RSS

Tag Archives: Beneficiary Transaction

“Hart”

LOTTERY / INHERITANCE SCAM – NIGERIAN SCAMMER – ADVANCE FEE FRAUD

EMAIL: Attached Information Circular concern your inheritance payment funds from Central Bank of Nigeria. Open the attached message and read carefully by following the instructions

The attached file was titled From CBN.txt

HEADER:

Return-Path: <centralmessage.info@e-mail.ua>
X-YahooFilteredBulk: 98.136.216.183
Received-SPF: none (domain of e-mail.ua does not designate permitted sender hosts)
X-YMailISG: LCUay28WLDsXVnOIpfCgBYTNfUXrE2LzwaL2yegEkWenpW4X SBC_EuDaR.w80oTiRw0ETbWjvP.oR9xLNcD7JUMv_xI1fNeJP8k.KcZ.dqTR __CHSWogq6Y_qJChRBP51wqiJprgGE6Mb26FPmLdxsI19IKF5MhcLCzgz9GZ 3upzi_Ggbhkx_e3AU_ldOE7IjHvUEtfkyyUafscGRUZedVhSP724ErueRN2I 7ApPQGxnfFiOtG.dibMzZJI3Su.kp6G8iOWXb2FGW0vPwm3toR_flnLYadVP nnu6ZkppI8WzKexY6Z5ljQvaC7ibS3tNTjvvgqGeCBLy3ggRYTuqRdNUgv_o u2sVjXiNgoGbtBZPa.5yk3VWGdgVbHDtx1oLpa0Wh9L1tHBn.5s1of3So1ip 5gIjzhWrgo.JckvFtRMuZG26_mlOj4ygNpptgIajS._Lw3klr26swSLCCRri AnVgqAAF5T3Wdj3BVRBG3M96yG_ZlDXb7Jn97xRrReXrvxv7D.tL9vUQ5JcT WffcRC9NOnNc6eDWKlkueUcyGhcpb63wnettpvysZo.99iN2MvMfZBL01NBO atm5VrDsFhdS4cD9ib15fVbBeFxzW9NReDqTzONBUhGxLesQfAA1KOcuXrI2 gC..B0r7T1qgztq0Ju0EeAkkvO2IyRwoukFjWljhIbuGJZqAT0bYhMwX74T6 dKnM_2oeqrmxZBspkNnK4vxHP2XQdyu4kWV8.CoGdS8.VYITfT.USxCmjR9W oEAq5dbf22iPkCLvRMXRl4AeQi_gsL_kCH6CfzyOZMLxZYyFEPr8n.aIYDVW YyJtqybgme9zxTBZ3vhJZA6vJ51x2KHav65hdOU5w.ys0gti7YQ9VUmm0nLc veTHe1RMnICMIFT2sJiTVgeXBAPwxh72ypfOv3S2CbifYFxKoEbwhZ1vWSQq Ou7vnqZUiHMjgjOL2gDZhHThAtEgbhASmRAJV1mcCfD.rA2xUUvAuABp5EhZ KDwQNQOBSSAbb6LMwTdJutCMSX3UV2JGPsTdNxApKbDdElB4X.Dp.ltkOFpW xiwJ9Ca_QYezP9RF.0aZuiwvthXDfB1Z0LE9TSitaiDn8dU4.DK1qReYxkqv Bg2YMCOuvQXMCKn8N4OFQev40jW74tjGkhwxAiJJU88IDDc-
X-Originating-IP: [98.136.216.183]
Authentication-Results: mta1198.mail.gq1.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm29-vm8.bullet.mail.gq1.yahoo.com) (98.136.216.183) by mta1198.mail.gq1.yahoo.com with SMTP; Thu, 11 Oct 2012 10:40:45 -0700
Received: from [98.137.12.56] by nm29.bullet.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
Received: from [208.71.42.194] by tm1.bullet.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
Received: from [127.0.0.1] by smtp205.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
X-Yahoo-Newman-Id: 454267.58831.bm@smtp205.mail.gq1.yahoo.com
Message-ID: <454267.58831.bm@smtp205.mail.gq1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: sOZOVKMVM1mnA9AK4aaLG13dw.2te_jOnoIlkFSo78oTN3g yI.ys52b1V4VsGigPYxlplzI2Rs3TVbBAn.RWDpO0rj1fhfJmsdfaoXQmnis py73qobzWcXu4_GfpxCdEjTRZ6ejB3dbb.R94ACw1ti_ojo8XsTHy.KWnbLX NSdN5e.LRbtRUgaegUmCah5EI0VYpVmWcekFbCGwQGmfWOSGlb04qa7FBlyy XcOh6c5GuIqvhM1wDjDoKUtf7oSMaa6ozaTNU00Z_y8KeSBonZROIe1D10l3 43tNvsoJ7v6A7kguKsNOT3zh_pWXFWPmI8YNiC9jfnlDYqAdt8n38xv84WYB bzPE0uio7lRXj4HPPpWmp11SYYlKHj2SuJ0fTgQHMKkQsZO2Lb0EzjX9xuT1 0aRkaaqfYIKxuquOeXqq8ENytIue2XIpeTeLAf84qlSyv4CMyDIjw02HSUgW 2quxD829qRALehBycbxfAZscfqIKIs.BrdjgD7.bDbpTpU3jrs_hUis45VTc Pua5HfCU-
X-Yahoo-SMTP: zDMiCVOswBDcK9OIGzmdQnoU.CR0Quer1VzIrWkm300MMv4-
Received: from User (centralmessage.info@41.58.12.225 with login) by smtp205.mail.gq1.yahoo.com with SMTP; 11 Oct 2012 10:40:42 -0700 PDT
Reply-To: <drperehartcentralbank.org@e-mail.ua>
From: “Hart” <centralmessage.info@e-mail.ua>
Subject: Open the attached message and read carefully by following the instructions

Hart centralmessage.info@e-mail.ua – REPLY-ADDRESS: drperehartcentralbank.org@e-mail.ua RETURN-PATH:   centralmessage.info@e-mail.ua

RECEIVING IP: 41.58.12.225 ORIGINATING-IP: 98.136.216.183 — 208.71.42.194

BELOW IS ADDITIONAL IP’S AND ADDRESSES USED BY PERE HART

FROM: Dr Pere Hart dr.perehartoffice@gmail.com REPLY-TO: <dr.perehart@yahoo.com.ph> RETURN-PATH: <drperehartoffice@gmail.com>

RECEIVED-IP: 125.88.125.201 ORIGINATING-IP: 77.238.189.207 — 72.51.25.85

CLICK HERE to read a list of emails and headers sent by the same scammer as above. Hart also goes by Pere Hart as well as NNPC and Paul Kunert / Paul Kunet — Etc

 

Tags: , , , , , , , , , , , , , , ,

“raman sule”

INVESTMENT – SCAM – MONEY TRANSACTION – FRAUD –

From Raman Sule.
This sum amount. ($18.4 M.US) deposited in the bank by my late father before his sudden Death by the rebels, I would like you assist me transfer this money into your account as my late father foreign partner & invest wisely by you,

I will compensate with 16% of the total money for your asistance. feel free and send me your details, Full Name, Home Address, direct cell number, Occupation,I will update with more details about this money and all the related document regarding this money,

Awaiting your prompt response,
Raman Sule,

Contact me in this emails (raman2sule@mysinamail.com)for good cooperation in this transaction,

HEADER:

Return-Path: <ramansule121@yahoo.fr>
X-YahooFilteredBulk: 217.117.146.165
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: osgj1wMWLDv4pdBGtCaPCqAQ4VJAmywivJTBQVDnYwEZumIU HwX9Vo5UdrsI9RrLBllB8aal0XLU20U76gRqcBpob1hYz6O09Y8jk.Dy041j s5JHIHb5Tn9zZ3GQKJ0SVDHQIawqwxk3XP6ZrGbVaY3_UboJgY7Vmoc2EVtf Ap_3wNWdrGigZ937OCgXBCIwwyz_rRKeGffpNMRN8a0ovcTk9Ts6w3SrppNN VesGom1orMIrqZ0WRm9zbf5Mu4bM7VKrlayKoumYv3qBrOImmCklHnvewH76 Mf4Sx7rOw5Q5liOlQzy1H64bXJlTOeni8NfVfgzKyoT.h2CJqSUzYMW8ad6n ut.XuMWoDr9EoARmVohQ.iloswCKlSZXZoBjQSXDvp7J4PavU0jb4iUnod1M HvyUDUtQ0Dmn9U0QOqGOXHw8m4QHQ3Q1hEOe22My0G946GZneWvAD5TDq82M 6jSsSb2IcIUXMV32Dc_fWwcclnYjFhTEVp8OKkwXZtvuhBLzIGbyDxzq6fWU ZMaIPafJfsdbHuB9lQnyLUUH5hQz6IFlxpwcWIP64421_RKAFJVpR2cW6YAz LHXSpqByP53.R5Q9Yovfs6XBJAoX6b1HRIZotRIPrS4FJnWpskY6Z1n088vS XHdmhtuIogVSyu5OZVIyqwkoox5gW66BH51jJOxAEklmWY6p94ZZoCVDrLBi 2k0DuhaJdVbHOCv1kxOz4W0XC8lZQdbEyD70LWFVN7VqR_9oqDGr85M_3.LH 35pI7YiNkQ2mI1E4B0o5xLjMv7icR_8RBi1A6pwvi22tiHkhaQP1wAvnakct E2tvs7C18EQ3OK6zotO4cA5l.DGKPHoXwPrCUpLUsY0bG4XCZIwLtYjj35F6 M0cKohDU5cjyJEniABz_eIy0SBRNvl9VMwnmb3i9a7.ul.MT0mljnPysaAkv DOPUv3epgqXsbRgodJw4CP_7Q593dXFqa7_psmwMgqBv_lJ0EzrxVD4R_SdK vmNNuFt0vMB0CgbdvZgFOG754Q5TazpZT2EFEfIZ456eBKItgpQb1RMX07F. zr29mclNx_eB9z5HB092OsF.xBNleRDVaowXpYISiC7qmbB8U2pgM_1.OYL. 9qr2SlH3NKiVyk92zkhODtHdlzhf8krkSFPjWHjchLKz8xzXrQ.C64N.aw26 0ILG7rb1VfLVv0ZBfY1fs6H1CzCp1D90XWYbzJOVEidkLzrBNDVortMztP3y LPQOOlEmyZibw6shIYk3mRdmmH1P1.pkPTy3DLg82B6EjU1dX2cTuizjCvvI nBWJxt29Kg3iaTjWh5HmMBwQJrwKjK.aSjoaByR9tx0LSI3dUwxLbgGltEyn HDDkaEEi6VfV57QnPLU1Mp31bf_BayxyuovC.Kjs0CK07OzNi2mdMVS6w0Kg j8KM9JXCGjgrj86EytgivLz0ULwia5i50c7yl4yEsbzp3CKhbOOkeSdsV96r MfgaZ8Yua2Z7iPif1D344ewKA6W23HOjOtIPZOccZDzfY1VdkgcHBddVNkcr M0Dp7ZCvF7H1YdiVhZCSwmpvJGtIr70T98RKbTshwwKdWJtqSz2PaaBzMVXv 1YBsjdUj_6cd7_gc_KMPsfl7.UKU5iJojASV1GxobVDS6OLeWuQKGsDBlf0S juxkMN0TQFM_YEuC76pSGg9im_xVEjWdZom70mDDxAddbRgd6fnsoOvxLFzp VuVYObvxNzkwxbiCfRNeQhzfEgZGI_nIng69cAooKXgEh2GpBMYT4iEVK.CO Agm7dBgFy2kuLkMBdRtOcWFX.d_5KKe_u4uQyo37gH7eSJ.Z0a9dHQvFYrux mA–
X-Originating-IP: [217.117.146.165]
Authentication-Results: mta1179.mail.bf1.yahoo.com from=yahoo.fr; domainkeys=neutral (no sig); from=yahoo.fr; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bewoopi.com) (217.117.146.165) by mta1179.mail.bf1.yahoo.com with SMTP; Wed, 12 Dec 2012 07:45:04 -0800
Received: from bewoopi.com (ns352848.ovh.net [91.121.87.202]) by bewoopi.com (Postfix) with ESMTP id 97956A00548; Wed, 12 Dec 2012 07:49:46 +0100 (CET)
Date: Wed, 12 Dec 2012 06:49:46 +0000
Message-Id: <MEWOAY$F7D22E9FD849DDA9B9BFEE3282E8DD6C@bewoopi.com>
Subject: From Raman Sule
Content-Transfer-Encoding: quoted-printable
From: “raman sule” <ramansule121@yahoo.fr>
X-XaM3-API-Version: V3(R2)
X-SenderIP: 91.121.87.202

“raman sule” <ramansule121@yahoo.fr>

217.117.146.165 ramansule121@yahoo.fr

 
Leave a comment

Posted by on 12/15/2012 in Other

 

Tags: , , , , , , , , , , , ,

“Morgan Chambers”

INHERITANCE SCAM – NIGERIAN SCAMMER – FRAUD

This fraudster has spammed my spam-box under various names including the latest which was received one day prior to this email from Morgan Chambers .. The names used was: Barrister Mendy Chambers as well as Fred Williams and even Western Union Money Transfer — BEWARE!

EMAIL: Attorney at law, Barrister&Solicitor

Head office: 21rd, g, close, house 18,
Festac town Lagos Nigeria
Private email: morganfirmng@sify.com
Tel:: +234-808-134-8919
 
Attention:
Before I start, I must first apologize for this mail to you. I am aware that this is certainly an unconventional approach to starting a relationship, but as time goes on you will realize the need for my action. My name is Barrister Morgan ibekweoru, a solicitor and the personal attorney to a citizen of your country, who owns a construction company in Nigeria. Here in referred to as my client, on the 26th of December 2004, my client, his wife and their two children were involved in the tsunami Asia disaster. My client and his entire family unfortunately lost their lives in the disaster.
 
Since then I have made several enquiries to your embassy to locate any of my client’s extended relatives, which has proved abortive after these several unsuccessful attempts. my main reason for contacting you is to assist me in repatriating the money and property left behind by my client before they are confiscated or declared unserviceable by the bank where the funds redeposited/lodged particularly, the Gulf Bank of (Nig) Plc.
 
Where the deceased has an account with an approximate sum of eighteen million (US) dollars. The said bank has issued me a final notice to provide the next of kin of my client or they will be left with no other choice than to confiscate his funds, a copy of the said notice i will fax to you on getting your reply.
 
Since I have been unsuccessful in locating my client’s relatives, now I seek your consent to present you as the next of kin of my client to the bank, going by the fact that both of you has the same nationality, so that the said funds as stated above can be paid to you instead of leaving it for Gulf Bank of (Nig) Plc. we can take part of it and leave the rest to charity.
 
I have the necessary legal documents that can be used to back up any claim we may make. All I require is your honest cooperation to enable us see this arrangement through I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law.
 
Please kindly reply through this private email address: morganfirmng@sify.com  Finally kindly give me your confidential Phone/Fax numbers so that I can fax to you all the correspondence between the bank and me.
 
Best Regards,
Barrister Morgan ibekweoru (Esq.)
E-mail: morganfirmng@sify.com

HEADER:

Return-Path: <morganchambers@lawyers.com>
X-YahooFilteredBulk: 66.83.100.155
Received-SPF: none (domain of lawyers.com does not designate permitted sender hosts)
X-YMailISG: S3yK40EWLDtwZuF5d3A5xp1epJHGpDNL0b7HFChDpHgmv6lG C5Hg__sPN6TC2eVVDlIrZXz1J0p9NjdULziQ3vxjuIMK9uFHdhC3OAde78xA u9fyDoOohzpNrWaCchSfnEvkerBsTLZ9RH6BaMJGouoV2JcDYr9HnaVhbRz3 ywt6cjvI7J_kSOtjTrDVwCi8YGm8rvWpbDRfKKQDmFDlf_My7wiYIkml1L3H Et.FMSU2uvE5MHR0yBJ3SD7MKP3zY0BatFG9PN3hbT074KQqfmuWj1qBbq4E _jyOWUAClb1ioZRIyheZuzvOzgxiW97OKNh4B_4bx.oLbcJu4r7engOqfkOD QNJ5LYseJX9EOjC9f3wGoiXkYXw0IKo7Qjc78nmNWxnL7s7TWLw0TNn4cS_r S0AUEtH3XUbz1UIKYjql9PvYgMMNl.kpLzgFz.ooN_vcYLfBbb_jHyFcZix7 ZSJ6W9y.cqgPkH.fJfN9ybooKGyf4aC4cspBfjPg9Ul1XCCJGMvIgHzASmIW Zyis44zEutSIIZlxinm5xoGHDg1_O2c__mJTKMEBTFXMjU2pJBD6kyxScKn1 BAPKSUCdaWMxco8BzsG6IE5yUv85zUCQNzLcj6txEORdiUok5df32wvAQW27 Hboqp71a13EjLU1kDboe5AzLdvmxu5OEBcoXss1OMV8J80NXjqd8u526HbRt 3oZDyfM3.QeqeG6ooCP3ZiZJ_6A7EenZa1E1vdr9NYQMnux3kfcqBIQ_Snaa j5Sb3LcmCjAJ2fmzjXJnm1CMVNUQcDkvSOBGnwxIbdK3HSj5qXkj7VUnL5NZ 22Qf2voC1hCkXjep1ZkGmZsbVql1fqSgiaz0ZRRno.uhZLdqPk3fohftmSQP 2ALaSz_4mzbCyCqhg9iJ_20fDuky6KVRY.J5GZOo6bj3SKE_iDjH3e5z1Mik UYgTWk6XT3Or__pGMYT9lBcw9yrfM.bGe2jPgMyEYOplQuM25gmCH4kb7mQs gvtNmRFhoUSeZKZM0e.EhtqXLvZaR3WXZT1VjAvVfB0f.V2cbk5wro8RkySP zJofu5yd3.cOOL3abG9HFKSA4trOS3VdiXgQxUJ1vhIwDQmVRDziDtVDDTpv zcRyaoZr.Ba.ZCwvpORrfjaaVZAclCxFnflvLNReeLWoT0ZK_4WpT.BgnMdh jqGJcwCYdpb_cOA_h4eF8lrDZccQeOcf1qQMBbbYn_9GroyCl7zDvdiI5g3f ZtKL9U5agCbkwdcW2y9dx7cgb2b_NLyTpKRTTE.11Z7UEf12mRB1QYQFUrKd xeCRhlBauuWqcsg0G8Gfyh8hmvdM_2yvgnilxbq.XM2WFohz5sGZYkmPW_yS TM6nSzc68gGhqNFv6S8O4i1nClXX9L_nd1dtNzuazRz7L0krQC04N1yCkp2a d9HMV63yVL4BUJtUG7M2_AyPSaqz4SH8yFe0c.KB_2cjAbgcT028MkqPYGsC YkzVD6uZm7IlADyrW7vTpqnvNXrtqEojRLmpcg–
X-Originating-IP: [66.83.100.155]
Authentication-Results: mta1240.mail.bf1.yahoo.com from=lawyers.com; domainkeys=neutral (no sig); from=lawyers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO server1.sikesfleet.local) (66.83.100.155) by mta1240.mail.bf1.yahoo.com with SMTP; Thu, 13 Dec 2012 22:10:53 -0800
Received: from User ([66.85.157.126]) by server1.sikesfleet.local with Microsoft SMTPSVC(6.0.3790.4675); Wed, 12 Dec 2012 10:36:33 -0500
Reply-To: <morganchambersn@abv.bg>
From: “Morgan Chambers” <morganchambers@lawyers.com>
Subject: Contact Me.
Date: Wed, 12 Dec 2012 07:35:54 -0800
Content-Type: text/html; charset=”Windows-1251″
Content-Transfer-Encoding: 7bit
Return-Path: morganchambers@lawyers.com
Message-ID: <SERVER1XeQM7gyoPB2E00000703@server1.sikesfleet.local>

FROM: Morgan Chambers morganchambers@lawyers.com REPLY-ADDRESS: <morganchambersn@abv.bg> ADDRESS GIVEN BY SCAMMER – morganfirmng@sify.com

RECEIVED IP: 66.85.157.126 X-YAHOO-FILTER-BULK / ORIGINATING-IP: 66.83.100.155

Scammer’s prepaid fraud phone number – +2348081348919

 
1 Comment

Posted by on 12/14/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

“DR FRANK COLLINS” – DR COLLINS PETER

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: Below will show two email headers sent to two different people (including myself) – It’s the same scammer, same scam as well. The header information is different however so check both for the different IP’s and addresses the scammer is currently using.

UPDATE: Dr Frank Collins is also going by “Dr Collins Peter” and “Collins Peter E” under the email addresses / IP’s – “Collins, Peter E” <collinsp@newtrier.k12.il.us> <info@notice.com>  YAHOO-FILTERBULK: 157.55.116.165 RECEIVED: by 192.168.194.152 — X-ORIGINATING-IP: 41.71.173.93 Also,  Dr Collins Peter web52644778980000x@att.net REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com – Scammers number: +2347030115459 X-YAHOOFILTERBULK: 98.136.218.126 — For more information click: Dr Collins Peter

UPDATE EMAIL FROM DR FRANK COLLINS A.K.A DR COLLINS PETER (I dont even think he realizes who he has emailed because he emails me with different, similar names on a daily basis.)

EMAIL: Attn: ,
This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-703-011-5459

_______________________________________

SUBJECT: PAYMENT VIA ATM CARD.

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $10.M

HEADER:

Return-Path: <webxx120999xxxxxxx@att.net>
X-YahooFilteredBulk: 98.138.91.88
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: FaLTslcWLDv_37lDMJwvUepYgmnqCzD2WWiLYIVYEvzWiVdj yeMdZg1sVqQZNMLZIrI8jrEhVaMXPsJIY6kRf0cbjnqQCPsaLbBdN2aERrfI RwOChZVFmKW9DzDxir.njJLHD.QY8j_y83jLRI4.AuI7k8QKdHjPvXXJYEFV 3YQAPmqS_78yqhLNbejZcKD5irk7feyqBo.GgWWRjUtr0XeJzJNqaql0h8sA e8RvUpWShCVHN2SyD1tuM0Deb4D1Ji8Vbh6LO0l1rw9cI0_sIz.vHpe_EiGP kHJSq4cVZ_zI24xSaJVH2nairx_S7dPagQ15pHcUhTSBMqGEgXXNeB1Y2oeP 3JU6qx6vSLkN2q.zt9EL5Vwas.VQ3VnnTXDqHLBdVcKU94hP0GlXAupk.DHM obtlUYCC1aCFRuuf3fyqc0LusjLnspK7JnjoOa4trRGPkJ_SlfDp0ggLrEaT v9a7lqaWeBT9EICtLA0FkLq3C2n40JFv19b2vJ8kTWkPK9_CQXXHvPmE9PZ3 kFs1luoQlTk_lzaBG6mXtSkUeA_7vvUTiNlT90e4_xcWHLkMi_qHUB6.MOXY KpjgBBptr6h8HH8BTrub.bb.IWuBN9wzFL2saNzKwsyxCm4lKMw9.xwDm5uJ Gq5wsKY8oAk.ZAm83V.RXXdQZhrYHzq2HI4TEsDuXnxCeBPNS3yCscgHGdua .5bviyYzefeg3tnvzHHkzRlzxSKw4QvlmuuqcChqscR9kCPiJLD.cgAs4kGP VstUFHd.bksAH552CD3i0lwkON5VfmeiESgRCGTPFvptnIKly2v3rZiX6esg GPPtVuH2VF9JGdJc2Ymbkp7azmUteBWNDdU3UBhVs441.EpCaWrI_sm_fe57 OiQyUOywnO1yRAtKJ_SFta4rGiPKLZ0KmWOm2iWxo40gyrpOgSF7vvvDlD.8 TTvxrpElU4SLFTn.GO1zFIFIOghPlKF4MTDaE1.cfSBA7OvaqPPhZB7CbD_P PbifHGwGIUcvjwXFo2GX_MJ9efyRaqwJ8RNv5bv_PmOjBSyxnqzPybf5N4_3 8R6NtlZnqM1b4Enrf9rnVdKOJneQ2FJhZVcYPrtDlcrfum9mFoOorxfoQHmz TE17GM57C0B.ILT43WlnmpnQdle96RtuSiqxmvsRzRStRdaGzDZuic8L7wei rjZENREYOwxD5PakTFL_xFmWBDMWOtezwqcs9j2HaBsIHEPGCa_w1BQb4H7T Rhg.rsLZhUpnUmz3kwbcPdV9Pc8UNCPtAWRE0QCMgwjeBn0ZXdINEcVudxSA YTcOMC4k95wVfJ8oF7eiOod5Qae2n5Ov7WwjD_lXqOtSBIc3J87zhs.HmSjX 7WlsWTwwXn.I_l4fa3NQ.mKYBKo-
X-Originating-IP: [98.138.91.88]
Authentication-Results: mta1228.mail.sk1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.88) by mta1228.mail.sk1.yahoo.com with SMTP; Wed, 05 Dec 2012 09:33:37 -0800
Received: from [98.138.226.178] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [98.139.44.92] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 198054.18868.bm@omp1029.access.mail.sp2.yahoo.com
Received: (qmail 22514 invoked by uid 60001); 5 Dec 2012 17:33:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1354728815; bh=2E+CXVEN1MfcfJaq2e/eZV5TviX4n2QY/x1KeAa5kws=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=f9JOS/YO8YXlmc9hJrpoWT06BSgD+eIddQyPZn984pugXI47aiHJ+HigDAW5KKMMOSqrOWONnAJiCoEyKoSjzteAYzjouKnJuSd9FFAPV7YDDY5OHZP5iSipgSUv3aNEhW/Rsnl4Ln0GS2YFkeMhoGRqYTKiUP5YtCqljvaDNow=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TW9B75gLmG8YEH2Fs0wWUR6quUgNgKf4vKcOC0lU58OuZZxvfbAEilc6hFgOyOvoldI//PR2xiJZNGeYJsT5o76o0CJS8W8mbj8ANAI1PafbE8IT034u3iHRas9fZymmyVV0ARoaM4Pmz0UzVZK0Jim/YrB1484O5fKsUOiyGTM=;
X-YMail-OSG: WdGt0KwVM1lOyB0NVRZY5rrxYN4NyBpT08THjv3T0blrAYl g.fSaOnJGDgT6qOWJLehIImpPX16weUxpsraTUfiislliLwCl2K7v8Pp.iJQ a9TSaK3Cg8mAMGQLpgboaXsnY0P.gbcdPD9a2TYU3MLMz9.msdkdNVne7srD CGKrYap1ePNIkrvsumj.6_CYvw30FkImKkDHHf5IXtzUrxF4x8.QVPZL.F5P 1sCi9c6SjI1P.GeZm2DnWTw.VoPokMuHr44zOJyF208V.uJqcKGplN1blft8 NRD73m_UrMPrQXsfdMEk9IKg0jGHRledxyRP7NbPnmUmTJk5sWb6g7mibQcN lZBmrszbkEqY7Gci4Eh5lmEYhM0EH9ITd3rAkZfbRlBlo5s8MbxSVEa73EvH muyMHoTdJMpwvibAS8LsfWhBVw4Fzpyj.JdfnQdukkFQX5QRnWlt3FtcARkq hyy26DJRYTbzGN4Eyk0EL9EDXp1SGqp9Lk4FU_Cz6Hw4qjqgVzWqnIza_ijq nvI9omJY1Dw0WycuWs.OkVnfl
Received: from [108.174.51.231] by web184901.mail.gq1.yahoo.com via HTTP; Wed, 05 Dec 2012 09:33:35 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354728815.12889.YahooMailClassic@web184901.mail.gq1.yahoo.com>
Date: Wed, 5 Dec 2012 09:33:35 -0800 (PST)
From: DR FRANK COLLINS <webxx120999xxxxxxx@att.net>
Reply-To: drfranklcollin@kimo.com
Subject: PAYMENT VIA ATM CARD

FIRST EMAIL – “DR FRANK COLLINS” <webxx120999xxxxxxx@att.net> REPLY-TO: drfranklcollin@kimo.com RETURN-PATH: webxx120999xxxxxxx@att.net

SECOND EMAIL – Dr Collins Peter <webxixxxxx266xxxxx@att.net> REPLY-TO: collinpeterclaim1@yahoo.com RETURN-PATH: webxixxxxx266xxxxx@att.net

BELOW HEADER FROM COLLIN PETER EMAIL:

Return-Path: <webxixxxxx266xxxxx@att.net>
X-YahooFilteredBulk: 98.136.217.214
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 2lU7wkQWLDvBCg5Cg1wZtIwDNUzuGrZVVXK9H6ZxiRnCF9q8 3T_Z2xZXeKmdhjE03ZY1nNRa1P6Zz09tc3Suud6PVBq3vexxPmov8AXjPV9n h21FBi8fEfSTSwVFhhvzk7V6R63Puryrkha1Mb3jaVwNputKdVPkDPhjUMeo RVMMb4_9ds7LkdO1tAhp2nowUz6sKBD4buJmSanxkzHUpRwUVtPLKq8B09eN Rl25hxMaIQHn74TwJlEJoWwVxtvh8Jkr9b8xgoPVsHTD4d3rIEAmrBO8jRyd GelLKjDpe6gEZSWQukIvbii_.zMj02LUFMIXNqSXg2JTLp15U5_jUlo0usw3 1Q9ij8R.SuZ80..F80EMLcQO1SXMjqWDf6xkVHWwRChYckM8P0zLXQwmLzCh cXZIqLnw6xfz6lcwu0_mQkN.aX.hIIycQN9E431bkyzpAK8Sh0ATdnfKruuc hDUY3uEtvred._LLnnYkhYpxqfc_nSy4oYmmhRytYX5eJDo3.jrNS61KZPV6 YQ56CR6JtF_A6Hafi5rSLv5qgM4p8VJZi7448tERIhykcwaijsPjcAOenatn YK3BKAuoLWZ0KHPHNvGKAWVEbv9QWSQF39Q.EEP1LmrPyvSdcGkLUJurop.B aYWv4YFGCdGxSazNRDxvtgoiaK6SIwQ.bpgk7uq2vF3rcb50kF6JNxWrLg.n 7Tth7XBQ.W0dZ6SeRl5BddGt0PedKs6csdJXP3rAEuRx9HhVbiFWVgdNijR3 _dNog5Qebj0UNBN3_ZYEN_KnDptPkNdpsJ8OGplwzrinpWeXcnwHVgAbUTdo 18VmNYVRbtilZoPybybViqmTdRB30nDou7y.RzfJPpp93GHAGPmJapCeotd7 c17h.xTgmXwnesQYx8oH1A8HMZj9YMgj2Hn78UbjDz5iO3dLZZQwGJc37EEe Irpsy5SaXtVD8MbmmPkhMrhk8K30Dviwqq4hDE5WgxBlGVonuDQoGK3aEt2T nvWx.JhFmNOhCyTBWuANJwIBh0YVHlt7UHVip3l.jut4onQ9R4CDyP6sbX2c lfshiCRIJ9lEvHbvGo40N55AdITysTVwpsKYdhO1zKO2KEhE2HbINU3NSVAp mVO8xztcsAawulFbZ5PKA.HviU.utyPlT0yMvzwTHn_QINVPcYodx0NOT_5q eROgjgZ35jOw55jeTpgP2qOvmDNkeadY.RrCfkVM_h_Ewvbns5N8m8wKWn4F 71xz.y4o8QBLLz0jb4jMAFmUekk5PrMNZ0E-
X-Originating-IP: [98.136.217.214]
Authentication-Results: mta1191.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm9.bullet.mail.gq1.yahoo.com) (98.136.217.214) by mta1191.mail.bf1.yahoo.com with SMTP; Fri, 14 Dec 2012 03:36:45 -0800
Received: from [98.137.12.58] by nm19.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [98.139.44.70] by tm3.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [127.0.0.1] by omp1007.access.mail.sp2.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 191480.20265.bm@omp1007.access.mail.sp2.yahoo.com
Received: (qmail 75889 invoked by uid 60001); 14 Dec 2012 11:36:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355485002; bh=2TQXuFSDKzJQh2ItoNfMPDU7xRHv3E+CGrBMw/1Ns0g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=MdiZ1jC0egJ3jeK8x+wAmlqoZyMp98AiD2wzzG+et6zE3r4jYBfuYUoMttuA+gtIjRNvWXQLaTtg0u215rggtB9Wpx8OQWJMI3iQKHU+C0WdAONnnis/01rbGL8rLVp8QUEopIB3M6ep93e/l0o2GTcA+2tm8NmXdnIzOrTvHgs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tLrXvMlZ1AfWS1oRs/q6h6HUMYi/LUcbnjbU0+wRSPWQr/1rUxJ+mPFD5IS+2J+xhqTW8fnpv0P89+O46Kg0ZaIi52L7OqBpBWUtxGIOrGGuRKY65NxHoyuM/9fcPmg6OxN2t9IVr/IQmo5FIYMQAlTgtLYGxzIx8tus9kjh4UE=;
X-YMail-OSG: 3ICaliMVM1ngoXiqNpguRRh2iYwL78sXplySeVxex0hGQX. 9amYG0XA4OBV26LpGFUMshO4W2d_k7Z_a2Ijy9UC4MhQCts27.mEJf9MSo4o gLC1yrqEZW2qVfkENJcHqLvP6x22811UE_jYQp539eFIcLW5RWUDAU4t9CGn OdkUZ.I3db4Y0_pc3qHbfrO34x9zDWKUFRwLqnQ.wNCnHD8dS3WSTofCFWm8 DRISKdISfGE2ytoF4IzvXsFuyje2c_qd6tqdnmTw5Z9mBhssXb94A4biy5CF qnxB_1TEOjTWqKHDrBY4BU1EdgOFfYQNqvwQ4XtGhinDlu0jMGic.YAmQBDt z00_WMAOIdc6llHVKxJwh0yh_xgWL5D6rgLOTnmN2Mo2vI.t3Ls.zQwRBRhe SaGInzRlMMto6OJd7AVEbCSpnmZYicQHhMCbjMxGPX2KPd4Tv0fL_cU_plDm egb7i9XYQocNBXLDzdzIfmk9Um9FTZk5b6spv87aUQEG.1MjrCbB7UdYQ0uO JpvS8DhYL5XyxrsNNIFxmRpV2b8I07Jm9LTn8wKS_hqGegIf5feMr.9cGJzH 7hgKyGs0sihPG_k5JCSaI1yCjgZYK79b_xhXuvMQeLOYyQDygzxrr8813RrH cC8L9RfM7BsB3QMN75qyv.pCG1ZbybDazG.TyLuGLgdSNZ6KwYSh_mQ–
Received: from [172.162.63.104] by web185004.mail.gq1.yahoo.com via HTTP; Fri, 14 Dec 2012 03:36:42 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355485002.70723.YahooMailClassic@web185004.mail.gq1.yahoo.com>
Date: Fri, 14 Dec 2012 03:36:42 -0800 (PST)
From: Dr Collins Peter <webxixxxxx266xxxxx@att.net>
Reply-To: collinpeterclaim1@yahoo.com
Subject: ATTN:BENEFICIARY

108.174.51.231 << 98.138.91.88 <<

________________________________________

Click SCAMWARNERS for email to below header which was sent by the same scammer as above.

Return-Path: <web1xxxxx12000bvvv@att.net>
Received: from nm12-vm4.bullet.mail.gq1.yahoo.com (nm12-vm4.bullet.mail.gq1.yahoo.com [98.136.218.191])
(8.14.4/8.14.4) with ESMTP id qBAFqXcC024177
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from web1xxxxx12000bvvv@att.net)
Received: from [98.137.12.190] by nm12.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [98.139.44.75] by tm11.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [127.0.0.1] by omp1012.access.mail.sp2.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 169461.26588.bm@omp1012.access.mail.sp2.yahoo.com
Received: (qmail 11627 invoked by uid 60001); 10 Dec 2012 15:52:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355154752; bh=6IEXAnuDHUzPM2GG6BZxFSMMGXUzzTJH/x0iCKn3gNM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ZNpQDXqA6YKLygx/Mgp0kaQY3hShe48iYfThTEb8Iru1MOJkFmAxYG7WRpbG0vEzb8sVOXBWUD70FlpkHY32sc3lcnQRUH9EWyjF33/6bxeK6Wl/Hf7syjgMKen3IrPrVrQM7QP70aIkEYevI/L1VoeaKi0X05zrl/mkFKlZJB8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=C3u05KWRUG4yec6yjYc58jVUZqKqPra/xpCRYFkhi2pi73G7p5xYJt3avwhjC1pd5gHT2g6XMST7DkGiaRchRZYYa/jODcoZt4R+AhzCt86vNfdJ8r54ZScNvyU4Y+I8mpF49mKbuYWh9Qw+6o/yW3f8qclaMsyNAu3ATH2SDAs=;
X-YMail-OSG: p5tUyUsVM1nSNbno0XpFEzLZade1sG0k1LIN6NkNDDbP4ts
LfsdXeXxUn6OgEkvAzJFUKDvuIBVeFzZtgkksCNzN7YM7NYxZZELCIFArcbu
_mj1sx3mmaRRFlhLnDPO0Ud9acKn6RdXUuy0Z2D2THjsSnJnY9sU7qqlRMsY
RFxlusC6GZdc5g0kSlEJ9Q6m1NFt621vubnU3dlWx9BHYYswZA3GlYEoIQOZ
znu.EmXiL_e6NkgO6Xi3U8TlgxDHH.J2V.gjmQeJjgeleOz.cmjSiQf65.01
pFSPJQ.uJV2ZQQDmhoA_f4DIGHOLzIEM54oMAKodxlcGehFjRCB.Otx7qJ99
LLzSejt_DN_c3T7KOCmzn30gBLvM4NW04V6Q7K4N69QA7XOIUNPQflttOcPQ
QUh_J5vkppPwzXQ7X5ZwbRUsdfsHhuaz1XhXMvrY6vOWGj_WLL3kyxKoNNTD
o2PEbuViIVuMH9ocliCObq_Z7Olxp0coTXqA6vhkTd_030aE_Rclf5k8sFU.
neOYXj1nWJo0ZcsSoOLW7
Received: from [64.72.78.27] by web181404.mail.ne1.yahoo.com via HTTP; Mon, 10 Dec 2012 07:52:32 PST
X-Rocket-MIMEInfo: 001.001,DQoNClJlY29uZmlybSB5b3VyIEFkZHJlc3MsbW9iaWxlIGZvciBkZWxpdmVyeSBvZiB5b3VyIEFUTSBjYXJkICQxMC5NATABAQEB
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355154752.62957.YahooMailClassic@web181404.mail.ne1.yahoo.com>
Date: Mon, 10 Dec 2012 07:52:32 -0800 (PST)
From: DR FRANK COLLINS <web1xxxxx12000bvvv@att.net>
Reply-To: dcollins@kimo.com
Subject: PAYMENT VIA ATM CARD.

 
1 Comment

Posted by on 12/11/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

Akoba Wilton Gbakolo

BUSINESS PROPOSAL – NIGERIAN SCAM

EMAIL: Dearest. I got your email address from the yahoo tourist search while looking for some one whom I will call mine, I will really like to have a good relationship with you, and I have a special reason why I decided to contact you. I decided to contact you because of the urgency of my situation here, I am Miss Akoba Wilton Gbakolo Sengbe Sankawulo 24years old girl from Liberia the only daughter of Late Mr. Wilton Gbakolo Sengbe Sankawulo a Lecturer in the University of Liberia who died from congestive heart failure. My Father died as a result of heart failure I am constrained to contact you because of the maltreatment I am receiving from my step mother. She planned to take away all my late father’s treasury and properties from me since the unexpected death of my beloved Father. Meanwhile I wanted to escape to the Europe she hide away my international passport and other valuable travelling documents. Luckily she did not discover where I kept my father’s File which contains important documents.  So I decided to run to the refugee camp where I am presently seeking asylum under the United Nations High Commission for the Refugee here in Ouagadougou, Republic of Burkina Faso. I wish to contact you personally for a long term business relationship and investment assistance in your Country. My Father of blessed memory deposited the sum of US$8.500, 000.00 in Bank with my name as the next of kin. However, I shall give you more information of my inheritance on confirmation of your acceptance to assist me for the transfer and investment of the fund.  As you will help me in an investment, and I will like to complete my studies, as I was in my first year in the university, when the he died. It is my intention to compensate you with 40% of the total money for your services and the balance shall be my investment capital. This is the reason why I decided to contact you. Please all communications should be through this email address only for confidential purposes. As soon as I receive your positive response showing your interest I will put things into action immediately. In the light of the above,  I shall appreciate an urgent message indicating your ability and willingness to handle this transaction sincerely. I am staying at the female hostel. Awaiting your urgent and positive response. Please do keep this only to your self please I beg you not to disclose it till I come over, once the fund has been transferred.Yours Love,Akoba.

HEADER:

Return-Path: <issa_muha2007@yahoo.fr>
X-YahooFilteredBulk: 77.238.189.76
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: VvgAkwEWLDs2wQ7ejOSG8R3P.BXWskTmu50QD0XRnZx2Jk6j lLozuaE7w1vavH9o.FkL0iUYC0n_eF9w3RoJ.Zxvj51dutDByDEWlC.PI3TJ HifLGaeFluHQQc3yZhS.LICowWyiqCQ0ZeAY7WfVSwSggA2xHL6uyXpADW7b 8cDGVUb2DayQhwagGhFpcZ1pVcVJWCV2P0L8Vu5VuWxIDsWegasQ5kaZnVEj cFxTot1JqdoMncJT6o9tlxx3I6LZMvKDAdlFFTRx8p1YLDvT9h2XExzYfaqD .gS8JjCOQuE6YeQ0JmlbXJtGn_AMA3Xaa2R.cNA1Axoa22sHg7BTsNIQ72aX YhWzYetLMsKrvt5jN6jQ3r4TDl.itX.740NYiIJdTD46bcsVk7Qk3ynNRNv1 Wl4rHRNZueGRB_LPDkZHx29ZnJ381TNTSDe3QeB_jTtA3oBndOtTvaBftWUl uZp.PpB6XnaynpS5w3Kf1CoixdUri7k3BDBL5JisS8je341fViZ0eSimisQv nqImEJnGOfi2xfcIOqITKAZ.GSo5JcXT8kh4cPRp2yYkz2eZhHHx.vzlQMGP b8vWhY.FhhoZZrLEheePCTBs9airm9TvGWL8lGi_m0.wOUo73YRE_HeGIIQ5 wI8ZaLTEFlQo62LrMCupiHd.W8J.R2_TVMZlDJjCSoLZdm0gB5gN_Zt4c9x3 tPYNgcy169ZN9Ydz9ZBn7QrUwhcwUa0QaWLO5wchj4kKkhu.xtuFXpXuizOk BZqNphoSUy9TQ.aEErz38N.viQNdqirdFKYKWXJlBMe74EdXE9koxZ8CB511 LHzP7a.Zdp9UhyYELLQZcW3VTqo7rgL3cAmdQBEPE.Je3r74AMrHhnP2YsDP 3IPiQSxzqnxaEWXvyx.YRxa5Zevn_ZkfUzeEMBtGVg6wiHf9PEOUMiw5n9aE tldC9xk4USVi.H8_PYFJf4eLLSMHWlYSEqvYxOq.9Mr_.qZz6s1uDrt7M6qD hqrjvpp2b7Inf5rJsTl7qvw56Nb.VFJxYIbx2euQlHaUwYETb8_ov8mDmqqF EDbqBuToRoWZl4q0Ck0z1s8Jl1IcnKOjRf8FpMZb18UgHZ9CjGAMma_8AIrt asmAscimdOzUoZ37VzIEqfpzs.7dukj22hWncUqCsoPjw4m5fUUFw.e9NcS0 zJ4KHJdtdz51cQH6g23r32Brvqi7wJHKotS.rsuAii4xqkkcWaG.FschdA4c eJ1LNvBp5R5.d_Pa_w4zd1gMuq34_taXIS7N50I_OBRJycvn24bDe7tNFpmD MdsOulDgWlOoQv7DqgRlU3D.RaykI2mQkSTgj0RBJ.2QZGYeBRYs_QJIrjx3 cC13aIWKYwkHRLMQ4r8pQAANNrL2DzEQzLFeW4MnG5ZvO_4uQS5ebjmedZIT 52U-
X-Originating-IP: [77.238.189.76]
Authentication-Results: mta1442.mail.mud.yahoo.com from=voila.fr; domainkeys=fail (bad syntax); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19.bullet.mail.ird.yahoo.com) (77.238.189.76) by mta1442.mail.mud.yahoo.com with SMTP; Mon, 10 Dec 2012 06:29:35 -0800
Received: from [77.238.189.232] by nm19.bullet.mail.ird.yahoo.com with NNFMP; 10 Dec 2012 14:29:32 -0000
Received: from [212.82.108.248] by tm13.bullet.mail.ird.yahoo.com with NNFMP; 10 Dec 2012 14:29:31 -0000
Received: from [127.0.0.1] by omp1013.mail.ird.yahoo.com with NNFMP; 10 Dec 2012 14:29:31 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 694706.55841.bm@omp1013.mail.ird.yahoo.com
Received: (qmail 32760 invoked by uid 60001); 10 Dec 2012 14:22:51 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1355149371; bh=Go660Cp/93cCWg0Zsa/6e2gdg7d3RDyVLQsWcOU/Ad0=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=AF1zl1f4Ar3hwZwplXDfYUCuhoVgY1PJhxqpvKEHy7YdLegVcSi7ooFaRC/Bw7hdgYE+gHQSjDlTpVHAQ2Zian+rbVqVmZlW2tWVEJd6UU3XgpObbmhd9zeWsYf+gUb0eDQOmmoYdYiJg5VpIxK8rFN41o/ovGE1hBN/E2sz81U=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ImNlApv8424qOatMvV4qq4TC8SuCU79oa9ckJPmdzab4oPmVr9ppsEyHX5dI7fFwgnRi+vwaClusMk6qpCMXXU6pt3IlcNuBYOH5X5qEaGhy8gbq7vXRN7RZEVN7mvcRfvbjWht5b4/wrnz6QUDMpYEnXI5pRm+1PxYiGvzzqcA=;
X-YMail-OSG: J7m9hPcVM1lsPElW0pgMvQn_xCZWNdrW7fAHZtW0cZjtd2c rYUCNE1x7XYzj8ck-
Received: from [41.138.108.204] by web132503.mail.ird.yahoo.com via HTTP; Mon, 10 Dec 2012 14:22:50 GMT
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355149370.31600.YahooMailClassic@web132503.mail.ird.yahoo.com>
Date: Mon, 10 Dec 2012 14:22:50 +0000 (GMT)
From: Akoba Wilton Gbakolo <akobawiltongbakolo@voila.fr>
Reply-To: akobawiltongbakolo@voila.fr
Subject: PLEASE SAVE ME.

“Akoba Wilton Gbakolo” <akobawiltongbakolo@voila.fr> REPLY-TO: akobawiltongbakolo@voila.fr RETURN-PATH: issa_muha2007@yahoo.fr

RECEIVED IP: 41.138.108.204 – LOCATION: AFRICA

ORIGINATING-IP/YAHOO-FILTERBULK: 77.238.189.76 – LOCATION: IRELAND

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

A list of three scam emails

I’ve compiled a list of THREE scams that were sent to me back in September 2012 and they kept getting pushed down in my spam box. i’ve looked up each of these scams and they ip’s and/or email-addresses have been either blacklisted, reported, or both. they are 100% scams!

______________________________________________

1) Mystery / Secret Shopper – JOB SCAM

EMAIL: Work as Evaluation shopper and earn $500 weekly reply if interested.

HEADER: 

Return-Path: <rbud743@yahoo.com>
X-YahooFilteredBulk: 74.208.4.194
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: AKqJ9t4WLDuLDZ8EZZ2u3Vhgs2RNEh4aXjZ7kSSWXBbVAv27 JuBiH_aCg6MvjBaLtMO.0JhXLKpM8ii1YEm8h.bFObLns4nMQlhEuIaOypzf YAFLEAhgf2YH3_pDJA6RPA1iH4GD82FsJ1hxzx8FwLfw9flBPA_QVArVHg_h m.nDYlX6pFBPN1kN5BXyTwsrpS8DrWxf5h9pc5u0ORutRWVmmWxtyTqongzC AZxsQhOSTAeUSgJlrWrj13kGVmyz5egnbmw71fMxby9dLjhQZ_I.65L5aVED uaj9eUARz5uXxA9Nr98SIEpyTsr7qpzboLTSAxZHGXwTxG6WaoqigWyqxPNB 8tkNBi2aZZc82kCiAZ6y4bIJIsGVQv2KbAzEQihTxZ0q8zpkpD1LLH1PGih5 a82YTC.4HsC2HXhwZeUKptTF2_JEKlnhXNn9tegHb3_vx9h2hx5nH9JlZDF9 GYjXQ4BHx8UFQ8IpAAB3lKXN1Rl1l82cHtG2x9XSWas3T71G1EnTjIW.UnJL 8Wy.OICrembxbDZik.cv_yj_7APLx4POhhoSXnmOkgg1zWZfdqVRhjOw.Pk3 qruW_GaAce8POox4vtMRUHwd5ec1p922vVYgZmceTMr2KgfAT.ALodh_crPy wYcjUG_wpNMK3q5_QGyhnzcLNz.w7boX6vI9rqYnVC93nBK6jicjPHfE_p09 EQN9gYTlrmX_OkOhZtosYI9CjI4d7awR.RjWmpFiU7w7gZSVuSbNvej7_dPA QR3_BaQXgMfbD9f9Bcd4BBm6Ncwo3hQI8pYMJMaJxjZTwQGiLQSHOAWgk1bE 3PmyPCxH2BUw6B4yjRwPf32ee.qd3yU3c9T60ZaYsOKq8H2oC34IphIKeX9c Zp_CGasShwklc4Bc6J1V4dNHSpE91ybvbKiK_QCETua1O.Jnn_BmFO.X0tBW qvW8MSKLQI3dxIVuxVD6wQqjdrlbRjBOsZTXa0ZNYeWBxEkbDTAoHvqm1GkO qOC1bLUtx2b71g3GZpPxGQb_WUnhoQRtBAtFRiB7VJj.vQ6jFEI6uxk9DeQm iEjd7zK4s4139xO7eIBpSSEy2oaUzqsEtTavLSA6KHgB87t5IQtPA6aCdsE1 3iuDjHCuQ_Tx2tw0UAgnKWm13UKA6QV84.cN
X-Originating-IP: [74.208.4.194]
Authentication-Results: mta1236.mail.bf1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mout.perfora.net) (74.208.4.194) by mta1236.mail.bf1.yahoo.com with SMTP; Thu, 27 Sep 2012 05:37:30 -0700
Received: from icpu2633.perfora.net (infong656.lxa.perfora.net [74.208.16.162]) by mrelay.perfora.net (node=mrus1) with ESMTP (Nemesis) id 0MNJ6P-1TO6Ag00Cn-006tJO; Thu, 27 Sep 2012 08:37:29 -0400
Received: from 64.62.210.227 (IP may be forged by CGI script) by icpu2633.perfora.net with HTTP id 3pIPGX-1TlNhr3xrB-00o06f; Thu, 27 Sep 2012 08:37:26 -0400
X-Sender-Info: <154550926@icpu2633.perfora.net>
Date: Thu, 27 Sep 2012 08:37:26 -0400
Message-Id: <3pIPGX-1TlNhr3xrB-00o06f@icpu2633.perfora.net>
Subject: Earn $500 as an Evaluation shopper in your area.
From: Secret shopper <rbud743@yahoo.com>
Reply-To: bunniebug@gmail.com
Content-Transfer-Encoding: 8bit
X-Provags-ID: V02:K0:q7XGMi78NyFU2vB+AV5/lUFl9H98ItYD9tLebyHhAA9 D0m97d8zgZKfxlxuq9UDrMJegI60FkR/i9yiR6s+ClfFhTdW82 rAyxkW0MOpaOrk4OGp145YpcbEzlvc2VFiYRQ/rs6aB2qcOPN3 NWsuAhg3PAiNdEwA6dwxoRHieSsNCys0MCLKU+1KwF9t3ityOb +0h6hFjTSFQcDRe/zyg06xnSxE3maK6IsAX2Nd1M4qbEFSyI9i 5Fun6VBXSQ6J+ZAUIsFI5SJ89/OaBqUYBkxv20+wKWBINPrD9L DG+HtYDgwRcz0KeXzqNl6gn4xUUQtJvPCBgosLOpKvKwgM7+xm b8vfu2v3JIk8MzEz+GiIGqRcrSOI0MNEZ0pg3V0jcmYI6z5qOg uRKeU9ng+gFFtzlnhdhW3SfwBG8kAe5MbgLNhihFFOcitw1pvf 2JJM8

Secret shopper rbud743@yahoo.com – Reply-address: bunniebug@gmail.com

______________________________________________

2) INHERITANCE SCAM – NIGERIAN SCAMMER

FROM: “BARRISTER IAIN WRIGHT” <barriainwrightchambers@yahoo.es>

EMAIL: A “Next of kin” file was attached to the email I received in my spam-filter.

HEADER:

Return-Path: <barriainwrightchambers@yahoo.es>
X-YahooFilteredBulk: 98.138.91.65
Received-SPF: none (domain of yahoo.es does not designate permitted sender hosts)
X-YMailISG: M2_fjBkWLDtzFm2rFbGuKofV838RG80_qXL6ZuDED.RFpUhN QzoD5j712gVhOoEJsZ_uRf.2zvCTUEDGuBwy7ek.Z_cs1.Ow_uuIMz1W0KW5 jz3j8cAvY4pVwyF92hL8sb0bk5etdgQljeePH7D7H0t4.QwwJ0D3rZLAmRtX EA.nsroRjdhC77B3fJekjgoYlRDbjEQ04x121ZVEfEWe.3fW5SyxaTfR4KgF kzRSvkuZWiHMl.95_MNF52w6FlXZe0s57mnJ39QygzPNuwxz8r9ltiLrDxzW CEcFpO9AFuqw8nCW_R1XtK6G1b6huW8ePJC.leD0fnho.XtvHjoDVo_y2ZfO WqNr4Oio3P19odWSC_sGQEZrl0EM.EkuUagsnXV7xRvQu0jtqShpW31_Z.tT Js6CVCXWfKboozjD9cQ3Gw5bIsAuPseovHYlMJDKjcPbBvIYONMkwcJm7g2s 0kCNA.NZ8XAplJwzsrfD6kozvvEtlBUiYF3WgpuwanpG5wdit6Ji_PU9PfOC K1Yz9q3yP.kaa5agusvK9DslBIL2BI1sE8wAmfxOndoXnT_OBg1A89tKyHvi 1NU.rgxEXocZHUvCmOi6finC8JS_HOXotztzI3k1UAF3p7LtuGi1rlULN_t9 ZlqKoyi9DKSLjJr7mmT2JNYk3Dg.8I.Ufm1UafFyn.vMw8Leij6Hz2bF2v4Z iDKSJttG_KsvKA8BBFrV4D29WitXnXW952k5J4ki0t2MJGF_52sryyhf4Xbc V5VMk8lFNV3RnVxbzFZ4F.Giex.EZykeqvgYWpD19NU_Aa9Bl_Gj6jfDvnBA VxjF4ZQdNb8ILQC2s7WQ5xxYqTIRJSny3nDVLHk0CsksYsoQa1ZsyQcnzmlD .BbVo322yE5eFDLysimD_pbd9GGtPqvHK0oFnA87dDQ8m6EwoczOZyq5MLZh 6ak6I15eZdeXgBCGjDot4PbER8YPaczjKa1gS35fSifWN6mdVTfrENbi1KI3 trybU9EqYKxs.Fpi7cVpEvg3_7dDpGnTc4sHhBRgEdf1RHq4SAIt4iYl59iZ dPLvX48BTVkdm_jRpF_bSsX18FONqMeNma.2vF7zQyPEos7t9v.zV4BCFg5K D8KR4VuGmgZUv0rs9LTQMcmeGz5EdaudBaAQNTIdiFhnYQt4ueJdCwRRX.iJ 4itjVlPHvxCwCSOCk2pTW.fWLQ6tzFDa0wLErfkvjqPzSZQlvl5P_dKFrKkU Qw2FXmcwWByns0lIRh4e
X-Originating-IP: [98.138.91.65]
Authentication-Results: mta1268.mail.ac4.yahoo.com from=yahoo.es; domainkeys=neutral (no sig); from=yahoo.es; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm8-vm1.bullet.mail.ne1.yahoo.com) (98.138.91.65) by mta1268.mail.ac4.yahoo.com with SMTP; Thu, 27 Sep 2012 04:58:00 -0700
Received: from [98.138.90.50] by nm8.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 11:57:57 -0000
Received: from [98.138.226.126] by tm3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 11:57:57 -0000
Received: from [127.0.0.1] by smtp205.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 11:57:57 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.es; s=s1024; t=1348747077; bh=hGsZAt5nOQ2q54GDVUA2RwhZC83Cp9+/EC4wFdxVyYY=; h=X-Yahoo-Newman-Id:Message-ID:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:Received:Reply-To:From:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=MoAzd3e63PqKFngqb3VCbC/Uo5orULDk1RIM6/2B2RYLBM6h8uptxC+sRFQJ5iLRKi39kay5dKraN2XrKP9u9wtXAlDdkFnIeciEVnV6i7gEZEbsYRdtEOasJq/ybFCUCe0XpeR66OnUwYqE/p86ZL91DAWHBLrkFvdalJQMAxk=
X-Yahoo-Newman-Id: 947141.79026.bm@smtp205.mail.ne1.yahoo.com
Message-ID: <947141.79026.bm@smtp205.mail.ne1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: rcoOjawVM1mWxeqldCK7BSKWgrYcBs1inBlj1z5n9ltVGqo lXNdgbkjin6Ym0hriCxY8RhKC9z3UHynFaVcypefuZJk2AfXmrAilKSE4vb5 KeOc2ioP7iy1rfjaZZVzV.cycy5VbHL7AbItmNPTqrNiyjcb6iaEiRVHxvik NfO9dnBB94DVyHbVr29ZagMutfYnQg5KSy5ewpvMP4MtcfN2sKjatIfTNS4D L4jPTAEBbDvd5mh_QaFWkJE3.eudqrsdxkVy.YLapxZkLJyfub4CI6iGV9HD D4elT72CmoNh.KfYjif0wZS8DIXtc0oDVVaNR_ovjQW27WIB3VWtwpk00VZ1 0wK_SM7gHK.xJVFiu3aG.hYTYe8.gByUW0F44tzkpBVsFkSYXI9zlI5KUuy_ pkATHZ1qonT9DuCxgQgGPlMDlUztCamZhoye_.Bt74oBCHBS2vEhHI0yvsVg X93Q9Qaw5R_gx8iEan8y1B6IR9ErqB9iC43JStRYaXZmWkR0-
X-Yahoo-SMTP: bFYQ04.swBA5PmeNAjXtnC8HS1fNQYaHrFuwM8HILFjy
Received: from User (barriainwrightchambers@41.58.49.104 with login) by smtp205.mail.ne1.yahoo.com with SMTP; 27 Sep 2012 04:57:57 -0700 PDT
Reply-To: <iainwrightchambers@yahoo.es>
From: “BARRISTER IAIN WRIGHT”<barriainwrightchambers@yahoo.es>
Subject: WITHOUT PREJUDICE..PLEASE READ MY ATTACHED LETTER AND REPLY

REPLY ADDRESS: iainwrightchambers@yahoo.es IP ADDRESS: 41.58.49.104 LOCATION: NIGERIA

______________________________________________

3) BENEFICIARY – 419 SCAM

EMAIL: Hello, 
I am Mr. David “Dave” Darrah the Assistant Director Inspection Unit/United Nations Inspection Agent in Hartsfield Atlanta International Airport Georgia USA. During my recent withheld package routine check at the Airport Storage Vault, I discovered an abandoned shipment from a Diplomat from London and when scanned it revealed an undisclosed sum of money in a metal trunk box. The consignment was abandoned because the Contents of the consignment was not properly declared by the consignee as “MONEY” rather it was declared as personal effect to avoid interrogation and also the inability of the diplomat to pay for the United States Non Inspection Charges which is $3,700USD. On my assumption, the box will contain about $2.5 Million to $3 Million and the consignment is still left in our Storage House here at the Hartsfield Atlanta International Airport Georgia till date. The details of the consignment including your name, your email address and the official document from the United Nations office in Geneva are tagged on the Metal Trunk box. 

However, to enable me confirm if you are the actual recipient of this consignment as the Assistant director of the Inspection Unit, I will advise you provide your current Phone Number and Full Address, to enable me cross check if it corresponds with the address on the official documents including the name of nearest Airport around your city. Please note that this consignment is supposed to have been returned to the United States Treasury Department as unclaimed delivery due to the delays in concluding the clearance processes so as a result of this, I will not be able to receive your details on my official email account. So in order words to enable me cross check your details, I will advise you send the required details to my private email address which is ( davidddarrah@zing.vn ) for quick processing and response. Once I confirm you as the actual recipient of the trunk box, I can get everything concluded within 3-6 hours upon your acceptance and proceed to your address for delivery. 
Lastly, be informed that the reason I have taken it upon myself to contact you personally about this abandoned consignment is because I want us to transact this business and share the money 70% for you and 30% for me since the consignment has not yet been returned to the United States Treasury Department after being abandoned by the diplomat so immediately the confirmation is made, I will go ahead and pay for the United States Non Inspection Fee of $3,700 dollars and arrange for the box to be delivered to your doorstep Or I can bring it by myself to avoid any more trouble but you have to assure me of my 30% share. 

Mr. David “Dave” Darrah 
Assistance Inspection Director 
Hartsfield Atlanta International Airport 
574 Airport South Pkwy 
Atlanta, GA 30349-8642

HEADER:

Return-Path: <pop@allencountyohio.com>
X-YahooFilteredBulk: 76.2.207.6
Received-SPF: none (domain of allencountyohio.com does not designate permitted sender hosts)
X-YMailISG: EUAkKlQWLDtsLHISUQeKpcEKYRzqJ7wJNr_C7p9ML278m16_ Za6J9Pq_buEhDSzzga9w7u3z1iiVkG7gWd3.2GgTG8oqtDYIY8JzWTuAyM.W WLRMqYmljQmJWsOxzbD8S_fg8qHSwLKsMrgjFNK__hHCWl_OkV2lCszsEvIo k27rgsD051sETLW6NnPpM5Y0gQvMg0ZtrVWFgeC.9GTGxpsgbdMFgmTRfqmM pheXss97gqtPwEg8Visf4uC1SekpoOiJm3EwqEomx9xhSJT79hjaDWhgzH6_ COw4PblMM0YnLd9ye88K602PP4Itc87alAKLw9aAh2N61EqrpnDdzqGvP0PZ HfeXg75.3G2CXJAiHD0FHo9JgFp7aG9KyBmrFWRU5648VTW3mDKWe2C25sU4 98uMND3e3IyyDdn1_MHnUp537ptCYyHU6paAoF.omX_bckCR1_VtbfFifDzv _3ILiunWcszXX50ipE1PPMoucSObhqP4Gc2UPSwgz1IBcjQ.YxxbHwcsCz6h vUw3MG57kjqDaJWcy7ip0UHvAnkL64hsG8UKNWHQFtXI3hKpZmc7pOZN42Ai SiJass6CfuEA_t0BXQjGsOrKMoSy.baT7g5EOOpiLtalKToSBZ2KQUBykov1 ODt408PwIyv_UTtB9Vn44XSBJRdE1pVeBwI70kTBC7XD7iU5RfQEau1BG5.8 .QV9vamuNCWep66Ro4xk67qxP6uFL5Q7AbQkujfaZt48c9Dlqae4ZQYuBY58 q4tchcGcICVFhqNUkkDxvwp0xBFxpRplgsJNrg4cKiYTWNQjtcDifMnu.4tE ZMaxugmgEuDm_fMvwqdzJ4sSf29PXJGtI5UserjFwSqYNUhP.PdnaRPwmsvj MeNyxMnzF79dlwPy5dvtSHHyshVxes0Kav8q7gwt8IvbjDFCPrQs2yYehH0W 63ywC7.8X7qlHDgqBcijwuALY9.aI79s77ktX.3z2ITl4YjnXnLRnar5.uhg FL68BNGEBL889saAu6hE0kDLmVkjZ8.COuqfoJc2bkgkT_..DnxIummB1vyv _xT9agrwPBPnUSAlr4CuMCm0hNl30RlWKczWH5sSV1o72hzr5Y6aQY.ZV2Gi .miiKTWsDm1oPmRIR1XtGbCqdrWipNC0MDw4U_NDKhgsqe_vSZC.4xB0.FXJ AmJK6BheyqKbdPqbEmwIQJyDDTBZQlC1QR_m0qgumrsxGuM86obaeiFMLugP M0KnER8ZIyhxrn0ZYCLRCkBF7JcP4l1ZQ.x9pI58fA8YQXHL2.e.Uaqv45PB nW1q.c60yFPROZVrD0jAphIl74s0LojMk0tLhgnvWODWpMVigRHIQXPjwC3N CkpHlCjBQGVFLSppGYFJdqcLxysTIF0ZfcTNB6jwLcwa7EoynkQahjiudRpm _rJngrLoamoCJcV53j5adQ.GLSpkcTsSNjZ6fBDmjeEnr5sklf7302qx3lGz m6UkBOA_.jgAksqlCvX3yDdeNH0_gwNaP.eqIvVP3pOyD7d6glmnjQVHKsr_ ARaX9Yl5LxZKu9MMZFP7uGcbf7L9Ei_RlRJ6UU2F5Q–
X-Originating-IP: [76.2.207.6]
Authentication-Results: mta1089.mail.ac4.yahoo.com from=allencountyohio.com; domainkeys=neutral (no sig); from=allencountyohio.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.allencountyohio.com) (76.2.207.6) by mta1089.mail.ac4.yahoo.com with SMTP; Thu, 27 Sep 2012 01:35:25 -0700
Received: from localhost (localhost [127.0.0.1]) by mail.allencountyohio.com (Postfix) with ESMTP id 2D621122C8C; Mon, 24 Sep 2012 13:25:46 -0400 (EDT)
X-Virus-Scanned: amavisd-new at allencountyohio.com
Received: from mail.allencountyohio.com ([127.0.0.1]) by localhost (mail.allencountyohio.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J5DNgyAg-5Go; Mon, 24 Sep 2012 13:25:45 -0400 (EDT)
Received: from mail.allencountyohio.com (mail.allencountyohio.com [76.2.207.6]) by mail.allencountyohio.com (Postfix) with ESMTP id 8E249122A27; Mon, 24 Sep 2012 13:25:35 -0400 (EDT)
From: “Mr. David Dave Darrah” <pop@allencountyohio.com>
Reply-To: “Mr. David Dave Darrah” <davidddarrah@zing.vn>
Message-ID: <683849525.104969.1348507535471.JavaMail.root@allencountyohio.com>
Subject: Await your Urgent Responds !!!!
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: [64.250.124.220]
X-Mailer: Zimbra 7.2.0_GA_2669 (ZimbraWebClient – FF3.0 (Win)/7.2.0_GA_2669)

Mr. David Dave Darrah – davidddarrah@zing.vn – pop@allencountyohio.com – 64.250.124.220 – 76.2.207.6 – 

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Attorney John H Brown”

INHERITANCE (BENEFICIARY) SCAM – NIGERIAN SCAMMER

—– Original Message —–
From: Attorney John H Brown Chambers
Sent: 01/28/13 06:54 AM
Subject: Overdue Inheritance Claim

VIEW THE ATTACHED FILE AND GET BACK TO MY CHAMBERS.

_______

EMAIL: VIEW THE ATTACHED FILE AND GET BACK TO MY CHAMBERS.

Inherit.rtf (an attached file that titled ”Inherit.rtf was also in the email)

HEADER:

Return-Path: <web.000.xxxukxx202@att.net>
X-YahooFilteredBulk: 72.30.239.134
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: AFH6EkoWLDtlRh_zFs3Ik0PINtLc5qX162ucxr1FwVDSZJ.D 8bhm5R5bNOoZbgxD7UTYBNxFQidgUcufM2Dp.KONVo5Un5KEOtTvk8kiKotO nfjGlbE5.jD1JQVg_e4_3EoI_IRDBdUYQ381Zhu2wiHDaSo3mag6lWCWarkh n6IvJy54Dx7sc3Rf8ajipKoQlKqAlcrdpsdn2W4ujUgP4u9Q3EuTI8tDl4qu 9YvRflDSIHDD26roZViu_V9EZjNpiFYn0_1nRX5JV.uCIb9lWio53aTrF6VB XJCZCvhavS9tyk_qQ.ymkWOsL8h6z8LkNRvxm79UhQDvcbBoi6iwrArSVTEC pN24gKjsJtx_vjffWDfggwwbwU7GObL0ZR5YMUfNKRkMMSg1bz7WZmeARRBC iijCtP9yxlwCaomBZyntI8C0d5ktA5FVF.6TnrVQlvjkM6DiJHp8jae98D1T .BOuxdGi6_DOBez7o9kR2raZeIPB5rUaLjP5tyBUh8p7_oMVd6XHRZoj7H_5 TPFk5tmJ.xFpHjHGZMJSII6I7NDWLddsO9TQECa6SHUCO3grXIPVMsbGhV6I a7fSBTtsGLuUWbdbUoaUi5RT073F71wrkf2QX8E9zvfVCR3DpO_yHdK.1.vS ttOXwXq69RvjsU10wEG9s8cLWwK19joSxvhdXO_e9__g3pRxODwCkM97DNjg SKR3RbNRRkkPLsnXfEXFN9AJ0lE1QZQAz3UGkQ9KkIVehnaV0F3gMSKqP3A9 Yt3xxvGcMIy6rIzADTPBs4b0TqM7qpRMHyk7yJyA3C8bZ1ha7b63wwJoLrMM O_EXuxy4WsIei.Zz9bu2p0RtzQCrUo57FeiX7RS6ttOlNUSCDe_S7qz3eoQW ip.R3LMfsSX65T8uiBwfmtIcgNQNPn.FThKUcDHtU3IwckZ5Thz96W_GvPxi IS5L__ZRARivIHJ4bXrfE4JVjDBmEt76.OmoLwg612KzFyBKtybUBQJLioOi hd1dkR3mmseKvZerdLv69_iv5nyR.tJnSoi8l4oMMK2TWNWBO0QYYQaFEB9R G.sMIlkGk53GI2BwAZlNvz93hofATpZCBiaXsAUyeCkzqqGJ7cwICUkt1Mmu _UNFQhmnyX8OXGpfGb96pGsCy_ttbjXGnsBJD3IIrxQ04RIEqW5ozThO7yl3 PmmTHlf_TEsL06qGWCTxPJO9CzA142J3G_LtyZ.Okv.OGbPK288Bq8ZbwULE F0vQY7JA8D4jWU_dsMvC99O2Rkg9SvdIFJYTo.5aNx1I7cH5LcdGhlhHWW0l xYXykTc1OuZbm_ZFPw2zSk8BTfE3bc1YGr.ILT4-
X-Originating-IP: [72.30.239.134]
Authentication-Results: mta1397.mail.gq1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm31-vm8.bullet.mail.bf1.yahoo.com) (72.30.239.134) by mta1397.mail.gq1.yahoo.com with SMTP; Mon, 03 Dec 2012 01:06:24 -0800
Received: from [98.139.214.32] by nm31.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 09:06:22 -0000
Received: from [66.94.237.121] by tm15.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 09:06:21 -0000
Received: from [127.0.0.1] by omp1026.access.mail.mud.yahoo.com with NNFMP; 03 Dec 2012 09:06:21 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 295834.37530.bm@omp1026.access.mail.mud.yahoo.com
Received: (qmail 7637 invoked by uid 60001); 3 Dec 2012 09:06:20 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1354525580; bh=7/u9SiMezF1+caMxuEj5HEy6jFviHqBV7QwtjV3n3C4=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=fb1IqxAL3rg8nbvK4JUzCFXmJ7O00r8zXgeGsMOOT0kLng/Vc4BmtsmPwFYEpZxwdkF5+vmXEVuML6iG0vRcmDUOqw8RwAhISWFIUGLj8lFfqp0XNZb4ZdnAOmH1RYgJyfxpmrIZ/iRCovMobIQl2LcZX3oW899MmULaawM9Nzk=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Xo95WN3ZBqK+4Hqk6esFrePqHPLCZTWviTDvzlX98iBqidrdGyW14JUoH2+IBWWcbK4myRhgu3HVynVVwpiCdB3NhOo72O7pQXiJ46kUf5yIIkiz6r04o/Bo9DeUY9GubGLBauB8TAsRj3pfiwSSEI5ATfQRiSA67RVObu+JsV4=;
X-YMail-OSG: KOPBP3UVM1l1EEA1yfKqryJiDfmXwVymZ_XkVvL8pUrHLgf 9fdsyvZ3E.fsCefvzf94.Xj71aSGD2Q8igiNexRGXZO5thzqQtH7v_37mBR5 ETarCILuf_CuBCSXHHSldYHO5FHJsxat4Mj44uHcD6I4HCvRYMZq33HrNIJF 8FO214q5PWvM1ftj5in87IkWbW5_V29ccGelPbK4VQA6UuPZPt573VGJKWyW QcRYtYWJDVd9GlDTr8PYoML3DbOjUlQdqWnWMzEfPVK7WktjGtYEryAaM3lm rytFhGG9lWuJca6fX_d6eKUROuz9BLRpeFaaqMaC7HaUamAmR7hYM9rVAQnl g6WoGeXRoKaOP5Ly8ry5gT3Fs5xxztMfYwQ10FS9segfMwYe6LimOWG0aOY2 eWuCOtWIwe0HQlzbetnO_yGyKLp0a9mxxuEdcBFtRmjrr3GZorvdLYj1a2Pd 3IL2mA7z6f4G2_pF6G44PUmNoFL8ULfk5wETMVsFHWnp2T7dJvLcajGC5z37 BrM8sscQ6gtXTXxMpdsuTtKkmat.Tu4HbGQz24qu9QaxF
Received: from [69.163.96.25] by web181001.mail.ne1.yahoo.com via HTTP; Mon, 03 Dec 2012 01:06:20 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354525580.4805.YahooMailClassic@web181001.mail.ne1.yahoo.com>
Date: Mon, 3 Dec 2012 01:06:20 -0800 (PST)
From: Attorney John H Brown <web.000.xxxukxx202@att.net>
Reply-To: attorneychambers1977@yahoo.co.jp
Subject: Overdue Inheritance Claim

“Attorney John H Brown” <web.000.xxxukxx202@att.net> attorneychambers1977@yahoo.co.jp – 69.163.96.25

 
2 Comments

Posted by on 12/05/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , ,

“Office Customerscare”

ADVANCE FEE FRAUD – LOTTERY SCAM

This post shows 4 different emails from the same scammer. I’ve been scam-baiting this one but stopped over a month ago and I still receive emails daily so it’s hard to keep up. This particular scammer(s) always emails under different IP’s and email-addresses so I have posted each header in order as well.

1st EMAIL —

WESTERN UNION MONEY
HELLO MY DEAR
THIS IS SEVERAL TIMES WE WESTERN UNION BENIN REPUBLIC ARE SENDING YOU THIS THE SAME EMAIL TO START PICKING UP YOUR PAYMENT AS WE TOLD YOU BEFORE THIS INFORMATION REACH US SINCE LAST THREE WEEK AGO FROM OUR CORPORATE HEADQUARTERS ECO BANK WESTERN UNION,
STATES THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST $5,000:00 FROM YOUR TOTAL (FUND) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND PAY WHATEVER YOU HAVE FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM $250, TIME IS OF THE ESSENCE HERE,
SINCE YOU DON’T HAVE THE REQUIRE SUM OF$250, SO GO AND SEND ANY AMOUNT OF MONEY THAT YOU HAVE AT HAND STARTED FROM $40 TO UP $250, WE WILL ACTIVATE YOUR MTCN AND SEND TO YOU TODAY, UPON RECEIPT OF THIS PAYMENT,
BELOW IS THE MTCN OF YOUR FIRST PAYMENT, SO YOU ARE TO TIPE WWWW.WESTERNUNION.COM AND PUT THE SENDER FIRST NAME AND SENDER LAST NAME BEFORE THE MONEY TRANSFER CONTROL NUMBER (MTCN): THEN CLICK THE STATUS THEN YOU WILL SEE THE AVAILABILITY OF THE FUND ONLINE BUT IT CAN NOT BE PICKED UP DUE TO THE TRANSFER NEED TO BE ACTIVATED OKAY

1.WWW.WESTERNUNION.COM
2.MTCN 0560139994
3.SENDER EMMANUEL OKOYE
4.AMOUNT $5,000
BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST 5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP THE BALANCE SUM. SO I WANT YOU TO SEND THE AMOUNT YOU HAVE AT HAND. WITH THIS INFORMATION BELLOW. AND UPDATE US AMOUNT THAT YOU SEND AND THE MTCN.SEND THE PAYMENT DETAIL TO THIS EMAIL,(officecustomerscare@yahoo.com)
1. RECEIVER NAME… Ikwunne O Anthony
2. COUNTRY… BENIN REPUBLIC.
3. CITY… COTONOU.
4. TEST QUESTION…HONEST
5. ANSWER…TRUST.

THIS LAST NOTICE TO YOU IF YOU FAIL TO SEND THE MONEY TODAY YOUR PAYMENT FILE WILL BE CANCEL FINAL SO RUSH TO WESTERN UNION OR MONEY GRAM NOW AND SEND ANY MONEY THAT YOU HAVE AT HAND NOW START FROM $40 TO UP $250,
CALL ME ON THIS LINE AS SOON AS YOU SEND THE MONEY  +229 68377742
DR.CHINEYE NWACHUKWU
OPRATION MANAGER.
WESTERN UNION DEPARTMENT
PHONE NO.. +229 98677751

2nd EMAIL (RESPONSE) — Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

3rd EMAIL (RESPONSE) — Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

(The 3rd email is the same as the second but was sent on a seperate day with seperate header information)

4TH EMAIL — ATTENTION BENEFICIARY; THIS IS TO INFORM YOU THAT WE HAVE CONCLUDED TO EFFECT YOUR PAYMENT VIA WESTERN UNION BY $5000USD DAILY UNTIL THE TOTAL PAYMENT OF$1,500,000,00USD IS COMPLETELY SEND TO YOU.THE DIRECTOR ADMINISTRATOR OF FUND RELEASE HAS ALREADY SIGNED YOUR PAYMENT.NOW CONTACT WESTERN UNION PAYMENT OFFICER WITH YOUR FULL INFORMATION TO START RECEIVING YOUR MONEY AND ALSO FOLLOW THEIR INSTRUCTION.

YOUR FULL NAME :::::::
YOUR PHONE NUMBER:::::
YOUR COUNTRY:::::::::::
YOUR ADDRESS:::::::::::

CONTACT PERSON MR TERRY SAMSON
E MAIL ADDRESS (western_union09@wss-id.org)
PHONE NUMBER +229 98841150

Regard
Mark James.
WESTERN UNION PAYMENT
SECRETARY HEADQUARTER

1ST EMAIL HEADER:

Return-Path: <office_dooog@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.73
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: YTQQLVYWLDtr8GvJiSxswwRjP7wnkQFwbp2etVmaNl0FiaXv WEWUyzcgnOMV_Qxqdh9W6bDVUk0oJ2n4H_.OqH3FVMd.Y5SeQLY8WPB3FzvF PDksuUJsc8jsOTNRuyWFfYR3l5wAZDJgIWuiiGdSmgdTu68C3rqyg3O3KdWs h.EODC.8..TyOEAnTAvAstMaGS8Ncy0SIJObOaOjtoBxXs6HTVJjL2nLqQq. V8jcqhibon.BQ9tsji3ubP5LyOllUnFxk7kElsMu7n0vVWWSlivsKIy_S5n1 TnjjQsj6Z6unrH0LPjxjeSxKbAjjeU63LUw4W.D9he2EEs26JXAWNlSyN_RA mHtPVevectbOeAKgC.m._frVA4tVlBJnUDlnVGkTYGWpICSFxTT9LPW_EEeJ l2XotLG4IwrFUfDfi_oT5YhbAo7jPwjxliFYxO_jm1h_wnaqEAIoQUqbckjp VIOOy.9bM6cUUjn4sXuLElKl.HyFw3R3uBNExQYnmx4RLVovyUrURD0ciS64 y4A8HjS0d8vV45llBD7G.G.oahtQT4gZsScBryrPWxrTQ3pLGp8tSk2zK.n2 eeTHvEQSRnZIbN0eOuFt75vrczEzEp24_Wxy.kkTt24Ghr67RLbx14T8AWJX oN_fjH0I4fLe4bZg9kWJjC5AIUtbrQ2yjsGa8Rqmniy4tDcDdplQBJNCIttH Y6iPtc8dzN6XRG89qgna5ydQU4LybEz.EW03VSf5bIAK7G7wCnLMhQCLLxgk ly1aVYK.aBw2ZGGdBfsnGxEQGmjWgPW9Y8yaS38MKaKk5BlVKjdKTv4Du9tr 7v1Q0Ahg1rbEQYh8bXhTn4R03SCnAeBhjAproiLkSzIk_nlJpbqzYS_tDYFN eublP_kgPayXAilWx.ksYpuHs_SFNkLaI2tWIn4oFvj8Hul6cqhvS1pJwTK2 8xjAkTjf5BRCJ73jx3wjykpTf9CXKVLe4qVn43MdJwIGfeb9p6tuMcY5ae7w c0GAOM3ZK4N_pO93ZKX2sJA.aGW8uNMDRTGyX1W7L7EKmy.ZYJQMjrOnd1Pp 8VcXJpyj7WUoKAXFir41peZR3kuJAGhW1GbparzRRCsM53A5wxeRRRvbeQlP o9SRMR9hJ7G68eklKQlZiNlLHYAN75iIROMHam0GQkoQl658wOksxxV0w1yE mwld8PgOs6.ieT5hfoq6JOm_CZnFaWvDCuNdzu7iw15xSb996aG1QW0ovKDm ivdO.r3OOe2nezrbgWHscU8DcPD0SD__8p7aOAMpHGW.0iovFBMBhXwhAkfD _c5Tjzjt4SpvsBLMK1O5olWM9ZTOgPGebcxgdbmbvX9l8w–
X-Originating-IP: [203.188.201.73]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm9-vm7.bullet.mail.tp2.yahoo.com) (203.188.201.73) by mta1299.mail.sk1.yahoo.com with SMTP; Thu, 15 Nov 2012 00:06:47 -0800
Received: from [203.188.200.142] by nm9.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
X-Yahoo-Newman-Id: 597653.91745.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 1033 invoked by uid 60001); 15 Nov 2012 08:06:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1352966804; bh=sqgSO8xP/LR+hXQMdA2e6Ah1eNeIaTHiSoq/jXQJhqw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Yws8UW5RVEL2oPJjowNq8quCXz9OzL0CxZrfGMUtTLq9P49zyzmh4cHIIaccgUS6cadGW2uanBjRYI1LgN7qnDfXWjIk1fJUorh8XSrtSnhaoUyUmvLuinqV/FZQLQV6ArVs06/OCE6rJG6RrChDzUt4hI5ALQRFiJ3ZkZnKHy8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Lytcrsw3vUiLafw/lAGi2G0Q0Tb6yrnlT4ruv+ReTjQFhJriBDR+YxFNsAJmBt2mYpnus+zpYYvm4eYTFIsF0fqvBhc21W3x1a+iiSAPgC+CPtqGdn9cWtDgfR5n6UI9cuY9jwzCd+BU5PzXNKOXbca69Rp1IZVW4Uh5V+L0jKc=;
X-YMail-OSG: O7Gnv7UVM1lkD_jTVvQ9yvdVYlFxea2vZYOteXXHXMW9Qko jdT9UCaq6
Received: from [41.216.44.199] by web92416.mail.cnh.yahoo.com via HTTP; Thu, 15 Nov 2012 16:06:43 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1352966803.94317.YahooMailClassic@web92416.mail.cnh.yahoo.com>
Date: Thu, 15 Nov 2012 16:06:43 +0800 (CST)
From: “DR.CHINEYE NWACHUKWU” <office_dooog@yahoo.cn>
Reply-To: officecustomerscare@yahoo.com
Subject: WESTERN UNION MONEY

2ND EMAIL HEADER:

Return-Path: <officecustomerscare@yahoo.com>
X-YahooFilteredBulk: 98.139.212.254
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: VLLNlMkWLDtUbQTbov0porruXohSlGjiyaNfjajWB0Cduvem OEGnfKhhlF4xKrU2tbM7tHSjRtnksOtCmBni7.2lTKxqM.zJc0kyzLSmp0nG i_CbXXHC8eh56HcFkIULD.BdzbjU3UfTNf7R.IJyVWYbK4FdG2DbERiFQ4AL 2W3kyMd2NrGNWVi84alfEJaPHmLcuiCe1dLIUuBMMg3BNKZYFjFuj1Cbr1QS fmYvDQcEL9QkVQFRA1r4HQalx1x.gCGsnuJ2c9o5WMKTqxEw1lfIpbsWdvZb 0oKivkDXKT0HKUzKdomv4xD1rCw13jYJ0yXJK0BLZfjeePYsPyENUOsfKq9Y Nsoj1dG59zkCJKyLFnd4kgct.GcOBFGPoqpevxYvub8VNcT0gOhnFqLdU38G 72Wja4aTwyX2PGzlzRnU6lmTFEBVcSg3lAYandBAzew3G7Yidyq9q1dnArb3 aue0WfEzyULn8QnrFCgUnH0L2oQF5ev9nBRp.V7MwiTHNOL02o3SMhpcTzSL 52bdZyM3GnxXlVmICHIGyw3cjZkp4_5N.3WtCcf84ScjcaJVKOWt4ReEQVXz 1BtjyULP_fiWN1GESbbrTsmE5WwCpijqJaFqFw45b6wli268.1f0LfkNr.4z YlGykrhi5NCIpY_7esUOObjfjns3nvhb2j5mCdx7_hWj9lolzI2w0DcE3rdp sgN2GDBvVZ680RMztbImaCT.cTURBiiCwvdgTcUy0Mu0E.lTCpJPstDT6ZlW Di1Hoob5dN4ln1HGBipY7Z5mrwTFmtlfI1gjFum_SEDYSmuHGh7eTWZ.BoSU ..k.g0Z8apbapJclKdfT1VK5b1PTmnhtp0OwH3TkTAIf_pAo19ji1fUKzKDZ EMdkEFWD_lfFSXaZjN5LQxHHk0l0N6rCojsf0_lY0srKWve2SaahYAwGBjAV tPNotMOJ51vzMiyw9Zlgyn_jFQ6KxZb5_8Jf8wqtd85wZFjSV6QXpmyxDCKT BahVlS5eGljKzuKTRb0dPV1.M9TxnEImZOHOKCzELtPfnvAeYRoQI25sr133 QlJUxK4HOn1WdLoMNCYBk5J9fmNaV4mS4MQtnFmyIz6wEMbpqkh5CYIrF_8a 5wUl2MuedcVKiMKjzJ2tIETeEsnKcOIDytHmAkQDqTOW2ji6B9lvQQmqB4Ad A9EnFyF4tcz6dmhzNuJh.b_dhtlKSZ.m4PC6WeOEvnrqaf5k3Sy5nN11UGqE 6ok1.QuDzlLWvjzFTfU4a4QZxV5a7pd64zvhBsFGvxUQSVvpBL.8YqBW77Wu hit9.w–
X-Originating-IP: [98.139.212.254]
Authentication-Results: mta1227.mail.sk1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15-vm0.bullet.mail.bf1.yahoo.com) (98.139.212.254) by mta1227.mail.sk1.yahoo.com with SMTP; Sun, 02 Dec 2012 22:55:27 -0800
Received: from [98.139.215.141] by nm15.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:55:26 -0000
Received: from [98.139.212.223] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:55:23 -0000
Received: from [127.0.0.1] by omp1032.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:55:23 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 790906.43532.bm@omp1032.mail.bf1.yahoo.com
Received: (qmail 63457 invoked by uid 60001); 3 Dec 2012 06:55:23 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354517723; bh=D22VWzs/hPiPuo7CTSZY9WVrAb3WF520cs1fAxQD+yQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=M+WHRGyJ+Obkc6ezHvdZOt7XhENLPL3udu25sOZBN2bEv8bvyklwtQ6DLpmKzRRpBXOT706jn4vx+mPHl7Ss1QRzP9+0Wo6Ei7G3drwBg4JNSK0krATXorvXYUy6GzTqTOR3umwdQ0HSFEkjOZOm/e7lrZzQypAAF2HsfzCs/yE=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-
Received: from [41.216.44.199] by web161601.mail.bf1.yahoo.com via HTTP; Sun, 02 Dec 2012 22:55:23 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354517723.57854.YahooMailClassic@web161601.mail.bf1.yahoo.com>
Date: Sun, 2 Dec 2012 22:55:23 -0800 (PST)
From: Office Customerscare <officecustomerscare@yahoo.com>
Subject: Re: WESTERN UNION MONEY
In-Reply-To: <1354346435.35920.YahooMailClassic@web161004.mail.bf1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”-83809723-1967636313-1354517723=:57854″

3RD EMAIL HEADER:

Return-Path: <officecustomerscare@yahoo.com>
X-YahooFilteredBulk: 72.30.239.148
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: 19QBmTwWLDt95EV2ebP6OidYWqd1j1U2Pdisxv.rlfwDDGY5 69ILUE_kjRPOWAe40.wXl4PoTGUhChdXTKcgusQIibh0IPY_D0Ei53Wrj3P2 DDAmqC8G56tWm3H_2xzLI52rgBO8bDRU9eSbv2pm3Azd_QOUM2JKPXkfNgvF tl4uGNQOLg59unuxlWy7GcvTf7k_qoqXCzJmrjoh8hal1wltXqDrPCdnPvy. gFAaiJyTkAU00qxgTiQBoHammaTYZ4ZKrv1Bj7dJ1Ay0unZZGeZ_8m2Gszaf Hwkx24CP1NPhsf3bn1yuJzkA3iUs9lmwihY8jKVEyWkaKzas.DMkI_qi4SpH ZcprZOz7Wo6Ip0Xe7ngKq.DJvGhyKa6y3Mo9rBfkwPSE1QwldTeMrv.HiKNc J7.fdByCHPm9iuieID3uhsZuZxJJIk_dE_HSPw5N3kU3zc7fJYmx.cnjr3Wf 2ypCCkWSg4Xl.J_9t27tMPFXSJSoGwnm1vLC91UKaZD.u1dtZUXXxB5tay_6 GXotgxrPGmqkwvJ1U.b3XhbbjAW7JSmUeiIRB4cduWQUVHj_rnXP_czMPQVD 4N5bIlcCPjZh3eSRW3gf3AEFVFfPfJx8dm3puMNiCNIHEOWM.KXpLJkyXgwj CXCCZTVhjugOJr6sn4MUCKseOTSyKsr9xa8mUcQ7Ob3w7yUH9YsolFteJokZ 791VNvwM.fuDRTa4C7_GNiOQkrjQtbT08_fPhS4e5p8AUbAPtXoVVhGyrysS WNwPxxltk8XRhk_dX67wDsZjyOfXPmDB3HLalZHqy18lbOcSTBFWISoihgww mPfGu3xD9UWTgN63IDe.rcwpwuXNg9AUAD4WI2TC1TkLuaiTIMBHc1hUskD6 YD46YkgYu9COqzPN4SopL_xQJrvUF.PV5BY4NQB5A_ZB2qJd1gRrxiH7F2oM WMR0CXNOYrY9TXM7XVLamxfO0CSlGMEfV72DaaT_VdZEOlfYoPd4lJDJmB_N sx2jYYAEsdbk4xs6H_9732N8KEwn6jyiAlysubWeSNzm_bnMmkZWyun_skUk lz4XKNVqrbYacm35w2StbbyHFWA8Oo1zW2qh9zv_DmYJfZdb6uGfCzwiuoY3 n24tw2e56bUSpjpwHGWyNJG5h17GA.7b0IXQjO.t5i4rXNFLy4dlPo8Ql.KL 7o3hOnvqv8SS3l.1ctFHuH50C0Qb8SFAoSBMFFfAJNxfMjdPOZxRzdCI54Rr wbWeyGdrtM3CPB2GdyVVli6zsFLRpSNohN6nXHYzK_sThaAO.uWlopq9Mi7R 7gMJVHuSRow-
X-Originating-IP: [72.30.239.148]
Authentication-Results: mta1368.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm39-vm4.bullet.mail.bf1.yahoo.com) (72.30.239.148) by mta1368.mail.mud.yahoo.com with SMTP; Mon, 03 Dec 2012 06:21:13 -0800
Received: from [98.139.215.140] by nm39.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 14:21:11 -0000
Received: from [98.139.212.194] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 14:21:11 -0000
Received: from [127.0.0.1] by omp1003.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 14:21:11 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 750916.31792.bm@omp1003.mail.bf1.yahoo.com
Received: (qmail 15592 invoked by uid 60001); 3 Dec 2012 14:21:11 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354544471; bh=+YYliwmsShAvNwhPLyzJNYE1MPX34bjAR9RvOUaGZQw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=T9KwqKkebNxfAW3bEGZimvC7gz9wDwXYuJCHcFJKyIMKz+2fgGWIXJY7hbmEDeCEDL5nkFpao0O8/BJLEktQpgL/Oc8jlwc4lhbKFPAsVSV5XtdqnIgfQv+QUZOwGSNXAEzCLteM/75epq2GVgFNFQgSBnbamPziTry6CjeHtGA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=o9sVFcOkfqm1EvfSTDuAbchXwIrh1CcZ/q9lVAsMZNG9iKgZzGUjcyCwN6W2BlBR/8N1BCU063PBnoZz65AMfqMww9vx0tKyy44myRUE6CCrpuSb6Q4IvBJvmXmIBv8uMwFHW7T9qQ9GntFtNWZAEBsJEOoiU1w2LqVEwcJ/LaA=;
X-YMail-OSG: 01EGTb8VM1m0Oj0eiFuBd82hpLH5OcmVrv4NLOE.DGTQuBD xtJPpsSc0mVlekI3jqbZq
Received: from [41.216.50.26] by web161604.mail.bf1.yahoo.com via HTTP; Mon, 03 Dec 2012 06:21:11 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354544471.96769.YahooMailClassic@web161604.mail.bf1.yahoo.com>
Date: Mon, 3 Dec 2012 06:21:11 -0800 (PST)
From: Office Customerscare <officecustomerscare@yahoo.com>
Subject: Re: WESTERN UNION MONEY
In-Reply-To: <1354346435.35920.YahooMailClassic@web161004.mail.bf1.yahoo.com>

4TH HEADER:

Return-Path: <yajie3128198@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.9
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: emIYTZsWLDsWBcwgel.WAdTfmAz7lIDU50.tyqE5VPt1VGpv VeukhIjY1Cn.KU8zhzCD_Pw_36n4JbpBBnAvEduvgl5qSCqKBsweGyX_h2Ds wNqtHkWk84quxCURRbnzMjvGUohntskqKJ9WLPygNjL0APgEgATzpDrLvj8k VuA9FW29oKwfhjurxzDZCcZH2Oo2zAfZnsdooccof.1DHRU8.6up3Noi8BNz 8uT6vrZfuFUPZ8DeDut0XwFw6QVwjr1qEX04NI..JcSraqBEfIQfTaoAwHus vr6Lj_dvPNX5tWGkfcNnjurajknIRROwwtXaASLQ7Cx8Uh3N5NoiCPSRcyUG yKVTej8g1qqyPvMgRR.Xg5HP87.bsB_o_vmswcSNF8KDt9Xkig3exi2o.Llu bLaJLyQxnGQMqS2eBdVt7G9icsk0YsTnLfPjvmsUkuS7kjMMvIL8AvgT8Wld 0y2mIrI71WQLbuCmqFVBhujChu2eWJ200uDJKrDtjv9_yZnFECzHIn02pCyw CDCDxpVA63zdAbSelgfxij7sHg1_jZCnlbyUm2cEPdLk15uFHsM.7nvxrgUY 5LsHbzlOaBg0rJ9x6AjwIurAG9AqXXMS28ewOfH2p.VXst11fH7r9U5jjOcl nrsDfP6NHDykG0m5xL.B6nKv_VGrJFtJ2d7bJ49SJD3fHvm08HTy3IukXkbR _af4nG35A546UhnaBoCPZY2XgqgjyqfjS7wIp_.Xpne8dHrzvdiv2fGZoxNs cdmCT929aSNoBVS7qmf.Vqh4Ba0Cq0iGPC69oPzjoseElXh_w.rLeV3Vhtmh v4w396qlHszg2qTh1ti6kqxrlGBJ5Es5_rFAUpfV_Iyc523_g9gcXSF639qk 5L5ibU_TC20R6g7C8emmS0Xz4A881Mgir2IBDvlQCykLm36iOT7Jt3KtGd0Q 8zo2IoPSQNQeUnRVvOOs_1u4tawNtF3beclZPl1jNKjb13l6FkwaL.Pl0fMr 0zPIZaLlHadKxr2LSmAlVNFkwxzVF.ejbaqH1T4Bf.HF1_4vrPHyGwypU4oT _Rd9trwPjtmiazFmvyW4zVt6P3uo6oNViHQvSKESLhBEb0dp1mJ24JmpYudY 9FOXDLAfJNTHD0OBlfo4j0ZN5tFbVqku8MM2wJkkVdHXcav.NP88edHCmGkG 3hnvwRmaS.xRh57w.78MDdmqgr8JsPvQbi7hbuZbxtyPysPjavf.Mn1dKiU8 MDzL6_L.ARVxcwWXZuD__sEtleqB
X-Originating-IP: [203.188.201.9]
Authentication-Results: mta1048.mail.ac4.yahoo.com from=rediffmail.com; domainkeys=fail (bad syntax); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm8-vm7.bullet.mail.tp2.yahoo.com) (203.188.201.9) by mta1048.mail.ac4.yahoo.com with SMTP; Fri, 30 Nov 2012 06:06:08 -0800
Received: from [203.188.200.80] by nm8.bullet.mail.tp2.yahoo.com with NNFMP; 30 Nov 2012 14:06:04 -0000
Received: from [203.209.230.76] by tm1.bullet.mail.tp2.yahoo.com with NNFMP; 30 Nov 2012 14:06:03 -0000
Received: from [127.0.0.1] by omp105.mail.cnb.yahoo.com with NNFMP; 30 Nov 2012 14:06:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 676497.39980.bm@omp105.mail.cnb.yahoo.com
Received: (qmail 62200 invoked by uid 60001); 30 Nov 2012 14:06:03 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1354284362; bh=y53EsIyh7n71+dZ/04bpw8ev0uIRHfZGOGFr7f2xT6g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=2YdCEBsGYX6t8lq6v3RHWBeQNjh949+Bf0uHOzdQF4HHzc99e4R1GTkk82F+ACxM92FYk6ciYRMBFJjgw2vTXqxajDQF2mGe9gcYWTzOWlcMZcKOpAlTdfZ0a/Q5L57cgywjlceOUq8CTwQTYdP7c8C7RolTF4JhNYOVKXiweg8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=GvTvbvzMaFegUf3UU+0sN9uBuXGXz9nGn8DJZsM7LuwwyYt/3ZLa/bfYTxLdIOMSKzvNeyVM1QZb+7O0P99zR4/vnljfB45mZ1c63OSyAeHSYzBLiIpy7fSSyVzqdmyGQmITI9SAFiL0VKPGWWc8GDdA8JtUfxELE16aQoEAntI=;
X-YMail-OSG: uMubNSsVM1lY53F0TXaMY83uS7TEq6JQlDsaehAolKSsGNi urJ9D0OkSh22JWyfGoQTj
Received: from [41.216.63.171] by web92205.mail.cnh.yahoo.com via HTTP; Fri, 30 Nov 2012 22:06:01 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.127.475
Message-ID: <1354284361.58719.YahooMailClassic@web92205.mail.cnh.yahoo.com>
Date: Fri, 30 Nov 2012 22:06:01 +0800 (CST)
From: OFFICE <offficialofficee@rediffmail.com>
Reply-To: western_union09@wss-id.org
Subject: REPY TO WESTERN UNION PAYMENT OFFICER

“Office Customerscare” <officecustomerscare@yahoo.com> <> DR.CHINEYE NWACHUKWU <> westernunion09@wss-id.org <> offficialofficee@rediffmail.com <> +22998841150 –  +22998677751 – +22968377742<office_dooog@yahoo.cn>

_______________________________________________

Associated Email: western2union1money0transfer@live.com
Associated User Account: Mr.Barry Grant
IP: 41.216.63.171

Associated Email: johneric777777@yahoo.com.ph; western_union2011@superposta.com
Associated User Account: Mr. JOHN ERIC.

The ip address 41.216.63.171 has been recorded as a spammers ip. If you have had a member sign up with this address you may want to consider contacting them, and possibly banning them from your site.

Other scammer IP’s in this range:

41.216.50.26
41.216.44.198
41.216.44.37
41.216.50.204
41.216.50.32
41.216.192.148
41.216.133.26
41.216.50.182
41.216.63.171
41.216.44.196
41.216.50.181
41.216.63.171
41.216.50.33
41.216.50.33

________________________________________________

Associated Email: kennethkuye58@yahoo.com.ph; emscompany78@yahoo.com.au
Associated User Account: Kenneth Kuye
IP: 41.216.44.199
The ip address 41.216.44.199 has been recorded as a spammers ip. If you have had a member sign up with this address you may want to consider contacting them, and possibly banning them from your site.

_______________________________________________

Associated Email: office.filemail21@yahoo.com.ph; western_union3852253@yahoo.com.au
Associated User Account: Mr Kenneth Kuye
IP: 41.216.50.26
The ip address 41.216.50.26 has been recorded as a spammers ip. If you have had a member sign up with this address you may want to consider contacting them, and possibly banning them from your site.

_______________________________________________

The additional IP’s have been blacklisted on atleast one anti-spam (scam) website and reported by other internet users.

Spammers Sent From 72.30.239.207
From: Standard Credit International Finance <thomasdavid
Subject: none/blank
From: Nadia kallon mbembe <nadimbem@rambler.ru>
Subject: Hello dear
From: Ibrahim Sanogo <ibrahimsanogo@voila.fr>
Subject: GREAT CONFIDENTIAL BUSINESS
From: “DR. B.S RUMA”<bsruma1@hotmail.com>
Subject: Call for assistance Tel: +44 (702) 401 6959
From: 郑���阳
Subject: 艳君
From: “ypyqv” <zabelvineewm@yahoo.com>
Subject: 何丽壤何丽壤
From: 唐湘祁
Subject: 楊家團
From: “Mrs. Sharon Crawford”<info203932@skymail.mn>
Subject: COMPENSATION ALERT, OPEN ATTACHMENT TO READ ALERT
From: YAHOO MICROSF 2012 <claimagent45@gmail.com>
Subject: Co
From: EURO LOTTERY PROMOTION AWARD <drmartins123@gmail.c
Subject: YOU HAVE WON
From: MATHEW SILVER <mathewsilver1290@gmail.com>
Subject: DETAILS OF THE MONEY IS ATTACHED
From: “AGENT JAMES BURTON”< kjhguigu@hotmail.com>
Subject: FROM FEDERAL BUREAU OF INVESTIGATION {FBI}SOLID PR
From: UNTED NATION PAYOUT <anthonymark.clyd@gmail.com>
Subject: (FIND ATTACHED) TO CONFIRM YOUR PAYMENT INSTRUCTIO
From: dso <obregonhjmou@yahoo.cn>
Subject: 请查收!
From: “Mr.Law Kanu” <lawkanuu@gmail.com>
Subject: AT LAST YOUR PART PAYMENT HAS BEEN APPROVED
From: “MR. SUNNY LUCAS” <sunluccas111222@rediffmail.com>
Subject: SOUTH AFRICAN NETWORK FOR WOMEN
From: “CARD OFFICE”<drgoodluck001@aol.com>
Subject: payment of US$2.182.Million Dollars only via ATM C
From: “Mr.Ibrahim”<lamored.ibrahim8442@live.com>
Subject: VIEW THE ATTACH OF YOUR COMPENSATION FUND
From: “MS GRACE SMALLWOOD”<mr.johnwalker444@hotmail.com>
Subject: HIS IS TO NOTIFY YOU THAT YOUR FUNDS ARE CURRENTLY

From: COMMITTEE ON FOREIGN PAYMENT <web.np@att.net>
Subject: ATTENTION
From: john graig <web66778822@att.net>
Subject: GOOD DAY
From: Nadia kallon mbembe <nadimbem@rambler.ru>
Subject: hello dear
From: “Mr.Steve Gulliver” <stevegulliver001@gmail.com>
Subject: INVESTMENT PROPOSAL
From: “Mr. Donald Wilson”<michealscolls25@att.net>
Subject: Confidential Account information
From: UNITED NATIONS ORGANIZATION <unitednations22010@gm
Subject: PAYMENT ORDER VIA ATM CARD
From: pavel_stuleanic_12@yahoo.com
Subject: Curs Italiana – Invata italiana fara profesor
From: Zana Clement <zanaclement2011@yahoo.com>
Subject: From Miss Zana Clement
From: e_x_t_r_a2000@yahoo.com
Subject: Economizor de energie electrica!
From: emo_love191@yahoo.com
Subject: Economizorul care reduce factura la curent cu cel
From: “United Nations�”<publication@un.org>
Subject: Attn: BENEFICIARY, Notification of Your Unclaimed
From: Oferta zilei <alexandra1975stefan@yahoo.com>
Subject: Tigaia magica Dry Cooker
From: Google Corporation <claims.sector@webname.com>
Subject: Google’s 14th Happy Anniversary
From: POWER-BALL ONLINE PROMOTION <info.pball.promotion1
Subject: CONGRATULATIONS. (VIEW THE ATTACHMENT FILE FOR MOR
From: MICROSOFT AWARD <awardm2012@gmail.com>
Subject: Good News And Congratulations You Are Lucky Winner
From: CANADA UK LOTTERY PROMOTION
Subject: Congratulation,[Kindly Open The Attach File
From: Musa Ahmed <musaahmed20222@gmail.com>
Subject: CAN WE WORK TOGETHER WITH TRUST?
From: William Nii Offori <douglaakana12@gmail.com>
Subject: Dear friend kindly view the attached file and get
From: “tristardamith@yahoo.com” <tristardamith@yahoo.com
Subject: GUESS WHO HAS A CRUSH ON YOU!
From: HEINEKEN PREMIUM PROJECT 2012
Subject: HEINEKEN PREMIUM PROJECT 2012
From: Felix Hachel <felll_hachel@hotmail.com>
Subject: Your transfer is ready
From: “#10090246 _____Get-a,holiday-bonus!_____Last<Hour
Subject: Last Hours to Save! 40% Off! Order #10090246Exp|re
From: MRS GRACE MANDA <gracemanda147@gmail.com>
Subject: I NEED YOUR ASSISTANCE ON THIS TRANSITION

Other Spammers IPs in this Range

41.216.50.33
41.216.133.26
41.216.50.204
41.216.50.182
41.216.44.198
41.216.50.33
41.216.50.26
41.216.50.79
41.216.50.33
41.216.160.135
41.216.44.37
41.216.50.26
41.216.38.164
41.216.40.128

 
Leave a comment

Posted by on 12/05/2012 in Lottery Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

Jack Alan Hardy notification@security.com ication@security.com

INHERITANCE (BENEFICIARY) SCAM – “TRANSFER FUNDS”

HARDY AND CO. CHAMBERS
LEGAL HEAD, HARDY and Co. Chambers.
892 Bulovard – Airport Road – Kumassi,
00233
Kumassi – GHANA.
Good day to you,
Compliments of the season my dearest friend.

My name is Jack Alan Hardy (esq) From Ghana, I hope my message meets you in good health.

I wish to notify you (again) that you were listed as the beneficiary to a total sum of (Four Million Seven Hundred And Fifty Thousand $) in the intent of the deceased (late) Madame. M. Olivia. I contacted you because you bear the same last name with my deceased client and therefore I can present you as the beneficiary to the inheritance, since there is no written will from my late client.

I received a notification from the Central Bank (BANK OF GHANA H/Q) that the funds will be confiscated to Government’s treasury account as un-claimed funds due to account in-activity for the past 14 Months since she passed away to glory (Natural Cardiac Arrest) at age 71, I have two weeks only to present a beneficiary in order to avoid this action. Please, I am in need of your support, for I cannot do this alone.

I am prepared to provide you with all the documents which might be required by the holding Bank to enable them release this inheritance funds to you. All the papers work required will be processed in your acceptance of my proposal.As I am prepared to offer you 45%, 50% for me, while 5%  will be set aside for any expenses we invest into this business, that is to say that any money spent during the period of this business will be fully refunded once the funds has been transferred into your nominated bank account or any other safer means you prefer.
Upon your acceptance I request that you kindly forward to me your details as listed below.
Your Full Name:
Full Address:
Personal Number:
Contact E-mail:
Date you was born:

I will truly appreciate your response.
Yours sincerely,
Jack Alan Hardy (Esq)

NOTE: I AM NOT HERE TO WASTE YOUR TIME NEITHER SHOULD YOU WASTE MY TIME.
Thank you for your understanding

HEADER:

Return-Path: <notification@security.com>
X-YahooFilteredBulk: 196.200.16.19
Received-SPF: none (domain of security.com does not designate permitted sender hosts)
X-YMailISG: BE35evUWLDtLBivnQgls9qjTzn9WCBnXj0u3iE0u6.Oj3O8A fTMCW_KssRPseNb.LbA7rZuOovQnoQbyYA6wrZGnrsmAIv0FWenZOaATN7g1 bPQP4O3PZKoJT4x6GQRNTCOu9rZXeK5Hu7rBdf8jzAfQ0euy18XR.GUFALEO Nukk8R5bjaUnSjsVS9.GMM5rdLGyI6DVDeoPn1Muw_us9vx_YkwBBjalJWjC lkwPOCTj3lKd5_81pEJvK6hopnyoTGYmisUwhfSBTCY5bDsTWiJhBcCEpZYh fGryqbtuVXtYU07WYQKuOAz0jXDHr6f66aCNW4yNVZFsHtKa3fgAUD_ENvt6 FVoGUsExm95svM5mMlWUf1zQZIHx9BhmmtF0ATvnwhQyolX9mUOwd2eFZgcN 5JsJd3MEOqYWzF91391X2bo7TtJSHqA8L4EVgGivyDOWPOHwc54GgrJIXF_T s6yiw2VL54y_qCLZJ5h735OCAPHxRZsEnKg8IcDP37JAMTWoOiirDgGIZBI4 HneVkFYkK1VegprlX.LOIyqmIc1vqamdjjHSVVWV6jVZMJCm1DGAdphPwlB5 bfJ33PIbumh0X9ZORuOUz8527.PA1EY4mQ1X_OeagE6Zg62v0R7FV6oMnl4R zedcEX4z290Kl8gM4kl5Uf4UuxlkWRaBSTffUCOjT2dF9omrpL1R4xCGhzRh 4VAiZ7lTmCUhyUzcHHs4jw5aNi9EC6eARBu6_JCbF2qYBRQHNm_5polvd.nO SfVp9S9ecD_NawXpKeI1Xd6IlvXxcQ85yalx4agHHb6yPT6jJgY4c3.SFhC8 4IwbpSgwAsneBl5GWpZC9tPGadG7U2k9wDnrWrixfvE3Fzk_2GfDUmf_Fe3v L3cRPZaN.Az7P5jutsV8E1pMIUKR6dS95.Ph1XawaLEb4v_8sUcDJo2_RLig U0GmEp3i1jBCNPTsOHREZYmnzg2oUmUUQQU7PINWarIB9aSVDI2d253KJmaT lZMQbMK5lpCHr24SzrQxsV.JblzTukH_1ZRWtb9r1tP7BchYS9OHrSAgm4eT 5vUS8VpSkLj.UxXCJknhj.bdGydITce3vFRsmX5QNYXw0K6oaRfeyt.h_h8B cidaGa2Et2fXenSCifP61KsXiAHKo2GWlRkUjmBDN3AFJn.QcrYe_yG4pnDp N2zRJZInfokjuJZa5WesPT7N02vb_89ZgOsJ58TAk.4JOVmay2y.jDxB8C1y yJALHYF80fgCLMXh0j_Eb_L3r7859U5zZWRLgBwyLMjNoYe.XmQRWvxpNO41 gWDStKGQATzmEXHH3250JtWwkMy2HasHZBv2b2dhOfPxEorrbLAFF1KnDWE2 yddtrahQkKL8LPOEDaC_bZJvaOAqC6ikZIPMlgo-
X-Originating-IP: [196.200.16.19]
Authentication-Results: mta1128.mail.gq1.yahoo.com from=security.com; domainkeys=neutral (no sig); from=security.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp04.accessekenya.com) (196.200.16.19) by mta1128.mail.gq1.yahoo.com with SMTP; Thu, 04 Oct 2012 21:48:23 -0700
Message-Id: <8d1c36$3nngbt@smtpout.accesskenya.com>
Received: from 41.220.120.236.accesskenya.com (HELO mail.vegpro-group.com) ([41.220.120.236]) by smtpout.accesskenya.com with ESMTP; 05 Oct 2012 07:47:54 +0300
Received: from Editor2.vegpro-group.com (192.168.16.171) by mail.vegpro-group.com (Axigen) with ESMTP id 21620B; Fri, 5 Oct 2012 07:28:17 +0300
Content-Description: Mail message body
To: Recipients <notification@security.com>
From: “Jack Alan Hardy” <notification@security.com>
Date: Fri, 05 Oct 2012 07:47:58 +0300
Reply-To: goldpack66@gmail.com In-Reply-To: <8d1c36$3nngbt@smtpout.accesskenya.com>
X-CTCH-PVer: 0000001
X-CTCH-Spam: Bulk
X-CTCH-VOD: Unknown
X-CTCH-Flags: 0
X-CTCH-RefID: str=0001.0A0B0203.506E6678.0049,ss=3,pt=113349,fgs=0
Subject: FROM JACK VERY IMPORTANT

“Jack Alan Hardy” <notification@security.com> ication@security.com

 

41.220.120.236

 
Leave a comment

Posted by on 12/02/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

Dominic Fred freddominic14@yahoo.com.ph

NIGERIAN SCAM – BUSINESS PROPOSAL – TRANSFERING FUNDS –  FRAUD

Hello my good friend

i,m glad so much for your urgent respond to my email. thank you for your concern  as i told you  in my first proposal that  this transaction is not adventure deal is 100% risk free. you know before contacted you on my first email before i emailed you i had some fasting and prayer before God reviewed you to me and now i choose to work with you as i told you if this work out  both of us are going to benefit from it due to my position as a manager i can not do it by my self that is why i need your assistance. so that after the end of this transaction we all are going  have radiant life trust me . 

  i have already has this sign from God that if i work with you that all will be fine that is why i will do this with you .
so my dear friend  . now since  you have agreed with my  percentage  all will be fine and will shall  smile at the end of this transaction so now  we will go straight  this transaction so before  7 working days all will be done if you can only comply with the bank which i will be here to help to make sure that all is done .
The most important thing  now between me and you  is to work with open mind and with sincerity so that we can build a good family relationship and partnership and everything will be confidential between us. and we must avoid any betrayal after you have  transfer the  money to  your account.
 I will present you to the bank as foreign partner with all needed information’s and you will be in charged to secure the money in your country as the beneficiary once you proceed with the bank for the release of the money.
 
Please send me the following:  
1. Your full name
2. Your house or work address,
3. Your account number
4. Your occupation
5. Your International Passport or any ID Card.  
 
I will send you all information’s, like documents of deposit slip  on your name . so that it will aneble you  to open  communication  with the bank to proceed with them immediately for the money to be  release,
I wait for your reply, May God protect all of us to meet in the nearest future.  Please I will like you to start making plans to come down here so that we can go to the bank together for the claims though the bank is into international directly transfers abroad and they can make transfer to your bank account to your country from what they told me! But I will prefer you to come here and we see face to face and go to the bank together for the release of the money to your bank account and we go to your country together.
I waiting your quick reply
Yours sincerely,
Dr. Dominic Fred

HEADER:

Return-Path: <freddominic14@yahoo.com.ph>
X-YahooFilteredBulk: 106.10.149.37
Received-SPF: none (domain of yahoo.com.ph does not designate permitted sender hosts)
X-YMailISG: Ab5I86MWLDvTJlg44Uqo4Aq.szSd6MVmWU7OLuP2j1ZH11qA rOR5HIw58Lv0GK5JiSfHKBpJ4w.ESS.DnGSEbcIwFXCnhKshFXiLdQm2YCGN Vs0hKQQ9SqyJszCZo0qqTvUj487kH_IB5S_pCfoSK8RwciZ67VYDAjaTr9El .7Yhe0_I15lg2JF9EYpZEkAgr4YqFGafWQi8S5QAe8qu6L.nSiV5UkcMniex vtOnsYkH6.DwvHRkM2ubl9FKqVJeKEoKK0aVEJcWorLVDK3E0XIdE9n_ndf3 woGtRIJ73PpZ_hoFsD.m4QB01QwS.xyDB6BLJl4_FX8RjCyZBUiydfEduzxr PIMRs0nc_FWc_O04vj5eeJLMuh9oNtVBX.Fbe6oYUcnp1CagSaeHNQ4afNjA Odxh8UicOVdqL0Ne01ymevECpyFUaq2.a1sKTSjajvvMhMuODtB_ooDVKRlc v5ageii4Kpr6KWE490bHMJDBuL8BLb3OZ2I3cJ6v1Wb2r4vTDIMOGtT_PUXR ANvwu_b1HWkfVxVP228FeryPTZ3It.H40037wsVb6MzIbfAM2rGzH5PLcMu3 x7RAkHW7CGUCamxrRIwtdl1c.jb3y4U3PN67rup9i65tgXNZQe7QhXp388oF AxyHHGdgA8GvrjrTiSWcN_DSn1.e.FvXT0FdZ9Fvda11nqHZb3VKAtmESV2f WBTR9aorRPSOK8WlpnRWpDsb59.7e8gbRvk4.Q0kHv2Udu4CgYB50xahLKwB La9NY75rVWhsPWHL87f9LuobBIYrhdyJoShzR_kNBQFSBA1Lv0KW9fTFIfBi Xgig1HtaFyXbGVeBfKAfM7HV5r3mAegTZCQGW3C5yNACnEWcIR6cYAqNV0ul 8ZmWkeCddkQ3BYkm0vDNHFnimQdlBXMMtRXxfUKvvc7qlUq1LHmJHubgWcKE mSg59k4VP8UzchP7JVIP6zKCYuQOiqO0Sgk1eiA3PoK9kaO2SsVoGf0MXUkh MoSkpqNQfa2EJd_2_Adl5691.hFJUIW4yOnlch6mxnCwC.0oM0XJsNpSFjcx WzbWA8jyZhLomUV0jFDNE7eK_pnfkWawz6w9DnyJ9spBk5zsxz33OX.NkJFO m5lMHPLnGXcqsrON8WngHR3vabP8mv0LHpLxT9an2a1MoEQqb3qtd3f8iZSF VJqapvXTLdNYb40ALJqvG4.npvm8Dul49E6P3VGUlxRajlc8Occ7CINVXUa8 CdyV3WHut7kRRLauqWzl
X-Originating-IP: [106.10.149.37]
Authentication-Results: mta1270.mail.sk1.yahoo.com from=yahoo.com.ph; domainkeys=pass (ok); from=yahoo.com.ph; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm14-vm6.bullet.mail.sg3.yahoo.com) (106.10.149.37) by mta1270.mail.sk1.yahoo.com with SMTP; Fri, 30 Nov 2012 08:37:51 -0800
Received: from [106.10.166.118] by nm14.bullet.mail.sg3.yahoo.com with NNFMP; 30 Nov 2012 16:37:50 -0000
Received: from [106.10.151.139] by tm7.bullet.mail.sg3.yahoo.com with NNFMP; 30 Nov 2012 16:37:50 -0000
Received: from [127.0.0.1] by omp1007.mail.sg3.yahoo.com with NNFMP; 30 Nov 2012 16:37:50 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 285258.68819.bm@omp1007.mail.sg3.yahoo.com
Received: (qmail 82334 invoked by uid 60001); 30 Nov 2012 16:37:50 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1354293470; bh=nzWKa2zstDM74gu2Ww8TTiT/R0LqKZy0WpGkaK+KWaI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=cb0i7X7KlrLky5v3v+rFTVjgPRvqCe9qCHemdpPjiwQxViIZ1h7FixXVbdpj89PG7My43PjRTK6mYyC6zQyrFbT4v+cYmLh66WmwHl7amSmJSTk5Mgn4HNdNsMN+RbBLRvOlqKxIdBSZbuYmkpjzY8UeviZ8qh/h71XTvhZv6rs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.ph; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=jBXFnvl6cXGOpNwnedAbtcrJUVrOTblvGuHjnjag6O3X7d3oRDMLVHChqmzsY4JdW85sjUnm8a1+9stm4p9uDQ15ZhZRWqsgNYcItMPB2Nn8XS3sPTkuMEuWT2/toB8JiuQOKLqaEvtEk0ubnKDMO8CS9gCSYpscTpAkmW0ln/A=;
X-YMail-OSG: 8tWND54VM1k7Td5Shq_ANoN7fsT23DwY5HGKtyUsnvgzXmT WXkaKSM.x.ZHisCxRHF0vnRFCTdSrisd25SObSYRIBTbiJ6mhN.uly7L2nQb 4zLngdL0tJLdMm3ngqNcocTLGM7k.RF.wv9iGvm6YpmY4eU3j.sQj8pjZuAD ualNE_Reb4UXMWUUUwLUYDBJ_m1sQ4MSTftKQhIak_NJemwQJubE0kTYTpB2 JR_52NceFwS3P4gJ45EG0Jn9MBA0TpzyQ00T.s64hZ.A.xpliYssCzSttbi4 weM0YCRDmH.4Aw4aUZ7g5lqroB3MvgQXkA.r_yjAEkE6mkikkt1CRCOusCwA 01oqAeHU2fmIwpvbszyXFkNWRrU8U_uY6vKwMvICRFoA6eHuh1Lo.FQxXFQi 0YoYm8f4M669EZSwOhZlIqjxXUNLj
Received: from [80.87.92.3] by web193904.mail.sg3.yahoo.com via HTTP; Sat, 01 Dec 2012 00:37:50 SGT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.127.475
Message-ID: <1354293470.81307.YahooMailClassic@web193904.mail.sg3.yahoo.com>
Date: Sat, 1 Dec 2012 00:37:50 +0800 (SGT)
From: freddominic14@yahoo.com.ph
Subject: i wait for your positive reply
To: deleted@yahoo.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”-401664379-214051089-1354293470=:81307″

freddominic14@yahoo.com.ph – freddominic14@yahoo.com.ph

 
 

Tags: , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: