RSS

Tag Archives: ATM VISA CARD CENTER

“ROYAL-BANK COMPENSATION UNITS”

419 SCAM / ATM CARD SCAM

*****SPAM***** NOTIFICATION OF PAYMENT VIE ATM MASTER DEBIT CARD PAYMENT(CONTACT ATM OFFICE EMAIL ID(atmcustomercar

Friday, May 24, 2013 2:43 AM
From:
“ROYAL-BANK COMPENSATION UNITS” <INFOBANK@ROYALBANK.CO.UK>
Message contains attachments
1 File (4KB)
Spam detection software, running on the system “hades.fesaelsalvador.com”, has
identified this incoming email as spam.  The original message
has been attached to this so you can view it (if it isn’t spam) or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  DR.STEPHEN EDWARD (ROYAL BANK OF SCOTLAND CE.)Our Ref: T/U/T/BANK/IRD/CBX/011/011
   IMMEDIATE ATM DEBIT CARD PAYMENT FROM THE DESK OF STEPHEN EDWARD ATM Tell
   Number: +448719152022 CONTACT THE ATM COMPANY ON THIS E-MAIL 😦 atmcustomercarepaymentdesk@gmail.com)
   OR ATTENTION: SIR/MA. PROCESSING YOUR FUND THROUGH ATM MASTER CARD ATTN:
  INVESTIGATION UPDATES. SUBJECT: COMPENSATION […] 

Content analysis details:   (11.9 points, 5.0 required)

pts rule name              description
—- ———————- ————————————————–
-1.0 ALL_TRUSTED            Passed through trusted hosts only via SMTP
0.0 T_FROM_MISSPACED       From: missing whitespace
1.2 MISSING_HEADERS        Missing To: header
1.0 HK_SCAM_N2             BODY: HK_SCAM_N2
0.1 MISSING_MID            Missing Message-Id: header
0.0 T_LOTS_OF_MONEY        Huge… sums of money
1.9 REPLYTO_WITHOUT_TO_CC  REPLYTO_WITHOUT_TO_CC
1.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
1.0 MONEY_FROM_MISSP       Lots of money and misspaced From
2.8 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain different
freemails
1.0 FROM_MISSP_FREEMAIL    From misspaced + freemail provider
2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook

Forwarded Message: NOTIFICATION OF PAYMENT VIE ATM MASTER DEBIT CARD PAYMENT(CONTACT ATM OFFICE EMAIL ID(atmcustomercar

NOTIFICATION OF PAYMENT VIE ATM MASTER DEBIT CARD PAYMENT(CONTACT ATM OFFICE EMAIL ID(atmcustomercar

DR.STEPHEN EDWARD (ROYAL BANK OF SCOTLAND CE.)Our Ref: T/U/T/BANK/IRD/CBX/011/011
IMMEDIATE ATM DEBIT CARD PAYMENT
FROM THE DESK OF STEPHEN EDWARD
ATM Tell Number: +448719152022
CONTACT THE ATM COMPANY ON THIS E-MAIL 😦 atmcustomercarepaymentdesk@gmail.com) OR atmpcenter@consultant.com
ATTENTION: ATTENTION: SIR/MA. PROCESSING YOUR FUND THROUGH ATM MASTER CARD
ATTN: INVESTIGATION UPDATES.
SUBJECT: COMPENSATION

We the Management of British High Commission in Conjunction with U.S.A GOVERNMENT, WORLD BANKS, ROYAL BANK OF SCOTLAND and UNITED NATION ORGANIZATION do hereby give this irrevocable approval Order with Release Code: GNC/3480/02/00 in your favor as one of the victims.

In which United Nations Authority and International Monetary Fund (IMF) European Cooperate Office have received all the overdue outstanding payment owed to the following firms, Contract, Inheritance Next of Kin and Lottery Beneficiaries that was originated from Europe, Americans, African, Asian Including Middle East. Among the list are Individuals and Companies that was affected by Hurricane Sandy, And Investigators Flooding Disaster Damage.

Your name is among of 367 Victims listed to be compensated by World Bank/IMF via ATM CARD each valued at US$700,000.00 Seven Hundred Thousand United State Dollars. Send your Name, Add, mob number.via E-mail: CONTACT THE ATM COMPANY ON THIS E-MAIL 😦 atmcustomercarepaymentdesk@gmail.com OR atmpcenter@consultant.com
Meanwhile, we have registered your ATM Card part payment of US$700,000.00) with ATM Consultant office for immediate delivery to your doorstep. Please contact ATM Manager (Prof, George Robert) today with your information where you want them to deliver your ATM Card.
We have already paid for the cost of the delivery of your ATM CARD to your address, but did not pay for the Stamp Duty Fee which you are requested to pay for the fee to ATM Consultant Manager, The Stamp Duty Fee is the only fee you are to pay Only ($198 USD) One Hundred And Ninety Eight Dollars to ATM Consultant office Manager, to enable them have a hitch free delivery of your ATM CARD to your address. This card is to be use to withdraw your money in any ATM machine in any part of the world, but the maximum is five thousand United States dollars per day.
So feel free to get in touch with Prof. George Robert HEAD OF OPERATIONS, through their contact as stated above for immediate delivery of your ATM card to you.
The secret 4 digit PIN numbers shall be forward to you immediately you received the ATM CARD from the delivery company because it has to be through email since you are the only person required to know about the PIN CODE Numbers.
Do let me know immediately you receive your ATM CARD from ATM Consultant Office for my Record.
Disclaimer
This Email is intended for the named recipient only and may contain privileged and confidential information. If you have received this email in error, please notify us immediately. Please do not disclose the contents to anyone or copy it to outside parties. Thank you
Best regard.
Mrs. Helen Max

Return-Path: <INFOBANK@royalbank.co.uk>
X-YahooFilteredBulk: 201.247.147.91
X-Originating-IP: [201.247.147.91]
Authentication-Results: mta1551.mail.ne1.yahoo.com from=ROYALBANK.CO.UK; domainkeys=neutral (no sig); from=ROYALBANK.CO.UK; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.fesaelsalvador.com) (201.247.147.91) by mta1551.mail.ne1.yahoo.com with SMTP; Fri, 24 May 2013 04:36:53 +0000
Received: from mail.fesaelsalvador.com (localhost [127.0.0.1]) by mail.fesaelsalvador.com (Postfix) with ESMTP id F1B7B1084B21; Thu, 23 May 2013 21:08:40 -0600 (CST)
Received: by mail.fesaelsalvador.com (Postfix, from userid 1001) id F3D5C1126167; Thu, 23 May 2013
Received: from localhost by hades.fesaelsalvador.com with SpamAssassin (version 3.3.1);
From: “ROYAL-BANK COMPENSATION UNITS”<INFOBANK@ROYALBANK.CO.UK> Add sender to Contacts
Subject: *****SPAM***** NOTIFICATION OF PAYMENT VIE ATM MASTER DEBIT CARD PAYMENT(CONTACT ATM OFFICE EMAIL ID(atmcustomercar
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on hades.fesaelsalvador.com
X-Spam-Flag: YES
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.9 required=5.0 tests=ALL_TRUSTED, FORGED_MUA_OUTLOOK,FREEMAIL_REPLYTO,FROM_MISSP_FREEMAIL,FROM_MISSP_MSFT, HK_SCAM_N2,MISSING_HEADERS,MISSING_MID,MONEY_FROM_MISSP,REPLYTO_WITHOUT_TO_CC, T_FROM_MISSPACED,T_LOTS_OF_MONEY autolearn=unavailable version=3.3.1
X-AV-Checked: ClamAV using ClamSMTP

atmcustomercarepaymentdesk@gmail.com
atmpcenter@consultant.com
+448719152022
Mrs. Helen Max
Prof. George Robert
DR.STEPHEN EDWARD
ROYAL-BANK COMPENSATION UNITS
INFOBANK@ROYALBANK.CO.UK
 
1 Comment

Posted by on 06/11/2013 in Lottery Scam

 

Tags: , , , , , , , , , ,

“Joseph Belkins”

LOTTERY SCAM – ADVANCE FEE FRAUD

nigeria-419-scam

Date: Feb 11, 2013 7:34 AM
Subject: Re: Atm 1960
To: “Joseph Belkins” <joehb@nokiamail.com>

No thanks I don’t pay out of pocket for anything thanks anyway for the scam.

On Feb 11, 2013 3:09 AM, Joseph Belkins joehb@nokiamail.com wrote:
Attention:

I have been informed by the IMF to anticipate your message. Your pin number has been verified and confirmed to relate to a parcel with ATM Debit CARD valued the sum of US$2,500,000.00 {Two Million Five Hundred Thousand US Dollars}. The ATM Debit CARD has been issued in your name and we have concluded the processing of all documents that will facilitate the clearance of the ATM CARD in any Bank.

These documents have been securely sealed and packed for security reasons which make it impossible for anyone to view it until it’s been delivered to you and also your parcel is protected by a hardcover insurance policy, which makes it impossible to deduct any amount from the money before it has been remitted to you.

Choose delivery option below that is most convenient to you.

(1)FedEx Delivery Company
Duration for Delivery: 24hrs
Amount: US $465 {No C.O.D}

(2)UPS Delivery Company
Duration for Delivery 48hrs
Amount: US $350 {No C.O.D}

(3)DHL Delivery Company
Duration for Delivery 24hrs
Amount: US $570 {No C.O.D}

Kindly confirm receipt of the mail with the delivery option most convenient to you within 24hrs. And you shall be informed on how to make payments of the charges.

Failure to produce the delivery fee will mean refusal of ATM DEBIT CARD delivery by the courier service so as to enable this company secure good name they have always maintained, since the package delivery without insurance will be illegal. Insurance is the International law guiding the authentic delivery of diplomatic document.

We look forward to serving you better.

Yours faithfully,
Mr. Joseph H. Belkins
ATM Center Manager
International Reconciliation and Logistics Vaults
International Monetary Fund (IMF)

Copyright © 2013. All rights reserved.

joehb@nokiamail.com
Sent: Sunday, February 10, 2013 1:22 AM
Subject: Atm 1960

8235 O’Neill Drive MILLINGTON Tn 38053, 26, 9012321001

 
1 Comment

Posted by on 02/13/2013 in Lottery Scam

 

Tags: , , , , , , , ,

“DR NGOZI CHUKWU”

ATM LOTTERY SCAM – ADVANCE FEE FRAUD

credit-card-scams

From: “CD” <deleted@gmail.com>
Date: Feb 11, 2013 7:30 AM
Subject: Re: To Whom This May Concern
To: DR NGOZI CHUKWU <drngozichi@superposta.com>

Well in that case I will pass. I was always taught never pay for what’s due to you

On Feb 11, 2013 3:55 AM, “DR NGOZI CHUKWU” drngozichi@superposta.com wrote:
Thanks for your email, your question is reasonable for someone who is about going into a transaction of such magnitude.

please the delivery fees can not be deducted from the funds because it has been programmed into the ATM card

Faruku

On 10 February 2013 21:33, C D <deleted@gmail.com> wrote:
Why can’t the 285 be deducted from the fund???

On Jan 19, 2013 5:59 AM, “Fbi” <riaz@msb-est.com> wrote:
Federal Bureau of Investigation
Counter-terrorism Division and Cyber Crime Division
J. Edgar. Hoover Building Washington DC

ROBERT S. MUELLER III,

Attention Beneficiary,

Records show that you are among one of the individuals and organizations who are yet to receive their overdue payment from overseas which includes those of Lottery/Gambling, Contract and Inheritance. Through our Fraud Monitory Unit we have noticed that you have been transacting with some impostors and fraudsters who have been impersonating the likes of Prof. Soludo/Mr.Lamido Sansui of the Central Bank Of Nigeria, Mr. Patrick Aziza, Bode Williams, Frank, Anderson, none officials of Oceanic Bank, Zenith Banks, Kelvin Young of HSBC, Ben of FedEx, Ibrahim Sule, Dr. Usman Shamsuddeen and some impostors claiming to be The Federal Bureau of Investigation.

The Cyber Crime Division of the FBI gathered information from the Internet Fraud Complaint Center (IFCC) on how some people have lost outrageous sums of money to these impostors. As a result of this, we hereby advise you to stop communication with any one not referred to you by us. We have negotiated with the Federal Ministry of Finance that your payment totaling $5,900,000.00(Five Million Nine Hundred Thousand Dollars). will be released to you via a custom pin based ATM card with a maximum withdrawal limit of $15,000 a day which is powered by Visa Card and can be used anywhere in the world where you see a Visa Card Logo on the Automatic Teller Machine (ATM).
We guarantee receipt of your payment. This is as a result of the mandate from US Government to make sure all debts owed to citizens of American and also Asia and Europe which includes Inheritance, Contract, Gambling/Lottery etc are been cleared. Below are few list of tracking numbers you can track from Delivery Company website to confirm people like you who have received their payment successfully.

Name: Mr and Mrs RANGANBAY : DHL Tracking Number:2282232175 (www.dhl.com)
Name: Mr. Jalaludin: FedEx Tracking number 875777537332 (www.fedex.com)

To redeem your funds, you are hereby advised to contact the ATM Card Center via email for their requirement to proceed and procure your Approval of Payment Warrant and Endorsement of your ATM Release Order on your behalf which will cost you $285 Usd only and nothing more as everything else has been taken care of by the Federal Government including taxes, custom paper and clearance duty so all you will ever need to pay is $285.00 only.

Mr. Mr.Ngozi Chukwu (ATM Card Center Director)
Central Bank of Nigeria
Central Business District,
Cad astral Zone, federal
Capital Territory,
Nigeria.

ATM Card CenterDirector Mr. Ngozi Chukwu
Official Email: drngozichi@ymail.com

Do contact Mr. Ngozi Chukwu of the ATM Card Center via his contact details above and furnish him with your details as listed below:

FULL NAMES: __________________________________
DELIVERY ADDRESS FOR ATM CARD: __________________
_______________
DATE OF BIRTH: __________________
TELEPHONE NUMBER: _____________________
EMAIL ADDRESS: _____________________

On contacting him with your details your file would be updated and he will be sending you the payment information in which you will use in making payment of $285.00 via MoneyGram or Western Union Money Transfer for the procurement of your Approval of Payment Warrant and Endorsement of your ATM Release Order, after which the delivery of your ATM card will be effected to your designated home address without any further delay, No extra fee.
ROBERT S. MUELLER III,

DIRECTOR OF FEDERAL BUREAU OF INVESTIGATION
UNITED STATES IN COLABORATION WITH THE
DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

Note: Disregard any email you get from any impostors or offices claiming to be in possession of your ATM card, you are hereby advice only to be in contact with Mr. Ngozi Chukwu, the Director of the ATM card center who is the rightful person to deal with in regards to your payment and forward any emails you get from impostors to this office so we could act upon it immediately. Help stop cyber crime
Reply Reply All Move… InboxmiGo to Previous message | Go to Next message | Back to Messages Select Message Encoding ASCII (ASCII) Greek (ISO-8859-7) Greek (Windows-1253) Latin-10 (ISO-8859-16) Latin-3 (ISO-8859-3) Latin-6 (ISO-8859-10) Latin-7 (ISO-8859-13) Latin-8 (ISO-8859-14) Latin-9 (ISO-8859-15) W. European (850) W. European (CP858) W. European (HPROMAN8) W. European (MACROMAN8) W. European (Windows-1252) Armenia (ARMSCII-8) Baltic Rim (ISO-8859-4) Baltic Rim (WINDOWS-1257) Cyrillic (866) Cyrillic (ISO-8859-5) Cyrillic (KOI8-R) Cyrillic (KOI8-RU) Cyrillic (KOI8-T) Cyrillic (KOI8-U) Cyrillic (WINDOWS-1251) Latin-2 (852) Latin-2 (ISO-8859-2) Latin-2 (WINDOWS-1250) Turkish (ISO-8859-9) Turkish (WINDOWS-1254) Arabic (ISO-8859-6,ASMO-708) Arabic (WINDOWS-1256) Hebrew (856) Hebrew (862) Hebrew (WINDOWS-1255) Chinese Simplified (GB-2312-80) Chinese Simplified (GB18030) Chinese Simplified (HZ-GB-2312) Chinese Simplified (ISO-2022-CN) Chinese Simplified (WINDOWS-936) Chinese Trad.-Hong Kong (BIG5-HKSCS) Chinese Tradi
tional (BIG5) Chinese Traditional

 
Leave a comment

Posted by on 02/13/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

“Mr. Martin Kobler” a.k.a “Craig Williams”

ATM CARD LOTTERY SCAM – NIGERIAN SCAM

UPDATE – Martin Kobler a.k.a Craig Williams has emailed me again. The emails are below along with the header details.

freemoney

 

IN REGARD TO YOUR ATM MASTER CREDIT CARD PACKAGE WITH FEDEX

Attn: Dear Beneficiary,

Due to your long over-due payment which you have been finding it difficult to receive via Wire transfer or Bank Draft, We have arranged your payment through International ATM Card Payment Center,this is part of an instruction passed by the United Nations in respect to all over delayed payment. The Director, ATM Payment Center will send your ATM Card valued sum of $10,000,000.00USD which you are to use in accessing your fund in any ATM MACHINE location any where in the world, and the maximum withdrawal daily limit is $15,000.00 So kindly contact the Payment Center with the below information;

Contact Person: Mr. Craig Williams
Director,ATM Payment Center Africa
Telephone: +2347063480508
Email: mr.craigwilliamss@gmail.com

Make sure to reconfirm to him your details as your Full Name,Current Address, Direct Phone number and brief introduction of yourself so as to facilitate the immediate release of your ATM Card to you immediately. Please be aware that you are the only person left to receive your ATM Card out of the (5) five beneficiaries and for your confirmation go to FedEx Express Delivery Services website and you will see that other beneficiary have already received their ATM
Card that was sent to them through FedEx Express Delivery Services. http://www.fedex.com/Tracking; with Tracking Numbers: 871972637653 ,873238087330 ,873448022361

I stated the above for you to know that you are the only person left to receive your ATM Card.So contact Director, ATM Payment Center: Mr.Craig Williams and Email: mr.craigwilliamss@gmail.com , You have to stop any further communication with anybody or office.

Thanks for your co-operation.
Best regards,
Mr. Martin Kobler
Secretary-General’s
Special Representative

Return-Path: <millionboy4u1@yahoo.com>
X-YahooFilteredBulk: 77.238.189.92
X-Originating-IP: [77.238.189.92]
Authentication-Results: mta1006.mail.bf1.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm19-vm0.bullet.mail.ird.yahoo.com) (77.238.189.92) by mta1006.mail.bf1.yahoo.com with SMTP; Tue, 05 Feb 2013 23:58:48 -0800
Received: from [212.82.105.245] by nm19.bullet.mail.ird.yahoo.com with NNFMP; 06 Feb 2013 07:58:48 -0000
Received: from [212.82.108.114] by tm17.bullet.mail.ird.yahoo.com with NNFMP; 06 Feb 2013 07:58:47 -0000
Received: from [127.0.0.1] by omp1023.mail.ird.yahoo.com with NNFMP; 06 Feb 2013 07:58:47 -0000
X-Yahoo-Newman-Id: 960308.89699.bm@omp1023.mail.ird.yahoo.com
Received: (qmail 15101 invoked by uid 60001); 6 Feb 2013 07:52:06 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1360137126; bh=KmcdE+HxeOrPDSDrpcVsmYJBvC58byXBslDZgk1OAl8=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=euP4ZIyHrozVZ8Nc2E0IgnTbnt8dLtKyh+GtdSePjYmj9SRqWqvOhgn+Esb+TyF0NW5Gn73z6GY9vOpUn3tFLfLglNFSIGKIF9QlB0jEUx4AFGUFioLtcBpIPY7Bfi8Llvxt98a7fsTseeEOED8uFdqBiNMEtV8hsMAtQtZzJkg=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=P5lNiReLFwKWBUl9exFM1UaxiH+26FDbPR0TgYmJf8hE7EYvYDRrsfSQiTm2IeDbsEt/KOiwIW1j/gSwGfD4XuCm59Wt0+V/HYN7e8UAM0a05LCHb6bX5hiku3sadg1h5UVCVtjuWroimipRVv/lIe4u16K8ZYWfa7GU/2ynq+I=;
Received: from [41.138.165.12] by web172302.mail.ir2.yahoo.com via HTTP; Wed, 06 Feb 2013 07:52:06 GMT
Message-ID: <1360137126.90931.YahooMailClassic@web172302.mail.ir2.yahoo.com>
From: “MR.MARTINS KOBLER” <brandnewoffi1@gmail.com>
Reply-To: mr.craigwilliamss@yahoo.es
Subject: IN REGARD TO YOUR ATM MASTER CREDIT CARD PACKAGE WITH FEDEX
MR MARTINS KOBLER brandnewoffi1@gmail.com

Attn: Dear Beneficiary,

Due to your long over-due payment which you have been finding it difficult to receive via Wire transfer or Bank Draft, We have arranged your payment through International ATM Card Payment Center,this is part of an instruction passed by the United Nations in respect to all over delayed payment. The Director, ATM Payment Center will send your ATM Card valued sum of $10,000,000.00USD which you are to use in accessing your fund in any ATM MACHINE location any where in the world, and the maximum withdrawal daily limit is $15,000.00 So kindly contact the Payment Center with the below information;

Contact Person: Mr.Craig Williams
Director,ATM Payment Center Africa
Telephone: +2347063480508
Email: mr.craigwilliamss@gmail.com

Make sure to reconfirm to him your details as your Full Name,Current Address, Direct Phone number and brief introduction of yourself so as to facilitate the immediate release of your ATM Card to you immediately. Please be aware that you are the only person left to receive your ATM Card out of the (5) five beneficiaries and for your confirmation go to FedEx Express Delivery Services website and you will see that other beneficiary have already received their ATM
Card that was sent to them through FedEx Express Delivery Services. http://www.fedex.com/Tracking; with Tracking Numbers: 871972637653 ,873238087330 ,873448022361

I stated the above for you to know that you are the only person left to receive your ATM Card.So contact Director, ATM Payment Center: Mr.Craig Williams and Email: mr.craigwilliamss@gmail.com , You have to stop any further communication with anybody or office.

Thanks for your co-operation.
Best regards,
Mr.Martin Kobler
Secretary-General’s
Special Representative

HEADER DETAILS:

Return-Path: <millionboy4u1@yahoo.com>
X-YahooFilteredBulk: 77.238.189.21
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: FbJ90YoWLDvSmhXjp0Oa48qN3lvFZVpz6LWhEVI0lrzkom6O TDTnQXU.G_GMSrccxHHY1ejj.SESv1v8N2NTKs9vVvbmgK9RjcBxOeI6J0t8 aFcoWtU3bXaWhb9bKxO.ubScPULvkM2G_KrJpMcplEpA_Dh0fGbIsFVJHqWh oNITDiYMgZnMECJ.0GM2Zk4_F2Bhlvzr5Kroz4NeAS2153QJY4deClfV1FmH xg4RnQdC_JU49UwVgVOPUQ2JJ477UNqRwfBNWwApyalVht8XyQlXsVFSs3V8 58EnPp9ZpHQNtmlwv97ZkPEfZVeMy.13U.i9QrRsAsqxPEB85xBHNX4vTz5a MB_b64_cSyRusUuXqBxxQnChoe6pMHspYqjICW6egTmY6EaqUnaLDsxvnTz5 absE65eW37MaRgbK1_.n0Nb5AK4edTZFHCS_LmS1ionKc_OwK2Sw22e8ygBe sQB8Ch_g4qobOwrI8AJ4jO36m6glZRLE9HLj3FNITUq8qpDgkmL3DnI9HTAB 37tsP_LFPBm9Vx0CeGXLLzAubLLxBCH63SYKuVfHR4nTiwFjFHE3Ga5iyogK kFfeL_hCpzk3libe9lRILHORBtGCgW9DplciP.Pm27Uz.yvUHWqRK7k6jmP_ wwB_lKMByld8WIB8lypNUE5x44VngmWznXbUEGP9bnKO4G672.bYKV0x9hvg xrS6sjwbixPDRN9ZrCEHyfaWdYecPAbdcO96vgtH9_rn5T8_suc49F_iVL6Y NE6WIsbb0UxwsQKpIIa_BKzGbmjFGfkCxE608Q1nKM6pNCQZTmdTLXsz7jkN g5YrHwOB0HX8_oXXYWqGEF9sl5AypyaNfb9qgcNYXpC51SCrPZN9wcvvRyF5 0.m1lVdkWzLWgFxPrid8pppXhWxmYFQ7zF3HrFG3Sl75EqVn7qiexyhzAdaL kkbyhO_Z1NZNSGF6Eyi_QcWyOaWSeenotIshJioehfjkzbRiFRSPq86DHvU9 TBfM1fGC3eJfyKrqYN8S6vrCqpVBPaCS6J5VdNBUflc1nCtlpkWc..46bBxx SsdZRcf02QpSHAnjQWNqjovQhkpUxAv1kx9.bffVwBnUaVgzt0ITar48BwdK rLNqfyBBPja2I3IidzUf.6TJVnem.1oou7WPZFacNEDqM0E0h1PoMN.9LZEX OOXfk9X_Q2w66EnnIB4v2wb65XecaTB1Bms69jz6c72LeTqZHgvnnCfIhRS6 mTvq65L9Z2M3fs_ZItUp0PGNG95b0RYclCzLJ466zlKOwyT4zqAwRY5eLo1M kqWGPsMx3Qi_2Z9xFxLhUqCYS2qkaTK6VsUd2Ss.KprfS477P7HqwsgNPKY_ qAggijUoGzAo4lw6Xm0O5.fPnRS6ZYHzEB_ewjeIVgJAoskG3VhJ_vXrU.hd HKXkjivzlP6NkjSX4QtmdTa7VOA6nhv2UXYCi4EEXTEl
X-Originating-IP: [77.238.189.21]
Authentication-Results: mta1066.mail.ac4.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm7.bullet.mail.ird.yahoo.com) (77.238.189.21) by mta1066.mail.ac4.yahoo.com with SMTP; Mon, 28 Jan 2013 13:08:51 -0800
Received: from [77.238.189.55] by nm7.bullet.mail.ird.yahoo.com with NNFMP; 28 Jan 2013 21:08:45 -0000
Received: from [212.82.108.249] by tm8.bullet.mail.ird.yahoo.com with NNFMP; 28 Jan 2013 21:08:44 -0000
Received: from [127.0.0.1] by omp1014.mail.ird.yahoo.com with NNFMP; 28 Jan 2013 21:08:44 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 938502.88402.bm@omp1014.mail.ird.yahoo.com
Received: (qmail 66440 invoked by uid 60001); 28 Jan 2013 21:08:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1359407324; bh=6A3jwoCaEsjg+FzQWOwdM+KYUakQf4ALvV3AdVEnhKI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=EpKrPDUrvcUSPD4d661hwk7rdbXSHwDAwz2Ns9mkvIUDgt7uYagV2Zd+m+p/O9CINGazq+ZejO4WHPU3mmACbGDZsJLOvq1/OeyrQZAWC82NtBF+NcJXzhXRzKF+/Pp2naeeKuHMXQ56SlTqvEPn7hFS8Aje6n51Odm7xIXy5TU=
Received: from [41.138.168.223] by web172301.mail.ir2.yahoo.com via HTTP; Mon, 28 Jan 2013 21:08:44 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1359407324.65692.YahooMailClassic@web172301.mail.ir2.yahoo.com>
Date: Mon, 28 Jan 2013 21:08:44 +0000 (GMT)
From: “Mr.Martin Kobler” <jjackhilson@gmail.com>
Reply-To: mr.craigwilliamss@gmail.com
Subject: IN REGARD TO YOUR ATM MASTER CREDIT CARD PACKAGE WITH FEDEX

Mr Martin Kobler jjackhilson@gmail.com REPLY_ADDRESS: mr.craigwilliamss@gmail.com RETURN_PATH: millionboy4u1@yahoo.com RECEIVED_IP: 41.138.168.223 IP_USED: 77.238.189.21 <> +234-7063480508

 
Leave a comment

Posted by on 01/30/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , ,

“juliette Chapin”

warning_gif

ATM LOTTERY SCAM – ADVANCE FEE FRAUD

CLICK HERE FOR A LIST OF OTHER EMAILS SENT BY THIS SCAMMER – NOTE THAT THIS SCAMMER, LIKE MOST, USE DIFFERENT IP & REPLY ADDRESSES IN AN ATTEMPT TO HIDE THEIR IDENTITY.

No-Scams

Mtcn #: 773-443-3038
Your agent can pick up at any agent location. Sender name is juliette Chapin
Sent was $1000
After all the issues we had this was the solution to sending the money.And reference #s 23290772, i sent the last $1500. I am thank you for you help by stand by me and General Daniel for this we are appreciate so much. I hope that me and General Daniel will meet with you soon. i have attached the receipt for the money sent as instructed.
I will wait for an email from you with the phone number.

johnbaird.josephiceberg johnbaird.josephiceberg@ymail.com
Western_Union_Transfer_Slip_JG…exe (1.9 MB)Money_Gram_Payment_Slip_JGPE_0…exe (1.9 MB)

Jen

_____________

Message contains attachments1 File (565KB)
WU slip.scr

Dear Sir,

Copy of your trasfer payment slip details sent to you as instructed. View the attachment the mtcn # 773-443-3038..with d same information you provided.

Regards,

juliette Chapin
Accounting Services Division
#103, 21 Rover Way
Spartan Wood,LA ,90250
Telephone: (780) 410-5703
Fax: (780) 416-5614

HEADER DETAILS:

Return-Path: <mickbone97@yahoo.com>
X-YahooFilteredBulk: 98.139.212.164
X-Originating-IP: [98.139.212.164]
Received: from 127.0.0.1 (HELO nm5.bullet.mail.bf1.yahoo.com) (98.139.212.164) by mta1067.mail.ne1.yahoo.com with SMTP; Tue, 15 Jan 2013 22:14:22 +0000
Received: from [98.139.212.153] by nm5.bullet.mail.bf1.yahoo.com with NNFMP; 15 Jan 2013 22:14:20 -0000
Received: from [98.139.212.227] by tm10.bullet.mail.bf1.yahoo.com with NNFMP; 15 Jan 2013 22:14:18 -0000
Received: from [127.0.0.1] by omp1036.mail.bf1.yahoo.com with NNFMP; 15 Jan 2013 22:14:18 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 913034.31949.bm@omp1036.mail.bf1.yahoo.com
Received: (qmail 55569 invoked by uid 60001); 15 Jan 2013 22:14:18 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1358288058; bh=Pw9QukRh++jJavYxeuzXL3ty3osgj78RqiLC0VB59Cw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=DjLxsVlM+WTnrVf6HtpOnJcggBsj1P4TWpljCwNMl1RHDnCmJRncUJBEiIoDrit+uhA5TapwKvNivqm8d5aN8ANZAiNuv3t1u4oJxj5n6fJo+GXVSlpfDjDWV1chfGeEFDsM325rt1g2FsvBBo9SmX7PE/ZJa39gVPRz2hjrXAw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=pRvNHGH74NYyO6zuEOD9hoIeKILeNCo59SiXhIF4IYXXV1M7PbkvTXDKGufOqAuKFbOjJ3fgzn567+ee0mZH8o/0tbgFlImP4cQIKun2Q+IO32z3lqK0R8Q01VxetN9q9cSdwXm4EhPY/MVrDryOZJzUBCKa0eJp272q8gr4snQ=;
X-YMail-OSG: EN7NKToVM1lcCmL2caBuHQSWMsdmGdBbJwZO0XpzzCoDiqg 75mq_JKpR.la82Pb4bgvAwD7p8RIz98IrgjQMUlTjFhsHc0uzMVVS2hnOwks Sx1gd8_d.dIfUtKYte.siU6hB6wkSSlfNa5Nazlt9bKmJYUqWv9gDWrSueoh HNYaEl9NZJG.q7KUPd14Tk4_IeHHN9iy.nT9YE3R3roDZDfF3QCjvsM_gM7d hyVXuLHwHu7LTcexf.tzaOSLke99ZuUb5ht0B8Znxf9JE4IkzXCgSG0JaTxz 5j2XWlDPn8Sf5NEQQIMBAHJpQvTTMVGSp5n9VRt0kb5yivX3aOU6SYS3ruVF lqW0gJtn8cWDU5FBOIYZugqxm1kx_4qUxa5Lx2yoptKcAT1lylupKbmE9Zo3 1Y2XQd1efGqSbPfzK5TunPz4yKucGNEq4t56TzcgjHEehEZROwnazapyTTB3 n3q2iL8ymv6sIw.bXUhWaYF5a7O4HNuorhTkp_q9NRpkmnqXwXc7xQ18W8d4 WDmvnPogYYxuESR2hreu9GE2yzpRUI3zJnMywyBzb8TPuyzuuf19hvcT5cgW Y3DvlaEDNiUo-
Received: from [41.138.189.62] by web140701.mail.bf1.yahoo.com via HTTP; Tue, 15 Jan 2013 14:14:17 PST
X-Mailer: YahooMailWebService/0.8.130.494
References: <1358287914.52674.YahooMailNeo@web140701.mail.bf1.yahoo.com> <1358287992.40627.YahooMailNeo@web140706.mail.bf1.yahoo.com>
Message-ID: <1358288057.49423.YahooMailNeo@web140701.mail.bf1.yahoo.com>
Date: Tue, 15 Jan 2013 14:14:17 -0800 (PST)
From: juliette Chapin <mickbone97@yahoo.com>
Reply-To: juliette Chapin <mickbone97@yahoo.com>
Subject: The copy of the western union receipt
To: “atmpaymentcenttt@e-mail.ua” <atmpaymentcenttt@e-mail.ua>

“juliette Chapin” <mickbone97@yahoo.com>
atmpaymentcenttt@e-mail.ua <atmpaymentcenttt@e-mail.ua>

From: juliette Chapin mickbone97@yahoo.com
webtzzzz.office@att.net <webtzzzz.office@att.net>

IP_Used: 98.139.212.164 Received_IP: 41.138.189.62

 
Leave a comment

Posted by on 01/29/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

“REV BEN PETER”

LOTTERY SCAM – NIGERIAN SCAMMER – ADVANCE FEE FRAUD

NOTE: THIS SCAMMER HAS BEEN EMAILING ME FOR MANY MONTHS UNDER MULTIPLE NAMES, EMAIL-ADDRESSES AND IP ADDRESSES — THIS IS A NIGERIAN SCAM ALSO KNOWN AS A 419 SCAM

BELOW IS THE MOST RECENT EMAIL SENT BY THE FRAUDSTER. THIS SCAMMER IS VERY PERSISTENT BUT UNORGANIZED. HE IS ALWAYS CHANGING THE AMOUNT OF MONEY I’VE SUPPOSELY ‘WON’ AND THE FEE THAT I AM SUPPOSE TO PAY.

freemoney

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $ 7 M

HEADER:

Return-Path: <webxx7601xxxxx@att.net>
X-YahooFilteredBulk: 98.138.90.65
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: To35UWMWLDtpI31Kn.0SLqgNnW08Av0SCFAssCMR8A_Vo1GP GrWi2SRwEUK0_rS5ma.EeNhpXLBHGeRggiFG274YMQUgELYQceZCuxW3lQPN rUoT6knijOkKBdqZkH6wbwxbiX_cGEA41SNaj1GVee9_wEMb3td4XzfxKB2W QHrpIw5Zbu_LEuE.UohMdPBo5n_Z45sHFwPWKeKvax4FtRd9YMFoUrM1giBG C7CLdLh9vlCZzCePSppkA0cvOXt_.mjRjvpOP8QMqDhPOSUFydEEMwgIJns6 2p8QA6wY01j05hbhCrsTYjP7PMBklSFGar9DIbx_rQrES7XDMCtPwl3rskW9 mA0o9k.0wE8917_bR66zH6.r4hgk2Pq8J16QU1Lb0v752n9EcJJSbMbbFQCB wY0piVWQGMKir3JfkdVqWpd_w.T_TfFpxV4cemt1CKnbhoD0FsU7NfExkiJc A5joObOkIGO7Jd8HRyCdsMC_W94SyWlu8v8d0TzsLFjtxDlq1n1fiHfB1XRH vxTmJ6lgV_.c.iXkiuD9N3_pT1_aPP7W9IwCbbDIwtrF34MNw68hMJvJOUe2 pH.jPfBNQHLQFxWhxb6lyVSyv28tHpugjC308j7ixZ00K9T_7yuZ0IHQF6K_ Qd3WjZM3CHJaBIWb1rlNDSqMRfzuahAUzICBFaX8u4wMRTaHcpwTOp7nRUrm sazz9ZeJ7QdN8pKfGePiOZZHXxb1KoyvjL30TC9knrdnerK_gJQgdXaFI8Q5 3er.rbh.9662mA1tWwkL.uw.Ej8jeMmTC81X292stHfa_QQVzMpPvYAw5A9x eqmWm6ToSeMfSIvtRovTlmbB8SkoM4oN0TU4hSZuZ71YzhIaZGFXCNYoOJne 7vGYNkak_HoeCUFsGusF92TWky2Vc9PLHMAgihSZ5i2dv22EV6xQduzDwaC6 hR0YvxZO91Y5nEmgU4JgwTACDxEFzztQjg9nca9TEBemHGKAs_inoBvYmRgj 9NAenemYR2BttVDhS7s50y8s2lyYQLrcXQk7ozgN_n9MjmXaMO0PpbZ7Vpge 7kwg93PpaJb42PYuo_xuEisFLWcWM2dUBSchWFlLPJiuJh8X1JF31AOvxAaS y5zqbbq0gA5D6y8P6y7bvMT6GA.RJbBsQnHsqzQ9p62epYsuSBn.GO8e0Obr iTJkg19mglk6slzhX2ciB7jr2mRWI6xcf4zG3rU9Rruj0ndRzYpo_d30lRuc ri8BKqd2I3s9zVfL6sSwKtJADSftjvwW6RTUXPvc2TBzPoA_QfWHZLqs.vAD fbdtVFTINFo2tQp5xrw8ZD.fSJPwkEmhSP.jOfvKar5IpIk2JWk37aJ3w_S7 tgimEtxHc8pR
X-Originating-IP: [98.138.90.65]
Authentication-Results: mta1052.mail.ne1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2.bullet.mail.ne1.yahoo.com) (98.138.90.65) by mta1052.mail.ne1.yahoo.com with SMTP; Fri, 21 Dec 2012 23:21:59 +0000
Received: from [98.138.90.57] by nm2.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
Received: from [66.94.237.125] by tm10.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
Received: from [127.0.0.1] by omp1030.access.mail.mud.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 33716.96789.bm@omp1030.access.mail.mud.yahoo.com
Received: (qmail 92006 invoked by uid 60001); 21 Dec 2012 23:21:58 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1356132118; bh=dspJXUMJQPVGARdDGpSJwFgAoFNKsOdNQ9FVUYxLdWs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Woh2WLpCF/uHtRoXtPW872YkOBFAAbqyMP8UUqzUgpelHH7rNoiWqa7ag0CmwrvT9rDXbc9/MwzRF4reRQJSiuyghbS6I2JNqrMwOvylD/dqh4XGMyzU7PbK4Pbexc0L8FA9JQhAW/6ELOL4sFG8D94kdkpAOh6L371vv4tS3iw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Wxssckm+WPOWZNoeqVo3J5A9eRTjFPzbZwjkMMleA6TNm0Z3g6oL7alYEXqc56/BtA40DPg9RuPmICUTXeH2deUrULLcyKl+UwLAW5iFZVcgFK96kZvnPQlno8bd2sihdj9TtprkLOV0FMx26eQMMkzUuHBXS3DHp6EcQHcqnms=;
X-YMail-OSG: FhAlJ8UVM1mfQErccxHLz3tuxCp1r4vGnWLUR8YRpQosJn0 41jiU0HfOZDG0kQmHMqh9ICSmXaeUKNHjf_woqZQa86_WB0hFCoBJ9tSIbnP Mwm_Tzot5n5.j.qSIOy00TIP8lP5luggtVz7caaD2_xg6Zh7HkAGgtTfgwB1 1WAhS2sqIs_p3RNlxJA6hbYu8KkdyLOzktPW1JRmwWHrxLfUm4eFUj6oPEXn 8oNzfmB9NOMY7zKPEBmCaQ1yjo7wnJFJHBS8kVzq16fTa98dCGZNheuL.CqO 5_c9tEoKAzDURA7_1BRR87wZUiUY14icB5MobkNiVuzKczqB1i.pYPVpGisr AExzvcXZ9pNJ9zI.QcYSMlgLTOo5CuQhY4uel.ztH5.tWJpHnx_jHfZd2IC4 aKjnnLxo9jTRnXuKc2sIDTrimc6Q_2BpalwQFLRKgXuEJiXQ.6fp1jpbAe3o 0zkK_380VGyPITTcie_SrkWj75HrFmt1WgNvCjcGXVNEKpmpolObG
Received: from [173.13.200.181] by web181205.mail.ne1.yahoo.com via HTTP; Fri, 21 Dec 2012 15:21:58 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.129.483
Message-ID: <1356132118.91240.YahooMailClassic@web181205.mail.ne1.yahoo.com>
Date: Fri, 21 Dec 2012 15:21:58 -0800 (PST)
From: REV BEN PETER <webxx7601xxxxx@att.net>
Reply-To: asabamaka@yahoo.com.ph
Subject: Reconfirm your Address,mobile for delivery of your ATM card $ 7 M

FROM: REV BEN PETER webxx7601xxxxx@att.net REPLY-ADDRESS: asabamaka@yahoo.com.ph

173.13.200.181 <> 98.138.90.65

___________________________________

BELOW IS ADDITIONAL EMAIL ADDRESSES AND IP ADDRESSES SENT TO ME BY THE SAME SCAMMER(S)

2) LOTTERY SCAM – ”ATM payment” <webxl19917xx@att.net> REPLY-ADDRESS: atmpaymentcenttt@e-mail.ua

SUBJECT: your(atm) card worth of $5.5M is ready, send your Address and cell Phone

SOME IP’S USED BY THIS NIGERIAN SCAMMER: 98.139.44.156 <> 75.125.40.18 by web181105.mail.ne1.yahoo.com <> unitednationprogram101@gmail.com <> unitednations77@yahoo.cn <> apex.expressbj@hotmail.fr <> +22998660756 <> 85.95.227.44 <>

THIS SAMMER ALSO PRETEND’S TO BE United Nations Organisation AND WESTERN UNION OFFICE — I’VE POSTED ALL THE EMAIL’S AND HEADERS I’VE RECEIVED BY THIS SCAMMER BUT THERE ARE WAY TO MANY AND IT’S IMPOSSIBLE TO KEEP UP WITH. BUT THEY’RE ALL ON SCAMMER419.WORDPRESS.COM — AND I’M SURE THERE ARE MANY MORE EMAIL-ADDRESSES AND IPS, ETC BEING USED BY THESE CROOKS SO IF YOU RECEIVED ANY SPAM EMAILS BY ‘BEN PETER’,  PLEASE POST THE INFORMATION IN THE COMMENT SECTION. THANK YOU.
 
Leave a comment

Posted by on 12/24/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , ,

United Nations Organization London Regional (UN)

419 LOTTERY SCAM / RECOVERY SCAM

Ban Ki Moon also goes under the following names;
Jim Ovia
James Ovia Glory
Zeniith Bank PLC
Charles Brown
John Smith
Sarah Smith
Maria Jimmy
Barclay’s Bank
Paul Morgan
Andrew Johnson
Davis Milton

He has used many names over the months and it’s hard to keep up with them however, if you click here you will see a list of this Nigerian scammers previous emails, names and addresses. You can also type each name individually in the search bar on the top right-hand corner.

UNITED NATION
3 Whitehall Court London
SW1A 2EL United Kingdom

Attention:Beneficairy.

How are you today? Hope all is well with you and family? You may not understand why this mail came to you. I wish to inform you that we have been having a meeting with the IMF for the past 1 month now which ends yesterday in regards to innocent individual who has been a victim of scam that was going on in African and Europe, this Organization(UNITED NATIONS) have agreed to compensate them with the sum of US$750,000.00.

This includes every foreign contractors that may have not received their Contract sum, and some people that have an unfinished Transaction/International Businesses that failed due to one problem or the other.

Going through our data base your email contacts and name was found on the list and that is why we are contacting you for you to receive your own compensation and this said money will be paid via ATM MASTER CARD Payment Method which is the easiest and safer way of receiving without any hindrance and it will be issued to you from our Authorized Bank in Nigeria(Africa) You are advised to contact

Mr.Herbert Wigwe
Email: unrepherbert@yahoo.co.uk
Tel: 234-815-573-7125

As he is our Legal Representative in Nigeria, contact him immediately for your own ATM MASTER CARD, you should send him your full Name and telephone number your confidential address where you want him to send the Card.
Hoping to hear from you as soon as you receive your MASTER CARD.

Best regards,
Secretary-General
Mr. Ban Ki-Moon

Below is another email received on January 26, 2013 –

Attention: Beneficiary,

We wish to inform you that the UN / WORLD BANK ORGANIZATION facilitated a round-table meetings which just ended some days ago, and it has been agreed upon that a compensation payment of US$2,500,000.00 should be paid to scammed individuals whose Names and E-mails have been chosen through an open E-mail ballot system.Your name was included and that is why we are contacting you.

This includes every foreign beneficiaries that may have not received their contract/Inheritance sum and people that have had an unfinished transaction or international businesses that failed due to Government problems etc. Also, wehave been receiving complains from beneficiaries informing us that they are yet to receive their payments due to scams emanating from Africa as well as some financial institutions.

Due to high rate of complains by beneficiaries henceforth, MR. JIM OVIA is no more incharge to make any foreign payments and we will like to get you informed that you will not be receiving your payment through Bank Drafts due to illegal Bank Drafts circulating everywhere. In view of this, beneficiaries are to receive their payments via ATM CARD through our correspondence payment center affiliated with INTERCONTINENTAL PAYMENT CENTER. However, it is my pleasure to inform you that your ATM CARD no:6000101025717299 have been reserved for you which contains your certified amount.

You are hereby advised to contact our payment representative affiliated with
INTERCONTINENTAL PAYMENT CENTER with your payment Code: 6823.You are advised to contact Dr. Charles Brown of our paying center. Contact him immediately for your payment. This meeting was first held on the 8th of April 2003.

You can view this page for your perusal:
http://www.un.org/News/Press/ docs/2003/ik344.doc.htm

Therefore, you should send him your full Names and telephone number, your correctmailing address where you want to receive your ATM Card:

Contact Name: DR.Charles Brown
CONTACT PERSON: DR.CHARLES BROWN
E-MAIL:dr.charlesbrownb@yahoo.com.ph

You are required to contact the above person for your ATM Card, and furnish him with the following information that will be required to set-up the card in your name.

1. Your Full name:
2. Your Country:
3. Contact Address:
4. Telephone Number:
5. Fax Number:
6. Marital Status:
7. Occupation:
8. Sex:
9. Age:
10. A Copy Of Your Identity Attached.

Meanwhile, your Secret Pin Number will be e-mailed to you electronically for security reasons as soon as you confirm the receipt of your ATM CARD. Congratulations as I look forward to hear from you as soon as you confirm your payment.

Regards,
Secretary-General, Ban Ki-Moon.
http://www.un.org/sg/
NB: Dealing with MR. JIM OVIA is at your own risk

Return-Path: <secretary@arab.com>
X-YahooFilteredBulk: 208.68.171.34
X-Originating-IP: [208.68.171.34]
Authentication-Results: mta1279.mail.mud.yahoo.com from=arab.com; domainkeys=neutral (no sig); from=arab.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO hotelexpertmessaging.com) (208.68.171.34) by mta1279.mail.mud.yahoo.com with SMTP; Fri, 18 Jan 2013 15:23:36 -0800
Received: from server.indianjobsonline.com [216.246.77.145] by hotelexpertmessaging.com with SMTP; Fri, 18 Jan 2013 13:44:37 -0500
Reply-To: <dr.charlesbrownb@yahoo.com.ph>
From: “Secretary-General”<secretary@arab.com>
Subject: foreign beneficiaries

Secretary-General secretary@arab.com REPLY-ADDRESS: dr.charlesbrownb@yahoo.com.ph
IP_USED: 208.68.171.34 RECEIVED_IP: 216.246.77.145

12/13/12 EMAIL –

SUBJECT: Greetings from the United Nations Organization London Regional (UN)

EMAIL: INTERNATIONAL FUNDS TRANSFER / AUDIT UNIT

UNITED NATION COMPENSATION COMMITTEE
LONDON REGIONAL HEADQUARTER
RELEASE CODE No:BC0998775BV009

Wining payment of $US1, 620,000 from United Nations London.

Beneficiary Email id owner.

Greetings from the United Nations Organization London Regional (UN) global office. This is to officially bring to your notice that The ATM card payment
center (BACLAYS BANK PLC LONDON) Accountant Director MR JOHN J SMITH has been given express instruction to issue out in your favor the sum of $1,620,000 USD ( One Million, Six Hundred and Twenty Thousand United States Dollars ) in ATM Master Card functional in Any automatic Machine as your wining payment for this Fiscal year 2012 this instructions is from the custody of the United Nation representative office London this is for abbreviation of the rate of poverty as we saw your name on the list of unpaid individuals, The United Nation Compensation Commission (UNCC) was created in 1991 as a subsidiary organ of the UN Security Council and the payment has been approved by us to be release to you as we notice your payment has been delayed by uncertain reasons which has just been resolved by us through our power so you are free to receive your funds now.

We hereby issued you our code of conduct, which is (ATM-UNO/UNCC-5507) so You have to indicate this code when contacting the card Issuance Center with your contact details as stated below, You are hereby to contact the BACLAYS BANK PLC LONDON with the information below as soon as you receive this email for immediate release of your payment to you so that you can be the first beneficiary to receive its fund since the paying office have a lots of beneficiary to pay as directed by (UNO/UNCC).

Full Name:
Address:
Telephone No:
Age:
Occupation:
Country:
Identity Card if any has no copy:

Below is BACLAYS BANK PLC LONDON ATM Card issuance center contact information contact them now for the immediate release of your payment to you since it has been approved by United Nations and World Bank Group meanwhile do not be taken unaware that all the necessary document backing the fund up has been forwarded to the custody of the paying bank to ensure smooth release of your $ 1,620,000 USD (One Million, Six Hundred and Twenty Thousand United States Dollars) to you as directed by us.

CONTACT:
BACLAYS BANK PLC LONDON
CONTACT PERSON::MR JOHN J SMITH.
CALL THE BANK AT:: +44-7010726181
Email:: ww.barclaysgrp@xd.ae

Do let us know immediately you have contacted BACLAYS BANK PLC LONDON for your payment for more advise as we are keeping close on them to ensure you are paid as soon as possible, Meanwhile do not forget your Code of Conduct (ATM-UNO/UNCC-5507) when contacting the bank as it is very important.

Note::The reason you are receiving this notification in your mailbox is because we found your name in our list of people their payment has been delayed so we decide to intervene and help you get paid which we have done.

We are waiting for your prompt update once you have contact BACLAYS BANK PLC LONDON.

In God We Trust.
Zonal co-ordinator
Signed Mrs Maria Jimmy
Approved Mr Ban Ki Moon
United Nation Secretary General

HEADER:

Return-Path: <mohdahmed@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.182
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: plPzIh0WLDtQJVOBjloakInG29IH8L6ACOxnSz3VqgMIP5Bx onDZ8XO5T_ODL9iTSrrjj9IhQVLskP0dIAcNXTK8wdnDE9UDaSBlQ748jVCx jNqkhgs_BoW.OuUQ.HjUeWHMixT5QnEIfx2uLIKkU.3cTF5Ldo8ujcF3ouYp TKaiwFOZno.njMgWijKflKSoZe5_VG6ZEXfdFVSa8zPkZNeHySYH_b8AOpQi x_T6Diamf1URTzai8.YWsMFTVv2ZXF7qnsyTPIjKAoIOmHXnuUHsL4AdEaw1 rfG4bs1M_0OuasFb5KfYyVEs3u2TKMH1CuuVLvmMPbgUwkZpRuIcXU8CEGF3 fVfJ4i36s_Fa6wfTwjPOn4LOsXSVrSVmYmN5HYF5rdfdGcASarxCd8TsdqD. C9NJo0H6elh2VZozH_A3DOXbrlr5S_7bgNhNGoiq9r3JXDtW5orjYXxGIWOz EEXGAiBAJwbh0YfObEirK.NSJUIZeI.IcAUnzg6qomnCdMjBrnfRstYtfp3s fwxn.T8UInj0SmEU0GXeeyCPG3ZwqyJpsGFxvUXRCfo9JaXUGUOEcUFwgf4S i8LbnD226rGkaUMT_eqPj8PaagtaxkuDv0RyoCuQnIL4BQFcATuoZFDFPRiJ PSP9qJ_pJgaFWDHO8JOqsVnZrqduJtj8B1SiYpe3AK87Fw1EQ8PiNNS5y921 hxZJspghZg.d3aQ.EKYqca4IF6T3JpotkY3FAwigr45BmOcCCR2Txw4cYa8O kAllxUkmIWCmAjfmG4hvBovo37Uai62cP30mfVjKmttUj5MlSqGEccnmhuiY 2ExSRHj0SIjbG9VF7WsWsJG57t1zTl_BYA_rHNX.Ro7CzO0tn.2QZ6m1GIpD Bfik5UI6raKMRpi9OxVChp1j8O3vkMcAlX7iIBvdpTCPAc5W9ktDLvjOUqf7 U0dXKm5_Mxi4BWk9KfQPM3RXnL29lJFq_QjL3wvVfbyAbAeUtuXse2iM97XU n8sy.iJyWgnoLHZhQTEaEnvFWe_c3UBSxQf33tTw.iOujQ4y4uWgyY6.5HbJ yIeEN68kvrwYYVZoLtjNcfEPjb2.ETZPik_z8sanHvZu93aPDc2F0canjD2R lgmO_KmgxcMOh.cKAZGkm_BBP3TKxztvcmyBrdt_N_xyEx678t_OpCP7JdMj VJjC.6lNNaD3BWmo4AaKfPtguEDwK4_sbnJ.TPdEIpIkblVNe5NcVUIT4ZxI NB7ZDKX0KO5EbbAMNkgBJGG.XhFNY1IOvvE6945HdSkHiLDG6Vb3ZgNOSI0M UjyFCIPMC2mVfnhlQqHPOHTkRjIv450eJcji.Q220RNETg7xIN3Rkz6WjxK5 CPdH7Y7iOAJzJDWsN_7RbQPbLZb8JiyhtRsMAILrmyrJV9jXh4HSo0T_1e3P sry9qMVo7cqgT8M3rYtxyc_6QHpHMhO.FS1v8qHzPLbI6Sl_GTb9iWztMboA 2Q–
X-Originating-IP: [203.188.200.182]
Authentication-Results: mta1045.mail.ac4.yahoo.com from=yahoo.cn; domainkeys=fail (bad sig); from=yahoo.cn; dkim=permerror (bad sig)
Received: from 127.0.0.1 (EHLO nm2-vm0.bullet.mail.tp2.yahoo.com) (203.188.200.182) by mta1045.mail.ac4.yahoo.com with SMTP; Tue, 16 Oct 2012 11:52:22 -0700
Received: from [203.188.200.82] by nm2.bullet.mail.tp2.yahoo.com with NNFMP; 16 Oct 2012 18:52:20 -0000
Received: from [119.42.242.156] by tm3.bullet.mail.tp2.yahoo.com with NNFMP; 16 Oct 2012 18:52:20 -0000
Received: from [127.0.0.1] by omp1003.mail.cnh.yahoo.com with NNFMP; 16 Oct 2012 18:52:20 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 177687.88001.bm@omp1003.mail.cnh.yahoo.com
Received: (qmail 94232 invoked by uid 60001); 16 Oct 2012 18:52:19 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1350413539; bh=iGDO00ZmYitKlGbDrey0iSYkzbda8HTST44iKSkG6vI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=fCnML5yO+lRVxbeS6R9XahVrp7RSi5eeVK1uIE+9cn2/J7Quqg88zzWfTXDGvh3uAhcfxDFlhyOoEmKvjAmqn3OST+fXNs+0/3R9cccPEh6DyRLp2YrAUYe0++dsT5YoeAIHl1gif/EjtJOeLBxJdQe5fQwHwm7eGoCUTMykIHY=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tYSCiHX+xrxbGmlEE0iu6AS0kKNZKWVPtcULjZjsk5/FuDO13CRUqYpZv5YuJIv9s8vOpBQQqBpzA39ehRMIZO22VR+6jUx+u0wHnwyLDUrZZsGh/Kg+klvjnnf5cUJWvCUHX01pxC1rSt6NOxXNjlGl+SGsVbLQd6036lpQm48=;
X-YMail-OSG: U13DIzoVM1k1WOQchhlHUn_Z4ZLanAUc2ScFYZjW1u7FK_u VgYM8YbEX
Received: from [106.67.78.89] by web92413.mail.cnh.yahoo.com via HTTP; Wed, 17 Oct 2012 02:52:19 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1350413539.87773.YahooMailClassic@web92413.mail.cnh.yahoo.com>
Date: Wed, 17 Oct 2012 02:52:19 +0800 (CST)
From: “United Nations Organization London Regional \(UN\)” <mohdahmed@yahoo.cn>
Reply-To: ww.barclaysgrp@xd.ae
Subject: Greetings from the United Nations Organization London Regional (UN)

FROM: United Nations Organization London Regional (UN) mohdahmed@yahoo.cn RETURN-PATH: mohdahmed@yahoo.cn REPLY-ADDRESS: ww.barclaysgrp@xd.ae

RECEIVED FROM: 106.67.78.89 X-YAHOO-FILTER-BULK: 203.188.200.182 

Mr. Herbert Wigwe
unrepherbert@yahoo.co.uk
2348155737125

 

 
2 Comments

Posted by on 12/13/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“DR FRANK COLLINS” – DR COLLINS PETER

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: Below will show two email headers sent to two different people (including myself) – It’s the same scammer, same scam as well. The header information is different however so check both for the different IP’s and addresses the scammer is currently using.

UPDATE: Dr Frank Collins is also going by “Dr Collins Peter” and “Collins Peter E” under the email addresses / IP’s – “Collins, Peter E” <collinsp@newtrier.k12.il.us> <info@notice.com>  YAHOO-FILTERBULK: 157.55.116.165 RECEIVED: by 192.168.194.152 — X-ORIGINATING-IP: 41.71.173.93 Also,  Dr Collins Peter web52644778980000x@att.net REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com – Scammers number: +2347030115459 X-YAHOOFILTERBULK: 98.136.218.126 — For more information click: Dr Collins Peter

UPDATE EMAIL FROM DR FRANK COLLINS A.K.A DR COLLINS PETER (I dont even think he realizes who he has emailed because he emails me with different, similar names on a daily basis.)

EMAIL: Attn: ,
This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-703-011-5459

_______________________________________

SUBJECT: PAYMENT VIA ATM CARD.

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $10.M

HEADER:

Return-Path: <webxx120999xxxxxxx@att.net>
X-YahooFilteredBulk: 98.138.91.88
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: FaLTslcWLDv_37lDMJwvUepYgmnqCzD2WWiLYIVYEvzWiVdj yeMdZg1sVqQZNMLZIrI8jrEhVaMXPsJIY6kRf0cbjnqQCPsaLbBdN2aERrfI RwOChZVFmKW9DzDxir.njJLHD.QY8j_y83jLRI4.AuI7k8QKdHjPvXXJYEFV 3YQAPmqS_78yqhLNbejZcKD5irk7feyqBo.GgWWRjUtr0XeJzJNqaql0h8sA e8RvUpWShCVHN2SyD1tuM0Deb4D1Ji8Vbh6LO0l1rw9cI0_sIz.vHpe_EiGP kHJSq4cVZ_zI24xSaJVH2nairx_S7dPagQ15pHcUhTSBMqGEgXXNeB1Y2oeP 3JU6qx6vSLkN2q.zt9EL5Vwas.VQ3VnnTXDqHLBdVcKU94hP0GlXAupk.DHM obtlUYCC1aCFRuuf3fyqc0LusjLnspK7JnjoOa4trRGPkJ_SlfDp0ggLrEaT v9a7lqaWeBT9EICtLA0FkLq3C2n40JFv19b2vJ8kTWkPK9_CQXXHvPmE9PZ3 kFs1luoQlTk_lzaBG6mXtSkUeA_7vvUTiNlT90e4_xcWHLkMi_qHUB6.MOXY KpjgBBptr6h8HH8BTrub.bb.IWuBN9wzFL2saNzKwsyxCm4lKMw9.xwDm5uJ Gq5wsKY8oAk.ZAm83V.RXXdQZhrYHzq2HI4TEsDuXnxCeBPNS3yCscgHGdua .5bviyYzefeg3tnvzHHkzRlzxSKw4QvlmuuqcChqscR9kCPiJLD.cgAs4kGP VstUFHd.bksAH552CD3i0lwkON5VfmeiESgRCGTPFvptnIKly2v3rZiX6esg GPPtVuH2VF9JGdJc2Ymbkp7azmUteBWNDdU3UBhVs441.EpCaWrI_sm_fe57 OiQyUOywnO1yRAtKJ_SFta4rGiPKLZ0KmWOm2iWxo40gyrpOgSF7vvvDlD.8 TTvxrpElU4SLFTn.GO1zFIFIOghPlKF4MTDaE1.cfSBA7OvaqPPhZB7CbD_P PbifHGwGIUcvjwXFo2GX_MJ9efyRaqwJ8RNv5bv_PmOjBSyxnqzPybf5N4_3 8R6NtlZnqM1b4Enrf9rnVdKOJneQ2FJhZVcYPrtDlcrfum9mFoOorxfoQHmz TE17GM57C0B.ILT43WlnmpnQdle96RtuSiqxmvsRzRStRdaGzDZuic8L7wei rjZENREYOwxD5PakTFL_xFmWBDMWOtezwqcs9j2HaBsIHEPGCa_w1BQb4H7T Rhg.rsLZhUpnUmz3kwbcPdV9Pc8UNCPtAWRE0QCMgwjeBn0ZXdINEcVudxSA YTcOMC4k95wVfJ8oF7eiOod5Qae2n5Ov7WwjD_lXqOtSBIc3J87zhs.HmSjX 7WlsWTwwXn.I_l4fa3NQ.mKYBKo-
X-Originating-IP: [98.138.91.88]
Authentication-Results: mta1228.mail.sk1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.88) by mta1228.mail.sk1.yahoo.com with SMTP; Wed, 05 Dec 2012 09:33:37 -0800
Received: from [98.138.226.178] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [98.139.44.92] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 198054.18868.bm@omp1029.access.mail.sp2.yahoo.com
Received: (qmail 22514 invoked by uid 60001); 5 Dec 2012 17:33:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1354728815; bh=2E+CXVEN1MfcfJaq2e/eZV5TviX4n2QY/x1KeAa5kws=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=f9JOS/YO8YXlmc9hJrpoWT06BSgD+eIddQyPZn984pugXI47aiHJ+HigDAW5KKMMOSqrOWONnAJiCoEyKoSjzteAYzjouKnJuSd9FFAPV7YDDY5OHZP5iSipgSUv3aNEhW/Rsnl4Ln0GS2YFkeMhoGRqYTKiUP5YtCqljvaDNow=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TW9B75gLmG8YEH2Fs0wWUR6quUgNgKf4vKcOC0lU58OuZZxvfbAEilc6hFgOyOvoldI//PR2xiJZNGeYJsT5o76o0CJS8W8mbj8ANAI1PafbE8IT034u3iHRas9fZymmyVV0ARoaM4Pmz0UzVZK0Jim/YrB1484O5fKsUOiyGTM=;
X-YMail-OSG: WdGt0KwVM1lOyB0NVRZY5rrxYN4NyBpT08THjv3T0blrAYl g.fSaOnJGDgT6qOWJLehIImpPX16weUxpsraTUfiislliLwCl2K7v8Pp.iJQ a9TSaK3Cg8mAMGQLpgboaXsnY0P.gbcdPD9a2TYU3MLMz9.msdkdNVne7srD CGKrYap1ePNIkrvsumj.6_CYvw30FkImKkDHHf5IXtzUrxF4x8.QVPZL.F5P 1sCi9c6SjI1P.GeZm2DnWTw.VoPokMuHr44zOJyF208V.uJqcKGplN1blft8 NRD73m_UrMPrQXsfdMEk9IKg0jGHRledxyRP7NbPnmUmTJk5sWb6g7mibQcN lZBmrszbkEqY7Gci4Eh5lmEYhM0EH9ITd3rAkZfbRlBlo5s8MbxSVEa73EvH muyMHoTdJMpwvibAS8LsfWhBVw4Fzpyj.JdfnQdukkFQX5QRnWlt3FtcARkq hyy26DJRYTbzGN4Eyk0EL9EDXp1SGqp9Lk4FU_Cz6Hw4qjqgVzWqnIza_ijq nvI9omJY1Dw0WycuWs.OkVnfl
Received: from [108.174.51.231] by web184901.mail.gq1.yahoo.com via HTTP; Wed, 05 Dec 2012 09:33:35 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354728815.12889.YahooMailClassic@web184901.mail.gq1.yahoo.com>
Date: Wed, 5 Dec 2012 09:33:35 -0800 (PST)
From: DR FRANK COLLINS <webxx120999xxxxxxx@att.net>
Reply-To: drfranklcollin@kimo.com
Subject: PAYMENT VIA ATM CARD

FIRST EMAIL – “DR FRANK COLLINS” <webxx120999xxxxxxx@att.net> REPLY-TO: drfranklcollin@kimo.com RETURN-PATH: webxx120999xxxxxxx@att.net

SECOND EMAIL – Dr Collins Peter <webxixxxxx266xxxxx@att.net> REPLY-TO: collinpeterclaim1@yahoo.com RETURN-PATH: webxixxxxx266xxxxx@att.net

BELOW HEADER FROM COLLIN PETER EMAIL:

Return-Path: <webxixxxxx266xxxxx@att.net>
X-YahooFilteredBulk: 98.136.217.214
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 2lU7wkQWLDvBCg5Cg1wZtIwDNUzuGrZVVXK9H6ZxiRnCF9q8 3T_Z2xZXeKmdhjE03ZY1nNRa1P6Zz09tc3Suud6PVBq3vexxPmov8AXjPV9n h21FBi8fEfSTSwVFhhvzk7V6R63Puryrkha1Mb3jaVwNputKdVPkDPhjUMeo RVMMb4_9ds7LkdO1tAhp2nowUz6sKBD4buJmSanxkzHUpRwUVtPLKq8B09eN Rl25hxMaIQHn74TwJlEJoWwVxtvh8Jkr9b8xgoPVsHTD4d3rIEAmrBO8jRyd GelLKjDpe6gEZSWQukIvbii_.zMj02LUFMIXNqSXg2JTLp15U5_jUlo0usw3 1Q9ij8R.SuZ80..F80EMLcQO1SXMjqWDf6xkVHWwRChYckM8P0zLXQwmLzCh cXZIqLnw6xfz6lcwu0_mQkN.aX.hIIycQN9E431bkyzpAK8Sh0ATdnfKruuc hDUY3uEtvred._LLnnYkhYpxqfc_nSy4oYmmhRytYX5eJDo3.jrNS61KZPV6 YQ56CR6JtF_A6Hafi5rSLv5qgM4p8VJZi7448tERIhykcwaijsPjcAOenatn YK3BKAuoLWZ0KHPHNvGKAWVEbv9QWSQF39Q.EEP1LmrPyvSdcGkLUJurop.B aYWv4YFGCdGxSazNRDxvtgoiaK6SIwQ.bpgk7uq2vF3rcb50kF6JNxWrLg.n 7Tth7XBQ.W0dZ6SeRl5BddGt0PedKs6csdJXP3rAEuRx9HhVbiFWVgdNijR3 _dNog5Qebj0UNBN3_ZYEN_KnDptPkNdpsJ8OGplwzrinpWeXcnwHVgAbUTdo 18VmNYVRbtilZoPybybViqmTdRB30nDou7y.RzfJPpp93GHAGPmJapCeotd7 c17h.xTgmXwnesQYx8oH1A8HMZj9YMgj2Hn78UbjDz5iO3dLZZQwGJc37EEe Irpsy5SaXtVD8MbmmPkhMrhk8K30Dviwqq4hDE5WgxBlGVonuDQoGK3aEt2T nvWx.JhFmNOhCyTBWuANJwIBh0YVHlt7UHVip3l.jut4onQ9R4CDyP6sbX2c lfshiCRIJ9lEvHbvGo40N55AdITysTVwpsKYdhO1zKO2KEhE2HbINU3NSVAp mVO8xztcsAawulFbZ5PKA.HviU.utyPlT0yMvzwTHn_QINVPcYodx0NOT_5q eROgjgZ35jOw55jeTpgP2qOvmDNkeadY.RrCfkVM_h_Ewvbns5N8m8wKWn4F 71xz.y4o8QBLLz0jb4jMAFmUekk5PrMNZ0E-
X-Originating-IP: [98.136.217.214]
Authentication-Results: mta1191.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm9.bullet.mail.gq1.yahoo.com) (98.136.217.214) by mta1191.mail.bf1.yahoo.com with SMTP; Fri, 14 Dec 2012 03:36:45 -0800
Received: from [98.137.12.58] by nm19.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [98.139.44.70] by tm3.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [127.0.0.1] by omp1007.access.mail.sp2.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 191480.20265.bm@omp1007.access.mail.sp2.yahoo.com
Received: (qmail 75889 invoked by uid 60001); 14 Dec 2012 11:36:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355485002; bh=2TQXuFSDKzJQh2ItoNfMPDU7xRHv3E+CGrBMw/1Ns0g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=MdiZ1jC0egJ3jeK8x+wAmlqoZyMp98AiD2wzzG+et6zE3r4jYBfuYUoMttuA+gtIjRNvWXQLaTtg0u215rggtB9Wpx8OQWJMI3iQKHU+C0WdAONnnis/01rbGL8rLVp8QUEopIB3M6ep93e/l0o2GTcA+2tm8NmXdnIzOrTvHgs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tLrXvMlZ1AfWS1oRs/q6h6HUMYi/LUcbnjbU0+wRSPWQr/1rUxJ+mPFD5IS+2J+xhqTW8fnpv0P89+O46Kg0ZaIi52L7OqBpBWUtxGIOrGGuRKY65NxHoyuM/9fcPmg6OxN2t9IVr/IQmo5FIYMQAlTgtLYGxzIx8tus9kjh4UE=;
X-YMail-OSG: 3ICaliMVM1ngoXiqNpguRRh2iYwL78sXplySeVxex0hGQX. 9amYG0XA4OBV26LpGFUMshO4W2d_k7Z_a2Ijy9UC4MhQCts27.mEJf9MSo4o gLC1yrqEZW2qVfkENJcHqLvP6x22811UE_jYQp539eFIcLW5RWUDAU4t9CGn OdkUZ.I3db4Y0_pc3qHbfrO34x9zDWKUFRwLqnQ.wNCnHD8dS3WSTofCFWm8 DRISKdISfGE2ytoF4IzvXsFuyje2c_qd6tqdnmTw5Z9mBhssXb94A4biy5CF qnxB_1TEOjTWqKHDrBY4BU1EdgOFfYQNqvwQ4XtGhinDlu0jMGic.YAmQBDt z00_WMAOIdc6llHVKxJwh0yh_xgWL5D6rgLOTnmN2Mo2vI.t3Ls.zQwRBRhe SaGInzRlMMto6OJd7AVEbCSpnmZYicQHhMCbjMxGPX2KPd4Tv0fL_cU_plDm egb7i9XYQocNBXLDzdzIfmk9Um9FTZk5b6spv87aUQEG.1MjrCbB7UdYQ0uO JpvS8DhYL5XyxrsNNIFxmRpV2b8I07Jm9LTn8wKS_hqGegIf5feMr.9cGJzH 7hgKyGs0sihPG_k5JCSaI1yCjgZYK79b_xhXuvMQeLOYyQDygzxrr8813RrH cC8L9RfM7BsB3QMN75qyv.pCG1ZbybDazG.TyLuGLgdSNZ6KwYSh_mQ–
Received: from [172.162.63.104] by web185004.mail.gq1.yahoo.com via HTTP; Fri, 14 Dec 2012 03:36:42 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355485002.70723.YahooMailClassic@web185004.mail.gq1.yahoo.com>
Date: Fri, 14 Dec 2012 03:36:42 -0800 (PST)
From: Dr Collins Peter <webxixxxxx266xxxxx@att.net>
Reply-To: collinpeterclaim1@yahoo.com
Subject: ATTN:BENEFICIARY

108.174.51.231 << 98.138.91.88 <<

________________________________________

Click SCAMWARNERS for email to below header which was sent by the same scammer as above.

Return-Path: <web1xxxxx12000bvvv@att.net>
Received: from nm12-vm4.bullet.mail.gq1.yahoo.com (nm12-vm4.bullet.mail.gq1.yahoo.com [98.136.218.191])
(8.14.4/8.14.4) with ESMTP id qBAFqXcC024177
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from web1xxxxx12000bvvv@att.net)
Received: from [98.137.12.190] by nm12.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [98.139.44.75] by tm11.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [127.0.0.1] by omp1012.access.mail.sp2.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 169461.26588.bm@omp1012.access.mail.sp2.yahoo.com
Received: (qmail 11627 invoked by uid 60001); 10 Dec 2012 15:52:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355154752; bh=6IEXAnuDHUzPM2GG6BZxFSMMGXUzzTJH/x0iCKn3gNM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ZNpQDXqA6YKLygx/Mgp0kaQY3hShe48iYfThTEb8Iru1MOJkFmAxYG7WRpbG0vEzb8sVOXBWUD70FlpkHY32sc3lcnQRUH9EWyjF33/6bxeK6Wl/Hf7syjgMKen3IrPrVrQM7QP70aIkEYevI/L1VoeaKi0X05zrl/mkFKlZJB8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=C3u05KWRUG4yec6yjYc58jVUZqKqPra/xpCRYFkhi2pi73G7p5xYJt3avwhjC1pd5gHT2g6XMST7DkGiaRchRZYYa/jODcoZt4R+AhzCt86vNfdJ8r54ZScNvyU4Y+I8mpF49mKbuYWh9Qw+6o/yW3f8qclaMsyNAu3ATH2SDAs=;
X-YMail-OSG: p5tUyUsVM1nSNbno0XpFEzLZade1sG0k1LIN6NkNDDbP4ts
LfsdXeXxUn6OgEkvAzJFUKDvuIBVeFzZtgkksCNzN7YM7NYxZZELCIFArcbu
_mj1sx3mmaRRFlhLnDPO0Ud9acKn6RdXUuy0Z2D2THjsSnJnY9sU7qqlRMsY
RFxlusC6GZdc5g0kSlEJ9Q6m1NFt621vubnU3dlWx9BHYYswZA3GlYEoIQOZ
znu.EmXiL_e6NkgO6Xi3U8TlgxDHH.J2V.gjmQeJjgeleOz.cmjSiQf65.01
pFSPJQ.uJV2ZQQDmhoA_f4DIGHOLzIEM54oMAKodxlcGehFjRCB.Otx7qJ99
LLzSejt_DN_c3T7KOCmzn30gBLvM4NW04V6Q7K4N69QA7XOIUNPQflttOcPQ
QUh_J5vkppPwzXQ7X5ZwbRUsdfsHhuaz1XhXMvrY6vOWGj_WLL3kyxKoNNTD
o2PEbuViIVuMH9ocliCObq_Z7Olxp0coTXqA6vhkTd_030aE_Rclf5k8sFU.
neOYXj1nWJo0ZcsSoOLW7
Received: from [64.72.78.27] by web181404.mail.ne1.yahoo.com via HTTP; Mon, 10 Dec 2012 07:52:32 PST
X-Rocket-MIMEInfo: 001.001,DQoNClJlY29uZmlybSB5b3VyIEFkZHJlc3MsbW9iaWxlIGZvciBkZWxpdmVyeSBvZiB5b3VyIEFUTSBjYXJkICQxMC5NATABAQEB
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355154752.62957.YahooMailClassic@web181404.mail.ne1.yahoo.com>
Date: Mon, 10 Dec 2012 07:52:32 -0800 (PST)
From: DR FRANK COLLINS <web1xxxxx12000bvvv@att.net>
Reply-To: dcollins@kimo.com
Subject: PAYMENT VIA ATM CARD.

 
1 Comment

Posted by on 12/11/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“DR.CHINEYE NWACHUKWU”

INHERITANCE SCAM – NIGERIAN 419 SCAMMER

UPDATE: LOTTERY SCAM – SAME SCAMMER – CLICK PAUL JOHNSON FOR MORE INFORMATION Paul Johnson under <westernu749@gmail.com> officepost466@yahoo.fr IP 212.82.109.207 and the same receiving IP 41.216.44.199 (I’ve been baiting this scammer but stopped over a month ago and still receive emails daily. Each day the scammer emails me under a new proxy/fake IP, email-address and name.)

RESPONSE EMAIL FROM: DR.CHINEYE NWACHUKWU <office_dooog@yahoo.cn> reply-address: <officecustomerscare@yahoo.com> is now going by “Office Customerscare” <officecustomerscare@yahoo.com> and sent this follow up email:

Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

His response email is under a new (fake proxy) IP address of 98.139.212.160 with the same receiving IP of 41.216.44.199 IP-Location: Nigeria (the rest of the header is below the original email/header.)

EMAIL: WESTERN UNION MONEY HELLO MY DEAR

THIS IS SEVERAL TIMES WE WESTERN UNION BENIN REPUBLIC ARE SENDING YOU THIS THE SAME EMAIL TO START PICKING UP YOUR PAYMENT AS WE TOLD YOU BEFORE THIS INFORMATION REACH US SINCE LAST THREE WEEK AGO FROM OUR CORPORATE HEADQUARTERS ECO BANK WESTERN UNION,
STATES THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST $5,000:00 FROM YOUR TOTAL (FUND) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND PAY WHATEVER YOU HAVE FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM $250, TIME IS OF THE ESSENCE HERE,
SINCE YOU DON’T HAVE THE REQUIRE SUM OF$250, SO GO AND SEND ANY AMOUNT OF MONEY THAT YOU HAVE AT HAND STARTED FROM $40 TO UP $250, WE WILL ACTIVATE YOUR MTCN AND SEND TO YOU TODAY, UPON RECEIPT OF THIS PAYMENT,
BELOW IS THE MTCN OF YOUR FIRST PAYMENT, SO YOU ARE TO TIPE WWWW.WESTERNUNION.COM AND PUT THE SENDER FIRST NAME AND SENDER LAST NAME BEFORE THE MONEY TRANSFER CONTROL NUMBER (MTCN): THEN CLICK THE STATUS THEN YOU WILL SEE THE AVAILABILITY OF THE FUND ONLINE BUT IT CAN NOT BE PICKED UP DUE TO THE TRANSFER NEED TO BE ACTIVATED OKAY

1. WWW.WESTERNUNION.COM
2. MTCN 0560139994
3. SENDER EMMANUEL OKOYE
4. AMOUNT $5,000
BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST 5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP THE BALANCE SUM. SO I WANT YOU TO SEND THE AMOUNT YOU HAVE AT HAND. WITH THIS INFORMATION BELLOW. AND UPDATE US AMOUNT THAT YOU SEND AND THE MTCN.SEND THE PAYMENT DETAIL TO THIS EMAIL,(officecustomerscare@yahoo.com)
1. RECEIVER NAME… Ikwunne O Anthony
2. COUNTRY… BENIN REPUBLIC.
3. CITY… COTONOU.
4. TEST QUESTION…HONEST
5. ANSWER…TRUST.

THIS LAST NOTICE TO YOU IF YOU FAIL TO SEND THE MONEY TODAY YOUR PAYMENT FILE WILL BE CANCEL FINAL SO RUSH TO WESTERN UNION OR MONEY GRAM NOW AND SEND ANY MONEY THAT YOU HAVE AT HAND NOW START FROM $40 TO UP $250,
CALL ME ON THIS LINE AS SOON AS YOU SEND THE MONEY +22968377742
DR.CHINEYE NWACHUKWU
OPRATION MANAGER.
WESTERN UNION DEPARTMENT
PHONE NO.. +229-98677751

HEADER:

Return-Path: <office_dooog@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.73
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: YTQQLVYWLDtr8GvJiSxswwRjP7wnkQFwbp2etVmaNl0FiaXv WEWUyzcgnOMV_Qxqdh9W6bDVUk0oJ2n4H_.OqH3FVMd.Y5SeQLY8WPB3FzvF PDksuUJsc8jsOTNRuyWFfYR3l5wAZDJgIWuiiGdSmgdTu68C3rqyg3O3KdWs h.EODC.8..TyOEAnTAvAstMaGS8Ncy0SIJObOaOjtoBxXs6HTVJjL2nLqQq. V8jcqhibon.BQ9tsji3ubP5LyOllUnFxk7kElsMu7n0vVWWSlivsKIy_S5n1 TnjjQsj6Z6unrH0LPjxjeSxKbAjjeU63LUw4W.D9he2EEs26JXAWNlSyN_RA mHtPVevectbOeAKgC.m._frVA4tVlBJnUDlnVGkTYGWpICSFxTT9LPW_EEeJ l2XotLG4IwrFUfDfi_oT5YhbAo7jPwjxliFYxO_jm1h_wnaqEAIoQUqbckjp VIOOy.9bM6cUUjn4sXuLElKl.HyFw3R3uBNExQYnmx4RLVovyUrURD0ciS64 y4A8HjS0d8vV45llBD7G.G.oahtQT4gZsScBryrPWxrTQ3pLGp8tSk2zK.n2 eeTHvEQSRnZIbN0eOuFt75vrczEzEp24_Wxy.kkTt24Ghr67RLbx14T8AWJX oN_fjH0I4fLe4bZg9kWJjC5AIUtbrQ2yjsGa8Rqmniy4tDcDdplQBJNCIttH Y6iPtc8dzN6XRG89qgna5ydQU4LybEz.EW03VSf5bIAK7G7wCnLMhQCLLxgk ly1aVYK.aBw2ZGGdBfsnGxEQGmjWgPW9Y8yaS38MKaKk5BlVKjdKTv4Du9tr 7v1Q0Ahg1rbEQYh8bXhTn4R03SCnAeBhjAproiLkSzIk_nlJpbqzYS_tDYFN eublP_kgPayXAilWx.ksYpuHs_SFNkLaI2tWIn4oFvj8Hul6cqhvS1pJwTK2 8xjAkTjf5BRCJ73jx3wjykpTf9CXKVLe4qVn43MdJwIGfeb9p6tuMcY5ae7w c0GAOM3ZK4N_pO93ZKX2sJA.aGW8uNMDRTGyX1W7L7EKmy.ZYJQMjrOnd1Pp 8VcXJpyj7WUoKAXFir41peZR3kuJAGhW1GbparzRRCsM53A5wxeRRRvbeQlP o9SRMR9hJ7G68eklKQlZiNlLHYAN75iIROMHam0GQkoQl658wOksxxV0w1yE mwld8PgOs6.ieT5hfoq6JOm_CZnFaWvDCuNdzu7iw15xSb996aG1QW0ovKDm ivdO.r3OOe2nezrbgWHscU8DcPD0SD__8p7aOAMpHGW.0iovFBMBhXwhAkfD _c5Tjzjt4SpvsBLMK1O5olWM9ZTOgPGebcxgdbmbvX9l8w–
X-Originating-IP: [203.188.201.73]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm9-vm7.bullet.mail.tp2.yahoo.com) (203.188.201.73) by mta1299.mail.sk1.yahoo.com with SMTP; Thu, 15 Nov 2012 00:06:47 -0800
Received: from [203.188.200.142] by nm9.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 597653.91745.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 1033 invoked by uid 60001); 15 Nov 2012 08:06:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1352966804; bh=sqgSO8xP/LR+hXQMdA2e6Ah1eNeIaTHiSoq/jXQJhqw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Yws8UW5RVEL2oPJjowNq8quCXz9OzL0CxZrfGMUtTLq9P49zyzmh4cHIIaccgUS6cadGW2uanBjRYI1LgN7qnDfXWjIk1fJUorh8XSrtSnhaoUyUmvLuinqV/FZQLQV6ArVs06/OCE6rJG6RrChDzUt4hI5ALQRFiJ3ZkZnKHy8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Lytcrsw3vUiLafw/lAGi2G0Q0Tb6yrnlT4ruv+ReTjQFhJriBDR+YxFNsAJmBt2mYpnus+zpYYvm4eYTFIsF0fqvBhc21W3x1a+iiSAPgC+CPtqGdn9cWtDgfR5n6UI9cuY9jwzCd+BU5PzXNKOXbca69Rp1IZVW4Uh5V+L0jKc=;
X-YMail-OSG: O7Gnv7UVM1lkD_jTVvQ9yvdVYlFxea2vZYOteXXHXMW9Qko jdT9UCaq6
Received: from [41.216.44.199] by web92416.mail.cnh.yahoo.com via HTTP; Thu, 15 Nov 2012 16:06:43 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1352966803.94317.YahooMailClassic@web92416.mail.cnh.yahoo.com>
Date: Thu, 15 Nov 2012 16:06:43 +0800 (CST)
From: “DR.CHINEYE NWACHUKWU” <office_dooog@yahoo.cn>
Reply-To: officecustomerscare@yahoo.com
Subject: WESTERN UNION MONEY
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1574124242-396125434-1352966803=:94317″
Content-Length: 14282

HEADER NUMBER TWO:

Return-Path: <officecustomerscare@yahoo.com>
X-YahooFilteredBulk: 98.139.212.160
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: A6td62IWLDuBmelQKJEhijgTEL0P5R2xOPPy_._RsvsdzBaH yiBrnQT0925psK.s7SNHcBYe49AU0Ul3ICxEk7jQrKYkMrnITllaNYEqTeoQ pszSKc.CXds6vyKRGay5HbkIm5xdJL06qMYJeuDndMfXhl.KtXNDPBcZw0BO e7rSU1yq9Tq0AIKYLibJS5Ji7cCOJbYxKoA4yfOsJcdoBZHzSv6nABQ1E6Zn uABQykHao.NClcwPP.1B0.6GNP31WL93qUf8JoRj3B6BR75xwrIFYRdUy4G5 262Inle71_i99iHg0IqLKmQNy_9XV4J2klJ79za74Jts7ST_TwEjurl5e8Jf _PAY8p3MdVI4fsKogQpHgxR1s5wZIhK1pQhdQaLszisflXZsORhhjrtlapUr A73MhrwdcfdcXSqVSmfpwdzxBXkcV.4BTYIqHGTGZqh2qwsUty8igYWrIIoh sDVyJCRsLDsvD1rqVdGkrQYLcRjGVehq2_k3u0KTIr1aNYkrfLPSdcEY1Bwq _gBGoox6wsKZPkPuqCx89Hzc4hLvUbS8W9BFJLxlj2Ey4nLAmaKnIpqZdMjl 4hcVV8tlsvsuT4tYNW0lHggMDR0Z8qztWv3TT5X17FkNatwLR9Z3cgkoLfCe h1gP7PEELa47jNfNMRIofd8zaQNS9kVxpKl_mOEUV16Q5hPPsaEiL6jrdBvJ K6WVdOmRxYs9LETX5HhMZI.tT1kO_.t.VDGWOxQqI5bwTuY_si3Nmyg1gMMm T8G5YTa4tuftY3yPi.IVm50h7zhHPJYz43C4ze0iES8nuHCXpgcdO8QkvWJB rul3g18dawtTywGuPNr8L3z3YwhxzwgJcvrBnnqbT5tMGKriaFsDtUb7QCVT 2w59IxZtgg9QIbZbCwx.wO.AS6EIIO3Rg5h442qemVR0NnhI_i7tXeZ5Z8Xk aQNqbSBI0ZdY3J98pAMrUI4GfLJlT4aKyCWKpbXobriv6gfG7HkyNwKTik71 7D9lycclsvAe_RoyDEcUHh7NIQjBllyIJ0dBWYAMIc8k6dp2QTcItskcss36 r0H0FyF1YAuULXqdMRUTwafuLsHIAlqmvCKb33f8Lto0_eqFpy7rblQ1lMkc BJH0Jy_MYFo8JsxlaV6gIJJv30.DknRRqr0e79ga9ucQfYVgmaU4DApKHtwd c_AgySu.BPiKcidO0VJeW8osusxFm4T7JiwASuwuzGclt9WW7DJbihfcQK7u ThBXA0In8NnC0stWZn8vKuG1.rxwVgaK0RBVZrsxG_Z_Bz4ilkET7YqZ
X-Originating-IP: [98.139.212.160]
Authentication-Results: mta1187.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm1.bullet.mail.bf1.yahoo.com) (98.139.212.160) by mta1187.mail.bf1.yahoo.com with SMTP; Sun, 02 Dec 2012 22:54:20 -0800
Received: from [98.139.215.141] by nm1.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:54:17 -0000
Received: from [98.139.212.195] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:54:17 -0000
Received: from [127.0.0.1] by omp1004.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:54:17 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 296448.58568.bm@omp1004.mail.bf1.yahoo.com
Received: (qmail 29676 invoked by uid 60001); 3 Dec 2012 06:54:17 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354517657; bh=kJDT5cjpbLJ82eNurct1MB2GVVciWeGexi7i426BwJ0=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=LDRcgojsiWMlx1x+zCJeK8Ij7oJzAHg3xJYyco2XPFGssWdcTEnSoZAGjixPokWJ+LDm55PhuiuBXjOJfsPy6T+9cBwGl1tr3c9YMIZqEDPJDTN71V1pLXxI0Z53oNGyvQGAKmgnZ5zLuqERI3krJzVxqA2tm5oktP+RePDjv4k=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=xzEPklSUYsGtcFrb03xI5tsNxxPpLgFzq18y0B3ZDo3LD8wtm6LVTwMrowI1STv1RL9L457GvMEljRaUkoVhdbBdV1STmPOxSQd+Y8Y9sci9kKl6bsG0WmAeJyC/t7sWZj6W6k9zb8aPt0VG1++MsK/OPLrVlDdO4+4nkufIhXQ=;
X-YMail-OSG: 6N4vh_4VM1mbdEGhvO_RyhbLAeLnsPGi6s8aQaiHe8YX6W. rhuE7fSBvQ_ftU4Al5JgYAo2Z.5DOZ2i59WMXv.THlBBKjJP6NpUUvxYnjKu _Ch_mo433YiqyQ6hPEZDCdVAvfc0zg8.lue8uGl07GOkw4dCa5oKTjUTAm99 HV.Cu01qyMkmDo6cO.4ZIVBnQuvfS2kXm5CUxG73z6a.usxaxPwQIaHHCnVc 62hrAx3MizJn6OKWk_tno8l8aN0E0q3ZqZ3MgL0J.ELjO3LM2OUOTDQq4UMV MpGkfD_TVZ1Ub0D_mAZviZbdEGcjVPrLPP1P0gwmgc.4VNHtsoc.NbzI9dst 1CY1zoGFzHD8VBdTiapnjUaBLRd_gzJW9wxO7UJN1lbkYeEooyqEUO2rlTP3 8EnxRxTJVq8ufB2a4HIoWYk58FVBQOYBUQt2qeofOJ.yCB5WMpCTnSWAou1R FB2YGoeDoR6EwEM1VjresV0AXyzncUORA7KxmI2VazxlIWw8OaIyI2lJ46Ev IMBLQGb8.z8msK0PntWCMe8q4VFGbHEBTrE7_MCCcFlF5jOQHaBkH3kSIXcz 3dLNSl5INWPJkgb86z9ep0VZjC7REgroyqPtENcY2HOfwvv7Nj5AKPnpGSHE fnttfWkSDsb6azL8mMX7.USb5gpo4YndcGUMR4q6eVNJPT9rlyq8ikAX_y9H MGakiGkTmX61IKpy6Eh2DB3b5KyvGe2L.8Xsk43UqPmgIRxV2.XWcPjfS3A3 dbjDPDVukFI_K4XlNP35lyHjDvUqqQW76TSNEwIcgvDqMDlHGqZtu1udDwiW bKKBOPlKfuwA0ybkhD_qMkcjmbfdLaefAP9tBMLq.C.inNz4Mc2psagyYQ8L 9Rd11ST_9FoHaHhMaAfw7LZxBv_BKfhwrcYm3z47ua41oaexPi2rM.gi7_jr eErSGcegHPgGDu4k9QdQZnlef4vyJh6qVVgSyNM7kREotHk4q_4YDUNLnv_y ytY9frrXOKDuQlQuL27qL0OzDNT06xLZF5qQxDX27vpxRQIk3ogG6Zj0E0yU QeJjwWRUQ.f9vkaGHImfB2lSmXDVeiOPggMIa4ca8vI70ulU8nUbo7H0Iqkh QAK_UHRHySczm54TBpHFMXJ.PYL9i6g0XZn355ZS0hBg9sUF0pSnH4dRkFzo z0OdBlmbq6eh_Ccnkb3lFuyiG2hg0DYRmCAnHRgxrbJRwldN67jL1q29hBYv 5sPP7P.l868cM05.1wYpA.IyWxGZ9jQzOsv.rNCo0h3KlCWKq12K.n2q.ums NfL7jWHpgFzd4prV2IJXj3annZG8eJjh.WR_t1d6Lb7YaRgnrhpjBGsGJEGY tl7E.ZLgdGnoNsGyPl5uMX0KzXx7xgZUDNwcfPLM8f46kK7PnkLygDDck4RH kMeoO6C6wundts4OTXJNTVtYa_RsHIag6Pnz9gpJMIbDACbdlLkx0dIJCrO9 hPNqyxguptR9A5dSXr18lS8XXCSCK5gOKJLnO.9KZOuiEClvtS0N6WwAWZrl X2TMtwuPI4GWk6uZsLjYkjnhzjK4Mue.pkkyAYOsx0nBrF0SqClph.mLP2gg RhYqCqcizaYXnSMxyfaoTk_mXOGVwkQwT.0pebeMajeWZPdbnj6zDFyB_RtG H7CuPDxc5pWFpmx1bkgcxV7u1OUAD86cTP5eaMSMPAqAxvGh4TowZNhdna7q slJu5uK3vme8zDsu7tZsILoCZMYQaTeofrr11QpU10u_m3CHKahxlTmDZkNO 7p992wagF0rF7Bdi4y7GzQieBnbT3KxvtE_iqPB.CxU97R34AhS54EMNyoP3 SiSQHLkKl2d2j0KpBNsM2HSxrAEU.kNZELw6bddzBXAauVDntm09i0JGANED G2xgGt5pEO2Alp1qtPBXd_99vBqB5HT7apOhQaBTsv0XAjNF6Li6F1RmvD50 j0JV3aj8sI_1BsYTUE2yC.ZgDSB7SZZ.Pwb9geGqA_0sX6hekZx4pkDG3sdP DBP..MfaKKmAM5w0DCD4o8BWgmTmrR26Kk4xKbIrxjGAgMqUl_waE.ECw_pY Y_Y1SJQ6cfGYqnA5yzOun8Eo143DJeS5s9IGCcTObOllEy3eUFK6nnRbOJs3 lULboYK_jjrkdKgvmp094UDGXja3TAzBSgYRF80h9bxhA3KZcdbDgpohqyHu m6bU3Q_nLyZJI9SQM64_gK7qBC00VeEEk49nJmvqiWCkZ5Uy3AGJus92STx_ WAVnfiNnIYWk3ZzJApHqt8AiIVXkyaFeBWp_Fh3qoLl92IP0_HFJUWrxIv3L aSTEBDdjcpzTmABNgDMx7K8m_FfJ0jQIvVXCrlyTd6rUzr3uBBotATWAWYAj oZDlW5yfOI3JL77KWHti.eweN2ChJM2PjUEFOf.bV5kOFMWLXAcDRs4wbXLd yrml46PWmL6DFLXgiAxgukFjqtngKvuLYspZZA8Wckti7qbw1IiRShAGeFrh OAGrEkrAuQP7QuAqq3GzL_k2gv40JNwF0c07nBYWRnmV9I9tCMbVQ44uePKv LQTVW8QKtVms0JkSuETtylaRgpYVTI7kg_t47zo33UKUBUi1iuCFhiPnX_Yu wbOaPugLirBbc45fE_ioAVdMCBb4FcWvaZsGIlP47X4NjQzagetkLuf9JvSq RHJlD.eVSXsO55Eo7kpxOR7eMZACKC1xI7c1XJ5fJguDWlIusVuFgCLNO4cA t7A–
Received: from [41.216.44.199] by web161602.mail.bf1.yahoo.com via HTTP; Sun, 02 Dec 2012 22:54:16 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354517656.28058.YahooMailClassic@web161602.mail.bf1.yahoo.com>
Date: Sun, 2 Dec 2012 22:54:16 -0800 (PST)
From: This sender is DomainKeys verified Office Customerscare <officecustomerscare@yahoo.com> Add sender to Contacts
Subject: Re: WESTERN UNION MONEY
To: Porky Pig <porkyexposed@yahoo.com>
In-Reply-To: <1354346435.35920.YahooMailClassic@web161004.mail.bf1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”406169123-855337282-1354517656=:28058″

DR CHINEYE NWACHUKWU – office_dooog@yahoo.cn – officecustomerscare@yahoo.com

41.216.44.199

Associated Email: kennethkuye58@yahoo.com.ph; emscompany78@yahoo.com.au
Associated Name: Kenneth Kuye
IP: 41.216.44.199

chukwuemma57@yahoo.com.ph – 82.57.200.117 alberto.tonietti1@alice.it

Received: from (41.216.44.199) by alicemail.rossoalice.alice.it; Thu, 28 Jun 2012 03:10:18 +0200
Message-ID: <13830a382f0.alberto.tonietti1@alice.it>
Date: Thu, 28 Jun 2012 03:10:18 +0200 (CEST)
From: CLERIOT PRUNE STELLA <alberto.tonietti1@alice.it>
Reply-To: cleriotprunestella@yahoo.com

Received: from (41.216.44.199) by alicemail.rossoalice.alice.it

Same IP – (phishing attempt) – Mr Eng David Kalu – chukwuemma57@yahoo.com.ph – REPLY-TO: ww.ups.com@superposta.com – Received: from [41.216.44.199] by web190206.mail.sg3.yahoo.com via HTTP 98.139.91.244 Phone # +229-98344889

Mr PAUL JOHNSON <westernu749@gmail.com>

 
Leave a comment

Posted by on 12/01/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: