RSS

Tag Archives: Benin

“Mrs. Suzan Chapman”

RECOVERY (LOTTERY) SCAM – NIGERIAN 419 SCAMMER

NOTE: I’ve never been scammed by anyone but get alot of ‘recovery’ scam emails and because scammers are very unorganized, it’s possible I slipped on the ”suckers list” lol.. Oh well, the more emails the better because then that means I can post them on here and possibly save a (potential) victim.

Below are two emails sent by the same scammer under a different name, email-address and IP location. ( Suzan Chapman sends out scam mail under Williams Johnson & Ruben Maxwell )

Hello My Dear
I am Mrs. Suzan Chapman; I am a US citizen, 48 years Old. My residential address is as follows P.O. Box 1920 Hazelton Drive Germantown, Tennessee 38138, United States, am thinking of moving since I am now wealthy. I am one of those that took part in the Compensation in Benin Republic many years ago and they refused to pay me, I had paid over $99,000, while in the United State, trying to get my payment all to no avail.

So I decided to travel down to West Africa precisely Benin Republic with all my compensation documents, and I was directed to meet Barr. Ruben Maxwell, who is the member of OUTSTANDING PAYMENT AWARD COMMITTEE and a Human Rights Activist (Lawyer), and I contacted him and he explained everything to me. He said whoever is contacting us through emails are Bogus (Fake).

He took me to the paying bank for the claim of my Compensation payment. Right now I am the happiest woman on earth because I have received my compensation funds amount of $1,5,000,000.00. Moreover, Mr. Williams Johnson, showed me the full information of those that won lottery, and those whose inheritance had not been paid and the list of all outstanding contractor that were owed that are yet to receive their payments and I saw your information’s as one of the scam victims, that is why I decided to email you to stop dealing with those people, they are not with your fund, they are only making money out of you. I will advise you to contact Mr. Ruben Maxwell directly on this information below.

Name: Mr. Ruben Maxwell (Barrister)
Email’s: (ruben.maxwell@ymail.com) (rubenmaxwell@globomail.com)
Phone: +229 94 99 53 77

You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing.
The only money I paid after I met Dr. Thomas Boni Yayi was just $280 for the paper works, take note of that.

Thank You and Be Blessed.
Mrs. Suzan Chapman.
P.O. Box 1920 Hazelton Drive Germantown, Tennessee 38138 USA. Add me on your YM mrssuzanjohnson@kimo.com

HEADER:

Return-Path: <officefilee@yandex.kz>
X-YahooFilteredBulk: 1.235.121.101
Received-SPF: softfail (transitioning domain of yandex.kz does not designate 1.235.121.101 as permitted sender)
X-YMailISG: dDycFlwWLDuyVY7iGmbjhHLp63OyDyVfDBlkWhu.O8tDMNe8 .KZdKCQyBsBR3UVDRBm3mEBWxOY_W.pr1wP_2PpoKNSTQc6JYyYaxT9R.wo. pKhHHHTKbg8VL7n89IabyGdU14jxsyXQm_WCEdkiGXxhoi723kfHIhqGErmu C1wEl_0NFP5G117BvHIT1hjWC8nAUDC.Ss49pIWmuGy5Lt2wyd2VTw_riam6 qx0Cu_Ip.kxhtpTztlr3V6SUoy8pcLnXb1YqadcFCZ4DjoovqQAc2py2yv0C PqmaNnj_it4cm8o6zDrC2oZUHqMRCGH1QzTsS2YpK7g2tIJCJ5XGwZrQPjis 9bndf9IOky9SDCCjEhTeIwFHAhFH9ZZNPbI5q7YRnewPj_wNghTYvrhZK8Rq simwKqvZpy7DG65Zrm_m08LyQHk_eaTEjM_0YbPb5QfHDWWSzJEhTkI1nhuH 8tUDZ4K10zrgl.haug02JN3yQrRN08twJySYdR5b88Uc.MhFPnDiijveZWYO 30C2ldqANVmu.PHHqcF_1nsCQDkEtGm90jeuawzh43jWt_2iqmFZ_eDZeV4O mo0cKxhRB8BZO6d9ehNvkv5zZ35mFDOHNjYPRWWBPjZbTLBuhKYN421F4KJV DKZ2GriawmFqfiBj7v.ao4ZBHiDJNv.9s38pItexc24reUEdozNn3_xz0gmf 0Ks_WhC1qDL4AK4atiNFrbUVzr.FAR0texoUgEl4SxIoPvf7OqciGLhxfpcT ZMHyiD8BE6WD8gRzl9hy1gPGDnBU6V9bzIKmMnU7RZr7o.9pQpzPUKdfhU2S ET2vZYAGHgwh6137UvE.8ZrhFnzxviczTqRxxm7gnGedWa8_d4FtfNwV_B4Q bYmN0yXkeTEVRpTaYccqMWvKTjhYnlDhLaCDGqUIHoEujwkCScLPvVYJ65xs Pfn4NY3lA1sX3ibAkOA6HTJM091ZHWFmrFTjdVT7kOD4rOLM55xWGOkJh2vu NwW3mHj5147dKNNgGGOPCDKsK7udJ6A6fmSdzTTuTvH3eo4HaI30jwzr3SpS pm7380yEfjnaablGbS.6_y9_3pzS0G0gB._FWfCkALDPXyDfOJJJkTTG3sbR 45KKjw6vHRk4sXYWQjrpXwr_Y99c7Sc6x488YUE30psfWBYx4V3ArdJVgwLG bTTZE55Z2vS9g67xRo7AiXCxnjnhyAidwlyrMO5llsg8INgBHAMBzOiCYe26 uUsScAguvqr2epPVCH1dSAuLymdxChsKMqeKo0.n6BxNgzy6WXRlVqWo8z1I GBUsPRJOQEtaBR9LZpfAnAuf_8mH4GDqMySGKRAfltcAd4ZlFxx.hvmrOpUp IlJojtl2UhEm8kbQ_LtbXXOBo1fkuLw-
X-Originating-IP: [1.235.121.101]
Authentication-Results: mta1215.mail.bf1.yahoo.com from=yandex.kz; domainkeys=neutral (no sig); from=yandex.kz; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO localhost.localdomain) (1.235.121.101) by mta1215.mail.bf1.yahoo.com with SMTP; Fri, 12 Oct 2012 22:32:41 -0700
Received: from User (69-2-73-170.static.networktel.net [69.2.73.170]) (authenticated bits=0) by localhost.localdomain (8.13.8/8.13.8) with ESMTP id q9D5Lnlc022212; Sat, 13 Oct 2012 14:21:51 +0900
Message-Id: <201210130521.q9D5Lnlc022212@localhost.localdomain>
Reply-To: <ruben.maxwell@ymail.com>
From: “Mrs. Suzan Chapman”<officefilee@yandex.kz>
Subject: I am Mrs. Suzan Chapman

“Mrs. Suzan Chapman” <officefilee@yandex.kz>  mrssuzanjohnson@kimo.com   ruben.maxwell@ymail.com  rubenmaxwell@globomail.com
Mrs. Suzan Chapman officefilee@yandex.kz +22994995377
+229-94995377 – 1.235.121.101 – 69.2.73.170 –
Ruben Maxwell ruben.maxwell@ymail.com RECEIVED-IP: 41.138.90.38 ORIGINATING-IP: 98.139.212.188

______________________________________

BELOW IS AN UPDATED EMAIL SENT YESTERDAY (CHRISTMAS EVE, 2012) — SUZAN IS NOW PRETENDING TO BE RUBEN MAXWELL — 

SUBJECT: forward us your full information okay

EMAIL: Hello, forward us your full information okay

HEADER:

Return-Path: <ruben.maxwell@ymail.com>
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts) IG9rYXkgSGVsbCBNcnMuIENoYXBtYW4gaXMgdGhpcyBlbWFpbCBhY2NvdW50 IHN0aWxsIGluIG9yZGVyPyBQbGVhc2UgZ2V0IGJhY2sgdG8gbWUuIFRoYW5r IHlvdS4gLS0tIE9uIFNhdCwgMTAvMTMvMTIsIE1ycy4gU3V6YW4gQ2hhcG1h biA8b2ZmaWNlZmlsZWVAeWFuZGV4Lmt6PiB3cm90ZTogRnJvbTogTXJzLiBT dXphbiBDaGFwbWFuIDxvZmZpY2VmaWxlZUB5YW5kZXgua3o.IAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: 22Z_9qwWLDsY6dOxAcdBWiirU.HBD0chVME2CmG76KkKnVmX DTsbTWTWMU.wSMcs02UEJ26Ng27cLJWJFdyEH7WFV6ST0ZZc6uPXnnre2Jq_ Z45CVIHIEp1a5sUP92F7GeCVqnJFJpFg2tu3se4EY61shx2dl4I0LI8s_W97 CvPMsbClpd3SqC2NJXabPjCerJN5lIbbSsbZVmNl3cOR8ginxqb18O8M8Nny aqWmiO1hHohFC9TqQAR0LE_s0TvDyLSQFK9S09T7l._iKRPJNsMFGdFFr_cG f0y4wIZoiGLXFCsd3_uFqHnTJ.xcVrC5KHqJmTZz2maAzWv3E26eM97eVJhD 3ZKU5sB2iPzv989D5rBw0JQMZicbAXsr6WZH_HsyN8N_GB6D92iajLh7YsIz p_uQBuZHmtCV7M4zoUWJg.bUdz_c5Cvps_Qfz_tTgfxdonCltVPa_aYCI6po 4U71OPJT45TI_mYmdvJ55EmVYMZAtEzEAOW3AUo4MhSQKrrppoUN4PPx7v45 A_SW_V7edo4ktDgKZ.LQpRsrtYlp2GJGMaeLtSLJnh8KeZNfoZd5YQRNItz. wFm_E3hdjJyPAPD29zwNbyM7txX_gkncMbcPe4x2MYRYJ5V.4dB_dh8z_9kT m0tV.ROg.v0LR8tMPDreBuJs0SrVfHyGWcap7bccqH.BMvAC4iu5QkIwoEVs V42zjW7rZdqwnV8TZB2wjkP4grYULIjys1Pn8SFWCXnds1fwbbOxIHDxNuCA lEqL0d4aWu2maqCE5.yAoiuyz5l7McmLVmHnYyRavDp9XXmWKefzRdlKyzzg CNvkchxgwmdRXkQUFYeuV4yJsmTUUG6j_iOuZx.Wiy2eh0N9.Xo9ACXiAa4P FibrDI6GfuDiH1nyUMSk3px3sdr0GWZEhm_qqq..c1jOEYGeTMQ71URwh0i1 FgZB6HLhJM5bBWRNHcFiZ.wpvnQukj1nYtdxhgLPeDLLBZ9WcnVzz44HQ5rs Byq43NR9_j.m19pa5eiTVvULqiHqXszT4H1Vp7vOG2pt9V.u7YkI1xhcY8YM 0BOLmQapn0GHg8DrvzkCIQ9VBpKtwu4GvklsoElZqcu.PeAJxGObA5HeZwul z89GNE.CuxN1Y1Gg5J_yQ4X1InWqvMZcfv5YTg0c2Qi4E40Fkwm6pbuffqps Pru89Q_j6rIi9ePVlNJmSFdUqHdAI71RuAjC.hcBryDfYyN60DISieJFtcdx o7MDfQuzM338IXGUYzq5Gp5jaZaNQouOuAkqKhOOGVz4u0lhbwhFIKUatRsn 7g_UAvrzOsnTW7xNuGSb0ihq5N_Q4OOZPhyePRhwZthrg7qGxMISOLHnKd63 LEtLmyU1o_Qe3EqrAqYyRK2toRTT_w2N.MPzeZUK4JAqVrKhGlGPPwqmJsSe wuHl5HIkDe7wYsh4OZo9xHAasS.3_fipRr2n_1eX
X-Originating-IP: [98.139.212.188]
Authentication-Results: mta1020.mail.ne1.yahoo.com from=ymail.com; domainkeys=pass (ok); from=ymail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm29.bullet.mail.bf1.yahoo.com) (98.139.212.188) by mta1020.mail.ne1.yahoo.com with SMTP; Mon, 24 Dec 2012 09:40:59 +0000
Received: from [98.139.215.141] by nm29.bullet.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
Received: from [98.139.212.237] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
Received: from [127.0.0.1] by omp1046.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 216004.90175.bm@omp1046.mail.bf1.yahoo.com
Received: (qmail 46683 invoked by uid 60001); 24 Dec 2012 09:40:59 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ymail.com; s=s1024; t=1356342059; bh=lUv5r9kJp9yZzRpM4GROp5bn+gKsvtE9FduO0AEBgyk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=m3GdCZCLmhxjaA6YFaKQJU4PQoEGQ6FC+JnukCXQqvx4eBOMHfwgLrA7BvAkHqu2oBrbvTUcsFMrOmxTxEMed3VBSdtnlTSoqyLmgBztakNEH6kLqsWfASfCCGB7JQ3z5n3vrUr0SvqnSa5qUL2vRYraGWQa0WuLa0k2Z/7tG04=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=ymail.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=IntzzZSK+/bm4sc+SMkbYGpAutn2Gk82SPjwF3pNjFpdzjvvyIWLiro73WdvajESwH8vZdtjIrW6iJbGuN8RLbi/GyArM9lQnGMVS4pcCpO8pRx7YLqWWEHdm18Aq0On6ojBqb4t2L83VjtV2UscTa3iWBExbfdtCf+z7kiTd/4=;
X-YMail-OSG: lNvx.3AVM1n2Fq76qv_FwECW8MNzlRB_LiglR.6ta9dnFty Z0zJ_K2SxMrm9vGID55ARBd4aNIEwFDXueDVWjESCOG_g3f6YVTtpyL0n5CN WU2W6dZppKirH4yJyOYPnAk5cHwkuGdzGpy_FYExHQh1nGyikbUWvFribOxm 6ls7wGoYb.1JEPohoQ_Slmz9drjFCVciWuq25x_oWa843XANsNGyF6tCAGed h7QgYlgOi7DV35BKoGP5DnrL1UhL6w3AJS7ZqG2NuXoH2flTKH8uCgi3gYET PZzp_cXB7nSH3vGoQxHhscj9jWfvZM8Ca8AGpa9PmKmtcJ3GV.l3EELLvlIO kDuUqZn2XcWpkImKqFSk_em00J5oounzJR9Mm1feeZx0SK9HGJYy1G16MKvN wHo5Umb9.xLy1Z9y3twv1RQwdDj_ha.vPND0DatGu_o4HN9ABudbpWWQGPc5 L_Wz2HOU5YrD8e1zVWZZep7GbOBB5oFIuxQ7I0um0tOvwhvs6vBr50XI-
Received: from [41.138.90.38] by web161203.mail.bf1.yahoo.com via HTTP; Mon, 24 Dec 2012 01:40:58 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356342058.37287.YahooMailClassic@web161203.mail.bf1.yahoo.com>
Date: Mon, 24 Dec 2012 01:40:58 -0800 (PST)
From: Ruben Maxwell <ruben.maxwell@ymail.com>
Subject: forward us your full information okay
Content-Type: multipart/alternative; boundary=”-852950040-498957605-1356342058=:37287″

 
Leave a comment

Posted by on 12/21/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“Nelly.”

INHERITANCE SCAM – BENEFICIAL TRANSACTION – NIGERIAN 419 SCAMMER –

monkeyscamgif

EMAIL: Dear Friend !!!

My name is Nelly, single young girl 26 years from ivory cost willing to relocate to another country. I am writing to seek your co-operation over friendship with transaction, please due welcome me, i am the only daughter of Mr Williams. he died one early morning with my family by rebels in middle of war, he deposited  9.500.000 euro in the bank, when he was alive with my name as the next of kin.

i ran to refuge camp at nearest country Benin, i want the money but bank manager told me to search for a foreign partner that will assist me for the transaction, so if you can help me to transfer it write to me back, i will send my pictures to you latter.

yours truly
Nelly

HEADER:

Return-Path: <nellypiusv_1@yahoo.fr>
X-YahooFilteredBulk: 77.238.189.199
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: 5pmxKd0WLDs.4vaumrFw.TtsgwVZ3OX_8UlpeyA7uU_3P5WN 7pTP0le6ZI8F7IW3lolpQZ0bbVW4Zs0W5uH38xkr5XLMGDG948PMTooHoWE5 2ISberrReRrprxpRc_DMCr6LVOduOHYWoH_E69dA1vlhsXMZsJ6D61URmJyT 42lp77FTIFDFRxqZxFb.ZXmXb81j0NB6AtxNIesjH9gFxuUZSX1Gy.oomZPF MoUWaQd1LcDYxNiswIfhWTLe3LKU7s5JfpBviopsEzDvqxZv3pn462dNPtkH 4u8oWsPpkGEwuJW9a2PDnz4J36nP5AKBsp2BP8K1ewtmNW62CP.6U1gpizvb eJTeIfzXwdJ39tyq2lHhTBnJ1Fyt5ZLvLOMWdW_ps.bavzMqhB.GqPAPD_2f EfDeWR_j0_ZY4mwSp2AYGuhUQ6KQ37JLLjQyVVWNOccwJEzKKDcEweedDIqf M8Tv_u2LWPrugifePZx4kPwjizMH_SZv5bSIEPXtcRLI.PlMXrgh5kYnHYWL N0QZu8S8Pu_jeufGUZhSQfbxoO6JD5y60kMeIostPKzko6VOfpqnnynLCFyb mqhrG8YVtQ7HkXik9mxptVZmav5ByM2.mz7SyNnwCoHrGrMGuvT9jeJFGp37 NAR1x7Fui_65xyza2Kt8ty.g7fKEtakZtk.P34cbjFYQ00cJCXJhICbN8e3t USn9.VOKMrut1W4dYjH3ucnayv6HePBdqJVGdua8HhJY0qdii6GLzm1bxgwI Q61hP.GRrIbS6ft_Zm7s24o2zlWkZqn1WjYCU70dIG0kLGb_.Ywcifhsbmsp ADCm1XIFKyOH4Bdg9gAcLTc23CcvrvWjMSejeAP4kG59q3tRKFd6rS1AXgQP tOUXkkbRTdDszOTp0QwxMZSmpATgkgTJghmlivb2OtX7aFgclh8TFsx9wacV T6IIVyzGTYdsuSLmG8qm6a0wMlm0TG5LYDRPdnOVKJ.4qXtRMSY7ad8rGaXp dR2_Q_ipP2rQOT_RMS0tn7WNLpk5ReC3zDBFKGWfjh.5AFhYmRFEsCc5pgcz zLqyaVxa.kH.2iVRnUkwndG7FQeOfu446OuyxydkcbWhD7rAhGZIeqL9s.az 4LuiX4p9UurcIjQZw0.o..UUyUOer5RQdNoxMWXFTj0HDQo-
X-Originating-IP: [77.238.189.199]
Authentication-Results: mta1270.mail.ac4.yahoo.com from=yahoo.fr; domainkeys=pass (ok); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2-vm0.bullet.mail.ird.yahoo.com) (77.238.189.199) by mta1270.mail.ac4.yahoo.com with SMTP; Wed, 19 Dec 2012 05:27:22 -0800
Received: from [77.238.189.50] by nm2.bullet.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
Received: from [212.82.108.118] by tm3.bullet.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
Received: from [127.0.0.1] by omp1027.mail.ird.yahoo.com with NNFMP; 19 Dec 2012 13:27:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 885882.25238.bm@omp1027.mail.ird.yahoo.com
Received: (qmail 49358 invoked by uid 60001); 19 Dec 2012 13:27:21 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1355923641; bh=3PDBaOP1V6Gti8xQ3yR1RdhGGlQViEZ5YDKefufvyDM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=YrsBDJJLDOUzevE3of8+4NCg0X9gHe3x1Q0ArKvHZV7pziT8wEtzAhqRop0PA51KPKiR2/2dFk6LweYuhHuRg8omTLQy3CC8gZjHZpMdEdQMzmlcLBRtB8DzI6R3VdL26gjvyf33MS67oR4VS3tUKxuPNXx0PbyM/whuIf827jA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=2IWLMy/sqd+BtUpHyrvH3P/JRiLtwghRHQGe+/bhNBwr2OB6Pd8jIJEJhMG1RJ6wI23m9zoOZW64O/ANWXmEznqo3FNM0yhdN140m1pfIVe029JGoIHOkey37p0113e4TV6qelTu3TJbo6jmcP9yutY6upFOzZHEJXRWm3rGxSY=;
X-YMail-OSG: cmUW3GEVM1mtu95g.NGVyWJMIkqYyBGHqx2pYWMYPmzRsRo U5bsqzvSl0kETfOMBTfFNDdMNVfmr_QLwPr4ycmow.82RCDHe_p5IUllcHeQ M4j5XJEEnwbm247GJD5_uHT7lucmoX_iOxiFhIVipaWBpnr6msLKz3.bpaBp CaiCTEZ7Lp3ncbqTXY7kF0wIoYhIvwNhDChDrJ14vN5GZAsa57vItmNdYTYu F5UBTs.2NMTRPRb_Hc_7nejLbsPXh3uNKHCuWTMcs07KofWs7mGXZt9vQQkF qcvCuVdDW4Uoutyk8euthg_CS9OaxudE21Kivp7SYrNYebSGNQELdY07Hrip jM03BN_1PiEjGz8VUBM10n5w2EsKeX87aNQ9K4_AD_Y91_dp_T9I6zO9LR4m DchctjNSVzJ_Zo3PZx0Qi5rK5AyKtr6fIXatAloCPEQVcrPUIlRbhGg–
Received: from [41.216.40.18] by web29802.mail.ird.yahoo.com via HTTP; Wed, 19 Dec 2012 13:27:21 GMT
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.129.483
Message-ID: <1355923641.25598.YahooMailClassic@web29802.mail.ird.yahoo.com>
Date: Wed, 19 Dec 2012 13:27:21 +0000 (GMT)
From: “Nelly.” <nellypiusv_1@yahoo.fr>
Reply-To: nellykr1@yahoo.fr
Subject: waiting your reply

“Nelly.” nellypiusv_1@yahoo.fr REPLY-ADDRESS: nellykr1@yahoo.fr

ORIGINATING-IP: 77.238.189.199 RECEIVED-IP: 41.216.40.18

BELOW IS ADDITIONAL INFORMATION POSTED BY ANOTHER ONLINE USER WHO RECEIVED AN EMAIL FROM THE SAME SCAMMER AS ABOVE.

Nelly Pius <nellypiusv1@yahoo.com> <noahjohn55@yahoo.com>

Dear Beloved Friend!

It is my pleasure to reach you after our unsuccessful attempt on our business transaction. Well, I just want to use this medium to thank you very much for your earlier assistance to help me in receiving the funds, without any positive outcome.

I am happy to inform you that I have succeeded in receiving the funds with the help of a new partner from South Carolina-USA, Mr. Alfredo Gomez Castillo. Everything was perfectly done because we strike a deal with one of the Lady Accountant who works with the Federal Ministry of Finance (FMF), and she rendered a tremendous help to us. My new partner initiated this idea and everything worked out successfully.

In appreciation of your earlier assistance to me in receiving the funds, I have decided to compensate you with the sum of $2.5000.00(two Million five Hundred Thousand United States Dollars) in an ATM VISA CARD, this is from my own share. I did this simply to show appreciation to you for your kind support and assistance even though we could not succeed due to some unforeseen circumstances and reason.

Presently, I am in South Korea for investment project with my own share under the advice of my partner. Meanwhile, I didn’t forget your past efforts and attempts to assist me in transferring these funds despite the fact that we could not succeed. I will be sending you e-mail from time to time to know if you have received your share or not. In the light of the above, you are therefore, to contact my personal assistant Noah John, through this email noahjohn55@yahoo.com and do send him your contact address where you want the ATM VISA CARD to be sent to you.

Contact him through his email below…
Phone: +229 680-96772
E-mail address: ( noahjohn55@yahoo.com )
Contact Person: Noah

Reconfirm to him your personal details as below:

Full Name:
Current home address:
Tel: number:
Country /city
Occupation / age

Please do let me know immediately you receive it so that we can share the joy/happiness together after all the suffering at that time. In the moment, I am very busy here in capital city of South Korea because of the investment projects, which the new partner and I are having at hand.

So feel free to get in touch with my personal assistant Noah so that he will send the ATM VISA CARD to you without any delay.

With My Best Regards,
Mrs. Nelly

IP address: 81.91.229.133
Reverse DNS: [No reverse DNS entry per pri.authdns.ripe.net.]
Reverse DNS authenticity: [Unknown]
ASN: 28683
ASN Name: OPT-NTIC-AS (Office des Postes et telecommunications du Benin)
IP range connectivity: 6
Registrar (per ASN): RIPE
Country (per IP registrar): *E [[RIPE Unlisted]]
Country Currency: Unknown
Country IP Range: 81.0.0.0 to 81.255.255.255
Country fraud profile: Normal
City (per outside source): Cotonou, Atlantique
Country (per outside source): BJ [Benin]
Private (internal) IP? No
IP address registrar: whois.ripe.net
Known Proxy? No
Link for WHOIS: 81.91.229.133

_______________________________________________

BELOW IS A HEADER FROM AN EARLIER EMAIL SENT TO MY SPAM FILTER BY NELLY PIUS

Return-Path:
X-YahooFilteredBulk: 98.138.229.226
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts)
X-YMailISG: FOcNh6QWLDuwokGIamqo2H1mhFgBK__fvBOJZ8GjwILP0jKp H_fXx0rsRIGtWnE8LHiDjqgrUbhVMalmSllTqA0DRUXVL000oPDuFM_4Cvdq BG9I6cTmDOPwt3Rbvyyrw1_.26QSw.velDioRcayZTUc9dtps6B4yu8iQb.X 45quHIwVHMKOZyAuvrZsOde4f9rNUjjA8jehT99P2KYxuszbHy4plZ2JCHhj iC1s4KT_XanfymkXm60urdqtbA3TVX_bkGnktQMQ8hA.KV.ll1KgActsQDPn CT7Whw9F3G0YtO..HY98BjSqfWUqKZ_9O9hoN175bzx.Y6003jsGJgZowQkK DkoWcD2MMet7hoGllu2xaFaCO9F6K6sjGW6RgGbTuBNKodcmZg55dvOsYnAk nl6eg5A3hk2QXz40LgNCiTRNDYXId7UJ7liQp5vfEz4bmRvkbIn_F_Kfe2fb PDqG9HXvy3iWkgsYmNbI0Y.ZFQt8NXdK4qoGihSNJzGAn0oaufWSCAD5nPEG qUAVabftIWrVbIL4h83oo.Axnnhc.gP3Sq4JICZK8R2pTv1uyLgotWgJvqEV lkaRO.4hr5fTMA68AuEBbZZBKuhYZrONNhHOjRDA_0Ub1Qpt4A1N8mvS3EDH OXTxGMfwNHggXYzAgM0efEowxSH.p4KSFlFuB7HalF_uTf4LepMH4Jw4Pepy dIbhOHSt.rWElmpQ3FwQnY9fDEO1fWjdBFb1fd23HFfEEhZ52qAgqSX5dYYj 4vFsP3QgcvjRtphwDJkTsI.k5YFbuEY1o27.qr3.fwQXMDHm1PecFRfcxknH Jl.asZFxcHerjK8aglPDjTm09Ky4HobY_cRHFbwE5N18S8XBiN9KyUjqM8cq 7Vud9U_1F3uyXraJMJvjkyjEzPbxFCjYsHE2q5Gzm3WuiC_GvzJDux0kJDIk 770Sr9EKBwyYKov.lNHPyxTlFcN6RfyaBaPyTPh_kulsWBnKWktZyWm2.So2 su_Sb9DHRVLfhN42iBrx.mBeF.j5_QaHc9JE44XYqT8JtIdYgT_SVNz7EBC2 BI4oHmscMaNsSbRNw3z8YK9PsnVCLOVhJpvvjN5y8T4j9kVUW2NhHD.y6GbY 2w6WzXd15q8JQEc1UvKGxrEBOWvmF8mtoZ4.Kq1hJKG_YWRjbzVTK8i4IVZt Jq9yFcvcvvHtTnv5kMfjdym2iCAoBpeAXzrfjoXkRlaR9YBmt7fNfFWWaw95 EyaipLDjQK4gxYlU82KJMKQ3VO26udNOb4EUtEFbacxgTlNLV2l8uUNqsdJL hjzulYxZXb1uXou1HaGVNzmsWQH8BYmJ1OYxtqVtnwxpijmNxCG6Aeqg6Bxx dfj8ZU4cWpVf
X-Originating-IP: [98.138.229.226]
Authentication-Results: mta1129.mail.gq1.yahoo.com from=yahoo.dk; domainkeys=neutral (no sig); from=yahoo.dk; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO n3-vm2.bullet.mail.ne1.yahoo.com) (98.138.229.226) by mta1129.mail.gq1.yahoo.com with SMTP; Thu, 27 Sep 2012 12:45:09 -0700
Received: from [98.138.226.174] by n3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
Received: from [98.136.168.76] by t3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
Received: from [127.0.0.1] by store166.c107.cal.gq1.yahoo.com with NNFMP; 27 Sep 2012 19:45:06 -0000
X-yahoo-newman-expires: 1348778706
From: Nelly Pius
Sender: Nelly Pius
Reply-To: Nelly Pius 98.136.168.76 – – 98.138.229.226

pius_nelly@yahoo.dk

 
1 Comment

Posted by on 12/19/2012 in Uncategorized

 

Tags: , , , , , , , , , , , , , , ,

“jennywender@yahoo.com” Jenny Wender

LOTTERY SCAM – FAKE ATM CARD – FRAUD – 419 SCAMMER

EMAIL: I VE JUST COME FROM WESTERN UNION AND HERE IS A SCANNED PHOTO FROM THE TRANSFER MTCN

MTCN : 6255579485
THE AMOUNT IS 500 $
HOPE YOU ARE NOW SATISFIED AND MY BEST WISES AND GOOD GREETINGS.
GOOD LUCK

HEADER:

Return-Path: <jennywender@yahoo.com>
X-YahooFilteredBulk: 98.138.89.167
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: mlalYTsWLDtNvozz7TbM4xCyyr6UkuZsJriIkILxnVG85KaZ V5INEyEdyeSqqJUzVZWRKhD.FvYjohGsvSy8rAa3Ew.Q0EbmqVd1odmIfCRX BLUGzrykfmV7edqO3asZ5qGPOzSccax1BR8nY5X6TnZgZM7zb4sSnUVNdiLi sEpp6U3UsJDelS1v9vJRAFOjFMgpZIA3saObCwn2Yg9stNR_fvmYWECr9Gbb RkwiEWCSKlRiCPYpuipRFUIzIJw2JL1Pam85CRy1udhfPCXjQij4lPCp_pSJ nteIHm6JgLNKY8yCYtTHYV792NAcESSdcuTsQRLPNs4DXmOACbbJf_34pMFJ 6CgAB5mz80kmnQCAa6IVjK3k.3ep31PaU39FlGF5bkVq9sFqaqTI12Y.8Z5G lR70b7xZRfevmNfL8HjsN8W6YplyXx2MOOAGHK0YhUSQ2AMIjnn7AHVcMpOt zV9tCojw8Sc4ZT8d15mA2bsjYMv9lJFXFvm1dc4WPdffmI7VlNSX9pYHJKVl xoR6xdRqCg44CkB0Iz03strIxx8AtP4BWtVYCk6TmINc0tH9FC2_y2xmf3Cr k4G7Ozva8v0nwAXtYoic_A8ikV2SWLm8T8nDQpgiQzlLTl8ZNt4nb03AhAfU dugWw6ojOvrxwaSXI7gau1ypAEufuzAqxKuHo3htqlfupTmAbMGpglq1xlbp qjHNFkfOZJtkaLZKr2E7RURHdkA08IfFccwwGtBH_aM6LkmNy08Fhgp1Fp7e Fj1iQ4snz3zhyEfsd_a2xtkCdatfSbF6Q6KdPwwNQnSA4Vx5H7CC4Kh.m4A. utNMz_DpSKRF3lHeEaW8CKtS4OZN8PpwFPJcCyREYlvVpZiLyVECptDwf3Y9 KL9lOgwN8PcIYmGI7idlqv_4u0Tlzn6QB0KtWXSYJShXO_yEls2V2OU1.UT6 bhisvGKj2WCh4vbF6KYh_5_XgRm5RfCSlRkXF_.nTkO19aPN4iR55y8VAfRz vjKZDao3N8cKEn_mbKL8fGY-
X-Originating-IP: [98.138.89.167]
Authentication-Results: mta1363.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO omp1023.mail.ne1.yahoo.com) (98.138.89.167) by mta1363.mail.bf1.yahoo.com with SMTP; Wed, 28 Nov 2012 03:37:05 -0800
Received: (qmail 52858 invoked by uid 1000); 28 Nov 2012 11:37:01 -0000
Received: (qmail 83184 invoked by uid 60001); 28 Nov 2012 11:37:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354102619; bh=tx45uRVk1edqQQxFPm/a8LhiKa6qR4QqZKTGg/3sEQU=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=EbWDUXcPY//p+LKWG8DVk7ITsd+V644mrsTaA35B/H+gt7PFQb1I54W3idPU1s8t04p8WSCp1WpqHU8zQBl5PeRwJRsfs1ZbYBJO03gqSIb8R8DteoJXtr8Z8WXdxEYw0FOUt4Jl6CBrUTo3CCglOkArxqFdeTCpCFJ+yjzCP2g=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=l2nzQFRK9aAW+eSn6/5WaBWcXh80sSFioPa84qIONgl69o793/DfeFUTBleiPnt5C6HSwrT34bXJeUPCnGvItT2SIm0zEOhnlJuGwyZmQRSi4AYXURv7CKp/y1lrujBEUC9AaVkB78PrA/mlk5DDChJ1qRzBE53e1zrrMK4i1v4=;
X-YMail-OSG: zVoErpcVM1nHIF1fQUvAfnmiolFOSdJO7psWhBJnines_2U g4ZJWb2U1NK_sZePJqHo0zbW2A3ewxuzi0vlGzDzrZeHElqTDGOlANTw7gDX 72inroBp2thnf2rzzOFHyuH_ucn7zCDETcYBy.WMWELRjwC187EbEb2DFxy5 .HH0XUARUvjHPMM_XD1EZdC4c1bS9MuADlKoN6xwbJ4GxCuJxLX1ghZdLGW2 h4hp6Jm7XpGBDI4SceILatqnBWQmRsyKF7XZnDjkyhoffsCjApBAe4FpoTk2 bauVgXZbwNMpYhOWMm9wknenVVqxGkJ.qwcmCyiZQVu6ERIZE_e9ubehdKPZ z_T4Ey2PuCKFqY5lIXmMJ9qLoFSGmSvQHMRToSzBizZjrD84S6sOjeAtLRzb KlAnKzElgiosgmI5Y8K5jKKT3J5kUIGIwzaE.LQ_Q6n7kJu8gbPRaICE9WkS xtjCvUN1hlx.XyWF7_jOKxDfxda9ZJSraJ5Kfk8S1hGGbrO9onDTcGQ–
Received: from [41.138.190.209] by web122205.mail.ne1.yahoo.com via HTTP; Wed, 28 Nov 2012 03:36:59 PST
X-Mailer: YahooMailWebService/0.8.127.475
References: <1354053615.47305.YahooMailNeo@web122204.mail.ne1.yahoo.com>
Message-ID: <1354102619.82958.YahooMailNeo@web122205.mail.ne1.yahoo.com>
Date: Wed, 28 Nov 2012 03:36:59 -0800 (PST)
From: jennywender@yahoo.com
Reply-To: jennywender@yahoo.com
Subject: THE WESTERN UNION TRANSFER
Reply-To: “MusicalTechlimited@yahoo.com” <MusicalTechlimited@yahoo.com>
In-Reply-To: <1354053615.47305.YahooMailNeo@web122204.mail.ne1.yahoo.com>

“jennywender@yahoo.com” <jennywender@yahoo.com> MusicalTechlimited@yahoo.com

Jenny Wender

41.138.190.209 – LOCATION – AFRICA (NIGERIA)

 
Leave a comment

Posted by on 12/16/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , ,

“Geraldine Mead”

EMPLOYMENT SCAM – MYSTERY SHOPPER – SECRET SHOPPER – FRAUD

EMAIL: Hello, There is a part time secret Shopping job available for you with a $200 salary Per Assignment pay if interested contact email:mrsneedham@live.com

HEADER:

Return-Path: <gmead@chipublib.org>
X-YahooFilteredBulk: 64.107.3.197
Received-SPF: pass (domain of chipublib.org designates 64.107.3.197 as permitted sender)
X-YMailISG: CpHLBTAWLDtoOrioXVpIJdZ7_UPTN5gg.zIryc6IPeIMVwy5 7.7iWvsHSbZnz35A4YfQXivayLPXn58O5eRc7Rz0gwIBorMUSbTKEneTqcmQ 66WF.gXOqlhN.g.QXkwo8_9rooXUJs08ZWwEEKryEd43d2lUOr7LfCR_SiEt .CAqpNhjUuHwjp.cD.TYb4xldFWnl_FsYyX7ae7b.lDYsCNfqv.XVQJkmWVi goUAG0V4J2ijRULQ_vF43Q6BU.RC_Dtt_yE8.WLN92txaKDDRkQp7uZFr7Ih X8QVOgWtUvPC1XGcvFcV5ZwnHgrb2F14LS6xtVCsMxmS4r89BWdRp2VA3toa f0xcuYk.j7zkuwRmVjktCCI.osqDCzmnafiunuywWkHYXGft9LZwRi1mNmpn L_CfxBsjW6hzpIpxp_G.5uTJrEtC.Eo.lHRb0q_6njfS0owtpz1PXAUQOslv s6nLAqs9mdamEEtEH1X8hAN4QcMWZHgCVXoKZRWkjYCnaR0SfB9NlFyEmo66 R1IKrme4beUhDCgTY8EPbxFGkhxgQul3PVhHyfb6fSGLBjxaPGQkaAW1bhtG OeNM1YbgT9OLDC1L7l94g7bf8CZu4w8_9SWEs7BadOuv0kZvGwYjaIVk1l8t GK8uNOzEPiEnorvUzn795KbSrcvfemWCcW0L4XnpfEGc7O8EDT5CG_Tggb2D J9K_9PG_thK.c4bOYgYasbM16r6XqT_k_I7htvBXGufLLYYktSJmpCrha5qY S_0ajgtvp.JIpyES70sxCwbGCGIU0BD5LDFuAmS659Vs21QuYu2E0ZF1gnzs WXRx5jtQByD_Nz6xr8DIWRcCF321e5n73R_kuXcev3xHn6lP7Ut09eNM54Db 4H2ElgE_0EtzWovfl83eU4BjTu4SU6PLsZjLi_hgTrVV2IIgp3Gqc17G1Ua. j7UeISWiY6tZpmDwIzkQClo7JDYMmxI35c4R8wlNoxJr6KGzCMDSE7vE2GC3 OTZCOwaV29hkYQAWys1V8jkxoGkZ5ZWEgDDJmFl295te3xUYs3K4uQma5ROE bFprfUxaBBRERqcSgbrvAHoKtgE5GnrkW8TD_.Bhnxd3UkM7ZuaTZ3JITqcM MsFY4cDSkaU49tMRsRv9SfhWFoK7tz7ozvVCDOYPgHV6Es78fVzhdmRd3EQQ rwSRpdqv.TjeLYq1A0l_TF0CXRRNVOeslm0A05qL7W0Db.uWfYIAqIBo57IP c7IO7xPLn.Vx_BP.pVQLX3ysQ4crsPb6H1takaFslL7EO6kscylvlkksX4.y lx2zWQ–
X-Originating-IP: [64.107.3.197]
Authentication-Results: mta1049.mail.gq1.yahoo.com from=chipublib.org; domainkeys=neutral (no sig); from=chipublib.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO Lorica5.chipublib.org) (64.107.3.197) by mta1049.mail.gq1.yahoo.com with SMTP; Thu, 18 Oct 2012 05:27:48 -0700
Received: from LEGATUS5.chipublib.org ([fe80::fc3e:bbbd:f296:732e]) by Gerulus.chipublib.org ([fe80::c93b:83ab:2900:a856%11]) with mapi id 14.02.0318.004; Wed, 17 Oct 2012 14:50:39 -0500
From: Geraldine Mead <gmead@chipublib.org>
REPLY-TO: “info@notice.com” <info@notice.com>
Thread-Index: Ac2soK5auidISj8cQgqi+vjL9J/VBA==
Date: Wed, 17 Oct 2012 19:50:38 +0000
Message-ID: <D70D3E6F95B6504C995A8296FD6C94520553054A@Legatus5.chipublib.org>
x-originating-ip: [172.19.3.235]

Geraldine Mead gmead@chipublib.org – info@notice.com – mrsneedham@live.com – gmead@chipublib.org 172.19.3.235 – 64.107.3.197 – 64.107.3.197

Below information provided by Zee, an online-user who received emails by the same scammer as above.

Email #1 offering £3.8 million

our mail is well received coupled with your contact details on where your consignment box will be delivered,Instruction has been placed to deliver your consignment box worth of £3.8 million once you comply with our instruction by choosing one of the delivery option below, Be inform that once the delivery charges is being received from you our International diplomat will proceed to your destination address to hand over your consignment box to you.

Email #3

FedEx Courier service office, Cotonou, Republicdu Benin
Contact CourierFEDEX INTERNATIONAL SARLLOT 20/22 HOSPITAL ROUTE COTONOU BENINREPUBLIQUE
TELL: +229 6644 7691
Email: fedex_d@y7mail.com
Motto: Honest & safty.

Your consignment box is now ready to be delivered to you and all you have to do now is to wait for the arrival of the diplomatic Agent and once he gets to your home address then he will help you to contact the money exchangers as to convert the money to dollars.

The delay we have here now is the delivery fee and once you remit it I promise not to fail you in this delivery. All you need to do is just send the fee so that the Agent wills takeoff to complete the delivery. Fail not to choose one option from those options given

Listen once he comes to you, take him to the bank you operate with so that he will present all the documents that proves the legality of the money to the bank for them to convert it and put the money in your account without any question.

Thanks

Mr. Maxwell Shargan

 
2 Comments

Posted by on 12/15/2012 in Employment (Job) Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , ,

“Barrister Mendy Samba”

NIGERIAN SCAMMER – 419 SCAM – TRANSFERRING FUNDS

Mendy Samba pretends to be Aminata Bangali as well as Western Union Money Transfer and Fred Williams – for more information click here or look at the end of this post, below the header info!

Updated email brelow (received 01/11/13) from Mendy Samba under the name/address of “Barrister Mendy Samba” mendychambers@mendychambers.com AND mendychambers@gmail.com AND mendychambers@gmail.com

scams_exposed_scammer419

SUBJECT: Money Transfer From Spain

EMAIL: ATTENTION:

My name is Barrister Mendy Samba and I am contacting you as requested by Miss Aminata Bangali, a refugee in Ghana. I work as an immigration lawyer/welfare officer attached to the refugee camp where Aminata Bangali is currently registered as a refugee.

Following Aminata’s decision to transfer her late father’s fund deposited in a Security Company in Spain to you, she consulted me this afternoon to give her the necessary legal advice and support that will be guide her to securely and legally have the fund transferred to you.

Please, do confirm your knowledge about Aminata’s proposal and I will give you more details.

Sincerely, Advocate Mendy Samba( Attorney At Law )

HEADER:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) YW1iYSBhbmQgSSBhbSBjb250YWN0aW5nIHlvdSBhcyByZXF1ZXN0ZWQgYnkg TWlzcyBBbWluYXRhIEJhbmdhbGksIGEgcmVmdWdlZSBpbiBHaGFuYS4gSSB3 b3JrIGFzIGFuIGltbWlncmF0aW9uIGxhd3llci93ZWxmYXJlIG9mZmljZXIg YXR0YWNoZWQgdG8gdGhlIHJlZnVnZWUgY2FtcCB3aGVyZSBBbWluYXRhIEJh bmdhbGkgaXMgY3VycmVudGx5IHJlZ2lzdGVyZWQgYXMgYSByZQEwAQEBAQ–
X-YMailISG: 4_AQ7A0WLDsrdoRW0mzNu2SSLdatwMX5iS_EhDNFGO0Dbu.0 ZJPjmRCDFk3Bxoppk6w6x2d3WKjDXMzwfe8IqxvbBPPDr31JGNwkUlYzEFse LzFtvCX9WEYMIIglV7ug0FGVvWB6G1RnZe3JWarmQsNFn7FR3J1hYpoCkNtb NzxahunKglbrQA3.4DYQpbILeEzBia9jxUrwloVD0KdvoUzHDJNQ273p3yBB _aowcphJVZ6yZs2V1HPyhaInRIizut7qjyDjGsAysFY4KmWa8FvU7IatcSbC GD4j5eZn58R61aaUCwGNj9n2ZONKmUYY6nl7.pX_A874SK3EjAlGlTfsixkl O15RmczEOcXCkSEUdES8U5hTB3hBfPmkNOj7zeOhpqwM2p5EDGlPiPZ6MLqW VeJ7xQZTSAbSgHpX1X5YeFsYJklh_365cld7bEc3wmL7FHUnHjVI.FUdnZFi K9wMkAUG6_7nqaFrNz6SqXZOM8zjpuuLwM7gFOjZMmRzxoWGjF.exUNZLAic xQgalRKaIEO2PavYo2VTPKuFRj7RflCSMafMWoieRpRsaq0X7bQj3tX9lgXO w0HbHxuJuJDwHAwpwFNSiWmASeL3OMy4DvgYXWXw63dTEed3NNzvL3mw_bCN eMjWhF_HwStHsSSi0KD30u7qESl9rYica9FkndjwBsLDcDRh6YK4HYjQ4wFh uoq193JFJaz.jlV9YIrFAFktvrrNjaGRsiqQHm3viuhMC2mnU2t2pa6DWSba _DooJ9PHo4DXDg0DNBEd1tI8AVye5KHy2NynYrLYYTD92ukjEo3Rgom00RTc DHMPDHXoZwIAcJqiGrJWLnkwzwi0X5H98W2b2gJbRqSgAbGPsDmPgnMWI4lr rTUKVca36wz36odeYqKLyu2vpsQqQL5C3R6SbWgiXGyrBTt.MgJ8_aJ58xym ReiyU_qMQZiqangoX8UG5oPBVQh69Mz3f1DSjw2.jSUlSNHulEgeNfuUcSao VuNfoticrJYdUiDAkRl0uHpQdMfWv04r7JUIgpmxzaGGheGVcdyADzDyVW6M ITYey9NNXoEYnwBo.3pLN7nDLqidopn7hF2g9IJSAVxR1w18dPVXZPDidPTi 7B1i7__9ia8xs7gnNe9n.kkRhVyZmPZ.kdibaaljI.H7cH5Tn0I9sgUJkMr7 MiB4KqFzIVwkPRWlWf3BCWx8.tdSmaTQFbixeWlAVi1iKnzg7AIsmhZ_b7FT q_IL6Es9OgDxsTbYYs9fkwzQW9SaaHuDlAq.slFkJcvl4MFDlZnZaWQVNMD0 9vOEDSoe_HdRnU92B601FrF6Ag5QBWLO7zVrZeC2upRcZMm3F6BwQZ7obSuS 9qR4CU76exgBDw–
X-Originating-IP: [64.98.42.133]
Authentication-Results: mta1257.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.133) by mta1257.mail.ac4.yahoo.com with SMTP; Wed, 12 Dec 2012 13:49:09 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay04.b.hostedemail.com (Postfix) with SMTP id 3CC8867074; Wed, 12 Dec 2012 21:48:53 +0000 (UTC)
X-Panda: scanned!
X-Spam-Summary: 64,4,0,,d41d8cd98f00b204,mendychambers@mendychambers.com,:::::::::::::::::::::::::::::::::::::::::::mrsomf14|1714587392|FC6C4FA
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 1446
Received: from webmail16 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf14.b.hostedemail.com (Postfix) with ESMTPA; Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
Received: from 41.138.171.68 ([41.138.171.68]) by webmail16 (Webmail) with HTTP; Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
Date: Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <837876103.14863.1355348929528.JavaMail.mail@webmail16>
Subject: Money Transfer From Spain

To view the post i’ve submitted on November 12, 2012 on this scammer click: Aminata Bangali

FROM: Barrister Mendy Samba <mendychambers@mendychambers.com> Reply Address: mendychambers@gmail.com

When ‘Aminata’ emailed me back in November her return-path was mendy12@sambachambers.com so i’m guessing Samba Chambers was a fake name she was using? Or maybe Mendy Samba Chambers? .. Not sure where ‘Barrister’ came into to play lol.

RECEIVED IP: 41.138.171.68 Location: NIGERIA (SOUTH AFRICA) X-ORIGINATING-IP: 64.98.42.133

_______________________________________

ANOTHER EMAIL SENT BY MENDY SAMBA –

ATTENTION:

Since I am yet to hear from you since your last mail, I assume you are no longer interested in assisting my client. I would appreciate if you can define your position clearly to enable us know the next line of action. Should you still be interested in assisting her, I implore you to show your commitment to enable us conclude the transfer.

Please, do kindly respond within the hour is possible.

Yours Sincerely,

Advocate Mendy Samba( Attorney At Law )

HEADER INFORMATION:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) eW91IHNpbmNlIHlvdXIgbGFzdCBtYWlsLCBJIGFzc3VtZSB5b3UgYXJlIG5v IGxvbmdlciBpbnRlcmVzdGVkIGluIGFzc2lzdGluZyBteSBjbGllbnQuIEkg d291bGQgYXBwcmVjaWF0ZSBpZiB5b3UgY2FuIGRlZmluZSB5b3VyIHBvc2l0 aW9uIGNsZWFybHkgdG8gZW5hYmxlIHVzIGtub3cgdGhlIG5leHQgbGluZSBv ZiBhY3Rpb24uIFNob3VsZCB5b3Ugc3RpbGwgYmUgaW50ZXJlcwEwAQEBAQ–
X-YMailISG: Qish.AwWLDsD_aE16xh5LXkfyfliJdFG8Az7iuvnxeZ56_1J crt96JOXDja4po5uUUFfB6a4l3fDBX66fLkDWvDXGHzQtXeP.ir3WKDMvO18 yQtmjWnM7KDHOTIR_mm7F0x_yYrV2f1FJspVNUZNNrNhqx4gHNI7egOdzDmz op7TNxfD8KDM8WtGccyWKkXqThvjw7VzTcfCAHPEArsNtdKJ5wHzJaxY7Xo0 ICaaAf_pXqlY_3vkqJUpjtFYyCpgw7N5V_AkNyRzANa9D3HB88RSghJYRpkC dRkpGISFkkS0G2jSVjVJobdQa7i6p3HB67iuit9p3b5fHUatd0TmDG2c1wO4 n_3CL7IBbkzawlon7QqKyZdF1B9epc6jGlmzFj_sG9yMs7c6gAszTz.Wh37L aLADSBUUKoNLZGvXD_VPS3NuJy5qN2N_IeAPWj74Jm_I_1gYiRBbKzE1nXzf De8CKEyFZTjnJ2Tyo7u0BEYncdKM7soOIYF0C3OzEqL9Q5rDbecHRlusYWLm 1UT65pH7TqrnRdGMC4pn7hQqNuf0kQ6igWHg0ebawNy2jkZQRRqDsJIuL_hj kTe6JkM9EY1NO0Z6oaZutHK4uzUR1bhnELOdzzqFqUkmTTTt.tlm3VCPswKa Mbi2uW6G.qSyXvN4ML_cUnNUWgQyxjNm8tImcSUwfUtv.vzW43gBPS4r8tdz gRZ6WaVj2q93bL8MbZpotKrj7hCFUn4flxO_1y20Fd_XwmXYJ8Ihmq6C9R1R TihTyJWhJxlQoMqFbPy3RojiISg6gc1gsS7BMM0I0gx70NopBwRn5EJOqQhK U2oAcZ21BR9idyOFHPF7VzPu8Ncd7J4NFnoS1sXtdkeKT3378lJFaPnST6iv k9u7WhHwmBhbAhvjOkWjJxevZljRbtfvebag8m5Sahi9QaYaUeC_3pEB5.Eo zYzcudPoota0GO7Z6mfG5PYVkGRiyKKdU0sG387ZApM5TRPp_AsGwSyGxg2p DXPpSQzV7o9Zzkr9QZUJxx3oYRxh3luEq12j.ayVQlHvrngNXNp9dT0gNxzX ftpGIhATeavycQ4_jhcJ8dXpiRB2LhNdF4x_29jUzABvNKNsK19nztr4IGJU UgD6Vt2_SagllCSrCH4Y34ff6GEYlUIUccgdWYMBlWhJkmWQYstMRl71uO5J ewdacuSE7nQBw5Kx1ACRhtpjBFO.r.cVWkacnzfte.3hl0hSVzxBlLMxA3lu aeX8RJZP04GfqhHp4Ex6GYBeVXQV14Um5Dcjwg7t2dxxLJ0rcLbwTNLCLOi3 Ch4moZMd6oFy6Pil3_AuOXc28gxcxk06jpmahAvr8BgwxaAO2KkhT7.wpsn1 i4qaQ4r8Bk01ndo3Cl6.ENqsq6hCv2F_LYMsJoUhZqeERFJDDA–
X-Originating-IP: [64.98.42.225]
Authentication-Results: mta1092.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.225) by mta1092.mail.ac4.yahoo.com with SMTP; Thu, 10 Jan 2013 13:27:03 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay04.b.hostedemail.com (Postfix) with SMTP id 8718C1CB33B; Thu, 10 Jan 2013 21:26:50 +0000 (UTC)
X-Panda: scanned!
X-Spam-Summary: 2,0,0,,d41d8cd98f00b204,mendychambers@mendychambers.com,::::::::::::::::::::::::::::::::::::::::::jacquesr2@omf08|3603412736|CAE7C8B
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 1235
Received: from webmail16 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf08.b.hostedemail.com (Postfix) with ESMTPA; Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
Received: from 41.71.189.89 ([41.71.189.89]) by webmail16 (Webmail) with HTTP; Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
Date: Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <1176793950.247565.1357853206650.JavaMail.mail@webmail16>
Subject: Re: GREETINGS FROM AFRICA!!
X-Originating-IP: [41.71.189.89]

IPS: RECEIVED: 41.71.189.89 – – 64.98.36.5 – – ORIGINATING: 64.98.42.133

Barrister Mendy Samba IS Aminata Bangali pretending to be her lawyer. Below are more email addresses and IP information used by this scammer.

Aminata Bangali has many email addresses. A few handful include <> aminata2@mendyschambers.com <> aminatabangali@africamail.com <> aminatabangali@mendychambers.com <> aminatabangali@yahoo.com <> aminatabangali@msn.com <> aminatabangali@gmail.com <> info@guarantytrustsec.com <> info@guarantytrustsec.com <> aminatabangali7@gmail.co <> <aminatabangali7@gmail.com> jacquesr2@omf08

>< Aminata Bangali >< mendy12@sambachambers.com >< aminatabangali2@gmail.com >< aminata22@infonets.info >< aminatabangali6@gmail.com >< info@guarantytrustsec.com >< SeferiaB@trumbullps.org >< go@win.com >< SeferiaB@trumbullps.org ><

Previous IP’s used:

Originating IP:  41.71.177.75 Location: Lagos, Nigeria

Originating IP: 64.98.42.177 Location: Toronto, Canada – smtprelay.b.hostedemail.com – mta1196.mail.mud.yahoo.com

10.5.19.254 >< by smtprelay06.b.hostedemail.com

Mendy Samba also known as Aminata Bangali also pretends to be Western Union Money Transfer – And Fred Williams

Fred Williams >< fredwilliams3@rediffmail.com ><  www_western_uniontransfer276@superposta.com

Some more IP’s used by the above scammer:

Some IPs to avoid –  41.216.50.79 ( web92415.mail.cnh.yahoo.com ) >< 41.218.238.107 >< 41.216.50.209 >< 41.138.172.76 >< 74.125.83.67 ( mail-ee0-f67.google.com ) >< 10.14.193.136 >< 10.14.175.68 >< 64.98.42.56 >< 10.5.19.254 >< 64.98.36.5 >< 64.251.52.6 >< 203.188.201.85 >< 203.188.200.143 >< 119.42.242.156 >< 74.125.83.67 >< 41.138.172.76 ><
 
1 Comment

Posted by on 12/13/2012 in Inheritance Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

Dr Paul Owen

NIGERIAN 419 SCAMMER – BENEFICIARY – INVESTMENT SCAM – FRAUD

EMAIL: From Dr Paul Owen

African Development Bank Republic Du Benin
Cotonou Benin Republic.
Email pauolowem@e-mail.ua

Dear Good Friend,

How are you doing? hope fine.

I have interest of investing in your country as well as seek your services
in a private and confidential matter. I am Auditor General in African
Development Bank Republic Du Benin On my routine inspection I discovered a
dormant domiciliary account with the deposit of ($9.6Million USD) by late
Mr Khalead without any heir. I write to seek your indulgence and
assistance in moving this funds to your country through legal means.

NOTE: My plan is to invest my own share of the money in your country.

1. What other lucrative investments would you suggest as I intend to
invest on REAL ESTATE AND HOTELS if they are good business venture in your
Country?

2. Can you be able to make residential documents and purchase a house for
me and my family to relocate and settle in your country after my
retirement in 3months time.

Let me know if you can handle it so that we can discuss your own %.please
provide your Phone No. I wait for your urgent response.

Regards,

Dr Paul Owen.
Auditor General

HEADER:

Return-Path: <10@my.dxdelivery.com>
X-YahooFilteredBulk: 208.67.16.254
Received-SPF: pass (domain of my.dxdelivery.com designates 208.67.16.254 as permitted sender)
X-YMailISG: ofps_6cWLDtJDF9azSUKKmCZvl1SE.MyUmiAMv_InQQUHwwc oXqEhf4HrpKk9HMBTAy7ysWExs1Dfimgdi399c8yY6f_FJRUlyeHHPR0Wl4q zaRJVeRVwneSbI8F3uVv7u7Nr6TuyLCdc_vtfBIAS2Jw2UcTY0uSdklgq1D8 73ZUKgwrlDirs7gAs44naR3efjg7GJCKjyMFEVRdBmrGOKj3NPHCJLi.MW8x 2X7jInWnVx9G5NSsPlHX5AoqNcT7etkvV05oGjS8KhSwtIgx.6BQTnbMYYuN yD1YwilOE7zkpJiHJ4gjoQmGjN77olxjq5ccrUNQkHMNbwY1sVlPLgV6Vec2 6IdvOhUY817LYdJe3j4ct_vpMXYYwr7gKftftyw00orHH5MCLmVfK5ammofj zGS4OCrR3HHV1IWvCxiEYhd9xnFyyVGYL05bxZmINLNtbZULXlkPInUtc99Z RcM4UH8rKiKr.XLZCZFAvyUArQc.NAR4Apljsr0E4vrr0Tc3CkgaHUyD42mf 3h5cDsOQ_wPQKGEs84PCSwtp5fkLMmvsp6et3jYjY7NV5B204XnN1l1U8DfM 1kmyUqeW0tIu2zVtzQ0rpbi_zyuLB30JmXKK.YA.pdt76XlsHjMgI.a22DVT .68eAVzicc7htVqzvNAjuRH8.o.0TkgNnJ0feGs5CC1JINDWfLWzRf.NFObu 9_HMtwqBt_aLBg.h15e8xbWTVquLydexnE_qpr6.dy6SWmXuYz9zG7iyT68S XwLMte7TM1fnPpG_HblTCRCM9haxJFB253vMnrZjHra7.Ih6dOtDfx59hyrH ZWpgvD5h6iiGIMxs7POEibdsvfR3zjc7u7PGsQJyQDVyGK35hrb_bbRDsZ0o hymwJfuzLYL5LE4eIl6Wju6wR7nhxGINQhwmkYwqlDO3l3kHHCYir3499VbJ XzNF7uOU1dBz2kYguGvTZyqWTLEI7Hljr8ehe0QF226CoavI_KwoWfGZb1yB 2F_sWs1xbHcDS770dxLPxqnhngHHGXF9upYzjsFZkztbgk9EacZ1r9Jcc4Gr 63EpdYj3EZQCLH48CczxIuVkTZzDwVABdrnMX1K_h_B72voTpZG2pcgnEBnI 6QNkU2Y.ThdBXIMfv.4sojsZyEd86NKz69btB69RcZQpcQ.Ad_Cq8bOG2VVm 9Het_NpZ7s14piXT2p7nWo5l6zCaI_P95cDENN9dWilTg86r4dmo.YB8IgpQ mefFr3..NfX8w7V5QAJvItvSUmE1ehie4_bIIN_UJEsmbt6Uxr8GfwadMN28 Bf1DHHLrKRpuE00ZKFojKCtOC48iNywogRtSUWAhZXc3uDKt8j4tyiMBpod2 WdRA0e7B88Wuv5qLU_tEFAVa6Kxgm0O6SOfXJxfaLT7JsVeHmnJXf1E4._fe 2zjoX.N_bO3k5gy4dQ01pInxBR3J48C9Cn0GJ7YlrBnU_sxw5R9KGZPklx_d .NqQXEhMT8j3yKyjYyvIlb7YweIGcWBR
X-Originating-IP: [208.67.16.254]
Authentication-Results: mta1054.mail.ac4.yahoo.com from=my.dxdelivery.com; domainkeys=neutral (no sig); from=my.dxdelivery.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO my.dxdelivery.com) (208.67.16.254) by mta1054.mail.ac4.yahoo.com with SMTP; Thu, 06 Dec 2012 01:50:09 -0800
X-No-Relay: not in my network
Received: from User (unknown [41.85.165.245]) by my.dxdelivery.com (Postfix) with ESMTPA id F2CB31C47121; Thu, 6 Dec 2012 00:56:08 -0800 (PST)
Reply-To: <pauolowem@e-mail.ua>
From: “Dr Paul Owen”<10@my.dxdelivery.com>
Subject: Dear Good Friend,
Date: Thu, 6 Dec 2012 09:56:24 +0100

 

“Dr Paul Owen” <10@my.dxdelivery.com> <pauolowem@e-mail.ua> pauolowem@e-mail.ua

RECEIVED IP: 41.85.165.245 – Benin / Nigeria

YAHOO-FILTERBULK: 208.67.16.254

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

Four Email SCAMS

A list of three scammers who emailed me back in October, 2012.  I would’ve posted them sooner, however, my spam box gets FLOODED with spam and alot of email’s (including these three) continue to get pushed down each day. So i’m posted a few of these less recent scams, in one post.

1) LOTTERY SCAM – “EUROPEAN EURO MILLIONS LOTTERY COMMISSION” — When I didn’t respond, this is the email I received:

FROM: Mr abdul saram mr.abdulsaram16@ymail.com

EMAIL: Attention:

TRANSFER OF US$11,800,000.00 TO YOUR BANK ACCOUNT.
We are writhing to know if it’s true that you are DEAD? Because we received a notification from one MR. GERSHON SHAPIRO of USA stating that you are DEAD and that you have giving him the right to claim your funds.He stated you died on a CAR accident. He has been calling us regarding this issue, but we cannot proceed with him until we confirm this by not hearing from you after 7days.Be advised that we have made all arrangements for you to receive and confirm your funds without anymore stress, and without any further delays. All we need to confirm now is your been DEAD Or still Alive.Because this MAN’S message brought shock to our minds. And we just can’t proceed with him until we confirm if this is a reality OR not.But if it happened we did not hear from you after 7days, then we say: MAY YOUR SOUL REST IN PERFECT

PEACE YOUR JOY AND SUCCESS REMAINS OUR GOAL.
May the peace of the Lord be with you wherever you may be now.

Your Faithfully,
Mr. Abdul Saram
Foreign Payment Department.
Kuala Lumpur Malaysia.
E-mail; mr.abdulsaram168@ymail.com

HEADER:

Return-Path: <mr.abdulsaram16@ymail.com>
X-YahooFilteredBulk: 202.54.119.135
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts)
X-YMailISG: zoMIZlsWLDvydzg0Dk9J5tOysBHE56cHQyyiC1YznBFFUtuX 2QmjWmBtKrEIAIZhZZvMLBsf2_VfVRuk3IH9j8m1hLMrwqczlxOjNcYd56t1 DaED9ORsgM_tamt6rYqekTqo1ZZeVBVk.n3YVF3tmTgLQTno7RUE_mPfmgyO S8g3lGMj8NpQGYdtfuXTZYiqBNy7OCiTyfihCtBixC84NBTgsDMsAj4P2vvf uvEouSXqXW_lpokkF6fkNC1eMtEPGI98ZdT_3zRWN9Ru.lwobx.vCEagLelr T6qkX56Y3yw3oYYgjSG_O1eZeznkjXOyNOjg82ND2CrRcduLWdRuJOesZKmV 3xrCwSbNU.1OEPGt99LQuUBZpHmnhEsLZ908pgJy706cOkWpiPoZ1rCWGuGK kMgJUwp_ukdV2jXRGVSbgDunXrysUGJ4JGJ7sIcy08xXkI01aKXjvxH5zSVt MLNYizgSIwbXCsVoh4kgvfVFn8tv.rcdkUiap3AJ7fxaz2BjrTg_iLcFzP7j CKXG6ul9U1zBHqq5F54fpGKFMpuGvzwMOAQT_kou94fFWb78j9yzKSJHFpzs N.MLMXSB9whHO08p5lO4G9516SCu.qO8uzo96HXGeNPbj9DIfYQcg1iWz8uo 3lMulBOyPI1h4faLSk2GSYFktoY9y7i9gU.f.9MxMaXc67eJ_PrIVIhtMswN J_wZMBwunjrY3hq2OicEy4TomsF.650j_axPHFQHMF0VIt1ySTNQfVmkwYD_ M4SQKaSrB6uU5OJM3EfBW_Humq93k7t34Dv0UpWSsFFW8shyPX21lPZJvTcZ OXXZcu._kxiXXOWX99I0m3DkvbdL_quy5FBkRomNTW_pSwiZBIdfHBGu50MS 9nIw.OfsGw1O0ATr25xhnJHFLd4PlcHTUBXfiGUamYauHYl_HmtmDcs2so5t jo1X2QbMvFUqicTPxGsJSPWzhxtucwSaWhqCBTqnKW12kmR.n19.GVeHCPoG 5fbPZ6S2rNO.LNDQzjl_7vpVXk.3WfaqAGUZaNZSKgTUx_m6dzipHtSDVyXl ZWvdU1M57p_stGRaLd7P2DLNwZA8gjZwrpTI3_hXdzz4E0HLWDqTsu70dLn3 NvwffnAgEQhrxZfe5eS8PmhRPM3oEBxVA6viz2i6xw–
X-Originating-IP: [202.54.119.135]
Authentication-Results: mta1021.mail.ac4.yahoo.com from=ymail.com; domainkeys=neutral (no sig); from=ymail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bulkhostingpanel.com) (202.54.119.135) by mta1021.mail.ac4.yahoo.com with SMTP; Sun, 07 Oct 2012 07:12:02 -0700
Received: (qmail 18600 invoked from network); 7 Oct 2012 18:40:51 +0530
Received: from unknown (HELO User) (120.140.1.40) by bulkhostingpanel.com with SMTP; 7 Oct 2012 18:40:51 +0530
Reply-To: <mr.abdulsaram168@ymail.com>
From: “Mr abdul saram”<mr.abdulsaram16@ymail.com>
Subject: Attention:
Date: Sun, 7 Oct 2012 05:24:25 +0800

Abdul Saram also sent out scam mail under the following names and email-addresses:

“Mr abdul saram” – <mr.abdulsaram16@ymail.com> – “EUROPEAN EURO MILLIONS LOTTERY COMMISSION” <europe”EUROPEAN EURO MILLIONS LOTTERY COMMISSION europe – FREE LOTTO AFFILIATED OFFICE U.K info_freelotto@ –  “Mr. Abdul”<info@yahoo.com> – “Gareth Bull” – <garethbull65@qq.com> – “Dr. Cherri Holden” – infficess@yahoo.com – “Mrs.carolynx Harold” – <info@winners.co.uk> – Mrs carolynx Harold <info@winners.co.org>

RECEIVED IP: 202.54.119.135 – LOCATION: India

ASSOCIATED IP: 41.221.17.37 – NIGERIA – 41.249.22.246

_____________________________________

2) INHERITANCE SCAM – TRANSFERING FUNDS – FRAUD

 

EMAIL: Greeting’s my dear,

I hope that you are in good health and God is always watching you and to take care of you and your Family.My name is Joy Donald and im a beautiful girl in this country of Cote d’ Ivoire. i am an ordinary girl and simple bread winner of my self. finish college degree not working .I am brought up motherless but i am thankful that I have my father with me all along till the death of my father on 20th Febuary 2010 in a private hospital here in Abidjan. he secretly called me on his bedside and told me that he has a sum of $ 12.500.000 (Tweleve Million, five hundred thousand dollars) left in a suspence account in one of the local bank here in Abidjan, that he used my name as his first daugther for the next of kin in deposit of the fund. now I can say that God is good in everywhere and in everytime. he also explained to me that it was because of this wealth and some huge amount of money his business associates supposed to balance him from the deal they had that he was poisoned by his business associates, that I should seek for a God fearing foreign partner in a country of my choice where I will transfer this money and use it for investment purpose such as real (estate management) can you be my friend,my guardian,my partner, for the time been.

dearest, i am honourably seeking your assistance in the following ways ) 1 to provide a Bank account where this money would be transferred to ) 2 to serve as the guardian of this since I am a girl of 22 years. moreover dear, i am willing to offer you some % of the sum as compensation for effort input after the successful transfer of this fund to your designate account overseas.I’m very honest person and always like to help others.

Thank you very much, i will wait for your reply. God always be with you.

Yours sincerly,
Ms Joy Donald

HEADER:

Return-Path: <ms_joydonald@hotmail.fr>
X-YahooFilteredBulk: 77.238.189.206
Received-SPF: softfail (transitioning domain of hotmail.fr does not designate 77.238.189.206 as permitted sender)
X-YMailISG: JZaHMLwWLDugrnxWgMa0KL19eLCCrSn4Vjkr9J4aFtdpeB0n RfO.FCSatFLs1uKMnFmNvRs95YCfGGD9V9ixQ2.ZUI18rrVrpd9c6YAKD_ep mGZvxWakYrLqBuZIajyrXKCMsGLNT.Aah2DmKlB56P5PAHpA0J5YhGOGuosH dDTRY0OuX_R3Cigqpyh.kfeN4GzHCORAXV1b8p5TP3x0QUK3U2ADv7qkiZba JbixTzA3LxKAdrJF3EKB6GWB0n_0_ppM3TTYmjDzqJbuNsoU6zGDYX93txZq qxUxiJMeHiVBwpAihr.pJBlWF_EyHO6sAOzxEtrSXQBDYI6r9vT28QfG2bkQ l4MbVzyT1n7Twa_dMibPyUW9rxhqG8pASUyelD5fotFzmrK0X_3wMOZbsrRO R.szB0QOzMHw2joCbG0c74FMFgackwgdLdLwfSuZjYsbQHlvUa0LVhp9U__x fzldM6GUoOtXkGubJ5MRQ6DpKzPL6C85e1jn0T0r9u1LJEuTPejfOuV0qDEV saYEVNnk4mi52SyZlcmFMeWs5t.2HixWTyQ2h4RTFfgmJLawAaYmAJGOYebQ uWegqh5C3LL_pgbxf4a9._LXUl.QPV7XNdY7wzOlJ3TlnmLnSJ3bf0U3zcHY q4MvlCc3owpjYOtD.53dx0hxoYSL2cI2KOFVPcZYz.T.ZQ1CyXAzAn6151hh nmtqAD9ouJeDgJt2SIInkOg5NHv1QWRdh_sNEiTVGdH4mHUSgvnEzn0FPZ_U l78PUoPR4fT8wEDua3xMfYaBj5Kb6a8G2qA6fBrhm86jmAjWXtcVEz0_M3g7 i3nL6AnRLdHhcPL.3Xm0akNe7iDDPlufAlUidGal8xP1Oigi8OpgcIq4Sthv QsHMTO0EfOYCaGrzoSaddqtTlZUfnctjltSptmoQ_DwMlYAY7QnXE00HvRFx EGiH.mwv7zj8Jnh6nxW3YbAtEZ9O95EeTTDlZKxOjGyEWsUl4qKh2IojbP1k pAb7WXT5XgRLMG1win4HfMlGuH15.XzvR.ArRmBQH50Qtckr5QGztIfMQLKq 1l1jsOK9RXb1A7C_DsILoPxg7yKSzmnDgVw.QA8oLyAVPHfxFAdcq3Vobrwq 2z_YIMiI7enn.1Vd0Jxek_GkywSnAcepswcn4eU.neYNWprRs9LCHxorbxkB RXlOtzwgZ7_TrVuVJPNOggjT9fqrEZYnUhUHbmi8SToV3zaP7toPD.Ux5b2z veuMgxkh_RhisgKxWbX7ku9z2CB.x2ZF4MwCiTwED3WCAQrTbu3fopeh1ICN XFDoHmtkcfuos7_eCmTGq8_SCdX5lE3TBlWZU04svWZWMIk-
X-Originating-IP: [77.238.189.206]
Authentication-Results: mta1300.mail.bf1.yahoo.com from=hotmail.fr; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm17-vm1.bullet.mail.ird.yahoo.com) (77.238.189.206) by mta1300.mail.bf1.yahoo.com with SMTP; Wed, 10 Oct 2012 09:25:01 -0700
Received: from [77.238.189.54] by nm17.bullet.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
Received: from [212.82.108.253] by tm7.bullet.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
Received: from [127.0.0.1] by omp1018.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 759852.5070.bm@omp1018.mail.ird.yahoo.com
Received: (qmail 95614 invoked by uid 60001); 10 Oct 2012 16:25:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1349886300; bh=jaEN//dfogj2VveAeEoe/VXQQN2SwrOCdupZLniFXYg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=gFNDxSA+fQ/8A8jgKkFMAaKNlbRG81Fr2Blh/islfQc7fwumPFknPMR73jC3ebIw4/Jj4IaBtCCTajqdTlzpH3FQxVOWIRcnul4FVBa1NZN2f+DtPR6t1YHzzZXcfrd1UpORj1wmOG/WHquNyYwesDFYod+iLcHYwQJEIPJrWfc=
X-YMail-OSG: bNrzragVM1mTLrq9DxIX40L1J60JiJhrQ0wuRl7w6Sd1Y7u c6kjz5pTHtaDVpdpayxVP37.bOAv5uVox3wH3edxmNiadIQU_MhECL99_P6g rvJJGcLBsCljDdhiWqr0Lia7jKJHIdfX_w4avRcs0Tu8DTDkWNA31_7_FarE 5nYlfMedww6RvY5K6h7IcIEvs2U1G.CbX9WXYhiKjfdLM1s.v6W5SIPf85RN NspEsJXiafUi1QAXAzPKLhU5.bmFjCz3JER3WhYejBKIdkPQLJ2VE8ct95FS WDB6xtDiU3tRzQcEySrIXJwoMv15ScwC9pYuVs85JwH6ypUAAjAftFarPXEd 6hujb7zfiswYXLQg55XfnQReV36PZHVy6ffLu0QeipIkfC4HHTbakq7ag8Jr XU9qFc.5IR_JpnGYiINd_iBBp1.LjenFSIHT8o9Sw1RHSZMG_iIkMM0eJSVp sZdhbJKJSLaszEdLqD3iUcFwpzHD8iot8Ip6DIO17SMm.mgMxGJeksfmf1lC SlCGFXSmSGO7XZeO4emPmb749eAOGk0CgYHYwdL2RtbFD3fSHqR4LP0KtBJw tmUvaL1yqR_mUcAzvCjSAjAAP0lgfDUNpDZVmYlwbwl6NlJmowcO23eAppF6 rBOFUIVZHkG70Ht502_wTFM_e420-
Received: from [196.201.65.21] by web171605.mail.ir2.yahoo.com via HTTP; Wed, 10 Oct 2012 17:25:00 BST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1349886300.86977.YahooMailClassic@web171605.mail.ir2.yahoo.com>
Date: Wed, 10 Oct 2012 17:25:00 +0100 (BST)
From: Joy Donald <ms_joydonald@hotmail.fr>
Reply-To: donaldjoys1@yahoo.co.th
Subject: CAN I TRUST YOU

FROM:  “Joy Donald” ms_joydonald@hotmail.fr Reply-address: donaldjoys1@yahoo.co.th

____________________________________________________

This scammer spells Federal incorrect  – ‘ Federal Republic of Benin ‘ not ‘ FREDeral – LOL they aren’t smaRT AT ALL.

3) LOTTERY SCAM – 419 SCAMMER

EMAIL: FROM DESK OF MINISTER OF FREDERAL REPUBLIC OF BENIN.

FOREIGN CONTRACTOR PAYMENT OFFICE.

ATTENTION BENEFICIARY ,

The Board of Federal Ministry of Finance Benin Republic. are here to notify you of your payment inherited funds of ($2.500.00M)U.S.D dollars . after the meeting held on 6th of NOVEMBER 2011. His Exelence the PRESIDENT OF FEDERAL REPUBLIC OF BENIN DR YAYEE BONI. has Instructed this Department to send your funds through western union money transfer for easier receive of your inherinted funds without any further delay. to avoid paying money to the fraud stars that is going on through the global.

You are required to send your name and address were you want your fund to be send through western union the maximium amount you will be receiving each day starting from tomorrow is the sum of $5000.00. also your are required to send us the sum of $105.00 dollar for Re-newing and recofirming file that was deposited in this office with your name and address bellow .

Beneficiarey name———————
Address———————– ——–
Tel phone————————- —-
Your ID copy————————–
Your city————————-
Contact MR DOUGLAS JOHN with your informations below:
CONTACT PERSON: DOUGLAS JOHN
EMAIL: ( western.union45@live.fr )
TELEPHONE : +22968449676 OR +22999203703

As soon the required fee of $105.00 is send today for the renewing reconfirming the payment file of your funds you will start receiving your funds as from tomorrow.

Send the $105 dollar through western union with the name and I am waiting for you to give information to enable you start to receive your paymeny as from tomorrow

Send the money with this below information;

RECEIVERS NAME, PETER MARK
COUNTRY: REPUBLIC DU BENIN.
CITY: COTONOU
QUESTION HOW LONG?
ANSWER IMMEDIATELY
TOTAL AMOUNT $105.00

We await to receive the western union payment informations today. Please if you a are not the real beneficiary dont repond or delite
As soon as you send the only $105.00 usd you pick this first payment immediately ok you can track it now to your private system to be sure.

Yours in service
Financial Minister
Federal republic of Benin
WAITING TO HEAR FROM YOU AS SOON AS POSSIBLE

HEADER:

Return-Path: <officefile389@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.94
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: rVs1dXIWLDsMv_.n5QvLQrk7czd0m_vZykzvsDv2bO1NcJ6B mEmKmBbytjJ2Q2q7hoVPQRFf.X6dUoEqTwfUInQ1y31cNswweQ_WvtxI.i4x G_5EcbtSTAVFV_Tb4UXEP5nfbLLR3OcUBVBsg5a5QXdq93GUClR8IM3EZ5Oq Ax7QU446TQrW4z5fvkmJx3BMyug0lDIr.UKXxO4wFuMypYMVzckAr19SaEIM 9HuVKawHWF29nJmCMUx1.u.4D0ux2wFAlii5MeUQ942cVWxRJNRPKcmbs.HI xfvch.PCVUxqRomtl.EHpyv..T7KNAcWhNhb.OyXv.2QECxKRPe1A7JQ3esP SwDsYR_GQhXSI6NrwhwyUw_L5OuoS6BVHHBBLlwcEVolhJCEGaAjbppebA8J evmsqJ5PFkMZld3WHHJKdpHcYATjH92mH_OttCP.t_gHne6LdIMpg0icfVbo JUw8u4QIpzjvDbBLcLOo7FKhjR_..Dw3CR5HiVy3MjdTZZSVWnsizrHoNYE5 ravSWhY7xBCAUFpwo3u_TWaz0OusXIdi4QFDzivf0VIeiX7U2loHfgshFWfv XZnqeScp1sfpl5.qC8A.jyo8muRr0mX9Tl9byXrF3WYKvEdt3W8eOw0pl6tr nVjmCpVK3My0FU0bhunib_bq4I.amgNLqsYq2RCFlXCeCHFfOKNnfxNjbynC hxvT_tPcgA7lKv2YKqXSpx0aPsEAli7rWut4ZUI.mbV9ciR48JO1mZKsFMun Esrk8D.4ejFipPpmySq5vieercIDg0U79Pww_IHpoccnLrUXM_pkm_n5CE5W J5j0vgLwbYEKKiNM4J.qM.pziSivmA3LHJx4AT_NN_Ifx60YZTyinP8JewNB nEbJEKBjRYYIcrvzTgHy_Hp5rIhJK65y8uhTrNI1le7l6deAErzP.vQvp7RZ UQ061OvKu0ROvUPBj6ooxDZJiQPzlk5YUlYRoNhyiOarHEJYYvHrc2MAfnbs SXemLmas9CFQe.FOnAWLXg6IJXXnlJWn0Suo3DTioi7qFA.PEES_wVpW8Dq. pHM5id.fOlTcNRbobhwM5ELiEbv8UqiWO_xk43r8CF53mgnSxRGX_ofgT.vM K7TyCiTkiLJqrRPsj2XGv6qaEwrHZQVK_zZAm8bQlHgHMW.EPX1efMclxHr7 Hv87ie3KJVlYsbpt41qN.jHZ72TTGfgMUBIpd11uFx7wBWTNJnzM8wuflbWz 7ScRo1Rd9xaY2kgiJd00y.yGR9q0Te8G7.2gs64XgAj.rJHJEesoyLAnHor7 oBWj5K.idQo2jtWtMldstigscuNvbIdpB8ho6rmCzuBDmN33y0aFRpxE8w–
X-Originating-IP: [203.188.200.94]
Authentication-Results: mta1342.mail.gq1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm12-vm8.bullet.mail.tp2.yahoo.com) (203.188.200.94) by mta1342.mail.gq1.yahoo.com with SMTP; Wed, 10 Oct 2012 07:09:33 -0700
Received: from [203.188.200.220] by nm12.bullet.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
Received: from [203.188.200.63] by tm7.bullet.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
Received: from [127.0.0.1] by omp1004.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 119691.33270.bm@omp1004.mail.tp2.yahoo.com
Received: (qmail 38888 invoked by uid 60001); 10 Oct 2012 12:59:01 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1349873941; bh=MP+++lIJyYrpj/aXzm3tMnmhmfCfqMXOi5e1kzYn3Tw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=LVkAtUGaJbi5dfKJkjQghJrT8gUU0PgdSqmZsd9E/ZHQ6/CG6mgNm+rvJDts6pp3AiUWIw0omchZ9EGQ4FunoccmA2lDVIGS7pb99sdl5hsF0AkgCspFU5fgyb8PuayE1Yj98s03K9J4GMwWfqlVMdLewAIrzkJxc6PdD07aZ9I=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=c38Gpj05IhDmqBiYzJHOdEYJeIkGQAvzHcxXPhNy+G8fqdVpH1DSEJEtXQ2/1BsyYYvWZ8vCfJOX3lA93bclbzxnjXmUqQmhkeuQy2JqNskNXltl1tRwk609ukguAOvwLPnMhfqMio8PHMWIVwSnCRb2k3C14uRVjsQ6OpWNeTA=;
X-YMail-OSG: _GARL1wVM1lqQRqVGyFk1sZRYyWzAuNVhJd1sZHEBwkfLNd PMIg9HENG
Received: from [41.138.89.38] by web92411.mail.cnh.yahoo.com via HTTP; Wed, 10 Oct 2012 20:59:00 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1349873940.38815.YahooMailClassic@web92411.mail.cnh.yahoo.com>
Date: Wed, 10 Oct 2012 20:59:00 +0800 (CST)
From: MR DOUGLAS JOHN <officefile389@yahoo.cn>
Reply-To: western.union45@live.fr
Subject: ATTENTION BENEFICIARY

41.138.89.38 – BENIN / NIGERIA

“MR DOUGLAS JOHN” <officefile389@yahoo.cn>  westernunion45@live.fr

_________________________________________

4) SCAM – MONEY ORDERS – MONEY TRANSACTION – FRAUD

EMAIL: Attention please,
My name is Kim Wong, The Owner of Kim Wong Trading LLC,Kuala Lumpur Malaysia. I have been into Manufacturing of Fabrics,Textiles and Furniture Wares since I was a little child that gives me about 23 years of experience, I majored in art in high school and took a few college art courses, Most of my work is done in hand neatings mixed with Machine Embroidery.

I have recently added designing and creating artwork on the computer, I have been selling my Works for the last 3 years and have had my work featured on trading cards, prints and in magazines. I have sold in galleries and to private collectors from all around the world, I am always facing serious difficulties when it comes to selling my works to Americans, they are always offering to pay with MONEY ORDERS OR CASHIER CHECKS which is difficult for me to cash here in Malaysia.

I am looking for a representative in the United States, Canada and Europe who will be working for me as a part time worker and I will be willing to pay 15% for every transaction, this will not affect your present state of work. Someone who would help me receive payments from my customers in the united states, I mean someone that is responsible and reliable, because the cost of coming to the state and getting this payments is very expensive and time consuming, I am working on setting up a branch in the states for now I need a representative in United States who will be handling the payment aspect for my company.

These payments are in money orders and cashier checks and they will come to you in your name, If you are willing to WORK as our representative, All you need to do is cash the money orders and Cashier Checks, deduct your 15% and wire the rest to my company cashier here in Malaysia.

If you are interested in this PART TIME JOB OFFER, Please get back to me as soon as possible and send to me the listed information below:

1.Your Full Name:
2.Your Full Home Address
3.Your Direct Cell, Home and Office Number
4.Your Age, Gender and Present Occupation
4.Your Marital Status

The only problem which I have is trust, It will not cost you any amount, you are to receive payments from customers for my company which will be sent to you by FedEx or Ups from my debtors, which would come in Money Order and cashier Cheques depending on the of the payment my customers wants to use, then you are to cash it, deduct your 15% and wire the balance back to us.

NB: All charges to wire the Balance to us will be deducted from our money, so you are rest assured that you wouldn’t spend a dime out of your 15% or your personal money.
Thanks for your assistant and God bless,
Mr Kim Wong
Kim Wong Trading LLC
Lot 925 Jalan Kepong
Kuala Lumpur 52100 Malaysia

HEADER:

Return-Path: <mr_kimwong@etorq.net>
X-YahooFilteredBulk: 211.154.152.136
Received-SPF: none (domain of etorq.net does not designate permitted sender hosts)
X-YMailISG: yoXgebkWLDvhvSfGpf994bmowTFZpMDPw.1lseHkGA6T1SnA p1t3YxvxJS8N8EA6awflpA_S2QDZLDNMysomaZ_MhaETYuaVnjK1VCJfTVKg GS9W.3ZA3E0Nh3jVpAmuwHhVIFDW4md6Ih9TNntrWk8ZC7..jVHc9sonfVfW kOEygm8wmiN5oXRKB.x2mDSGgaNgpBu41IjFp3gBszrQIbsrDvNrrbX9uTH_ p7Rmx_l0Zrnd9FnqK.6C.zDTZyUuBsTQzCnWsM8tN1i_VRV0x_8_U6RqsTFm msR1VVPtNvDefm9IQjfYvdwJi5u2l5cNzeXjhEbiJmh2X_yK3vkalx4gjUjh AA_sYJdx7rgzLQ4_6TUXm96XQ0h4Dj_q9q4rAkf4ng0GzIJuMbhIWz9SSyc9 ky06NEAdJ.cBOsYY9pgrcAknG7Y1E2ecsvgQVSvIFQkstnNfG6BfSLt4dUe5 P1m.zXjK0.Lt9okfVcAJD33H_m0P1BCnItM4qwEFQmK91MxCGzCumuWqjPgY mJB_mcLtk3GZYcEf5z6pgS4q0NcL5BxMZ9pRg2jSIh6L8.EofXjDJ0QLTH2F oIvu9VLDtSm9CGm4dH3bF.fLuKCzPWcIR0W.cTJ1lx5E6.3cSpC6tu3xvrKT 3wtlgnidfUeFjY_B40NbWu7gSyUVmUYqSZcI53AkvjJhGr8UVgQZeZQz3_dF G3IKjw1ZbJO_m6WGSUENcg71vx7nFW7LeSncqg_yPEKXpNHTZoqUy4vNPlJB .edCKetnFzhsNi.fpSYxgKwiY4zAB7lAAnGVv_LTSiuNHY8Gq4_BjbG7TUVh 1jEbBhPSdv6h2Xn2d_a7_wluSypmlmmijiwoAyjJIzXIQRxOGyAQUpLNt3ic kidbPtvVlp9C5BxHHlSC4l_TaH2audAFdA61K6KkLpVzKbs7aDlwAG_4JY.P eHDCSLcxciwXAbIVMDhDjZzvgAxY9jnt1sY71l7n7d1dl6ufMrE_o0_qDe1j gk.030j9Eoh1E1ERfEHIOI85Czc2grhxp1jZP1GPEcz_HcFqrSn_eKAq.2ab BfXWVSKD5C53t6ibYYh55uQciKnQjLdW1DfMxvcOadU56IUCpJhN_X3tzBgB Vq7jtWkEC6p8UoTEaiFTL_bWrElyr4fvGLTgBOPVxMvn1t.ZmSAZquSUnn4E qSyewFfWh_6vi30xuvWs7yvkhvzMwEH_vHf6qrBNx2h8JRqQ
X-Originating-IP: [211.154.152.136]
Authentication-Results: mta1468.mail.mud.yahoo.com from=etorq.net; domainkeys=neutral (no sig); from=etorq.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO mail.giantsea.com) (211.154.152.136) by mta1468.mail.mud.yahoo.com with SMTP; Mon, 08 Oct 2012 13:09:44 -0700
Received: from User ([82.128.3.119]) (envelope-sender <mr_kimwong@etorq.net>) by 211.154.152.136 with ESMTP for <pondillobelle@aol.com>; Tue, 09 Oct 2012 01:25:27 +0800
Reply-To: <mr_kimwong@yahoo.co.jp>
From: “Mr Kim Wong”<mr_kimwong@etorq.net>
Subject: Your assistant please
Date: Mon, 8 Oct 2012 18:24:46 +0100

FROM: Mr Kim Wong mr_kimwong@etorq.net Reply-address: mr_kimwong@yahoo.co.jp SCAMMERS THIRD EMAIL-ADDRESS: pondillobelle@aol.com

Why would anyone need three fake addresses and fake IP’s just to send an email? Only scammers go this far to confuse and hide their identities because they’re cowards who lie, cheat and steal 🙂

 
Leave a comment

Posted by on 12/07/2012 in Lottery Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Office Customerscare”

ADVANCE FEE FRAUD – LOTTERY SCAM

This post shows 4 different emails from the same scammer. I’ve been scam-baiting this one but stopped over a month ago and I still receive emails daily so it’s hard to keep up. This particular scammer(s) always emails under different IP’s and email-addresses so I have posted each header in order as well.

1st EMAIL —

WESTERN UNION MONEY
HELLO MY DEAR
THIS IS SEVERAL TIMES WE WESTERN UNION BENIN REPUBLIC ARE SENDING YOU THIS THE SAME EMAIL TO START PICKING UP YOUR PAYMENT AS WE TOLD YOU BEFORE THIS INFORMATION REACH US SINCE LAST THREE WEEK AGO FROM OUR CORPORATE HEADQUARTERS ECO BANK WESTERN UNION,
STATES THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST $5,000:00 FROM YOUR TOTAL (FUND) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND PAY WHATEVER YOU HAVE FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM $250, TIME IS OF THE ESSENCE HERE,
SINCE YOU DON’T HAVE THE REQUIRE SUM OF$250, SO GO AND SEND ANY AMOUNT OF MONEY THAT YOU HAVE AT HAND STARTED FROM $40 TO UP $250, WE WILL ACTIVATE YOUR MTCN AND SEND TO YOU TODAY, UPON RECEIPT OF THIS PAYMENT,
BELOW IS THE MTCN OF YOUR FIRST PAYMENT, SO YOU ARE TO TIPE WWWW.WESTERNUNION.COM AND PUT THE SENDER FIRST NAME AND SENDER LAST NAME BEFORE THE MONEY TRANSFER CONTROL NUMBER (MTCN): THEN CLICK THE STATUS THEN YOU WILL SEE THE AVAILABILITY OF THE FUND ONLINE BUT IT CAN NOT BE PICKED UP DUE TO THE TRANSFER NEED TO BE ACTIVATED OKAY

1.WWW.WESTERNUNION.COM
2.MTCN 0560139994
3.SENDER EMMANUEL OKOYE
4.AMOUNT $5,000
BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST 5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP THE BALANCE SUM. SO I WANT YOU TO SEND THE AMOUNT YOU HAVE AT HAND. WITH THIS INFORMATION BELLOW. AND UPDATE US AMOUNT THAT YOU SEND AND THE MTCN.SEND THE PAYMENT DETAIL TO THIS EMAIL,(officecustomerscare@yahoo.com)
1. RECEIVER NAME… Ikwunne O Anthony
2. COUNTRY… BENIN REPUBLIC.
3. CITY… COTONOU.
4. TEST QUESTION…HONEST
5. ANSWER…TRUST.

THIS LAST NOTICE TO YOU IF YOU FAIL TO SEND THE MONEY TODAY YOUR PAYMENT FILE WILL BE CANCEL FINAL SO RUSH TO WESTERN UNION OR MONEY GRAM NOW AND SEND ANY MONEY THAT YOU HAVE AT HAND NOW START FROM $40 TO UP $250,
CALL ME ON THIS LINE AS SOON AS YOU SEND THE MONEY  +229 68377742
DR.CHINEYE NWACHUKWU
OPRATION MANAGER.
WESTERN UNION DEPARTMENT
PHONE NO.. +229 98677751

2nd EMAIL (RESPONSE) — Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

3rd EMAIL (RESPONSE) — Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

(The 3rd email is the same as the second but was sent on a seperate day with seperate header information)

4TH EMAIL — ATTENTION BENEFICIARY; THIS IS TO INFORM YOU THAT WE HAVE CONCLUDED TO EFFECT YOUR PAYMENT VIA WESTERN UNION BY $5000USD DAILY UNTIL THE TOTAL PAYMENT OF$1,500,000,00USD IS COMPLETELY SEND TO YOU.THE DIRECTOR ADMINISTRATOR OF FUND RELEASE HAS ALREADY SIGNED YOUR PAYMENT.NOW CONTACT WESTERN UNION PAYMENT OFFICER WITH YOUR FULL INFORMATION TO START RECEIVING YOUR MONEY AND ALSO FOLLOW THEIR INSTRUCTION.

YOUR FULL NAME :::::::
YOUR PHONE NUMBER:::::
YOUR COUNTRY:::::::::::
YOUR ADDRESS:::::::::::

CONTACT PERSON MR TERRY SAMSON
E MAIL ADDRESS (western_union09@wss-id.org)
PHONE NUMBER +229 98841150

Regard
Mark James.
WESTERN UNION PAYMENT
SECRETARY HEADQUARTER

1ST EMAIL HEADER:

Return-Path: <office_dooog@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.73
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: YTQQLVYWLDtr8GvJiSxswwRjP7wnkQFwbp2etVmaNl0FiaXv WEWUyzcgnOMV_Qxqdh9W6bDVUk0oJ2n4H_.OqH3FVMd.Y5SeQLY8WPB3FzvF PDksuUJsc8jsOTNRuyWFfYR3l5wAZDJgIWuiiGdSmgdTu68C3rqyg3O3KdWs h.EODC.8..TyOEAnTAvAstMaGS8Ncy0SIJObOaOjtoBxXs6HTVJjL2nLqQq. V8jcqhibon.BQ9tsji3ubP5LyOllUnFxk7kElsMu7n0vVWWSlivsKIy_S5n1 TnjjQsj6Z6unrH0LPjxjeSxKbAjjeU63LUw4W.D9he2EEs26JXAWNlSyN_RA mHtPVevectbOeAKgC.m._frVA4tVlBJnUDlnVGkTYGWpICSFxTT9LPW_EEeJ l2XotLG4IwrFUfDfi_oT5YhbAo7jPwjxliFYxO_jm1h_wnaqEAIoQUqbckjp VIOOy.9bM6cUUjn4sXuLElKl.HyFw3R3uBNExQYnmx4RLVovyUrURD0ciS64 y4A8HjS0d8vV45llBD7G.G.oahtQT4gZsScBryrPWxrTQ3pLGp8tSk2zK.n2 eeTHvEQSRnZIbN0eOuFt75vrczEzEp24_Wxy.kkTt24Ghr67RLbx14T8AWJX oN_fjH0I4fLe4bZg9kWJjC5AIUtbrQ2yjsGa8Rqmniy4tDcDdplQBJNCIttH Y6iPtc8dzN6XRG89qgna5ydQU4LybEz.EW03VSf5bIAK7G7wCnLMhQCLLxgk ly1aVYK.aBw2ZGGdBfsnGxEQGmjWgPW9Y8yaS38MKaKk5BlVKjdKTv4Du9tr 7v1Q0Ahg1rbEQYh8bXhTn4R03SCnAeBhjAproiLkSzIk_nlJpbqzYS_tDYFN eublP_kgPayXAilWx.ksYpuHs_SFNkLaI2tWIn4oFvj8Hul6cqhvS1pJwTK2 8xjAkTjf5BRCJ73jx3wjykpTf9CXKVLe4qVn43MdJwIGfeb9p6tuMcY5ae7w c0GAOM3ZK4N_pO93ZKX2sJA.aGW8uNMDRTGyX1W7L7EKmy.ZYJQMjrOnd1Pp 8VcXJpyj7WUoKAXFir41peZR3kuJAGhW1GbparzRRCsM53A5wxeRRRvbeQlP o9SRMR9hJ7G68eklKQlZiNlLHYAN75iIROMHam0GQkoQl658wOksxxV0w1yE mwld8PgOs6.ieT5hfoq6JOm_CZnFaWvDCuNdzu7iw15xSb996aG1QW0ovKDm ivdO.r3OOe2nezrbgWHscU8DcPD0SD__8p7aOAMpHGW.0iovFBMBhXwhAkfD _c5Tjzjt4SpvsBLMK1O5olWM9ZTOgPGebcxgdbmbvX9l8w–
X-Originating-IP: [203.188.201.73]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm9-vm7.bullet.mail.tp2.yahoo.com) (203.188.201.73) by mta1299.mail.sk1.yahoo.com with SMTP; Thu, 15 Nov 2012 00:06:47 -0800
Received: from [203.188.200.142] by nm9.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
X-Yahoo-Newman-Id: 597653.91745.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 1033 invoked by uid 60001); 15 Nov 2012 08:06:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1352966804; bh=sqgSO8xP/LR+hXQMdA2e6Ah1eNeIaTHiSoq/jXQJhqw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Yws8UW5RVEL2oPJjowNq8quCXz9OzL0CxZrfGMUtTLq9P49zyzmh4cHIIaccgUS6cadGW2uanBjRYI1LgN7qnDfXWjIk1fJUorh8XSrtSnhaoUyUmvLuinqV/FZQLQV6ArVs06/OCE6rJG6RrChDzUt4hI5ALQRFiJ3ZkZnKHy8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Lytcrsw3vUiLafw/lAGi2G0Q0Tb6yrnlT4ruv+ReTjQFhJriBDR+YxFNsAJmBt2mYpnus+zpYYvm4eYTFIsF0fqvBhc21W3x1a+iiSAPgC+CPtqGdn9cWtDgfR5n6UI9cuY9jwzCd+BU5PzXNKOXbca69Rp1IZVW4Uh5V+L0jKc=;
X-YMail-OSG: O7Gnv7UVM1lkD_jTVvQ9yvdVYlFxea2vZYOteXXHXMW9Qko jdT9UCaq6
Received: from [41.216.44.199] by web92416.mail.cnh.yahoo.com via HTTP; Thu, 15 Nov 2012 16:06:43 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1352966803.94317.YahooMailClassic@web92416.mail.cnh.yahoo.com>
Date: Thu, 15 Nov 2012 16:06:43 +0800 (CST)
From: “DR.CHINEYE NWACHUKWU” <office_dooog@yahoo.cn>
Reply-To: officecustomerscare@yahoo.com
Subject: WESTERN UNION MONEY

2ND EMAIL HEADER:

Return-Path: <officecustomerscare@yahoo.com>
X-YahooFilteredBulk: 98.139.212.254
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: VLLNlMkWLDtUbQTbov0porruXohSlGjiyaNfjajWB0Cduvem OEGnfKhhlF4xKrU2tbM7tHSjRtnksOtCmBni7.2lTKxqM.zJc0kyzLSmp0nG i_CbXXHC8eh56HcFkIULD.BdzbjU3UfTNf7R.IJyVWYbK4FdG2DbERiFQ4AL 2W3kyMd2NrGNWVi84alfEJaPHmLcuiCe1dLIUuBMMg3BNKZYFjFuj1Cbr1QS fmYvDQcEL9QkVQFRA1r4HQalx1x.gCGsnuJ2c9o5WMKTqxEw1lfIpbsWdvZb 0oKivkDXKT0HKUzKdomv4xD1rCw13jYJ0yXJK0BLZfjeePYsPyENUOsfKq9Y Nsoj1dG59zkCJKyLFnd4kgct.GcOBFGPoqpevxYvub8VNcT0gOhnFqLdU38G 72Wja4aTwyX2PGzlzRnU6lmTFEBVcSg3lAYandBAzew3G7Yidyq9q1dnArb3 aue0WfEzyULn8QnrFCgUnH0L2oQF5ev9nBRp.V7MwiTHNOL02o3SMhpcTzSL 52bdZyM3GnxXlVmICHIGyw3cjZkp4_5N.3WtCcf84ScjcaJVKOWt4ReEQVXz 1BtjyULP_fiWN1GESbbrTsmE5WwCpijqJaFqFw45b6wli268.1f0LfkNr.4z YlGykrhi5NCIpY_7esUOObjfjns3nvhb2j5mCdx7_hWj9lolzI2w0DcE3rdp sgN2GDBvVZ680RMztbImaCT.cTURBiiCwvdgTcUy0Mu0E.lTCpJPstDT6ZlW Di1Hoob5dN4ln1HGBipY7Z5mrwTFmtlfI1gjFum_SEDYSmuHGh7eTWZ.BoSU ..k.g0Z8apbapJclKdfT1VK5b1PTmnhtp0OwH3TkTAIf_pAo19ji1fUKzKDZ EMdkEFWD_lfFSXaZjN5LQxHHk0l0N6rCojsf0_lY0srKWve2SaahYAwGBjAV tPNotMOJ51vzMiyw9Zlgyn_jFQ6KxZb5_8Jf8wqtd85wZFjSV6QXpmyxDCKT BahVlS5eGljKzuKTRb0dPV1.M9TxnEImZOHOKCzELtPfnvAeYRoQI25sr133 QlJUxK4HOn1WdLoMNCYBk5J9fmNaV4mS4MQtnFmyIz6wEMbpqkh5CYIrF_8a 5wUl2MuedcVKiMKjzJ2tIETeEsnKcOIDytHmAkQDqTOW2ji6B9lvQQmqB4Ad A9EnFyF4tcz6dmhzNuJh.b_dhtlKSZ.m4PC6WeOEvnrqaf5k3Sy5nN11UGqE 6ok1.QuDzlLWvjzFTfU4a4QZxV5a7pd64zvhBsFGvxUQSVvpBL.8YqBW77Wu hit9.w–
X-Originating-IP: [98.139.212.254]
Authentication-Results: mta1227.mail.sk1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15-vm0.bullet.mail.bf1.yahoo.com) (98.139.212.254) by mta1227.mail.sk1.yahoo.com with SMTP; Sun, 02 Dec 2012 22:55:27 -0800
Received: from [98.139.215.141] by nm15.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:55:26 -0000
Received: from [98.139.212.223] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:55:23 -0000
Received: from [127.0.0.1] by omp1032.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:55:23 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 790906.43532.bm@omp1032.mail.bf1.yahoo.com
Received: (qmail 63457 invoked by uid 60001); 3 Dec 2012 06:55:23 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354517723; bh=D22VWzs/hPiPuo7CTSZY9WVrAb3WF520cs1fAxQD+yQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=M+WHRGyJ+Obkc6ezHvdZOt7XhENLPL3udu25sOZBN2bEv8bvyklwtQ6DLpmKzRRpBXOT706jn4vx+mPHl7Ss1QRzP9+0Wo6Ei7G3drwBg4JNSK0krATXorvXYUy6GzTqTOR3umwdQ0HSFEkjOZOm/e7lrZzQypAAF2HsfzCs/yE=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-
Received: from [41.216.44.199] by web161601.mail.bf1.yahoo.com via HTTP; Sun, 02 Dec 2012 22:55:23 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354517723.57854.YahooMailClassic@web161601.mail.bf1.yahoo.com>
Date: Sun, 2 Dec 2012 22:55:23 -0800 (PST)
From: Office Customerscare <officecustomerscare@yahoo.com>
Subject: Re: WESTERN UNION MONEY
In-Reply-To: <1354346435.35920.YahooMailClassic@web161004.mail.bf1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”-83809723-1967636313-1354517723=:57854″

3RD EMAIL HEADER:

Return-Path: <officecustomerscare@yahoo.com>
X-YahooFilteredBulk: 72.30.239.148
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: 19QBmTwWLDt95EV2ebP6OidYWqd1j1U2Pdisxv.rlfwDDGY5 69ILUE_kjRPOWAe40.wXl4PoTGUhChdXTKcgusQIibh0IPY_D0Ei53Wrj3P2 DDAmqC8G56tWm3H_2xzLI52rgBO8bDRU9eSbv2pm3Azd_QOUM2JKPXkfNgvF tl4uGNQOLg59unuxlWy7GcvTf7k_qoqXCzJmrjoh8hal1wltXqDrPCdnPvy. gFAaiJyTkAU00qxgTiQBoHammaTYZ4ZKrv1Bj7dJ1Ay0unZZGeZ_8m2Gszaf Hwkx24CP1NPhsf3bn1yuJzkA3iUs9lmwihY8jKVEyWkaKzas.DMkI_qi4SpH ZcprZOz7Wo6Ip0Xe7ngKq.DJvGhyKa6y3Mo9rBfkwPSE1QwldTeMrv.HiKNc J7.fdByCHPm9iuieID3uhsZuZxJJIk_dE_HSPw5N3kU3zc7fJYmx.cnjr3Wf 2ypCCkWSg4Xl.J_9t27tMPFXSJSoGwnm1vLC91UKaZD.u1dtZUXXxB5tay_6 GXotgxrPGmqkwvJ1U.b3XhbbjAW7JSmUeiIRB4cduWQUVHj_rnXP_czMPQVD 4N5bIlcCPjZh3eSRW3gf3AEFVFfPfJx8dm3puMNiCNIHEOWM.KXpLJkyXgwj CXCCZTVhjugOJr6sn4MUCKseOTSyKsr9xa8mUcQ7Ob3w7yUH9YsolFteJokZ 791VNvwM.fuDRTa4C7_GNiOQkrjQtbT08_fPhS4e5p8AUbAPtXoVVhGyrysS WNwPxxltk8XRhk_dX67wDsZjyOfXPmDB3HLalZHqy18lbOcSTBFWISoihgww mPfGu3xD9UWTgN63IDe.rcwpwuXNg9AUAD4WI2TC1TkLuaiTIMBHc1hUskD6 YD46YkgYu9COqzPN4SopL_xQJrvUF.PV5BY4NQB5A_ZB2qJd1gRrxiH7F2oM WMR0CXNOYrY9TXM7XVLamxfO0CSlGMEfV72DaaT_VdZEOlfYoPd4lJDJmB_N sx2jYYAEsdbk4xs6H_9732N8KEwn6jyiAlysubWeSNzm_bnMmkZWyun_skUk lz4XKNVqrbYacm35w2StbbyHFWA8Oo1zW2qh9zv_DmYJfZdb6uGfCzwiuoY3 n24tw2e56bUSpjpwHGWyNJG5h17GA.7b0IXQjO.t5i4rXNFLy4dlPo8Ql.KL 7o3hOnvqv8SS3l.1ctFHuH50C0Qb8SFAoSBMFFfAJNxfMjdPOZxRzdCI54Rr wbWeyGdrtM3CPB2GdyVVli6zsFLRpSNohN6nXHYzK_sThaAO.uWlopq9Mi7R 7gMJVHuSRow-
X-Originating-IP: [72.30.239.148]
Authentication-Results: mta1368.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm39-vm4.bullet.mail.bf1.yahoo.com) (72.30.239.148) by mta1368.mail.mud.yahoo.com with SMTP; Mon, 03 Dec 2012 06:21:13 -0800
Received: from [98.139.215.140] by nm39.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 14:21:11 -0000
Received: from [98.139.212.194] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 14:21:11 -0000
Received: from [127.0.0.1] by omp1003.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 14:21:11 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 750916.31792.bm@omp1003.mail.bf1.yahoo.com
Received: (qmail 15592 invoked by uid 60001); 3 Dec 2012 14:21:11 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354544471; bh=+YYliwmsShAvNwhPLyzJNYE1MPX34bjAR9RvOUaGZQw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=T9KwqKkebNxfAW3bEGZimvC7gz9wDwXYuJCHcFJKyIMKz+2fgGWIXJY7hbmEDeCEDL5nkFpao0O8/BJLEktQpgL/Oc8jlwc4lhbKFPAsVSV5XtdqnIgfQv+QUZOwGSNXAEzCLteM/75epq2GVgFNFQgSBnbamPziTry6CjeHtGA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=o9sVFcOkfqm1EvfSTDuAbchXwIrh1CcZ/q9lVAsMZNG9iKgZzGUjcyCwN6W2BlBR/8N1BCU063PBnoZz65AMfqMww9vx0tKyy44myRUE6CCrpuSb6Q4IvBJvmXmIBv8uMwFHW7T9qQ9GntFtNWZAEBsJEOoiU1w2LqVEwcJ/LaA=;
X-YMail-OSG: 01EGTb8VM1m0Oj0eiFuBd82hpLH5OcmVrv4NLOE.DGTQuBD xtJPpsSc0mVlekI3jqbZq
Received: from [41.216.50.26] by web161604.mail.bf1.yahoo.com via HTTP; Mon, 03 Dec 2012 06:21:11 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354544471.96769.YahooMailClassic@web161604.mail.bf1.yahoo.com>
Date: Mon, 3 Dec 2012 06:21:11 -0800 (PST)
From: Office Customerscare <officecustomerscare@yahoo.com>
Subject: Re: WESTERN UNION MONEY
In-Reply-To: <1354346435.35920.YahooMailClassic@web161004.mail.bf1.yahoo.com>

4TH HEADER:

Return-Path: <yajie3128198@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.9
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: emIYTZsWLDsWBcwgel.WAdTfmAz7lIDU50.tyqE5VPt1VGpv VeukhIjY1Cn.KU8zhzCD_Pw_36n4JbpBBnAvEduvgl5qSCqKBsweGyX_h2Ds wNqtHkWk84quxCURRbnzMjvGUohntskqKJ9WLPygNjL0APgEgATzpDrLvj8k VuA9FW29oKwfhjurxzDZCcZH2Oo2zAfZnsdooccof.1DHRU8.6up3Noi8BNz 8uT6vrZfuFUPZ8DeDut0XwFw6QVwjr1qEX04NI..JcSraqBEfIQfTaoAwHus vr6Lj_dvPNX5tWGkfcNnjurajknIRROwwtXaASLQ7Cx8Uh3N5NoiCPSRcyUG yKVTej8g1qqyPvMgRR.Xg5HP87.bsB_o_vmswcSNF8KDt9Xkig3exi2o.Llu bLaJLyQxnGQMqS2eBdVt7G9icsk0YsTnLfPjvmsUkuS7kjMMvIL8AvgT8Wld 0y2mIrI71WQLbuCmqFVBhujChu2eWJ200uDJKrDtjv9_yZnFECzHIn02pCyw CDCDxpVA63zdAbSelgfxij7sHg1_jZCnlbyUm2cEPdLk15uFHsM.7nvxrgUY 5LsHbzlOaBg0rJ9x6AjwIurAG9AqXXMS28ewOfH2p.VXst11fH7r9U5jjOcl nrsDfP6NHDykG0m5xL.B6nKv_VGrJFtJ2d7bJ49SJD3fHvm08HTy3IukXkbR _af4nG35A546UhnaBoCPZY2XgqgjyqfjS7wIp_.Xpne8dHrzvdiv2fGZoxNs cdmCT929aSNoBVS7qmf.Vqh4Ba0Cq0iGPC69oPzjoseElXh_w.rLeV3Vhtmh v4w396qlHszg2qTh1ti6kqxrlGBJ5Es5_rFAUpfV_Iyc523_g9gcXSF639qk 5L5ibU_TC20R6g7C8emmS0Xz4A881Mgir2IBDvlQCykLm36iOT7Jt3KtGd0Q 8zo2IoPSQNQeUnRVvOOs_1u4tawNtF3beclZPl1jNKjb13l6FkwaL.Pl0fMr 0zPIZaLlHadKxr2LSmAlVNFkwxzVF.ejbaqH1T4Bf.HF1_4vrPHyGwypU4oT _Rd9trwPjtmiazFmvyW4zVt6P3uo6oNViHQvSKESLhBEb0dp1mJ24JmpYudY 9FOXDLAfJNTHD0OBlfo4j0ZN5tFbVqku8MM2wJkkVdHXcav.NP88edHCmGkG 3hnvwRmaS.xRh57w.78MDdmqgr8JsPvQbi7hbuZbxtyPysPjavf.Mn1dKiU8 MDzL6_L.ARVxcwWXZuD__sEtleqB
X-Originating-IP: [203.188.201.9]
Authentication-Results: mta1048.mail.ac4.yahoo.com from=rediffmail.com; domainkeys=fail (bad syntax); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm8-vm7.bullet.mail.tp2.yahoo.com) (203.188.201.9) by mta1048.mail.ac4.yahoo.com with SMTP; Fri, 30 Nov 2012 06:06:08 -0800
Received: from [203.188.200.80] by nm8.bullet.mail.tp2.yahoo.com with NNFMP; 30 Nov 2012 14:06:04 -0000
Received: from [203.209.230.76] by tm1.bullet.mail.tp2.yahoo.com with NNFMP; 30 Nov 2012 14:06:03 -0000
Received: from [127.0.0.1] by omp105.mail.cnb.yahoo.com with NNFMP; 30 Nov 2012 14:06:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 676497.39980.bm@omp105.mail.cnb.yahoo.com
Received: (qmail 62200 invoked by uid 60001); 30 Nov 2012 14:06:03 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1354284362; bh=y53EsIyh7n71+dZ/04bpw8ev0uIRHfZGOGFr7f2xT6g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=2YdCEBsGYX6t8lq6v3RHWBeQNjh949+Bf0uHOzdQF4HHzc99e4R1GTkk82F+ACxM92FYk6ciYRMBFJjgw2vTXqxajDQF2mGe9gcYWTzOWlcMZcKOpAlTdfZ0a/Q5L57cgywjlceOUq8CTwQTYdP7c8C7RolTF4JhNYOVKXiweg8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=GvTvbvzMaFegUf3UU+0sN9uBuXGXz9nGn8DJZsM7LuwwyYt/3ZLa/bfYTxLdIOMSKzvNeyVM1QZb+7O0P99zR4/vnljfB45mZ1c63OSyAeHSYzBLiIpy7fSSyVzqdmyGQmITI9SAFiL0VKPGWWc8GDdA8JtUfxELE16aQoEAntI=;
X-YMail-OSG: uMubNSsVM1lY53F0TXaMY83uS7TEq6JQlDsaehAolKSsGNi urJ9D0OkSh22JWyfGoQTj
Received: from [41.216.63.171] by web92205.mail.cnh.yahoo.com via HTTP; Fri, 30 Nov 2012 22:06:01 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.127.475
Message-ID: <1354284361.58719.YahooMailClassic@web92205.mail.cnh.yahoo.com>
Date: Fri, 30 Nov 2012 22:06:01 +0800 (CST)
From: OFFICE <offficialofficee@rediffmail.com>
Reply-To: western_union09@wss-id.org
Subject: REPY TO WESTERN UNION PAYMENT OFFICER

“Office Customerscare” <officecustomerscare@yahoo.com> <> DR.CHINEYE NWACHUKWU <> westernunion09@wss-id.org <> offficialofficee@rediffmail.com <> +22998841150 –  +22998677751 – +22968377742<office_dooog@yahoo.cn>

_______________________________________________

Associated Email: western2union1money0transfer@live.com
Associated User Account: Mr.Barry Grant
IP: 41.216.63.171

Associated Email: johneric777777@yahoo.com.ph; western_union2011@superposta.com
Associated User Account: Mr. JOHN ERIC.

The ip address 41.216.63.171 has been recorded as a spammers ip. If you have had a member sign up with this address you may want to consider contacting them, and possibly banning them from your site.

Other scammer IP’s in this range:

41.216.50.26
41.216.44.198
41.216.44.37
41.216.50.204
41.216.50.32
41.216.192.148
41.216.133.26
41.216.50.182
41.216.63.171
41.216.44.196
41.216.50.181
41.216.63.171
41.216.50.33
41.216.50.33

________________________________________________

Associated Email: kennethkuye58@yahoo.com.ph; emscompany78@yahoo.com.au
Associated User Account: Kenneth Kuye
IP: 41.216.44.199
The ip address 41.216.44.199 has been recorded as a spammers ip. If you have had a member sign up with this address you may want to consider contacting them, and possibly banning them from your site.

_______________________________________________

Associated Email: office.filemail21@yahoo.com.ph; western_union3852253@yahoo.com.au
Associated User Account: Mr Kenneth Kuye
IP: 41.216.50.26
The ip address 41.216.50.26 has been recorded as a spammers ip. If you have had a member sign up with this address you may want to consider contacting them, and possibly banning them from your site.

_______________________________________________

The additional IP’s have been blacklisted on atleast one anti-spam (scam) website and reported by other internet users.

Spammers Sent From 72.30.239.207
From: Standard Credit International Finance <thomasdavid
Subject: none/blank
From: Nadia kallon mbembe <nadimbem@rambler.ru>
Subject: Hello dear
From: Ibrahim Sanogo <ibrahimsanogo@voila.fr>
Subject: GREAT CONFIDENTIAL BUSINESS
From: “DR. B.S RUMA”<bsruma1@hotmail.com>
Subject: Call for assistance Tel: +44 (702) 401 6959
From: 郑���阳
Subject: 艳君
From: “ypyqv” <zabelvineewm@yahoo.com>
Subject: 何丽壤何丽壤
From: 唐湘祁
Subject: 楊家團
From: “Mrs. Sharon Crawford”<info203932@skymail.mn>
Subject: COMPENSATION ALERT, OPEN ATTACHMENT TO READ ALERT
From: YAHOO MICROSF 2012 <claimagent45@gmail.com>
Subject: Co
From: EURO LOTTERY PROMOTION AWARD <drmartins123@gmail.c
Subject: YOU HAVE WON
From: MATHEW SILVER <mathewsilver1290@gmail.com>
Subject: DETAILS OF THE MONEY IS ATTACHED
From: “AGENT JAMES BURTON”< kjhguigu@hotmail.com>
Subject: FROM FEDERAL BUREAU OF INVESTIGATION {FBI}SOLID PR
From: UNTED NATION PAYOUT <anthonymark.clyd@gmail.com>
Subject: (FIND ATTACHED) TO CONFIRM YOUR PAYMENT INSTRUCTIO
From: dso <obregonhjmou@yahoo.cn>
Subject: 请查收!
From: “Mr.Law Kanu” <lawkanuu@gmail.com>
Subject: AT LAST YOUR PART PAYMENT HAS BEEN APPROVED
From: “MR. SUNNY LUCAS” <sunluccas111222@rediffmail.com>
Subject: SOUTH AFRICAN NETWORK FOR WOMEN
From: “CARD OFFICE”<drgoodluck001@aol.com>
Subject: payment of US$2.182.Million Dollars only via ATM C
From: “Mr.Ibrahim”<lamored.ibrahim8442@live.com>
Subject: VIEW THE ATTACH OF YOUR COMPENSATION FUND
From: “MS GRACE SMALLWOOD”<mr.johnwalker444@hotmail.com>
Subject: HIS IS TO NOTIFY YOU THAT YOUR FUNDS ARE CURRENTLY

From: COMMITTEE ON FOREIGN PAYMENT <web.np@att.net>
Subject: ATTENTION
From: john graig <web66778822@att.net>
Subject: GOOD DAY
From: Nadia kallon mbembe <nadimbem@rambler.ru>
Subject: hello dear
From: “Mr.Steve Gulliver” <stevegulliver001@gmail.com>
Subject: INVESTMENT PROPOSAL
From: “Mr. Donald Wilson”<michealscolls25@att.net>
Subject: Confidential Account information
From: UNITED NATIONS ORGANIZATION <unitednations22010@gm
Subject: PAYMENT ORDER VIA ATM CARD
From: pavel_stuleanic_12@yahoo.com
Subject: Curs Italiana – Invata italiana fara profesor
From: Zana Clement <zanaclement2011@yahoo.com>
Subject: From Miss Zana Clement
From: e_x_t_r_a2000@yahoo.com
Subject: Economizor de energie electrica!
From: emo_love191@yahoo.com
Subject: Economizorul care reduce factura la curent cu cel
From: “United Nations�”<publication@un.org>
Subject: Attn: BENEFICIARY, Notification of Your Unclaimed
From: Oferta zilei <alexandra1975stefan@yahoo.com>
Subject: Tigaia magica Dry Cooker
From: Google Corporation <claims.sector@webname.com>
Subject: Google’s 14th Happy Anniversary
From: POWER-BALL ONLINE PROMOTION <info.pball.promotion1
Subject: CONGRATULATIONS. (VIEW THE ATTACHMENT FILE FOR MOR
From: MICROSOFT AWARD <awardm2012@gmail.com>
Subject: Good News And Congratulations You Are Lucky Winner
From: CANADA UK LOTTERY PROMOTION
Subject: Congratulation,[Kindly Open The Attach File
From: Musa Ahmed <musaahmed20222@gmail.com>
Subject: CAN WE WORK TOGETHER WITH TRUST?
From: William Nii Offori <douglaakana12@gmail.com>
Subject: Dear friend kindly view the attached file and get
From: “tristardamith@yahoo.com” <tristardamith@yahoo.com
Subject: GUESS WHO HAS A CRUSH ON YOU!
From: HEINEKEN PREMIUM PROJECT 2012
Subject: HEINEKEN PREMIUM PROJECT 2012
From: Felix Hachel <felll_hachel@hotmail.com>
Subject: Your transfer is ready
From: “#10090246 _____Get-a,holiday-bonus!_____Last<Hour
Subject: Last Hours to Save! 40% Off! Order #10090246Exp|re
From: MRS GRACE MANDA <gracemanda147@gmail.com>
Subject: I NEED YOUR ASSISTANCE ON THIS TRANSITION

Other Spammers IPs in this Range

41.216.50.33
41.216.133.26
41.216.50.204
41.216.50.182
41.216.44.198
41.216.50.33
41.216.50.26
41.216.50.79
41.216.50.33
41.216.160.135
41.216.44.37
41.216.50.26
41.216.38.164
41.216.40.128

 
Leave a comment

Posted by on 12/05/2012 in Lottery Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“HOUSE OF LORD’S ORGANIZATION UK LONDON”

INHERITANCE / LOTTERY SCAM – COUNTERFEIT CHECK

ATTENTION: This scammer had previously sent me a similar email on November 13, 2012 under the same email-address of info@lordsdept.org but the reply-address was managementfile1@gmail.com IP 41.216.50.32 (location: Nigeria) and 213.154.64.102 – For more information click: HOUSE OF LORD’S ORGANIZATION UK LONDON 11/13/12

EMAIL: ATTN PLEASE
The HOUSE OF LORD’S ORGANIZATION UK LONDON Have just concluded the meeting
with the board of Trustees of United Nations Organization and
Representative of all the financial institutions, The meeting that has
been for the past eight months on financial matters, It has been agreed to
release all long terms debt, These are the classes we are looking into:
those whom has been one way or the other denied their Inheritance or
Contract payment/award payment due to corrupt official services,

After our mutual investigation in the recent schedule for payment of
outstanding debts incurred since 1999 to 2012 according to your file
record where we got your email address; your payment is categorized under
section {B}: Contract type: Lottery/inheritance/ unpaid contract funds/
Undelivered Lottery fund, Attn: Beneficiary, We have decided to bring to
your attention, that you were listed as one of the beneficiary, The
executive council Have decided to pay as many they have their file record
on their desk on a direct wired transfer, The total sum of $5.5usd has
been approved under your file according to elect,

Contact the processing/paying manager for your direct payment of US$5.5M
(five Million Five Hundred Thousand United States Dollars), you are
directed to contact the International Remittance Department of Benin
Republic who is In-charge of the payment
via E-mail:
E-mail: olusegunoniwon@ymail.com
E-mail: consultationdept@yahoo.com
Phone: +229 674 067 42.
CONTACT PERSON: MRS. ANDRIANA U. OLUSEG
INTERNATIONAL FUND REMITTING DIRECTOR.
HOUSE OF LORDS BENIN REPUBLIC.
Also provide the following detail to her for immediate release of your fund,
Also it is very necessary and important that you send us an e-mail
containing your vital information?? As requested below so that you will be
given an immediate response and directives on what to do next:

Full Names:
Address:
City:
Zip/Postal Code:
State:
Country:
Present Occupation:
Company Owner:
Company Name:
Gender:
Age:
Reachable Tel#/Mob:…………..*No Voice Mail Service*
Fax:

THIS REQUIREMENT MUST BE PROVIDED TO HER COMPLETELY,
As soon as the International Remittance Department in your file location
receives your information, your US$5.5M will be Transfer to your nominated
Bank account. this payment terms is to keep a clean slate of all debts
owned by the government and company to individuals either by contract or
award fund, we hereby plead for any inconvenient that you might have
received by any of this corrupt officials, The United Nations Organization
will not be interested in your story of not receiving your payment if you
fail to abide to this Instruction.
Yours Faithful,
Mr. Anderson Paul
Public Relation Officer
Strand Bridge House 138-142 Strand,
City of London,
E-mail: com.unit@net.hr
Hot line +44 020 8759 9090
OUR REF: H/L/UNN/APXB/TF/08
IMMEDIATE PAYMENT
#:WB/PC/FMF/MIN/UN/APXB/08.
HOUSE OF LORDS LIAISON HEADQUARTERS UK LONDON OFFICE.

SORRY IF YOU RECEIVED THIS MESSAGE IN JUNK BOX IS DUE TO OUR SLOW NETWORK

HEADER:

Return-Path: <info@lordsdept.org>
X-YahooFilteredBulk: 213.154.64.102
Received-SPF: none (domain of lordsdept.org does not designate permitted sender hosts)
X-YMailISG: n17TtrcWLDsdDEuSkY_HSkT51L21bPdZBMwxi6AQhYevQE6n 5AHJGUMCXxFcQWA_8b.NyHFBqZMcO.UjZ8FCertxLymBdRPX5yB160N2TGnm qwaPHWExX39Nk3fcXAu.PafkPhJjSLuBXZu9PORr5C.y390tBzQRaxX_Ajeo 7Hur_RtoMBNsEKEcS1NY_jJ7MVItgwhEdNv6BMjqx_b1MlG92f5bS_CtuAVd .oh_JKiqCucKnJdR_vA8__9UE.1fwuLwZ2jBdATHKGRXWA9jdgOwV3Ib69fT EOd7eaFTWdb_5Z16_.TYe.j7ArE3IJKpEKIk4E3slNCtWmGIRFmTka.H7YVU kHIFWlOe90o2tvuCYr8RvUv71WE0TgPgVl6Khq6RD5q1jIaXuAGNiZL303nP R7TIfXxur5a8ZC_2oHyszcv9WRLQjWFSCzGvGQYUJrk_g_Fa1qrpUjRjeM2i l0G7FO2XeR9HCwaTT2znjIqPkdy2KwzEIIjCz.N4kogQKc2kG9n6xWFpcpLo 74MXi2XlqMqfjw4Cj80wiP3jwE0ktGXxBGMSU_2n3YAQ21o2uVONL1mXGIl5 4bMmhVshiHKswZJfj1BN.SBP2D3c53qVkVjkIDCET06u1nIveivDP4Y_oe4g Gp0bTWt5y_R1RqFMmD.AIwh_MS5N2hQgXY2q7xk1_gsgMw2uKxCqk5wcw1df NMnauhxNQjJs0_tgmkT.nJ.KTOhA_qgdK986CusmuMctpQOH_ihBK.jvNTSK btYCtI0byx3BytVo7snXt8QYK6E5Jx9k3ZzauOFpR59.AeWK_EuKrJxb5kp_ 3EZ1tBGHB.ss6mypa8vfMvhb8TINeip6CZPnWI2wlXwUR.ZEKIJrohmFVHFm KFYVmymAMCOdWOLWh2A.dyJSUrjLje2_aZ.DSuRVGpoAtJLHe0QsBF20RzyD 7dC25DeBhkcO8UHLsvng7wFO2coQ2XMhsp.ayEqCe4X2lpjsh2lah9Xo7V7L pPiABw_yasLUGHztyfOUYJ9OSusCqxN.k2MPixuf1vKCB7pq65Iyc4p2uGVC K6bnKMICrei.rxdj1vvTYbKEmvHVsmn.tfhS5B0nTlah3FmibbEpZKHX7Upe wqrzGbwYMdD9LSIDpmkIqF3bRJMX91BdA08UsLs4_E931bhwDffu1ERuYjIw WyEwbhIfjONgETEO8gEzvb42sZbk90Wsxo5b2y1F4ypAzD7R2VyYuQIFQHpb _kcoyrCgQZolEt10hXFRxy0X5MWOAFCOxnDTvDjoJuR2m5Q4DJk8Ic5xuXp8 QCyFyE5lHJPSNnKZ9A15ErmDah0X_ZcVtz5Ri2C_TQNylkHidCSUd8sG0SJb Mg567n3VzIfX6JYHtqlSY9NbCE.G8GC_kNiS.WMe0oeKI7OGev6vbuV8Hzjf yRICVnPIJjSU56vQ91Rk6elLYGnonbkMLw–
X-Originating-IP: [213.154.64.102]
Authentication-Results: mta1349.mail.mud.yahoo.com from=lordsdept.org; domainkeys=neutral (no sig); from=lordsdept.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtpgp.orange.sn) (213.154.64.102) by mta1349.mail.mud.yahoo.com with SMTP; Sat, 01 Dec 2012 01:51:12 -0800
Received: from sunumail.sn (HELO srv1-smtfree-msg.orange.sn) ([213.154.64.61]) by smtpgp.orange.sn with ESMTP; 01 Dec 2012 09:17:34 +0000
Received: from [213.154.64.43] (helo=www.sunumail.sn) by srv-smtfree.orange.sn with smtp (Exim 4.43) id 1Tejj5-000827-EM; Sat, 01 Dec 2012 09:51:11 +0000
Received: from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)
Message-ID: <55073.41.203.79.249.1354355471.sunumail@www.sunumail.sn>
Date: Sat, 1 Dec 2012 09:51:11 -0000 (GMT)
Subject: NOW CONTACT THE GLOBAL FUND REMITTING OFFICE FOR YOUR APPROVED CHEQUE.
From: HOUSE OF =?iso-8859-1?Q?LORD=92S_ORGANIZATION_UK_LONDON?= <info@lordsdept.org>
Reply-To: consultationdept@yahoo.com
User-Agent: SUNUMAIL/1.4.2
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: info@lordsdept.org
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to false
Content-Length: 3749

HOUSE OF LORD’S ORGANIZATION UK LONDON

Some other email addresses and IP’s used by HOUSE OF LORD’S ORGANIZATION UK LONDON SCAM – info@lordsdept.org <> com.unit@net.hr <> managementfile1@gmail.com <>  olusegunoniwon@ymail.com <>  freshtools@wanadoo.fr <> hackk@smtp.com <> 213.154.64.102 <> 213.154.64.43 <> from 41.216.50.32 (SquirrelMail authenticated user david_fletcher) by http://www.sunumail.sn <>

RECEIVED: from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)

MESSAGE-ID: <55073.41.203.79.249.1354355471.sunumail@www.sunumail.sn>

More scammers who’ve sent out email spam under 41.203.79.249 are:

From: <sales1@home.fanwrestling.com>
Subject: Fwd: Re: Wire Transfer Confirmation
From: Tagged<Tagged@taggedmail.com>
Subject: Re: Fwd: Wire Transfer Confirmation (FED REFERENCE
From: <hien_u_spine@hhp.sugarmotor.net>
Subject: hien_u_spine@hhp.sugarmotor.net � ROLEX Inc � Disc
From: <kathytessendorf@mailfront.cbulock.com>
Subject: kathytessendorf@mailfront.cbulock.com � ROLEX Inc
From: LinkedIn Password <password@linkedin.com>
Subject: Reset Your LinkedIn Password
From: <Harrietjeancy@gmail.com>
Subject: Fwd: Re: Your Flight US 66-56833
From: “Purchase Vigara” <EAF01C7@tennlandforsale.com>
Subject: Weekend sale

western_uniontransfer121@hotmail.com — Received: from col0-omc4-s16.col0.hotmail.com ([unknown] [65.55.34.218]) by vms172065.mailsrvcs.net

From: Western Union Payment Center western_uniontransfer121@hotmail.com
Subject: FROM WESTERN UNION AGENT MR.PAUL EZE
X-Originating-IP: [65.55.34.218]
X-Originating-IP: [41.203.79.249]

From: Office Ups Courier
Subject: Urgent Delivery of your ATM Card Payment Through UPS Company Delivery.
X-Originating-IP: [77.238.189.61]
To: undisclosed recipients: ;
Reply-to: upsofficecourier@yahoo.com.hk

Received: from [41.203.79.249] by web29301.mail.ird.yahoo.com

From: Money Gram
Subject: Dear Customer.
X-Originating-IP: [77.238.189.216]

Received: from [41.203.79.249] by web132219.mail.ird.yahoo.com

Received: from nm25-vm8.bullet.mail.ukl.yahoo.com ([unknown] [217.146.177.154])
by vms169119.mailsrvcs.net
(Sun Java(tm) System Messaging Server
Received: from [127.0.0.1] by omp1016.mail.ukl.yahoo.com with NNFMP; Tue,
29 Nov 2011 19:54:16 +0000
Received: (qmail 69819 invoked by uid 60001); Tue, 29 Nov 2011 19:54:16 +0000
Received: from [41.203.79.249] by web26303.mail.ukl.yahoo.com
Date: Tue, 29 Nov 2011 19:54:15 +0000 (GMT)
From: “Mr.Edwin Aja”
Subject: CONTACT DIPLOMATIC AGENT IMMEDIATELY
X-Originating-IP: [217.146.177.154]
Reply-to: adamsvictor14@yahoo.fr

IP 209.239.47.191 as relay: IP: 41.203.79.249

YOUR BANK DRAFT DELIVERY NOTIFICATION!!!
Contact Person: REV.TEDDY HARRIS
UPS Courier Company.
E-mail: upscompainy1133@hotmail.com

419 from above IP, using 3 Yahoo IP addresses, including 98.138.91.34, as relays:

YOUR WESTERN UNION PAYMENT CALL TO CONFIRM @ +229-98679197
Vital Finance Bank Western Union Department.
Location Address; Plot 1261, Adeola Hopewell Street CO/B/REP,
Contact Person: Mr Chris Mike.
Tele phone Number: +229-98679197
Email Address: ( westernuniontransfe6@globomail.com )

“Western Union” Spam from above IP (Lagos, Nigeria), using IP 196.1.218.76 as relay:

Call Mr Kevin Anthony For Your Mtcn.
webmail address:( western_union001@qatar.io)
tele phone.+229-984-168-39
Contact person Mr Kevin Anthony.
November 17 2010 03:11 PM
H.User7043 commented…
“Western Union” SpamScam from above IP (Lagos, Nigeria), using IP 211.55.29.156 as relay:

MESSAGE FROM WESTERN UNION
Director; Tuker Hans
E-Mail :(cbbj@ymail.co)
Direct line: +229-66-614-055
October 09 2010 09:39 AM
H.User7043 commented…
From “Tony Chris,” purporting to be a poatmaster in Ghana, as a follow-up to an email from a “Barrister Paule Eze,” offering me an ATM card worth 2.4 million Euros.

“Attention Beneficiary,
From: TONY CHRIS ”

 

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“DR.CHINEYE NWACHUKWU”

INHERITANCE SCAM – NIGERIAN 419 SCAMMER

UPDATE: LOTTERY SCAM – SAME SCAMMER – CLICK PAUL JOHNSON FOR MORE INFORMATION Paul Johnson under <westernu749@gmail.com> officepost466@yahoo.fr IP 212.82.109.207 and the same receiving IP 41.216.44.199 (I’ve been baiting this scammer but stopped over a month ago and still receive emails daily. Each day the scammer emails me under a new proxy/fake IP, email-address and name.)

RESPONSE EMAIL FROM: DR.CHINEYE NWACHUKWU <office_dooog@yahoo.cn> reply-address: <officecustomerscare@yahoo.com> is now going by “Office Customerscare” <officecustomerscare@yahoo.com> and sent this follow up email:

Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

His response email is under a new (fake proxy) IP address of 98.139.212.160 with the same receiving IP of 41.216.44.199 IP-Location: Nigeria (the rest of the header is below the original email/header.)

EMAIL: WESTERN UNION MONEY HELLO MY DEAR

THIS IS SEVERAL TIMES WE WESTERN UNION BENIN REPUBLIC ARE SENDING YOU THIS THE SAME EMAIL TO START PICKING UP YOUR PAYMENT AS WE TOLD YOU BEFORE THIS INFORMATION REACH US SINCE LAST THREE WEEK AGO FROM OUR CORPORATE HEADQUARTERS ECO BANK WESTERN UNION,
STATES THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST $5,000:00 FROM YOUR TOTAL (FUND) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND PAY WHATEVER YOU HAVE FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM $250, TIME IS OF THE ESSENCE HERE,
SINCE YOU DON’T HAVE THE REQUIRE SUM OF$250, SO GO AND SEND ANY AMOUNT OF MONEY THAT YOU HAVE AT HAND STARTED FROM $40 TO UP $250, WE WILL ACTIVATE YOUR MTCN AND SEND TO YOU TODAY, UPON RECEIPT OF THIS PAYMENT,
BELOW IS THE MTCN OF YOUR FIRST PAYMENT, SO YOU ARE TO TIPE WWWW.WESTERNUNION.COM AND PUT THE SENDER FIRST NAME AND SENDER LAST NAME BEFORE THE MONEY TRANSFER CONTROL NUMBER (MTCN): THEN CLICK THE STATUS THEN YOU WILL SEE THE AVAILABILITY OF THE FUND ONLINE BUT IT CAN NOT BE PICKED UP DUE TO THE TRANSFER NEED TO BE ACTIVATED OKAY

1. WWW.WESTERNUNION.COM
2. MTCN 0560139994
3. SENDER EMMANUEL OKOYE
4. AMOUNT $5,000
BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST 5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP THE BALANCE SUM. SO I WANT YOU TO SEND THE AMOUNT YOU HAVE AT HAND. WITH THIS INFORMATION BELLOW. AND UPDATE US AMOUNT THAT YOU SEND AND THE MTCN.SEND THE PAYMENT DETAIL TO THIS EMAIL,(officecustomerscare@yahoo.com)
1. RECEIVER NAME… Ikwunne O Anthony
2. COUNTRY… BENIN REPUBLIC.
3. CITY… COTONOU.
4. TEST QUESTION…HONEST
5. ANSWER…TRUST.

THIS LAST NOTICE TO YOU IF YOU FAIL TO SEND THE MONEY TODAY YOUR PAYMENT FILE WILL BE CANCEL FINAL SO RUSH TO WESTERN UNION OR MONEY GRAM NOW AND SEND ANY MONEY THAT YOU HAVE AT HAND NOW START FROM $40 TO UP $250,
CALL ME ON THIS LINE AS SOON AS YOU SEND THE MONEY +22968377742
DR.CHINEYE NWACHUKWU
OPRATION MANAGER.
WESTERN UNION DEPARTMENT
PHONE NO.. +229-98677751

HEADER:

Return-Path: <office_dooog@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.73
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: YTQQLVYWLDtr8GvJiSxswwRjP7wnkQFwbp2etVmaNl0FiaXv WEWUyzcgnOMV_Qxqdh9W6bDVUk0oJ2n4H_.OqH3FVMd.Y5SeQLY8WPB3FzvF PDksuUJsc8jsOTNRuyWFfYR3l5wAZDJgIWuiiGdSmgdTu68C3rqyg3O3KdWs h.EODC.8..TyOEAnTAvAstMaGS8Ncy0SIJObOaOjtoBxXs6HTVJjL2nLqQq. V8jcqhibon.BQ9tsji3ubP5LyOllUnFxk7kElsMu7n0vVWWSlivsKIy_S5n1 TnjjQsj6Z6unrH0LPjxjeSxKbAjjeU63LUw4W.D9he2EEs26JXAWNlSyN_RA mHtPVevectbOeAKgC.m._frVA4tVlBJnUDlnVGkTYGWpICSFxTT9LPW_EEeJ l2XotLG4IwrFUfDfi_oT5YhbAo7jPwjxliFYxO_jm1h_wnaqEAIoQUqbckjp VIOOy.9bM6cUUjn4sXuLElKl.HyFw3R3uBNExQYnmx4RLVovyUrURD0ciS64 y4A8HjS0d8vV45llBD7G.G.oahtQT4gZsScBryrPWxrTQ3pLGp8tSk2zK.n2 eeTHvEQSRnZIbN0eOuFt75vrczEzEp24_Wxy.kkTt24Ghr67RLbx14T8AWJX oN_fjH0I4fLe4bZg9kWJjC5AIUtbrQ2yjsGa8Rqmniy4tDcDdplQBJNCIttH Y6iPtc8dzN6XRG89qgna5ydQU4LybEz.EW03VSf5bIAK7G7wCnLMhQCLLxgk ly1aVYK.aBw2ZGGdBfsnGxEQGmjWgPW9Y8yaS38MKaKk5BlVKjdKTv4Du9tr 7v1Q0Ahg1rbEQYh8bXhTn4R03SCnAeBhjAproiLkSzIk_nlJpbqzYS_tDYFN eublP_kgPayXAilWx.ksYpuHs_SFNkLaI2tWIn4oFvj8Hul6cqhvS1pJwTK2 8xjAkTjf5BRCJ73jx3wjykpTf9CXKVLe4qVn43MdJwIGfeb9p6tuMcY5ae7w c0GAOM3ZK4N_pO93ZKX2sJA.aGW8uNMDRTGyX1W7L7EKmy.ZYJQMjrOnd1Pp 8VcXJpyj7WUoKAXFir41peZR3kuJAGhW1GbparzRRCsM53A5wxeRRRvbeQlP o9SRMR9hJ7G68eklKQlZiNlLHYAN75iIROMHam0GQkoQl658wOksxxV0w1yE mwld8PgOs6.ieT5hfoq6JOm_CZnFaWvDCuNdzu7iw15xSb996aG1QW0ovKDm ivdO.r3OOe2nezrbgWHscU8DcPD0SD__8p7aOAMpHGW.0iovFBMBhXwhAkfD _c5Tjzjt4SpvsBLMK1O5olWM9ZTOgPGebcxgdbmbvX9l8w–
X-Originating-IP: [203.188.201.73]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm9-vm7.bullet.mail.tp2.yahoo.com) (203.188.201.73) by mta1299.mail.sk1.yahoo.com with SMTP; Thu, 15 Nov 2012 00:06:47 -0800
Received: from [203.188.200.142] by nm9.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 597653.91745.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 1033 invoked by uid 60001); 15 Nov 2012 08:06:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1352966804; bh=sqgSO8xP/LR+hXQMdA2e6Ah1eNeIaTHiSoq/jXQJhqw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Yws8UW5RVEL2oPJjowNq8quCXz9OzL0CxZrfGMUtTLq9P49zyzmh4cHIIaccgUS6cadGW2uanBjRYI1LgN7qnDfXWjIk1fJUorh8XSrtSnhaoUyUmvLuinqV/FZQLQV6ArVs06/OCE6rJG6RrChDzUt4hI5ALQRFiJ3ZkZnKHy8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Lytcrsw3vUiLafw/lAGi2G0Q0Tb6yrnlT4ruv+ReTjQFhJriBDR+YxFNsAJmBt2mYpnus+zpYYvm4eYTFIsF0fqvBhc21W3x1a+iiSAPgC+CPtqGdn9cWtDgfR5n6UI9cuY9jwzCd+BU5PzXNKOXbca69Rp1IZVW4Uh5V+L0jKc=;
X-YMail-OSG: O7Gnv7UVM1lkD_jTVvQ9yvdVYlFxea2vZYOteXXHXMW9Qko jdT9UCaq6
Received: from [41.216.44.199] by web92416.mail.cnh.yahoo.com via HTTP; Thu, 15 Nov 2012 16:06:43 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1352966803.94317.YahooMailClassic@web92416.mail.cnh.yahoo.com>
Date: Thu, 15 Nov 2012 16:06:43 +0800 (CST)
From: “DR.CHINEYE NWACHUKWU” <office_dooog@yahoo.cn>
Reply-To: officecustomerscare@yahoo.com
Subject: WESTERN UNION MONEY
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”1574124242-396125434-1352966803=:94317″
Content-Length: 14282

HEADER NUMBER TWO:

Return-Path: <officecustomerscare@yahoo.com>
X-YahooFilteredBulk: 98.139.212.160
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: A6td62IWLDuBmelQKJEhijgTEL0P5R2xOPPy_._RsvsdzBaH yiBrnQT0925psK.s7SNHcBYe49AU0Ul3ICxEk7jQrKYkMrnITllaNYEqTeoQ pszSKc.CXds6vyKRGay5HbkIm5xdJL06qMYJeuDndMfXhl.KtXNDPBcZw0BO e7rSU1yq9Tq0AIKYLibJS5Ji7cCOJbYxKoA4yfOsJcdoBZHzSv6nABQ1E6Zn uABQykHao.NClcwPP.1B0.6GNP31WL93qUf8JoRj3B6BR75xwrIFYRdUy4G5 262Inle71_i99iHg0IqLKmQNy_9XV4J2klJ79za74Jts7ST_TwEjurl5e8Jf _PAY8p3MdVI4fsKogQpHgxR1s5wZIhK1pQhdQaLszisflXZsORhhjrtlapUr A73MhrwdcfdcXSqVSmfpwdzxBXkcV.4BTYIqHGTGZqh2qwsUty8igYWrIIoh sDVyJCRsLDsvD1rqVdGkrQYLcRjGVehq2_k3u0KTIr1aNYkrfLPSdcEY1Bwq _gBGoox6wsKZPkPuqCx89Hzc4hLvUbS8W9BFJLxlj2Ey4nLAmaKnIpqZdMjl 4hcVV8tlsvsuT4tYNW0lHggMDR0Z8qztWv3TT5X17FkNatwLR9Z3cgkoLfCe h1gP7PEELa47jNfNMRIofd8zaQNS9kVxpKl_mOEUV16Q5hPPsaEiL6jrdBvJ K6WVdOmRxYs9LETX5HhMZI.tT1kO_.t.VDGWOxQqI5bwTuY_si3Nmyg1gMMm T8G5YTa4tuftY3yPi.IVm50h7zhHPJYz43C4ze0iES8nuHCXpgcdO8QkvWJB rul3g18dawtTywGuPNr8L3z3YwhxzwgJcvrBnnqbT5tMGKriaFsDtUb7QCVT 2w59IxZtgg9QIbZbCwx.wO.AS6EIIO3Rg5h442qemVR0NnhI_i7tXeZ5Z8Xk aQNqbSBI0ZdY3J98pAMrUI4GfLJlT4aKyCWKpbXobriv6gfG7HkyNwKTik71 7D9lycclsvAe_RoyDEcUHh7NIQjBllyIJ0dBWYAMIc8k6dp2QTcItskcss36 r0H0FyF1YAuULXqdMRUTwafuLsHIAlqmvCKb33f8Lto0_eqFpy7rblQ1lMkc BJH0Jy_MYFo8JsxlaV6gIJJv30.DknRRqr0e79ga9ucQfYVgmaU4DApKHtwd c_AgySu.BPiKcidO0VJeW8osusxFm4T7JiwASuwuzGclt9WW7DJbihfcQK7u ThBXA0In8NnC0stWZn8vKuG1.rxwVgaK0RBVZrsxG_Z_Bz4ilkET7YqZ
X-Originating-IP: [98.139.212.160]
Authentication-Results: mta1187.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm1.bullet.mail.bf1.yahoo.com) (98.139.212.160) by mta1187.mail.bf1.yahoo.com with SMTP; Sun, 02 Dec 2012 22:54:20 -0800
Received: from [98.139.215.141] by nm1.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:54:17 -0000
Received: from [98.139.212.195] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:54:17 -0000
Received: from [127.0.0.1] by omp1004.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:54:17 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 296448.58568.bm@omp1004.mail.bf1.yahoo.com
Received: (qmail 29676 invoked by uid 60001); 3 Dec 2012 06:54:17 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354517657; bh=kJDT5cjpbLJ82eNurct1MB2GVVciWeGexi7i426BwJ0=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=LDRcgojsiWMlx1x+zCJeK8Ij7oJzAHg3xJYyco2XPFGssWdcTEnSoZAGjixPokWJ+LDm55PhuiuBXjOJfsPy6T+9cBwGl1tr3c9YMIZqEDPJDTN71V1pLXxI0Z53oNGyvQGAKmgnZ5zLuqERI3krJzVxqA2tm5oktP+RePDjv4k=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=xzEPklSUYsGtcFrb03xI5tsNxxPpLgFzq18y0B3ZDo3LD8wtm6LVTwMrowI1STv1RL9L457GvMEljRaUkoVhdbBdV1STmPOxSQd+Y8Y9sci9kKl6bsG0WmAeJyC/t7sWZj6W6k9zb8aPt0VG1++MsK/OPLrVlDdO4+4nkufIhXQ=;
X-YMail-OSG: 6N4vh_4VM1mbdEGhvO_RyhbLAeLnsPGi6s8aQaiHe8YX6W. rhuE7fSBvQ_ftU4Al5JgYAo2Z.5DOZ2i59WMXv.THlBBKjJP6NpUUvxYnjKu _Ch_mo433YiqyQ6hPEZDCdVAvfc0zg8.lue8uGl07GOkw4dCa5oKTjUTAm99 HV.Cu01qyMkmDo6cO.4ZIVBnQuvfS2kXm5CUxG73z6a.usxaxPwQIaHHCnVc 62hrAx3MizJn6OKWk_tno8l8aN0E0q3ZqZ3MgL0J.ELjO3LM2OUOTDQq4UMV MpGkfD_TVZ1Ub0D_mAZviZbdEGcjVPrLPP1P0gwmgc.4VNHtsoc.NbzI9dst 1CY1zoGFzHD8VBdTiapnjUaBLRd_gzJW9wxO7UJN1lbkYeEooyqEUO2rlTP3 8EnxRxTJVq8ufB2a4HIoWYk58FVBQOYBUQt2qeofOJ.yCB5WMpCTnSWAou1R FB2YGoeDoR6EwEM1VjresV0AXyzncUORA7KxmI2VazxlIWw8OaIyI2lJ46Ev IMBLQGb8.z8msK0PntWCMe8q4VFGbHEBTrE7_MCCcFlF5jOQHaBkH3kSIXcz 3dLNSl5INWPJkgb86z9ep0VZjC7REgroyqPtENcY2HOfwvv7Nj5AKPnpGSHE fnttfWkSDsb6azL8mMX7.USb5gpo4YndcGUMR4q6eVNJPT9rlyq8ikAX_y9H MGakiGkTmX61IKpy6Eh2DB3b5KyvGe2L.8Xsk43UqPmgIRxV2.XWcPjfS3A3 dbjDPDVukFI_K4XlNP35lyHjDvUqqQW76TSNEwIcgvDqMDlHGqZtu1udDwiW bKKBOPlKfuwA0ybkhD_qMkcjmbfdLaefAP9tBMLq.C.inNz4Mc2psagyYQ8L 9Rd11ST_9FoHaHhMaAfw7LZxBv_BKfhwrcYm3z47ua41oaexPi2rM.gi7_jr eErSGcegHPgGDu4k9QdQZnlef4vyJh6qVVgSyNM7kREotHk4q_4YDUNLnv_y ytY9frrXOKDuQlQuL27qL0OzDNT06xLZF5qQxDX27vpxRQIk3ogG6Zj0E0yU QeJjwWRUQ.f9vkaGHImfB2lSmXDVeiOPggMIa4ca8vI70ulU8nUbo7H0Iqkh QAK_UHRHySczm54TBpHFMXJ.PYL9i6g0XZn355ZS0hBg9sUF0pSnH4dRkFzo z0OdBlmbq6eh_Ccnkb3lFuyiG2hg0DYRmCAnHRgxrbJRwldN67jL1q29hBYv 5sPP7P.l868cM05.1wYpA.IyWxGZ9jQzOsv.rNCo0h3KlCWKq12K.n2q.ums NfL7jWHpgFzd4prV2IJXj3annZG8eJjh.WR_t1d6Lb7YaRgnrhpjBGsGJEGY tl7E.ZLgdGnoNsGyPl5uMX0KzXx7xgZUDNwcfPLM8f46kK7PnkLygDDck4RH kMeoO6C6wundts4OTXJNTVtYa_RsHIag6Pnz9gpJMIbDACbdlLkx0dIJCrO9 hPNqyxguptR9A5dSXr18lS8XXCSCK5gOKJLnO.9KZOuiEClvtS0N6WwAWZrl X2TMtwuPI4GWk6uZsLjYkjnhzjK4Mue.pkkyAYOsx0nBrF0SqClph.mLP2gg RhYqCqcizaYXnSMxyfaoTk_mXOGVwkQwT.0pebeMajeWZPdbnj6zDFyB_RtG H7CuPDxc5pWFpmx1bkgcxV7u1OUAD86cTP5eaMSMPAqAxvGh4TowZNhdna7q slJu5uK3vme8zDsu7tZsILoCZMYQaTeofrr11QpU10u_m3CHKahxlTmDZkNO 7p992wagF0rF7Bdi4y7GzQieBnbT3KxvtE_iqPB.CxU97R34AhS54EMNyoP3 SiSQHLkKl2d2j0KpBNsM2HSxrAEU.kNZELw6bddzBXAauVDntm09i0JGANED G2xgGt5pEO2Alp1qtPBXd_99vBqB5HT7apOhQaBTsv0XAjNF6Li6F1RmvD50 j0JV3aj8sI_1BsYTUE2yC.ZgDSB7SZZ.Pwb9geGqA_0sX6hekZx4pkDG3sdP DBP..MfaKKmAM5w0DCD4o8BWgmTmrR26Kk4xKbIrxjGAgMqUl_waE.ECw_pY Y_Y1SJQ6cfGYqnA5yzOun8Eo143DJeS5s9IGCcTObOllEy3eUFK6nnRbOJs3 lULboYK_jjrkdKgvmp094UDGXja3TAzBSgYRF80h9bxhA3KZcdbDgpohqyHu m6bU3Q_nLyZJI9SQM64_gK7qBC00VeEEk49nJmvqiWCkZ5Uy3AGJus92STx_ WAVnfiNnIYWk3ZzJApHqt8AiIVXkyaFeBWp_Fh3qoLl92IP0_HFJUWrxIv3L aSTEBDdjcpzTmABNgDMx7K8m_FfJ0jQIvVXCrlyTd6rUzr3uBBotATWAWYAj oZDlW5yfOI3JL77KWHti.eweN2ChJM2PjUEFOf.bV5kOFMWLXAcDRs4wbXLd yrml46PWmL6DFLXgiAxgukFjqtngKvuLYspZZA8Wckti7qbw1IiRShAGeFrh OAGrEkrAuQP7QuAqq3GzL_k2gv40JNwF0c07nBYWRnmV9I9tCMbVQ44uePKv LQTVW8QKtVms0JkSuETtylaRgpYVTI7kg_t47zo33UKUBUi1iuCFhiPnX_Yu wbOaPugLirBbc45fE_ioAVdMCBb4FcWvaZsGIlP47X4NjQzagetkLuf9JvSq RHJlD.eVSXsO55Eo7kpxOR7eMZACKC1xI7c1XJ5fJguDWlIusVuFgCLNO4cA t7A–
Received: from [41.216.44.199] by web161602.mail.bf1.yahoo.com via HTTP; Sun, 02 Dec 2012 22:54:16 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354517656.28058.YahooMailClassic@web161602.mail.bf1.yahoo.com>
Date: Sun, 2 Dec 2012 22:54:16 -0800 (PST)
From: This sender is DomainKeys verified Office Customerscare <officecustomerscare@yahoo.com> Add sender to Contacts
Subject: Re: WESTERN UNION MONEY
To: Porky Pig <porkyexposed@yahoo.com>
In-Reply-To: <1354346435.35920.YahooMailClassic@web161004.mail.bf1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”406169123-855337282-1354517656=:28058″

DR CHINEYE NWACHUKWU – office_dooog@yahoo.cn – officecustomerscare@yahoo.com

41.216.44.199

Associated Email: kennethkuye58@yahoo.com.ph; emscompany78@yahoo.com.au
Associated Name: Kenneth Kuye
IP: 41.216.44.199

chukwuemma57@yahoo.com.ph – 82.57.200.117 alberto.tonietti1@alice.it

Received: from (41.216.44.199) by alicemail.rossoalice.alice.it; Thu, 28 Jun 2012 03:10:18 +0200
Message-ID: <13830a382f0.alberto.tonietti1@alice.it>
Date: Thu, 28 Jun 2012 03:10:18 +0200 (CEST)
From: CLERIOT PRUNE STELLA <alberto.tonietti1@alice.it>
Reply-To: cleriotprunestella@yahoo.com

Received: from (41.216.44.199) by alicemail.rossoalice.alice.it

Same IP – (phishing attempt) – Mr Eng David Kalu – chukwuemma57@yahoo.com.ph – REPLY-TO: ww.ups.com@superposta.com – Received: from [41.216.44.199] by web190206.mail.sg3.yahoo.com via HTTP 98.139.91.244 Phone # +229-98344889

Mr PAUL JOHNSON <westernu749@gmail.com>

 
Leave a comment

Posted by on 12/01/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: