RSS

Mary Thomas

18 Dec

INHERITANCE / CHARITY SCAM – NIGERIAN 419 SCAMMER

UPDATED RESPONSE FROM MRS MARY THOMAS WHO WENT ME ANOTHER EMAIL ON FEB. 2, 2013. ALSO, TO SEE OTHER EMAILS FROM MARY THOMAS SENT TO ME IN DECEMBER, CLICK HERE.
I posted the header details to both emails because the scammer is using different email and IP addresses.

No-Scams

FIRST EMAIL: Greetings,

I am Mrs.mary THomas an aging widow suffering from long time illness.
I have some funds I inherited from my late husband, the sum of 5.9 Million us Dollars and I needed a very honest and sincere Individual or cooperate organization that will use the fund for work of humanity,
I found your email address from the Human ressources data base and decided to contact you.
Please if you would be able to use the funds for the work of humanity as i have stated hear To fulfilled my late husband wishes please , kindly reply me back through my private email adress for more explanations

Regards,
Mrs mary Thomas
Private Email Adress ;marythomas000@laposte.net

FIRST EMAIL HEADER:

Return-Path: <uwesuza@yahoo.fr>
X-YahooFilteredBulk: 77.238.189.217
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: SC577cwWLDt8fgUiBGSZs_l1.S6NL16kUKFmPeyCUuwKXDx0 LQpr05r5mnCTnnjpDIMSX.BWZZZTt0srB8sJmP419uubxFQ25OchWDJJFQZY d7Zh44U1xH_aRxB7YgMJfIrwiVerWdo7G8Uq1xhIwYDC4ETjeZ3ntN3sLmW3 h5PMSDsAYV.FBLq2LtnT8fQSQMgWwPUvaVUalTz0MEaMTaS7RWZVx0s7azmI z1xYE81zOpdDybxvOr.CrfRP9H7jSqGXITd1b_iLX5A7H7LzZGm1I3px2WIO ThlEpnNrwIbDyJ6lhrp7Yr6aDpJiP5KZcNQlbJiLmviXc1eY4maqQ4oY5Gpl VMDo3WFCjocsvgoj7.CDzH6AInH5qbQUr9KYTDdZ57DqQnq.1_toF_QZEDXS r8MgUAsGizi_Hud5D_wMeiFg_8mpNQ94BFK7fxK4eAbyoFzyVq6F6NNVQrki SdkL_Ce6ZkKaqB3kPgdyRMGZnrjXZ.2gPbunnMmC6xWzsctPswWvUaHfwhbC hf6cqCpgJ1rElDjRe7c6seP8WZveztghm6nDDegnG25eBxZodBKAn7Y23.lt Aq3iG07HMywpDGyAP_bTDy7I5KeJt3_qBlliRYr1FhGa7nZ2yXG8r_m9KMLO HYFxerJpdGdUgMdy_yNyNh8WGI4__XiKyg0j_D9R3O9A0E1pKCwNFTOg5qvl C0Fuz6ra0.5yMKcaB.QaIhpt3bnhCeNIrA2m1nHf.ZHx1T9PMPToQuT9rb._ 1OxYFPQ4kRsj_b8NXZ7I4XVfRZ3AjZSqr5Ui4RP.D12QCSyhoQcBnyLOWGdh RrSzM6cDpFEw1TpKZrb.2Ml6vpT.lfGTlvK.OG99WskzVyANqIVr1BGBBkrC mlI4NvRJqzbuQ2lKeiV6HwtUcgfjaSZZhBWb_62zyR_Ov7VHiyoYrfzVd.Ba MywUpcSIrqpwAxb1VJF_w3tp1YnAyffA_iHfBYqU_Cmb7VliQiCmiKu7N_6Z xF5vGrJRTWq..bCzKUusy0eG61U7xgudzI13TK7kRaoDe0P3L2NdtB726M4l Rkc8FlhV9wjX_9YDpvz5s2egI_oSXOpsPFw49WxnxYGQfJn3EtCur5HD6EAZ ezYV_o_OvSQU5xgFyeqqDb7YAoLKg0P6qzt5FHFAd7_uFsedXvCRL_Jq7_YV LzHNgYRPiCmFe0XOZPFbkEuZf.0T
X-Originating-IP: [77.238.189.217]
Authentication-Results: mta1367.mail.mud.yahoo.com from=laposte.net; domainkeys=fail (bad syntax); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm18-vm1.bullet.mail.ird.yahoo.com) (77.238.189.217) by mta1367.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 07:08:05 -0800
Received: from [212.82.105.244] by nm18.bullet.mail.ird.yahoo.com with NNFMP; 17 Dec 2012 15:06:11 -0000
Received: from [212.82.108.120] by tm16.bullet.mail.ird.yahoo.com with NNFMP; 17 Dec 2012 15:06:10 -0000
Received: from [127.0.0.1] by omp1029.mail.ird.yahoo.com with NNFMP; 17 Dec 2012 15:06:10 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 949478.22736.bm@omp1029.mail.ird.yahoo.com
Received: (qmail 39973 invoked by uid 60001); 17 Dec 2012 15:05:33 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1355756733; bh=Wi3t1Mw4cOeOZaiIj6FTnhrcSujPfpi9ysov9+EFzTs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=BLIPvWB3XAnlaUImaAfnXQ0/oJbtPqXKF2cE5euMDmSUuQ0slv1y9TBybEaPtwCLYF+HfEV7VOnltCtCIObNOkrCEY8Kn4VYT0NWxIQehmc0eFkln24FzWo9rx+ZVZxhiqrVkyvGfif+kt4hgTc8i2eZmKyNdkoEAM4oxFMqbY4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=1zorBhLHvLc4mQ5UyD2ZtVHpKCALPrGZyLajIV6Xxu50b/RHI2VSZdkPp4f0ijkBpqyQpam78rOajD/p31OqPSrqg/d3lGvrm72YBfy0KmGiszMow2sUaQvZecT+d9o4yh8niJjpjpsQt1tH6t3YcJ1CUlGUXo/T0Llg3dTm1rY=;
X-YMail-OSG: dsy1MXsVM1leax8HSVJp6uDTpPXsP.awPBJ0qZiveJS_e18 uXw25Fdq7hj5WYpU6qbcn
Received: from [41.203.224.254] by web171204.mail.ir2.yahoo.com via HTTP; Mon, 17 Dec 2012 15:05:33 GMT
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355756733.37025.YahooMailClassic@web171204.mail.ir2.yahoo.com>
Date: Mon, 17 Dec 2012 15:05:33 +0000 (GMT)
From: “marythomas000@laposte.net” <marythomas000@laposte.net>
Reply-To: marythomas000@laposte.net
Subject: Hello

FROM: marythomas000@laposte.net <marythomas000@laposte.net> RETURN-ADDRESS: uwesuza@yahoo.fr RETURN_ADDRESS: uwesuza@yahoo.fr ADDRESS GIVEN BY SCAMMER – marythomas000@laposte.net ORIGINATING-IP: 77.238.189.217 RECEIVED-IP: 41.203.224.254 LOCATION: AFRICA marythomas000@laposte.net

_____ _____ _____

UPDATED EMAIL –

Greetings,

I am Mrs.Mary Thomas an aging widow suffering from long time illness.I have some funds I inherited from my late husband, the sum of 5.9 Million us Dollars and I needed a very honest and sincere Individual or cooperate organization that will use the fund for work of humanity, 
I found your email address from the Human ressources data base and decided to contact you. Please if you would be able to use the funds for the work of humanity as i have stated hear To fulfilled my late husband wishes please , kindly reply me back through my private email adress for more explanations

Regards, Mrs.Mary Thomas

Return-Path: <dragonknightuk@yahoo.co.uk>
X-YahooFilteredBulk: 77.238.189.209
Received-SPF: none (domain of yahoo.co.uk does not designate permitted sender hosts)
X-YMailISG: HafQ25cWLDsqSszvRos0oFDBwr4a2tKFqo1Ieo4e9uEs4HpD HLYl95WqTdSC0gSRmyUbpFETm6WC7c4eNb.vr7VyV_vDXF167o2UL1ImhcsK izBrl2O6sIsKwC8eH2.KZUvR5gt2bXHmUk4hKDpiowEkZP1Nm45aGPhuSoaW Cw0FPo2ZsZF087FCUlzwqCOamBQTtxx2KBYAx6SuGlLAgnLTpCC3S2UDQwOT gJyGfQmTndbt3Vo0jIhTJ9NonCzrwA_a4NQNd19octkfjxztZNSksOgDQrmY EaOEkjnLH3OYoyiPBsaaiefg5NS8.I4FQ0vUhF8SJQPsdUIhArVUdl2NGRFj h5HkDh.LlzVJvvmxAABL.kVMzzMP8ac8fmuTA4O3mStFk..00PYtENHOwVMW CRcr.4a8XWnpGZPc1mdtcujhKPPGwC3XlAyZBAMAmDxsfYze7Utoe4..6LZ9 j54GXXDDUqLu2XBfq__KcCeI6n8B5AOv2ored18_9GO9RpTWB2A3vveLjg8B 6w4SnNNxUlL7.WxKtVcsrsaXJc._2EyV1eTetC4WoMt0o9eD2PNclUgNH.Oh su1cSim4_uYld3K1TeW3.qjZPa16774447c0UlXdHAMYPTeVuklfi7ItA461 9VMkjiGsskZasL5D1XcY5NUSnJXzsGqh5Jp5UGpaeP5yXldas2BZj8cfOSlt NHYyFF_D6Grg35viF1RDwRmOk9OXmN991kME5oG8cvW.glBFBRLpzkvwbJ3X hkD4yq8OqPLbm6Oio6F6dWBcWI.PCqdXfBpiHJjp8msF690g_qLvuq0sHrap XbFMmfZ0dKRKi6.9x7YbyLYcb9ne1vn3U9hVonpQxu5AYFtnzrdwQSbLGluF 1BVr_Y2WTyx9thp_5ZPaT9Tg82.Y9RjI0PX85cz6LtJlPPOZ8Id_fonGeulP sbXysc9OjJrTDfM3DlAwTFfHk1tLKrQYOi2EZ4SlIJ63g1uIMAeHUw0bBjYB l.jMIAoPINziPOO8gauHLkn.f7Qq7uuNyRxK2qZzoKJjI6G6APmwwssynZ64 3H0sVgQHPyQT6F9g16ud4wqKhdMudAhsWUNJaHqgsUP9r.0v_AVLbum1SQ–
X-Originating-IP: [77.238.189.209]
Authentication-Results: mta1276.mail.mud.yahoo.com from=laposte.net; domainkeys=fail (bad syntax); from=yahoo.co.uk; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm13-vm1.bullet.mail.ird.yahoo.com) (77.238.189.209) by mta1276.mail.mud.yahoo.com with SMTP; Sat, 02 Feb 2013 06:52:41 -0800
Received: from [77.238.189.55] by nm13.bullet.mail.ird.yahoo.com with NNFMP; 02 Feb 2013 14:52:37 -0000
Received: from [212.82.108.251] by tm8.bullet.mail.ird.yahoo.com with NNFMP; 02 Feb 2013 14:52:37 -0000
Received: from [127.0.0.1] by omp1016.mail.ird.yahoo.com with NNFMP; 02 Feb 2013 14:52:37 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 605740.60374.bm@omp1016.mail.ird.yahoo.com
Received: (qmail 12425 invoked by uid 60001); 2 Feb 2013 14:52:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1359816757; bh=E7QMpM2rn2XQaRvyUiATTtTxqfxfTkH4nuX3bVTWjeI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=OO6e3Ke4SBmcF+lJqNKKa1u8d0zIw1QNIeREdc2hPcB6rGAs6W4rhEkOrF7hq34HQ1FPPLajiBn9mBfzM0w8jpW5twCyberDggoo9rGya3hImikYnP4zO/qer1JakfPNFPr+srYTS+K/KYrO9EPxMe5zjMPpn2qO3VqiJv7oIk8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=SzybGBX2KKs98lY3XdgXVfOEN1mCQXwZnekJJzqCE4aLyDywqYesnTjkmUVlMFyBdSxR6au6X9HGb3lGUV2o1MWz6+suBI6GTAGeRTB/En0p1cLnTv4NkOwi7EE4zWnhq5F6iZ2nNZHzg08sMxEJ8Owb02f1Wq4O1XSbnqcpoxw=;
X-YMail-OSG: z3bBI5QVM1nfBHHYSK_VSbjdLWoHrGZuGD1vKSojvX87NQM 2L_2OTrX6wvqo7Ps21s8sErfnQOLAEdhVuCI10xMpEutdEMP9tV7mh_hFkHv CauvBZHChfYMbpVhK15E0NmqOBallzMw0q35H31lBDoVXBe7IUWy3hhGZqJF 9UbPEbrDWWnykfewjzCYfUPOQXShwUNu5kYuJAn8eACwzB_fbqisa9s1TKl. vqiW5nXqNN3Biktbv.KV62DBVk0s43Ku2ZPGAxn5BWAAJYedL4bWKg9x9oCV Sx_DxmrvdLm5YxghA2MVBL1XJoiMKoyMJ87vmeP6oWKXqBv.HOAvYw1nZXOO B2kenX5jh8gygoqNeN_bs6FKtJV.3YX4bwIyQIaitmNWLlbFx_U7wQK_1I.Y dewSxVsCA_K93NTZgP4_xPPMqzJWaNM_rl8UEq5vUmn2ZCpwYMI1hARjypZ1 EDH7cHQrDsZqYCUuqVjaFFkkxYdsYDy5AWRBUKtM296EbwqSE5adBPW361AY gwkzMiXjNlSmPI.lYJa4vDq_ATKeHaKsyZkaCBrw7D.ddp7qMJjw4RrGh3.W BLPjY1BIcHQFMahkbSxaLjwOPtDj7Tt4q8dli2t0zHBH71ABUuNfY6ZvKu2K 8W9WS9OnDZPWO5OqaxbxVILM-
Received: from [41.203.226.228] by web172006.mail.ir2.yahoo.com via HTTP; Sat, 02 Feb 2013 14:52:37 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.131.499
Message-ID: <1359816757.10339.YahooMailClassic@web172006.mail.ir2.yahoo.com>
From: “mrs.marythomas00@laposte.net” <mrs.marythomas00@laposte.net>
Reply-To: mrs.marythomas00@laposte.net

Mrs. Mary Thomas mrs.marythomas00@laposte.net <mrs.marythomas00@laposte.net> RETURN_PATH: dragonknightuk@yahoo.co.uk IP_USED: 77.238.189.209 RECEIVED_IP: 41.203.226.228 LOCATION: Africa

BELOW IS A LIST OF OTHER EMAIL ADDRESSES, NAMES AND IP’S USED BY SCAMMERS WITH THE SAME RECEIVING IP (41.203.224.254) AS THE ABOVE SCAMMER
Hassan Ali hassan.40ali@gmail.com <> matuskudus@yahoo.com
X-YahooFilteredBulk: 77.238.189.61 <> 65.38.94.59 <<>> 83.133.124.245 <<>> 218.30.22.82 Reply-To: hassanali06@voila.fr Subject: My dear Friend, I am Mr Hassan ali a chartered chief auditor with BANK OF AFRICA of Burkina Faso Ouagadougou West Africa
 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: