lM .keQBronlq0v82bd5XSmT3Zou8LobOhTYqxADJmq0CvKQ7J6V9GgMpCuDjOi LPnIVAoloVqtQC8ZDz3XLA93pUWef1wTo2s4nJjGVMPSgvP_maKiVQRenVyk WKPOeX_.hAz.2uCbyzqvKP8FMM_VNB4wdyKiHSR9DLWosps9aeS5_uJRQ8Xy t1oGT49jF8MxNvNjmdmsDFzfeaC9BeH8AysfuZe5N4QV01n4LZvveF9WHyca cEPXaemBUOoasqkvjoMPjV8NDIeAGbrcMk7_2RuC7_ITFBZzDQeaAlZ9i66V 1JuhgivGzqi7tHGsCgLcVIuSCMEzZ23IZifSVG1moA4ALAiKuJQOOxWByqTk pEvUwy6M_pN1A.6X64duMFGb0xjof3W2_EJFSm62.t7AjXwleI_dTMuH6n0E yceXZvRIxNdhVa8qe5gAdnMzQuYQtQod2tPX9z1a8mhqxatXdwTU69kPLxjH Olix1i5miyPTGkcqFrC.5.ML7RfUvaXjOpboSkR9Gaeg2UfSVW4Giw–
X-Originating-IP: [72.3.230.98]
Authentication-Results: mta1073.mail.ne1.yahoo.com from=hotmail.com.au; domainkeys=neutral (no sig); from=hotmail.com.au; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO 86883-web1.www.welist.com) (72.3.230.98) by mta1073.mail.ne1.yahoo.com with SMTP; Sun, 23 Dec 2012 11:53:03 +0000
Received: (qmail 25153 invoked by uid 48); 23 Dec 2012 03:55:13 -0600
Received: from 74.95.184.209 (SquirrelMail authenticated user nathan) by 98.129.39.50 with HTTP; Sun, 23 Dec 2012 03:55:13 -0600 (CST)
Message-ID: <5619.74.95.184.209.1356256513.squirrel@98.129.39.50>
Date: Sun, 23 Dec 2012 03:55:13 -0600 (CST)
Subject: Re:SEASON’S GREETINGS-(DID YOU RECEIVE MY EMAIL) ?
From: “Mr.Conor O’Dea, FCA” <conorodea_creamsontide@hotmail.com.au>
Cc: conor.odea@bankersmail.net
Reply-To: conor.odea@ukbutterfieldgroup.com
User-Agent: SquirrelMail/1.4.8-18.el4

FROM: Mr Conor O’Dea FCA RECEIVED-ADDRESS: conorodea_creamsontide@hotmail.com.au CC-EMAIL: conor.odea@bankersmail.net REPLY-ADDRESS: conor.odea@ukbutterfieldgroup.com RETURN-ADDRESS: conorodea_creamsontide@hotmail.com.au +447045777868

74.95.184.209 98.129.39.50 ORIGINATING-IP: 72.3.230.98

 

Tags: , , , , , , , , , , , , , , , ,

“REV BEN PETER”

LOTTERY SCAM – NIGERIAN SCAMMER – ADVANCE FEE FRAUD

NOTE: THIS SCAMMER HAS BEEN EMAILING ME FOR MANY MONTHS UNDER MULTIPLE NAMES, EMAIL-ADDRESSES AND IP ADDRESSES — THIS IS A NIGERIAN SCAM ALSO KNOWN AS A 419 SCAM

BELOW IS THE MOST RECENT EMAIL SENT BY THE FRAUDSTER. THIS SCAMMER IS VERY PERSISTENT BUT UNORGANIZED. HE IS ALWAYS CHANGING THE AMOUNT OF MONEY I’VE SUPPOSELY ‘WON’ AND THE FEE THAT I AM SUPPOSE TO PAY.

freemoney

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $ 7 M

HEADER:

Return-Path: <webxx7601xxxxx@att.net>
X-YahooFilteredBulk: 98.138.90.65
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: To35UWMWLDtpI31Kn.0SLqgNnW08Av0SCFAssCMR8A_Vo1GP GrWi2SRwEUK0_rS5ma.EeNhpXLBHGeRggiFG274YMQUgELYQceZCuxW3lQPN rUoT6knijOkKBdqZkH6wbwxbiX_cGEA41SNaj1GVee9_wEMb3td4XzfxKB2W QHrpIw5Zbu_LEuE.UohMdPBo5n_Z45sHFwPWKeKvax4FtRd9YMFoUrM1giBG C7CLdLh9vlCZzCePSppkA0cvOXt_.mjRjvpOP8QMqDhPOSUFydEEMwgIJns6 2p8QA6wY01j05hbhCrsTYjP7PMBklSFGar9DIbx_rQrES7XDMCtPwl3rskW9 mA0o9k.0wE8917_bR66zH6.r4hgk2Pq8J16QU1Lb0v752n9EcJJSbMbbFQCB wY0piVWQGMKir3JfkdVqWpd_w.T_TfFpxV4cemt1CKnbhoD0FsU7NfExkiJc A5joObOkIGO7Jd8HRyCdsMC_W94SyWlu8v8d0TzsLFjtxDlq1n1fiHfB1XRH vxTmJ6lgV_.c.iXkiuD9N3_pT1_aPP7W9IwCbbDIwtrF34MNw68hMJvJOUe2 pH.jPfBNQHLQFxWhxb6lyVSyv28tHpugjC308j7ixZ00K9T_7yuZ0IHQF6K_ Qd3WjZM3CHJaBIWb1rlNDSqMRfzuahAUzICBFaX8u4wMRTaHcpwTOp7nRUrm sazz9ZeJ7QdN8pKfGePiOZZHXxb1KoyvjL30TC9knrdnerK_gJQgdXaFI8Q5 3er.rbh.9662mA1tWwkL.uw.Ej8jeMmTC81X292stHfa_QQVzMpPvYAw5A9x eqmWm6ToSeMfSIvtRovTlmbB8SkoM4oN0TU4hSZuZ71YzhIaZGFXCNYoOJne 7vGYNkak_HoeCUFsGusF92TWky2Vc9PLHMAgihSZ5i2dv22EV6xQduzDwaC6 hR0YvxZO91Y5nEmgU4JgwTACDxEFzztQjg9nca9TEBemHGKAs_inoBvYmRgj 9NAenemYR2BttVDhS7s50y8s2lyYQLrcXQk7ozgN_n9MjmXaMO0PpbZ7Vpge 7kwg93PpaJb42PYuo_xuEisFLWcWM2dUBSchWFlLPJiuJh8X1JF31AOvxAaS y5zqbbq0gA5D6y8P6y7bvMT6GA.RJbBsQnHsqzQ9p62epYsuSBn.GO8e0Obr iTJkg19mglk6slzhX2ciB7jr2mRWI6xcf4zG3rU9Rruj0ndRzYpo_d30lRuc ri8BKqd2I3s9zVfL6sSwKtJADSftjvwW6RTUXPvc2TBzPoA_QfWHZLqs.vAD fbdtVFTINFo2tQp5xrw8ZD.fSJPwkEmhSP.jOfvKar5IpIk2JWk37aJ3w_S7 tgimEtxHc8pR
X-Originating-IP: [98.138.90.65]
Authentication-Results: mta1052.mail.ne1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2.bullet.mail.ne1.yahoo.com) (98.138.90.65) by mta1052.mail.ne1.yahoo.com with SMTP; Fri, 21 Dec 2012 23:21:59 +0000
Received: from [98.138.90.57] by nm2.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
Received: from [66.94.237.125] by tm10.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
Received: from [127.0.0.1] by omp1030.access.mail.mud.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 33716.96789.bm@omp1030.access.mail.mud.yahoo.com
Received: (qmail 92006 invoked by uid 60001); 21 Dec 2012 23:21:58 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1356132118; bh=dspJXUMJQPVGARdDGpSJwFgAoFNKsOdNQ9FVUYxLdWs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Woh2WLpCF/uHtRoXtPW872YkOBFAAbqyMP8UUqzUgpelHH7rNoiWqa7ag0CmwrvT9rDXbc9/MwzRF4reRQJSiuyghbS6I2JNqrMwOvylD/dqh4XGMyzU7PbK4Pbexc0L8FA9JQhAW/6ELOL4sFG8D94kdkpAOh6L371vv4tS3iw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Wxssckm+WPOWZNoeqVo3J5A9eRTjFPzbZwjkMMleA6TNm0Z3g6oL7alYEXqc56/BtA40DPg9RuPmICUTXeH2deUrULLcyKl+UwLAW5iFZVcgFK96kZvnPQlno8bd2sihdj9TtprkLOV0FMx26eQMMkzUuHBXS3DHp6EcQHcqnms=;
X-YMail-OSG: FhAlJ8UVM1mfQErccxHLz3tuxCp1r4vGnWLUR8YRpQosJn0 41jiU0HfOZDG0kQmHMqh9ICSmXaeUKNHjf_woqZQa86_WB0hFCoBJ9tSIbnP Mwm_Tzot5n5.j.qSIOy00TIP8lP5luggtVz7caaD2_xg6Zh7HkAGgtTfgwB1 1WAhS2sqIs_p3RNlxJA6hbYu8KkdyLOzktPW1JRmwWHrxLfUm4eFUj6oPEXn 8oNzfmB9NOMY7zKPEBmCaQ1yjo7wnJFJHBS8kVzq16fTa98dCGZNheuL.CqO 5_c9tEoKAzDURA7_1BRR87wZUiUY14icB5MobkNiVuzKczqB1i.pYPVpGisr AExzvcXZ9pNJ9zI.QcYSMlgLTOo5CuQhY4uel.ztH5.tWJpHnx_jHfZd2IC4 aKjnnLxo9jTRnXuKc2sIDTrimc6Q_2BpalwQFLRKgXuEJiXQ.6fp1jpbAe3o 0zkK_380VGyPITTcie_SrkWj75HrFmt1WgNvCjcGXVNEKpmpolObG
Received: from [173.13.200.181] by web181205.mail.ne1.yahoo.com via HTTP; Fri, 21 Dec 2012 15:21:58 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.129.483
Message-ID: <1356132118.91240.YahooMailClassic@web181205.mail.ne1.yahoo.com>
Date: Fri, 21 Dec 2012 15:21:58 -0800 (PST)
From: REV BEN PETER <webxx7601xxxxx@att.net>
Reply-To: asabamaka@yahoo.com.ph
Subject: Reconfirm your Address,mobile for delivery of your ATM card $ 7 M

FROM: REV BEN PETER webxx7601xxxxx@att.net REPLY-ADDRESS: asabamaka@yahoo.com.ph

173.13.200.181 <> 98.138.90.65

___________________________________

BELOW IS ADDITIONAL EMAIL ADDRESSES AND IP ADDRESSES SENT TO ME BY THE SAME SCAMMER(S)

2) LOTTERY SCAM – ”ATM payment” <webxl19917xx@att.net> REPLY-ADDRESS: atmpaymentcenttt@e-mail.ua

SUBJECT: your(atm) card worth of $5.5M is ready, send your Address and cell Phone

SOME IP’S USED BY THIS NIGERIAN SCAMMER: 98.139.44.156 <> 75.125.40.18 by web181105.mail.ne1.yahoo.com <> unitednationprogram101@gmail.com <> unitednations77@yahoo.cn <> apex.expressbj@hotmail.fr <> +22998660756 <> 85.95.227.44 <>

THIS SAMMER ALSO PRETEND’S TO BE United Nations Organisation AND WESTERN UNION OFFICE — I’VE POSTED ALL THE EMAIL’S AND HEADERS I’VE RECEIVED BY THIS SCAMMER BUT THERE ARE WAY TO MANY AND IT’S IMPOSSIBLE TO KEEP UP WITH. BUT THEY’RE ALL ON SCAMMER419.WORDPRESS.COM — AND I’M SURE THERE ARE MANY MORE EMAIL-ADDRESSES AND IPS, ETC BEING USED BY THESE CROOKS SO IF YOU RECEIVED ANY SPAM EMAILS BY ‘BEN PETER’,  PLEASE POST THE INFORMATION IN THE COMMENT SECTION. THANK YOU.
 
Leave a comment

Posted by on 12/24/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: