RSS

Tag Archives: 419

“Foreign Affairs”

WARNING – 419 SCAMMER – RECOVERY SCAM

Foreign Affairs a.k.a Cindy Agape also scams under the following:
Mr. Ban-Ki Moon
Jim Ovia 
Charles Brown
Barclays Bank
Maria Jimmy

Subject Line: Re: Meeting Update

UNITED NATIONS COMPENSATION COMMITTEE
REGIONAL HEADQUARTER
RELEASE CODE No: D-AM-0001
REF: UN/RBSPA/09888.

Attn : Beneficiary

I am writing to inform you that after the board meeting we held to mark the resumption of work for the year 2013 the board members concluded to give you waiver of certain amount to enable you round up your pending transaction.I came to Africa after series of complain from the FBI and other Security agencies from Asia, Europe, Oceania and Antarctica, South America respectively, against the Governments in Africa on the rate of scam/fraudulent activities going on in their continent.

I have met with some representatives of the (AU) African Union who claimed ignorant of the evils perpetrated in this continent,in conclusion they promised to compensate you and other 50 fraud victims with the sum of USD1m each as part payment of your outstanding sum. Right now, as directed by our secretary general Mr. Ban Ki-Moon, We have decided to authorize the (AU) to effect the payment of this approved amount USD1m to you without delay.

With regards to this, you are required to re-confirm the below information to enable us renew your payment file and commence with the payment immediately.

Your full name:
Address;
Contact telephone number:

Upon the receipt of the above information more details will be given to you. I have a very limited time to stay here in Africa so I would like you to urgently respond to this message so that we can proceed with your payment immediately.

Thanks.

MRS.CINDY AGAPE
CC: FBI (NEW YORK)
CC: HOMELAND SECURITY
CC: CIA.
CC. EFCC

Return-Path: <sales@homevision.ie>
X-YahooFilteredBulk: 122.96.27.210
Received-SPF: none (domain of homevision.ie does not designate permitted sender hosts)
X-Originating-IP: [122.96.27.210]
Authentication-Results: mta1152.mail.gq1.yahoo.com from=homevision.ie; domainkeys=neutral (no sig); from=homevision.ie; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.fablesoft.cn) (122.96.27.210) by mta1152.mail.gq1.yahoo.com
Received: from User ([88.198.78.246]) (authenticated user mal@fablesoft.cn) by mail.fablesoft.cn (Kerio Connect 7.0.1); Fri, 22 Feb 2013 22:32:23 +0800
Reply-To: <unaff@qq.com>
From: “Foreign Affairs”<sales@homevision.ie>
Subject: Re: Meeting Update
Foreign Affairs sales@homevision.ie Cindy Agape

Advertisements
 
1 Comment

Posted by on 03/10/2013 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

“BRITISH HIGH COMMISSION”

WARNING – LOTTERY SCAM – ADVANCE FEE FRAUD

Click here to view past email scams from this scammer, who also goes by the name Marie Rofrano as well as Mark Benjamin

Subject Line: FROM THE DESK OF BRITISH HIGH COMMISSION IN COLLABORATION WITH ICC CRICKET COMPANY HOUSE OF PROMOTIO

FROM THE DESK OF BRITISH HIGH COMMISSION IN COLLABORATION WITH ICC CRICKET COMPANY HOUSE OF PROMOTION ENGLAND.

FOREIGN SECRETARY OUTLINE THE GOVERNMENT VISION FOR UK FOREIGN POLICY.

Our priorities Admitted:

ATTENTION: DEAR LUCKY WINNER ,

We the Board of Directors, Members and Committee Of Great British High Commission in collaboration with the Icc Cricket Company House of Promotion England is now aware of your winning prize. We write to remind you that we receive a report that Halifax Bank Liverpool, Nat-west bank and Lloyd Bank of Liverpool and courier company did not transfer or deliver your winning prize to your destined Bank Accounts or your home giving address as you have shown to them, After our investigation, We confirmed that you are the Winner of Draw Mobile Award 2011/2012.

We have also confirmed that until this moment that you have not receive your Winning amount. After our numerous verification we found out that the Bank and the courier company could not deliver your parcel to your home giving address rather do the bank transfer your winning amount to you due to some banking policy with courier company rules and regulations and your low co-operation to them, In regards to the above mentioned problems, We the BRITISH HIGH COMMISSION IN COLLABORATION WITH THE ICC CRICKET COMPANY HOUSE OF PROMOTION ENGLAND have decided to release your winning amount directly to your bank account without any delay.

Listen Very Attentively To Enable You Receive Your Draw Mobile Winning Prize!!!.

By the power and authority, we have conveyed your transaction to trusted Bank which will transfer your winning prize, you are to contact Royal bank of Scotland with your Bank personal details for them to transfer your winning amount directly to your bank account without any further delay. Be informed that the only money you will pay to them is (55 Pounds) Equivalent to 4500 INR, which is their service charges. The reason why you have to pay the charges first to them before receiving your winning prize is because there is an instruction place by (B.M.O.F) British Ministry Of Finance not to deduct any charges from your winning amount for security purposes.

This Is Details To Contact ROYAL BANK OF SCOTLAND.
Bank Name, Royal Bank of Scotland United Kingdom,
Contact Person: Prof. Andrew Albert,
General Manager Foreign Transfer,
Bank Email ID: royalbankofscotlanduk49@yahoo.co.uk
Bank Phone Number: +447014233116
Bank Fax Number: +447017038113

Is important you call (Prof. Andrew Albert),The General Manager of Royal Bank as soon as you receive this mail and furnish them with your details to receive your prize,Below is the information you are required to fill and forward to ROYAL BANK OF SCOTLAND LTD .make sure you fill this form before forwarding it to the Royal Bank of Scotland, don’t send this form to Royal bank of Scotland without filling it do this immediately.

Your Full Name:…………….

You’re Address:…………….

You’re State:…………….

You’re Direct Mobile Phone:………

Your Office/ Home Phone:……….

You’re Bank Name:…………….

Bank Account No #:…………….

Account Holder:…………….

You’re Bank Swift Code Id any?:………..

Your Occupation:………….

Your Next Of Kin Names:………..

Your age:…………….

Your Sex:……….

While sending the above listed details, Remember to ask ROYAL BANK OF SCOTLAND UK on how will you pay their bank required service charges of (55 Pounds) Equivalent to 4500 INR which is the only money you will pay to them for immediate transfer of your winning amount. If they ask you for any additional money after you have paid do report to us and legal action will be taken against that.

We guarantee your transaction with ROYAL BANK UK . Follow our instructions, you will not have any problem.

From British High Commission Foreign Secretary Mark Benjamin has made a statement following the decision to place on your winning amount.

British High Commission Office,
King Charles Street,
London.SW1A.

Return-Path: <guest@homedns.org>
X-YahooFilteredBulk: 31.18.136.25
X-Originating-IP: [31.18.136.25]
Authentication-Results: mta1232.mail.sk1.yahoo.com from=homedns.org; domainkeys=neutral (no sig); from=homedns.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO hennsn.homedns.org) (31.18.136.25) by mta1232.mail.sk1.yahoo.com with SMTP; Sat, 16 Feb 2013 23:42:59 -0800
Received: from User unknown 42.106.210.180 (Authenticated sender: guest) by hennsn.homedns.org (Postfix) with ESMTPA id AF04920A28AD; Fri, 15 Feb 2013 20:44:17 +0100 (CET)
Reply-To: <royalbankofscotlanduk49@yahoo.co.uk>
From: “BRITISH HIGH COMMISSION”<guest@homedns.org>
Subject: FROM THE DESK OF BRITISH HIGH COMMISSION IN COLLABORATION WITH ICC CRICKET COMPANY HOUSE OF PROMOTION
BRITISH HIGH COMMISSION guest@homedns.org

 
Leave a comment

Posted by on 03/08/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , ,

“Mr. Zon Bila”

Mr Zon Bila

an auditor, groupe de travail federal de l’auditeur

email: zonbila1@sunumail.sn

Mobile: 0022661055848

Work phone: 0022666804660

Work FAX: 0022650420039

Home address: industrial road bobo, km 7 plot 10/11

Work address: plot 77, avenue uniga du fuso

Delivered-To: fedyarg@gmail.com
Received: by 10.220.58.78 with SMTP id f14csp70156vch;
Thu, 24 Jan 2013 07:57:55 -0800 (PST)
X-Received: by 10.180.97.68 with SMTP id dy4mr3943984wib.7.1359043074911;
Thu, 24 Jan 2013 07:57:54 -0800 (PST)
Return-Path: <zonbila1@sunumail.sn>
Received: from emkei.cz (emkei.cz. [46.167.245.116])
by mx.google.com with ESMTP id dj9si716381wib.103.2013.01.24.07.57.53;
Thu, 24 Jan 2013 07:57:54 -0800 (PST)
Received-SPF: neutral (google.com: 46.167.245.116 is neither permitted nor denied by best guess record for domain of zonbila1@sunumail.sn) client-ip=46.167.245.116;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 46.167.245.116 is neither permitted nor denied by best guess record for domain of zonbila1@sunumail.sn) smtp.mail=zonbila1@sunumail.sn
Received: by emkei.cz (Postfix, from userid 33)
id BF9C0D559C; Thu, 24 Jan 2013 16:57:47 +0100 (CET)
To: fedyarg@gmail.com
Subject: AGREEMENT DOCUMENT
From: “Zon Bila” <zonbila1@sunumail.sn>
X-Priority: 3 (Normal)
Importance: Normal
Errors-To: zonbila1@sunumail.sn
Reply-To: zonbila1@sunumail.sn
MIME-version: 1.0
Content-Type: multipart/mixed; boundary=BOUND_510159FBA6C507.48939136
Message-Id: <20130124155752.BF9C0D559C@emkei.cz>
Date: Thu, 24 Jan 2013 16:57:47 +0100 (CET)

 
Leave a comment

Posted by on 02/06/2013 in Other

 

Tags: , , , , ,

“nulty rita”

ROMANCE SCAM – ONLINE DATING – SCAMMER

All of the emails on this post are from Nulty Rita — I’ve put the header details under the emails. Scammer is using different IP and email addresses in each email.

romance_scams

SUBJECT LINE: Hello

Hello Dear,

It is nice and joyful to found your email address on the Internet search during my quest for friendship to keep busy the lonely and lovely world. Hope you fill the vacuum? I thought is beautiful to make you a friend in this regard. My name is Nulty Rita a Canadian nationality, female. My friends tell me that I am a quiet person with a good sense of humor.

I am always fair, straightforward, honest and easy going lady and I seek trust worthy friendship. I believe in giving and taking on both sides and I value faithfulness. I like people for what they are and not for what they are not. I want to be your friend, and let share whatever we have in friendship.

I will be detailed in my consequential mails and expecting same from you if both considered:

AGE: 29 languages spoken: Fluent English & little Spanish.

It will be nice to know you in this regard.

Yours truly,

Nulty.

___

EMAIL TWO –

SUBJECT LINE: waiting to read from you soon.

Thanks for your response and friendship continuation, am sorry for my late respond to you, due to some official jobs which i can’t over look in my office, I saw the picture you sent to me is very interesting and ham-some i love that, it gives me pressure when i read your mail, am looking for a serious relationship that will always exchanging ideas with me and the same time i will learn something from him, i think it will be interesting if you occupy the vacuum. I will be waiting to read from you soonest,

Thanks,Your beloved,

Nulty.

_______

THIRD EMAIL FROM NULTY RITA –

Thanks for your response and friendship continuation, am sorry for my late respond to you, due to some official jobs which i can’t over look in my office, I saw the picture you sent to me is very interesting and ham-some i love that, it gives me pressure when i read your mail, am looking for a serious relationship that will always exchanging ideas with me and the same time i will learn something from him, i think it will be interesting if you occupy the vacuum. I will be waiting to read from you soonest,

Thanks,Your beloved,

Nulty.

HEADER DETAILS:

Return-Path: <michael.williams7763@yahoo.com>
X-YahooFilteredBulk: 98.136.216.199
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: v_EU3goWLDtxr2FQVO1kRAvJR4p8Omw_uuoF7WARHE_SgVV_ bpbLV8e1qIRPWQALlOv138.Ok2_i41Jfi_sWdIhWeb2fUy6R.Kc7hPKPUMMi mdr8uBUz5AuqfDzFnqyFxvaBDSvhr725kMv1DiUeX7IabJOXM1aWO40XTceD ASSaaW0JH43vTjOeIV6_96mvOGj_lTmILiOK9XrOdkVBZKqWzTAU_w45I0bF aoArTHBH6Yjig.n_eq_1.gnx6T4gRxZE.bGc4oLGba7nKE_yCOmIRlXg6_Z5 8yaTLcK0PgmsZ8fmEs0eYOU9WKmXIVBANtTE6H2CwnwwDU8TIEY5BPg0djAx 9jrQ.4S.5qoO1MsYJ61FxDqhJARORWwm6cFijCg0.gzA6xXfaCgmBSziiSpS _L09_KbN7C1UZblljY1mTT2yhF7wd2sF22LK1qvwI.Ld0qxE0JKiksmBqutA MtwyPhEsyI45jaavUjQVRrWuC8iW6sfKBrrI_1EeSVRclO6gSXSTnAOCpq4J s4yA_mG07c7WgRKvbcz57_zmiaMblveBEFwdi1ZfuYfx7H046.oog2svJL6h DOMojjWxAaywELOVO5hH2FNrNghc1lxafwR9rLhOVxJomibqazix.nMyOBHn Ln9_HOexc46rXN7heZ1LaVogJMvpLALL7NuWAhLX8aMP3IjSZ244cajk1WM1 cxiptdrrIlRP6doBHuZ9L2XzXzeEs4qTwXoKborT.qWohUpebxPiv6VY9GZi YrjBFQQrthXQwDL2p5qvQb8FlE.RYH9G6HWy0_mDvxD5BcB9uETzKQnRw2bj rUI1XXqyR8YCF5_uwglfFkR0pLbqN_Ha_BZkAoV8JuMQyg7ONHDgomoeFDnd 2wVb0GfDxIx7C6MwaKwcx7fh4bZEmYJXqVl5J9nfXr.AUt9UXlqXi1L19wHg dWl1omgF48oVhllrYLKu3INJ028GiKBHpeCkgszIpzxZJ3Sl3vhIofwpE9GX L1NWXt2FxMvR1H5kWbHSkeMWKC1wjxFG5wnI7vL6.QCWVdeid1CNl.8C2T3B cuEZu8J0GYetrsgEgyce9mVx_yXJqWZLgftFfOTRwPlEz9d0Edvbdzvb2P0O IpX3NPltzUiAmXT6oqN8u6Cl5VytQ.0MmzfIyAbtuEMKiKQ.3NS1UWfGMciF doAZ9nFmiFHIWT7Z6_pQ1BEMaHjRyn8lgePCUuBoN5XkM9N2qOMyNwEBqM5U 9.WDL9g99tB1IUc0Z4S7f2C7fP5UHkwGaaXaiNF.oIIODWUhhrtBpH_r5lz5 Y8vLng37VNZGRMT0QqQP.Ykyk3QDyzFpVz86qw5lTV1WbnvycgD_RUYALS3u 4REp5mErkD3rVrZeuzRLM6uYeR7vtNkmigkEnXYyPQ–
X-Originating-IP: [98.136.216.199]
Authentication-Results: mta1382.mail.gq1.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm30-vm8.bullet.mail.gq1.yahoo.com) (98.136.216.199) by mta1382.mail.gq1.yahoo.com with SMTP; Sat, 02 Feb 2013 23:18:10 -0800
Received: from [98.137.12.189] by nm30.bullet.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
Received: from [98.137.12.242] by tm10.bullet.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
Received: from [127.0.0.1] by omp1050.mail.gq1.yahoo.com with NNFMP; 03 Feb 2013 07:18:10 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 311370.83000.bm@omp1050.mail.gq1.yahoo.com
Received: (qmail 62306 invoked by uid 60001); 3 Feb 2013 07:18:10 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1359875890; bh=CYH4aW/vXnFu6XxmeTfb8LB5QPC+tPQSLrPr0gNnyR4=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=vyI+zCTHzdaW5W2vq8YuMJYcZxlo726RH+4c9hsFzpVw7Rqm0XWNnU6kMYCKjkVCwQCMEOx4kqjcWlxpNlVkpQ/jmVNPKGtkTCmr2Kz4mR/EFWsyhLzVaoLcu3ZcEivjixhhhppt4fPreHNsedxBUBc2QbtSU8165oHZRH+86u8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=S9D1a3sEM64Qpx99F29253XC3e/QunCc4mkcVhh/UDKDs0PYUdC1B66APbJhvdS+iGCgNLg9fQX+HK5A72x1eZ/8XHq6pN9fjNi5Cr6V3y04xsDgc5dPhvcFq29VdbeXiZXf6drDvwNeuT/nMz3IFBK70J2lFlWhm8iyLASFiPM=;
X-YMail-OSG: vpBsc8AVM1ktRTNJG9zqZuIXG3eH1Do1oc6NjwgBAx6nqRt B9xVVUbwPPQyO.t0DRyVzQQO9xMpcz1fya0BVHXd8eLIfMw30JpR0bnppA6z LMCgOQZpCbFK_ewcc0W04BkU36BwFH6Uyx.n4.j.EXyrnKewca8JTOqVJej. FtzPkV63fiy4TCdIoBGxF0eEPdTlUx_wznhfWtWmh3pX3DuGxwP2Wm2NPr5k FYdhac6m2W3Jkcktx7RS1Evvp89Cu4dyZ9DEvSTf.tOuUEq442yQMIwWWhD0 hMVQYu1A30S7jxzAKDVImZG7Dmi3kt1sbXsoc88Dn9QJ82dekE739enmScRS 9M9nH2o0G_68mtPMK65aHTT4uUIkhyp1J5JGtqrVap9kFJuvKCymK2RQUZyr 9_nzXREArt4J1azO1SoTgJH8D81TGfDLyDzrPVggl2irAaC8ThEVvhMcgjLd zd3HBYpyT8Q5goXd2jsEYF6kOF7VJCMpqboofIvmz8wSl2T7XxeieAhs9YD9 k6W474_4G211.n1kvPmRyaE.Pci1eEsEnfJBIdn.Us6QCTvkVrnGrYCtbTFQ oXTaK8aD2u0POiavSwPbNwyGhr7Cfo_.qz0b_vAGo3MziGD7be0wb1FCgqlJ iLMkZaDZ9h4sU_uBNJIc-
Received: from [41.207.184.25] by web163406.mail.gq1.yahoo.com via HTTP; Sat, 02 Feb 2013 23:18:10 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.131.499
Message-ID: <1359875890.71870.YahooMailClassic@web163406.mail.gq1.yahoo.com>
From: nulty rita <nulty.rita23@gmail.com>
Reply-To: nulty.rita23@gmail.com
Subject: Hello

nulty rita nulty.rita23@gmail.com RETURN_ADDRESS: michael.williams7763@yahoo.com RECEIVED_IP: 41.207.184.25 IP_USED: 98.136.216.199

You can tell by the return address that this scammer uses, or used, the name Michael Williams to send out spam.

In the second email, the scammer used

Return-Path: <nultyri1980@live.com>
Received-SPF: pass (domain of live.com designates 65.54.190.100 as permitted sender) IGNvbnRpbnVhdGlvbiwgYW0gc29ycnkgZm9yIG15IGxhdGUgcmVzcG9uZCB0 byB5b3UsIGR1ZSB0byBzb21lIG9mZmljaWFsIGpvYnMgd2hpY2ggaSBjYW4n dCBvdmVyIGxvb2sgaW4gbXkgb2ZmaWNlLCBJIHNhdyB0aGUgcGljdHVyZSB5 b3Ugc2VudCB0byBtZSBpcyB2ZXJ5IGludGVyZXN0aW5nIGFuZCBoYW0tc29t ZSBpIGxvdmUgdGhhdCwgaXQgZ2l2ZXMgbWUgcHJlc3N1cmUgdwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzc-
X-YMailISG: s_YHocUWLDvKLd_cNdSu2_dyD.4lsfGNHQhkhqhTvUcUNJdI ePY7VF4_7F1qAJWmi.YJm1fRexH9K24EC1maTbj79iBn.wwzpxa8Gaxg7tF. D75_m2NdEhVLTZwssac61o1P4X8iir2vDnaTB6peXrLvCoNpRS5S8qPhE6hn qGzjv3bTyoS9Up0ZcLr.0RY1gF8q.e0_.5p7a79G1Yc1RX0v5EQLohOfrl0H mBCM3dMqDTOAVqDTgSR3iVVRRFplnGlEmUal2RlTzacFvLqXdvmq8_KlKES4 A4Q31BbUK2kyAQd66z5gEurFJZLo3fLPmuZr6zTyYURncXNz5rLlIx9Ff9Ck Og9ckAA4Bc0XFUJEtEfheC2H7ZvKmEm6_nWKLJFjcVWPyTKCKk2kXIjOjj9d OTToU0zY582zQTn4ZLtPSq31Ymm69zxMEk2k8ErSGvwu53Q2ZRkDxu8MNw7z ulthl5gYfthCuOORPhyJwcDnP3OHYTldtbqlKYkc76eUrZMnAIl6WO.PqJHZ 7qDdx6qzok_.KimW8KPrlRQ8MwpTtLwWSHIQHYiSmh1vPPcj13OQVN.9KXRj kA1LuSYJXGoAKepweHtseX5_wCiQuNMqO30yEKBVBTCcjVqxeLGen.gGz4kM InAXshcvL2MRZnlLArZWmI.4cpiz084Xm7VqzaDWmbPTok6bkRGKhPjCkguT fLZigDaRqms8sxEf_WGaTqH9iLVUAz7V2fn3UzJXZq_Hs68H0R3Y9t8yoYmi TMslobRyoP4nEMyrWSgJOOTWN3NsfahEdOkZK.I8OFwaRaS1Hy9r3Rpfu86q 25K0qPXMWJZXWchuecPIkSYDwaRCSLwfD9nXVk9alxP_EXWIW0idcnZ1xs9F x2fgym581CmR9vFludTJjNOtwaCI2M9ouG4Jo9yUB2hkLSZNHzy_x1nTG7xV rsdfZz0Ddvw2YfkEk.O8uhcPehW_wTXIQvYKTboGD8S4wjmD3YjuOZJip51u N..aXDyZWGzKds74PmPYS7tBDoukidFnBBI5c93iVKkgq9vrggeQW5cjw680 IDGt_odGzjD5gn_qOLtFw_fdJWggpHKZB.OAtVhAUu6hRbyecfYDUAjauwtl adjxmNJvSZaBMuKcTUpH0XLdSfP2fp.Oog39p4TNSdj79MqmqL00Sa66VTMv gZVNiWqmyfO3Uh0.cxPyMsCSanIW7k4GX7uUVcZTrJhgAU7wDn49rNVmd80u jVObxIKhgxlHesSrtdjwzwnkX59rYkyy65n4cKTh1gDFD0aKZAkjOFJnLXvt mnkVAUzRCEALkco-
X-Originating-IP: [65.54.190.100]
Authentication-Results: mta1263.mail.ac4.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s25.bay0.hotmail.com) (65.54.190.100) by mta1263.mail.ac4.yahoo.com with SMTP; Thu, 07 Feb 2013 03:39:50 -0800
Received: from BAY146-W18 ([65.54.190.123]) by bay0-omc2-s25.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Thu, 7 Feb 2013 03:39:49 -0800
X-EIP: [IqVGmK0w0oLjwT2X+oNKJGn1RTxTliB1]
X-Originating-Email: [nultyri1980@live.com]
Message-ID: <BAY146-W18416BA2828AD7841F411EC2060@phx.gbl>
Return-Path: nultyri1980@live.com
Content-Type: multipart/alternative; boundary=”_9a9adec8-f8e1-4b56-8b33-1467878732f5_”
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: waiting to read from you soon.

RECEIVED_IP: 65.54.190.123 IP_USED: 65.54.190.100

THIRD HEADER:

Return-Path: <nultyri1980@live.com>
X-YahooFilteredBulk: 65.54.190.102
X-Originating-IP: [65.54.190.102]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=live.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s27.bay0.hotmail.com) (65.54.190.102) by mta1285.mail.ac4.yahoo.com with SMTP; Thu, 07 Feb 2013 03:24:22 -0800
Received: from BAY146-W47 ([65.54.190.123]) by bay0-omc2-s27.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Thu, 7 Feb 2013 03:24:20 -0800
X-EIP: [GjEee5wEdwhjQ6WfsAb/S8iGhYrE9CEz]
X-Originating-Email: [nultyri1980@live.com]
Return-Path: nultyri1980@live.com
Content-Type: multipart/alternative; boundary=”_fb412a94-7270-497c-9056-a6250dfe01a4_”
From: Nulty Rita <nulty.rita23@gmail.com>
Sender: <nultyri1980@live.com>
Subject: WAITING TO READ FROM YOU SOON

 
1 Comment

Posted by on 02/04/2013 in Romance Scam

 

Tags: , , , , , , , , , , , , ,

“FEDERAL MINISTRY OF FINANCE”

LOTTERY SCAM – ADVANCE FEE FRAUD

scam_trap

SUBJECT LINE: Fw: WHY DO YOU CHOOSE TO LOSE YOUR $1.5MILLION ???

Message contains attachments1 File (22KB)
Open Attachment Fund Your Fund.doc

Return-Path: <0.0ffice777777771@att.net>
X-YahooFilteredBulk: 98.139.44.139
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 0AiKUs0WLDuIcOgoEvfTNpk4AACLw8MW7aY3rKsYPk9yuKB1 zUJLlrRpyWLe3bGZkzmhlZO_asgacH_BjiIi.hqM_Dgzh9Vp2iXgLv6LGX7i _QIP7n9a_7QhfbPrxLW8TS5sMPt11UdAOWDEln5yKRGM7gpraHNG9simnrDa pNae5WIy_Bqi6ujdGWbKnhE5LC819XPoSKK0EBoJD1xF6sexMTtW_VkhXr3x 3B7NXpW2nyisAtS9uF6diEHXRC1sCl6oH9EEwOBmNMFsNEpm5a61YQCSMUr. eUvieGDymYoWtYVxPF2UfQdIrzXeCPk11gJGbvlp9RJnHajhST6oI4VpQxXv J5amCENkol9eYdFAlz2fe2n2TP7skthxDJs663nelgK_jq5Xo71SdRXYqIBx ItV2JUx6NXQnBizVnMsxSxBhLuhwJJQzLLfofOKAs7fuWPSuwC5jCHKt2poU gOpeklkPaGnrWJxD2geP3D5MlaFY37Q8VZmzyG0okzDUkVJc8x93Wq2TVuki WvvYrDo_K.mWGdLQ0qjH_Si8gL6tFL7rUfH1Qf84f5s_roRAw56DN4WL2_Z3 WILXVDvTcT9fxop9_AzrYwLeqzYigzn0BAaXZR0Qzk7QvawwnT4gmKwzWJwv u6z5EmtcU9e3J1VypBCvDmuRt45XHJJQKUPM1V9KsmdPj9UrzXb9K35iokpO lg05sSfqu.pAtKxa1CblMANDf_BQdK2dq6_WpjwklbvUjgMTwRgT8_anZYMK YWpicQfuj6bxpaj02hs1oJ_.JGaP8ojVO4Ehc0OVgWwH51G.JjtgzHMZrMBI EBR6S4SrMTVkYvSaf8TqobXjRPTAhu_RgKPTbCQim2h1XC1p4SLY7rWs1i47 bEG.FDDWuHNXEdb0vcczatVe.HTxXK2XjY0x3ZSZQVc2FIvdzUdFGyG7FBxd 57C3xcK5s2O5os3855t6VGRhvBmDsQ.nLdCjfZhkrgENqs_XvlrYZmSFWk6L vwtOiOHzkVzRJHoVRSIIo5xdoVotAtpl3ZsKc3IxK1nalxvWoUMcyp7y.kNu lkU0OlEq2WYLk.vma4g7OanVJ3DVXEjE.upArmxq0lFoGdVaDlmOawWypl4. Bn_xPvsKuSgp2WA2fgAc0muoVWs4UbbN5Hp3C2Gg2qGrQKTyy8w2lNN9Y2t0 pbGkJJqkyvI5JCiJIAYDNrRlvDmP8aQmN5ZW7ey7E17hjcWUa7euIe0SjPkG 95KBlDj92.Sx3FLEWTWz6qzxdO67Ax5VxIFubkiozzD2vffsZXMeF3_xg9V3 6t3hVojWljpQoGTIMo1H71Jz.7U1lxM4T3NfRvpqkrbz6WCN.EojuMXPyO3c Ux_xcxgGUw–
X-Originating-IP: [98.139.44.139]
Authentication-Results: mta1034.mail.bf1.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12.access.bullet.mail.sp2.yahoo.com) (98.139.44.139) by mta1034.mail.bf1.yahoo.com with SMTP; Sat, 02 Feb 2013 04:53:47 -0800
Received: from [98.139.44.103] by nm12.access.bullet.mail.sp2.yahoo.com with NNFMP; 02 Feb 2013 12:53:46 -0000
Received: from [98.139.44.89] by tm8.access.bullet.mail.sp2.yahoo.com with NNFMP; 02 Feb 2013 12:53:46 -0000
Received: from [127.0.0.1] by omp1026.access.mail.sp2.yahoo.com with NNFMP; 02 Feb 2013 12:53:46 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 578628.26983.bm@omp1026.access.mail.sp2.yahoo.com
Received: (qmail 39566 invoked by uid 60001); 2 Feb 2013 12:53:45 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1359809625; bh=DCzeqM7ybi0Q+KE80wWi5dGYn3vP1J5d0sKcPT8IngU=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Xejv+G2AYZJSfM/z/rQEoH0GDqoMRVixNUuXMIbJh0bqr3Rta1J1JeoS1ecrckqcNDP9SAYQkWUVHvymG0GFYSMqXTUH9PBIyV8l6ZGWjsjSsnpJS8H2a8kX7pmZBlrmC8CPDQoKaCW2gPCt2oM/xwQC/rzEikH8I+bbp75awzk=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=bgkTQ1mYv0ic9FSNmb15U77c+nVB/YAkZkgbKIGDrBtgLenhIZM5UQtGpruCJ92b26Vo8MchqG3ernfvhfbQMeByki6zhRzpHbG+hPTKwkClfMU5RzC3ASmUV+sq37/czvDBJuittw02TUrV9CmOKw9/TOX8bIHQis/WVwsNNro=;
X-YMail-OSG: 2B1E7EAVM1nFOrg5EOs5XvNS_WzZbnYuwmXWFVShdNYbii_ cnOYIp7ifadQUh7bYt5UrtaYIGicTo88MCAzkR6tpWdmOiGNZeaGX6RTIPMw Q8rGGGQ88IdmFi8eJX7XKMVRpn4iWWASNlhPMa6xTpWmVV896GIyVYbPNACO G41FXes9xcIuWVGc6AJtJEx4Fjc0wp6CpIR5Zrz6uGKiyK._Zsy8Ny0o6fd1 vw29fd15YZP7SCNkbV1nHs_juhs0uQonCLyYKHAUmlI2FjzGxzOTVtNxHBMs g_8Qf2a_2DIk5Y_QgoiF9LYpoobG0GrjBd97_VhUOP1kZXiv8E6yksj2fvsf LNC8atyJAAz2fCc0umXMYJRZArBbDc19enHUjcZktBqQBv1aq0juw6oF4KKb vZeO8SoZL_jzoKsfcymkyxHmhhTRNshTWImRsu9zHrQclj_1cpVdY_qNOufj MExwI1LVMmvXtNbk1TaEMsBGqV_E_TDw9IuYkw8iCTJ3eUuU3MHDkDr4-
Received: from [68.71.76.242] by web180802.mail.gq1.yahoo.com via HTTP; Sat, 02 Feb 2013 04:53:45 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.131.499
Message-ID: <1359809625.28288.YahooMailClassic@web180802.mail.gq1.yahoo.com>
From: FEDERAL MINISTRY OF FINANCE <tonyuche01@gmail.com>
Reply-To: goodwservices@superposta.com
Subject: Fw: WHY DO YOU CHOOSE TO LOSE YOUR $1.5MILLION ???

FEDERAL MINISTRY OF FINANCE tonyuche01@gmail.com

 
Leave a comment

Posted by on 02/03/2013 in Lottery Scam

 

Tags: , , , , , , , , , ,

“Lucy Gatoma”

ROMANCE SCAM – NIGERIAN SCAMMER

romance_scams
Hello
My name is Miss Lucy Gatoma ,I am 25 years old single Female looking for love and marriage. As I finished my prayers tonight and went into search for a nice friend I came across your contact,My mind and my heart told me to contact you for friendship, A friend who truly understand his or her friend and share their feelings together. please kindly accept my request,I believe that distance can ever be a barrier but let’s love connect us because love is a bridge that connected far distance to be close to each other,contact me on my private email lucygatoma@yahoo.co.uk ) Please try to send your pictures to me immediately you receives my reply and for more details on love and investment with you in your country.
Yours truely,

Miss Lucy Gatoma

HEADER DETAILS:

Return-Path: <lucygatoma@yahoo.co.uk>
X-YahooFilteredBulk: 77.238.189.68
Received-SPF: none (domain of yahoo.co.uk does not designate permitted sender hosts)
X-YMailISG: rYiPTOAWLDsflgQiWPbmAOH4ijHoo2QP7vcXZZK.ouC6wsWc 3KpcwZ8UHUcD7ff3bI2vrFpXpFhRYOr95B4AK4BqlROQ2gANEQrYcBc3n.Cu sMJRuktyqM4hMtJYA4NW57Fb5_MPatKBao1zibf9If2WMHmjo9.nmuBbx69O MBnLKSmpdQLXynbxqNGUqX4GPFOu_uQ4P7x9Ljb8NmUABqBF7f0kAoPBUK99 6e7Ydcu0xvVqyKGiUA4WXDoBzTJQR.dYd2p85ReipZULk4OO9JOubvoJa.5s fF9gtamUt3VhgGTgGywQRyln4m9jX0CFy6khZjX8hjzsNirvUQwRb6g1d0am 8JC4vmIoe96AJ2JZ78eh9GBqi2dtcXzrjcOhfmwhcJw7d_9aSRpPNu4ERr1F KiReU4S6hmzcqyNWIRd4ahdrtgDRFFZVUxoile9.aReNts0qL.inx6p3M3ef aLZLkg67029758bdNAlAiMEBXh6c2IA3x22ZT8nJnBtrFl0C6zfSnLPsLdg0 b9iIJN7HgAmEYAhp3EkCn5lek2GfFzIz3D.smxaFvmGZsBkbRgIyvDTDXUgM 0nRY5xDy_fQJEXZO0iy3Md_SAiyxQgGM2h642rt3oDZxRLVYD1u3pU8cIuBP UFILGVMBTLJdZaRaXGfjc7NUQkCRQPZ76Br115cwokMOMfFTtJoTvpJ6I5SX N0nYwYsrIkBDn6AAL0CigLiam77XAU.V2jv9wYGA5SDS9P4.EYr4iu81qGda vWYPM3i2LbqZ2mdyMOOMdXNL8wPEZXUQ9P3BMfWVBhMYAc4uWVC9IhbTWQzJ GmGmjyXuffuDcj5ErvUqv4HpmsRX6dn.MfSoxiRG6UuCZxMydJtVpERV8XVt DSJdPObDBhrF.9CTKO7PhtyyRTvNqsH1p_c1OVkmyjbLCB2BeCYEq0WPdfRm x5F17frAgiRrsNdUFj9g5pwMoV9vqxdVu17MyP69Vv..CsawrACBfTSpw8QO mXkOnUvasC6xWjLAvSeoXu0N7i1K14HkwpMPIW_xwjxGFkUGh0O13huZtiPD SghJZs2WdnodykE_McZ5AB1_T2M7X_93WDzfbNdYNUM.3AaJ7b7.6iLqrWd1 CemdNi3whbJNeGBvEy5ekeuEkb1iVWiebYf7Ic0FxbHdHIhYC9X8YR7gnfVr QvxGAfYfa2hWJItR.OQvpEuoVm52sJBdB9ReeTpi_YEX__mUdQsU3ieTNHhJ DNnF.J_YRWDGqRKtHQmxk9.lHAQ8W_vhK8Ov3zzCkntXiHTkWi.eYsRmUtxi iKC0uhoM8A3I2h6zDggAPT7zLOsL7N_zCgtJb9NUkm6LONpyjy9zACRf4zel HG0egJeH1NPZWIxJIN.pOtLwbuMTSZPbmgX9C2DksD5.knylb9AU119IiWPr zkQZLhmvOp6M3oD8uu8RL3V7Jw–
X-Originating-IP: [77.238.189.68]
Authentication-Results: mta1308.mail.mud.yahoo.com from=yahoo.co.uk; domainkeys=pass (ok); from=yahoo.co.uk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ird.yahoo.com) (77.238.189.68) by mta1308.mail.mud.yahoo.com with SMTP; Fri, 18 Jan 2013 14:59:05 -0800
Received: from [77.238.189.234] by nm15.bullet.mail.ird.yahoo.com with NNFMP; 18 Jan 2013 22:58:48 -0000
Received: from [212.82.108.118] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 18 Jan 2013 22:58:46 -0000
Received: from [127.0.0.1] by omp1027.mail.ird.yahoo.com with NNFMP; 18 Jan 2013 22:58:46 -0000
X-Yahoo-Newman-Id: 641224.99002.bm@omp1027.mail.ird.yahoo.com
Received: (qmail 85530 invoked by uid 60001); 18 Jan 2013 22:58:46 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1358549926; bh=SXTsfIwGCv5NIPRj3/FCZbXpwFew86J2aBpsJ1FeYPs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=p9lXVAi9n0qvsAQGsAwLqq8h7JRC8StOJYycpFvd7zwxp5X2/DSETFDsBaD94tywKsw9Dh49W0xSev31MuGIWMsHwfW95zXhW9uJIjWYzhiIyuh6gy64eAKUFceGbkEnTurixq3LUDIYI4Pc922VZadhOsivwyqCdpHczp4y6IU=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=f+NSDjSt5+dY/4/shBxvwxtKZ3Jk6kLihiGbQ3vm2OEbhOkjlwD1K/yI3uRCutsEtmi29WfsIGygutRlGTsI+29sP0SpC5gH1qh0V1TKuQxDkjquP5Y3b885MmTJy6st+K00KhdfBo9xsxicWjDD2qzNZ6cgXzX7uwgL5i8r49o=;
X-YMail-OSG: NYbrcvgVM1ltbpnC.9U.F60ojU6B4q3psvzm7f1SD_c85lX pQo5pr.3KmqUt9oUk4dSmF1A3F8Ecz6CAECiUn0SIc7siaQgNea2WEv1SOHL ftzKNRovo4xgUvBwT6o2x83omfsXZUyg1WxVENADoS0dnpznFX.y1uKrbrXY GN338RcYZd6sZRxOqwVKaWpvk57W4Frx3Q3g0UsoObP0ATlN.ao_6TwyjOBI kotSmBnIll4T0hj1PPyHTrl46UYBLTeJUp.oAyieeK03iYrzeJz07YGEOolV tYnp6YxRci0NMj4MYrCVf1Twek61HIaYkKAy4Lxb8KOwJCZho6J3isR5xjXk L9BuYeR63xmjiwEOSok4bqxzxNqk.WsAzez3sZ1DT2_1PF.4tde3iQWKji7G OMZj96J9W19bLQnToNngHybfPNFzHJkqQMQ–
Received: from [41.82.120.206] by web171502.mail.ir2.yahoo.com via HTTP; Fri, 18 Jan 2013 22:58:46 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358549926.71914.YahooMailClassic@web171502.mail.ir2.yahoo.com>
From: Lucy Gatoma <lucygatoma@yahoo.co.uk>
Subject: CONTACT

Lucy Gatoma lucygatoma@yahoo.co.uk RETURN_ADDRESS: lucygatoma@yahoo.co.uk RECEIVED_IP: 41.82.120.206 IP_USED: 77.238.189.68

 
Leave a comment

Posted by on 02/02/2013 in Romance Scam

 

Tags: , , , , , , , ,

 
%d bloggers like this: