“Barrister Mendy Samba”

INHERITANCE SCAM – NIGERIAN SCAMMER

MENDY SAMBA also known as MENDY CHAMBERS and AMINATA BANGALI has sent me three more scam emails. I will post them all below and include the header information for each email. (Note: The scammer has used the same email-addresses and received IPs. However, the Nigerian scammer used a different originating IP in each email.)

FIRST EMAIL: ATTENTION:

Thanks so much for your email. With regards to your lawyer, I don’t see any reason for your to contact him at this early stage as his services are not required at this point. But when the process is concluded, you will contact him to process resettlement visa for Aminata Bangali. The necessary legal requirements will be taken care of through my chamber.

I implore you to keep the deal strictly confidential, while we try to put the necessary arrangements in place to legally have the funds approved for transfer to you. To kick start the process, do be informed that I am drafting the Memorandum of Understanding/Power of Attorney between you and my client, which will be forwarded to you for your assessment and acceptance. The said agreement will legally protect your interest and that of my client and will establish the details of the partnership agreement between the parties involved.

I have briefed my client about your interest and she’s excited and looking forward to the adventure. I have given her your email address and she will be contacting you soon. The company in Spain will also be contacting you to give you the necessary guarantee as we progress and we have already contacted the company about the processing fee and we are waiting to hear from them to know the exact cost. Please, note that you can verify my client’s claim directly from the company by quoting her name as next of kin and quoting the deposit certificate number. You can contact the company directly on the following email address:

Email: info@guarantytrustsec.com
Contact person: Dr. Thomas Woods

Be informed that your commitment and reliability will be highly appreciated. I am using my office and personality to guarantee that the transfer will be carried out smoothly and securely once we meet the legal requirements.

Do kindly confirm your contact information in the following manner required to process the MOU/POA.

1. FULL NAME AND CONTACT ADDRESS
2. OCCUPATION
3. DATE OF BIRTH
4. MARITAL STATUS
5. NEXT OF KIN
6. PHONE NUMBER
7. OTHER CONTACT DETAILS
8. COPY OF YOUR INTERNATIONAL PASSPORT OR OTHER IDENTITY

I wish to use this opportunity to let you know that your honesty and reliability will be highly appreciate and I will ensure that the transfer of the said fund is carried out smoothly without problems of any kind. I am only doing my best to assist the innocent woman to ensure a better and more secured life and I want to believe you quite understand her situation clearly.

Kindly get back to me within the hour with the needed details.

Yours Sincerely,

Advocate Mendy Samba( Attorney At Law )

1ST HEADER – INFORMATION

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) bC4gV2l0aCByZWdhcmRzIHRvIHlvdXIgbGF3eWVyLCBJIGRvbid0IHNlZSBh bnkgcmVhc29uIGZvciB5b3VyIHRvIGNvbnRhY3QgaGltIGF0IHRoaXMgZWFy bHkgc3RhZ2UgYXMgaGlzIHNlcnZpY2VzIGFyZSBub3QgcmVxdWlyZWQgYXQg dGhpcyBwb2ludC4gQnV0IHdoZW4gdGhlIHByb2Nlc3MgaXMgY29uY2x1ZGVk LCB5b3Ugd2lsbCBjb250YWN0IGhpbSB0byBwcm9jZXNzIHJlcwEwAQEBAQ–
X-YMailISG: 04m5KF8WLDt9dnxMwru_HLy2sSrgLReVAcDiwDIPzpbEYTGf O7z8zbwixEjRtXDkiSQUs6VcvO6iyB53Bkb.oykn3qbCLcoIB6iIQyCAQcHn V_OhckVZ.aksC5gfiEvSjoVCjwg7bi1QX0m5pl7wxXy.EtPYskuuC3BcGxJq brJmJopk4pfinlDZvQWNL6Oc76k7hyq1tePHdvj6eNNteTK1accRm6PUjt.U gJDFNWPFFbybxhdcE1HA1LVRJvY1NQAcj1t630BbjJjarC6nnEaTVVIcfpQT er6YtiVb8oheGLU8CHvjFz45hTR1_k8FEe9FQWs7m_NF4xQRp3GzNVdwpiT7 WAuaBYqEkotAKosBNu4yIkidDEiW21FPPilKiifix.nRsr.OvWsJ3ITfxap_ TTO_Am_baq9jWWqC8MiaQcAbhkxdnOFD8s2ejl4Zau.D41QiOWmhFHyfYiog TxjjDGIzZF5vrE31Z0PVeVSdm8jPolkneCTSvDx9AGefuqZ2rxGOcCbDG0OF C_ZX.kmoHEHnvjddHAQnEkcUoHpPYZY2s.q2ZAUsW0VVGWuv6DvmZmCPItFu CBlPY.YslBLY3tlCqg1kWOpG84QLD6c3WbJG781s5CPFpV_A0DqrQ7X9GPQV z1JEh2qnxWwlzQzqtdRknKEvkovPj2PC1hmnaFkOhSPj4fXlEnuY9wqFzY21 m.S13mK._4W1ELitIHMuDf5x13FBERdMJ_4_bHCIvGsZZNbbRf5CZBDhvye9 plIFahkJA_ZRgeajZnm5YbcP97FWqaFgETl3qq4ahI_mGKC4j06fsclgGPqO en06EdIb7B_TnatgAsV1gOcIIMrAmUkdwxm8aeVO1_mYazrsEuC3uno48wp8 HF_Gmm5nhFGaE4i2i9w6TgJ9zuJXzmf9MDiL08qEi0uNb02qS_QRrnUj.YJi ulO1a87j8vqYxdl.6koj6R0gYpnftZDOA_q3yZLDoRxM6tvkgDtrpnUiKDUJ EK43yf0ePPFXprNLKtlE33xELzq293lPZ18BOXQLS0pa0rt2o.nodjEdh4z1 bcrETtiq0pik3Is0VVE.85cnIoJC8ZzO4Q.eKVazIorivI8_u3op4JhbiVLZ aw5Bi.dVLDDWN6MnQUGYb9nnSbhsutUBjuJ6Wt2v
X-Originating-IP: [64.98.42.5]
Authentication-Results: mta1277.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.5) by mta1277.mail.ac4.yahoo.com with SMTP; Sun, 13 Jan 2013 06:27:15 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay06.b.hostedemail.com (Postfix) with SMTP id 451315E9F8 for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:27:15 +0000 (UTC)
X-Panda: scanned!
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 4469
Received: from webmail07 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf08.b.hostedemail.com (Postfix) with ESMTPA for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:27:15 +0000 (UTC)
Received: from 41.138.179.177 ([41.138.179.177]) by webmail07 (Webmail) with HTTP; Sun, 13 Jan 2013 14:27:14 +0000 (UTC)
Date: Sun, 13 Jan 2013 14:27:14 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <1916237468.29168.1358087235091.JavaMail.mail@webmail07>
Subject: Re: GREETINGS FROM AFRICA( More Details )
X-Mailer: Webmail
X-Originating-IP: [41.138.179.177]

64.98.42.5

_____________________

SECOND EMAIL: PLEASE, FIND ATTACHED THE DEPOSIT CERTIFICATES OF MY CLIENT’S FUND. NOTE: TWO ATTACHED FILES WERE SENT WITH THIS EMAIL TITLED “AGREEMEN 101” AND “CERTIFICATE OF DEPO 001”

2ND HEADER INFORMATION:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) RklDQVRFUyBPRiBNWSBDTElFTlQnUyBGVU5ELiABMAEBAQEDdGV4dC9odG1s AwMxAkFncmVlbWVudCAxMDEuanBnA2ltYWdlL2pwZWcDAzExNjUCQ0VSVElG SUNBVEUgT0YgREVQTyAwMDEuanBnA2ltYWdlL2pwZWcDAzY0Mg–
X-YMailISG: M0bKmoIWLDv63kKzxOEndptXp.7zvC0TJUVBOwfWgk24Wvc0 bi7PgOqwK0A9RE6NhtraNE_SZowuJ31bixqsmyDiWNNWlZcM.o2_pzjLt0Ia H7sJksHnQ_GGvyfzwSQ9PKZJBmlZl8Aw5WOy5LEq1CqgoFr.FMXz_.wM51H. LAjMuSnYvvuQb9dnVd6RYYRNrmW9QHxCsKDiGzkPQMEF_15Nwdsbb_iZ1mop 1GJry4lVc1UMYVcURhKVeruidysBeiCg9Ks_lqUDoUCyeflAaZRjdcSFRhzD HBtrM68fAExh0601NZrjsv9gxhh5c_KULam1Ql6R3rg6tISy0_lvYTkCI22Y 92v6XlHWLVsIj5FLm0gB6Hy5syepXygpU0ccub4BzJsEctoMixLzK1.vdQyG GaxePaw_Ph_55k9pTJJWBCtxGMD9374mys.gF4rmhGaakicSSr.evJ0e0kW9 rVBUvPjWEw17yErVJE20zz78lLhCeb.yhvLw8BFe7EUFGhXs2Lzna6WPmd0w rcNejoHTq7uXu7MSNhd_x7MUBLlYxQipy9_bZQtUTc5YGzaCvvCKzGLPCIso u0DovZ2CiWPkYBvBJDBVKC2uHefv41rCje6VV.4bHzt4DmfQoAnPJEn6zLio uWwfRB_f3fhoBtiByP4aLICJaEEqcDbNAE7X2u8v0aO1hDQQ.jGRjIMkBVdv jibyKiMT_nESBTk5jIxbHVW5SNitSOTG1_.6xOXFXaz7Ws3Gh2caj5dQxleQ 65UHSPdk9tB266Vv3nUJ1HOVtIgZrEU5EsplZ4blV7Pqa_AQ041jTLGrUwQd GhKN.Cm1e4Y0885YbwBCEOZwks2gbzEb6KNzwJ7lMHCKbNz8RI2EWTED2GJs 9VwrYWJLBf_UE0oyxwajhR.k9tCG25X3nkPAm4aNbp8azLw2lXhjnrUu7azQ tYrugQVhK0FB4PRvOtvdS_h72lUGQw9KVfizt5ISed7Sa.Ch8d52XIiN2844 CQ5VbaaK_tkIlLELgiWUqbXR7WzguxN2JbJ.lyl5BG_70QJPaGe8jgf7ohQD 6bIFazaSlL1R6jgaWypgCSj9IVreoSYuof6l4anLT_bNLaWm7g–
X-Originating-IP: [64.98.42.67]
Authentication-Results: mta1270.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.67) by mta1270.mail.ac4.yahoo.com with SMTP; Sun, 13 Jan 2013 06:29:26 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay01.b.hostedemail.com (Postfix) with SMTP id A8943146A059 for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:29:26 +0000 (UTC)
X-Panda: scanned!
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 1875701
Received: from webmail07 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf10.b.hostedemail.com (Postfix) with ESMTPA for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:29:25 +0000 (UTC)
Received: from 41.138.179.177 ([41.138.179.177]) by webmail07 (Webmail) with HTTP; Sun, 13 Jan 2013 14:29:25 +0000 (UTC)
Date: Sun, 13 Jan 2013 14:29:25 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <619678690.29189.1358087365863.JavaMail.mail@webmail07>
Subject: DEPOSIT CERTIFICATES OF MY CLIENTS FUND
Content-Type: multipart/mixed; boundary=”—-=_Part_29188_651041165.1358087365783″
X-Mailer: Webmail
X-Originating-IP: [41.138.179.177]

“Barrister Mendy Samba” <mendychambers@mendychambers.com> REPLY-ADDRESS: mendychambers@gmail.com ORIGINATING/RECEIVED IP: 41.138.179.177 —– 64.98.36.5 —— ORIGINATING: 64.98.42.67

____________________

THIRD EMAIL: I am attaching my passport copy as a reference NOTE: an attached file was also sent with this email which included a fake passport. The title of the file was “Mendy SA”

3RD HEADER INFORMATION:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) ZmVyZW5jZSABMAEBAQEDdGV4dC9odG1sAwMxAm1lbmR5IFNBTUJBLkpQRwNp bWFnZS9qcGVnAwM4Mw–
X-YMailISG: zPVv7I0WLDsu.s.Ysyspp4f_fWriIeE68pg9psqNgVdRguDo _rLQvGuv4_Cg60ZSt.2HHOivooPysnmrTAAY.uShn6fuPG3svNTC0oKB6CFr S6TLBL8al8ZilKn49KLgeTzFD7eyhHDJQ6QwJtIpVdoQM5ZM0ghFfj.5GZQA hU5pEH0JuLu7L_bhN2OVCU_r2D5VpbCAmd9VVxkksJnwuaehbcsE1pkLKGxE wai4CKqgOyDLxN._ZJjreFiRFXbuvydeL3fT.wx5nCc5XF5g92KYrNTLz3o6 QP2kwNLbKvi2WEL5OlOSMgiXQiK5GzMBCFSIFlRWWduzWrpj9Aog70AaF_tP zHfvKMq0pe7uyQEvtzDi86M.anVkf7ymwnL8qRnXTIdNWXFYy4LaFSwy2NKJ 0CsY2JPGuyzNIuGI0gKqSUAvJq9R7vFJBVqbIjSnWfKz1KHWOFIWJdsNFnRu cLsxWvdVpzmZavMXPvvvoud3r0XnkLrP8uyCZ_hXEj14CeBj9ag0PBHQbs_X 29kvABmn5Jm9vxZV0hLi8d1yF6__CITi88y2E8_nkXJVFlmJuo4R54.G7Nmx 0YuCbEazsx8kvEJbDYkP5CKVIHrfFO3kSCQvi1EKsHp4Ik8BXcWb_MWkEUti FlfUuROEqERcXFIA3qHp07xdfjxo.5meRQahcxrlORRYEqJfKMJ2JfmwT23O PIN0i8vEuFe8jXJZQinTAs777783ISg.DlXIzzK4HnASLAy.Og3tsUake1SN Tyk70oeA1WenNH120U08ZWyVTc5ainc4VJ64eBZnJ2G6J4BD7MvXoaE9PCK2 GP9bO_mS6RL35.TaHW5ZjM7g8YbgNf4GmvelNaAytPrqGwOPawaNEuvPewKa t3wEYSdOqmkPFXo0S2d2cUhtZszHyZMVFhNJfQ.v0jmGN3gW5ptIrLa302Ob igESzqyKtB6ae42uoFqWzH7BL.cf5Gnez3JZp0xm4NsrWsI.w45_xmuHoh0x Z4836la.CrYNKahtjpOUQx.jwG3apAWfXPSwDUJkYOd.R6PaHrn0LBHSg6bX RDzwXfADW5yMl3fl8jQDqTvTzUl1xnq4D_Jp6O269mk.t2ZXJLKtckGcMjCX BYniEZcDcg–
X-Originating-IP: [64.98.42.164]
Authentication-Results: mta1171.mail.bf1.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.164) by mta1171.mail.bf1.yahoo.com with SMTP; Sun, 13 Jan 2013 06:31:00 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay06.b.hostedemail.com (Postfix) with SMTP id 4B6875E9F9 for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:30:59 +0000 (UTC)
X-Panda: scanned!
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 86929
Received: from webmail07 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf07.b.hostedemail.com (Postfix) with ESMTPA for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:30:59 +0000 (UTC)
Received: from 41.138.179.177 ([41.138.179.177]) by webmail07 (Webmail) with HTTP; Sun, 13 Jan 2013 14:30:58 +0000 (UTC)
Date: Sun, 13 Jan 2013 14:30:58 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <1490255423.29212.1358087459089.JavaMail.mail@webmail07>
Subject: =?UTF-8?B?TXkgUGFzc3BvcnQgQ29weSBBdHRhY2hlZOKAjyEh?=
Content-Type: multipart/mixed; boundary=”—-=_Part_29211_1002852497.1358087458957″
X-Mailer: Webmail
X-Originating-IP: [41.138.179.177]

Barrister Mendy Samba mendychambers@mendychambers.com REPLY-ADDRESS: mendychambers@gmail.com ORI-IP: 41.138.179.177 RECEIVED IP: 64.98.36.5 ORIGINATING/FILTER-BULK: 64.98.42.164 RECEIVED_IP: 41.138.179.177

 

“Cecile GOMEZ”

INHERITANCE (CHARITY) SCAM – NIGERIAN (419) SCAMMER

NOTE: This scammer sent two (different) emails within minutes of each other. Both emails look similar but were a little different due to a few things, including, an image yahoo blocked was posted by the scammer in the first email but the scammer didn’t post any images in the second email. Also, both emails have different originating IP’s but the same received IP (41.216.50.35) which is a IP located in Africa — check both headers below for additional information.

EMAIL NUMBER ONE:

Hello I will contact you by the will of God as it is thanks to him that my choice was focused on you. And God’s choice is always the best. I GOMEZ Cecile French nationality but for health reasons I am currently in a hospital in London. Unfortunately I do not have a legal heir who can enjoy my fortune. That is why I have contacted you to inherit my property to carry out humanitarian projects especially good care of orphans. Since my days are numbered made my health deteriorated so I do not want to die and leave this large sum to the bank or there are people who are in need. So I would go through your channel to do good to these poor children. If you agree to my offer of donation.
contact email: cecilegomez268@yahoo.fr
God bless you

HEADER NUMBER ONE:

Return-Path: <eliana.cortassa@alice.it>
X-YahooFilteredBulk: 82.57.200.119
Received-SPF: none (domain of alice.it does not designate permitted sender hosts)
X-YMailISG: miS4fJcWLDt_DZy4IOQyQdmRBKBlc_v9.x98VBEgMEZSH3_E m3ERR7Jsuw4ljWQxBeFsN1MvBvut8DSBNizvqfuv97OSpg_OuM3jumW..O_n WRzxsfHFMq2JWTqpWLLnNJvIjFrBPAhXLJWudKHF9ZY_YnWzNI0dewh27MIQ ZwOPK_c7k1O3nFHJRDu5_aE0r5hod.qemWnJpiMa34JPcxA6Vt_2xUghJy4j 7UAFfeP.cqsajxCSGUfjAkEyVHu5CulNGe9aMt09ZwixnmEgx4WZPShrlEEb mC285to2_WG4SX22B9XOAYIAj138O_KzoMQMs6xzbEvMJIPrfCHKnzKu_PU5 7vXb37RMzDnY6te3CmlRaIiEOf3tez9GFTG_IkICtAvNGz.MY2_pYxfAAewo ty61sP9d8682lMj3n9DNYqcp7553OSZthVyF4.zRqei.cOtN.ohOomrYsays Ptsy6XJ3WIJCSJinXdSBN6C2xiV90LC.NIjYDEPgsvGaEVI1jXxEMoZ9wJKx qvSEQxM5c05AblqDX0yODEWynxKLeWzCafueuOHhlijXAtthYi8zMVTX9dA2 EQwYZ8PQN4CBTTzyNNQQIYT4f5S4yoW4K5Bb0Ydgnluhan6Ofy9gmBG96i3X rQU_SNhuqJxVThyVHrXYJy_M249pU7AE9h9nkep6jTTsME_wbBkZ0WRiTPu2 DOTxgYUk8zvMho9CRbJO7qmzNAwLdKAfhtMJtCuLZic25oA65gCA24X8h3vA 0KtTY_XeBZ2szfxlVM1ksQtL5IbM1avb1opedENc3anX5PWctrlT34Fpwc6d rQoO_KU0lHr72ryaTcZqqsGm6wqFB_7g513.fOj6q9trXUjeJUoc9uQfvu6M wJ0vjELKMCo9ActP8uNGNS4ZaN0.oPZ_UaZITx3jTSM6F2bkw6hfyWuhrZ3n TcqGA30E5D4wmaq0cnLZg24eGyA5YJPs83edbmmtsAgJz5mSYqeduj9l5Acp jUZqXSTfm.ridkY5P_4VBZfyHp3ldBDKYEuEP116FHwJ5Bm72pxFS6o6IaN4 6bVrlxp5v0uoyTs4Oy4hmxM20UdAhiUhwJUPkgemzsKp6.jQ.NtiFQeU5pQI FXX65Sp_D74yYCs9nrk2zAmbV3oPjP5kpPZmVAtqOnXzmzLA3Ep8KxE0HPiJ EbS_JOWUST2emUIBQ9XD8lMRB0Bfw3nEnc6_Vuo.5XB9vVI9oV0DaTT6yQv9 Kq6fEwVEJzgW1IQnoC2EV6tqK_nKDq32We395JMnb8_ArPwqZt7QsfVhrVoA NpPO8kFoaHVbXWxhfIfXA2iKomNB7iVIayg_4A5s5CMDPwXKFs1kDrVSy7h. 5LE4TV67ePP6u8XKM5rECVktEX20rr6LhfGqngc.xqX7jjicOQXvbRv_ypFI AUXXzy7avEj0KMbkpF4PtSmsSSx5NgP2flQv.C36WQRu_b3be3.lzwHm.hH4 J05aJO.gvxyw5RHFBbQUuia9Nl.3OvJUwRpISwCp8nKleXEbDuWyxxHcytn5 GPuJ3M28n5I3p4KS_jKUYIJe6ySv2GLU883WbZCF29sSgg_meqgesybYsdmF 47gTZuj7d956x5VsGMLSNgRpp3ZYrxddplZyr2cZ80Gfjq48a43v1JP4MkaH PvuWXDVFzrqCIRX9HrRhhjtTRJZkm36wWw4hg5CV
X-Originating-IP: [82.57.200.119]
Authentication-Results: mta1284.mail.ac4.yahoo.com from=alice.it; domainkeys=neutral (no sig); from=alice.it; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp303.alice.it) (82.57.200.119) by mta1284.mail.ac4.yahoo.com with SMTP; Sat, 05 Jan 2013 07:04:08 -0800
Received: from feu24-alice (82.57.204.79) by smtp303.alice.it (8.6.058.01) id 509146560258A44A; Sat, 5 Jan 2013 15:57:19 +0100
Received: from (41.216.50.35) by alicemail.rossoalice.alice.it; Sat, 5 Jan 2013 15:57:19 +0100
Message-ID: <13c0b374efb.eliana.cortassa@alice.it>
Date: Sat, 5 Jan 2013 15:57:19 +0100 (CET)
From: Cecile GOMEZ <eliana.cortassa@alice.it>
Reply-To: cecilegomez268@yahoo.fr
Subject: WELL LOVE

FROM: Cecile GOMEZ eliana.cortassa@alice.it RETURN-ADDRESS: eliana.cortassa@alice.it REPLY-ADDRESS: cecilegomez268@yahoo.fr ORIGINATING-IP: 82.57.200.119 RECEIVED-IP: 41.216.50.35

____________________________________________________________

EMAIL NUMBER TWO:

Hello

I will contact you by the will of God as it is thanks to him that my choice was focused on you. And God’s choice is always the best. I GOMEZ Cecile French nationality but for health reasons I am currently in a hospital in London. Unfortunately I do not have a legal heir who can enjoy my fortune. That is why I have contacted you to inherit my property to carry out humanitarian projects especially good care of orphans. Since my days are numbered made my health deteriorated so I do not want to die and leave this large sum to the bank or there are people who are in need. So I would go through your channel to do good to these poor children. If you agree to my offer of donation.
contact email: cecilegomez268@yahoo.fr
God bless you

HEADER NUMBER TWO:

Return-Path: <eliana.cortassa@alice.it>
X-YahooFilteredBulk: 82.57.200.117
Received-SPF: none (domain of alice.it does not designate permitted sender hosts)
X-YMailISG: 1h_MycoWLDu18D41tm1z87pwt6EAmInTosRnwnkOgCgsbvpa VRwaFLMirEpfzPBz_ip6KczwnNCehyEZ1I7mZvLYE_7aC4dLO2FLCCr6DHuK g7uE8U6QNcj2w6z1RsI0n7l0hojc7Cz7oYz7OA2ttZZnq5rT9xHIrpM9UNoj 45l0UY0A5PQSluqASzhCJ6fZG4ZZ8P27TH68KrkvSPowsaGHigeewkhtxSKa umFRhDIeItwXlAqJOs.wUtnl6IdQOkd_7HJ30cw8UBslofwd9zdyGxWw6Rw. MXMXWl9.P.hFZZSYCvp67eL47tVdhvfB5UHm7qrRbEIj.YAPUxJllAi8l83k gnntKEC2vXhOriT4QkNp67uQCCHi.6eyNVoqz9M5rsARf5ug76cZSrDMJbMw EQZjwVzF8Ctndw1vG3GVadE0OKzxX9RMvz_L_CfhrBsp8BeXgofylk1zN3yX Ynir7ymKdkAA2rViEDcQlzbuyCiLVGb27uGegHSNP0sAJhqdQ5WP3rCxVTsK eRgcOn65rQuK0zyYJCdRKXxf_Ca24VeVfPimka_LJPVBel_6.J4HvtCsf4SW wAqV4mW.Y_NQ.hDOUFlAHk5rcU4yP0tkJoCOUi907xT9dUVZtPvKBI1Moc4q rkkvAITlc7H4j9cIhAVZY0f6plADZVFMoePvlCLhpOXVhGWuH10IHqLnmtZq oVHaUXSCRJNlNXpS35Igt0koNC09Ekevqq4JkyqwzNAVQmGIti_VpvXysXO_ qCRSlNuyyN5zRSXy60g6EsgPFH5u2q607fi20lCYWPkNI2PnYuykOIvD_Prh Pqyx9qyZAWjXuJTpxQXSeJRPxLoncbR3XQEe6bg9N4J9.gzMiF.fTnkj4fV9 Yb0BUNEsiy4UBwIul4YRFbVVJXfGVbWDLWJo9LxCup3syPsvkszezPw3Okgb z3Wgc6k_6O97rbEZmQFTZn3EAfBNyjKLOx0xLIiXtBqf0LV6UjuTA9t9MA2J 57QYuPf34FpRIlgxtUXXSNhb7HfaCriMfK6wifmpTy9HIx2EGmt8TKNCNUa7 VuKiVOTuQVFJwW_gcS_8eUs67dIk6k.wJCoqSMNOVXF8SgWxAkS..MSqRy7H 5zsIHUmBhZdfApWjL3KzAh5BO3cY7EssLIOX8faU4siY1.tncj6DMEXwjsNy gsxs9Lr.742xpI8cgUbVxIjFmHf98XRmq7o3lzC_E6zfP14whtLkSoKuCZ9. 600fWlYgbEFFisyvrztOj.Zd0zuRENRcZSsVp_FjHztnh17MHfLmIxUxlAV6 PQpK0Qmh8_AfYzc7HkFq.eMLC56uYy1LTIspU2KNtSIm7lU7Qj3Oevuyj5WP .S1SUL7TY7p2.0S5.73U0DTR9IQhD0p8qFwkoH0j1FfUVmJYdNjWJ5EKrEv1 j2X8FnuubnOceBiE0uUgpIiDHheoGJVjf3Lin.RosnWlvuHc_aeUP3GrbS3n qzNGsyB_gCJYGdzx4QWnD2wSj9k5kvj2bpANngTBhoWzXF4bErlXXePCw8SW cgZUfAysDhjs8wHQBwzlZsnjqHymmPsmXaawTKe6VJQJJ6iJrhrsDKBaKc5U PWVTYYThYVSEjw–
X-Originating-IP: [82.57.200.117]
Authentication-Results: mta1273.mail.mud.yahoo.com from=alice.it; domainkeys=neutral (no sig); from=alice.it; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp301.alice.it) (82.57.200.117) by mta1273.mail.mud.yahoo.com with SMTP; Sat, 05 Jan 2013 06:59:23 -0800
Received: from feu24-alice (82.57.204.79) by smtp301.alice.it (8.6.058.01) id 50AA53640293495B; Sat, 5 Jan 2013 15:59:05 +0100
Received: from (41.216.50.35) by alicemail.rossoalice.alice.it; Sat, 5 Jan 2013 15:59:05 +0100
Message-ID: <13c0b38edae.eliana.cortassa@alice.it>
Date: Sat, 5 Jan 2013 15:59:05 +0100 (CET)
From: Cecile GOMEZ <eliana.cortassa@alice.it>
Reply-To: cecilegomez268@yahoo.fr
Subject: WELL LOVE

ORIGINATING/FILTER-BULK: 82.57.200.117 RECEIVED-IP: 41.216.50.35

FYI, the return address used by this scammer is Eliana Cortassa which leads me to believe that the name is also one of the fake names being used in an attempt to scam people. Either that or ”Eliana” is the scammers fake banker or lawyer.

 

“Math James”

BUSINESS PARTNER SCAM – NIGERIAN 419 SCAMMER

Greetings to you my good friend,

I received your forwarded assurance mail,

how are you and your family?
With due respect, trust and humanity, I apologize for sending you this sensitive information via e-mail instead of a certified mail / post-mail, this is due to the urgency and importance of the information, please I Appeal to you to exercise a little patience and read through my letter I feel quite safe and comfortable dealing with you in this important business.

But you should know that if you must do it with me secret must be maintained, therefore seal everything until the fund is transferred in your account.
Honestly I will really like to have a good relationship with you I have special reason why I have decided to contact you though this medium internet has been greatly abused, I still choose to reach you through it because it still remains the fastest means and most secured medium of communication, however this correspondence is private and it should be treated as such, before I continue I wish to inform you that this letter is not a hoax mail and I urge you to treat it with the Seriousness it deserves.

I also guarantee you that this business is hitch free from all what you may think of, reference to your mail I want you to keep this transaction as top secret and confidential until this fund get into your account then I will come down to your country for the sharing.

So for urgent proceedings I just want to know if you are interested in this business, for me to stop looking for another person, and it will only take five to seven bank working days process to get this fund transfer out from this bank to your bank account.

This money belong to our foreign customer , he is a civil engineer in construction contract who died with his entire family wife and three children’s during the 2001 American attack, Since then the Bank have made several enquiries and waiting for the family or any extended relatives but all efforts was just in vain. After these several unsuccessful attempts fails, I have contacted you to assist in repatriating the money left behind by our client before they get confiscated or declared unserviceable account by the Bank.

These huge deposits were lodged, with the BIB Burkina Faso, where the Deceased had an account valued at about 12.5 million Dollars,

The Bank has issued a notice to provide the next of kin or have the account confiscated, but as I am about to retire from active Bank service in five mounts time to start my own private business that is why I am skeptical to reveal this particular secret to a stranger.

Please you must assure me that everything will be handled confidentially because we are not going to suffer again if all things work well as I planed, and for the benefit of our families,

Now I seek your consent to be present as a partner since you are a foreigner, you can provide account where this 12.5 million Dollars, can be paid to,All I require is your honest co-operation to enable us sail through this transaction.
I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law, you also need to assure me that you will never betray me when the fund finally arrive your bank account and that before the fund reach your bank account you will never inform any other person about it, because I don’t want my bank to know that I am given you information to get this fund out from this bank.

It must be secret till we get the fund out as I am still working in the bank ok,
My friend I did not choose you by accident by the way you have answered to prove to me that you are the right person I am searching for, and again I want to assured you that testimony is on our way and you will never regret this great opportunity.
Please I have some questions to ask you

(a) this business do you have the capacity of receiving this money when transferred?
(b) Will you maintain the sincerity and the trust I have on you?
And the way we are going to achieve this, I will need the following information from you,

so that I will not have much fear
Your International passport, I.D or Driving licence.
(1) Full names:……………………………………………
(2) Private phone number:……………………………….
(3) Current residential address:……………………………….
(4) Occupation:………………………………………..
(5) Age and Sex:…………………………………
I feel quite safe and comfortable dealing with you in this important business, mind you this transaction is 100%.risk free,
I await your reply before I sent to you the Official letter of claim which you will fill your data and

send to my Bank for processing and approval,
Thank you.

James

HEADER:

Return-Path: <mathjames87@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts) aXZlZCB5b3VyIGZvcndhcmRlZCBhc3N1cmFuY2UgbWFpbCwgaG93IGFyZSB5 b3UgYW5kIHlvdXIgZmFtaWx5PyBXaXRoIGR1ZSByZXNwZWN0LCB0cnVzdCBh bmQgaHVtYW5pdHksIEkgYXBvbG9naXplIGZvciBzZW5kaW5nIHlvdSB0aGlz IHNlbnNpdGl2ZSBpbmZvcm1hdGlvbiB2aWEgZS1tYWlsIGluc3RlYWQgb2Yg YSBjZXJ0aWZpZWQgbWFpbCAvIHBvc3QtbWFpbCwgdGhpcyBpcwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzc-
X-YMailISG: uqS19_YWLDvPD7Fz8RqbcSlZ80vvCFMM.xbt.dIcfLSKv.w0 2OPWpHRcwuBBE4F96xiKVXucMKTUGsxo7BjTEumJ35Il2gkf_V7ymsRux.72 dkDdAh6Ogg29ATdG11W82NJ1NzAXV9Qn.1W6e9gEsg7rbcyxE6s7bhq73PbH sKkXV2Yu2qps8pdG8QnzdyGrbxeEAnbJR779gR.iGcz3mXi1f5zlQvJybXX9 w.aTpEgKZRKV.2E.RKNHQ2GQ7tClR9C5t_2h8ZmrhcPDhIKs2zG3CgNOV8Tc bdi711peoRJIRbl9FFdLhiPQ4T7IsCn5e4tQeSk4H6Nr4i7eJS4tegQwlCLW H0zDjlY46FcQoa3q3r7a0AqMJKF0goWBBkSPlkuvLHMDMZDZA9Van2sccKk. fGyqJxz0AMMfNMeEqvdzdZUZe8QVaHFD2I09qcTox.UNbxy5pqzbs07nnmoZ AxjzAG0qAu8V9yM.uouTTYmiRncDD4RP4WaOSvtau3w9BlLSVgke_c8yJgiN 4WERvVen5MDOs258Yv2VxsApFXZhUZIgdTudkNyzkSbT3x4OUiM1DNstlpjF 20hYlLKnhMK2Bb74EYQdjOHAkOZglwPy8sKK5dzTD3KTtLvfZoVky8yNmX.P CclUwFrJN4OtZSPOvg5aDU1swGsa7hzJwvhw0SPn8rcJdFp9IDwSx2PfSVGw OZPs9ryMEmQifES24w3xoOEKN3EjHNJELEUKtWP.g9zxJRAsFXt34RWlmsXD FfXrzmWYZ6QWkEEqHd.PnCac6ruoMTkvcOfGuAQzM6lGiFHwpDGiJE_mNnMj T3Hyo_3kyhkJ.tR2RtCapPTvLg_eo2z0R.fLL9zwuww1D6B5BGiLAr7y5CgE 96cgYDmTr4b.SKApVVO.8xhE1Tpk8VvVOn8hfT787Q5k8ydP.vcH_5Z4rHDx PZKuCvsat9ZcYocrRTApURJYtY7L6R7mYr_tiKQS._p5n_PAsFxYCrNb7_O2 S4ofnz7bdHvmWKTfhdMU3zooMIUW50nHz9Pi9S_fXUYMERDDbZb9
X-Originating-IP: [98.136.217.217]
Authentication-Results: mta1254.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm18-vm2.bullet.mail.gq1.yahoo.com) (98.136.217.217) by mta1254.mail.mud.yahoo.com with SMTP; Fri, 04 Jan 2013 06:04:05 -0800
Received: from [98.137.12.174] by nm18.bullet.mail.gq1.yahoo.com with NNFMP; 04 Jan 2013 14:04:04 -0000
Received: from [98.137.12.228] by tm13.bullet.mail.gq1.yahoo.com with NNFMP; 04 Jan 2013 14:04:04 -0000
Received: from [127.0.0.1] by omp1036.mail.gq1.yahoo.com with NNFMP; 04 Jan 2013 14:04:04 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 543489.11989.bm@omp1036.mail.gq1.yahoo.com
Received: (qmail 62761 invoked by uid 60001); 4 Jan 2013 14:04:04 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357308244; bh=/lhWtUmZXeK/lblMVMWZrCSu/dmVI75nTwBGmlRyEo0=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=nTZXBsOFCmCR7e0i2aJiJXhmtgemaRmPWzqSXMdXFiNs7yLzXSMcJCPi8ZlmcIYc4BdXVyt+BlgJtfhj2Ha3r40zUB6bhM6lKzhuv7X5z2Wl9BKALVSd+ONXNkmFEMOKyztUGU+EUObe8HTB8awueuBjyN24jZZfyE2cy1tOnT8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=xqhMJWr2scmGYy8KYwjst36KqYhWZ4Gl3Xmr7mWk33n/xi2XzFQI1jgCBQEKtqYH9p7HscdFFIEEwnYa1nczHeGl8Z51Hb+5AzCDWw35rFXuzZZ8kJd0zBUVR6yooB7THj1woshqW/OflkA3GH+u5qW6vb6nYCSQQ/hj/0tctH0=;
X-YMail-OSG: e2S60kYVM1lTiaeF9sLlRDZOwuw9RWyZMGJLMdGkbkUUKOv cDvWu2S_cTXVOTeciia72LybgO3iwOAube6q7v_yadxXFAs50B27CTg01Tff PjARdqgUh3y3yUKPvSEALzmx_f5EXWTnaIS6ZSSI.40VOGa75HW.au0.TvML Xh9T.PYg8JPa9bicTcRMKkeXjFI9zgec8i6cDgzIL9ULaRox1V28r2XAuLa. KrxBGtBVWuVSMWCpe7MIxWHPmD.1DS5y2om8EEdTNbhN2YNQuWZtFGq8dW6_ kfVQspm9O5BrNs.SrlcEd_yjpyQP4gOq4VgmZ2sunbufMh4b8U.FQ8qU54n0 cEtli3kJgI_o2NkGGIrox27H1FX.ULttypP.ErSWzNDU12qtdza35JNCb3l4 lDLlnCRiB_uBUXckZHHWoCgBvwAfAkPSvPLcO2KcMi_VP38Rgk.MHjBLoOgG o7pmYSnKxHVY152_tipAugUc-
Received: from [41.138.97.125] by web163503.mail.gq1.yahoo.com via HTTP; Fri, 04 Jan 2013 06:04:04 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1357308244.62389.YahooMailClassic@web163503.mail.gq1.yahoo.com>
Date: Fri, 4 Jan 2013 06:04:04 -0800 (PST)
From: Math James <mathjames87@yahoo.com>
Subject: Greetings to you my good friend,

Math James mathjames87@yahoo.com RETURN-ADDRESS: mathjames87@yahoo.com

RECEIVED-IP: 41.138.97.125 LOCATION: Burkina Faso (Africa) ORIGINATING-IP: 98.136.217.217

 

“James Thomson”

BUSINESS PROPOSAL SCAM – NIGERIAN SCAMMER

Good Day,

Please Read very carefully.I am Mr.James Thomson. I’m the credit officer in a Bank here in Ouagadougou Burkina Faso.I have a business proposal in the tune of US $ 12.5M (TWELVE MILLION FIVE HUNDRED THOUSAND UNITED STATES DOLLARS) after the successful transfer; we shall share in ratio of 40% for you and 60% for me.I want to front you in the bank so that you can apply for the claim off the fund as the next of kin to our late customer who died years ago with his entire family while on holidays and several attempt has being made to locate his family with out success.

You should understand that as an insider in the bank I will do every thing possible to protect your interest and to make sure that I follow things up as soon as you are willing to work this out with me because I will not want this money to go into the government purse. Should you be interested,please contact me so that we can commence on all arrangements and I Will give you more informations on how we would handle this project. Please treat this business with utmost confidentiality and send me the Following information:

(1)Fullnames:
(2) Private phonenumber:
(3) Current residential address
(4)Occupation:
(5) Age and Sex:

Kind Regards,

Mr.James Thomson.

Return-Path: <ranajitbaksi@yahoo.co.in>
X-YahooFilteredBulk: 106.10.148.117
Received-SPF: none (domain of yahoo.co.in does not designate permitted sender hosts)
X-YMailISG: NUN1hz0WLDuQLOhyc4XxRbvqrO7bz_tW0w8vUFxx43TH2Lu1 7yKMpr6qyuZRdrgZxMuv0UcFV5M1vanFZ1CnA7_Ka9RABO0MXWee7lgGXNnG eSQZ9S2vsfnU2jUSnnrCh0zoa5Q8Qdca2wLIOa2UN5rolp.yD.2dkCNRPXRR HqqZi164jAS50zNXFqv.BAd.FyKzK1813TvflmnXNtVkOwMgiOGmLhvvxEE6 ctCHYDYrB1bS0v71bPqRaLlsFFRFVFg0aB_UvZT0X6gwdYFZ7hsWbr60kw7x V9DKtXj0kfmX1Gaq.0TBUWbxzrEchQgQ.NvBL_VgB8xKgbibRCZTPTNJgSH3 Hjn8VQLIJJcUFtlxj8Zygs0h_8EkJP9R4eesWF2qllAkxWBCUIDyW0rulpp5 xSpY7hUka9dqoAY.Vo7qfLxAu4iPekmQn9Qx5Pc.Ic2xKTcLr_0nvhKnppdd B6KP9K3yO87aaAs5HhRlTzoTXGUvtDX9sLPkl..Wx3UKf6BZb0eiiGNHl9zd LCLimsyVEvxfu16AIKOcxFc50x287x9IxBQQ0R2JQ4BANUg7DXrVKj1JiLYc c9GDvGchLk1ZGrG.w3oI1mS6qKb7mFkvbK95DBBmvlgL_ICBeNpkNebcQ1Hm CFnma8Dr2J0G7O17wB049sfXAf07i6wJO0aIVc0u2ww128Ji3S23U_zXQ4pd KngUJSFOZ0qPr2iPknscHn21e_E46rxlKWtL6VkfEtKt30Dsguq_tkfdTGxG H0hpO96Q8LybuA45aotZTLsTiPFf.ccgyC1hZiZMTu1krYSDHDqwl5kJUKmD 5Ucfe5V4X_T_O9s852yJLv_kthPYjlghuLAlxGHu_6A5omZlVpkonyHAdRv9 4TsjBr6XLbDo0hvesfV6p26XL1.Mj.YfmMwz0xRREc.oaePU_.as2ms6RHhj b11Ay_8C.TLI2jkc8YNb_NBXx71V0FUU9AYnxWVPzFD2ELxVDZxgESx1za3c _IevkQBLMLv4EjWX3aeHmYPwCtWpMQOlkPGv.VYNyO4sPp1hjcClKu5Z2o7H tDwkb_t2C7FclB2K5T0Omk6kiTRFGqtf.SBM0tSUj.kD2iAzYzqTNXJGvPQg ovWxXRkiy7GLn9pWQUspetoht5wzB1GbndPUK5Sdnn14Tpcza_8t4udPrFl5 YVH1fTr1hTVubcU7LQMwcdPpPFfA2079fv7DMznipRzNMroyVniY5C9AYCSM j485aKbIvoSZiF0wd0HTuUMZOEEDs6enZzqqKjbCyqquXHV73866cMEU63KC T5cP3s7iHzpWRVlODsduoU2wAR17lq9wOGCylkJpyxby0jZ91ztQg2QYl.F3 vgZgc7xwx0WapBbJI.LEYubjCVsHvRttHdPcONE2t4mRUOAQRhXDsVWD_owW BQV9h4Ba1Emb8sn8aJWB
X-Originating-IP: [106.10.148.117]
Authentication-Results: mta1212.mail.mud.yahoo.com from=voila.fr; domainkeys=fail (bad syntax); from=yahoo.co.in; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm3-vm6.bullet.mail.sg3.yahoo.com) (106.10.148.117) by mta1212.mail.mud.yahoo.com with SMTP; Sat, 29 Dec 2012 08:45:04 -0800
Received: from [106.10.166.118] by nm3.bullet.mail.sg3.yahoo.com with NNFMP; 29 Dec 2012 16:43:54 -0000
Received: from [106.10.151.186] by tm7.bullet.mail.sg3.yahoo.com with NNFMP; 29 Dec 2012 16:43:52 -0000
Received: from [127.0.0.1] by omp1012.mail.sg3.yahoo.com with NNFMP; 29 Dec 2012 16:43:52 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 639744.70877.bm@omp1012.mail.sg3.yahoo.com
Received: (qmail 52612 invoked by uid 60001); 29 Dec 2012 16:43:52 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.in; s=s1024; t=1356799432; bh=n8bv8DMcNJCY3S1OgbDyDoo9DxJd4LQQ5X4vN2RsnFg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=iR0UsPwm5i9ljvwwNsvV3fhLqfGloiXksU83SdkUsHnEpTU9kVKaaFiglm859wqKFL0TLNu0DHbgSQIVBtOS7EbCF10sNraIYI3RXVb9qZNDTnr7/QCTCg+MeOol1opwHyf/PScDjFn/ooHkyvPcE5tH5L0wvs8zaW64eIlGL7c=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.in; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=QCnzb21u5oBCmwPwsUmPgZXFdsNsMsFOtaKivRl+HI6u/NnHCYVempSAzt92L3pdQy2Dawi3s5ZZmk3iJ1ziFz9vveMvJHLkdMzQPdz/fVBT5dKiAR80J9qUCED6JSl3FFS8DFWM3s/NBZphYXqs9HrhdbM37txA7Mr+YT30JYI=;
X-YMail-OSG: 7XenU3YVM1m736t0PqBrdNBMZkUI.kfrLvsvNA.FRYn.cAr 0pDaHAwjgHkijEqp3m3AVUxyhb1xDwSK9JjxQuoVYgDumhGC61md2fuc9I0A Z19kCbsgcI_APlED9MEAZ.tyMPK9ySdmte2ekkSpOKFPWs7Ry_UuBmgutwER ytZvg.HcZ08I7eUL6hlI_dogFxp1htRWOKGwfBCxzVA_jhkyb9Beln7JVU1n pSqF5iMY9fm8gRN69SgDU3p0jF.9xcbQSIa31WgXJF_7kvl.jNEbIlo08Fxv HrT7lnM5nuwiknCNfeQZZHLLog8sqpwVUGcHzjad9NlBHR1konB_C9DFzpsn Zr1YxJcNFMh0RPkbtwLDEFMcgmN11FRWm1w2l6610p4aqdAwb06NE43.tboY Tb02t3D2d21PimL0MOAyLJZHxjLDFP9Wu95UQSEi.keNEKAtDWgYMMpWpDB2 Vvq2LXSjEcWz0WWmiIODJuPtj4PIirCLhzXo_qLKswEyS7QkiYmoDxdvOtgU A5A6rBTnKRiPhrOKOGOJDZYvreeL5cpuWpfecb6lJxpIXy_aucT0q_HhHy0V GwEcMZtLXZJYaWcT7UIX_nbuGYoukoJNy2Sxs7zISyvABmD7PhhELeT_OxQq MC8kk3uIrulLzQCVOmxVB4dt0a2FtjJQPObxsE1lEoDwKtYGG31CqSnM-
Received: from [41.138.98.208] by web193801.mail.sg3.yahoo.com via HTTP; Sun, 30 Dec 2012 00:43:52 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356799432.52079.YahooMailClassic@web193801.mail.sg3.yahoo.com>
Date: Sun, 30 Dec 2012 00:43:52 +0800 (SGT)
From: James Thomson <jamesthomson2@voila.fr>
Reply-To: jamesthomson@voila.fr
Subject: Please i needs your urgent respond.

Mr James Thomson

FROM: James Thomson jamesthomson2@voila.fr REPLY-ADDRESS: jamesthomson@voila.fr RETURN-ADDRESS: ranajitbaksi@yahoo.co.in  RECEIVED-IP: 41.138.98.208 ORIGINATING-IP: 106.10.148.117

 

“samantha kipkalya”

419 BUSINESS SCAM – INHERITANCE – FRAUD – NIGERIAN SCAMMER

Samantha KipKalya Kones is a NIGERIAN SCAMMER who has been reported under the name ADIN KIPKALYA KONES not only by me, but by multiple anti-scam websites and multiple online users. — Infact, this scammer is so persistent with sending out fraud mail, that search engines automatically list the name once you type in the first 3 letters of the last name. You’ll then see a list of emails this scammer has sent out under multiple email addresses and IP addresses. BEWARE!

Click Adin Kipkalya Kones to view spam sent to me by this fraudster.

 

UPDATE: KIPKALYA KONES IS ALSO SCAMMING UNDER THE NAME Miss Aisha Yak <missaishayak@gmail.com> Reply-To: missaishayak1@gmail.com AS WELL AS Aisha Yak <missaishajustinyak@yahoo.com> — ALSO CURRENTLY USING THE SAME FAKE PHONE NUMBER +22674747258 — AND THE SAME SOB STORY — CLICK HERE FOR ADDITIONAL INFORMATION  (This scammer is using more then one phone-line.)

EMAIL: Please my dearest help me! 

MY cry for you
Greetings my dearest one,
I am writing this mail to you with tears and sorrow from my heart. With due respect, trust and humanity, i appeal to you to exercise a little patience and read through my letter, i wish to contact you personally for a long term business relationship and investment assistance in your Country so i feel quite safe dealing with you in this important business having gone through your remarkable profile, honestly i am writing this email to you with pains, tears and sorrow from my heart, i will really like to have a good relationship with you and i have a special reason why i decided to contact you, i decided to contact you due to the urgency of my situation, My name are princess samantha Kipkalya Kones, 24yrs old female and I held from Kenya in East Africa. My father was the former Kenyan road Minister. He and Assistant Minister of Home Affairs Lorna Laboso had been on board the Cessna 210, which was headed to Kericho and crashed in a remote area called Kajong’a, in
western Kenya. The plane crashed on the Tuesday 10th, June, 2008.

You can read more about the crash through the below site:
http://edition.cnn.com/2008/WORLD/africa/06/10/kenya.crash/index.html

After the burial of my father, my stepmother and uncle conspired and sold my father’s property to an Italian Expert rate which the shared the money among themselves and live nothing for me. I am constrained to contact you because of the abuse I am receiving from my wicked stepmother and uncle. They planned to take away all my late father’s treasury and properties from me since the unexpected death of my beloved Father. Meanwhile i wanted to escape to the USA but they hide away my international passport and other valuable travelling documents. Luckily they did not discover where i kept my fathers File which contains important documents. So I decided to run to the refugee camp where i am presently seeking asylum under the United Nations High Commission for the Refugee here in Ouagadougou, Republic of Burkina Faso.

One faithful morning, I opened my father’s briefcase and found out the documents which he has deposited huge amount of money in bank in Burkina Faso with my name as the next of kin. I travelled to Burkina Faso to withdraw the money for a better life so that I can take care of myself and start a new life, on my arrival, the Bank Director whom I met in person told me that my father’s instruction/will to the bank is that the money would only be release to me when I am married or present a trustee who will help me and invest the money overseas. I am in search of an honest and reliable person who will help me and stand as my trustee so that I will present him to the Bank for transfer of the money to his bank account overseas. i have chosen to contact you after my prayers and I believe that you will not betray my trust. But rather take me as your own sister.

Although, you may wonder why I am so soon revealing myself to you without knowing you, well I will say that my mind convinced me that you may be the true person to help me. More so, my father of blessed memory deposited the sum of (US$9.5) Dollars in Bank with my name as the next of kin. However, I shall forward you with the necessary documents on confirmation of your acceptance to assist me for the transfer and statement of the fund in your country. As you will help me in an investment, and i will like to complete my studies, as i was in my 1year in the university when my beloved father died. It is my intention to compensate you with 40% of the total money for your services and the balance shall be my capital in your establishment. As soon as I receive your positive response showing your interest I will put things into action immediately. In the light of the above. I shall appreciate an urgent message indicating your ability and willingness to handle
this transaction sincerely.

AWAITING YOUR URGENT AND POSITIVE RESPONSE, Please do keep this only to yourself for now untill the bank will transfer the fund. I beg you not to disclose it till i come over because I am afraid of my wicked stepmother who has threatened to kill me and have the money alone ,I thank God Today that am out from my country (KENYA) but now In (Burkina Faso) where my father deposited these money with my name as the next of Kin. I have the documents for the claims.
i feel you are only one who can help me out of this
Yours Sincerely
princess samantha Kipkalya Kones
God bless you,

______________________________

SECOND EMAIL SENT BY SAME SCAMMER – My Dearest One,

I Have just received your email with lot’s of excitement, since when i feel Because the letter to you my heart has-been over with right to adequate housing if my thoughts and fear Will touch your heart position to come for my rescue.

Firstly I am emailing you from the office of the Rev. Father in Christ the King From Refugee Camp Mission, the Rev. I Told. Father Otuobiribiri Okogoro about my communication with you and He permitted me to access my email in his office computer Twice a day, Presently I have no phone order if you want to hear my voice you can call me with the office number of the father rev 00226 74 74 72 58 The Refugees camp in here and ask of Miss samantha kipkalya Kone That STAYS in the female hostel block G12 When You Will call me.

life here in the Refugee camp is very difficulty to me, to eat in a day is a talk of war for me, I am really Suffering here, it makes me cry each day and night when i look at my status here, I know purpose That with you i will soon come out from this my present status and Have a new life with you, I Have Been in the bank for Several times and i was Informed by the director of the fund this bank Before That Will Be Transferred I must have to present a trustee That Will Stand unbehalf me of my trustee. Because of my present status as a Refugee and advice from my father aussi history Before death.

I Have Already make up my mind to come over to your country since you Have Already Decided to help me, Even If you want me to come over Before the transaction I Will like it so much because i am in so much surfing here Appreciate all your Regarding promised to hep me, I pray That God Will Give You the Courage and the Heart to help me,
About me:

1) I am Miss samantha kipkalya 24 years old girl from (KENYA) Regarding this transaction, I Have the deposit certificate and the death certificate of my late registration, father presented Which I Have Before the Bank manager and i am Assuring you it is not going to bring Any problem now or future.

About my education, I Was Admitted In The University in 2007 There I did my one year subject in accountancy Before the Death of my beloved parents, and I Will like to continue as soon as i relocate to your country, Because this is a promise i Promised to my father, dear So I need your information Which i will include in the letter of authorization so That You Can send it to my bank as trustee.
YOUR AGE………………
FULL NAME, ……………….
ADDRESS …………………….
OCCUPATION ……… …………
TELEPHONE NUMBER … ………
COUNTRY ………………………….

I am waiting for this information so That I Will send the letter to the bank, and pls remember That You Should keep this only to yourself till the money has-been Transferred, and II do not want anyone to know about it, you Know That They Are So Many wicked people in the world, that ‘Good Thing They Will see you coming to stop it and They Will, I am a living witness, so promise me That You Will Keep It To Yourself so That The Whole Transfer Will Be OK aussi need your peak so That I Will Know Whom i am doing with Some thing look like.

Please you can call me with the office number of the rev father 00226 74 74 72 58 The Refugees camp in here and ask of Miss samantha kipkalya kones That STAYS in the female hostel room G12 When You Will call me. With the attachment is my picture look Best

princess samantha kipkalya

FIRST EMAIL HEADER:

Return-Path: <nasirkohatian@yahoo.co.uk>
X-YahooFilteredBulk: 77.238.189.65
Received-SPF: none (domain of yahoo.co.uk does not designate permitted sender hosts)
X-YMailISG: m9mfVSYWLDssIjwssVv4i9Khm4Q3IZDT8nqPO9fQXrssX6Zc lq_jK4ISt9x5dDopEJoUL.amzc7HrC9AdzryM1YfUY1ugUNh.R5k_X1NPv_6 7mZOpGPPUcVHHPsibA4PfNtelfQA6GWZIZJD4tkGoU0tGNGCaS4RM9xBgh3W FtWltRSC.UfPgzWvuPF8cJd432i0izmeECqa6vcIdDpNjpA_LC9rF_C.5JTj WQvTZLQDSDkYKS2LH6oaZqXIDzkqAmAUM6Agp7V_F65x7FhJKpK.rozqgUn8 9gqdYxU3LnHGCF6lBU826D7nKIfzQ3CmeoVOr6aVVsdHpsp99pLA7N.Ls_Wb qlxcWkK2k_JugvX.9im4uGNLke7N1OGFsLdgAV1tA9IazvlTmkVGJABJBxer lhoq4KoCgFx4tHi5affZyGSWc3qjvcmgWwiXXpndv7A6fB0lIPd3jQaZblZz eh._QZmSQvp0NW4S4I2UnTXDaj9zowzBx0FPL7x8C5.R608AXZpDCyPkXTL3 pCUK3nW2wQ.M6820AR7orUYhczrdEzvJiFiW9zrNOJHtmiwqDgioMTxEeIvI L.Wtstg4EM15ll14uuTx1Hh41HcCpcUYqVJmUg7ZUYsBl3cTTqZgHVsJf62D OTRAX6aPkl8O3urXdhQ1_Yukox61TSA6dpHQbmTX6TrAxUeV3gO9ppVLS6uy dmcY0KvS46zRDdVqk9ub9iBtQVoPiQEbF8zJ.rOjaMvVFinvUveytLHRW76B pLJnNiFcoqyNCZYkLp4tfxKv32FG6pekHwomDtgtmQ5DpqOEKKvKHD4b8mOi 8S8PVRu5KpFnizSI2U5E12x0.yGpWtG2Wb4vxUqbKfd9ct2adqWjbHVQDDPZ QH5jxc0lWmq9_cr9NkyQ7Atpysy5K.NBbiAHQ4mwYZ5Dps8FdzL_L98KaXQI s2vqLi338_8SzFcxW1QNSGeiuFICe2s3VMDqRJnghtN2Irvtzs_RfCkAeaD4 EBdF1XRg.bvaceDF2yiKVEHlftHtzRDbmO7c.dSVvdWC7MgSH4In.WdkUPLu ME5hHfgdI057AdSKJVQrmxgeLjO8RPr9gj7_wSMGt88mKDjpPvslT0l8qgRS 4VzdFfSEZf3HedvsAb38UB1WEZXYGUIM3_36F7qIwsMtm9h1jRKwuRhErSFc YAgaHJdBvcDQdEHxuNoQuJ.JgkGswG3VXOtRzhiaqDePYg_0FQssQW7DvJ9a BWUFlEhEts2l143XK06gVgED
X-Originating-IP: [77.238.189.65]
Authentication-Results: mta1077.mail.gq1.yahoo.com from=yahoo.in; domainkeys=fail (bad syntax); from=yahoo.co.uk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12.bullet.mail.ird.yahoo.com) (77.238.189.65) by mta1077.mail.gq1.yahoo.com with SMTP; Fri, 28 Dec 2012 01:23:52 -0800
Received: from [77.238.189.50] by nm12.bullet.mail.ird.yahoo.com with NNFMP; 28 Dec 2012 09:23:50 -0000
Received: from [212.82.108.239] by tm3.bullet.mail.ird.yahoo.com with NNFMP; 28 Dec 2012 09:23:50 -0000
Received: from [127.0.0.1] by omp1004.mail.ird.yahoo.com with NNFMP; 28 Dec 2012 09:23:50 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 713772.64494.bm@omp1004.mail.ird.yahoo.com
Received: (qmail 35751 invoked by uid 60001); 28 Dec 2012 09:23:50 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1356686630; bh=Qa/2n0SNdSnA/72ZJ4g5zjrNdC6NmAMfyv0VmSgj2Ck=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tF+8wPWx7zcCsS5xRuAhNUEAbP1uVF/1xhgQ1D8j157qGF6MPv5dCG9Te9InZ/jnWbmvitdaUBX0Ic4BaduTV/oMx6uu7dnNbWZ3v2v0PeYektsX8y055HH58fwM50EEfJybOrPqCtWZIEsPIENC2gYDqz3gBz7/Ia10c+ltZmo=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=DAMhNvQLk28+uPELthR7B3yRtX7YQCRi+UN9Yd2rbO1TTGoU1LPII66LsruIiKBecb4+qNGAcQNWSLySgAiYABci5STH7q8zQHfHGmWCrUIZw9mFS8Dyv6n9FXm+JxNJC1AUzSvWQ0V7tijdE8atWP1yO+9pMlUMVmHyIFp1SWw=;
X-YMail-OSG: ic3dDN4VM1nRksA2f1o2._2z9Cvk4RJyOwwgULmw3MBI9j4 PJuRF2lwjirze5bMJUYKVJYfVbsck3CYlLGnAQziY1BJrlGOqQozPnpWFaXx VdvwGJ8dxITnIbVnRjCEoAGgruBQ9QiolvVg32ppkTcwpS6NWRmQynNdMwPA eoNNpl1yYoaxwBoJj1PBR7.Tu46UTrlm7AeJaRaV7xnkLw4qLrVBR9Ki602u QjwfgJP4Q9FAKGvem33CdV16lWfdDcSaMZV27e9wkLKH85HcOb.Epl7AluuM Fzvt.V2C8w1BHL_Wc9HNpup3KllE4BNPfhhTDwCKOVdBVJyQ_oQq2SBLyfC5 3sBBML6rDLRkvoue32YGkiR0TEbiZ3u84uLCkd2KRH2kLaRJxupZNhUKN6iv vvuKaloOQlM.dw_aNVXfjE_pZTmEkORHTAmBfPjwzBrP5svTHwKoZlghUdfj c25ier7wAVaVo3FomJc6_0N9E3X0yUOkTczInTFmVPmBJVG0eHsj1U6ef1ZJ 5AberuZkTppb4hzoq11U_awP7EiVW8BRLUcUD1wn1n..E7ZcreSkZpGg3lZD fUz7atgiFHXbjyIsiV2nAUzH_3jd7aFT0og.2vBUs1Dpo6.dvQkCqBw27IzM rFISBVLG_eH9kIiSeaw_dp0p9H1evCWc5HpdNED.I4errQAn1CKu0WdCisAD CBblQfupF_lhLI17hzqZ51nYWt5eEtVqmSzVj8RyBG9RQGohk0K_PZySmvOw eyOvYEaM-
Received: from [212.52.153.246] by web172605.mail.ir2.yahoo.com via HTTP; Fri, 28 Dec 2012 09:23:50 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356686630.34517.YahooMailClassic@web172605.mail.ir2.yahoo.com>
Date: Fri, 28 Dec 2012 09:23:50 +0000 (GMT)
From: samantha kipkalya <samanthakipkalya@yahoo.in>
Reply-To: samanthakipkalya@yahoo.in
Subject: RE:Greetings my dearest one,

FROM: samantha kipkalya samanthakipkalya@yahoo.in RETURN-PATH: nasirkohatian@yahoo.co.uk

RECEIVED-IP: 212.52.153.246 ORIGINATING/FILTER-BULK: 77.238.189.65

customerscareecobank@yahoo.fr

________________________

SECOND EMAIL HEADER:

Return-Path: <kipkalyasamantha@yahoo.fr>
X-YahooFilteredBulk: 77.238.189.192
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: qbXLW8EWLDsMqB4hxPxueXXcxlCUBQ_yEhEnqWmlExRqI8cx hpll9Pw9OQTJl6CXA6k8AJHmOEw6tp1F0LApIbYrK45.vk761HiG71tX4apf US9IKP_ctb.NOAB0r6Gu12YrVUlx3M3Px.R7jiDw.RzOTkYQw3Lf2fwXW3IR 8yONFBMD7EHcdDbY5GDo5eGg8ODYJsdP4wkZ_U.oypeidBzXOlXbdkU22sXo 56nX6wcz3wd_9rwtEeVV3rkFKQQ..MFi4h8JRm2rOkLaFNjsaHAJ4T.GbYOp Tyx4D8jde4dZWTp0Rq.uGPVJYl.0xZbWntP3QtlBv9Gh3.0UvqooDyFQV.UO Xp0mb..DayI0GkBc5nHbiHHyl3UgGZSH83nXXZhrtW6hod_NJqThFnOvxNlB qZWnP97A4GcWmGs9drnW4jgCXP84FjepFGZW7Si.zsh20SoT6NupmcDKGf1o effQ5I6N9BeeF6UMVnO5IrnjwpdYRIxlo0E.IIFPeSG.z22tbhU64o9XZqeN bGag0dEFxcqE3EOHJKYaR4feVccry2REtdTYeQQZ8FLeU5jzNUWj_rv1SOyH 0pIP2G910ycmEwm0oIJjshrAxGxA7JuXP15qwDiutdUWcKwu6LRLvayvzhMt YN_d3hDB7VvaZyTAZ14xFL6537Y_gDWfK2zHicFe7pJEIXgjUC4KJfZDXY09 jnYJUYOhLTzDVO7bLCqCvIQQGFHR3agb2XNGu6Y.4nuR7FmQ1WhNffHP7PZ5 .07Cg7ObNbBE_PydCkYydWLiisz9X8v58vLeswv3jFPmLXCxBwK59yTjxwP7 H3u9utINQK252x8yP63Ybdrp_PNSqZSvvmfs3.dZI0W3FrSadf13Gm.ohBeX 7Oyi.I7jHbT3tNpwEO4OhgXLP7TTXkLpsPdQxXFzSas5sfNkJXYA.PRGmxY2 04sZEeSq98ocCGRDdEhZQ2JV3ldA6RfU.n8EPXB5I0wYezAH80gwajkX20Aq OWRSWm7fPfr20FXTq5naqsOWjV0jjbn778qpddf4XMK6ELovt8vuNoeoVteE jU3h696AcBhmLFjwShyH7o6Jagg.KTtoXuBnev7yfV7ypL39NddWPhFboCAF tO_I4SsTe6SG0OSOQNZxpGWG6XOkdy4t2Oq3sp7rB_jyBMgZJoyY_LOgXoSA SXo1qsIFvMUpAYs2O4WUCM6ZDhFzI6371kW4BJEqwIiCPNY6GZ_K0b7az8ty t6EqJ7hYWiiFFkwZ37.e162WRd_MWQdomnf5FMKNxO9CCLfJzvAM6W9haBI2 LyBszzKLx1_P6YvPuM9LfQnZobc7Q0r5yq0ePPg1IabNKQnQRxJgopcbNidT PI2urYeSwosNp8stwTqdI20kT5VfiAqf3bv2ub25FRWnvi3IH8jfZD93Qrh4 GVje
X-Originating-IP: [77.238.189.192]
Authentication-Results: mta1014.mail.bf1.yahoo.com from=yahoo.fr; domainkeys=pass (ok); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm16-vm0.bullet.mail.ird.yahoo.com) (77.238.189.192) by mta1014.mail.bf1.yahoo.com with SMTP; Sat, 29 Dec 2012 03:53:25 -0800
Received: from [77.238.189.231] by nm16.bullet.mail.ird.yahoo.com with NNFMP; 29 Dec 2012 11:53:21 -0000
Received: from [212.82.108.114] by tm12.bullet.mail.ird.yahoo.com with NNFMP; 29 Dec 2012 11:53:21 -0000
Received: from [127.0.0.1] by omp1023.mail.ird.yahoo.com with NNFMP; 29 Dec 2012 11:53:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 261986.42635.bm@omp1023.mail.ird.yahoo.com
Received: (qmail 19139 invoked by uid 60001); 29 Dec 2012 11:53:21 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1356782000; bh=XOr1c3a3/YGwvnEKUuD/RbFwdoSQV+TIKOHTkBgwcP0=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=oc+aR9aj4t4TEwlSBahzDITzdrGyz9T0GMjaw5urv03SD/atLWOU+mbDmREXqUOS+x6j1mNhDqZE90bqTFUvLicOzb01YSP60MoZrBYjQOe5FxkTWY1eZYTCXKRSjvF3dRpCwVzWFdaAyBqjp0tNfhPtUiFiDjbCvaxwxbIsrKU=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=j0CCkTLPo6p3mFa9cV2neXl+4qq3tEHqKyIxI3kuH8oOLRw59tDd98Wyj21BGb0cmFX15txD2UOho7tRRZsjBqzOhCi8NVI972Ggp/hZXvxdKP+1LoFRJ+q14dJpHE+bN+1RJ/+4gTlbjQw91hinLv8PI2stFF8RBMMkKQyQjRk=;
X-YMail-OSG: a7dNhzcVM1nL_VDBmUIpRVF7xFr5tOqAILwLO5qWDXmL1nh g6RNPT2n_GDkVbeOpVmboNe6N0Fupmb2bbEaGNvZUWsx7_xE0NRuQqT4CBwN l8ZTT2Fow_0tPxfgaUZ3iXN7WC_AK32qid3M8_f3_nv1mHlQvKIB_BPig.yG UlxhFWxMK8nGudKMP96nFrfuhqEfIYN5dgMbf2inHiMuS68X3pwYSead12ZU OwkaCxYYvFughjTXzngXbY6qjA3p.IFd0vE.qWspBQGTMKaoze3zc_vTTwQG dwa1L72s3f39L0AKrxhMAesDuiVK0MvCm_oBc4L_VBQ4ibk9_18zf3TRefBE m2GnFJrHn9hMjNJtIaFSeO0CMS3Od3URzsGejJSOqMxwZ6nXxjByQ3TDTdBK gqwedyUtxSog0zY01_M32tbpYT3y70CibPQ63t6pNpUIG416oHGdBkzZnK4M sIQ–
Received: from [212.52.153.246] by web172102.mail.ir2.yahoo.com via HTTP; Sat, 29 Dec 2012 11:53:20 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356782000.18878.YahooMailClassic@web172102.mail.ir2.yahoo.com>
Date: Sat, 29 Dec 2012 11:53:20 +0000 (GMT)
From: Samantha Kipkalya <kipkalyasamantha@yahoo.fr>
Subject: RE:Please help me to be my trustee.

Samantha Kipkalya kipkalyasamantha@yahoo.fr RECEIVED-IP: 212.52.153.246 ORIGINATING-IP: 77.238.189.192 +22674747258

A few email addresses and IP’s used by the same scammer — adinkones@hotmail.fr under the IP: 41.138.107.61 Location: Nigeria — This scammer also responded under 65.55.90.103 – 65.55.90.71

Return-Path: <missadinkones2@voila.fr>
IPs – 77.238.189.63 and 196.28.250.57

Miss Adin Kones missadinkones2@voila.fr

Reply-address: missadinkones3@voila.fr

X-Originating-IP: 41.203.237.17
X-Originating-Email: [omar_fff06@msn.com]
Return-Path: omar_fff06@msn.com
From: SAFI OUEDRAOGO safiouedraogo@voila.fr
Reply-To: [ safiouedraogo@voila.fr ]
Subject: Treat As Urgent And Call Me Now +226-7638-8906,
FROM: Miss Safi Ouedraogo
AUDITING / ACCOUNTING DIRECTOR
ISLAMIC DEVELOPMENT BANK (ISDB)
BURKINA FASO WEST AFRICA
PHONE: +22676388906

Also watch out for the fraudsters below who have sent out scam under the same IP address

Sherri Esparza – gooseberriesi99@lighthoose.com << Ervin Velasquez – bankruptingx@simpa.ru << Jamie Lord perfumesh08@skyme.ru << LinkedIn Connections connections@linkedin.com << 41.203.236.107 <<

____________________

Below is another email from Aisha Yak a.k.a (Samantha) Kipkalya Kones.

from: aisha yak 0ooo7199yz7101@att.net
reply-to: aishababytnd2@rocketmail.com

SUBJECT: Hello EMAIL: Hello..

my name is Aisha i seek for an honest
partner for friendship i hope you
don’t mind
if you don’t mind please reply me i will
love to here form you ok so i can tell
you more about myself and we
can exchange picture too, Remember that distance
does not matter what matters is the love we share
with each other.

 

“REV BEN PETER”

LOTTERY SCAM – NIGERIAN SCAMMER – ADVANCE FEE FRAUD

NOTE: THIS SCAMMER HAS BEEN EMAILING ME FOR MANY MONTHS UNDER MULTIPLE NAMES, EMAIL-ADDRESSES AND IP ADDRESSES — THIS IS A NIGERIAN SCAM ALSO KNOWN AS A 419 SCAM

BELOW IS THE MOST RECENT EMAIL SENT BY THE FRAUDSTER. THIS SCAMMER IS VERY PERSISTENT BUT UNORGANIZED. HE IS ALWAYS CHANGING THE AMOUNT OF MONEY I’VE SUPPOSELY ‘WON’ AND THE FEE THAT I AM SUPPOSE TO PAY.

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $ 7 M

HEADER:

Return-Path: <webxx7601xxxxx@att.net>
X-YahooFilteredBulk: 98.138.90.65
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: To35UWMWLDtpI31Kn.0SLqgNnW08Av0SCFAssCMR8A_Vo1GP GrWi2SRwEUK0_rS5ma.EeNhpXLBHGeRggiFG274YMQUgELYQceZCuxW3lQPN rUoT6knijOkKBdqZkH6wbwxbiX_cGEA41SNaj1GVee9_wEMb3td4XzfxKB2W QHrpIw5Zbu_LEuE.UohMdPBo5n_Z45sHFwPWKeKvax4FtRd9YMFoUrM1giBG C7CLdLh9vlCZzCePSppkA0cvOXt_.mjRjvpOP8QMqDhPOSUFydEEMwgIJns6 2p8QA6wY01j05hbhCrsTYjP7PMBklSFGar9DIbx_rQrES7XDMCtPwl3rskW9 mA0o9k.0wE8917_bR66zH6.r4hgk2Pq8J16QU1Lb0v752n9EcJJSbMbbFQCB wY0piVWQGMKir3JfkdVqWpd_w.T_TfFpxV4cemt1CKnbhoD0FsU7NfExkiJc A5joObOkIGO7Jd8HRyCdsMC_W94SyWlu8v8d0TzsLFjtxDlq1n1fiHfB1XRH vxTmJ6lgV_.c.iXkiuD9N3_pT1_aPP7W9IwCbbDIwtrF34MNw68hMJvJOUe2 pH.jPfBNQHLQFxWhxb6lyVSyv28tHpugjC308j7ixZ00K9T_7yuZ0IHQF6K_ Qd3WjZM3CHJaBIWb1rlNDSqMRfzuahAUzICBFaX8u4wMRTaHcpwTOp7nRUrm sazz9ZeJ7QdN8pKfGePiOZZHXxb1KoyvjL30TC9knrdnerK_gJQgdXaFI8Q5 3er.rbh.9662mA1tWwkL.uw.Ej8jeMmTC81X292stHfa_QQVzMpPvYAw5A9x eqmWm6ToSeMfSIvtRovTlmbB8SkoM4oN0TU4hSZuZ71YzhIaZGFXCNYoOJne 7vGYNkak_HoeCUFsGusF92TWky2Vc9PLHMAgihSZ5i2dv22EV6xQduzDwaC6 hR0YvxZO91Y5nEmgU4JgwTACDxEFzztQjg9nca9TEBemHGKAs_inoBvYmRgj 9NAenemYR2BttVDhS7s50y8s2lyYQLrcXQk7ozgN_n9MjmXaMO0PpbZ7Vpge 7kwg93PpaJb42PYuo_xuEisFLWcWM2dUBSchWFlLPJiuJh8X1JF31AOvxAaS y5zqbbq0gA5D6y8P6y7bvMT6GA.RJbBsQnHsqzQ9p62epYsuSBn.GO8e0Obr iTJkg19mglk6slzhX2ciB7jr2mRWI6xcf4zG3rU9Rruj0ndRzYpo_d30lRuc ri8BKqd2I3s9zVfL6sSwKtJADSftjvwW6RTUXPvc2TBzPoA_QfWHZLqs.vAD fbdtVFTINFo2tQp5xrw8ZD.fSJPwkEmhSP.jOfvKar5IpIk2JWk37aJ3w_S7 tgimEtxHc8pR
X-Originating-IP: [98.138.90.65]
Authentication-Results: mta1052.mail.ne1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2.bullet.mail.ne1.yahoo.com) (98.138.90.65) by mta1052.mail.ne1.yahoo.com with SMTP; Fri, 21 Dec 2012 23:21:59 +0000
Received: from [98.138.90.57] by nm2.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
Received: from [66.94.237.125] by tm10.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
Received: from [127.0.0.1] by omp1030.access.mail.mud.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 33716.96789.bm@omp1030.access.mail.mud.yahoo.com
Received: (qmail 92006 invoked by uid 60001); 21 Dec 2012 23:21:58 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1356132118; bh=dspJXUMJQPVGARdDGpSJwFgAoFNKsOdNQ9FVUYxLdWs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Woh2WLpCF/uHtRoXtPW872YkOBFAAbqyMP8UUqzUgpelHH7rNoiWqa7ag0CmwrvT9rDXbc9/MwzRF4reRQJSiuyghbS6I2JNqrMwOvylD/dqh4XGMyzU7PbK4Pbexc0L8FA9JQhAW/6ELOL4sFG8D94kdkpAOh6L371vv4tS3iw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Wxssckm+WPOWZNoeqVo3J5A9eRTjFPzbZwjkMMleA6TNm0Z3g6oL7alYEXqc56/BtA40DPg9RuPmICUTXeH2deUrULLcyKl+UwLAW5iFZVcgFK96kZvnPQlno8bd2sihdj9TtprkLOV0FMx26eQMMkzUuHBXS3DHp6EcQHcqnms=;
X-YMail-OSG: FhAlJ8UVM1mfQErccxHLz3tuxCp1r4vGnWLUR8YRpQosJn0 41jiU0HfOZDG0kQmHMqh9ICSmXaeUKNHjf_woqZQa86_WB0hFCoBJ9tSIbnP Mwm_Tzot5n5.j.qSIOy00TIP8lP5luggtVz7caaD2_xg6Zh7HkAGgtTfgwB1 1WAhS2sqIs_p3RNlxJA6hbYu8KkdyLOzktPW1JRmwWHrxLfUm4eFUj6oPEXn 8oNzfmB9NOMY7zKPEBmCaQ1yjo7wnJFJHBS8kVzq16fTa98dCGZNheuL.CqO 5_c9tEoKAzDURA7_1BRR87wZUiUY14icB5MobkNiVuzKczqB1i.pYPVpGisr AExzvcXZ9pNJ9zI.QcYSMlgLTOo5CuQhY4uel.ztH5.tWJpHnx_jHfZd2IC4 aKjnnLxo9jTRnXuKc2sIDTrimc6Q_2BpalwQFLRKgXuEJiXQ.6fp1jpbAe3o 0zkK_380VGyPITTcie_SrkWj75HrFmt1WgNvCjcGXVNEKpmpolObG
Received: from [173.13.200.181] by web181205.mail.ne1.yahoo.com via HTTP; Fri, 21 Dec 2012 15:21:58 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.129.483
Message-ID: <1356132118.91240.YahooMailClassic@web181205.mail.ne1.yahoo.com>
Date: Fri, 21 Dec 2012 15:21:58 -0800 (PST)
From: REV BEN PETER <webxx7601xxxxx@att.net>
Reply-To: asabamaka@yahoo.com.ph
Subject: Reconfirm your Address,mobile for delivery of your ATM card $ 7 M

FROM: REV BEN PETER webxx7601xxxxx@att.net REPLY-ADDRESS: asabamaka@yahoo.com.ph

173.13.200.181 <> 98.138.90.65

___________________________________

BELOW IS ADDITIONAL EMAIL ADDRESSES AND IP ADDRESSES SENT TO ME BY THE SAME SCAMMER(S)

2) LOTTERY SCAM – ”ATM payment” <webxl19917xx@att.net> REPLY-ADDRESS: atmpaymentcenttt@e-mail.ua

SUBJECT: your(atm) card worth of $5.5M is ready, send your Address and cell Phone

SOME IP’S USED BY THIS NIGERIAN SCAMMER: 98.139.44.156 <> 75.125.40.18 by web181105.mail.ne1.yahoo.com <> unitednationprogram101@gmail.com <> unitednations77@yahoo.cn <> apex.expressbj@hotmail.fr <> +22998660756 <> 85.95.227.44 <>

THIS SAMMER ALSO PRETEND’S TO BE United Nations Organisation AND WESTERN UNION OFFICE — I’VE POSTED ALL THE EMAIL’S AND HEADERS I’VE RECEIVED BY THIS SCAMMER BUT THERE ARE WAY TO MANY AND IT’S IMPOSSIBLE TO KEEP UP WITH. BUT THEY’RE ALL ON SCAMMER419.WORDPRESS.COM — AND I’M SURE THERE ARE MANY MORE EMAIL-ADDRESSES AND IPS, ETC BEING USED BY THESE CROOKS SO IF YOU RECEIVED ANY SPAM EMAILS BY ‘BEN PETER’,  PLEASE POST THE INFORMATION IN THE COMMENT SECTION. THANK YOU.

 

“MRS ZINOVIA VONDA” (AKA) Christopher Warren Smith

SCAM – BUSINESS PROPOSAL / PARTNER – FRAUD

UPDATE: I’ve received recent emails from Vonda Zinovia and have posted them below, along with the header information. Also note that this scammer used different IP’s for every email sent so look under each header to see all the IPs and email addresses.

An attached link was also sent along with the emails below. I didn’t click on any of the links, which was titled ‘ MyInternationalPassport.kpg ‘

FIRST EMAIL: Dear Friend,

I have a profiling amount in an excess of US$25.5M, which I seek your
partnership to accommodate and invest for me. You will be rewarded with
30% of the total
sum for your partnership. Can you be my partner on this?

INTRODUCTION OF MY SELF:
I am Mrs ZINOVIA VONDA, a personal secretary to Mikhail Khodorkovsky
the richest man in Russia and owner of the following companies: Chairman CEO:
YUKOS OIL (Russian Most Largest Oil Company) Chairman CEO: Menatep SBP Bank
(A well reputable financial institution with its branches all over the
world).My boss has being in dention for eight years,for political reasons
being a top leader of an opposition party to the ruling party(Government)
here in Russia,on December 7 2010,a moscow court(Judiciary) that was
influence by the Russia Government found my boss guilty and was jailed for
six years.

The present Russia Government continue to view Khodorkovsky(my boss)
release as a threat and seek to prevent his scheduled release in 2011, a
few months before Russia’s 2012 presidential elections,they believe that
if my boss is release it will work against their re-election into office
in 2012.

The U.S(America),Germany Government,the United Nations and almost all the
media in the whole world has condemned the Russia corrupt Government
officials for influencing the judiciary(Court) to give judgement in their
favour,to prevent my boss(Khodorkovsky) release before the Russia general
election in 2012.Bellow is some website regarding to the court rulings on
my boss(Khodorkovsky) case that was held in December 7 2010.

http://www.khodorkovskycenter.com/

http://www.khodorkovskycenter.com/news-resources/stories/guilty-condemnation-russian-injustice

,I am presently on a house-arrest being the confidential secretary to my
boss(Mikhail Khodorkovsky),this is the reason I am seeking your
partnership to help me secure and invest this funds in your country until
I gain my freedom from this house-arrest.

SOURCE OF FUNDS:
The funds in question is my share as compensation in some oil deals that I
and my boss had with some American oil merchant.Already the funds have
been deposited with
a finance institute in western Europe,where the final crediting is
expected to be carried out. While I was on the process, My Boss got
arrested for his involvement on politics in financing the leading and
opposing political parties (the Union of Right Forces, led by Boris
Nemtsov, and Yabloko, a liberal/social democratic party led by Gregor
Yavlinsky) which poses treat to President Dmitry Medvedev second tenure as
Russian president.

YOUR ROLE:
All I need from you is to stand as the beneficiary of the above quoted sum
and I will arrange for the documentation which will enable finance institute
transfer the sum to you. I have decided to use this sum
to relocate to your continent and never to be connected to Russia again.
The transaction has to be concluded in 2 weeks.

With this ugly situation i will not buy idea of phone discussion between
both of us but at time goes on i will introduce you to my only trustee
legal adviser who will be able to speak with you.

As soon as I get your willingness to comply through my bellow private email
address(mrszinoviavonda557@yahoo.com.hk) I will give you more details.

Thank you very much

Regards,
MRS ZINOVIA VONDA

HEADER:

Return-Path: <fanstoyo@fan.fanstoyou.com>
X-YahooFilteredBulk: 198.154.201.90
Received-SPF: none (domain of fan.fanstoyou.com does not designate permitted sender hosts)
X-YMailISG: _7P8Je0WLDv44aUHL9gT2V1yFIgwZiBazaoMuyzCpihMmIuY OO3jvEOFYzS1RBHFFhrKDpWgNUVG7liVFKCr.wv1klIK26ru.CEr7vTlO8kU Mxt66EFJR.QkWh3sN5X_FAhmR51PCPvLxkQc3lLVFf3FPJosapqvn3wSFsVd Kk0SP_iFINTItBWLdvD39pkpv0Ca4alILW09gLbG8HZCoOT7fyRW2ZxOIej8 hvcgUx0_OwMzU8xjXmiPnG9P5guiGfcw36LMEsjwaF19S1fWCeqj0C39hmnz QKZT5GYWsRg9WbrqXGJpczQKnaGUHgyjrtsFkA_2snmnMvUwpPH4Ahz3dJCR ABpVBcXFhGGPxFYqhcaX6NCgS.XIOb4NUvae540SPGOlA2DSEFqHhQ9M9BWD enhD05plK9gZJu_mZlHAcKsUBSx6lDkqWgl97EI0m80m6.qeczxjKFP.2Bkr R_aHNmTLQL.gcod9O.wpLY1Bo7PHSeWlrs6JfSznAqxlv4dNXXUMwGvyzpat v1X1LLudq0XNYYjQo66IUfMxGQz259cTxMET0yWuWEplByD5lk92vjtYEfLi gbdWOoI.zABI2aft_MgC2PRc_xvI4JB6HX8mUEo8LlaSD5eYHiMtH3M8iD8F v_d2KOUdc4G8KAaCBQPWN_DiUP3cFu4VvpJJfzYwTAXYc8jJDb7dtmv7cKa2 D4avyJI5fpqmGBbQhJY3fSJKTmdHjAtOKQYe5lZV5NivhfrJf2_tAk5YolKK 4CxW6I6qiMx8Pra3dfM3WeKnuJUnVaQSrooZvi0_OMAI2leyNKFGZpYSL4WR o9dwW_XDD9AdhnqbnegLQ_ZvYRTwaw0imvVrgiCVfhVJ5nScKlgIfruQHh0z jhWvqVQ3FD9vjj9n0mz3OgHaTcaW3yJzQ1KKlA..PdVNSSJnVXOpSO10VUX. mPcGdyCCuCep0eDIaInQ1jCMvOUdKROyGX6gBVrhhp0AuASAS9KLB8qKIgZQ ikEBaVJyvyxh.KwrzPIyDkVgl2t_Y2VAwTnnhEGrwpy2fJyPdGbT_PmmcOD3 PfDvwtRHT5zgSOuFdwPO0ZrKh2xqoq7WRKOO2kUwmIEnzCBiviAamA8eazWQ S4jDiypOoMSgGbF08lTMrWXL5YqMoaB4FhsbxcTFjCo0trbYbM0j9001ybdT hjaE78GSVt7s1DTXnrvX8XxNAd_LAO1SqbJhMJI5y_kYOWrfuJAAAzCn7nrC NaxOZvZxBJgfrkPn.gX7_Q65GDul2_jnnIga7je6P.WLmqCzd19f9c2FBLly miuWKJaGAvRPa3bOUykJtUfUfOZlwTAsXWToPD0bOMI-
X-Originating-IP: [198.154.201.90]
Authentication-Results: mta1057.mail.ne1.yahoo.com from=yahoo.com.hk; domainkeys=neutral (no sig); from=yahoo.com.hk; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO fan.fanstoyou.com) (198.154.201.90) by mta1057.mail.ne1.yahoo.com with SMTP; Thu, 20 Dec 2012 10:22:26 +0000
Received: from fanstoyo by fan.fanstoyou.com with local (Exim 4.80) (envelope-from <fanstoyo@fan.fanstoyou.com>) id 1TldGi-00012p-5O for <> Thu, 20 Dec 2012 03:22:24 -0700
Subject: BE MY BUSINESS PARTNER,,,
X-PHP-Script: fanstoyou.com/massivetraffic/massmailer/mailer.php for 41.58.0.15
From: MRS ZINOVIA VONDA <mrszino557@yahoo.com.hk>
Reply-To: mrszinoviavonda557@yahoo.com.hk
Message-Id: <E1TldGi-00012p-5O@fan.fanstoyou.com>
Date: Thu, 20 Dec 2012 03:22:24 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – fan.fanstoyou.com
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [502 500] / [47 12]
X-AntiAbuse: Sender Address Domain – fan.fanstoyou.com
X-Get-Message-Sender-Via: fan.fanstoyou.com: authenticated_id: fanstoyo/only user confirmed/virtual account not confirmed

FROM: MRS ZINOVIA VONDA mrszino557@yahoo.com.hk REPLY-ADDRESS: mrszinoviavonda557@yahoo.com.hk RETURN-ADDRESS: fanstoyo@fan.fanstoyou.com

IP: 41.58.0.15 LOCATION: Lagos, Nigeria 

X-YAHOO-FILTER-BULK: 198.154.201.90

____________________________________________

SECOND EMAIL: Dear ,

Good day and thanks for your swift response to my business proposal. All I need from you is your trust and sincerity throughout this transaction and together we are going to build up a business empire that will be inherited by our children.I am presently on a house-arrest,that is why I am seeking your partnership to help me secure and invest this funds on my behalf.I came accross your address when I was searching for someone who can help me secure my funds until I am out of this my present political predicament.

The reason why I am on a house-arrest is because I was the personal secretary to Mikhail Khodorkovsky
the richest man in Russia and owner of the following companies: Chairman CEO:
YUKOS OIL (Russian Most Largest Oil Company) Chairman CEO: Menatep SBP Bank
(A well reputable financial institution with its branches all over the
world).My boss has being in dention for eight years,for political reasons
being a top leader of an opposition party to the ruling party(Government)
here in Russia,on December 7 2010,a moscow court(Judiciary) that was
influence by the Russia Government found my boss guilty and was jailed for
six years.

The present Russia Government continue to view Khodorkovsky(my boss)
release as a threat and seek to prevent his scheduled release in 2011, a
few months before Russia’s 2012 presidential elections,they believe that
if my boss is release it will work against their re-election into office
in 2012.

The U.S(America),Germany Government,the United Nations and almost all the
media in the whole world has condemned the Russia corrupt Government
officials for influencing the judiciary(Court) to give judgement in their
favour,to prevent my boss(Khodorkovsky) release before the Russia general
election in 2012.Bellow is some website regarding to the court rulings on
my boss(Khodorkovsky) case that was held in December 7 2010.

http://www.khodorkovskycenter.com/

http://www.khodorkovskycenter.com/news-resources/stories/guilty-condemnation-russian-injustice

I have attached to this mail my international passport for your own perusal.Please keep this transaction very confidential because of my present political predicament here in Russia.

For my lawyer to proceed with the documentation of my funds in your name as the beneficiary,you are to provide me with the following information’s as stated bellow.As it will take my lawyer three working days to finish with the documentation processes.

1)Your full name and address

2)Your age and marital status

3)Your direct telephone and fax number

4)Your company name and address.

As soon as I get the above informations from you,my lawyer will be contacting you,his name is Mr Christopher Warren Smith,a senior advocate of the British Bar Association,he is my legal trustee.Please note that you will note be required to pay for any fees,but you may be required to travel to the office of the Universal E-Cash Consultant Limited where are deposited my funds to endorse your signature on the original copies of your funds authorisation documents as the beneficiary to my funds before they can transfer funds to your bank account.

I will also appreciate if you tell me a little more about your humble self.

I urgently wait for your swift response.

God bless you and your family

Regards,
Mrs Zinovia Vonda

HEADER:

Return-Path: <mrszinoviavonda557@yahoo.com.hk>
Received-SPF: none (domain of yahoo.com.hk does not designate permitted sender hosts) b3VyIHN3aWZ0IHJlc3BvbnNlIHRvIG15IGJ1c2luZXNzIHByb3Bvc2FsLiBB bGwgSSBuZWVkIGZyb20geW91IGlzIHlvdXIgdHJ1c3QgYW5kIHNpbmNlcml0 eSB0aHJvdWdob3V0IHRoaXMgdHJhbnNhY3Rpb24gYW5kIHRvZ2V0aGVyIHdl IGFyZSBnb2luZyB0byBidWlsZCB1cCBhIGJ1c2luZXNzIGVtcGlyZSB0aGF0 IHdpbGwgYmUgaW5oZXJpdGVkIGJ5IG91ciBjaGlsZHJlbi5JIAEwAQEBAQNt dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzE4AgN0ZXh0L3BsYWluAwMwAgN0ZXh0 L2h0bWwDAzEwAk1ZIElOVEVSTkFUSU9OQUwgUEFTU1BPUlQuanBnA2ltYWdl L3BqcGVnAwMxODM-
X-YMailISG: .gwS_rUWLDvH57WCGihHOxRthjj6Uhvu4.1a1pfy91flJjs4 TeMlMJyBxQ_9WSmcfyBXNhKhC9Oih4U3kVsX1JW7SLfqRvqiY0dXxwWoeHh_ _8b57HH6naqZAcPnz_D4JgWbJmc.UHWCh2pcMf7KvL1Q.GOK.lUECrsaYoYh 4F.osrEAFjALFZAejsDdW4cpHowr35qIND02_vaPOO5tz1dc56IcasaIto0l 9VD1wtezX.CGATiRl3vsVZi8WdKFF_75FAQnOhwt4KPg5yejpYXSc15csSca 8iEwfjRiSLaaHWmULzJl9oFGTvabp6LMVBkCw.QDtQr7lshfNsZTlFaZoqTn 8VLwB1tWHF.Tc_D7ppnJ4rC3ot15O6cBHN62USGp7z848cZBWn0PwllzSl8u UKR_IW9JME1tFTvotmVXsPg4Ay1Rrymr5oZOIc.oNqZ8Mdn5YwOHL5mXoiS9 D5hFzKFHGhM7zRMY_FGZf1mr9s2Ra4bGW4cKRe0wFiGenMkPF0Vbe0QSYy3T PphJko9lqrTLrxnveHNq6A0..Erk9ZONGxbLhmNUQe_nt0ENJIouUu9w.D8e T48jkNAQgipwsxJNimwpEJM9p1wHl1ECp.fvd8bLlkyvow.cnBDoYXj_qAgv GlPkylcYcPFpmonQwFPngaTwbuD7gjNj2mwFuqODDY3uIVUyo.ENOF0Soq82 IyOhGHTn65xKhW_Pm2lrz4aWFAIe6Kvlyy8htzsifQhUC7Jx5C1KiNU3NjiI 9S.7UlQhyvLRUz5GmBDMTnUJ.7BQomOD15EyhSdme1hNbN5MXg6g23kvOCnY cnaZDm7gOvrLuW_X8ONePDt208eu0JGAk4PGezaunVUILAmHjwPeCTBFaGvf upPUw9z26WS.RAVwNXH4nXi0x5.CKJLBcRADjOqewPuL7Facj4ETW03zgzDg uJ3bsmSTxSuOR9mX8q1TIzAjrbgSlhZhaw6.ZgDRBI6w1WYDKIu79av1aGJx 1cA19PRTkaO7KUalj4hcIQkprw.W2NKVlm7vt2zPx7QvesL2ZeYP0f0MEhWO sAPo8e2VtAzJL9.cCTkkpbXlpdaGAaiug_E._wguBMEIbqQCgvePfAEVLOby SR_DApto3NpaJ16L34EJPDstVFGi4P608FlZ2lMrENZ5yAHS9bbe_mIaa_Qv MJ.Ewq1dN2FjOsyW6MXnvkw947MxZfNkL4Su7nM_zDyRGftXyaMxfRWuE85Z g76ALXIMXwhIMqTQsl.PtbUapgve41qr6ZZLhJOJH5fiqQnQn7tGUubGA.U0 EpPBzwis0kAPbNlOKic8nUIjJkKlqoulpXmSllh_LdQ2Ay39vKcwtakoZYuO lxdiNr2y4ng6sJRqtiVBqw0ej_kc0IqPsXDLP9Kd2I.Mx4kcAue9F7N5ZHvP FyNDLGderBK.O7wOb9uZ._iFHLpvgEnoX7B0z3NnT7lCyfmS61hzF2CB4WOl eduHaGQaDfHa_y1hXrQbtgTHvF3I6uq5BA–
X-Originating-IP: [106.10.151.102]
Authentication-Results: mta1363.mail.bf1.yahoo.com from=yahoo.com.hk; domainkeys=pass (ok); from=yahoo.com.hk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm25-vm7.bullet.mail.sg3.yahoo.com) (106.10.151.102) by mta1363.mail.bf1.yahoo.com with SMTP; Mon, 24 Dec 2012 02:26:36 -0800
Received: from [106.10.166.121] by nm25.bullet.mail.sg3.yahoo.com with NNFMP; 24 Dec 2012 10:26:32 -0000
Received: from [106.10.150.27] by tm10.bullet.mail.sg3.yahoo.com with NNFMP; 24 Dec 2012 10:26:32 -0000
Received: from [127.0.0.1] by omp1028.mail.sg3.yahoo.com with NNFMP; 24 Dec 2012 10:26:32 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 602599.77879.bm@omp1028.mail.sg3.yahoo.com
Received: (qmail 97483 invoked by uid 60001); 24 Dec 2012 10:26:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.hk; s=s1024; t=1356344792; bh=rmeCZ+pKyq8LCvdGytDaTB9Eyp8cRYogfwCGTn+M/Ag=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=e0mBHBq34ba0f2H/C1aNdAJ1Gdp+1XJtt71RG26ZInSUQ0lmneA0OrYCNhNmZ/Bg/kAZ1QF+kmBvTILrFrB3AXt0VWKKrLuIJLYlM/nloEwgztB7+jLojJIxTqZukzlfBEHwdUAmIY13o5TZn3L125vo/Bv1Y3eX88F4dmzZkQM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.hk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=APOkFjWZKxMTwNz2FHfvbonkj+UOc6vgsooPpbgry0dQju409C6fUtJn+hV3n+fBGRLbIue5BTTEkNE9BzwuEqy+zgzOSjDWM/FdyEQi8pqXZvh5Rg77HZXRv+NILVmEG3m9hrET5r4sk3PO8yvZmSqmYFc5MTL0L2osdLT6QJU=;
X-YMail-OSG: iWMQKgcVM1mpHo_hUz8cjf9_Fo9gTOGF6uMats7r7q5sy8N yXrpFn3voxZrFE1fNwXnfbO5z6WW_d332cI.mjhSA1YfrSYCIv6_OhXDzgW7 QJATOqPYciFTtUyzfMNGroH7qdCi3u7qMkgEUkrP6lJpG6pr4iT.DHbGN2Rw L0DT9vQimkI0elU9Zh2zcy7410IChlNqw3g0vCQqk_ztl0O3zsYICEo59cTz iC7E8A.1E1MyZFaLCcm60bKDSQgoQR0IC9C3TMgkezhuPMdS9RYsx5VE8jxe 1WDANY5l0gqi0jwNuPxQlcE_KldsaITRxPPhV2eZOdbkPyNkJgiWl7qeFnZ_ rN9B5igYq32cETTWFTLQ_jaf3d4Yq2zA5GcfnBnjIXEWt9TNSyizqCqHOzV2 UFwBQGMq1yGWWOCTAbtGDWgDrGK.ayAzZTxmwHP0b0gB2u.zIg1uGfKAIy5b thLzxwcsnIv1h40PhfVXbH9KP0ELPvtAVyNuOP.V2uOcpkAzxRw54j6UhhMy iBqzPU.1lW2WvmuQZ9iCHQje3EhQgE.c5V0gmEeZ30ea5LC5gEYyDOlzHFLV tCFkdZjpGmbhLmYJ0sTF0HDueDR3idoRpTnwAPouTWeT8OkA3mRJzPCEziSy wwzvRB7hlCAI1hA2RhIBw_ipVILW4khmbQEuBTN3ROFTtJB6ZmxZs27Mtr9u mduiAJMIWUXsd_PYlZZAIdg6VM5jpidsuT_uInNA9_57VjbLA7mQdWAISNsf B45fHDbPWUkT72xw-
Received: from [82.128.45.201] by web194605.mail.sg3.yahoo.com via HTTP; Mon, 24 Dec 2012 18:26:31 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356344791.97461.YahooMailClassic@web194605.mail.sg3.yahoo.com>
Date: Mon, 24 Dec 2012 18:26:31 +0800 (SGT)
From: VONDA MRS ZINOVIA <mrszinoviavonda557@yahoo.com.hk>
Subject: BUSINESS PARTNER(ATTN: )

FROM: VONDA MRS ZINOVIA mrszinoviavonda557@yahoo.com.hk RECEIVED-IP: 82.128.45.201 – X-ORIGINATING-IP: 106.10.151.102

Fraudster sent a duplicate email and although the email was idenical, the originating IP was different. The other IP received was 106.10.151.242 by web194605.mail.sg3.yahoo.com via HTTP; Mon, 24 Dec 2012 18:26:31 SGT

___________________________

THIRD EMAIL: Dear ,

Good day.You said I should give you some time to finish your work before we start with my business proposal and I think I have given you alot of time,so please get back to me to enable us proceed,and if you are no longer interested in doing business with me,please kindly let me know so I can look for someone else.

I wait to hear from you.
God bless

Regards,
Mrs Zinovia Vonda.

NOTE: I NEVER SAID ANYTHING ABOUT FINISHING WORK. I ASKED THE SCAMMER A COUPLE QUESTIONS, QUESTIONS THAT WERE IGNORED BUT I’LL CONTINUE TO PLAY WITH THIS SCAMMERS TIME.

HEADER:

Return-Path: <mrszinoviavonda557@yahoo.com.hk>
X-YahooFilteredBulk: 106.10.151.124
Received-SPF: none (domain of yahoo.com.hk does not designate permitted sender hosts)
X-YMailISG: XJVZO7oWLDtQzrAD1LN.LWWXS1LYd5vi3q0l94zMMVVAOGUX B6ma1X6b0HLJ.jxvoqJ0SQyAxzvpMZ2KZ4rIeQvn.5vFRbVd_l1K7wHmShYr 8FksAARCbHcwnmXEevzG8E.uhAoqGQ9XRhcVSZtPqvM125ccwTmxgYsKTi8w m4Kk9Z1nbZISZW.jzH2HuJ1NaY0dkSG3PpSy.EHomuRlupRhoejM7leOYl9m uAoT9Z4t0R.MQA.4c9aMNGxauB2Vr8G7VZL6VgSl95YhkxtPO7mFkSv_WOw3 0GF_S.VxPqwVW0.37BkxGZTc91z16Kcz4EpnU9GDyUO1wK1bJn4l38dFALev 5QXX6QThyfzMa9Ve1kEpeMEUPNTp9noybZ.q6T4CPQQdb8kr5OSpu49gS6LU XhIiWllFK_8_LnWwA.4SFhCBlBe6NgEXyAAPfgOyLkFmdoNqdH9GD1k.3yL_ XzbKDZskZiSLUFb7RTnHOI0BpzX884bgVXnSNVw5Syi7QvHBLGtSGIA2eXf5 0ZuYNvBep5n_KZyZu1JySO2Ahr9a.1Sk5Vi_gtHzI0IWkq0YuRqJZmrC6.rn qGcpLDzVVR_ajlXq7YgHe3xvopE1Pp5smOqNH4MlYPoQGzTJaeQfUyBY5lpt DAAW937D1wYLOzcPx1YuZ9KLfK6azkXnoIAvmlrrrNuv1EbhMNQfIQUe1nvL 2Rqdep0NmB2CLKsezJJt770eY2cI2bCxaRdi.noEi13djOphxNSAirMH_TlA xLWGm7jq4NL_JFDECF1aNkM9Fg_3IXJelXXxOVmO.bWLpsyNHn2EJ.PjTzb3 Tt_Kc5VF1p3msY1yUvyygzL9obzZHYjfn0WO8Q3vtvrhslJopreTZQuEmM62 mSN0HwUP68MYwaN_x4KAi9TcU3PEHKvP2XOPh6nllgCbGQaHRRFCzlMLk8p5 KLGrL_GqFk0guroWnvyaCEv3hMr4b4sCHbtypNkurQcB5JlYTGlUGl7RGVZI Po25uWE7nuk1fAwm9su4vCdCtbdRZmvyvUnSxvhJS8nXQFTSGkIEA7WfZFLp HW0bfL9zrPfx2t2CaDE8X.QHY1hYMnurfRDPCaedt4fn9s29iGgRhtLSp5st kWD1v_8jy4pZhhrrqcaiInqQhrKfZ3_AKcCdjP0iemu9CtLPXMfylV78vHBM cXv55jFBVl26viR.BOfOp4.p2sm9j65g.jzyCiZzyOQtz2RKM2jLIXKf4xwx d0S_ORK0zmTZu_m6mts6bFhGNuJFvY7aqLTI0XsJRuMuFuff56nFRz7rsKHD SDfpwGTZdgrbF9Ce1MlO5atOPPBm6.lLCSoL449h0nVb7sdW7lHUcmBf1m7i fd4R2E7XQ8TGYifzyn2stWUUwHsx2vlflKlIA38sWqLIXq5TtS9GVd5rt0ii rd65FjhNXFpKWXqOyY3YQ0FxLdkM8dL9GIx8Njdky7rO873Y5TCw0FYnHaup XJdWPKKa4H4Q0vz0uud4XrU-
X-Originating-IP: [106.10.151.124]
Authentication-Results: mta1204.mail.bf1.yahoo.com from=yahoo.com.hk; domainkeys=pass (ok); from=yahoo.com.hk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm37-vm5.bullet.mail.sg3.yahoo.com) (106.10.151.124) by mta1204.mail.bf1.yahoo.com with SMTP; Thu, 27 Dec 2012 05:52:39 -0800
Received: from [106.10.166.124] by nm37.bullet.mail.sg3.yahoo.com with NNFMP; 27 Dec 2012 13:52:37 -0000
Received: from [106.10.150.26] by tm13.bullet.mail.sg3.yahoo.com with NNFMP; 27 Dec 2012 13:52:37 -0000
Received: from [127.0.0.1] by omp1027.mail.sg3.yahoo.com with NNFMP; 27 Dec 2012 13:52:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 554686.33461.bm@omp1027.mail.sg3.yahoo.com
Received: (qmail 99347 invoked by uid 60001); 27 Dec 2012 13:52:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.hk; s=s1024; t=1356616357; bh=zOUb0hkaq0Z0/SGiyDicUpSc023b41HOddophFiNVzk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=TWqn492xHdaC4pJ+1PxcBGvkZStj2d7bbXcsDkWTTu6BTpREzZcME/fgUKNbCyCGKCVZfhPPrpIBzhT5WnwYSvSg+n1doYlpq/WMMXMydDuP113YszSJ1lL5RCvotD+kmkWO8dQ4thDEXR+W4gnF0KAUw3I2a35WzVggYXHih2s=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.hk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=4ST7/+dMsw7ZZF3+3bY5I1ep2f81gyHm8NZnEtsiPZiH4nGrcauRT6kHQ4GujJEIw4GutJiLkq1HH+KR/JK+g6snGFveE0BbFHNJMclpd0LUVQV9oNjDCs5OwdcMwdBmK3CRBBfOTtcxJNjUVVnhA4QKhWmIZ1/lb8EQtKX3fkE=;
X-YMail-OSG: .9ADldIVM1nLoKHmfRAcfWw90536vRtM6nxUjqYl7iy7wm4 .KEfBy.IWAOHUl6lAL4UhDvBXeKYgKamgAHASTWi0kYU1vKHq5BfXbAWtaAp FWfmg3NHnM11ngSVadVOjX2SxSh2YU0uKMLvDzx7Z8caaUUuPghq5MTR8EJG H8i8h7z8MyRHejCp8ki4wMNj.ZAWmu9CGwWcCCB.ZgilZPBbcmrU64HL5wR1 7NJBRWHlEBX_p8PvC213fgqasg_WJoOPEdqBXhUrEIwtgW5NS0608LvJp8O5 qaZedfSrHpzEpI4HCjKpNidEvdLPTTO3KScXWHawNG7Vbq7WpLxUAKkfwgPT GYQveeC8uhHKGeC8sE_Aps9WjjUI5nQ.h.rSXcv8NqDfeRDOM3.oxkR7ekNO CniM267rfGQevSnuTw7bjpRvTxA_vMGbYmui9ot0gUIu2HL0waGmrvfsBiGn bgBIYj1T9ERc0OQ.E6c89Wqn_pF2DGNpyzFxaBn070Fkj9Z66mSfmc3gepSR FTvBRL.Yg_TlFQN.7dbSvPfTSJzzQ8veTV7gXjLmyvHraBx8w
Received: from [82.128.44.48] by web194606.mail.sg3.yahoo.com via HTTP; Thu, 27 Dec 2012 21:52:37 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356616357.96130.YahooMailClassic@web194606.mail.sg3.yahoo.com>
Date: Thu, 27 Dec 2012 21:52:37 +0800 (SGT)
From: VONDA MRS ZINOVIA <mrszinoviavonda557@yahoo.com.hk>
Subject: MY BUSINESS PARTNER

RECEIVED IP: 82.128.44.48 <> ORIGINATING IP: 106.10.151.124

Return-Path: mrszinoviavonda557@yahoo.com.hk
Received-SPF: none (domain of yahoo.com.hk does not designate permitted sender hosts) ZCBnaXZlIHlvdSBzb21lIHRpbWUgdG8gZmluaXNoIHlvdXIgd29yayBiZWZv cmUgd2Ugc3RhcnQgd2l0aCBteSBidXNpbmVzcyBwcm9wb3NhbCBhbmQgSSB0 aGluayBJIGhhdmUgZ2l2ZW4geW91IGFsb3Qgb2YgdGltZSxzbyBwbGVhc2Ug Z2V0IGJhY2sgdG8gbWUgdG8gZW5hYmxlIHVzIHByb2NlZWQsYW5kIGlmIHlv dSBhcmUgbm8gbG9uZ2VyIGludGVyZXN0ZWQgaW4gZG9pbmcgYgEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzY-
X-YMailISG: H.1LfsEWLDvxQRM5Yf8Dd4P2Rptv9dsH78wGqqAhwXj4y91S .mc64n6jqBTvfTUFx3swUU2bRXxDHqJh1SM62MnmgHB0i9Gsv3VkGxOXb9vB 0DQJqiv9kvP3Add0oY1gFGVnkp3gYymptiFKgLS9_pMxgi_H7q9XEqh_HqG3 yN_.kmIHr32TWpYRkBGJtJAMMBtzhAXHxUR1mwveKOPBMPY.dwflF0LoE7I0 hpa8vivM.1gujjMHJVCnLn8uUOX_1dFmjeV5urAD8EN.2c21OSBRMbmd7ZpP CVt.RRZiQCJM7K5.VBEKUt5Qkk9pOZQ8z5s.fNuP9C.Xc_wYiARbL37Nuz22 8pBIqeuJcVNpZ9_mf0HjV5AwQUWw_q9IF9HGaFqzydUOyt51JjP3JxklLvoc K5EtBpWD5Uptm4FkxtG.2ebFgo4Ktmc5IwzTtdwDvBzXk0DvO.zcowMlTHs_ RoMlVwN1zTBo5Xy73Y3biOdJwUCDmprPdB7paHbx8xvsBM5Xt1QJlCrMFkX9 8W2uGL_BEOF4XVQkJePK6AK8_V5lAhk5F8d6vMrEGMxoOiEUU0SB0N_RYvTV huGdkl6u.8OVS77wLGlUrNc6XdQxNdqBR6INFbOWve7OjrYWOGULwhvJEPzo 1jmp7Vu2qXt3sjhzva0iN8GpUTSUGhXpf1y4b2lKZqFPvOkEH.eoJUiEezj5 QKDEOBx17mE.17RfTPBAKWRX8t0XTI0sff0l8Xn1Uji4VPSEppelVhwBVTd. CTv7dLMskc10PDaWT6cN9Hg4XdaNfjPTKgifSrrF.LelG.Hfkq1h6bvuBIdy 99FT6Dojpee7Ty5GiN0za1XzC9qkMfwJHcT9OrlNrjBiWnm2q4WZL0whG1PD 94ifQY4EkJJb_if3zfPFVP4f6WRzQbT2_bhC0f1m6bLbUZ4fLoEQvGW88_jA gZT91g.bO_c51i1fnfbN8UWjqY7YCpkZzG35clY31wfTlr06_w38TdXXy3cY FxWzmqBU8mZxeRMFeIBx73aS3jBhrPi2ermGhn6n7VKkWjU2CuybP7BICXQ6 ej3MTKPeC8UMGMj0APdard7FbattiAXh4FUsojO2ztryCV5y6f8QVERXEy8X QU0L4tP8M3HOPNOoXA0qk83PpQ7KD95ZH27p0oFQbsA.ip1cJ8cfYkd5ueGR SCHf1IBgO_SBznYyV_bW6_MzTqRBmezM8QpwpM9TQLK67P56MSXU7yNBC7WK Rkz.guQCcEwf0MU0an5tqxFVdrhO9nHmuavSbhVEfx5PYSqPvNN5jdxVzz1_ rZpLF.tm4OUUkvl47W7a1Z9wqFttlZBl7F5g.Zc3FnopVj_3dDiAGyod.ag9 Id0SopXlPFEmNWozc4RE4S7iGKSwpGQ0z4Gyf.DXFYXWYlrt_bIcvNkxCRW1 2O2TbjGnhhZl.Z0uRcCqocfckHMBytQ3JKuOddC0AMTo0ifBJyuCYyNMg_uY 4ToM7U8mlUrvSTDXYbu8
X-Originating-IP: [106.10.151.241]
Authentication-Results: mta1292.mail.sk1.yahoo.com from=yahoo.com.hk; domainkeys=pass (ok); from=yahoo.com.hk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm34-vm2.bullet.mail.sg3.yahoo.com) (106.10.151.241) by mta1292.mail.sk1.yahoo.com with SMTP; Mon, 31 Dec 2012 02:48:15 -0800
Received: from [106.10.166.125] by nm34.bullet.mail.sg3.yahoo.com with NNFMP; 31 Dec 2012 10:48:13 -0000
Received: from [106.10.151.171] by tm14.bullet.mail.sg3.yahoo.com with NNFMP; 31 Dec 2012 10:48:13 -0000
Received: from [127.0.0.1] by omp1011.mail.sg3.yahoo.com with NNFMP; 31 Dec 2012 10:48:13 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 292709.67546.bm@omp1011.mail.sg3.yahoo.com
Received: (qmail 44541 invoked by uid 60001); 31 Dec 2012 10:48:13 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.hk; s=s1024; t=1356950893; bh=6Ptl4tSEGn9Vh42PwvB6YCoTDecoE7jFQrh/4hIhUYk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=FXypFTKINylQvJREB4yY8du3haVodcMFyvF/wxNrOBI5xyzqZ9Q2dW8yBwDGsR0YITs373UPHqh5l3C7WdhTiF5qMXJ2za06hpVFnR6vzb0tuEwsgdX4T21X+CMDDvR8aAdC0K77WfO0QxzD7YNMjsEYNqgoB9ikYnd6WDZmD0M=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.hk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=vYxRWJLnicRqoMdId5MiQ/tTHvLOujKM6DA5WwD8Dnc0iDZbXkg8ydTOBeuxbRLTWRZsH9iYXkFUZcCdplXXWM5/X9eWrDUGtpx7EYnWMw3QKuRcAv+8NTOzUa7lWgspx+SkbeRD6OHmGDQSFrNYcJFEhf0x1SQEBKlwZtCQ8ZY=;
X-YMail-OSG: AgPNPjUVM1mQf2lFmWj6j2L5n3dzznh9scRoxw5sr3cPUN1 ygECoPd.csPYFONCeTe4q8xj9wT24h4381Xb3JdNxHui17P4pahwsHG5eqkm HztuW.jr2hBd.gn_vdB3W5dt75rhMrhyIxf98LbLOZDwzxO4ZTrsKottzM0n 3yaJdiBwus3rNkFnBdKx5l0wVmzQ9JmdrZ1VXwOTc0Hyw3OPHAwAR18WJYEN pLvx_x1D4nDHe0vhuAS4Ed9eVzctNFoAxRU_YbwRQe9VimcbU7o_TYKn4lWk ZcRMxExghLUf2WOOGWatF0nXKzzwfEcv7QkAI3V1cNNR5xNsCR.mJ8.TFqJy 7rRKrzVzgnsQqXL06rHBnSTLunFC4SNWtTXgmC419O1LINPBa1LgN662D7v. 19EOLh3n9KCNVipPmg9SrR34L8ndltUIdO0xREbjKUine25eHqmQuz3_wXXp jfeIWriRzwxVX2RFA7zbx790lkpAZFO1TVQ7BGcLOYqWQoc_iX05tx9PeRWZ GPwtQuyVTsoj6IOwLWA.LxMQlllZPpbrFwzbVhSco7LscHiq0cxlNjAz5x9a dZEOZVMpxGSe3IUqqeCGuqpQdjJ0Rt9ZTihGGeJ9TBTTrr34QOaX9RounSEZ qH7IBrgK7QRzoEAjjLi4qCs.ipo97dECfCLhB1vyatF.6NA–
Received: from [41.139.126.108] by web194604.mail.sg3.yahoo.com via HTTP; Mon, 31 Dec 2012 18:48:12 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356950892.43573.YahooMailClassic@web194604.mail.sg3.yahoo.com>
Date: Mon, 31 Dec 2012 18:48:12 +0800 (SGT)
From: VONDA MRS ZINOVIA <mrszinoviavonda557@yahoo.com.hk>
Subject: BE MY BUSINESS PARTNER

RECEIVED-IP: 41.139.126.108 ORIGINATING-IP: 106.10.151.241

 

“Mr. Stephen Fred”

NIGERIAN SCAMMER – FBI IMPOSTER – ADVANCE FEE FRAUD

Okay, this is funny. This Nigerian scammer has been spamming me with phony lottery (atm) scams. I have posted dozens of email-addresses, IPs, names, etc that this fraudster has been using. In the email below he claims that ‘Anderson Smith’ was arrested one month ago but this scammer IS Anderson Smith and Anderson Smith’ emailed me a few days ago. (obviously not arrested.)

Anyway, this scammer sent me a email yesterday and I noticed he fowarded the email to atleast 75 other email-accounts so I decided to forward a message warning all the other accounts just incase one believed him. Well, today I get the below email.. I’m thinking one of the people I people I forwarded the message to could of possibly forwarded it back to the scammer? Oh maybe the scammer had an email up there? I don’t no. Hmm.

Dear: (my fake name)

Thanks for your email, i pray this email gets to you in good state of mind.

This Mr. Anderson Smith was the former correspondent delivery officer in the atm and check department here in the FBI branch office Nigeria. Who was sentenced to jail last month because he has been the one who has been scamming people round the world by the FBI after much investigations had been done in his office

Now he is about to scam out your money from your pocket, you are strictly advice to stop all transactions you have been holding with anybody and forward the write up to me, so i can send to the FBI head office right the way for proper investigations.

I will also like to inform you that your funds is still with the security keeping company who are in control of making sure your funds is been delivered to you right in your door front within the next 24 working hours.

You are advised to contact me with the information’s as stated below:

Your full Name.
Your Address:…..
Home/Cell Phone:……..
Preferred Payment Method (ATM / Cashier Check)

We await your swift response to this email in know distant time.

Best Regards:
Mr Stephen Fred
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts) aSBwcmF5IHRoaXMgZW1haWwgZ2V0cyB0byB5b3UgaW4gZ29vZCBzdGF0ZSBv ZiBtaW5kLiBUaGlzIE1yLiBBbmRlcnNvbiBTbWl0aCB3YXMgdGhlIGZvcm1l ciBjb3JyZXNwb25kZW50IGRlbGl2ZXJ5IG9mZmljZXIgaW4gdGhlIGF0bSBh bmQgY2hlY2sgZGVwYXJ0bWVudCBoZXJlIGluIHRoZSBGQkkgYnJhbmNoIG9m ZmljZSBOaWdlcmlhLiBXaG8gd2FzIHNlbnRlbmNlZCB0byBqYQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzEw
X-YMailISG: YRAg_6UWLDsNPJ41NgYqJwAf5OJLkgUP_WnGcMzl8tpjvtMl _rR7NL5SqQ5ckG58fvfr6m0wcweGFaHpNtYbxDMuVDaIIh1l3K5mNhJuuUo_ 1gL0f1X33EdIEWkU5mPAyilJBlXEpEzk7F_IyU989l1G9TzWOre1Rm4NVrtv wL._Vi2pXJgOQWfreL61PfLIlsJaWcVz4qtNDDj2gyD40PxwRgmAN75tZ4nn aRWQg0kEw6lZsV6CpK5tBR93lSxR5BijjoPWypit6rRfFHu2RPGypmHaaT5i NyOQ3dFSpUGR0qaoBtZbkYY6RfdMQeiKvQSJUW3FpI9_7lT9PcuRP8ulxAyH IdKsAozRLeGkYH_HEicxkXssyyV0P5VqNhSjcN.FVIQIMg49oMMuyXhq6Ams KYFWO16wfZulmhe3zhfu8iLnXUOx1asM1CoRtivrLypsvcMHW2z3jV3Sf4xn gIGmDsHpgafAgkUO3QWxCyUJLenj8Dj_BwC0KlH1rTcmzgg1cDn.8n1xfx4I TffWkboW6Eu0ftF39kDBSKHoC1iLW1RlaaenH.P0luai9hY6QXflsWADaNMp vyw3FUaI9ZssiJp679eh4kt0pGwVUec2kSxHDhpu7SLrLfsGFNoF0pPZYXUt uGRiYlJUlUr5v8msaTOvPCQ35gQ51eUcQaRxD4v2KkyvHegnUen7ToXi2Kh_ OKg9ouVRwnkubOu7lDdfjAzSeczwtAcm5f2ubi7_l3rFwW9zApCW4_AjeWmd 7vvS5V1nYymEkC31.V8sS56xjK3kQCE2iE9j0pUAjktDOX6wn8J_4Ayq1PGI JXgjS5w9nTji3nRHdgxyZOWsXn0db6EffdhNgia3_uSx8P4LjSMZZ7l7PS2t R0PhNr9NWBA._lPQRp.ZCkvQ.8fqwvIlrCFFnsl0SMfnnvOGhZygyoSDyQDm CBfSA7cKbH3v.lGz0WBYswdnCdFJQrwjekmXVAKaUQt440eGAHPbesQ0ln9U PSqwPsVIJt7QkPvTDHPfdX1TOmMQogOlC1_Pt08aiFWDsz.hfNhiKZl1XK82 uJT_t0sFbY8LfjS.p25d_9wZv04b8nl7s5nCniDYVnKK9LESNJdIkvjYCVgb WGkqKQSwqmZou53wA60pT5kbAMhI2QtgZo59Jrt_qvNwcY82MaPQKLLMaFGN a_I2Gwi0ptjskEuktAOgHo9vf3tIbLhf.cNFXjFPrGYa4yPAkAR_C1RMGzCi eEu2c3Go8MzGJFVU0PFqESSugO1nYIzz7W4yaGauPPLzBhykdx2OBa._GR.x 6IyB0YF2._YiCvukGztRVMt0SLWP2kQarf68uCf11I2A4mPMlitmKL._tD.x kkfi6Zc9B.JKZieJlcetzb7nwXocEQaWXoZUH1twHVOZ8dyzq3AnFQxdxoD9 G4mkqGOembFIUmoPAkuk2.N1hJoPV672fTBJY_dMNjDU_OM1tua2bQhWEaV9 RB9WTSbJRX_xtzqg0OrPgSmaXawGuXf0u4RaLPOD8kQiMN9f3w0LTGpfzNF9 8Rvgg796.RX_9Zj_ho8NkHiqorsQgxJeAkzeCQnhuNyKZTd8ZiwYbk_jS8OY .8E_qA6ixSW3NL.CC4hF64r.DdClBZQLn0xSC1PeTm3AGG38oY6zt26wqSnu hrLzp2rqW6lj8PfrLPMzw.Gqo8wMvm6Om0JtuF0gPL_NJ3YY50rFVWWnWA–
X-Originating-IP: [77.238.189.211]
Authentication-Results: mta1213.mail.ac4.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm4-vm0.bullet.mail.ird.yahoo.com) (77.238.189.211) by mta1213.mail.ac4.yahoo.com with SMTP; Thu, 20 Dec 2012 02:24:58 -0800
Received: from [77.238.189.234] by nm4.bullet.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
Received: from [212.82.108.243] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
Received: from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 56404.21902.bm@omp1008.mail.ird.yahoo.com
Received: (qmail 69722 invoked by uid 60001); 20 Dec 2012 10:24:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1355999096; bh=pyOeaUKKOWWZW3lLdVTTiYRo9J3z45S6mIgOy2HgFlE=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=6sEt/VfUuEDUeUudSXs2M1ShOX0eWuYo7bOFh/XdhIPki+ZIyWn9FslcZYIOK+sL8m2MaPtDxi6PNqGk3ODuJVgRnYkMO9IvTfVw4QnvNAaE0M7IfkAvckE4iO1WwKrgM4BNroefkyNDvwH2m/l87dYrH6Im4aiMBs/53/5CRh0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=4oyJFxMb7QIfFN0qOOV5EQRhasHrL0MG/qXmF0XzHB3Z75TEzL5ABDN+fjzt3FxSN4mb8R65+JBQMcZgeYn8hdlOLtIV7RGsbY7RDzkjKCf/9HGA0mDNi4dbn7Oof6iDUGP+kjNmcqlB3BqyHnRKxJyfsGxbxGwxQB5nyfnYApU=;
X-YMail-OSG: gJ29ik4VM1lXPyNG1YswL1rjwFhoTxeyDPqgBh6qE0W3Pqd SBPMiD2ZzSxd7xBXJUeIU9HeH8gYoc_o0hqMUZ.qWnc3PHsey18hkIJmRVZQ yDDgnrXDyofzHPQaZVicPUr9PhVOPPvLSyF37PopUuxDIHztw_T1fAI6YJN3 .IY9klRHXSdhx1XzjXDiWH_LvYN69G9aOSo0rZgdyeHU0M8MLOq7kfarzh9P bTtG.jAKXiYSxzvh4HXO1BJJ4nyYbdwX1bmpjdGVdXFLJ63kWgxitArYUuQ8 Aebx62dNlVOnuz3S5Wit3dSljkkO6nzX6N23R7uQUBOYLas3hJt9ayP4NSI0 9bWoBPZmOLXWneE8s8tCtkcKyynk9esWOszaD5qVI4GnBogGS9PyOOt_UJwD sMJf2NMf4K55JsKHz4XsW2WTb0G5d0vkdPg–
Received: from [41.71.177.225] by web171903.mail.ir2.yahoo.com via HTTP; Thu, 20 Dec 2012 10:24:56 GMT
X-Mailer: YahooMailWebService/0.8.129.483
References: <1355977301.69904.YahooMailClassic@web161001.mail.bf1.yahoo.com>
Message-ID: <1355999096.69523.YahooMailNeo@web171903.mail.ir2.yahoo.com>
Date: Thu, 20 Dec 2012 10:24:56 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Reply-To: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: YOUR FUNDS IS OUT FOR DELIVERY TO YOUR DOOR FRONT! GET BACK TO US NOW.

“Mr. Stephen Fred” <mr.stephenfred@yahoo.dk> 41.71.177.225 – 77.238.189.211

 

“grace.richard”

 

LOTTERY SCAM – NIGERIAN 419 SCAMMER – FRAUD

NOTE: This scammer (or group of scammers) have been spamming me with fake lottery emails for months. I must have well over 2 dozen email-addresses and IP-addresses from the same scammer but it is hard to keep up so I post many of their emails in a new post. They have continued to change the amount ‘owed’ and now they’re trying a different scam tactic.

NEVER ship money to anybody you don’t know personally. Also, never cash any checks sent to you from unidentified online users.)

OFFICE OF THE PRESIDENCY ACCOUNTANT GENERAL OF THE FEDERATION

Attn Friend
DATE: 17 -12-2012
Be informed that all the fees you are surposed to pay before receiving your contract fund have been waived off. You are to contact DR YARADU IWU ASST GOVERNOR (CBN) email grace.richard@voila.fr only for your processing fee and he will transfer your contract fund to you immediately. No other charges except the processing fee. Your PASSCODE is: 999-035-2655 ( Fund Transfer confirmation same day).You have no other payment to make except the processing fee. Your Payment will be through Electronic Telegraphic Transfer.
This is newly introduced system of payment by the Central Bank of Nigeria to avoid experiences of incessant fraud, illegal extortion of money from Contractors and to enhance transparency. WHEN YOUR FUND IS TRANSMITTED, DR YARADU IWU ASST GOVERNOR (CBN) WILL INFORM YOU AND YOU APPLY THE PASSCODE AS DIRECTED AND INSTANTLY, YOUR ACCOUNT WILL BE CREDITED AND YOU MOVE TO YOUR BANK. You will only apply the passcode when you have paid your processing fee because for now, it is still invalid until your fund is transmitted. You can try the guideline as instance: * With your digital phone dial our bank access code: 23413423100 followed by, then enter your Account number followed by #, at a voice prompt enter your passcode and # and you will be credited.
(This will be when your fund has been transmitted) BUT TRY IT NOW.Contact me if there is any delay from the so called gentleman incharge. Any other contact or payment you make apart from the processing fee is at your own risk.Be informed that so many unauthorized individuals do parade themselves as our officials and impose bogus bills on our contractors with their syndicates home and abroad. Take precautionary measure henceforth. You have been notified.

PLEASE KINLY RECONFFRIM YOUR INFOMATION

(1) Full names……………………. …………
(2) Private phone number………………..
(3) Bank infromation …………………..
(4) Current residential address…………
(5) Occupation……………….. ……………..
(6) Age and Sex……………………… ……..
Yours faithfully,

Barrister grace.richard
ACCOUNTANT GENERAL

HEADER:

Return-Path: <grace@phuockien.com.vn>
X-YahooFilteredBulk: 178.63.44.131
Received-SPF: none (domain of phuockien.com.vn does not designate permitted sender hosts)
X-YMailISG: .amxTlgWLDsskJLwL22SbC.qlamHy7RIlkiDTe03HqwYipYD ID3I5iS0jtT3A_awcpmwrXOP2BZ8nf7UA9Zho_gFkuragClY6s2EO1oW0Q1_ qMAO1LIfmfJ4_mnV_zMmUjfzto.mz3HrLQ7is4Oy4J4KDBT7pp7JVfB6kp2D 68V7KeM14H3Osx_MZOGs_9D.vrWnwXHBZwkAevgaq3YQReEhIpED3dWKdiN4 GFWjNX_vnheMNyIixnnDHpV19o0NfL.POhol7XDYh2zj.7Sm8Bk7LJrZm463 6EMuFdllTIY9rXyGmd9aP_pH6fMPokSqF3YwiaJ5Id1CrQDfG1ZVmTyn0GWi KVJkhRLJkxwe4VwK62eCl2hnjff7tp48tJd94WzG7nP8ZK4KlZGHpQx5zz4H ndtBGZUQWNjznMh47h1RhwZYYRVCTLi8tG5jQDGigL8_TZKQFKpQmxjmJmhS 1zEwe5iNUBtydxLWUTaEgvmAGqa1h4048q_QqxghgfrKccoE2inZfxWfOpcr wTC.pxWbaM3RlhUN2lM4VqhnjdU7LCBdbJeY8pXgG1jUqS9UyiuM0XYGE5S6 l7ql5LeLCR97gKT2DUtoIS7wBICFgxbGLFiUtAz5J3jl5GfqIk2UDnNghgSE V3xUHTcfREz9awPmPXRE2KuxtWSs4JowgjA3BR6F.xrjn_rNGCySObW0ICsd 9jZnuENYtENC2_jHYYv.o4vccUNZRIFR8vMbQjeX0Wbv9d0DVb6Nz.KvCDQ1 4XyFcPCt0loJ9EhUp04Z5jXPCfae8cOIdK8kXHYkod3FQLT6x78Rv_wScYnb c5Gr1MLN4zyDLsVWUFkAtDYdSLazNRbGNSONFdt67VSPHbROINFHUd7RkFA8 rJj8gsAkM1ttTDYiNdmnljucpdhshisFKDfXSr32txpWKYmCVeqUPFlznMTQ p0aB5.5Fwnmt2.Vn43eBCW.2CWoTNx49YR.N9zi4ZHIznVvR.89nigUUWZIo ULR6kcOcqzE92sH9KrcI9hMHNvLv5bMAJlmRTwRcxU6nhFmShVDWfprk9HqE pafQE_0vfI2Uy1npKrcCDhhA.XQ8uKs3LNFEItmJRuLWXMBd20F38AuHnD9s ujCGJtk0FUFuk0rr_Gx9.Q5tqLbR84xB0jkmYbgC4TwI9NoxyE4YDPMuINRB wVwA_g4it3jkAr49M8p1GjqnT.DuPVSU9jxSgjtmqxj3mnWcG93EbCOHsMBf b00m3_wuGozIX3uhBy_Ma6Hq2zGaLspA8zS7YIztoYdPwU44Nkn0bOEEnTAq Wzu5Xdbqpqna2O7a18WhYllXYCoY43lX2K5LmUGlqbXaZig7TMBNQI5qz3yS uX__j_pB14r_TWUoShsxbhKXGD43SszgBcrje8NgZeiKu5NwMW_z.sJp9cjE E1I0bxr2ywMOdWK51j.KmOJJX7UX0Jlmi1cY2Fmfg4uPz35hdhQHPmu9R3Wt xLkD9j9Bg_byhi6TYldfcFbXKsGrteEqFi_Hq2bHJbd4aoamFVa0FvoiKriq njN12uBoBqw-
X-Originating-IP: [178.63.44.131]
Authentication-Results: mta1266.mail.sk1.yahoo.com from=phuockien.com.vn; domainkeys=neutral (no sig); from=phuockien.com.vn; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO server.a7la3lm.com) (178.63.44.131) by mta1266.mail.sk1.yahoo.com with SMTP; Fri, 21 Dec 2012 19:24:26 -0800
Received: from 23-25-221-145-static.hfc.comcastbusiness.net ([23.25.221.145]:4173 helo=User) by server.a7la3lm.com with esmtpa (Exim 4.80) (envelope-from <grace@phuockien.com.vn>) id 1Tm2Vq-0005bN-9G; Fri, 21 Dec 2012 16:19:42 +0300
Reply-To: <grace.richard@voila.fr>
From: “grace.richard”<grace@phuockien.com.vn>
Subject: hello
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – server.a7la3lm.com
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain – phuockien.com.vn
X-Get-Message-Sender-Via: server.a7la3lm.com: authenticated_id: emelie@d2ja.com

FROM: “grace.richard” <grace@phuockien.com.vn> RETURN-ADDRESS: grace@phuockien.com.vn REPLY-ADDRESS: grace.richard@voila.fr – 178.63.44.131 – 23.25.221.145

 

“Mrs. Suzan Chapman”

RECOVERY (LOTTERY) SCAM – NIGERIAN 419 SCAMMER

NOTE: I’ve never been scammed by anyone but get alot of ‘recovery’ scam emails and because scammers are very unorganized, it’s possible I slipped on the ”suckers list” lol.. Oh well, the more emails the better because then that means I can post them on here and possibly save a (potential) victim.

Below are two emails sent by the same scammer under a different name, email-address and IP location. ( Suzan Chapman sends out scam mail under Williams Johnson & Ruben Maxwell )

Hello My Dear
I am Mrs. Suzan Chapman; I am a US citizen, 48 years Old. My residential address is as follows P.O. Box 1920 Hazelton Drive Germantown, Tennessee 38138, United States, am thinking of moving since I am now wealthy. I am one of those that took part in the Compensation in Benin Republic many years ago and they refused to pay me, I had paid over $99,000, while in the United State, trying to get my payment all to no avail.

So I decided to travel down to West Africa precisely Benin Republic with all my compensation documents, and I was directed to meet Barr. Ruben Maxwell, who is the member of OUTSTANDING PAYMENT AWARD COMMITTEE and a Human Rights Activist (Lawyer), and I contacted him and he explained everything to me. He said whoever is contacting us through emails are Bogus (Fake).

He took me to the paying bank for the claim of my Compensation payment. Right now I am the happiest woman on earth because I have received my compensation funds amount of $1,5,000,000.00. Moreover, Mr. Williams Johnson, showed me the full information of those that won lottery, and those whose inheritance had not been paid and the list of all outstanding contractor that were owed that are yet to receive their payments and I saw your information’s as one of the scam victims, that is why I decided to email you to stop dealing with those people, they are not with your fund, they are only making money out of you. I will advise you to contact Mr. Ruben Maxwell directly on this information below.

Name: Mr. Ruben Maxwell (Barrister)
Email’s: (ruben.maxwell@ymail.com) (rubenmaxwell@globomail.com)
Phone: +229 94 99 53 77

You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing.
The only money I paid after I met Dr. Thomas Boni Yayi was just $280 for the paper works, take note of that.

Thank You and Be Blessed.
Mrs. Suzan Chapman.
P.O. Box 1920 Hazelton Drive Germantown, Tennessee 38138 USA. Add me on your YM mrssuzanjohnson@kimo.com

HEADER:

Return-Path: <officefilee@yandex.kz>
X-YahooFilteredBulk: 1.235.121.101
Received-SPF: softfail (transitioning domain of yandex.kz does not designate 1.235.121.101 as permitted sender)
X-YMailISG: dDycFlwWLDuyVY7iGmbjhHLp63OyDyVfDBlkWhu.O8tDMNe8 .KZdKCQyBsBR3UVDRBm3mEBWxOY_W.pr1wP_2PpoKNSTQc6JYyYaxT9R.wo. pKhHHHTKbg8VL7n89IabyGdU14jxsyXQm_WCEdkiGXxhoi723kfHIhqGErmu C1wEl_0NFP5G117BvHIT1hjWC8nAUDC.Ss49pIWmuGy5Lt2wyd2VTw_riam6 qx0Cu_Ip.kxhtpTztlr3V6SUoy8pcLnXb1YqadcFCZ4DjoovqQAc2py2yv0C PqmaNnj_it4cm8o6zDrC2oZUHqMRCGH1QzTsS2YpK7g2tIJCJ5XGwZrQPjis 9bndf9IOky9SDCCjEhTeIwFHAhFH9ZZNPbI5q7YRnewPj_wNghTYvrhZK8Rq simwKqvZpy7DG65Zrm_m08LyQHk_eaTEjM_0YbPb5QfHDWWSzJEhTkI1nhuH 8tUDZ4K10zrgl.haug02JN3yQrRN08twJySYdR5b88Uc.MhFPnDiijveZWYO 30C2ldqANVmu.PHHqcF_1nsCQDkEtGm90jeuawzh43jWt_2iqmFZ_eDZeV4O mo0cKxhRB8BZO6d9ehNvkv5zZ35mFDOHNjYPRWWBPjZbTLBuhKYN421F4KJV DKZ2GriawmFqfiBj7v.ao4ZBHiDJNv.9s38pItexc24reUEdozNn3_xz0gmf 0Ks_WhC1qDL4AK4atiNFrbUVzr.FAR0texoUgEl4SxIoPvf7OqciGLhxfpcT ZMHyiD8BE6WD8gRzl9hy1gPGDnBU6V9bzIKmMnU7RZr7o.9pQpzPUKdfhU2S ET2vZYAGHgwh6137UvE.8ZrhFnzxviczTqRxxm7gnGedWa8_d4FtfNwV_B4Q bYmN0yXkeTEVRpTaYccqMWvKTjhYnlDhLaCDGqUIHoEujwkCScLPvVYJ65xs Pfn4NY3lA1sX3ibAkOA6HTJM091ZHWFmrFTjdVT7kOD4rOLM55xWGOkJh2vu NwW3mHj5147dKNNgGGOPCDKsK7udJ6A6fmSdzTTuTvH3eo4HaI30jwzr3SpS pm7380yEfjnaablGbS.6_y9_3pzS0G0gB._FWfCkALDPXyDfOJJJkTTG3sbR 45KKjw6vHRk4sXYWQjrpXwr_Y99c7Sc6x488YUE30psfWBYx4V3ArdJVgwLG bTTZE55Z2vS9g67xRo7AiXCxnjnhyAidwlyrMO5llsg8INgBHAMBzOiCYe26 uUsScAguvqr2epPVCH1dSAuLymdxChsKMqeKo0.n6BxNgzy6WXRlVqWo8z1I GBUsPRJOQEtaBR9LZpfAnAuf_8mH4GDqMySGKRAfltcAd4ZlFxx.hvmrOpUp IlJojtl2UhEm8kbQ_LtbXXOBo1fkuLw-
X-Originating-IP: [1.235.121.101]
Authentication-Results: mta1215.mail.bf1.yahoo.com from=yandex.kz; domainkeys=neutral (no sig); from=yandex.kz; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO localhost.localdomain) (1.235.121.101) by mta1215.mail.bf1.yahoo.com with SMTP; Fri, 12 Oct 2012 22:32:41 -0700
Received: from User (69-2-73-170.static.networktel.net [69.2.73.170]) (authenticated bits=0) by localhost.localdomain (8.13.8/8.13.8) with ESMTP id q9D5Lnlc022212; Sat, 13 Oct 2012 14:21:51 +0900
Message-Id: <201210130521.q9D5Lnlc022212@localhost.localdomain>
Reply-To: <ruben.maxwell@ymail.com>
From: “Mrs. Suzan Chapman”<officefilee@yandex.kz>
Subject: I am Mrs. Suzan Chapman

“Mrs. Suzan Chapman” <officefilee@yandex.kz>  mrssuzanjohnson@kimo.com   ruben.maxwell@ymail.com  rubenmaxwell@globomail.com

Mrs. Suzan Chapman officefilee@yandex.kz +22994995377

+229-94995377 – 1.235.121.101 – 69.2.73.170 –

Ruben Maxwell ruben.maxwell@ymail.com RECEIVED-IP: 41.138.90.38 ORIGINATING-IP: 98.139.212.188

______________________________________

BELOW IS AN UPDATED EMAIL SENT YESTERDAY (CHRISTMAS EVE, 2012) — SUZAN IS NOW PRETENDING TO BE RUBEN MAXWELL — 

SUBJECT: forward us your full information okay

EMAIL: Hello, forward us your full information okay

HEADER:

Return-Path: <ruben.maxwell@ymail.com>
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts) IG9rYXkgSGVsbCBNcnMuIENoYXBtYW4gaXMgdGhpcyBlbWFpbCBhY2NvdW50 IHN0aWxsIGluIG9yZGVyPyBQbGVhc2UgZ2V0IGJhY2sgdG8gbWUuIFRoYW5r IHlvdS4gLS0tIE9uIFNhdCwgMTAvMTMvMTIsIE1ycy4gU3V6YW4gQ2hhcG1h biA8b2ZmaWNlZmlsZWVAeWFuZGV4Lmt6PiB3cm90ZTogRnJvbTogTXJzLiBT dXphbiBDaGFwbWFuIDxvZmZpY2VmaWxlZUB5YW5kZXgua3o.IAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: 22Z_9qwWLDsY6dOxAcdBWiirU.HBD0chVME2CmG76KkKnVmX DTsbTWTWMU.wSMcs02UEJ26Ng27cLJWJFdyEH7WFV6ST0ZZc6uPXnnre2Jq_ Z45CVIHIEp1a5sUP92F7GeCVqnJFJpFg2tu3se4EY61shx2dl4I0LI8s_W97 CvPMsbClpd3SqC2NJXabPjCerJN5lIbbSsbZVmNl3cOR8ginxqb18O8M8Nny aqWmiO1hHohFC9TqQAR0LE_s0TvDyLSQFK9S09T7l._iKRPJNsMFGdFFr_cG f0y4wIZoiGLXFCsd3_uFqHnTJ.xcVrC5KHqJmTZz2maAzWv3E26eM97eVJhD 3ZKU5sB2iPzv989D5rBw0JQMZicbAXsr6WZH_HsyN8N_GB6D92iajLh7YsIz p_uQBuZHmtCV7M4zoUWJg.bUdz_c5Cvps_Qfz_tTgfxdonCltVPa_aYCI6po 4U71OPJT45TI_mYmdvJ55EmVYMZAtEzEAOW3AUo4MhSQKrrppoUN4PPx7v45 A_SW_V7edo4ktDgKZ.LQpRsrtYlp2GJGMaeLtSLJnh8KeZNfoZd5YQRNItz. wFm_E3hdjJyPAPD29zwNbyM7txX_gkncMbcPe4x2MYRYJ5V.4dB_dh8z_9kT m0tV.ROg.v0LR8tMPDreBuJs0SrVfHyGWcap7bccqH.BMvAC4iu5QkIwoEVs V42zjW7rZdqwnV8TZB2wjkP4grYULIjys1Pn8SFWCXnds1fwbbOxIHDxNuCA lEqL0d4aWu2maqCE5.yAoiuyz5l7McmLVmHnYyRavDp9XXmWKefzRdlKyzzg CNvkchxgwmdRXkQUFYeuV4yJsmTUUG6j_iOuZx.Wiy2eh0N9.Xo9ACXiAa4P FibrDI6GfuDiH1nyUMSk3px3sdr0GWZEhm_qqq..c1jOEYGeTMQ71URwh0i1 FgZB6HLhJM5bBWRNHcFiZ.wpvnQukj1nYtdxhgLPeDLLBZ9WcnVzz44HQ5rs Byq43NR9_j.m19pa5eiTVvULqiHqXszT4H1Vp7vOG2pt9V.u7YkI1xhcY8YM 0BOLmQapn0GHg8DrvzkCIQ9VBpKtwu4GvklsoElZqcu.PeAJxGObA5HeZwul z89GNE.CuxN1Y1Gg5J_yQ4X1InWqvMZcfv5YTg0c2Qi4E40Fkwm6pbuffqps Pru89Q_j6rIi9ePVlNJmSFdUqHdAI71RuAjC.hcBryDfYyN60DISieJFtcdx o7MDfQuzM338IXGUYzq5Gp5jaZaNQouOuAkqKhOOGVz4u0lhbwhFIKUatRsn 7g_UAvrzOsnTW7xNuGSb0ihq5N_Q4OOZPhyePRhwZthrg7qGxMISOLHnKd63 LEtLmyU1o_Qe3EqrAqYyRK2toRTT_w2N.MPzeZUK4JAqVrKhGlGPPwqmJsSe wuHl5HIkDe7wYsh4OZo9xHAasS.3_fipRr2n_1eX
X-Originating-IP: [98.139.212.188]
Authentication-Results: mta1020.mail.ne1.yahoo.com from=ymail.com; domainkeys=pass (ok); from=ymail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm29.bullet.mail.bf1.yahoo.com) (98.139.212.188) by mta1020.mail.ne1.yahoo.com with SMTP; Mon, 24 Dec 2012 09:40:59 +0000
Received: from [98.139.215.141] by nm29.bullet.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
Received: from [98.139.212.237] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
Received: from [127.0.0.1] by omp1046.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 216004.90175.bm@omp1046.mail.bf1.yahoo.com
Received: (qmail 46683 invoked by uid 60001); 24 Dec 2012 09:40:59 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ymail.com; s=s1024; t=1356342059; bh=lUv5r9kJp9yZzRpM4GROp5bn+gKsvtE9FduO0AEBgyk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=m3GdCZCLmhxjaA6YFaKQJU4PQoEGQ6FC+JnukCXQqvx4eBOMHfwgLrA7BvAkHqu2oBrbvTUcsFMrOmxTxEMed3VBSdtnlTSoqyLmgBztakNEH6kLqsWfASfCCGB7JQ3z5n3vrUr0SvqnSa5qUL2vRYraGWQa0WuLa0k2Z/7tG04=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=ymail.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=IntzzZSK+/bm4sc+SMkbYGpAutn2Gk82SPjwF3pNjFpdzjvvyIWLiro73WdvajESwH8vZdtjIrW6iJbGuN8RLbi/GyArM9lQnGMVS4pcCpO8pRx7YLqWWEHdm18Aq0On6ojBqb4t2L83VjtV2UscTa3iWBExbfdtCf+z7kiTd/4=;
X-YMail-OSG: lNvx.3AVM1n2Fq76qv_FwECW8MNzlRB_LiglR.6ta9dnFty Z0zJ_K2SxMrm9vGID55ARBd4aNIEwFDXueDVWjESCOG_g3f6YVTtpyL0n5CN WU2W6dZppKirH4yJyOYPnAk5cHwkuGdzGpy_FYExHQh1nGyikbUWvFribOxm 6ls7wGoYb.1JEPohoQ_Slmz9drjFCVciWuq25x_oWa843XANsNGyF6tCAGed h7QgYlgOi7DV35BKoGP5DnrL1UhL6w3AJS7ZqG2NuXoH2flTKH8uCgi3gYET PZzp_cXB7nSH3vGoQxHhscj9jWfvZM8Ca8AGpa9PmKmtcJ3GV.l3EELLvlIO kDuUqZn2XcWpkImKqFSk_em00J5oounzJR9Mm1feeZx0SK9HGJYy1G16MKvN wHo5Umb9.xLy1Z9y3twv1RQwdDj_ha.vPND0DatGu_o4HN9ABudbpWWQGPc5 L_Wz2HOU5YrD8e1zVWZZep7GbOBB5oFIuxQ7I0um0tOvwhvs6vBr50XI-
Received: from [41.138.90.38] by web161203.mail.bf1.yahoo.com via HTTP; Mon, 24 Dec 2012 01:40:58 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356342058.37287.YahooMailClassic@web161203.mail.bf1.yahoo.com>
Date: Mon, 24 Dec 2012 01:40:58 -0800 (PST)
From: Ruben Maxwell <ruben.maxwell@ymail.com>
Subject: forward us your full information okay
Content-Type: multipart/alternative; boundary=”-852950040-498957605-1356342058=:37287″