RSS

Tag Archives: ATM VISA CARD CENTER

United Nations Organization London Regional (UN)

419 LOTTERY SCAM / RECOVERY SCAM

Ban Ki Moon also goes under the following names;
Jim Ovia
James Ovia Glory
Zeniith Bank PLC
Charles Brown
John Smith
Sarah Smith
Maria Jimmy
Barclay’s Bank
Paul Morgan
Andrew Johnson
Davis Milton

He has used many names over the months and it’s hard to keep up with them however, if you click here you will see a list of this Nigerian scammers previous emails, names and addresses. You can also type each name individually in the search bar on the top right-hand corner.

UNITED NATION
3 Whitehall Court London
SW1A 2EL United Kingdom

Attention:Beneficairy.

How are you today? Hope all is well with you and family? You may not understand why this mail came to you. I wish to inform you that we have been having a meeting with the IMF for the past 1 month now which ends yesterday in regards to innocent individual who has been a victim of scam that was going on in African and Europe, this Organization(UNITED NATIONS) have agreed to compensate them with the sum of US$750,000.00.

This includes every foreign contractors that may have not received their Contract sum, and some people that have an unfinished Transaction/International Businesses that failed due to one problem or the other.

Going through our data base your email contacts and name was found on the list and that is why we are contacting you for you to receive your own compensation and this said money will be paid via ATM MASTER CARD Payment Method which is the easiest and safer way of receiving without any hindrance and it will be issued to you from our Authorized Bank in Nigeria(Africa) You are advised to contact

Mr.Herbert Wigwe
Email: unrepherbert@yahoo.co.uk
Tel: 234-815-573-7125

As he is our Legal Representative in Nigeria, contact him immediately for your own ATM MASTER CARD, you should send him your full Name and telephone number your confidential address where you want him to send the Card.
Hoping to hear from you as soon as you receive your MASTER CARD.

Best regards,
Secretary-General
Mr. Ban Ki-Moon

Below is another email received on January 26, 2013 –

Attention: Beneficiary,

We wish to inform you that the UN / WORLD BANK ORGANIZATION facilitated a round-table meetings which just ended some days ago, and it has been agreed upon that a compensation payment of US$2,500,000.00 should be paid to scammed individuals whose Names and E-mails have been chosen through an open E-mail ballot system.Your name was included and that is why we are contacting you.

This includes every foreign beneficiaries that may have not received their contract/Inheritance sum and people that have had an unfinished transaction or international businesses that failed due to Government problems etc. Also, wehave been receiving complains from beneficiaries informing us that they are yet to receive their payments due to scams emanating from Africa as well as some financial institutions.

Due to high rate of complains by beneficiaries henceforth, MR. JIM OVIA is no more incharge to make any foreign payments and we will like to get you informed that you will not be receiving your payment through Bank Drafts due to illegal Bank Drafts circulating everywhere. In view of this, beneficiaries are to receive their payments via ATM CARD through our correspondence payment center affiliated with INTERCONTINENTAL PAYMENT CENTER. However, it is my pleasure to inform you that your ATM CARD no:6000101025717299 have been reserved for you which contains your certified amount.

You are hereby advised to contact our payment representative affiliated with
INTERCONTINENTAL PAYMENT CENTER with your payment Code: 6823.You are advised to contact Dr. Charles Brown of our paying center. Contact him immediately for your payment. This meeting was first held on the 8th of April 2003.

You can view this page for your perusal:
http://www.un.org/News/Press/ docs/2003/ik344.doc.htm

Therefore, you should send him your full Names and telephone number, your correctmailing address where you want to receive your ATM Card:

Contact Name: DR.Charles Brown
CONTACT PERSON: DR.CHARLES BROWN
E-MAIL:dr.charlesbrownb@yahoo.com.ph

You are required to contact the above person for your ATM Card, and furnish him with the following information that will be required to set-up the card in your name.

1. Your Full name:
2. Your Country:
3. Contact Address:
4. Telephone Number:
5. Fax Number:
6. Marital Status:
7. Occupation:
8. Sex:
9. Age:
10. A Copy Of Your Identity Attached.

Meanwhile, your Secret Pin Number will be e-mailed to you electronically for security reasons as soon as you confirm the receipt of your ATM CARD. Congratulations as I look forward to hear from you as soon as you confirm your payment.

Regards,
Secretary-General, Ban Ki-Moon.
http://www.un.org/sg/
NB: Dealing with MR. JIM OVIA is at your own risk

Return-Path: <secretary@arab.com>
X-YahooFilteredBulk: 208.68.171.34
X-Originating-IP: [208.68.171.34]
Authentication-Results: mta1279.mail.mud.yahoo.com from=arab.com; domainkeys=neutral (no sig); from=arab.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO hotelexpertmessaging.com) (208.68.171.34) by mta1279.mail.mud.yahoo.com with SMTP; Fri, 18 Jan 2013 15:23:36 -0800
Received: from server.indianjobsonline.com [216.246.77.145] by hotelexpertmessaging.com with SMTP; Fri, 18 Jan 2013 13:44:37 -0500
Reply-To: <dr.charlesbrownb@yahoo.com.ph>
From: “Secretary-General”<secretary@arab.com>
Subject: foreign beneficiaries

Secretary-General secretary@arab.com REPLY-ADDRESS: dr.charlesbrownb@yahoo.com.ph
IP_USED: 208.68.171.34 RECEIVED_IP: 216.246.77.145

12/13/12 EMAIL –

SUBJECT: Greetings from the United Nations Organization London Regional (UN)

EMAIL: INTERNATIONAL FUNDS TRANSFER / AUDIT UNIT

UNITED NATION COMPENSATION COMMITTEE
LONDON REGIONAL HEADQUARTER
RELEASE CODE No:BC0998775BV009

Wining payment of $US1, 620,000 from United Nations London.

Beneficiary Email id owner.

Greetings from the United Nations Organization London Regional (UN) global office. This is to officially bring to your notice that The ATM card payment
center (BACLAYS BANK PLC LONDON) Accountant Director MR JOHN J SMITH has been given express instruction to issue out in your favor the sum of $1,620,000 USD ( One Million, Six Hundred and Twenty Thousand United States Dollars ) in ATM Master Card functional in Any automatic Machine as your wining payment for this Fiscal year 2012 this instructions is from the custody of the United Nation representative office London this is for abbreviation of the rate of poverty as we saw your name on the list of unpaid individuals, The United Nation Compensation Commission (UNCC) was created in 1991 as a subsidiary organ of the UN Security Council and the payment has been approved by us to be release to you as we notice your payment has been delayed by uncertain reasons which has just been resolved by us through our power so you are free to receive your funds now.

We hereby issued you our code of conduct, which is (ATM-UNO/UNCC-5507) so You have to indicate this code when contacting the card Issuance Center with your contact details as stated below, You are hereby to contact the BACLAYS BANK PLC LONDON with the information below as soon as you receive this email for immediate release of your payment to you so that you can be the first beneficiary to receive its fund since the paying office have a lots of beneficiary to pay as directed by (UNO/UNCC).

Full Name:
Address:
Telephone No:
Age:
Occupation:
Country:
Identity Card if any has no copy:

Below is BACLAYS BANK PLC LONDON ATM Card issuance center contact information contact them now for the immediate release of your payment to you since it has been approved by United Nations and World Bank Group meanwhile do not be taken unaware that all the necessary document backing the fund up has been forwarded to the custody of the paying bank to ensure smooth release of your $ 1,620,000 USD (One Million, Six Hundred and Twenty Thousand United States Dollars) to you as directed by us.

CONTACT:
BACLAYS BANK PLC LONDON
CONTACT PERSON::MR JOHN J SMITH.
CALL THE BANK AT:: +44-7010726181
Email:: ww.barclaysgrp@xd.ae

Do let us know immediately you have contacted BACLAYS BANK PLC LONDON for your payment for more advise as we are keeping close on them to ensure you are paid as soon as possible, Meanwhile do not forget your Code of Conduct (ATM-UNO/UNCC-5507) when contacting the bank as it is very important.

Note::The reason you are receiving this notification in your mailbox is because we found your name in our list of people their payment has been delayed so we decide to intervene and help you get paid which we have done.

We are waiting for your prompt update once you have contact BACLAYS BANK PLC LONDON.

In God We Trust.
Zonal co-ordinator
Signed Mrs Maria Jimmy
Approved Mr Ban Ki Moon
United Nation Secretary General

HEADER:

Return-Path: <mohdahmed@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.182
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: plPzIh0WLDtQJVOBjloakInG29IH8L6ACOxnSz3VqgMIP5Bx onDZ8XO5T_ODL9iTSrrjj9IhQVLskP0dIAcNXTK8wdnDE9UDaSBlQ748jVCx jNqkhgs_BoW.OuUQ.HjUeWHMixT5QnEIfx2uLIKkU.3cTF5Ldo8ujcF3ouYp TKaiwFOZno.njMgWijKflKSoZe5_VG6ZEXfdFVSa8zPkZNeHySYH_b8AOpQi x_T6Diamf1URTzai8.YWsMFTVv2ZXF7qnsyTPIjKAoIOmHXnuUHsL4AdEaw1 rfG4bs1M_0OuasFb5KfYyVEs3u2TKMH1CuuVLvmMPbgUwkZpRuIcXU8CEGF3 fVfJ4i36s_Fa6wfTwjPOn4LOsXSVrSVmYmN5HYF5rdfdGcASarxCd8TsdqD. C9NJo0H6elh2VZozH_A3DOXbrlr5S_7bgNhNGoiq9r3JXDtW5orjYXxGIWOz EEXGAiBAJwbh0YfObEirK.NSJUIZeI.IcAUnzg6qomnCdMjBrnfRstYtfp3s fwxn.T8UInj0SmEU0GXeeyCPG3ZwqyJpsGFxvUXRCfo9JaXUGUOEcUFwgf4S i8LbnD226rGkaUMT_eqPj8PaagtaxkuDv0RyoCuQnIL4BQFcATuoZFDFPRiJ PSP9qJ_pJgaFWDHO8JOqsVnZrqduJtj8B1SiYpe3AK87Fw1EQ8PiNNS5y921 hxZJspghZg.d3aQ.EKYqca4IF6T3JpotkY3FAwigr45BmOcCCR2Txw4cYa8O kAllxUkmIWCmAjfmG4hvBovo37Uai62cP30mfVjKmttUj5MlSqGEccnmhuiY 2ExSRHj0SIjbG9VF7WsWsJG57t1zTl_BYA_rHNX.Ro7CzO0tn.2QZ6m1GIpD Bfik5UI6raKMRpi9OxVChp1j8O3vkMcAlX7iIBvdpTCPAc5W9ktDLvjOUqf7 U0dXKm5_Mxi4BWk9KfQPM3RXnL29lJFq_QjL3wvVfbyAbAeUtuXse2iM97XU n8sy.iJyWgnoLHZhQTEaEnvFWe_c3UBSxQf33tTw.iOujQ4y4uWgyY6.5HbJ yIeEN68kvrwYYVZoLtjNcfEPjb2.ETZPik_z8sanHvZu93aPDc2F0canjD2R lgmO_KmgxcMOh.cKAZGkm_BBP3TKxztvcmyBrdt_N_xyEx678t_OpCP7JdMj VJjC.6lNNaD3BWmo4AaKfPtguEDwK4_sbnJ.TPdEIpIkblVNe5NcVUIT4ZxI NB7ZDKX0KO5EbbAMNkgBJGG.XhFNY1IOvvE6945HdSkHiLDG6Vb3ZgNOSI0M UjyFCIPMC2mVfnhlQqHPOHTkRjIv450eJcji.Q220RNETg7xIN3Rkz6WjxK5 CPdH7Y7iOAJzJDWsN_7RbQPbLZb8JiyhtRsMAILrmyrJV9jXh4HSo0T_1e3P sry9qMVo7cqgT8M3rYtxyc_6QHpHMhO.FS1v8qHzPLbI6Sl_GTb9iWztMboA 2Q–
X-Originating-IP: [203.188.200.182]
Authentication-Results: mta1045.mail.ac4.yahoo.com from=yahoo.cn; domainkeys=fail (bad sig); from=yahoo.cn; dkim=permerror (bad sig)
Received: from 127.0.0.1 (EHLO nm2-vm0.bullet.mail.tp2.yahoo.com) (203.188.200.182) by mta1045.mail.ac4.yahoo.com with SMTP; Tue, 16 Oct 2012 11:52:22 -0700
Received: from [203.188.200.82] by nm2.bullet.mail.tp2.yahoo.com with NNFMP; 16 Oct 2012 18:52:20 -0000
Received: from [119.42.242.156] by tm3.bullet.mail.tp2.yahoo.com with NNFMP; 16 Oct 2012 18:52:20 -0000
Received: from [127.0.0.1] by omp1003.mail.cnh.yahoo.com with NNFMP; 16 Oct 2012 18:52:20 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 177687.88001.bm@omp1003.mail.cnh.yahoo.com
Received: (qmail 94232 invoked by uid 60001); 16 Oct 2012 18:52:19 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1350413539; bh=iGDO00ZmYitKlGbDrey0iSYkzbda8HTST44iKSkG6vI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=fCnML5yO+lRVxbeS6R9XahVrp7RSi5eeVK1uIE+9cn2/J7Quqg88zzWfTXDGvh3uAhcfxDFlhyOoEmKvjAmqn3OST+fXNs+0/3R9cccPEh6DyRLp2YrAUYe0++dsT5YoeAIHl1gif/EjtJOeLBxJdQe5fQwHwm7eGoCUTMykIHY=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tYSCiHX+xrxbGmlEE0iu6AS0kKNZKWVPtcULjZjsk5/FuDO13CRUqYpZv5YuJIv9s8vOpBQQqBpzA39ehRMIZO22VR+6jUx+u0wHnwyLDUrZZsGh/Kg+klvjnnf5cUJWvCUHX01pxC1rSt6NOxXNjlGl+SGsVbLQd6036lpQm48=;
X-YMail-OSG: U13DIzoVM1k1WOQchhlHUn_Z4ZLanAUc2ScFYZjW1u7FK_u VgYM8YbEX
Received: from [106.67.78.89] by web92413.mail.cnh.yahoo.com via HTTP; Wed, 17 Oct 2012 02:52:19 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1350413539.87773.YahooMailClassic@web92413.mail.cnh.yahoo.com>
Date: Wed, 17 Oct 2012 02:52:19 +0800 (CST)
From: “United Nations Organization London Regional \(UN\)” <mohdahmed@yahoo.cn>
Reply-To: ww.barclaysgrp@xd.ae
Subject: Greetings from the United Nations Organization London Regional (UN)

FROM: United Nations Organization London Regional (UN) mohdahmed@yahoo.cn RETURN-PATH: mohdahmed@yahoo.cn REPLY-ADDRESS: ww.barclaysgrp@xd.ae

RECEIVED FROM: 106.67.78.89 X-YAHOO-FILTER-BULK: 203.188.200.182 

Mr. Herbert Wigwe
unrepherbert@yahoo.co.uk
2348155737125

 

 
2 Comments

Posted by on 12/13/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“DR FRANK COLLINS” – DR COLLINS PETER

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: Below will show two email headers sent to two different people (including myself) – It’s the same scammer, same scam as well. The header information is different however so check both for the different IP’s and addresses the scammer is currently using.

UPDATE: Dr Frank Collins is also going by “Dr Collins Peter” and “Collins Peter E” under the email addresses / IP’s – “Collins, Peter E” <collinsp@newtrier.k12.il.us> <info@notice.com>  YAHOO-FILTERBULK: 157.55.116.165 RECEIVED: by 192.168.194.152 — X-ORIGINATING-IP: 41.71.173.93 Also,  Dr Collins Peter web52644778980000x@att.net REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com – Scammers number: +2347030115459 X-YAHOOFILTERBULK: 98.136.218.126 — For more information click: Dr Collins Peter

UPDATE EMAIL FROM DR FRANK COLLINS A.K.A DR COLLINS PETER (I dont even think he realizes who he has emailed because he emails me with different, similar names on a daily basis.)

EMAIL: Attn: ,
This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-703-011-5459

_______________________________________

SUBJECT: PAYMENT VIA ATM CARD.

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $10.M

HEADER:

Return-Path: <webxx120999xxxxxxx@att.net>
X-YahooFilteredBulk: 98.138.91.88
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: FaLTslcWLDv_37lDMJwvUepYgmnqCzD2WWiLYIVYEvzWiVdj yeMdZg1sVqQZNMLZIrI8jrEhVaMXPsJIY6kRf0cbjnqQCPsaLbBdN2aERrfI RwOChZVFmKW9DzDxir.njJLHD.QY8j_y83jLRI4.AuI7k8QKdHjPvXXJYEFV 3YQAPmqS_78yqhLNbejZcKD5irk7feyqBo.GgWWRjUtr0XeJzJNqaql0h8sA e8RvUpWShCVHN2SyD1tuM0Deb4D1Ji8Vbh6LO0l1rw9cI0_sIz.vHpe_EiGP kHJSq4cVZ_zI24xSaJVH2nairx_S7dPagQ15pHcUhTSBMqGEgXXNeB1Y2oeP 3JU6qx6vSLkN2q.zt9EL5Vwas.VQ3VnnTXDqHLBdVcKU94hP0GlXAupk.DHM obtlUYCC1aCFRuuf3fyqc0LusjLnspK7JnjoOa4trRGPkJ_SlfDp0ggLrEaT v9a7lqaWeBT9EICtLA0FkLq3C2n40JFv19b2vJ8kTWkPK9_CQXXHvPmE9PZ3 kFs1luoQlTk_lzaBG6mXtSkUeA_7vvUTiNlT90e4_xcWHLkMi_qHUB6.MOXY KpjgBBptr6h8HH8BTrub.bb.IWuBN9wzFL2saNzKwsyxCm4lKMw9.xwDm5uJ Gq5wsKY8oAk.ZAm83V.RXXdQZhrYHzq2HI4TEsDuXnxCeBPNS3yCscgHGdua .5bviyYzefeg3tnvzHHkzRlzxSKw4QvlmuuqcChqscR9kCPiJLD.cgAs4kGP VstUFHd.bksAH552CD3i0lwkON5VfmeiESgRCGTPFvptnIKly2v3rZiX6esg GPPtVuH2VF9JGdJc2Ymbkp7azmUteBWNDdU3UBhVs441.EpCaWrI_sm_fe57 OiQyUOywnO1yRAtKJ_SFta4rGiPKLZ0KmWOm2iWxo40gyrpOgSF7vvvDlD.8 TTvxrpElU4SLFTn.GO1zFIFIOghPlKF4MTDaE1.cfSBA7OvaqPPhZB7CbD_P PbifHGwGIUcvjwXFo2GX_MJ9efyRaqwJ8RNv5bv_PmOjBSyxnqzPybf5N4_3 8R6NtlZnqM1b4Enrf9rnVdKOJneQ2FJhZVcYPrtDlcrfum9mFoOorxfoQHmz TE17GM57C0B.ILT43WlnmpnQdle96RtuSiqxmvsRzRStRdaGzDZuic8L7wei rjZENREYOwxD5PakTFL_xFmWBDMWOtezwqcs9j2HaBsIHEPGCa_w1BQb4H7T Rhg.rsLZhUpnUmz3kwbcPdV9Pc8UNCPtAWRE0QCMgwjeBn0ZXdINEcVudxSA YTcOMC4k95wVfJ8oF7eiOod5Qae2n5Ov7WwjD_lXqOtSBIc3J87zhs.HmSjX 7WlsWTwwXn.I_l4fa3NQ.mKYBKo-
X-Originating-IP: [98.138.91.88]
Authentication-Results: mta1228.mail.sk1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.88) by mta1228.mail.sk1.yahoo.com with SMTP; Wed, 05 Dec 2012 09:33:37 -0800
Received: from [98.138.226.178] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [98.139.44.92] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 198054.18868.bm@omp1029.access.mail.sp2.yahoo.com
Received: (qmail 22514 invoked by uid 60001); 5 Dec 2012 17:33:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1354728815; bh=2E+CXVEN1MfcfJaq2e/eZV5TviX4n2QY/x1KeAa5kws=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=f9JOS/YO8YXlmc9hJrpoWT06BSgD+eIddQyPZn984pugXI47aiHJ+HigDAW5KKMMOSqrOWONnAJiCoEyKoSjzteAYzjouKnJuSd9FFAPV7YDDY5OHZP5iSipgSUv3aNEhW/Rsnl4Ln0GS2YFkeMhoGRqYTKiUP5YtCqljvaDNow=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TW9B75gLmG8YEH2Fs0wWUR6quUgNgKf4vKcOC0lU58OuZZxvfbAEilc6hFgOyOvoldI//PR2xiJZNGeYJsT5o76o0CJS8W8mbj8ANAI1PafbE8IT034u3iHRas9fZymmyVV0ARoaM4Pmz0UzVZK0Jim/YrB1484O5fKsUOiyGTM=;
X-YMail-OSG: WdGt0KwVM1lOyB0NVRZY5rrxYN4NyBpT08THjv3T0blrAYl g.fSaOnJGDgT6qOWJLehIImpPX16weUxpsraTUfiislliLwCl2K7v8Pp.iJQ a9TSaK3Cg8mAMGQLpgboaXsnY0P.gbcdPD9a2TYU3MLMz9.msdkdNVne7srD CGKrYap1ePNIkrvsumj.6_CYvw30FkImKkDHHf5IXtzUrxF4x8.QVPZL.F5P 1sCi9c6SjI1P.GeZm2DnWTw.VoPokMuHr44zOJyF208V.uJqcKGplN1blft8 NRD73m_UrMPrQXsfdMEk9IKg0jGHRledxyRP7NbPnmUmTJk5sWb6g7mibQcN lZBmrszbkEqY7Gci4Eh5lmEYhM0EH9ITd3rAkZfbRlBlo5s8MbxSVEa73EvH muyMHoTdJMpwvibAS8LsfWhBVw4Fzpyj.JdfnQdukkFQX5QRnWlt3FtcARkq hyy26DJRYTbzGN4Eyk0EL9EDXp1SGqp9Lk4FU_Cz6Hw4qjqgVzWqnIza_ijq nvI9omJY1Dw0WycuWs.OkVnfl
Received: from [108.174.51.231] by web184901.mail.gq1.yahoo.com via HTTP; Wed, 05 Dec 2012 09:33:35 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354728815.12889.YahooMailClassic@web184901.mail.gq1.yahoo.com>
Date: Wed, 5 Dec 2012 09:33:35 -0800 (PST)
From: DR FRANK COLLINS <webxx120999xxxxxxx@att.net>
Reply-To: drfranklcollin@kimo.com
Subject: PAYMENT VIA ATM CARD

FIRST EMAIL – “DR FRANK COLLINS” <webxx120999xxxxxxx@att.net> REPLY-TO: drfranklcollin@kimo.com RETURN-PATH: webxx120999xxxxxxx@att.net

SECOND EMAIL – Dr Collins Peter <webxixxxxx266xxxxx@att.net> REPLY-TO: collinpeterclaim1@yahoo.com RETURN-PATH: webxixxxxx266xxxxx@att.net

BELOW HEADER FROM COLLIN PETER EMAIL:

Return-Path: <webxixxxxx266xxxxx@att.net>
X-YahooFilteredBulk: 98.136.217.214
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 2lU7wkQWLDvBCg5Cg1wZtIwDNUzuGrZVVXK9H6ZxiRnCF9q8 3T_Z2xZXeKmdhjE03ZY1nNRa1P6Zz09tc3Suud6PVBq3vexxPmov8AXjPV9n h21FBi8fEfSTSwVFhhvzk7V6R63Puryrkha1Mb3jaVwNputKdVPkDPhjUMeo RVMMb4_9ds7LkdO1tAhp2nowUz6sKBD4buJmSanxkzHUpRwUVtPLKq8B09eN Rl25hxMaIQHn74TwJlEJoWwVxtvh8Jkr9b8xgoPVsHTD4d3rIEAmrBO8jRyd GelLKjDpe6gEZSWQukIvbii_.zMj02LUFMIXNqSXg2JTLp15U5_jUlo0usw3 1Q9ij8R.SuZ80..F80EMLcQO1SXMjqWDf6xkVHWwRChYckM8P0zLXQwmLzCh cXZIqLnw6xfz6lcwu0_mQkN.aX.hIIycQN9E431bkyzpAK8Sh0ATdnfKruuc hDUY3uEtvred._LLnnYkhYpxqfc_nSy4oYmmhRytYX5eJDo3.jrNS61KZPV6 YQ56CR6JtF_A6Hafi5rSLv5qgM4p8VJZi7448tERIhykcwaijsPjcAOenatn YK3BKAuoLWZ0KHPHNvGKAWVEbv9QWSQF39Q.EEP1LmrPyvSdcGkLUJurop.B aYWv4YFGCdGxSazNRDxvtgoiaK6SIwQ.bpgk7uq2vF3rcb50kF6JNxWrLg.n 7Tth7XBQ.W0dZ6SeRl5BddGt0PedKs6csdJXP3rAEuRx9HhVbiFWVgdNijR3 _dNog5Qebj0UNBN3_ZYEN_KnDptPkNdpsJ8OGplwzrinpWeXcnwHVgAbUTdo 18VmNYVRbtilZoPybybViqmTdRB30nDou7y.RzfJPpp93GHAGPmJapCeotd7 c17h.xTgmXwnesQYx8oH1A8HMZj9YMgj2Hn78UbjDz5iO3dLZZQwGJc37EEe Irpsy5SaXtVD8MbmmPkhMrhk8K30Dviwqq4hDE5WgxBlGVonuDQoGK3aEt2T nvWx.JhFmNOhCyTBWuANJwIBh0YVHlt7UHVip3l.jut4onQ9R4CDyP6sbX2c lfshiCRIJ9lEvHbvGo40N55AdITysTVwpsKYdhO1zKO2KEhE2HbINU3NSVAp mVO8xztcsAawulFbZ5PKA.HviU.utyPlT0yMvzwTHn_QINVPcYodx0NOT_5q eROgjgZ35jOw55jeTpgP2qOvmDNkeadY.RrCfkVM_h_Ewvbns5N8m8wKWn4F 71xz.y4o8QBLLz0jb4jMAFmUekk5PrMNZ0E-
X-Originating-IP: [98.136.217.214]
Authentication-Results: mta1191.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm9.bullet.mail.gq1.yahoo.com) (98.136.217.214) by mta1191.mail.bf1.yahoo.com with SMTP; Fri, 14 Dec 2012 03:36:45 -0800
Received: from [98.137.12.58] by nm19.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [98.139.44.70] by tm3.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [127.0.0.1] by omp1007.access.mail.sp2.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 191480.20265.bm@omp1007.access.mail.sp2.yahoo.com
Received: (qmail 75889 invoked by uid 60001); 14 Dec 2012 11:36:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355485002; bh=2TQXuFSDKzJQh2ItoNfMPDU7xRHv3E+CGrBMw/1Ns0g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=MdiZ1jC0egJ3jeK8x+wAmlqoZyMp98AiD2wzzG+et6zE3r4jYBfuYUoMttuA+gtIjRNvWXQLaTtg0u215rggtB9Wpx8OQWJMI3iQKHU+C0WdAONnnis/01rbGL8rLVp8QUEopIB3M6ep93e/l0o2GTcA+2tm8NmXdnIzOrTvHgs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tLrXvMlZ1AfWS1oRs/q6h6HUMYi/LUcbnjbU0+wRSPWQr/1rUxJ+mPFD5IS+2J+xhqTW8fnpv0P89+O46Kg0ZaIi52L7OqBpBWUtxGIOrGGuRKY65NxHoyuM/9fcPmg6OxN2t9IVr/IQmo5FIYMQAlTgtLYGxzIx8tus9kjh4UE=;
X-YMail-OSG: 3ICaliMVM1ngoXiqNpguRRh2iYwL78sXplySeVxex0hGQX. 9amYG0XA4OBV26LpGFUMshO4W2d_k7Z_a2Ijy9UC4MhQCts27.mEJf9MSo4o gLC1yrqEZW2qVfkENJcHqLvP6x22811UE_jYQp539eFIcLW5RWUDAU4t9CGn OdkUZ.I3db4Y0_pc3qHbfrO34x9zDWKUFRwLqnQ.wNCnHD8dS3WSTofCFWm8 DRISKdISfGE2ytoF4IzvXsFuyje2c_qd6tqdnmTw5Z9mBhssXb94A4biy5CF qnxB_1TEOjTWqKHDrBY4BU1EdgOFfYQNqvwQ4XtGhinDlu0jMGic.YAmQBDt z00_WMAOIdc6llHVKxJwh0yh_xgWL5D6rgLOTnmN2Mo2vI.t3Ls.zQwRBRhe SaGInzRlMMto6OJd7AVEbCSpnmZYicQHhMCbjMxGPX2KPd4Tv0fL_cU_plDm egb7i9XYQocNBXLDzdzIfmk9Um9FTZk5b6spv87aUQEG.1MjrCbB7UdYQ0uO JpvS8DhYL5XyxrsNNIFxmRpV2b8I07Jm9LTn8wKS_hqGegIf5feMr.9cGJzH 7hgKyGs0sihPG_k5JCSaI1yCjgZYK79b_xhXuvMQeLOYyQDygzxrr8813RrH cC8L9RfM7BsB3QMN75qyv.pCG1ZbybDazG.TyLuGLgdSNZ6KwYSh_mQ–
Received: from [172.162.63.104] by web185004.mail.gq1.yahoo.com via HTTP; Fri, 14 Dec 2012 03:36:42 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355485002.70723.YahooMailClassic@web185004.mail.gq1.yahoo.com>
Date: Fri, 14 Dec 2012 03:36:42 -0800 (PST)
From: Dr Collins Peter <webxixxxxx266xxxxx@att.net>
Reply-To: collinpeterclaim1@yahoo.com
Subject: ATTN:BENEFICIARY

108.174.51.231 << 98.138.91.88 <<

________________________________________

Click SCAMWARNERS for email to below header which was sent by the same scammer as above.

Return-Path: <web1xxxxx12000bvvv@att.net>
Received: from nm12-vm4.bullet.mail.gq1.yahoo.com (nm12-vm4.bullet.mail.gq1.yahoo.com [98.136.218.191])
(8.14.4/8.14.4) with ESMTP id qBAFqXcC024177
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from web1xxxxx12000bvvv@att.net)
Received: from [98.137.12.190] by nm12.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [98.139.44.75] by tm11.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [127.0.0.1] by omp1012.access.mail.sp2.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 169461.26588.bm@omp1012.access.mail.sp2.yahoo.com
Received: (qmail 11627 invoked by uid 60001); 10 Dec 2012 15:52:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355154752; bh=6IEXAnuDHUzPM2GG6BZxFSMMGXUzzTJH/x0iCKn3gNM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ZNpQDXqA6YKLygx/Mgp0kaQY3hShe48iYfThTEb8Iru1MOJkFmAxYG7WRpbG0vEzb8sVOXBWUD70FlpkHY32sc3lcnQRUH9EWyjF33/6bxeK6Wl/Hf7syjgMKen3IrPrVrQM7QP70aIkEYevI/L1VoeaKi0X05zrl/mkFKlZJB8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=C3u05KWRUG4yec6yjYc58jVUZqKqPra/xpCRYFkhi2pi73G7p5xYJt3avwhjC1pd5gHT2g6XMST7DkGiaRchRZYYa/jODcoZt4R+AhzCt86vNfdJ8r54ZScNvyU4Y+I8mpF49mKbuYWh9Qw+6o/yW3f8qclaMsyNAu3ATH2SDAs=;
X-YMail-OSG: p5tUyUsVM1nSNbno0XpFEzLZade1sG0k1LIN6NkNDDbP4ts
LfsdXeXxUn6OgEkvAzJFUKDvuIBVeFzZtgkksCNzN7YM7NYxZZELCIFArcbu
_mj1sx3mmaRRFlhLnDPO0Ud9acKn6RdXUuy0Z2D2THjsSnJnY9sU7qqlRMsY
RFxlusC6GZdc5g0kSlEJ9Q6m1NFt621vubnU3dlWx9BHYYswZA3GlYEoIQOZ
znu.EmXiL_e6NkgO6Xi3U8TlgxDHH.J2V.gjmQeJjgeleOz.cmjSiQf65.01
pFSPJQ.uJV2ZQQDmhoA_f4DIGHOLzIEM54oMAKodxlcGehFjRCB.Otx7qJ99
LLzSejt_DN_c3T7KOCmzn30gBLvM4NW04V6Q7K4N69QA7XOIUNPQflttOcPQ
QUh_J5vkppPwzXQ7X5ZwbRUsdfsHhuaz1XhXMvrY6vOWGj_WLL3kyxKoNNTD
o2PEbuViIVuMH9ocliCObq_Z7Olxp0coTXqA6vhkTd_030aE_Rclf5k8sFU.
neOYXj1nWJo0ZcsSoOLW7
Received: from [64.72.78.27] by web181404.mail.ne1.yahoo.com via HTTP; Mon, 10 Dec 2012 07:52:32 PST
X-Rocket-MIMEInfo: 001.001,DQoNClJlY29uZmlybSB5b3VyIEFkZHJlc3MsbW9iaWxlIGZvciBkZWxpdmVyeSBvZiB5b3VyIEFUTSBjYXJkICQxMC5NATABAQEB
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355154752.62957.YahooMailClassic@web181404.mail.ne1.yahoo.com>
Date: Mon, 10 Dec 2012 07:52:32 -0800 (PST)
From: DR FRANK COLLINS <web1xxxxx12000bvvv@att.net>
Reply-To: dcollins@kimo.com
Subject: PAYMENT VIA ATM CARD.

 
1 Comment

Posted by on 12/11/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“DR.CHINEYE NWACHUKWU”

INHERITANCE SCAM – NIGERIAN 419 SCAMMER

UPDATE: LOTTERY SCAM – SAME SCAMMER – CLICK PAUL JOHNSON FOR MORE INFORMATION Paul Johnson under <westernu749@gmail.com> officepost466@yahoo.fr IP 212.82.109.207 and the same receiving IP 41.216.44.199 (I’ve been baiting this scammer but stopped over a month ago and still receive emails daily. Each day the scammer emails me under a new proxy/fake IP, email-address and name.)

RESPONSE EMAIL FROM: DR.CHINEYE NWACHUKWU <office_dooog@yahoo.cn> reply-address: <officecustomerscare@yahoo.com> is now going by “Office Customerscare” <officecustomerscare@yahoo.com> and sent this follow up email:

Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

His response email is under a new (fake proxy) IP address of 98.139.212.160 with the same receiving IP of 41.216.44.199 IP-Location: Nigeria (the rest of the header is below the original email/header.)

EMAIL: WESTERN UNION MONEY HELLO MY DEAR

THIS IS SEVERAL TIMES WE WESTERN UNION BENIN REPUBLIC ARE SENDING YOU THIS THE SAME EMAIL TO START PICKING UP YOUR PAYMENT AS WE TOLD YOU BEFORE THIS INFORMATION REACH US SINCE LAST THREE WEEK AGO FROM OUR CORPORATE HEADQUARTERS ECO BANK WESTERN UNION,
STATES THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST $5,000:00 FROM YOUR TOTAL (FUND) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND PAY WHATEVER YOU HAVE FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM $250, TIME IS OF THE ESSENCE HERE,
SINCE YOU DON’T HAVE THE REQUIRE SUM OF$250, SO GO AND SEND ANY AMOUNT OF MONEY THAT YOU HAVE AT HAND STARTED FROM $40 TO UP $250, WE WILL ACTIVATE YOUR MTCN AND SEND TO YOU TODAY, UPON RECEIPT OF THIS PAYMENT,
BELOW IS THE MTCN OF YOUR FIRST PAYMENT, SO YOU ARE TO TIPE WWWW.WESTERNUNION.COM AND PUT THE SENDER FIRST NAME AND SENDER LAST NAME BEFORE THE MONEY TRANSFER CONTROL NUMBER (MTCN): THEN CLICK THE STATUS THEN YOU WILL SEE THE AVAILABILITY OF THE FUND ONLINE BUT IT CAN NOT BE PICKED UP DUE TO THE TRANSFER NEED TO BE ACTIVATED OKAY

1. WWW.WESTERNUNION.COM
2. MTCN 0560139994
3. SENDER EMMANUEL OKOYE
4. AMOUNT $5,000
BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST 5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP THE BALANCE SUM. SO I WANT YOU TO SEND THE AMOUNT YOU HAVE AT HAND. WITH THIS INFORMATION BELLOW. AND UPDATE US AMOUNT THAT YOU SEND AND THE MTCN.SEND THE PAYMENT DETAIL TO THIS EMAIL,(officecustomerscare@yahoo.com)
1. RECEIVER NAME… Ikwunne O Anthony
2. COUNTRY… BENIN REPUBLIC.
3. CITY… COTONOU.
4. TEST QUESTION…HONEST
5. ANSWER…TRUST.

THIS LAST NOTICE TO YOU IF YOU FAIL TO SEND THE MONEY TODAY YOUR PAYMENT FILE WILL BE CANCEL FINAL SO RUSH TO WESTERN UNION OR MONEY GRAM NOW AND SEND ANY MONEY THAT YOU HAVE AT HAND NOW START FROM $40 TO UP $250,
CALL ME ON THIS LINE AS SOON AS YOU SEND THE MONEY +22968377742
DR.CHINEYE NWACHUKWU
OPRATION MANAGER.
WESTERN UNION DEPARTMENT
PHONE NO.. +229-98677751

HEADER:

Return-Path: <office_dooog@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.73
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: YTQQLVYWLDtr8GvJiSxswwRjP7wnkQFwbp2etVmaNl0FiaXv WEWUyzcgnOMV_Qxqdh9W6bDVUk0oJ2n4H_.OqH3FVMd.Y5SeQLY8WPB3FzvF PDksuUJsc8jsOTNRuyWFfYR3l5wAZDJgIWuiiGdSmgdTu68C3rqyg3O3KdWs h.EODC.8..TyOEAnTAvAstMaGS8Ncy0SIJObOaOjtoBxXs6HTVJjL2nLqQq. V8jcqhibon.BQ9tsji3ubP5LyOllUnFxk7kElsMu7n0vVWWSlivsKIy_S5n1 TnjjQsj6Z6unrH0LPjxjeSxKbAjjeU63LUw4W.D9he2EEs26JXAWNlSyN_RA mHtPVevectbOeAKgC.m._frVA4tVlBJnUDlnVGkTYGWpICSFxTT9LPW_EEeJ l2XotLG4IwrFUfDfi_oT5YhbAo7jPwjxliFYxO_jm1h_wnaqEAIoQUqbckjp VIOOy.9bM6cUUjn4sXuLElKl.HyFw3R3uBNExQYnmx4RLVovyUrURD0ciS64 y4A8HjS0d8vV45llBD7G.G.oahtQT4gZsScBryrPWxrTQ3pLGp8tSk2zK.n2 eeTHvEQSRnZIbN0eOuFt75vrczEzEp24_Wxy.kkTt24Ghr67RLbx14T8AWJX oN_fjH0I4fLe4bZg9kWJjC5AIUtbrQ2yjsGa8Rqmniy4tDcDdplQBJNCIttH Y6iPtc8dzN6XRG89qgna5ydQU4LybEz.EW03VSf5bIAK7G7wCnLMhQCLLxgk ly1aVYK.aBw2ZGGdBfsnGxEQGmjWgPW9Y8yaS38MKaKk5BlVKjdKTv4Du9tr 7v1Q0Ahg1rbEQYh8bXhTn4R03SCnAeBhjAproiLkSzIk_nlJpbqzYS_tDYFN eublP_kgPayXAilWx.ksYpuHs_SFNkLaI2tWIn4oFvj8Hul6cqhvS1pJwTK2 8xjAkTjf5BRCJ73jx3wjykpTf9CXKVLe4qVn43MdJwIGfeb9p6tuMcY5ae7w c0GAOM3ZK4N_pO93ZKX2sJA.aGW8uNMDRTGyX1W7L7EKmy.ZYJQMjrOnd1Pp 8VcXJpyj7WUoKAXFir41peZR3kuJAGhW1GbparzRRCsM53A5wxeRRRvbeQlP o9SRMR9hJ7G68eklKQlZiNlLHYAN75iIROMHam0GQkoQl658wOksxxV0w1yE mwld8PgOs6.ieT5hfoq6JOm_CZnFaWvDCuNdzu7iw15xSb996aG1QW0ovKDm ivdO.r3OOe2nezrbgWHscU8DcPD0SD__8p7aOAMpHGW.0iovFBMBhXwhAkfD _c5Tjzjt4SpvsBLMK1O5olWM9ZTOgPGebcxgdbmbvX9l8w–
X-Originating-IP: [203.188.201.73]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm9-vm7.bullet.mail.tp2.yahoo.com) (203.188.201.73) by mta1299.mail.sk1.yahoo.com with SMTP; Thu, 15 Nov 2012 00:06:47 -0800
Received: from [203.188.200.142] by nm9.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 597653.91745.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 1033 invoked by uid 60001); 15 Nov 2012 08:06:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1352966804; bh=sqgSO8xP/LR+hXQMdA2e6Ah1eNeIaTHiSoq/jXQJhqw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Yws8UW5RVEL2oPJjowNq8quCXz9OzL0CxZrfGMUtTLq9P49zyzmh4cHIIaccgUS6cadGW2uanBjRYI1LgN7qnDfXWjIk1fJUorh8XSrtSnhaoUyUmvLuinqV/FZQLQV6ArVs06/OCE6rJG6RrChDzUt4hI5ALQRFiJ3ZkZnKHy8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Lytcrsw3vUiLafw/lAGi2G0Q0Tb6yrnlT4ruv+ReTjQFhJriBDR+YxFNsAJmBt2mYpnus+zpYYvm4eYTFIsF0fqvBhc21W3x1a+iiSAPgC+CPtqGdn9cWtDgfR5n6UI9cuY9jwzCd+BU5PzXNKOXbca69Rp1IZVW4Uh5V+L0jKc=;
X-YMail-OSG: O7Gnv7UVM1lkD_jTVvQ9yvdVYlFxea2vZYOteXXHXMW9Qko jdT9UCaq6
Received: from [41.216.44.199] by web92416.mail.cnh.yahoo.com via HTTP; Thu, 15 Nov 2012 16:06:43 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1352966803.94317.YahooMailClassic@web92416.mail.cnh.yahoo.com>
Date: Thu, 15 Nov 2012 16:06:43 +0800 (CST)
From: “DR.CHINEYE NWACHUKWU” <office_dooog@yahoo.cn>
Reply-To: officecustomerscare@yahoo.com
Subject: WESTERN UNION MONEY
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1574124242-396125434-1352966803=:94317″
Content-Length: 14282

HEADER NUMBER TWO:

Return-Path: <officecustomerscare@yahoo.com>
X-YahooFilteredBulk: 98.139.212.160
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: A6td62IWLDuBmelQKJEhijgTEL0P5R2xOPPy_._RsvsdzBaH yiBrnQT0925psK.s7SNHcBYe49AU0Ul3ICxEk7jQrKYkMrnITllaNYEqTeoQ pszSKc.CXds6vyKRGay5HbkIm5xdJL06qMYJeuDndMfXhl.KtXNDPBcZw0BO e7rSU1yq9Tq0AIKYLibJS5Ji7cCOJbYxKoA4yfOsJcdoBZHzSv6nABQ1E6Zn uABQykHao.NClcwPP.1B0.6GNP31WL93qUf8JoRj3B6BR75xwrIFYRdUy4G5 262Inle71_i99iHg0IqLKmQNy_9XV4J2klJ79za74Jts7ST_TwEjurl5e8Jf _PAY8p3MdVI4fsKogQpHgxR1s5wZIhK1pQhdQaLszisflXZsORhhjrtlapUr A73MhrwdcfdcXSqVSmfpwdzxBXkcV.4BTYIqHGTGZqh2qwsUty8igYWrIIoh sDVyJCRsLDsvD1rqVdGkrQYLcRjGVehq2_k3u0KTIr1aNYkrfLPSdcEY1Bwq _gBGoox6wsKZPkPuqCx89Hzc4hLvUbS8W9BFJLxlj2Ey4nLAmaKnIpqZdMjl 4hcVV8tlsvsuT4tYNW0lHggMDR0Z8qztWv3TT5X17FkNatwLR9Z3cgkoLfCe h1gP7PEELa47jNfNMRIofd8zaQNS9kVxpKl_mOEUV16Q5hPPsaEiL6jrdBvJ K6WVdOmRxYs9LETX5HhMZI.tT1kO_.t.VDGWOxQqI5bwTuY_si3Nmyg1gMMm T8G5YTa4tuftY3yPi.IVm50h7zhHPJYz43C4ze0iES8nuHCXpgcdO8QkvWJB rul3g18dawtTywGuPNr8L3z3YwhxzwgJcvrBnnqbT5tMGKriaFsDtUb7QCVT 2w59IxZtgg9QIbZbCwx.wO.AS6EIIO3Rg5h442qemVR0NnhI_i7tXeZ5Z8Xk aQNqbSBI0ZdY3J98pAMrUI4GfLJlT4aKyCWKpbXobriv6gfG7HkyNwKTik71 7D9lycclsvAe_RoyDEcUHh7NIQjBllyIJ0dBWYAMIc8k6dp2QTcItskcss36 r0H0FyF1YAuULXqdMRUTwafuLsHIAlqmvCKb33f8Lto0_eqFpy7rblQ1lMkc BJH0Jy_MYFo8JsxlaV6gIJJv30.DknRRqr0e79ga9ucQfYVgmaU4DApKHtwd c_AgySu.BPiKcidO0VJeW8osusxFm4T7JiwASuwuzGclt9WW7DJbihfcQK7u ThBXA0In8NnC0stWZn8vKuG1.rxwVgaK0RBVZrsxG_Z_Bz4ilkET7YqZ
X-Originating-IP: [98.139.212.160]
Authentication-Results: mta1187.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm1.bullet.mail.bf1.yahoo.com) (98.139.212.160) by mta1187.mail.bf1.yahoo.com with SMTP; Sun, 02 Dec 2012 22:54:20 -0800
Received: from [98.139.215.141] by nm1.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:54:17 -0000
Received: from [98.139.212.195] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:54:17 -0000
Received: from [127.0.0.1] by omp1004.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:54:17 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 296448.58568.bm@omp1004.mail.bf1.yahoo.com
Received: (qmail 29676 invoked by uid 60001); 3 Dec 2012 06:54:17 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354517657; bh=kJDT5cjpbLJ82eNurct1MB2GVVciWeGexi7i426BwJ0=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=LDRcgojsiWMlx1x+zCJeK8Ij7oJzAHg3xJYyco2XPFGssWdcTEnSoZAGjixPokWJ+LDm55PhuiuBXjOJfsPy6T+9cBwGl1tr3c9YMIZqEDPJDTN71V1pLXxI0Z53oNGyvQGAKmgnZ5zLuqERI3krJzVxqA2tm5oktP+RePDjv4k=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=xzEPklSUYsGtcFrb03xI5tsNxxPpLgFzq18y0B3ZDo3LD8wtm6LVTwMrowI1STv1RL9L457GvMEljRaUkoVhdbBdV1STmPOxSQd+Y8Y9sci9kKl6bsG0WmAeJyC/t7sWZj6W6k9zb8aPt0VG1++MsK/OPLrVlDdO4+4nkufIhXQ=;
X-YMail-OSG: 6N4vh_4VM1mbdEGhvO_RyhbLAeLnsPGi6s8aQaiHe8YX6W. rhuE7fSBvQ_ftU4Al5JgYAo2Z.5DOZ2i59WMXv.THlBBKjJP6NpUUvxYnjKu _Ch_mo433YiqyQ6hPEZDCdVAvfc0zg8.lue8uGl07GOkw4dCa5oKTjUTAm99 HV.Cu01qyMkmDo6cO.4ZIVBnQuvfS2kXm5CUxG73z6a.usxaxPwQIaHHCnVc 62hrAx3MizJn6OKWk_tno8l8aN0E0q3ZqZ3MgL0J.ELjO3LM2OUOTDQq4UMV MpGkfD_TVZ1Ub0D_mAZviZbdEGcjVPrLPP1P0gwmgc.4VNHtsoc.NbzI9dst 1CY1zoGFzHD8VBdTiapnjUaBLRd_gzJW9wxO7UJN1lbkYeEooyqEUO2rlTP3 8EnxRxTJVq8ufB2a4HIoWYk58FVBQOYBUQt2qeofOJ.yCB5WMpCTnSWAou1R FB2YGoeDoR6EwEM1VjresV0AXyzncUORA7KxmI2VazxlIWw8OaIyI2lJ46Ev IMBLQGb8.z8msK0PntWCMe8q4VFGbHEBTrE7_MCCcFlF5jOQHaBkH3kSIXcz 3dLNSl5INWPJkgb86z9ep0VZjC7REgroyqPtENcY2HOfwvv7Nj5AKPnpGSHE fnttfWkSDsb6azL8mMX7.USb5gpo4YndcGUMR4q6eVNJPT9rlyq8ikAX_y9H MGakiGkTmX61IKpy6Eh2DB3b5KyvGe2L.8Xsk43UqPmgIRxV2.XWcPjfS3A3 dbjDPDVukFI_K4XlNP35lyHjDvUqqQW76TSNEwIcgvDqMDlHGqZtu1udDwiW bKKBOPlKfuwA0ybkhD_qMkcjmbfdLaefAP9tBMLq.C.inNz4Mc2psagyYQ8L 9Rd11ST_9FoHaHhMaAfw7LZxBv_BKfhwrcYm3z47ua41oaexPi2rM.gi7_jr eErSGcegHPgGDu4k9QdQZnlef4vyJh6qVVgSyNM7kREotHk4q_4YDUNLnv_y ytY9frrXOKDuQlQuL27qL0OzDNT06xLZF5qQxDX27vpxRQIk3ogG6Zj0E0yU QeJjwWRUQ.f9vkaGHImfB2lSmXDVeiOPggMIa4ca8vI70ulU8nUbo7H0Iqkh QAK_UHRHySczm54TBpHFMXJ.PYL9i6g0XZn355ZS0hBg9sUF0pSnH4dRkFzo z0OdBlmbq6eh_Ccnkb3lFuyiG2hg0DYRmCAnHRgxrbJRwldN67jL1q29hBYv 5sPP7P.l868cM05.1wYpA.IyWxGZ9jQzOsv.rNCo0h3KlCWKq12K.n2q.ums NfL7jWHpgFzd4prV2IJXj3annZG8eJjh.WR_t1d6Lb7YaRgnrhpjBGsGJEGY tl7E.ZLgdGnoNsGyPl5uMX0KzXx7xgZUDNwcfPLM8f46kK7PnkLygDDck4RH kMeoO6C6wundts4OTXJNTVtYa_RsHIag6Pnz9gpJMIbDACbdlLkx0dIJCrO9 hPNqyxguptR9A5dSXr18lS8XXCSCK5gOKJLnO.9KZOuiEClvtS0N6WwAWZrl X2TMtwuPI4GWk6uZsLjYkjnhzjK4Mue.pkkyAYOsx0nBrF0SqClph.mLP2gg RhYqCqcizaYXnSMxyfaoTk_mXOGVwkQwT.0pebeMajeWZPdbnj6zDFyB_RtG H7CuPDxc5pWFpmx1bkgcxV7u1OUAD86cTP5eaMSMPAqAxvGh4TowZNhdna7q slJu5uK3vme8zDsu7tZsILoCZMYQaTeofrr11QpU10u_m3CHKahxlTmDZkNO 7p992wagF0rF7Bdi4y7GzQieBnbT3KxvtE_iqPB.CxU97R34AhS54EMNyoP3 SiSQHLkKl2d2j0KpBNsM2HSxrAEU.kNZELw6bddzBXAauVDntm09i0JGANED G2xgGt5pEO2Alp1qtPBXd_99vBqB5HT7apOhQaBTsv0XAjNF6Li6F1RmvD50 j0JV3aj8sI_1BsYTUE2yC.ZgDSB7SZZ.Pwb9geGqA_0sX6hekZx4pkDG3sdP DBP..MfaKKmAM5w0DCD4o8BWgmTmrR26Kk4xKbIrxjGAgMqUl_waE.ECw_pY Y_Y1SJQ6cfGYqnA5yzOun8Eo143DJeS5s9IGCcTObOllEy3eUFK6nnRbOJs3 lULboYK_jjrkdKgvmp094UDGXja3TAzBSgYRF80h9bxhA3KZcdbDgpohqyHu m6bU3Q_nLyZJI9SQM64_gK7qBC00VeEEk49nJmvqiWCkZ5Uy3AGJus92STx_ WAVnfiNnIYWk3ZzJApHqt8AiIVXkyaFeBWp_Fh3qoLl92IP0_HFJUWrxIv3L aSTEBDdjcpzTmABNgDMx7K8m_FfJ0jQIvVXCrlyTd6rUzr3uBBotATWAWYAj oZDlW5yfOI3JL77KWHti.eweN2ChJM2PjUEFOf.bV5kOFMWLXAcDRs4wbXLd yrml46PWmL6DFLXgiAxgukFjqtngKvuLYspZZA8Wckti7qbw1IiRShAGeFrh OAGrEkrAuQP7QuAqq3GzL_k2gv40JNwF0c07nBYWRnmV9I9tCMbVQ44uePKv LQTVW8QKtVms0JkSuETtylaRgpYVTI7kg_t47zo33UKUBUi1iuCFhiPnX_Yu wbOaPugLirBbc45fE_ioAVdMCBb4FcWvaZsGIlP47X4NjQzagetkLuf9JvSq RHJlD.eVSXsO55Eo7kpxOR7eMZACKC1xI7c1XJ5fJguDWlIusVuFgCLNO4cA t7A–
Received: from [41.216.44.199] by web161602.mail.bf1.yahoo.com via HTTP; Sun, 02 Dec 2012 22:54:16 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354517656.28058.YahooMailClassic@web161602.mail.bf1.yahoo.com>
Date: Sun, 2 Dec 2012 22:54:16 -0800 (PST)
From: This sender is DomainKeys verified Office Customerscare <officecustomerscare@yahoo.com> Add sender to Contacts
Subject: Re: WESTERN UNION MONEY
To: Porky Pig <porkyexposed@yahoo.com>
In-Reply-To: <1354346435.35920.YahooMailClassic@web161004.mail.bf1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”406169123-855337282-1354517656=:28058″

DR CHINEYE NWACHUKWU – office_dooog@yahoo.cn – officecustomerscare@yahoo.com

41.216.44.199

Associated Email: kennethkuye58@yahoo.com.ph; emscompany78@yahoo.com.au
Associated Name: Kenneth Kuye
IP: 41.216.44.199

chukwuemma57@yahoo.com.ph – 82.57.200.117 alberto.tonietti1@alice.it

Received: from (41.216.44.199) by alicemail.rossoalice.alice.it; Thu, 28 Jun 2012 03:10:18 +0200
Message-ID: <13830a382f0.alberto.tonietti1@alice.it>
Date: Thu, 28 Jun 2012 03:10:18 +0200 (CEST)
From: CLERIOT PRUNE STELLA <alberto.tonietti1@alice.it>
Reply-To: cleriotprunestella@yahoo.com

Received: from (41.216.44.199) by alicemail.rossoalice.alice.it

Same IP – (phishing attempt) – Mr Eng David Kalu – chukwuemma57@yahoo.com.ph – REPLY-TO: ww.ups.com@superposta.com – Received: from [41.216.44.199] by web190206.mail.sg3.yahoo.com via HTTP 98.139.91.244 Phone # +229-98344889

Mr PAUL JOHNSON <westernu749@gmail.com>

 
Leave a comment

Posted by on 12/01/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

“Western Union Department” a.k.a “ATM Card Approval Department” a.k.a “Mr. MIKE BENN” a.k.a “Barrister George Clement” a.k.a “Susan Dawson”

419 SCAM / ADVANCE FEE FRAUD

Dear Customer,

Western Union Office
DR PHILLIP HILLS
Call +229-98745447I want to inform you that we have already sent you $5000.00 US Dollars through Western union as we have been given the mandate to transfer your full over due payment total sum of $7.800.000.00 USD, via western union by the Ministry of Finance.I tried reaching you on phone to give you all the information on phone but I couldn’t get through yesterday,

So I decided to email you the MTCN and sender name so that you can pick up the $5000.00 to enable us send another $5000.00 today as you know we will be sending you $5000.00 only per day. And it was agreed that you will pay the transfer charge sum of $87 before the release of the payment to you.
Please pick up this information and locate any western union around to pick up the $5000.00 and call the Operation Manager DR PHILLIP HILLS because he is the person in charge of your payment, and he can send you another payment today once you contact him,
 
phone line Call +229-98745447
E-mail:weste.office@yahoo.com )
contact him once you picked up the $5000.00 today.
Below is the western union information to pick up the $5000.00; which you will be receiving daily after you sent them their transfer charge of $87 and it will serve as re-confirmation of your payment file in their office.
 
Here is the Senders Information;
1. SENDER NAME:…  charles donald
2. TEST QUESTION :…. How Much ?
3. TEST ANSWER: …….  $5,000.00
4. AMOUNT ……….  $5,000 USD
5.MTCN ….. 6130251864
 
They will be waiting to hear from you with the transfer charge payment of $87 today;

Receiver Name….Mr Chilokwu Sunday
Country —— Benin Republic
Your City —– Cotonou
Your Question —- A
Your Answer —– B
Be advice that $87 transfer charge is compulsory as they told me that is the only money you will pay until you receive your payment completely. Endeavor to E-mail your direct telephone number because you will call once the payment
informations is sent to you,
Regards
Mr. MIKE BENN
Call him immediately you receive this massage +22998745447
western union department.
Yours in service
Mr. MIKE BENN

HEADER:

Return-Path: <good_o@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.217
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG:
X-Originating-IP: [203.188.200.217]
Authentication-Results: mta1028.mail.ac4.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm5-vm1.bullet.mail.tp2.yahoo.com) (203.188.200.217) by mta1028.mail.ac4.yahoo.com with SMTP; Wed, 14 Nov 2012 08:00:54 -0800
Received: from [203.188.200.81] by nm5.bullet.mail.tp2.yahoo.com with NNFMP; 14 Nov 2012 16:00:51 -0000
Received: from [203.209.230.76] by tm2.bullet.mail.tp2.yahoo.com with NNFMP; 14 Nov 2012 16:00:51 -0000
Received: from [127.0.0.1] by omp105.mail.cnb.yahoo.com with NNFMP; 14 Nov 2012 16:00:50 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 871122.62052.bm@omp105.mail.cnb.yahoo.com
Received: (qmail 51301 invoked by uid 60001); 14 Nov 2012 16:00:50 -0000
Nc4OYZWCWjsKyIE8ZTRRgR+ikaqDlMInYg0=;
X-YMail-OSG: tsM3mXgVM1mQukNs9vSWv2B4i6xoWzPHIXnTgZbj5d7LcFY wJ.7t3BuI
Received: from [41.216.50.17] by web92410.mail.cnh.yahoo.com via HTTP; Thu, 15 Nov 2012 00:00:49 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1352908849.45572.YahooMailClassic@web92410.mail.cnh.yahoo.com>
Date: Thu, 15 Nov 2012 00:00:49 +0800 (CST)
From: “Mr. MIKE BENN” <good_o@yahoo.cn>
Reply-To: weste.office@yahoo.com
Subject: Call him immediately you receive this massage +2 2998745447
+2-2998745447

Mr MIKE BENN <> good_o@yahoo.cn <>  weste.office@yahoo.com

Same scammer, different scam– <atmcardapprovaldpt@hotmail.com>

 [41.216.50.17] by web133005.mail.ir2.yahoo.com

Hello;   ,
This to acknowledge you that your consignment box is diverted into our office here by Mr Maxwell James director Fedex Company, Mr Maxwell James reported to us that you were ask to send $72.00 for the release of the certificates peper that will lead up the box to your destination home address and you refused.
 
Now listen,we want to hear from you to know if you are willing to pay the money or not because we have giving instruction by His Excellency Mr.President Dr Thomas Boni Yayi,that if you refused to send the $72.00 for the release the certificate we should send the consignment box to the CENTRAL BANK OF WEST AFRICAN COTONOU, BENIN REPUBLIC (CBB)
 
And we give you two days today and tomorrow to make the payment with the information gaving to you if you fail to do so do not bother to ask for the payment of (US $3.5Million)again, for your information i am giving you the advice that you should try and make the payment of $72.00 today, immediately the $72.00 is confirm your will receive your(US $3.5Million ) and you will not pay any other money again said by me Barr,George Clement.
 
The director in charges of your BOX will alert the united state bureau and also your state police for the BOX to be deliver to you without any restriction and problem when the fund get to your location area. 
Thanks.  
Barr,George Clement
FROM THE CHIEF GEORGE FEDERAL HIGH COURT OF BENIN

Below is a Nigerian scammer attempting to scam under the same IP address as above. Although it may be another scammer behind the IP, the email is very similar to the many emails the above fraudsters have sent. 

From Ms. Susan Dawson
Return-Path: sonjohn133@yahoo.cn
Received: from 41.216.50.17, Cotonou, Benin, Office Des Poste Et Telecommunications Aka Benin Telecoms Sa
Date: Sat, 10 Nov 2012
From: “Ms. Dawson Susan” <sonjohn133@yahoo.cn>
Reply-To: ccef453@yahoo.com.hk
Subject: U.S Treasury Department’s Office of Foreign Assets Control

From: “Ms. Dawson Susan” <sonjohn133@yahoo.cn>
Reply-To: [ccef453@yahoo.com.hk]
Subject: U.S Treasury Department’s Office of Foreign Assets Control

Attn,
This email is to notify you about the release of your outstanding payment which is truly $15.500.000.00 USD. The New York NY ( USA) scheduled a time frame to settle all foreign debts which includes Contract/Inheritance/ Gambling/ Lottery(Sponsored by Microsoft and National Lottery) and other international loans.News had it that over the past,numerous individual (s) who happen to be impostors (claiming to be individuals, banks and organizations) are claiming to release numerous sums of fund via numerous ways.

With the help of the (OFAC)U.S Treasury Department’s and with the FBI we have noticed that people have being asked to pay outrageous amount of money by these impostors for the transfer of their funds to them. We want you to stop all communication that has to do with these fraudsters who have been requesting unreasonable sums of money from you to release your funds which they do not have access to.

We have received a mandate and instructions from the (OFAC)U.S Treasury Department’s to commence the immediate release of your funds through one of the following payment options stated below depending on your choice:

1. Payment via Automatic Teller Machine (ATM card): This is where you will be sent an Automatic Teller Machine card with Pin also known as ATM card (A Master Card would be issued). Upon receipt of your custom ATM card you will be allowed to withdraw $10,000 per day by default and you are given the option to transfer funds from your ATM card to your bank account.
2. Certified Cashiers Check or Bank Draft: In this case you will be sent a certified bank draft or check signed in your favor which you will deposit in any bank for it to be cleared within 3 to 5 working days at most depending on your bank.
3. Online Banking ( Bank To Bank Transfer) to enable you process this operation, $285 Dollars is Required for opening for an online banking operation, that will enable you get access to your account Online.
Below are few list of tracking numbers you can track from FedEx and UPS website to confirm people like you whom have successfully received their payment safely.
Name : Mrs. Jeannie Michael: FedEx Tracking Number: 794588016471 (http://www.fedex.com/)
Name : Mrs. Vista Rayne Arnold: FedEx Tracking Number: 796925954101 (http://www.fedex.com/

You are advised to select one out of the three options on how you wish to receive your $15.500.000.00 USD, Your Online Banking Acess or ATM card or Check/Bank Draft will be shipped via Courier Shipping Company and would get to you within 2 working days at most.

For international shipping as stated by our company We had to sign contract with Courier for bulk shipping which makes the fees reduce from the actual $520 to $79.00 nothing more and no hidden fees of any sort.
You are advised to contact the Department’s Officer responsible for the shipping of your Check or ATM card with the following information for shipping of your payment Check or ATM card.

Department’s Officer: Ms. Dawson Susan
Email- [ ccef453@yahoo.com.hk ]
The Department’s Officer Ms. Susan Dawson will provide you with instructions on how you are to make payment of the $79.00 only for the shipping of your ATM card or Cashiers Check.

You are to adhere strictly to the instructions above for more information contact the Department’s Officer.
Remember that you are not paying any fees extra no matter what. Once again note that the actual Courier Retail Price: $520 Your Price (Because of our contract signed): is now $79( $79.00 Savings!). 

Below is the information where to send the $79.00 to them.
Name of the receiver ………… John Udezuo
Country ……………. Benin Republic
City …………… Cotonou
Test Question ……….. Who is Son?
Test Answer ………………. Jesus
Amount ………………. $79.00 Only

 
Leave a comment

Posted by on 11/25/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

“FBI OFFICE”

WARNING – INHERITANCE SCAM – ATM CARD FRAUD – NIGERIAN SCAMMER

ATTENTION: THIS SCAMMER’S IP IS BLACKLISTED AND IS CONSIDERED 100% MALICIOUS ON A SCALE FROM 1-100 – – If you’ve received a email/contact and put their IP, email address, host, etc and got brought to this post then you’re dealing with a scammer/phisher One of the anti-spam websites warning against this IP address is Spamhaus

EMAIL: Show Details
Attn please,
This message is coming to you from FBI office here, We are writing this mail to inform you that your (Inheritance winning awarded funds of $1.5million) has been totally converted into a ATM Master card and it’s to be delivered to your address via courier service, Be inform that the courier delivery company will deliver the card with all the manual and instruction both with PIN code to access the Card upon receipt. It’s the best option to receive this amount since every attempt failed, therefore you will need to contact the Barrister that helped in re-claiming the check back and converted it into an ATM visa card with his address below:

Barrister Necter Polimars
Email: barristernecter@yahoo.fr
Phone: +229-98651731

Send him your current address where the check should be delivered to and remember to indicate the Reg:code of ATM-0034 to him when making contact with him. Please also choose the courier service you would like to deliver the Card Post office is also working but could take the card much time to get to you.

Please endeavor to inform us once you have received the ATM Card.

Sincere regards
Robert S. Mueller
FBI Monitoring Team Service

HEADER:

Return-Path: <offilcefile1905@superposta.com>
X-YahooFilteredBulk: 203.188.201.151
Received-SPF: fail (domain of superposta.com does not designate 203.188.201.151 as permitted sender)
X-YMailISG: ezBF7kAWLDtzu.6WTiJebVEzmQUIcG_PNd1CwpI.7FK_4hEN Zny7zbsYgSrvRNEkKNAHyjYIgbXGVFrTSy5c9pyJLJT.I2rbeu56O.55aNRc EQ4OjPa65stTyuXMWPdmbc2Jchn20MKDdUhbt5XnuXvouwATkklv.if4Srwf PhgPk6NBUSLZVJfqBHUhuwGMHUb_GfrNTpQsO.6RIv6rP_BimD0cQ0sROi15 H3py5nbXAc.b_y9E7OCFREZrAT3GEMeHuzInLPwjPODQ7PFjnt8wP97VPfLP C3D6i4CW_Q9zsBV5HRucchEEUqIWMBzzTuLi6zi_ltdXIdLGccljYIUkibmP Ed6kSsw6JvdOn8x62zffgS3BLW6CK4UJ2WrxTzHnGsLVxdxZBcThqC8CcB.n 3tmyMvUm028RDYEH6y5spoHom3ZCQydyZ8aZ6a2CdE5op4jpI2fdBhU7ZyZN Dqdib4ZxEPlV37MS9RCDeUqBndpsXjq39haZEpSj.pWiwS_jeQggSyiCfzLA Du8yPKoCdbgkqs4xpA6z1bLRYqSSeiMETFaBAYVfqIhhHnCuGnRdSjKKcRfa QSyPrDLSrtpTgCxTxf8Wmlv5r9qoSzqTBs8y3639xGJz_TaqCvv2WGK2d0eL _2p6QjsaA6XBRYyI1olJHaBZnBshmo67FuoNCPeg2JBFZC9bJuLhNahvSF4K d9N2c5ipVC9pAsSeyKG_PiKl4ql1Y7q3l7f5IfZhlPgbTIJmn2Yxc78Fs.7b MF1ui8Dgn7t3rQehQiKwWpFk0q7WCC0IWZAAoZgM1h6Q.FP6orLyiR.Exv8D RiD.Oc4IbsY5WKoCy8ZMH.q.4LpS2Pyom.ERBABavo2ov5JSoNDBVWW6ss0t ySPJiqvMCEULgheeKtHOlWD1UGNWn5g77TqNnx8dnYwLT_Y2ONb0zrgj4.Qe TLuVJ7nQYutC4IN2EKxquWdtY9lDDBNt3EYmZ0jwRErSqsr1dKjHBzBUdu_s _0O.oK5IqEYhs8zBOHcckO_uJSRW.SQmfbTZF069RPGOwEu5ckgWIGwo
X-Originating-IP: [203.188.201.151]
Authentication-Results: mta1091.mail.ac4.yahoo.com from=superposta.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm13-vm5.bullet.mail.tp2.yahoo.com) (203.188.201.151) by mta1091.mail.ac4.yahoo.com with SMTP; Sat, 17 Nov 2012 02:43:59 -0800
Received: from [203.188.200.142] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 17 Nov 2012 10:43:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 977911.45325.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 39060 invoked by uid 60001); 17 Nov 2012 10:43:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353149034; bh=4NHRjGox1llxlGTpuwwzaXz2wAEyMSFQlVe/RepWfVQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=P0DhZFg9Mjj05/vqaDc0igv+GPAlNxBBckhxEzU4PJ/OEqkdNXv8cHYOGIrX06GRSxiYBDEXksxF+7O6itMLQryiu63e3X/TBdnGMXPpsJmwW89Nu0b5IpbVDCyBNfuzLVNzU62iHNFjxppWoL8m/2ohhLEweTQDE86CwjMFUjc=
X-YMail-OSG: UNddAlUVM1kvGGStE1FY34uiMeKn2clDYRgV8R.tDHiC3Gd LJa0arT0C
Received: from [41.223.248.96] by web92408.mail.cnh.yahoo.com via HTTP; Sat, 17 Nov 2012 18:43:53 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353149033.34956.YahooMailClassic@web92408.mail.cnh.yahoo.com>
Date: Sat, 17 Nov 2012 18:43:53 +0800 (CST)
From:
FBI OFFICE <offilcefile1905@superposta.com>
Reply-To: barristernecter@yahoo.fr
Subject: YOUR ATM MASTER CARD OF 1.5MILLION
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”176961417-1892065883-1353149033=:34956″
Content-Length: 14962

This list below shows many bad IP addresses (sending out spam, virsus, scam, phishing, fraud, etc) that are being used by web92408.mail.cnh.yahoo.com 41.223.248.98 <– The IP/Host at this IP is being used by scammers sending out 419 scams

210.169.153.71 SOFTBANK TELECO ODN.NE.JP JP 5% 95% 2% 98%
200.13.169.3 AMNET DATOS EL AMNETSAL.C SV 49% 51% 46% 54%
203.115.0.14 INTERNET SERVIC RADIUS1.SL LK 13% 87% 25% 75%
202.147.75.21 POWERLAN LIMITE DOT.NET.AU AU 18% 82% 38% 62%
202.147.75.25 POWERLAN LIMITE DOT.NET.AU AU 18% 82% 39% 61%
116.50.64.53 WAN NETWORK FOR IN 59% 41% 61% 39%
213.210.218.169 SERVICES COMPAN NESMA.NET. SA 65% 35% 68% 32%
85.95.235.101 INETMAR INTERNE TR 6% 94% 4% 96%
124.74.42.242 CHINANET SHANGH JWS.COM CN 51% 49% 63% 37%
217.146.183.251 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.227 YAHOO! EUROPE YAHOO.COM UK 36% 64% 58% 42%
217.146.183.253 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.233 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.88 YAHOO! EUROPE YAHOO.COM UK 36% 64% 58% 42%
217.146.183.114 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.225 YAHOO! EUROPE YAHOO.COM UK 36% 64% 60% 40%
217.146.183.243 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.235 YAHOO! EUROPE YAHOO.COM UK 36% 64% 61% 39%
217.146.183.92 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.229 YAHOO! EUROPE YAHOO.COM UK 35% 65% 58% 42%
217.146.183.112 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.247 YAHOO! EUROPE YAHOO.COM UK 35% 65% 59% 41%
217.146.183.239 YAHOO! EUROPE YAHOO.COM UK 36% 64% 57% 43%
217.146.183.249 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.231 YAHOO! EUROPE YAHOO.COM UK 35% 65% 59% 41%

barristernecter@yahoo.fr

From  41.223.248.96 – web92408.mail.cnh.yahoo.com — Cotonou – BENIN – BJ — 

Reverse DNS: 203.209.250.172 – web92408.mail.cnh.yahoo.com  — IP address originates from China and has a score of 50/100 which means approx half of the activity is BAD

From: Jonathon Finn <mooretudepo33@livedoor.net>
Subject: Ermaessigte Preise fuer Top Armbanduhkopien
From: Kelvin Richardson <pricesajebi29@lunatico.it>
Subject: Genaue Kopien von Schweizer Armbanduhren
From: Leo Grady <bakerlixiru48@cerviaambiente.it>
Subject: Top Chronometer zum ermaessigten Preis
From: Adrian Childers <perezbuxuva66@hotelclocchiatti.it
Subject: Ideale Kopien von Schweizer Zeitmessern
From: Shirley Stroud <robertssacoly93@texsaca.it>
Subject: Dieselbe hohe Qualitaet vom Edelzubehoer guenstige
From: Amy Christopher <hughesbumoco27@cooparche.com>
Subject: Sommerpreise fuers edel aussehendes Zubehoer
From: Sophia Walden <phillipsjimome53@pgelettroimpianti.
Subject: Teuer aussehendes Zubehoer zum ermaessigten Preis
Associated Harvesters for IP – 41.223.248.48
75.125.18.178 | H
70.85.113.242 | H
208.66.195.2 | H
70.85.172.170 | H
74.53.249.34 | HW
74.86.249.98 | H
74.53.243.18 | HC
74.86.209.74 | H
218.186.13.1 | H
75.125.47.162 | HSDW
67.19.250.26 | H
91.190.94.246 | HSD
216.40.222.98 | H
81.195.121.253 | HSDC
Sent From 41.223.248.96 – SOURCE: Project Honey Pot
From:  Customer Service – upsaccountservices@ups.com
Subject: Re: FW: End of Aug. Statement Reqiured
From: Logistics UPS  accountservices@ups.com
Subject: Re: FW: End of Aug. Statement Reqiured
From:  Express – upsdelivercompanyb@ups.com
Subject: Re: End of Aug. Statmeent required
From: WendyDillahunt@mailusers.make-tracks.com
Subject: Re: End of Aug. Statmeent required
From: LinkedIn Email Confirmation – emailconfirm@linkedin
Subject: Re: FW: End of Aug. Statement Required
From: Customer Support ups  upsdeliveryservices@ups.com
Subject: Re: FW: End of Aug. Stat. required
From:  accounting@graco.dhbit.ca
Subject: Re: FW: End of Aug. Stat. required
From: Sook Ritchie via LinkedIn – member@linkedin.com
Subject: Re: changelog UPD.
From:  accounting@mail420.minnesotageeks.com
Subject: RE: MAYRA – Copies of Policies.
From: Marisol Friend via LinkedIn – member@linkedin.com
Subject: RE: CARMAN – Copies of Policies.
From:  raccounting@mail2.mounted.net
Subject: RE: MEGHANN – Copies of Policies.
From: DarwinZarling@hotmail.com
Subject: Re: Security update for banking accounts.
From:  DIONNE ROBERTSON – ROBERTSONpmjgDIONNE@hotmail.co
Subject: Your tax return appeal is declined.
From:  IsmaelLAKEEQFFK2B@aol.com
Subject: IRS notification of your tax appeal status.
From: “MYUPS” <ups-shippingagency@ups.com>
Subject: Re: Fwd: Scan from a Hewlett-Packard ScanJet #575
From: UPS <customerdesk_upsdeliveryservices@ups.com>
Subject: Don’t forget about meeting tomorrow
From: Kathlene Donaldson – MiraDinehart@w-link.net
Subject: Don’t forget about meeting tomorrow
From: Milford Hinkle – RamonGriebling@heale.net
Subject: Don’t forget about meeting tomorrow
From:  Amazon.com – account-update@amazon.com
Subject: Re: Your Flight A189-45644
From:  JabariKinnon@mail.igretec.net
Subject: Re: Your Flight A07-8295
From:  LEON Doherty – DohertyLEON@hotmail.com
Subject: Re: Fwd: Your Flight A268-625505
From: Badoo – noreply@badoo.com
Subject: Fwd: Re: Your Flight A18-77208
From: “craigslist – automated message, do not reply” <ro
Subject: Fwd: Wire Transfer (30331FY38)
Example Messages Sent From 203.209.250.172 – SOURCE: Project Honey Pot
From: Mrs Purity Qaume – mrs.purityqaume2011@terra.com
Subject: From: Madam Purity Qaume
From: Mrs Purity Qaume – mrs.purityqaume2011@terra.com
Subject: From: Madam Purity Qaume.
From: jxdguq – caolaeuva@yahoo.cn
Subject: 9税4

FBI OFFICE <> offilcefile1905@superposta.com <> barristernecter@yahoo.fr <>

41.223.248.96 by web92402.mail.cnh.yahoo.com <> bobwilliamson@superposta.com <> wunion617@superposta.com <> Received: from [41.223.248.96] by web92402.mail.cnh.yahoo.com via HTTP;
X-RocketYMMF: redwoodcapitalbank@yahoo.cn
Date: Thu, 15 Nov 2012 18:51:29 +0800 (CST)
From: “Rev. Robert Williamson, ESQ.” <offilcefile1905@superposta.com>
Reply-To: wunion617@superposta.com
Subject: TRANSFER MTCN

Attention Beneficiary,

I am contacting you because I’ve sent you the first payment of $5,000 this morning from your winning funds total amount of $1.5Million USD, Therefore you need to contact a Western Union agent Mr. Jerry Young, and ask him to give you the transfer payment information and MTCN.

Agent: Mr. Jerry Young
Email: wunion617@superposta.com
Phone: +229 98644349

Please try to contact him today request him to forward the payment information to you, Remember to Indicate the registration code of EB-2520 to him when E-mailing or calling him, Also he will be sending you $5,000.00 daily as per our office discussion with him.

Do get in touch with me once you have received the transfer. Please copy this email: wunion617@superposta.com, and paste before replying to him or simply call him at his number: +229 98644349

Sincerely

Rev. Robert Williamson, ESQ.

IMF MANAGING DIRECTOR

BENIN REPUBLIC

E-mail: bobwilliamson@superposta.com
+22998644349

________________________________________

Fraudster is also pretending to be Yahoo Member Services <carecustomer625@yahoo.com> Reply-to: carecustomer625@yahoo.com — YFB – 98.139.91.80 Received from: 41.223.248.96 – web182201.mail.bf1.yahoo.com

An FBI agent would contact you by phone or atleast by your name. They also have there own domain and wouldn’t use ‘superposta’ as an email-server.

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Collins, Peter E”

FRAUD – ATM CARD – INHERITANCE SCAM – NIGERIAN 419 SCAMMER

UPDATE FROM DR COLLINS PETER Also known as DR FRANK COLLINS Note: each time ‘Collins’ email’s me he has different addresses and IP’s so make sure you check both headers posted below. (the second email/header sent by Mr. Collins is below the first email and header.)

 

FIRST NAME USED: Collin Peter E

FIRST EMAIL: I am Mrs. Priscillia Thomas,i need your help to transfer 20,142,728.00 Million Dollars I inherited from my husband for more information, Please reply to me: priscitomas@hotmail.com

FIRST EMAIL HEADER:

Return-Path: <>
X-YahooFilteredBulk: 157.55.116.165
Received-SPF: none (domain of CH1EHSNDR002.bigfish.com does not designate permitted sender hosts)
X-YMailISG: A8zSEdIWLDtDE2pBn2j7Mg7kVH0A9HcFcs_CGir7I3SWxOc5 gWFUT56g4PVV_fYdmJLC_HKbSpMU7ZlnMSp.RDhVee.MNOhihGcSxyRoIl.s h6nlC5NSrJjmy7eLGgAsow5X9spU6qzeZp4jCw1j3fbQxUky6z3TDnF3Dt2U UDb0p6z2p81lNt9OqcaMss3JjSEU.6BtleBgn6A23X8_c3ZWGemeyqoFU2EG DZEtBOrrP2.kZTxusR8pGzCgaGz6q9wgn6yXwDNXrIwautUdkAqT8tjZL7Xh PWlBIZGZlvrAUg7Klkkpr1mE9Ewz7fvRydyT_qFe88ODYOzOUd_7K9r7rIFw WNnxXF6Emx9IT9YaVn_Da1TA9wSp.yW_dQ65dI4zKxZlU16lFNXqlFLRB2pL yMKLBNdHCwSFBMbBGHokSoGoPF17OwMCOhPCtq.j37SCgPcELPvXhSWwolvt 7bqlQi3Hw8YbvwYLf9.zqlOAeUpXnUrUdAi6QN8PZqiaX1n4iMdn4FtBljbj YLTi3zClm5roQl.nb8sQYt6aZk3NoByYY9cQh7.TQMPvxElS8Yu7_FjvLiu9 rt0yTGDn2Zf1TPJQPK0YQRKI8C7gkdptWgQWMf_F32RQ9TerVELP1viC02UZ H2S1A9tQbqx.Z2sn_mk09Y6uhE7I3SX4KQSN0wHuo1WQZnGEEKRNtsQFXvN4 cmL5hzjvvcWBA0EAle2sWoL.uCChUKZEPOVxjVmXm.R9k8zBTaqEYY2im5uT .MXfm1SafJFJsUchPRU87v4Yj1uVOwOj3lAOJqPdvJbYZo2TmbdWHoXt51oT QqxYcXFOdmoXGKxmi.8bVyfeMpVt36US39BF6DazGDGHgaZedgZSxBfmvglX pH4lP8oFyu6XLLGxYXmvt5xdANUgDfOtVOrIuwvLsFqYyM.paTffw_ETh1vH 1R5hDKC1QEK1NJ2p1DqEZeyZsg6HF5lX6_I2aRVUz7S4s1RA9J_BEl51Ogcj z.MK6mBQ5.hjrEOQX6ODF6FB03iGcl7OwUriiBtlLl8v3OEf2EAPAYrCil.R QVP8AtsL.clvE0E6NmhAb9fL9etnCiDSfhDjbsD8vMfqOQ2s6tVJuuPU.qT7 vO2B2ICarig2UYK3AbG4oBlxDLHrUoUIA0hv_CvvqfDKCGD7gS4DJSLGEWJV 2A.dFV.0A.4emCoABS.0Qv1o1n9sDqGO5ADD2aloIkWc.WLwcw–
X-Originating-IP: [157.55.116.165]
Authentication-Results: mta1217.mail.mud.yahoo.com from=newtrier.k12.il.us; domainkeys=neutral (no sig); from=newtrier.k12.il.us; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO CH1EHSNDR002.bigfish.com) (157.55.116.165) by mta1217.mail.mud.yahoo.com with SMTP; Tue, 20 Nov 2012 12:09:47 +0000
Received: from ch1outboundpool.messaging.microsoft.com (10.43.68.240) by CH1EHSNDR002.bigfish.com (10.43.69.241) with Microsoft SMTP Server (TLS) id 14.1.225.23; Tue, 20 Nov 2012 12:08:35 +0000
Received: from mail131-ch1-R.bigfish.com (10.43.68.242) by CH1EHSOBE001.bigfish.com (10.43.70.51) with Microsoft SMTP Server id 14.1.225.23; Tue, 20 Nov 2012 12:08:35 +0000
Received: from mail131-ch1 (localhost [127.0.0.1]) by mail131-ch1-R.bigfish.com (Postfix) with ESMTP id 147B0401A6; Tue, 20 Nov 2012 12:08:35 +0000 (UTC)
X-Forefront-Antispam-Report: CIP:50.201.16.151;KIP:(null);UIP:(null);IPV:NLI;H:NTMAIL01.nths.net;RD:ntexch01.nths.net;EFVD:NLI
X-BigFish: VPS48(zzc85dha398ivzz1de0h1d18h1202h1d1ah1d2ahzz8275bh17b1eeiz2dh2a8h443h668h839hd25hf0ah1288h12a5h12bdh137ah1441h14ddh1504h1537h153bh162dh1631hbe3k15d0l15cma02m)
X-FB-OUTBOUND-SPAM: yes
X-SpamScore: 48
Received: from mail131-ch1 (localhost.localdomain [127.0.0.1]) by mail131-ch1 (MessageSwitch) id 1353413312648742_16690; Tue, 20 Nov 2012 12:08:32 +0000 (UTC)
Received: from CH1EHSMHS016.bigfish.com (snatpool1.int.messaging.microsoft.com [10.43.68.244]) by mail131-ch1.bigfish.com (Postfix) with ESMTP id 57645260079; Tue, 20 Nov 2012 12:08:32 +0000 (UTC)
Received: from NTMAIL01.nths.net (50.201.16.151) by CH1EHSMHS016.bigfish.com (10.43.70.16) with Microsoft SMTP Server (TLS) id 14.1.225.23; Tue, 20 Nov 2012 12:08:32 +0000
Received: from NTMAIL02.nths.net ([192.168.194.152]) by NTMAIL01.nths.net ([192.168.194.150]) with mapi id 14.02.0309.002; Tue, 20 Nov 2012 06:08:31 -0600
From:
“Collins, Peter E” <collinsp@newtrier.k12.il.us>
To: “info@notice.com” <info@notice.com>
Subject:
Thread-Index: Ac3HF8EFf0hwi3SMRaeT/rgft5INsA==
Date: Tue, 20 Nov 2012 12:08:30 +0000
Message-ID: <38A096FD7555034E86C81153095D831B015C15A5@NTMAIL02.nths.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [41.71.173.93]
Content-Type: multipart/alternative; boundary=”_000_38A096FD7555034E86C81153095D831B015C15A5NTMAIL02nthsnet_”
MIME-Version: 1.0
Return-Path: collinsp@newtrier.k12.il.us
Reply-To: <collinsp@newtrier.k12.il.us>
X-OriginatorOrg: newtrier.k12.il.us
Content-Length: 1152

NAME USED: Dr Collins Peter

SECOND EMAIL: Attn: This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-7030115459 ,

HEADER:

Return-Path: <web52644778980000x@att.net>
X-YahooFilteredBulk: 98.136.218.126
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: YxwxuscWLDtYRBlEuwlWrBw_0ByFAfeYeEaKlhKmf_Pqo3oQ VZ4RzgKvia0dbtrf82vD2MygMgJipAOcg0xhghxyhvviIGLdwL7O9HeA_MVd CTYGLOwuYMZNFxvjFm62VKjODYvnptlR8EP2Eq4bl7k5b40vuAKQlN.VEPv6 Jj6Hv94NjiaoP1DqZkJ9niVr4amHA2Krz7hUiu7nb4dKm5FksoBvOjLiu5c6 LHxAgL_1HwQC1Kj94cY6qI2QeZMVbZE8q4fnq1zWg.nXZRhqSr2Z3IE99Vfw wZ56W_kHMqjve3BFqLHqrBq8RKFRrEA0LIWoTxzT.SXuavzNzee4EgDmzQFG Azw55EUT4_L8CQh3Yvuo2mQqsL5b0DvfvtZgLcOjD60.rbyLf51x.t.t1fsa 1oEjZhoHjxxQ_bG_Ud44UCim9Aad_eUMKDNhKnRDHkyuvhq6981x7wC3Wrki zhD6OWa.KVTqY6RVBWhX6fgWm.qUZFTXpIDTFRgSjZTcIVgOmcPtIsNbPbks gayTqPf4rqmt_33Dez5Oe0dBUM.TJUwDanFeN7Az8x9JN5pNWjxybYOZ6mu0 1EzAgiuYd0zc_wF1bS1fDmTpxrbXcalKzBvT_GAZ1Rge1P.T9Ju5Z.wvtoRi wqzLdIQR.OJ4R4ADjlXDt_6MY.sWxwWbrsh62pdNCgNpoAJM9IcaoldrE6Wy xAeVMkTvdzh0OLi.r2AWk71jpv78aC7kn_vonZ1YHhV0armnTXgZAHbnbO6F ms6.bhBcpysOsOdkJuQ8l0llDNW0anfgunue24vR2UyAsfvxa5D_2e7D5Vuz dyXvxJC9q2wxkkR17TCc1eWwmBV2WC0OGQA0lPnYwXC9.yEVofWQKNjgsss7 0wjyMZ7LN98TSaNp_4JnxMT0HF2Fhhpbh7YY80jc5n_FyXP0AAt26MYs6aBK T.qEDebCeFuzB40HJcGbnJO.J4a8XjwVoysy3i5nTd6ax3p1fCHqMU3tR9jh b.i8Qr4pUCBGxaNBhT1_dQ3b1sYVNd7pMi9b6dvEmmGH9dTOtRewwZvd2nvn 8oDpVXiYIzqx6Rq9ZSZIkJxb9HOhpjhN8mq3Guaq.mQ2YUN_.q2034AQmjzY 8YOUg8CZFXzXJY38jakTJIjuiXD8BOagQvhFHUIiK07F7luKu0vFisMrqAvg oNshOmGpcxznwZ9u.c9DnN2tcjL0OgzDpvg3Unkg3p29sDV6CMFXqf2v1QpQ sKcLP7oQKRmcKvaXxNN6.tyYsNUkH1Bksqg-
X-Originating-IP: [98.136.218.126]
Authentication-Results: mta1033.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm11-vm9.bullet.mail.gq1.yahoo.com) (98.136.218.126) by mta1033.mail.bf1.yahoo.com with SMTP; Tue, 11 Dec 2012 06:46:42 -0800
Received: from [98.137.12.55] by nm11.bullet.mail.gq1.yahoo.com with NNFMP; 11 Dec 2012 14:46:41 -0000
Received: from [98.139.44.74] by tm15.bullet.mail.gq1.yahoo.com with NNFMP; 11 Dec 2012 14:46:41 -0000
Received: from [127.0.0.1] by omp1011.access.mail.sp2.yahoo.com with NNFMP; 11 Dec 2012 14:46:41 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 713612.98465.bm@omp1011.access.mail.sp2.yahoo.com
Received: (qmail 53233 invoked by uid 60001); 11 Dec 2012 14:46:41 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355237201; bh=1Tsupv5caskqf9mge0R5RXi2qnrZiMm1Aq74YLv1THA=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=d0RbFWDQ2rV8/8EXXlMR7i2VOjKilYeOBFydV1IW16ocBNPVQMUNHFzIM6L3A2h4gqL3Grzh8MgbGkhwqhOlWMu7My6F8FKiIf+Pg5ye5iuwah/8G6S1Ado8CChFMhmECHbzGAwLDbrxPlRFKvz5joLrsKMtRzKRtcE5eXphoGA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=vjMzxQxarqcqmShOCLgE0HDBbv9eGBiPHgQKKYF4O5TCYrCvNT3eU9W0hvngieNBEGMbuiR2/ZoXPq873PanQzZD0By1gxA2Fmf/8Sthuei1fyBqDwvcd6nl3Dvv7uynmy0Ya+st1wQ6JH/BShU88SffXHjTLkjLkt6lxEEktr0=;
X-YMail-OSG: pgvQF3QVM1mLxZmT73VMfxmEGdzXaRnQRMYeQPC63iaQjwW 4K__5URLbF_yynhsaAouwFbc08adA0R4mnNqiV7YHyxU0tr11LXo4Ta_0KiQ TxVS..r_9SsgbyOZjhMSXrjXbXJ0GHf47ktIl028sBsTjWbcxtPXSQqbPyMQ F4QNhvxM.BVDpOh5T5oFYwuoORrB1NLSM3csjYOg8LvqCtdnvTTwoYkxokns 9xiHNLl83SO2R2DHSayC.6oNQLjvYMPxh8Aeym4t_6ajnBr4DfRGx1TPrs23 gQrSqww3hv.xnu5ggtpJ3j15R6o.gHcdWPsXslYVUJHwh0WtHcK7MkQZw7gc 8sBseuqMwUeoGZ113dC7howF0iEEmrCoduq8mPsfH7mFEZz7g4oJrkl0w_n6 kX1dWfnuQ3LPbUf1PgsoqlP7nCEQ3ZEpKGet6VglOMgncopioOk8Z_fVN5Hw lmdaAPfS91ze0AWfaLqWRth2qUVz8sPz.TjOgloZYT28Sq1yGuMg5uezQIzD OZBs0oZs_Pza2bTonu1swUyBd3jlvdll5CUc-
Received: from [172.163.86.61] by web180804.mail.gq1.yahoo.com via HTTP; Tue, 11 Dec 2012 06:46:41 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355237201.98816.YahooMailClassic@web180804.mail.gq1.yahoo.com>
Date: Tue, 11 Dec 2012 06:46:41 -0800 (PST)
From: Dr Collins Peter <web52644778980000x@att.net>

SECOND EMAIL FROM: “Dr Collins Peter” <web52644778980000x@att.net> REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com

Scammers number – +2347030115459 (prepaid throwaway phone most likely)
info@notice.com — 41.71.173.93 Location: NIGERIA – RIVERS – PORT HARCOURT (LAGOS) Scammer using fake IP with the location: United States (not scammers REAL location) 157.55.116.165
Example Messages Sent From 157.55.116.165
From: “Parekh, Hardik M” <hardik.parekh@mavs.uta.edu>
Subjectnone/blank
From: “Gordon, Anne Catherine” <anne.c.gordon@Vanderbilt
Subjectnone/blank
From: “Mr. Adams Mensah” <adams37mensah@hotmail.com>
Subject: IN GOOD FAITH…
From: “Stobbs, James, R (Jim)” <JStobbs@azdes.gov>
Subject: Your mailbox has exceeded the storage limit
From: SWISS LOTTO <swisslotto1978@gmail.com>
Subject: FINAL NOTIFICATION!! YOUR SWISS LOTTO WINNING NOTI
From: “Gritzmacher, Linda” <GritL@wawm.k12.wi.us>
Subject: Mailbox quota limit exceeded
From: Shankar Pant <srp0005@tigermail.auburn.edu>
Subject: System Administrator.
From: hlb.com.my <access.services@hlb.com.my>
Subject: 1 urgent alert
From: “Tutkowski, Elisabeth” <tutke@wawm.k12.wi.us>
Subject: PC-HELP
From: Hong Leong Connect <alamb@bsu.edu>
Subject: Important Security Message From Hong Leong Connect
From: cj1eufv6ql <volunteers@delautism.org>
Subject: 销N售8主
From: 侯绚丽
Subject: =?utf-8?B?Yjky5YiG6Kej5o6=?
From: “Hall, Carole” <CaroleHall@azdes.gov>
Subject: Mailbox Quota Storage Limit
From: Shankar Pant <srp0005@tigermail.auburn.edu>
Subject: Thanks System Administrator.
From: Chase Bank Alert <info@chase.org>
Subject: YOUR ONLINE ACCESS HAS BEEN SUSPENDED
From: “Ender, Allison” <EnderA@wawm.k12.wi.us>
Subject: Mailbox quota limit exceeded
From: <postmaster@go.local>
Subject: Undeliverable: Разработка инв
From: “Ender, Allison” <EnderA@wawm.k12.wi.us>
Subject: Mailbox quota limit exceeded?
From: =?utf-8?B?QWxlc=?=
Subject: segera
From: “Van Deusen, James” <VanDeusenJ@wawm.k12.wi.us> onlineme20@gmail.com
Subject: Mailbox Folder

 

 
Leave a comment

Posted by on 11/21/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Don Bright”

WARNING – NIGERIAN 419 SCAMMER

INFO: Don Bright <> fredwilliams3@rediffmail.com <> expressprocessatmcardbenin53@yahoo.com.tw

SUBJECT: FROM ECO WAS ATTORNEY  MR JAMES GEORGE ATM DEPARTMENT

FROM ECO WAS (ATTORNEY ) MR. .JAMES GEORGE
IN COTONOU BENIN REPUBLIC:
 NO:171 AKIL ROAD
 
Attn; Dear Customer,
 Greeting !! 
I wish to acknowledged you that we have finally succeeded in getting your Over due Payment worth’s of $3.8million’s United State Dollars out from Economic Community of West African States (E.C.O.W.A.S) department with the help of Mr.James George Attorney General of Federal High Court of Justice Benin Republic which acts as your foreign Attorney representative here in Benin Republic before his back to Paris France to compete his job there. 
However I am bring to your attention today that we are finally instructed for the immediate conversion of your ($3.800.000.00 USD) into an ATM VISA CARD by which you can easily received it via United Bank for Africa  Cotonou Benin Republic
Regards your fund lump sum of $3.800, 000.00USD via ATM VISA CARD has being approved and mandated by the Government of Benin. So this instruction is reaching you right now to kindly Contact  the Director of ATM VISA CARD CENTER of United Bank for Africa PLC : Cotonou  an “ATM VISA CARD CENTER”contact information’s is below.
ATM Visa Card Claiming Department
United Bank for Africa ( U B A)
Director: Mr. Ken Brown
Visa Card claiming Department
Email expressprocessatmcardbenin53@yahoo.com.tw    Tel: +229-97804183

While contact him immediately  request for the card copy and get back to us and below is the needed information’s or form to fill  for the Card processing and production which they demanded you to re-confirm to them by yourself as the beneficiary by using this code of conduct  “ATM-0321″, As Subject alright.
Your Full Name::::::::
Country::::::::
City::::::::
Home address::::::::
Telephone::::::::
Fax::::::::
Code::::::::
A copy of your id::::::::

Note that because of impostors, The bank also issued you their code of conduct,which is “ATM-0321″ so remember to indicate this code while contacting the ATM VISA CARD CENTER whereby using it as your subject alright.
Thanks for your maximum understanding co-operation and may God Bless you.
Regards
Don Bright
Chief Justice of Benin

 

HEADER:

Return-Path:   <fredwilliams3@rediffmail.com>
X-YahooFilteredBulk:   203.188.201.151
Received-SPF:   softfail (transitioning domain of rediffmail.com does not designate 203.188.201.151 as permitted sender)
X-YMailISG:   kXm_l1sWLDulJeDnOLmSYdHmIqwp9r2k_ROYymTodmz266na zbWmm1RAwqAGvVzdkwDVIbDT8aDMccE0hDmzwJtDnlV4iJuFz0KcXVf1dBak x98QBBYy.rvg1pyEHXGwIyg0vfjfZzaH0cL2NhozBoR7T_SswQDqjPkpilTa 9zxjg2xwxJWYGVKBP6a2QUEmK3WpQosxrAVpSWwkGBZg7eVeoGsZDVA8NS5L GXQxxkjBDQK2EhPR0e6buJvQZBVYdWxOjzJaKeW3LkzKD_L.cqJXriH9pi0N a9gjHsvYsVZYjN5HmL7qbB1fOyNvL7A0y_kkrCIzGnq7tQWDOYsY8Szbpt6. wUI265q4YMhRGPG57mtQh4MqOj5vTQWQ7k8GODjOiFp0HD8EaShYjft3mra2 C_47mjLCermdzu7q8jRpFeuy.iiolsQV79zOfbeSP12ZhqrSPSaF4T2cx2Je dcVjk6guaZJMhSdnV5vjprupXr65wFz.T4l_kWsL446Pp5D.MrHn6DFmr.QQ wwbxEuJf.dYTCjEdTv3pR6agpyKx0H6efevBOMagtK391o8pFLXmZwl7eCTJ N_96Hs_mtE9u6YvXmTwAhNuDzbCI9bZq9lOiUg5Je0lnK9ECjTz6wN8DhErI _HKSfh6HYtEWjX41pyCBu_AqC.BPf9.apP4wnqPa4Swvf6nK_yd4JLPy5hQ4 QZk87kD3_aGkwheBtgxJYtaIXuBDZArx6K7eibTJR4wEWXCKoEMZKqfIfuTg E5J50THp.313pUu1skrpRY4W9mneEQYmVYnei3tje.0qjxtMAnE8EF0NFBPu 6C512x7CKXMg5jX8NC3U6dUxxQwBPkMGfXFkB1uLcKbz20aZCm3XVSe2RCwJ MiTkcht7A8Mh1uKqPfT03S4_W57g12Vd0rr8nAtzPoa7PReYYsq8cRUJWwOQ YTUr4LnYBE1VgmlOXv6cF_H9DZgwjMUFn7Jjwko_VAscFQcVfBtSqwzh7aF_ a2Myv2f0jlv.x8iqZtoJdMZ4QFeqm2lyK.z5vT_fjtINJACHdd.c.rYMFjIs s2Ki0.H4pWR9AlbhLbzWzS6We6y8GR84DuP8bfLv9tnzxPI6Y8wXeNX_PGPU ngcHDVItOGamaK8YRs3UA6Hh47uLPhQQ_bR6QtxSQ9dylIHZyGC2LFEezNIB sO95KtmJdbtuFkwDPvP498wr.UEGHikyo6zfrcF6sMvSRqO_qSFK9WL6di.Q cSu_k8mhBhCBX7UflKUBgnJpVLOjNapnlBuYCIUAdlJfPyzAb7qCXLBfIO61 ufTgbAVKdinUnJtyqf2z2ocHbeY8x7k3RtTt407n6zAyJnuWdacA4JR12kuR GzIeiw–
X-Originating-IP:   [203.188.201.151]
Authentication-Results:   mta1219.mail.mud.yahoo.com from=rediffmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm13-vm5.bullet.mail.tp2.yahoo.com) (203.188.201.151) by mta1219.mail.mud.yahoo.com with SMTP; Mon, 12 Nov 2012 20:05:36 -0800
Received:   from [203.188.200.80] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 13 Nov 2012 04:05:33 -0000
Received:   from [203.209.230.76] by tm1.bullet.mail.tp2.yahoo.com with NNFMP; 13 Nov 2012 04:05:33 -0000
Received:   from [127.0.0.1] by omp105.mail.cnb.yahoo.com with NNFMP; 13 Nov 2012 04:05:29 -0000
X-Yahoo-Newman-Property:   ymail-3
X-Yahoo-Newman-Id:   882944.40828.bm@omp105.mail.cnb.yahoo.com
Received:   (qmail 23703 invoked by uid 60001); 13 Nov 2012 04:05:29 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1352779529; bh=ZStJQptkpiRtW9IHly4mG/teeC4Vi9ewmbkLGyxQEnw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=s41UtQ0D/KXQzDMgifijBIXVjLNxUR1ahFoNSwOa5shnso/PYBkPTZZBb2hauAI82cgX1+T8RA0TCkf5LfBmjlbI1n6GWWodpb9OueyaXHgU7l7t1hgqlXHBbeUDAAxLdDowSoVrHuaexcgdtaReePY0PgpW6Gn1rBq1SI+rbvo=
X-YMail-OSG:   i3LOjoUVM1lxIQLS9kVi4Y8kX8wV_wAnVTfrRQhVear54pa qPUcdSwwe
Received:   from [41.138.90.38] by web92402.mail.cnh.yahoo.com via HTTP; Tue, 13 Nov 2012 12:05:28 CST
X-Mailer:   YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID:   <1352779528.23247.YahooMailClassic@web92402.mail.cnh.yahoo.com>
Date:   Tue, 13 Nov 2012 12:05:28 +0800 (CST)
From:  
Don Bright <fredwilliams3@rediffmail.com>
Reply-To:   expressprocessatmcardbenin53@yahoo.com.tw
Subject:   FROM ECO WAS (ATTORNEY ) MR. .JAMES GEORGE ATM DEPARTMENT
To:   undisclosed recipients: ;
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”373869220-595389065-1352779528=:23247″
Content-Length:   22280
 
1 Comment

Posted by on 11/20/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: