RSS

Tag Archives: 2013

“Romanian tools”

NIGERIAN 419 SCAM

419-scam

NOTE: I can’t post the header information right this moment because for some reason it wont open up. This has happened before and it’s usually temporary.

SUBJECT: ALIBABA EMAILS/SMTPS/RDP/CPANEL/VPN/CCVS/SCAMPAGES sold here in ROMANIA SHOP ADMIN CONTACT PHONE : +40312263255

EMAIL: CALL ABDUL ON PHONE TO BOMB YOUR MAILS AND BUY SPAMMING TOOLS

I am a Nigerian BASE IN ROMANIA WHEN YOU CALL ME WE TALK MORE OR YOU CAN ADD ME ON YAHOO ID…
i prefare calling anyway
thanks

buytoolx@yahoo.com

MOBILE: +40312263255

FROM: Romanian tools adminsales@joyceyhu.com <> buytoolx@yahoo.com

Advertisements
 
Leave a comment

Posted by on 01/09/2013 in Other

 

Tags: , , , , , ,

“Sandra Omini”

ROMANCE SCAMMER – SENEGAL SWEETHEART SCAM

ATTENTION: Below I’ve posted two emails sent from Sandra Omini which were sent on Jan 7, 2013. I’ve posted both header details which will show you that this scammer sent both emails using different IP addresses. 

Also, click FIRST & SECOND EMAIL if you would like to read the prior emails sent to me by Love Sandra Omini

anti_scam

NOTE: This scammer also sent two (fake) photos but I because I don’t click attached links/files sent by scammers, I couldn’t post. The titles of both photos were “love.jpg” and “MYLOVE2222222222222” (mind you, I’ve only responded twice and it was NOT flirtatious yet I’m already being called ”my dearest” and ”my love” — one of the biggests signs of a romance scam is when the unknown online-user, pushes for a relationship too quickly!)

My Dearest,

Thanks, l consider it a privilege for you to give a prompt response to my mail, also l am responding with a little explanation of the things about me and what we need to do making the way for us to proceed, you will agree with me that since we do not know ourselves in person as we have not met before, therefore, we need to know each other first by exchange of photo identifications to help us know who we are dealing with.

l have here attached copies of my pictures for you and l hope you will also do the same in return. Also as you will know, this is the only money that l have left for my future living upon which l can better my life now and l do not want to make mistakes with it, please l will like you to send me your contact information’s such as…………

Your full name…………………………………………………….
Your home address………………………………………………
Occupation…………………………………………………………
Age……………………………………………………………………
Direct phone………………………………………………………. and Fax number) where l can reach you for further verbal instruction. upon receiving all these information’s, l will now send a letter of Authority to the bank instructing them to treat you as my foreign representative in whose account the money should be transferred there in your country on my behalf.

So that when l hear from you again with your information’s as l requested here and after making use of your information to send a letter of Authority to the bankers officials introducing you to them that you are my foreign representative to whose account they will have to transfer the money there in your country on my behalf, then after doing so, in my next email l will give you the bank contact and the contact officials in the bank so that you can contact them by email or through phone with your banking information, Your bank account number and where you want them to transfer the money on my behalf as my foreign representative. you have to know that l want this transfer to be completed soon so that l can get out of this place to come and meet you there in your country for my education and future living under your care for a better future of mine as I desires.

Secondly, ever since l came to this refugee camp, l have not been steady in school and right now, l will want you to help me locate a good university there in your country, where l can seek admission for the next academic year.

Am living in the refugee camp here in Dakar Senegal. Please write me soon. l really need your help and l am waiting to hear from you soon.

Thanks,
With Lots Love,

Return-Path: <lovesandrao@yahoo.com>
X-YahooFilteredBulk: 98.138.90.78
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: 1IjoQqoWLDsZWAjRySGjeqLNAAFyrdyevggSCp.7mzBLX5QO YvdxigPFD7YYIKV4TUJQrt1Zy6a1t5gbcVd56cBikBBcfn39wb6t4_nW3fel cPsehAp0KW43T3eaqw2y0puca5XaJKf9i9uulknAsjbCOLpg3SB1jxrVnMfH 3GhspK4e9m0As3b_plyA1y6kInYTAl9_DEPamK7.JjghGooInZLfzdv_huXM s0fKmjD3rJV0Y93nbR_JRsHffgZNMAZ2Z.gwLMZBYLjtZSsCGwHDwSabL92D BfYgmrOYG9fKe1j4sRohKoHt4snfumInvERDfdTqKXB2iAydL09rDmDh0Pxr AQKQMoENyu2veu1TWWdSA_vGC9u1K9QI3hdeWcXUMvjHf4LpAKsWD5nXbB8k .VGiREOry11FhFBBXAwu7OtMZbzEPjGrBjIcQWfP8eoYQ5Hm66Mu1CHKvBwl B8z8v4AHAkWKW9WmaccIhVEsmm7VO6ytzUYO.CPC2VCeZVmb1YvROcUoVi7V gEsekc3ZOSkqWKC1gkYaNVgb7aUe0j.OpwgIFfAxlT4KLZ3NmN_vMjqHHSMw acytLF1wcLDOwpU5W.YKuqVL_SbThGxb4jv7yFjGAK1NKCsuig1YLB0_HdqA yYrmlCX60dpKlCwKl81YrVI2pyV4r1b6r9Qi7lT3ezqVQRqRzqIAqbfOTPyt kS2j.NEFq8g7mUece52gTG31I47mVdSyUJA1_qpQ0SQIboumz3kAqiHqNYfx KCD_EYI6j3IZzEpHD2Wy9jtuwaApz.KqSCWqGqkv4qiMd2YdJ1mmgcDRLNQo cGu_6F8n64pTEVhQ2Chq83poIvUo3yMsynJSnElNBHVEHCrm1AVwvkNK937q 5woRtIo2HY5XipdhS3OOQXQ9i3lDa6oItPrg2Z8fgPeZeUgl4HndpjaGkcs5 jECsm0ZtBlY2sBzcTwjBJjSf4nexxusbPs5itfPElFIV.jvPTPBweW8sD45n _lmhm2_RX0Rujxj4gWG61UNMoIlnp7JxYR6fWD6B8IQRWQTo_m_JIm9b744c 6jJNi1eQx48wUSvhxsMUzcmHNIL1JTv9JOVF5cy0W.KPr55PXFe8PyfDyESq uoD2AGnWnUiaKZjAS1P6PBtMtgrpQG_6FD5xbyJDl2jNWh2zejdXK8UJmxYO VfWGaTYWsrLy785kHheMbQ4r2yYQd9.bTXMwlkpWVr8ifbS5XKTrVRI-
X-Originating-IP: [98.138.90.78]
Authentication-Results: mta1161.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ne1.yahoo.com) (98.138.90.78) by mta1161.mail.bf1.yahoo.com with SMTP; Mon, 07 Jan 2013 03:01:33 -0800
Received: from [98.138.226.180] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:31 -0000
Received: from [98.138.89.246] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:30 -0000
Received: from [127.0.0.1] by omp1060.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:30 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 261138.8003.bm@omp1060.mail.ne1.yahoo.com
Received: (qmail 44249 invoked by uid 60001); 7 Jan 2013 11:01:29 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357556489; bh=sF39V2YXIXyohJJ4DIMYvoz+D4RbkXVTwI5HmpPU1cs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=BE5wb2s2Zn6sVN2koaDY7vQPaPU+cGNZtRoBYcdGcxd2ntt4fr8RdVctniXPGcuYLEYRiZZLEGGwhr4CAXIf/hdH4UdsHgE7D9Lay3Ka7XG2hlyml8wqNPUawvPhnUSwvPjaO3SjgjXkO8NmGpj6Cz4dJTu6QBp5gBb9ZwkNwPY=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=hsTK/l7O/YSlNhftvE+SSOlqrt0LVLpN5zAsdRfnLiMAQ48fPrJLpW7WJTStezmAnOsdr2HoJLoK0PZvM5rFTSnT0H6fh/+0eKgDW3QPhER6RQpHN61uAHHfXzeIGUD7hD/N3kS3DySGqwdNdjsXwMSCAMNySHpY7o4bo8NUNC0=;
X-YMail-OSG: VC8V8esVM1nIItl3zaBA6uZ_oE9xCFH9dYQCrDjRczq9s1Z IQLjn4D_gA6rF3196eBlK2sBorj81zxBMFAl9YzUQzmNsy92BZdx2U_svg63 9L9yw3WOf8etb9j91mnQ0c_zZFZeK5ar3ep_T.ASJ1irXF.UL.MVz.vckzUX bDSb6fj8czWpWb_9CvrBHLwTLORIYETSce3fvFOluoKGVTj8eGmxvc06qMaa 7upAvgj7EpqnGWg6RC42V5zrgqQvCoPlV3BnR3tWDUuNjK_8E5_t2UUw7TwY gJXec3YUDPQnqY6pMeGSBh5Bt7g7YSAY5Bsz3ZxtRBtZjUcuuKfUuGukY9WW UubW.qnODx492OgVPL7Td9SSIPKMKu9c.6Mvd7vbw4Gw.7RWglXPPxuxw5fl lxvKVKl8r6Fjg7W0zhBqnZoQV9R00NA161CHJzRPZRzJ3_eu8hX_eg.BzVZo ogZDhXS4KpVpTByx0Z5b6.hnk6Ace5evPOPvhMHsSmVYtMYmwlDZKUgZHMFQ qGldiUJ1bGHNhiye1I5e9kRPSlkSYn0rSjWUzyDRD5Ar_IWRv.1yCdwxYNWG GbiagnNkzl8P0mQwdSYgXlpnifTQFV8OEcITcag–
Received: from [41.82.130.87] by web125004.mail.ne1.yahoo.com via HTTP; Mon, 07 Jan 2013 03:01:29 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357556489.42339.YahooMailClassic@web125004.mail.ne1.yahoo.com>
Date: Mon, 7 Jan 2013 03:01:29 -0800 (PST)
From: Love Sandra Omini <lovesandrao@yahoo.com>
Subject: Thanks for your response

FROM: Love Sandra Omini lovesandrao@yahoo.com RETURN-ADDRESS: lovesandrao@yahoo.com

RECEIVED-IP: 41.82.130.87 ORIGINATING/FILTER-BULK: 98.138.90.78

________________________________________________________

ANOTHER EMAIL WHICH WAS SENT RIGHT AFTER THE EMAIL ABOVE WAS SENT.

My Dearest,

For us to proceed for the transaction as you have agreed to help me transfer the fund, you should send me your contact information’s such as…..
1: Your full name……………………………………………….
2: Your home address……………………………………………
2: Occupation…………………………………………………..
3: Age……………………………………………………………..
4: Direct phone………………………………………………… and Fax number) where l can reach you for further verbal instruction. upon receiving all these information’s, l will now send a letter of Authority to the bank instructing them to treat you as my foreign representative in whose account the money should be transferred there in your country on my behalf.

My Dearest,i contacted you to help me transfer the fund,so that i can come over to your country to further my education and to secure a resident permit in your country because,since the death of my parents i have been residing in the refugee camp here in Dakar Senegal,and it is Rev.Father. Simon Dickson the priest in charge of this home who helps me out with his computer to communicate you on this issue here is also his number, +221765359970, please,when you call him just tell him your name and ask him to call me out from the hostel to speak with you.

Another important thing i want you to know is this, please try to keep this issue as a secret because, i have not told this to any other body if not you and that is because of the love and trust i have deposed on you. Please don’t be offended if what am going to say now will offend you but that is because of my present condition here, so i will appreciate it the most if you can at least send me some money to be eating here till we finalize this transfer issue and be together because,the refugee camp authorities provide food for us only once in a day. I shall wait for your lovely reply, remember to keep this issue of my inheritance transfer as a top secret between the two of us because, i have never told any body about this if not you.

With Love Always,
Sandra.

NOTE: THIS EMAIL ALSO HAD A SKYPE LINK (NO URL) BUT THE WORDS ” Cliquer pour passer un appel A prix avantageux avec skype ” CAME UP WHEN I PUT MY HOUSE OVER THE LINK.

HEADER INFORMATION:

Return-Path: <lovesandrao@yahoo.com>
X-YahooFilteredBulk: 98.138.91.63
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: ZL4aQh8WLDvzm.nEQhp7EAokzebktzXovrG_M0rJtqQ_MHXx ZZ6_Eytmcy_9YsMPgsg.esDg4dmEz2fgGCdjhYe6LkDQFGumUzTLsZZP18V5 mQtKHwtQ9g8w7Q0MLYu82lhxRym21foSmKeGGRwzdSc5Mz8duZ1kML4oI8S_ y_YHT3KIW4DCOeApM4Gf.cBMD08lSQaBtkT0SGt.5F2_CzxW3RjtO0_xCOmV azRU.pB7PS1xKi9ER5Czb_XwCliwFh99yJAwAaiBddLS_.Yw6b67EpzoH7pv 2IXEyKwRhcZLh1bxEFx3qBs0zn90H3A76n.ESKkHCL9Kgzd3lzMKoOnhsTVg xyFX5VuLiCZTNGJUDzlatFoBUacip1PrzwUGSUapmtg5flNC4xxf4F1KT6QB HdKm8kdOeFr026UnQppsD_2EJk_nxDHDEeAvh_zX4a3fYbWUWeLQXfInv_8b SpKag37UitZFwOC3JV5XRB.ijJq93QXivf167FDxYsMHmBQ4t2B4yXcmA.FS THtSMluTFoLuZ9UEkucu7iD4p_hu0AijhjGtEr7WYybhnm57wRTca1O4nk3Y 6IPY2WEHtKL0.UVZaZpPtVs38Bnwl_jxPySE5Br_fFmO05D8Vxp8ANdq1n.G TnB_XrdwqEq23V4zLs2gh0lEeuLZC8tyh1EZ6jcoDqUFWyv8aZJcc0jv_ev9 LCZ.Xf3En_jCXkf7QdM8v591WTpjBbHmKgiUHq3kQB6IWEuyZPEJf9q6e1fh 3kT_vKtrS6moeRfhBhXdkHs4EBUOpYPaxKFKjrDWJTfB8XKplnn30LHTIdEe qEiaFd4jMYIQK0hMYcpwWuh667NJl6.DM_lrJFZoonWjmvs0TjncRZiiS4Ca y_NTB07_.m4W6DMTplYvI0_SOSlNwAnvNubEB1AhCTWBDGoQt1Cf_GZIhUdo A2xTgW6sSEw1QV1PEHOgcQjLKFqTbIeyrGg1.hazhbl.nPaUSfH1x5NJY1YQ XeqHk0m1hNZKvNBQQc1rRoMqGc_FziHuvc2kS04PpVs9evInRQV2TVG7A4Lz m.bVqmPiZi1YUSpHdOpHD3xaan8iMLrhib1JW5YswSqj1vOa8PfCEnQCFv_A bBolpnXG4TQQPmOnqncEbxeWOzD_R.MVW6rGKIgI35bDCyxDQSa.8RGL7wIt ts6t3mQRp1bMys_I20hWL8n.RPcHfuaYPtxV77F9vj0EknRqix6K3JEk.c5n m8JxCDxOWq6uRs422OUAHvL5zarV772WRxxGm5jnH1DaCvG_hCOJ8IEex6It PLDRIG_6uq1NkQ3gcp4A1gqznxVx6nKZ_ap.967kghkXvWDp_V1Ci..hUia4 DnavYvqHhyPQk.VJ7ow.YOLoLAlCjg8GnvL2PS6kTQot_4j1tIZNA6n0P5hx ZW2O_2zgNQrwZBn3_R.5Z8x2Yg7etfz2WDvAUQ3QhlXUnoZL9OYN
X-Originating-IP: [98.138.91.63]
Authentication-Results: mta1333.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm27-vm0.bullet.mail.ne1.yahoo.com) (98.138.91.63) by mta1333.mail.gq1.yahoo.com with SMTP; Mon, 07 Jan 2013 03:02:22 -0800
Received: from [98.138.90.48] by nm27.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
Received: from [98.138.89.234] by tm1.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
Received: from [127.0.0.1] by omp1049.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 98866.57766.bm@omp1049.mail.ne1.yahoo.com
Received: (qmail 44614 invoked by uid 60001); 7 Jan 2013 11:02:21 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357556541; bh=QeXsO4FaKKKdpb0dARzj48oGSADrn8ZArz+vzImbRDM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=fFL0mRPgGFeN52Qakcp0Wiji1nT84TV6YSZKuZd80VTxoUEFO4uX6Rn8I2XaH5fAT/cR1KAfmrMMF/jGwjj0w14I1pbemTePHvul60hkD9LwwXQt0vVfVCtTwl+cwQrze7s5mRdUFbLbuFZ2CLVoZHflkQSirzGBKL/lBmxGaH8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=g7Rv4EXWIUcxHv4INWOdU/mi/dl8kalG4XpdyNqNjU2kH1p3oiqUZT3IhR+taly7sPs1wYrH2OM58q8sKsfAV8YxfwYfcUJUNgWrLI2tHXTZ7eOYADitfQ9c1J8g6S5zCiQRuiY3OY0G7P3w4no5Uh2ZQS9ko47GoxguI3H18+M=;
X-YMail-OSG: QqRpdA0VM1k39KFdomfmoYqlQQbkQz0Q4ODCQvXnrcT9L97 vNoygxjOwX8e7XH5f5y3kqlUxoeqzBEuboabbWbM7RlYYDjxx1zZ9xnKPFhi MRV5j7z9mUz19_cx73qYjZo.f3NyY2aovnPu.Wtp8ZENP3N_xz7uHyq6Z.5a XQ1LXF5tApybPpu4nauCG1z0vjiEhjq3Ji0zfzD8mqxOQT3QGxm2Dd0i4Nxg cYmyLtW60CafnXTbumqEaMhvM6ngL4Ypx9Wp_epAuO5Fkoft7j79dQp2RC79 JKU5XgUMfbr1yBpSQt0fNJzZIDAzFWSod2lDVm7Sh5Ee9HXF1IR1DyoFVcrC 5gmB2hWOGU4SHwNlwRtUTznR_k.8W6_Fe4QrV4OHspBpd77q776NDVGaeMQE AZ3P4j7AhZpouQWKUobU0ZAEAv9uxKqD0D31Pyeqy1srAcj.ydTrSpQVviWW 3Apn8DojsA5qQn.1gTap3TLmwo2R.brLkEJ3iBjLu3xzDAh_tMpFQFmRHm0M N.rfuEedd2jUx3DFOZuRfZVFsmWiA1R7VkYJJSzliyh5daimEJMnOnokTaJb 9O6X5CVFwUdlC1EirMp7X6DkqRmwrjeJOIyu1uXp.sceMZ03vGgE-
Received: from [41.82.130.87] by web125004.mail.ne1.yahoo.com via HTTP; Mon, 07 Jan 2013 03:02:20 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357556540.41156.YahooMailClassic@web125004.mail.ne1.yahoo.com>
Date: Mon, 7 Jan 2013 03:02:20 -0800 (PST)
From: Love Sandra Omini <lovesandrao@yahoo.com>
Subject: GET BACK TO ME WITH YOUR DETAILS AS I REQUIRED HERE

RECEIVED-IP: 41.82.130.87 ORIGINATING: 98.138.91.63

 
1 Comment

Posted by on 01/08/2013 in Romance Scam

 

Tags: , , , , , , , , , , , , , , , , ,

“western union”

LOTTERY SCAM – NIGERIAN 419 SCAMMER

Western Union Scammer (still at it)

 

You have been granted $750,000.00 From WESTERN UNION MONEY TRANSFER for claim Send Full Name,Mobile Number,Age,Sex,Country,Occupation to enable us proceed payment.

Operation manager:
Davis Wellington.
E-mail:runiontransfer01@live.com

HEADER:

Return-Path: <roelofaltena@online.nl>
Received-SPF: none (domain of online.nl does not designate permitted sender hosts) V0VTVEVSTiBVTklPTiBNT05FWSBUUkFOU0ZFUiBmb3IgY2xhaW0gU2VuZCBG dWxsIE5hbWUsTW9iaWxlIE51bWJlcixBZ2UsU2V4LENvdW50cnksT2NjdXBh dGlvbiB0byBlbmFibGUgdXMgcHJvY2VlZCBwYXltZW50LiBPcGVyYXRpb24g bWFuYWdlcjogRGF2aXMgV2VsbGluZ3Rvbi4gRS1tYWlsOnJ1bmlvbnRyYW5z ZmVyMDFAbGl2ZS5jb20gATABAQEB
X-YMailISG: NZKX4.QWLDs_6MwFucc.X4aiJCfqHA3HTeolMrtRREp3i.47 _8k.HQEj19eE085.bc9u17xWUtjCrcMjVP1zW61o5cgR95hKUAxvpnYgt03W TdqGnHutJNFFrwhVy7MEgn_YNkRJeYI37efHlMvTSsdXEw5c42s0Ml.tbHPj 6DzOSW5o7Rcy_tOGZUYhF2uGmOdQMpDuEhIGYs1R59wmqzRiWqg2XHxExrY7 V1wWHg_8Y2PN3zz7by7w9YRmPCRcqJkT.Fe9_bMaMpRriCpO0zMX1G79VTsn 1OI9hwexfQpHjIe4vJzPEi2XphCFD1GTSEMMFBrsB.77002AEPUvkUlFP0vU hpMKPRox5CUzlxPTu2JwKOh6cp7uopa9K8z27PB9SbCzaX2uO9DLqlT6yQxU vndwAx2H127IsMuK8wUc71r3MEaWb.lU.T5vtM0y9iLVB6gi692YsS0WhDn6 vE45wzyFaLwF375aJIMSMkqI4C4tBbClEDwuhEilM546ZP_6vVYc1X_b0bML 8l5wCwDNV5m9IH6fsppPzFgIdb1rdG5.VeViiyK8dxj4e_pQZdMaMLYmDVOI pM2J.0QJtoG6CJJOEOUB1GpKa490vgftAWuh8TYbF_Q2Jus1bTOBBwJTk88o _xStzymTA4SYag68vlgwl_BrzFggDjsIN3phcucyl04H75vs7KYRZ5LpNpYh Ye0WSHrNrVRo.VaHAXxF1CrPL21Uh9HH3RiUO47qfXsoJZMdTqjcGHTo.wyG pbeAiUBogOcQ4bLWRbhS97w_8AhagoFjVN3sPiXAxvO1bcG7W8i3v5ssOJ6H JXYSMgao5UfDiY9K9OocWYfa6MSr2S3PWmc6YrS0dudzF7emQz4F6X0n.jgj bPVhdulvBjlJbp57Wlw.RZ0wrmB3l6rdpPSHWIUhdFveUXredBxBNDZSNC95 bGKO4G1tyom9INh6bWqK1m_UxFzrWilUmqtERRorwukjNLe_hd5GcNRfWDZp 5qjrZG24wSSwBhQAPNd5.kTX46sBHTVDaFvRrD5sHR_m6Dxj.4I83._D__KE X0MlNBIP5wGrvBdlmC4K_zw8lsfCaQLclsUB_DxtIbp7q211XnWJScAcXtek MMvG0mBk3bGK6scSuQGB3kuMePrNabeMHz2qYw5DX5RUJI0trceCx3_gw5a2 7XEaLU2ke5_WLVAuLz.bGPaW33.Ldz83ndWy6j4yEueBgAxDotp62eeRot6R ohdwnUCgTA–
X-Originating-IP: [194.134.41.34]
Authentication-Results: mta1256.mail.sk1.yahoo.com from=online.nl; domainkeys=neutral (no sig); from=online.nl; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp04.online.nl) (194.134.41.34) by mta1256.mail.sk1.yahoo.com with SMTP; Mon, 07 Jan 2013 16:27:08 -0800
Received: from smtp04.online.nl (localhost [127.0.0.1]) by smtp04.online.nl (Postfix) with ESMTP id C78FCE144; Mon, 7 Jan 2013 13:41:15 +0100 (CET)
Received: from mailstore16.back.prod.mail.online.nl (mailstore16.back.prod.mail.online.nl [10.160.210.116]) by smtp04.online.nl (Postfix) with ESMTP; Mon, 7 Jan 2013 13:41:15 +0100 (CET)
Date: Mon, 7 Jan 2013 13:41:15 +0100 (CET)
From: western union <roelofaltena@online.nl>
Message-ID: <1064296736.1250643.1357562475775.JavaMail.root@mailstore16>
Subject: congratulation… call +447024096013
X-Originating-IP: [41.138.185.176]

SCAMMER INFO: David Wellington A.K.A western union EMAIL-ADDRESSES: roelofaltena@online.nl — runiontransfer01@live.com
ORIGINATING IP: 41.138.185.176 RECEIVED-IP: 10.160.210.116 X-ORIGINATING-IP: 194.134.41.34
+447024096013 — Phone number currently being used by the above (Nigerian) scammer to send out 419 spam. The scammer is always using the phone number +447024051243 and the email-address multipurpose_limited@yahoo.com

Here is job scam being sent by the same scammer under the name “Thomas” -:

We offer sales of: Auto and truck battery, Drained(As per ISRI Code\”RAINS\”)Not black batteries with ebonite material, Lead/acid Battery Scrap aluminum scrap,copper scrap,phone and electronic scrap,iron scrap, metals scra,waste plastic,Vessel Scrap, Pig Iron, and o,ther\’s.

We currently have 250,000 MT of various scrap\’s at our yard,and buyer\’s are needed globally.

For more informaion contact…
Contact: +447024051243 OR +447024096013
Email:multipurpose_limited@yahoo.com

Regards
Thomas

 
1 Comment

Posted by on 01/08/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , ,

“Ali Musa”

FRAUD – INHERITANCE SCAM – NIGERIAN 419 SCAMMER

Dear Friend,

Thanks for your mail, i am Mr Ali Musa from Burkina Faso. I assure you once again that you stand no risk in assisting in this project as we are going to follow all the official and legal procedures to get all approvals in your favor as the beneficiary. I am a professional Accountant and with my position, am the Chief Auditor in this bank, we will surely succeed in this project. I am married with 3 children

2 girls and a boy. I am working with AFRICAN DEVELOPMENT BANK (A.D.B) here in Burkina Faso where this money is. I have been following this file in the bank here and have seen that everything is perfect before contacting you for you assistance in the transfer of the fund.

The money has been in the account without any withdrawals and deposits. This made me to have special interest in the account. I followed up the account file only to discover that it is dormant and in the course of my investigation about the account, i found out that the owner of the account died with his wife and their only daughter in a plane crash.

Following the discovery of this account and the bank’s recommendation that after this fiscal year that the fund will be transferred to the apex bank as unclaimed bill, this warranted my search for an honest person who will apply for the release of the

fund and claim it so that we share it together in the ratio of 60:30, that is, 60% for me and 30% for your assistance while 10% will be used to settled any form expenditure inured in this transaction. I have worked here in the bank for a period of time now without

achieving anything that is why I want to utilize this opportunity.
I know very well that you might be weary of the fact that you are not in any way related to the deceased man but according to the laws of inheritance in Burkina Faso one must not be a relative to
the deceased in order to be able to apply for inheritance, having taken note of this laws I have decided to present you to my bank as a business associate and next of kin to the deceased, of which you know that one’s business associate can come from any part of the world. So it doesn’t matter where you are from, this will certainly rule out all your fears.

However, this transaction will be strictly based on the following terms and conditions as stated below:
(a) My conviction of your transparent honesty and diligence.
(b) That you would treat this transaction with utmost secrecy and confidentiality that it deserves.

(c) That you will not ask for more percentage or try to sit on the funds once it is under your custody, or fix up any form of blackmail to take the money alone.
(d) That upon receipt of the funds you will release the funds as instructed by me after you have removed your share from the total amount before my arrival in your country as it might take me little time to retire and get my travel documents ready before arriving in your country.

This transaction is 100% legal and risk free and we hope to conclude it deal within 7-14 working days if you accord me your unalloyed support and co-operation. I give you my word that you are completely safe in doing business with me.

Note, i will send the text of application form that you will complete and forward to the bank as soon as i receive your response of full cooperation with me in this transaction. Please respond and

assure me of your credibility and capability of handling this project with me. Call me upon the receipt of this mail for confirmation. Call me +226 78 33 47 68.
Regards,
Mr Ali Musa

HEADER:

Return-Path: <ali.musa54@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts) IE1yIEFsaSBNdXNhIGZyb20gQnVya2luYSBGYXNvLiBJIGFzc3VyZSB5b3Ug b25jZSBhZ2FpbiB0aGF0IHlvdSBzdGFuZCBubyByaXNrIGluIGFzc2lzdGlu ZyBpbiB0aGlzIHByb2plY3QgYXMgd2UgYXJlIGdvaW5nIHRvIGZvbGxvdyBh bGwgdGhlIG9mZmljaWFsIGFuZCBsZWdhbCBwcm9jZWR1cmVzIHRvIGdldCBh bGwgYXBwcm92YWxzIGluIHlvdXIgZmF2b3IgYXMgdGhlIGJlbgEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: RvAW0Z0WLDsI_APwhjzB7d1z1SWpv1xLl7K09Ih5k34IRwa9 qYNlCBe3bhRIU7II1uXFUXHaJme8oMdqqlX1PZDOEAWqApc0HLVgncW6bjw5 bZDkWqbMPRC0MkVaO7QN3bzDbZnxZ.ww_ZK4Cw0y307rjMLAtgEFZ260ED.b 9q6qyTGg2KPZG_VA4e2PP4KgcvWmhmIsjUPTUQTbrY0pwJnriBUc77rC8oYl ISr1IrqM1bqnh92hgGZuyOefWKxUAWxJEKY8q9J7k4bIu5lqAiUjS1f9BcM8 XwhSucRLHvYv98IsXyx44Aynt1MNiKfvt5xvjxXoUwW28yoW_rKs7E7B9Kg7 SKgUdVl766mVkvgT.mUnwqddtO_X8NkeIsNihGKY8g5R2IyQ7FExCraZQZ5X woaPdxLH0JDN5yWkDhNVZMq3zwueEAK28zwwSoK6bL4kvKpmuEp0502rFqUR dwdt1HUek2_F_Wr9B0nGZtVaG7Hju3M1iMT5YMvBC0bCVybhtklS8iHgfF4F DUhXib3bl0ly.ICJkBPqcXwoEM6_wk18iSaV2mzeFg6gk7WBIrhzlnBTuQCz g6CNN1uzti0uridxWJOLwDDi.2VtRz_yglYOD1oePYQUaYroUbfSsTNKxR6Y tKiv_z1Uu_PgxOI7rhhZNIIuajteBbdYMmsKWDLhlqVSuzBNpA68.NfK6j.2 kP5pAKC7eOqhMcsOmumZax8rOVSqUGAUjqzGUfAZs55E30swDvKTvd8GNHZc nUlZ_UrVcvCyZa08wGwseJIxrxumbJKB07ekmJs0a4fIBxTY.B4FSGrS2Tw9 ateRQ3qATFr.Gz6LcI2tm5mit.M5thcKko9G5LeNb6xEjuzIqxq7YQA1KBJI jNg.S1VIj2kycUqfPObLOQyPdif83y1FPp2_OcZtqeIVlrvmf543Kt.7jR9n .qsuvwXgVE6kJ645VeeAZKHMh_xUURW3GvFiISb7tfv6cqnyBRjwjtETmt2A e1kUYm6pmoTEuNUCy3bLLrnPNJx8ChGpAHhDQWIyGdF3g92gKCxgfvKBQIlC GFGksbObE7cLSMHXo8aF9LmjLp70VZXbapvv8xTQYCBqGb.PRQ4Ekn..UEk3 UYXmRIhROM__tEY2LWfk1P7Cc7LSaUNXjaJRkTheyuIoB9c4m2ecvs13q3w6 HjxcaYKDHCvQChbJvuS2t0lsg1HwWgu1btSWieHg66IrjSSBPFL5aeho9qc6 9eca9j6dutx0cKFfte04..iZgWlGARrAEYsoN0suwJWq_lXJBqbu3i48tBLt IKz7_zyEImnWh1tdxV_xRu3RMB1_U8r1oMgB.9RcAFE-
X-Originating-IP: [98.139.212.182]
Authentication-Results: mta1464.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm23.bullet.mail.bf1.yahoo.com) (98.139.212.182) by mta1464.mail.mud.yahoo.com with SMTP; Mon, 07 Jan 2013 01:10:17 -0800
Received: from [98.139.212.145] by nm23.bullet.mail.bf1.yahoo.com with NNFMP; 07 Jan 2013 09:10:12 -0000
Received: from [98.139.212.245] by tm2.bullet.mail.bf1.yahoo.com with NNFMP; 07 Jan 2013 09:10:12 -0000
Received: from [127.0.0.1] by omp1054.mail.bf1.yahoo.com with NNFMP; 07 Jan 2013 09:10:12 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 807051.83119.bm@omp1054.mail.bf1.yahoo.com
Received: (qmail 32975 invoked by uid 60001); 7 Jan 2013 09:10:12 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357549812; bh=4yj2PwldENRKiW2TchR5BbJ0SMYMQH4LfvNRGk2aM+Y=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=lK50aCWWOwjISNoxyM99JOL6Jz2mizEGDBpnLSBbGmTW8fbulPLrCayVV5nH1TYizUXXJ5ytD+3T+FNumLTbxqBDLVlXYEwbLnKTVxaUeV1C4x3G/QRuYE/RJ5tWqJKT9F6iuaovxipZE9IC0r3Bp+tE/a4nnZoshAIgM7upVHI=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=2+4TCljhPd7arMtLnP5rlNG4s2Hv0ph9NG6sYfgA471K9b+wSrvimUSMjnZYHORA1/4Z9zqTF6IVhfg7SahSgYoSyFmFPHPAUPI4RyYiGEK+Mqu0AoC6BeHU6nzhenDnagKKs/MCwzK1XNX7mt9zgVuAwTFNzF9jVRdbpW2smGQ=;
X-YMail-OSG: Vlw4mwkVM1mqoYI_JdQbmVh2H4gGDyWoB_fZCixovxobtI_ M.0iT0Q..Ece_gHM9G1MgeRPOBPYzEbtzzb3zn7Nlr1BbLFt6RzAK0vk4F3I glwBWE9QwLEKsSwxZitH0_8WQGVmM31TN3Y_PGzR0PYUPVQh3eIvvMxWkCZA KGzJySFfpS_wOFpl1bcab0bEyLWKyLFbqH3R8yKtCIsSR6O2PE1ABXewwdrH GSsnVkAtMs1AmB1kK2wrGm6r4J5CZRQEtul2DS4CFa3MiFmySs4q.mWVJRXP QbfTq8m1XIlcAOf_9Jexs2pzxsyHZuFoMvxV5qUaQ7HSmC.SCBdyFcFjP66n PPD7mHX_UkU_qsQnA8y4Fq4bD25BWUYTr23itS.m3PuO32J_0C6KKXzqlo14 3p0BM_ZuonQf9yAVE6fJ_9JauVbaPp0nkRSJOnhKfE4OS7mht3yAzXrkVolG xZWlzU0Z2Ey1Ez9kUg0RKK_KE37rmtAo9hfTlhqDw
Received: from [41.203.224.83] by web164902.mail.bf1.yahoo.com via HTTP; Mon, 07 Jan 2013 01:10:12 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357549812.31914.YahooMailClassic@web164902.mail.bf1.yahoo.com>
Date: Mon, 7 Jan 2013 01:10:12 -0800 (PST)
From: Ali Musa <ali.musa54@yahoo.com>
Subject: Dear More details about the transaction // Reply urgently

FROM: Ali Musa ali.musa54@yahoo.com RETURN-ADDRESS: ali.musa54@yahoo.com

RECEIVED-IP: 41.203.224.83 ORIGINATING/FILTER-BULK: 98.139.212.182

 
Leave a comment

Posted by on 01/08/2013 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , ,

“Cecile GOMEZ”

INHERITANCE (CHARITY) SCAM – NIGERIAN (419) SCAMMER

NOTE: This scammer sent two (different) emails within minutes of each other. Both emails look similar but were a little different due to a few things, including, an image yahoo blocked was posted by the scammer in the first email but the scammer didn’t post any images in the second email. Also, both emails have different originating IP’s but the same received IP (41.216.50.35) which is a IP located in Africa — check both headers below for additional information.


EMAIL NUMBER ONE:

Hello I will contact you by the will of God as it is thanks to him that my choice was focused on you. And God’s choice is always the best. I GOMEZ Cecile French nationality but for health reasons I am currently in a hospital in London. Unfortunately I do not have a legal heir who can enjoy my fortune. That is why I have contacted you to inherit my property to carry out humanitarian projects especially good care of orphans. Since my days are numbered made my health deteriorated so I do not want to die and leave this large sum to the bank or there are people who are in need. So I would go through your channel to do good to these poor children. If you agree to my offer of donation.
contact email: cecilegomez268@yahoo.fr
God bless you

HEADER NUMBER ONE:

Return-Path: <eliana.cortassa@alice.it>
X-YahooFilteredBulk: 82.57.200.119
Received-SPF: none (domain of alice.it does not designate permitted sender hosts)
X-YMailISG: miS4fJcWLDt_DZy4IOQyQdmRBKBlc_v9.x98VBEgMEZSH3_E m3ERR7Jsuw4ljWQxBeFsN1MvBvut8DSBNizvqfuv97OSpg_OuM3jumW..O_n WRzxsfHFMq2JWTqpWLLnNJvIjFrBPAhXLJWudKHF9ZY_YnWzNI0dewh27MIQ ZwOPK_c7k1O3nFHJRDu5_aE0r5hod.qemWnJpiMa34JPcxA6Vt_2xUghJy4j 7UAFfeP.cqsajxCSGUfjAkEyVHu5CulNGe9aMt09ZwixnmEgx4WZPShrlEEb mC285to2_WG4SX22B9XOAYIAj138O_KzoMQMs6xzbEvMJIPrfCHKnzKu_PU5 7vXb37RMzDnY6te3CmlRaIiEOf3tez9GFTG_IkICtAvNGz.MY2_pYxfAAewo ty61sP9d8682lMj3n9DNYqcp7553OSZthVyF4.zRqei.cOtN.ohOomrYsays Ptsy6XJ3WIJCSJinXdSBN6C2xiV90LC.NIjYDEPgsvGaEVI1jXxEMoZ9wJKx qvSEQxM5c05AblqDX0yODEWynxKLeWzCafueuOHhlijXAtthYi8zMVTX9dA2 EQwYZ8PQN4CBTTzyNNQQIYT4f5S4yoW4K5Bb0Ydgnluhan6Ofy9gmBG96i3X rQU_SNhuqJxVThyVHrXYJy_M249pU7AE9h9nkep6jTTsME_wbBkZ0WRiTPu2 DOTxgYUk8zvMho9CRbJO7qmzNAwLdKAfhtMJtCuLZic25oA65gCA24X8h3vA 0KtTY_XeBZ2szfxlVM1ksQtL5IbM1avb1opedENc3anX5PWctrlT34Fpwc6d rQoO_KU0lHr72ryaTcZqqsGm6wqFB_7g513.fOj6q9trXUjeJUoc9uQfvu6M wJ0vjELKMCo9ActP8uNGNS4ZaN0.oPZ_UaZITx3jTSM6F2bkw6hfyWuhrZ3n TcqGA30E5D4wmaq0cnLZg24eGyA5YJPs83edbmmtsAgJz5mSYqeduj9l5Acp jUZqXSTfm.ridkY5P_4VBZfyHp3ldBDKYEuEP116FHwJ5Bm72pxFS6o6IaN4 6bVrlxp5v0uoyTs4Oy4hmxM20UdAhiUhwJUPkgemzsKp6.jQ.NtiFQeU5pQI FXX65Sp_D74yYCs9nrk2zAmbV3oPjP5kpPZmVAtqOnXzmzLA3Ep8KxE0HPiJ EbS_JOWUST2emUIBQ9XD8lMRB0Bfw3nEnc6_Vuo.5XB9vVI9oV0DaTT6yQv9 Kq6fEwVEJzgW1IQnoC2EV6tqK_nKDq32We395JMnb8_ArPwqZt7QsfVhrVoA NpPO8kFoaHVbXWxhfIfXA2iKomNB7iVIayg_4A5s5CMDPwXKFs1kDrVSy7h. 5LE4TV67ePP6u8XKM5rECVktEX20rr6LhfGqngc.xqX7jjicOQXvbRv_ypFI AUXXzy7avEj0KMbkpF4PtSmsSSx5NgP2flQv.C36WQRu_b3be3.lzwHm.hH4 J05aJO.gvxyw5RHFBbQUuia9Nl.3OvJUwRpISwCp8nKleXEbDuWyxxHcytn5 GPuJ3M28n5I3p4KS_jKUYIJe6ySv2GLU883WbZCF29sSgg_meqgesybYsdmF 47gTZuj7d956x5VsGMLSNgRpp3ZYrxddplZyr2cZ80Gfjq48a43v1JP4MkaH PvuWXDVFzrqCIRX9HrRhhjtTRJZkm36wWw4hg5CV
X-Originating-IP: [82.57.200.119]
Authentication-Results: mta1284.mail.ac4.yahoo.com from=alice.it; domainkeys=neutral (no sig); from=alice.it; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp303.alice.it) (82.57.200.119) by mta1284.mail.ac4.yahoo.com with SMTP; Sat, 05 Jan 2013 07:04:08 -0800
Received: from feu24-alice (82.57.204.79) by smtp303.alice.it (8.6.058.01) id 509146560258A44A; Sat, 5 Jan 2013 15:57:19 +0100
Received: from (41.216.50.35) by alicemail.rossoalice.alice.it; Sat, 5 Jan 2013 15:57:19 +0100
Message-ID: <13c0b374efb.eliana.cortassa@alice.it>
Date: Sat, 5 Jan 2013 15:57:19 +0100 (CET)
From: Cecile GOMEZ <eliana.cortassa@alice.it>
Reply-To: cecilegomez268@yahoo.fr
Subject: WELL LOVE

FROM: Cecile GOMEZ eliana.cortassa@alice.it RETURN-ADDRESS: eliana.cortassa@alice.it REPLY-ADDRESS: cecilegomez268@yahoo.fr ORIGINATING-IP: 82.57.200.119 RECEIVED-IP: 41.216.50.35

____________________________________________________________

EMAIL NUMBER TWO:

Hello

I will contact you by the will of God as it is thanks to him that my choice was focused on you. And God’s choice is always the best. I GOMEZ Cecile French nationality but for health reasons I am currently in a hospital in London. Unfortunately I do not have a legal heir who can enjoy my fortune. That is why I have contacted you to inherit my property to carry out humanitarian projects especially good care of orphans. Since my days are numbered made my health deteriorated so I do not want to die and leave this large sum to the bank or there are people who are in need. So I would go through your channel to do good to these poor children. If you agree to my offer of donation.
contact email: cecilegomez268@yahoo.fr
God bless you

HEADER NUMBER TWO:

Return-Path: <eliana.cortassa@alice.it>
X-YahooFilteredBulk: 82.57.200.117
Received-SPF: none (domain of alice.it does not designate permitted sender hosts)
X-YMailISG: 1h_MycoWLDu18D41tm1z87pwt6EAmInTosRnwnkOgCgsbvpa VRwaFLMirEpfzPBz_ip6KczwnNCehyEZ1I7mZvLYE_7aC4dLO2FLCCr6DHuK g7uE8U6QNcj2w6z1RsI0n7l0hojc7Cz7oYz7OA2ttZZnq5rT9xHIrpM9UNoj 45l0UY0A5PQSluqASzhCJ6fZG4ZZ8P27TH68KrkvSPowsaGHigeewkhtxSKa umFRhDIeItwXlAqJOs.wUtnl6IdQOkd_7HJ30cw8UBslofwd9zdyGxWw6Rw. MXMXWl9.P.hFZZSYCvp67eL47tVdhvfB5UHm7qrRbEIj.YAPUxJllAi8l83k gnntKEC2vXhOriT4QkNp67uQCCHi.6eyNVoqz9M5rsARf5ug76cZSrDMJbMw EQZjwVzF8Ctndw1vG3GVadE0OKzxX9RMvz_L_CfhrBsp8BeXgofylk1zN3yX Ynir7ymKdkAA2rViEDcQlzbuyCiLVGb27uGegHSNP0sAJhqdQ5WP3rCxVTsK eRgcOn65rQuK0zyYJCdRKXxf_Ca24VeVfPimka_LJPVBel_6.J4HvtCsf4SW wAqV4mW.Y_NQ.hDOUFlAHk5rcU4yP0tkJoCOUi907xT9dUVZtPvKBI1Moc4q rkkvAITlc7H4j9cIhAVZY0f6plADZVFMoePvlCLhpOXVhGWuH10IHqLnmtZq oVHaUXSCRJNlNXpS35Igt0koNC09Ekevqq4JkyqwzNAVQmGIti_VpvXysXO_ qCRSlNuyyN5zRSXy60g6EsgPFH5u2q607fi20lCYWPkNI2PnYuykOIvD_Prh Pqyx9qyZAWjXuJTpxQXSeJRPxLoncbR3XQEe6bg9N4J9.gzMiF.fTnkj4fV9 Yb0BUNEsiy4UBwIul4YRFbVVJXfGVbWDLWJo9LxCup3syPsvkszezPw3Okgb z3Wgc6k_6O97rbEZmQFTZn3EAfBNyjKLOx0xLIiXtBqf0LV6UjuTA9t9MA2J 57QYuPf34FpRIlgxtUXXSNhb7HfaCriMfK6wifmpTy9HIx2EGmt8TKNCNUa7 VuKiVOTuQVFJwW_gcS_8eUs67dIk6k.wJCoqSMNOVXF8SgWxAkS..MSqRy7H 5zsIHUmBhZdfApWjL3KzAh5BO3cY7EssLIOX8faU4siY1.tncj6DMEXwjsNy gsxs9Lr.742xpI8cgUbVxIjFmHf98XRmq7o3lzC_E6zfP14whtLkSoKuCZ9. 600fWlYgbEFFisyvrztOj.Zd0zuRENRcZSsVp_FjHztnh17MHfLmIxUxlAV6 PQpK0Qmh8_AfYzc7HkFq.eMLC56uYy1LTIspU2KNtSIm7lU7Qj3Oevuyj5WP .S1SUL7TY7p2.0S5.73U0DTR9IQhD0p8qFwkoH0j1FfUVmJYdNjWJ5EKrEv1 j2X8FnuubnOceBiE0uUgpIiDHheoGJVjf3Lin.RosnWlvuHc_aeUP3GrbS3n qzNGsyB_gCJYGdzx4QWnD2wSj9k5kvj2bpANngTBhoWzXF4bErlXXePCw8SW cgZUfAysDhjs8wHQBwzlZsnjqHymmPsmXaawTKe6VJQJJ6iJrhrsDKBaKc5U PWVTYYThYVSEjw–
X-Originating-IP: [82.57.200.117]
Authentication-Results: mta1273.mail.mud.yahoo.com from=alice.it; domainkeys=neutral (no sig); from=alice.it; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp301.alice.it) (82.57.200.117) by mta1273.mail.mud.yahoo.com with SMTP; Sat, 05 Jan 2013 06:59:23 -0800
Received: from feu24-alice (82.57.204.79) by smtp301.alice.it (8.6.058.01) id 50AA53640293495B; Sat, 5 Jan 2013 15:59:05 +0100
Received: from (41.216.50.35) by alicemail.rossoalice.alice.it; Sat, 5 Jan 2013 15:59:05 +0100
Message-ID: <13c0b38edae.eliana.cortassa@alice.it>
Date: Sat, 5 Jan 2013 15:59:05 +0100 (CET)
From: Cecile GOMEZ <eliana.cortassa@alice.it>
Reply-To: cecilegomez268@yahoo.fr
Subject: WELL LOVE

ORIGINATING/FILTER-BULK: 82.57.200.117 RECEIVED-IP: 41.216.50.35

FYI, the return address used by this scammer is Eliana Cortassa which leads me to believe that the name is also one of the fake names being used in an attempt to scam people. Either that or ”Eliana” is the scammers fake banker or lawyer.

 

Tags: , , , , , , , , , , , , , ,

“andy nelson”

BUSINESS SCAM – ONLINE FRAUD

NOTE: Two attached files were also sent along with this email. I didn’t click any of them but the title of the files were “Securedov” & “Download.”

If you no longer wish to receive our emails, reply with “remove”.

Bullseye Local Marketing
The #1 reason businesses fail is because they spend too much time targeting a market that does not want what that business sells.

If you need to market to a targeted audience, we have you covered.
We market by zip-code radius, city, state, geographical area, or country.
Any low-priced package will come with tracking sheets and info on each recipient
your messages are sent to.

Ask us for a FREE test run to see how effective our method is!
(Note: Free test runs are for new customers only)

NOTE: There was an image at the bottom of the email and the url showed the website – localzipcodemarketing.info – I googled the website and spam warning posted by other users popped up.

HEADER:

Return-Path: <jameshull800@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts) ZSB0aGV5IHNwZW5kIHRvbyBtdWNoIHRpbWUgdGFyZ2V0aW5nIGEgbWFya2V0 IHRoYXQgZG9lcyBub3Qgd2FudCB3aGF0IHRoYXQgYnVzaW5lc3Mgc2VsbHMu IEZSRUUgATABAQEBA3RleHQvcGxhaW4DAzACA211bHRpcGFydC9yZWxhdGVk AwM1MwIDdGV4dC9odG1sAwMxMgJzZWN1cmVkb3dubG9hZC5qcGcDaW1hZ2Uv anBlZwMDMzICZG93bmxvYWQuanBnA2ltYWdlL2pwZWcDAzk-
X-YMailISG: mhKe1mQWLDua2Db6ZLz6_cJD2U2KiDVmDCWU_djNHodSjnku N2JqZNkyXjg2_L8ke48c1os0CpuSvlS9XzmhQWxCr7U3WfMvHTsJYES5zS98 50pzmMIJZC.TkyI9N.Vn5CnPtppHvouA58T8xoKAy52d8AHWsJaX6rUri1_w dzgJHIA8.CZEpkZusmOZ3L1DcXotj_CJ10RGWMivMx_NIwx7.banq7FaCBru tqjX5Gs_72H_73_bhmCABlejzaGpQ_pbXMBOEX0KW3BCy1FJnqMDIf7PmYR9 z5hlDLErp0hM8QYoj0Lq3ySojkWqIZN717rstUACXR.fHKcFIPpL0biiyR1n qqbC80NCt6e.OYEpJRNMP1.9BxFMW8IwBuk1AzXp0B1k5i8pG5js6ihXi0Nt VQossScg9yapiz2GxSLuuiC9saNYkSZC6UQYi2X2_Xfrxxt4jMcC2ndec7xc HMRl7TAQkwapW9bhYuWij_jL7W89CWaxCBhmIiR2P2XYLeu_ACdFue_82mwO AAN1a7l4C.DbQ4QJ9MarFh1aNNTMLRQde1G_e6srMIOWVKrft3tSrCzi71L5 9.SLvIvKIUaEL3__yafYnuamV48D8iFNCGTJSXcjoEC4HpYnNsBN5n5LVirc s33zG.JUqF6x1e.hswpcDfjxpzT7fKkpX5lmDquzVzoDimTT5pccxaeQDs5i xYIoGFp4S449zJ.Irze5vYlopyBRCrLqREBufy0Pv_jijbubvm8iWNzCO8.2 VknlGZgjKQ6xrg9T_FbPWEpt0algcs462HzfAdFfOscbWa_RQ_j8EZgG7opM DQlH7.OaPL.p2CvAOcelfuFJItb8J82pp7AYsmPq1lPPw9Lo3xMy5Sl2pVEK _JF_Nky3XGVy.Ge3EMi11RnrxfAvZ459TkdpMbbspxbvUtDFkfSOwfD5Z6lv qn8GH.b03dS0Ml094YF5DL19hsMogWxHA.Y0Vyp2iHasYy6WaMXYyEqeiEQ5 SWAP0saHfq5kQLMuagle5IISYG8mw9b1W.qit0vmknWxmaw_6RG8R2wkrHET NjzcX23imBVS0zHcbuWkqeDnE0qTkyoPbRjY1bSsAJEg_W8VTWktrE4A0C01 wTiknq5J4VM_XuTmqEVfuI7T_Y7S_OBsSuXbQGRTwx1EyqC3vm7ZJBKgD50a IuWJVKpoFfucjIl3t9h59SPrWjFNAXEbrli_jXBG16LM3OXIQEIZL3curPGh P_U9KyAIRxtMvt.xFNBKZiRwWqpx7kL_pxwmohK_M6mn_waqRaVd_2gQN_fK GUf0Qtv1k6htdm7i2cNLWASpS7Q-
X-Originating-IP: [184.82.50.220]
Authentication-Results: mta1349.mail.mud.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO host.businesseasy.us) (184.82.50.220) by mta1349.mail.mud.yahoo.com with SMTP; Sun, 06 Jan 2013 17:06:37 -0800
Received: (qmail 1929 invoked by uid 0); 6 Jan 2013 23:17:14 -0000
Received: from c-68-81-163-130.hsd1.nj.comcast.net (HELO ports?ahead) (postmaster@businesseasy.us@68.81.163.130) by 184-82-50-220.static.hostnoc.net with ESMTPA; 6 Jan 2013 23:17:13 -0000
From: “andy nelson” <jameshull800@yahoo.com>
Subject: why businesses fail
Reply-To: “ajaesterling@ymail.com” <ajaesterling@ymail.com>
Return-Receipt-To: ajaesterling@ymail.com
Disposition-Notification-To: ajaesterling@ymail.com

FROM: andy nelson jameshull800@yahoo.com REPLY-ADDRESS: ajaesterling@ymail.com

ORIGINATING-IP: 184.82.50.220 RECEIVED-IP: 68.81.163.130

 
 

Tags: , , , , , ,

“Math James”

BUSINESS PARTNER SCAM – NIGERIAN 419 SCAMMER

scammer

Greetings to you my good friend,

I received your forwarded assurance mail,

how are you and your family?
With due respect, trust and humanity, I apologize for sending you this sensitive information via e-mail instead of a certified mail / post-mail, this is due to the urgency and importance of the information, please I Appeal to you to exercise a little patience and read through my letter I feel quite safe and comfortable dealing with you in this important business.

But you should know that if you must do it with me secret must be maintained, therefore seal everything until the fund is transferred in your account.
Honestly I will really like to have a good relationship with you I have special reason why I have decided to contact you though this medium internet has been greatly abused, I still choose to reach you through it because it still remains the fastest means and most secured medium of communication, however this correspondence is private and it should be treated as such, before I continue I wish to inform you that this letter is not a hoax mail and I urge you to treat it with the Seriousness it deserves.

I also guarantee you that this business is hitch free from all what you may think of, reference to your mail I want you to keep this transaction as top secret and confidential until this fund get into your account then I will come down to your country for the sharing.

So for urgent proceedings I just want to know if you are interested in this business, for me to stop looking for another person, and it will only take five to seven bank working days process to get this fund transfer out from this bank to your bank account.

This money belong to our foreign customer , he is a civil engineer in construction contract who died with his entire family wife and three children’s during the 2001 American attack, Since then the Bank have made several enquiries and waiting for the family or any extended relatives but all efforts was just in vain. After these several unsuccessful attempts fails, I have contacted you to assist in repatriating the money left behind by our client before they get confiscated or declared unserviceable account by the Bank.

These huge deposits were lodged, with the BIB Burkina Faso, where the Deceased had an account valued at about 12.5 million Dollars,

The Bank has issued a notice to provide the next of kin or have the account confiscated, but as I am about to retire from active Bank service in five mounts time to start my own private business that is why I am skeptical to reveal this particular secret to a stranger.

Please you must assure me that everything will be handled confidentially because we are not going to suffer again if all things work well as I planed, and for the benefit of our families,

Now I seek your consent to be present as a partner since you are a foreigner, you can provide account where this 12.5 million Dollars, can be paid to,All I require is your honest co-operation to enable us sail through this transaction.
I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law, you also need to assure me that you will never betray me when the fund finally arrive your bank account and that before the fund reach your bank account you will never inform any other person about it, because I don’t want my bank to know that I am given you information to get this fund out from this bank.

It must be secret till we get the fund out as I am still working in the bank ok,
My friend I did not choose you by accident by the way you have answered to prove to me that you are the right person I am searching for, and again I want to assured you that testimony is on our way and you will never regret this great opportunity.
Please I have some questions to ask you

(a) this business do you have the capacity of receiving this money when transferred?
(b) Will you maintain the sincerity and the trust I have on you?
And the way we are going to achieve this, I will need the following information from you,

so that I will not have much fear
Your International passport, I.D or Driving licence.
(1) Full names:……………………………………………
(2) Private phone number:……………………………….
(3) Current residential address:……………………………….
(4) Occupation:………………………………………..
(5) Age and Sex:…………………………………
I feel quite safe and comfortable dealing with you in this important business, mind you this transaction is 100%.risk free,
I await your reply before I sent to you the Official letter of claim which you will fill your data and

send to my Bank for processing and approval,
Thank you.

James

HEADER:

Return-Path: <mathjames87@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts) aXZlZCB5b3VyIGZvcndhcmRlZCBhc3N1cmFuY2UgbWFpbCwgaG93IGFyZSB5 b3UgYW5kIHlvdXIgZmFtaWx5PyBXaXRoIGR1ZSByZXNwZWN0LCB0cnVzdCBh bmQgaHVtYW5pdHksIEkgYXBvbG9naXplIGZvciBzZW5kaW5nIHlvdSB0aGlz IHNlbnNpdGl2ZSBpbmZvcm1hdGlvbiB2aWEgZS1tYWlsIGluc3RlYWQgb2Yg YSBjZXJ0aWZpZWQgbWFpbCAvIHBvc3QtbWFpbCwgdGhpcyBpcwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzc-
X-YMailISG: uqS19_YWLDvPD7Fz8RqbcSlZ80vvCFMM.xbt.dIcfLSKv.w0 2OPWpHRcwuBBE4F96xiKVXucMKTUGsxo7BjTEumJ35Il2gkf_V7ymsRux.72 dkDdAh6Ogg29ATdG11W82NJ1NzAXV9Qn.1W6e9gEsg7rbcyxE6s7bhq73PbH sKkXV2Yu2qps8pdG8QnzdyGrbxeEAnbJR779gR.iGcz3mXi1f5zlQvJybXX9 w.aTpEgKZRKV.2E.RKNHQ2GQ7tClR9C5t_2h8ZmrhcPDhIKs2zG3CgNOV8Tc bdi711peoRJIRbl9FFdLhiPQ4T7IsCn5e4tQeSk4H6Nr4i7eJS4tegQwlCLW H0zDjlY46FcQoa3q3r7a0AqMJKF0goWBBkSPlkuvLHMDMZDZA9Van2sccKk. fGyqJxz0AMMfNMeEqvdzdZUZe8QVaHFD2I09qcTox.UNbxy5pqzbs07nnmoZ AxjzAG0qAu8V9yM.uouTTYmiRncDD4RP4WaOSvtau3w9BlLSVgke_c8yJgiN 4WERvVen5MDOs258Yv2VxsApFXZhUZIgdTudkNyzkSbT3x4OUiM1DNstlpjF 20hYlLKnhMK2Bb74EYQdjOHAkOZglwPy8sKK5dzTD3KTtLvfZoVky8yNmX.P CclUwFrJN4OtZSPOvg5aDU1swGsa7hzJwvhw0SPn8rcJdFp9IDwSx2PfSVGw OZPs9ryMEmQifES24w3xoOEKN3EjHNJELEUKtWP.g9zxJRAsFXt34RWlmsXD FfXrzmWYZ6QWkEEqHd.PnCac6ruoMTkvcOfGuAQzM6lGiFHwpDGiJE_mNnMj T3Hyo_3kyhkJ.tR2RtCapPTvLg_eo2z0R.fLL9zwuww1D6B5BGiLAr7y5CgE 96cgYDmTr4b.SKApVVO.8xhE1Tpk8VvVOn8hfT787Q5k8ydP.vcH_5Z4rHDx PZKuCvsat9ZcYocrRTApURJYtY7L6R7mYr_tiKQS._p5n_PAsFxYCrNb7_O2 S4ofnz7bdHvmWKTfhdMU3zooMIUW50nHz9Pi9S_fXUYMERDDbZb9
X-Originating-IP: [98.136.217.217]
Authentication-Results: mta1254.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm18-vm2.bullet.mail.gq1.yahoo.com) (98.136.217.217) by mta1254.mail.mud.yahoo.com with SMTP; Fri, 04 Jan 2013 06:04:05 -0800
Received: from [98.137.12.174] by nm18.bullet.mail.gq1.yahoo.com with NNFMP; 04 Jan 2013 14:04:04 -0000
Received: from [98.137.12.228] by tm13.bullet.mail.gq1.yahoo.com with NNFMP; 04 Jan 2013 14:04:04 -0000
Received: from [127.0.0.1] by omp1036.mail.gq1.yahoo.com with NNFMP; 04 Jan 2013 14:04:04 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 543489.11989.bm@omp1036.mail.gq1.yahoo.com
Received: (qmail 62761 invoked by uid 60001); 4 Jan 2013 14:04:04 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357308244; bh=/lhWtUmZXeK/lblMVMWZrCSu/dmVI75nTwBGmlRyEo0=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=nTZXBsOFCmCR7e0i2aJiJXhmtgemaRmPWzqSXMdXFiNs7yLzXSMcJCPi8ZlmcIYc4BdXVyt+BlgJtfhj2Ha3r40zUB6bhM6lKzhuv7X5z2Wl9BKALVSd+ONXNkmFEMOKyztUGU+EUObe8HTB8awueuBjyN24jZZfyE2cy1tOnT8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=xqhMJWr2scmGYy8KYwjst36KqYhWZ4Gl3Xmr7mWk33n/xi2XzFQI1jgCBQEKtqYH9p7HscdFFIEEwnYa1nczHeGl8Z51Hb+5AzCDWw35rFXuzZZ8kJd0zBUVR6yooB7THj1woshqW/OflkA3GH+u5qW6vb6nYCSQQ/hj/0tctH0=;
X-YMail-OSG: e2S60kYVM1lTiaeF9sLlRDZOwuw9RWyZMGJLMdGkbkUUKOv cDvWu2S_cTXVOTeciia72LybgO3iwOAube6q7v_yadxXFAs50B27CTg01Tff PjARdqgUh3y3yUKPvSEALzmx_f5EXWTnaIS6ZSSI.40VOGa75HW.au0.TvML Xh9T.PYg8JPa9bicTcRMKkeXjFI9zgec8i6cDgzIL9ULaRox1V28r2XAuLa. KrxBGtBVWuVSMWCpe7MIxWHPmD.1DS5y2om8EEdTNbhN2YNQuWZtFGq8dW6_ kfVQspm9O5BrNs.SrlcEd_yjpyQP4gOq4VgmZ2sunbufMh4b8U.FQ8qU54n0 cEtli3kJgI_o2NkGGIrox27H1FX.ULttypP.ErSWzNDU12qtdza35JNCb3l4 lDLlnCRiB_uBUXckZHHWoCgBvwAfAkPSvPLcO2KcMi_VP38Rgk.MHjBLoOgG o7pmYSnKxHVY152_tipAugUc-
Received: from [41.138.97.125] by web163503.mail.gq1.yahoo.com via HTTP; Fri, 04 Jan 2013 06:04:04 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1357308244.62389.YahooMailClassic@web163503.mail.gq1.yahoo.com>
Date: Fri, 4 Jan 2013 06:04:04 -0800 (PST)
From: Math James <mathjames87@yahoo.com>
Subject: Greetings to you my good friend,

Math James mathjames87@yahoo.com RETURN-ADDRESS: mathjames87@yahoo.com

RECEIVED-IP: 41.138.97.125 LOCATION: Burkina Faso (Africa) ORIGINATING-IP: 98.136.217.217

 
 

Tags: , , , , , , , , , , , , , , , ,

 
%d bloggers like this: