RSS

Tag Archives: Benin

“Mrs. Suzan Chapman”

RECOVERY (LOTTERY) SCAM – NIGERIAN 419 SCAMMER

NOTE: I’ve never been scammed by anyone but get alot of ‘recovery’ scam emails and because scammers are very unorganized, it’s possible I slipped on the ”suckers list” lol.. Oh well, the more emails the better because then that means I can post them on here and possibly save a (potential) victim.

Below are two emails sent by the same scammer under a different name, email-address and IP location. ( Suzan Chapman sends out scam mail under Williams Johnson & Ruben Maxwell )

Hello My Dear
I am Mrs. Suzan Chapman; I am a US citizen, 48 years Old. My residential address is as follows P.O. Box 1920 Hazelton Drive Germantown, Tennessee 38138, United States, am thinking of moving since I am now wealthy. I am one of those that took part in the Compensation in Benin Republic many years ago and they refused to pay me, I had paid over $99,000, while in the United State, trying to get my payment all to no avail.

So I decided to travel down to West Africa precisely Benin Republic with all my compensation documents, and I was directed to meet Barr. Ruben Maxwell, who is the member of OUTSTANDING PAYMENT AWARD COMMITTEE and a Human Rights Activist (Lawyer), and I contacted him and he explained everything to me. He said whoever is contacting us through emails are Bogus (Fake).

He took me to the paying bank for the claim of my Compensation payment. Right now I am the happiest woman on earth because I have received my compensation funds amount of $1,5,000,000.00. Moreover, Mr. Williams Johnson, showed me the full information of those that won lottery, and those whose inheritance had not been paid and the list of all outstanding contractor that were owed that are yet to receive their payments and I saw your information’s as one of the scam victims, that is why I decided to email you to stop dealing with those people, they are not with your fund, they are only making money out of you. I will advise you to contact Mr. Ruben Maxwell directly on this information below.

Name: Mr. Ruben Maxwell (Barrister)
Email’s: (ruben.maxwell@ymail.com) (rubenmaxwell@globomail.com)
Phone: +229 94 99 53 77

You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing.
The only money I paid after I met Dr. Thomas Boni Yayi was just $280 for the paper works, take note of that.

Thank You and Be Blessed.
Mrs. Suzan Chapman.
P.O. Box 1920 Hazelton Drive Germantown, Tennessee 38138 USA. Add me on your YM mrssuzanjohnson@kimo.com

HEADER:

Return-Path: <officefilee@yandex.kz>
X-YahooFilteredBulk: 1.235.121.101
Received-SPF: softfail (transitioning domain of yandex.kz does not designate 1.235.121.101 as permitted sender)
X-YMailISG: dDycFlwWLDuyVY7iGmbjhHLp63OyDyVfDBlkWhu.O8tDMNe8 .KZdKCQyBsBR3UVDRBm3mEBWxOY_W.pr1wP_2PpoKNSTQc6JYyYaxT9R.wo. pKhHHHTKbg8VL7n89IabyGdU14jxsyXQm_WCEdkiGXxhoi723kfHIhqGErmu C1wEl_0NFP5G117BvHIT1hjWC8nAUDC.Ss49pIWmuGy5Lt2wyd2VTw_riam6 qx0Cu_Ip.kxhtpTztlr3V6SUoy8pcLnXb1YqadcFCZ4DjoovqQAc2py2yv0C PqmaNnj_it4cm8o6zDrC2oZUHqMRCGH1QzTsS2YpK7g2tIJCJ5XGwZrQPjis 9bndf9IOky9SDCCjEhTeIwFHAhFH9ZZNPbI5q7YRnewPj_wNghTYvrhZK8Rq simwKqvZpy7DG65Zrm_m08LyQHk_eaTEjM_0YbPb5QfHDWWSzJEhTkI1nhuH 8tUDZ4K10zrgl.haug02JN3yQrRN08twJySYdR5b88Uc.MhFPnDiijveZWYO 30C2ldqANVmu.PHHqcF_1nsCQDkEtGm90jeuawzh43jWt_2iqmFZ_eDZeV4O mo0cKxhRB8BZO6d9ehNvkv5zZ35mFDOHNjYPRWWBPjZbTLBuhKYN421F4KJV DKZ2GriawmFqfiBj7v.ao4ZBHiDJNv.9s38pItexc24reUEdozNn3_xz0gmf 0Ks_WhC1qDL4AK4atiNFrbUVzr.FAR0texoUgEl4SxIoPvf7OqciGLhxfpcT ZMHyiD8BE6WD8gRzl9hy1gPGDnBU6V9bzIKmMnU7RZr7o.9pQpzPUKdfhU2S ET2vZYAGHgwh6137UvE.8ZrhFnzxviczTqRxxm7gnGedWa8_d4FtfNwV_B4Q bYmN0yXkeTEVRpTaYccqMWvKTjhYnlDhLaCDGqUIHoEujwkCScLPvVYJ65xs Pfn4NY3lA1sX3ibAkOA6HTJM091ZHWFmrFTjdVT7kOD4rOLM55xWGOkJh2vu NwW3mHj5147dKNNgGGOPCDKsK7udJ6A6fmSdzTTuTvH3eo4HaI30jwzr3SpS pm7380yEfjnaablGbS.6_y9_3pzS0G0gB._FWfCkALDPXyDfOJJJkTTG3sbR 45KKjw6vHRk4sXYWQjrpXwr_Y99c7Sc6x488YUE30psfWBYx4V3ArdJVgwLG bTTZE55Z2vS9g67xRo7AiXCxnjnhyAidwlyrMO5llsg8INgBHAMBzOiCYe26 uUsScAguvqr2epPVCH1dSAuLymdxChsKMqeKo0.n6BxNgzy6WXRlVqWo8z1I GBUsPRJOQEtaBR9LZpfAnAuf_8mH4GDqMySGKRAfltcAd4ZlFxx.hvmrOpUp IlJojtl2UhEm8kbQ_LtbXXOBo1fkuLw-
X-Originating-IP: [1.235.121.101]
Authentication-Results: mta1215.mail.bf1.yahoo.com from=yandex.kz; domainkeys=neutral (no sig); from=yandex.kz; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO localhost.localdomain) (1.235.121.101) by mta1215.mail.bf1.yahoo.com with SMTP; Fri, 12 Oct 2012 22:32:41 -0700
Received: from User (69-2-73-170.static.networktel.net [69.2.73.170]) (authenticated bits=0) by localhost.localdomain (8.13.8/8.13.8) with ESMTP id q9D5Lnlc022212; Sat, 13 Oct 2012 14:21:51 +0900
Message-Id: <201210130521.q9D5Lnlc022212@localhost.localdomain>
Reply-To: <ruben.maxwell@ymail.com>
From: “Mrs. Suzan Chapman”<officefilee@yandex.kz>
Subject: I am Mrs. Suzan Chapman

“Mrs. Suzan Chapman” <officefilee@yandex.kz>  mrssuzanjohnson@kimo.com   ruben.maxwell@ymail.com  rubenmaxwell@globomail.com
Mrs. Suzan Chapman officefilee@yandex.kz +22994995377
+229-94995377 – 1.235.121.101 – 69.2.73.170 –
Ruben Maxwell ruben.maxwell@ymail.com RECEIVED-IP: 41.138.90.38 ORIGINATING-IP: 98.139.212.188

______________________________________

BELOW IS AN UPDATED EMAIL SENT YESTERDAY (CHRISTMAS EVE, 2012) — SUZAN IS NOW PRETENDING TO BE RUBEN MAXWELL — 

SUBJECT: forward us your full information okay

EMAIL: Hello, forward us your full information okay

HEADER:

Return-Path: <ruben.maxwell@ymail.com>
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts) IG9rYXkgSGVsbCBNcnMuIENoYXBtYW4gaXMgdGhpcyBlbWFpbCBhY2NvdW50 IHN0aWxsIGluIG9yZGVyPyBQbGVhc2UgZ2V0IGJhY2sgdG8gbWUuIFRoYW5r IHlvdS4gLS0tIE9uIFNhdCwgMTAvMTMvMTIsIE1ycy4gU3V6YW4gQ2hhcG1h biA8b2ZmaWNlZmlsZWVAeWFuZGV4Lmt6PiB3cm90ZTogRnJvbTogTXJzLiBT dXphbiBDaGFwbWFuIDxvZmZpY2VmaWxlZUB5YW5kZXgua3o.IAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: 22Z_9qwWLDsY6dOxAcdBWiirU.HBD0chVME2CmG76KkKnVmX DTsbTWTWMU.wSMcs02UEJ26Ng27cLJWJFdyEH7WFV6ST0ZZc6uPXnnre2Jq_ Z45CVIHIEp1a5sUP92F7GeCVqnJFJpFg2tu3se4EY61shx2dl4I0LI8s_W97 CvPMsbClpd3SqC2NJXabPjCerJN5lIbbSsbZVmNl3cOR8ginxqb18O8M8Nny aqWmiO1hHohFC9TqQAR0LE_s0TvDyLSQFK9S09T7l._iKRPJNsMFGdFFr_cG f0y4wIZoiGLXFCsd3_uFqHnTJ.xcVrC5KHqJmTZz2maAzWv3E26eM97eVJhD 3ZKU5sB2iPzv989D5rBw0JQMZicbAXsr6WZH_HsyN8N_GB6D92iajLh7YsIz p_uQBuZHmtCV7M4zoUWJg.bUdz_c5Cvps_Qfz_tTgfxdonCltVPa_aYCI6po 4U71OPJT45TI_mYmdvJ55EmVYMZAtEzEAOW3AUo4MhSQKrrppoUN4PPx7v45 A_SW_V7edo4ktDgKZ.LQpRsrtYlp2GJGMaeLtSLJnh8KeZNfoZd5YQRNItz. wFm_E3hdjJyPAPD29zwNbyM7txX_gkncMbcPe4x2MYRYJ5V.4dB_dh8z_9kT m0tV.ROg.v0LR8tMPDreBuJs0SrVfHyGWcap7bccqH.BMvAC4iu5QkIwoEVs V42zjW7rZdqwnV8TZB2wjkP4grYULIjys1Pn8SFWCXnds1fwbbOxIHDxNuCA lEqL0d4aWu2maqCE5.yAoiuyz5l7McmLVmHnYyRavDp9XXmWKefzRdlKyzzg CNvkchxgwmdRXkQUFYeuV4yJsmTUUG6j_iOuZx.Wiy2eh0N9.Xo9ACXiAa4P FibrDI6GfuDiH1nyUMSk3px3sdr0GWZEhm_qqq..c1jOEYGeTMQ71URwh0i1 FgZB6HLhJM5bBWRNHcFiZ.wpvnQukj1nYtdxhgLPeDLLBZ9WcnVzz44HQ5rs Byq43NR9_j.m19pa5eiTVvULqiHqXszT4H1Vp7vOG2pt9V.u7YkI1xhcY8YM 0BOLmQapn0GHg8DrvzkCIQ9VBpKtwu4GvklsoElZqcu.PeAJxGObA5HeZwul z89GNE.CuxN1Y1Gg5J_yQ4X1InWqvMZcfv5YTg0c2Qi4E40Fkwm6pbuffqps Pru89Q_j6rIi9ePVlNJmSFdUqHdAI71RuAjC.hcBryDfYyN60DISieJFtcdx o7MDfQuzM338IXGUYzq5Gp5jaZaNQouOuAkqKhOOGVz4u0lhbwhFIKUatRsn 7g_UAvrzOsnTW7xNuGSb0ihq5N_Q4OOZPhyePRhwZthrg7qGxMISOLHnKd63 LEtLmyU1o_Qe3EqrAqYyRK2toRTT_w2N.MPzeZUK4JAqVrKhGlGPPwqmJsSe wuHl5HIkDe7wYsh4OZo9xHAasS.3_fipRr2n_1eX
X-Originating-IP: [98.139.212.188]
Authentication-Results: mta1020.mail.ne1.yahoo.com from=ymail.com; domainkeys=pass (ok); from=ymail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm29.bullet.mail.bf1.yahoo.com) (98.139.212.188) by mta1020.mail.ne1.yahoo.com with SMTP; Mon, 24 Dec 2012 09:40:59 +0000
Received: from [98.139.215.141] by nm29.bullet.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
Received: from [98.139.212.237] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
Received: from [127.0.0.1] by omp1046.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 216004.90175.bm@omp1046.mail.bf1.yahoo.com
Received: (qmail 46683 invoked by uid 60001); 24 Dec 2012 09:40:59 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ymail.com; s=s1024; t=1356342059; bh=lUv5r9kJp9yZzRpM4GROp5bn+gKsvtE9FduO0AEBgyk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=m3GdCZCLmhxjaA6YFaKQJU4PQoEGQ6FC+JnukCXQqvx4eBOMHfwgLrA7BvAkHqu2oBrbvTUcsFMrOmxTxEMed3VBSdtnlTSoqyLmgBztakNEH6kLqsWfASfCCGB7JQ3z5n3vrUr0SvqnSa5qUL2vRYraGWQa0WuLa0k2Z/7tG04=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=ymail.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=IntzzZSK+/bm4sc+SMkbYGpAutn2Gk82SPjwF3pNjFpdzjvvyIWLiro73WdvajESwH8vZdtjIrW6iJbGuN8RLbi/GyArM9lQnGMVS4pcCpO8pRx7YLqWWEHdm18Aq0On6ojBqb4t2L83VjtV2UscTa3iWBExbfdtCf+z7kiTd/4=;
X-YMail-OSG: lNvx.3AVM1n2Fq76qv_FwECW8MNzlRB_LiglR.6ta9dnFty Z0zJ_K2SxMrm9vGID55ARBd4aNIEwFDXueDVWjESCOG_g3f6YVTtpyL0n5CN WU2W6dZppKirH4yJyOYPnAk5cHwkuGdzGpy_FYExHQh1nGyikbUWvFribOxm 6ls7wGoYb.1JEPohoQ_Slmz9drjFCVciWuq25x_oWa843XANsNGyF6tCAGed h7QgYlgOi7DV35BKoGP5DnrL1UhL6w3AJS7ZqG2NuXoH2flTKH8uCgi3gYET PZzp_cXB7nSH3vGoQxHhscj9jWfvZM8Ca8AGpa9PmKmtcJ3GV.l3EELLvlIO kDuUqZn2XcWpkImKqFSk_em00J5oounzJR9Mm1feeZx0SK9HGJYy1G16MKvN wHo5Umb9.xLy1Z9y3twv1RQwdDj_ha.vPND0DatGu_o4HN9ABudbpWWQGPc5 L_Wz2HOU5YrD8e1zVWZZep7GbOBB5oFIuxQ7I0um0tOvwhvs6vBr50XI-
Received: from [41.138.90.38] by web161203.mail.bf1.yahoo.com via HTTP; Mon, 24 Dec 2012 01:40:58 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356342058.37287.YahooMailClassic@web161203.mail.bf1.yahoo.com>
Date: Mon, 24 Dec 2012 01:40:58 -0800 (PST)
From: Ruben Maxwell <ruben.maxwell@ymail.com>
Subject: forward us your full information okay
Content-Type: multipart/alternative; boundary=”-852950040-498957605-1356342058=:37287″

Advertisements
 
Leave a comment

Posted by on 12/21/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“Nelly.”

INHERITANCE SCAM – BENEFICIAL TRANSACTION – NIGERIAN 419 SCAMMER –

monkeyscamgif

EMAIL: Dear Friend !!!

My name is Nelly, single young girl 26 years from ivory cost willing to relocate to another country. I am writing to seek your co-operation over friendship with transaction, please due welcome me, i am the only daughter of Mr Williams. he died one early morning with my family by rebels in middle of war, he deposited  9.500.000 euro in the bank, when he was alive with my name as the next of kin.

i ran to refuge camp at nearest country Benin, i want the money but bank manager told me to search for a foreign partner that will assist me for the transaction, so if you can help me to transfer it write to me back, i will send my pictures to you latter.

yours truly
Nelly

HEADER:

Return-Path: <nellypiusv_1@yahoo.fr>
X-YahooFilteredBulk: 77.238.189.199
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: 5pmxKd0WLDs.4vaumrFw.TtsgwVZ3OX_8UlpeyA7uU_3P5WN 7pTP0le6ZI8F7IW3lolpQZ0bbVW4Zs0W5uH38xkr5XLMGDG948PMTooHoWE5 2ISberrReRrprxpRc_DMCr6LVOduOHYWoH_E69dA1vlhsXMZsJ6D61URmJyT 42lp77FTIFDFRxqZxFb.ZXmXb81j0NB6AtxNIesjH9gFxuUZSX1Gy.oomZPF MoUWaQd1LcDYxNiswIfhWTLe3LKU7s5JfpBviopsEzDvqxZv3pn462dNPtkH 4u8oWsPpkGEwuJW9a2PDnz4J36nP5AKBsp2BP8K1ewtmNW62CP.6U1gpizvb eJTeIfzXwdJ39tyq2lHhTBnJ1Fyt5ZLvLOMWdW_ps.bavzMqhB.GqPAPD_2f EfDeWR_j0_ZY4mwSp2AYGuhUQ6KQ37JLLjQyVVWNOccwJEzKKDcEweedDIqf M8Tv_u2LWPrugifePZx4kPwjizMH_SZv5bSIEPXtcRLI.PlMXrgh5kYnHYWL N0QZu8S8Pu_jeufGUZhSQfbxoO6JD5y60kMeIostPKzko6VOfpqnnynLCFyb mqhrG8YVtQ7HkXik9mxptVZmav5ByM2.mz7SyNnwCoHrGrMGuvT9jeJFGp37 NAR1x7Fui_65xyza2Kt8ty.g7fKEtakZtk.P34cbjFYQ00cJCXJhICbN8e3t USn9.VOKMrut1W4dYjH3ucnayv6HePBdqJVGdua8HhJY0qdii6GLzm1bxgwI Q61hP.GRrIbS6ft_Zm7s24o2zlWkZqn1WjYCU70dIG0kLGb_.Ywcifhsbmsp ADCm1XIFKyOH4Bdg9gAcLTc23CcvrvWjMSejeAP4kG59q3tRKFd6rS1AXgQP tOUXkkbRTdDszOTp0QwxMZSmpATgkgTJghmlivb2OtX7aFgclh8TFsx9wacV T6IIVyzGTYdsuSLmG8qm6a0wMlm0TG5LYDRPdnOVKJ.4qXtRMSY7ad8rGaXp dR2_Q_ipP2rQOT_RMS0tn7WNLpk5ReC3zDBFKGWfjh.5AFhYmRFEsCc5pgcz zLqyaVxa.kH.2iVRnUkwndG7FQeOfu446OuyxydkcbWhD7rAhGZIeqL9s.az 4LuiX4p9UurcIjQZw0.o..UUyUOer5RQdNoxMWXFTj0HDQo-
X-Originating-IP: [77.238.189.199]
Authentication-Results: mta1270.mail.ac4.yahoo.com from=yahoo.fr; domainkeys=pass (ok); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2-vm0.bullet.mail.ird.yahoo.com) (77.238.189.199) by mta1270.mail.ac4.yahoo.com with SMTP; Wed, 19 Dec 2012 05:27:22 -0800
Received: from [77.238.189.50] by nm2.bullet.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
Received: from [212.82.108.118] by tm3.bullet.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
Received: from [127.0.0.1] by omp1027.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 885882.25238.bm@omp1027.mail.ird.yahoo.com
Received: (qmail 49358 invoked by uid 60001); 19 Dec 2012 13:27:21 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1355923641; bh=3PDBaOP1V6Gti8xQ3yR1RdhGGlQViEZ5YDKefufvyDM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=YrsBDJJLDOUzevE3of8+4NCg0X9gHe3x1Q0ArKvHZV7pziT8wEtzAhqRop0PA51KPKiR2/2dFk6LweYuhHuRg8omTLQy3CC8gZjHZpMdEdQMzmlcLBRtB8DzI6R3VdL26gjvyf33MS67oR4VS3tUKxuPNXx0PbyM/whuIf827jA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=2IWLMy/sqd+BtUpHyrvH3P/JRiLtwghRHQGe+/bhNBwr2OB6Pd8jIJEJhMG1RJ6wI23m9zoOZW64O/ANWXmEznqo3FNM0yhdN140m1pfIVe029JGoIHOkey37p0113e4TV6qelTu3TJbo6jmcP9yutY6upFOzZHEJXRWm3rGxSY=;
X-YMail-OSG: cmUW3GEVM1mtu95g.NGVyWJMIkqYyBGHqx2pYWMYPmzRsRo U5bsqzvSl0kETfOMBTfFNDdMNVfmr_QLwPr4ycmow.82RCDHe_p5IUllcHeQ M4j5XJEEnwbm247GJD5_uHT7lucmoX_iOxiFhIVipaWBpnr6msLKz3.bpaBp CaiCTEZ7Lp3ncbqTXY7kF0wIoYhIvwNhDChDrJ14vN5GZAsa57vItmNdYTYu F5UBTs.2NMTRPRb_Hc_7nejLbsPXh3uNKHCuWTMcs07KofWs7mGXZt9vQQkF qcvCuVdDW4Uoutyk8euthg_CS9OaxudE21Kivp7SYrNYebSGNQELdY07Hrip jM03BN_1PiEjGz8VUBM10n5w2EsKeX87aNQ9K4_AD_Y91_dp_T9I6zO9LR4m DchctjNSVzJ_Zo3PZx0Qi5rK5AyKtr6fIXatAloCPEQVcrPUIlRbhGg–
Received: from [41.216.40.18] by web29802.mail.ird.yahoo.com via HTTP; Wed, 19 Dec 2012 13:27:21 GMT
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.129.483
Message-ID: <1355923641.25598.YahooMailClassic@web29802.mail.ird.yahoo.com>
Date: Wed, 19 Dec 2012 13:27:21 +0000 (GMT)
From: “Nelly.” <nellypiusv_1@yahoo.fr>
Reply-To: nellykr1@yahoo.fr
Subject: waiting your reply

“Nelly.” nellypiusv_1@yahoo.fr REPLY-ADDRESS: nellykr1@yahoo.fr

ORIGINATING-IP: 77.238.189.199 RECEIVED-IP: 41.216.40.18

BELOW IS ADDITIONAL INFORMATION POSTED BY ANOTHER ONLINE USER WHO RECEIVED AN EMAIL FROM THE SAME SCAMMER AS ABOVE.

Nelly Pius <nellypiusv1@yahoo.com> <noahjohn55@yahoo.com>

Dear Beloved Friend!

It is my pleasure to reach you after our unsuccessful attempt on our business transaction. Well, I just want to use this medium to thank you very much for your earlier assistance to help me in receiving the funds, without any positive outcome.

I am happy to inform you that I have succeeded in receiving the funds with the help of a new partner from South Carolina-USA, Mr. Alfredo Gomez Castillo. Everything was perfectly done because we strike a deal with one of the Lady Accountant who works with the Federal Ministry of Finance (FMF), and she rendered a tremendous help to us. My new partner initiated this idea and everything worked out successfully.

In appreciation of your earlier assistance to me in receiving the funds, I have decided to compensate you with the sum of $2.5000.00(two Million five Hundred Thousand United States Dollars) in an ATM VISA CARD, this is from my own share. I did this simply to show appreciation to you for your kind support and assistance even though we could not succeed due to some unforeseen circumstances and reason.

Presently, I am in South Korea for investment project with my own share under the advice of my partner. Meanwhile, I didn’t forget your past efforts and attempts to assist me in transferring these funds despite the fact that we could not succeed. I will be sending you e-mail from time to time to know if you have received your share or not. In the light of the above, you are therefore, to contact my personal assistant Noah John, through this email noahjohn55@yahoo.com and do send him your contact address where you want the ATM VISA CARD to be sent to you.

Contact him through his email below…
Phone: +229 680-96772
E-mail address: ( noahjohn55@yahoo.com )
Contact Person: Noah

Reconfirm to him your personal details as below:

Full Name:
Current home address:
Tel: number:
Country /city
Occupation / age

Please do let me know immediately you receive it so that we can share the joy/happiness together after all the suffering at that time. In the moment, I am very busy here in capital city of South Korea because of the investment projects, which the new partner and I are having at hand.

So feel free to get in touch with my personal assistant Noah so that he will send the ATM VISA CARD to you without any delay.

With My Best Regards,
Mrs. Nelly

IP address: 81.91.229.133
Reverse DNS: [No reverse DNS entry per pri.authdns.ripe.net.]
Reverse DNS authenticity: [Unknown]
ASN: 28683
ASN Name: OPT-NTIC-AS (Office des Postes et telecommunications du Benin)
IP range connectivity: 6
Registrar (per ASN): RIPE
Country (per IP registrar): *E [[RIPE Unlisted]]
Country Currency: Unknown
Country IP Range: 81.0.0.0 to 81.255.255.255
Country fraud profile: Normal
City (per outside source): Cotonou, Atlantique
Country (per outside source): BJ [Benin]
Private (internal) IP? No
IP address registrar: whois.ripe.net
Known Proxy? No
Link for WHOIS: 81.91.229.133

_______________________________________________

BELOW IS A HEADER FROM AN EARLIER EMAIL SENT TO MY SPAM FILTER BY NELLY PIUS

Return-Path:
X-YahooFilteredBulk: 98.138.229.226
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts)
X-YMailISG: FOcNh6QWLDuwokGIamqo2H1mhFgBK__fvBOJZ8GjwILP0jKp H_fXx0rsRIGtWnE8LHiDjqgrUbhVMalmSllTqA0DRUXVL000oPDuFM_4Cvdq BG9I6cTmDOPwt3Rbvyyrw1_.26QSw.velDioRcayZTUc9dtps6B4yu8iQb.X 45quHIwVHMKOZyAuvrZsOde4f9rNUjjA8jehT99P2KYxuszbHy4plZ2JCHhj iC1s4KT_XanfymkXm60urdqtbA3TVX_bkGnktQMQ8hA.KV.ll1KgActsQDPn CT7Whw9F3G0YtO..HY98BjSqfWUqKZ_9O9hoN175bzx.Y6003jsGJgZowQkK DkoWcD2MMet7hoGllu2xaFaCO9F6K6sjGW6RgGbTuBNKodcmZg55dvOsYnAk nl6eg5A3hk2QXz40LgNCiTRNDYXId7UJ7liQp5vfEz4bmRvkbIn_F_Kfe2fb PDqG9HXvy3iWkgsYmNbI0Y.ZFQt8NXdK4qoGihSNJzGAn0oaufWSCAD5nPEG qUAVabftIWrVbIL4h83oo.Axnnhc.gP3Sq4JICZK8R2pTv1uyLgotWgJvqEV lkaRO.4hr5fTMA68AuEBbZZBKuhYZrONNhHOjRDA_0Ub1Qpt4A1N8mvS3EDH OXTxGMfwNHggXYzAgM0efEowxSH.p4KSFlFuB7HalF_uTf4LepMH4Jw4Pepy dIbhOHSt.rWElmpQ3FwQnY9fDEO1fWjdBFb1fd23HFfEEhZ52qAgqSX5dYYj 4vFsP3QgcvjRtphwDJkTsI.k5YFbuEY1o27.qr3.fwQXMDHm1PecFRfcxknH Jl.asZFxcHerjK8aglPDjTm09Ky4HobY_cRHFbwE5N18S8XBiN9KyUjqM8cq 7Vud9U_1F3uyXraJMJvjkyjEzPbxFCjYsHE2q5Gzm3WuiC_GvzJDux0kJDIk 770Sr9EKBwyYKov.lNHPyxTlFcN6RfyaBaPyTPh_kulsWBnKWktZyWm2.So2 su_Sb9DHRVLfhN42iBrx.mBeF.j5_QaHc9JE44XYqT8JtIdYgT_SVNz7EBC2 BI4oHmscMaNsSbRNw3z8YK9PsnVCLOVhJpvvjN5y8T4j9kVUW2NhHD.y6GbY 2w6WzXd15q8JQEc1UvKGxrEBOWvmF8mtoZ4.Kq1hJKG_YWRjbzVTK8i4IVZt Jq9yFcvcvvHtTnv5kMfjdym2iCAoBpeAXzrfjoXkRlaR9YBmt7fNfFWWaw95 EyaipLDjQK4gxYlU82KJMKQ3VO26udNOb4EUtEFbacxgTlNLV2l8uUNqsdJL hjzulYxZXb1uXou1HaGVNzmsWQH8BYmJ1OYxtqVtnwxpijmNxCG6Aeqg6Bxx dfj8ZU4cWpVf
X-Originating-IP: [98.138.229.226]
Authentication-Results: mta1129.mail.gq1.yahoo.com from=yahoo.dk; domainkeys=neutral (no sig); from=yahoo.dk; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO n3-vm2.bullet.mail.ne1.yahoo.com) (98.138.229.226) by mta1129.mail.gq1.yahoo.com with SMTP; Thu, 27 Sep 2012 12:45:09 -0700
Received: from [98.138.226.174] by n3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
Received: from [98.136.168.76] by t3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
Received: from [127.0.0.1] by store166.c107.cal.gq1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
X-yahoo-newman-expires: 1348778706
From: Nelly Pius
Sender: Nelly Pius
Reply-To: Nelly Pius 98.136.168.76 – – 98.138.229.226

pius_nelly@yahoo.dk

 
1 Comment

Posted by on 12/19/2012 in Uncategorized

 

Tags: , , , , , , , , , , , , , , ,

“jennywender@yahoo.com” Jenny Wender

LOTTERY SCAM – FAKE ATM CARD – FRAUD – 419 SCAMMER

EMAIL: I VE JUST COME FROM WESTERN UNION AND HERE IS A SCANNED PHOTO FROM THE TRANSFER MTCN

MTCN : 6255579485
THE AMOUNT IS 500 $
HOPE YOU ARE NOW SATISFIED AND MY BEST WISES AND GOOD GREETINGS.
GOOD LUCK

HEADER:

Return-Path: <jennywender@yahoo.com>
X-YahooFilteredBulk: 98.138.89.167
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: mlalYTsWLDtNvozz7TbM4xCyyr6UkuZsJriIkILxnVG85KaZ V5INEyEdyeSqqJUzVZWRKhD.FvYjohGsvSy8rAa3Ew.Q0EbmqVd1odmIfCRX BLUGzrykfmV7edqO3asZ5qGPOzSccax1BR8nY5X6TnZgZM7zb4sSnUVNdiLi sEpp6U3UsJDelS1v9vJRAFOjFMgpZIA3saObCwn2Yg9stNR_fvmYWECr9Gbb RkwiEWCSKlRiCPYpuipRFUIzIJw2JL1Pam85CRy1udhfPCXjQij4lPCp_pSJ nteIHm6JgLNKY8yCYtTHYV792NAcESSdcuTsQRLPNs4DXmOACbbJf_34pMFJ 6CgAB5mz80kmnQCAa6IVjK3k.3ep31PaU39FlGF5bkVq9sFqaqTI12Y.8Z5G lR70b7xZRfevmNfL8HjsN8W6YplyXx2MOOAGHK0YhUSQ2AMIjnn7AHVcMpOt zV9tCojw8Sc4ZT8d15mA2bsjYMv9lJFXFvm1dc4WPdffmI7VlNSX9pYHJKVl xoR6xdRqCg44CkB0Iz03strIxx8AtP4BWtVYCk6TmINc0tH9FC2_y2xmf3Cr k4G7Ozva8v0nwAXtYoic_A8ikV2SWLm8T8nDQpgiQzlLTl8ZNt4nb03AhAfU dugWw6ojOvrxwaSXI7gau1ypAEufuzAqxKuHo3htqlfupTmAbMGpglq1xlbp qjHNFkfOZJtkaLZKr2E7RURHdkA08IfFccwwGtBH_aM6LkmNy08Fhgp1Fp7e Fj1iQ4snz3zhyEfsd_a2xtkCdatfSbF6Q6KdPwwNQnSA4Vx5H7CC4Kh.m4A. utNMz_DpSKRF3lHeEaW8CKtS4OZN8PpwFPJcCyREYlvVpZiLyVECptDwf3Y9 KL9lOgwN8PcIYmGI7idlqv_4u0Tlzn6QB0KtWXSYJShXO_yEls2V2OU1.UT6 bhisvGKj2WCh4vbF6KYh_5_XgRm5RfCSlRkXF_.nTkO19aPN4iR55y8VAfRz vjKZDao3N8cKEn_mbKL8fGY-
X-Originating-IP: [98.138.89.167]
Authentication-Results: mta1363.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO omp1023.mail.ne1.yahoo.com) (98.138.89.167) by mta1363.mail.bf1.yahoo.com with SMTP; Wed, 28 Nov 2012 03:37:05 -0800
Received: (qmail 52858 invoked by uid 1000); 28 Nov 2012 11:37:01 -0000
Received: (qmail 83184 invoked by uid 60001); 28 Nov 2012 11:37:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354102619; bh=tx45uRVk1edqQQxFPm/a8LhiKa6qR4QqZKTGg/3sEQU=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=EbWDUXcPY//p+LKWG8DVk7ITsd+V644mrsTaA35B/H+gt7PFQb1I54W3idPU1s8t04p8WSCp1WpqHU8zQBl5PeRwJRsfs1ZbYBJO03gqSIb8R8DteoJXtr8Z8WXdxEYw0FOUt4Jl6CBrUTo3CCglOkArxqFdeTCpCFJ+yjzCP2g=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=l2nzQFRK9aAW+eSn6/5WaBWcXh80sSFioPa84qIONgl69o793/DfeFUTBleiPnt5C6HSwrT34bXJeUPCnGvItT2SIm0zEOhnlJuGwyZmQRSi4AYXURv7CKp/y1lrujBEUC9AaVkB78PrA/mlk5DDChJ1qRzBE53e1zrrMK4i1v4=;
X-YMail-OSG: zVoErpcVM1nHIF1fQUvAfnmiolFOSdJO7psWhBJnines_2U g4ZJWb2U1NK_sZePJqHo0zbW2A3ewxuzi0vlGzDzrZeHElqTDGOlANTw7gDX 72inroBp2thnf2rzzOFHyuH_ucn7zCDETcYBy.WMWELRjwC187EbEb2DFxy5 .HH0XUARUvjHPMM_XD1EZdC4c1bS9MuADlKoN6xwbJ4GxCuJxLX1ghZdLGW2 h4hp6Jm7XpGBDI4SceILatqnBWQmRsyKF7XZnDjkyhoffsCjApBAe4FpoTk2 bauVgXZbwNMpYhOWMm9wknenVVqxGkJ.qwcmCyiZQVu6ERIZE_e9ubehdKPZ z_T4Ey2PuCKFqY5lIXmMJ9qLoFSGmSvQHMRToSzBizZjrD84S6sOjeAtLRzb KlAnKzElgiosgmI5Y8K5jKKT3J5kUIGIwzaE.LQ_Q6n7kJu8gbPRaICE9WkS xtjCvUN1hlx.XyWF7_jOKxDfxda9ZJSraJ5Kfk8S1hGGbrO9onDTcGQ–
Received: from [41.138.190.209] by web122205.mail.ne1.yahoo.com via HTTP; Wed, 28 Nov 2012 03:36:59 PST
X-Mailer: YahooMailWebService/0.8.127.475
References: <1354053615.47305.YahooMailNeo@web122204.mail.ne1.yahoo.com>
Message-ID: <1354102619.82958.YahooMailNeo@web122205.mail.ne1.yahoo.com>
Date: Wed, 28 Nov 2012 03:36:59 -0800 (PST)
From: jennywender@yahoo.com
Reply-To: jennywender@yahoo.com
Subject: THE WESTERN UNION TRANSFER
Reply-To: “MusicalTechlimited@yahoo.com” <MusicalTechlimited@yahoo.com>
In-Reply-To: <1354053615.47305.YahooMailNeo@web122204.mail.ne1.yahoo.com>

“jennywender@yahoo.com” <jennywender@yahoo.com> MusicalTechlimited@yahoo.com

Jenny Wender

41.138.190.209 – LOCATION – AFRICA (NIGERIA)

 
Leave a comment

Posted by on 12/16/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , ,

“Geraldine Mead”

EMPLOYMENT SCAM – MYSTERY SHOPPER – SECRET SHOPPER – FRAUD

EMAIL: Hello, There is a part time secret Shopping job available for you with a $200 salary Per Assignment pay if interested contact email:mrsneedham@live.com

HEADER:

Return-Path: <gmead@chipublib.org>
X-YahooFilteredBulk: 64.107.3.197
Received-SPF: pass (domain of chipublib.org designates 64.107.3.197 as permitted sender)
X-YMailISG: CpHLBTAWLDtoOrioXVpIJdZ7_UPTN5gg.zIryc6IPeIMVwy5 7.7iWvsHSbZnz35A4YfQXivayLPXn58O5eRc7Rz0gwIBorMUSbTKEneTqcmQ 66WF.gXOqlhN.g.QXkwo8_9rooXUJs08ZWwEEKryEd43d2lUOr7LfCR_SiEt .CAqpNhjUuHwjp.cD.TYb4xldFWnl_FsYyX7ae7b.lDYsCNfqv.XVQJkmWVi goUAG0V4J2ijRULQ_vF43Q6BU.RC_Dtt_yE8.WLN92txaKDDRkQp7uZFr7Ih X8QVOgWtUvPC1XGcvFcV5ZwnHgrb2F14LS6xtVCsMxmS4r89BWdRp2VA3toa f0xcuYk.j7zkuwRmVjktCCI.osqDCzmnafiunuywWkHYXGft9LZwRi1mNmpn L_CfxBsjW6hzpIpxp_G.5uTJrEtC.Eo.lHRb0q_6njfS0owtpz1PXAUQOslv s6nLAqs9mdamEEtEH1X8hAN4QcMWZHgCVXoKZRWkjYCnaR0SfB9NlFyEmo66 R1IKrme4beUhDCgTY8EPbxFGkhxgQul3PVhHyfb6fSGLBjxaPGQkaAW1bhtG OeNM1YbgT9OLDC1L7l94g7bf8CZu4w8_9SWEs7BadOuv0kZvGwYjaIVk1l8t GK8uNOzEPiEnorvUzn795KbSrcvfemWCcW0L4XnpfEGc7O8EDT5CG_Tggb2D J9K_9PG_thK.c4bOYgYasbM16r6XqT_k_I7htvBXGufLLYYktSJmpCrha5qY S_0ajgtvp.JIpyES70sxCwbGCGIU0BD5LDFuAmS659Vs21QuYu2E0ZF1gnzs WXRx5jtQByD_Nz6xr8DIWRcCF321e5n73R_kuXcev3xHn6lP7Ut09eNM54Db 4H2ElgE_0EtzWovfl83eU4BjTu4SU6PLsZjLi_hgTrVV2IIgp3Gqc17G1Ua. j7UeISWiY6tZpmDwIzkQClo7JDYMmxI35c4R8wlNoxJr6KGzCMDSE7vE2GC3 OTZCOwaV29hkYQAWys1V8jkxoGkZ5ZWEgDDJmFl295te3xUYs3K4uQma5ROE bFprfUxaBBRERqcSgbrvAHoKtgE5GnrkW8TD_.Bhnxd3UkM7ZuaTZ3JITqcM MsFY4cDSkaU49tMRsRv9SfhWFoK7tz7ozvVCDOYPgHV6Es78fVzhdmRd3EQQ rwSRpdqv.TjeLYq1A0l_TF0CXRRNVOeslm0A05qL7W0Db.uWfYIAqIBo57IP c7IO7xPLn.Vx_BP.pVQLX3ysQ4crsPb6H1takaFslL7EO6kscylvlkksX4.y lx2zWQ–
X-Originating-IP: [64.107.3.197]
Authentication-Results: mta1049.mail.gq1.yahoo.com from=chipublib.org; domainkeys=neutral (no sig); from=chipublib.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO Lorica5.chipublib.org) (64.107.3.197) by mta1049.mail.gq1.yahoo.com with SMTP; Thu, 18 Oct 2012 05:27:48 -0700
Received: from LEGATUS5.chipublib.org ([fe80::fc3e:bbbd:f296:732e]) by Gerulus.chipublib.org ([fe80::c93b:83ab:2900:a856%11]) with mapi id 14.02.0318.004; Wed, 17 Oct 2012 14:50:39 -0500
From: Geraldine Mead <gmead@chipublib.org>
REPLY-TO: “info@notice.com” <info@notice.com>
Thread-Index: Ac2soK5auidISj8cQgqi+vjL9J/VBA==
Date: Wed, 17 Oct 2012 19:50:38 +0000
Message-ID: <D70D3E6F95B6504C995A8296FD6C94520553054A@Legatus5.chipublib.org>
x-originating-ip: [172.19.3.235]

Geraldine Mead gmead@chipublib.org – info@notice.com – mrsneedham@live.com – gmead@chipublib.org 172.19.3.235 – 64.107.3.197 – 64.107.3.197

Below information provided by Zee, an online-user who received emails by the same scammer as above.

Email #1 offering £3.8 million

our mail is well received coupled with your contact details on where your consignment box will be delivered,Instruction has been placed to deliver your consignment box worth of £3.8 million once you comply with our instruction by choosing one of the delivery option below, Be inform that once the delivery charges is being received from you our International diplomat will proceed to your destination address to hand over your consignment box to you.

Email #3

FedEx Courier service office, Cotonou, Republicdu Benin
Contact CourierFEDEX INTERNATIONAL SARLLOT 20/22 HOSPITAL ROUTE COTONOU BENINREPUBLIQUE
TELL: +229 6644 7691
Email: fedex_d@y7mail.com
Motto: Honest & safty.

Your consignment box is now ready to be delivered to you and all you have to do now is to wait for the arrival of the diplomatic Agent and once he gets to your home address then he will help you to contact the money exchangers as to convert the money to dollars.

The delay we have here now is the delivery fee and once you remit it I promise not to fail you in this delivery. All you need to do is just send the fee so that the Agent wills takeoff to complete the delivery. Fail not to choose one option from those options given

Listen once he comes to you, take him to the bank you operate with so that he will present all the documents that proves the legality of the money to the bank for them to convert it and put the money in your account without any question.

Thanks

Mr. Maxwell Shargan

 
2 Comments

Posted by on 12/15/2012 in Employment (Job) Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , ,

“Barrister Mendy Samba”

NIGERIAN SCAMMER – 419 SCAM – TRANSFERRING FUNDS

Mendy Samba pretends to be Aminata Bangali as well as Western Union Money Transfer and Fred Williams – for more information click here or look at the end of this post, below the header info!

Updated email brelow (received 01/11/13) from Mendy Samba under the name/address of “Barrister Mendy Samba” mendychambers@mendychambers.com AND mendychambers@gmail.com AND mendychambers@gmail.com

scams_exposed_scammer419

SUBJECT: Money Transfer From Spain

EMAIL: ATTENTION:

My name is Barrister Mendy Samba and I am contacting you as requested by Miss Aminata Bangali, a refugee in Ghana. I work as an immigration lawyer/welfare officer attached to the refugee camp where Aminata Bangali is currently registered as a refugee.

Following Aminata’s decision to transfer her late father’s fund deposited in a Security Company in Spain to you, she consulted me this afternoon to give her the necessary legal advice and support that will be guide her to securely and legally have the fund transferred to you.

Please, do confirm your knowledge about Aminata’s proposal and I will give you more details.

Sincerely, Advocate Mendy Samba( Attorney At Law )

HEADER:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) YW1iYSBhbmQgSSBhbSBjb250YWN0aW5nIHlvdSBhcyByZXF1ZXN0ZWQgYnkg TWlzcyBBbWluYXRhIEJhbmdhbGksIGEgcmVmdWdlZSBpbiBHaGFuYS4gSSB3 b3JrIGFzIGFuIGltbWlncmF0aW9uIGxhd3llci93ZWxmYXJlIG9mZmljZXIg YXR0YWNoZWQgdG8gdGhlIHJlZnVnZWUgY2FtcCB3aGVyZSBBbWluYXRhIEJh bmdhbGkgaXMgY3VycmVudGx5IHJlZ2lzdGVyZWQgYXMgYSByZQEwAQEBAQ–
X-YMailISG: 4_AQ7A0WLDsrdoRW0mzNu2SSLdatwMX5iS_EhDNFGO0Dbu.0 ZJPjmRCDFk3Bxoppk6w6x2d3WKjDXMzwfe8IqxvbBPPDr31JGNwkUlYzEFse LzFtvCX9WEYMIIglV7ug0FGVvWB6G1RnZe3JWarmQsNFn7FR3J1hYpoCkNtb NzxahunKglbrQA3.4DYQpbILeEzBia9jxUrwloVD0KdvoUzHDJNQ273p3yBB _aowcphJVZ6yZs2V1HPyhaInRIizut7qjyDjGsAysFY4KmWa8FvU7IatcSbC GD4j5eZn58R61aaUCwGNj9n2ZONKmUYY6nl7.pX_A874SK3EjAlGlTfsixkl O15RmczEOcXCkSEUdES8U5hTB3hBfPmkNOj7zeOhpqwM2p5EDGlPiPZ6MLqW VeJ7xQZTSAbSgHpX1X5YeFsYJklh_365cld7bEc3wmL7FHUnHjVI.FUdnZFi K9wMkAUG6_7nqaFrNz6SqXZOM8zjpuuLwM7gFOjZMmRzxoWGjF.exUNZLAic xQgalRKaIEO2PavYo2VTPKuFRj7RflCSMafMWoieRpRsaq0X7bQj3tX9lgXO w0HbHxuJuJDwHAwpwFNSiWmASeL3OMy4DvgYXWXw63dTEed3NNzvL3mw_bCN eMjWhF_HwStHsSSi0KD30u7qESl9rYica9FkndjwBsLDcDRh6YK4HYjQ4wFh uoq193JFJaz.jlV9YIrFAFktvrrNjaGRsiqQHm3viuhMC2mnU2t2pa6DWSba _DooJ9PHo4DXDg0DNBEd1tI8AVye5KHy2NynYrLYYTD92ukjEo3Rgom00RTc DHMPDHXoZwIAcJqiGrJWLnkwzwi0X5H98W2b2gJbRqSgAbGPsDmPgnMWI4lr rTUKVca36wz36odeYqKLyu2vpsQqQL5C3R6SbWgiXGyrBTt.MgJ8_aJ58xym ReiyU_qMQZiqangoX8UG5oPBVQh69Mz3f1DSjw2.jSUlSNHulEgeNfuUcSao VuNfoticrJYdUiDAkRl0uHpQdMfWv04r7JUIgpmxzaGGheGVcdyADzDyVW6M ITYey9NNXoEYnwBo.3pLN7nDLqidopn7hF2g9IJSAVxR1w18dPVXZPDidPTi 7B1i7__9ia8xs7gnNe9n.kkRhVyZmPZ.kdibaaljI.H7cH5Tn0I9sgUJkMr7 MiB4KqFzIVwkPRWlWf3BCWx8.tdSmaTQFbixeWlAVi1iKnzg7AIsmhZ_b7FT q_IL6Es9OgDxsTbYYs9fkwzQW9SaaHuDlAq.slFkJcvl4MFDlZnZaWQVNMD0 9vOEDSoe_HdRnU92B601FrF6Ag5QBWLO7zVrZeC2upRcZMm3F6BwQZ7obSuS 9qR4CU76exgBDw–
X-Originating-IP: [64.98.42.133]
Authentication-Results: mta1257.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.133) by mta1257.mail.ac4.yahoo.com with SMTP; Wed, 12 Dec 2012 13:49:09 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay04.b.hostedemail.com (Postfix) with SMTP id 3CC8867074; Wed, 12 Dec 2012 21:48:53 +0000 (UTC)
X-Panda: scanned!
X-Spam-Summary: 64,4,0,,d41d8cd98f00b204,mendychambers@mendychambers.com,:::::::::::::::::::::::::::::::::::::::::::mrsomf14|1714587392|FC6C4FA
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 1446
Received: from webmail16 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf14.b.hostedemail.com (Postfix) with ESMTPA; Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
Received: from 41.138.171.68 ([41.138.171.68]) by webmail16 (Webmail) with HTTP; Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
Date: Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <837876103.14863.1355348929528.JavaMail.mail@webmail16>
Subject: Money Transfer From Spain

To view the post i’ve submitted on November 12, 2012 on this scammer click: Aminata Bangali

FROM: Barrister Mendy Samba <mendychambers@mendychambers.com> Reply Address: mendychambers@gmail.com

When ‘Aminata’ emailed me back in November her return-path was mendy12@sambachambers.com so i’m guessing Samba Chambers was a fake name she was using? Or maybe Mendy Samba Chambers? .. Not sure where ‘Barrister’ came into to play lol.

RECEIVED IP: 41.138.171.68 Location: NIGERIA (SOUTH AFRICA) X-ORIGINATING-IP: 64.98.42.133

_______________________________________

ANOTHER EMAIL SENT BY MENDY SAMBA –

ATTENTION:

Since I am yet to hear from you since your last mail, I assume you are no longer interested in assisting my client. I would appreciate if you can define your position clearly to enable us know the next line of action. Should you still be interested in assisting her, I implore you to show your commitment to enable us conclude the transfer.

Please, do kindly respond within the hour is possible.

Yours Sincerely,

Advocate Mendy Samba( Attorney At Law )

HEADER INFORMATION:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) eW91IHNpbmNlIHlvdXIgbGFzdCBtYWlsLCBJIGFzc3VtZSB5b3UgYXJlIG5v IGxvbmdlciBpbnRlcmVzdGVkIGluIGFzc2lzdGluZyBteSBjbGllbnQuIEkg d291bGQgYXBwcmVjaWF0ZSBpZiB5b3UgY2FuIGRlZmluZSB5b3VyIHBvc2l0 aW9uIGNsZWFybHkgdG8gZW5hYmxlIHVzIGtub3cgdGhlIG5leHQgbGluZSBv ZiBhY3Rpb24uIFNob3VsZCB5b3Ugc3RpbGwgYmUgaW50ZXJlcwEwAQEBAQ–
X-YMailISG: Qish.AwWLDsD_aE16xh5LXkfyfliJdFG8Az7iuvnxeZ56_1J crt96JOXDja4po5uUUFfB6a4l3fDBX66fLkDWvDXGHzQtXeP.ir3WKDMvO18 yQtmjWnM7KDHOTIR_mm7F0x_yYrV2f1FJspVNUZNNrNhqx4gHNI7egOdzDmz op7TNxfD8KDM8WtGccyWKkXqThvjw7VzTcfCAHPEArsNtdKJ5wHzJaxY7Xo0 ICaaAf_pXqlY_3vkqJUpjtFYyCpgw7N5V_AkNyRzANa9D3HB88RSghJYRpkC dRkpGISFkkS0G2jSVjVJobdQa7i6p3HB67iuit9p3b5fHUatd0TmDG2c1wO4 n_3CL7IBbkzawlon7QqKyZdF1B9epc6jGlmzFj_sG9yMs7c6gAszTz.Wh37L aLADSBUUKoNLZGvXD_VPS3NuJy5qN2N_IeAPWj74Jm_I_1gYiRBbKzE1nXzf De8CKEyFZTjnJ2Tyo7u0BEYncdKM7soOIYF0C3OzEqL9Q5rDbecHRlusYWLm 1UT65pH7TqrnRdGMC4pn7hQqNuf0kQ6igWHg0ebawNy2jkZQRRqDsJIuL_hj kTe6JkM9EY1NO0Z6oaZutHK4uzUR1bhnELOdzzqFqUkmTTTt.tlm3VCPswKa Mbi2uW6G.qSyXvN4ML_cUnNUWgQyxjNm8tImcSUwfUtv.vzW43gBPS4r8tdz gRZ6WaVj2q93bL8MbZpotKrj7hCFUn4flxO_1y20Fd_XwmXYJ8Ihmq6C9R1R TihTyJWhJxlQoMqFbPy3RojiISg6gc1gsS7BMM0I0gx70NopBwRn5EJOqQhK U2oAcZ21BR9idyOFHPF7VzPu8Ncd7J4NFnoS1sXtdkeKT3378lJFaPnST6iv k9u7WhHwmBhbAhvjOkWjJxevZljRbtfvebag8m5Sahi9QaYaUeC_3pEB5.Eo zYzcudPoota0GO7Z6mfG5PYVkGRiyKKdU0sG387ZApM5TRPp_AsGwSyGxg2p DXPpSQzV7o9Zzkr9QZUJxx3oYRxh3luEq12j.ayVQlHvrngNXNp9dT0gNxzX ftpGIhATeavycQ4_jhcJ8dXpiRB2LhNdF4x_29jUzABvNKNsK19nztr4IGJU UgD6Vt2_SagllCSrCH4Y34ff6GEYlUIUccgdWYMBlWhJkmWQYstMRl71uO5J ewdacuSE7nQBw5Kx1ACRhtpjBFO.r.cVWkacnzfte.3hl0hSVzxBlLMxA3lu aeX8RJZP04GfqhHp4Ex6GYBeVXQV14Um5Dcjwg7t2dxxLJ0rcLbwTNLCLOi3 Ch4moZMd6oFy6Pil3_AuOXc28gxcxk06jpmahAvr8BgwxaAO2KkhT7.wpsn1 i4qaQ4r8Bk01ndo3Cl6.ENqsq6hCv2F_LYMsJoUhZqeERFJDDA–
X-Originating-IP: [64.98.42.225]
Authentication-Results: mta1092.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.225) by mta1092.mail.ac4.yahoo.com with SMTP; Thu, 10 Jan 2013 13:27:03 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay04.b.hostedemail.com (Postfix) with SMTP id 8718C1CB33B; Thu, 10 Jan 2013 21:26:50 +0000 (UTC)
X-Panda: scanned!
X-Spam-Summary: 2,0,0,,d41d8cd98f00b204,mendychambers@mendychambers.com,::::::::::::::::::::::::::::::::::::::::::jacquesr2@omf08|3603412736|CAE7C8B
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 1235
Received: from webmail16 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf08.b.hostedemail.com (Postfix) with ESMTPA; Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
Received: from 41.71.189.89 ([41.71.189.89]) by webmail16 (Webmail) with HTTP; Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
Date: Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <1176793950.247565.1357853206650.JavaMail.mail@webmail16>
Subject: Re: GREETINGS FROM AFRICA!!
X-Originating-IP: [41.71.189.89]

IPS: RECEIVED: 41.71.189.89 – – 64.98.36.5 – – ORIGINATING: 64.98.42.133

Barrister Mendy Samba IS Aminata Bangali pretending to be her lawyer. Below are more email addresses and IP information used by this scammer.

Aminata Bangali has many email addresses. A few handful include <> aminata2@mendyschambers.com <> aminatabangali@africamail.com <> aminatabangali@mendychambers.com <> aminatabangali@yahoo.com <> aminatabangali@msn.com <> aminatabangali@gmail.com <> info@guarantytrustsec.com <> info@guarantytrustsec.com <> aminatabangali7@gmail.co <> <aminatabangali7@gmail.com> jacquesr2@omf08

>< Aminata Bangali >< mendy12@sambachambers.com >< aminatabangali2@gmail.com >< aminata22@infonets.info >< aminatabangali6@gmail.com >< info@guarantytrustsec.com >< SeferiaB@trumbullps.org >< go@win.com >< SeferiaB@trumbullps.org ><

Previous IP’s used:

Originating IP:  41.71.177.75 Location: Lagos, Nigeria

Originating IP: 64.98.42.177 Location: Toronto, Canada – smtprelay.b.hostedemail.com – mta1196.mail.mud.yahoo.com

10.5.19.254 >< by smtprelay06.b.hostedemail.com

Mendy Samba also known as Aminata Bangali also pretends to be Western Union Money Transfer – And Fred Williams

Fred Williams >< fredwilliams3@rediffmail.com ><  www_western_uniontransfer276@superposta.com

Some more IP’s used by the above scammer:

Some IPs to avoid –  41.216.50.79 ( web92415.mail.cnh.yahoo.com ) >< 41.218.238.107 >< 41.216.50.209 >< 41.138.172.76 >< 74.125.83.67 ( mail-ee0-f67.google.com ) >< 10.14.193.136 >< 10.14.175.68 >< 64.98.42.56 >< 10.5.19.254 >< 64.98.36.5 >< 64.251.52.6 >< 203.188.201.85 >< 203.188.200.143 >< 119.42.242.156 >< 74.125.83.67 >< 41.138.172.76 ><
 
1 Comment

Posted by on 12/13/2012 in Inheritance Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

Dr Paul Owen

NIGERIAN 419 SCAMMER – BENEFICIARY – INVESTMENT SCAM – FRAUD

EMAIL: From Dr Paul Owen

African Development Bank Republic Du Benin
Cotonou Benin Republic.
Email pauolowem@e-mail.ua

Dear Good Friend,

How are you doing? hope fine.

I have interest of investing in your country as well as seek your services
in a private and confidential matter. I am Auditor General in African
Development Bank Republic Du Benin On my routine inspection I discovered a
dormant domiciliary account with the deposit of ($9.6Million USD) by late
Mr Khalead without any heir. I write to seek your indulgence and
assistance in moving this funds to your country through legal means.

NOTE: My plan is to invest my own share of the money in your country.

1. What other lucrative investments would you suggest as I intend to
invest on REAL ESTATE AND HOTELS if they are good business venture in your
Country?

2. Can you be able to make residential documents and purchase a house for
me and my family to relocate and settle in your country after my
retirement in 3months time.

Let me know if you can handle it so that we can discuss your own %.please
provide your Phone No. I wait for your urgent response.

Regards,

Dr Paul Owen.
Auditor General

HEADER:

Return-Path: <10@my.dxdelivery.com>
X-YahooFilteredBulk: 208.67.16.254
Received-SPF: pass (domain of my.dxdelivery.com designates 208.67.16.254 as permitted sender)
X-YMailISG: ofps_6cWLDtJDF9azSUKKmCZvl1SE.MyUmiAMv_InQQUHwwc oXqEhf4HrpKk9HMBTAy7ysWExs1Dfimgdi399c8yY6f_FJRUlyeHHPR0Wl4q zaRJVeRVwneSbI8F3uVv7u7Nr6TuyLCdc_vtfBIAS2Jw2UcTY0uSdklgq1D8 73ZUKgwrlDirs7gAs44naR3efjg7GJCKjyMFEVRdBmrGOKj3NPHCJLi.MW8x 2X7jInWnVx9G5NSsPlHX5AoqNcT7etkvV05oGjS8KhSwtIgx.6BQTnbMYYuN yD1YwilOE7zkpJiHJ4gjoQmGjN77olxjq5ccrUNQkHMNbwY1sVlPLgV6Vec2 6IdvOhUY817LYdJe3j4ct_vpMXYYwr7gKftftyw00orHH5MCLmVfK5ammofj zGS4OCrR3HHV1IWvCxiEYhd9xnFyyVGYL05bxZmINLNtbZULXlkPInUtc99Z RcM4UH8rKiKr.XLZCZFAvyUArQc.NAR4Apljsr0E4vrr0Tc3CkgaHUyD42mf 3h5cDsOQ_wPQKGEs84PCSwtp5fkLMmvsp6et3jYjY7NV5B204XnN1l1U8DfM 1kmyUqeW0tIu2zVtzQ0rpbi_zyuLB30JmXKK.YA.pdt76XlsHjMgI.a22DVT .68eAVzicc7htVqzvNAjuRH8.o.0TkgNnJ0feGs5CC1JINDWfLWzRf.NFObu 9_HMtwqBt_aLBg.h15e8xbWTVquLydexnE_qpr6.dy6SWmXuYz9zG7iyT68S XwLMte7TM1fnPpG_HblTCRCM9haxJFB253vMnrZjHra7.Ih6dOtDfx59hyrH ZWpgvD5h6iiGIMxs7POEibdsvfR3zjc7u7PGsQJyQDVyGK35hrb_bbRDsZ0o hymwJfuzLYL5LE4eIl6Wju6wR7nhxGINQhwmkYwqlDO3l3kHHCYir3499VbJ XzNF7uOU1dBz2kYguGvTZyqWTLEI7Hljr8ehe0QF226CoavI_KwoWfGZb1yB 2F_sWs1xbHcDS770dxLPxqnhngHHGXF9upYzjsFZkztbgk9EacZ1r9Jcc4Gr 63EpdYj3EZQCLH48CczxIuVkTZzDwVABdrnMX1K_h_B72voTpZG2pcgnEBnI 6QNkU2Y.ThdBXIMfv.4sojsZyEd86NKz69btB69RcZQpcQ.Ad_Cq8bOG2VVm 9Het_NpZ7s14piXT2p7nWo5l6zCaI_P95cDENN9dWilTg86r4dmo.YB8IgpQ mefFr3..NfX8w7V5QAJvItvSUmE1ehie4_bIIN_UJEsmbt6Uxr8GfwadMN28 Bf1DHHLrKRpuE00ZKFojKCtOC48iNywogRtSUWAhZXc3uDKt8j4tyiMBpod2 WdRA0e7B88Wuv5qLU_tEFAVa6Kxgm0O6SOfXJxfaLT7JsVeHmnJXf1E4._fe 2zjoX.N_bO3k5gy4dQ01pInxBR3J48C9Cn0GJ7YlrBnU_sxw5R9KGZPklx_d .NqQXEhMT8j3yKyjYyvIlb7YweIGcWBR
X-Originating-IP: [208.67.16.254]
Authentication-Results: mta1054.mail.ac4.yahoo.com from=my.dxdelivery.com; domainkeys=neutral (no sig); from=my.dxdelivery.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO my.dxdelivery.com) (208.67.16.254) by mta1054.mail.ac4.yahoo.com with SMTP; Thu, 06 Dec 2012 01:50:09 -0800
X-No-Relay: not in my network
Received: from User (unknown [41.85.165.245]) by my.dxdelivery.com (Postfix) with ESMTPA id F2CB31C47121; Thu, 6 Dec 2012 00:56:08 -0800 (PST)
Reply-To: <pauolowem@e-mail.ua>
From: “Dr Paul Owen”<10@my.dxdelivery.com>
Subject: Dear Good Friend,
Date: Thu, 6 Dec 2012 09:56:24 +0100

 

“Dr Paul Owen” <10@my.dxdelivery.com> <pauolowem@e-mail.ua> pauolowem@e-mail.ua

RECEIVED IP: 41.85.165.245 – Benin / Nigeria

YAHOO-FILTERBULK: 208.67.16.254

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

Four Email SCAMS

A list of three scammers who emailed me back in October, 2012.  I would’ve posted them sooner, however, my spam box gets FLOODED with spam and alot of email’s (including these three) continue to get pushed down each day. So i’m posted a few of these less recent scams, in one post.

1) LOTTERY SCAM – “EUROPEAN EURO MILLIONS LOTTERY COMMISSION” — When I didn’t respond, this is the email I received:

FROM: Mr abdul saram mr.abdulsaram16@ymail.com

EMAIL: Attention:

TRANSFER OF US$11,800,000.00 TO YOUR BANK ACCOUNT.
We are writhing to know if it’s true that you are DEAD? Because we received a notification from one MR. GERSHON SHAPIRO of USA stating that you are DEAD and that you have giving him the right to claim your funds.He stated you died on a CAR accident. He has been calling us regarding this issue, but we cannot proceed with him until we confirm this by not hearing from you after 7days.Be advised that we have made all arrangements for you to receive and confirm your funds without anymore stress, and without any further delays. All we need to confirm now is your been DEAD Or still Alive.Because this MAN’S message brought shock to our minds. And we just can’t proceed with him until we confirm if this is a reality OR not.But if it happened we did not hear from you after 7days, then we say: MAY YOUR SOUL REST IN PERFECT

PEACE YOUR JOY AND SUCCESS REMAINS OUR GOAL.
May the peace of the Lord be with you wherever you may be now.

Your Faithfully,
Mr. Abdul Saram
Foreign Payment Department.
Kuala Lumpur Malaysia.
E-mail; mr.abdulsaram168@ymail.com

HEADER:

Return-Path: <mr.abdulsaram16@ymail.com>
X-YahooFilteredBulk: 202.54.119.135
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts)
X-YMailISG: zoMIZlsWLDvydzg0Dk9J5tOysBHE56cHQyyiC1YznBFFUtuX 2QmjWmBtKrEIAIZhZZvMLBsf2_VfVRuk3IH9j8m1hLMrwqczlxOjNcYd56t1 DaED9ORsgM_tamt6rYqekTqo1ZZeVBVk.n3YVF3tmTgLQTno7RUE_mPfmgyO S8g3lGMj8NpQGYdtfuXTZYiqBNy7OCiTyfihCtBixC84NBTgsDMsAj4P2vvf uvEouSXqXW_lpokkF6fkNC1eMtEPGI98ZdT_3zRWN9Ru.lwobx.vCEagLelr T6qkX56Y3yw3oYYgjSG_O1eZeznkjXOyNOjg82ND2CrRcduLWdRuJOesZKmV 3xrCwSbNU.1OEPGt99LQuUBZpHmnhEsLZ908pgJy706cOkWpiPoZ1rCWGuGK kMgJUwp_ukdV2jXRGVSbgDunXrysUGJ4JGJ7sIcy08xXkI01aKXjvxH5zSVt MLNYizgSIwbXCsVoh4kgvfVFn8tv.rcdkUiap3AJ7fxaz2BjrTg_iLcFzP7j CKXG6ul9U1zBHqq5F54fpGKFMpuGvzwMOAQT_kou94fFWb78j9yzKSJHFpzs N.MLMXSB9whHO08p5lO4G9516SCu.qO8uzo96HXGeNPbj9DIfYQcg1iWz8uo 3lMulBOyPI1h4faLSk2GSYFktoY9y7i9gU.f.9MxMaXc67eJ_PrIVIhtMswN J_wZMBwunjrY3hq2OicEy4TomsF.650j_axPHFQHMF0VIt1ySTNQfVmkwYD_ M4SQKaSrB6uU5OJM3EfBW_Humq93k7t34Dv0UpWSsFFW8shyPX21lPZJvTcZ OXXZcu._kxiXXOWX99I0m3DkvbdL_quy5FBkRomNTW_pSwiZBIdfHBGu50MS 9nIw.OfsGw1O0ATr25xhnJHFLd4PlcHTUBXfiGUamYauHYl_HmtmDcs2so5t jo1X2QbMvFUqicTPxGsJSPWzhxtucwSaWhqCBTqnKW12kmR.n19.GVeHCPoG 5fbPZ6S2rNO.LNDQzjl_7vpVXk.3WfaqAGUZaNZSKgTUx_m6dzipHtSDVyXl ZWvdU1M57p_stGRaLd7P2DLNwZA8gjZwrpTI3_hXdzz4E0HLWDqTsu70dLn3 NvwffnAgEQhrxZfe5eS8PmhRPM3oEBxVA6viz2i6xw–
X-Originating-IP: [202.54.119.135]
Authentication-Results: mta1021.mail.ac4.yahoo.com from=ymail.com; domainkeys=neutral (no sig); from=ymail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bulkhostingpanel.com) (202.54.119.135) by mta1021.mail.ac4.yahoo.com with SMTP; Sun, 07 Oct 2012 07:12:02 -0700
Received: (qmail 18600 invoked from network); 7 Oct 2012 18:40:51 +0530
Received: from unknown (HELO User) (120.140.1.40) by bulkhostingpanel.com with SMTP; 7 Oct 2012 18:40:51 +0530
Reply-To: <mr.abdulsaram168@ymail.com>
From: “Mr abdul saram”<mr.abdulsaram16@ymail.com>
Subject: Attention:
Date: Sun, 7 Oct 2012 05:24:25 +0800

Abdul Saram also sent out scam mail under the following names and email-addresses:

“Mr abdul saram” – <mr.abdulsaram16@ymail.com> – “EUROPEAN EURO MILLIONS LOTTERY COMMISSION” <europe”EUROPEAN EURO MILLIONS LOTTERY COMMISSION europe – FREE LOTTO AFFILIATED OFFICE U.K info_freelotto@ –  “Mr. Abdul”<info@yahoo.com> – “Gareth Bull” – <garethbull65@qq.com> – “Dr. Cherri Holden” – infficess@yahoo.com – “Mrs.carolynx Harold” – <info@winners.co.uk> – Mrs carolynx Harold <info@winners.co.org>

RECEIVED IP: 202.54.119.135 – LOCATION: India

ASSOCIATED IP: 41.221.17.37 – NIGERIA – 41.249.22.246

_____________________________________

2) INHERITANCE SCAM – TRANSFERING FUNDS – FRAUD

 

EMAIL: Greeting’s my dear,

I hope that you are in good health and God is always watching you and to take care of you and your Family.My name is Joy Donald and im a beautiful girl in this country of Cote d’ Ivoire. i am an ordinary girl and simple bread winner of my self. finish college degree not working .I am brought up motherless but i am thankful that I have my father with me all along till the death of my father on 20th Febuary 2010 in a private hospital here in Abidjan. he secretly called me on his bedside and told me that he has a sum of $ 12.500.000 (Tweleve Million, five hundred thousand dollars) left in a suspence account in one of the local bank here in Abidjan, that he used my name as his first daugther for the next of kin in deposit of the fund. now I can say that God is good in everywhere and in everytime. he also explained to me that it was because of this wealth and some huge amount of money his business associates supposed to balance him from the deal they had that he was poisoned by his business associates, that I should seek for a God fearing foreign partner in a country of my choice where I will transfer this money and use it for investment purpose such as real (estate management) can you be my friend,my guardian,my partner, for the time been.

dearest, i am honourably seeking your assistance in the following ways ) 1 to provide a Bank account where this money would be transferred to ) 2 to serve as the guardian of this since I am a girl of 22 years. moreover dear, i am willing to offer you some % of the sum as compensation for effort input after the successful transfer of this fund to your designate account overseas.I’m very honest person and always like to help others.

Thank you very much, i will wait for your reply. God always be with you.

Yours sincerly,
Ms Joy Donald

HEADER:

Return-Path: <ms_joydonald@hotmail.fr>
X-YahooFilteredBulk: 77.238.189.206
Received-SPF: softfail (transitioning domain of hotmail.fr does not designate 77.238.189.206 as permitted sender)
X-YMailISG: JZaHMLwWLDugrnxWgMa0KL19eLCCrSn4Vjkr9J4aFtdpeB0n RfO.FCSatFLs1uKMnFmNvRs95YCfGGD9V9ixQ2.ZUI18rrVrpd9c6YAKD_ep mGZvxWakYrLqBuZIajyrXKCMsGLNT.Aah2DmKlB56P5PAHpA0J5YhGOGuosH dDTRY0OuX_R3Cigqpyh.kfeN4GzHCORAXV1b8p5TP3x0QUK3U2ADv7qkiZba JbixTzA3LxKAdrJF3EKB6GWB0n_0_ppM3TTYmjDzqJbuNsoU6zGDYX93txZq qxUxiJMeHiVBwpAihr.pJBlWF_EyHO6sAOzxEtrSXQBDYI6r9vT28QfG2bkQ l4MbVzyT1n7Twa_dMibPyUW9rxhqG8pASUyelD5fotFzmrK0X_3wMOZbsrRO R.szB0QOzMHw2joCbG0c74FMFgackwgdLdLwfSuZjYsbQHlvUa0LVhp9U__x fzldM6GUoOtXkGubJ5MRQ6DpKzPL6C85e1jn0T0r9u1LJEuTPejfOuV0qDEV saYEVNnk4mi52SyZlcmFMeWs5t.2HixWTyQ2h4RTFfgmJLawAaYmAJGOYebQ uWegqh5C3LL_pgbxf4a9._LXUl.QPV7XNdY7wzOlJ3TlnmLnSJ3bf0U3zcHY q4MvlCc3owpjYOtD.53dx0hxoYSL2cI2KOFVPcZYz.T.ZQ1CyXAzAn6151hh nmtqAD9ouJeDgJt2SIInkOg5NHv1QWRdh_sNEiTVGdH4mHUSgvnEzn0FPZ_U l78PUoPR4fT8wEDua3xMfYaBj5Kb6a8G2qA6fBrhm86jmAjWXtcVEz0_M3g7 i3nL6AnRLdHhcPL.3Xm0akNe7iDDPlufAlUidGal8xP1Oigi8OpgcIq4Sthv QsHMTO0EfOYCaGrzoSaddqtTlZUfnctjltSptmoQ_DwMlYAY7QnXE00HvRFx EGiH.mwv7zj8Jnh6nxW3YbAtEZ9O95EeTTDlZKxOjGyEWsUl4qKh2IojbP1k pAb7WXT5XgRLMG1win4HfMlGuH15.XzvR.ArRmBQH50Qtckr5QGztIfMQLKq 1l1jsOK9RXb1A7C_DsILoPxg7yKSzmnDgVw.QA8oLyAVPHfxFAdcq3Vobrwq 2z_YIMiI7enn.1Vd0Jxek_GkywSnAcepswcn4eU.neYNWprRs9LCHxorbxkB RXlOtzwgZ7_TrVuVJPNOggjT9fqrEZYnUhUHbmi8SToV3zaP7toPD.Ux5b2z veuMgxkh_RhisgKxWbX7ku9z2CB.x2ZF4MwCiTwED3WCAQrTbu3fopeh1ICN XFDoHmtkcfuos7_eCmTGq8_SCdX5lE3TBlWZU04svWZWMIk-
X-Originating-IP: [77.238.189.206]
Authentication-Results: mta1300.mail.bf1.yahoo.com from=hotmail.fr; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm17-vm1.bullet.mail.ird.yahoo.com) (77.238.189.206) by mta1300.mail.bf1.yahoo.com with SMTP; Wed, 10 Oct 2012 09:25:01 -0700
Received: from [77.238.189.54] by nm17.bullet.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
Received: from [212.82.108.253] by tm7.bullet.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
Received: from [127.0.0.1] by omp1018.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 759852.5070.bm@omp1018.mail.ird.yahoo.com
Received: (qmail 95614 invoked by uid 60001); 10 Oct 2012 16:25:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1349886300; bh=jaEN//dfogj2VveAeEoe/VXQQN2SwrOCdupZLniFXYg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=gFNDxSA+fQ/8A8jgKkFMAaKNlbRG81Fr2Blh/islfQc7fwumPFknPMR73jC3ebIw4/Jj4IaBtCCTajqdTlzpH3FQxVOWIRcnul4FVBa1NZN2f+DtPR6t1YHzzZXcfrd1UpORj1wmOG/WHquNyYwesDFYod+iLcHYwQJEIPJrWfc=
X-YMail-OSG: bNrzragVM1mTLrq9DxIX40L1J60JiJhrQ0wuRl7w6Sd1Y7u c6kjz5pTHtaDVpdpayxVP37.bOAv5uVox3wH3edxmNiadIQU_MhECL99_P6g rvJJGcLBsCljDdhiWqr0Lia7jKJHIdfX_w4avRcs0Tu8DTDkWNA31_7_FarE 5nYlfMedww6RvY5K6h7IcIEvs2U1G.CbX9WXYhiKjfdLM1s.v6W5SIPf85RN NspEsJXiafUi1QAXAzPKLhU5.bmFjCz3JER3WhYejBKIdkPQLJ2VE8ct95FS WDB6xtDiU3tRzQcEySrIXJwoMv15ScwC9pYuVs85JwH6ypUAAjAftFarPXEd 6hujb7zfiswYXLQg55XfnQReV36PZHVy6ffLu0QeipIkfC4HHTbakq7ag8Jr XU9qFc.5IR_JpnGYiINd_iBBp1.LjenFSIHT8o9Sw1RHSZMG_iIkMM0eJSVp sZdhbJKJSLaszEdLqD3iUcFwpzHD8iot8Ip6DIO17SMm.mgMxGJeksfmf1lC SlCGFXSmSGO7XZeO4emPmb749eAOGk0CgYHYwdL2RtbFD3fSHqR4LP0KtBJw tmUvaL1yqR_mUcAzvCjSAjAAP0lgfDUNpDZVmYlwbwl6NlJmowcO23eAppF6 rBOFUIVZHkG70Ht502_wTFM_e420-
Received: from [196.201.65.21] by web171605.mail.ir2.yahoo.com via HTTP; Wed, 10 Oct 2012 17:25:00 BST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1349886300.86977.YahooMailClassic@web171605.mail.ir2.yahoo.com>
Date: Wed, 10 Oct 2012 17:25:00 +0100 (BST)
From: Joy Donald <ms_joydonald@hotmail.fr>
Reply-To: donaldjoys1@yahoo.co.th
Subject: CAN I TRUST YOU

FROM:  “Joy Donald” ms_joydonald@hotmail.fr Reply-address: donaldjoys1@yahoo.co.th

____________________________________________________

This scammer spells Federal incorrect  – ‘ Federal Republic of Benin ‘ not ‘ FREDeral – LOL they aren’t smaRT AT ALL.

3) LOTTERY SCAM – 419 SCAMMER

EMAIL: FROM DESK OF MINISTER OF FREDERAL REPUBLIC OF BENIN.

FOREIGN CONTRACTOR PAYMENT OFFICE.

ATTENTION BENEFICIARY ,

The Board of Federal Ministry of Finance Benin Republic. are here to notify you of your payment inherited funds of ($2.500.00M)U.S.D dollars . after the meeting held on 6th of NOVEMBER 2011. His Exelence the PRESIDENT OF FEDERAL REPUBLIC OF BENIN DR YAYEE BONI. has Instructed this Department to send your funds through western union money transfer for easier receive of your inherinted funds without any further delay. to avoid paying money to the fraud stars that is going on through the global.

You are required to send your name and address were you want your fund to be send through western union the maximium amount you will be receiving each day starting from tomorrow is the sum of $5000.00. also your are required to send us the sum of $105.00 dollar for Re-newing and recofirming file that was deposited in this office with your name and address bellow .

Beneficiarey name———————
Address———————– ——–
Tel phone————————- —-
Your ID copy————————–
Your city————————-
Contact MR DOUGLAS JOHN with your informations below:
CONTACT PERSON: DOUGLAS JOHN
EMAIL: ( western.union45@live.fr )
TELEPHONE : +22968449676 OR +22999203703

As soon the required fee of $105.00 is send today for the renewing reconfirming the payment file of your funds you will start receiving your funds as from tomorrow.

Send the $105 dollar through western union with the name and I am waiting for you to give information to enable you start to receive your paymeny as from tomorrow

Send the money with this below information;

RECEIVERS NAME, PETER MARK
COUNTRY: REPUBLIC DU BENIN.
CITY: COTONOU
QUESTION HOW LONG?
ANSWER IMMEDIATELY
TOTAL AMOUNT $105.00

We await to receive the western union payment informations today. Please if you a are not the real beneficiary dont repond or delite
As soon as you send the only $105.00 usd you pick this first payment immediately ok you can track it now to your private system to be sure.

Yours in service
Financial Minister
Federal republic of Benin
WAITING TO HEAR FROM YOU AS SOON AS POSSIBLE

HEADER:

Return-Path: <officefile389@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.94
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: rVs1dXIWLDsMv_.n5QvLQrk7czd0m_vZykzvsDv2bO1NcJ6B mEmKmBbytjJ2Q2q7hoVPQRFf.X6dUoEqTwfUInQ1y31cNswweQ_WvtxI.i4x G_5EcbtSTAVFV_Tb4UXEP5nfbLLR3OcUBVBsg5a5QXdq93GUClR8IM3EZ5Oq Ax7QU446TQrW4z5fvkmJx3BMyug0lDIr.UKXxO4wFuMypYMVzckAr19SaEIM 9HuVKawHWF29nJmCMUx1.u.4D0ux2wFAlii5MeUQ942cVWxRJNRPKcmbs.HI xfvch.PCVUxqRomtl.EHpyv..T7KNAcWhNhb.OyXv.2QECxKRPe1A7JQ3esP SwDsYR_GQhXSI6NrwhwyUw_L5OuoS6BVHHBBLlwcEVolhJCEGaAjbppebA8J evmsqJ5PFkMZld3WHHJKdpHcYATjH92mH_OttCP.t_gHne6LdIMpg0icfVbo JUw8u4QIpzjvDbBLcLOo7FKhjR_..Dw3CR5HiVy3MjdTZZSVWnsizrHoNYE5 ravSWhY7xBCAUFpwo3u_TWaz0OusXIdi4QFDzivf0VIeiX7U2loHfgshFWfv XZnqeScp1sfpl5.qC8A.jyo8muRr0mX9Tl9byXrF3WYKvEdt3W8eOw0pl6tr nVjmCpVK3My0FU0bhunib_bq4I.amgNLqsYq2RCFlXCeCHFfOKNnfxNjbynC hxvT_tPcgA7lKv2YKqXSpx0aPsEAli7rWut4ZUI.mbV9ciR48JO1mZKsFMun Esrk8D.4ejFipPpmySq5vieercIDg0U79Pww_IHpoccnLrUXM_pkm_n5CE5W J5j0vgLwbYEKKiNM4J.qM.pziSivmA3LHJx4AT_NN_Ifx60YZTyinP8JewNB nEbJEKBjRYYIcrvzTgHy_Hp5rIhJK65y8uhTrNI1le7l6deAErzP.vQvp7RZ UQ061OvKu0ROvUPBj6ooxDZJiQPzlk5YUlYRoNhyiOarHEJYYvHrc2MAfnbs SXemLmas9CFQe.FOnAWLXg6IJXXnlJWn0Suo3DTioi7qFA.PEES_wVpW8Dq. pHM5id.fOlTcNRbobhwM5ELiEbv8UqiWO_xk43r8CF53mgnSxRGX_ofgT.vM K7TyCiTkiLJqrRPsj2XGv6qaEwrHZQVK_zZAm8bQlHgHMW.EPX1efMclxHr7 Hv87ie3KJVlYsbpt41qN.jHZ72TTGfgMUBIpd11uFx7wBWTNJnzM8wuflbWz 7ScRo1Rd9xaY2kgiJd00y.yGR9q0Te8G7.2gs64XgAj.rJHJEesoyLAnHor7 oBWj5K.idQo2jtWtMldstigscuNvbIdpB8ho6rmCzuBDmN33y0aFRpxE8w–
X-Originating-IP: [203.188.200.94]
Authentication-Results: mta1342.mail.gq1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm12-vm8.bullet.mail.tp2.yahoo.com) (203.188.200.94) by mta1342.mail.gq1.yahoo.com with SMTP; Wed, 10 Oct 2012 07:09:33 -0700
Received: from [203.188.200.220] by nm12.bullet.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
Received: from [203.188.200.63] by tm7.bullet.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
Received: from [127.0.0.1] by omp1004.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 119691.33270.bm@omp1004.mail.tp2.yahoo.com
Received: (qmail 38888 invoked by uid 60001); 10 Oct 2012 12:59:01 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1349873941; bh=MP+++lIJyYrpj/aXzm3tMnmhmfCfqMXOi5e1kzYn3Tw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=LVkAtUGaJbi5dfKJkjQghJrT8gUU0PgdSqmZsd9E/ZHQ6/CG6mgNm+rvJDts6pp3AiUWIw0omchZ9EGQ4FunoccmA2lDVIGS7pb99sdl5hsF0AkgCspFU5fgyb8PuayE1Yj98s03K9J4GMwWfqlVMdLewAIrzkJxc6PdD07aZ9I=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=c38Gpj05IhDmqBiYzJHOdEYJeIkGQAvzHcxXPhNy+G8fqdVpH1DSEJEtXQ2/1BsyYYvWZ8vCfJOX3lA93bclbzxnjXmUqQmhkeuQy2JqNskNXltl1tRwk609ukguAOvwLPnMhfqMio8PHMWIVwSnCRb2k3C14uRVjsQ6OpWNeTA=;
X-YMail-OSG: _GARL1wVM1lqQRqVGyFk1sZRYyWzAuNVhJd1sZHEBwkfLNd PMIg9HENG
Received: from [41.138.89.38] by web92411.mail.cnh.yahoo.com via HTTP; Wed, 10 Oct 2012 20:59:00 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1349873940.38815.YahooMailClassic@web92411.mail.cnh.yahoo.com>
Date: Wed, 10 Oct 2012 20:59:00 +0800 (CST)
From: MR DOUGLAS JOHN <officefile389@yahoo.cn>
Reply-To: western.union45@live.fr
Subject: ATTENTION BENEFICIARY

41.138.89.38 – BENIN / NIGERIA

“MR DOUGLAS JOHN” <officefile389@yahoo.cn>  westernunion45@live.fr

_________________________________________

4) SCAM – MONEY ORDERS – MONEY TRANSACTION – FRAUD

EMAIL: Attention please,
My name is Kim Wong, The Owner of Kim Wong Trading LLC,Kuala Lumpur Malaysia. I have been into Manufacturing of Fabrics,Textiles and Furniture Wares since I was a little child that gives me about 23 years of experience, I majored in art in high school and took a few college art courses, Most of my work is done in hand neatings mixed with Machine Embroidery.

I have recently added designing and creating artwork on the computer, I have been selling my Works for the last 3 years and have had my work featured on trading cards, prints and in magazines. I have sold in galleries and to private collectors from all around the world, I am always facing serious difficulties when it comes to selling my works to Americans, they are always offering to pay with MONEY ORDERS OR CASHIER CHECKS which is difficult for me to cash here in Malaysia.

I am looking for a representative in the United States, Canada and Europe who will be working for me as a part time worker and I will be willing to pay 15% for every transaction, this will not affect your present state of work. Someone who would help me receive payments from my customers in the united states, I mean someone that is responsible and reliable, because the cost of coming to the state and getting this payments is very expensive and time consuming, I am working on setting up a branch in the states for now I need a representative in United States who will be handling the payment aspect for my company.

These payments are in money orders and cashier checks and they will come to you in your name, If you are willing to WORK as our representative, All you need to do is cash the money orders and Cashier Checks, deduct your 15% and wire the rest to my company cashier here in Malaysia.

If you are interested in this PART TIME JOB OFFER, Please get back to me as soon as possible and send to me the listed information below:

1.Your Full Name:
2.Your Full Home Address
3.Your Direct Cell, Home and Office Number
4.Your Age, Gender and Present Occupation
4.Your Marital Status

The only problem which I have is trust, It will not cost you any amount, you are to receive payments from customers for my company which will be sent to you by FedEx or Ups from my debtors, which would come in Money Order and cashier Cheques depending on the of the payment my customers wants to use, then you are to cash it, deduct your 15% and wire the balance back to us.

NB: All charges to wire the Balance to us will be deducted from our money, so you are rest assured that you wouldn’t spend a dime out of your 15% or your personal money.
Thanks for your assistant and God bless,
Mr Kim Wong
Kim Wong Trading LLC
Lot 925 Jalan Kepong
Kuala Lumpur 52100 Malaysia

HEADER:

Return-Path: <mr_kimwong@etorq.net>
X-YahooFilteredBulk: 211.154.152.136
Received-SPF: none (domain of etorq.net does not designate permitted sender hosts)
X-YMailISG: yoXgebkWLDvhvSfGpf994bmowTFZpMDPw.1lseHkGA6T1SnA p1t3YxvxJS8N8EA6awflpA_S2QDZLDNMysomaZ_MhaETYuaVnjK1VCJfTVKg GS9W.3ZA3E0Nh3jVpAmuwHhVIFDW4md6Ih9TNntrWk8ZC7..jVHc9sonfVfW kOEygm8wmiN5oXRKB.x2mDSGgaNgpBu41IjFp3gBszrQIbsrDvNrrbX9uTH_ p7Rmx_l0Zrnd9FnqK.6C.zDTZyUuBsTQzCnWsM8tN1i_VRV0x_8_U6RqsTFm msR1VVPtNvDefm9IQjfYvdwJi5u2l5cNzeXjhEbiJmh2X_yK3vkalx4gjUjh AA_sYJdx7rgzLQ4_6TUXm96XQ0h4Dj_q9q4rAkf4ng0GzIJuMbhIWz9SSyc9 ky06NEAdJ.cBOsYY9pgrcAknG7Y1E2ecsvgQVSvIFQkstnNfG6BfSLt4dUe5 P1m.zXjK0.Lt9okfVcAJD33H_m0P1BCnItM4qwEFQmK91MxCGzCumuWqjPgY mJB_mcLtk3GZYcEf5z6pgS4q0NcL5BxMZ9pRg2jSIh6L8.EofXjDJ0QLTH2F oIvu9VLDtSm9CGm4dH3bF.fLuKCzPWcIR0W.cTJ1lx5E6.3cSpC6tu3xvrKT 3wtlgnidfUeFjY_B40NbWu7gSyUVmUYqSZcI53AkvjJhGr8UVgQZeZQz3_dF G3IKjw1ZbJO_m6WGSUENcg71vx7nFW7LeSncqg_yPEKXpNHTZoqUy4vNPlJB .edCKetnFzhsNi.fpSYxgKwiY4zAB7lAAnGVv_LTSiuNHY8Gq4_BjbG7TUVh 1jEbBhPSdv6h2Xn2d_a7_wluSypmlmmijiwoAyjJIzXIQRxOGyAQUpLNt3ic kidbPtvVlp9C5BxHHlSC4l_TaH2audAFdA61K6KkLpVzKbs7aDlwAG_4JY.P eHDCSLcxciwXAbIVMDhDjZzvgAxY9jnt1sY71l7n7d1dl6ufMrE_o0_qDe1j gk.030j9Eoh1E1ERfEHIOI85Czc2grhxp1jZP1GPEcz_HcFqrSn_eKAq.2ab BfXWVSKD5C53t6ibYYh55uQciKnQjLdW1DfMxvcOadU56IUCpJhN_X3tzBgB Vq7jtWkEC6p8UoTEaiFTL_bWrElyr4fvGLTgBOPVxMvn1t.ZmSAZquSUnn4E qSyewFfWh_6vi30xuvWs7yvkhvzMwEH_vHf6qrBNx2h8JRqQ
X-Originating-IP: [211.154.152.136]
Authentication-Results: mta1468.mail.mud.yahoo.com from=etorq.net; domainkeys=neutral (no sig); from=etorq.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO mail.giantsea.com) (211.154.152.136) by mta1468.mail.mud.yahoo.com with SMTP; Mon, 08 Oct 2012 13:09:44 -0700
Received: from User ([82.128.3.119]) (envelope-sender <mr_kimwong@etorq.net>) by 211.154.152.136 with ESMTP for <pondillobelle@aol.com>; Tue, 09 Oct 2012 01:25:27 +0800
Reply-To: <mr_kimwong@yahoo.co.jp>
From: “Mr Kim Wong”<mr_kimwong@etorq.net>
Subject: Your assistant please
Date: Mon, 8 Oct 2012 18:24:46 +0100

FROM: Mr Kim Wong mr_kimwong@etorq.net Reply-address: mr_kimwong@yahoo.co.jp SCAMMERS THIRD EMAIL-ADDRESS: pondillobelle@aol.com

Why would anyone need three fake addresses and fake IP’s just to send an email? Only scammers go this far to confuse and hide their identities because they’re cowards who lie, cheat and steal 🙂

 
Leave a comment

Posted by on 12/07/2012 in Lottery Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: