RSS

“DR FRANK COLLINS” – DR COLLINS PETER

11 Dec

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: Below will show two email headers sent to two different people (including myself) – It’s the same scammer, same scam as well. The header information is different however so check both for the different IP’s and addresses the scammer is currently using.

UPDATE: Dr Frank Collins is also going by “Dr Collins Peter” and “Collins Peter E” under the email addresses / IP’s – “Collins, Peter E” <collinsp@newtrier.k12.il.us> <info@notice.com>  YAHOO-FILTERBULK: 157.55.116.165 RECEIVED: by 192.168.194.152 — X-ORIGINATING-IP: 41.71.173.93 Also,  Dr Collins Peter web52644778980000x@att.net REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com – Scammers number: +2347030115459 X-YAHOOFILTERBULK: 98.136.218.126 — For more information click: Dr Collins Peter

UPDATE EMAIL FROM DR FRANK COLLINS A.K.A DR COLLINS PETER (I dont even think he realizes who he has emailed because he emails me with different, similar names on a daily basis.)

EMAIL: Attn: ,
This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-703-011-5459

_______________________________________

SUBJECT: PAYMENT VIA ATM CARD.

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $10.M

HEADER:

Return-Path: <webxx120999xxxxxxx@att.net>
X-YahooFilteredBulk: 98.138.91.88
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: FaLTslcWLDv_37lDMJwvUepYgmnqCzD2WWiLYIVYEvzWiVdj yeMdZg1sVqQZNMLZIrI8jrEhVaMXPsJIY6kRf0cbjnqQCPsaLbBdN2aERrfI RwOChZVFmKW9DzDxir.njJLHD.QY8j_y83jLRI4.AuI7k8QKdHjPvXXJYEFV 3YQAPmqS_78yqhLNbejZcKD5irk7feyqBo.GgWWRjUtr0XeJzJNqaql0h8sA e8RvUpWShCVHN2SyD1tuM0Deb4D1Ji8Vbh6LO0l1rw9cI0_sIz.vHpe_EiGP kHJSq4cVZ_zI24xSaJVH2nairx_S7dPagQ15pHcUhTSBMqGEgXXNeB1Y2oeP 3JU6qx6vSLkN2q.zt9EL5Vwas.VQ3VnnTXDqHLBdVcKU94hP0GlXAupk.DHM obtlUYCC1aCFRuuf3fyqc0LusjLnspK7JnjoOa4trRGPkJ_SlfDp0ggLrEaT v9a7lqaWeBT9EICtLA0FkLq3C2n40JFv19b2vJ8kTWkPK9_CQXXHvPmE9PZ3 kFs1luoQlTk_lzaBG6mXtSkUeA_7vvUTiNlT90e4_xcWHLkMi_qHUB6.MOXY KpjgBBptr6h8HH8BTrub.bb.IWuBN9wzFL2saNzKwsyxCm4lKMw9.xwDm5uJ Gq5wsKY8oAk.ZAm83V.RXXdQZhrYHzq2HI4TEsDuXnxCeBPNS3yCscgHGdua .5bviyYzefeg3tnvzHHkzRlzxSKw4QvlmuuqcChqscR9kCPiJLD.cgAs4kGP VstUFHd.bksAH552CD3i0lwkON5VfmeiESgRCGTPFvptnIKly2v3rZiX6esg GPPtVuH2VF9JGdJc2Ymbkp7azmUteBWNDdU3UBhVs441.EpCaWrI_sm_fe57 OiQyUOywnO1yRAtKJ_SFta4rGiPKLZ0KmWOm2iWxo40gyrpOgSF7vvvDlD.8 TTvxrpElU4SLFTn.GO1zFIFIOghPlKF4MTDaE1.cfSBA7OvaqPPhZB7CbD_P PbifHGwGIUcvjwXFo2GX_MJ9efyRaqwJ8RNv5bv_PmOjBSyxnqzPybf5N4_3 8R6NtlZnqM1b4Enrf9rnVdKOJneQ2FJhZVcYPrtDlcrfum9mFoOorxfoQHmz TE17GM57C0B.ILT43WlnmpnQdle96RtuSiqxmvsRzRStRdaGzDZuic8L7wei rjZENREYOwxD5PakTFL_xFmWBDMWOtezwqcs9j2HaBsIHEPGCa_w1BQb4H7T Rhg.rsLZhUpnUmz3kwbcPdV9Pc8UNCPtAWRE0QCMgwjeBn0ZXdINEcVudxSA YTcOMC4k95wVfJ8oF7eiOod5Qae2n5Ov7WwjD_lXqOtSBIc3J87zhs.HmSjX 7WlsWTwwXn.I_l4fa3NQ.mKYBKo-
X-Originating-IP: [98.138.91.88]
Authentication-Results: mta1228.mail.sk1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.88) by mta1228.mail.sk1.yahoo.com with SMTP; Wed, 05 Dec 2012 09:33:37 -0800
Received: from [98.138.226.178] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [98.139.44.92] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 198054.18868.bm@omp1029.access.mail.sp2.yahoo.com
Received: (qmail 22514 invoked by uid 60001); 5 Dec 2012 17:33:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1354728815; bh=2E+CXVEN1MfcfJaq2e/eZV5TviX4n2QY/x1KeAa5kws=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=f9JOS/YO8YXlmc9hJrpoWT06BSgD+eIddQyPZn984pugXI47aiHJ+HigDAW5KKMMOSqrOWONnAJiCoEyKoSjzteAYzjouKnJuSd9FFAPV7YDDY5OHZP5iSipgSUv3aNEhW/Rsnl4Ln0GS2YFkeMhoGRqYTKiUP5YtCqljvaDNow=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TW9B75gLmG8YEH2Fs0wWUR6quUgNgKf4vKcOC0lU58OuZZxvfbAEilc6hFgOyOvoldI//PR2xiJZNGeYJsT5o76o0CJS8W8mbj8ANAI1PafbE8IT034u3iHRas9fZymmyVV0ARoaM4Pmz0UzVZK0Jim/YrB1484O5fKsUOiyGTM=;
X-YMail-OSG: WdGt0KwVM1lOyB0NVRZY5rrxYN4NyBpT08THjv3T0blrAYl g.fSaOnJGDgT6qOWJLehIImpPX16weUxpsraTUfiislliLwCl2K7v8Pp.iJQ a9TSaK3Cg8mAMGQLpgboaXsnY0P.gbcdPD9a2TYU3MLMz9.msdkdNVne7srD CGKrYap1ePNIkrvsumj.6_CYvw30FkImKkDHHf5IXtzUrxF4x8.QVPZL.F5P 1sCi9c6SjI1P.GeZm2DnWTw.VoPokMuHr44zOJyF208V.uJqcKGplN1blft8 NRD73m_UrMPrQXsfdMEk9IKg0jGHRledxyRP7NbPnmUmTJk5sWb6g7mibQcN lZBmrszbkEqY7Gci4Eh5lmEYhM0EH9ITd3rAkZfbRlBlo5s8MbxSVEa73EvH muyMHoTdJMpwvibAS8LsfWhBVw4Fzpyj.JdfnQdukkFQX5QRnWlt3FtcARkq hyy26DJRYTbzGN4Eyk0EL9EDXp1SGqp9Lk4FU_Cz6Hw4qjqgVzWqnIza_ijq nvI9omJY1Dw0WycuWs.OkVnfl
Received: from [108.174.51.231] by web184901.mail.gq1.yahoo.com via HTTP; Wed, 05 Dec 2012 09:33:35 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354728815.12889.YahooMailClassic@web184901.mail.gq1.yahoo.com>
Date: Wed, 5 Dec 2012 09:33:35 -0800 (PST)
From: DR FRANK COLLINS <webxx120999xxxxxxx@att.net>
Reply-To: drfranklcollin@kimo.com
Subject: PAYMENT VIA ATM CARD

FIRST EMAIL – “DR FRANK COLLINS” <webxx120999xxxxxxx@att.net> REPLY-TO: drfranklcollin@kimo.com RETURN-PATH: webxx120999xxxxxxx@att.net

SECOND EMAIL – Dr Collins Peter <webxixxxxx266xxxxx@att.net> REPLY-TO: collinpeterclaim1@yahoo.com RETURN-PATH: webxixxxxx266xxxxx@att.net

BELOW HEADER FROM COLLIN PETER EMAIL:

Return-Path: <webxixxxxx266xxxxx@att.net>
X-YahooFilteredBulk: 98.136.217.214
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 2lU7wkQWLDvBCg5Cg1wZtIwDNUzuGrZVVXK9H6ZxiRnCF9q8 3T_Z2xZXeKmdhjE03ZY1nNRa1P6Zz09tc3Suud6PVBq3vexxPmov8AXjPV9n h21FBi8fEfSTSwVFhhvzk7V6R63Puryrkha1Mb3jaVwNputKdVPkDPhjUMeo RVMMb4_9ds7LkdO1tAhp2nowUz6sKBD4buJmSanxkzHUpRwUVtPLKq8B09eN Rl25hxMaIQHn74TwJlEJoWwVxtvh8Jkr9b8xgoPVsHTD4d3rIEAmrBO8jRyd GelLKjDpe6gEZSWQukIvbii_.zMj02LUFMIXNqSXg2JTLp15U5_jUlo0usw3 1Q9ij8R.SuZ80..F80EMLcQO1SXMjqWDf6xkVHWwRChYckM8P0zLXQwmLzCh cXZIqLnw6xfz6lcwu0_mQkN.aX.hIIycQN9E431bkyzpAK8Sh0ATdnfKruuc hDUY3uEtvred._LLnnYkhYpxqfc_nSy4oYmmhRytYX5eJDo3.jrNS61KZPV6 YQ56CR6JtF_A6Hafi5rSLv5qgM4p8VJZi7448tERIhykcwaijsPjcAOenatn YK3BKAuoLWZ0KHPHNvGKAWVEbv9QWSQF39Q.EEP1LmrPyvSdcGkLUJurop.B aYWv4YFGCdGxSazNRDxvtgoiaK6SIwQ.bpgk7uq2vF3rcb50kF6JNxWrLg.n 7Tth7XBQ.W0dZ6SeRl5BddGt0PedKs6csdJXP3rAEuRx9HhVbiFWVgdNijR3 _dNog5Qebj0UNBN3_ZYEN_KnDptPkNdpsJ8OGplwzrinpWeXcnwHVgAbUTdo 18VmNYVRbtilZoPybybViqmTdRB30nDou7y.RzfJPpp93GHAGPmJapCeotd7 c17h.xTgmXwnesQYx8oH1A8HMZj9YMgj2Hn78UbjDz5iO3dLZZQwGJc37EEe Irpsy5SaXtVD8MbmmPkhMrhk8K30Dviwqq4hDE5WgxBlGVonuDQoGK3aEt2T nvWx.JhFmNOhCyTBWuANJwIBh0YVHlt7UHVip3l.jut4onQ9R4CDyP6sbX2c lfshiCRIJ9lEvHbvGo40N55AdITysTVwpsKYdhO1zKO2KEhE2HbINU3NSVAp mVO8xztcsAawulFbZ5PKA.HviU.utyPlT0yMvzwTHn_QINVPcYodx0NOT_5q eROgjgZ35jOw55jeTpgP2qOvmDNkeadY.RrCfkVM_h_Ewvbns5N8m8wKWn4F 71xz.y4o8QBLLz0jb4jMAFmUekk5PrMNZ0E-
X-Originating-IP: [98.136.217.214]
Authentication-Results: mta1191.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm9.bullet.mail.gq1.yahoo.com) (98.136.217.214) by mta1191.mail.bf1.yahoo.com with SMTP; Fri, 14 Dec 2012 03:36:45 -0800
Received: from [98.137.12.58] by nm19.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [98.139.44.70] by tm3.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [127.0.0.1] by omp1007.access.mail.sp2.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 191480.20265.bm@omp1007.access.mail.sp2.yahoo.com
Received: (qmail 75889 invoked by uid 60001); 14 Dec 2012 11:36:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355485002; bh=2TQXuFSDKzJQh2ItoNfMPDU7xRHv3E+CGrBMw/1Ns0g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=MdiZ1jC0egJ3jeK8x+wAmlqoZyMp98AiD2wzzG+et6zE3r4jYBfuYUoMttuA+gtIjRNvWXQLaTtg0u215rggtB9Wpx8OQWJMI3iQKHU+C0WdAONnnis/01rbGL8rLVp8QUEopIB3M6ep93e/l0o2GTcA+2tm8NmXdnIzOrTvHgs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tLrXvMlZ1AfWS1oRs/q6h6HUMYi/LUcbnjbU0+wRSPWQr/1rUxJ+mPFD5IS+2J+xhqTW8fnpv0P89+O46Kg0ZaIi52L7OqBpBWUtxGIOrGGuRKY65NxHoyuM/9fcPmg6OxN2t9IVr/IQmo5FIYMQAlTgtLYGxzIx8tus9kjh4UE=;
X-YMail-OSG: 3ICaliMVM1ngoXiqNpguRRh2iYwL78sXplySeVxex0hGQX. 9amYG0XA4OBV26LpGFUMshO4W2d_k7Z_a2Ijy9UC4MhQCts27.mEJf9MSo4o gLC1yrqEZW2qVfkENJcHqLvP6x22811UE_jYQp539eFIcLW5RWUDAU4t9CGn OdkUZ.I3db4Y0_pc3qHbfrO34x9zDWKUFRwLqnQ.wNCnHD8dS3WSTofCFWm8 DRISKdISfGE2ytoF4IzvXsFuyje2c_qd6tqdnmTw5Z9mBhssXb94A4biy5CF qnxB_1TEOjTWqKHDrBY4BU1EdgOFfYQNqvwQ4XtGhinDlu0jMGic.YAmQBDt z00_WMAOIdc6llHVKxJwh0yh_xgWL5D6rgLOTnmN2Mo2vI.t3Ls.zQwRBRhe SaGInzRlMMto6OJd7AVEbCSpnmZYicQHhMCbjMxGPX2KPd4Tv0fL_cU_plDm egb7i9XYQocNBXLDzdzIfmk9Um9FTZk5b6spv87aUQEG.1MjrCbB7UdYQ0uO JpvS8DhYL5XyxrsNNIFxmRpV2b8I07Jm9LTn8wKS_hqGegIf5feMr.9cGJzH 7hgKyGs0sihPG_k5JCSaI1yCjgZYK79b_xhXuvMQeLOYyQDygzxrr8813RrH cC8L9RfM7BsB3QMN75qyv.pCG1ZbybDazG.TyLuGLgdSNZ6KwYSh_mQ–
Received: from [172.162.63.104] by web185004.mail.gq1.yahoo.com via HTTP; Fri, 14 Dec 2012 03:36:42 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355485002.70723.YahooMailClassic@web185004.mail.gq1.yahoo.com>
Date: Fri, 14 Dec 2012 03:36:42 -0800 (PST)
From: Dr Collins Peter <webxixxxxx266xxxxx@att.net>
Reply-To: collinpeterclaim1@yahoo.com
Subject: ATTN:BENEFICIARY

108.174.51.231 << 98.138.91.88 <<

________________________________________

Click SCAMWARNERS for email to below header which was sent by the same scammer as above.

Return-Path: <web1xxxxx12000bvvv@att.net>
Received: from nm12-vm4.bullet.mail.gq1.yahoo.com (nm12-vm4.bullet.mail.gq1.yahoo.com [98.136.218.191])
(8.14.4/8.14.4) with ESMTP id qBAFqXcC024177
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from web1xxxxx12000bvvv@att.net)
Received: from [98.137.12.190] by nm12.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [98.139.44.75] by tm11.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [127.0.0.1] by omp1012.access.mail.sp2.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 169461.26588.bm@omp1012.access.mail.sp2.yahoo.com
Received: (qmail 11627 invoked by uid 60001); 10 Dec 2012 15:52:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355154752; bh=6IEXAnuDHUzPM2GG6BZxFSMMGXUzzTJH/x0iCKn3gNM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ZNpQDXqA6YKLygx/Mgp0kaQY3hShe48iYfThTEb8Iru1MOJkFmAxYG7WRpbG0vEzb8sVOXBWUD70FlpkHY32sc3lcnQRUH9EWyjF33/6bxeK6Wl/Hf7syjgMKen3IrPrVrQM7QP70aIkEYevI/L1VoeaKi0X05zrl/mkFKlZJB8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=C3u05KWRUG4yec6yjYc58jVUZqKqPra/xpCRYFkhi2pi73G7p5xYJt3avwhjC1pd5gHT2g6XMST7DkGiaRchRZYYa/jODcoZt4R+AhzCt86vNfdJ8r54ZScNvyU4Y+I8mpF49mKbuYWh9Qw+6o/yW3f8qclaMsyNAu3ATH2SDAs=;
X-YMail-OSG: p5tUyUsVM1nSNbno0XpFEzLZade1sG0k1LIN6NkNDDbP4ts
LfsdXeXxUn6OgEkvAzJFUKDvuIBVeFzZtgkksCNzN7YM7NYxZZELCIFArcbu
_mj1sx3mmaRRFlhLnDPO0Ud9acKn6RdXUuy0Z2D2THjsSnJnY9sU7qqlRMsY
RFxlusC6GZdc5g0kSlEJ9Q6m1NFt621vubnU3dlWx9BHYYswZA3GlYEoIQOZ
znu.EmXiL_e6NkgO6Xi3U8TlgxDHH.J2V.gjmQeJjgeleOz.cmjSiQf65.01
pFSPJQ.uJV2ZQQDmhoA_f4DIGHOLzIEM54oMAKodxlcGehFjRCB.Otx7qJ99
LLzSejt_DN_c3T7KOCmzn30gBLvM4NW04V6Q7K4N69QA7XOIUNPQflttOcPQ
QUh_J5vkppPwzXQ7X5ZwbRUsdfsHhuaz1XhXMvrY6vOWGj_WLL3kyxKoNNTD
o2PEbuViIVuMH9ocliCObq_Z7Olxp0coTXqA6vhkTd_030aE_Rclf5k8sFU.
neOYXj1nWJo0ZcsSoOLW7
Received: from [64.72.78.27] by web181404.mail.ne1.yahoo.com via HTTP; Mon, 10 Dec 2012 07:52:32 PST
X-Rocket-MIMEInfo: 001.001,DQoNClJlY29uZmlybSB5b3VyIEFkZHJlc3MsbW9iaWxlIGZvciBkZWxpdmVyeSBvZiB5b3VyIEFUTSBjYXJkICQxMC5NATABAQEB
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355154752.62957.YahooMailClassic@web181404.mail.ne1.yahoo.com>
Date: Mon, 10 Dec 2012 07:52:32 -0800 (PST)
From: DR FRANK COLLINS <web1xxxxx12000bvvv@att.net>
Reply-To: dcollins@kimo.com
Subject: PAYMENT VIA ATM CARD.

 
1 Comment

Posted by on 12/11/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

One response to ““DR FRANK COLLINS” – DR COLLINS PETER

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: