RSS

Tag Archives: Barrister

“Morgan Chambers”

INHERITANCE SCAM – NIGERIAN SCAMMER – FRAUD

This fraudster has spammed my spam-box under various names including the latest which was received one day prior to this email from Morgan Chambers .. The names used was: Barrister Mendy Chambers as well as Fred Williams and even Western Union Money Transfer — BEWARE!

EMAIL: Attorney at law, Barrister&Solicitor

Head office: 21rd, g, close, house 18,
Festac town Lagos Nigeria
Private email: morganfirmng@sify.com
Tel:: +234-808-134-8919
 
Attention:
Before I start, I must first apologize for this mail to you. I am aware that this is certainly an unconventional approach to starting a relationship, but as time goes on you will realize the need for my action. My name is Barrister Morgan ibekweoru, a solicitor and the personal attorney to a citizen of your country, who owns a construction company in Nigeria. Here in referred to as my client, on the 26th of December 2004, my client, his wife and their two children were involved in the tsunami Asia disaster. My client and his entire family unfortunately lost their lives in the disaster.
 
Since then I have made several enquiries to your embassy to locate any of my client’s extended relatives, which has proved abortive after these several unsuccessful attempts. my main reason for contacting you is to assist me in repatriating the money and property left behind by my client before they are confiscated or declared unserviceable by the bank where the funds redeposited/lodged particularly, the Gulf Bank of (Nig) Plc.
 
Where the deceased has an account with an approximate sum of eighteen million (US) dollars. The said bank has issued me a final notice to provide the next of kin of my client or they will be left with no other choice than to confiscate his funds, a copy of the said notice i will fax to you on getting your reply.
 
Since I have been unsuccessful in locating my client’s relatives, now I seek your consent to present you as the next of kin of my client to the bank, going by the fact that both of you has the same nationality, so that the said funds as stated above can be paid to you instead of leaving it for Gulf Bank of (Nig) Plc. we can take part of it and leave the rest to charity.
 
I have the necessary legal documents that can be used to back up any claim we may make. All I require is your honest cooperation to enable us see this arrangement through I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law.
 
Please kindly reply through this private email address: morganfirmng@sify.com  Finally kindly give me your confidential Phone/Fax numbers so that I can fax to you all the correspondence between the bank and me.
 
Best Regards,
Barrister Morgan ibekweoru (Esq.)
E-mail: morganfirmng@sify.com

HEADER:

Return-Path: <morganchambers@lawyers.com>
X-YahooFilteredBulk: 66.83.100.155
Received-SPF: none (domain of lawyers.com does not designate permitted sender hosts)
X-YMailISG: S3yK40EWLDtwZuF5d3A5xp1epJHGpDNL0b7HFChDpHgmv6lG C5Hg__sPN6TC2eVVDlIrZXz1J0p9NjdULziQ3vxjuIMK9uFHdhC3OAde78xA u9fyDoOohzpNrWaCchSfnEvkerBsTLZ9RH6BaMJGouoV2JcDYr9HnaVhbRz3 ywt6cjvI7J_kSOtjTrDVwCi8YGm8rvWpbDRfKKQDmFDlf_My7wiYIkml1L3H Et.FMSU2uvE5MHR0yBJ3SD7MKP3zY0BatFG9PN3hbT074KQqfmuWj1qBbq4E _jyOWUAClb1ioZRIyheZuzvOzgxiW97OKNh4B_4bx.oLbcJu4r7engOqfkOD QNJ5LYseJX9EOjC9f3wGoiXkYXw0IKo7Qjc78nmNWxnL7s7TWLw0TNn4cS_r S0AUEtH3XUbz1UIKYjql9PvYgMMNl.kpLzgFz.ooN_vcYLfBbb_jHyFcZix7 ZSJ6W9y.cqgPkH.fJfN9ybooKGyf4aC4cspBfjPg9Ul1XCCJGMvIgHzASmIW Zyis44zEutSIIZlxinm5xoGHDg1_O2c__mJTKMEBTFXMjU2pJBD6kyxScKn1 BAPKSUCdaWMxco8BzsG6IE5yUv85zUCQNzLcj6txEORdiUok5df32wvAQW27 Hboqp71a13EjLU1kDboe5AzLdvmxu5OEBcoXss1OMV8J80NXjqd8u526HbRt 3oZDyfM3.QeqeG6ooCP3ZiZJ_6A7EenZa1E1vdr9NYQMnux3kfcqBIQ_Snaa j5Sb3LcmCjAJ2fmzjXJnm1CMVNUQcDkvSOBGnwxIbdK3HSj5qXkj7VUnL5NZ 22Qf2voC1hCkXjep1ZkGmZsbVql1fqSgiaz0ZRRno.uhZLdqPk3fohftmSQP 2ALaSz_4mzbCyCqhg9iJ_20fDuky6KVRY.J5GZOo6bj3SKE_iDjH3e5z1Mik UYgTWk6XT3Or__pGMYT9lBcw9yrfM.bGe2jPgMyEYOplQuM25gmCH4kb7mQs gvtNmRFhoUSeZKZM0e.EhtqXLvZaR3WXZT1VjAvVfB0f.V2cbk5wro8RkySP zJofu5yd3.cOOL3abG9HFKSA4trOS3VdiXgQxUJ1vhIwDQmVRDziDtVDDTpv zcRyaoZr.Ba.ZCwvpORrfjaaVZAclCxFnflvLNReeLWoT0ZK_4WpT.BgnMdh jqGJcwCYdpb_cOA_h4eF8lrDZccQeOcf1qQMBbbYn_9GroyCl7zDvdiI5g3f ZtKL9U5agCbkwdcW2y9dx7cgb2b_NLyTpKRTTE.11Z7UEf12mRB1QYQFUrKd xeCRhlBauuWqcsg0G8Gfyh8hmvdM_2yvgnilxbq.XM2WFohz5sGZYkmPW_yS TM6nSzc68gGhqNFv6S8O4i1nClXX9L_nd1dtNzuazRz7L0krQC04N1yCkp2a d9HMV63yVL4BUJtUG7M2_AyPSaqz4SH8yFe0c.KB_2cjAbgcT028MkqPYGsC YkzVD6uZm7IlADyrW7vTpqnvNXrtqEojRLmpcg–
X-Originating-IP: [66.83.100.155]
Authentication-Results: mta1240.mail.bf1.yahoo.com from=lawyers.com; domainkeys=neutral (no sig); from=lawyers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO server1.sikesfleet.local) (66.83.100.155) by mta1240.mail.bf1.yahoo.com with SMTP; Thu, 13 Dec 2012 22:10:53 -0800
Received: from User ([66.85.157.126]) by server1.sikesfleet.local with Microsoft SMTPSVC(6.0.3790.4675); Wed, 12 Dec 2012 10:36:33 -0500
Reply-To: <morganchambersn@abv.bg>
From: “Morgan Chambers” <morganchambers@lawyers.com>
Subject: Contact Me.
Date: Wed, 12 Dec 2012 07:35:54 -0800
Content-Type: text/html; charset=”Windows-1251″
Content-Transfer-Encoding: 7bit
Return-Path: morganchambers@lawyers.com
Message-ID: <SERVER1XeQM7gyoPB2E00000703@server1.sikesfleet.local>

FROM: Morgan Chambers morganchambers@lawyers.com REPLY-ADDRESS: <morganchambersn@abv.bg> ADDRESS GIVEN BY SCAMMER – morganfirmng@sify.com

RECEIVED IP: 66.85.157.126 X-YAHOO-FILTER-BULK / ORIGINATING-IP: 66.83.100.155

Scammer’s prepaid fraud phone number – +2348081348919

 
1 Comment

Posted by on 12/14/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

“FBI OFFICE”

WARNING – INHERITANCE SCAM – ATM CARD FRAUD – NIGERIAN SCAMMER

ATTENTION: THIS SCAMMER’S IP IS BLACKLISTED AND IS CONSIDERED 100% MALICIOUS ON A SCALE FROM 1-100 – – If you’ve received a email/contact and put their IP, email address, host, etc and got brought to this post then you’re dealing with a scammer/phisher One of the anti-spam websites warning against this IP address is Spamhaus

EMAIL: Show Details
Attn please,
This message is coming to you from FBI office here, We are writing this mail to inform you that your (Inheritance winning awarded funds of $1.5million) has been totally converted into a ATM Master card and it’s to be delivered to your address via courier service, Be inform that the courier delivery company will deliver the card with all the manual and instruction both with PIN code to access the Card upon receipt. It’s the best option to receive this amount since every attempt failed, therefore you will need to contact the Barrister that helped in re-claiming the check back and converted it into an ATM visa card with his address below:

Barrister Necter Polimars
Email: barristernecter@yahoo.fr
Phone: +229-98651731

Send him your current address where the check should be delivered to and remember to indicate the Reg:code of ATM-0034 to him when making contact with him. Please also choose the courier service you would like to deliver the Card Post office is also working but could take the card much time to get to you.

Please endeavor to inform us once you have received the ATM Card.

Sincere regards
Robert S. Mueller
FBI Monitoring Team Service

HEADER:

Return-Path: <offilcefile1905@superposta.com>
X-YahooFilteredBulk: 203.188.201.151
Received-SPF: fail (domain of superposta.com does not designate 203.188.201.151 as permitted sender)
X-YMailISG: ezBF7kAWLDtzu.6WTiJebVEzmQUIcG_PNd1CwpI.7FK_4hEN Zny7zbsYgSrvRNEkKNAHyjYIgbXGVFrTSy5c9pyJLJT.I2rbeu56O.55aNRc EQ4OjPa65stTyuXMWPdmbc2Jchn20MKDdUhbt5XnuXvouwATkklv.if4Srwf PhgPk6NBUSLZVJfqBHUhuwGMHUb_GfrNTpQsO.6RIv6rP_BimD0cQ0sROi15 H3py5nbXAc.b_y9E7OCFREZrAT3GEMeHuzInLPwjPODQ7PFjnt8wP97VPfLP C3D6i4CW_Q9zsBV5HRucchEEUqIWMBzzTuLi6zi_ltdXIdLGccljYIUkibmP Ed6kSsw6JvdOn8x62zffgS3BLW6CK4UJ2WrxTzHnGsLVxdxZBcThqC8CcB.n 3tmyMvUm028RDYEH6y5spoHom3ZCQydyZ8aZ6a2CdE5op4jpI2fdBhU7ZyZN Dqdib4ZxEPlV37MS9RCDeUqBndpsXjq39haZEpSj.pWiwS_jeQggSyiCfzLA Du8yPKoCdbgkqs4xpA6z1bLRYqSSeiMETFaBAYVfqIhhHnCuGnRdSjKKcRfa QSyPrDLSrtpTgCxTxf8Wmlv5r9qoSzqTBs8y3639xGJz_TaqCvv2WGK2d0eL _2p6QjsaA6XBRYyI1olJHaBZnBshmo67FuoNCPeg2JBFZC9bJuLhNahvSF4K d9N2c5ipVC9pAsSeyKG_PiKl4ql1Y7q3l7f5IfZhlPgbTIJmn2Yxc78Fs.7b MF1ui8Dgn7t3rQehQiKwWpFk0q7WCC0IWZAAoZgM1h6Q.FP6orLyiR.Exv8D RiD.Oc4IbsY5WKoCy8ZMH.q.4LpS2Pyom.ERBABavo2ov5JSoNDBVWW6ss0t ySPJiqvMCEULgheeKtHOlWD1UGNWn5g77TqNnx8dnYwLT_Y2ONb0zrgj4.Qe TLuVJ7nQYutC4IN2EKxquWdtY9lDDBNt3EYmZ0jwRErSqsr1dKjHBzBUdu_s _0O.oK5IqEYhs8zBOHcckO_uJSRW.SQmfbTZF069RPGOwEu5ckgWIGwo
X-Originating-IP: [203.188.201.151]
Authentication-Results: mta1091.mail.ac4.yahoo.com from=superposta.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm13-vm5.bullet.mail.tp2.yahoo.com) (203.188.201.151) by mta1091.mail.ac4.yahoo.com with SMTP; Sat, 17 Nov 2012 02:43:59 -0800
Received: from [203.188.200.142] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 17 Nov 2012 10:43:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 977911.45325.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 39060 invoked by uid 60001); 17 Nov 2012 10:43:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353149034; bh=4NHRjGox1llxlGTpuwwzaXz2wAEyMSFQlVe/RepWfVQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=P0DhZFg9Mjj05/vqaDc0igv+GPAlNxBBckhxEzU4PJ/OEqkdNXv8cHYOGIrX06GRSxiYBDEXksxF+7O6itMLQryiu63e3X/TBdnGMXPpsJmwW89Nu0b5IpbVDCyBNfuzLVNzU62iHNFjxppWoL8m/2ohhLEweTQDE86CwjMFUjc=
X-YMail-OSG: UNddAlUVM1kvGGStE1FY34uiMeKn2clDYRgV8R.tDHiC3Gd LJa0arT0C
Received: from [41.223.248.96] by web92408.mail.cnh.yahoo.com via HTTP; Sat, 17 Nov 2012 18:43:53 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353149033.34956.YahooMailClassic@web92408.mail.cnh.yahoo.com>
Date: Sat, 17 Nov 2012 18:43:53 +0800 (CST)
From:
FBI OFFICE <offilcefile1905@superposta.com>
Reply-To: barristernecter@yahoo.fr
Subject: YOUR ATM MASTER CARD OF 1.5MILLION
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”176961417-1892065883-1353149033=:34956″
Content-Length: 14962

This list below shows many bad IP addresses (sending out spam, virsus, scam, phishing, fraud, etc) that are being used by web92408.mail.cnh.yahoo.com 41.223.248.98 <– The IP/Host at this IP is being used by scammers sending out 419 scams

210.169.153.71 SOFTBANK TELECO ODN.NE.JP JP 5% 95% 2% 98%
200.13.169.3 AMNET DATOS EL AMNETSAL.C SV 49% 51% 46% 54%
203.115.0.14 INTERNET SERVIC RADIUS1.SL LK 13% 87% 25% 75%
202.147.75.21 POWERLAN LIMITE DOT.NET.AU AU 18% 82% 38% 62%
202.147.75.25 POWERLAN LIMITE DOT.NET.AU AU 18% 82% 39% 61%
116.50.64.53 WAN NETWORK FOR IN 59% 41% 61% 39%
213.210.218.169 SERVICES COMPAN NESMA.NET. SA 65% 35% 68% 32%
85.95.235.101 INETMAR INTERNE TR 6% 94% 4% 96%
124.74.42.242 CHINANET SHANGH JWS.COM CN 51% 49% 63% 37%
217.146.183.251 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.227 YAHOO! EUROPE YAHOO.COM UK 36% 64% 58% 42%
217.146.183.253 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.233 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.88 YAHOO! EUROPE YAHOO.COM UK 36% 64% 58% 42%
217.146.183.114 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.225 YAHOO! EUROPE YAHOO.COM UK 36% 64% 60% 40%
217.146.183.243 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.235 YAHOO! EUROPE YAHOO.COM UK 36% 64% 61% 39%
217.146.183.92 YAHOO! EUROPE YAHOO.COM UK 37% 63% 60% 40%
217.146.183.229 YAHOO! EUROPE YAHOO.COM UK 35% 65% 58% 42%
217.146.183.112 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.247 YAHOO! EUROPE YAHOO.COM UK 35% 65% 59% 41%
217.146.183.239 YAHOO! EUROPE YAHOO.COM UK 36% 64% 57% 43%
217.146.183.249 YAHOO! EUROPE YAHOO.COM UK 36% 64% 59% 41%
217.146.183.231 YAHOO! EUROPE YAHOO.COM UK 35% 65% 59% 41%

barristernecter@yahoo.fr

From  41.223.248.96 – web92408.mail.cnh.yahoo.com — Cotonou – BENIN – BJ — 

Reverse DNS: 203.209.250.172 – web92408.mail.cnh.yahoo.com  — IP address originates from China and has a score of 50/100 which means approx half of the activity is BAD

From: Jonathon Finn <mooretudepo33@livedoor.net>
Subject: Ermaessigte Preise fuer Top Armbanduhkopien
From: Kelvin Richardson <pricesajebi29@lunatico.it>
Subject: Genaue Kopien von Schweizer Armbanduhren
From: Leo Grady <bakerlixiru48@cerviaambiente.it>
Subject: Top Chronometer zum ermaessigten Preis
From: Adrian Childers <perezbuxuva66@hotelclocchiatti.it
Subject: Ideale Kopien von Schweizer Zeitmessern
From: Shirley Stroud <robertssacoly93@texsaca.it>
Subject: Dieselbe hohe Qualitaet vom Edelzubehoer guenstige
From: Amy Christopher <hughesbumoco27@cooparche.com>
Subject: Sommerpreise fuers edel aussehendes Zubehoer
From: Sophia Walden <phillipsjimome53@pgelettroimpianti.
Subject: Teuer aussehendes Zubehoer zum ermaessigten Preis
Associated Harvesters for IP – 41.223.248.48
75.125.18.178 | H
70.85.113.242 | H
208.66.195.2 | H
70.85.172.170 | H
74.53.249.34 | HW
74.86.249.98 | H
74.53.243.18 | HC
74.86.209.74 | H
218.186.13.1 | H
75.125.47.162 | HSDW
67.19.250.26 | H
91.190.94.246 | HSD
216.40.222.98 | H
81.195.121.253 | HSDC
Sent From 41.223.248.96 – SOURCE: Project Honey Pot
From:  Customer Service – upsaccountservices@ups.com
Subject: Re: FW: End of Aug. Statement Reqiured
From: Logistics UPS  accountservices@ups.com
Subject: Re: FW: End of Aug. Statement Reqiured
From:  Express – upsdelivercompanyb@ups.com
Subject: Re: End of Aug. Statmeent required
From: WendyDillahunt@mailusers.make-tracks.com
Subject: Re: End of Aug. Statmeent required
From: LinkedIn Email Confirmation – emailconfirm@linkedin
Subject: Re: FW: End of Aug. Statement Required
From: Customer Support ups  upsdeliveryservices@ups.com
Subject: Re: FW: End of Aug. Stat. required
From:  accounting@graco.dhbit.ca
Subject: Re: FW: End of Aug. Stat. required
From: Sook Ritchie via LinkedIn – member@linkedin.com
Subject: Re: changelog UPD.
From:  accounting@mail420.minnesotageeks.com
Subject: RE: MAYRA – Copies of Policies.
From: Marisol Friend via LinkedIn – member@linkedin.com
Subject: RE: CARMAN – Copies of Policies.
From:  raccounting@mail2.mounted.net
Subject: RE: MEGHANN – Copies of Policies.
From: DarwinZarling@hotmail.com
Subject: Re: Security update for banking accounts.
From:  DIONNE ROBERTSON – ROBERTSONpmjgDIONNE@hotmail.co
Subject: Your tax return appeal is declined.
From:  IsmaelLAKEEQFFK2B@aol.com
Subject: IRS notification of your tax appeal status.
From: “MYUPS” <ups-shippingagency@ups.com>
Subject: Re: Fwd: Scan from a Hewlett-Packard ScanJet #575
From: UPS <customerdesk_upsdeliveryservices@ups.com>
Subject: Don’t forget about meeting tomorrow
From: Kathlene Donaldson – MiraDinehart@w-link.net
Subject: Don’t forget about meeting tomorrow
From: Milford Hinkle – RamonGriebling@heale.net
Subject: Don’t forget about meeting tomorrow
From:  Amazon.com – account-update@amazon.com
Subject: Re: Your Flight A189-45644
From:  JabariKinnon@mail.igretec.net
Subject: Re: Your Flight A07-8295
From:  LEON Doherty – DohertyLEON@hotmail.com
Subject: Re: Fwd: Your Flight A268-625505
From: Badoo – noreply@badoo.com
Subject: Fwd: Re: Your Flight A18-77208
From: “craigslist – automated message, do not reply” <ro
Subject: Fwd: Wire Transfer (30331FY38)
Example Messages Sent From 203.209.250.172 – SOURCE: Project Honey Pot
From: Mrs Purity Qaume – mrs.purityqaume2011@terra.com
Subject: From: Madam Purity Qaume
From: Mrs Purity Qaume – mrs.purityqaume2011@terra.com
Subject: From: Madam Purity Qaume.
From: jxdguq – caolaeuva@yahoo.cn
Subject: 9税4

FBI OFFICE <> offilcefile1905@superposta.com <> barristernecter@yahoo.fr <>

41.223.248.96 by web92402.mail.cnh.yahoo.com <> bobwilliamson@superposta.com <> wunion617@superposta.com <> Received: from [41.223.248.96] by web92402.mail.cnh.yahoo.com via HTTP;
X-RocketYMMF: redwoodcapitalbank@yahoo.cn
Date: Thu, 15 Nov 2012 18:51:29 +0800 (CST)
From: “Rev. Robert Williamson, ESQ.” <offilcefile1905@superposta.com>
Reply-To: wunion617@superposta.com
Subject: TRANSFER MTCN

Attention Beneficiary,

I am contacting you because I’ve sent you the first payment of $5,000 this morning from your winning funds total amount of $1.5Million USD, Therefore you need to contact a Western Union agent Mr. Jerry Young, and ask him to give you the transfer payment information and MTCN.

Agent: Mr. Jerry Young
Email: wunion617@superposta.com
Phone: +229 98644349

Please try to contact him today request him to forward the payment information to you, Remember to Indicate the registration code of EB-2520 to him when E-mailing or calling him, Also he will be sending you $5,000.00 daily as per our office discussion with him.

Do get in touch with me once you have received the transfer. Please copy this email: wunion617@superposta.com, and paste before replying to him or simply call him at his number: +229 98644349

Sincerely

Rev. Robert Williamson, ESQ.

IMF MANAGING DIRECTOR

BENIN REPUBLIC

E-mail: bobwilliamson@superposta.com
+22998644349

________________________________________

Fraudster is also pretending to be Yahoo Member Services <carecustomer625@yahoo.com> Reply-to: carecustomer625@yahoo.com — YFB – 98.139.91.80 Received from: 41.223.248.96 – web182201.mail.bf1.yahoo.com

An FBI agent would contact you by phone or atleast by your name. They also have there own domain and wouldn’t use ‘superposta’ as an email-server.

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

“yahoo Inc”

WARNING: YAHOO LOTTERY SCAM – ADVANCE FEE FRAUD

UPDATE: Digging up information on this header and posting it in the search engine, for some reason, always brings me to another scammer I posted up weeks ago. ” Juliana Roman Medina ” with the email addresses julianar@pijaos.udea.edu.co <> fedexdeliverydesk@yahoo.cn IP’s used: 200.24.31.84 <> 41.138.172.174 (location Nigeria) — For more information on this scammer, who also sent a lottery scam and is believed to be the same scammer(s) as this post – Click here

NAME/EMAIL-ADDRESS:  Yahoo Inc <> ruthy_financial@yahoo.co.uk <> marystokesuk@gmail.com <>
EMAIL:
WINNING ALERT!!!
Yahoo  Awards Center
124 Stock port Road, Long sight,
Manchester M60 2DB – United Kingdom.
THIS IS FOR YOU!!!
This is to inform you that your email identity has emerged as one of the lucky winner of YAHOO ONLINE free promotion  of  GBP150,000.00  (ONE HUNDRED AND FIFTY THOUSAND GREAT BRITISH POUNDS STERLING ONLY ) for the just concluded online sweepstakes drawn in London recently.
In appreciation to yahoo,hotmail and gmail users! we gathered all the e-mail addresses of the people that are active online during during the draw and among the millions that subscribed to different email addresses and others through Electronic Balloting System (E.B.S) without the candidates applying for it .
PAYMENT OF PRIZE AND CLAIM
You are required to contact our Legal attorney in United Kingdom for representative.Barr Mrs. Mary Stokes
E-MAIL: marystokesuk@gmail.com
TEL: +447024038948
Your winners numbersYAH NO: 498876
DRAW TCK NO: 11098322
E-MAIL POSS: 234876
CATEGORY B: INDEX
SECRET WIN CODE: B32000Congratulations once again.

No virus found in this incoming message.
Checked by AVG – www.avg.com
HEADER: 
Return-Path: <ruthy_financial@yahoo.co.uk>
X-YahooFilteredBulk: 77.238.189.58
Received-SPF: none (domain of yahoo.co.uk does not designate permitted sender hosts)
X-YMailISG: NdS_pu4WLDsNaT3akZ7yPUDozjg1SwutxbxaG4luget.NmUV JAxEPSkjTsUOKhJCaMal.mbjPfmNWLyFXD7.TLbs2YZ5eIyLo.zeprF0yFcG x5vMaZZn05FfxxSba.amT2oGeuZ8SJbWx__ctHkvFOXJKz1fYjsW5RLt0XPH mkvc84ERic.I.V7q8sjMcRkk5BTrt_HFJTngvD0Jz78LiGAKqQU.CwHFLjF_ fCmmO5h.1LLfd.yDlMExYPz6GkeoiqTvJWvvP.SBgDUAm6PfjZak4gnQVUCf sLYWZf0tExv3bp42VphqsqjxZoAEmW4V0fhMYlHEYAJYjPyI3PWjGAbGkSVO vuRTxYFc3.NdAg1DdwtUzh0.xtA64dMzkn_1AfRWNsVECC1Hj4zX3lX8mpq1 aeltHMn5kL3ltEf66.pPp2fs0dyBpVZPzXaWSWH9LxX5JjiH3kS0nN6i2IS0 JTHXmRKtxkXpr8svfJpXQJLB.Fw1l1WYg8MR0y16187p3RSxcR8g.8iPjITg DqO9cm542tUZqnB8eselzVISzwJ7NQKHHpZ1ofSgowc8tehzjb8JszLH2QpE YidhUsXq_JS3lcH0r5X0dx52yLsUv0_Fjy7XvoSXtkv7phso2SOgHwV00iBq qKdi1Vj6OJQdnyUZyAmw.OPqB5poJp_s9p1TQm5tJuRCRksZW2QplD9O35bJ cb6QVwPsKnpTW59y.Y8pi8l2Y5Kw2UWCniZSb1I.Qom7dhoPZ4j_igAAUdIS R_j4.cDW.AR6upgTImY8zaWXAHXhPQZ2AR1ySBg9ha5WZIn6MnmDULjwndxt m0_oFyouUpz5tB4gFXNdp6p8sERAFKMXUfTW72M4oFXAqvWLnbb_S4td2jFq IHAHiGLurlu8OKNG3cddt4A6DBKOrvQZD3lRsXBSftJ8Qw0UNCYmHucneREn WDLmW3vthoLoes7_1LesMlHF2tBw6Vn7Bp7DXl1iiUBbs_kia5EugPumZ6pH rslpq7qR2LfYUoy2BHr7giAFXBoOgzhIJtDJ.Z.rClmM0jMahpESa.FpKzWx yA3tdHNkmVkxBAv6sSjEwAI26Lin92B8IrF2FJoIYAdsGdOz5yiO7yt03sqg ULk57hm94aSyYxqXrOQRsTp2meZgCDOyXI8WCnkdjz2pgdC9Et5M0TObolE7 KW8KmgGNz3oOpwkWbhwekiTRDeNrl4q9BDsnE0nUMcStPwTbb3khwcPlXHIM OTFXwn1ri0HpplotgDk6Ikkf_7PFRSmYzbtGIbp9RtXKaKnloZbI0mEXaYu6 v_5kwAdsNizWUoKrjkUWzGU7DJABRHjpN5UdrXfD3AKS00aoYFBi23Qh3LtP 9eoYgSWyi0.ALKIlExRcq76mMqA-
X-Originating-IP: [77.238.189.58]
Authentication-Results: mta1076.mail.gq1.yahoo.com from=yahoo.co.uk; domainkeys=pass (ok); from=yahoo.co.uk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm1.bullet.mail.ird.yahoo.com) (77.238.189.58) by mta1076.mail.gq1.yahoo.com with SMTP; Mon, 19 Nov 2012 04:13:05 -0800
Received: from [212.82.105.244] by nm1.bullet.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 12:13:02 -0000
Received: from [212.82.108.123] by tm16.bullet.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 12:13:01 -0000
Received: from [127.0.0.1] by omp1032.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 12:13:01 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 927814.13983.bm@omp1032.mail.ird.yahoo.com
Received: (qmail 51996 invoked by uid 60001); 19 Nov 2012 12:13:01 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1353327181; bh=iA41e3cptztcs4OfqEqg3P1UU05elM2wHBJidEewk4I=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=BA0V/lvNb3g8ICmqCmJPbBUDMASq3g7dO9gYsGBxwvNiQfiJmdMmYdtfretP62Y3YdscvpQaL39vLARuPlXvN99RIZLN0s0gVefV8goLjAhV7ELbNIaUrPuAjvE4BvIbcgvuf9zMo1LnYv95FX9O5zgHofwxOTYtFOfiVy5uCaw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=epvk28xWMC/n2L61OGw1a7wjmcirfFCQnXq9wxXrH+mT3HsPQ5dT6BjQdZywvoxVeHdU6StErnnbkFa5TuOf6e0WM+03jfkrprNKUIu3S3UIzeHVWQWWpt2GVyqgGtLdOVSdOpIeVPvXhmwpZMw+17LzolAjKfNQhLjniuulqbc=;
X-YMail-OSG: 6ok6V18VM1miJbWwZPtPmm8sgOI_RgxNr1NGtFmHZw90Mvv 6D7Q-
Received: from [193.164.133.72] by web29802.mail.ird.yahoo.com via HTTP; Mon, 19 Nov 2012 12:13:00 GMT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353327180.51095.YahooMailClassic@web29802.mail.ird.yahoo.com>
Date: Mon, 19 Nov 2012 12:13:00 +0000 (GMT)
From: yahoo Inc <ruthy_financial@yahoo.co.uk>
Subject: “”””” Winning Alert ,from Yahoo Inc! ( Check your mail you have a massage)”””””””””””
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”478945831-1873120208-1353327180=:51095″
Content-Length: 23720

UPDATE: My email server detected viruses from this incoming email received from ‘ Mary Stokes ‘ .. A link was also detected (us.i1(dot)yimg(dot)com/us/yimg(slash)com/i/us/nt/ma/ma-mail-cl_1(dot)g=)

______________________________

The below header is also Mary Stokes scammer pretending to be FBI office in an inheritance scam. Email addresses used: barristernecter@yahoo.fr – REPLY-TO-ADDRESS: offilcefile1905@superposta.com – – – This Nigerian scammer is blacklisted on multiple websites and has been reported under multiple fake addresses.  Click here for more information on this inheritance scam

X-Originating-IP: [203.188.201.151]
Authentication-Results: mta1091.mail.ac4.yahoo.com from=superposta.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm13-vm5.bullet.mail.tp2.yahoo.com) (203.188.201.151) by mta1091.mail.ac4.yahoo.com with SMTP; Sat, 17 Nov 2012 02:43:59 -0800
Received: from [203.188.200.142] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 17 Nov 2012 10:43:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 977911.45325.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 39060 invoked by uid 60001); 17 Nov 2012 10:43:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353149034; bh=4NHRjGox1llxlGTpuwwzaXz2wAEyMSFQlVe/RepWfVQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=P0DhZFg9Mjj05/vqaDc0igv+GPAlNxBBckhxEzU4PJ/OEqkdNXv8cHYOGIrX06GRSxiYBDEXksxF+7O6itMLQryiu63e3X/TBdnGMXPpsJmwW89Nu0b5IpbVDCyBNfuzLVNzU62iHNFjxppWoL8m/2ohhLEweTQDE86CwjMFUjc=
X-YMail-OSG: UNddAlUVM1kvGGStE1FY34uiMeKn2clDYRgV8R.tDHiC3Gd LJa0arT0C
Received: from [41.223.248.96] by web92408.mail.cnh.yahoo.com via HTTP; Sat, 17 Nov 2012 18:43:53 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353149033.34956.YahooMailClassic@web92408.mail.cnh.yahoo.com>
Date: Sat, 17 Nov 2012 18:43:53 +0800 (CST)
From:
FBI OFFICE <offilcefile1905@superposta.com>
Reply-To: barristernecter@yahoo.fr
Subject: YOUR ATM MASTER CARD OF 1.5MILLION

The names, email addresses, IPs/host names below are sent out by Nigerian scammers using the same host/DNS/ETC as ‘ Mary Stokes ‘ pretending to be the Yahoo inc lottery personal above. If you’ve googled any of the information you see here, it’s a SCAM!

Received: from nm19-vm0.bullet.mail.ird.yahoo.com ([77.238.189.92])
  Tue, 18 Sep 2012 15:25:17 -0700
Received: from [212.82.105.245] by nm19.bullet.mail.ird.yahoo.com with NNFMP;
farid_abdul01
41.203.225.136 by web29802.mail.ird.yahoo.com
82.10.220.112 by web29802.mail.ird.yahoo.com
41.138.109.92 (same host as the ones above.)
82.227.153.207 by web29802.mail.ird.yahoo.com
80.87.92.58 by web29802.mail.ird.yahoo.com
laura_deng@yahoo.com
184.171.165.50 by web29803.mail.ird.yahoo.com
d.kabori@live.fr
Dericah Riceh  dericah_rice5@yahoo.fr
jose_riceh@hotmail.com 
41.138.89.38 by web29802.mail.ird.yahoo.com
41.190.88.206 by web29802.mail.ird.yahoo.com

 18 Sep 2012 22:25:16 -0000
Received: from [212.82.108.252] by tm17.bullet.mail.ird.yahoo.com with NNFMP;

847439.61289.bm@omp1017.mail.ird.yahoo.com
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

”(Barrister) Robert Boyd” – robertboyd42@msn.com – llevaso@server.silicondirect.in

Nigerian Scammer (419) – ”Job Proposal” (wants me to transfer funds.) – You’ve been warned!

Name: Barrister Robert Boyd

Email address: robertboyd42@msn.com Return-Path: llevaso@server.silicondirect.in

X-Originating-Address: 173.198.247.35 – X-YahooFilteredBulk: 184.154.83.2 – X-PHP-Script: 173.198.247.35

Subject Line: The Job Proposal

Email: am Barrister  Robert Boyd, The personal attorney of Lt Col James L.
Montgomery,an american soldier that served in the military with the Us army’s
3rd infantry division before he retired and died in Iraq. My client deposited
Twenty Two Million United State Dollars in a consignment(Metal Box) with a
security company in Europe hoping to claim it after his service in the Army.I
have made several inquiries to your embassy to locate any of the extended
relatives of my client (Late Lt Col James L. Montgomery)which proved
unsuccessful. After several unsuccessful attempts to reach his family,hence I
contacted you. I have contacted you on trust to assist me in claiming the
consignment he left behind valued Twenty Two Million United States
Dollars($22,000,000.00).

The officials of this security company have
issued to me a notice/ultimatum to provide the next of kin of my client for the
claim of his consignment within the next ten official working days. since l have
been unsuccessful in locating his relatives over one year,I seek your consent to
present you as the next of kin of the deceased so that the proceeds of his
consignment worth Twenty Two Million United States Dollars)$22,000,000.00) can
be claimed or paid into your personal or company account as his next of kin for
our mutual benefit.
His Source of money: Foreign currency worth nearly Two
Hundred Million United State Dollars($200M) was found in a Baghdad neighborhood,
during a rescue operation in April, 2003 and some part of this money was shared
among Late Lt Col James L. Montgomery and his other army’s before informing
others about it.You will find the story of this money on the web address below;
http://news.bbc.co.uk/2/hi/middle_east/2988455.stm

The
sharing percentage is as follow if only you will be faithful and honest to
assist me,40% for your assistance as next of kin,50% to me and remaining 10%
should be for expenses or tax as your government may require. All necessary
legal documents that will back up your claim of this money will be secured in
your name with the personal and private information of my late client in line
with the stipulations of the law.
All I require from you is your honest
cooperation to enable us seeing this deal through. I guarantee you that this
business will be executed under a legitimate arrangement that will protect you
from any breach of the law.Further more,Kindly furnish me with your following
details.

{A}. YOUR FULL NAME.
{B}. YOUR CONTACT ADDRESS.
{C}. YOUR
TELEPHONE/FAX NUMBER.

As soon as I receive your details, I will write an
application to the security Company for immediate claim. Please get in touch
with me by my email or call me on my direct phone number TEL/FAX:+44 701 114
7060. Email:robertboyd42@msn.com  to enable us
discuss further steps to follow in the actualization of this Objective.
Best
Regards,
Robert Boyd (Esq)
TEL/FAX:+44 701 114 7060.
Email:robertboyd42@msn.com

 

Header:

Return-Path:   <llevaso@server.silicondirect.in>
X-YahooFilteredBulk:   184.154.83.2
Received-SPF:   none (domain of server.silicondirect.in does not designate permitted sender hosts)
X-YMailISG:   .gwVNqkWLDstXQn51v33FGY62Gn0w7CgDD5_MFKnKjJ7BeKI cHtUHt2sHna0OKfyvmNqCEq8WTxMOgp2zAJ5ODhc8YpZzp3ah.k3HmzyvJXm cpQwLvdyW4WvI49y.zx8rq_v8jhUsOIcTTxEbUsdmTpgXJ1_G4Q8PnIgEaC4 .gGwOeZkQOiFLkBIb_RBGlNboQlJpTt7TAANHOglR4dWexkbEzaY8hPbW0VB JpKgrfP0bCyxliBKVh7Go1zBe7zStBE4aoF77sSrDkfIKhYoIyiGe20uPxe4 I6s9ZcXZ26oeiajI3pzytWSNfuIKcheXmn6qWTrbtiGiPh7wYXQdxIgdaEz3 q0wBTlAIFPTo9kz3YoAXCvydSzDWKNjtKyzZMhL1YbvcL9RNXrYlNqBUCk_O W1hg3cpuTUUhKRdotV1QRxCC4Xt9fuz3gOYDpWum19y.Jnid3IyNDGyEqXTk 9hT5tO.ow1nzCbFnsPU3dO_PvyAAbughiQGn_MiYOFRyJRLSetxPaESU4Udq trWVYt58JaKGfxz.i53DMla4p3CNFLMtPiqmVKU0gAB69rAUYTaKpKWr8rSt LferM6jGgE8VOaSsCAUgCrmbTkfb4jOgvSQRJLNhIvaxlHTLGXFobnl8OXD5 TiPLGU_Z4C8MIrkXwV7gvssQIKJxXZEC66tROgkBB2vebJ1JYyV2fHiqSgbf wxcoB1Od342X_Pbg3plsArXTBXSGBFOmmsassGPrv.tR.M4Nc35Ank.Yfy3W mROV16SPP6ow7opoxI5lJ1c4D_2JiIfMEcszzcZlVOqUg1AXhGAtUmfy3SIl 3VJa1r6z24HsFoK0uJUpX8GX_O1X76aPu5YfHX_3OfLqbzMjHzSqxOmZQnWU DPZ1woMo.5UdscoPr6sz8Mb3jmmA6EdnxAmY61uA_XMfQyBEQd3AVRJuMacC _i1CgFhM8IvTFFPnaKSdjE8Ei.imV7StKocZ4tH3H1hsJRqjLSa.NumBqsW8 PKG6BarQH6CJWoEJUBnKbGshcboba1km_OWkffszUA3Brbfht0dWYYAD2gzQ AYW410Hvdd9aJ_gX8TC5EC.d2xx4p1qGOrF_tIUjAtohdP_58cWmyB5D7RMZ Z.bgeBi6bjw6_nJZZIkox1uZcma4ckNhcdxhlw–
X-Originating-IP:   [184.154.83.2]
Authentication-Results:   mta1266.mail.mud.yahoo.com from=msn.com; domainkeys=neutral (no sig); from=msn.com; dkim=neutral (no sig)
Received:   from 127.0.0.1 (EHLO server.silicondirect.in) (184.154.83.2) by mta1266.mail.mud.yahoo.com with SMTP; Fri, 05 Oct 2012 14:35:46 -0700
Received:   from llevaso by server.silicondirect.in with local (Exim 4.80) (envelope-from <llevaso@server.silicondirect.in>) id 1TK78a-0006RI-7V for (Me) Fri, 05 Oct 2012 16:36:16
To:   (deleted)
Subject:   The Job Proposal
X-PHP-Script:   llevame.com/wp-content/themes/twentyten/eM.php for 173.198.247.35
From:  
Robert Boyd <robertboyd42@msn.com> 
Reply-To:   robertboyd42@msn.com
MIME-Version:   1.0
Content-Type:   text/plain
Content-Transfer-Encoding:   8bit
Message-Id:   <E1TK78a-0006RI-7V@server.silicondirect.in>
Date:   Fri, 05 Oct 2012 16:36:16 +0400
X-AntiAbuse:   This header was added to track abuse, please include it with any abuse report
X-AntiAbuse:   Primary Hostname – server.silicondirect.in
X-AntiAbuse:   Original Domain – yahoo.com
X-AntiAbuse:   Originator/Caller UID/GID – [761 761] / [47 12]
X-AntiAbuse:   Sender Address Domain – server.silicondirect.in
Content-Length:   2926
 
Leave a comment

Posted by on 10/09/2012 in Uncategorized

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , ,

”Craig Perry” “craig@interslawyer.com”

Inheritance Scam – (also check comments for other emails and names this scammer has used.)

Name: Craig Perry  Email Address: craig@interslawyer.com and craiglawyer3@peoplepc.com Originating IP Address: 209.86.89.61 Recieved From: 209.86.224.50

 

Subject: Your Attention Is Needed

Email:

Attention,

Please permit me to write you irrespective of the fact that we
have not met before, my name is Craig Perry, am international Lawyer, personal
attorney to Mr Michael, a national of your country, who used to work as the
Director of Produits pétroliers (SARL COMPANY BENIN) in Benin Republic West
Africa Here in after shall be Referred to as my client. On the 27th of May 2006,
my client, His wife and their two Children were involved in a car accident Along
Sagbama express-road. All occupants of the vehicle unfortunately lost their
lives. Since then I have made several enquiries to your embassy to locate any of
my clients extended relatives this has also proved Unsuccessful.

After
these several unsuccessful attempts, I decided to track His last name over the
Internet, to locate any member of his Family hence I contacted you. I have
contacted you to assist in repatriating the money left behind by my client
before it gets confiscated or declared unserviceable by the bank where this
deposit is lodged. Particularly, the bank where the deceased had an account
valued at US$12,500,000.00 (Twelve Million, Five Hundred Thousand United States
Dollars).

The bank has issued me a notice to provide the next-of-kin or
have the account confiscated as Unclaimed Dividends. Since I have been
unsuccessful in locating the biological relatives of my late client, I hereby
seek your consent to present you to the bank as next-of-kin of the deceased
since you have The same last name so that the proceeds of this account valued at
US$12.5M can be transferred to you as inheritance and thereafter, you and me can
share the money; 50% to me and 47% to you, while 3% will be donated to the
charity oganisation. I have important legal documents that will be used to
substantiate our inheritance claims.

All I require is your consent and
honest co-operation to enable us see the deal through. Furthermore, I guarantee
that the transaction will be executed under a legitimate arrangement that will
protect you from any breach of the law.

If you are interested in helping
me out, kindly furnish me with your info.

1.Full
name:
2.Address:
3.Cell number:
4.Sex :
5.Age :
6.Occupation
:
7.Telephone and fax numbers :

To enable us commence all the legal
documents immediately. Please get back to me as soon as possible.

Thank
you.

Yours faithfully,
Lawyer Craig Perry
Phone: +22966227804
craig@interslawyer.com

Read the rest of this entry »

 

Tags: , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: