RSS

Tag Archives: 419

“Western Union Head Office”

LOTTERY SCAM – NIGERIAN SCAMMER – ADVANCE FEE FRAUD

How are you today?

I write to inform you that we have already sent you $5000.00USD through Western union as we have been given the mandate to transfer your full compensation payment of $1.800,000.00USD via western union by this government. I called to give you the information through phone as internet hackers were many but i cannot reach you yesterday even this morning. So,I decided to email you the MTCN and sender name so that can pick up this $5,000.00USD to enable us send another $5,000.00USD by tomorrow as you knows we will be sending you only $5,000.00USD per day.

Please pick up this information and run to any western union in your country to pick up the $5,000.00USD and send us email back to send you another payment tomorrow.

Manager Mr Hamed Azeez
Email: westernunionheadoffice47@yahoo.com.hk
Mobile: +234803746209

call or email us once you picked up this $5,000.00USD today. Here is the western union information to pick up the $5,000.00USD,

MTCN :1536432709
Sender’s Name: Fatimat Hasan
Question: Who is great
Answer: God
Amount: $5,000.00USD
City:Abuja
Country:Nigeria

I am waiting for your call once you pick up $5,000.00USD,

Thanks
Mrs Fatimat Hasan.

Return-Path: <westernunion@office.com>
X-YahooFilteredBulk: 202.181.165.203
Received-SPF: none (domain of office.com does not designate permitted sender hosts)
X-YMailISG: Ol0v1z4WLDuW0kIEjRdK7aNZLqP2nM9.HJMIiwGM9qLq9exh QjFU1_Vj6tpO9Gai19O_EBVz8_61urU7W8yBLIHEeG4EWNDDlk8x32_kQ3Dx gQB_nEBrMoe04laL7zbGJCsdT.p0ZVHXy7aXqVrQEs8X809B8D4yvioR8tJx eQG1OjaqQQoJwWoX4YFH4fNbeg1RQKRjrwgA13ycQRUe1.j0ur3JHmXtHo9p RmGVB40jPieYhd0hT_NCQXcX1bvFjZgdFEKBJWrbs8F10CpOPAUEa0UzXMsH Szzy7hk8x0W83NhEsxl3.zX34nE3l1d0PVVZNaGDj3SSxzWwHEGb1LHE4qOp 2Yx7OGooHd9GSIyhaRPImRajzvS.eWzuCi5A0nkbb4X7yYqsRD1jcXn7lexc B.E2LFnRakhxOGuqBBApUQ8UHl0pFEdRh8UnzkRHU4AjnBCyXGzKDJZuth2r OjNqs7vC8up9JvBdkAhhH1o8a7PuQN6ARiLNNe6EPa_eoYtXiaeCYSpKZ079 Zpntek5dkZn4JBrzTkV2b8mouDr0Z3eoayuHMUleez9_juV_GLsIGiV8VUep lGHwK9b_m3chiJLviUkAUenmIKMGeRehfsTmHsgzcQ.Wg4fVdhdOAYIXz9Uh fkx4TMkQYqvYNKxg6IAkLM34RpoaaRUURS7WxrwNt3atP5N3ig6PhxRghSg1 Q4XxxT8gIsPP1FI9r.mLT3yOb5EOQf_vnbKpDazG29H160eOEHCrpQDeUYiP Qnoc4eyjXtWwtR4ZqVElWKiTH33FZL1XpPySk124PDOwUoyXReu9psYr7eYM gkWnaDQEF.jSUYeovQgumAfUwyDaGfS0yAiFc7SS2GFBgNUuJ1dK8_jLwkZL xV.vYvizFtUKIjKZYvP3pJDTfy5ubLcvECM4c4XLozUIKEEq2smvvxJpjqjV Q36TDEZzTv0nnZTaothanNJj82UMifY_jbFMtyweMDZWU4QilEDyu2MTz2GR 0jExD08zCbHxB4o9I0SeFvN5RCHQj5yS1v_QEUg8.iTcVheMSKIF_BCtOtgy rPxcT8hb_7uI8V1Ndi9uUHBbW3W06YNrsDSHGDeqVnQaxMaUp1coM_rogbZt .oZ1lvNBLpfCBCXiw8ErBD5UDi511pQdoexP88J.4_vkVz1G15ftAxVprUVS KE90gPJDpCqgSZza27QeElFwNTnW9TNdAzjhrHoQJSHd.YvlP1Wyigv__1FO s1JhX2QHvXEAFUgDaBRJvUspbWg7vMkHd2REjFo3.CGeQOgfQmGGE.LidNRp ASlg8WSJBimsQ0oh2z2vvcC7mK0L8SPoIyqw2ATko.Wuv0VgLpU.PA33uFuG LSzyJr7ZGBIwjrufdddngMJbfwNNVLvSuFAMw2pPY7GQhtPKQk6W.lvLUIwy QrotNY.4QrazE5Y.sTt6qJntvR17TVqNDaN3YVQzL3YU460N.vI0cKn53RTy dNxkCLZNFMeApluCvXswnqNq8h0ypro7RVZTBkT.RrunL09yRTxH_mI6zA1e O_muBf2c4mD9qeJu9aBq_Ws2iqQqq8dMWcp1hCCCmMaGgcAJgQlEqVg..iQv GWZT5t4cAy5erAN9O6S1z86_jPIsS5w6EWSUgXuNNJH4CMsv.mIBoDxPzNU6 GbFmt8hSNHnHEJSkRKqXWLaxf3PDnek.l3dsYTipxnUC8T_8K1_.46V0CyK5 nZls5Wg8pP6HNK70XZtUczN80ZtpElOBKDrGEqyMVPWL57_OTg–
X-Originating-IP: [202.181.165.203]
Authentication-Results: mta1045.mail.bf1.yahoo.com from=office.com; domainkeys=neutral (no sig); from=office.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO pga01.vinpacgroup.com) (202.181.165.203) by mta1045.mail.bf1.yahoo.com with SMTP; Wed, 16 Jan 2013 09:02:12 -0800
Received: from pga01.vinpacgroup.com (localhost.localdomain [127.0.0.1]) by pga01.vinpacgroup.com (Postfix) with ESMTP id DCC373D6B25; Wed, 16 Jan 2013 05:43:33 +0800 (HKT)
Received: (from apache@localhost) by pga01.vinpacgroup.com (8.13.5/8.13.5/Submit) id r0FLh6gE006115; Wed, 16 Jan 2013 05:43:06 +0800
X-Authentication-Warning: pga01.vinpacgroup.com: apache set sender to westernunion@office.com using -f
Received: from 41.203.67.50 (SquirrelMail authenticated user test) by 202.181.165.203 with HTTP; Wed, 16 Jan 2013 05:43:06 +0800 (HKT)
Message-ID: <30869.41.203.67.50.1358286186.squirrel@202.181.165.203>
Date: Wed, 16 Jan 2013 05:43:06 +0800 (HKT)
Subject: Pick Up Your First Payment..
From: “Western Union Head Office” <westernunion@office.com>
Reply-To: westernunionheadoffice47@yahoo.com.hk

Western Union Head Office westernunion@office.com REPLY-ADDRESS: westernunionheadoffice47@yahoo.com.hk

41.203.67.50 > 202.181.165.203 >

 
Leave a comment

Posted by on 01/27/2013 in Lottery Scam

 

Tags: , , , , , , , , , ,

“Guaranty Trust Securities” (aka) “Aminata Bangali” (aka) Barrister Mendy Samba (aka) Mendy Chambers (aka) Thomas Woods (a.k.a) Fred Williams

INHERITANCE SCAM – NIGERIAN 419 SCAMMER

ATTENTION: THOMAS WOODS A.K.A GUARANTY TRUST SECURITIES SCAMS UNDER MANY FAKE NAMES, EMAIL-ADDRESSES AND IP ADDRESSES. SOME INCLUDE BARRISTER MENDY SAMBA AS WELL AS AMINATA BANGALI AND (BARRISTER) MENDY CHAMBERS AND FRED WILLIAMS

THIS SCAMMER IS VERY PERSISTENT AND ALSO PRETENDS TO BE WESTERN UNION MONEY TRANSFER

UPDATE: TWO MORE EMAILS SENT BY THIS SCAMMER IS POSTED BELOW

We are in receipt of your name and contact information submitted to our desk by Advocate Mendy Samba, legal adviser and consultant representing Mrs. Aminata Bangali( beneficiary of her late father ‘s fund deposited in our company).

Please, kindly be informed that you have been named as the oversea beneficiary/trustee of the said amount $10,500,000 USD( ten million and fine hundred thousand dollars ). We have been requested to guarantee you as a company that the above quoted amount will be credited into your account upon Spanish government approval of the transfer of ownership of the fund.

We therefore want to guarantee you that the total amount will be paid into your account as soon as the legal documents have been procured from the authorities concerned through Advocate Mendy Samba. Please, do conclude the legal requirements with Advocate Mendy Samba to enable us fulfill our part of the agreement.

We already have your name on our file as submitted by Honorable Advocate Mendy Samba, however, you are required to confirm to us, your bank details and contact address to facilitate the transfer of the fund upon approval by the relevant authorities. We look forward to receiving your reply soon.

NAME
CONTACT ADDRESS
BANK ACCOUNT DETAILS
DATE OF BIRTH
MARITAL STATUS
NATIONALITY
OCCUPATION AND CURRENT PLACE OF WORK
NEXT OF KIN
CONTACT PHONE NUMBER

Thanks for your cooperation,

Kind Regards,

Dr. Thomas Woods,

Guaranty Trust Securities,
(La Seguridad de la alianza y Financia la Compañía)
Suero de Quinones 42 28002,
Madrid-Spain

HEADER INFORMATION:

Return-Path: <info@guarantytrustsec.com>
Received-SPF: none (domain of guarantytrustsec.com does not designate permitted sender hosts) YXJlIGluIHJlY2VpcHQgb2YgeW91ciBuYW1lIGFuZCBjb250YWN0IGluZm9y bWF0aW9uIHN1Ym1pdHRlZCB0byBvdXIgZGVzayBieSBBZHZvY2F0ZSBNZW5k eSBTYW1iYSwgbGVnYWwgYWR2aXNlciBhbmQgY29uc3VsdGFudCByZXByZXNl bnRpbmcgTXJzLiBBbWluYXRhIEJhbmdhbGkoIGJlbmVmaWNpYXJ5IG9mIGhl ciBsYXRlIGZhdGhlciAncyBmdW5kIGRlcG9zaXRlZCBpbiBvdQEwAQEBAQ–
X-YMailISG: mlmt5wYWLDsBoTv7kub8e_ohisSuo9hw2Nscwlv8OFhrYbRk ODugcJfxj326vdVgZCcK0skdlGKcNCITUyy_aW78BgoayfIL9MGIUBmOMOtR bxZkIat5P1t5WGXfrtca1DF36rqYak7On89s9Q3vXsDk3kukHbRaDYlfkKUb UDaJbpf5D7PXhUVsdqvZW1vQrdrBec3p6NsJ3W.O7qtLaDq2tgBkMjnCs5lt ic4eYDs_aVJMm54cwNnCq4kyV3vtCMSNhQVANOSB9QSQ8Y7f1UHoeOfCgeqf Jv3vru5CwF4ilWfxNWiS51yqj21d60k2zJkWk3BMv1DvBIq7leUIbR2HuO7P E.Qo2boltR8XElOztb3b9qHI.GebkLLXB6WiYBo7vJ8S9RbiwMN9DYpxA_zl DVC8AxVtHG4UHLzZ3ybaKsDanj23Oy1EykdqSX6iQI5z1_Of159wN.vM94Hk TtW1XIdHcTVXvRmtp3c4hrK5jOBRvtfgjHEwokT6NKH56pLX6khScvlgltLW lM_xBtkFPnRF1_2rEb2tgISjlQwcxYJ3govFXNzxWoA4tAfckyuLg0CCyWdP 4idbi2Z.INdk.4g.B08qpoUbesWgNaHkhWCCgcpI9bb6sI7PGqZOgFNxXYq. EKmUng7jrOu7pQVTRFQM_FP0Mzx18cinjrekXm_xaPnKbQY3Trsj_NAC1bfh J8yW76ntctWI9SvG3pC3Lm8LH4BF2pRO8r29UNEWAEc3evMTI4O9dg_A99Sj fiV8mVZeRW16Q6DrXTDDS5yoElDnx_wexoDtOw2IWQOcaW.Jzj9KQy0xwrFQ yONxaOvaS47MAM4Xlqf2FobvBz.IW2gaEUK.6yGn4LcN6If8dC4fNpqGkBqt VvqfyhCHCa6szB_cPedSbUblhk54_Vn6WP7bLgHqt671tFfVDYu8e3bGITIk k6nxJDKn4Zk92QqYAtbLKhaw97YhazJjWKEMa_OG8F4HkznfaR3cCEW_izhg I7Y8nhc_YX_rdkoivizjqeCoqXfY2cMXIDTImBtAFWedtVZfrRWvpxoKDMB3 39ImRmNeQvCkz.UYShPtDc8V9T0Tyva.ugv9Zpjtm_5ZQGsV3ldqEd.vk20J yMNRYuUhuC5jEmIfg0yetfYlHVfn4EuEHCt6AtM7dVtJB.5pISLNd4pvonVl RWuHHij_BvY3VP9YzFFuOd4Q.eW5bobqjk3btergI3FPzMvpf9fozSsthL45 rvG6d6AqTJs41p9IGmPhBij60LsjPgL6Mm30WUcs5v4f3wF98bGE9ySBuOum Qsr2Cme2ngZepaeVm0.r1hSPspp1hA–
X-Originating-IP: [64.98.42.3]
Authentication-Results: mta1056.mail.ne1.yahoo.com from=guarantytrustsec.com; domainkeys=neutral (no sig); from=guarantytrustsec.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.3) by mta1056.mail.ne1.yahoo.com with SMTP; Thu, 17 Jan 2013 07:58:47 +0000
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay01.b.hostedemail.com (Postfix) with SMTP id 328C025FB34B for <deleted@yahoo.com>; Thu, 17 Jan 2013 07:58:46 +0000 (UTC)
X-Panda: scanned!
X-Session-Marker: 696E666F4067756172616E747974727573747365632E636F6D
X-Filterd-Recvd-Size: 2607
Received: from webmail05 (imap-ext [64.98.36.5]) (Authenticated sender: info@guarantytrustsec.com) by omf02.b.hostedemail.com (Postfix) with ESMTPA for <deleted@yahoo.com>; Thu, 17 Jan 2013 07:58:46 +0000 (UTC)
Received: from 41.71.190.1 ([41.71.190.1]) by webmail05 (Webmail) with HTTP; Thu, 17 Jan 2013 07:58:45 +0000 (UTC)
Date: Thu, 17 Jan 2013 07:58:45 +0000 (UTC)
From: Guaranty Trust Securities <info@guarantytrustsec.com>
To: deleted@yahoo.com
Message-ID: <733902567.72347.1358409526090.JavaMail.mail@webmail05>
Subject: Respectful: Ms. (A Case of Aminata Bangali from Ghana )
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Mailer: Webmail
X-Originating-IP: [41.71.190.1]

Respectful: Ms. (A Case of Aminata Bangali from Ghana )Thursday, January 17, 2013 7:58 AM
From: Guaranty Trust Securities info@guarantytrustsec.com

THERE’S TWO ORIGINATING IP ADDRESSES: 41.71.190.1 <> 64.98.42.3 RECEIVED_IP: 64.98.36.5

_____________________________________

EMAIL RECEIVED JANUARY 12, 2013 UNDER THE NAME/EMAIL-ADDRESS: BARRISTER MENDY CHAMBERS MENDYCHAMBERS@MENDYCHAMBERS.COM –

ATTENTION:

Thanks so much for your email and I hope you will be interested in partnering with my client with regards to her proposed investment partnership outside Ghana.

Please, note the important information regarding the proposal:

1) My client’s name is Miss Aminata Bangali and she is the daughter of a certain late chief Camara Bangali who died along side his wife during the rebel war in Sierra Leone his home country some yeas ago. Aminata happens to be the only daughter of her late parents and she has been living in Ghana as a refugee.

2) The late chief was a gold and diamond merchant, who happened to be a very successful business man. Clear proofs have it that the late chief has a deposit of $10,000,000( $10 million ) with a trust company in Madrid-Spain. Being the next of kin to the deposit and base on her limitations, Miss Aminata Bangali consulted me to assist her seek a potential trustee who is interested in partnering her in releasing and transferring the funds from Spain to the interested trustee’s country for investment.

3) Miss Aminata Bangali has agreed before me to offer 30% of the total money to any reliable and trust worthy partner to be recommended by my law film. And her line of investment will be decided after the transfer has been concluded and that will be base on the line of business that is presently very lucrative in your country.

7) If you agree to her offer, please do confirm to me and a Trusteeship Agreement Contract between you and my client will be drawn through my office to legalize your partnership and this must be done transparently.

8) There is an option for you to travel to Spain to personally sign the funds release documents as her trustee or send your representative. If you are interested in the proposal I seriously advise you to travel to Spain to physically process the release and transfer of the funds into your account.

9) My client will be made to speak with you for confirmation purpose when you register your interest convincingly. But for legality purpose, most correspondences will be done through my office and that is for the security and interest of the parties involved.

10) As my client’s solicitor, please note that it’s my responsibility to handle the necessary documentation with the Court here in Ghana which will give you the right to act legally as my client’s trustee.

11) Please do be informed that my office will prepare a Memorandum of Understanding/Power of Attorney between you and my client, which will be forwarded to you for your assessment and acceptance.

12) PLEASE, DO BE INFORMED THAT THIS TRANSACTION IS TRANSPARENT AND COMPLETELY FREE FROM FRAUD OR SCAM BECAUSE AS A LAWYER, I HAVE MY REPUTATION AND WILL NEVER GET INVOLVED IN ANY FRAUDULENT TRANSACTION THAT COULD RUINED MY REPUTATION.

PLEASE NOTE IMPORTANTLY: I have made contacts with the relevant authorities in Spain to find out the requirements to legally have the fund transferred to you, but my client is required by Spanish Law to provide some clearance certificates to claim the fund and the said certificates are expected to cost some amount of money to procure.

We wish to solicit your support and cooperation to assist in paying the legal/documentation fees to be incurred in the cause of processing the legal documents and by our estimate, the cost is expected to be small considering the total amount involved in the transfer. My client has financial limitations because of her status as a refugee. Any expenses that may come from you in the process will be paid back to you in full immediately the transfer has been concluded.

I will try to get the total expenses from the authorities in Spain and will let you know as soon as possible. Please, note that official receipts shall be issued for your record purpose for any amount you spend in the process.

Finally, kindly be informed that this transaction is completely legal and the process to have the money transferred into your account will be carried out legally and must be base on mutual consent between you and my client. I am a reputable lawyer and will never indulge in any illegal transactions.

PLEASE, READ AND UNDERSTAND THIS MAIL CLEARLY BEFORE RESPONDING. YOU MAY ONLY REPLY IF YOU ACCEPT THE PROPOSAL GENUINELY AND READY TO FULFILL YOUR OBLIGATIONS AS EXPLAINED ABOVE.

Yours Sincerely,

Advocate Mendy Samba( Attorney At Law )

HEADER INFORMATION:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) bCBhbmQgSSBob3BlIHlvdSB3aWxsIGJlIGludGVyZXN0ZWQgaW4gcGFydG5l cmluZyB3aXRoIG15IGNsaWVudCB3aXRoIHJlZ2FyZHMgdG8gaGVyIHByb3Bv c2VkIGludmVzdG1lbnQgcGFydG5lcnNoaXAgb3V0c2lkZSBHaGFuYS4gUGxl YXNlLCBub3RlIHRoZSBpbXBvcnRhbnQgaW5mb3JtYXRpb24gcmVnYXJkaW5n IHRoZSBwcm9wb3NhbDogMSkgTXkgY2xpZW50J3MgbmFtZSBpcwEwAQEBAQ–
X-YMailISG: pHaLIzsWLDtY_e.gKyglPHLzIFX0iKYcdUk5O8yHkhe6mdvT pcK6bGMYSxLjQV8eYh8QJFKtG.r8Qo4Qnvd_qNGoSmwzIfAkOOeYYk8seCKl dyDth1mOh.04kCn4cjya03mroVfhjLyIawyKarQFUN9sT2WYZV_FjziBTgQu ivvtIRG8DY5Htzlx8hDANUq4mCq5yy7y83_wcXDfXw.NeMnnVvkxK2.WxjVF 2vXGf93HeB.DkaDqprdXtl_tE8ZqA32GBIuJpZJUilxkcdnGfseIyZhpHoJo V7zLpzWRJI9qVMwBQSQeQErdnCkBrktfuqQScQZyjzYrDGXUgtk1Mx0yrTRe 9qhgvRwLyla4Q8ri4S.Ty92SPujwwyJmIJY8HMkVcPH_3Qykb1n1C6Z5qVDF GOfiTxfIn81kFqfut1w8PQHxrx.SbbpBsa2.DeqT.kmcy8nLMXOBaMP5Bvql hBe9wY77RSOigx9BXFCIqMMfnmeOe9MGV_15aaEnAqlBvvN8gEwToPo7zlaK L2dLjgLWGmp7BYKydYp5vmXwzUaLkdGtqBXBC18_PqaDV4s_rLK7_UjoOToz dtl9PI.n.jGYPqs5dqUmbS1466yEO4iAr7PtNYmPHG_9sRI1jYhBw0NIvLaH v8CdV6nZQPSzPw7yBHI2dBbJJOV6yKCDM3MApNhJDGteaa7WFE4KMlr13EwW NbDdyXh.wg7FBDRIDJi5Nk9EEsq73wsA8IT7IsXK7EcjR8aEXvB3FbyxVDsP ZcGK2p9ZULsuBZVQH6gE6eXBf.41EvviHbOZidgQc7Swt3wJ9Csdjm9AVVxd AffNeKNqRlab6xMxTY8TZzHJiw5yaUSnJlsLG7ppsyYlBf6bODYiXNA4XSHY jlr8bMYk653YlhE8l1k35bG_Uu9fdKTnZJeDCWaPx75Us1G8ECTx74JCOoPu 4ix3nGtBJGs4ihhwqZChY5BmUjzSolunjdnBYHin2MMsg5QNcqsowSmYd_3R bkt_Vp9MKO2RDmwrq5X8ZhIipIYd_QYDiIS4UNYCLYtYMRBChb4ZymABPSo9 QVw4OdPCCbkd5nQzFbQPsyQw4zZzY4FSyxNj_Y5ovL8V8.e3N8tsOTwR._X4 GYW1kCgNqh7UdKhzECR9n9TrK_qm9Kw8eV_yqrmM.1ZuqAFdXG3ysAbcuHD8 ZOYBB7yLV7f5oqcM6u4.442ZLZU_FOQlPoyv.CIEDylji_8Qy1g82MfiEIMZ xs6iwF.ACoe3by8TNLuyVFD1lJaMSOp7DSCbw3D7OjzsuCDeQ8QVOKAsB0KQ D317VwbkK0DNUr3zCTJBqPUZEObzGzak9cZVHcdoTrkVHtb3vS8eeqJR_qwK k6q6Ukks8ypcEE0AZSFXom3T.hR6RgCdRNGWF1Uj.kTdtjM-
X-Originating-IP: [64.98.42.124]
Authentication-Results: mta1205.mail.mud.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.124) by mta1205.mail.mud.yahoo.com with SMTP; Sat, 12 Jan 2013 00:16:41 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay03.b.hostedemail.com (Postfix) with SMTP id A54696558173 for <deleted@yahoo.com>; Sat, 12 Jan 2013 08:16:40 +0000 (UTC)
X-Panda: scanned!
X-Spam-Summary: 77,5.5,0,,d41d8cd98f00b204,mendychambers@mendychambers.com,:,RULES_HIT:20:112:152:355:375:379:481:541:582:945:946:966:973:988:989:1100:1152:1224:1260:1311:1313:1314:1345:1373:1437:1513:1515:1516:1517:1521:1535:1544:1593:1594:1605:1699:1711:1730:1747:1777:1792:2107:2196:2197:2199:2200:2377:2378:2379:2393:2553:2559:2562:2690:2692:2693:2740:2890:2892:2893:2894:2906:2909:2921:2924:2925:2926:3138:3139:3140:3141:3142:3147:3653:3742:3865:3866:3867:3868:3869:3870:3871:3872:3873:3874:4042:4117:4385:4552:5007:6119:6248:6261:6760:7270:7628:7809:7882:7903:7927:8896:8908:8909:8948:9149:9200:9201:9686:10004:10128:10848:11473:11657:11658:11914:12043:12049:12190:12215:12517:12519:12663,0,RBL:none,CacheIP:none,Bayesian:0.5,0.5,0.5,Netcheck:none,DomainCache:0,MSF:not bulk,SPF:fn,MSBL:0,DNSBL:none,Custom_rules:0:0:0
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 5954
Received: from webmail16 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf10.b.hostedemail.com (Postfix) with ESMTPA for <deleted@yahoo.com>; Sat, 12 Jan 2013 08:16:40 +0000 (UTC)
Received: from 41.138.183.93 ([41.138.183.93]) by webmail16 (Webmail) with HTTP; Sat, 12 Jan 2013 08:16:40 +0000 (UTC)
Date: Sat, 12 Jan 2013 08:16:40 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <1671574891.295273.1357978600310.JavaMail.mail@webmail16>
Subject: PLEASE CONFIRM EMAIL RECEIPT!!
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Mailer: Webmail
X-Originating-IP: [41.138.183.93]

ORIGINATING_IPS: 41.138.183.93 <> 64.98.42.124 RECEIVED_IP: 64.98.36.5

 
Leave a comment

Posted by on 01/18/2013 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

“Agent David Jackson”

NIGERIAN SCAM – FBI IMPOSTER – ADVANCE FEE FRAUD

UPDATE: THIS SCAMMER EMAILED ME AGAIN — BOTH EMAILS ARE IDENICAL BUT WERE SENT UNDER DIFFERENT IP ADDRESSES — I’VE POSTED BOTH HEADER DETAILS BELOW THE EMAILS.

NOTE: AN ATTACHED FILE WAS ALSO SENT WITH THESE EMAILS TITLED “FBI AGENT”

PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY 

HEADER INFORMATION:

Return-Path: <webxcc14@att.net>
X-YahooFilteredBulk: 66.94.236.142
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: xoKjTDIWLDuBkmVXmCPlfbv_WZIjE5wra.dGk.EGLHd0_Ik. pzXPk3w2kzAxCK7MZDCnIjPAHX4nkOLUWkVgvqANtwsS4AgS4bOVG8Lv99o6 3BMAirzElljzLZY4wdsWw9WleH1CZEp5.UMq53jijuMwtIYd7x.ExSbD27Ot r3_dTsJdFRmlrUqFnlFrxRjc4clsrYTx8MHP8xgBArE0aAgckgmkh_NFaXes eFxkLeTk8B2toXNzOIeea16MI2RpMzkNQqVdZlAbQv9U61_3c.oKDxZ4sV.5 gY8pcctoBsIZGG9tOZpijSRxkY_VNxPwzsIyYElyeo1jXVFkDNpuiHONH_U3 ApMQzh.wDU.jhNuXBYpwGIlhfv9oTEq_hUh8LCwDygA8_4mjrCUa0F.lWk.R FtrDdBD3ltOXTwhRO32pjVB1CPDt6LTZ8YdYZkkguJVLCSNZdLESt5PiVvd6 lGX8smgbIpn7foNPQkAZVH9SBLePPnJ0LgJ60bsjU83T4qfyrukgl9KdXub7 MABdwmieVghKVFJMzfloN9dLl3RNh.YOCUdkfqwYsgMbeNtb5H7_eCFoK7OP D7gfZPsFtVjEXCNrOM0LafoFgGhsN8EKmcfG2ezRE4LEMYJCNNTmTHWcR57P jIP1Um.Sqshw1pFjj1DLniKvydPsCH3Ss_G6feYrvRrZQNOYYsMXe7s4p14o d9cxRoG0dZtitQC0n3nLFx4qiuT2TFhofBB.T.t1sPhZQdnHcBuQzEmbw1i1 xoI73b1xEwHowauOTWfTtt9TFec9QoAuR69SdrMYaMquwaBt.7t3JqTeIs3B V2nXriD8bMHx3ZE7uBxrrmHVS1GX7GYQgT.k3k.6tvB.2iG91etu1UizkS0X 9k4tNRukg_JqZO3GaUA4m9_by.IJ2P6ysrjfW5D4Cdk0a40F1JmzcsALitH5 khgOiV_0COJR5YLbv80xYavNu8lx5CcGP2ls_jfPSGGVbec3_kdLutEoMV3b wnZyd3FgAPiF46OlBp6wWlEU4ArRRbe4io1JVzBUJJyEfH19Rn_rSE7QLov8 CCmTFPY0xi4mWBEnBbzqZMBQ.2BgATYUweIU9yCuYLbnrAo10iRptjeTPSHA kthPnAzgcpRZn8pVoo_4jpjojKgxrTHoXjOlKzuAULhX2atdExaU5Sh_gJzC pfBqTBC04EV5r4qQEO12X4W7YTkZMSgisiCHupFcs9RXCE7u4lBAm7jVSZzk H8UZHkKp6JWDlPMGbgmKLnzIKNn.Uv1xksWV28YWO2S.3H_reW8aFmqzUlYo fqpup8uBX7hERv.02iQgBflO9NRe48RUorCY2YsBeBUqEz3UYD_FL8yNVGz7 wfXDZjkeJwjKpvZjlyR62Bcp6CNEaS_VeNV51bbgrMtOyPv95FYzuVIVQnXa J6AQ735T
X-Originating-IP: [66.94.236.142]
Authentication-Results: mta1133.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm23-vm1.access.bullet.mail.mud.yahoo.com) (66.94.236.142) by mta1133.mail.bf1.yahoo.com with SMTP; Fri, 11 Jan 2013 05:00:52 -0800
Received: from [66.94.237.199] by nm23.access.bullet.mail.mud.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
Received: from [98.139.44.93] by tm10.access.bullet.mail.mud.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
Received: from [127.0.0.1] by omp1030.access.mail.sp2.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 296482.1479.bm@omp1030.access.mail.sp2.yahoo.com
Received: (qmail 37215 invoked by uid 60001); 11 Jan 2013 13:00:50 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1357909250; bh=AMv2pcNcaeNlJVqHQriJ4Ri1HfCs/cWs5cs0YO/zIGY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=dOKri5+JYYcxJT9h7uxBXePMdTKL9LgDJaDxXAXuKXkol/FHCkW7VSrnFN/3MjPpf5yDolF9ISRT3voPGp6JR3IPgQ6gQn09IbTLKDTDiZCJtIt6LZ6Nh5IFb/P7xZF91BeaW6wRFYV9bDF79MeUxbR1nBQ9Uxx+tDmuc2EHvuA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=IJMFPznKpHxDIYQ9bzl24Q3XMLcjmLv3vEQCNFIYPov7S/flRvjby7HCwZuoE1DPiKcsiN1BxsM/0aotpqOdM0QTrBTCejq8SrPEheI4TCwU7Ow9eW7VZcnTNDZH4zvHDSWPf1dZ4Lt/aiO8S5x9o4N5yeWcTXUfe7p83oGb8hE=;
X-YMail-OSG: TDmS3ggVM1nfAjpQSEiVdV88KjCqKzlApmBtrsiihrc8lyv SQXEYaC4icuKbPOXdw0EDFm2oJY1QxbTQ9LQNzqiBT8cLE1ctrswApbp5smO UN.d_cYwa7eVA.2gprfdTU5BLUnee57BJB7mmSZ6cdmaK0zaCmqtEjZOFNCy IEjbDJzhAllb4ufC.JkScVlCUEAYHdm47QsJ29uunh.nwHbpwD5Aqc7OZPRd g1HSfA.SpgPudxZKy7x5x9C1zF5i3wRJiGN.hUGxF_orR7J1wxmW6uixQ4Q8 HcuUu9Inx20Xp7X1gWIXpxSKuGG2i5sX2GIEe.jDAXtXKBES6vuBRUc81DV_ WU8Pu2Bzqt5ECCkCZyrlYveBNfRo2anoYH00EU0JO7uvnmLlC82wp9tEtKHK F0IlSIOGPTMvMsscdUYj79v3PD3P2dZ.SuKoSdB.9fq5nJK1xTUKEg6T9jcI 9PgL80ABFGZFlkHIbPNHXy_0Qku6Wbj0YoV79stu043EWcSjVc..30TYjf_G ZyVd1eNlz
Received: from [72.64.146.136] by web185002.mail.gq1.yahoo.com via HTTP; Fri, 11 Jan 2013 05:00:50 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357909250.70203.YahooMailClassic@web185002.mail.gq1.yahoo.com>
Date: Fri, 11 Jan 2013 05:00:50 -0800 (PST)
From: Agent David Jackson <webxcc14@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

Agent David Jackson webxcc14@att.net 72.64.146.136 >< 66.94.236.142 REPLY-ADDRESS: david_jackson141@yahoo.co.jp

___________

FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY

Return-Path: <webxcc14@att.net>
X-YahooFilteredBulk: 98.139.44.167
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: jjzWyiIWLDvQAq1bz5qLzCO2.QJuQdBJN6zZ8UglWMf8e7nM 9jdFsjujbwAPbjhWkM9RYr5QgmMx_7ksYyMP7Jjs3XZYq8QJ.JOCflql1Phg uIEC1jKdcia99ibuuIZ1iyTS.YAWVHLQm773M33.9zH3akABbi3OAxcFZdPa _TyUllSVHN5uC3.lOCrpSjlvoHAKplQ8reqYGh_wUeyz8biM7zko0f2p3pdz bZsUy.1wsFHQaiIztozIyIdoXX8_dQr9O0DwjrcYx8_mrsoohQXDmv0Qd0F7 bo.bDYicT6riOqq72kZPXTe5UREAcMQnls_gqnDfYn2tNUkhIP.JFtt3kFOD NQ1lhN3.C2p0oKrVYvZPPwJltKHjidAvCn4Q8ihWax_B3SnFA7QB73pYOvjy mJmU_WrXbJXxa1H3lKu1OYy8eYc5trelPUzNd06xUgb5u.q4lsRv4pEMuhlC 3EIjl6qhXHmCkyjNzL0guKnsS_nNfVyv6IhA_UoAdGURE8PYvSRu.uKVpE5s PuFvknOdTp5VKOqZlPWZRtIwAFiiuFeTyBC7d2LpH8MRTjRMq0LLXjaeDRRf 27t1hfEygTEKI84MjRY31u6pEyJVx_f14A14xGLL2R8a7nBQnoTZ6xqa2PVy ifE_vufn7zejkeijo26POkYD14lPWROAf34bIoR6VvEMzvGGmgldWYKtP6_T OdwC8QgTaGzINGVLw.oBXZ5QLgJjOuRIwZ8ZglAmJKEmuuzzOp4khM4oIbwN Xm0i_P90x5x8kAmH8507dNT2yBBXcT2C0nj_gWggOL8NO9LfVtPUMC_UPviL GfefUvwQgd73k4k8woYRnAC5xVKMX6DZpW1mACwOFYmO3ukpLYaih0AW7ZN2 WGty8iF7Ra1AQp0HRbTxBV1uNd13_qvS8BpSUt0FxtwWBk3zZuJmd8ZdL1EW Mj5JrL8GFK_uz7NU71hIndLApqMh453FEbGnqUXiDVvaIPzku.a1ncAWuacT xHju1mSZQzcrmbN7jHnFzE8inD6aIBDf5BKcN7xa.w.KsGbrgwHT9dyTWCiB U.oXyIM72g4dZkOOe5WYd3MIpUw0a_YM6Lv.X.4CzTJAALD0jm5_ffFE4hzX UIusKF5370W9qtmDSI6cpy59NfzqeNA8T1FVQzuvHCzSV0IbXk4Y7LyOPCOF jYe7w2CWd8xrD2EBt.d5BEAupDSqk9bUSxQsNtDD_eN9Cq9Ka_NEMmnj2y6l FY.ygqon9EjdQ0HJdOB8CSLRsd.OpSSwWu9h0JRBaFxn4gZebvUrtEAWma6B wV6WwPJGCV1rsIa3NaCj2xumef.yT.F73q3WzUWX2qU66IvuMLYSHN5qNLmi 42Ez_5GDASpIpdzYuA_x._xh1oo-
X-Originating-IP: [98.139.44.167]
Authentication-Results: mta1045.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm16-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.167) by mta1045.mail.bf1.yahoo.com with SMTP; Mon, 14 Jan 2013 05:27:27 -0800
Received: from [98.139.44.105] by nm16.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
Received: from [98.139.44.73] by tm10.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
Received: from [127.0.0.1] by omp1010.access.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 252445.15343.bm@omp1010.access.mail.sp2.yahoo.com
Received: (qmail 27093 invoked by uid 60001); 14 Jan 2013 13:27:23 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1358170043; bh=Zm+DJwrwGZlIA/LG24aCrFEpyMJ8dMFzxwrXD14xR1w=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=5ml0Xm3/BrZ7EuPmGpWRgsPNYtHEUNpHsbSSLkkKDgu0u9cI10VSDqgFfoGsE2hrjAML3CC4/aUra7VOYh1GwZZmELiL2PnYvSrBDs508LqoJo0Jk0c40hixsaQO+7NRh0ui3n9wKVixAzfuMuBORXUz4isAM9Uj2r8RRq2OPvo=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=5Cl+v6lPr2mrClM1Tr3uoEcxJGT6po046oHmJqVXsidvAjGm2h818ba09wHtcX4h6be+zslui+s2f0LUbzuCsqrDY9DxKTWX/P0a5jX1HE5fg8cg2gWioTCmUnizj5Hnpk8JXnSQBmXO05ybxFll6OTtEZ8KJfQhTw0INVCPdGE=;
X-YMail-OSG: .au7dWcVM1mjbQkta19wLaNG8g565zmamCIhdNrIz5J4oiR Ei87Eg4zRlKOTdWciw.equT5lByIRZtVJfezeL10GmmrKTYeitYPptLbUICU 3Anf.JK_3NAzOf99bdmAe2djTDVFpgkFD82cg4kjZTZjr5gofpaquzxJRp3i DRy5pvhmKi0SE6TRfn1x7wsGYnfPcKA3cWENK_oBoLL3yv37iM860nmaqUCk ppgmkkgx1JZEmdnTtvjUzzdkfWPoN_LLOJiuKRtHby4bABJGJwhzpQEebrFJ 6GriB_Yhx74xtLzYjZL3gtysoUF0QZN4xJRBYjkGbB_kNsbH_XjgdYxlJFzs WOYEZ0HTWXt2ZO19n_285v1Lpod0jDlJGke15uWv2QkBAdb8npYY0TJpxV0u Gqj4IxurvaVeU0V1zj30cyHHuIeX4sW_mftM7AI3WRXykHTZiLe.e4mZ8PJW 9krGUKD5CM.vs2nGKr0tUFPFhuaZ1B18Mc.me7eflQ2zq.F92sv8c2mNAADB Qbpuzc04-
Received: from [64.72.78.27] by web185001.mail.gq1.yahoo.com via HTTP; Mon, 14 Jan 2013 05:27:23 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358170043.12150.YahooMailClassic@web185001.mail.gq1.yahoo.com>
Date: Mon, 14 Jan 2013 05:27:23 -0800 (PST)
From: Agent David Jackson <webxcc14@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

Agent David Jackson webxcc14@att.net RECEIVED_IP: 64.72.78.27 ORIGINATING: 98.139.44.167

_______

Message contains attachments1 File (36KB)
FEDERAL BUREAU OF INVESTIGATION IN NIGERIA.rtf
PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY

Return-Path: <webxccccx4@att.net>
X-YahooFilteredBulk: 98.139.44.169
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 9LjqTrgWLDsWa.HbSNWNBH8jAOpaObL1Edc7fNdmRImcUBZv xZofYsr2bdMW1WQHSWtYRWXFljhG0QgPPk.D7mX2yHJMul_Vd6cPN4lzpqBR QObxIsLNz908K0NbbkGfnPzo77OMUH6cdcV4k3GrPli1vAdxeFm_iNCu4EDE FIohu2_hWwnjV9DF4dxpCK9yrXrnp4W7oLuqKByLsWDTXHH6PuvHUZ9HRRDl InKZ3SeEQJ1Ruj8sAnn2stoWc6z4W3KN2OPEA7a5uUjI5dzAM21Xj1uOGpKn PmSpxJRQPUhDOK6xgSRVwyJxqFSS5akOAejt94XnGPVkOcdxHVZuK0VxXlpb aD1YL2o6EPhq3kXV9S1eje77SfpxGupfC4WxqpyyuWTyI38uHjGGkQoK3992 yz7cogcpQzLdN9xoT9jYkoR9VGRUHMeY36p5xjZai0NB4CrYoNSaeXPCOWz9 4fRkfNe_WL2yLRLLYbyQhCJ0UJvG8yqZL2BE.9kW1SCfI0pt.25Kqw2tZ2Sx H8lRk0x5_GRlZ06JVi1AqY21IHiD5uwSxqPliBBh98MJ.xID7VjJTa9nlnTk HJr8QB5cLaID3qIjqNk1TtKW6GXe.c7lDu3EdhMMFN6V1Eu6h7_HWdUegkgw BLcuC9zufbTkI5Q1A03yx8bbdtfB1PtDR.FkI8LtsxChfPPRp7jP20Ql0Akb 7qAvyLlGfPS.Em8lyeU67O5P2NZR8hhQqnykedIJ2jU7X1rhPpFDhkyyDGQD RhIG3n76WgTWbxraLq337f4HO8U.CZkBxLB4vk4nNGHzwNBy9WkQoi8PaOxy mttNuXtL5PTI9BzPEA57na.7RC4HxDvsk.vrwy2TM9TKoZpvtOlZQN3R11zc 4Sg8aWHhUgbKGr3uLdUDb6YO5bfdhgW_5irq_AFLOV3pF0KgJPKaFVK32Zsv gpdAFBGqKnR4aVtz66hNwydDm8MSTEveB9s36Um1t3KeRpi3r5dzMWbIrMdE h7uhz4Lptww7j34aj5BEjFYZWAFOquX54B5wcukO9m6Uh25R_TmWAywlRYkU R.qQMKfyzIoeOyIH2.3LrhEnVI2eJgi02ubeV07iw0AxahIbojmQgKC_4ykW lA9Et8DKXwa8AtthOC7iTi_u8GVYySxoQXybEeg6YJZy54nVe2S_i3EBEuoX Kglb.lN7Lb8mnxfg2Va1gc5C87kw1Fao1EPlxuW2lFHw7TFBkPztB4gqXZ53 yyZVMfuJNVH0MqwFKzHmlMiOnvSzUAUeaQdPJw7aLMQfmhaw2GAGhai1dXgv mt0.4i7IWKBrgvWMq33efz2j0eP3j__qyRDv1KvA_P8s3mo_km1zL9AxVcJz Ck5iaJSS4FgdahKCBDhjVVOMDzJHUb32fHn._RHdHjVfeVjCdOdqGvaxffXR nh_xZpfMuA–
X-Originating-IP: [98.139.44.169]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm17-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.169) by mta1285.mail.ac4.yahoo.com with SMTP; Wed, 16 Jan 2013 05:46:47 -0800
Received: from [98.139.44.97] by nm17.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:45 -0000
Received: from [98.139.44.66] by tm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:44 -0000
Received: from [127.0.0.1] by omp1003.access.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:44 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 938289.74941.bm@omp1003.access.mail.sp2.yahoo.com
Received: from [216.171.90.22] by web181401.mail.ne1.yahoo.com via HTTP; Wed, 16 Jan 2013 05:46:43 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358344003.16284.YahooMailClassic@web181401.mail.ne1.yahoo.com>
From: AGENT DAVID JACKSON <webxccccx4@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

DAVID JACKSON webxccccx4@att.net REPLY_ADDRESS: david_jackson141@yahoo.co.jp RETURN_PATH: webxccccx4@att.net RECEIVED_IP: 216.171.90.22 IP_USED: 98.139.44.169

FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

 
Leave a comment

Posted by on 01/16/2013 in Other

 

Tags: , , , , , , , , , , , , , , ,

“Barrister Mendy Samba”

INHERITANCE SCAM – NIGERIAN SCAMMER

MENDY SAMBA also known as MENDY CHAMBERS and AMINATA BANGALI has sent me three more scam emails. I will post them all below and include the header information for each email. (Note: The scammer has used the same email-addresses and received IPs. However, the Nigerian scammer used a different originating IP in each email.)

scams_target_you_scammer419

FIRST EMAIL: ATTENTION:

Thanks so much for your email. With regards to your lawyer, I don’t see any reason for your to contact him at this early stage as his services are not required at this point. But when the process is concluded, you will contact him to process resettlement visa for Aminata Bangali. The necessary legal requirements will be taken care of through my chamber.

I implore you to keep the deal strictly confidential, while we try to put the necessary arrangements in place to legally have the funds approved for transfer to you. To kick start the process, do be informed that I am drafting the Memorandum of Understanding/Power of Attorney between you and my client, which will be forwarded to you for your assessment and acceptance. The said agreement will legally protect your interest and that of my client and will establish the details of the partnership agreement between the parties involved.

I have briefed my client about your interest and she’s excited and looking forward to the adventure. I have given her your email address and she will be contacting you soon. The company in Spain will also be contacting you to give you the necessary guarantee as we progress and we have already contacted the company about the processing fee and we are waiting to hear from them to know the exact cost. Please, note that you can verify my client’s claim directly from the company by quoting her name as next of kin and quoting the deposit certificate number. You can contact the company directly on the following email address:

Email: info@guarantytrustsec.com
Contact person: Dr. Thomas Woods

Be informed that your commitment and reliability will be highly appreciated. I am using my office and personality to guarantee that the transfer will be carried out smoothly and securely once we meet the legal requirements.

Do kindly confirm your contact information in the following manner required to process the MOU/POA.

1. FULL NAME AND CONTACT ADDRESS
2. OCCUPATION
3. DATE OF BIRTH
4. MARITAL STATUS
5. NEXT OF KIN
6. PHONE NUMBER
7. OTHER CONTACT DETAILS
8. COPY OF YOUR INTERNATIONAL PASSPORT OR OTHER IDENTITY

I wish to use this opportunity to let you know that your honesty and reliability will be highly appreciate and I will ensure that the transfer of the said fund is carried out smoothly without problems of any kind. I am only doing my best to assist the innocent woman to ensure a better and more secured life and I want to believe you quite understand her situation clearly.

Kindly get back to me within the hour with the needed details.

Yours Sincerely,

Advocate Mendy Samba( Attorney At Law )

1ST HEADER – INFORMATION

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) bC4gV2l0aCByZWdhcmRzIHRvIHlvdXIgbGF3eWVyLCBJIGRvbid0IHNlZSBh bnkgcmVhc29uIGZvciB5b3VyIHRvIGNvbnRhY3QgaGltIGF0IHRoaXMgZWFy bHkgc3RhZ2UgYXMgaGlzIHNlcnZpY2VzIGFyZSBub3QgcmVxdWlyZWQgYXQg dGhpcyBwb2ludC4gQnV0IHdoZW4gdGhlIHByb2Nlc3MgaXMgY29uY2x1ZGVk LCB5b3Ugd2lsbCBjb250YWN0IGhpbSB0byBwcm9jZXNzIHJlcwEwAQEBAQ–
X-YMailISG: 04m5KF8WLDt9dnxMwru_HLy2sSrgLReVAcDiwDIPzpbEYTGf O7z8zbwixEjRtXDkiSQUs6VcvO6iyB53Bkb.oykn3qbCLcoIB6iIQyCAQcHn V_OhckVZ.aksC5gfiEvSjoVCjwg7bi1QX0m5pl7wxXy.EtPYskuuC3BcGxJq brJmJopk4pfinlDZvQWNL6Oc76k7hyq1tePHdvj6eNNteTK1accRm6PUjt.U gJDFNWPFFbybxhdcE1HA1LVRJvY1NQAcj1t630BbjJjarC6nnEaTVVIcfpQT er6YtiVb8oheGLU8CHvjFz45hTR1_k8FEe9FQWs7m_NF4xQRp3GzNVdwpiT7 WAuaBYqEkotAKosBNu4yIkidDEiW21FPPilKiifix.nRsr.OvWsJ3ITfxap_ TTO_Am_baq9jWWqC8MiaQcAbhkxdnOFD8s2ejl4Zau.D41QiOWmhFHyfYiog TxjjDGIzZF5vrE31Z0PVeVSdm8jPolkneCTSvDx9AGefuqZ2rxGOcCbDG0OF C_ZX.kmoHEHnvjddHAQnEkcUoHpPYZY2s.q2ZAUsW0VVGWuv6DvmZmCPItFu CBlPY.YslBLY3tlCqg1kWOpG84QLD6c3WbJG781s5CPFpV_A0DqrQ7X9GPQV z1JEh2qnxWwlzQzqtdRknKEvkovPj2PC1hmnaFkOhSPj4fXlEnuY9wqFzY21 m.S13mK._4W1ELitIHMuDf5x13FBERdMJ_4_bHCIvGsZZNbbRf5CZBDhvye9 plIFahkJA_ZRgeajZnm5YbcP97FWqaFgETl3qq4ahI_mGKC4j06fsclgGPqO en06EdIb7B_TnatgAsV1gOcIIMrAmUkdwxm8aeVO1_mYazrsEuC3uno48wp8 HF_Gmm5nhFGaE4i2i9w6TgJ9zuJXzmf9MDiL08qEi0uNb02qS_QRrnUj.YJi ulO1a87j8vqYxdl.6koj6R0gYpnftZDOA_q3yZLDoRxM6tvkgDtrpnUiKDUJ EK43yf0ePPFXprNLKtlE33xELzq293lPZ18BOXQLS0pa0rt2o.nodjEdh4z1 bcrETtiq0pik3Is0VVE.85cnIoJC8ZzO4Q.eKVazIorivI8_u3op4JhbiVLZ aw5Bi.dVLDDWN6MnQUGYb9nnSbhsutUBjuJ6Wt2v
X-Originating-IP: [64.98.42.5]
Authentication-Results: mta1277.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.5) by mta1277.mail.ac4.yahoo.com with SMTP; Sun, 13 Jan 2013 06:27:15 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay06.b.hostedemail.com (Postfix) with SMTP id 451315E9F8 for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:27:15 +0000 (UTC)
X-Panda: scanned!
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 4469
Received: from webmail07 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf08.b.hostedemail.com (Postfix) with ESMTPA for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:27:15 +0000 (UTC)
Received: from 41.138.179.177 ([41.138.179.177]) by webmail07 (Webmail) with HTTP; Sun, 13 Jan 2013 14:27:14 +0000 (UTC)
Date: Sun, 13 Jan 2013 14:27:14 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <1916237468.29168.1358087235091.JavaMail.mail@webmail07>
Subject: Re: GREETINGS FROM AFRICA( More Details )
X-Mailer: Webmail
X-Originating-IP: [41.138.179.177]

64.98.42.5

_____________________

SECOND EMAIL: PLEASE, FIND ATTACHED THE DEPOSIT CERTIFICATES OF MY CLIENT’S FUND. NOTE: TWO ATTACHED FILES WERE SENT WITH THIS EMAIL TITLED “AGREEMEN 101” AND “CERTIFICATE OF DEPO 001”

2ND HEADER INFORMATION:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) RklDQVRFUyBPRiBNWSBDTElFTlQnUyBGVU5ELiABMAEBAQEDdGV4dC9odG1s AwMxAkFncmVlbWVudCAxMDEuanBnA2ltYWdlL2pwZWcDAzExNjUCQ0VSVElG SUNBVEUgT0YgREVQTyAwMDEuanBnA2ltYWdlL2pwZWcDAzY0Mg–
X-YMailISG: M0bKmoIWLDv63kKzxOEndptXp.7zvC0TJUVBOwfWgk24Wvc0 bi7PgOqwK0A9RE6NhtraNE_SZowuJ31bixqsmyDiWNNWlZcM.o2_pzjLt0Ia H7sJksHnQ_GGvyfzwSQ9PKZJBmlZl8Aw5WOy5LEq1CqgoFr.FMXz_.wM51H. LAjMuSnYvvuQb9dnVd6RYYRNrmW9QHxCsKDiGzkPQMEF_15Nwdsbb_iZ1mop 1GJry4lVc1UMYVcURhKVeruidysBeiCg9Ks_lqUDoUCyeflAaZRjdcSFRhzD HBtrM68fAExh0601NZrjsv9gxhh5c_KULam1Ql6R3rg6tISy0_lvYTkCI22Y 92v6XlHWLVsIj5FLm0gB6Hy5syepXygpU0ccub4BzJsEctoMixLzK1.vdQyG GaxePaw_Ph_55k9pTJJWBCtxGMD9374mys.gF4rmhGaakicSSr.evJ0e0kW9 rVBUvPjWEw17yErVJE20zz78lLhCeb.yhvLw8BFe7EUFGhXs2Lzna6WPmd0w rcNejoHTq7uXu7MSNhd_x7MUBLlYxQipy9_bZQtUTc5YGzaCvvCKzGLPCIso u0DovZ2CiWPkYBvBJDBVKC2uHefv41rCje6VV.4bHzt4DmfQoAnPJEn6zLio uWwfRB_f3fhoBtiByP4aLICJaEEqcDbNAE7X2u8v0aO1hDQQ.jGRjIMkBVdv jibyKiMT_nESBTk5jIxbHVW5SNitSOTG1_.6xOXFXaz7Ws3Gh2caj5dQxleQ 65UHSPdk9tB266Vv3nUJ1HOVtIgZrEU5EsplZ4blV7Pqa_AQ041jTLGrUwQd GhKN.Cm1e4Y0885YbwBCEOZwks2gbzEb6KNzwJ7lMHCKbNz8RI2EWTED2GJs 9VwrYWJLBf_UE0oyxwajhR.k9tCG25X3nkPAm4aNbp8azLw2lXhjnrUu7azQ tYrugQVhK0FB4PRvOtvdS_h72lUGQw9KVfizt5ISed7Sa.Ch8d52XIiN2844 CQ5VbaaK_tkIlLELgiWUqbXR7WzguxN2JbJ.lyl5BG_70QJPaGe8jgf7ohQD 6bIFazaSlL1R6jgaWypgCSj9IVreoSYuof6l4anLT_bNLaWm7g–
X-Originating-IP: [64.98.42.67]
Authentication-Results: mta1270.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.67) by mta1270.mail.ac4.yahoo.com with SMTP; Sun, 13 Jan 2013 06:29:26 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay01.b.hostedemail.com (Postfix) with SMTP id A8943146A059 for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:29:26 +0000 (UTC)
X-Panda: scanned!
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 1875701
Received: from webmail07 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf10.b.hostedemail.com (Postfix) with ESMTPA for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:29:25 +0000 (UTC)
Received: from 41.138.179.177 ([41.138.179.177]) by webmail07 (Webmail) with HTTP; Sun, 13 Jan 2013 14:29:25 +0000 (UTC)
Date: Sun, 13 Jan 2013 14:29:25 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <619678690.29189.1358087365863.JavaMail.mail@webmail07>
Subject: DEPOSIT CERTIFICATES OF MY CLIENTS FUND
Content-Type: multipart/mixed; boundary=”—-=_Part_29188_651041165.1358087365783″
X-Mailer: Webmail
X-Originating-IP: [41.138.179.177]

“Barrister Mendy Samba” <mendychambers@mendychambers.com> REPLY-ADDRESS: mendychambers@gmail.com ORIGINATING/RECEIVED IP: 41.138.179.177 —– 64.98.36.5 —— ORIGINATING: 64.98.42.67

____________________

THIRD EMAIL: I am attaching my passport copy as a reference NOTE: an attached file was also sent with this email which included a fake passport. The title of the file was “Mendy SA”

3RD HEADER INFORMATION:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) ZmVyZW5jZSABMAEBAQEDdGV4dC9odG1sAwMxAm1lbmR5IFNBTUJBLkpQRwNp bWFnZS9qcGVnAwM4Mw–
X-YMailISG: zPVv7I0WLDsu.s.Ysyspp4f_fWriIeE68pg9psqNgVdRguDo _rLQvGuv4_Cg60ZSt.2HHOivooPysnmrTAAY.uShn6fuPG3svNTC0oKB6CFr S6TLBL8al8ZilKn49KLgeTzFD7eyhHDJQ6QwJtIpVdoQM5ZM0ghFfj.5GZQA hU5pEH0JuLu7L_bhN2OVCU_r2D5VpbCAmd9VVxkksJnwuaehbcsE1pkLKGxE wai4CKqgOyDLxN._ZJjreFiRFXbuvydeL3fT.wx5nCc5XF5g92KYrNTLz3o6 QP2kwNLbKvi2WEL5OlOSMgiXQiK5GzMBCFSIFlRWWduzWrpj9Aog70AaF_tP zHfvKMq0pe7uyQEvtzDi86M.anVkf7ymwnL8qRnXTIdNWXFYy4LaFSwy2NKJ 0CsY2JPGuyzNIuGI0gKqSUAvJq9R7vFJBVqbIjSnWfKz1KHWOFIWJdsNFnRu cLsxWvdVpzmZavMXPvvvoud3r0XnkLrP8uyCZ_hXEj14CeBj9ag0PBHQbs_X 29kvABmn5Jm9vxZV0hLi8d1yF6__CITi88y2E8_nkXJVFlmJuo4R54.G7Nmx 0YuCbEazsx8kvEJbDYkP5CKVIHrfFO3kSCQvi1EKsHp4Ik8BXcWb_MWkEUti FlfUuROEqERcXFIA3qHp07xdfjxo.5meRQahcxrlORRYEqJfKMJ2JfmwT23O PIN0i8vEuFe8jXJZQinTAs777783ISg.DlXIzzK4HnASLAy.Og3tsUake1SN Tyk70oeA1WenNH120U08ZWyVTc5ainc4VJ64eBZnJ2G6J4BD7MvXoaE9PCK2 GP9bO_mS6RL35.TaHW5ZjM7g8YbgNf4GmvelNaAytPrqGwOPawaNEuvPewKa t3wEYSdOqmkPFXo0S2d2cUhtZszHyZMVFhNJfQ.v0jmGN3gW5ptIrLa302Ob igESzqyKtB6ae42uoFqWzH7BL.cf5Gnez3JZp0xm4NsrWsI.w45_xmuHoh0x Z4836la.CrYNKahtjpOUQx.jwG3apAWfXPSwDUJkYOd.R6PaHrn0LBHSg6bX RDzwXfADW5yMl3fl8jQDqTvTzUl1xnq4D_Jp6O269mk.t2ZXJLKtckGcMjCX BYniEZcDcg–
X-Originating-IP: [64.98.42.164]
Authentication-Results: mta1171.mail.bf1.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.164) by mta1171.mail.bf1.yahoo.com with SMTP; Sun, 13 Jan 2013 06:31:00 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay06.b.hostedemail.com (Postfix) with SMTP id 4B6875E9F9 for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:30:59 +0000 (UTC)
X-Panda: scanned!
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 86929
Received: from webmail07 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf07.b.hostedemail.com (Postfix) with ESMTPA for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:30:59 +0000 (UTC)
Received: from 41.138.179.177 ([41.138.179.177]) by webmail07 (Webmail) with HTTP; Sun, 13 Jan 2013 14:30:58 +0000 (UTC)
Date: Sun, 13 Jan 2013 14:30:58 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <1490255423.29212.1358087459089.JavaMail.mail@webmail07>
Subject: =?UTF-8?B?TXkgUGFzc3BvcnQgQ29weSBBdHRhY2hlZOKAjyEh?=
Content-Type: multipart/mixed; boundary=”—-=_Part_29211_1002852497.1358087458957″
X-Mailer: Webmail
X-Originating-IP: [41.138.179.177]

Barrister Mendy Samba mendychambers@mendychambers.com REPLY-ADDRESS: mendychambers@gmail.com ORI-IP: 41.138.179.177 RECEIVED IP: 64.98.36.5 ORIGINATING/FILTER-BULK: 64.98.42.164 RECEIVED_IP: 41.138.179.177

 
Leave a comment

Posted by on 01/15/2013 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

“PGFA | irene elvis”

INHERITANCE SCAM / CHARITY SCAM – NIGERIAN 419 SCAMMER

fake-charity-scams

NOTE: The first part of the email is probably a automatic email sent by a website and the scammer used it to send the below part of the email.

Hello,
I am sending you this invitation to join “The Pakistan Game Fish Association | PGFA”, PGFA is a non-profit organization committed to the conservation of Game Fish in Pakistan and the promotion of responsible, ethical and safe angling (Sport Fishing) practices through dissemination of rules, information and fishing records, its a group of like-minded anglers who have come together to build awareness on ethical standards of angling. Their charter includes a special focus on a catch and release culture which shall ultimately help in the protection of marine ecosystems, and Pakistan’s natural heritage.
Each of us is capable of making choices, having an opinion, creating a positive outcome and being a proactive member of the Angling Community of Pakistan.
Lead by example “Join PGFA” its FREE and encourage others to participate and together we can ensure that the Arabian Sea we have been entrusted with continues to teem with life.
Click Here to Join the Big Catch Race
Custom message from “Sender” to you:
————————————————————————
Sister irene

surprise since I don’t know or met with you before. First I must introduce myself
I am Mrs. Mercy.D.Jordan,a citizen of South Africa, I am 45 years old, I am suffering from a long time cancer of the breast.from all indication my condition is really deteriorating, and my doctors have courageously advised me that I may not live beyond the next Six months; this is because the cancer stage has reached a critical stage.

I am married to Late Eng.D.Jordan, a Diamond merchant here in Abidjan before his death on the 19th November 2008. We were married for years without a child. Before the death of my late husband,he deposited the sum of (6.300.000) Six million three hundred United State dollars in one of the Finance Security House here in Abidjan.

I want a church, organization or good person that will use this funds to help the
orphans, widows and the less privileges ones that need financial assistance. Using part of this money to provide facilities for God’s work, l took this decision because I don’t have any child that will inherit this money and my husband relatives are not worthy to inherit this money, it had been their wish to see my husband dead in order that they might inherit his wealth since we have no child. This is why I am taking this decision, to donate this fund to a church.

I don’t need any telephone communication in this regard because of my health hence the presence of my husband’s relatives are around me always.

I don’t want them to know about this development and l know that With God all things are possible.As soon as I receive your reply I shall give you the contact of the Finance Security House,I will also issue a letter of authorization to the Security House that will prove you the present beneficiary of this money. I also want you to always remember me in prayer. Any delay in your reply will give me room in sourcing for another good person, church, organization for this same purpose. Please assure me that you will act accordingly as I Stated herein Hoping to receive your response immediately,

Your Beloved one.
Sister irene elvis
————————————————————————
Thank you for your time,
Team PGFA

Return-Path: <ireneelvis805@yahoo.com>
X-YahooFilteredBulk: 76.12.210.180
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: WuOtpS8WLDuGhOONoV91LCzRasn22tcFONvHO8gT4O6CD4h8 Iiu3nug8Ssjsw91MxmAiXC5k8IxN0SRuEOhiCETJsIX14_K._BK.xuJdzOgj x.ekw14u.6L5qxrk7S66lXhpluVCJNeujOgANgwQNKWB6y4FuNzKCofVMe2R eb4jlwtFpxRDbgiwQacI2Ff9x2xP8QGZFfKUjUAz2K4wldThAjQj4D8GZMl. _StWnbKQhAeexVrAKsbfgYsGsVt2WFJWOYU3voageApt4WWsfJrEhQUlm3YS 0Z4FelR74hIIMvg0aYIqn1ngmQCHj8uSK3.Skb8mku3kCJ7S03YXyJu4bU6E nURibPoh7pzUdYgLv9OjTx360s1.sIqp4BHaIqU0iGVVmtBOpLRv4XeKfmhc egv20jeps4rF0wVmT4xvvf82kKpeMkmqHrePK7_wdM0BINTqC3tZHBMRoZ_B KnIIlfv.z5PHmXJqr9XeYwHFtVPEXhLOaiVg0H.nIxGOYdK1Zl3_ViOD5YOH z7crqHhuXPC.583ABupIODm3Mg.u2r13bBwlxmtE3G6Mz1azDEV1dGdQCWS9 TBWaL6QkMincQcLB1Xxtgc0ySfApGgvX_m3nOWyI.NG_p4.r58G3OZWv1olp SQHfwcph_8gT7_3t7S0XxsXBAKmQN8_wmmcs5xD.kSj.Lg0ryZwHWnKfu5Z1 gupy0.VBu5lR8HVlTKy3sT4sBPX4fnerlLIsH38n4UKLLgPTbo2HKXUcTbaA LYoKS8KySOWboX1Wiw8jhhmGwX1XQ.dQFiSBYJztod_mJFv4excQ_e.k0v8i j68glcqpMaL1Mu40eNOyXySpYqj3Rlu.lKlDeVjUSgAhPuHa0vO3AO886uG5 8lfcWzLmIRq3VOpvlu_KVAtsRrn3EZLmolAhhB9Wlk.JHkguVjgae1BOHJVd k5T9v4dXzXk2eZj4K3WhEoW0JYhsx.wHJK5pbNxLvzx9tfFQtdVFITs4NAin kn8g5dgMUbuLu9oTRbEGjsKZ6oMZRJdeWCFGnanfAK4FhcjlC.oBslb4M130 8hq9.3g4jzEsajwmWxMmxtWQduJWvJ54DKpzPLa10c8ayih1puCq7LxA8Rh4 MGSfNVJD83M__sfApw_KqEE6p9X1OiXObJdrI2qVVfBVYOiZbWU.UfHCsQ3U oWGvqZkgUQ2i9.6DKDGPu6jaj1qqeDcDy0C0GC26F9bSyc7QeZ8BeWYfOoZM pqh5TVr9n2C5P5kkIRBSg60jF4ye9mA8xYSTTpfc8qNIUX4cPNrLeFDykKay Be.a8R_XFpoP8MXhWByBdZOG7_dBfD0purUDkR3v6MXKrYPqUTUpw2E_ovDG Em_4F9krRziyFRrHdO5AG2OXsnnWrgXjxasu8JZA_XxboXGUVnc.MpWGEd5i xNt5LDMMza2HxT3ENlfM6OMemJMC
X-Originating-IP: [76.12.210.180]
Authentication-Results: mta1108.mail.gq1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO www346.safesecureweb.com) (76.12.210.180) by mta1108.mail.gq1.yahoo.com with SMTP; Thu, 10 Jan 2013 11:16:16 -0800
Received: from mail pickup service by www346.safesecureweb.com with Microsoft SMTPSVC; Wed, 9 Jan 2013 11:00:13 -0500
From: “PGFA | irene elvis” <ireneelvis805@yahoo.com>
To: “Team PGFA” <info@pgfa.org>
Subject: The Pakistan Game Fish Association | PGFA
Date: Wed, 9 Jan 2013 11:00:12 -0500
Content-Type: multipart/alternative; boundary=”—-=_NextPart_000_04C4_01CDEE58.7F61A1D0″
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913
Message-ID: <NORTHCAROLINATGpaoG00000162@www346.safesecureweb.com>

PGFA irene elvis ireneelvis805@yahoo.com RETURN-PATH: ireneelvis805@yahoo.com REPLY-ADDRESS: info@pgfa.org

RECEIVED IP: 76.12.210.180 ORIGINATING IP: 76.12.210.180

 

Tags: , , , , , , , , ,

“Cecile Gomez”

ROMANCE SCAM – NIGERIAN SCAMMER A.K.A 419 SCAMMER

Click here for additional emails sent by “Cecile Gomez”

EMAIL: good evening
Thank you for the reply but I’m glad of that you have done good projects this sum I “ve decided to donner.Pour a very good result of this donation, please give me the following information:
NAME …….. .
Surnam ………………………………
AS …………………………………………. ..
COUNTRY …………………………………………
CITY: ………………………………………..
PROFESSION: …………………………….
AGE: …………………………………………
EMAIL ADDRESS: ……………………………….
PROJECT …………………………………………. …………
thank you to answer me

HEADER INFORMATION:

Return-Path: <cecilegomez268@yahoo.fr>
X-YahooFilteredBulk: 212.82.109.208
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: x22RaKcWLDvz8i6Xqw6JXaNuu5p1bGTeLysVElxmPPofuuir BWmd4oM3VD4dVhNDxGfLVEC2eUB_oQLtyOcgCjOKu9lHDBLLIIdqbxVM8ZjA 6UaBUM38KMNLD07H4GL19zOnpwB86VziFqOehB9RSLJmYeASY63nrJl9g9a. hICwt3AEkRf8Or5U8hW6ncxii4qOr2kndD3Ki9CXmW8k2s8fcb9aVsc3Ks2t 6ZbFlEjwZr5Pu7Ompi1C0yCiIQ7uoCQlwmLYAbqdSdIk9mHlS8kx6ffWYklM F6gwhkWRk4C5EJzlD7fjCJI0E2MhO8qkYTDBkRd6rHr8iT0.QhDyTroAoreN _9.phDTKl4HJyKlWWK3dUD2tyUJjJ93zDacwZt.Tjdz5jZYPiMM1_qxOQmHy D6AXPlWllK985pTUS30txJ2M2gGO3JCdREuWOGyuMHlHR7sqN1Tsru41F5rD qoygEBqvfm9dTvTHijg3nkOg76KIsygLBuvqAE7lIpITMHyd9DEluEz1BTFU gRPbQZ1TU8dF4ICNN.5grwC_TzENSfUnJCjm.qZyPU3aCBMzzXbUroVpRObQ 8ouw3GxSfrOMsfnvNc2INSQjNzZFEcajCyyPgwroFaayN2tTVf9UreJsXoKs iqq8e8jja22OAK3YUakDwUo8oV6Zga67me0ZGkiNpCHs1zTAzLFKfacj8Zof v.AdoNVqc8k1p2k4mHOq_dL5b_cujznepIXf6g1KigVeKMi4Z5wydIJkbT0o yLQmgjHv6V7inXdiauv2IId77WpsRQFTcNnvsROsIO1X0NpDOFiiewcvQlcA PZsbNZReAX9.xmsyCaMjvWX_15qQrxa8FnSe9pVEFLGVoE1dHMm10Igy0mLP wVh4RPGRddYbigooL9LPawYG1SoXo6z2.xmITWa9Zs.mYoTEiboauwWiUSfe 4L.OU5xcDTza_YJ5ld0XfDZsSYDxNnzFjeqFGo_SKxM4R_ANUbSXl_a3S_Kl 5o8pGELz_soj4T5CP1WIr4MKeq3DtKUqb9C1aQFbFmTdi6ozjjC5TNt2CyvT b7pkvsOJgsF6KbsJph.Z_kGYNhTCIaoAj0878kYcMzqWzevrYbPV2p_YVqqH bSEMb6Q4Ht5Q8Zhbhe5xFv1zpvn8MqpLiqCNeDDpwxjg_6rofYtramiN1nku uOg9p7uBfEuJUcLs1RLbcl2E8ITlXyQKQtbNNLiaAx0XS5d0kq82Ydrsc_Jv jbtfzYjtr5p2vOc9EuUkTAe3dvqXkQZQIVdy1v__60uLZ56wVx0kTHdYF4WM HKa_vIZ7KpvLjy0ReWtaqsiPmvf.I9soq9PZ9lKCROGN33y8_mz9suzMjHL5 i8El1hdEydnbr0vaxQ–
X-Originating-IP: [212.82.109.208]
Authentication-Results: mta1124.mail.bf1.yahoo.com from=yahoo.fr; domainkeys=pass (ok); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm25-vm7.bullet.mail.ird.yahoo.com) (212.82.109.208) by mta1124.mail.bf1.yahoo.com with SMTP; Mon, 07 Jan 2013 05:36:08 -0800
Received: from [77.238.189.230] by nm25.bullet.mail.ird.yahoo.com with NNFMP; 07 Jan 2013 13:36:03 -0000
Received: from [212.82.108.114] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 07 Jan 2013 13:36:02 -0000
Received: from [127.0.0.1] by omp1023.mail.ird.yahoo.com with NNFMP; 07 Jan 2013 13:36:02 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 839067.52886.bm@omp1023.mail.ird.yahoo.com
Received: (qmail 56387 invoked by uid 60001); 7 Jan 2013 13:36:02 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1357565762; bh=TOjPzeysCjRwRWMJwmO6tl0JDLmTHThuLoGHmmqyWFA=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=dX4DhiR+n+uEI9tsaVSpaVaNCtV4pySt/45wyYsLvQLx+ZALFS6RvS3r2idkxFtlqY1Uc64GM48W7RMJF3m+IeRwBpm2tXKJCQCwbRslVL+meAGEJYvWfZRwQazo2/NP9PadNhNpuCiAayqhxn0idr63TFrSxn3lfqEXMlZ9VA4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=Na2QHlQfAzgTWTFeKFk97N1Zfu3mgSX+ppqmpABEqkl9hgjgDKFu+RFxRfTWaSKCDQUxptpsyNtNpTtXdeEaAuSkKnuhhtvurypjioPhWBgFdX0Y81KU3yqy8VqwWReQkKfzczXSEn1foTEXmFT4y5C2Z/pNuFEQWnCoSxzGY40=;
X-YMail-OSG: PmVumUgVM1n_70sDgkbB2d0RIX9d90s3D1d1JxjWdisJOiq Vptiusjt4ECcSLZp0dk9eXjjLVpYnv2zNT8J0HlYUkdUCVSoJI2s1qYBbmsm TJLfmjSLRWqEaozkBwLaZpT5oBa.ZiqedF.8hbGKq18_.oVxUpsinmTWoPKR jfzk.2eHCAUYJ0jKyO.gNjJYUYrIU7cAQLqrNQAoDv_YZJbuvSzRG70lu.vc TJbwLBHfMfX0PWt1WS_zWFnNe0AgvSGSbhLXQXwNNXTXxke4Ipf6XNb69yY4 Djct.iudNC_EXW7f8TFFgw9tiPtbIwzU4NsZ7mYMONvCIRn77YxAFUIY0r0M Tdw3dhHl2VV2A8VQD7lM1E4WaAmDSKztFb7yEknVtbIdWyqs8fMV0_qKlBrm I7D7_WSlpExSEw9KYYv_jrEDL8iekukOvLiZouHXOFbHxrnkVMb7MlJFX
Received: from [41.216.50.35] by web171501.mail.ir2.yahoo.com via HTTP; Mon, 07 Jan 2013 13:36:02 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1357565762.48864.YahooMailClassic@web171501.mail.ir2.yahoo.com>
Date: Mon, 7 Jan 2013 13:36:02 +0000 (GMT)
From: Cecile Gomez <cecilegomez268@yahoo.fr>
Subject: Re: WELL LOVE

Cecile Gomez cecilegomez268@yahoo.fr

RECEIVED IP: 41.216.50.35 ORIGINATING-IP: 212.82.109.208

 
Leave a comment

Posted by on 01/11/2013 in Romance Scam

 

Tags: , , , , , , ,

“Romanian tools”

NIGERIAN 419 SCAM

419-scam

NOTE: I can’t post the header information right this moment because for some reason it wont open up. This has happened before and it’s usually temporary.

SUBJECT: ALIBABA EMAILS/SMTPS/RDP/CPANEL/VPN/CCVS/SCAMPAGES sold here in ROMANIA SHOP ADMIN CONTACT PHONE : +40312263255

EMAIL: CALL ABDUL ON PHONE TO BOMB YOUR MAILS AND BUY SPAMMING TOOLS

I am a Nigerian BASE IN ROMANIA WHEN YOU CALL ME WE TALK MORE OR YOU CAN ADD ME ON YAHOO ID…
i prefare calling anyway
thanks

buytoolx@yahoo.com

MOBILE: +40312263255

FROM: Romanian tools adminsales@joyceyhu.com <> buytoolx@yahoo.com

 
Leave a comment

Posted by on 01/09/2013 in Other

 

Tags: , , , , , ,

“Sandra Omini”

ROMANCE SCAMMER – SENEGAL SWEETHEART SCAM

ATTENTION: Below I’ve posted two emails sent from Sandra Omini which were sent on Jan 7, 2013. I’ve posted both header details which will show you that this scammer sent both emails using different IP addresses. 

Also, click FIRST & SECOND EMAIL if you would like to read the prior emails sent to me by Love Sandra Omini

anti_scam

NOTE: This scammer also sent two (fake) photos but I because I don’t click attached links/files sent by scammers, I couldn’t post. The titles of both photos were “love.jpg” and “MYLOVE2222222222222” (mind you, I’ve only responded twice and it was NOT flirtatious yet I’m already being called ”my dearest” and ”my love” — one of the biggests signs of a romance scam is when the unknown online-user, pushes for a relationship too quickly!)

My Dearest,

Thanks, l consider it a privilege for you to give a prompt response to my mail, also l am responding with a little explanation of the things about me and what we need to do making the way for us to proceed, you will agree with me that since we do not know ourselves in person as we have not met before, therefore, we need to know each other first by exchange of photo identifications to help us know who we are dealing with.

l have here attached copies of my pictures for you and l hope you will also do the same in return. Also as you will know, this is the only money that l have left for my future living upon which l can better my life now and l do not want to make mistakes with it, please l will like you to send me your contact information’s such as…………

Your full name…………………………………………………….
Your home address………………………………………………
Occupation…………………………………………………………
Age……………………………………………………………………
Direct phone………………………………………………………. and Fax number) where l can reach you for further verbal instruction. upon receiving all these information’s, l will now send a letter of Authority to the bank instructing them to treat you as my foreign representative in whose account the money should be transferred there in your country on my behalf.

So that when l hear from you again with your information’s as l requested here and after making use of your information to send a letter of Authority to the bankers officials introducing you to them that you are my foreign representative to whose account they will have to transfer the money there in your country on my behalf, then after doing so, in my next email l will give you the bank contact and the contact officials in the bank so that you can contact them by email or through phone with your banking information, Your bank account number and where you want them to transfer the money on my behalf as my foreign representative. you have to know that l want this transfer to be completed soon so that l can get out of this place to come and meet you there in your country for my education and future living under your care for a better future of mine as I desires.

Secondly, ever since l came to this refugee camp, l have not been steady in school and right now, l will want you to help me locate a good university there in your country, where l can seek admission for the next academic year.

Am living in the refugee camp here in Dakar Senegal. Please write me soon. l really need your help and l am waiting to hear from you soon.

Thanks,
With Lots Love,

Return-Path: <lovesandrao@yahoo.com>
X-YahooFilteredBulk: 98.138.90.78
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: 1IjoQqoWLDsZWAjRySGjeqLNAAFyrdyevggSCp.7mzBLX5QO YvdxigPFD7YYIKV4TUJQrt1Zy6a1t5gbcVd56cBikBBcfn39wb6t4_nW3fel cPsehAp0KW43T3eaqw2y0puca5XaJKf9i9uulknAsjbCOLpg3SB1jxrVnMfH 3GhspK4e9m0As3b_plyA1y6kInYTAl9_DEPamK7.JjghGooInZLfzdv_huXM s0fKmjD3rJV0Y93nbR_JRsHffgZNMAZ2Z.gwLMZBYLjtZSsCGwHDwSabL92D BfYgmrOYG9fKe1j4sRohKoHt4snfumInvERDfdTqKXB2iAydL09rDmDh0Pxr AQKQMoENyu2veu1TWWdSA_vGC9u1K9QI3hdeWcXUMvjHf4LpAKsWD5nXbB8k .VGiREOry11FhFBBXAwu7OtMZbzEPjGrBjIcQWfP8eoYQ5Hm66Mu1CHKvBwl B8z8v4AHAkWKW9WmaccIhVEsmm7VO6ytzUYO.CPC2VCeZVmb1YvROcUoVi7V gEsekc3ZOSkqWKC1gkYaNVgb7aUe0j.OpwgIFfAxlT4KLZ3NmN_vMjqHHSMw acytLF1wcLDOwpU5W.YKuqVL_SbThGxb4jv7yFjGAK1NKCsuig1YLB0_HdqA yYrmlCX60dpKlCwKl81YrVI2pyV4r1b6r9Qi7lT3ezqVQRqRzqIAqbfOTPyt kS2j.NEFq8g7mUece52gTG31I47mVdSyUJA1_qpQ0SQIboumz3kAqiHqNYfx KCD_EYI6j3IZzEpHD2Wy9jtuwaApz.KqSCWqGqkv4qiMd2YdJ1mmgcDRLNQo cGu_6F8n64pTEVhQ2Chq83poIvUo3yMsynJSnElNBHVEHCrm1AVwvkNK937q 5woRtIo2HY5XipdhS3OOQXQ9i3lDa6oItPrg2Z8fgPeZeUgl4HndpjaGkcs5 jECsm0ZtBlY2sBzcTwjBJjSf4nexxusbPs5itfPElFIV.jvPTPBweW8sD45n _lmhm2_RX0Rujxj4gWG61UNMoIlnp7JxYR6fWD6B8IQRWQTo_m_JIm9b744c 6jJNi1eQx48wUSvhxsMUzcmHNIL1JTv9JOVF5cy0W.KPr55PXFe8PyfDyESq uoD2AGnWnUiaKZjAS1P6PBtMtgrpQG_6FD5xbyJDl2jNWh2zejdXK8UJmxYO VfWGaTYWsrLy785kHheMbQ4r2yYQd9.bTXMwlkpWVr8ifbS5XKTrVRI-
X-Originating-IP: [98.138.90.78]
Authentication-Results: mta1161.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ne1.yahoo.com) (98.138.90.78) by mta1161.mail.bf1.yahoo.com with SMTP; Mon, 07 Jan 2013 03:01:33 -0800
Received: from [98.138.226.180] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:31 -0000
Received: from [98.138.89.246] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:30 -0000
Received: from [127.0.0.1] by omp1060.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:30 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 261138.8003.bm@omp1060.mail.ne1.yahoo.com
Received: (qmail 44249 invoked by uid 60001); 7 Jan 2013 11:01:29 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357556489; bh=sF39V2YXIXyohJJ4DIMYvoz+D4RbkXVTwI5HmpPU1cs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=BE5wb2s2Zn6sVN2koaDY7vQPaPU+cGNZtRoBYcdGcxd2ntt4fr8RdVctniXPGcuYLEYRiZZLEGGwhr4CAXIf/hdH4UdsHgE7D9Lay3Ka7XG2hlyml8wqNPUawvPhnUSwvPjaO3SjgjXkO8NmGpj6Cz4dJTu6QBp5gBb9ZwkNwPY=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=hsTK/l7O/YSlNhftvE+SSOlqrt0LVLpN5zAsdRfnLiMAQ48fPrJLpW7WJTStezmAnOsdr2HoJLoK0PZvM5rFTSnT0H6fh/+0eKgDW3QPhER6RQpHN61uAHHfXzeIGUD7hD/N3kS3DySGqwdNdjsXwMSCAMNySHpY7o4bo8NUNC0=;
X-YMail-OSG: VC8V8esVM1nIItl3zaBA6uZ_oE9xCFH9dYQCrDjRczq9s1Z IQLjn4D_gA6rF3196eBlK2sBorj81zxBMFAl9YzUQzmNsy92BZdx2U_svg63 9L9yw3WOf8etb9j91mnQ0c_zZFZeK5ar3ep_T.ASJ1irXF.UL.MVz.vckzUX bDSb6fj8czWpWb_9CvrBHLwTLORIYETSce3fvFOluoKGVTj8eGmxvc06qMaa 7upAvgj7EpqnGWg6RC42V5zrgqQvCoPlV3BnR3tWDUuNjK_8E5_t2UUw7TwY gJXec3YUDPQnqY6pMeGSBh5Bt7g7YSAY5Bsz3ZxtRBtZjUcuuKfUuGukY9WW UubW.qnODx492OgVPL7Td9SSIPKMKu9c.6Mvd7vbw4Gw.7RWglXPPxuxw5fl lxvKVKl8r6Fjg7W0zhBqnZoQV9R00NA161CHJzRPZRzJ3_eu8hX_eg.BzVZo ogZDhXS4KpVpTByx0Z5b6.hnk6Ace5evPOPvhMHsSmVYtMYmwlDZKUgZHMFQ qGldiUJ1bGHNhiye1I5e9kRPSlkSYn0rSjWUzyDRD5Ar_IWRv.1yCdwxYNWG GbiagnNkzl8P0mQwdSYgXlpnifTQFV8OEcITcag–
Received: from [41.82.130.87] by web125004.mail.ne1.yahoo.com via HTTP; Mon, 07 Jan 2013 03:01:29 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357556489.42339.YahooMailClassic@web125004.mail.ne1.yahoo.com>
Date: Mon, 7 Jan 2013 03:01:29 -0800 (PST)
From: Love Sandra Omini <lovesandrao@yahoo.com>
Subject: Thanks for your response

FROM: Love Sandra Omini lovesandrao@yahoo.com RETURN-ADDRESS: lovesandrao@yahoo.com

RECEIVED-IP: 41.82.130.87 ORIGINATING/FILTER-BULK: 98.138.90.78

________________________________________________________

ANOTHER EMAIL WHICH WAS SENT RIGHT AFTER THE EMAIL ABOVE WAS SENT.

My Dearest,

For us to proceed for the transaction as you have agreed to help me transfer the fund, you should send me your contact information’s such as…..
1: Your full name……………………………………………….
2: Your home address……………………………………………
2: Occupation…………………………………………………..
3: Age……………………………………………………………..
4: Direct phone………………………………………………… and Fax number) where l can reach you for further verbal instruction. upon receiving all these information’s, l will now send a letter of Authority to the bank instructing them to treat you as my foreign representative in whose account the money should be transferred there in your country on my behalf.

My Dearest,i contacted you to help me transfer the fund,so that i can come over to your country to further my education and to secure a resident permit in your country because,since the death of my parents i have been residing in the refugee camp here in Dakar Senegal,and it is Rev.Father. Simon Dickson the priest in charge of this home who helps me out with his computer to communicate you on this issue here is also his number, +221765359970, please,when you call him just tell him your name and ask him to call me out from the hostel to speak with you.

Another important thing i want you to know is this, please try to keep this issue as a secret because, i have not told this to any other body if not you and that is because of the love and trust i have deposed on you. Please don’t be offended if what am going to say now will offend you but that is because of my present condition here, so i will appreciate it the most if you can at least send me some money to be eating here till we finalize this transfer issue and be together because,the refugee camp authorities provide food for us only once in a day. I shall wait for your lovely reply, remember to keep this issue of my inheritance transfer as a top secret between the two of us because, i have never told any body about this if not you.

With Love Always,
Sandra.

NOTE: THIS EMAIL ALSO HAD A SKYPE LINK (NO URL) BUT THE WORDS ” Cliquer pour passer un appel A prix avantageux avec skype ” CAME UP WHEN I PUT MY HOUSE OVER THE LINK.

HEADER INFORMATION:

Return-Path: <lovesandrao@yahoo.com>
X-YahooFilteredBulk: 98.138.91.63
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: ZL4aQh8WLDvzm.nEQhp7EAokzebktzXovrG_M0rJtqQ_MHXx ZZ6_Eytmcy_9YsMPgsg.esDg4dmEz2fgGCdjhYe6LkDQFGumUzTLsZZP18V5 mQtKHwtQ9g8w7Q0MLYu82lhxRym21foSmKeGGRwzdSc5Mz8duZ1kML4oI8S_ y_YHT3KIW4DCOeApM4Gf.cBMD08lSQaBtkT0SGt.5F2_CzxW3RjtO0_xCOmV azRU.pB7PS1xKi9ER5Czb_XwCliwFh99yJAwAaiBddLS_.Yw6b67EpzoH7pv 2IXEyKwRhcZLh1bxEFx3qBs0zn90H3A76n.ESKkHCL9Kgzd3lzMKoOnhsTVg xyFX5VuLiCZTNGJUDzlatFoBUacip1PrzwUGSUapmtg5flNC4xxf4F1KT6QB HdKm8kdOeFr026UnQppsD_2EJk_nxDHDEeAvh_zX4a3fYbWUWeLQXfInv_8b SpKag37UitZFwOC3JV5XRB.ijJq93QXivf167FDxYsMHmBQ4t2B4yXcmA.FS THtSMluTFoLuZ9UEkucu7iD4p_hu0AijhjGtEr7WYybhnm57wRTca1O4nk3Y 6IPY2WEHtKL0.UVZaZpPtVs38Bnwl_jxPySE5Br_fFmO05D8Vxp8ANdq1n.G TnB_XrdwqEq23V4zLs2gh0lEeuLZC8tyh1EZ6jcoDqUFWyv8aZJcc0jv_ev9 LCZ.Xf3En_jCXkf7QdM8v591WTpjBbHmKgiUHq3kQB6IWEuyZPEJf9q6e1fh 3kT_vKtrS6moeRfhBhXdkHs4EBUOpYPaxKFKjrDWJTfB8XKplnn30LHTIdEe qEiaFd4jMYIQK0hMYcpwWuh667NJl6.DM_lrJFZoonWjmvs0TjncRZiiS4Ca y_NTB07_.m4W6DMTplYvI0_SOSlNwAnvNubEB1AhCTWBDGoQt1Cf_GZIhUdo A2xTgW6sSEw1QV1PEHOgcQjLKFqTbIeyrGg1.hazhbl.nPaUSfH1x5NJY1YQ XeqHk0m1hNZKvNBQQc1rRoMqGc_FziHuvc2kS04PpVs9evInRQV2TVG7A4Lz m.bVqmPiZi1YUSpHdOpHD3xaan8iMLrhib1JW5YswSqj1vOa8PfCEnQCFv_A bBolpnXG4TQQPmOnqncEbxeWOzD_R.MVW6rGKIgI35bDCyxDQSa.8RGL7wIt ts6t3mQRp1bMys_I20hWL8n.RPcHfuaYPtxV77F9vj0EknRqix6K3JEk.c5n m8JxCDxOWq6uRs422OUAHvL5zarV772WRxxGm5jnH1DaCvG_hCOJ8IEex6It PLDRIG_6uq1NkQ3gcp4A1gqznxVx6nKZ_ap.967kghkXvWDp_V1Ci..hUia4 DnavYvqHhyPQk.VJ7ow.YOLoLAlCjg8GnvL2PS6kTQot_4j1tIZNA6n0P5hx ZW2O_2zgNQrwZBn3_R.5Z8x2Yg7etfz2WDvAUQ3QhlXUnoZL9OYN
X-Originating-IP: [98.138.91.63]
Authentication-Results: mta1333.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm27-vm0.bullet.mail.ne1.yahoo.com) (98.138.91.63) by mta1333.mail.gq1.yahoo.com with SMTP; Mon, 07 Jan 2013 03:02:22 -0800
Received: from [98.138.90.48] by nm27.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
Received: from [98.138.89.234] by tm1.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
Received: from [127.0.0.1] by omp1049.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 98866.57766.bm@omp1049.mail.ne1.yahoo.com
Received: (qmail 44614 invoked by uid 60001); 7 Jan 2013 11:02:21 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357556541; bh=QeXsO4FaKKKdpb0dARzj48oGSADrn8ZArz+vzImbRDM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=fFL0mRPgGFeN52Qakcp0Wiji1nT84TV6YSZKuZd80VTxoUEFO4uX6Rn8I2XaH5fAT/cR1KAfmrMMF/jGwjj0w14I1pbemTePHvul60hkD9LwwXQt0vVfVCtTwl+cwQrze7s5mRdUFbLbuFZ2CLVoZHflkQSirzGBKL/lBmxGaH8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=g7Rv4EXWIUcxHv4INWOdU/mi/dl8kalG4XpdyNqNjU2kH1p3oiqUZT3IhR+taly7sPs1wYrH2OM58q8sKsfAV8YxfwYfcUJUNgWrLI2tHXTZ7eOYADitfQ9c1J8g6S5zCiQRuiY3OY0G7P3w4no5Uh2ZQS9ko47GoxguI3H18+M=;
X-YMail-OSG: QqRpdA0VM1k39KFdomfmoYqlQQbkQz0Q4ODCQvXnrcT9L97 vNoygxjOwX8e7XH5f5y3kqlUxoeqzBEuboabbWbM7RlYYDjxx1zZ9xnKPFhi MRV5j7z9mUz19_cx73qYjZo.f3NyY2aovnPu.Wtp8ZENP3N_xz7uHyq6Z.5a XQ1LXF5tApybPpu4nauCG1z0vjiEhjq3Ji0zfzD8mqxOQT3QGxm2Dd0i4Nxg cYmyLtW60CafnXTbumqEaMhvM6ngL4Ypx9Wp_epAuO5Fkoft7j79dQp2RC79 JKU5XgUMfbr1yBpSQt0fNJzZIDAzFWSod2lDVm7Sh5Ee9HXF1IR1DyoFVcrC 5gmB2hWOGU4SHwNlwRtUTznR_k.8W6_Fe4QrV4OHspBpd77q776NDVGaeMQE AZ3P4j7AhZpouQWKUobU0ZAEAv9uxKqD0D31Pyeqy1srAcj.ydTrSpQVviWW 3Apn8DojsA5qQn.1gTap3TLmwo2R.brLkEJ3iBjLu3xzDAh_tMpFQFmRHm0M N.rfuEedd2jUx3DFOZuRfZVFsmWiA1R7VkYJJSzliyh5daimEJMnOnokTaJb 9O6X5CVFwUdlC1EirMp7X6DkqRmwrjeJOIyu1uXp.sceMZ03vGgE-
Received: from [41.82.130.87] by web125004.mail.ne1.yahoo.com via HTTP; Mon, 07 Jan 2013 03:02:20 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357556540.41156.YahooMailClassic@web125004.mail.ne1.yahoo.com>
Date: Mon, 7 Jan 2013 03:02:20 -0800 (PST)
From: Love Sandra Omini <lovesandrao@yahoo.com>
Subject: GET BACK TO ME WITH YOUR DETAILS AS I REQUIRED HERE

RECEIVED-IP: 41.82.130.87 ORIGINATING: 98.138.91.63

 
1 Comment

Posted by on 01/08/2013 in Romance Scam

 

Tags: , , , , , , , , , , , , , , , , ,

“western union”

LOTTERY SCAM – NIGERIAN 419 SCAMMER

Western Union Scammer (still at it)

 

You have been granted $750,000.00 From WESTERN UNION MONEY TRANSFER for claim Send Full Name,Mobile Number,Age,Sex,Country,Occupation to enable us proceed payment.

Operation manager:
Davis Wellington.
E-mail:runiontransfer01@live.com

HEADER:

Return-Path: <roelofaltena@online.nl>
Received-SPF: none (domain of online.nl does not designate permitted sender hosts) V0VTVEVSTiBVTklPTiBNT05FWSBUUkFOU0ZFUiBmb3IgY2xhaW0gU2VuZCBG dWxsIE5hbWUsTW9iaWxlIE51bWJlcixBZ2UsU2V4LENvdW50cnksT2NjdXBh dGlvbiB0byBlbmFibGUgdXMgcHJvY2VlZCBwYXltZW50LiBPcGVyYXRpb24g bWFuYWdlcjogRGF2aXMgV2VsbGluZ3Rvbi4gRS1tYWlsOnJ1bmlvbnRyYW5z ZmVyMDFAbGl2ZS5jb20gATABAQEB
X-YMailISG: NZKX4.QWLDs_6MwFucc.X4aiJCfqHA3HTeolMrtRREp3i.47 _8k.HQEj19eE085.bc9u17xWUtjCrcMjVP1zW61o5cgR95hKUAxvpnYgt03W TdqGnHutJNFFrwhVy7MEgn_YNkRJeYI37efHlMvTSsdXEw5c42s0Ml.tbHPj 6DzOSW5o7Rcy_tOGZUYhF2uGmOdQMpDuEhIGYs1R59wmqzRiWqg2XHxExrY7 V1wWHg_8Y2PN3zz7by7w9YRmPCRcqJkT.Fe9_bMaMpRriCpO0zMX1G79VTsn 1OI9hwexfQpHjIe4vJzPEi2XphCFD1GTSEMMFBrsB.77002AEPUvkUlFP0vU hpMKPRox5CUzlxPTu2JwKOh6cp7uopa9K8z27PB9SbCzaX2uO9DLqlT6yQxU vndwAx2H127IsMuK8wUc71r3MEaWb.lU.T5vtM0y9iLVB6gi692YsS0WhDn6 vE45wzyFaLwF375aJIMSMkqI4C4tBbClEDwuhEilM546ZP_6vVYc1X_b0bML 8l5wCwDNV5m9IH6fsppPzFgIdb1rdG5.VeViiyK8dxj4e_pQZdMaMLYmDVOI pM2J.0QJtoG6CJJOEOUB1GpKa490vgftAWuh8TYbF_Q2Jus1bTOBBwJTk88o _xStzymTA4SYag68vlgwl_BrzFggDjsIN3phcucyl04H75vs7KYRZ5LpNpYh Ye0WSHrNrVRo.VaHAXxF1CrPL21Uh9HH3RiUO47qfXsoJZMdTqjcGHTo.wyG pbeAiUBogOcQ4bLWRbhS97w_8AhagoFjVN3sPiXAxvO1bcG7W8i3v5ssOJ6H JXYSMgao5UfDiY9K9OocWYfa6MSr2S3PWmc6YrS0dudzF7emQz4F6X0n.jgj bPVhdulvBjlJbp57Wlw.RZ0wrmB3l6rdpPSHWIUhdFveUXredBxBNDZSNC95 bGKO4G1tyom9INh6bWqK1m_UxFzrWilUmqtERRorwukjNLe_hd5GcNRfWDZp 5qjrZG24wSSwBhQAPNd5.kTX46sBHTVDaFvRrD5sHR_m6Dxj.4I83._D__KE X0MlNBIP5wGrvBdlmC4K_zw8lsfCaQLclsUB_DxtIbp7q211XnWJScAcXtek MMvG0mBk3bGK6scSuQGB3kuMePrNabeMHz2qYw5DX5RUJI0trceCx3_gw5a2 7XEaLU2ke5_WLVAuLz.bGPaW33.Ldz83ndWy6j4yEueBgAxDotp62eeRot6R ohdwnUCgTA–
X-Originating-IP: [194.134.41.34]
Authentication-Results: mta1256.mail.sk1.yahoo.com from=online.nl; domainkeys=neutral (no sig); from=online.nl; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp04.online.nl) (194.134.41.34) by mta1256.mail.sk1.yahoo.com with SMTP; Mon, 07 Jan 2013 16:27:08 -0800
Received: from smtp04.online.nl (localhost [127.0.0.1]) by smtp04.online.nl (Postfix) with ESMTP id C78FCE144; Mon, 7 Jan 2013 13:41:15 +0100 (CET)
Received: from mailstore16.back.prod.mail.online.nl (mailstore16.back.prod.mail.online.nl [10.160.210.116]) by smtp04.online.nl (Postfix) with ESMTP; Mon, 7 Jan 2013 13:41:15 +0100 (CET)
Date: Mon, 7 Jan 2013 13:41:15 +0100 (CET)
From: western union <roelofaltena@online.nl>
Message-ID: <1064296736.1250643.1357562475775.JavaMail.root@mailstore16>
Subject: congratulation… call +447024096013
X-Originating-IP: [41.138.185.176]

SCAMMER INFO: David Wellington A.K.A western union EMAIL-ADDRESSES: roelofaltena@online.nl — runiontransfer01@live.com
ORIGINATING IP: 41.138.185.176 RECEIVED-IP: 10.160.210.116 X-ORIGINATING-IP: 194.134.41.34
+447024096013 — Phone number currently being used by the above (Nigerian) scammer to send out 419 spam. The scammer is always using the phone number +447024051243 and the email-address multipurpose_limited@yahoo.com

Here is job scam being sent by the same scammer under the name “Thomas” -:

We offer sales of: Auto and truck battery, Drained(As per ISRI Code\”RAINS\”)Not black batteries with ebonite material, Lead/acid Battery Scrap aluminum scrap,copper scrap,phone and electronic scrap,iron scrap, metals scra,waste plastic,Vessel Scrap, Pig Iron, and o,ther\’s.

We currently have 250,000 MT of various scrap\’s at our yard,and buyer\’s are needed globally.

For more informaion contact…
Contact: +447024051243 OR +447024096013
Email:multipurpose_limited@yahoo.com

Regards
Thomas

 
1 Comment

Posted by on 01/08/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , ,

 
%d bloggers like this: