INHERITANCE SCAM – BENEFICIAL TRANSACTION – NIGERIAN 419 SCAMMER –
EMAIL: Dear Friend !!!
My name is Nelly, single young girl 26 years from ivory cost willing to relocate to another country. I am writing to seek your co-operation over friendship with transaction, please due welcome me, i am the only daughter of Mr Williams. he died one early morning with my family by rebels in middle of war, he deposited 9.500.000 euro in the bank, when he was alive with my name as the next of kin.
i ran to refuge camp at nearest country Benin, i want the money but bank manager told me to search for a foreign partner that will assist me for the transaction, so if you can help me to transfer it write to me back, i will send my pictures to you latter.
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: 5pmxKd0WLDs.4vaumrFw.TtsgwVZ3OX_8UlpeyA7uU_3P5WN 7pTP0le6ZI8F7IW3lolpQZ0bbVW4Zs0W5uH38xkr5XLMGDG948PMTooHoWE5 2ISberrReRrprxpRc_DMCr6LVOduOHYWoH_E69dA1vlhsXMZsJ6D61URmJyT 42lp77FTIFDFRxqZxFb.ZXmXb81j0NB6AtxNIesjH9gFxuUZSX1Gy.oomZPF MoUWaQd1LcDYxNiswIfhWTLe3LKU7s5JfpBviopsEzDvqxZv3pn462dNPtkH 4u8oWsPpkGEwuJW9a2PDnz4J36nP5AKBsp2BP8K1ewtmNW62CP.6U1gpizvb eJTeIfzXwdJ39tyq2lHhTBnJ1Fyt5ZLvLOMWdW_ps.bavzMqhB.GqPAPD_2f EfDeWR_j0_ZY4mwSp2AYGuhUQ6KQ37JLLjQyVVWNOccwJEzKKDcEweedDIqf M8Tv_u2LWPrugifePZx4kPwjizMH_SZv5bSIEPXtcRLI.PlMXrgh5kYnHYWL N0QZu8S8Pu_jeufGUZhSQfbxoO6JD5y60kMeIostPKzko6VOfpqnnynLCFyb mqhrG8YVtQ7HkXik9mxptVZmav5ByM2.mz7SyNnwCoHrGrMGuvT9jeJFGp37 NAR1x7Fui_65xyza2Kt8ty.g7fKEtakZtk.P34cbjFYQ00cJCXJhICbN8e3t USn9.VOKMrut1W4dYjH3ucnayv6HePBdqJVGdua8HhJY0qdii6GLzm1bxgwI Q61hP.GRrIbS6ft_Zm7s24o2zlWkZqn1WjYCU70dIG0kLGb_.Ywcifhsbmsp ADCm1XIFKyOH4Bdg9gAcLTc23CcvrvWjMSejeAP4kG59q3tRKFd6rS1AXgQP tOUXkkbRTdDszOTp0QwxMZSmpATgkgTJghmlivb2OtX7aFgclh8TFsx9wacV T6IIVyzGTYdsuSLmG8qm6a0wMlm0TG5LYDRPdnOVKJ.4qXtRMSY7ad8rGaXp dR2_Q_ipP2rQOT_RMS0tn7WNLpk5ReC3zDBFKGWfjh.5AFhYmRFEsCc5pgcz zLqyaVxa.kH.2iVRnUkwndG7FQeOfu446OuyxydkcbWhD7rAhGZIeqL9s.az 4LuiX4p9UurcIjQZw0.o..UUyUOer5RQdNoxMWXFTj0HDQo-
Authentication-Results: mta1270.mail.ac4.yahoo.com from=yahoo.fr; domainkeys=pass (ok); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2-vm0.bullet.mail.ird.yahoo.com) (184.108.40.206) by mta1270.mail.ac4.yahoo.com with SMTP; Wed, 19 Dec 2012 05:27:22 -0800
Received: from [220.127.116.11] by nm2.bullet.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
Received: from [18.104.22.168] by tm3.bullet.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
Received: from [127.0.0.1] by omp1027.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
Received: (qmail 49358 invoked by uid 60001); 19 Dec 2012 13:27:21 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1355923641; bh=3PDBaOP1V6Gti8xQ3yR1RdhGGlQViEZ5YDKefufvyDM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=YrsBDJJLDOUzevE3of8+4NCg0X9gHe3x1Q0ArKvHZV7pziT8wEtzAhqRop0PA51KPKiR2/2dFk6LweYuhHuRg8omTLQy3CC8gZjHZpMdEdQMzmlcLBRtB8DzI6R3VdL26gjvyf33MS67oR4VS3tUKxuPNXx0PbyM/whuIf827jA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=2IWLMy/sqd+BtUpHyrvH3P/JRiLtwghRHQGe+/bhNBwr2OB6Pd8jIJEJhMG1RJ6wI23m9zoOZW64O/ANWXmEznqo3FNM0yhdN140m1pfIVe029JGoIHOkey37p0113e4TV6qelTu3TJbo6jmcP9yutY6upFOzZHEJXRWm3rGxSY=;
X-YMail-OSG: cmUW3GEVM1mtu95g.NGVyWJMIkqYyBGHqx2pYWMYPmzRsRo U5bsqzvSl0kETfOMBTfFNDdMNVfmr_QLwPr4ycmow.82RCDHe_p5IUllcHeQ M4j5XJEEnwbm247GJD5_uHT7lucmoX_iOxiFhIVipaWBpnr6msLKz3.bpaBp CaiCTEZ7Lp3ncbqTXY7kF0wIoYhIvwNhDChDrJ14vN5GZAsa57vItmNdYTYu F5UBTs.2NMTRPRb_Hc_7nejLbsPXh3uNKHCuWTMcs07KofWs7mGXZt9vQQkF qcvCuVdDW4Uoutyk8euthg_CS9OaxudE21Kivp7SYrNYebSGNQELdY07Hrip jM03BN_1PiEjGz8VUBM10n5w2EsKeX87aNQ9K4_AD_Y91_dp_T9I6zO9LR4m DchctjNSVzJ_Zo3PZx0Qi5rK5AyKtr6fIXatAloCPEQVcrPUIlRbhGg–
Received: from [22.214.171.124] by web29802.mail.ird.yahoo.com via HTTP; Wed, 19 Dec 2012 13:27:21 GMT
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.129.483
Date: Wed, 19 Dec 2012 13:27:21 +0000 (GMT)
From: “Nelly.” <email@example.com>
Subject: waiting your reply
“Nelly.” firstname.lastname@example.org REPLY-ADDRESS: email@example.com
ORIGINATING-IP: 126.96.36.199 RECEIVED-IP: 188.8.131.52
BELOW IS ADDITIONAL INFORMATION POSTED BY ANOTHER ONLINE USER WHO RECEIVED AN EMAIL FROM THE SAME SCAMMER AS ABOVE.
Nelly Pius <firstname.lastname@example.org> <email@example.com>
Dear Beloved Friend!
It is my pleasure to reach you after our unsuccessful attempt on our business transaction. Well, I just want to use this medium to thank you very much for your earlier assistance to help me in receiving the funds, without any positive outcome.
I am happy to inform you that I have succeeded in receiving the funds with the help of a new partner from South Carolina-USA, Mr. Alfredo Gomez Castillo. Everything was perfectly done because we strike a deal with one of the Lady Accountant who works with the Federal Ministry of Finance (FMF), and she rendered a tremendous help to us. My new partner initiated this idea and everything worked out successfully.
In appreciation of your earlier assistance to me in receiving the funds, I have decided to compensate you with the sum of $2.5000.00(two Million five Hundred Thousand United States Dollars) in an ATM VISA CARD, this is from my own share. I did this simply to show appreciation to you for your kind support and assistance even though we could not succeed due to some unforeseen circumstances and reason.
Presently, I am in South Korea for investment project with my own share under the advice of my partner. Meanwhile, I didn’t forget your past efforts and attempts to assist me in transferring these funds despite the fact that we could not succeed. I will be sending you e-mail from time to time to know if you have received your share or not. In the light of the above, you are therefore, to contact my personal assistant Noah John, through this email firstname.lastname@example.org and do send him your contact address where you want the ATM VISA CARD to be sent to you.
Contact him through his email below…
Phone: +229 680-96772
E-mail address: ( email@example.com )
Contact Person: Noah
Reconfirm to him your personal details as below:
Current home address:
Occupation / age
Please do let me know immediately you receive it so that we can share the joy/happiness together after all the suffering at that time. In the moment, I am very busy here in capital city of South Korea because of the investment projects, which the new partner and I are having at hand.
So feel free to get in touch with my personal assistant Noah so that he will send the ATM VISA CARD to you without any delay.
With My Best Regards,
IP address: 184.108.40.206
Reverse DNS: [No reverse DNS entry per pri.authdns.ripe.net.]
Reverse DNS authenticity: [Unknown]
ASN Name: OPT-NTIC-AS (Office des Postes et telecommunications du Benin)
IP range connectivity: 6
Registrar (per ASN): RIPE
Country (per IP registrar): *E [[RIPE Unlisted]]
Country Currency: Unknown
Country IP Range: 220.127.116.11 to 18.104.22.168
Country fraud profile: Normal
City (per outside source): Cotonou, Atlantique
Country (per outside source): BJ [Benin]
Private (internal) IP? No
IP address registrar: whois.ripe.net
Known Proxy? No
Link for WHOIS: 22.214.171.124
BELOW IS A HEADER FROM AN EARLIER EMAIL SENT TO MY SPAM FILTER BY NELLY PIUS
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts)
X-YMailISG: FOcNh6QWLDuwokGIamqo2H1mhFgBK__fvBOJZ8GjwILP0jKp H_fXx0rsRIGtWnE8LHiDjqgrUbhVMalmSllTqA0DRUXVL000oPDuFM_4Cvdq BG9I6cTmDOPwt3Rbvyyrw1_.26QSw.velDioRcayZTUc9dtps6B4yu8iQb.X 45quHIwVHMKOZyAuvrZsOde4f9rNUjjA8jehT99P2KYxuszbHy4plZ2JCHhj iC1s4KT_XanfymkXm60urdqtbA3TVX_bkGnktQMQ8hA.KV.ll1KgActsQDPn CT7Whw9F3G0YtO..HY98BjSqfWUqKZ_9O9hoN175bzx.Y6003jsGJgZowQkK DkoWcD2MMet7hoGllu2xaFaCO9F6K6sjGW6RgGbTuBNKodcmZg55dvOsYnAk nl6eg5A3hk2QXz40LgNCiTRNDYXId7UJ7liQp5vfEz4bmRvkbIn_F_Kfe2fb PDqG9HXvy3iWkgsYmNbI0Y.ZFQt8NXdK4qoGihSNJzGAn0oaufWSCAD5nPEG qUAVabftIWrVbIL4h83oo.Axnnhc.gP3Sq4JICZK8R2pTv1uyLgotWgJvqEV lkaRO.4hr5fTMA68AuEBbZZBKuhYZrONNhHOjRDA_0Ub1Qpt4A1N8mvS3EDH OXTxGMfwNHggXYzAgM0efEowxSH.p4KSFlFuB7HalF_uTf4LepMH4Jw4Pepy dIbhOHSt.rWElmpQ3FwQnY9fDEO1fWjdBFb1fd23HFfEEhZ52qAgqSX5dYYj 4vFsP3QgcvjRtphwDJkTsI.k5YFbuEY1o27.qr3.fwQXMDHm1PecFRfcxknH Jl.asZFxcHerjK8aglPDjTm09Ky4HobY_cRHFbwE5N18S8XBiN9KyUjqM8cq 7Vud9U_1F3uyXraJMJvjkyjEzPbxFCjYsHE2q5Gzm3WuiC_GvzJDux0kJDIk 770Sr9EKBwyYKov.lNHPyxTlFcN6RfyaBaPyTPh_kulsWBnKWktZyWm2.So2 su_Sb9DHRVLfhN42iBrx.mBeF.j5_QaHc9JE44XYqT8JtIdYgT_SVNz7EBC2 BI4oHmscMaNsSbRNw3z8YK9PsnVCLOVhJpvvjN5y8T4j9kVUW2NhHD.y6GbY 2w6WzXd15q8JQEc1UvKGxrEBOWvmF8mtoZ4.Kq1hJKG_YWRjbzVTK8i4IVZt Jq9yFcvcvvHtTnv5kMfjdym2iCAoBpeAXzrfjoXkRlaR9YBmt7fNfFWWaw95 EyaipLDjQK4gxYlU82KJMKQ3VO26udNOb4EUtEFbacxgTlNLV2l8uUNqsdJL hjzulYxZXb1uXou1HaGVNzmsWQH8BYmJ1OYxtqVtnwxpijmNxCG6Aeqg6Bxx dfj8ZU4cWpVf
Authentication-Results: mta1129.mail.gq1.yahoo.com from=yahoo.dk; domainkeys=neutral (no sig); from=yahoo.dk; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO n3-vm2.bullet.mail.ne1.yahoo.com) (126.96.36.199) by mta1129.mail.gq1.yahoo.com with SMTP; Thu, 27 Sep 2012 12:45:09 -0700
Received: from [188.8.131.52] by n3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
Received: from [184.108.40.206] by t3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
Received: from [127.0.0.1] by store166.c107.cal.gq1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
From: Nelly Pius
Sender: Nelly Pius
Reply-To: Nelly Pius 220.127.116.11 – – 18.104.22.168