RSS

Tag Archives: 98.138.90.65

“Fatima Almuntasir” aka “Daniel David” aka “Christopher Benson”

WARNING – NIGERIAN SCAM / PROPOSAL

In less than 24 hours of posting the first email, Fatima Almuntasir had changed her name to Fatima Almuntasirf —   Scammers are always changing little details in their name hoping no one will take notice. This is so it doesn’t come up in search engines.

Subject Line: Dear Friend

Dear Friend,

Miss Fatima Almuntasir is my name. I am the only daughter of the former Libyan Minister of mineral resources, late Mr. Al-SalifAlmuntasir, who was slain-ed by the rebel forces during this ongoing political turned civil war in our country. I am 21 yrs old. I am an under-graduate, level 200 medical student at Misurata University,

Libya. I managed to escape into government re refugee camp in Ghana through the help of some Red Cross Personnel’s working in our country. I have an estates of US$29.7M only, in cash that my father left for me in a security company here. The fund was proceeds from the sale of crude oil. Now that he is no more, I want to transfer the ownership of the fund to you for safe keeping and relocate to your country to complete my medical course and permanently reside there. Please let me know if you can be honest with me and assist me. I propose to remunerate you with 25% of the fund at the successful end for your honesty, transparency, confidentiality and sincerity of purpose. All further details will be disclosed to you as soon as I have your confidence.
please contact me with my own E-mail(fatimaalmuntasir1@hotmail.com) for more information please.

Respectfully

Miss Fatima Almuntasir.

Return-Path: christopherbensonq1@yahoo.fr
X-YahooFilteredBulk: 212.82.109.197
X-Originating-IP: [212.82.109.197]
Authentication-Results: mta1397.mail.mud.yahoo.com
Received: from 127.0.0.1 (HELO nm24-vm6.bullet.mail.ird.yahoo.com) (212.82.109.197) by mta1397.mail.mud.yahoo.com with SMTP; Sun, 03 Mar 2013 11:17:08 -0800
Received: from [77.238.189.57] by nm24.bullet.mail.ird.yahoo.com with NNFMP; 03 Mar 2013 19:17:04 -0000
Received: from [212.82.98.103] by tm10.bullet.mail.ird.yahoo.com with NNFMP; 03 Mar 2013 19:17:04 -0000
Received: from [127.0.0.1] by omp1040.mail.ir2.yahoo.com with NNFMP; 03 Mar 2013 19:17:04 -0000
Received: from [41.138.165.93] by web132503.mail.ird.yahoo.com via HTTP; Sun, 03 Mar 2013 19:17:03 GMT
Message-ID: <1362338223.86850.YahooMailNeo@web132503.mail.ird.yahoo.com>
From: christopher benson <christopherbensonq1@yahoo.fr>
Reply-To: christopher benson <christopherbensonq1@yahoo.fr>
Subject: Dear Friend,
Christopher Benson Christopher Bensong

Subject Line: Dear Friend
From: “Fatima Almuntasir” <fatimaalmuntasir1@hotmail.com>

Dear. ,

Thanks for your mail and understanding towards this transaction.However i highly appreciate your quick response,not withstanding i have to explain this transaction very well to you for us to achieve our aim, I am Miss Fatima Almuntasir,the only daughter of the former Libyan Minister of mineral resources, late Mr. Al-SalifAlmuntasir, who was slain-ed by the rebel forces during this ongoing political turned civil war in our country. I am 21 yrs old. I am an under-graduate, level 200 medical student at Misurata University,Libya.

And now i am in a refugee camp where i hide myself for my dear life.Again,as i am here now in refugee camp we are not allowed to move out,we have limited areas to walk around,so i am using one Rev.Father computer to email you, but he does not know my communication with you even he does not know about this fund,i am doing this because i do not want any person to know about here to avoid any eyebrow over the fund.

Now my late father lodge this fund in a security company in my name and when he deposited it he registered it as family valuables for security reason,and he did not disclose the actual content of the trunk box to the security company,so the company knows that this box contain family valuables,is only I and you knows that this box contain money.

Meanwhile, the certificate of the deposit and also receipt which the security company issued to my late father in my name, is here with me and which i will give it to you to study it upon the conclusion where both of us have agree in one mind.

Lastly, before we proceed you have to send me your full name, and your house address together with your telephone number with any of your identity card,that will permit me to use it and write a letter of authorization on your name to the security firm by introducing you to them as my trustee,so that they will use the information and affect the changing of ownership agreement on your name as the new beneficiary,as you may understand that, they have to change my name to your name ,and once the changing of ownership agreement is done on your name,then they will release the trunk box to your country and i too will now come to join you and continue my studies over there for better future, i have put my trust on you and believe that you will not frustrate ,because this is only my future hope as an orphan.

Therefore once i hear from you , then i will send you all the document and also my passport copy for you to know who you are dealing with, please keep this issue within your self no third party should know about this until the fund gets to your hand.

I wait to hear from you soon.

Best Regards.
Miss Fatima Almuntasirf

Return-Path: <fatimaalmuntasir1@hotmail.com>
Received-SPF: pass (domain of hotmail.com designates 157.55.1.174 as permitted sender)
X-Originating-IP: [157.55.1.174]
Authentication-Results: mta1146.mail.gq1.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dub0-omc2-s35.dub0.hotmail.com) 157.55.1.174 by mta1146.mail.gq1.yahoo.com with SMTP; Mon, 11 Mar 2013 02:23:13 -0700
Received: from DUB122-W17 ([157.55.1.138]) by dub0-omc2-s35.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 11 Mar 2013 02:22:54 -0700
X-EIP: [afsQ++ufBRsBsu/f+plpxCXCiTguz7fX]
X-Originating-Email: [fatimaalmuntasir1@hotmail.com]
Message-ID: <DUB122-W17D836ADCCEBA800B10221EEE10@phx.gbl>
Return-Path: fatimaalmuntasir1@hotmail.com
From: Fatima Almuntasir fatimaalmuntasir1@hotmail.com
Subject: Dear Friend

Return-Path: <fatimaalmuntasir90@yahoo.com>
X-Originating-IP: [98.138.90.65]
Authentication-Results: mta1455.mail.mud.yahoo.com from=yahoo.com
Received: from 127.0.0.1 (EHLO nm2.bullet.mail.ne1.yahoo.com) (98.138.90.65) by mta1455.mail.mud.yahoo.com with SMTP; Mon, 11 Mar 2013 02:24:12 -0700
Received: from [98.138.226.178] by nm2.bullet.mail.ne1.yahoo.com with NNFMP; 11 Mar 2013 09:24:12 -0000
Received: from [98.138.89.245] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 11 Mar 2013 09:24:12 -0000
Received: from [127.0.0.1] by omp1059.mail.ne1.yahoo.com with NNFMP; 11 Mar 2013 09:24:12 -0000
X-Yahoo-Newman-Id: 342843.79477.bm@omp1059.mail.ne1.yahoo.com
Received: (qmail 42814 invoked by uid 60001); 11 Mar 2013 09:24:12 -0000
Received: from [41.138.167.57] by web126106.mail.ne1.yahoo.com via HTTP; Mon, 11 Mar 2013 02:24:12 PDT
Message-ID: <1362993852.38536.YahooMailNeo@web126106.mail.ne1.yahoo.com>
From: Fatima Almuntasir <fatimaalmuntasir90@yahoo.com>
Reply-To: Fatima Almuntasir fatimaalmuntasir90@yahoo.com
Subject: Dear.

Subject Line: RE: Dear Friend contact the company

Dear ,

Thanks for your understanding.

Not withstanding, i received all the information which you sent to me and i have also use it and wrote a letter of authorization to the security company as i told you in my previous mail,by presenting you to them as my trustee,this letter of authorization bears your name as my trustee.

As i sumitted the letter to the security company on your behalf ,they made me to understand they need to hear from you as my trustee,therefore i will like you to contact them and introduce yourself to them,but please while contacting them do not let them to know the actual content of trunk box for security reason,because my late father registered it as a family valuables and he did it for security reason,that is why i said that you should not let them to know the content for us to achieve our aim.

Below is the contact of the security company
CONTACT PERSON :REV DANIEL DAVID
TELEPHONE NUMBER:+233547613292
universaltrust_ltd1@consultant.com

Please contact the security company and ask them , there procedure on how to retrieve the consignment from there custody to your country,please i will not like you to involve any other person in this transaction to avoid any eyebrow over the fund
I wait to hear from you soon.

Best Regards,

Miss Fatima

universaltrust_ltd1@consultant.com

Return-Path: <fatimaalmuntasir1@hotmail.com>
Received-SPF: pass (domain of hotmail.com designates 157.55.1.170 as permitted sender)
X-Originating-IP: [157.55.1.170]
Authentication-Results: mta1000.mail.bf1.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dub0-omc2-s31.dub0.hotmail.com) (157.55.1.170) by mta1000.mail.bf1.yahoo.com with SMTP; Tue, 12 Mar 2013 09:31:20 -0700
Received: from DUB122-W27 ([157.55.1.138]) by dub0-omc2-s31.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 12 Mar 2013 09:31:19 -0700
X-EIP: [7M4sVVv1fzsVlZI5a+CQYK01DnHkExWn]
X-Originating-Email: [fatimaalmuntasir1@hotmail.com]
Message-ID: <DUB122-W27359F4B70B76995D0C55BEEE20@phx.gbl>
Return-Path: fatimaalmuntasir1@hotmail.com
Content-Type: multipart/alternative; boundary=”_e7a2c091-dd67-4630-bafa-2527490eb972_”
From: Fatima Almuntasir <fatimaalmuntasir1@hotmail.com>
Subject: RE: Dear Friend contact the company
In-Reply-To: <1363062832.48292.YahooMailClassic@web161004.mail.bf1.yahoo.com>
References: <DUB122-W17D836ADCCEBA800B10221EEE10@phx.gbl>,<1363062832.48292.YahooMailClassic@web161004.mail.bf1.yahoo.com>

 

Universal Trust Ltd +233547613292 23 3547613292
Fatima Almuntasir fatimaalmuntasir1@hotmail.com

Advertisements
 
Leave a comment

Posted by on 03/10/2013 in Other

 

Tags: , , , , , , , , , , , , , , , , ,

“REV BEN PETER”

LOTTERY SCAM – NIGERIAN SCAMMER – ADVANCE FEE FRAUD

NOTE: THIS SCAMMER HAS BEEN EMAILING ME FOR MANY MONTHS UNDER MULTIPLE NAMES, EMAIL-ADDRESSES AND IP ADDRESSES — THIS IS A NIGERIAN SCAM ALSO KNOWN AS A 419 SCAM

BELOW IS THE MOST RECENT EMAIL SENT BY THE FRAUDSTER. THIS SCAMMER IS VERY PERSISTENT BUT UNORGANIZED. HE IS ALWAYS CHANGING THE AMOUNT OF MONEY I’VE SUPPOSELY ‘WON’ AND THE FEE THAT I AM SUPPOSE TO PAY.

freemoney

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $ 7 M

HEADER:

Return-Path: <webxx7601xxxxx@att.net>
X-YahooFilteredBulk: 98.138.90.65
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: To35UWMWLDtpI31Kn.0SLqgNnW08Av0SCFAssCMR8A_Vo1GP GrWi2SRwEUK0_rS5ma.EeNhpXLBHGeRggiFG274YMQUgELYQceZCuxW3lQPN rUoT6knijOkKBdqZkH6wbwxbiX_cGEA41SNaj1GVee9_wEMb3td4XzfxKB2W QHrpIw5Zbu_LEuE.UohMdPBo5n_Z45sHFwPWKeKvax4FtRd9YMFoUrM1giBG C7CLdLh9vlCZzCePSppkA0cvOXt_.mjRjvpOP8QMqDhPOSUFydEEMwgIJns6 2p8QA6wY01j05hbhCrsTYjP7PMBklSFGar9DIbx_rQrES7XDMCtPwl3rskW9 mA0o9k.0wE8917_bR66zH6.r4hgk2Pq8J16QU1Lb0v752n9EcJJSbMbbFQCB wY0piVWQGMKir3JfkdVqWpd_w.T_TfFpxV4cemt1CKnbhoD0FsU7NfExkiJc A5joObOkIGO7Jd8HRyCdsMC_W94SyWlu8v8d0TzsLFjtxDlq1n1fiHfB1XRH vxTmJ6lgV_.c.iXkiuD9N3_pT1_aPP7W9IwCbbDIwtrF34MNw68hMJvJOUe2 pH.jPfBNQHLQFxWhxb6lyVSyv28tHpugjC308j7ixZ00K9T_7yuZ0IHQF6K_ Qd3WjZM3CHJaBIWb1rlNDSqMRfzuahAUzICBFaX8u4wMRTaHcpwTOp7nRUrm sazz9ZeJ7QdN8pKfGePiOZZHXxb1KoyvjL30TC9knrdnerK_gJQgdXaFI8Q5 3er.rbh.9662mA1tWwkL.uw.Ej8jeMmTC81X292stHfa_QQVzMpPvYAw5A9x eqmWm6ToSeMfSIvtRovTlmbB8SkoM4oN0TU4hSZuZ71YzhIaZGFXCNYoOJne 7vGYNkak_HoeCUFsGusF92TWky2Vc9PLHMAgihSZ5i2dv22EV6xQduzDwaC6 hR0YvxZO91Y5nEmgU4JgwTACDxEFzztQjg9nca9TEBemHGKAs_inoBvYmRgj 9NAenemYR2BttVDhS7s50y8s2lyYQLrcXQk7ozgN_n9MjmXaMO0PpbZ7Vpge 7kwg93PpaJb42PYuo_xuEisFLWcWM2dUBSchWFlLPJiuJh8X1JF31AOvxAaS y5zqbbq0gA5D6y8P6y7bvMT6GA.RJbBsQnHsqzQ9p62epYsuSBn.GO8e0Obr iTJkg19mglk6slzhX2ciB7jr2mRWI6xcf4zG3rU9Rruj0ndRzYpo_d30lRuc ri8BKqd2I3s9zVfL6sSwKtJADSftjvwW6RTUXPvc2TBzPoA_QfWHZLqs.vAD fbdtVFTINFo2tQp5xrw8ZD.fSJPwkEmhSP.jOfvKar5IpIk2JWk37aJ3w_S7 tgimEtxHc8pR
X-Originating-IP: [98.138.90.65]
Authentication-Results: mta1052.mail.ne1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2.bullet.mail.ne1.yahoo.com) (98.138.90.65) by mta1052.mail.ne1.yahoo.com with SMTP; Fri, 21 Dec 2012 23:21:59 +0000
Received: from [98.138.90.57] by nm2.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
Received: from [66.94.237.125] by tm10.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
Received: from [127.0.0.1] by omp1030.access.mail.mud.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 33716.96789.bm@omp1030.access.mail.mud.yahoo.com
Received: (qmail 92006 invoked by uid 60001); 21 Dec 2012 23:21:58 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1356132118; bh=dspJXUMJQPVGARdDGpSJwFgAoFNKsOdNQ9FVUYxLdWs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Woh2WLpCF/uHtRoXtPW872YkOBFAAbqyMP8UUqzUgpelHH7rNoiWqa7ag0CmwrvT9rDXbc9/MwzRF4reRQJSiuyghbS6I2JNqrMwOvylD/dqh4XGMyzU7PbK4Pbexc0L8FA9JQhAW/6ELOL4sFG8D94kdkpAOh6L371vv4tS3iw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Wxssckm+WPOWZNoeqVo3J5A9eRTjFPzbZwjkMMleA6TNm0Z3g6oL7alYEXqc56/BtA40DPg9RuPmICUTXeH2deUrULLcyKl+UwLAW5iFZVcgFK96kZvnPQlno8bd2sihdj9TtprkLOV0FMx26eQMMkzUuHBXS3DHp6EcQHcqnms=;
X-YMail-OSG: FhAlJ8UVM1mfQErccxHLz3tuxCp1r4vGnWLUR8YRpQosJn0 41jiU0HfOZDG0kQmHMqh9ICSmXaeUKNHjf_woqZQa86_WB0hFCoBJ9tSIbnP Mwm_Tzot5n5.j.qSIOy00TIP8lP5luggtVz7caaD2_xg6Zh7HkAGgtTfgwB1 1WAhS2sqIs_p3RNlxJA6hbYu8KkdyLOzktPW1JRmwWHrxLfUm4eFUj6oPEXn 8oNzfmB9NOMY7zKPEBmCaQ1yjo7wnJFJHBS8kVzq16fTa98dCGZNheuL.CqO 5_c9tEoKAzDURA7_1BRR87wZUiUY14icB5MobkNiVuzKczqB1i.pYPVpGisr AExzvcXZ9pNJ9zI.QcYSMlgLTOo5CuQhY4uel.ztH5.tWJpHnx_jHfZd2IC4 aKjnnLxo9jTRnXuKc2sIDTrimc6Q_2BpalwQFLRKgXuEJiXQ.6fp1jpbAe3o 0zkK_380VGyPITTcie_SrkWj75HrFmt1WgNvCjcGXVNEKpmpolObG
Received: from [173.13.200.181] by web181205.mail.ne1.yahoo.com via HTTP; Fri, 21 Dec 2012 15:21:58 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.129.483
Message-ID: <1356132118.91240.YahooMailClassic@web181205.mail.ne1.yahoo.com>
Date: Fri, 21 Dec 2012 15:21:58 -0800 (PST)
From: REV BEN PETER <webxx7601xxxxx@att.net>
Reply-To: asabamaka@yahoo.com.ph
Subject: Reconfirm your Address,mobile for delivery of your ATM card $ 7 M

FROM: REV BEN PETER webxx7601xxxxx@att.net REPLY-ADDRESS: asabamaka@yahoo.com.ph

173.13.200.181 <> 98.138.90.65

___________________________________

BELOW IS ADDITIONAL EMAIL ADDRESSES AND IP ADDRESSES SENT TO ME BY THE SAME SCAMMER(S)

2) LOTTERY SCAM – ”ATM payment” <webxl19917xx@att.net> REPLY-ADDRESS: atmpaymentcenttt@e-mail.ua

SUBJECT: your(atm) card worth of $5.5M is ready, send your Address and cell Phone

SOME IP’S USED BY THIS NIGERIAN SCAMMER: 98.139.44.156 <> 75.125.40.18 by web181105.mail.ne1.yahoo.com <> unitednationprogram101@gmail.com <> unitednations77@yahoo.cn <> apex.expressbj@hotmail.fr <> +22998660756 <> 85.95.227.44 <>

THIS SAMMER ALSO PRETEND’S TO BE United Nations Organisation AND WESTERN UNION OFFICE — I’VE POSTED ALL THE EMAIL’S AND HEADERS I’VE RECEIVED BY THIS SCAMMER BUT THERE ARE WAY TO MANY AND IT’S IMPOSSIBLE TO KEEP UP WITH. BUT THEY’RE ALL ON SCAMMER419.WORDPRESS.COM — AND I’M SURE THERE ARE MANY MORE EMAIL-ADDRESSES AND IPS, ETC BEING USED BY THESE CROOKS SO IF YOU RECEIVED ANY SPAM EMAILS BY ‘BEN PETER’,  PLEASE POST THE INFORMATION IN THE COMMENT SECTION. THANK YOU.
 
Leave a comment

Posted by on 12/24/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: