RSS

“TOBY DAVIES”

19 Jan

WARNING – INHERITANCE SCAM – PROPOSAL – FRAUD

There is two emails from this scammer with the newest email, which was received Jan 27, 2013, first, then below is the email received Jan 19, 2013. 

Hello,

I want to drop you a quick note since i did not hear
back from you concerning the information I sent you the
other day. In case you did not receive the letter introducing my
intent, I am Mr. Toby Davies from UK. London.
I was a personal associate of late Mr. Rafik Hariri, Born in Lebanon
in 1944, the late Rafik Hariri was a Lebanese self-made billionaire
and business tycoon, He was five times Prime Minister of Lebanon.
Please you are advice to view this site for confirmation.

http://www.rhariri.com/general.aspx?pagecontent=biography

I got your mail through my private search and out of Desperation I
decided to reach you through this medium. Mr. Rafik Hariri deposit
759,000 thousand Pounds in a bank here in the UK. Before he died. I am the only one aware of this deposit, and have 100% access to transfer this said amount since I have all necessary documents to do this.
I want to invest this money in your country; the need to move out
this money arose when the United Kingdom Leaders generally agreed
that some of the money held in dormant accounts would be used to fund
youth and community projects. You can confirm this in the website below.

http://news.bbc.co.uk/2/hi/business/4017381.stm

I am in a sincere desire of your humble assistance in this regard.
Now permit me to ask these few questions:-
Can I completely trust you?
(2) I am ready to offer you 25% of this (759 000.00 Pounds) I hope
it is acceptable by you?
Please consider this and get back to me as soon as possible through
my personal email address: tdavies02@live.com

Thank you so much.
Mr. Toby Davies.

HEADER DETAILS:

Return-Path: <tdavies04@hotmail.com>
X-YahooFilteredBulk: 81.193.115.129
Received-SPF: softfail (transitioning domain of hotmail.com does not designate 81.193.115.129 as permitted sender)
X-YMailISG: 00fI17gWLDtIE7JXMfZpgfJIpYYzZiyL8cETtUWseiFMn6xE sbMTvEIaIpv_R55BGTKG1y4D33CwCjrgZOxkHG1AC5QBNlurdcDQjNZRJiUE 9_uzIwekMQldl4ZFQ2.4ncHXYZn91WA3N_h1tM3pI0XX8nWzbIwMWB5ocgsn XsSkVkLjvCrE.y3YgLha6Oq0PSew5XSRl3WGPj10nHpCkXTaAtznbdcVKZor XN7.FHoulp.jucqqADE4L.ayoo_pKfPoGCGpwfQZkj9gaMmqvgqMA6YCbTB1 JMgpDza7u_7EixqtNzifAUhRq7kYzyBooNKFkw4N_RWBDBX3x8YRVoUzLCdq idLeTZuiOBLndQYv3uC1g1fTuuB2XYZsZa7qQN5clUTMmh3CAxVv42fxiv.z EudVHH87nFUmcOJASbe_f992gXfc0hPFx_KG3mx1255wsXRhBjmPwnP3eBaL HMA8SurQsnKAxggdrRXrQBktAW1IE7_CKGwt1e8XtRCo6QzphClOSKISBEZM t76Jq4QMqkCbGvHRiw0K3EgP5ObmyORa.Ej9AveYa06SsAbFHtbiBl6t2XvG TdFYFzy4woQeBQKI0cC9nYqE6CGHqcyCIdXNd4g3N6Fidakt40wNpFxSbGzG e8Mf85ElnMPVM1txTAeNqdUhln9HOjwQq9ssrUWNUeDyrdroi6VXIajKuCq_ YK7h4LL_u_6Xfukj7GmQt6OG_womyV4d.VgLTYrebyyEHucy5OWiJ7oDUuFH ITbQUlYQFi6F8bwI6ybVrEyt7c6k_L2scx3o5HEwlkWa4VcANsDzObyQls3z mwDafe1RKpXKlRvvlPHkza2kAWUHGLnoxzV9h6Q0D2L36qwTmFXmMN37oS7n 7oT48j96i7mL2HMzJads3CiCiJR5DIJ4rEXvS81zFXL0OQdB.bvR67vE6KfI RcDbl.MRJael1.tYqsmx7xigJs4uT5bbtar811zyGknbbt6MrNKH1OiPtU7U 4XA_S6vmLVbKcH0OaYEaLr_kwiAP0bMtDuGjjtj7Q.Reoyu08T4PXJpRvqTi 0WM53kFTMIj.h7WkZv3Rc9lqK17UzwV2rSdynTOiHykk98mPUIpSTIp3BvtS 5X0gjOTUHkz8qYaaa4zZ7auEMVkAled5HOsL19VjviM_kMo5BfPTu4h0hr5z FRFTUGAsIM1lgqokUah510sa2pwYqN2Fx2AgzJBWv.cdWZsB_SGcqCflq9Ai l0GuLOOI3ppPcC4S_Ook5eqvOTQ8mAWSYdis6D5uO1xRyBiCt_d6M1PiedLp zt8scCMKSVN9M_TI4c9PxcrFl3QvCDtLSMhFKEkio7WjfXJATLbn_NiscDcb NzX5srvP9aVN6VTTDbdk9X_7vQow79FncPN5sV4guoR9q3TT3tMW8JJFkkqd V1MFDrpyfC7OTqUy7dRbQJuC55t4W4wTenb.373yb9__H470NK.pu3PnV7j5 mC4xLl6pSSzBnRuwVrwtSME5zSaGaHpGqqXt4YiPgccjh5Z6YxVtUvmJVh5n yqI4UUaDwoBJ.I79qXSNCnG19fOZI8x51bdhjtXRbKHkB5be3BRtOEX7fiNV MCfp._RmNUkRpJFseBB.L1XQfB46uNH5GFRkqKjoLZBOWvkPkbEPcraPKDLW P6VeOVihB6ks2R1p.lJLU1rdp2suFmHpiPLzK09ZhC_Pa_h9djHkk0IhIAdS Yqh_tM1w_T4jaW1s.8gjHYEPAlj2pi0m9DXoaRaaqliZGEX6AkEbSs6T3Lhm bHBUGWMBBwUE
X-Originating-IP: [81.193.115.129]
Authentication-Results: mta1290.mail.sk1.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.cardosoeconceicao.com) (81.193.115.129) by mta1290.mail.sk1.yahoo.com with SMTP; Sat, 19 Jan 2013 02:59:29 -0800
Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.cardosoeconceicao.com (Postfix) with ESMTP id 83E868F62B2; Wed, 16 Jan 2013 12:04:32 +0000 (WET)
X-Virus-Scanned: amavisd-new at cardosoeconceicao.com
Received: from mail.cardosoeconceicao.com ([127.0.0.1]) by localhost (mail.cardosoeconceicao.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AxidReusR4iH; Wed, 16 Jan 2013 12:04:32 +0000 (WET)
Received: from [192.168.0.6] (h-66-166-167-203.mclnva23.static.covad.net [66.166.167.203]) by mail.cardosoeconceicao.com (Postfix) with ESMTPA id 97D808F629F; Wed, 16 Jan 2013 12:04:25 +0000 (WET)
Content-Type: text/plain; charset=”iso-8859-1″
To: Recipients <tdavies04@hotmail.com>
From: tdavies04@hotmail.com
Date: Wed, 16 Jan 2013 06:47:02 -0500
Reply-To: tdavies02@live.com
Message-Id: <20130116120426.97D808F629F@mail.cardosoeconceicao.com>

tdavies04@hotmail.com <> tdavies02@live.com RECEIVED_IP: 66.166.167.203 IP_USED: 81.193.115.129

Hello,

I want to drop you a quick note since i did not hear
back from you concerning the information I sent you the
other day. In case you did not receive the letter introducing my
intent, I am Mr. Toby Davies from UK. London.
I was a personal associate of late Mr. Rafik Hariri, Born in Lebanon
in 1944, the late Rafik Hariri was a Lebanese self-made billionaire
and business tycoon, He was five times Prime Minister of Lebanon.
Please you are advice to view this site for confirmation.

http://www.rhariri.com/general.aspx?pagecontent=biography

I got your mail through my private search and out of Desperation I
decided to reach you through this medium. Mr. Rafik Hariri deposit
759,000 thousand Pounds in a bank here in the UK. Before he died. I am the only one aware of this deposit, and have 100% access to transfer this said amount since I have all necessary documents to do this.
I want to invest this money in your country; the need to move out
this money arose when the United Kingdom Leaders generally agreed
that some of the money held in dormant accounts would be used to fund
youth and community projects. You can confirm this in the website below.

http://news.bbc.co.uk/2/hi/business/4017381.stm

I am in a sincere desire of your humble assistance in this regard.
Now permit me to ask these few questions:-
Can I completely trust you?
(2) I am ready to offer you 25% of this (759 000.00 Pounds) I hope
it is acceptable by you?
Please consider this and get back to me as soon as possible through
my personal email address: tdavies01@live.com

Thank you so much.
Mr. Toby Davies.

HEADER DETAILS:

Return-Path: <mario@cardosoeconceicao.com>
X-YahooFilteredBulk: 81.193.115.129
Received-SPF: pass (domain of cardosoeconceicao.com designates 81.193.115.129 as permitted sender)
X-YMailISG: rjCBn3IWLDt9C0.z07ff50HlGys7P0FLTF_ZGWhKSLDGBR8P cjB9Z3XZIiZWXx80x_RxOg4eKIMgZTacNrIIQK4LFttPIAQ5HzvaUQT27u_2 QxLJ3ysBHWvDBiDshXYjJulF19VKWrEjYMDnQtp6mcGuxqzaVz0HOV1x5A7q aFFhgAaLevStXgI75kFzYyPj51rmKp6X7RpOOMDX5xmBD7dzDjULRUXGDKr7 .OtaDFI8.9r3x4vF6.iBnAmOWnfs.cJ.z90DUeW1SoFLM_FDDYwdKaNmZqpI b49qMsUGjG6dzumWHImnwknyuGyJvWqlDPDgeI4zdQ5Rh4pskj3DXl4d3gjs aQnZI9Gu_Pmavek1C9zd1BAnNh2affyaGIjKesByZHigYzvChKcj4FmZQpXX uM69rR0Uqs2Pd.AOS81axmd74quEF2LA8QpvX_mG41ksyTrDeR2c9zT0hcaR kmuR6E7bZndQVXD3NQMtDX7k0BUf2wvzJEHmfOgZrRXIpzH.RU2NkFmV4yuE Y.AfXU39qLK1XlxdfuMfDMR9hM.hBW_uNH0TFmjXShefRBCf8mzx48X.JnRp b940yXXJw3PCK71RVNp76ijbK1zV5F.RhKfKmv8GWWfxKAaG.Ow8iGBKhOqp Svitp.7TpL6TvKcghNAFE7A8Ik1O3fAjZ1ZX83O9nd5X7Boqr.mrlahfGwZ2 g.mMeZ8I_gLidUlVLSYIoySUrKyv4BkjgaVFdJzLa.S1EEp49fm6sruglMd4 qBxA.Zj.nB2XlQLwnMrsBxWDVqct8bbdltkmsHRU2zCtWtB2TF.a7c76e.fg Qea3fQejq.GPrM4bxCecTWmPvf9avrtFCERB0C.SRfrlIyZmAQw.5_QPOMCB 77NG3CkmjuuKeMxHqnHcNVX.tcwzaJ1M_2n6tddXs1_mQqyEoH_jGZTuriJT h5Cg0AUMtfnMnNLEsTgyM_8IFiqwvz5.qA4iYQ6a2CmwqEBTahQ5rKAQk70d Sf1DdAeV4RFGFx2p3B46iQ.OfBOB45XpjzY7jfLL3WSVZOFpbOmftOJ3z7MK Ti9RsfjT2sXLyo9CTKo9LJ.yLJvCXwODDbNlckPvhvl6jMkb0sFaUFAemp2N dN4QCf0YutUc.aD17vgCFJ56qbDDUd88i0RBacY_WzbU0_0tWOboOIy68T.B 2ThuUxpFI8CKNCJn4XLEih.dQiVvXaHHMnEQ5NZl0_uTNWBOLA9WPiMznGtX tJ3dlJTkUzzsm3bbFM8SYRSBUcuXNNX_Y.Xe4Lri6qinPVvxcaT1WtH_YkaG 1Y4E2Yx9s.xaOTuycIRCoDaUr_vcUBSDlJ9bN6vDo4R2mxW.5VlNm9JS9R.Y HKK6mkJ.cOvORM0L0tw16joFbLr_Ak5zdYgMG6xZ7AjvOYekpM8qAZwC2HBO 4NqyIhgC2wZA5LgERwd1M1NotmcgLZ7iJxLdGkXoLMdN4lWzm8qR9ZvRJOQy 04xm7pLS3wDFfGyrFeg6Bq4YV11RXbuAqv.2IlWVfrvgg12MdkFAI4MDY4w6 03VklxDifldE3f_mXfhCCix9rHhQc1fI5YGU2zCmSy_eWuVxUMeSs3T3KHA2 MYs7Yf2E.2r2bYK._fJz0BPPymJwr5YldTL3yNqFwp71E0Ok8y9Ioa3xCY15 94MoroVbNgKFbA–
X-Originating-IP: [81.193.115.129]
Authentication-Results: mta1298.mail.ac4.yahoo.com from=cardosoeconceicao.com; domainkeys=neutral (no sig); from=cardosoeconceicao.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.cardosoeconceicao.com) (81.193.115.129) by mta1298.mail.ac4.yahoo.com with SMTP; Wed, 16 Jan 2013 02:22:47 -0800
Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.cardosoeconceicao.com (Postfix) with ESMTP id C408A45F2E6; Tue, 15 Jan 2013 11:49:35 +0000 (WET)
X-Virus-Scanned: amavisd-new at cardosoeconceicao.com
Received: from mail.cardosoeconceicao.com ([127.0.0.1]) by localhost (mail.cardosoeconceicao.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hXwSNtGolDvE; Tue, 15 Jan 2013 11:49:32 +0000 (WET)
Received: from mail.cardosoeconceicao.com (mail.cardosoeconceicao.com [10.0.0.206]) by mail.cardosoeconceicao.com (Postfix) with ESMTP id 9E6C945F283; Tue, 15 Jan 2013 11:49:29 +0000 (WET)
Date: Tue, 15 Jan 2013 11:49:29 -0000 (WET)
From: TOBY DAVIES <mario@cardosoeconceicao.com>
Reply-To: “tdavies01@live.com” <tdavies01@live.com>
Subject: HELLO FRIEND
Message-ID: <f9fec169-aee7-4125-b99c-b9c7af282c5f@mail.cardosoeconceicao.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
X-Originating-IP: [41.138.188.58]

TOBY DAVIES mario@cardosoeconceicao.com <>  tdavies01@live.com 10.0.0.206

ORIGINATING_IP: 41.138.188.58 <> 81.193.115.129

 
1 Comment

Posted by on 01/19/2013 in Inheritance Scam

 

Tags: , , , , , , , , , , , , ,

One response to ““TOBY DAVIES”

  1. leonor arango - help-

    01/30/2013 at 16:34

    This is virus
    leonor

     

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: