RSS

Tag Archives: Africa

“Mr. Stephen Fred”

NIGERIAN SCAMMER – FBI IMPOSTER – ADVANCE FEE FRAUD

Okay, this is funny. This Nigerian scammer has been spamming me with phony lottery (atm) scams. I have posted dozens of email-addresses, IPs, names, etc that this fraudster has been using. In the email below he claims that ‘Anderson Smith’ was arrested one month ago but this scammer IS Anderson Smith and Anderson Smith’ emailed me a few days ago. (obviously not arrested.)

Anyway, this scammer sent me a email yesterday and I noticed he fowarded the email to atleast 75 other email-accounts so I decided to forward a message warning all the other accounts just incase one believed him. Well, today I get the below email.. I’m thinking one of the people I people I forwarded the message to could of possibly forwarded it back to the scammer? Oh maybe the scammer had an email up there? I don’t no. Hmm.

Dear: (my fake name)

Thanks for your email, i pray this email gets to you in good state of mind.

This Mr. Anderson Smith was the former correspondent delivery officer in the atm and check department here in the FBI branch office Nigeria. Who was sentenced to jail last month because he has been the one who has been scamming people round the world by the FBI after much investigations had been done in his office

Now he is about to scam out your money from your pocket, you are strictly advice to stop all transactions you have been holding with anybody and forward the write up to me, so i can send to the FBI head office right the way for proper investigations.

I will also like to inform you that your funds is still with the security keeping company who are in control of making sure your funds is been delivered to you right in your door front within the next 24 working hours.

You are advised to contact me with the information’s as stated below:

Your full Name.
Your Address:…..
Home/Cell Phone:……..
Preferred Payment Method (ATM / Cashier Check)

We await your swift response to this email in know distant time.

Best Regards:
Mr Stephen Fred
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts) aSBwcmF5IHRoaXMgZW1haWwgZ2V0cyB0byB5b3UgaW4gZ29vZCBzdGF0ZSBv ZiBtaW5kLiBUaGlzIE1yLiBBbmRlcnNvbiBTbWl0aCB3YXMgdGhlIGZvcm1l ciBjb3JyZXNwb25kZW50IGRlbGl2ZXJ5IG9mZmljZXIgaW4gdGhlIGF0bSBh bmQgY2hlY2sgZGVwYXJ0bWVudCBoZXJlIGluIHRoZSBGQkkgYnJhbmNoIG9m ZmljZSBOaWdlcmlhLiBXaG8gd2FzIHNlbnRlbmNlZCB0byBqYQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzEw
X-YMailISG: YRAg_6UWLDsNPJ41NgYqJwAf5OJLkgUP_WnGcMzl8tpjvtMl _rR7NL5SqQ5ckG58fvfr6m0wcweGFaHpNtYbxDMuVDaIIh1l3K5mNhJuuUo_ 1gL0f1X33EdIEWkU5mPAyilJBlXEpEzk7F_IyU989l1G9TzWOre1Rm4NVrtv wL._Vi2pXJgOQWfreL61PfLIlsJaWcVz4qtNDDj2gyD40PxwRgmAN75tZ4nn aRWQg0kEw6lZsV6CpK5tBR93lSxR5BijjoPWypit6rRfFHu2RPGypmHaaT5i NyOQ3dFSpUGR0qaoBtZbkYY6RfdMQeiKvQSJUW3FpI9_7lT9PcuRP8ulxAyH IdKsAozRLeGkYH_HEicxkXssyyV0P5VqNhSjcN.FVIQIMg49oMMuyXhq6Ams KYFWO16wfZulmhe3zhfu8iLnXUOx1asM1CoRtivrLypsvcMHW2z3jV3Sf4xn gIGmDsHpgafAgkUO3QWxCyUJLenj8Dj_BwC0KlH1rTcmzgg1cDn.8n1xfx4I TffWkboW6Eu0ftF39kDBSKHoC1iLW1RlaaenH.P0luai9hY6QXflsWADaNMp vyw3FUaI9ZssiJp679eh4kt0pGwVUec2kSxHDhpu7SLrLfsGFNoF0pPZYXUt uGRiYlJUlUr5v8msaTOvPCQ35gQ51eUcQaRxD4v2KkyvHegnUen7ToXi2Kh_ OKg9ouVRwnkubOu7lDdfjAzSeczwtAcm5f2ubi7_l3rFwW9zApCW4_AjeWmd 7vvS5V1nYymEkC31.V8sS56xjK3kQCE2iE9j0pUAjktDOX6wn8J_4Ayq1PGI JXgjS5w9nTji3nRHdgxyZOWsXn0db6EffdhNgia3_uSx8P4LjSMZZ7l7PS2t R0PhNr9NWBA._lPQRp.ZCkvQ.8fqwvIlrCFFnsl0SMfnnvOGhZygyoSDyQDm CBfSA7cKbH3v.lGz0WBYswdnCdFJQrwjekmXVAKaUQt440eGAHPbesQ0ln9U PSqwPsVIJt7QkPvTDHPfdX1TOmMQogOlC1_Pt08aiFWDsz.hfNhiKZl1XK82 uJT_t0sFbY8LfjS.p25d_9wZv04b8nl7s5nCniDYVnKK9LESNJdIkvjYCVgb WGkqKQSwqmZou53wA60pT5kbAMhI2QtgZo59Jrt_qvNwcY82MaPQKLLMaFGN a_I2Gwi0ptjskEuktAOgHo9vf3tIbLhf.cNFXjFPrGYa4yPAkAR_C1RMGzCi eEu2c3Go8MzGJFVU0PFqESSugO1nYIzz7W4yaGauPPLzBhykdx2OBa._GR.x 6IyB0YF2._YiCvukGztRVMt0SLWP2kQarf68uCf11I2A4mPMlitmKL._tD.x kkfi6Zc9B.JKZieJlcetzb7nwXocEQaWXoZUH1twHVOZ8dyzq3AnFQxdxoD9 G4mkqGOembFIUmoPAkuk2.N1hJoPV672fTBJY_dMNjDU_OM1tua2bQhWEaV9 RB9WTSbJRX_xtzqg0OrPgSmaXawGuXf0u4RaLPOD8kQiMN9f3w0LTGpfzNF9 8Rvgg796.RX_9Zj_ho8NkHiqorsQgxJeAkzeCQnhuNyKZTd8ZiwYbk_jS8OY .8E_qA6ixSW3NL.CC4hF64r.DdClBZQLn0xSC1PeTm3AGG38oY6zt26wqSnu hrLzp2rqW6lj8PfrLPMzw.Gqo8wMvm6Om0JtuF0gPL_NJ3YY50rFVWWnWA–
X-Originating-IP: [77.238.189.211]
Authentication-Results: mta1213.mail.ac4.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm4-vm0.bullet.mail.ird.yahoo.com) (77.238.189.211) by mta1213.mail.ac4.yahoo.com with SMTP; Thu, 20 Dec 2012 02:24:58 -0800
Received: from [77.238.189.234] by nm4.bullet.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
Received: from [212.82.108.243] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
Received: from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 56404.21902.bm@omp1008.mail.ird.yahoo.com
Received: (qmail 69722 invoked by uid 60001); 20 Dec 2012 10:24:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1355999096; bh=pyOeaUKKOWWZW3lLdVTTiYRo9J3z45S6mIgOy2HgFlE=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=6sEt/VfUuEDUeUudSXs2M1ShOX0eWuYo7bOFh/XdhIPki+ZIyWn9FslcZYIOK+sL8m2MaPtDxi6PNqGk3ODuJVgRnYkMO9IvTfVw4QnvNAaE0M7IfkAvckE4iO1WwKrgM4BNroefkyNDvwH2m/l87dYrH6Im4aiMBs/53/5CRh0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=4oyJFxMb7QIfFN0qOOV5EQRhasHrL0MG/qXmF0XzHB3Z75TEzL5ABDN+fjzt3FxSN4mb8R65+JBQMcZgeYn8hdlOLtIV7RGsbY7RDzkjKCf/9HGA0mDNi4dbn7Oof6iDUGP+kjNmcqlB3BqyHnRKxJyfsGxbxGwxQB5nyfnYApU=;
X-YMail-OSG: gJ29ik4VM1lXPyNG1YswL1rjwFhoTxeyDPqgBh6qE0W3Pqd SBPMiD2ZzSxd7xBXJUeIU9HeH8gYoc_o0hqMUZ.qWnc3PHsey18hkIJmRVZQ yDDgnrXDyofzHPQaZVicPUr9PhVOPPvLSyF37PopUuxDIHztw_T1fAI6YJN3 .IY9klRHXSdhx1XzjXDiWH_LvYN69G9aOSo0rZgdyeHU0M8MLOq7kfarzh9P bTtG.jAKXiYSxzvh4HXO1BJJ4nyYbdwX1bmpjdGVdXFLJ63kWgxitArYUuQ8 Aebx62dNlVOnuz3S5Wit3dSljkkO6nzX6N23R7uQUBOYLas3hJt9ayP4NSI0 9bWoBPZmOLXWneE8s8tCtkcKyynk9esWOszaD5qVI4GnBogGS9PyOOt_UJwD sMJf2NMf4K55JsKHz4XsW2WTb0G5d0vkdPg–
Received: from [41.71.177.225] by web171903.mail.ir2.yahoo.com via HTTP; Thu, 20 Dec 2012 10:24:56 GMT
X-Mailer: YahooMailWebService/0.8.129.483
References: <1355977301.69904.YahooMailClassic@web161001.mail.bf1.yahoo.com>
Message-ID: <1355999096.69523.YahooMailNeo@web171903.mail.ir2.yahoo.com>
Date: Thu, 20 Dec 2012 10:24:56 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Reply-To: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: YOUR FUNDS IS OUT FOR DELIVERY TO YOUR DOOR FRONT! GET BACK TO US NOW.

“Mr. Stephen Fred” <mr.stephenfred@yahoo.dk> 41.71.177.225 – 77.238.189.211

 
Leave a comment

Posted by on 12/22/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , ,

“grace.richard”

 

LOTTERY SCAM – NIGERIAN 419 SCAMMER – FRAUD

NOTE: This scammer (or group of scammers) have been spamming me with fake lottery emails for months. I must have well over 2 dozen email-addresses and IP-addresses from the same scammer but it is hard to keep up so I post many of their emails in a new post. They have continued to change the amount ‘owed’ and now they’re trying a different scam tactic.

NEVER ship money to anybody you don’t know personally. Also, never cash any checks sent to you from unidentified online users.)

freemoney

OFFICE OF THE PRESIDENCY ACCOUNTANT GENERAL OF THE FEDERATION

Attn Friend
DATE: 17 -12-2012
Be informed that all the fees you are surposed to pay before receiving your contract fund have been waived off. You are to contact DR YARADU IWU ASST GOVERNOR (CBN) email grace.richard@voila.fr only for your processing fee and he will transfer your contract fund to you immediately. No other charges except the processing fee. Your PASSCODE is: 999-035-2655 ( Fund Transfer confirmation same day).You have no other payment to make except the processing fee. Your Payment will be through Electronic Telegraphic Transfer.
This is newly introduced system of payment by the Central Bank of Nigeria to avoid experiences of incessant fraud, illegal extortion of money from Contractors and to enhance transparency. WHEN YOUR FUND IS TRANSMITTED, DR YARADU IWU ASST GOVERNOR (CBN) WILL INFORM YOU AND YOU APPLY THE PASSCODE AS DIRECTED AND INSTANTLY, YOUR ACCOUNT WILL BE CREDITED AND YOU MOVE TO YOUR BANK. You will only apply the passcode when you have paid your processing fee because for now, it is still invalid until your fund is transmitted. You can try the guideline as instance: * With your digital phone dial our bank access code: 23413423100 followed by, then enter your Account number followed by #, at a voice prompt enter your passcode and # and you will be credited.
(This will be when your fund has been transmitted) BUT TRY IT NOW.Contact me if there is any delay from the so called gentleman incharge. Any other contact or payment you make apart from the processing fee is at your own risk.Be informed that so many unauthorized individuals do parade themselves as our officials and impose bogus bills on our contractors with their syndicates home and abroad. Take precautionary measure henceforth. You have been notified.

PLEASE KINLY RECONFFRIM YOUR INFOMATION

(1) Full names……………………. …………
(2) Private phone number………………..
(3) Bank infromation …………………..
(4) Current residential address…………
(5) Occupation……………….. ……………..
(6) Age and Sex……………………… ……..
Yours faithfully,

Barrister grace.richard
ACCOUNTANT GENERAL

HEADER:

Return-Path: <grace@phuockien.com.vn>
X-YahooFilteredBulk: 178.63.44.131
Received-SPF: none (domain of phuockien.com.vn does not designate permitted sender hosts)
X-YMailISG: .amxTlgWLDsskJLwL22SbC.qlamHy7RIlkiDTe03HqwYipYD ID3I5iS0jtT3A_awcpmwrXOP2BZ8nf7UA9Zho_gFkuragClY6s2EO1oW0Q1_ qMAO1LIfmfJ4_mnV_zMmUjfzto.mz3HrLQ7is4Oy4J4KDBT7pp7JVfB6kp2D 68V7KeM14H3Osx_MZOGs_9D.vrWnwXHBZwkAevgaq3YQReEhIpED3dWKdiN4 GFWjNX_vnheMNyIixnnDHpV19o0NfL.POhol7XDYh2zj.7Sm8Bk7LJrZm463 6EMuFdllTIY9rXyGmd9aP_pH6fMPokSqF3YwiaJ5Id1CrQDfG1ZVmTyn0GWi KVJkhRLJkxwe4VwK62eCl2hnjff7tp48tJd94WzG7nP8ZK4KlZGHpQx5zz4H ndtBGZUQWNjznMh47h1RhwZYYRVCTLi8tG5jQDGigL8_TZKQFKpQmxjmJmhS 1zEwe5iNUBtydxLWUTaEgvmAGqa1h4048q_QqxghgfrKccoE2inZfxWfOpcr wTC.pxWbaM3RlhUN2lM4VqhnjdU7LCBdbJeY8pXgG1jUqS9UyiuM0XYGE5S6 l7ql5LeLCR97gKT2DUtoIS7wBICFgxbGLFiUtAz5J3jl5GfqIk2UDnNghgSE V3xUHTcfREz9awPmPXRE2KuxtWSs4JowgjA3BR6F.xrjn_rNGCySObW0ICsd 9jZnuENYtENC2_jHYYv.o4vccUNZRIFR8vMbQjeX0Wbv9d0DVb6Nz.KvCDQ1 4XyFcPCt0loJ9EhUp04Z5jXPCfae8cOIdK8kXHYkod3FQLT6x78Rv_wScYnb c5Gr1MLN4zyDLsVWUFkAtDYdSLazNRbGNSONFdt67VSPHbROINFHUd7RkFA8 rJj8gsAkM1ttTDYiNdmnljucpdhshisFKDfXSr32txpWKYmCVeqUPFlznMTQ p0aB5.5Fwnmt2.Vn43eBCW.2CWoTNx49YR.N9zi4ZHIznVvR.89nigUUWZIo ULR6kcOcqzE92sH9KrcI9hMHNvLv5bMAJlmRTwRcxU6nhFmShVDWfprk9HqE pafQE_0vfI2Uy1npKrcCDhhA.XQ8uKs3LNFEItmJRuLWXMBd20F38AuHnD9s ujCGJtk0FUFuk0rr_Gx9.Q5tqLbR84xB0jkmYbgC4TwI9NoxyE4YDPMuINRB wVwA_g4it3jkAr49M8p1GjqnT.DuPVSU9jxSgjtmqxj3mnWcG93EbCOHsMBf b00m3_wuGozIX3uhBy_Ma6Hq2zGaLspA8zS7YIztoYdPwU44Nkn0bOEEnTAq Wzu5Xdbqpqna2O7a18WhYllXYCoY43lX2K5LmUGlqbXaZig7TMBNQI5qz3yS uX__j_pB14r_TWUoShsxbhKXGD43SszgBcrje8NgZeiKu5NwMW_z.sJp9cjE E1I0bxr2ywMOdWK51j.KmOJJX7UX0Jlmi1cY2Fmfg4uPz35hdhQHPmu9R3Wt xLkD9j9Bg_byhi6TYldfcFbXKsGrteEqFi_Hq2bHJbd4aoamFVa0FvoiKriq njN12uBoBqw-
X-Originating-IP: [178.63.44.131]
Authentication-Results: mta1266.mail.sk1.yahoo.com from=phuockien.com.vn; domainkeys=neutral (no sig); from=phuockien.com.vn; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO server.a7la3lm.com) (178.63.44.131) by mta1266.mail.sk1.yahoo.com with SMTP; Fri, 21 Dec 2012 19:24:26 -0800
Received: from 23-25-221-145-static.hfc.comcastbusiness.net ([23.25.221.145]:4173 helo=User) by server.a7la3lm.com with esmtpa (Exim 4.80) (envelope-from <grace@phuockien.com.vn>) id 1Tm2Vq-0005bN-9G; Fri, 21 Dec 2012 16:19:42 +0300
Reply-To: <grace.richard@voila.fr>
From: “grace.richard”<grace@phuockien.com.vn>
Subject: hello
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – server.a7la3lm.com
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain – phuockien.com.vn
X-Get-Message-Sender-Via: server.a7la3lm.com: authenticated_id: emelie@d2ja.com

FROM: “grace.richard” <grace@phuockien.com.vn> RETURN-ADDRESS: grace@phuockien.com.vn REPLY-ADDRESS: grace.richard@voila.fr – 178.63.44.131 – 23.25.221.145

 
Leave a comment

Posted by on 12/22/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

“Mrs. Suzan Chapman”

RECOVERY (LOTTERY) SCAM – NIGERIAN 419 SCAMMER

NOTE: I’ve never been scammed by anyone but get alot of ‘recovery’ scam emails and because scammers are very unorganized, it’s possible I slipped on the ”suckers list” lol.. Oh well, the more emails the better because then that means I can post them on here and possibly save a (potential) victim.

Below are two emails sent by the same scammer under a different name, email-address and IP location. ( Suzan Chapman sends out scam mail under Williams Johnson & Ruben Maxwell )

Hello My Dear
I am Mrs. Suzan Chapman; I am a US citizen, 48 years Old. My residential address is as follows P.O. Box 1920 Hazelton Drive Germantown, Tennessee 38138, United States, am thinking of moving since I am now wealthy. I am one of those that took part in the Compensation in Benin Republic many years ago and they refused to pay me, I had paid over $99,000, while in the United State, trying to get my payment all to no avail.

So I decided to travel down to West Africa precisely Benin Republic with all my compensation documents, and I was directed to meet Barr. Ruben Maxwell, who is the member of OUTSTANDING PAYMENT AWARD COMMITTEE and a Human Rights Activist (Lawyer), and I contacted him and he explained everything to me. He said whoever is contacting us through emails are Bogus (Fake).

He took me to the paying bank for the claim of my Compensation payment. Right now I am the happiest woman on earth because I have received my compensation funds amount of $1,5,000,000.00. Moreover, Mr. Williams Johnson, showed me the full information of those that won lottery, and those whose inheritance had not been paid and the list of all outstanding contractor that were owed that are yet to receive their payments and I saw your information’s as one of the scam victims, that is why I decided to email you to stop dealing with those people, they are not with your fund, they are only making money out of you. I will advise you to contact Mr. Ruben Maxwell directly on this information below.

Name: Mr. Ruben Maxwell (Barrister)
Email’s: (ruben.maxwell@ymail.com) (rubenmaxwell@globomail.com)
Phone: +229 94 99 53 77

You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing.
The only money I paid after I met Dr. Thomas Boni Yayi was just $280 for the paper works, take note of that.

Thank You and Be Blessed.
Mrs. Suzan Chapman.
P.O. Box 1920 Hazelton Drive Germantown, Tennessee 38138 USA. Add me on your YM mrssuzanjohnson@kimo.com

HEADER:

Return-Path: <officefilee@yandex.kz>
X-YahooFilteredBulk: 1.235.121.101
Received-SPF: softfail (transitioning domain of yandex.kz does not designate 1.235.121.101 as permitted sender)
X-YMailISG: dDycFlwWLDuyVY7iGmbjhHLp63OyDyVfDBlkWhu.O8tDMNe8 .KZdKCQyBsBR3UVDRBm3mEBWxOY_W.pr1wP_2PpoKNSTQc6JYyYaxT9R.wo. pKhHHHTKbg8VL7n89IabyGdU14jxsyXQm_WCEdkiGXxhoi723kfHIhqGErmu C1wEl_0NFP5G117BvHIT1hjWC8nAUDC.Ss49pIWmuGy5Lt2wyd2VTw_riam6 qx0Cu_Ip.kxhtpTztlr3V6SUoy8pcLnXb1YqadcFCZ4DjoovqQAc2py2yv0C PqmaNnj_it4cm8o6zDrC2oZUHqMRCGH1QzTsS2YpK7g2tIJCJ5XGwZrQPjis 9bndf9IOky9SDCCjEhTeIwFHAhFH9ZZNPbI5q7YRnewPj_wNghTYvrhZK8Rq simwKqvZpy7DG65Zrm_m08LyQHk_eaTEjM_0YbPb5QfHDWWSzJEhTkI1nhuH 8tUDZ4K10zrgl.haug02JN3yQrRN08twJySYdR5b88Uc.MhFPnDiijveZWYO 30C2ldqANVmu.PHHqcF_1nsCQDkEtGm90jeuawzh43jWt_2iqmFZ_eDZeV4O mo0cKxhRB8BZO6d9ehNvkv5zZ35mFDOHNjYPRWWBPjZbTLBuhKYN421F4KJV DKZ2GriawmFqfiBj7v.ao4ZBHiDJNv.9s38pItexc24reUEdozNn3_xz0gmf 0Ks_WhC1qDL4AK4atiNFrbUVzr.FAR0texoUgEl4SxIoPvf7OqciGLhxfpcT ZMHyiD8BE6WD8gRzl9hy1gPGDnBU6V9bzIKmMnU7RZr7o.9pQpzPUKdfhU2S ET2vZYAGHgwh6137UvE.8ZrhFnzxviczTqRxxm7gnGedWa8_d4FtfNwV_B4Q bYmN0yXkeTEVRpTaYccqMWvKTjhYnlDhLaCDGqUIHoEujwkCScLPvVYJ65xs Pfn4NY3lA1sX3ibAkOA6HTJM091ZHWFmrFTjdVT7kOD4rOLM55xWGOkJh2vu NwW3mHj5147dKNNgGGOPCDKsK7udJ6A6fmSdzTTuTvH3eo4HaI30jwzr3SpS pm7380yEfjnaablGbS.6_y9_3pzS0G0gB._FWfCkALDPXyDfOJJJkTTG3sbR 45KKjw6vHRk4sXYWQjrpXwr_Y99c7Sc6x488YUE30psfWBYx4V3ArdJVgwLG bTTZE55Z2vS9g67xRo7AiXCxnjnhyAidwlyrMO5llsg8INgBHAMBzOiCYe26 uUsScAguvqr2epPVCH1dSAuLymdxChsKMqeKo0.n6BxNgzy6WXRlVqWo8z1I GBUsPRJOQEtaBR9LZpfAnAuf_8mH4GDqMySGKRAfltcAd4ZlFxx.hvmrOpUp IlJojtl2UhEm8kbQ_LtbXXOBo1fkuLw-
X-Originating-IP: [1.235.121.101]
Authentication-Results: mta1215.mail.bf1.yahoo.com from=yandex.kz; domainkeys=neutral (no sig); from=yandex.kz; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO localhost.localdomain) (1.235.121.101) by mta1215.mail.bf1.yahoo.com with SMTP; Fri, 12 Oct 2012 22:32:41 -0700
Received: from User (69-2-73-170.static.networktel.net [69.2.73.170]) (authenticated bits=0) by localhost.localdomain (8.13.8/8.13.8) with ESMTP id q9D5Lnlc022212; Sat, 13 Oct 2012 14:21:51 +0900
Message-Id: <201210130521.q9D5Lnlc022212@localhost.localdomain>
Reply-To: <ruben.maxwell@ymail.com>
From: “Mrs. Suzan Chapman”<officefilee@yandex.kz>
Subject: I am Mrs. Suzan Chapman

“Mrs. Suzan Chapman” <officefilee@yandex.kz>  mrssuzanjohnson@kimo.com   ruben.maxwell@ymail.com  rubenmaxwell@globomail.com
Mrs. Suzan Chapman officefilee@yandex.kz +22994995377
+229-94995377 – 1.235.121.101 – 69.2.73.170 –
Ruben Maxwell ruben.maxwell@ymail.com RECEIVED-IP: 41.138.90.38 ORIGINATING-IP: 98.139.212.188

______________________________________

BELOW IS AN UPDATED EMAIL SENT YESTERDAY (CHRISTMAS EVE, 2012) — SUZAN IS NOW PRETENDING TO BE RUBEN MAXWELL — 

SUBJECT: forward us your full information okay

EMAIL: Hello, forward us your full information okay

HEADER:

Return-Path: <ruben.maxwell@ymail.com>
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts) IG9rYXkgSGVsbCBNcnMuIENoYXBtYW4gaXMgdGhpcyBlbWFpbCBhY2NvdW50 IHN0aWxsIGluIG9yZGVyPyBQbGVhc2UgZ2V0IGJhY2sgdG8gbWUuIFRoYW5r IHlvdS4gLS0tIE9uIFNhdCwgMTAvMTMvMTIsIE1ycy4gU3V6YW4gQ2hhcG1h biA8b2ZmaWNlZmlsZWVAeWFuZGV4Lmt6PiB3cm90ZTogRnJvbTogTXJzLiBT dXphbiBDaGFwbWFuIDxvZmZpY2VmaWxlZUB5YW5kZXgua3o.IAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: 22Z_9qwWLDsY6dOxAcdBWiirU.HBD0chVME2CmG76KkKnVmX DTsbTWTWMU.wSMcs02UEJ26Ng27cLJWJFdyEH7WFV6ST0ZZc6uPXnnre2Jq_ Z45CVIHIEp1a5sUP92F7GeCVqnJFJpFg2tu3se4EY61shx2dl4I0LI8s_W97 CvPMsbClpd3SqC2NJXabPjCerJN5lIbbSsbZVmNl3cOR8ginxqb18O8M8Nny aqWmiO1hHohFC9TqQAR0LE_s0TvDyLSQFK9S09T7l._iKRPJNsMFGdFFr_cG f0y4wIZoiGLXFCsd3_uFqHnTJ.xcVrC5KHqJmTZz2maAzWv3E26eM97eVJhD 3ZKU5sB2iPzv989D5rBw0JQMZicbAXsr6WZH_HsyN8N_GB6D92iajLh7YsIz p_uQBuZHmtCV7M4zoUWJg.bUdz_c5Cvps_Qfz_tTgfxdonCltVPa_aYCI6po 4U71OPJT45TI_mYmdvJ55EmVYMZAtEzEAOW3AUo4MhSQKrrppoUN4PPx7v45 A_SW_V7edo4ktDgKZ.LQpRsrtYlp2GJGMaeLtSLJnh8KeZNfoZd5YQRNItz. wFm_E3hdjJyPAPD29zwNbyM7txX_gkncMbcPe4x2MYRYJ5V.4dB_dh8z_9kT m0tV.ROg.v0LR8tMPDreBuJs0SrVfHyGWcap7bccqH.BMvAC4iu5QkIwoEVs V42zjW7rZdqwnV8TZB2wjkP4grYULIjys1Pn8SFWCXnds1fwbbOxIHDxNuCA lEqL0d4aWu2maqCE5.yAoiuyz5l7McmLVmHnYyRavDp9XXmWKefzRdlKyzzg CNvkchxgwmdRXkQUFYeuV4yJsmTUUG6j_iOuZx.Wiy2eh0N9.Xo9ACXiAa4P FibrDI6GfuDiH1nyUMSk3px3sdr0GWZEhm_qqq..c1jOEYGeTMQ71URwh0i1 FgZB6HLhJM5bBWRNHcFiZ.wpvnQukj1nYtdxhgLPeDLLBZ9WcnVzz44HQ5rs Byq43NR9_j.m19pa5eiTVvULqiHqXszT4H1Vp7vOG2pt9V.u7YkI1xhcY8YM 0BOLmQapn0GHg8DrvzkCIQ9VBpKtwu4GvklsoElZqcu.PeAJxGObA5HeZwul z89GNE.CuxN1Y1Gg5J_yQ4X1InWqvMZcfv5YTg0c2Qi4E40Fkwm6pbuffqps Pru89Q_j6rIi9ePVlNJmSFdUqHdAI71RuAjC.hcBryDfYyN60DISieJFtcdx o7MDfQuzM338IXGUYzq5Gp5jaZaNQouOuAkqKhOOGVz4u0lhbwhFIKUatRsn 7g_UAvrzOsnTW7xNuGSb0ihq5N_Q4OOZPhyePRhwZthrg7qGxMISOLHnKd63 LEtLmyU1o_Qe3EqrAqYyRK2toRTT_w2N.MPzeZUK4JAqVrKhGlGPPwqmJsSe wuHl5HIkDe7wYsh4OZo9xHAasS.3_fipRr2n_1eX
X-Originating-IP: [98.139.212.188]
Authentication-Results: mta1020.mail.ne1.yahoo.com from=ymail.com; domainkeys=pass (ok); from=ymail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm29.bullet.mail.bf1.yahoo.com) (98.139.212.188) by mta1020.mail.ne1.yahoo.com with SMTP; Mon, 24 Dec 2012 09:40:59 +0000
Received: from [98.139.215.141] by nm29.bullet.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
Received: from [98.139.212.237] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
Received: from [127.0.0.1] by omp1046.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 216004.90175.bm@omp1046.mail.bf1.yahoo.com
Received: (qmail 46683 invoked by uid 60001); 24 Dec 2012 09:40:59 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ymail.com; s=s1024; t=1356342059; bh=lUv5r9kJp9yZzRpM4GROp5bn+gKsvtE9FduO0AEBgyk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=m3GdCZCLmhxjaA6YFaKQJU4PQoEGQ6FC+JnukCXQqvx4eBOMHfwgLrA7BvAkHqu2oBrbvTUcsFMrOmxTxEMed3VBSdtnlTSoqyLmgBztakNEH6kLqsWfASfCCGB7JQ3z5n3vrUr0SvqnSa5qUL2vRYraGWQa0WuLa0k2Z/7tG04=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=ymail.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=IntzzZSK+/bm4sc+SMkbYGpAutn2Gk82SPjwF3pNjFpdzjvvyIWLiro73WdvajESwH8vZdtjIrW6iJbGuN8RLbi/GyArM9lQnGMVS4pcCpO8pRx7YLqWWEHdm18Aq0On6ojBqb4t2L83VjtV2UscTa3iWBExbfdtCf+z7kiTd/4=;
X-YMail-OSG: lNvx.3AVM1n2Fq76qv_FwECW8MNzlRB_LiglR.6ta9dnFty Z0zJ_K2SxMrm9vGID55ARBd4aNIEwFDXueDVWjESCOG_g3f6YVTtpyL0n5CN WU2W6dZppKirH4yJyOYPnAk5cHwkuGdzGpy_FYExHQh1nGyikbUWvFribOxm 6ls7wGoYb.1JEPohoQ_Slmz9drjFCVciWuq25x_oWa843XANsNGyF6tCAGed h7QgYlgOi7DV35BKoGP5DnrL1UhL6w3AJS7ZqG2NuXoH2flTKH8uCgi3gYET PZzp_cXB7nSH3vGoQxHhscj9jWfvZM8Ca8AGpa9PmKmtcJ3GV.l3EELLvlIO kDuUqZn2XcWpkImKqFSk_em00J5oounzJR9Mm1feeZx0SK9HGJYy1G16MKvN wHo5Umb9.xLy1Z9y3twv1RQwdDj_ha.vPND0DatGu_o4HN9ABudbpWWQGPc5 L_Wz2HOU5YrD8e1zVWZZep7GbOBB5oFIuxQ7I0um0tOvwhvs6vBr50XI-
Received: from [41.138.90.38] by web161203.mail.bf1.yahoo.com via HTTP; Mon, 24 Dec 2012 01:40:58 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356342058.37287.YahooMailClassic@web161203.mail.bf1.yahoo.com>
Date: Mon, 24 Dec 2012 01:40:58 -0800 (PST)
From: Ruben Maxwell <ruben.maxwell@ymail.com>
Subject: forward us your full information okay
Content-Type: multipart/alternative; boundary=”-852950040-498957605-1356342058=:37287″

 
Leave a comment

Posted by on 12/21/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“Kenet”

EMPLOYMENT (JOB) SCAM – FRAUD

EMAIL: We’ll like to offer you a Job with our Company after thorough review of your resume.

PRUDENT POLLS LLC is a well established Evaluating Firm, Our Primary Business is to provide exceptional Customer Service Evaluation. Our company is solely responsible for hiring survey agents and recommending them to our Clients. The clients are companies that have a wide network of businesses across America, most of our clients have retail outlet in major cities across America. What your job (Survey Agent’s Position) entails is to conduct surveys at any of our client’s retail outlet assigned to you. you will be patronizing their business and conducting a survey at the same time which mostly is in regards to the customer relationship their staffs offer.

We will therefore like to offer you the job position as a survey Agent to conduct customer service surveys in your area.

Your Job will involve you providing feedback to us about the customer experience at any client’s locations. Companies use this survey for many reasons. During a typical survey session, you will make observations at a specific store/office, restaurant, or other type of location, while acting like an average customer.

A typical survey report will include

1) How long it took you to get services.
2) Smartness of the attendant
3) Customer service professionalism

Most companies employ our expertise when people give complaints about their services, or when they feel there are needs for them to improve their customer service. Your Identity would be kept confidential as a safety measure. You will receive $400 on each survey you conduct at any time for any of our clients, and with the number of clients we currently work with, you could be conducting as much as 5-10 surveys weekly, which will earn you between $1200-$2400 weekly. That means you can earn about $78,000/year doing part time.

Our clients include:

McDonalds
Starbucks
Dunkin’ Donuts
Washington Mutual
ACME Check Cashing
Chase Financial
Walmart
MoneyGram America
Victoria’s Secret
Dell America
Western Union America
FTD Florists

No commitment is involved, no start up fees, no paper works, and you would have flexible working hours.

If you are interested, email me your full name, address and phone number, so that we can add your mailing address to our Regional
database.

First name.
Last name.
Address ….(No P.O Box)
City, State, Zip Code
Cell phone Only.

Once we receive this information and confirm your interest, we will introduce you to our clients immediately.

A swift acknowledgment of this email will be appreciated.

Warm Regards,

Return-Path: <kenjam090@yahoo.com>
X-YahooFilteredBulk: 209.216.206.176
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: frWlEaAWLDuG23Rjf4y0MIZzX7MAVh8WzJXN7DiZrBbeBiyj sVrw.nq8ohd52OPgN6Kus0TerVmw1ElbCPkGLc3zq1m52KCpK8_MXZDrGCDN JJs373NV.3ydAmB.fYc_Xqr8rvAXClsk2IqR2kZXaZ7XVRMT0Q63bLW5Y_b1 5spCogHDmU0FHVJURCXW8NkD8szBMM0ExX_e2VWV4DiiKbdSsU_2Z2avomHG _DSyIkayy1ktJQXBRAl_l8Q9msq7L.ksnRW7QDB6Ig1g.5R2FpnPBZgIgbDf rhJK402QGysnwVzI6rbMEAymsP5Eyp_ueXbpbHk.1udg1pIJpOwGPDElIo7b tB1lRgETjeBQRJaeiNchq4dt0NF1m8xOixfLgqD.n5J6e0UwRUysYWO4N1cf JyqTCU8tB6Y9S5qS9QjzmBwSh5BjvoRNKdUje3Nh0Y1czE6J0UeYqICeJ7YJ GY.OY4UekAZcL5RW_a9m.PYO2Ny7rL23TeCHYpCUrzpjcWd.VKoXFhQE3f3B 7EmJwd6uE4GiirmlZZlWsL8OzKOPwfGgZPPNk_JAE5ppcUeHfrMkCK7gcQbw OQkjKtVj56hevxMBHxVw782L7E.wKMK2.8eKHZTaZkjIv18315QhG2EL31pU Y5ZcH6RDFjv_6dRX70mNdA1VN4rrceJQsPSehPDztt._.H6OIgk1gT9bH78H LoDvUacrsG9UzZ.cQxvbajW9lfKn5zo_Jl8jvY9YFpUYTXaS501MFi9DNAMW EpkbWHRVIL5uhvW6oEVJNjZFTRIsuKaEHseFGl68eMaQO4HOZc2cL1GvgNC9 FcPBU0iX5nA2joIm8YgINi77cPE_7aqCkO0xTbd1e_pX.a4AE0QWs_9p03Ch PIE.kUPDgDfmrH.dxiv9MVw8JYsKLuskZt8Ya6v3gmK5Csa.cx2JNTJdVfie S8SvBtc4qIJKTLt.akBIW9PC.Iz_L33dMQ2TDYmxusHmb8eC28jaRTTtioK5 kIGNM5RUVoH3hCrRYoP9cb9CXL6YA6M8cl3znPyewC.D5_gm0MmOphcC38Nd LdN07elmMGr0DCW6lgsdaxCOf3RZ8zHYL8tgVvL539XHi.V1Df6MXgMWnLHC DjF9994mpjZ0f9Oujhr0EQMVl6.sWumyC.tZBFeX3MmtJ_ezl.ifF7BFcslt Sy2Bhl99YmYKie9zVEWUqNhEZTJhfm8DhRbFczLBvZxOuUC9QqSQcWaEcqFK hk0jfRZHusa7RsNmF8diOUjMLxtHi1unl3Id0dvG7fW5rnkr08Lp.I3qdQ–
X-Originating-IP: [209.216.206.176]
Authentication-Results: mta1372.mail.gq1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO witt.m5hosting.com) (209.216.206.176) by mta1372.mail.gq1.yahoo.com with SMTP; Tue, 09 Oct 2012 12:36:18 -0700
Received: (qmail 25659 invoked from network); 9 Oct 2012 12:36:18 -0700
Received: from 173.221.123.190.nw.nuvox.net (HELO User) (173.221.123.190) by michaelmccafferty-com.m5computersecurity.com with SMTP; 9 Oct 2012 12:36:18 -0700
Reply-To: <kenjam090@yahoo.com>
From: “Kenet” <kenjam090@yahoo.com>

Kenet kenjam090@yahoo.com 173.221.123.190 – 209.216.206.176

 
 

Tags: , , , , , , , , , , , , , , , , , , , ,

MR. ANDERSON SMITH

NIGERIAN SCAM – BUSINESS PROPOSAL – FRAUD

There’s an update. This scammer responded to my email fairly fast. The response will be under the first email and header. This Nigerian scammer is using the same email-address in both email’s but the IP’s are different. Also the first email has a seperate reply-address. (The headers are under the emails.) If you receive a email from an unknown online-user who is using the same IPs, it is a SCAM!

Some of the newest names and email-addresses used by Anderson Smith are Lara Frinch – Lara.Frinch@gmail.com and mikesbikes445@yahoo.com

Online-Fraud-Scammer419

EMAIL: Dear friend,

My name is Mr. Anderson smith, branch bank manager here in London. After several official investigations of the foreign trade office of our Chambers of Commerce and Industry, I decided to contact you directly for assistance me.

I am interested in transferring money to your country through your assistance. I am currently in London and I have the sum of (6,850,000 U.S pounds) I would like to transfer to your account and invest in your country if possible till i finally arrive to your country.

I made this money (6,850,000.00 pounds) of my earnings in excess of the branch for the fiscal year 2009. I choose you, because i have nobody to trust, I am working directly with the bank,

Hope you can understand my situation and help me receive the money and invest this money properly, as it is my only hope. You will receive 30% of the total fund as commission for cooperation sympathy while 70% will be for me.
Please kindly get back to me ASAP.

Best regards,
Anderson smith.

HEADER:

Return-Path: <apache@vip.anoweb.cz>
X-YahooFilteredBulk: 46.234.104.5
Received-SPF: none (domain of vip.anoweb.cz does not designate permitted sender hosts)
X-YMailISG: quoIs5oWLDtqEI2w5diwi1FJo_dDU.jRfti4siTkZH255XPc 1fNvfBMfUAOuxp1rXDnPP3uC_aQG.359raYZL8atr3YKpFYg5NGwMFQ9.MhS nkjv.6hjGm4S0.Lrq8x6MvudMH7hYeE1GxM6EnTdlqsmO_7VKcyIyam7GurM c9wg75ObsLunIKw37MD4WZ9S.Cdlh5AYJTYDcDsqB5I9CB6fKsKK6Kibkkiz QlkZiq7BUy_bgJB7QhxFoW146ByFcymPRgixiKeEPH1KEPc9v8PJbzce0Qk0 BO37Jeuf7jXj6ZVwhRa87PVWen0r3z5diFOWHAQ7ZxThzTm_RwMJ70fNTgHP kIIdReN8JIQvZ.hbdOf_xqwN5O8w9.KND9aMgUzWoMQawrXn..upuYMdulVA BLJjhJZgkFmw5xCjGEdq48.jFnDFG_0fDNQfb32v2zPk5HgJ9C_r2pJ2p5UL hEru5SSQPUQrDRLEHr4Vs4jEBmETjMe8liGFaOyvP8lt8AgeClcZkmC_y8Jb O4n.Z4UjPR0kL4Baz5TRDWhCKxlCOufSU5GzbJt1Ligv3A5htNxzJNaxfSbq rTGYpTp7GGNcU3ccKefags.SlVOadcx_Ts3h_aAtIsm8SAMJ0N4clVPxFlWS cUarnKH_sktj8OPr_o1YK9RXJRGmNUq0aZSkRzsFVXPaHxw_0wkE2LzoxXkf aBHhs.cW2fccOAdkYd3SszeUK_44o30IgzqGSeGNVpKNVD3fXE5ybc.eAeHv 8jKpvP_EapZwF_NlTakeHN1Vpbm1Ov8cMfAuAx92CPhMccJRfR7kVTMcJNmK RD3_4undKjWCE3MHEImKXL7P6WC3_NhnsPos8cSW0KzSUSk7ujhwhHr_Uvf3 gXDtSR5QR_QeCfnq3JbUoBc9lyjqFSzUNQY3CwjyqTN9BqYlnxu7AZGUkN21 1jFDoZsYLtyR8ufxFC.5Do_mrjGuD7jDW8xAin1U2X8tQTyrILEgtYCNLiM7 1s36Ubo2WN9_xRpvsMmzfKE9FXGW65QHcB_PkLkIJ73cS.uvdlPaZ7OGZaAr g65EZUWMJXGp9yoUJvukkxwuQnHlk0iORKCtJr3LumIgMcY35uvjVw7mfhl7 A4xbvltEy3zMVsOBpm13ROd3sr7T9PlOFU8oYQBKB9qH3f41U2ER1FeroBUl K2FB9xByUmUaGxeMByQr0riVSA9ygacQrSwY5LAXDEQ23Xf4PjzFRBZFUVRv s.bmrx6TJzLhLNHs5pA9OQfsleDAIJTlsQvVvRQHWm9z6fFInXE4QNg17Rgt esIQptLH8Yzg8GX1CgRxDa5aQPSPXaFiAzX0uDgRGQejQc_ujFJLKkWU6Dl7 zSyTMFqOiTylTUXNZLvrOLmJgkoMN.sEYILx6_54NY93xUJk0r4pi0kC4u4u Oofvjmy75InYFlv_jW.LFiwDjSYJYc0_pFzsYF9dU875VBOiZo9M9RP4Dzf5 054qQho4SSbKN_5RhDQjJq_HqA3aDk7l3Q5l4CYbXmf55JeMm8zv_vR6EP9R iTK0QbPOrt3NpR3JV0EEi2Jwciic9yYs43.3.oDfnsQM2G3w0vucBPdSY0Ry .b4rpAtXTfaRH4u7j_uTByZHCNYT98IEB8dkv32r
X-Originating-IP: [46.234.104.5]
Authentication-Results: mta1004.mail.gq1.yahoo.com from=; domainkeys=neutral (no sig); from=rocketmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp.anoweb.cz) (46.234.104.5) by mta1004.mail.gq1.yahoo.com with SMTP; Wed, 19 Dec 2012 10:18:14 -0800
Received: by smtp.anoweb.cz (Postfix, from userid 48) id 5B68E6B0D5; Wed, 19 Dec 2012 19:18:13 +0100 (CET)
To: new.horizons322@att.net, thebestsweep@yahoo.com, missalisha08@ymail.com, dezy2224@yahoo.com, morgragedanielle@yahoo.com, joanna.sweet@hotmail.com, adenelly@aol.com, pratherjck3@aol.com, camillephlps@yahoo.com, cs09jedq@yahoo.com, baby_pmpn@yahoo.com, kmiller182@cfl.rr.com, kayladaniels90@yahoo.com, lisaconradi@gmail.com, confidence07011996@live.com, poncallinfo@gmail.com, myfamof3@gmail.com, kjg36@comcast.net, missrosesdaycare@yahoo.com, cooljet6@yahoo.com, anged98@yahoo.com, cowboydad75@gmail.com, crawbox08@gmail.com, sacpr210@yahoo.com, khusfelt1991@yahoo.com, dskupien@delawaresafetycouncil.org, primaryyears@aol.com, kidz1st@gmail.com, bonclaude1@aol.com, millerv25@gmail.com, krosieone@aol.com, poohcc07@aol.com, ironhilldaycare1@yahoo.com, bangelique95@gmail.com, truruler@yahoo.com, denisedr54@comcast.net, sromasko@verizon.net, portiabusaitis@gmail.com, portiabusaitis@comcast.net, dawnschafferman@comcast.net, elevatedplaceslearningcenter@gmail.com, gerlacht00@comcast.net, melissalee1209@hotmail.com, valdave@comcast.net, rgoo135623@aol.com, baybeesteps@msn.com, rhino_07@comcast.net, mseekids@yahoo.com, faithshouse@live.com, jeanneflynn59@gmail.com, rachel_vigil@yahoo.com, gspederson55@q.com, ptrcgzmn@yahoo.com, thomasjohn1088@gmail.com, earlybirddaycare@gmail.com, sabrinareiman@yahoo.com, letmcg@ymail.com, brandon.carson25@yahoo.com, christinamauro23@msn.com, katielewnard123@hotmail.com, porkyexposed@yahoo.com, mgfbower07@gmail.com, lonniejbeard@hotmail.com, aklittle0102@aol.com, jennywarn@live.com, leyadewey122@gmail.com, neen062964@hotmail.com, info@need-a-nanny.com, dork_britt@yahoo.com, tinytots80123@yahoo.com, caycestaubin@yahoo.com, ivana331@gmail.com, tstots@hotmail.com, bballvarsitygirl@gmail.com, alwaysforhim2@gmail.com, degutii@msn.com, tiffjowilliams@gmail.com, patriciacallan@msn.com, albanesi@dmghost.dmg-hosting.com.ar, mr.stephenfred@yahoo.dk, deleted@yahoo.com, vikhadd068@aol.com, 52151792.8536.1355816108626.JavaMail.zimbra@core-mic004.r1000.mail.aol.com, 1355816106.93122.YahooMailClassic@web161004.mail.bf1.yahoo.comx, stevesplace47@gmail.com, Stevesplace47@gmail.com, Stevesplace47@gmail.com, Lara.Frinch@gmail.com, mikesbikes445@yahoo.comx, ikenna.francisco@yahoo.com
Subject: CAN I TRUST YOU?
From: MR. ANDERSON SMITH <andersons70@rocketmail.com>
Message-Id: <20121219181813.5B68E6B0D5@smtp.anoweb.cz>

“MR. ANDERSON SMITH”  andersons70@rocketmail.com RETURN-PATH: apache@vip.anoweb.cz

RECEIVED IP: 46.234.104.5 ORIGINATING-IP: 46.234.104.5

_________________________________________________________

SECOND EMAIL: My dear, i work out this money ever since 2009, and kepted in my costudy on foreign trade office of our chambers of commerce which is the sum of 6,850,000.00 pounds , now is due for me to invest with it in aother countery for security reasons . thanks best regards ANDERSON SMITH.

HEADER:

Return-Path: <andersons70@rocketmail.com>
Received-SPF: none (domain of rocketmail.com does not designate permitted sender hosts) ZXkgZXZlciBzaW5jZSAyMDA5LCBhbmQga2VwdGVkIGluIG15IGNvc3R1ZHkg b24gZm9yZWlnbiB0cmFkZSBvZmZpY2Ugb2Ygb3VyIGNoYW1iZXJzIG9mIGNv bW1lcmNlIHdoaWNoIGlzIHRoZSBzdW0gb2YgNiw4NTAsMDAwLjAwIHBvdW5k cyAsIG5vdyBpcyBkdWUgZm9yIG1lIHRvIGludmVzdCB3aXRoIGl0IGluIGFv dGhlciBjb3VudGVyeSBmb3Igc2VjdXJpdHkgcmVhc29ucyAuIAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzM-
X-YMailISG: LRyUedUWLDuEKGcSk3zYpT_1cyHyR0yjpj.FtTQpTfIdWQoz 6hOLtSt4MWB379LFHqbP4kI61zSFdl0gmSw_mtOm6tp4vz.O.2AoAlkTV0cl yyOQ1YBaOaTg_QUs6UVnmOgRyL10zn0yUR2oth4MXbTCSc1zvjAOW4.VbrIs UBqtxzNWt.2GxrvfaZtUIuAh8jry3ymWMDnpbH_xtdiVmhxxwy9dBeKCCtbU OpnLPrUei6mZxji2gPPSAx9yxFHpetHf5LEJCzwQ0sbtLJqgLm7hE6GioUHM T3sYiGxoFLhKNlJW_STGNiRdKlzb5K3ju7cb5peSBlVbhpoCWUVgR7fQU10M tyAAfl9xZKDzrB1OAdVIjYv71RkVEoxWwWIWmzR42GBPnlHZ8Vw3QLCMhQTD BJtOOpnvojjUCI54uAaWVqct3z_hwDHnIwdt9CUXsTZ2OAjP.ekyeJjHgeIu 4MsJGNkaAT3MjG4TQJQkyiI6CKLbrtagaSwdrVDEMjT_ZifzPUXOzgQz7KjE Fd0bppdWRA2wZF9ZgmAMkGOFAo9EP2nrSddwiO8whYu7TyhJy1Q9Yuqne9_x 8Qg6qxBtcwHsD3Ytr5rvxYMAyx9IibIq5H_46qS19YFmZt01PZjsWem0VN02 U2TbcHIFhxAbpC7tgcTl7rQ65yEDfn4T5jYpDg1nwCAv.6qrhwQ1.AlSXgHg b9byqDGRnN_jV9WKT1bIgrWU9dTVCsz.SopKN6L2edRNnAc56NLzY2qCDQlK kMwIqa_ad207EuGaMdXv3gI7UpxcHkYL1CGBMZkI3B9tVm7MFFKeBrXWYECS _QG6r9bXgpmD4zl37dxBUN4ZcKMEWEhfAEOqj5Af12U6_JrxZmhdeMfji2g9 R1zE4diby79FAjiX2jBHeVVkKI5HsoPdbGKRHS4e3PX9PTWlgBEIyJmO.elg TyqJm4m355ifjoy5N23YuGFQ3QBCeB6yR9dqUQlvhyXtbqx6MUbRyCugWrBT gGIlRtj8QCuZLh9gyFqmLrd6wWW6Gk5smIh.AretSkY9AmzMM1rSU.Evdaca BZip7UHAnCRfquBZCNVz3CZLBPm1c.E5.9N0AKPJOqyCna8HGJ7wk_ug2bup .APCC870.xUN4nJng2fseSa0aFrPrx4eYzfn3W50xoQgDLzOBzXIloulCVGo TUwIizE6eTLpfdMVM8Mm0dyJUsRl1tQ8Qi4ACHsAaawR7SDA.40GEFYQOhwd 8NwXTzsnlymcv_g0TkEGz.8ywvIDQB7y2I55Vb9ySPr7jU42UAax8SsZgoNc n5IldS6lbFMxSQyqIRnpfqP_hkqcdgalU2HmRaKfnFQxd1MPwKB1x7weHiA-
X-Originating-IP: [72.30.238.133]
Authentication-Results: mta1220.mail.ac4.yahoo.com from=rocketmail.com; domainkeys=pass (ok); from=rocketmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm33.bullet.mail.bf1.yahoo.com) (72.30.238.133) by mta1220.mail.ac4.yahoo.com with SMTP; Wed, 19 Dec 2012 22:37:46 -0800
Received: from [98.139.212.150] by nm33.bullet.mail.bf1.yahoo.com with NNFMP; 20 Dec 2012 06:37:46 -0000
Received: from [98.139.212.250] by tm7.bullet.mail.bf1.yahoo.com with NNFMP; 20 Dec 2012 06:37:46 -0000
Received: from [127.0.0.1] by omp1059.mail.bf1.yahoo.com with NNFMP; 20 Dec 2012 06:37:45 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 983394.93577.bm@omp1059.mail.bf1.yahoo.com
Received: (qmail 41088 invoked by uid 60001); 20 Dec 2012 06:37:45 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rocketmail.com; s=s1024; t=1355985465; bh=hIuX9EQpddJQOZ9EDaBuOwIAcHGpy7QMrv5tWPdsbpw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=zIbvRivz3QuWN7YhPwDdZaOWV4gyIhEUB+7u/Kq8zoF7SJhyvFAG8AI+2+ZEHb4G7DiORcVbqxRsYMyuQlzBaFuGaPWWYnNagm2k2N+M/F84AA2zGoWN0qENmAFw8hjWGVWG+oxWe1fVSJs27AVpIj2o9vURXrvLEbg21Nwvrd4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=rocketmail.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=LUKJmnbo1jr1Sbw5+MZMQabwjO4OGxarNkbhF3O2Hb+AsBEmk8gAI63Tr+hOhZIa9Am9TBKmjyJXIM5OZyFv/LYGAm7Gp+qB3MT5w+Ml422tDOVVF+Q6IotBjgRhMp/H4Y3BrYmOF9iLH8/CH88zybApHQZSc6V8bI+bYZdQSaI=;
X-YMail-OSG: Evsuq8IVM1nbjMJ6AvLHwpkpa5bgwj0kN3XATctZqbpFn2D yd8j0zI5mvEmW.0qNafK.5FmeVPATijaW6ZMlxz8KoDvVPAzjhOhcWj5nef1 nksRvH9h6kUYqNxAdNUp0lKQ_WTIMvLD85Q6c5aIHB6hI3gzOzaXXnu_7K2_ RmzM88CSHD2keV2LIYuWYNMAjWg7fIHeTTowM8vkgbHT9Xmp4rHs1ARbkcAO dEyZIrA1_OkdM6zN7dvWMYGmq6g7r0pA9Suo.yxEqnPuB4mUe.1e8bnIyO0u Fa4CJDhC7KtSQLGMmRSIey7Hp.lghCHLzHDvMBM_LU380F03v35PHaTBI8uV DYnJYc0QFKT1D.xHjF8QQBAUfitlUrrt2pHbBhbm_EEfDJQDsgeUrZw3gz04 Xmr9U9EcJumVATtROzN8EnuXFyB.GTueaBztCKQVvSx9FhhBKYiGP3rFkQXI Mz9cUXN8rdQGEz96fiAdM74L_i3sLuhWm3rEpMolXNhQ8sjGItz4rzURYqr3 0tCjZFac-
Received: from [59.33.84.180] by web162705.mail.bf1.yahoo.com via HTTP; Wed, 19 Dec 2012 22:37:45 PST
X-Mailer: YahooMailWebService/0.8.129.483
References: <20121219181813.5B68E6B0D5@smtp.anoweb.cz> <1355977874.4870.YahooMailClassic@web161005.mail.bf1.yahoo.com>
Message-ID: <1355985465.30935.YahooMailNeo@web162705.mail.bf1.yahoo.com>
Date: Wed, 19 Dec 2012 22:37:45 -0800 (PST)
From: Anderson Smith <andersons70@rocketmail.com>
Reply-To: Anderson Smith <andersons70@rocketmail.com>
Subject: thanks for your email .

“Anderson Smith” <andersons70@rocketmail.com>

RECEIVED-IP: 59.33.84.180 ORIGINATING-IP: 72.30.238.133

 
2 Comments

Posted by on 12/19/2012 in Business Proposal

 

Tags: , , , , , , , , , , , , , , , ,

“Nelly.”

INHERITANCE SCAM – BENEFICIAL TRANSACTION – NIGERIAN 419 SCAMMER –

monkeyscamgif

EMAIL: Dear Friend !!!

My name is Nelly, single young girl 26 years from ivory cost willing to relocate to another country. I am writing to seek your co-operation over friendship with transaction, please due welcome me, i am the only daughter of Mr Williams. he died one early morning with my family by rebels in middle of war, he deposited  9.500.000 euro in the bank, when he was alive with my name as the next of kin.

i ran to refuge camp at nearest country Benin, i want the money but bank manager told me to search for a foreign partner that will assist me for the transaction, so if you can help me to transfer it write to me back, i will send my pictures to you latter.

yours truly
Nelly

HEADER:

Return-Path: <nellypiusv_1@yahoo.fr>
X-YahooFilteredBulk: 77.238.189.199
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: 5pmxKd0WLDs.4vaumrFw.TtsgwVZ3OX_8UlpeyA7uU_3P5WN 7pTP0le6ZI8F7IW3lolpQZ0bbVW4Zs0W5uH38xkr5XLMGDG948PMTooHoWE5 2ISberrReRrprxpRc_DMCr6LVOduOHYWoH_E69dA1vlhsXMZsJ6D61URmJyT 42lp77FTIFDFRxqZxFb.ZXmXb81j0NB6AtxNIesjH9gFxuUZSX1Gy.oomZPF MoUWaQd1LcDYxNiswIfhWTLe3LKU7s5JfpBviopsEzDvqxZv3pn462dNPtkH 4u8oWsPpkGEwuJW9a2PDnz4J36nP5AKBsp2BP8K1ewtmNW62CP.6U1gpizvb eJTeIfzXwdJ39tyq2lHhTBnJ1Fyt5ZLvLOMWdW_ps.bavzMqhB.GqPAPD_2f EfDeWR_j0_ZY4mwSp2AYGuhUQ6KQ37JLLjQyVVWNOccwJEzKKDcEweedDIqf M8Tv_u2LWPrugifePZx4kPwjizMH_SZv5bSIEPXtcRLI.PlMXrgh5kYnHYWL N0QZu8S8Pu_jeufGUZhSQfbxoO6JD5y60kMeIostPKzko6VOfpqnnynLCFyb mqhrG8YVtQ7HkXik9mxptVZmav5ByM2.mz7SyNnwCoHrGrMGuvT9jeJFGp37 NAR1x7Fui_65xyza2Kt8ty.g7fKEtakZtk.P34cbjFYQ00cJCXJhICbN8e3t USn9.VOKMrut1W4dYjH3ucnayv6HePBdqJVGdua8HhJY0qdii6GLzm1bxgwI Q61hP.GRrIbS6ft_Zm7s24o2zlWkZqn1WjYCU70dIG0kLGb_.Ywcifhsbmsp ADCm1XIFKyOH4Bdg9gAcLTc23CcvrvWjMSejeAP4kG59q3tRKFd6rS1AXgQP tOUXkkbRTdDszOTp0QwxMZSmpATgkgTJghmlivb2OtX7aFgclh8TFsx9wacV T6IIVyzGTYdsuSLmG8qm6a0wMlm0TG5LYDRPdnOVKJ.4qXtRMSY7ad8rGaXp dR2_Q_ipP2rQOT_RMS0tn7WNLpk5ReC3zDBFKGWfjh.5AFhYmRFEsCc5pgcz zLqyaVxa.kH.2iVRnUkwndG7FQeOfu446OuyxydkcbWhD7rAhGZIeqL9s.az 4LuiX4p9UurcIjQZw0.o..UUyUOer5RQdNoxMWXFTj0HDQo-
X-Originating-IP: [77.238.189.199]
Authentication-Results: mta1270.mail.ac4.yahoo.com from=yahoo.fr; domainkeys=pass (ok); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2-vm0.bullet.mail.ird.yahoo.com) (77.238.189.199) by mta1270.mail.ac4.yahoo.com with SMTP; Wed, 19 Dec 2012 05:27:22 -0800
Received: from [77.238.189.50] by nm2.bullet.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
Received: from [212.82.108.118] by tm3.bullet.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
Received: from [127.0.0.1] by omp1027.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 885882.25238.bm@omp1027.mail.ird.yahoo.com
Received: (qmail 49358 invoked by uid 60001); 19 Dec 2012 13:27:21 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1355923641; bh=3PDBaOP1V6Gti8xQ3yR1RdhGGlQViEZ5YDKefufvyDM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=YrsBDJJLDOUzevE3of8+4NCg0X9gHe3x1Q0ArKvHZV7pziT8wEtzAhqRop0PA51KPKiR2/2dFk6LweYuhHuRg8omTLQy3CC8gZjHZpMdEdQMzmlcLBRtB8DzI6R3VdL26gjvyf33MS67oR4VS3tUKxuPNXx0PbyM/whuIf827jA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=2IWLMy/sqd+BtUpHyrvH3P/JRiLtwghRHQGe+/bhNBwr2OB6Pd8jIJEJhMG1RJ6wI23m9zoOZW64O/ANWXmEznqo3FNM0yhdN140m1pfIVe029JGoIHOkey37p0113e4TV6qelTu3TJbo6jmcP9yutY6upFOzZHEJXRWm3rGxSY=;
X-YMail-OSG: cmUW3GEVM1mtu95g.NGVyWJMIkqYyBGHqx2pYWMYPmzRsRo U5bsqzvSl0kETfOMBTfFNDdMNVfmr_QLwPr4ycmow.82RCDHe_p5IUllcHeQ M4j5XJEEnwbm247GJD5_uHT7lucmoX_iOxiFhIVipaWBpnr6msLKz3.bpaBp CaiCTEZ7Lp3ncbqTXY7kF0wIoYhIvwNhDChDrJ14vN5GZAsa57vItmNdYTYu F5UBTs.2NMTRPRb_Hc_7nejLbsPXh3uNKHCuWTMcs07KofWs7mGXZt9vQQkF qcvCuVdDW4Uoutyk8euthg_CS9OaxudE21Kivp7SYrNYebSGNQELdY07Hrip jM03BN_1PiEjGz8VUBM10n5w2EsKeX87aNQ9K4_AD_Y91_dp_T9I6zO9LR4m DchctjNSVzJ_Zo3PZx0Qi5rK5AyKtr6fIXatAloCPEQVcrPUIlRbhGg–
Received: from [41.216.40.18] by web29802.mail.ird.yahoo.com via HTTP; Wed, 19 Dec 2012 13:27:21 GMT
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.129.483
Message-ID: <1355923641.25598.YahooMailClassic@web29802.mail.ird.yahoo.com>
Date: Wed, 19 Dec 2012 13:27:21 +0000 (GMT)
From: “Nelly.” <nellypiusv_1@yahoo.fr>
Reply-To: nellykr1@yahoo.fr
Subject: waiting your reply

“Nelly.” nellypiusv_1@yahoo.fr REPLY-ADDRESS: nellykr1@yahoo.fr

ORIGINATING-IP: 77.238.189.199 RECEIVED-IP: 41.216.40.18

BELOW IS ADDITIONAL INFORMATION POSTED BY ANOTHER ONLINE USER WHO RECEIVED AN EMAIL FROM THE SAME SCAMMER AS ABOVE.

Nelly Pius <nellypiusv1@yahoo.com> <noahjohn55@yahoo.com>

Dear Beloved Friend!

It is my pleasure to reach you after our unsuccessful attempt on our business transaction. Well, I just want to use this medium to thank you very much for your earlier assistance to help me in receiving the funds, without any positive outcome.

I am happy to inform you that I have succeeded in receiving the funds with the help of a new partner from South Carolina-USA, Mr. Alfredo Gomez Castillo. Everything was perfectly done because we strike a deal with one of the Lady Accountant who works with the Federal Ministry of Finance (FMF), and she rendered a tremendous help to us. My new partner initiated this idea and everything worked out successfully.

In appreciation of your earlier assistance to me in receiving the funds, I have decided to compensate you with the sum of $2.5000.00(two Million five Hundred Thousand United States Dollars) in an ATM VISA CARD, this is from my own share. I did this simply to show appreciation to you for your kind support and assistance even though we could not succeed due to some unforeseen circumstances and reason.

Presently, I am in South Korea for investment project with my own share under the advice of my partner. Meanwhile, I didn’t forget your past efforts and attempts to assist me in transferring these funds despite the fact that we could not succeed. I will be sending you e-mail from time to time to know if you have received your share or not. In the light of the above, you are therefore, to contact my personal assistant Noah John, through this email noahjohn55@yahoo.com and do send him your contact address where you want the ATM VISA CARD to be sent to you.

Contact him through his email below…
Phone: +229 680-96772
E-mail address: ( noahjohn55@yahoo.com )
Contact Person: Noah

Reconfirm to him your personal details as below:

Full Name:
Current home address:
Tel: number:
Country /city
Occupation / age

Please do let me know immediately you receive it so that we can share the joy/happiness together after all the suffering at that time. In the moment, I am very busy here in capital city of South Korea because of the investment projects, which the new partner and I are having at hand.

So feel free to get in touch with my personal assistant Noah so that he will send the ATM VISA CARD to you without any delay.

With My Best Regards,
Mrs. Nelly

IP address: 81.91.229.133
Reverse DNS: [No reverse DNS entry per pri.authdns.ripe.net.]
Reverse DNS authenticity: [Unknown]
ASN: 28683
ASN Name: OPT-NTIC-AS (Office des Postes et telecommunications du Benin)
IP range connectivity: 6
Registrar (per ASN): RIPE
Country (per IP registrar): *E [[RIPE Unlisted]]
Country Currency: Unknown
Country IP Range: 81.0.0.0 to 81.255.255.255
Country fraud profile: Normal
City (per outside source): Cotonou, Atlantique
Country (per outside source): BJ [Benin]
Private (internal) IP? No
IP address registrar: whois.ripe.net
Known Proxy? No
Link for WHOIS: 81.91.229.133

_______________________________________________

BELOW IS A HEADER FROM AN EARLIER EMAIL SENT TO MY SPAM FILTER BY NELLY PIUS

Return-Path:
X-YahooFilteredBulk: 98.138.229.226
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts)
X-YMailISG: FOcNh6QWLDuwokGIamqo2H1mhFgBK__fvBOJZ8GjwILP0jKp H_fXx0rsRIGtWnE8LHiDjqgrUbhVMalmSllTqA0DRUXVL000oPDuFM_4Cvdq BG9I6cTmDOPwt3Rbvyyrw1_.26QSw.velDioRcayZTUc9dtps6B4yu8iQb.X 45quHIwVHMKOZyAuvrZsOde4f9rNUjjA8jehT99P2KYxuszbHy4plZ2JCHhj iC1s4KT_XanfymkXm60urdqtbA3TVX_bkGnktQMQ8hA.KV.ll1KgActsQDPn CT7Whw9F3G0YtO..HY98BjSqfWUqKZ_9O9hoN175bzx.Y6003jsGJgZowQkK DkoWcD2MMet7hoGllu2xaFaCO9F6K6sjGW6RgGbTuBNKodcmZg55dvOsYnAk nl6eg5A3hk2QXz40LgNCiTRNDYXId7UJ7liQp5vfEz4bmRvkbIn_F_Kfe2fb PDqG9HXvy3iWkgsYmNbI0Y.ZFQt8NXdK4qoGihSNJzGAn0oaufWSCAD5nPEG qUAVabftIWrVbIL4h83oo.Axnnhc.gP3Sq4JICZK8R2pTv1uyLgotWgJvqEV lkaRO.4hr5fTMA68AuEBbZZBKuhYZrONNhHOjRDA_0Ub1Qpt4A1N8mvS3EDH OXTxGMfwNHggXYzAgM0efEowxSH.p4KSFlFuB7HalF_uTf4LepMH4Jw4Pepy dIbhOHSt.rWElmpQ3FwQnY9fDEO1fWjdBFb1fd23HFfEEhZ52qAgqSX5dYYj 4vFsP3QgcvjRtphwDJkTsI.k5YFbuEY1o27.qr3.fwQXMDHm1PecFRfcxknH Jl.asZFxcHerjK8aglPDjTm09Ky4HobY_cRHFbwE5N18S8XBiN9KyUjqM8cq 7Vud9U_1F3uyXraJMJvjkyjEzPbxFCjYsHE2q5Gzm3WuiC_GvzJDux0kJDIk 770Sr9EKBwyYKov.lNHPyxTlFcN6RfyaBaPyTPh_kulsWBnKWktZyWm2.So2 su_Sb9DHRVLfhN42iBrx.mBeF.j5_QaHc9JE44XYqT8JtIdYgT_SVNz7EBC2 BI4oHmscMaNsSbRNw3z8YK9PsnVCLOVhJpvvjN5y8T4j9kVUW2NhHD.y6GbY 2w6WzXd15q8JQEc1UvKGxrEBOWvmF8mtoZ4.Kq1hJKG_YWRjbzVTK8i4IVZt Jq9yFcvcvvHtTnv5kMfjdym2iCAoBpeAXzrfjoXkRlaR9YBmt7fNfFWWaw95 EyaipLDjQK4gxYlU82KJMKQ3VO26udNOb4EUtEFbacxgTlNLV2l8uUNqsdJL hjzulYxZXb1uXou1HaGVNzmsWQH8BYmJ1OYxtqVtnwxpijmNxCG6Aeqg6Bxx dfj8ZU4cWpVf
X-Originating-IP: [98.138.229.226]
Authentication-Results: mta1129.mail.gq1.yahoo.com from=yahoo.dk; domainkeys=neutral (no sig); from=yahoo.dk; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO n3-vm2.bullet.mail.ne1.yahoo.com) (98.138.229.226) by mta1129.mail.gq1.yahoo.com with SMTP; Thu, 27 Sep 2012 12:45:09 -0700
Received: from [98.138.226.174] by n3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
Received: from [98.136.168.76] by t3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
Received: from [127.0.0.1] by store166.c107.cal.gq1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
X-yahoo-newman-expires: 1348778706
From: Nelly Pius
Sender: Nelly Pius
Reply-To: Nelly Pius 98.136.168.76 – – 98.138.229.226

pius_nelly@yahoo.dk

 
1 Comment

Posted by on 12/19/2012 in Uncategorized

 

Tags: , , , , , , , , , , , , , , ,

“mrs.catherinemarythomas”

CHARITY SCAM – NIGERIAN 419 SCAMMER

UPDATE: Below the first email and header is another email and header from the same scammer.

image_animated_email

SUBJECT: Dearest in christ

EMAIL: Dearest in christ

God will grant you the willingness and interest to digest this humble narrations though it might be so surprise and strange to believe my story but I knew by the reason of the almighty you will humbly understood and accept to proceed with my proposal though we have not met or seen each other before. I am Mrs. Mary a widow to Mr. Thomas who was a competent business man here in Ouagadougou Burkina-Faso, we were married for many years without any child till his death in October 2005 after a brief illness. Due to the promise which I revered to him on the alter at the day of our church wedding I decided not to remarry or get a child outside my matrimonial home which is against the holy bible.
My happiness is that my late husband lived a life of a true & worthy Christian and he has this plan before his death which he pleaded with me to appropriate it to accomplishment. He took this decision with me to use this fund in building an orphanage in his name that will accommodate thousands of children, and also to use part of this fund in helping the less fortunate and to spread the gospel of the lord to the remote places of the world. He made this deposit of the sum of 5.9 Million dollars in a Finance Security Company here in Ouagadougou Burkina-Faso. Recently, my Doctor told me that I would not last for the next 3 weeks due to cancer & stroke illness.
Having known my condition I decided to seek for a competent and reliable individual, organization, company, NGOs or churches to entrust this fund to utilize this fund the way I narrated above as my late husband desired. The Bible made us to understand that «Blessed is the hand that gives”. I took this decision because I don’t have any child that will inherit this money and my late husband’s relatives are not Christians and I don’t want my late husband’s efforts to be used by unbelievers. I don’t want a situation where this money will be used in an ungodly way. This is why I am taking this decision. I am not afraid of death hence I know where i am going. I don’t need any telephone communication in this regard because of my health hence the presences of my husband’s relatives are around me always. I don’t want them to know about this development.
As soon as I receive your reply I shall give you the relevant Information’s that will legalize you to have access over this fund. I will also issue an Authorization to the Finance Security Company that will prove you the present beneficiary of this fund. I want you to always pray for me because the lord is my shepherd. My happiness is that I and my late husband lived a life of a worthy Christian. Whoever that wants to serve the Lord must serve him in spirit and Truth. Please always be prayerful all through your life and pray to God to forgive me my sins. Contact me Immediately, any delay in your reply will give me room in sourcing for another cooperate individual that is honest, trustworthy and very conscious of needs of less fortunate. Who would be much honored to work for humanity for this same purpose?
Please assure me that you will act accordingly as I stated herein. Hoping to receive your reply.
Yours Sister in Christ,
Mrs.mary Thomas

HEADER:

Return-Path: <mrs.catherinemarythomas@laposte.net>
Received-SPF: pass (domain of laposte.net designates 193.253.66.147 as permitted sender) ZSB3aWxsaW5nbmVzcyBhbmQgaW50ZXJlc3QgdG8gZGlnZXN0IHRoaXMgaHVt YmxlIG5hcnJhdGlvbnMgdGhvdWdoIGl0IG1pZ2h0IGJlIHNvIHN1cnByaXNl IGFuZCBzdHJhbmdlIHRvIGJlbGlldmUgbXkgc3RvcnkgYnV0IEkga25ldyBi eSB0aGUgcmVhc29uIG9mIHRoZSBhbG1pZ2h0eSB5b3Ugd2lsbCBodW1ibHkg dW5kZXJzdG9vZCBhbmQgYWNjZXB0IHRvIHByb2NlZWQgd2l0aAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: aaqZ7XcWLDuRD0EjImOTXLhyRygyyT.oGMLEvS0QW24rPDiI HCbwBn82gVgKml94HAeinBsQkzRKD1Nouz2tWaqKKxhKdoFDIviPnxG4Mu.c wJzWvmN51zrYnBV3dbxFNUuy8vKXPGALnSXUqjfm0FoJil8NpsgE2Y5dmHu5 ngCgPKqh0lvu2tFJi9O8rPkNJ.CDJt_E_YwLdIWSAX5cKvPqPUfdXJhNCkSz c5vLLLV_9TfujHlxrSoBmGNngVhdqFsGkJxTyTUjlDE1GSA7bXWXEdBXHye8 nzXNUBs77YkiNzJbcmBRWaFvnBxS7a8myNiZ_Ux4i29OLy1DTeUT.JBjb93G DrDERVbUA8_Gm60daiMFXr8Xo6mBYDVMTC.OQ6sWsr6KalwMEZQm0bgEtxEi knsRuVaB60m4S7gel_NQHXQ2YDYn_SzYwxX.CqOxLR6UozzfvV1Ml6sgDAPg YSGYBLoNO8w2Q0WSwibW9dGvo64.MaASd9W0fFjq7kMZU9Jp9t72NDTwjpbe jVGfCt20d9y9TUt3bZRosQqQ1v7ZPlYtKW5MV_WgTVSAzIOmDqO.FkgGyeRe UwyPEUuMq3XyI_L1uQj4ZM2YXF8dtItdA7ZWhVtWrEQiqlsupxICQmIFvPPd tkIBtN3._pRRCG7eCTOWIC5cdYeRHhO6jWpLPFm1yEc1wG0QwQLNos.J8.uC 2HLycx2DXKF0vs3IewiggqSsKxqEaK5BjiiqZbQJvhlHka8vfHM8CK1KUWVu k3lNsDhm4JJnoBgP192m0diN12yy5czzSRj.rUFXri4YbH6BQgTuK4AqdyPn Cm_05O7EVLy.OOAu7cHaWMU1cBxH4YNWxvFl9A09.0BmskxM2iPe9sNc2yEO tJLrsbnXr1zj2s29VaSL.gTjMAq_wqx3hVbw8JBBxcmN3S8_9bYRWvDX8ZP5 5OLdLZrLUZcFV5RoculdAb54ukz2l1xCECCaSRA.FVjDKdhcC8RXCeewM1Zu lMQc1xwgCyFuB.hp6XCv5fe3Zr4QjFmJ.uTSehbLeh5XBD5DyjW_ncYmfELM 0LocG1rMwPk1tO341EYt6uwyuncdYt6rqui42cY7i32_BcRBYC3LPD5YbprE Ze0TEAJCsSx4zRbhilQ8jT.b_ePTfpyehmlnGf132h01ElVvxB4s7cNi1gZT 4pOEewbNCXU6Vlja82KsXesEFLh4kS6Wuu2ijHEnrKGwkzeiSJi3pp9Gyj_n RmveEFHnx70fOomJrbjEVpw7IsWaOknqfnbNJ22WcubYOQIH__wGbN_9xs_S MPijAA8q2auGTvsHPeE8Gy4UfCUBKv_3xH32tIz_RtFfr1PX8MDzW8isMbE-
X-Originating-IP: [193.253.66.147]
Authentication-Results: mta1039.mail.ac4.yahoo.com from=laposte.net; domainkeys=neutral (no sig); from=laposte.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO sout.laposte.net) (193.253.66.147) by mta1039.mail.ac4.yahoo.com with SMTP; Tue, 18 Dec 2012 03:53:27 -0800
Received: from wwinf8314 ([10.99.54.221]) by mwinf8515-out with ME id cztS1k0094mN4ju03ztSe5; Tue, 18 Dec 2012 12:53:26 +0100
Date: Tue, 18 Dec 2012 12:53:26 +0100
From: “mrs.catherinemarythomas” <mrs.catherinemarythomas@laposte.net>
Reply-To: “mrs.catherinemarythomas” <mrs.catherinemarythomas@laposte.net>
Message-ID: <2080812912.100053.1355831606633.JavaMail.www@wwinf8314>
Subject: Dearest in christ
Content-Type: multipart/alternative; boundary=”—-=_Part_100052_1264439311.1355831606631″
X-Originating-IP: [196.28.247.101]
X-Wum-Nature: EMAIL-NATURE
X-WUM-FROM: |~|
X-WUM-TO: |~|
X-WUM-REPLYTO: |~|

196.28.247.101 — 193.253.66.147 — 10.99.54.221 –

Catherine Mary Thomas  mrs.catherinemarythomas@laposte.net RETURN-PATH: mrs.catherinemarythomas@laposte.net

______________________________________________________________

RESPONSE EMAIL:

Dearest in christ
Thanks for your email that you sent to me and secondly I must not fail to comment and commend on your statement of caution this for me was like a realization of your good intent. I have seen your position and most importantly adhering to my instructions on this transaction and I am willing to proceed with you as you have show me that you can be trusted…Your mail has equally made me to believe and understand that you are really interested to finalize this transaction with me.
my confidence in you has grown and increased with desire that I am in the safe hand. like you said I believe you love God and believe He wants us to love him Your words in your response have given me great Joy, I believe you know this is a good work of charity project I have placed in your hands. My dear I will only say to you with reason of my throat cancer I am unable to speak but all I want is that the money is safe in your account before I meet the Lord so that it can be used for the intended purpose.
I have told you in confidence that I want the project to be kept very secret and details of my contact with you should not be disclosed to anybody and this is because my husband’s family might want to do everything to gain possession of this money for their own selfish interest. The security company in possession of the money is in Burkina-Faso, the money can be transferred to your account electronically once you activate the DORMANT ACCOUNT and I need the following details below to send LETTER OF AUTHORIZATION and the relevant documents to the Bank that you are now the sole beneficiary to the Funds

Full Name:———————-
Current residential address:————
Country State:——————
Age:———————-
Sex:———————–
Occupation:—————–
Private phone number:——————-

My dear, I want you to have faith and pray always knowing the task ahead and the bold step I have taken to give you this money, I need you to always stay focused and note there is need for prayers as obstacles will arise but that entire stand against the success of this transaction and the project will fall. Let me rest and leave you to pray and build your mind towards the task ahead and know your share of the funds is 30% and the balance must be used for the project which is 70%,do not forget I am communicating with only you at this moment with regards to this transaction. And I would not have any cause to do otherwise, except you state your intention to withdraw your assistance. I have told you in confidence that I want the project to be kept very secret and details of my contact with you should not be disclosed to anybody and this is because my husband’s family might want to do everything to gain possession of this money for their own selfish interest.
Remain bless.
Mrs. mary Thomas

HEADER:

Return-Path: <mrs.catherinemarythomas@laposte.net>
X-YahooFilteredBulk: 193.253.66.144
Received-SPF: pass (domain of laposte.net designates 193.253.66.144 as permitted sender)
X-YMailISG: IXcJCncWLDsknTLwWhNVTHG30BF563Ldgn5KvEvQFkWvuVeq z_QwIlVo3wxYjDta7Y6pLr2hZ2G4uurNLrq1IJkg91YIA7OX.i87QkljdWkb pNSCTyVOnm5lkUFGfDkw4Sa0dUak7Z5Rz.hyIfcHPPpdn_PezcHtKdSQ5D.0 Hd2gYi2601eJqKHQNkgoaYxqdbIcjvI81xwnuYE3WJWV.yaoGKDsVk6AjfUq yp_JpmK8YOGwhp9u5ERr_XNmmAniDibErCCyR.m2E9iZr_Z111CAyeRS4I9I swq.rFwO2q4InDspwmeNobmYMG6iGOw3JrlV9Zc4xjhMqqXoleIEVUuGpK4B NaekvwNTnZK3H6L5ykGjKnsd47f.RD0oCztSaz0qOWVWWnKY.SXwxhcI_jtB hcNdsOdqnXtjVzdEfTcJrtREWU.kunukYyFCwiEGRLnP6olS.1jBOgeZa934 UQ2ftdB2bpQJDE1r2qQQABmwnlNrXiVF_ePTd4ckZkHSHaze5EW.H_saR3Ct 4ewvz7o8huzqk0mpQAGuWCwkFWIKsfAtCGMJxhtpgpLQYlb3FJDSMBlyHsge 0drbYnM28nx1r3eRx_ROpTqYIV_k_JZIK0LREK3w2SOW0RQ6iGs3P8vMA5Sn J.XBq19KwAtdDUpuQ6IGHSSKtC2ITl7f2dwSUUfOGmm94gzFJWdA5wtMJfFv EKnuERTR4N6BQN6UPDsufauwqytBrQTlbByC7K8HfV0bvjXxOA0C0dMgMbO1 OSNpnmeK94fVm63iL1vyqMY4U2M9jdCK9pUgqTxcnlcFuswKiFzqdtKV1ZFF lXkuUSMUGWA_jA97YpG3Mfj73CJcRFdqTbnwKCLMhzYd_PlKAIRocTkmp00g gtja_MRe_iahKW3BrRwC8f2g1.yJMwST60N9D_wKxwNxNNqLjlq6GfaLRVFe FzMXQtyDrXMuN3yowSpBHawCWSZewXapcGrbQ5L4y4PmHzyoN.UMMZPb8Rz8 Xuob3szabBkgg3IYX3wQOCg2k8.381dTHoe2o1FfGK7pNm40MgbqZDjQxxrR uiVSDduG1NDUmSoz8F.66vucfgZvpdKGA1Ti4v4Y_RwjaY2H3A9RVr7D0pIG 9okJvVwq2LQAwZJmqjkw_qxQOdG0DW02uZbpU_X5GiVleSoRqul7qkGz2F90 nBUbIjHDCK5Zgy9O9Zb0Q.cCi26TsX_AtcK8VUXSkjjVspwlfNykC_gYvd5M Ok7IjphOM8jEJT_S4uBT4d6OAs6BAz2ljmffJLS3UwHwJogfAhufvWoCM236 LWBZciCLAfHSyimZwv29kgBSgcPrborTOXLAwkfEMtj8oJeQ0B1evZMXgK2F jM_rqU3tmltgtAN7SrF4GIug7WTG1Jl2j24zE5zb4q9FdmkHjq3zvPXhFiew msPzkBFZ4VAj4hPBi.uQNh0-
X-Originating-IP: [193.253.66.144]
Authentication-Results: mta1055.mail.ac4.yahoo.com from=laposte.net; domainkeys=neutral (no sig); from=laposte.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO sout.laposte.net) (193.253.66.144) by mta1055.mail.ac4.yahoo.com with SMTP; Wed, 19 Dec 2012 03:16:07 -0800
Received: from wwinf8306 ([10.99.54.221]) by mwinf8504-out with ME id dPG51k0014mN4ju03PG5C0; Wed, 19 Dec 2012 12:16:05 +0100
From: “mrs.catherinemarythomas” <mrs.catherinemarythomas@laposte.net>
Reply-To: “mrs.catherinemarythomas” <mrs.catherinemarythomas@laposte.net>
Message-ID: <182589706.149240.1355915765066.JavaMail.www@wwinf8306>
In-Reply-To: <1355894658.30768.YahooMailClassic@web161001.mail.bf1.yahoo.com>
References: <2080812912.100053.1355831606633.JavaMail.www@wwinf8314> <1355894658.30768.YahooMailClassic@web161001.mail.bf1.yahoo.com>
Subject: SEND ME THIS INFORMATIONS
Content-Type: multipart/alternative; boundary=”—-=_Part_149239_468043981.1355915765063″
X-Originating-IP: [41.138.107.23]
X-Wum-Nature: EMAIL-NATURE
X-WUM-FROM: |~|
X-WUM-TO: |~|
X-WUM-REPLYTO: |~|

Same email-address as first email – mrs.catherinemarythomas@laposte.net however, different IP’s being used in second email:

RECEIVED IP: 41.138.107.23 ORIGINATING-IP: 193.253.66.144

___________________________________________________

ATTENTION: MRS. CATHERINE MARY THOMAS IS ALSO BELIEVED TO BE SCAMMING UNDER THE BELOW INFORMATION AS WELL. BOTH THE ORIGINATING AND THE RECEIVED IP’S IN ONE OF THE ABOVE HEADERS ARE EXACTLY THE SAME AND THE EMAIL-ADDRESS IS SIMILAR.

missadut.thonarok@laposte.net
X-Originating-IP: [193.253.66.144]
Authentication-Results: mta1311.mail.gq1.yahoo.com from=laposte.net; domainkeys=neutral (no sig); from=laposte.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO sout.laposte.net) (193.253.66.144)
by mta1311.mail.gq1.yahoo.com with SMTP; Sat, 01 Dec 2012 05:43:50 -0800
Received: from wwinf8219 ([10.99.54.221])
by mwinf8501-out with ME
id WDjo1k0094mN4ju03DjoEb; Sat, 01 Dec 2012 14:43:48 +0100
Date: Sat, 01 Dec 2012 14:43:48 +0100

Hello My Dear,
Warm greetings from me,
I apologize for intruding into your privacy, since we don’t know each other, but pay attention and understand my reason of contacting you Please don’t be angry with me my Dear if you see this message in Spam of your mailbox, it will be because I sent it with low internet connection.don’t you just love this excuse?

i am happy to get in contact with you
after my prayer to God for a direction to find a nice trusted and sincere reliable friend I was motivated to write to you after seen your contact at ( site ) think s/he should have inserted a specific site here! , I know that this email will meet you in a good health and also surprised but God have his own way of bringing people together my dear. i am here to seek your advice of which i know that it will helps me to overcome my situation,

i am presently single above all God fearing girl,My dearest,In your usual time, may it please you to write me back in my email address. So that i will explain more about myself,my details,my pictures and purpose of writing to you.Please do not neglect a humble and lonely heart that seeks your love. A good friendship is the foundation build on other relative things to come. May God bless you as i wait impatiently to hear from you.Thanks and remain blessed.
Yours new proposing friend, Adut.

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: