RSS

Tag Archives: ATM Card

“DR NGOZI CHUKWU”

ATM LOTTERY SCAM – ADVANCE FEE FRAUD

credit-card-scams

From: “CD” <deleted@gmail.com>
Date: Feb 11, 2013 7:30 AM
Subject: Re: To Whom This May Concern
To: DR NGOZI CHUKWU <drngozichi@superposta.com>

Well in that case I will pass. I was always taught never pay for what’s due to you

On Feb 11, 2013 3:55 AM, “DR NGOZI CHUKWU” drngozichi@superposta.com wrote:
Thanks for your email, your question is reasonable for someone who is about going into a transaction of such magnitude.

please the delivery fees can not be deducted from the funds because it has been programmed into the ATM card

Faruku

On 10 February 2013 21:33, C D <deleted@gmail.com> wrote:
Why can’t the 285 be deducted from the fund???

On Jan 19, 2013 5:59 AM, “Fbi” <riaz@msb-est.com> wrote:
Federal Bureau of Investigation
Counter-terrorism Division and Cyber Crime Division
J. Edgar. Hoover Building Washington DC

ROBERT S. MUELLER III,

Attention Beneficiary,

Records show that you are among one of the individuals and organizations who are yet to receive their overdue payment from overseas which includes those of Lottery/Gambling, Contract and Inheritance. Through our Fraud Monitory Unit we have noticed that you have been transacting with some impostors and fraudsters who have been impersonating the likes of Prof. Soludo/Mr.Lamido Sansui of the Central Bank Of Nigeria, Mr. Patrick Aziza, Bode Williams, Frank, Anderson, none officials of Oceanic Bank, Zenith Banks, Kelvin Young of HSBC, Ben of FedEx, Ibrahim Sule, Dr. Usman Shamsuddeen and some impostors claiming to be The Federal Bureau of Investigation.

The Cyber Crime Division of the FBI gathered information from the Internet Fraud Complaint Center (IFCC) on how some people have lost outrageous sums of money to these impostors. As a result of this, we hereby advise you to stop communication with any one not referred to you by us. We have negotiated with the Federal Ministry of Finance that your payment totaling $5,900,000.00(Five Million Nine Hundred Thousand Dollars). will be released to you via a custom pin based ATM card with a maximum withdrawal limit of $15,000 a day which is powered by Visa Card and can be used anywhere in the world where you see a Visa Card Logo on the Automatic Teller Machine (ATM).
We guarantee receipt of your payment. This is as a result of the mandate from US Government to make sure all debts owed to citizens of American and also Asia and Europe which includes Inheritance, Contract, Gambling/Lottery etc are been cleared. Below are few list of tracking numbers you can track from Delivery Company website to confirm people like you who have received their payment successfully.

Name: Mr and Mrs RANGANBAY : DHL Tracking Number:2282232175 (www.dhl.com)
Name: Mr. Jalaludin: FedEx Tracking number 875777537332 (www.fedex.com)

To redeem your funds, you are hereby advised to contact the ATM Card Center via email for their requirement to proceed and procure your Approval of Payment Warrant and Endorsement of your ATM Release Order on your behalf which will cost you $285 Usd only and nothing more as everything else has been taken care of by the Federal Government including taxes, custom paper and clearance duty so all you will ever need to pay is $285.00 only.

Mr. Mr.Ngozi Chukwu (ATM Card Center Director)
Central Bank of Nigeria
Central Business District,
Cad astral Zone, federal
Capital Territory,
Nigeria.

ATM Card CenterDirector Mr. Ngozi Chukwu
Official Email: drngozichi@ymail.com

Do contact Mr. Ngozi Chukwu of the ATM Card Center via his contact details above and furnish him with your details as listed below:

FULL NAMES: __________________________________
DELIVERY ADDRESS FOR ATM CARD: __________________
_______________
DATE OF BIRTH: __________________
TELEPHONE NUMBER: _____________________
EMAIL ADDRESS: _____________________

On contacting him with your details your file would be updated and he will be sending you the payment information in which you will use in making payment of $285.00 via MoneyGram or Western Union Money Transfer for the procurement of your Approval of Payment Warrant and Endorsement of your ATM Release Order, after which the delivery of your ATM card will be effected to your designated home address without any further delay, No extra fee.
ROBERT S. MUELLER III,

DIRECTOR OF FEDERAL BUREAU OF INVESTIGATION
UNITED STATES IN COLABORATION WITH THE
DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

Note: Disregard any email you get from any impostors or offices claiming to be in possession of your ATM card, you are hereby advice only to be in contact with Mr. Ngozi Chukwu, the Director of the ATM card center who is the rightful person to deal with in regards to your payment and forward any emails you get from impostors to this office so we could act upon it immediately. Help stop cyber crime
Reply Reply All Move… InboxmiGo to Previous message | Go to Next message | Back to Messages Select Message Encoding ASCII (ASCII) Greek (ISO-8859-7) Greek (Windows-1253) Latin-10 (ISO-8859-16) Latin-3 (ISO-8859-3) Latin-6 (ISO-8859-10) Latin-7 (ISO-8859-13) Latin-8 (ISO-8859-14) Latin-9 (ISO-8859-15) W. European (850) W. European (CP858) W. European (HPROMAN8) W. European (MACROMAN8) W. European (Windows-1252) Armenia (ARMSCII-8) Baltic Rim (ISO-8859-4) Baltic Rim (WINDOWS-1257) Cyrillic (866) Cyrillic (ISO-8859-5) Cyrillic (KOI8-R) Cyrillic (KOI8-RU) Cyrillic (KOI8-T) Cyrillic (KOI8-U) Cyrillic (WINDOWS-1251) Latin-2 (852) Latin-2 (ISO-8859-2) Latin-2 (WINDOWS-1250) Turkish (ISO-8859-9) Turkish (WINDOWS-1254) Arabic (ISO-8859-6,ASMO-708) Arabic (WINDOWS-1256) Hebrew (856) Hebrew (862) Hebrew (WINDOWS-1255) Chinese Simplified (GB-2312-80) Chinese Simplified (GB18030) Chinese Simplified (HZ-GB-2312) Chinese Simplified (ISO-2022-CN) Chinese Simplified (WINDOWS-936) Chinese Trad.-Hong Kong (BIG5-HKSCS) Chinese Tradi
tional (BIG5) Chinese Traditional

 
Leave a comment

Posted by on 02/13/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

“Mr.John Ezechukwu”

ATM LOTTERY SCAM – ADVANCE FEE FRAUD

419-scam

SUBJECT LINE: Foreign Operation Manager

ATTENTION ,
I know it is because of your past effort and experience that make you not to
believe me but I told you before that I cannot deceive you because my
bible says what shall it profit a man to gain material things and
loose your soul, any way their is good news now, i raised some money
to help you out and make sure that your payment will be release to you
the same day you send the $56.00 as well.
I borrowed money yesterday after service from my Pastor, then you have
to send the remain balance now only $$56.00 but i don’t see the reason
you have to keep silent on me, honestly I am just disappointed at your
behaviors before because you know that I cannot deceive you, Just pay
the $96.00 and leave rest for me watching me if I am telling you lies.
Your payments is already approval today for you to receive it but the
management here says that you must pay $56.00 for the Stamp and
activation charge before you can receive the payment today, please
send the charge through western union immediately, i have assured you
a time without number that this is genuine and legitimate.
I swear If I fail to release your payment after you send the $56.00 as
I promise don’t count on me again, I cannot fail you, I promise you,
don’t fear as soon as you send the $56.00 today please leave the rest
to me and see if I am lie to you because I can not use my life swear
because of $56.00, how can I swear against my life because of this
small amount? it is to show you that I am telling you the truth.
HERE IS THE INFORMATION TO SEND THE MONEY TO WESTERN UNION MONEY TRANSFER BELOW:
Receiver Name :::::::: Peter Chigbata
Country :::::::: Benin Republic
City :::::::: Cotonou
Question :::::::: what color
Answer :::::::: Blue
Amount :::::::: $56.00
Money Transfer Control Number :::::::: (M.T.C.N)
Sender’s name ::::::::
Sender’s Direct Telephone::::::::::
I promise you as soon as we hear from you with the payment of $56.00
today we shall send your pick up information the same day you send the
$56.00 I swear.
Yours Sincerely
Mr.John Ezechukwu
Foreign Operation Manager
bank.uba58@yahoo.com
I swear If I fail to release your payment after you send the $56.00 as
I promise don’t count on me again,

HEADER DETAILS:

Return-Path: <edochepeter@yahoo.com.ph>
Received-SPF: none (domain of yahoo.com.ph does not designate permitted sender hosts) ciBwYXN0IGVmZm9ydCBhbmQgZXhwZXJpZW5jZSB0aGF0IG1ha2UgeW91IG5v dCB0byBiZWxpZXZlIG1lIGJ1dCBJIHRvbGQgeW91IGJlZm9yZSB0aGF0IEkg Y2Fubm90IGRlY2VpdmUgeW91IGJlY2F1c2UgbXkgYmlibGUgc2F5cyB3aGF0 IHNoYWxsIGl0IHByb2ZpdCBhIG1hbiB0byBnYWluIG1hdGVyaWFsIHRoaW5n cyBhbmQgbG9vc2UgeW91ciBzb3VsLCBhbnkgd2F5IHRoZWlyIAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzM-
X-YMailISG: JqNf3_0WLDtB5M6ee9BiScDbGVR4LdNvLmtNBMU1wvpxcefO JzSwhRR.JgnpyNPE.RYmRb8uA6XWcgZV6ud17onV_9uLGVjxqOcSw1T6P3Ab sFHkNQV3gBzcVvxcufLYTQhEdWrPMUVrG7WmEJnoTr8Ii2U9NO6O9gzq.Sax jcxmZajp6nhpeVDdknrzynJuO3T0.P5lu22zcYKBJFcZrQYoxkLR4RAuGHza tZiwVk1LNGMnTcGByPs6Mya2F.dcanWhoxhRmE6V9GPJZ.AXHrEJclG825GI Tx4E3daUDEfhrSwnmtVCcWbJyQMoVfoQT44kuVvUTutLmABggW9dQdeX_gl0 Kaa1Ptbc1vlm7eN0oMVRYYuntJqyBBm7qrpaTfw7mUYx9DucO8KRl5oH1JWt y5lzaQgAiIs7mYr.UL33ZPU6U4IKHajT89stoOGtDwI6bgmmslKvYZI1CvGC Z9z4BH2q0KqoISA8ncGZEj8iYmDcKiPwqGIJk4fUWd2u_li4ke6dHPN2J9BC wj8SO.UeFbaCToHfhUgKmGjw.abp3n0f4Ddr7_uRgwrxAbXWCuXeDdnePyHT uu.UBA8_93ITY5C5.9aWyH6.3sOcOjMt_idhzo8UVjesl8NN4AL659xHsmlT Ap0RjVHRvnbLRzWdlLeQWAl79Ufo_uVlcWy0epcBJfz2iQ8kVqVBqVrKi23b 24hpChtWwOciYyzzWk153fyKmNCqRd9YsXHSIqWzw2kRjO0b34VAoDBnYcHT 8RXlRSXkzBIgDlcZQdOhse9.C9vsnWWBL6IJNHloE.wQlSLiU..TorcM1Pzz QyqtEqeKrLMm5bFZs4Hticb98by79Nme5bwsdz3YjVpllMfkVu.ZZSoe4jhx jJShogxxo99roLDllFALvS2U0gDB.45kut1rdVGABfFBaDwZ83HAbx7vtyfu GtHZat8xzu5vBcpmwm60olxFuyxbEI5Ec8z.QveyqkaYphXvAgVHryuC3YFr NeZ3YXvP6akhgStZWlGzwUu9NNRtiFElC2b41LZqNjUPyhr1zuCIA9pafgoD HI.JFcVVLZlEPb.5MBAfbn6JEGKAFGiQwSTGmEBTV9yikfIvVlXQsveUmWyR XbOCW1IDLH2XLajgdzr7lFS8ZURaYfnqsq3woMpRg9LHlz4uLUR7O1fPpsc9 v3JgeejIS.Nde0o3J3rimB7N0Yhbk3rul8hGD4AQC8FatnULfVicjzID0s_y
X-Originating-IP: [106.10.151.27]
Authentication-Results: mta1302.mail.mud.yahoo.com from=yahoo.com.ph; domainkeys=pass (ok); from=yahoo.com.ph; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm32.bullet.mail.sg3.yahoo.com) (106.10.151.27) by mta1302.mail.mud.yahoo.com with SMTP; Thu, 07 Feb 2013 23:45:59 -0800
Received: from [106.10.166.115] by nm32.bullet.mail.sg3.yahoo.com with NNFMP; 08 Feb 2013 07:45:54 -0000
Received: from [106.10.151.186] by tm4.bullet.mail.sg3.yahoo.com with NNFMP; 08 Feb 2013 07:45:54 -0000
Received: from [127.0.0.1] by omp1012.mail.sg3.yahoo.com with NNFMP; 08 Feb 2013 07:45:54 -0000
X-Yahoo-Newman-Id: 596262.66239.bm@omp1012.mail.sg3.yahoo.com
Received: from [41.216.50.26] by web193704.mail.sg3.yahoo.com via HTTP; Fri, 08 Feb 2013 15:45:54 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.132.503
Message-ID: <1360309554.9695.YahooMailClassic@web193704.mail.sg3.yahoo.com>
From: “Mr.John Ezechukwu” <edochepeter@yahoo.com.ph>
Reply-To: bank.uba58@yahoo.com
Subject: Foreign Operation Manager

Mr John Ezechukwu edochepeter@yahoo.com.ph RETURN_PATH: edochepeter@yahoo.com.ph REPLY_ADDRESS: bank.uba58@yahoo.com RECEIVED_IP: 41.216.50.26 IP_USED: 106.10.151.27

 
Leave a comment

Posted by on 02/08/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , ,

“juliette Chapin”

warning_gif

ATM LOTTERY SCAM – ADVANCE FEE FRAUD

CLICK HERE FOR A LIST OF OTHER EMAILS SENT BY THIS SCAMMER – NOTE THAT THIS SCAMMER, LIKE MOST, USE DIFFERENT IP & REPLY ADDRESSES IN AN ATTEMPT TO HIDE THEIR IDENTITY.

No-Scams

Mtcn #: 773-443-3038
Your agent can pick up at any agent location. Sender name is juliette Chapin
Sent was $1000
After all the issues we had this was the solution to sending the money.And reference #s 23290772, i sent the last $1500. I am thank you for you help by stand by me and General Daniel for this we are appreciate so much. I hope that me and General Daniel will meet with you soon. i have attached the receipt for the money sent as instructed.
I will wait for an email from you with the phone number.

johnbaird.josephiceberg johnbaird.josephiceberg@ymail.com
Western_Union_Transfer_Slip_JG…exe (1.9 MB)Money_Gram_Payment_Slip_JGPE_0…exe (1.9 MB)

Jen

_____________

Message contains attachments1 File (565KB)
WU slip.scr

Dear Sir,

Copy of your trasfer payment slip details sent to you as instructed. View the attachment the mtcn # 773-443-3038..with d same information you provided.

Regards,

juliette Chapin
Accounting Services Division
#103, 21 Rover Way
Spartan Wood,LA ,90250
Telephone: (780) 410-5703
Fax: (780) 416-5614

HEADER DETAILS:

Return-Path: <mickbone97@yahoo.com>
X-YahooFilteredBulk: 98.139.212.164
X-Originating-IP: [98.139.212.164]
Received: from 127.0.0.1 (HELO nm5.bullet.mail.bf1.yahoo.com) (98.139.212.164) by mta1067.mail.ne1.yahoo.com with SMTP; Tue, 15 Jan 2013 22:14:22 +0000
Received: from [98.139.212.153] by nm5.bullet.mail.bf1.yahoo.com with NNFMP; 15 Jan 2013 22:14:20 -0000
Received: from [98.139.212.227] by tm10.bullet.mail.bf1.yahoo.com with NNFMP; 15 Jan 2013 22:14:18 -0000
Received: from [127.0.0.1] by omp1036.mail.bf1.yahoo.com with NNFMP; 15 Jan 2013 22:14:18 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 913034.31949.bm@omp1036.mail.bf1.yahoo.com
Received: (qmail 55569 invoked by uid 60001); 15 Jan 2013 22:14:18 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1358288058; bh=Pw9QukRh++jJavYxeuzXL3ty3osgj78RqiLC0VB59Cw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=DjLxsVlM+WTnrVf6HtpOnJcggBsj1P4TWpljCwNMl1RHDnCmJRncUJBEiIoDrit+uhA5TapwKvNivqm8d5aN8ANZAiNuv3t1u4oJxj5n6fJo+GXVSlpfDjDWV1chfGeEFDsM325rt1g2FsvBBo9SmX7PE/ZJa39gVPRz2hjrXAw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=pRvNHGH74NYyO6zuEOD9hoIeKILeNCo59SiXhIF4IYXXV1M7PbkvTXDKGufOqAuKFbOjJ3fgzn567+ee0mZH8o/0tbgFlImP4cQIKun2Q+IO32z3lqK0R8Q01VxetN9q9cSdwXm4EhPY/MVrDryOZJzUBCKa0eJp272q8gr4snQ=;
X-YMail-OSG: EN7NKToVM1lcCmL2caBuHQSWMsdmGdBbJwZO0XpzzCoDiqg 75mq_JKpR.la82Pb4bgvAwD7p8RIz98IrgjQMUlTjFhsHc0uzMVVS2hnOwks Sx1gd8_d.dIfUtKYte.siU6hB6wkSSlfNa5Nazlt9bKmJYUqWv9gDWrSueoh HNYaEl9NZJG.q7KUPd14Tk4_IeHHN9iy.nT9YE3R3roDZDfF3QCjvsM_gM7d hyVXuLHwHu7LTcexf.tzaOSLke99ZuUb5ht0B8Znxf9JE4IkzXCgSG0JaTxz 5j2XWlDPn8Sf5NEQQIMBAHJpQvTTMVGSp5n9VRt0kb5yivX3aOU6SYS3ruVF lqW0gJtn8cWDU5FBOIYZugqxm1kx_4qUxa5Lx2yoptKcAT1lylupKbmE9Zo3 1Y2XQd1efGqSbPfzK5TunPz4yKucGNEq4t56TzcgjHEehEZROwnazapyTTB3 n3q2iL8ymv6sIw.bXUhWaYF5a7O4HNuorhTkp_q9NRpkmnqXwXc7xQ18W8d4 WDmvnPogYYxuESR2hreu9GE2yzpRUI3zJnMywyBzb8TPuyzuuf19hvcT5cgW Y3DvlaEDNiUo-
Received: from [41.138.189.62] by web140701.mail.bf1.yahoo.com via HTTP; Tue, 15 Jan 2013 14:14:17 PST
X-Mailer: YahooMailWebService/0.8.130.494
References: <1358287914.52674.YahooMailNeo@web140701.mail.bf1.yahoo.com> <1358287992.40627.YahooMailNeo@web140706.mail.bf1.yahoo.com>
Message-ID: <1358288057.49423.YahooMailNeo@web140701.mail.bf1.yahoo.com>
Date: Tue, 15 Jan 2013 14:14:17 -0800 (PST)
From: juliette Chapin <mickbone97@yahoo.com>
Reply-To: juliette Chapin <mickbone97@yahoo.com>
Subject: The copy of the western union receipt
To: “atmpaymentcenttt@e-mail.ua” <atmpaymentcenttt@e-mail.ua>

“juliette Chapin” <mickbone97@yahoo.com>
atmpaymentcenttt@e-mail.ua <atmpaymentcenttt@e-mail.ua>

From: juliette Chapin mickbone97@yahoo.com
webtzzzz.office@att.net <webtzzzz.office@att.net>

IP_Used: 98.139.212.164 Received_IP: 41.138.189.62

 
Leave a comment

Posted by on 01/29/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

“REV BEN PETER”

LOTTERY SCAM – NIGERIAN SCAMMER – ADVANCE FEE FRAUD

NOTE: THIS SCAMMER HAS BEEN EMAILING ME FOR MANY MONTHS UNDER MULTIPLE NAMES, EMAIL-ADDRESSES AND IP ADDRESSES — THIS IS A NIGERIAN SCAM ALSO KNOWN AS A 419 SCAM

BELOW IS THE MOST RECENT EMAIL SENT BY THE FRAUDSTER. THIS SCAMMER IS VERY PERSISTENT BUT UNORGANIZED. HE IS ALWAYS CHANGING THE AMOUNT OF MONEY I’VE SUPPOSELY ‘WON’ AND THE FEE THAT I AM SUPPOSE TO PAY.

freemoney

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $ 7 M

HEADER:

Return-Path: <webxx7601xxxxx@att.net>
X-YahooFilteredBulk: 98.138.90.65
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: To35UWMWLDtpI31Kn.0SLqgNnW08Av0SCFAssCMR8A_Vo1GP GrWi2SRwEUK0_rS5ma.EeNhpXLBHGeRggiFG274YMQUgELYQceZCuxW3lQPN rUoT6knijOkKBdqZkH6wbwxbiX_cGEA41SNaj1GVee9_wEMb3td4XzfxKB2W QHrpIw5Zbu_LEuE.UohMdPBo5n_Z45sHFwPWKeKvax4FtRd9YMFoUrM1giBG C7CLdLh9vlCZzCePSppkA0cvOXt_.mjRjvpOP8QMqDhPOSUFydEEMwgIJns6 2p8QA6wY01j05hbhCrsTYjP7PMBklSFGar9DIbx_rQrES7XDMCtPwl3rskW9 mA0o9k.0wE8917_bR66zH6.r4hgk2Pq8J16QU1Lb0v752n9EcJJSbMbbFQCB wY0piVWQGMKir3JfkdVqWpd_w.T_TfFpxV4cemt1CKnbhoD0FsU7NfExkiJc A5joObOkIGO7Jd8HRyCdsMC_W94SyWlu8v8d0TzsLFjtxDlq1n1fiHfB1XRH vxTmJ6lgV_.c.iXkiuD9N3_pT1_aPP7W9IwCbbDIwtrF34MNw68hMJvJOUe2 pH.jPfBNQHLQFxWhxb6lyVSyv28tHpugjC308j7ixZ00K9T_7yuZ0IHQF6K_ Qd3WjZM3CHJaBIWb1rlNDSqMRfzuahAUzICBFaX8u4wMRTaHcpwTOp7nRUrm sazz9ZeJ7QdN8pKfGePiOZZHXxb1KoyvjL30TC9knrdnerK_gJQgdXaFI8Q5 3er.rbh.9662mA1tWwkL.uw.Ej8jeMmTC81X292stHfa_QQVzMpPvYAw5A9x eqmWm6ToSeMfSIvtRovTlmbB8SkoM4oN0TU4hSZuZ71YzhIaZGFXCNYoOJne 7vGYNkak_HoeCUFsGusF92TWky2Vc9PLHMAgihSZ5i2dv22EV6xQduzDwaC6 hR0YvxZO91Y5nEmgU4JgwTACDxEFzztQjg9nca9TEBemHGKAs_inoBvYmRgj 9NAenemYR2BttVDhS7s50y8s2lyYQLrcXQk7ozgN_n9MjmXaMO0PpbZ7Vpge 7kwg93PpaJb42PYuo_xuEisFLWcWM2dUBSchWFlLPJiuJh8X1JF31AOvxAaS y5zqbbq0gA5D6y8P6y7bvMT6GA.RJbBsQnHsqzQ9p62epYsuSBn.GO8e0Obr iTJkg19mglk6slzhX2ciB7jr2mRWI6xcf4zG3rU9Rruj0ndRzYpo_d30lRuc ri8BKqd2I3s9zVfL6sSwKtJADSftjvwW6RTUXPvc2TBzPoA_QfWHZLqs.vAD fbdtVFTINFo2tQp5xrw8ZD.fSJPwkEmhSP.jOfvKar5IpIk2JWk37aJ3w_S7 tgimEtxHc8pR
X-Originating-IP: [98.138.90.65]
Authentication-Results: mta1052.mail.ne1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2.bullet.mail.ne1.yahoo.com) (98.138.90.65) by mta1052.mail.ne1.yahoo.com with SMTP; Fri, 21 Dec 2012 23:21:59 +0000
Received: from [98.138.90.57] by nm2.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
Received: from [66.94.237.125] by tm10.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
Received: from [127.0.0.1] by omp1030.access.mail.mud.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 33716.96789.bm@omp1030.access.mail.mud.yahoo.com
Received: (qmail 92006 invoked by uid 60001); 21 Dec 2012 23:21:58 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1356132118; bh=dspJXUMJQPVGARdDGpSJwFgAoFNKsOdNQ9FVUYxLdWs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Woh2WLpCF/uHtRoXtPW872YkOBFAAbqyMP8UUqzUgpelHH7rNoiWqa7ag0CmwrvT9rDXbc9/MwzRF4reRQJSiuyghbS6I2JNqrMwOvylD/dqh4XGMyzU7PbK4Pbexc0L8FA9JQhAW/6ELOL4sFG8D94kdkpAOh6L371vv4tS3iw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Wxssckm+WPOWZNoeqVo3J5A9eRTjFPzbZwjkMMleA6TNm0Z3g6oL7alYEXqc56/BtA40DPg9RuPmICUTXeH2deUrULLcyKl+UwLAW5iFZVcgFK96kZvnPQlno8bd2sihdj9TtprkLOV0FMx26eQMMkzUuHBXS3DHp6EcQHcqnms=;
X-YMail-OSG: FhAlJ8UVM1mfQErccxHLz3tuxCp1r4vGnWLUR8YRpQosJn0 41jiU0HfOZDG0kQmHMqh9ICSmXaeUKNHjf_woqZQa86_WB0hFCoBJ9tSIbnP Mwm_Tzot5n5.j.qSIOy00TIP8lP5luggtVz7caaD2_xg6Zh7HkAGgtTfgwB1 1WAhS2sqIs_p3RNlxJA6hbYu8KkdyLOzktPW1JRmwWHrxLfUm4eFUj6oPEXn 8oNzfmB9NOMY7zKPEBmCaQ1yjo7wnJFJHBS8kVzq16fTa98dCGZNheuL.CqO 5_c9tEoKAzDURA7_1BRR87wZUiUY14icB5MobkNiVuzKczqB1i.pYPVpGisr AExzvcXZ9pNJ9zI.QcYSMlgLTOo5CuQhY4uel.ztH5.tWJpHnx_jHfZd2IC4 aKjnnLxo9jTRnXuKc2sIDTrimc6Q_2BpalwQFLRKgXuEJiXQ.6fp1jpbAe3o 0zkK_380VGyPITTcie_SrkWj75HrFmt1WgNvCjcGXVNEKpmpolObG
Received: from [173.13.200.181] by web181205.mail.ne1.yahoo.com via HTTP; Fri, 21 Dec 2012 15:21:58 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.129.483
Message-ID: <1356132118.91240.YahooMailClassic@web181205.mail.ne1.yahoo.com>
Date: Fri, 21 Dec 2012 15:21:58 -0800 (PST)
From: REV BEN PETER <webxx7601xxxxx@att.net>
Reply-To: asabamaka@yahoo.com.ph
Subject: Reconfirm your Address,mobile for delivery of your ATM card $ 7 M

FROM: REV BEN PETER webxx7601xxxxx@att.net REPLY-ADDRESS: asabamaka@yahoo.com.ph

173.13.200.181 <> 98.138.90.65

___________________________________

BELOW IS ADDITIONAL EMAIL ADDRESSES AND IP ADDRESSES SENT TO ME BY THE SAME SCAMMER(S)

2) LOTTERY SCAM – ”ATM payment” <webxl19917xx@att.net> REPLY-ADDRESS: atmpaymentcenttt@e-mail.ua

SUBJECT: your(atm) card worth of $5.5M is ready, send your Address and cell Phone

SOME IP’S USED BY THIS NIGERIAN SCAMMER: 98.139.44.156 <> 75.125.40.18 by web181105.mail.ne1.yahoo.com <> unitednationprogram101@gmail.com <> unitednations77@yahoo.cn <> apex.expressbj@hotmail.fr <> +22998660756 <> 85.95.227.44 <>

THIS SAMMER ALSO PRETEND’S TO BE United Nations Organisation AND WESTERN UNION OFFICE — I’VE POSTED ALL THE EMAIL’S AND HEADERS I’VE RECEIVED BY THIS SCAMMER BUT THERE ARE WAY TO MANY AND IT’S IMPOSSIBLE TO KEEP UP WITH. BUT THEY’RE ALL ON SCAMMER419.WORDPRESS.COM — AND I’M SURE THERE ARE MANY MORE EMAIL-ADDRESSES AND IPS, ETC BEING USED BY THESE CROOKS SO IF YOU RECEIVED ANY SPAM EMAILS BY ‘BEN PETER’,  PLEASE POST THE INFORMATION IN THE COMMENT SECTION. THANK YOU.
 
Leave a comment

Posted by on 12/24/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , ,

“Mr. Stephen Fred”

NIGERIAN SCAMMER – FBI IMPOSTER – ADVANCE FEE FRAUD

Okay, this is funny. This Nigerian scammer has been spamming me with phony lottery (atm) scams. I have posted dozens of email-addresses, IPs, names, etc that this fraudster has been using. In the email below he claims that ‘Anderson Smith’ was arrested one month ago but this scammer IS Anderson Smith and Anderson Smith’ emailed me a few days ago. (obviously not arrested.)

Anyway, this scammer sent me a email yesterday and I noticed he fowarded the email to atleast 75 other email-accounts so I decided to forward a message warning all the other accounts just incase one believed him. Well, today I get the below email.. I’m thinking one of the people I people I forwarded the message to could of possibly forwarded it back to the scammer? Oh maybe the scammer had an email up there? I don’t no. Hmm.

Dear: (my fake name)

Thanks for your email, i pray this email gets to you in good state of mind.

This Mr. Anderson Smith was the former correspondent delivery officer in the atm and check department here in the FBI branch office Nigeria. Who was sentenced to jail last month because he has been the one who has been scamming people round the world by the FBI after much investigations had been done in his office

Now he is about to scam out your money from your pocket, you are strictly advice to stop all transactions you have been holding with anybody and forward the write up to me, so i can send to the FBI head office right the way for proper investigations.

I will also like to inform you that your funds is still with the security keeping company who are in control of making sure your funds is been delivered to you right in your door front within the next 24 working hours.

You are advised to contact me with the information’s as stated below:

Your full Name.
Your Address:…..
Home/Cell Phone:……..
Preferred Payment Method (ATM / Cashier Check)

We await your swift response to this email in know distant time.

Best Regards:
Mr Stephen Fred
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts) aSBwcmF5IHRoaXMgZW1haWwgZ2V0cyB0byB5b3UgaW4gZ29vZCBzdGF0ZSBv ZiBtaW5kLiBUaGlzIE1yLiBBbmRlcnNvbiBTbWl0aCB3YXMgdGhlIGZvcm1l ciBjb3JyZXNwb25kZW50IGRlbGl2ZXJ5IG9mZmljZXIgaW4gdGhlIGF0bSBh bmQgY2hlY2sgZGVwYXJ0bWVudCBoZXJlIGluIHRoZSBGQkkgYnJhbmNoIG9m ZmljZSBOaWdlcmlhLiBXaG8gd2FzIHNlbnRlbmNlZCB0byBqYQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzEw
X-YMailISG: YRAg_6UWLDsNPJ41NgYqJwAf5OJLkgUP_WnGcMzl8tpjvtMl _rR7NL5SqQ5ckG58fvfr6m0wcweGFaHpNtYbxDMuVDaIIh1l3K5mNhJuuUo_ 1gL0f1X33EdIEWkU5mPAyilJBlXEpEzk7F_IyU989l1G9TzWOre1Rm4NVrtv wL._Vi2pXJgOQWfreL61PfLIlsJaWcVz4qtNDDj2gyD40PxwRgmAN75tZ4nn aRWQg0kEw6lZsV6CpK5tBR93lSxR5BijjoPWypit6rRfFHu2RPGypmHaaT5i NyOQ3dFSpUGR0qaoBtZbkYY6RfdMQeiKvQSJUW3FpI9_7lT9PcuRP8ulxAyH IdKsAozRLeGkYH_HEicxkXssyyV0P5VqNhSjcN.FVIQIMg49oMMuyXhq6Ams KYFWO16wfZulmhe3zhfu8iLnXUOx1asM1CoRtivrLypsvcMHW2z3jV3Sf4xn gIGmDsHpgafAgkUO3QWxCyUJLenj8Dj_BwC0KlH1rTcmzgg1cDn.8n1xfx4I TffWkboW6Eu0ftF39kDBSKHoC1iLW1RlaaenH.P0luai9hY6QXflsWADaNMp vyw3FUaI9ZssiJp679eh4kt0pGwVUec2kSxHDhpu7SLrLfsGFNoF0pPZYXUt uGRiYlJUlUr5v8msaTOvPCQ35gQ51eUcQaRxD4v2KkyvHegnUen7ToXi2Kh_ OKg9ouVRwnkubOu7lDdfjAzSeczwtAcm5f2ubi7_l3rFwW9zApCW4_AjeWmd 7vvS5V1nYymEkC31.V8sS56xjK3kQCE2iE9j0pUAjktDOX6wn8J_4Ayq1PGI JXgjS5w9nTji3nRHdgxyZOWsXn0db6EffdhNgia3_uSx8P4LjSMZZ7l7PS2t R0PhNr9NWBA._lPQRp.ZCkvQ.8fqwvIlrCFFnsl0SMfnnvOGhZygyoSDyQDm CBfSA7cKbH3v.lGz0WBYswdnCdFJQrwjekmXVAKaUQt440eGAHPbesQ0ln9U PSqwPsVIJt7QkPvTDHPfdX1TOmMQogOlC1_Pt08aiFWDsz.hfNhiKZl1XK82 uJT_t0sFbY8LfjS.p25d_9wZv04b8nl7s5nCniDYVnKK9LESNJdIkvjYCVgb WGkqKQSwqmZou53wA60pT5kbAMhI2QtgZo59Jrt_qvNwcY82MaPQKLLMaFGN a_I2Gwi0ptjskEuktAOgHo9vf3tIbLhf.cNFXjFPrGYa4yPAkAR_C1RMGzCi eEu2c3Go8MzGJFVU0PFqESSugO1nYIzz7W4yaGauPPLzBhykdx2OBa._GR.x 6IyB0YF2._YiCvukGztRVMt0SLWP2kQarf68uCf11I2A4mPMlitmKL._tD.x kkfi6Zc9B.JKZieJlcetzb7nwXocEQaWXoZUH1twHVOZ8dyzq3AnFQxdxoD9 G4mkqGOembFIUmoPAkuk2.N1hJoPV672fTBJY_dMNjDU_OM1tua2bQhWEaV9 RB9WTSbJRX_xtzqg0OrPgSmaXawGuXf0u4RaLPOD8kQiMN9f3w0LTGpfzNF9 8Rvgg796.RX_9Zj_ho8NkHiqorsQgxJeAkzeCQnhuNyKZTd8ZiwYbk_jS8OY .8E_qA6ixSW3NL.CC4hF64r.DdClBZQLn0xSC1PeTm3AGG38oY6zt26wqSnu hrLzp2rqW6lj8PfrLPMzw.Gqo8wMvm6Om0JtuF0gPL_NJ3YY50rFVWWnWA–
X-Originating-IP: [77.238.189.211]
Authentication-Results: mta1213.mail.ac4.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm4-vm0.bullet.mail.ird.yahoo.com) (77.238.189.211) by mta1213.mail.ac4.yahoo.com with SMTP; Thu, 20 Dec 2012 02:24:58 -0800
Received: from [77.238.189.234] by nm4.bullet.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
Received: from [212.82.108.243] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
Received: from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 56404.21902.bm@omp1008.mail.ird.yahoo.com
Received: (qmail 69722 invoked by uid 60001); 20 Dec 2012 10:24:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1355999096; bh=pyOeaUKKOWWZW3lLdVTTiYRo9J3z45S6mIgOy2HgFlE=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=6sEt/VfUuEDUeUudSXs2M1ShOX0eWuYo7bOFh/XdhIPki+ZIyWn9FslcZYIOK+sL8m2MaPtDxi6PNqGk3ODuJVgRnYkMO9IvTfVw4QnvNAaE0M7IfkAvckE4iO1WwKrgM4BNroefkyNDvwH2m/l87dYrH6Im4aiMBs/53/5CRh0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=4oyJFxMb7QIfFN0qOOV5EQRhasHrL0MG/qXmF0XzHB3Z75TEzL5ABDN+fjzt3FxSN4mb8R65+JBQMcZgeYn8hdlOLtIV7RGsbY7RDzkjKCf/9HGA0mDNi4dbn7Oof6iDUGP+kjNmcqlB3BqyHnRKxJyfsGxbxGwxQB5nyfnYApU=;
X-YMail-OSG: gJ29ik4VM1lXPyNG1YswL1rjwFhoTxeyDPqgBh6qE0W3Pqd SBPMiD2ZzSxd7xBXJUeIU9HeH8gYoc_o0hqMUZ.qWnc3PHsey18hkIJmRVZQ yDDgnrXDyofzHPQaZVicPUr9PhVOPPvLSyF37PopUuxDIHztw_T1fAI6YJN3 .IY9klRHXSdhx1XzjXDiWH_LvYN69G9aOSo0rZgdyeHU0M8MLOq7kfarzh9P bTtG.jAKXiYSxzvh4HXO1BJJ4nyYbdwX1bmpjdGVdXFLJ63kWgxitArYUuQ8 Aebx62dNlVOnuz3S5Wit3dSljkkO6nzX6N23R7uQUBOYLas3hJt9ayP4NSI0 9bWoBPZmOLXWneE8s8tCtkcKyynk9esWOszaD5qVI4GnBogGS9PyOOt_UJwD sMJf2NMf4K55JsKHz4XsW2WTb0G5d0vkdPg–
Received: from [41.71.177.225] by web171903.mail.ir2.yahoo.com via HTTP; Thu, 20 Dec 2012 10:24:56 GMT
X-Mailer: YahooMailWebService/0.8.129.483
References: <1355977301.69904.YahooMailClassic@web161001.mail.bf1.yahoo.com>
Message-ID: <1355999096.69523.YahooMailNeo@web171903.mail.ir2.yahoo.com>
Date: Thu, 20 Dec 2012 10:24:56 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Reply-To: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: YOUR FUNDS IS OUT FOR DELIVERY TO YOUR DOOR FRONT! GET BACK TO US NOW.

“Mr. Stephen Fred” <mr.stephenfred@yahoo.dk> 41.71.177.225 – 77.238.189.211

 
Leave a comment

Posted by on 12/22/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , ,

“Mr. Stephen Fred”

ATM CARD MONEY TRANSFER & COUNTERFEIT CHECK SCAM – NIGERIAN 419 SCAMMER

There are two email’s and two headers below. The first email and header was published on scammer419 Yesterday 12/17/12 – the second was published today (12/18/12) — Same scammer using different addresses and IP addresses.

EMAIL #1 –

TO: 4thekids1234@gmail.com, jlpurtee1218@yahoo.com, lschum6@aol.com, vikhadd068@aol.com, childcare4yours@gmail.com, jessicaspitler@hotmail.com, monkeyforthezoo@yahoo.com, angelinahudak@gmail.com, bruces_lil_sis@yahoo.com, pmiller140@woh.rr.com, chelli4dottogo@yahoo.com, shannonschapiro@yahoo.com mschutt5@woh.rr.com, phillips.april@ymail.com, ticktockclocking@gmail.com, aprilsplayhouse@att.net, lrichards7@cfl.rr.com, rosa8485@gmail.com, mommyme0107@yahoo.com, armstrongcare1@yahoo.com, albart@bellsouth.net, new.horizons322@att.net, thebestsweep@yahoo.com, missalisha08@ymail.com, dezy2224@yahoo.com, morgragedanielle@yahoo.com, joanna.sweet@hotmail.com, adenelly@aol.com, pratherjck3@aol.com, camillephlps@yahoo.com, cs09jedq@yahoo.com, baby_pmpn@yahoo.com, kmiller182@cfl.rr.com, kayladaniels90@yahoo.com, lisaconradi@gmail.com, confidence07011996@live.com, poncallinfo@gmail.com, myfamof3@gmail.com, kjg36@comcast.net, missrosesdaycare@yahoo.com, cooljet6@yahoo.com, anged98@yahoo.com, cowboydad75@gmail.com, crawbox08@gmail.com, sacpr210@yahoo.com, khusfelt1991@yahoo.com, dskupien@delawaresafetycouncil.org, primaryyears@aol.com, kidz1st@gmail.com, bonclaude1@aol.com, millerv25@gmail.com, krosieone@aol.com, poohcc07@aol.com, ironhilldaycare1@yahoo.com, bangelique95@gmail.com, truruler@yahoo.com, denisedr54@comcast.net, sromasko@verizon.net, portiabusaitis@gmail.com, portiabusaitis@comcast.net, dawnschafferman@comcast.net, elevatedplaceslearningcenter@gmail.com, gerlacht00@comcast.net, melissalee1209@hotmail.com, valdave@comcast.net, rgoo135623@aol.com, baybeesteps@msn.com, rhino_07@comcast.net, mseekids@yahoo.com, faithshouse@live.com, jeanneflynn59@gmail.com, rachel_vigil@yahoo.com, gspederson55@q.com, ptrcgzmn@yahoo.com, thomasjohn1088@gmail.com, earlybirddaycare@gmail.com, sabrinareiman@yahoo.com, letmcg@ymail.com, brandon.carson25@yahoo.com, christinamauro23@msn.com, katielewnard123@hotmail.com, porkyexposed@yahoo.com, mgfbower07@gmail.com, lonniejbeard@hotmail.com, aklittle0102@aol.com, jennywarn@live.com, leyadewey122@gmail.com, neen062964@hotmail.com, info@need-a-nanny.com, dork_britt@yahoo.com, tinytots80123@yahoo.com, caycestaubin@yahoo.com, ivana331@gmail.com, tstots@hotmail.com, bballvarsitygirl@gmail.com, alwaysforhim2@gmail.com, degutii@msn.com, tiffjowilliams@gmail.com, patriciacallan@msn.com

FROM: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>

SUBJECT: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!

EMAIL: Federal Bureau of Investigation Anti-Terrorist And Monitory Crime Division. Federal Bureau Of Investigation. J.Edgar.Hoover Building Washington Dc Customers Service Hours / Monday To Saturday Office Hours Monday to Saturday: Dear Beneficiary, Series of meetings have been held over the past 7 months with the secretary general of the United Nations Organization. This ended 3days ago. It is obvious that you have not received your fund which is to the tune of $3.5Million due to past corrupt Governmental Officials who almost held the fund to themselves for their selfish reason and some individuals who have taken advantage of your fund all in an attempt to swindle your fund which has led to so many losses from your end and unnecessary delay in the receipt of your fund. The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Nigeria his Excellency President Good luck Jonathan to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes. Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card?

ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $5,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2015. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account.

Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via UPS. Because we have signed a contract with UPS which should expire in next three weeks you will only need to pay $180 instead of $420 saving you $285 So if you pay before the three weeks Dec 2012 you save $285

Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $180.00 nothing more! Nothing less! And we guarantee the receipt of your fund to be successfully delivered to you within the next 24hrs after the receipt of payment has been confirmed.

Note: Everything has been taken care of by the Federal Government of Nigeria, The United Nation and also the FBI and including taxes, custom paper and clearance duty so all you will ever need to pay is $180.

DO NOT SEND MONEY TO ANYONE UNTIL YOU READ THIS: The actual fees for shipping your ATM card is $420 but because UPS have temporarily discontinued the C.O.D which gives you the chance to pay when package is delivered for international shipping We had to sign contract with them for bulk shipping which makes the fees reduce from the actual fee of $420 to $180 nothing more and no hidden fees of any sort!

To effect the release of your fund valued at $3.5Million us dollars you are advised to contact our correspondent in Africa the delivery officer Mr Stephen Fred with the information below, Name:Mr Stephen Fred Email:mr.stephenfred@yahoo.dk You are advised to contact him with the information’s as stated below:

Your full Name.. Your Address:….. Home/Cell Phone:…….. Preferred Payment Method (ATM / Cashier Check)

Upon receipt of payment the delivery officer will ensure that your package is sent within 24 working hours. Because we are so sure of everything we are giving you a 100% money back guarantee if you do not receive payment/package within the next 24hrs after you have made the payment for shipping. And make sure that you keep the receipt of the $180payment that you made because that is the prove you will show to the delivery team when they arrive at your door step with your package of delivery

Yours sincerely, Miss Donna Gwen FEDERAL BUREAU OF INVESTIGATION UNITED STATES DEPARTMENT OF JUSTICE WASHINGTON, D.C. 20535

Note: Do disregard any email you get from any impostors or offices claiming to be in possession of your ATM CARD, you are hereby advice only to be in contact with Mr Stephen Fred of the ATM CARD CENTER who is the rightful person to deal with in regards to your ATM CARD PAYMENT and forward any emails you get from impostors to this office so we could act upon and commence investigation.

HEADER:

Return-Path: <albanesi@dmghost.dmg-hosting.com.ar>
X-YahooFilteredBulk: 200.58.125.17
Received-SPF: none (domain of dmghost.dmg-hosting.com.ar does not designate permitted sender hosts)
X-YMailISG: G4vRLFYWLDtBXE2mxgWetbgPe68s2c_J4Sy1u3QrHo_wMTq2 7ltguaR_7OqUckxfw_6vp2Lr1Jg7Eu.nS2bLDg6fo4oYGP7MTDSxe12a7pKp vDuNtWg442ZrtozAbb4qwjv9yjVKzjc3q6SUJC3ROeRuYcRhx4ZTHNEwa9dJ RRunFvOz3W.7zc.2.2cpeXIR1pV74p_qpVqC3m7H8mdBoPRVTOHo4yAvFEyq HBGagGWmoRoWFUM6WeZcFGLRRd9yG4M2adkg0pGcbx9auO2ojmtRX.d4awpI tNrecy67Vucu5czgWkng.ADegJxE6eNLDqWhXtM8r1A7O_E267YruDaoRxO6 _sIUXJPaS8LB26kJPkafbJgK7Q9bXgF9ll5Efh6DIfA71GiZ_BFxWhGrotmy _KZxe6vxBpdwxzK0Rxlr8WrNY0QZMLOp0hD28W3sC.84e3mVvDE1o89.CZ5h 9jg8M2nfaP2qu3nHGA54gPG1P9JZx9oasJlLQdjhkEP6ND1NMGwvMf48kGMY 3mnmKiJxTzCRP42tdS7Y8Ho32JKgSZ3qE_UtRHNqJnXY6nt4cEAR35W0rrKt Rxajt4Z12QQVP6ynOi0a9qX6gOBgqHI0ImNxtkZaeznZBDB94jKQgd6rsgsf F.xd9S3BVrxw5c_tcsF2ZfpH5vlPphmuFtr.6wHtqPTbo1WcAAW3TzAVQgd5 P1qNkbouaz9T_2LDTBLWIumE0eZYfRwlzjApSWZq5xN7T443jat0wR.gnq8Y dJGDz8sxqmnuHdASS5COEyfmLADo5GME9Hr1nFYnYoUc9gMY6EgDUlovdax2 JWSXg640Sl6p_WEGbvRpunnYfKhxouArjEiZxy2c4lMKAGhYcq0JrGub358H ai9FMNMHAkRnf4b18ttxSIYK5obMdAtyW.Vw4jaqgXYO540R_KQljdv7peAg k9p124LIGZdkN7S_XKaNsg3O.ey154tsrBwhl14kTdz57ZxzNc7niAYFQF1V VUTONPpN4iNZT_t8.LcVzBcHhSjrqoWJ2SMpE28MH6cyiV8IsUDbddT1YIcM iZAV58stob2h.JyLctYJZ.g5G.VYjJubKffjKBTkHbCYZ1wNzGE8sWDDIJwo eRX04Jtt4F13ZI2AARhKdrG8DAr2NSIhIUoWXKs.qbgWrQgZleThlG8O6OOT G1avOrcRyDcNaaQxG32I
X-Originating-IP: [200.58.125.17]
Authentication-Results: mta1317.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=yahoo.dk; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dmghost.dmg-hosting.com.ar) (200.58.125.17) by mta1317.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 05:44:35 -0800
Received: from albanesi by dmghost.dmg-hosting.com.ar with local (Exim 4.71) (envelope-from <albanesi@dmghost.dmg-hosting.com.ar>) id 1Tkafo-0004nX-Uf; Mon, 17 Dec 2012 10:24:00 -0300
Date: Mon, 17 Dec 2012 10:24:00 -0300
Message-Id: <E1Tkafo-0004nX-Uf@dmghost.dmg-hosting.com.ar>
To: 4thekids1234@gmail.com,jlpurtee1218@yahoo.com,lschum6@aol.com,vikhadd068@aol.com,childcare4yours@gmail.com,jessicaspitler@hotmail.com,monkeyforthezoo@yahoo.com,angelinahudak@gmail.com,bruces_lil_sis@yahoo.com,pmiller140@woh.rr.com,chelli4dottogo@yahoo.com,shannonschapiro@yahoo.com,mschutt5@woh.rr.com,phillips.april@ymail.com,ticktockclocking@gmail.com,aprilsplayhouse@att.net,lrichards7@cfl.rr.com,rosa8485@gmail.com,mommyme0107@yahoo.com,armstrongcare1@yahoo.com,albart@bellsouth.net,new.horizons322@att.net,thebestsweep@yahoo.com,missalisha08@ymail.com,dezy2224@yahoo.com,morgragedanielle@yahoo.com,joanna.sweet@hotmail.com,adenelly@aol.com,pratherjck3@aol.com,camillephlps@yahoo.com,cs09jedq@yahoo.com,baby_pmpn@yahoo.com,kmiller182@cfl.rr.com,kayladaniels90@yahoo.com,lisaconradi@gmail.com,confidence07011996@live.com,poncallinfo@gmail.com,myfamof3@gmail.com,kjg36@comcast.net,missrosesdaycare@yahoo.com,cooljet6@yahoo.com,anged98@yahoo.com,cowboydad75@gmail.com,crawbox08@gmail.com,sacpr210@yahoo.com,khusfelt1991@yahoo.com,dskupien@delawaresafetycouncil.org,primaryyears@aol.com,kidz1st@gmail.com,bonclaude1@aol.com,millerv25@gmail.com,krosieone@aol.com,poohcc07@aol.com,ironhilldaycare1@yahoo.com,bangelique95@gmail.com,truruler@yahoo.com,denisedr54@comcast.net,sromasko@verizon.net,portiabusaitis@gmail.com,portiabusaitis@comcast.net,dawnschafferman@comcast.net,elevatedplaceslearningcenter@gmail.com,gerlacht00@comcast.net,melissalee1209@hotmail.com,valdave@comcast.net,rgoo135623@aol.com,baybeesteps@msn.com,rhino_07@comcast.net,mseekids@yahoo.com,faithshouse@live.com,jeanneflynn59@gmail.com,rachel_vigil@yahoo.com,gspederson55@q.com,ptrcgzmn@yahoo.com,thomasjohn1088@gmail.com,earlybirddaycare@gmail.com,sabrinareiman@yahoo.com,letmcg@ymail.com,brandon.carson25@yahoo.com,christinamauro23@msn.com,katielewnard123@hotmail.com,porkyexposed@yahoo.com,mgfbower07@gmail.com,lonniejbeard@hotmail.com,aklittle0102@aol.com,jennywarn@live.com,leyadewey122@gmail.com,neen062964@hotmail.com,info@need-a-nanny.com,dork_britt@yahoo.com,tinytots80123@yahoo.com,caycestaubin@yahoo.com,ivana331@gmail.com,tstots@hotmail.com,bballvarsitygirl@gmail.com,alwaysforhim2@gmail.com,degutii@msn.com,tiffjowilliams@gmail.com,patriciacallan@msn.com
Subject: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
From: Mr. Stephen Fred <mr.stephenfred@yahoo.dk>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – dmghost.dmg-hosting.com.ar
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [826 825] / [502 502]
X-AntiAbuse: Sender Address Domain – dmghost.dmg-hosting.com.ar albanesi@dmghost.dmg-hosting.com.ar

Mr. Stephen Fred <mr.stephenfred@yahoo.dk> <albanesi@dmghost.dmg-hosting.com.ar> mr.stephenfred@yahoo.dk

__________________________________________

EMAIL #2 –

TO: deleted@yahoo.com

FROM: “vikhadd068@aol.com” <vikhadd068@aol.com>

SUBJECT: Re: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!

EMAIL: http://oabfranca.org.br/entrance.php NOTE: I DID NOT CLICK THE LINK AS I DONT CLICK ANY LINKS/FILES RECEIVED FROM SCAM EMAILS.

HEADER:

Return-Path: <>
Received-SPF: none (domain of imb-m01.mx.aol.com does not designate permitted sender hosts) AQEBAQ–
X-YMailISG: fG83VQIWLDuwe8ej5n0IaROXvxrlzu18BJ2irW7rRnkNUMiR 0Ctsgto2LNAskyV2Q6ixNssLOsmnFDVOBVCrL.Ma4HX.zvoh5.y.Me6a47y1 Y.s4vBi98z.8nCoiFrNhF8AthsY6JNRIP0mO3NwL6he8knCzy63JqA9qhhqY FQRl4qMLiHM902WJNFvAOn.XvAyS6gBl90P7phn5AwFtzDAnWp7SjQKS8yd9 2cqKCaMlnKRjdDDXjb2Q70KZ_PcWA5mIrPPIPxX4lk8JBJe._gcgSX6kzAYp 4YvvqU7x6K6snhfvbJKtaMeaXIjmTDn.pLJ6GEKwthBTc3K6CzQF1pPdkRRD yra8kG4Jxtlb_RaSjcjAXw5qpiHxnBAx3Oek1rLM84NqcWLvSV3nRFriYeYV nhI5BWjm8wwT3AcOsJUwm97do1.YsTka4wRMCVD6cqiCuU2jAKvwx1uDI2.b RoFUQReDBAjwqAAHPZLlkdarxo05P1Uwq5jHR99zLNJlOjaSRiMEUe0PS9zs QDsD3ljuWathFexCSe6PKWbyt3x4XQhQYjJ8mtq3elH0LdNeIuahbPv6S4G8 hueVJ.bJ9cI2b2jYCsk1qnouy2MQDdlL5VbiPxDCWp7AsBes8Nb4BepjQsVR w2UcWs9.Sy1V065valQ1_avr4y87pRQOmtt5dWEaxIAO8bWhK4iCTfcE1cJY 20x8ZehazHdzyZAVwjK95yH6Y0LghsrH75EbuSGscuYeXfnXpPOU0lHJOYpM Smn8XIi4jgWio99h4HL5hAKWRirLVLu_X5PDmHnYDie5ONFtGejBROGsblcC rl9jhZH6AJlOWZyqVTRM5Ppp3S6YCnbXEAxRydb6MzVMCUdDrES1gAdSYuc_ i5b5UqWEyedgNzG5O1cUaG9VQQWVQd26QYIhUn1LH8p5cF1d4w9e3Y7VQQ8N MYYqmESf9lsGNdZFCRFIMXXUdD5OQpzT7199rPh0OAQ6e5FssdlgeHW5u8Oe Qm9rwYEstTmh6VWIAnHdJLj59EuoMNynb0YBxAks2F6YXhwIzblZ4az3IDAf 3UW5o76BBwQ424rwxaewfRAxh33BT18DwtTa_1U0vcIPi7ooZSfLIzHxatMM tdMmB1yNMhgNeqj41iMGVgytMBZI7HV5OTRdtnMQsAoEFr2MQitM8bjxFQ4k VUhdeQ30xHi1UVWyJwl9l8xmrHA-
X-Originating-IP: [64.12.227.42]
Authentication-Results: mta1395.mail.mud.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=aol.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO imb-m01.mx.aol.com) (64.12.227.42) by mta1395.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 23:38:11 -0800
Received: from mtain-mf12.r1000.mx.aol.com (mtain-mf12.r1000.mx.aol.com [172.29.96.160]) by imb-m01.mx.aol.com (AOL Mail Bouncer) with ESMTP id B186A382B708 for _______ Tue, 18 Dec 2012 02:35:08 -0500 (EST)
Received: from core-mic004a.r1000.mail.aol.com (core-mic004.r1000.mail.aol.com [172.29.104.4]) by mtain-mf12.r1000.mx.aol.com (Partner Internet Inbound) with ESMTP id 9ADBB3800008A for _______ Tue, 18 Dec 2012 02:35:08 -0500 (EST)
Date: Tue, 18 Dec 2012 02:35:08 -0500 (EST)
From: vikhadd068@aol.com
Message-ID: <52151792.8536.1355816108626.JavaMail.zimbra@core-mic004.r1000.mail.aol.com>
In-Reply-To: <1355816106.93122.YahooMailClassic@web161004.mail.bf1.yahoo.com>
Subject: Re: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Auto-Submitted: auto-replied (aol; away)
Precedence: bulk
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:335928000:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d60a050d01cac1b64
X-AOL-IP: 172.29.104.4

64.12.227.42 — 172.29.96.160 — 172.29.104.4

 
1 Comment

Posted by on 12/18/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“DR FRANK COLLINS” – DR COLLINS PETER

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: Below will show two email headers sent to two different people (including myself) – It’s the same scammer, same scam as well. The header information is different however so check both for the different IP’s and addresses the scammer is currently using.

UPDATE: Dr Frank Collins is also going by “Dr Collins Peter” and “Collins Peter E” under the email addresses / IP’s – “Collins, Peter E” <collinsp@newtrier.k12.il.us> <info@notice.com>  YAHOO-FILTERBULK: 157.55.116.165 RECEIVED: by 192.168.194.152 — X-ORIGINATING-IP: 41.71.173.93 Also,  Dr Collins Peter web52644778980000x@att.net REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com – Scammers number: +2347030115459 X-YAHOOFILTERBULK: 98.136.218.126 — For more information click: Dr Collins Peter

UPDATE EMAIL FROM DR FRANK COLLINS A.K.A DR COLLINS PETER (I dont even think he realizes who he has emailed because he emails me with different, similar names on a daily basis.)

EMAIL: Attn: ,
This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-703-011-5459

_______________________________________

SUBJECT: PAYMENT VIA ATM CARD.

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $10.M

HEADER:

Return-Path: <webxx120999xxxxxxx@att.net>
X-YahooFilteredBulk: 98.138.91.88
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: FaLTslcWLDv_37lDMJwvUepYgmnqCzD2WWiLYIVYEvzWiVdj yeMdZg1sVqQZNMLZIrI8jrEhVaMXPsJIY6kRf0cbjnqQCPsaLbBdN2aERrfI RwOChZVFmKW9DzDxir.njJLHD.QY8j_y83jLRI4.AuI7k8QKdHjPvXXJYEFV 3YQAPmqS_78yqhLNbejZcKD5irk7feyqBo.GgWWRjUtr0XeJzJNqaql0h8sA e8RvUpWShCVHN2SyD1tuM0Deb4D1Ji8Vbh6LO0l1rw9cI0_sIz.vHpe_EiGP kHJSq4cVZ_zI24xSaJVH2nairx_S7dPagQ15pHcUhTSBMqGEgXXNeB1Y2oeP 3JU6qx6vSLkN2q.zt9EL5Vwas.VQ3VnnTXDqHLBdVcKU94hP0GlXAupk.DHM obtlUYCC1aCFRuuf3fyqc0LusjLnspK7JnjoOa4trRGPkJ_SlfDp0ggLrEaT v9a7lqaWeBT9EICtLA0FkLq3C2n40JFv19b2vJ8kTWkPK9_CQXXHvPmE9PZ3 kFs1luoQlTk_lzaBG6mXtSkUeA_7vvUTiNlT90e4_xcWHLkMi_qHUB6.MOXY KpjgBBptr6h8HH8BTrub.bb.IWuBN9wzFL2saNzKwsyxCm4lKMw9.xwDm5uJ Gq5wsKY8oAk.ZAm83V.RXXdQZhrYHzq2HI4TEsDuXnxCeBPNS3yCscgHGdua .5bviyYzefeg3tnvzHHkzRlzxSKw4QvlmuuqcChqscR9kCPiJLD.cgAs4kGP VstUFHd.bksAH552CD3i0lwkON5VfmeiESgRCGTPFvptnIKly2v3rZiX6esg GPPtVuH2VF9JGdJc2Ymbkp7azmUteBWNDdU3UBhVs441.EpCaWrI_sm_fe57 OiQyUOywnO1yRAtKJ_SFta4rGiPKLZ0KmWOm2iWxo40gyrpOgSF7vvvDlD.8 TTvxrpElU4SLFTn.GO1zFIFIOghPlKF4MTDaE1.cfSBA7OvaqPPhZB7CbD_P PbifHGwGIUcvjwXFo2GX_MJ9efyRaqwJ8RNv5bv_PmOjBSyxnqzPybf5N4_3 8R6NtlZnqM1b4Enrf9rnVdKOJneQ2FJhZVcYPrtDlcrfum9mFoOorxfoQHmz TE17GM57C0B.ILT43WlnmpnQdle96RtuSiqxmvsRzRStRdaGzDZuic8L7wei rjZENREYOwxD5PakTFL_xFmWBDMWOtezwqcs9j2HaBsIHEPGCa_w1BQb4H7T Rhg.rsLZhUpnUmz3kwbcPdV9Pc8UNCPtAWRE0QCMgwjeBn0ZXdINEcVudxSA YTcOMC4k95wVfJ8oF7eiOod5Qae2n5Ov7WwjD_lXqOtSBIc3J87zhs.HmSjX 7WlsWTwwXn.I_l4fa3NQ.mKYBKo-
X-Originating-IP: [98.138.91.88]
Authentication-Results: mta1228.mail.sk1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.88) by mta1228.mail.sk1.yahoo.com with SMTP; Wed, 05 Dec 2012 09:33:37 -0800
Received: from [98.138.226.178] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [98.139.44.92] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 198054.18868.bm@omp1029.access.mail.sp2.yahoo.com
Received: (qmail 22514 invoked by uid 60001); 5 Dec 2012 17:33:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1354728815; bh=2E+CXVEN1MfcfJaq2e/eZV5TviX4n2QY/x1KeAa5kws=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=f9JOS/YO8YXlmc9hJrpoWT06BSgD+eIddQyPZn984pugXI47aiHJ+HigDAW5KKMMOSqrOWONnAJiCoEyKoSjzteAYzjouKnJuSd9FFAPV7YDDY5OHZP5iSipgSUv3aNEhW/Rsnl4Ln0GS2YFkeMhoGRqYTKiUP5YtCqljvaDNow=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TW9B75gLmG8YEH2Fs0wWUR6quUgNgKf4vKcOC0lU58OuZZxvfbAEilc6hFgOyOvoldI//PR2xiJZNGeYJsT5o76o0CJS8W8mbj8ANAI1PafbE8IT034u3iHRas9fZymmyVV0ARoaM4Pmz0UzVZK0Jim/YrB1484O5fKsUOiyGTM=;
X-YMail-OSG: WdGt0KwVM1lOyB0NVRZY5rrxYN4NyBpT08THjv3T0blrAYl g.fSaOnJGDgT6qOWJLehIImpPX16weUxpsraTUfiislliLwCl2K7v8Pp.iJQ a9TSaK3Cg8mAMGQLpgboaXsnY0P.gbcdPD9a2TYU3MLMz9.msdkdNVne7srD CGKrYap1ePNIkrvsumj.6_CYvw30FkImKkDHHf5IXtzUrxF4x8.QVPZL.F5P 1sCi9c6SjI1P.GeZm2DnWTw.VoPokMuHr44zOJyF208V.uJqcKGplN1blft8 NRD73m_UrMPrQXsfdMEk9IKg0jGHRledxyRP7NbPnmUmTJk5sWb6g7mibQcN lZBmrszbkEqY7Gci4Eh5lmEYhM0EH9ITd3rAkZfbRlBlo5s8MbxSVEa73EvH muyMHoTdJMpwvibAS8LsfWhBVw4Fzpyj.JdfnQdukkFQX5QRnWlt3FtcARkq hyy26DJRYTbzGN4Eyk0EL9EDXp1SGqp9Lk4FU_Cz6Hw4qjqgVzWqnIza_ijq nvI9omJY1Dw0WycuWs.OkVnfl
Received: from [108.174.51.231] by web184901.mail.gq1.yahoo.com via HTTP; Wed, 05 Dec 2012 09:33:35 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354728815.12889.YahooMailClassic@web184901.mail.gq1.yahoo.com>
Date: Wed, 5 Dec 2012 09:33:35 -0800 (PST)
From: DR FRANK COLLINS <webxx120999xxxxxxx@att.net>
Reply-To: drfranklcollin@kimo.com
Subject: PAYMENT VIA ATM CARD

FIRST EMAIL – “DR FRANK COLLINS” <webxx120999xxxxxxx@att.net> REPLY-TO: drfranklcollin@kimo.com RETURN-PATH: webxx120999xxxxxxx@att.net

SECOND EMAIL – Dr Collins Peter <webxixxxxx266xxxxx@att.net> REPLY-TO: collinpeterclaim1@yahoo.com RETURN-PATH: webxixxxxx266xxxxx@att.net

BELOW HEADER FROM COLLIN PETER EMAIL:

Return-Path: <webxixxxxx266xxxxx@att.net>
X-YahooFilteredBulk: 98.136.217.214
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 2lU7wkQWLDvBCg5Cg1wZtIwDNUzuGrZVVXK9H6ZxiRnCF9q8 3T_Z2xZXeKmdhjE03ZY1nNRa1P6Zz09tc3Suud6PVBq3vexxPmov8AXjPV9n h21FBi8fEfSTSwVFhhvzk7V6R63Puryrkha1Mb3jaVwNputKdVPkDPhjUMeo RVMMb4_9ds7LkdO1tAhp2nowUz6sKBD4buJmSanxkzHUpRwUVtPLKq8B09eN Rl25hxMaIQHn74TwJlEJoWwVxtvh8Jkr9b8xgoPVsHTD4d3rIEAmrBO8jRyd GelLKjDpe6gEZSWQukIvbii_.zMj02LUFMIXNqSXg2JTLp15U5_jUlo0usw3 1Q9ij8R.SuZ80..F80EMLcQO1SXMjqWDf6xkVHWwRChYckM8P0zLXQwmLzCh cXZIqLnw6xfz6lcwu0_mQkN.aX.hIIycQN9E431bkyzpAK8Sh0ATdnfKruuc hDUY3uEtvred._LLnnYkhYpxqfc_nSy4oYmmhRytYX5eJDo3.jrNS61KZPV6 YQ56CR6JtF_A6Hafi5rSLv5qgM4p8VJZi7448tERIhykcwaijsPjcAOenatn YK3BKAuoLWZ0KHPHNvGKAWVEbv9QWSQF39Q.EEP1LmrPyvSdcGkLUJurop.B aYWv4YFGCdGxSazNRDxvtgoiaK6SIwQ.bpgk7uq2vF3rcb50kF6JNxWrLg.n 7Tth7XBQ.W0dZ6SeRl5BddGt0PedKs6csdJXP3rAEuRx9HhVbiFWVgdNijR3 _dNog5Qebj0UNBN3_ZYEN_KnDptPkNdpsJ8OGplwzrinpWeXcnwHVgAbUTdo 18VmNYVRbtilZoPybybViqmTdRB30nDou7y.RzfJPpp93GHAGPmJapCeotd7 c17h.xTgmXwnesQYx8oH1A8HMZj9YMgj2Hn78UbjDz5iO3dLZZQwGJc37EEe Irpsy5SaXtVD8MbmmPkhMrhk8K30Dviwqq4hDE5WgxBlGVonuDQoGK3aEt2T nvWx.JhFmNOhCyTBWuANJwIBh0YVHlt7UHVip3l.jut4onQ9R4CDyP6sbX2c lfshiCRIJ9lEvHbvGo40N55AdITysTVwpsKYdhO1zKO2KEhE2HbINU3NSVAp mVO8xztcsAawulFbZ5PKA.HviU.utyPlT0yMvzwTHn_QINVPcYodx0NOT_5q eROgjgZ35jOw55jeTpgP2qOvmDNkeadY.RrCfkVM_h_Ewvbns5N8m8wKWn4F 71xz.y4o8QBLLz0jb4jMAFmUekk5PrMNZ0E-
X-Originating-IP: [98.136.217.214]
Authentication-Results: mta1191.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm9.bullet.mail.gq1.yahoo.com) (98.136.217.214) by mta1191.mail.bf1.yahoo.com with SMTP; Fri, 14 Dec 2012 03:36:45 -0800
Received: from [98.137.12.58] by nm19.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [98.139.44.70] by tm3.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [127.0.0.1] by omp1007.access.mail.sp2.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 191480.20265.bm@omp1007.access.mail.sp2.yahoo.com
Received: (qmail 75889 invoked by uid 60001); 14 Dec 2012 11:36:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355485002; bh=2TQXuFSDKzJQh2ItoNfMPDU7xRHv3E+CGrBMw/1Ns0g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=MdiZ1jC0egJ3jeK8x+wAmlqoZyMp98AiD2wzzG+et6zE3r4jYBfuYUoMttuA+gtIjRNvWXQLaTtg0u215rggtB9Wpx8OQWJMI3iQKHU+C0WdAONnnis/01rbGL8rLVp8QUEopIB3M6ep93e/l0o2GTcA+2tm8NmXdnIzOrTvHgs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tLrXvMlZ1AfWS1oRs/q6h6HUMYi/LUcbnjbU0+wRSPWQr/1rUxJ+mPFD5IS+2J+xhqTW8fnpv0P89+O46Kg0ZaIi52L7OqBpBWUtxGIOrGGuRKY65NxHoyuM/9fcPmg6OxN2t9IVr/IQmo5FIYMQAlTgtLYGxzIx8tus9kjh4UE=;
X-YMail-OSG: 3ICaliMVM1ngoXiqNpguRRh2iYwL78sXplySeVxex0hGQX. 9amYG0XA4OBV26LpGFUMshO4W2d_k7Z_a2Ijy9UC4MhQCts27.mEJf9MSo4o gLC1yrqEZW2qVfkENJcHqLvP6x22811UE_jYQp539eFIcLW5RWUDAU4t9CGn OdkUZ.I3db4Y0_pc3qHbfrO34x9zDWKUFRwLqnQ.wNCnHD8dS3WSTofCFWm8 DRISKdISfGE2ytoF4IzvXsFuyje2c_qd6tqdnmTw5Z9mBhssXb94A4biy5CF qnxB_1TEOjTWqKHDrBY4BU1EdgOFfYQNqvwQ4XtGhinDlu0jMGic.YAmQBDt z00_WMAOIdc6llHVKxJwh0yh_xgWL5D6rgLOTnmN2Mo2vI.t3Ls.zQwRBRhe SaGInzRlMMto6OJd7AVEbCSpnmZYicQHhMCbjMxGPX2KPd4Tv0fL_cU_plDm egb7i9XYQocNBXLDzdzIfmk9Um9FTZk5b6spv87aUQEG.1MjrCbB7UdYQ0uO JpvS8DhYL5XyxrsNNIFxmRpV2b8I07Jm9LTn8wKS_hqGegIf5feMr.9cGJzH 7hgKyGs0sihPG_k5JCSaI1yCjgZYK79b_xhXuvMQeLOYyQDygzxrr8813RrH cC8L9RfM7BsB3QMN75qyv.pCG1ZbybDazG.TyLuGLgdSNZ6KwYSh_mQ–
Received: from [172.162.63.104] by web185004.mail.gq1.yahoo.com via HTTP; Fri, 14 Dec 2012 03:36:42 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355485002.70723.YahooMailClassic@web185004.mail.gq1.yahoo.com>
Date: Fri, 14 Dec 2012 03:36:42 -0800 (PST)
From: Dr Collins Peter <webxixxxxx266xxxxx@att.net>
Reply-To: collinpeterclaim1@yahoo.com
Subject: ATTN:BENEFICIARY

108.174.51.231 << 98.138.91.88 <<

________________________________________

Click SCAMWARNERS for email to below header which was sent by the same scammer as above.

Return-Path: <web1xxxxx12000bvvv@att.net>
Received: from nm12-vm4.bullet.mail.gq1.yahoo.com (nm12-vm4.bullet.mail.gq1.yahoo.com [98.136.218.191])
(8.14.4/8.14.4) with ESMTP id qBAFqXcC024177
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from web1xxxxx12000bvvv@att.net)
Received: from [98.137.12.190] by nm12.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [98.139.44.75] by tm11.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [127.0.0.1] by omp1012.access.mail.sp2.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 169461.26588.bm@omp1012.access.mail.sp2.yahoo.com
Received: (qmail 11627 invoked by uid 60001); 10 Dec 2012 15:52:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355154752; bh=6IEXAnuDHUzPM2GG6BZxFSMMGXUzzTJH/x0iCKn3gNM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ZNpQDXqA6YKLygx/Mgp0kaQY3hShe48iYfThTEb8Iru1MOJkFmAxYG7WRpbG0vEzb8sVOXBWUD70FlpkHY32sc3lcnQRUH9EWyjF33/6bxeK6Wl/Hf7syjgMKen3IrPrVrQM7QP70aIkEYevI/L1VoeaKi0X05zrl/mkFKlZJB8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=C3u05KWRUG4yec6yjYc58jVUZqKqPra/xpCRYFkhi2pi73G7p5xYJt3avwhjC1pd5gHT2g6XMST7DkGiaRchRZYYa/jODcoZt4R+AhzCt86vNfdJ8r54ZScNvyU4Y+I8mpF49mKbuYWh9Qw+6o/yW3f8qclaMsyNAu3ATH2SDAs=;
X-YMail-OSG: p5tUyUsVM1nSNbno0XpFEzLZade1sG0k1LIN6NkNDDbP4ts
LfsdXeXxUn6OgEkvAzJFUKDvuIBVeFzZtgkksCNzN7YM7NYxZZELCIFArcbu
_mj1sx3mmaRRFlhLnDPO0Ud9acKn6RdXUuy0Z2D2THjsSnJnY9sU7qqlRMsY
RFxlusC6GZdc5g0kSlEJ9Q6m1NFt621vubnU3dlWx9BHYYswZA3GlYEoIQOZ
znu.EmXiL_e6NkgO6Xi3U8TlgxDHH.J2V.gjmQeJjgeleOz.cmjSiQf65.01
pFSPJQ.uJV2ZQQDmhoA_f4DIGHOLzIEM54oMAKodxlcGehFjRCB.Otx7qJ99
LLzSejt_DN_c3T7KOCmzn30gBLvM4NW04V6Q7K4N69QA7XOIUNPQflttOcPQ
QUh_J5vkppPwzXQ7X5ZwbRUsdfsHhuaz1XhXMvrY6vOWGj_WLL3kyxKoNNTD
o2PEbuViIVuMH9ocliCObq_Z7Olxp0coTXqA6vhkTd_030aE_Rclf5k8sFU.
neOYXj1nWJo0ZcsSoOLW7
Received: from [64.72.78.27] by web181404.mail.ne1.yahoo.com via HTTP; Mon, 10 Dec 2012 07:52:32 PST
X-Rocket-MIMEInfo: 001.001,DQoNClJlY29uZmlybSB5b3VyIEFkZHJlc3MsbW9iaWxlIGZvciBkZWxpdmVyeSBvZiB5b3VyIEFUTSBjYXJkICQxMC5NATABAQEB
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355154752.62957.YahooMailClassic@web181404.mail.ne1.yahoo.com>
Date: Mon, 10 Dec 2012 07:52:32 -0800 (PST)
From: DR FRANK COLLINS <web1xxxxx12000bvvv@att.net>
Reply-To: dcollins@kimo.com
Subject: PAYMENT VIA ATM CARD.

 
1 Comment

Posted by on 12/11/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“DR.CHINEYE NWACHUKWU”

INHERITANCE SCAM – NIGERIAN 419 SCAMMER

UPDATE: LOTTERY SCAM – SAME SCAMMER – CLICK PAUL JOHNSON FOR MORE INFORMATION Paul Johnson under <westernu749@gmail.com> officepost466@yahoo.fr IP 212.82.109.207 and the same receiving IP 41.216.44.199 (I’ve been baiting this scammer but stopped over a month ago and still receive emails daily. Each day the scammer emails me under a new proxy/fake IP, email-address and name.)

RESPONSE EMAIL FROM: DR.CHINEYE NWACHUKWU <office_dooog@yahoo.cn> reply-address: <officecustomerscare@yahoo.com> is now going by “Office Customerscare” <officecustomerscare@yahoo.com> and sent this follow up email:

Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

His response email is under a new (fake proxy) IP address of 98.139.212.160 with the same receiving IP of 41.216.44.199 IP-Location: Nigeria (the rest of the header is below the original email/header.)

EMAIL: WESTERN UNION MONEY HELLO MY DEAR

THIS IS SEVERAL TIMES WE WESTERN UNION BENIN REPUBLIC ARE SENDING YOU THIS THE SAME EMAIL TO START PICKING UP YOUR PAYMENT AS WE TOLD YOU BEFORE THIS INFORMATION REACH US SINCE LAST THREE WEEK AGO FROM OUR CORPORATE HEADQUARTERS ECO BANK WESTERN UNION,
STATES THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST $5,000:00 FROM YOUR TOTAL (FUND) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND PAY WHATEVER YOU HAVE FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM $250, TIME IS OF THE ESSENCE HERE,
SINCE YOU DON’T HAVE THE REQUIRE SUM OF$250, SO GO AND SEND ANY AMOUNT OF MONEY THAT YOU HAVE AT HAND STARTED FROM $40 TO UP $250, WE WILL ACTIVATE YOUR MTCN AND SEND TO YOU TODAY, UPON RECEIPT OF THIS PAYMENT,
BELOW IS THE MTCN OF YOUR FIRST PAYMENT, SO YOU ARE TO TIPE WWWW.WESTERNUNION.COM AND PUT THE SENDER FIRST NAME AND SENDER LAST NAME BEFORE THE MONEY TRANSFER CONTROL NUMBER (MTCN): THEN CLICK THE STATUS THEN YOU WILL SEE THE AVAILABILITY OF THE FUND ONLINE BUT IT CAN NOT BE PICKED UP DUE TO THE TRANSFER NEED TO BE ACTIVATED OKAY

1. WWW.WESTERNUNION.COM
2. MTCN 0560139994
3. SENDER EMMANUEL OKOYE
4. AMOUNT $5,000
BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST 5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP THE BALANCE SUM. SO I WANT YOU TO SEND THE AMOUNT YOU HAVE AT HAND. WITH THIS INFORMATION BELLOW. AND UPDATE US AMOUNT THAT YOU SEND AND THE MTCN.SEND THE PAYMENT DETAIL TO THIS EMAIL,(officecustomerscare@yahoo.com)
1. RECEIVER NAME… Ikwunne O Anthony
2. COUNTRY… BENIN REPUBLIC.
3. CITY… COTONOU.
4. TEST QUESTION…HONEST
5. ANSWER…TRUST.

THIS LAST NOTICE TO YOU IF YOU FAIL TO SEND THE MONEY TODAY YOUR PAYMENT FILE WILL BE CANCEL FINAL SO RUSH TO WESTERN UNION OR MONEY GRAM NOW AND SEND ANY MONEY THAT YOU HAVE AT HAND NOW START FROM $40 TO UP $250,
CALL ME ON THIS LINE AS SOON AS YOU SEND THE MONEY +22968377742
DR.CHINEYE NWACHUKWU
OPRATION MANAGER.
WESTERN UNION DEPARTMENT
PHONE NO.. +229-98677751

HEADER:

Return-Path: <office_dooog@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.73
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: YTQQLVYWLDtr8GvJiSxswwRjP7wnkQFwbp2etVmaNl0FiaXv WEWUyzcgnOMV_Qxqdh9W6bDVUk0oJ2n4H_.OqH3FVMd.Y5SeQLY8WPB3FzvF PDksuUJsc8jsOTNRuyWFfYR3l5wAZDJgIWuiiGdSmgdTu68C3rqyg3O3KdWs h.EODC.8..TyOEAnTAvAstMaGS8Ncy0SIJObOaOjtoBxXs6HTVJjL2nLqQq. V8jcqhibon.BQ9tsji3ubP5LyOllUnFxk7kElsMu7n0vVWWSlivsKIy_S5n1 TnjjQsj6Z6unrH0LPjxjeSxKbAjjeU63LUw4W.D9he2EEs26JXAWNlSyN_RA mHtPVevectbOeAKgC.m._frVA4tVlBJnUDlnVGkTYGWpICSFxTT9LPW_EEeJ l2XotLG4IwrFUfDfi_oT5YhbAo7jPwjxliFYxO_jm1h_wnaqEAIoQUqbckjp VIOOy.9bM6cUUjn4sXuLElKl.HyFw3R3uBNExQYnmx4RLVovyUrURD0ciS64 y4A8HjS0d8vV45llBD7G.G.oahtQT4gZsScBryrPWxrTQ3pLGp8tSk2zK.n2 eeTHvEQSRnZIbN0eOuFt75vrczEzEp24_Wxy.kkTt24Ghr67RLbx14T8AWJX oN_fjH0I4fLe4bZg9kWJjC5AIUtbrQ2yjsGa8Rqmniy4tDcDdplQBJNCIttH Y6iPtc8dzN6XRG89qgna5ydQU4LybEz.EW03VSf5bIAK7G7wCnLMhQCLLxgk ly1aVYK.aBw2ZGGdBfsnGxEQGmjWgPW9Y8yaS38MKaKk5BlVKjdKTv4Du9tr 7v1Q0Ahg1rbEQYh8bXhTn4R03SCnAeBhjAproiLkSzIk_nlJpbqzYS_tDYFN eublP_kgPayXAilWx.ksYpuHs_SFNkLaI2tWIn4oFvj8Hul6cqhvS1pJwTK2 8xjAkTjf5BRCJ73jx3wjykpTf9CXKVLe4qVn43MdJwIGfeb9p6tuMcY5ae7w c0GAOM3ZK4N_pO93ZKX2sJA.aGW8uNMDRTGyX1W7L7EKmy.ZYJQMjrOnd1Pp 8VcXJpyj7WUoKAXFir41peZR3kuJAGhW1GbparzRRCsM53A5wxeRRRvbeQlP o9SRMR9hJ7G68eklKQlZiNlLHYAN75iIROMHam0GQkoQl658wOksxxV0w1yE mwld8PgOs6.ieT5hfoq6JOm_CZnFaWvDCuNdzu7iw15xSb996aG1QW0ovKDm ivdO.r3OOe2nezrbgWHscU8DcPD0SD__8p7aOAMpHGW.0iovFBMBhXwhAkfD _c5Tjzjt4SpvsBLMK1O5olWM9ZTOgPGebcxgdbmbvX9l8w–
X-Originating-IP: [203.188.201.73]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm9-vm7.bullet.mail.tp2.yahoo.com) (203.188.201.73) by mta1299.mail.sk1.yahoo.com with SMTP; Thu, 15 Nov 2012 00:06:47 -0800
Received: from [203.188.200.142] by nm9.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 597653.91745.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 1033 invoked by uid 60001); 15 Nov 2012 08:06:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1352966804; bh=sqgSO8xP/LR+hXQMdA2e6Ah1eNeIaTHiSoq/jXQJhqw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Yws8UW5RVEL2oPJjowNq8quCXz9OzL0CxZrfGMUtTLq9P49zyzmh4cHIIaccgUS6cadGW2uanBjRYI1LgN7qnDfXWjIk1fJUorh8XSrtSnhaoUyUmvLuinqV/FZQLQV6ArVs06/OCE6rJG6RrChDzUt4hI5ALQRFiJ3ZkZnKHy8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Lytcrsw3vUiLafw/lAGi2G0Q0Tb6yrnlT4ruv+ReTjQFhJriBDR+YxFNsAJmBt2mYpnus+zpYYvm4eYTFIsF0fqvBhc21W3x1a+iiSAPgC+CPtqGdn9cWtDgfR5n6UI9cuY9jwzCd+BU5PzXNKOXbca69Rp1IZVW4Uh5V+L0jKc=;
X-YMail-OSG: O7Gnv7UVM1lkD_jTVvQ9yvdVYlFxea2vZYOteXXHXMW9Qko jdT9UCaq6
Received: from [41.216.44.199] by web92416.mail.cnh.yahoo.com via HTTP; Thu, 15 Nov 2012 16:06:43 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1352966803.94317.YahooMailClassic@web92416.mail.cnh.yahoo.com>
Date: Thu, 15 Nov 2012 16:06:43 +0800 (CST)
From: “DR.CHINEYE NWACHUKWU” <office_dooog@yahoo.cn>
Reply-To: officecustomerscare@yahoo.com
Subject: WESTERN UNION MONEY
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1574124242-396125434-1352966803=:94317″
Content-Length: 14282

HEADER NUMBER TWO:

Return-Path: <officecustomerscare@yahoo.com>
X-YahooFilteredBulk: 98.139.212.160
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: A6td62IWLDuBmelQKJEhijgTEL0P5R2xOPPy_._RsvsdzBaH yiBrnQT0925psK.s7SNHcBYe49AU0Ul3ICxEk7jQrKYkMrnITllaNYEqTeoQ pszSKc.CXds6vyKRGay5HbkIm5xdJL06qMYJeuDndMfXhl.KtXNDPBcZw0BO e7rSU1yq9Tq0AIKYLibJS5Ji7cCOJbYxKoA4yfOsJcdoBZHzSv6nABQ1E6Zn uABQykHao.NClcwPP.1B0.6GNP31WL93qUf8JoRj3B6BR75xwrIFYRdUy4G5 262Inle71_i99iHg0IqLKmQNy_9XV4J2klJ79za74Jts7ST_TwEjurl5e8Jf _PAY8p3MdVI4fsKogQpHgxR1s5wZIhK1pQhdQaLszisflXZsORhhjrtlapUr A73MhrwdcfdcXSqVSmfpwdzxBXkcV.4BTYIqHGTGZqh2qwsUty8igYWrIIoh sDVyJCRsLDsvD1rqVdGkrQYLcRjGVehq2_k3u0KTIr1aNYkrfLPSdcEY1Bwq _gBGoox6wsKZPkPuqCx89Hzc4hLvUbS8W9BFJLxlj2Ey4nLAmaKnIpqZdMjl 4hcVV8tlsvsuT4tYNW0lHggMDR0Z8qztWv3TT5X17FkNatwLR9Z3cgkoLfCe h1gP7PEELa47jNfNMRIofd8zaQNS9kVxpKl_mOEUV16Q5hPPsaEiL6jrdBvJ K6WVdOmRxYs9LETX5HhMZI.tT1kO_.t.VDGWOxQqI5bwTuY_si3Nmyg1gMMm T8G5YTa4tuftY3yPi.IVm50h7zhHPJYz43C4ze0iES8nuHCXpgcdO8QkvWJB rul3g18dawtTywGuPNr8L3z3YwhxzwgJcvrBnnqbT5tMGKriaFsDtUb7QCVT 2w59IxZtgg9QIbZbCwx.wO.AS6EIIO3Rg5h442qemVR0NnhI_i7tXeZ5Z8Xk aQNqbSBI0ZdY3J98pAMrUI4GfLJlT4aKyCWKpbXobriv6gfG7HkyNwKTik71 7D9lycclsvAe_RoyDEcUHh7NIQjBllyIJ0dBWYAMIc8k6dp2QTcItskcss36 r0H0FyF1YAuULXqdMRUTwafuLsHIAlqmvCKb33f8Lto0_eqFpy7rblQ1lMkc BJH0Jy_MYFo8JsxlaV6gIJJv30.DknRRqr0e79ga9ucQfYVgmaU4DApKHtwd c_AgySu.BPiKcidO0VJeW8osusxFm4T7JiwASuwuzGclt9WW7DJbihfcQK7u ThBXA0In8NnC0stWZn8vKuG1.rxwVgaK0RBVZrsxG_Z_Bz4ilkET7YqZ
X-Originating-IP: [98.139.212.160]
Authentication-Results: mta1187.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm1.bullet.mail.bf1.yahoo.com) (98.139.212.160) by mta1187.mail.bf1.yahoo.com with SMTP; Sun, 02 Dec 2012 22:54:20 -0800
Received: from [98.139.215.141] by nm1.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:54:17 -0000
Received: from [98.139.212.195] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:54:17 -0000
Received: from [127.0.0.1] by omp1004.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:54:17 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 296448.58568.bm@omp1004.mail.bf1.yahoo.com
Received: (qmail 29676 invoked by uid 60001); 3 Dec 2012 06:54:17 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354517657; bh=kJDT5cjpbLJ82eNurct1MB2GVVciWeGexi7i426BwJ0=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=LDRcgojsiWMlx1x+zCJeK8Ij7oJzAHg3xJYyco2XPFGssWdcTEnSoZAGjixPokWJ+LDm55PhuiuBXjOJfsPy6T+9cBwGl1tr3c9YMIZqEDPJDTN71V1pLXxI0Z53oNGyvQGAKmgnZ5zLuqERI3krJzVxqA2tm5oktP+RePDjv4k=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=xzEPklSUYsGtcFrb03xI5tsNxxPpLgFzq18y0B3ZDo3LD8wtm6LVTwMrowI1STv1RL9L457GvMEljRaUkoVhdbBdV1STmPOxSQd+Y8Y9sci9kKl6bsG0WmAeJyC/t7sWZj6W6k9zb8aPt0VG1++MsK/OPLrVlDdO4+4nkufIhXQ=;
X-YMail-OSG: 6N4vh_4VM1mbdEGhvO_RyhbLAeLnsPGi6s8aQaiHe8YX6W. rhuE7fSBvQ_ftU4Al5JgYAo2Z.5DOZ2i59WMXv.THlBBKjJP6NpUUvxYnjKu _Ch_mo433YiqyQ6hPEZDCdVAvfc0zg8.lue8uGl07GOkw4dCa5oKTjUTAm99 HV.Cu01qyMkmDo6cO.4ZIVBnQuvfS2kXm5CUxG73z6a.usxaxPwQIaHHCnVc 62hrAx3MizJn6OKWk_tno8l8aN0E0q3ZqZ3MgL0J.ELjO3LM2OUOTDQq4UMV MpGkfD_TVZ1Ub0D_mAZviZbdEGcjVPrLPP1P0gwmgc.4VNHtsoc.NbzI9dst 1CY1zoGFzHD8VBdTiapnjUaBLRd_gzJW9wxO7UJN1lbkYeEooyqEUO2rlTP3 8EnxRxTJVq8ufB2a4HIoWYk58FVBQOYBUQt2qeofOJ.yCB5WMpCTnSWAou1R FB2YGoeDoR6EwEM1VjresV0AXyzncUORA7KxmI2VazxlIWw8OaIyI2lJ46Ev IMBLQGb8.z8msK0PntWCMe8q4VFGbHEBTrE7_MCCcFlF5jOQHaBkH3kSIXcz 3dLNSl5INWPJkgb86z9ep0VZjC7REgroyqPtENcY2HOfwvv7Nj5AKPnpGSHE fnttfWkSDsb6azL8mMX7.USb5gpo4YndcGUMR4q6eVNJPT9rlyq8ikAX_y9H MGakiGkTmX61IKpy6Eh2DB3b5KyvGe2L.8Xsk43UqPmgIRxV2.XWcPjfS3A3 dbjDPDVukFI_K4XlNP35lyHjDvUqqQW76TSNEwIcgvDqMDlHGqZtu1udDwiW bKKBOPlKfuwA0ybkhD_qMkcjmbfdLaefAP9tBMLq.C.inNz4Mc2psagyYQ8L 9Rd11ST_9FoHaHhMaAfw7LZxBv_BKfhwrcYm3z47ua41oaexPi2rM.gi7_jr eErSGcegHPgGDu4k9QdQZnlef4vyJh6qVVgSyNM7kREotHk4q_4YDUNLnv_y ytY9frrXOKDuQlQuL27qL0OzDNT06xLZF5qQxDX27vpxRQIk3ogG6Zj0E0yU QeJjwWRUQ.f9vkaGHImfB2lSmXDVeiOPggMIa4ca8vI70ulU8nUbo7H0Iqkh QAK_UHRHySczm54TBpHFMXJ.PYL9i6g0XZn355ZS0hBg9sUF0pSnH4dRkFzo z0OdBlmbq6eh_Ccnkb3lFuyiG2hg0DYRmCAnHRgxrbJRwldN67jL1q29hBYv 5sPP7P.l868cM05.1wYpA.IyWxGZ9jQzOsv.rNCo0h3KlCWKq12K.n2q.ums NfL7jWHpgFzd4prV2IJXj3annZG8eJjh.WR_t1d6Lb7YaRgnrhpjBGsGJEGY tl7E.ZLgdGnoNsGyPl5uMX0KzXx7xgZUDNwcfPLM8f46kK7PnkLygDDck4RH kMeoO6C6wundts4OTXJNTVtYa_RsHIag6Pnz9gpJMIbDACbdlLkx0dIJCrO9 hPNqyxguptR9A5dSXr18lS8XXCSCK5gOKJLnO.9KZOuiEClvtS0N6WwAWZrl X2TMtwuPI4GWk6uZsLjYkjnhzjK4Mue.pkkyAYOsx0nBrF0SqClph.mLP2gg RhYqCqcizaYXnSMxyfaoTk_mXOGVwkQwT.0pebeMajeWZPdbnj6zDFyB_RtG H7CuPDxc5pWFpmx1bkgcxV7u1OUAD86cTP5eaMSMPAqAxvGh4TowZNhdna7q slJu5uK3vme8zDsu7tZsILoCZMYQaTeofrr11QpU10u_m3CHKahxlTmDZkNO 7p992wagF0rF7Bdi4y7GzQieBnbT3KxvtE_iqPB.CxU97R34AhS54EMNyoP3 SiSQHLkKl2d2j0KpBNsM2HSxrAEU.kNZELw6bddzBXAauVDntm09i0JGANED G2xgGt5pEO2Alp1qtPBXd_99vBqB5HT7apOhQaBTsv0XAjNF6Li6F1RmvD50 j0JV3aj8sI_1BsYTUE2yC.ZgDSB7SZZ.Pwb9geGqA_0sX6hekZx4pkDG3sdP DBP..MfaKKmAM5w0DCD4o8BWgmTmrR26Kk4xKbIrxjGAgMqUl_waE.ECw_pY Y_Y1SJQ6cfGYqnA5yzOun8Eo143DJeS5s9IGCcTObOllEy3eUFK6nnRbOJs3 lULboYK_jjrkdKgvmp094UDGXja3TAzBSgYRF80h9bxhA3KZcdbDgpohqyHu m6bU3Q_nLyZJI9SQM64_gK7qBC00VeEEk49nJmvqiWCkZ5Uy3AGJus92STx_ WAVnfiNnIYWk3ZzJApHqt8AiIVXkyaFeBWp_Fh3qoLl92IP0_HFJUWrxIv3L aSTEBDdjcpzTmABNgDMx7K8m_FfJ0jQIvVXCrlyTd6rUzr3uBBotATWAWYAj oZDlW5yfOI3JL77KWHti.eweN2ChJM2PjUEFOf.bV5kOFMWLXAcDRs4wbXLd yrml46PWmL6DFLXgiAxgukFjqtngKvuLYspZZA8Wckti7qbw1IiRShAGeFrh OAGrEkrAuQP7QuAqq3GzL_k2gv40JNwF0c07nBYWRnmV9I9tCMbVQ44uePKv LQTVW8QKtVms0JkSuETtylaRgpYVTI7kg_t47zo33UKUBUi1iuCFhiPnX_Yu wbOaPugLirBbc45fE_ioAVdMCBb4FcWvaZsGIlP47X4NjQzagetkLuf9JvSq RHJlD.eVSXsO55Eo7kpxOR7eMZACKC1xI7c1XJ5fJguDWlIusVuFgCLNO4cA t7A–
Received: from [41.216.44.199] by web161602.mail.bf1.yahoo.com via HTTP; Sun, 02 Dec 2012 22:54:16 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354517656.28058.YahooMailClassic@web161602.mail.bf1.yahoo.com>
Date: Sun, 2 Dec 2012 22:54:16 -0800 (PST)
From: This sender is DomainKeys verified Office Customerscare <officecustomerscare@yahoo.com> Add sender to Contacts
Subject: Re: WESTERN UNION MONEY
To: Porky Pig <porkyexposed@yahoo.com>
In-Reply-To: <1354346435.35920.YahooMailClassic@web161004.mail.bf1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”406169123-855337282-1354517656=:28058″

DR CHINEYE NWACHUKWU – office_dooog@yahoo.cn – officecustomerscare@yahoo.com

41.216.44.199

Associated Email: kennethkuye58@yahoo.com.ph; emscompany78@yahoo.com.au
Associated Name: Kenneth Kuye
IP: 41.216.44.199

chukwuemma57@yahoo.com.ph – 82.57.200.117 alberto.tonietti1@alice.it

Received: from (41.216.44.199) by alicemail.rossoalice.alice.it; Thu, 28 Jun 2012 03:10:18 +0200
Message-ID: <13830a382f0.alberto.tonietti1@alice.it>
Date: Thu, 28 Jun 2012 03:10:18 +0200 (CEST)
From: CLERIOT PRUNE STELLA <alberto.tonietti1@alice.it>
Reply-To: cleriotprunestella@yahoo.com

Received: from (41.216.44.199) by alicemail.rossoalice.alice.it

Same IP – (phishing attempt) – Mr Eng David Kalu – chukwuemma57@yahoo.com.ph – REPLY-TO: ww.ups.com@superposta.com – Received: from [41.216.44.199] by web190206.mail.sg3.yahoo.com via HTTP 98.139.91.244 Phone # +229-98344889

Mr PAUL JOHNSON <westernu749@gmail.com>

 
Leave a comment

Posted by on 12/01/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

“MR. D.P.O JOHNSON” dhl_compay@yahoo.com

419 NIGERIAN SCAM – EMAIL SCAM – FRAUD

The below Nigerian Scammer is VERY Persistent and doesn’t easily give up. I’ve been ignoring him for at-least a month and still receive at-least one email daily. I’ve posted his emails and info but he is always changing email addresses and giving me ‘agent’ names, and it’s always under different Originating-IPs. below the email and header is a list of other scams posted under the same nigerian ip address.

 

EMAIL: DHL COURIER SERVICE COMPANY BENIN DU REPUBLIC 

Avenue Mgr Isidore de Souza 41 Blvd Du Mongo Cotonou Benin.
E-mail: 
dhl_compay@yahoo.com
Tel: +229-68377742
Attn: Customer:

how are you today i hope that all is well, my dear be advice that you should  go head and send the $149usd immediately to enable us. Delivery you package within 24 hours ok. So we look to hear from you immediately with the payment information before End of today ok.
USE THIS INFORMATION AND SEND THE FEE VIA WESTERN UNION 
Receivers Name………… Anthony O Ikwunne
Country………………….. BENIN REPUBLIC City …………………….. … COTONOUText Question…………….BEST COLOURAnswer…………………… YELLOW   
 
And as soon as you send the US$149.00 then send us the Western union Details/ MTCN Number / Sender’s Name. Because  as soon as the fee  is received we will dispatch your package and  provide you the tracking details for you to monitor the movement of your package while on the transit to know that its coming to you.
The US$149.00 requested is for our security keeping fee and All necessary documents has been tendered by depositor.
Below is picture of your registered box.

Type: Diplomatic Package Size: L W H / 04:10:13 CM Weight: 0.29kg Color: Brown

Yours Sincerely, Mr. D.P.O Johnson DHL International Express Courier Company Director Benin Republic Tel; +22968377742

CAUTION: THIS INFORMATION MAY BE CONFIDENTIAL OR PRIVILEGED INFORMATION. IF YOU ARE NOT ADDRESSED OR AUTHORISED TO RECEIVE THIS MESSAGE, YOU MUST NOT USE, COPY, DISCLOSE OR TAKE
 

The last part is the funniest. The scammer doesn’t want this information out in the public.. Well it is

HEADER:

Return-Path:   <westernu749@gmail.com>
X-YahooFilteredBulk:   212.82.109.193
Received-SPF:   neutral (212.82.109.193 is neither permitted nor denied by domain of gmail.com)
X-YMailISG:   ri8PeTQWLDufFhNVhMTKz7_9F04BnNPKMD8_fY0rGbtLSXJW 2Pbq0l7atG1.hyuzi790ASC5QcdKtobIYk1Emzm23zOEmZWyB_QYAoMJrlQE JCigHjfZ.uVRqOfitmh7hqbF6ku0hRzE36wXA0iGcobufDqI_2XjI1WLjY5A CuOT7lQUcYGPQdbxO2dBuslK6JEDuIP9YIWBxK0ijt3bLo9sR2AQDJkxU4Fq cPNN_P1vA_YFF5UhKmkIaHFQIdRXeDCOzSuM2NJStZ6b5GVnsA0t9e.J51F1 zigvYjLvpgIx_I5kcJOHSGitXn.4y0wcD_N0nZpF7Avx7jf1nY_Im1TSUxOY S8MWIZ7NUSJJMViMcj9Ay9NDEjAWeOJjCDPSBBzMqS3Vpk5b3lec.zeG5pKq pU5v1HSxR5T5E5bwURikWETXII4ld3dKwdzVP7Upe3QseNP4GT1QHx9kL6CK Xk.X.e7Aa6cNQ3L9TxgIsjUilXKYa8o7E8qKKcNU6D_98AGffgl1eZkgDzCy lMpbCCTYDVw4QTM.8IUdx1ULjC1w40akJCsX2sHujICyUszeB86UlrIQZnDq KhYDG2AfcFfiW0l9Rw5ARGXmWkEdscDKh6A6459_x2Yu9JgrpW6zppgPSOAh hSlXsUjusqP1zzhxSqKfLLZyA137OjiF97QcF5Tduy6wPi.yzRcVQBjbJJ4B 3bXU6xLpHo4WwdtBdG54zXaw2G70ZlBAvEBp9yU6DafCZmFHVQeRDixpQqv4 bKjA2uNQQspdfQCCXHhhrPvYmHvnJ4VZ87yPghyMDwEPpY4s762sujxnFKIj l5XEuJ.KaUsYFTT77LJnvhIOUbhgyuv9NqFypvKmZmLBWLnK9GxVDkvn_LT6 DYR7MtExqgQVje677.OXoYHXT0on4nycmOyRQpP9pe4CUuqYJ0yW30aeJlR4 n0FxIGbVWywqEqDczxtn5wNAvZiRFhyepfac_SQVNH64s2FK7KmJaWatwRWW DaL.8YrTOVb_rTkdlJNObrl9l2ck3JwF01eG3Rso_Lif_IXLZVN.iynqCRJG rRL4yig6Zabl0DUQmQ6e3yg2QNcUKAk9NIEwRdgNHq39w6v4Z4qe.kFBW2GT yjCJjOkQXB9STMOxGHHfA5LAfbAA53qApakMIsYlmPcepbOVE_yATLnzGL_t ig4l_1ukkpigli19hliexvsOA3HrPynT8RtJjUqqDJbDitCF.cn43eGgDJP2 6IAgP6BQ4Oky_IufQVuc8suattlG98TSmuEMOo5BhmCtBerVtFda60lMRM3y YFMmzUyjZn5OacwqMQ–
X-Originating-IP:   [212.82.109.193]
Authentication-Results:   mta1086.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm24-vm2.bullet.mail.ird.yahoo.com) (212.82.109.193) by mta1086.mail.bf1.yahoo.com with SMTP; Wed, 14 Nov 2012 08:53:45 -0800
Received:   from [77.238.189.233] by nm24.bullet.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
Received:   from [212.82.108.243] by tm14.bullet.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
Received:   from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
X-Yahoo-Newman-Property:   ymail-3
X-Yahoo-Newman-Id:   795423.69197.bm@omp1008.mail.ird.yahoo.com
Received:   (qmail 71248 invoked by uid 60001); 14 Nov 2012 16:53:42 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1352912022; bh=YJdP0B3ArGUfIDfK+tFdY4usbtMSeMfxOIR+VL1Y3Iw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=KSOalfFpTYzmrFm8ucVEArfJ6A09mSCj6QSfJ/bmBjx3ntM85nIw49yOHwPEo8d8aKg0OiX/hx+yBZNf2WVOyNe2DRMb1gWujp4KLWpJxujHaH21UU7+pRrqUh5c4mpJQSKVWVQ7IXseBsU5x5L/tQRTj4sYnZA5r5GZOePZ+Co=
X-YMail-OSG:   OZ7LhD0VM1klb3DjyvlFkhMZSOF9Kk5yIkuHnN.ReaQhz8A 2eEq4WVU4
Received:   from [41.216.50.26] by web171306.mail.ir2.yahoo.com via HTTP; Wed, 14 Nov 2012 16:53:41 GMT
X-Mailer:   YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID:   <1352912021.69977.YahooMailClassic@web171306.mail.ir2.yahoo.com>
Date:   Wed, 14 Nov 2012 16:53:41 +0000 (GMT)
From:  
“MR. D.P.O JOHNSON” <westernu749@gmail.com>
Reply-To:   dhl_compay@yahoo.com
Subject:   MR. D.P.O JOHNSON
To:   undisclosed recipients: ;
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”-1132928367-462696281-1352912021=:69977″
Content-Length:   19629

Below is other email addresses, NAMES, scams, etc being used by the same IP as Mr. DPO Johnson

FROM INTERNPOL POLICE FORCE UNIT. 
desk of Dr,Daniel Alexander, 
International Interpol Police Force 
Investigating Unit Benin Rep 
Email: officeunion2012@yahoo.fr 
Phone +22999867566 
International Remittance Department funds Transfer Section 
United Bank For Africa International plc. Republique du Benin 
in West African State /Address:rue 7741 unesvia avenue kotoungbe cotonou. 
Email: atmcarddepartment132@yahoo.fr 
Email: atmcarddepartment132@yahoo.fr 
Website http://www.ubagroup.com 
DIRECTOR NAME: MR frank johnson s-MAIL:(www.westernunionrichard@yahoo.ca) 
OFFICE LINE:((+229)-99231994, OFFICE FAX: (+229)-98414204, Visit:westernunion.com 
BEST REGARDS.

Head Office RUE 84, ABAPKA MISERBO <<

western_ubb@yahoo.fr << activationcard@rocketmail.com << 

X-Originating-IP: [106.10.151.181] X-Originating-IP: [217.146.176.150]  X-Originating-IP: [217.146.183.95]beninhigh.court@rocketmail.com

Received: from [41.216.50.26] by web190606.mail.sg3.yahoo.com via HTTP; Thu, 
05 Apr 2012 05:25:48 +0800 (SGT)

Received: from [41.216.50.26] by web171002.mail.ukl.yahoo.com via HTTP; Wed, 
04 Apr 2012 20:54:00 +0100 (BST)

Received: from [41.216.50.26] by web171005.mail.ukl.yahoo.com via HTTP; Fri, 
30 Mar 2012 09:49:18 +0100 (BST)

 [98.138.91.212] 
To: undisclosed recipients: ; FROM: Mr. Mark Dennis
Reply-to: westerotransfer@skymail.mn

Received: from [41.216.50.26] by web112311.mail.gq1.yahoo.com via HTTP; Thu, 
29 Mar 2012 13:31:47 -0700 (PDT)

From: “FEDERAL BUREAU OF INVESTIGATION \(FBI\)” 
Subject: FBI SIGNED AGAINST YOU 
X-Originating-IP: [106.10.151.20] 
To: undisclosed recipients: ; 
Reply-to: msanusigoverno@yahoo.com

Received: from [41.216.50.26] by web190605.mail.sg3.yahoo.com via HTTP;

From: BENJAMIN NWEKE 
Subject: Welcome to Western Union 
X-Originating-IP: [106.10.149.38] 
To: undisclosed recipients: ; 
Reply-to: western_ub@yahoo.com.hk

From: WESTERN UNION 
Subject: CALL MR BENJAMIN FOR YOUR MTCN NUMBER +22998892244 
X-Originating-IP: [115.178.12.225] 
To: undisclosed recipients: ; 
Reply-to: western_ubb@yahoo.fr

From: chigoeze2007@yahoo.co.uk 
Subject: PAYMENT NOTIFICATION OF YOUR FUNDS. 
X-Originating-IP: [77.238.189.207] 
To: undisclosed recipients: ; 
Reply-to: sahelsaharabank@rocketmail.com

From: Mr Andrew thomaas 
Subject: Welcome to the Albany Division of the Federal Bureau of Investigation 
X-Originating-IP: [77.238.189.70] 
To: undisclosed recipients: ; 
Reply-to: investigationbeninfederalbureau@yahoo.com

From: ECO BANK PLC 
Subject: Hello Dear Beneficiary,Good News 
X-Originating-IP: [115.178.12.201] 
To: undisclosed recipients: ; 
Reply-to: plcecobank118@yahoo.com.hk 
Message-id: 
MIME-version: 1.0 
X-Mailer: YahooMailClassic/15.0.4 YahooMailWebService/0.8.116.331537 
Content-type: multipart/alternative; 
boundary=”Boundary_(ID_vIbW/TiNhur4KDUcmvroXA)” 
X-Yahoo-Newman-Property: ymail-3 
X-Yahoo-Newman-Id: 723015.62700.bm@omp1005.mail.sg1.yahoo.com

From: MAIL POST OFFICE 
Subject: Regarding Your ATM CARD Deposited Here on the 11th 
X-Originating-IP: [77.238.189.59] 
To: undisclosed recipients: ; 
Reply-to: mailpostoffice1369@yahoo.fr

From: Dr Thomas Yayi Boni 
Subject: His Excellency Dr Thomas Yayi Boni 
X-Originating-IP: [77.238.189.64] 
To: undisclosed recipients: ; 
Reply-to: hisexcellency.drthomasyayiboni@yahoo.fr

From: “Mr.terry smith,” 
Subject: MTCN.764-057-6456 PICK UP YOUR FIRST PAYMENT OF $5,000.00 IMMEDIATLY 
X-Originating-IP: [115.178.12.223] 
To: undisclosed recipients: ; 
Reply-to: transferfund@yahoo.cn

From: “Dr. Destiny Mike” 
Subject: FUND APPROVAL / PICKUP @BANK OF AMERICA. 
X-Originating-IP: [115.178.12.240] 
To: undisclosed recipients: ; 
Reply-to: atmbank@globomail.com

MR D.P.O JOHNSON IS USING THE IP 41.216.50.26 – WHICH IS A KNOWN SCAMMER IP ADDRESS –  interpol_police_force_unit187@qatar.io  IS A SCAMMER — NAME: NWALIEJI MARCEL — USED NAME: JEFF ROBERT CARL — IP 41.216.50.26 BENIN – KNOWN SCAMMER

FOR MORE INFORMATION REGARDING THE ABOVE IP CLICK HERE.

 

212.82.109.193 – This IP which shows up as ‘originating-ip’ in the header, is a Ireland IP address and not the actual location of the scammer although they try to confuse (potential) victims into thinking they’re not African (because 95% of scammers are from Africa) This IP address has been reported and blacklisted numerous times due to scam activity. For additional information on this IP address, please click here.

41.216.50.26 – This IP which is one of the IP’s being used by the scammer, has been blacklisted on numerous sites due to alot of malicious activity including fraud, phishing scams, etc. Location of the IP is Benin Nigeria

Associated Email-addresses – dbankbenin97@yahoo.com – vytransfer@ymail.com

MR D P O JOHNSON << westernu749@gmail.com << 

41.216.50.26 has been blocked/blacklisted on Spamhaus as well as the following IPs: 41.85.169.5 << 41.85.176.19 << 41.216.50.33 << 81.91.229.189 << 41.85.161.126 << 41.216.48.17 << 41.216.40.128 << 41.216.44.198 << 41.222.192.64 << 81.91.228.131 << 81.91.228.78 <<

If you have received any scam email’s under different email addresses, names, etc under the IP address used in the email above, please let me know by copy and pasting them into the comment section. Thank you!

 
Leave a comment

Posted by on 11/27/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: