RSS

Tag Archives: Beneficiary Transaction

“Mr.Conor O’Dea, FCA”

WARNING: INHERITANCE SCAM – FRAUD

monkeyscamgif

SUBJECT: Re:SEASON’S GREETINGS-(DID YOU RECEIVE MY EMAIL) ?

EMAIL: Complements of the Season

I have beign trying to reach you for the past few months without success,I
do not know if you received all the emails I sent you in the past months ?
Well I am writing you again now because it is the holliday season and I
believe you will have the time to check your email regularly now. My name
is Conor O’Dea, I am currently the Senior Executive Vice President,
International Banking Butterfield Bank (UK) Limited . Please view the link
below to verify my identity.

http://www.butterfieldgroup.com/About/corporate_governance/mgmt_team/Pages/ConorODea.aspx

I have the opportunity of transferring a substantial amount of money to
you from one of our banks in Europe. The money was deposited in our branch
in United Kingdom a few years back by a wealthy contractor who is now
deceased and fortunately you have the same SURNAME with the
depositor.Considering the fact that the depositor has no traceable
relative who will eventually apply for the claim, I decided to contact you
so that you can apply for claim “WITH MY ASSISTANCE” and take custody of
the funds for our mutual benefit. I will not mention the amount of money
which runs into millions of USDollars presently until we have agreed to
deal. I trust you will understand the need for such precautions.

Please note; in 2001, I succeeded in claiming $32million with the help of
an American, but by the time I went to receive my share of the money from
her 2 days after the money was released into her account, she had changed
her home address and moved out of CALIFORNIA to another state and till
date, I am still searching for her. But because it was a deal and
confidential matter, I could not seek legal action against her or even
inform the authorities. So to ensure that I do not make the same MISTAKE I
made in 2001, I will have to meet with you physically for discussion
before we can proceed with the deal.

I CAN ASSURE YOU THAT MY PROPOSAL IS NOT A HOAX, AS I AM READY TO PROVE MY
IDENTITY TO YOU AND THE REALITY OF THE DEAL WITH VERIFIABLE DOCUMENTS.I AM
SURE OF SUCCESS IN THIS DEAL BECAUSE I HAVE DONE THIS BEFORE. For more
details, here is my direct contact email ID :
conor.odea@ukbutterfieldgroup.com and Call me on my Director Phone number
: +44 7045777868

Thank you in anticipation as I wait to receive your response.

Mr.Conor O’Dea, FCA
Senior Executive Vice President,
International Banking BUTTERFIELD GROUP
Direct Phone : +44 704 5777 868
Direct Email : conor.odea@ukbutterfieldgroup.com

HEADER:

Return-Path: <conorodea_creamsontide@hotmail.com.au>
X-YahooFilteredBulk: 72.3.230.98
Received-SPF: softfail (transitioning domain of hotmail.com.au does not designate 72.3.230.98 as permitted sender)
X-YMailISG: VWfCZooWLDtob_5I7zp.u7JKrasPt6sWIe4W7rBfQ5VjEMGl zVbWn1k6Dej4Yr9vM36uHpWWJQKE8HUZKcYplM5pImARjTdhFkj7gtZgd5Ms uHZXe9xS4PBdI6zrS5d7.VLandDtsQovOxYf.XauaSXfRynmUqODYmjOs1Yv c_3G.ygbLa2clhRoJTpKK81ICqgJxtcDY1eDMITG8w1AqxAQauU5HZ84ZD2w 42Yln7iDMW0t5ItvezGcFxELMjUFZSwGlI1W_ER4unAXaSzPIF96Hf1RR6x6 6_6V0_EsqN9UjXdelpN6.w0kadBov2CjG25dkZUC5EsbClmaRImd3yLrlnMB fzG5EcQlrjdgHAFuXyAMzjzisU6xpxvgd0sRbtIr1fTwWvrUYVkULTg3UkBd AHIEFFXeFsl2tforTZLYlaEpxDHo6g.iUjZzOGo6pH6ELw2lvVCE5wpH21OQ AOk4VF_gBBIJg03rEA9zOFnW4bYJBBMF0CN.jmq2YAm1ktkaMAikVJCghhxM fjauG6C8iB9OPQl1S_bCRS9P3uFl_Rto9Iq5e4v_oqt51K4T89w0Dxyac8Cv KGXUbqsPbO33ZqOuM7b9kLDHhuww2b37qngpWwDmFhkowu9W04TpVmRlJo5M fBI5vL4DtB9XZm5LryRTzqS6REHytBycMgMjhfCckJ4mrDNjUzAFRrSA31sL yT9o58eP8edlGVlTrcZnueQ90cJbb6RSwNiDKLNBqKWYPnAK.oXsnQB89.c3 OSIRGyfiDaT9P19Bwm87VSBkrFPEFmP2Fd_qQRtTcVLEIYdNUNtYYyjWoG3Q tCB2xbTORL4WptfD7RoFLMGp8xb19y3bmd7sVAClvl0aM3IkhHoiIp5pEfA7 lQHSWNVsqpJP58RzbskeM9bQZA.uVm4DvPluFug6lySz6GtFzvH3F2dF.9lM .keQBronlq0v82bd5XSmT3Zou8LobOhTYqxADJmq0CvKQ7J6V9GgMpCuDjOi LPnIVAoloVqtQC8ZDz3XLA93pUWef1wTo2s4nJjGVMPSgvP_maKiVQRenVyk WKPOeX_.hAz.2uCbyzqvKP8FMM_VNB4wdyKiHSR9DLWosps9aeS5_uJRQ8Xy t1oGT49jF8MxNvNjmdmsDFzfeaC9BeH8AysfuZe5N4QV01n4LZvveF9WHyca cEPXaemBUOoasqkvjoMPjV8NDIeAGbrcMk7_2RuC7_ITFBZzDQeaAlZ9i66V 1JuhgivGzqi7tHGsCgLcVIuSCMEzZ23IZifSVG1moA4ALAiKuJQOOxWByqTk pEvUwy6M_pN1A.6X64duMFGb0xjof3W2_EJFSm62.t7AjXwleI_dTMuH6n0E yceXZvRIxNdhVa8qe5gAdnMzQuYQtQod2tPX9z1a8mhqxatXdwTU69kPLxjH Olix1i5miyPTGkcqFrC.5.ML7RfUvaXjOpboSkR9Gaeg2UfSVW4Giw–
X-Originating-IP: [72.3.230.98]
Authentication-Results: mta1073.mail.ne1.yahoo.com from=hotmail.com.au; domainkeys=neutral (no sig); from=hotmail.com.au; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO 86883-web1.www.welist.com) (72.3.230.98) by mta1073.mail.ne1.yahoo.com with SMTP; Sun, 23 Dec 2012 11:53:03 +0000
Received: (qmail 25153 invoked by uid 48); 23 Dec 2012 03:55:13 -0600
Received: from 74.95.184.209 (SquirrelMail authenticated user nathan) by 98.129.39.50 with HTTP; Sun, 23 Dec 2012 03:55:13 -0600 (CST)
Message-ID: <5619.74.95.184.209.1356256513.squirrel@98.129.39.50>
Date: Sun, 23 Dec 2012 03:55:13 -0600 (CST)
Subject: Re:SEASON’S GREETINGS-(DID YOU RECEIVE MY EMAIL) ?
From: “Mr.Conor O’Dea, FCA” <conorodea_creamsontide@hotmail.com.au>
Cc: conor.odea@bankersmail.net
Reply-To: conor.odea@ukbutterfieldgroup.com
User-Agent: SquirrelMail/1.4.8-18.el4

FROM: Mr Conor O’Dea FCA RECEIVED-ADDRESS: conorodea_creamsontide@hotmail.com.au CC-EMAIL: conor.odea@bankersmail.net REPLY-ADDRESS: conor.odea@ukbutterfieldgroup.com RETURN-ADDRESS: conorodea_creamsontide@hotmail.com.au +447045777868

74.95.184.209 98.129.39.50 ORIGINATING-IP: 72.3.230.98

 

Tags: , , , , , , , , , , , , , , , ,

“Nelly.”

INHERITANCE SCAM – BENEFICIAL TRANSACTION – NIGERIAN 419 SCAMMER –

monkeyscamgif

EMAIL: Dear Friend !!!

My name is Nelly, single young girl 26 years from ivory cost willing to relocate to another country. I am writing to seek your co-operation over friendship with transaction, please due welcome me, i am the only daughter of Mr Williams. he died one early morning with my family by rebels in middle of war, he deposited  9.500.000 euro in the bank, when he was alive with my name as the next of kin.

i ran to refuge camp at nearest country Benin, i want the money but bank manager told me to search for a foreign partner that will assist me for the transaction, so if you can help me to transfer it write to me back, i will send my pictures to you latter.

yours truly
Nelly

HEADER:

Return-Path: <nellypiusv_1@yahoo.fr>
X-YahooFilteredBulk: 77.238.189.199
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: 5pmxKd0WLDs.4vaumrFw.TtsgwVZ3OX_8UlpeyA7uU_3P5WN 7pTP0le6ZI8F7IW3lolpQZ0bbVW4Zs0W5uH38xkr5XLMGDG948PMTooHoWE5 2ISberrReRrprxpRc_DMCr6LVOduOHYWoH_E69dA1vlhsXMZsJ6D61URmJyT 42lp77FTIFDFRxqZxFb.ZXmXb81j0NB6AtxNIesjH9gFxuUZSX1Gy.oomZPF MoUWaQd1LcDYxNiswIfhWTLe3LKU7s5JfpBviopsEzDvqxZv3pn462dNPtkH 4u8oWsPpkGEwuJW9a2PDnz4J36nP5AKBsp2BP8K1ewtmNW62CP.6U1gpizvb eJTeIfzXwdJ39tyq2lHhTBnJ1Fyt5ZLvLOMWdW_ps.bavzMqhB.GqPAPD_2f EfDeWR_j0_ZY4mwSp2AYGuhUQ6KQ37JLLjQyVVWNOccwJEzKKDcEweedDIqf M8Tv_u2LWPrugifePZx4kPwjizMH_SZv5bSIEPXtcRLI.PlMXrgh5kYnHYWL N0QZu8S8Pu_jeufGUZhSQfbxoO6JD5y60kMeIostPKzko6VOfpqnnynLCFyb mqhrG8YVtQ7HkXik9mxptVZmav5ByM2.mz7SyNnwCoHrGrMGuvT9jeJFGp37 NAR1x7Fui_65xyza2Kt8ty.g7fKEtakZtk.P34cbjFYQ00cJCXJhICbN8e3t USn9.VOKMrut1W4dYjH3ucnayv6HePBdqJVGdua8HhJY0qdii6GLzm1bxgwI Q61hP.GRrIbS6ft_Zm7s24o2zlWkZqn1WjYCU70dIG0kLGb_.Ywcifhsbmsp ADCm1XIFKyOH4Bdg9gAcLTc23CcvrvWjMSejeAP4kG59q3tRKFd6rS1AXgQP tOUXkkbRTdDszOTp0QwxMZSmpATgkgTJghmlivb2OtX7aFgclh8TFsx9wacV T6IIVyzGTYdsuSLmG8qm6a0wMlm0TG5LYDRPdnOVKJ.4qXtRMSY7ad8rGaXp dR2_Q_ipP2rQOT_RMS0tn7WNLpk5ReC3zDBFKGWfjh.5AFhYmRFEsCc5pgcz zLqyaVxa.kH.2iVRnUkwndG7FQeOfu446OuyxydkcbWhD7rAhGZIeqL9s.az 4LuiX4p9UurcIjQZw0.o..UUyUOer5RQdNoxMWXFTj0HDQo-
X-Originating-IP: [77.238.189.199]
Authentication-Results: mta1270.mail.ac4.yahoo.com from=yahoo.fr; domainkeys=pass (ok); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2-vm0.bullet.mail.ird.yahoo.com) (77.238.189.199) by mta1270.mail.ac4.yahoo.com with SMTP; Wed, 19 Dec 2012 05:27:22 -0800
Received: from [77.238.189.50] by nm2.bullet.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
Received: from [212.82.108.118] by tm3.bullet.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
Received: from [127.0.0.1] by omp1027.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 885882.25238.bm@omp1027.mail.ird.yahoo.com
Received: (qmail 49358 invoked by uid 60001); 19 Dec 2012 13:27:21 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1355923641; bh=3PDBaOP1V6Gti8xQ3yR1RdhGGlQViEZ5YDKefufvyDM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=YrsBDJJLDOUzevE3of8+4NCg0X9gHe3x1Q0ArKvHZV7pziT8wEtzAhqRop0PA51KPKiR2/2dFk6LweYuhHuRg8omTLQy3CC8gZjHZpMdEdQMzmlcLBRtB8DzI6R3VdL26gjvyf33MS67oR4VS3tUKxuPNXx0PbyM/whuIf827jA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=2IWLMy/sqd+BtUpHyrvH3P/JRiLtwghRHQGe+/bhNBwr2OB6Pd8jIJEJhMG1RJ6wI23m9zoOZW64O/ANWXmEznqo3FNM0yhdN140m1pfIVe029JGoIHOkey37p0113e4TV6qelTu3TJbo6jmcP9yutY6upFOzZHEJXRWm3rGxSY=;
X-YMail-OSG: cmUW3GEVM1mtu95g.NGVyWJMIkqYyBGHqx2pYWMYPmzRsRo U5bsqzvSl0kETfOMBTfFNDdMNVfmr_QLwPr4ycmow.82RCDHe_p5IUllcHeQ M4j5XJEEnwbm247GJD5_uHT7lucmoX_iOxiFhIVipaWBpnr6msLKz3.bpaBp CaiCTEZ7Lp3ncbqTXY7kF0wIoYhIvwNhDChDrJ14vN5GZAsa57vItmNdYTYu F5UBTs.2NMTRPRb_Hc_7nejLbsPXh3uNKHCuWTMcs07KofWs7mGXZt9vQQkF qcvCuVdDW4Uoutyk8euthg_CS9OaxudE21Kivp7SYrNYebSGNQELdY07Hrip jM03BN_1PiEjGz8VUBM10n5w2EsKeX87aNQ9K4_AD_Y91_dp_T9I6zO9LR4m DchctjNSVzJ_Zo3PZx0Qi5rK5AyKtr6fIXatAloCPEQVcrPUIlRbhGg–
Received: from [41.216.40.18] by web29802.mail.ird.yahoo.com via HTTP; Wed, 19 Dec 2012 13:27:21 GMT
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.129.483
Message-ID: <1355923641.25598.YahooMailClassic@web29802.mail.ird.yahoo.com>
Date: Wed, 19 Dec 2012 13:27:21 +0000 (GMT)
From: “Nelly.” <nellypiusv_1@yahoo.fr>
Reply-To: nellykr1@yahoo.fr
Subject: waiting your reply

“Nelly.” nellypiusv_1@yahoo.fr REPLY-ADDRESS: nellykr1@yahoo.fr

ORIGINATING-IP: 77.238.189.199 RECEIVED-IP: 41.216.40.18

BELOW IS ADDITIONAL INFORMATION POSTED BY ANOTHER ONLINE USER WHO RECEIVED AN EMAIL FROM THE SAME SCAMMER AS ABOVE.

Nelly Pius <nellypiusv1@yahoo.com> <noahjohn55@yahoo.com>

Dear Beloved Friend!

It is my pleasure to reach you after our unsuccessful attempt on our business transaction. Well, I just want to use this medium to thank you very much for your earlier assistance to help me in receiving the funds, without any positive outcome.

I am happy to inform you that I have succeeded in receiving the funds with the help of a new partner from South Carolina-USA, Mr. Alfredo Gomez Castillo. Everything was perfectly done because we strike a deal with one of the Lady Accountant who works with the Federal Ministry of Finance (FMF), and she rendered a tremendous help to us. My new partner initiated this idea and everything worked out successfully.

In appreciation of your earlier assistance to me in receiving the funds, I have decided to compensate you with the sum of $2.5000.00(two Million five Hundred Thousand United States Dollars) in an ATM VISA CARD, this is from my own share. I did this simply to show appreciation to you for your kind support and assistance even though we could not succeed due to some unforeseen circumstances and reason.

Presently, I am in South Korea for investment project with my own share under the advice of my partner. Meanwhile, I didn’t forget your past efforts and attempts to assist me in transferring these funds despite the fact that we could not succeed. I will be sending you e-mail from time to time to know if you have received your share or not. In the light of the above, you are therefore, to contact my personal assistant Noah John, through this email noahjohn55@yahoo.com and do send him your contact address where you want the ATM VISA CARD to be sent to you.

Contact him through his email below…
Phone: +229 680-96772
E-mail address: ( noahjohn55@yahoo.com )
Contact Person: Noah

Reconfirm to him your personal details as below:

Full Name:
Current home address:
Tel: number:
Country /city
Occupation / age

Please do let me know immediately you receive it so that we can share the joy/happiness together after all the suffering at that time. In the moment, I am very busy here in capital city of South Korea because of the investment projects, which the new partner and I are having at hand.

So feel free to get in touch with my personal assistant Noah so that he will send the ATM VISA CARD to you without any delay.

With My Best Regards,
Mrs. Nelly

IP address: 81.91.229.133
Reverse DNS: [No reverse DNS entry per pri.authdns.ripe.net.]
Reverse DNS authenticity: [Unknown]
ASN: 28683
ASN Name: OPT-NTIC-AS (Office des Postes et telecommunications du Benin)
IP range connectivity: 6
Registrar (per ASN): RIPE
Country (per IP registrar): *E [[RIPE Unlisted]]
Country Currency: Unknown
Country IP Range: 81.0.0.0 to 81.255.255.255
Country fraud profile: Normal
City (per outside source): Cotonou, Atlantique
Country (per outside source): BJ [Benin]
Private (internal) IP? No
IP address registrar: whois.ripe.net
Known Proxy? No
Link for WHOIS: 81.91.229.133

_______________________________________________

BELOW IS A HEADER FROM AN EARLIER EMAIL SENT TO MY SPAM FILTER BY NELLY PIUS

Return-Path:
X-YahooFilteredBulk: 98.138.229.226
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts)
X-YMailISG: FOcNh6QWLDuwokGIamqo2H1mhFgBK__fvBOJZ8GjwILP0jKp H_fXx0rsRIGtWnE8LHiDjqgrUbhVMalmSllTqA0DRUXVL000oPDuFM_4Cvdq BG9I6cTmDOPwt3Rbvyyrw1_.26QSw.velDioRcayZTUc9dtps6B4yu8iQb.X 45quHIwVHMKOZyAuvrZsOde4f9rNUjjA8jehT99P2KYxuszbHy4plZ2JCHhj iC1s4KT_XanfymkXm60urdqtbA3TVX_bkGnktQMQ8hA.KV.ll1KgActsQDPn CT7Whw9F3G0YtO..HY98BjSqfWUqKZ_9O9hoN175bzx.Y6003jsGJgZowQkK DkoWcD2MMet7hoGllu2xaFaCO9F6K6sjGW6RgGbTuBNKodcmZg55dvOsYnAk nl6eg5A3hk2QXz40LgNCiTRNDYXId7UJ7liQp5vfEz4bmRvkbIn_F_Kfe2fb PDqG9HXvy3iWkgsYmNbI0Y.ZFQt8NXdK4qoGihSNJzGAn0oaufWSCAD5nPEG qUAVabftIWrVbIL4h83oo.Axnnhc.gP3Sq4JICZK8R2pTv1uyLgotWgJvqEV lkaRO.4hr5fTMA68AuEBbZZBKuhYZrONNhHOjRDA_0Ub1Qpt4A1N8mvS3EDH OXTxGMfwNHggXYzAgM0efEowxSH.p4KSFlFuB7HalF_uTf4LepMH4Jw4Pepy dIbhOHSt.rWElmpQ3FwQnY9fDEO1fWjdBFb1fd23HFfEEhZ52qAgqSX5dYYj 4vFsP3QgcvjRtphwDJkTsI.k5YFbuEY1o27.qr3.fwQXMDHm1PecFRfcxknH Jl.asZFxcHerjK8aglPDjTm09Ky4HobY_cRHFbwE5N18S8XBiN9KyUjqM8cq 7Vud9U_1F3uyXraJMJvjkyjEzPbxFCjYsHE2q5Gzm3WuiC_GvzJDux0kJDIk 770Sr9EKBwyYKov.lNHPyxTlFcN6RfyaBaPyTPh_kulsWBnKWktZyWm2.So2 su_Sb9DHRVLfhN42iBrx.mBeF.j5_QaHc9JE44XYqT8JtIdYgT_SVNz7EBC2 BI4oHmscMaNsSbRNw3z8YK9PsnVCLOVhJpvvjN5y8T4j9kVUW2NhHD.y6GbY 2w6WzXd15q8JQEc1UvKGxrEBOWvmF8mtoZ4.Kq1hJKG_YWRjbzVTK8i4IVZt Jq9yFcvcvvHtTnv5kMfjdym2iCAoBpeAXzrfjoXkRlaR9YBmt7fNfFWWaw95 EyaipLDjQK4gxYlU82KJMKQ3VO26udNOb4EUtEFbacxgTlNLV2l8uUNqsdJL hjzulYxZXb1uXou1HaGVNzmsWQH8BYmJ1OYxtqVtnwxpijmNxCG6Aeqg6Bxx dfj8ZU4cWpVf
X-Originating-IP: [98.138.229.226]
Authentication-Results: mta1129.mail.gq1.yahoo.com from=yahoo.dk; domainkeys=neutral (no sig); from=yahoo.dk; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO n3-vm2.bullet.mail.ne1.yahoo.com) (98.138.229.226) by mta1129.mail.gq1.yahoo.com with SMTP; Thu, 27 Sep 2012 12:45:09 -0700
Received: from [98.138.226.174] by n3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
Received: from [98.136.168.76] by t3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
Received: from [127.0.0.1] by store166.c107.cal.gq1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
X-yahoo-newman-expires: 1348778706
From: Nelly Pius
Sender: Nelly Pius
Reply-To: Nelly Pius 98.136.168.76 – – 98.138.229.226

pius_nelly@yahoo.dk

 
1 Comment

Posted by on 12/19/2012 in Uncategorized

 

Tags: , , , , , , , , , , , , , , ,

Mary Thomas

INHERITANCE / CHARITY SCAM – NIGERIAN 419 SCAMMER

UPDATED RESPONSE FROM MRS MARY THOMAS WHO WENT ME ANOTHER EMAIL ON FEB. 2, 2013. ALSO, TO SEE OTHER EMAILS FROM MARY THOMAS SENT TO ME IN DECEMBER, CLICK HERE.
I posted the header details to both emails because the scammer is using different email and IP addresses.

No-Scams

FIRST EMAIL: Greetings,

I am Mrs.mary THomas an aging widow suffering from long time illness.
I have some funds I inherited from my late husband, the sum of 5.9 Million us Dollars and I needed a very honest and sincere Individual or cooperate organization that will use the fund for work of humanity,
I found your email address from the Human ressources data base and decided to contact you.
Please if you would be able to use the funds for the work of humanity as i have stated hear To fulfilled my late husband wishes please , kindly reply me back through my private email adress for more explanations

Regards,
Mrs mary Thomas
Private Email Adress ;marythomas000@laposte.net

FIRST EMAIL HEADER:

Return-Path: <uwesuza@yahoo.fr>
X-YahooFilteredBulk: 77.238.189.217
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: SC577cwWLDt8fgUiBGSZs_l1.S6NL16kUKFmPeyCUuwKXDx0 LQpr05r5mnCTnnjpDIMSX.BWZZZTt0srB8sJmP419uubxFQ25OchWDJJFQZY d7Zh44U1xH_aRxB7YgMJfIrwiVerWdo7G8Uq1xhIwYDC4ETjeZ3ntN3sLmW3 h5PMSDsAYV.FBLq2LtnT8fQSQMgWwPUvaVUalTz0MEaMTaS7RWZVx0s7azmI z1xYE81zOpdDybxvOr.CrfRP9H7jSqGXITd1b_iLX5A7H7LzZGm1I3px2WIO ThlEpnNrwIbDyJ6lhrp7Yr6aDpJiP5KZcNQlbJiLmviXc1eY4maqQ4oY5Gpl VMDo3WFCjocsvgoj7.CDzH6AInH5qbQUr9KYTDdZ57DqQnq.1_toF_QZEDXS r8MgUAsGizi_Hud5D_wMeiFg_8mpNQ94BFK7fxK4eAbyoFzyVq6F6NNVQrki SdkL_Ce6ZkKaqB3kPgdyRMGZnrjXZ.2gPbunnMmC6xWzsctPswWvUaHfwhbC hf6cqCpgJ1rElDjRe7c6seP8WZveztghm6nDDegnG25eBxZodBKAn7Y23.lt Aq3iG07HMywpDGyAP_bTDy7I5KeJt3_qBlliRYr1FhGa7nZ2yXG8r_m9KMLO HYFxerJpdGdUgMdy_yNyNh8WGI4__XiKyg0j_D9R3O9A0E1pKCwNFTOg5qvl C0Fuz6ra0.5yMKcaB.QaIhpt3bnhCeNIrA2m1nHf.ZHx1T9PMPToQuT9rb._ 1OxYFPQ4kRsj_b8NXZ7I4XVfRZ3AjZSqr5Ui4RP.D12QCSyhoQcBnyLOWGdh RrSzM6cDpFEw1TpKZrb.2Ml6vpT.lfGTlvK.OG99WskzVyANqIVr1BGBBkrC mlI4NvRJqzbuQ2lKeiV6HwtUcgfjaSZZhBWb_62zyR_Ov7VHiyoYrfzVd.Ba MywUpcSIrqpwAxb1VJF_w3tp1YnAyffA_iHfBYqU_Cmb7VliQiCmiKu7N_6Z xF5vGrJRTWq..bCzKUusy0eG61U7xgudzI13TK7kRaoDe0P3L2NdtB726M4l Rkc8FlhV9wjX_9YDpvz5s2egI_oSXOpsPFw49WxnxYGQfJn3EtCur5HD6EAZ ezYV_o_OvSQU5xgFyeqqDb7YAoLKg0P6qzt5FHFAd7_uFsedXvCRL_Jq7_YV LzHNgYRPiCmFe0XOZPFbkEuZf.0T
X-Originating-IP: [77.238.189.217]
Authentication-Results: mta1367.mail.mud.yahoo.com from=laposte.net; domainkeys=fail (bad syntax); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm18-vm1.bullet.mail.ird.yahoo.com) (77.238.189.217) by mta1367.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 07:08:05 -0800
Received: from [212.82.105.244] by nm18.bullet.mail.ird.yahoo.com with NNFMP; 17 Dec 2012 15:06:11 -0000
Received: from [212.82.108.120] by tm16.bullet.mail.ird.yahoo.com with NNFMP; 17 Dec 2012 15:06:10 -0000
Received: from [127.0.0.1] by omp1029.mail.ird.yahoo.com with NNFMP; 17 Dec 2012 15:06:10 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 949478.22736.bm@omp1029.mail.ird.yahoo.com
Received: (qmail 39973 invoked by uid 60001); 17 Dec 2012 15:05:33 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1355756733; bh=Wi3t1Mw4cOeOZaiIj6FTnhrcSujPfpi9ysov9+EFzTs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=BLIPvWB3XAnlaUImaAfnXQ0/oJbtPqXKF2cE5euMDmSUuQ0slv1y9TBybEaPtwCLYF+HfEV7VOnltCtCIObNOkrCEY8Kn4VYT0NWxIQehmc0eFkln24FzWo9rx+ZVZxhiqrVkyvGfif+kt4hgTc8i2eZmKyNdkoEAM4oxFMqbY4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=1zorBhLHvLc4mQ5UyD2ZtVHpKCALPrGZyLajIV6Xxu50b/RHI2VSZdkPp4f0ijkBpqyQpam78rOajD/p31OqPSrqg/d3lGvrm72YBfy0KmGiszMow2sUaQvZecT+d9o4yh8niJjpjpsQt1tH6t3YcJ1CUlGUXo/T0Llg3dTm1rY=;
X-YMail-OSG: dsy1MXsVM1leax8HSVJp6uDTpPXsP.awPBJ0qZiveJS_e18 uXw25Fdq7hj5WYpU6qbcn
Received: from [41.203.224.254] by web171204.mail.ir2.yahoo.com via HTTP; Mon, 17 Dec 2012 15:05:33 GMT
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355756733.37025.YahooMailClassic@web171204.mail.ir2.yahoo.com>
Date: Mon, 17 Dec 2012 15:05:33 +0000 (GMT)
From: “marythomas000@laposte.net” <marythomas000@laposte.net>
Reply-To: marythomas000@laposte.net
Subject: Hello

FROM: marythomas000@laposte.net <marythomas000@laposte.net> RETURN-ADDRESS: uwesuza@yahoo.fr RETURN_ADDRESS: uwesuza@yahoo.fr ADDRESS GIVEN BY SCAMMER – marythomas000@laposte.net ORIGINATING-IP: 77.238.189.217 RECEIVED-IP: 41.203.224.254 LOCATION: AFRICA marythomas000@laposte.net

_____ _____ _____

UPDATED EMAIL –

Greetings,

I am Mrs.Mary Thomas an aging widow suffering from long time illness.I have some funds I inherited from my late husband, the sum of 5.9 Million us Dollars and I needed a very honest and sincere Individual or cooperate organization that will use the fund for work of humanity, 
I found your email address from the Human ressources data base and decided to contact you. Please if you would be able to use the funds for the work of humanity as i have stated hear To fulfilled my late husband wishes please , kindly reply me back through my private email adress for more explanations

Regards, Mrs.Mary Thomas

Return-Path: <dragonknightuk@yahoo.co.uk>
X-YahooFilteredBulk: 77.238.189.209
Received-SPF: none (domain of yahoo.co.uk does not designate permitted sender hosts)
X-YMailISG: HafQ25cWLDsqSszvRos0oFDBwr4a2tKFqo1Ieo4e9uEs4HpD HLYl95WqTdSC0gSRmyUbpFETm6WC7c4eNb.vr7VyV_vDXF167o2UL1ImhcsK izBrl2O6sIsKwC8eH2.KZUvR5gt2bXHmUk4hKDpiowEkZP1Nm45aGPhuSoaW Cw0FPo2ZsZF087FCUlzwqCOamBQTtxx2KBYAx6SuGlLAgnLTpCC3S2UDQwOT gJyGfQmTndbt3Vo0jIhTJ9NonCzrwA_a4NQNd19octkfjxztZNSksOgDQrmY EaOEkjnLH3OYoyiPBsaaiefg5NS8.I4FQ0vUhF8SJQPsdUIhArVUdl2NGRFj h5HkDh.LlzVJvvmxAABL.kVMzzMP8ac8fmuTA4O3mStFk..00PYtENHOwVMW CRcr.4a8XWnpGZPc1mdtcujhKPPGwC3XlAyZBAMAmDxsfYze7Utoe4..6LZ9 j54GXXDDUqLu2XBfq__KcCeI6n8B5AOv2ored18_9GO9RpTWB2A3vveLjg8B 6w4SnNNxUlL7.WxKtVcsrsaXJc._2EyV1eTetC4WoMt0o9eD2PNclUgNH.Oh su1cSim4_uYld3K1TeW3.qjZPa16774447c0UlXdHAMYPTeVuklfi7ItA461 9VMkjiGsskZasL5D1XcY5NUSnJXzsGqh5Jp5UGpaeP5yXldas2BZj8cfOSlt NHYyFF_D6Grg35viF1RDwRmOk9OXmN991kME5oG8cvW.glBFBRLpzkvwbJ3X hkD4yq8OqPLbm6Oio6F6dWBcWI.PCqdXfBpiHJjp8msF690g_qLvuq0sHrap XbFMmfZ0dKRKi6.9x7YbyLYcb9ne1vn3U9hVonpQxu5AYFtnzrdwQSbLGluF 1BVr_Y2WTyx9thp_5ZPaT9Tg82.Y9RjI0PX85cz6LtJlPPOZ8Id_fonGeulP sbXysc9OjJrTDfM3DlAwTFfHk1tLKrQYOi2EZ4SlIJ63g1uIMAeHUw0bBjYB l.jMIAoPINziPOO8gauHLkn.f7Qq7uuNyRxK2qZzoKJjI6G6APmwwssynZ64 3H0sVgQHPyQT6F9g16ud4wqKhdMudAhsWUNJaHqgsUP9r.0v_AVLbum1SQ–
X-Originating-IP: [77.238.189.209]
Authentication-Results: mta1276.mail.mud.yahoo.com from=laposte.net; domainkeys=fail (bad syntax); from=yahoo.co.uk; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm13-vm1.bullet.mail.ird.yahoo.com) (77.238.189.209) by mta1276.mail.mud.yahoo.com with SMTP; Sat, 02 Feb 2013 06:52:41 -0800
Received: from [77.238.189.55] by nm13.bullet.mail.ird.yahoo.com with NNFMP; 02 Feb 2013 14:52:37 -0000
Received: from [212.82.108.251] by tm8.bullet.mail.ird.yahoo.com with NNFMP; 02 Feb 2013 14:52:37 -0000
Received: from [127.0.0.1] by omp1016.mail.ird.yahoo.com with NNFMP; 02 Feb 2013 14:52:37 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 605740.60374.bm@omp1016.mail.ird.yahoo.com
Received: (qmail 12425 invoked by uid 60001); 2 Feb 2013 14:52:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1359816757; bh=E7QMpM2rn2XQaRvyUiATTtTxqfxfTkH4nuX3bVTWjeI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=OO6e3Ke4SBmcF+lJqNKKa1u8d0zIw1QNIeREdc2hPcB6rGAs6W4rhEkOrF7hq34HQ1FPPLajiBn9mBfzM0w8jpW5twCyberDggoo9rGya3hImikYnP4zO/qer1JakfPNFPr+srYTS+K/KYrO9EPxMe5zjMPpn2qO3VqiJv7oIk8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=SzybGBX2KKs98lY3XdgXVfOEN1mCQXwZnekJJzqCE4aLyDywqYesnTjkmUVlMFyBdSxR6au6X9HGb3lGUV2o1MWz6+suBI6GTAGeRTB/En0p1cLnTv4NkOwi7EE4zWnhq5F6iZ2nNZHzg08sMxEJ8Owb02f1Wq4O1XSbnqcpoxw=;
X-YMail-OSG: z3bBI5QVM1nfBHHYSK_VSbjdLWoHrGZuGD1vKSojvX87NQM 2L_2OTrX6wvqo7Ps21s8sErfnQOLAEdhVuCI10xMpEutdEMP9tV7mh_hFkHv CauvBZHChfYMbpVhK15E0NmqOBallzMw0q35H31lBDoVXBe7IUWy3hhGZqJF 9UbPEbrDWWnykfewjzCYfUPOQXShwUNu5kYuJAn8eACwzB_fbqisa9s1TKl. vqiW5nXqNN3Biktbv.KV62DBVk0s43Ku2ZPGAxn5BWAAJYedL4bWKg9x9oCV Sx_DxmrvdLm5YxghA2MVBL1XJoiMKoyMJ87vmeP6oWKXqBv.HOAvYw1nZXOO B2kenX5jh8gygoqNeN_bs6FKtJV.3YX4bwIyQIaitmNWLlbFx_U7wQK_1I.Y dewSxVsCA_K93NTZgP4_xPPMqzJWaNM_rl8UEq5vUmn2ZCpwYMI1hARjypZ1 EDH7cHQrDsZqYCUuqVjaFFkkxYdsYDy5AWRBUKtM296EbwqSE5adBPW361AY gwkzMiXjNlSmPI.lYJa4vDq_ATKeHaKsyZkaCBrw7D.ddp7qMJjw4RrGh3.W BLPjY1BIcHQFMahkbSxaLjwOPtDj7Tt4q8dli2t0zHBH71ABUuNfY6ZvKu2K 8W9WS9OnDZPWO5OqaxbxVILM-
Received: from [41.203.226.228] by web172006.mail.ir2.yahoo.com via HTTP; Sat, 02 Feb 2013 14:52:37 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.131.499
Message-ID: <1359816757.10339.YahooMailClassic@web172006.mail.ir2.yahoo.com>
From: “mrs.marythomas00@laposte.net” <mrs.marythomas00@laposte.net>
Reply-To: mrs.marythomas00@laposte.net

Mrs. Mary Thomas mrs.marythomas00@laposte.net <mrs.marythomas00@laposte.net> RETURN_PATH: dragonknightuk@yahoo.co.uk IP_USED: 77.238.189.209 RECEIVED_IP: 41.203.226.228 LOCATION: Africa

BELOW IS A LIST OF OTHER EMAIL ADDRESSES, NAMES AND IP’S USED BY SCAMMERS WITH THE SAME RECEIVING IP (41.203.224.254) AS THE ABOVE SCAMMER
Hassan Ali hassan.40ali@gmail.com <> matuskudus@yahoo.com
X-YahooFilteredBulk: 77.238.189.61 <> 65.38.94.59 <<>> 83.133.124.245 <<>> 218.30.22.82 Reply-To: hassanali06@voila.fr Subject: My dear Friend, I am Mr Hassan ali a chartered chief auditor with BANK OF AFRICA of Burkina Faso Ouagadougou West Africa
 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

“Hart”

LOTTERY / INHERITANCE SCAM – NIGERIAN SCAMMER – ADVANCE FEE FRAUD

EMAIL: Attached Information Circular concern your inheritance payment funds from Central Bank of Nigeria. Open the attached message and read carefully by following the instructions

The attached file was titled From CBN.txt

HEADER:

Return-Path: <centralmessage.info@e-mail.ua>
X-YahooFilteredBulk: 98.136.216.183
Received-SPF: none (domain of e-mail.ua does not designate permitted sender hosts)
X-YMailISG: LCUay28WLDsXVnOIpfCgBYTNfUXrE2LzwaL2yegEkWenpW4X SBC_EuDaR.w80oTiRw0ETbWjvP.oR9xLNcD7JUMv_xI1fNeJP8k.KcZ.dqTR __CHSWogq6Y_qJChRBP51wqiJprgGE6Mb26FPmLdxsI19IKF5MhcLCzgz9GZ 3upzi_Ggbhkx_e3AU_ldOE7IjHvUEtfkyyUafscGRUZedVhSP724ErueRN2I 7ApPQGxnfFiOtG.dibMzZJI3Su.kp6G8iOWXb2FGW0vPwm3toR_flnLYadVP nnu6ZkppI8WzKexY6Z5ljQvaC7ibS3tNTjvvgqGeCBLy3ggRYTuqRdNUgv_o u2sVjXiNgoGbtBZPa.5yk3VWGdgVbHDtx1oLpa0Wh9L1tHBn.5s1of3So1ip 5gIjzhWrgo.JckvFtRMuZG26_mlOj4ygNpptgIajS._Lw3klr26swSLCCRri AnVgqAAF5T3Wdj3BVRBG3M96yG_ZlDXb7Jn97xRrReXrvxv7D.tL9vUQ5JcT WffcRC9NOnNc6eDWKlkueUcyGhcpb63wnettpvysZo.99iN2MvMfZBL01NBO atm5VrDsFhdS4cD9ib15fVbBeFxzW9NReDqTzONBUhGxLesQfAA1KOcuXrI2 gC..B0r7T1qgztq0Ju0EeAkkvO2IyRwoukFjWljhIbuGJZqAT0bYhMwX74T6 dKnM_2oeqrmxZBspkNnK4vxHP2XQdyu4kWV8.CoGdS8.VYITfT.USxCmjR9W oEAq5dbf22iPkCLvRMXRl4AeQi_gsL_kCH6CfzyOZMLxZYyFEPr8n.aIYDVW YyJtqybgme9zxTBZ3vhJZA6vJ51x2KHav65hdOU5w.ys0gti7YQ9VUmm0nLc veTHe1RMnICMIFT2sJiTVgeXBAPwxh72ypfOv3S2CbifYFxKoEbwhZ1vWSQq Ou7vnqZUiHMjgjOL2gDZhHThAtEgbhASmRAJV1mcCfD.rA2xUUvAuABp5EhZ KDwQNQOBSSAbb6LMwTdJutCMSX3UV2JGPsTdNxApKbDdElB4X.Dp.ltkOFpW xiwJ9Ca_QYezP9RF.0aZuiwvthXDfB1Z0LE9TSitaiDn8dU4.DK1qReYxkqv Bg2YMCOuvQXMCKn8N4OFQev40jW74tjGkhwxAiJJU88IDDc-
X-Originating-IP: [98.136.216.183]
Authentication-Results: mta1198.mail.gq1.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm29-vm8.bullet.mail.gq1.yahoo.com) (98.136.216.183) by mta1198.mail.gq1.yahoo.com with SMTP; Thu, 11 Oct 2012 10:40:45 -0700
Received: from [98.137.12.56] by nm29.bullet.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
Received: from [208.71.42.194] by tm1.bullet.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
Received: from [127.0.0.1] by smtp205.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
X-Yahoo-Newman-Id: 454267.58831.bm@smtp205.mail.gq1.yahoo.com
Message-ID: <454267.58831.bm@smtp205.mail.gq1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: sOZOVKMVM1mnA9AK4aaLG13dw.2te_jOnoIlkFSo78oTN3g yI.ys52b1V4VsGigPYxlplzI2Rs3TVbBAn.RWDpO0rj1fhfJmsdfaoXQmnis py73qobzWcXu4_GfpxCdEjTRZ6ejB3dbb.R94ACw1ti_ojo8XsTHy.KWnbLX NSdN5e.LRbtRUgaegUmCah5EI0VYpVmWcekFbCGwQGmfWOSGlb04qa7FBlyy XcOh6c5GuIqvhM1wDjDoKUtf7oSMaa6ozaTNU00Z_y8KeSBonZROIe1D10l3 43tNvsoJ7v6A7kguKsNOT3zh_pWXFWPmI8YNiC9jfnlDYqAdt8n38xv84WYB bzPE0uio7lRXj4HPPpWmp11SYYlKHj2SuJ0fTgQHMKkQsZO2Lb0EzjX9xuT1 0aRkaaqfYIKxuquOeXqq8ENytIue2XIpeTeLAf84qlSyv4CMyDIjw02HSUgW 2quxD829qRALehBycbxfAZscfqIKIs.BrdjgD7.bDbpTpU3jrs_hUis45VTc Pua5HfCU-
X-Yahoo-SMTP: zDMiCVOswBDcK9OIGzmdQnoU.CR0Quer1VzIrWkm300MMv4-
Received: from User (centralmessage.info@41.58.12.225 with login) by smtp205.mail.gq1.yahoo.com with SMTP; 11 Oct 2012 10:40:42 -0700 PDT
Reply-To: <drperehartcentralbank.org@e-mail.ua>
From: “Hart” <centralmessage.info@e-mail.ua>
Subject: Open the attached message and read carefully by following the instructions

Hart centralmessage.info@e-mail.ua – REPLY-ADDRESS: drperehartcentralbank.org@e-mail.ua RETURN-PATH:   centralmessage.info@e-mail.ua

RECEIVING IP: 41.58.12.225 ORIGINATING-IP: 98.136.216.183 — 208.71.42.194

BELOW IS ADDITIONAL IP’S AND ADDRESSES USED BY PERE HART

FROM: Dr Pere Hart dr.perehartoffice@gmail.com REPLY-TO: <dr.perehart@yahoo.com.ph> RETURN-PATH: <drperehartoffice@gmail.com>

RECEIVED-IP: 125.88.125.201 ORIGINATING-IP: 77.238.189.207 — 72.51.25.85

CLICK HERE to read a list of emails and headers sent by the same scammer as above. Hart also goes by Pere Hart as well as NNPC and Paul Kunert / Paul Kunet — Etc

 

Tags: , , , , , , , , , , , , , , ,

“raman sule”

INVESTMENT – SCAM – MONEY TRANSACTION – FRAUD –

From Raman Sule.
This sum amount. ($18.4 M.US) deposited in the bank by my late father before his sudden Death by the rebels, I would like you assist me transfer this money into your account as my late father foreign partner & invest wisely by you,

I will compensate with 16% of the total money for your asistance. feel free and send me your details, Full Name, Home Address, direct cell number, Occupation,I will update with more details about this money and all the related document regarding this money,

Awaiting your prompt response,
Raman Sule,

Contact me in this emails (raman2sule@mysinamail.com)for good cooperation in this transaction,

HEADER:

Return-Path: <ramansule121@yahoo.fr>
X-YahooFilteredBulk: 217.117.146.165
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: osgj1wMWLDv4pdBGtCaPCqAQ4VJAmywivJTBQVDnYwEZumIU HwX9Vo5UdrsI9RrLBllB8aal0XLU20U76gRqcBpob1hYz6O09Y8jk.Dy041j s5JHIHb5Tn9zZ3GQKJ0SVDHQIawqwxk3XP6ZrGbVaY3_UboJgY7Vmoc2EVtf Ap_3wNWdrGigZ937OCgXBCIwwyz_rRKeGffpNMRN8a0ovcTk9Ts6w3SrppNN VesGom1orMIrqZ0WRm9zbf5Mu4bM7VKrlayKoumYv3qBrOImmCklHnvewH76 Mf4Sx7rOw5Q5liOlQzy1H64bXJlTOeni8NfVfgzKyoT.h2CJqSUzYMW8ad6n ut.XuMWoDr9EoARmVohQ.iloswCKlSZXZoBjQSXDvp7J4PavU0jb4iUnod1M HvyUDUtQ0Dmn9U0QOqGOXHw8m4QHQ3Q1hEOe22My0G946GZneWvAD5TDq82M 6jSsSb2IcIUXMV32Dc_fWwcclnYjFhTEVp8OKkwXZtvuhBLzIGbyDxzq6fWU ZMaIPafJfsdbHuB9lQnyLUUH5hQz6IFlxpwcWIP64421_RKAFJVpR2cW6YAz LHXSpqByP53.R5Q9Yovfs6XBJAoX6b1HRIZotRIPrS4FJnWpskY6Z1n088vS XHdmhtuIogVSyu5OZVIyqwkoox5gW66BH51jJOxAEklmWY6p94ZZoCVDrLBi 2k0DuhaJdVbHOCv1kxOz4W0XC8lZQdbEyD70LWFVN7VqR_9oqDGr85M_3.LH 35pI7YiNkQ2mI1E4B0o5xLjMv7icR_8RBi1A6pwvi22tiHkhaQP1wAvnakct E2tvs7C18EQ3OK6zotO4cA5l.DGKPHoXwPrCUpLUsY0bG4XCZIwLtYjj35F6 M0cKohDU5cjyJEniABz_eIy0SBRNvl9VMwnmb3i9a7.ul.MT0mljnPysaAkv DOPUv3epgqXsbRgodJw4CP_7Q593dXFqa7_psmwMgqBv_lJ0EzrxVD4R_SdK vmNNuFt0vMB0CgbdvZgFOG754Q5TazpZT2EFEfIZ456eBKItgpQb1RMX07F. zr29mclNx_eB9z5HB092OsF.xBNleRDVaowXpYISiC7qmbB8U2pgM_1.OYL. 9qr2SlH3NKiVyk92zkhODtHdlzhf8krkSFPjWHjchLKz8xzXrQ.C64N.aw26 0ILG7rb1VfLVv0ZBfY1fs6H1CzCp1D90XWYbzJOVEidkLzrBNDVortMztP3y LPQOOlEmyZibw6shIYk3mRdmmH1P1.pkPTy3DLg82B6EjU1dX2cTuizjCvvI nBWJxt29Kg3iaTjWh5HmMBwQJrwKjK.aSjoaByR9tx0LSI3dUwxLbgGltEyn HDDkaEEi6VfV57QnPLU1Mp31bf_BayxyuovC.Kjs0CK07OzNi2mdMVS6w0Kg j8KM9JXCGjgrj86EytgivLz0ULwia5i50c7yl4yEsbzp3CKhbOOkeSdsV96r MfgaZ8Yua2Z7iPif1D344ewKA6W23HOjOtIPZOccZDzfY1VdkgcHBddVNkcr M0Dp7ZCvF7H1YdiVhZCSwmpvJGtIr70T98RKbTshwwKdWJtqSz2PaaBzMVXv 1YBsjdUj_6cd7_gc_KMPsfl7.UKU5iJojASV1GxobVDS6OLeWuQKGsDBlf0S juxkMN0TQFM_YEuC76pSGg9im_xVEjWdZom70mDDxAddbRgd6fnsoOvxLFzp VuVYObvxNzkwxbiCfRNeQhzfEgZGI_nIng69cAooKXgEh2GpBMYT4iEVK.CO Agm7dBgFy2kuLkMBdRtOcWFX.d_5KKe_u4uQyo37gH7eSJ.Z0a9dHQvFYrux mA–
X-Originating-IP: [217.117.146.165]
Authentication-Results: mta1179.mail.bf1.yahoo.com from=yahoo.fr; domainkeys=neutral (no sig); from=yahoo.fr; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bewoopi.com) (217.117.146.165) by mta1179.mail.bf1.yahoo.com with SMTP; Wed, 12 Dec 2012 07:45:04 -0800
Received: from bewoopi.com (ns352848.ovh.net [91.121.87.202]) by bewoopi.com (Postfix) with ESMTP id 97956A00548; Wed, 12 Dec 2012 07:49:46 +0100 (CET)
Date: Wed, 12 Dec 2012 06:49:46 +0000
Message-Id: <MEWOAY$F7D22E9FD849DDA9B9BFEE3282E8DD6C@bewoopi.com>
Subject: From Raman Sule
Content-Transfer-Encoding: quoted-printable
From: “raman sule” <ramansule121@yahoo.fr>
X-XaM3-API-Version: V3(R2)
X-SenderIP: 91.121.87.202

“raman sule” <ramansule121@yahoo.fr>

217.117.146.165 ramansule121@yahoo.fr

 
Leave a comment

Posted by on 12/15/2012 in Other

 

Tags: , , , , , , , , , , , ,

“Morgan Chambers”

INHERITANCE SCAM – NIGERIAN SCAMMER – FRAUD

This fraudster has spammed my spam-box under various names including the latest which was received one day prior to this email from Morgan Chambers .. The names used was: Barrister Mendy Chambers as well as Fred Williams and even Western Union Money Transfer — BEWARE!

EMAIL: Attorney at law, Barrister&Solicitor

Head office: 21rd, g, close, house 18,
Festac town Lagos Nigeria
Private email: morganfirmng@sify.com
Tel:: +234-808-134-8919
 
Attention:
Before I start, I must first apologize for this mail to you. I am aware that this is certainly an unconventional approach to starting a relationship, but as time goes on you will realize the need for my action. My name is Barrister Morgan ibekweoru, a solicitor and the personal attorney to a citizen of your country, who owns a construction company in Nigeria. Here in referred to as my client, on the 26th of December 2004, my client, his wife and their two children were involved in the tsunami Asia disaster. My client and his entire family unfortunately lost their lives in the disaster.
 
Since then I have made several enquiries to your embassy to locate any of my client’s extended relatives, which has proved abortive after these several unsuccessful attempts. my main reason for contacting you is to assist me in repatriating the money and property left behind by my client before they are confiscated or declared unserviceable by the bank where the funds redeposited/lodged particularly, the Gulf Bank of (Nig) Plc.
 
Where the deceased has an account with an approximate sum of eighteen million (US) dollars. The said bank has issued me a final notice to provide the next of kin of my client or they will be left with no other choice than to confiscate his funds, a copy of the said notice i will fax to you on getting your reply.
 
Since I have been unsuccessful in locating my client’s relatives, now I seek your consent to present you as the next of kin of my client to the bank, going by the fact that both of you has the same nationality, so that the said funds as stated above can be paid to you instead of leaving it for Gulf Bank of (Nig) Plc. we can take part of it and leave the rest to charity.
 
I have the necessary legal documents that can be used to back up any claim we may make. All I require is your honest cooperation to enable us see this arrangement through I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law.
 
Please kindly reply through this private email address: morganfirmng@sify.com  Finally kindly give me your confidential Phone/Fax numbers so that I can fax to you all the correspondence between the bank and me.
 
Best Regards,
Barrister Morgan ibekweoru (Esq.)
E-mail: morganfirmng@sify.com

HEADER:

Return-Path: <morganchambers@lawyers.com>
X-YahooFilteredBulk: 66.83.100.155
Received-SPF: none (domain of lawyers.com does not designate permitted sender hosts)
X-YMailISG: S3yK40EWLDtwZuF5d3A5xp1epJHGpDNL0b7HFChDpHgmv6lG C5Hg__sPN6TC2eVVDlIrZXz1J0p9NjdULziQ3vxjuIMK9uFHdhC3OAde78xA u9fyDoOohzpNrWaCchSfnEvkerBsTLZ9RH6BaMJGouoV2JcDYr9HnaVhbRz3 ywt6cjvI7J_kSOtjTrDVwCi8YGm8rvWpbDRfKKQDmFDlf_My7wiYIkml1L3H Et.FMSU2uvE5MHR0yBJ3SD7MKP3zY0BatFG9PN3hbT074KQqfmuWj1qBbq4E _jyOWUAClb1ioZRIyheZuzvOzgxiW97OKNh4B_4bx.oLbcJu4r7engOqfkOD QNJ5LYseJX9EOjC9f3wGoiXkYXw0IKo7Qjc78nmNWxnL7s7TWLw0TNn4cS_r S0AUEtH3XUbz1UIKYjql9PvYgMMNl.kpLzgFz.ooN_vcYLfBbb_jHyFcZix7 ZSJ6W9y.cqgPkH.fJfN9ybooKGyf4aC4cspBfjPg9Ul1XCCJGMvIgHzASmIW Zyis44zEutSIIZlxinm5xoGHDg1_O2c__mJTKMEBTFXMjU2pJBD6kyxScKn1 BAPKSUCdaWMxco8BzsG6IE5yUv85zUCQNzLcj6txEORdiUok5df32wvAQW27 Hboqp71a13EjLU1kDboe5AzLdvmxu5OEBcoXss1OMV8J80NXjqd8u526HbRt 3oZDyfM3.QeqeG6ooCP3ZiZJ_6A7EenZa1E1vdr9NYQMnux3kfcqBIQ_Snaa j5Sb3LcmCjAJ2fmzjXJnm1CMVNUQcDkvSOBGnwxIbdK3HSj5qXkj7VUnL5NZ 22Qf2voC1hCkXjep1ZkGmZsbVql1fqSgiaz0ZRRno.uhZLdqPk3fohftmSQP 2ALaSz_4mzbCyCqhg9iJ_20fDuky6KVRY.J5GZOo6bj3SKE_iDjH3e5z1Mik UYgTWk6XT3Or__pGMYT9lBcw9yrfM.bGe2jPgMyEYOplQuM25gmCH4kb7mQs gvtNmRFhoUSeZKZM0e.EhtqXLvZaR3WXZT1VjAvVfB0f.V2cbk5wro8RkySP zJofu5yd3.cOOL3abG9HFKSA4trOS3VdiXgQxUJ1vhIwDQmVRDziDtVDDTpv zcRyaoZr.Ba.ZCwvpORrfjaaVZAclCxFnflvLNReeLWoT0ZK_4WpT.BgnMdh jqGJcwCYdpb_cOA_h4eF8lrDZccQeOcf1qQMBbbYn_9GroyCl7zDvdiI5g3f ZtKL9U5agCbkwdcW2y9dx7cgb2b_NLyTpKRTTE.11Z7UEf12mRB1QYQFUrKd xeCRhlBauuWqcsg0G8Gfyh8hmvdM_2yvgnilxbq.XM2WFohz5sGZYkmPW_yS TM6nSzc68gGhqNFv6S8O4i1nClXX9L_nd1dtNzuazRz7L0krQC04N1yCkp2a d9HMV63yVL4BUJtUG7M2_AyPSaqz4SH8yFe0c.KB_2cjAbgcT028MkqPYGsC YkzVD6uZm7IlADyrW7vTpqnvNXrtqEojRLmpcg–
X-Originating-IP: [66.83.100.155]
Authentication-Results: mta1240.mail.bf1.yahoo.com from=lawyers.com; domainkeys=neutral (no sig); from=lawyers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO server1.sikesfleet.local) (66.83.100.155) by mta1240.mail.bf1.yahoo.com with SMTP; Thu, 13 Dec 2012 22:10:53 -0800
Received: from User ([66.85.157.126]) by server1.sikesfleet.local with Microsoft SMTPSVC(6.0.3790.4675); Wed, 12 Dec 2012 10:36:33 -0500
Reply-To: <morganchambersn@abv.bg>
From: “Morgan Chambers” <morganchambers@lawyers.com>
Subject: Contact Me.
Date: Wed, 12 Dec 2012 07:35:54 -0800
Content-Type: text/html; charset=”Windows-1251″
Content-Transfer-Encoding: 7bit
Return-Path: morganchambers@lawyers.com
Message-ID: <SERVER1XeQM7gyoPB2E00000703@server1.sikesfleet.local>

FROM: Morgan Chambers morganchambers@lawyers.com REPLY-ADDRESS: <morganchambersn@abv.bg> ADDRESS GIVEN BY SCAMMER – morganfirmng@sify.com

RECEIVED IP: 66.85.157.126 X-YAHOO-FILTER-BULK / ORIGINATING-IP: 66.83.100.155

Scammer’s prepaid fraud phone number – +2348081348919

 
1 Comment

Posted by on 12/14/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

“DR FRANK COLLINS” – DR COLLINS PETER

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: Below will show two email headers sent to two different people (including myself) – It’s the same scammer, same scam as well. The header information is different however so check both for the different IP’s and addresses the scammer is currently using.

UPDATE: Dr Frank Collins is also going by “Dr Collins Peter” and “Collins Peter E” under the email addresses / IP’s – “Collins, Peter E” <collinsp@newtrier.k12.il.us> <info@notice.com>  YAHOO-FILTERBULK: 157.55.116.165 RECEIVED: by 192.168.194.152 — X-ORIGINATING-IP: 41.71.173.93 Also,  Dr Collins Peter web52644778980000x@att.net REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com – Scammers number: +2347030115459 X-YAHOOFILTERBULK: 98.136.218.126 — For more information click: Dr Collins Peter

UPDATE EMAIL FROM DR FRANK COLLINS A.K.A DR COLLINS PETER (I dont even think he realizes who he has emailed because he emails me with different, similar names on a daily basis.)

EMAIL: Attn: ,
This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-703-011-5459

_______________________________________

SUBJECT: PAYMENT VIA ATM CARD.

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $10.M

HEADER:

Return-Path: <webxx120999xxxxxxx@att.net>
X-YahooFilteredBulk: 98.138.91.88
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: FaLTslcWLDv_37lDMJwvUepYgmnqCzD2WWiLYIVYEvzWiVdj yeMdZg1sVqQZNMLZIrI8jrEhVaMXPsJIY6kRf0cbjnqQCPsaLbBdN2aERrfI RwOChZVFmKW9DzDxir.njJLHD.QY8j_y83jLRI4.AuI7k8QKdHjPvXXJYEFV 3YQAPmqS_78yqhLNbejZcKD5irk7feyqBo.GgWWRjUtr0XeJzJNqaql0h8sA e8RvUpWShCVHN2SyD1tuM0Deb4D1Ji8Vbh6LO0l1rw9cI0_sIz.vHpe_EiGP kHJSq4cVZ_zI24xSaJVH2nairx_S7dPagQ15pHcUhTSBMqGEgXXNeB1Y2oeP 3JU6qx6vSLkN2q.zt9EL5Vwas.VQ3VnnTXDqHLBdVcKU94hP0GlXAupk.DHM obtlUYCC1aCFRuuf3fyqc0LusjLnspK7JnjoOa4trRGPkJ_SlfDp0ggLrEaT v9a7lqaWeBT9EICtLA0FkLq3C2n40JFv19b2vJ8kTWkPK9_CQXXHvPmE9PZ3 kFs1luoQlTk_lzaBG6mXtSkUeA_7vvUTiNlT90e4_xcWHLkMi_qHUB6.MOXY KpjgBBptr6h8HH8BTrub.bb.IWuBN9wzFL2saNzKwsyxCm4lKMw9.xwDm5uJ Gq5wsKY8oAk.ZAm83V.RXXdQZhrYHzq2HI4TEsDuXnxCeBPNS3yCscgHGdua .5bviyYzefeg3tnvzHHkzRlzxSKw4QvlmuuqcChqscR9kCPiJLD.cgAs4kGP VstUFHd.bksAH552CD3i0lwkON5VfmeiESgRCGTPFvptnIKly2v3rZiX6esg GPPtVuH2VF9JGdJc2Ymbkp7azmUteBWNDdU3UBhVs441.EpCaWrI_sm_fe57 OiQyUOywnO1yRAtKJ_SFta4rGiPKLZ0KmWOm2iWxo40gyrpOgSF7vvvDlD.8 TTvxrpElU4SLFTn.GO1zFIFIOghPlKF4MTDaE1.cfSBA7OvaqPPhZB7CbD_P PbifHGwGIUcvjwXFo2GX_MJ9efyRaqwJ8RNv5bv_PmOjBSyxnqzPybf5N4_3 8R6NtlZnqM1b4Enrf9rnVdKOJneQ2FJhZVcYPrtDlcrfum9mFoOorxfoQHmz TE17GM57C0B.ILT43WlnmpnQdle96RtuSiqxmvsRzRStRdaGzDZuic8L7wei rjZENREYOwxD5PakTFL_xFmWBDMWOtezwqcs9j2HaBsIHEPGCa_w1BQb4H7T Rhg.rsLZhUpnUmz3kwbcPdV9Pc8UNCPtAWRE0QCMgwjeBn0ZXdINEcVudxSA YTcOMC4k95wVfJ8oF7eiOod5Qae2n5Ov7WwjD_lXqOtSBIc3J87zhs.HmSjX 7WlsWTwwXn.I_l4fa3NQ.mKYBKo-
X-Originating-IP: [98.138.91.88]
Authentication-Results: mta1228.mail.sk1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.88) by mta1228.mail.sk1.yahoo.com with SMTP; Wed, 05 Dec 2012 09:33:37 -0800
Received: from [98.138.226.178] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [98.139.44.92] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 198054.18868.bm@omp1029.access.mail.sp2.yahoo.com
Received: (qmail 22514 invoked by uid 60001); 5 Dec 2012 17:33:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1354728815; bh=2E+CXVEN1MfcfJaq2e/eZV5TviX4n2QY/x1KeAa5kws=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=f9JOS/YO8YXlmc9hJrpoWT06BSgD+eIddQyPZn984pugXI47aiHJ+HigDAW5KKMMOSqrOWONnAJiCoEyKoSjzteAYzjouKnJuSd9FFAPV7YDDY5OHZP5iSipgSUv3aNEhW/Rsnl4Ln0GS2YFkeMhoGRqYTKiUP5YtCqljvaDNow=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TW9B75gLmG8YEH2Fs0wWUR6quUgNgKf4vKcOC0lU58OuZZxvfbAEilc6hFgOyOvoldI//PR2xiJZNGeYJsT5o76o0CJS8W8mbj8ANAI1PafbE8IT034u3iHRas9fZymmyVV0ARoaM4Pmz0UzVZK0Jim/YrB1484O5fKsUOiyGTM=;
X-YMail-OSG: WdGt0KwVM1lOyB0NVRZY5rrxYN4NyBpT08THjv3T0blrAYl g.fSaOnJGDgT6qOWJLehIImpPX16weUxpsraTUfiislliLwCl2K7v8Pp.iJQ a9TSaK3Cg8mAMGQLpgboaXsnY0P.gbcdPD9a2TYU3MLMz9.msdkdNVne7srD CGKrYap1ePNIkrvsumj.6_CYvw30FkImKkDHHf5IXtzUrxF4x8.QVPZL.F5P 1sCi9c6SjI1P.GeZm2DnWTw.VoPokMuHr44zOJyF208V.uJqcKGplN1blft8 NRD73m_UrMPrQXsfdMEk9IKg0jGHRledxyRP7NbPnmUmTJk5sWb6g7mibQcN lZBmrszbkEqY7Gci4Eh5lmEYhM0EH9ITd3rAkZfbRlBlo5s8MbxSVEa73EvH muyMHoTdJMpwvibAS8LsfWhBVw4Fzpyj.JdfnQdukkFQX5QRnWlt3FtcARkq hyy26DJRYTbzGN4Eyk0EL9EDXp1SGqp9Lk4FU_Cz6Hw4qjqgVzWqnIza_ijq nvI9omJY1Dw0WycuWs.OkVnfl
Received: from [108.174.51.231] by web184901.mail.gq1.yahoo.com via HTTP; Wed, 05 Dec 2012 09:33:35 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354728815.12889.YahooMailClassic@web184901.mail.gq1.yahoo.com>
Date: Wed, 5 Dec 2012 09:33:35 -0800 (PST)
From: DR FRANK COLLINS <webxx120999xxxxxxx@att.net>
Reply-To: drfranklcollin@kimo.com
Subject: PAYMENT VIA ATM CARD

FIRST EMAIL – “DR FRANK COLLINS” <webxx120999xxxxxxx@att.net> REPLY-TO: drfranklcollin@kimo.com RETURN-PATH: webxx120999xxxxxxx@att.net

SECOND EMAIL – Dr Collins Peter <webxixxxxx266xxxxx@att.net> REPLY-TO: collinpeterclaim1@yahoo.com RETURN-PATH: webxixxxxx266xxxxx@att.net

BELOW HEADER FROM COLLIN PETER EMAIL:

Return-Path: <webxixxxxx266xxxxx@att.net>
X-YahooFilteredBulk: 98.136.217.214
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 2lU7wkQWLDvBCg5Cg1wZtIwDNUzuGrZVVXK9H6ZxiRnCF9q8 3T_Z2xZXeKmdhjE03ZY1nNRa1P6Zz09tc3Suud6PVBq3vexxPmov8AXjPV9n h21FBi8fEfSTSwVFhhvzk7V6R63Puryrkha1Mb3jaVwNputKdVPkDPhjUMeo RVMMb4_9ds7LkdO1tAhp2nowUz6sKBD4buJmSanxkzHUpRwUVtPLKq8B09eN Rl25hxMaIQHn74TwJlEJoWwVxtvh8Jkr9b8xgoPVsHTD4d3rIEAmrBO8jRyd GelLKjDpe6gEZSWQukIvbii_.zMj02LUFMIXNqSXg2JTLp15U5_jUlo0usw3 1Q9ij8R.SuZ80..F80EMLcQO1SXMjqWDf6xkVHWwRChYckM8P0zLXQwmLzCh cXZIqLnw6xfz6lcwu0_mQkN.aX.hIIycQN9E431bkyzpAK8Sh0ATdnfKruuc hDUY3uEtvred._LLnnYkhYpxqfc_nSy4oYmmhRytYX5eJDo3.jrNS61KZPV6 YQ56CR6JtF_A6Hafi5rSLv5qgM4p8VJZi7448tERIhykcwaijsPjcAOenatn YK3BKAuoLWZ0KHPHNvGKAWVEbv9QWSQF39Q.EEP1LmrPyvSdcGkLUJurop.B aYWv4YFGCdGxSazNRDxvtgoiaK6SIwQ.bpgk7uq2vF3rcb50kF6JNxWrLg.n 7Tth7XBQ.W0dZ6SeRl5BddGt0PedKs6csdJXP3rAEuRx9HhVbiFWVgdNijR3 _dNog5Qebj0UNBN3_ZYEN_KnDptPkNdpsJ8OGplwzrinpWeXcnwHVgAbUTdo 18VmNYVRbtilZoPybybViqmTdRB30nDou7y.RzfJPpp93GHAGPmJapCeotd7 c17h.xTgmXwnesQYx8oH1A8HMZj9YMgj2Hn78UbjDz5iO3dLZZQwGJc37EEe Irpsy5SaXtVD8MbmmPkhMrhk8K30Dviwqq4hDE5WgxBlGVonuDQoGK3aEt2T nvWx.JhFmNOhCyTBWuANJwIBh0YVHlt7UHVip3l.jut4onQ9R4CDyP6sbX2c lfshiCRIJ9lEvHbvGo40N55AdITysTVwpsKYdhO1zKO2KEhE2HbINU3NSVAp mVO8xztcsAawulFbZ5PKA.HviU.utyPlT0yMvzwTHn_QINVPcYodx0NOT_5q eROgjgZ35jOw55jeTpgP2qOvmDNkeadY.RrCfkVM_h_Ewvbns5N8m8wKWn4F 71xz.y4o8QBLLz0jb4jMAFmUekk5PrMNZ0E-
X-Originating-IP: [98.136.217.214]
Authentication-Results: mta1191.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm9.bullet.mail.gq1.yahoo.com) (98.136.217.214) by mta1191.mail.bf1.yahoo.com with SMTP; Fri, 14 Dec 2012 03:36:45 -0800
Received: from [98.137.12.58] by nm19.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [98.139.44.70] by tm3.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [127.0.0.1] by omp1007.access.mail.sp2.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 191480.20265.bm@omp1007.access.mail.sp2.yahoo.com
Received: (qmail 75889 invoked by uid 60001); 14 Dec 2012 11:36:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355485002; bh=2TQXuFSDKzJQh2ItoNfMPDU7xRHv3E+CGrBMw/1Ns0g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=MdiZ1jC0egJ3jeK8x+wAmlqoZyMp98AiD2wzzG+et6zE3r4jYBfuYUoMttuA+gtIjRNvWXQLaTtg0u215rggtB9Wpx8OQWJMI3iQKHU+C0WdAONnnis/01rbGL8rLVp8QUEopIB3M6ep93e/l0o2GTcA+2tm8NmXdnIzOrTvHgs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tLrXvMlZ1AfWS1oRs/q6h6HUMYi/LUcbnjbU0+wRSPWQr/1rUxJ+mPFD5IS+2J+xhqTW8fnpv0P89+O46Kg0ZaIi52L7OqBpBWUtxGIOrGGuRKY65NxHoyuM/9fcPmg6OxN2t9IVr/IQmo5FIYMQAlTgtLYGxzIx8tus9kjh4UE=;
X-YMail-OSG: 3ICaliMVM1ngoXiqNpguRRh2iYwL78sXplySeVxex0hGQX. 9amYG0XA4OBV26LpGFUMshO4W2d_k7Z_a2Ijy9UC4MhQCts27.mEJf9MSo4o gLC1yrqEZW2qVfkENJcHqLvP6x22811UE_jYQp539eFIcLW5RWUDAU4t9CGn OdkUZ.I3db4Y0_pc3qHbfrO34x9zDWKUFRwLqnQ.wNCnHD8dS3WSTofCFWm8 DRISKdISfGE2ytoF4IzvXsFuyje2c_qd6tqdnmTw5Z9mBhssXb94A4biy5CF qnxB_1TEOjTWqKHDrBY4BU1EdgOFfYQNqvwQ4XtGhinDlu0jMGic.YAmQBDt z00_WMAOIdc6llHVKxJwh0yh_xgWL5D6rgLOTnmN2Mo2vI.t3Ls.zQwRBRhe SaGInzRlMMto6OJd7AVEbCSpnmZYicQHhMCbjMxGPX2KPd4Tv0fL_cU_plDm egb7i9XYQocNBXLDzdzIfmk9Um9FTZk5b6spv87aUQEG.1MjrCbB7UdYQ0uO JpvS8DhYL5XyxrsNNIFxmRpV2b8I07Jm9LTn8wKS_hqGegIf5feMr.9cGJzH 7hgKyGs0sihPG_k5JCSaI1yCjgZYK79b_xhXuvMQeLOYyQDygzxrr8813RrH cC8L9RfM7BsB3QMN75qyv.pCG1ZbybDazG.TyLuGLgdSNZ6KwYSh_mQ–
Received: from [172.162.63.104] by web185004.mail.gq1.yahoo.com via HTTP; Fri, 14 Dec 2012 03:36:42 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355485002.70723.YahooMailClassic@web185004.mail.gq1.yahoo.com>
Date: Fri, 14 Dec 2012 03:36:42 -0800 (PST)
From: Dr Collins Peter <webxixxxxx266xxxxx@att.net>
Reply-To: collinpeterclaim1@yahoo.com
Subject: ATTN:BENEFICIARY

108.174.51.231 << 98.138.91.88 <<

________________________________________

Click SCAMWARNERS for email to below header which was sent by the same scammer as above.

Return-Path: <web1xxxxx12000bvvv@att.net>
Received: from nm12-vm4.bullet.mail.gq1.yahoo.com (nm12-vm4.bullet.mail.gq1.yahoo.com [98.136.218.191])
(8.14.4/8.14.4) with ESMTP id qBAFqXcC024177
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from web1xxxxx12000bvvv@att.net)
Received: from [98.137.12.190] by nm12.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [98.139.44.75] by tm11.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [127.0.0.1] by omp1012.access.mail.sp2.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 169461.26588.bm@omp1012.access.mail.sp2.yahoo.com
Received: (qmail 11627 invoked by uid 60001); 10 Dec 2012 15:52:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355154752; bh=6IEXAnuDHUzPM2GG6BZxFSMMGXUzzTJH/x0iCKn3gNM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ZNpQDXqA6YKLygx/Mgp0kaQY3hShe48iYfThTEb8Iru1MOJkFmAxYG7WRpbG0vEzb8sVOXBWUD70FlpkHY32sc3lcnQRUH9EWyjF33/6bxeK6Wl/Hf7syjgMKen3IrPrVrQM7QP70aIkEYevI/L1VoeaKi0X05zrl/mkFKlZJB8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=C3u05KWRUG4yec6yjYc58jVUZqKqPra/xpCRYFkhi2pi73G7p5xYJt3avwhjC1pd5gHT2g6XMST7DkGiaRchRZYYa/jODcoZt4R+AhzCt86vNfdJ8r54ZScNvyU4Y+I8mpF49mKbuYWh9Qw+6o/yW3f8qclaMsyNAu3ATH2SDAs=;
X-YMail-OSG: p5tUyUsVM1nSNbno0XpFEzLZade1sG0k1LIN6NkNDDbP4ts
LfsdXeXxUn6OgEkvAzJFUKDvuIBVeFzZtgkksCNzN7YM7NYxZZELCIFArcbu
_mj1sx3mmaRRFlhLnDPO0Ud9acKn6RdXUuy0Z2D2THjsSnJnY9sU7qqlRMsY
RFxlusC6GZdc5g0kSlEJ9Q6m1NFt621vubnU3dlWx9BHYYswZA3GlYEoIQOZ
znu.EmXiL_e6NkgO6Xi3U8TlgxDHH.J2V.gjmQeJjgeleOz.cmjSiQf65.01
pFSPJQ.uJV2ZQQDmhoA_f4DIGHOLzIEM54oMAKodxlcGehFjRCB.Otx7qJ99
LLzSejt_DN_c3T7KOCmzn30gBLvM4NW04V6Q7K4N69QA7XOIUNPQflttOcPQ
QUh_J5vkppPwzXQ7X5ZwbRUsdfsHhuaz1XhXMvrY6vOWGj_WLL3kyxKoNNTD
o2PEbuViIVuMH9ocliCObq_Z7Olxp0coTXqA6vhkTd_030aE_Rclf5k8sFU.
neOYXj1nWJo0ZcsSoOLW7
Received: from [64.72.78.27] by web181404.mail.ne1.yahoo.com via HTTP; Mon, 10 Dec 2012 07:52:32 PST
X-Rocket-MIMEInfo: 001.001,DQoNClJlY29uZmlybSB5b3VyIEFkZHJlc3MsbW9iaWxlIGZvciBkZWxpdmVyeSBvZiB5b3VyIEFUTSBjYXJkICQxMC5NATABAQEB
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355154752.62957.YahooMailClassic@web181404.mail.ne1.yahoo.com>
Date: Mon, 10 Dec 2012 07:52:32 -0800 (PST)
From: DR FRANK COLLINS <web1xxxxx12000bvvv@att.net>
Reply-To: dcollins@kimo.com
Subject: PAYMENT VIA ATM CARD.

 
1 Comment

Posted by on 12/11/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: