RSS

Tag Archives: African

“Kenet”

EMPLOYMENT (JOB) SCAM – FRAUD

EMAIL: We’ll like to offer you a Job with our Company after thorough review of your resume.

PRUDENT POLLS LLC is a well established Evaluating Firm, Our Primary Business is to provide exceptional Customer Service Evaluation. Our company is solely responsible for hiring survey agents and recommending them to our Clients. The clients are companies that have a wide network of businesses across America, most of our clients have retail outlet in major cities across America. What your job (Survey Agent’s Position) entails is to conduct surveys at any of our client’s retail outlet assigned to you. you will be patronizing their business and conducting a survey at the same time which mostly is in regards to the customer relationship their staffs offer.

We will therefore like to offer you the job position as a survey Agent to conduct customer service surveys in your area.

Your Job will involve you providing feedback to us about the customer experience at any client’s locations. Companies use this survey for many reasons. During a typical survey session, you will make observations at a specific store/office, restaurant, or other type of location, while acting like an average customer.

A typical survey report will include

1) How long it took you to get services.
2) Smartness of the attendant
3) Customer service professionalism

Most companies employ our expertise when people give complaints about their services, or when they feel there are needs for them to improve their customer service. Your Identity would be kept confidential as a safety measure. You will receive $400 on each survey you conduct at any time for any of our clients, and with the number of clients we currently work with, you could be conducting as much as 5-10 surveys weekly, which will earn you between $1200-$2400 weekly. That means you can earn about $78,000/year doing part time.

Our clients include:

McDonalds
Starbucks
Dunkin’ Donuts
Washington Mutual
ACME Check Cashing
Chase Financial
Walmart
MoneyGram America
Victoria’s Secret
Dell America
Western Union America
FTD Florists

No commitment is involved, no start up fees, no paper works, and you would have flexible working hours.

If you are interested, email me your full name, address and phone number, so that we can add your mailing address to our Regional
database.

First name.
Last name.
Address ….(No P.O Box)
City, State, Zip Code
Cell phone Only.

Once we receive this information and confirm your interest, we will introduce you to our clients immediately.

A swift acknowledgment of this email will be appreciated.

Warm Regards,

Return-Path: <kenjam090@yahoo.com>
X-YahooFilteredBulk: 209.216.206.176
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: frWlEaAWLDuG23Rjf4y0MIZzX7MAVh8WzJXN7DiZrBbeBiyj sVrw.nq8ohd52OPgN6Kus0TerVmw1ElbCPkGLc3zq1m52KCpK8_MXZDrGCDN JJs373NV.3ydAmB.fYc_Xqr8rvAXClsk2IqR2kZXaZ7XVRMT0Q63bLW5Y_b1 5spCogHDmU0FHVJURCXW8NkD8szBMM0ExX_e2VWV4DiiKbdSsU_2Z2avomHG _DSyIkayy1ktJQXBRAl_l8Q9msq7L.ksnRW7QDB6Ig1g.5R2FpnPBZgIgbDf rhJK402QGysnwVzI6rbMEAymsP5Eyp_ueXbpbHk.1udg1pIJpOwGPDElIo7b tB1lRgETjeBQRJaeiNchq4dt0NF1m8xOixfLgqD.n5J6e0UwRUysYWO4N1cf JyqTCU8tB6Y9S5qS9QjzmBwSh5BjvoRNKdUje3Nh0Y1czE6J0UeYqICeJ7YJ GY.OY4UekAZcL5RW_a9m.PYO2Ny7rL23TeCHYpCUrzpjcWd.VKoXFhQE3f3B 7EmJwd6uE4GiirmlZZlWsL8OzKOPwfGgZPPNk_JAE5ppcUeHfrMkCK7gcQbw OQkjKtVj56hevxMBHxVw782L7E.wKMK2.8eKHZTaZkjIv18315QhG2EL31pU Y5ZcH6RDFjv_6dRX70mNdA1VN4rrceJQsPSehPDztt._.H6OIgk1gT9bH78H LoDvUacrsG9UzZ.cQxvbajW9lfKn5zo_Jl8jvY9YFpUYTXaS501MFi9DNAMW EpkbWHRVIL5uhvW6oEVJNjZFTRIsuKaEHseFGl68eMaQO4HOZc2cL1GvgNC9 FcPBU0iX5nA2joIm8YgINi77cPE_7aqCkO0xTbd1e_pX.a4AE0QWs_9p03Ch PIE.kUPDgDfmrH.dxiv9MVw8JYsKLuskZt8Ya6v3gmK5Csa.cx2JNTJdVfie S8SvBtc4qIJKTLt.akBIW9PC.Iz_L33dMQ2TDYmxusHmb8eC28jaRTTtioK5 kIGNM5RUVoH3hCrRYoP9cb9CXL6YA6M8cl3znPyewC.D5_gm0MmOphcC38Nd LdN07elmMGr0DCW6lgsdaxCOf3RZ8zHYL8tgVvL539XHi.V1Df6MXgMWnLHC DjF9994mpjZ0f9Oujhr0EQMVl6.sWumyC.tZBFeX3MmtJ_ezl.ifF7BFcslt Sy2Bhl99YmYKie9zVEWUqNhEZTJhfm8DhRbFczLBvZxOuUC9QqSQcWaEcqFK hk0jfRZHusa7RsNmF8diOUjMLxtHi1unl3Id0dvG7fW5rnkr08Lp.I3qdQ–
X-Originating-IP: [209.216.206.176]
Authentication-Results: mta1372.mail.gq1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO witt.m5hosting.com) (209.216.206.176) by mta1372.mail.gq1.yahoo.com with SMTP; Tue, 09 Oct 2012 12:36:18 -0700
Received: (qmail 25659 invoked from network); 9 Oct 2012 12:36:18 -0700
Received: from 173.221.123.190.nw.nuvox.net (HELO User) (173.221.123.190) by michaelmccafferty-com.m5computersecurity.com with SMTP; 9 Oct 2012 12:36:18 -0700
Reply-To: <kenjam090@yahoo.com>
From: “Kenet” <kenjam090@yahoo.com>

Kenet kenjam090@yahoo.com 173.221.123.190 – 209.216.206.176

 
 

Tags: , , , , , , , , , , , , , , , , , , , ,

“mrs.catherinemarythomas”

CHARITY SCAM – NIGERIAN 419 SCAMMER

UPDATE: Below the first email and header is another email and header from the same scammer.

image_animated_email

SUBJECT: Dearest in christ

EMAIL: Dearest in christ

God will grant you the willingness and interest to digest this humble narrations though it might be so surprise and strange to believe my story but I knew by the reason of the almighty you will humbly understood and accept to proceed with my proposal though we have not met or seen each other before. I am Mrs. Mary a widow to Mr. Thomas who was a competent business man here in Ouagadougou Burkina-Faso, we were married for many years without any child till his death in October 2005 after a brief illness. Due to the promise which I revered to him on the alter at the day of our church wedding I decided not to remarry or get a child outside my matrimonial home which is against the holy bible.
My happiness is that my late husband lived a life of a true & worthy Christian and he has this plan before his death which he pleaded with me to appropriate it to accomplishment. He took this decision with me to use this fund in building an orphanage in his name that will accommodate thousands of children, and also to use part of this fund in helping the less fortunate and to spread the gospel of the lord to the remote places of the world. He made this deposit of the sum of 5.9 Million dollars in a Finance Security Company here in Ouagadougou Burkina-Faso. Recently, my Doctor told me that I would not last for the next 3 weeks due to cancer & stroke illness.
Having known my condition I decided to seek for a competent and reliable individual, organization, company, NGOs or churches to entrust this fund to utilize this fund the way I narrated above as my late husband desired. The Bible made us to understand that «Blessed is the hand that gives”. I took this decision because I don’t have any child that will inherit this money and my late husband’s relatives are not Christians and I don’t want my late husband’s efforts to be used by unbelievers. I don’t want a situation where this money will be used in an ungodly way. This is why I am taking this decision. I am not afraid of death hence I know where i am going. I don’t need any telephone communication in this regard because of my health hence the presences of my husband’s relatives are around me always. I don’t want them to know about this development.
As soon as I receive your reply I shall give you the relevant Information’s that will legalize you to have access over this fund. I will also issue an Authorization to the Finance Security Company that will prove you the present beneficiary of this fund. I want you to always pray for me because the lord is my shepherd. My happiness is that I and my late husband lived a life of a worthy Christian. Whoever that wants to serve the Lord must serve him in spirit and Truth. Please always be prayerful all through your life and pray to God to forgive me my sins. Contact me Immediately, any delay in your reply will give me room in sourcing for another cooperate individual that is honest, trustworthy and very conscious of needs of less fortunate. Who would be much honored to work for humanity for this same purpose?
Please assure me that you will act accordingly as I stated herein. Hoping to receive your reply.
Yours Sister in Christ,
Mrs.mary Thomas

HEADER:

Return-Path: <mrs.catherinemarythomas@laposte.net>
Received-SPF: pass (domain of laposte.net designates 193.253.66.147 as permitted sender) ZSB3aWxsaW5nbmVzcyBhbmQgaW50ZXJlc3QgdG8gZGlnZXN0IHRoaXMgaHVt YmxlIG5hcnJhdGlvbnMgdGhvdWdoIGl0IG1pZ2h0IGJlIHNvIHN1cnByaXNl IGFuZCBzdHJhbmdlIHRvIGJlbGlldmUgbXkgc3RvcnkgYnV0IEkga25ldyBi eSB0aGUgcmVhc29uIG9mIHRoZSBhbG1pZ2h0eSB5b3Ugd2lsbCBodW1ibHkg dW5kZXJzdG9vZCBhbmQgYWNjZXB0IHRvIHByb2NlZWQgd2l0aAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: aaqZ7XcWLDuRD0EjImOTXLhyRygyyT.oGMLEvS0QW24rPDiI HCbwBn82gVgKml94HAeinBsQkzRKD1Nouz2tWaqKKxhKdoFDIviPnxG4Mu.c wJzWvmN51zrYnBV3dbxFNUuy8vKXPGALnSXUqjfm0FoJil8NpsgE2Y5dmHu5 ngCgPKqh0lvu2tFJi9O8rPkNJ.CDJt_E_YwLdIWSAX5cKvPqPUfdXJhNCkSz c5vLLLV_9TfujHlxrSoBmGNngVhdqFsGkJxTyTUjlDE1GSA7bXWXEdBXHye8 nzXNUBs77YkiNzJbcmBRWaFvnBxS7a8myNiZ_Ux4i29OLy1DTeUT.JBjb93G DrDERVbUA8_Gm60daiMFXr8Xo6mBYDVMTC.OQ6sWsr6KalwMEZQm0bgEtxEi knsRuVaB60m4S7gel_NQHXQ2YDYn_SzYwxX.CqOxLR6UozzfvV1Ml6sgDAPg YSGYBLoNO8w2Q0WSwibW9dGvo64.MaASd9W0fFjq7kMZU9Jp9t72NDTwjpbe jVGfCt20d9y9TUt3bZRosQqQ1v7ZPlYtKW5MV_WgTVSAzIOmDqO.FkgGyeRe UwyPEUuMq3XyI_L1uQj4ZM2YXF8dtItdA7ZWhVtWrEQiqlsupxICQmIFvPPd tkIBtN3._pRRCG7eCTOWIC5cdYeRHhO6jWpLPFm1yEc1wG0QwQLNos.J8.uC 2HLycx2DXKF0vs3IewiggqSsKxqEaK5BjiiqZbQJvhlHka8vfHM8CK1KUWVu k3lNsDhm4JJnoBgP192m0diN12yy5czzSRj.rUFXri4YbH6BQgTuK4AqdyPn Cm_05O7EVLy.OOAu7cHaWMU1cBxH4YNWxvFl9A09.0BmskxM2iPe9sNc2yEO tJLrsbnXr1zj2s29VaSL.gTjMAq_wqx3hVbw8JBBxcmN3S8_9bYRWvDX8ZP5 5OLdLZrLUZcFV5RoculdAb54ukz2l1xCECCaSRA.FVjDKdhcC8RXCeewM1Zu lMQc1xwgCyFuB.hp6XCv5fe3Zr4QjFmJ.uTSehbLeh5XBD5DyjW_ncYmfELM 0LocG1rMwPk1tO341EYt6uwyuncdYt6rqui42cY7i32_BcRBYC3LPD5YbprE Ze0TEAJCsSx4zRbhilQ8jT.b_ePTfpyehmlnGf132h01ElVvxB4s7cNi1gZT 4pOEewbNCXU6Vlja82KsXesEFLh4kS6Wuu2ijHEnrKGwkzeiSJi3pp9Gyj_n RmveEFHnx70fOomJrbjEVpw7IsWaOknqfnbNJ22WcubYOQIH__wGbN_9xs_S MPijAA8q2auGTvsHPeE8Gy4UfCUBKv_3xH32tIz_RtFfr1PX8MDzW8isMbE-
X-Originating-IP: [193.253.66.147]
Authentication-Results: mta1039.mail.ac4.yahoo.com from=laposte.net; domainkeys=neutral (no sig); from=laposte.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO sout.laposte.net) (193.253.66.147) by mta1039.mail.ac4.yahoo.com with SMTP; Tue, 18 Dec 2012 03:53:27 -0800
Received: from wwinf8314 ([10.99.54.221]) by mwinf8515-out with ME id cztS1k0094mN4ju03ztSe5; Tue, 18 Dec 2012 12:53:26 +0100
Date: Tue, 18 Dec 2012 12:53:26 +0100
From: “mrs.catherinemarythomas” <mrs.catherinemarythomas@laposte.net>
Reply-To: “mrs.catherinemarythomas” <mrs.catherinemarythomas@laposte.net>
Message-ID: <2080812912.100053.1355831606633.JavaMail.www@wwinf8314>
Subject: Dearest in christ
Content-Type: multipart/alternative; boundary=”—-=_Part_100052_1264439311.1355831606631″
X-Originating-IP: [196.28.247.101]
X-Wum-Nature: EMAIL-NATURE
X-WUM-FROM: |~|
X-WUM-TO: |~|
X-WUM-REPLYTO: |~|

196.28.247.101 — 193.253.66.147 — 10.99.54.221 –

Catherine Mary Thomas  mrs.catherinemarythomas@laposte.net RETURN-PATH: mrs.catherinemarythomas@laposte.net

______________________________________________________________

RESPONSE EMAIL:

Dearest in christ
Thanks for your email that you sent to me and secondly I must not fail to comment and commend on your statement of caution this for me was like a realization of your good intent. I have seen your position and most importantly adhering to my instructions on this transaction and I am willing to proceed with you as you have show me that you can be trusted…Your mail has equally made me to believe and understand that you are really interested to finalize this transaction with me.
my confidence in you has grown and increased with desire that I am in the safe hand. like you said I believe you love God and believe He wants us to love him Your words in your response have given me great Joy, I believe you know this is a good work of charity project I have placed in your hands. My dear I will only say to you with reason of my throat cancer I am unable to speak but all I want is that the money is safe in your account before I meet the Lord so that it can be used for the intended purpose.
I have told you in confidence that I want the project to be kept very secret and details of my contact with you should not be disclosed to anybody and this is because my husband’s family might want to do everything to gain possession of this money for their own selfish interest. The security company in possession of the money is in Burkina-Faso, the money can be transferred to your account electronically once you activate the DORMANT ACCOUNT and I need the following details below to send LETTER OF AUTHORIZATION and the relevant documents to the Bank that you are now the sole beneficiary to the Funds

Full Name:———————-
Current residential address:————
Country State:——————
Age:———————-
Sex:———————–
Occupation:—————–
Private phone number:——————-

My dear, I want you to have faith and pray always knowing the task ahead and the bold step I have taken to give you this money, I need you to always stay focused and note there is need for prayers as obstacles will arise but that entire stand against the success of this transaction and the project will fall. Let me rest and leave you to pray and build your mind towards the task ahead and know your share of the funds is 30% and the balance must be used for the project which is 70%,do not forget I am communicating with only you at this moment with regards to this transaction. And I would not have any cause to do otherwise, except you state your intention to withdraw your assistance. I have told you in confidence that I want the project to be kept very secret and details of my contact with you should not be disclosed to anybody and this is because my husband’s family might want to do everything to gain possession of this money for their own selfish interest.
Remain bless.
Mrs. mary Thomas

HEADER:

Return-Path: <mrs.catherinemarythomas@laposte.net>
X-YahooFilteredBulk: 193.253.66.144
Received-SPF: pass (domain of laposte.net designates 193.253.66.144 as permitted sender)
X-YMailISG: IXcJCncWLDsknTLwWhNVTHG30BF563Ldgn5KvEvQFkWvuVeq z_QwIlVo3wxYjDta7Y6pLr2hZ2G4uurNLrq1IJkg91YIA7OX.i87QkljdWkb pNSCTyVOnm5lkUFGfDkw4Sa0dUak7Z5Rz.hyIfcHPPpdn_PezcHtKdSQ5D.0 Hd2gYi2601eJqKHQNkgoaYxqdbIcjvI81xwnuYE3WJWV.yaoGKDsVk6AjfUq yp_JpmK8YOGwhp9u5ERr_XNmmAniDibErCCyR.m2E9iZr_Z111CAyeRS4I9I swq.rFwO2q4InDspwmeNobmYMG6iGOw3JrlV9Zc4xjhMqqXoleIEVUuGpK4B NaekvwNTnZK3H6L5ykGjKnsd47f.RD0oCztSaz0qOWVWWnKY.SXwxhcI_jtB hcNdsOdqnXtjVzdEfTcJrtREWU.kunukYyFCwiEGRLnP6olS.1jBOgeZa934 UQ2ftdB2bpQJDE1r2qQQABmwnlNrXiVF_ePTd4ckZkHSHaze5EW.H_saR3Ct 4ewvz7o8huzqk0mpQAGuWCwkFWIKsfAtCGMJxhtpgpLQYlb3FJDSMBlyHsge 0drbYnM28nx1r3eRx_ROpTqYIV_k_JZIK0LREK3w2SOW0RQ6iGs3P8vMA5Sn J.XBq19KwAtdDUpuQ6IGHSSKtC2ITl7f2dwSUUfOGmm94gzFJWdA5wtMJfFv EKnuERTR4N6BQN6UPDsufauwqytBrQTlbByC7K8HfV0bvjXxOA0C0dMgMbO1 OSNpnmeK94fVm63iL1vyqMY4U2M9jdCK9pUgqTxcnlcFuswKiFzqdtKV1ZFF lXkuUSMUGWA_jA97YpG3Mfj73CJcRFdqTbnwKCLMhzYd_PlKAIRocTkmp00g gtja_MRe_iahKW3BrRwC8f2g1.yJMwST60N9D_wKxwNxNNqLjlq6GfaLRVFe FzMXQtyDrXMuN3yowSpBHawCWSZewXapcGrbQ5L4y4PmHzyoN.UMMZPb8Rz8 Xuob3szabBkgg3IYX3wQOCg2k8.381dTHoe2o1FfGK7pNm40MgbqZDjQxxrR uiVSDduG1NDUmSoz8F.66vucfgZvpdKGA1Ti4v4Y_RwjaY2H3A9RVr7D0pIG 9okJvVwq2LQAwZJmqjkw_qxQOdG0DW02uZbpU_X5GiVleSoRqul7qkGz2F90 nBUbIjHDCK5Zgy9O9Zb0Q.cCi26TsX_AtcK8VUXSkjjVspwlfNykC_gYvd5M Ok7IjphOM8jEJT_S4uBT4d6OAs6BAz2ljmffJLS3UwHwJogfAhufvWoCM236 LWBZciCLAfHSyimZwv29kgBSgcPrborTOXLAwkfEMtj8oJeQ0B1evZMXgK2F jM_rqU3tmltgtAN7SrF4GIug7WTG1Jl2j24zE5zb4q9FdmkHjq3zvPXhFiew msPzkBFZ4VAj4hPBi.uQNh0-
X-Originating-IP: [193.253.66.144]
Authentication-Results: mta1055.mail.ac4.yahoo.com from=laposte.net; domainkeys=neutral (no sig); from=laposte.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO sout.laposte.net) (193.253.66.144) by mta1055.mail.ac4.yahoo.com with SMTP; Wed, 19 Dec 2012 03:16:07 -0800
Received: from wwinf8306 ([10.99.54.221]) by mwinf8504-out with ME id dPG51k0014mN4ju03PG5C0; Wed, 19 Dec 2012 12:16:05 +0100
From: “mrs.catherinemarythomas” <mrs.catherinemarythomas@laposte.net>
Reply-To: “mrs.catherinemarythomas” <mrs.catherinemarythomas@laposte.net>
Message-ID: <182589706.149240.1355915765066.JavaMail.www@wwinf8306>
In-Reply-To: <1355894658.30768.YahooMailClassic@web161001.mail.bf1.yahoo.com>
References: <2080812912.100053.1355831606633.JavaMail.www@wwinf8314> <1355894658.30768.YahooMailClassic@web161001.mail.bf1.yahoo.com>
Subject: SEND ME THIS INFORMATIONS
Content-Type: multipart/alternative; boundary=”—-=_Part_149239_468043981.1355915765063″
X-Originating-IP: [41.138.107.23]
X-Wum-Nature: EMAIL-NATURE
X-WUM-FROM: |~|
X-WUM-TO: |~|
X-WUM-REPLYTO: |~|

Same email-address as first email – mrs.catherinemarythomas@laposte.net however, different IP’s being used in second email:

RECEIVED IP: 41.138.107.23 ORIGINATING-IP: 193.253.66.144

___________________________________________________

ATTENTION: MRS. CATHERINE MARY THOMAS IS ALSO BELIEVED TO BE SCAMMING UNDER THE BELOW INFORMATION AS WELL. BOTH THE ORIGINATING AND THE RECEIVED IP’S IN ONE OF THE ABOVE HEADERS ARE EXACTLY THE SAME AND THE EMAIL-ADDRESS IS SIMILAR.

missadut.thonarok@laposte.net
X-Originating-IP: [193.253.66.144]
Authentication-Results: mta1311.mail.gq1.yahoo.com from=laposte.net; domainkeys=neutral (no sig); from=laposte.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO sout.laposte.net) (193.253.66.144)
by mta1311.mail.gq1.yahoo.com with SMTP; Sat, 01 Dec 2012 05:43:50 -0800
Received: from wwinf8219 ([10.99.54.221])
by mwinf8501-out with ME
id WDjo1k0094mN4ju03DjoEb; Sat, 01 Dec 2012 14:43:48 +0100
Date: Sat, 01 Dec 2012 14:43:48 +0100

Hello My Dear,
Warm greetings from me,
I apologize for intruding into your privacy, since we don’t know each other, but pay attention and understand my reason of contacting you Please don’t be angry with me my Dear if you see this message in Spam of your mailbox, it will be because I sent it with low internet connection.don’t you just love this excuse?

i am happy to get in contact with you
after my prayer to God for a direction to find a nice trusted and sincere reliable friend I was motivated to write to you after seen your contact at ( site ) think s/he should have inserted a specific site here! , I know that this email will meet you in a good health and also surprised but God have his own way of bringing people together my dear. i am here to seek your advice of which i know that it will helps me to overcome my situation,

i am presently single above all God fearing girl,My dearest,In your usual time, may it please you to write me back in my email address. So that i will explain more about myself,my details,my pictures and purpose of writing to you.Please do not neglect a humble and lonely heart that seeks your love. A good friendship is the foundation build on other relative things to come. May God bless you as i wait impatiently to hear from you.Thanks and remain blessed.
Yours new proposing friend, Adut.

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

“DR FRANK COLLINS” – DR COLLINS PETER

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: Below will show two email headers sent to two different people (including myself) – It’s the same scammer, same scam as well. The header information is different however so check both for the different IP’s and addresses the scammer is currently using.

UPDATE: Dr Frank Collins is also going by “Dr Collins Peter” and “Collins Peter E” under the email addresses / IP’s – “Collins, Peter E” <collinsp@newtrier.k12.il.us> <info@notice.com>  YAHOO-FILTERBULK: 157.55.116.165 RECEIVED: by 192.168.194.152 — X-ORIGINATING-IP: 41.71.173.93 Also,  Dr Collins Peter web52644778980000x@att.net REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com – Scammers number: +2347030115459 X-YAHOOFILTERBULK: 98.136.218.126 — For more information click: Dr Collins Peter

UPDATE EMAIL FROM DR FRANK COLLINS A.K.A DR COLLINS PETER (I dont even think he realizes who he has emailed because he emails me with different, similar names on a daily basis.)

EMAIL: Attn: ,
This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-703-011-5459

_______________________________________

SUBJECT: PAYMENT VIA ATM CARD.

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $10.M

HEADER:

Return-Path: <webxx120999xxxxxxx@att.net>
X-YahooFilteredBulk: 98.138.91.88
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: FaLTslcWLDv_37lDMJwvUepYgmnqCzD2WWiLYIVYEvzWiVdj yeMdZg1sVqQZNMLZIrI8jrEhVaMXPsJIY6kRf0cbjnqQCPsaLbBdN2aERrfI RwOChZVFmKW9DzDxir.njJLHD.QY8j_y83jLRI4.AuI7k8QKdHjPvXXJYEFV 3YQAPmqS_78yqhLNbejZcKD5irk7feyqBo.GgWWRjUtr0XeJzJNqaql0h8sA e8RvUpWShCVHN2SyD1tuM0Deb4D1Ji8Vbh6LO0l1rw9cI0_sIz.vHpe_EiGP kHJSq4cVZ_zI24xSaJVH2nairx_S7dPagQ15pHcUhTSBMqGEgXXNeB1Y2oeP 3JU6qx6vSLkN2q.zt9EL5Vwas.VQ3VnnTXDqHLBdVcKU94hP0GlXAupk.DHM obtlUYCC1aCFRuuf3fyqc0LusjLnspK7JnjoOa4trRGPkJ_SlfDp0ggLrEaT v9a7lqaWeBT9EICtLA0FkLq3C2n40JFv19b2vJ8kTWkPK9_CQXXHvPmE9PZ3 kFs1luoQlTk_lzaBG6mXtSkUeA_7vvUTiNlT90e4_xcWHLkMi_qHUB6.MOXY KpjgBBptr6h8HH8BTrub.bb.IWuBN9wzFL2saNzKwsyxCm4lKMw9.xwDm5uJ Gq5wsKY8oAk.ZAm83V.RXXdQZhrYHzq2HI4TEsDuXnxCeBPNS3yCscgHGdua .5bviyYzefeg3tnvzHHkzRlzxSKw4QvlmuuqcChqscR9kCPiJLD.cgAs4kGP VstUFHd.bksAH552CD3i0lwkON5VfmeiESgRCGTPFvptnIKly2v3rZiX6esg GPPtVuH2VF9JGdJc2Ymbkp7azmUteBWNDdU3UBhVs441.EpCaWrI_sm_fe57 OiQyUOywnO1yRAtKJ_SFta4rGiPKLZ0KmWOm2iWxo40gyrpOgSF7vvvDlD.8 TTvxrpElU4SLFTn.GO1zFIFIOghPlKF4MTDaE1.cfSBA7OvaqPPhZB7CbD_P PbifHGwGIUcvjwXFo2GX_MJ9efyRaqwJ8RNv5bv_PmOjBSyxnqzPybf5N4_3 8R6NtlZnqM1b4Enrf9rnVdKOJneQ2FJhZVcYPrtDlcrfum9mFoOorxfoQHmz TE17GM57C0B.ILT43WlnmpnQdle96RtuSiqxmvsRzRStRdaGzDZuic8L7wei rjZENREYOwxD5PakTFL_xFmWBDMWOtezwqcs9j2HaBsIHEPGCa_w1BQb4H7T Rhg.rsLZhUpnUmz3kwbcPdV9Pc8UNCPtAWRE0QCMgwjeBn0ZXdINEcVudxSA YTcOMC4k95wVfJ8oF7eiOod5Qae2n5Ov7WwjD_lXqOtSBIc3J87zhs.HmSjX 7WlsWTwwXn.I_l4fa3NQ.mKYBKo-
X-Originating-IP: [98.138.91.88]
Authentication-Results: mta1228.mail.sk1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.88) by mta1228.mail.sk1.yahoo.com with SMTP; Wed, 05 Dec 2012 09:33:37 -0800
Received: from [98.138.226.178] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [98.139.44.92] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 198054.18868.bm@omp1029.access.mail.sp2.yahoo.com
Received: (qmail 22514 invoked by uid 60001); 5 Dec 2012 17:33:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1354728815; bh=2E+CXVEN1MfcfJaq2e/eZV5TviX4n2QY/x1KeAa5kws=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=f9JOS/YO8YXlmc9hJrpoWT06BSgD+eIddQyPZn984pugXI47aiHJ+HigDAW5KKMMOSqrOWONnAJiCoEyKoSjzteAYzjouKnJuSd9FFAPV7YDDY5OHZP5iSipgSUv3aNEhW/Rsnl4Ln0GS2YFkeMhoGRqYTKiUP5YtCqljvaDNow=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TW9B75gLmG8YEH2Fs0wWUR6quUgNgKf4vKcOC0lU58OuZZxvfbAEilc6hFgOyOvoldI//PR2xiJZNGeYJsT5o76o0CJS8W8mbj8ANAI1PafbE8IT034u3iHRas9fZymmyVV0ARoaM4Pmz0UzVZK0Jim/YrB1484O5fKsUOiyGTM=;
X-YMail-OSG: WdGt0KwVM1lOyB0NVRZY5rrxYN4NyBpT08THjv3T0blrAYl g.fSaOnJGDgT6qOWJLehIImpPX16weUxpsraTUfiislliLwCl2K7v8Pp.iJQ a9TSaK3Cg8mAMGQLpgboaXsnY0P.gbcdPD9a2TYU3MLMz9.msdkdNVne7srD CGKrYap1ePNIkrvsumj.6_CYvw30FkImKkDHHf5IXtzUrxF4x8.QVPZL.F5P 1sCi9c6SjI1P.GeZm2DnWTw.VoPokMuHr44zOJyF208V.uJqcKGplN1blft8 NRD73m_UrMPrQXsfdMEk9IKg0jGHRledxyRP7NbPnmUmTJk5sWb6g7mibQcN lZBmrszbkEqY7Gci4Eh5lmEYhM0EH9ITd3rAkZfbRlBlo5s8MbxSVEa73EvH muyMHoTdJMpwvibAS8LsfWhBVw4Fzpyj.JdfnQdukkFQX5QRnWlt3FtcARkq hyy26DJRYTbzGN4Eyk0EL9EDXp1SGqp9Lk4FU_Cz6Hw4qjqgVzWqnIza_ijq nvI9omJY1Dw0WycuWs.OkVnfl
Received: from [108.174.51.231] by web184901.mail.gq1.yahoo.com via HTTP; Wed, 05 Dec 2012 09:33:35 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354728815.12889.YahooMailClassic@web184901.mail.gq1.yahoo.com>
Date: Wed, 5 Dec 2012 09:33:35 -0800 (PST)
From: DR FRANK COLLINS <webxx120999xxxxxxx@att.net>
Reply-To: drfranklcollin@kimo.com
Subject: PAYMENT VIA ATM CARD

FIRST EMAIL – “DR FRANK COLLINS” <webxx120999xxxxxxx@att.net> REPLY-TO: drfranklcollin@kimo.com RETURN-PATH: webxx120999xxxxxxx@att.net

SECOND EMAIL – Dr Collins Peter <webxixxxxx266xxxxx@att.net> REPLY-TO: collinpeterclaim1@yahoo.com RETURN-PATH: webxixxxxx266xxxxx@att.net

BELOW HEADER FROM COLLIN PETER EMAIL:

Return-Path: <webxixxxxx266xxxxx@att.net>
X-YahooFilteredBulk: 98.136.217.214
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 2lU7wkQWLDvBCg5Cg1wZtIwDNUzuGrZVVXK9H6ZxiRnCF9q8 3T_Z2xZXeKmdhjE03ZY1nNRa1P6Zz09tc3Suud6PVBq3vexxPmov8AXjPV9n h21FBi8fEfSTSwVFhhvzk7V6R63Puryrkha1Mb3jaVwNputKdVPkDPhjUMeo RVMMb4_9ds7LkdO1tAhp2nowUz6sKBD4buJmSanxkzHUpRwUVtPLKq8B09eN Rl25hxMaIQHn74TwJlEJoWwVxtvh8Jkr9b8xgoPVsHTD4d3rIEAmrBO8jRyd GelLKjDpe6gEZSWQukIvbii_.zMj02LUFMIXNqSXg2JTLp15U5_jUlo0usw3 1Q9ij8R.SuZ80..F80EMLcQO1SXMjqWDf6xkVHWwRChYckM8P0zLXQwmLzCh cXZIqLnw6xfz6lcwu0_mQkN.aX.hIIycQN9E431bkyzpAK8Sh0ATdnfKruuc hDUY3uEtvred._LLnnYkhYpxqfc_nSy4oYmmhRytYX5eJDo3.jrNS61KZPV6 YQ56CR6JtF_A6Hafi5rSLv5qgM4p8VJZi7448tERIhykcwaijsPjcAOenatn YK3BKAuoLWZ0KHPHNvGKAWVEbv9QWSQF39Q.EEP1LmrPyvSdcGkLUJurop.B aYWv4YFGCdGxSazNRDxvtgoiaK6SIwQ.bpgk7uq2vF3rcb50kF6JNxWrLg.n 7Tth7XBQ.W0dZ6SeRl5BddGt0PedKs6csdJXP3rAEuRx9HhVbiFWVgdNijR3 _dNog5Qebj0UNBN3_ZYEN_KnDptPkNdpsJ8OGplwzrinpWeXcnwHVgAbUTdo 18VmNYVRbtilZoPybybViqmTdRB30nDou7y.RzfJPpp93GHAGPmJapCeotd7 c17h.xTgmXwnesQYx8oH1A8HMZj9YMgj2Hn78UbjDz5iO3dLZZQwGJc37EEe Irpsy5SaXtVD8MbmmPkhMrhk8K30Dviwqq4hDE5WgxBlGVonuDQoGK3aEt2T nvWx.JhFmNOhCyTBWuANJwIBh0YVHlt7UHVip3l.jut4onQ9R4CDyP6sbX2c lfshiCRIJ9lEvHbvGo40N55AdITysTVwpsKYdhO1zKO2KEhE2HbINU3NSVAp mVO8xztcsAawulFbZ5PKA.HviU.utyPlT0yMvzwTHn_QINVPcYodx0NOT_5q eROgjgZ35jOw55jeTpgP2qOvmDNkeadY.RrCfkVM_h_Ewvbns5N8m8wKWn4F 71xz.y4o8QBLLz0jb4jMAFmUekk5PrMNZ0E-
X-Originating-IP: [98.136.217.214]
Authentication-Results: mta1191.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm9.bullet.mail.gq1.yahoo.com) (98.136.217.214) by mta1191.mail.bf1.yahoo.com with SMTP; Fri, 14 Dec 2012 03:36:45 -0800
Received: from [98.137.12.58] by nm19.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [98.139.44.70] by tm3.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [127.0.0.1] by omp1007.access.mail.sp2.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 191480.20265.bm@omp1007.access.mail.sp2.yahoo.com
Received: (qmail 75889 invoked by uid 60001); 14 Dec 2012 11:36:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355485002; bh=2TQXuFSDKzJQh2ItoNfMPDU7xRHv3E+CGrBMw/1Ns0g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=MdiZ1jC0egJ3jeK8x+wAmlqoZyMp98AiD2wzzG+et6zE3r4jYBfuYUoMttuA+gtIjRNvWXQLaTtg0u215rggtB9Wpx8OQWJMI3iQKHU+C0WdAONnnis/01rbGL8rLVp8QUEopIB3M6ep93e/l0o2GTcA+2tm8NmXdnIzOrTvHgs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tLrXvMlZ1AfWS1oRs/q6h6HUMYi/LUcbnjbU0+wRSPWQr/1rUxJ+mPFD5IS+2J+xhqTW8fnpv0P89+O46Kg0ZaIi52L7OqBpBWUtxGIOrGGuRKY65NxHoyuM/9fcPmg6OxN2t9IVr/IQmo5FIYMQAlTgtLYGxzIx8tus9kjh4UE=;
X-YMail-OSG: 3ICaliMVM1ngoXiqNpguRRh2iYwL78sXplySeVxex0hGQX. 9amYG0XA4OBV26LpGFUMshO4W2d_k7Z_a2Ijy9UC4MhQCts27.mEJf9MSo4o gLC1yrqEZW2qVfkENJcHqLvP6x22811UE_jYQp539eFIcLW5RWUDAU4t9CGn OdkUZ.I3db4Y0_pc3qHbfrO34x9zDWKUFRwLqnQ.wNCnHD8dS3WSTofCFWm8 DRISKdISfGE2ytoF4IzvXsFuyje2c_qd6tqdnmTw5Z9mBhssXb94A4biy5CF qnxB_1TEOjTWqKHDrBY4BU1EdgOFfYQNqvwQ4XtGhinDlu0jMGic.YAmQBDt z00_WMAOIdc6llHVKxJwh0yh_xgWL5D6rgLOTnmN2Mo2vI.t3Ls.zQwRBRhe SaGInzRlMMto6OJd7AVEbCSpnmZYicQHhMCbjMxGPX2KPd4Tv0fL_cU_plDm egb7i9XYQocNBXLDzdzIfmk9Um9FTZk5b6spv87aUQEG.1MjrCbB7UdYQ0uO JpvS8DhYL5XyxrsNNIFxmRpV2b8I07Jm9LTn8wKS_hqGegIf5feMr.9cGJzH 7hgKyGs0sihPG_k5JCSaI1yCjgZYK79b_xhXuvMQeLOYyQDygzxrr8813RrH cC8L9RfM7BsB3QMN75qyv.pCG1ZbybDazG.TyLuGLgdSNZ6KwYSh_mQ–
Received: from [172.162.63.104] by web185004.mail.gq1.yahoo.com via HTTP; Fri, 14 Dec 2012 03:36:42 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355485002.70723.YahooMailClassic@web185004.mail.gq1.yahoo.com>
Date: Fri, 14 Dec 2012 03:36:42 -0800 (PST)
From: Dr Collins Peter <webxixxxxx266xxxxx@att.net>
Reply-To: collinpeterclaim1@yahoo.com
Subject: ATTN:BENEFICIARY

108.174.51.231 << 98.138.91.88 <<

________________________________________

Click SCAMWARNERS for email to below header which was sent by the same scammer as above.

Return-Path: <web1xxxxx12000bvvv@att.net>
Received: from nm12-vm4.bullet.mail.gq1.yahoo.com (nm12-vm4.bullet.mail.gq1.yahoo.com [98.136.218.191])
(8.14.4/8.14.4) with ESMTP id qBAFqXcC024177
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from web1xxxxx12000bvvv@att.net)
Received: from [98.137.12.190] by nm12.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [98.139.44.75] by tm11.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [127.0.0.1] by omp1012.access.mail.sp2.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 169461.26588.bm@omp1012.access.mail.sp2.yahoo.com
Received: (qmail 11627 invoked by uid 60001); 10 Dec 2012 15:52:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355154752; bh=6IEXAnuDHUzPM2GG6BZxFSMMGXUzzTJH/x0iCKn3gNM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ZNpQDXqA6YKLygx/Mgp0kaQY3hShe48iYfThTEb8Iru1MOJkFmAxYG7WRpbG0vEzb8sVOXBWUD70FlpkHY32sc3lcnQRUH9EWyjF33/6bxeK6Wl/Hf7syjgMKen3IrPrVrQM7QP70aIkEYevI/L1VoeaKi0X05zrl/mkFKlZJB8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=C3u05KWRUG4yec6yjYc58jVUZqKqPra/xpCRYFkhi2pi73G7p5xYJt3avwhjC1pd5gHT2g6XMST7DkGiaRchRZYYa/jODcoZt4R+AhzCt86vNfdJ8r54ZScNvyU4Y+I8mpF49mKbuYWh9Qw+6o/yW3f8qclaMsyNAu3ATH2SDAs=;
X-YMail-OSG: p5tUyUsVM1nSNbno0XpFEzLZade1sG0k1LIN6NkNDDbP4ts
LfsdXeXxUn6OgEkvAzJFUKDvuIBVeFzZtgkksCNzN7YM7NYxZZELCIFArcbu
_mj1sx3mmaRRFlhLnDPO0Ud9acKn6RdXUuy0Z2D2THjsSnJnY9sU7qqlRMsY
RFxlusC6GZdc5g0kSlEJ9Q6m1NFt621vubnU3dlWx9BHYYswZA3GlYEoIQOZ
znu.EmXiL_e6NkgO6Xi3U8TlgxDHH.J2V.gjmQeJjgeleOz.cmjSiQf65.01
pFSPJQ.uJV2ZQQDmhoA_f4DIGHOLzIEM54oMAKodxlcGehFjRCB.Otx7qJ99
LLzSejt_DN_c3T7KOCmzn30gBLvM4NW04V6Q7K4N69QA7XOIUNPQflttOcPQ
QUh_J5vkppPwzXQ7X5ZwbRUsdfsHhuaz1XhXMvrY6vOWGj_WLL3kyxKoNNTD
o2PEbuViIVuMH9ocliCObq_Z7Olxp0coTXqA6vhkTd_030aE_Rclf5k8sFU.
neOYXj1nWJo0ZcsSoOLW7
Received: from [64.72.78.27] by web181404.mail.ne1.yahoo.com via HTTP; Mon, 10 Dec 2012 07:52:32 PST
X-Rocket-MIMEInfo: 001.001,DQoNClJlY29uZmlybSB5b3VyIEFkZHJlc3MsbW9iaWxlIGZvciBkZWxpdmVyeSBvZiB5b3VyIEFUTSBjYXJkICQxMC5NATABAQEB
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355154752.62957.YahooMailClassic@web181404.mail.ne1.yahoo.com>
Date: Mon, 10 Dec 2012 07:52:32 -0800 (PST)
From: DR FRANK COLLINS <web1xxxxx12000bvvv@att.net>
Reply-To: dcollins@kimo.com
Subject: PAYMENT VIA ATM CARD.

 
1 Comment

Posted by on 12/11/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

AFRICAN UNION FUND RECOVERY

WARNING: RECOVERY SCAM – NIGERIAN 419 SCAMMER

For the record, I’ve never been scammed but do get these recovery scams from time to time which makes me believe these africans aren’t too organized. I also receive more then one spam email sent at different times by the same scammer under different reply-addresses. 

EMAIL: AFRICAN UNION RECOVERY,

DEPARTMENT OF INT’L AFFAIRS
1 Horse Guards Road,London,SW1A 2HQ.

Respected Beneficiary,

I am the Director of International Affairs in the African Union
Recovery office in London, Britain.Recently, the British government
has received series of complaints regarding the Existence of huge sums
of money that are trapped and left unclaimed in Most African Banks and
Financial organizations, especially in Nigeria.The African Union
External Affairs department (My Office) was mandated by the British
government to go to Africa to investigate and recover all Funds
belonging to United States, European, Asian and Australian
Nationals that are trapped in African Banks and finance houses.

On our investigation in Nigeria, we discovered a file NO;
234/98GT/UB/OT22/01 with the total sum of Five Million US Dollars
(USD5, 000,000.00) with your name as the Beneficiary. It was further
Discovered that some unknown officials of the Bank have fraudulently
Diverted some part of your total sum to unknown accounts in the past
leaving only USD5Million in the account.

My office has recovered this amount (USD5M) and we want you to receive
it Without any waste of time while we further continue our
investigation to get those fraudulent officials who were involved in
diverting some part of the funds.Because of the problems associated
with Bank wire transfers, we have Decided that all the recovered funds
will be delivered to the Beneficiaries in cash to avoid the issues of
fund transfer requirements. Under this arrange, we have secretly
packed and sealed all the recovered funds in Galvanized Trunk boxes
and we shall engage the services of a Diplomatic Courier Firm that
will handle the delivery of the trunks to your area of destination.

The Courier Firm uses Diplomats to deliver vital consignments for
safety purposes. Though, for security reasons, we will want neither
the courier company nor the Diplomat to know the content of the trunk
boxes.With this arrangement, you will receive your fund under a
hitch-free claim process as you will not be subjected to Bank
requirements.We will request you to reconfirm your FULL NAMES, ADDRESS
AND PHONE NUMBERS to us and then we shall give you further details on
the delivery.

Thanks, Mr.Robert Scott. Email:afriurecovery@yahoo.com.ph

(Director of Int’l Affairs)

HEADER:

Return-Path: <robertscott32@yahoo.co.uk>
X-YahooFilteredBulk: 77.238.189.91
Received-SPF: none (domain of yahoo.co.uk does not designate permitted sender hosts)
X-YMailISG: MYo48LIWLDs9MXaRflw_jGy8S606INkKh8LamoBPbgoNa9eL HRF19NCvzxZMHiWRCjAPCBnY2qEOCIW9BHUTlNuzn87DqYcZpmaJo5IiLKkP sIefbZQMj0A9mvVcwws_34PXeWWPJdKUNMvdvkw5HcJB72uwJh2CgX_ZOS_Y 4WVtS1VmyXB3pEBPaxD37YXeo30feG68bOfrIeQ9oxDCz8LYy_0xVkDyZF0V GlAdRwNeVJq2BzIlJe6mvnpEYk9YF2OgPi3uIwjoLWW2um9gDtYFqhR5HuRk E9.Mq9kB60f55oS67hyzvavkFh.N6rhLv4ErartnbRKHVn39cKn1AzPNNYc3 3gUdZPcd3ZWdPkFsDDUeL0ttZ86PAA0B14MMYErPIyBQ06m6u8evrRqyuvAR 80RcUFIbkyl014MoCBV_5b6ps3n47VzAsfFPibGr1EXmQsVPDdYQwlCE1g_3 n8pghqABfBbmWr8fJk38MO0F_h7xzjxIvfWIYgN9rLLk9UhL85RpwO5k9x8k jekhMClLbw_tWCM6InnMhyeawBh.EuxQLvvKx6Vkh.ufMwigHebWQpibVlCw KErkmIUsu513OBEBCgoEyTHcT1jjcbvry7D8gVEJNkd7095fjhxXALpa0_t1 pLjQ9irJVQm2tVoNAz7minGMvr.SW6CN824MXDuQFdab9bp5Kmt_1BXSMlX1 olYs22jrojfcPQ7j1psoYmuPS_3XkzA9U8dYJF0CKVCrY85LhWGH8O_pTHWz luAToerBfJ6iTrb.vkefC8Qv2iF1ofATK3dEvcmUuAaVUiIzD3wMNqNyRlX4 YbjqFMU_n6EawBRjPN2aUf1nLHyKA5iVOz7dY_b_bGJZD5Ojd1hEHpes29hw gzI7zJLTYwP5ePJ34n84fnhoCVTsB7kXCSl3UzLkWFNgMcfob.tuvyfXXsj7 GGUxeLwO0ZUFy_lUudYQ2ZhSuchqS4GnT89X3_G6lxWNzFExLZ.gNRLGVpc6 pBvLuOlsHM2edmbFcWXW4CJCTX0ugSYwu65oDPtA76b2rMMGT29PYAH.V7U6 h5QGDtI01hd3K0Ftbbm5H_i1h4Wbb.h92GeXRixa_Fe9bxInxfum2glUD9V. J5ccDKubkT9MYFZH6tveQrKdK6Bnat7WAvZilm3IsUTr6f33dOmPQxWjKFLY HzIrQn0f
X-Originating-IP: [77.238.189.91]
Authentication-Results: mta1174.mail.mud.yahoo.com from=yahoo.co.uk; domainkeys=pass (ok); from=yahoo.co.uk; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm14-vm1.bullet.mail.ird.yahoo.com) (77.238.189.91) by mta1174.mail.mud.yahoo.com with SMTP; Wed, 26 Sep 2012 07:13:56 -0700
Received: from [77.238.189.230] by nm14.bullet.mail.ird.yahoo.com with NNFMP; 26 Sep 2012 14:13:53 -0000
Received: from [212.82.108.121] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 26 Sep 2012 14:13:53 -0000
Received: from [127.0.0.1] by omp1030.mail.ird.yahoo.com with NNFMP; 26 Sep 2012 14:13:53 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 826425.75846.bm@omp1030.mail.ird.yahoo.com
Received: (qmail 42900 invoked by uid 60001); 26 Sep 2012 14:13:53 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1348668833; bh=e0NfH6jU7jCYbuxPXM5NP/YYsv+RVXg9boK5pDbHeCs=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=0JYkwYv4VlggSV6N/tOKwNZmxt+asIV32bZVz7GBYHtFtvpwI4hjm6LRCT96kD9uc9bNOKnOaASQ0Gd1Q/rSIe5w5GmutrhPW9/Z6Mgd+dNp5OHiFk1WEQRJjI3/2ioYJq8Pi/9h5MwnOwe+jC9mWGJF51Z2mSYyZr3IDQapxpw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=pIUvXSlEEWrWq85A8Uxxg3TgNITZEudfN1M9IUrrUG3obLuqqExD6xfga0+jDJUTiCFk3gmttI62J7bgdVNksOuVEqLo8YLCBlmJATbQcVvmjyoQtFzDbAiHjT42Ln+cd9UCYppjJd5YLUwnZmXex5mJESnuQ7ji/CDfrzmFBnU=;
X-YMail-OSG: YWZBuMkVM1m.2QSPRUg65aT6OxacMry8V3Rjz4kAsNAyTqq GXaCRGaem58CvvdqJn5i0XnipRJTdd.PlWSud5ZFK.JFXR6KZCUv5jB29Fap 0O04y1Vqo5pfYeHZlZupv_044nx5jacVSSpXVB2p55.N9MR.9oIC5ffX30Gh 32ONq0xjoVLCnTzOBtmukuU__2pUau2JkRLCUgvnLWt5So.GZaOfyXk6BQCG GvQjFu7WvBzkZEHanrC1IvBp498fMFMoRhPlBPMc6g1Kak0E19mAJq5_Ma3C ORoCHgBczIHrtZPse2OJU7JvI8S25Unee0RxbCtgd9SLXl.uyMbT5geRUVUl GQ88VxM_wIrj6TwkD62LcRaaaM0X1bE3oQEuzbZQB2omRq.qZsU2r__UK0yS i5H_rVN90Viua7YBEiUwvTQHdA2uG494Mp7zPBppcZ67B5ezsVRzFVz8tNPn UZjWrI_YaKQS.9isaoG_hYhgyjgER0uvvT1oIoc2w5Qo5n0.CVEz1H4qJGFa S
Received: from [41.155.110.170] by web132304.mail.ird.yahoo.com via HTTP; Wed, 26 Sep 2012 15:13:53 BST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.434
Message-ID: <1348668833.40775.YahooMailClassic@web132304.mail.ird.yahoo.com>
Date: Wed, 26 Sep 2012 15:13:53 +0100 (BST)
From: AFRICAN UNION FUND RECOVERY <robertscott32@yahoo.co.uk>
Reply-To: afriunrecovery1@gmail.com
Subject: YOUR STOLEN FUND:

“AFRICAN UNION FUND RECOVERY” <robertscott32@yahoo.co.uk> 41.155.110.170 – Location: South Africa Reply-to address: afriunrecovery1@gmail.com

 
Leave a comment

Posted by on 12/05/2012 in Other

 

Tags: , , , , , , , , , , , , , ,

“Adin Kipkalya Kones”

WARNING: FRAUD – SCAM – AFRICAN SCAMMER

To view the first email sent by Adin Kones please click here.

EMAIL: Dear Beloved one, good afternoon and happy day. 
I thank you for your kind mail, I’m so excited to hear from you once again, I decided to contact you because of the urgency of my situation here in the refugee camp were i’m staying due to my step mother, I really want to have a good relationship with you and I will be very happy to have someone like you who is willing and able to help me.

As I told you, When I arrived here I went to clear the money from the bank, The Bank Director whom I met told me that my late father left an instructions to them that I must present a trustee before the fund will be released to me and also being a refugee my status is not authorize by the local law to clear money or make transfer of the money to an account. He told me that the only way out is that I should appoint a Trustee who will stand for me and clear the money. I wanted to discuss this matter with my step mother but I am afraid that she will not allow me have access to the money if she help me, because after the death of my father, she and my wicked uncle join hands and sold my father’s assets to a Chinese expatriate.

However, I think about all that I am passing through and decided to reveal myself to you seeking for your help in transferring my inheritance fund to your account. You will also help me by recommending a nice university for me to continue my Education immediately i come over there, and as well as investing the fund to a profitable firm over there in your country. This money does not matter for me, but all I want is to secure my life because of my wicked step mother who threatened to kill me before i ran out of my country Kenya . I want to have rest of mind and stop thinking so much about my late father and my beloved mother of blessed memory.

As I told you, I have the Death Certificate of my late beloved father, and the deposit certificate which my father used to deposit the money with my name as the true beneficiary and I have deposited a copy to the bank. Presently, I am staying in Christ de King Mission Camp Ouagadougou, Burkina Faso, I haven’t a personal phone but if you want to reach me you can call me with the office telephone number of Rev. Father Basil Dukugbo, his office telephone number is (+226 78 74 8190) if you call him tell him that you want to speak to Ms. aDIN Kipkalya, I am staying in Block G14, female hostel.

Please reconfirm this information’s below…

Full Names………………………………
Telephone numbers……………………
Sex…………………………
Age…………………………….
Photo…………………….
Occupation………………………
Receiving country……………………….
Home and Office Address…………………

As soon as I received the above information’s, I will put things in other by sending the account information’s and the Bank contact to you, to enable you contact bank and ask them how my inheritance fund could be transferred to your Bank account over there in your country, while I will be coming over to meet you as soon as the Bank transfer the Fund into your account.

Please for my security reasons; i will appreciate you keep this only to yourself till the money is been transferred to your account, I don’t know if you can make it possible to come down here so that both of us can meet face to face and go to the bank together for the claim, I will be very happy if that will be possible. Have a nice day, while i hope to hear from you soonest.

Yours forever,
Miss. Adin Kipkalya Kones

HEADER:

Return-Path:   <adinkones@hotmail.fr>
X-YahooFilteredBulk:   65.55.90.103
Received-SPF:   pass (domain of hotmail.fr designates 65.55.90.103 as permitted sender)
X-YMailISG:   fsS_ZlcWLDsf1O960kPynO.s6t5YtGqk6HZ6XdX_6PpIXbhV rHSJMAersWUyCryd9sE2DitnMfXxBiO_BVwzx_n1S7CdQCsvKCRqSZD5.HS_ swCvvbT7VbXcTwDTRNK6_eYwIdF.SPgH6TX28KqcwPu6KBFEJoD9PNuLo8yn 8XtuTLCq.R8CJqOGpDa4G7O8s_FvXKyolJ74_Aibr4oKjxLXhn5CAyEa0BpT i702RLu.xMwp5vmzwFQEH1x0LZstanEnjTbO8B4tq_YxVQLwejpFxZJ5P7cM lCIeDk9QbSRL2j7Has8KioecWige6A_TjavLs8aT0kU_seUYRASfl7sq8ds4 3O.pOmEw0TjVKStxtUlgQtiR34hbN2aEckcX8vigg_hZ9t5W7rw0Na.kLTfB 5yaOdKuvGVi09H1Dh5.8JM3Pj13oC9jInDKWpoQrnw2FhxzQ5LQiwRAmxpqd Xnb38UXC_dvuC3QZVNSCQPl_Cz4k7qOjY8iUJDPBMyMvbpzMwnJR9aZMfIsm DwhH8pvMYR_aXeMo7Ben32JcBPPFm1CCmll1gO.cQw98IngFHSmaoB.qTu.B FN8g_8PCfx6lWFYaTd.5VSC4tyRNn3ut1puUjUHeyULXjk1O9S8QuY5XgQzF 9gPZpFR8.gUaZkK48x05Ktjeojj1whLh0SCgnAJsu1hLeCRDCdTwIm9uoLmo oasj4VP9LZ7iRGCDV6Mx7RKMfDrxazW7edRxRZb4sAV1fG2XD83SItXzhJo6 agp7w1t8M03a2IugQStm7IXjZn.BwL.cgC3nbut0tg_Gi06MpeDrwiwoiHhI WkKZ5frvMVR6Y8RVkU37ToDMXRbFr4_lnlu.W.02GXjX1c54fUriJsKmKDU2 yitsNaNbEWZqHj8ecJ5JhEwlKpxPsHGF27H5gNQXX5_yhI84__BaZPbuWz79 qn5V5v2_WVQbD9CfBSPBH7awAT4hT54oDvm3SMjmwpas__.0npIQmgHmKYUd bKDVW94JGZJ5r2MN8_pF1O8CE8.ybrm4FyXZK47okS.ffbHRyjWsQ7twLoiQ Vt_7cf9cUp7FDUh6ypY.sBofDZmlA4B6PoTURA2Clasrg7iKVYoXGCs.upem stqqdY52aJjCQDORVe8faHS9Ph1to9_bze61RfQ171vJIxO7EeDCmO1Cfksi umSHmLqyTEQpjhSZaAJ3ouRGSTXmAwtQYg–
X-Originating-IP:   [65.55.90.103]
Authentication-Results:   mta1088.mail.ac4.yahoo.com from=hotmail.fr; domainkeys=neutral (no sig); from=hotmail.fr; dkim=neutral (no sig)
Received:   from 127.0.0.1 (EHLO snt0-omc2-s28.snt0.hotmail.com) (65.55.90.103) by mta1088.mail.ac4.yahoo.com with SMTP; Mon, 26 Nov 2012 04:40:54 -0800
Received:   from SNT128-W48 ([65.55.90.71]) by snt0-omc2-s28.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 26 Nov 2012 04:40:53 -0800
X-Originating-IP:   [41.138.107.61]
X-EIP:   [KBYapRi+Pxmw2EKMDawbCwwSX48iuJd9]
X-Originating-Email:   [adinkones@hotmail.fr]
Message-ID:   <SNT128-W48C9B75E6805E8855098F0C45F0@phx.gbl>
Return-Path:   adinkones@hotmail.fr
Content-Type:   multipart/alternative; boundary=”_97c7cf57-91d8-47b3-a7e0-c11cef186b5d_”
From:  
Adin Kipkalya Kones <adinkones@hotmail.fr>
To:   deleted@yahoo.com
Subject:   Dear Kenneth
Date:   Mon, 26 Nov 2012 12:40:52 +0000
Importance:   Normal
MIME-Version:   1.0
X-OriginalArrivalTime:   26 Nov 2012 12:40:53.0669 (UTC) FILETIME=[46020D50:01CDCBD3]
Content-Length:   8273

Scammer has 2 originating IP’s with one being in third world dirt and the other being in the USA.. The one in the USA is NOT the Scammers actual location.. The scammer is in Africa where he/she belongs.

Adin Kipkalya Kones << adinkones@hotmail.fr <<

X-ORIGINATING-IP: 41.138.107.61 Location: BURKINA FASO (AFRICA) – NETWORK: African Network Information Center IP Network: American Registry for Internet Numbers (ARIN)

System Browser: Crome

RECEIVED: from SNT128-W48 ([65.55.90.71]) by snt0-omc2-s28.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 26 Nov 2012 04:40:53 -0800

ORIGINATING-IP — 65.55.90.103 – HOSTNAME: snt0-omc2-s28.snt0.hotmail.com – LOCATION: Redmond, Washington – SHARED ISP – NOT SCAMMERS ACTUAL LOCATION – 

77.238.189.63 << <missadinkones2@voila.fr> << from [196.28.250.57] by web29402.mail.ird.yahoo.com via HTTP; Sat, 24 << RETURN-PATH: missadinkones3@voila.fr

________________________________________

An online user had posted of a Romance Scam and IP’s associated with the scammer. One of the IP’s matched the received IP above. The delphifag user wrote:

Name: Wilson Akampole/Ruddock
Email: wilson010kiss@hotmail.co.uk

Other Comments:
I decided to contact this scammer to see what he was trying to do, he advertised that he could get our money back from our scammers if we contacted him. 
I did this and he promised that he could track down my scammer and get my money back, first he said that it would be for free but if I wanted I could pay him a small fee. 
I have him a bogus name and he said that he already had trace of this man and could get him arrested tomorrow if I just sent him $500.00 to him via western union. 
He never at any time as me about me or discuss how I was going to get my money back. 
I felt sick to think I was talking to a scammer who knew I had already been scammed and was willing to play on this to get more money out of me 
Do they think we are that stupid to get done twice and believe everything they say. 
Please do not contact this man, I have added his ID and IP address below. 
Thanks to Miss Marple for helping me with all this. 

Ip Address 3rd Party Info Provider City Flag Country 
* 197.251.150.249 Check 197.251.150.249 at Senderbase.org Check 197.251.150.249 at Reputationauthority.org Ghana Telecom Accra Ghana 
65.55.90.71 Check 65.55.90.71 at Senderbase.org Check 65.55.90.71 at Reputationauthority.org Microsoft Hosting Redmond United States 
65.55.90.89 Check 65.55.90.89 at Senderbase.org Check 65.55.90.89 at Reputationauthority.org Microsoft Hosting Redmond United States 
72.30.238.234 Check 72.30.238.234 at Senderbase.org Check 72.30.238.234 at Reputationauthority.org Inktomi Corporation Sunnyvale United States 
http://iptrackeronline.com/header.php

 
3 Comments

Posted by on 11/27/2012 in Uncategorized

 

Tags: , , , , , , , , , ,

 
%d bloggers like this: