RSS

Tag Archives: Counterfeit Checks

“Mr. Stephen Fred”

NIGERIAN SCAMMER – FBI IMPOSTER – ADVANCE FEE FRAUD

Okay, this is funny. This Nigerian scammer has been spamming me with phony lottery (atm) scams. I have posted dozens of email-addresses, IPs, names, etc that this fraudster has been using. In the email below he claims that ‘Anderson Smith’ was arrested one month ago but this scammer IS Anderson Smith and Anderson Smith’ emailed me a few days ago. (obviously not arrested.)

Anyway, this scammer sent me a email yesterday and I noticed he fowarded the email to atleast 75 other email-accounts so I decided to forward a message warning all the other accounts just incase one believed him. Well, today I get the below email.. I’m thinking one of the people I people I forwarded the message to could of possibly forwarded it back to the scammer? Oh maybe the scammer had an email up there? I don’t no. Hmm.

Dear: (my fake name)

Thanks for your email, i pray this email gets to you in good state of mind.

This Mr. Anderson Smith was the former correspondent delivery officer in the atm and check department here in the FBI branch office Nigeria. Who was sentenced to jail last month because he has been the one who has been scamming people round the world by the FBI after much investigations had been done in his office

Now he is about to scam out your money from your pocket, you are strictly advice to stop all transactions you have been holding with anybody and forward the write up to me, so i can send to the FBI head office right the way for proper investigations.

I will also like to inform you that your funds is still with the security keeping company who are in control of making sure your funds is been delivered to you right in your door front within the next 24 working hours.

You are advised to contact me with the information’s as stated below:

Your full Name.
Your Address:…..
Home/Cell Phone:……..
Preferred Payment Method (ATM / Cashier Check)

We await your swift response to this email in know distant time.

Best Regards:
Mr Stephen Fred
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts) aSBwcmF5IHRoaXMgZW1haWwgZ2V0cyB0byB5b3UgaW4gZ29vZCBzdGF0ZSBv ZiBtaW5kLiBUaGlzIE1yLiBBbmRlcnNvbiBTbWl0aCB3YXMgdGhlIGZvcm1l ciBjb3JyZXNwb25kZW50IGRlbGl2ZXJ5IG9mZmljZXIgaW4gdGhlIGF0bSBh bmQgY2hlY2sgZGVwYXJ0bWVudCBoZXJlIGluIHRoZSBGQkkgYnJhbmNoIG9m ZmljZSBOaWdlcmlhLiBXaG8gd2FzIHNlbnRlbmNlZCB0byBqYQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzEw
X-YMailISG: YRAg_6UWLDsNPJ41NgYqJwAf5OJLkgUP_WnGcMzl8tpjvtMl _rR7NL5SqQ5ckG58fvfr6m0wcweGFaHpNtYbxDMuVDaIIh1l3K5mNhJuuUo_ 1gL0f1X33EdIEWkU5mPAyilJBlXEpEzk7F_IyU989l1G9TzWOre1Rm4NVrtv wL._Vi2pXJgOQWfreL61PfLIlsJaWcVz4qtNDDj2gyD40PxwRgmAN75tZ4nn aRWQg0kEw6lZsV6CpK5tBR93lSxR5BijjoPWypit6rRfFHu2RPGypmHaaT5i NyOQ3dFSpUGR0qaoBtZbkYY6RfdMQeiKvQSJUW3FpI9_7lT9PcuRP8ulxAyH IdKsAozRLeGkYH_HEicxkXssyyV0P5VqNhSjcN.FVIQIMg49oMMuyXhq6Ams KYFWO16wfZulmhe3zhfu8iLnXUOx1asM1CoRtivrLypsvcMHW2z3jV3Sf4xn gIGmDsHpgafAgkUO3QWxCyUJLenj8Dj_BwC0KlH1rTcmzgg1cDn.8n1xfx4I TffWkboW6Eu0ftF39kDBSKHoC1iLW1RlaaenH.P0luai9hY6QXflsWADaNMp vyw3FUaI9ZssiJp679eh4kt0pGwVUec2kSxHDhpu7SLrLfsGFNoF0pPZYXUt uGRiYlJUlUr5v8msaTOvPCQ35gQ51eUcQaRxD4v2KkyvHegnUen7ToXi2Kh_ OKg9ouVRwnkubOu7lDdfjAzSeczwtAcm5f2ubi7_l3rFwW9zApCW4_AjeWmd 7vvS5V1nYymEkC31.V8sS56xjK3kQCE2iE9j0pUAjktDOX6wn8J_4Ayq1PGI JXgjS5w9nTji3nRHdgxyZOWsXn0db6EffdhNgia3_uSx8P4LjSMZZ7l7PS2t R0PhNr9NWBA._lPQRp.ZCkvQ.8fqwvIlrCFFnsl0SMfnnvOGhZygyoSDyQDm CBfSA7cKbH3v.lGz0WBYswdnCdFJQrwjekmXVAKaUQt440eGAHPbesQ0ln9U PSqwPsVIJt7QkPvTDHPfdX1TOmMQogOlC1_Pt08aiFWDsz.hfNhiKZl1XK82 uJT_t0sFbY8LfjS.p25d_9wZv04b8nl7s5nCniDYVnKK9LESNJdIkvjYCVgb WGkqKQSwqmZou53wA60pT5kbAMhI2QtgZo59Jrt_qvNwcY82MaPQKLLMaFGN a_I2Gwi0ptjskEuktAOgHo9vf3tIbLhf.cNFXjFPrGYa4yPAkAR_C1RMGzCi eEu2c3Go8MzGJFVU0PFqESSugO1nYIzz7W4yaGauPPLzBhykdx2OBa._GR.x 6IyB0YF2._YiCvukGztRVMt0SLWP2kQarf68uCf11I2A4mPMlitmKL._tD.x kkfi6Zc9B.JKZieJlcetzb7nwXocEQaWXoZUH1twHVOZ8dyzq3AnFQxdxoD9 G4mkqGOembFIUmoPAkuk2.N1hJoPV672fTBJY_dMNjDU_OM1tua2bQhWEaV9 RB9WTSbJRX_xtzqg0OrPgSmaXawGuXf0u4RaLPOD8kQiMN9f3w0LTGpfzNF9 8Rvgg796.RX_9Zj_ho8NkHiqorsQgxJeAkzeCQnhuNyKZTd8ZiwYbk_jS8OY .8E_qA6ixSW3NL.CC4hF64r.DdClBZQLn0xSC1PeTm3AGG38oY6zt26wqSnu hrLzp2rqW6lj8PfrLPMzw.Gqo8wMvm6Om0JtuF0gPL_NJ3YY50rFVWWnWA–
X-Originating-IP: [77.238.189.211]
Authentication-Results: mta1213.mail.ac4.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm4-vm0.bullet.mail.ird.yahoo.com) (77.238.189.211) by mta1213.mail.ac4.yahoo.com with SMTP; Thu, 20 Dec 2012 02:24:58 -0800
Received: from [77.238.189.234] by nm4.bullet.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
Received: from [212.82.108.243] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
Received: from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 56404.21902.bm@omp1008.mail.ird.yahoo.com
Received: (qmail 69722 invoked by uid 60001); 20 Dec 2012 10:24:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1355999096; bh=pyOeaUKKOWWZW3lLdVTTiYRo9J3z45S6mIgOy2HgFlE=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=6sEt/VfUuEDUeUudSXs2M1ShOX0eWuYo7bOFh/XdhIPki+ZIyWn9FslcZYIOK+sL8m2MaPtDxi6PNqGk3ODuJVgRnYkMO9IvTfVw4QnvNAaE0M7IfkAvckE4iO1WwKrgM4BNroefkyNDvwH2m/l87dYrH6Im4aiMBs/53/5CRh0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=4oyJFxMb7QIfFN0qOOV5EQRhasHrL0MG/qXmF0XzHB3Z75TEzL5ABDN+fjzt3FxSN4mb8R65+JBQMcZgeYn8hdlOLtIV7RGsbY7RDzkjKCf/9HGA0mDNi4dbn7Oof6iDUGP+kjNmcqlB3BqyHnRKxJyfsGxbxGwxQB5nyfnYApU=;
X-YMail-OSG: gJ29ik4VM1lXPyNG1YswL1rjwFhoTxeyDPqgBh6qE0W3Pqd SBPMiD2ZzSxd7xBXJUeIU9HeH8gYoc_o0hqMUZ.qWnc3PHsey18hkIJmRVZQ yDDgnrXDyofzHPQaZVicPUr9PhVOPPvLSyF37PopUuxDIHztw_T1fAI6YJN3 .IY9klRHXSdhx1XzjXDiWH_LvYN69G9aOSo0rZgdyeHU0M8MLOq7kfarzh9P bTtG.jAKXiYSxzvh4HXO1BJJ4nyYbdwX1bmpjdGVdXFLJ63kWgxitArYUuQ8 Aebx62dNlVOnuz3S5Wit3dSljkkO6nzX6N23R7uQUBOYLas3hJt9ayP4NSI0 9bWoBPZmOLXWneE8s8tCtkcKyynk9esWOszaD5qVI4GnBogGS9PyOOt_UJwD sMJf2NMf4K55JsKHz4XsW2WTb0G5d0vkdPg–
Received: from [41.71.177.225] by web171903.mail.ir2.yahoo.com via HTTP; Thu, 20 Dec 2012 10:24:56 GMT
X-Mailer: YahooMailWebService/0.8.129.483
References: <1355977301.69904.YahooMailClassic@web161001.mail.bf1.yahoo.com>
Message-ID: <1355999096.69523.YahooMailNeo@web171903.mail.ir2.yahoo.com>
Date: Thu, 20 Dec 2012 10:24:56 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Reply-To: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: YOUR FUNDS IS OUT FOR DELIVERY TO YOUR DOOR FRONT! GET BACK TO US NOW.

“Mr. Stephen Fred” <mr.stephenfred@yahoo.dk> 41.71.177.225 – 77.238.189.211

Advertisements
 
Leave a comment

Posted by on 12/22/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , ,

“UNITED NATION CLAIMS DEPARTMENT”

RECOVERY SCAM – COUNTERFEIT CHECK FRAUD – 419 SCAMMER

NOTE: YOU WILL NOTICE TWO HEADERS UNDER THE EMAIL. THAT IS BECAUSE I’VE RECEIVED MORE THAN ONE EMAIL BY THIS SCAMMER AND EACH EMAIL HEADER IS DIFFERENT BECAUSE THE FRAUDSTER IS USING FAKE IPS TO AVOID DETECTION. IF YOU RECEIVE ANY EMAIL’S FROM AN UNKNOWN INDIVIGUAL AND THE IP’S MATCH ANY OF THE IPS BELOW, YOU’RE MOST LIKELY DEALING WITH A SCAMMER.

freemoney

EMAIL: United Nations Habitat Office

3 Whitehall Court
London
SW1A 2EL
Tel: +447017419229
Email: un_msn@msn.com

Good Day,

This is to inform you that we have received your email contact as one of the successful claimants for the UN-HABITAT compensation payments.

For your information, this compensation payment is being made to all of you who have lost your money through any on-line banking transactions or as a result of internet fraudulent activities. It has come to the notice of the Governing Council of the United Nations Human Settlement Programme that many of you have lost your money by falling victim to some internet fraudsters.

The United Nations Human Settlements Programme, UN-HABITAT, is the United Nations agency for human settlements. It was created in 1991 as a subsidiary organ of the UN Security Council and it’s mandated by the UN General Assembly to promote humanly, socially and to process claims and pay compensation for the losses and damages suffered by beneficiaries.

We were officially contracted by the Governing Council of the UN-HABITAT to convey the delivery of Check payment to your resident address. We guarantee your safety in this transaction as we have concluded every arrangement to dispatch your Check parcel for delivery to you through our FEDEX Delivery. With this delivery option, your check parcel will get to your door-step within 2 working days of shipment from our office.

In accordance with the procedures established by the Governing Council of the United Nations Human Settlements Programme you are expected to provide the below information.

Full Name:
Address:
City:
State:
Zip Code:
Country:
Mobile Number:

A shipping/handling fee of $500 USD to enable us deliver your cashier check parcel to your provided address.

We recommend that you send the required shipping/handling charges ($500 USD) via Western Union Money Transfer® using the below information.

NAME: Ben Smith
COUNTRY: london, United Kingdom
Text Question: Color
Text Answer: White
MTCN #:___________

Money Transfer Control Numbers (MTCN) are to be provided by you after payment with the western union.

Also, you are required to send us a scan copy of your passport or Identity card. This is to confirm your identity by our delivery officers during delivery in your country.

Upon our receipt/confirmation of the above requirements, your check parcel will be insured and dispatched for delivery to your address within 48 hours.

Your satisfaction is our priority and we look forward to provide you with the best of our quality services. Do have a wonderful day in anticipation of hearing from you soon.

Regards,

Marcus Wright
Dispatch Officer)

HEADER:

Return-Path: <unclaims@msn.com>
X-YahooFilteredBulk: 65.55.90.110
Received-SPF: pass (domain of msn.com designates 65.55.90.110 as permitted sender)
X-YMailISG: Q4P8yzQWLDsIYkC2RV9ZvS_EDjC245d9dFAmW2vnK4a6Jm0Y DIqOn7BURltdMROsZSDYHKLiW3Ge4URNT9rVB5bC9egwdn27lwj096smGSaH S6XoI420qujbv8PXR26Q.e1pRyO1zEcJXn1m51WwnG_FW9V7gM1_dsQCZKuw hYt7biegQCY3CoZECESZ6u4H0HUqz.7IrIAlyQOZtMhiF8nIj6Lml82qqZs0 Ze2_E09oOSsMYRP0nkJDUjs9.g0UWMwi527505334PvuqSu9EUJSU3yRDTFw 8gNEUnw1qYZsxZrJe0GfoPpn7NR1Zl8mij58BhSaTEqjzjXJR3u3J1wDOeWe CjzAm4OyFt4SZh.B.6tNsLmXkb8vMhS4Ubqyv2zZC5kDDKnfNDFxs53g.Ykb N0OsTfsk2GwqwJEGMg2xs1WPt4BnZeN0y21C2C0_oWt50sUSSpC7BDHwhghD _xlVIp.gPfgZvpG99j9mKZNCmNMU3gN2kARj4a_H6qgI1ZbHBpb1NDBTFu8K XHtU9lre5CA4ejNXxXqgjmAMZbtq5buf8bM80ZGkcuCMFpD.htXTL8jAj55p wU8c91G1eVGexCnTTvmGbVKi6UtRaIJFUZX7XphQjb.5.7MNitICPqBSZsdp wRcoJ7fDJrdFG4kJV9NMluCn9JgjTdCm_zMIOFgWbTr58VSJ9EjtMUEJBwTN sWsHkCoy90KG.PKF6so73QsQA7Ob0Fx3YK_nJZA3VZ5dbzlNhiMyu4xt3F33 MChOB1OqMJ2z.STCaGCXfWj1g0jUiLWoWRUZZPQt8WQY6STWZUg6PBOAqvJl MgYbB7hhkAzm.GAwusD0_NOYA84gd3j6VNkDNhFnLQS0uh3i3aDEQSg5bwdT ffh6DnxtkQXOCX3UhlfMhacIpMC9NOv5lH7WsU5xX8KoGtKGTXWQGWIbTq8r XO8COK5DqvVSfSfPn_vwfR0D1QJnb1gb1ZgKLg4jwNY_.FgUGOXjUBGuruaF aRpmJtibDZlGtLyXhJKZxyp48GpQ2brrjWiXCK_yH1udci3Y9N_1qRDEDqKt eJayK1Phc9RAWhCRPyTGXIUpbcLJhyh7X8.J72EN6E0ZP.q2YF4t23r1l62i ivcgCEL3CUcAFMqAYQuWlAqOHGmX7J1d3JcQMNL3XcOM5IGQ1rtH0i4cbCvE M1xypCSrQ4vycwVCrK3L9DzlvXxY2Vslvr.CScSV79f1HsV6q_K12VN7M7jz RaQXDif9C_tFxLVy7tImzSHNIEtAY4dwfH5rrr55PmTUtEUz.6KEQJbAs8lz N3eK.l9Gp9cBVG0-
X-Originating-IP: [65.55.90.110]
Authentication-Results: mta1019.mail.bf1.yahoo.com from=msn.com; domainkeys=neutral (no sig); from=msn.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO snt0-omc2-s35.snt0.hotmail.com) (65.55.90.110) by mta1019.mail.bf1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:51:23 -0800
Received: from SNT143-W32 ([65.55.90.71]) by snt0-omc2-s35.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 Dec 2012 11:51:22 -0800
X-EIP: [/TV7qSeM3qmM9iU1AqKrwfvgxpWqD2/e]
X-Originating-Email: [unclaims@msn.com]
Message-ID: <SNT143-W32684D9215E2ED28219FD9C7310@phx.gbl>
Return-Path: unclaims@msn.com
Content-Type: multipart/alternative; boundary=”_3dea15d0-14b7-43d8-8b0a-3b827210a014_”
From: UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com>
Subject: RE: Contact Name: Marcus Wright Tel: +447017419229
Date: Tue, 18 Dec 2012 19:51:22 +0000
In-Reply-To: <1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
References: <B353BE0D877992409CB2153398733B81635C6E54@winxbeus26.exchange.xchg>,<1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 18 Dec 2012 19:51:22.0097 (UTC) FILETIME=[0E09E610:01CDDD59]

UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com> 65.55.90.71 – 65.55.90.110

HEADER NUMBER TWO:

Return-Path: <unclaims@msn.com>
X-YahooFilteredBulk: 65.54.61.94
Received-SPF: pass (domain of msn.com designates 65.54.61.94 as permitted sender)
X-YMailISG: FbVe49gWLDvy_H0HGyCvr5GlHi1Ad0EQxycJEWfEdPYeo2hb TF_L7_0plwdxv1FO_5ZBxOLniR5jVE1h.Fy8kvu._4ctcsh.b._rZqUnvBaZ X3jaWCnb1qKO18FS_hNsKnY7Zd_VhBurPjPk72clM6bgMjU.tIIfnG4H8Y4M J661nkVpIy6scF5iyZ_GtYTr4aKug9cqZtjYPGPyFDjks_s2MbDdye5pGdWG DNiifYQQC.X.8Lfr3c7DCNRxhtb6wQBckrCai9vFX9DWGhIWU4gvrrWtMML5 aMLnx.ocyyiIjfwYCHTVeCsCpSCRBsEoCxIwjdzPnYUg069I9LA0b.Gh9jiA Pe.d6H2UjS60goCV8fBpX69A1doeRqa2Y9LScgym.dUPsUJy4ATjT7QTuAHc 4LVPQqoI0V2kyvVfsnWyCY4QWmfxjXW8IFP_ZQ.Pdr.3MF39DG.ximBCtFDB v0UlcQVxTx5jRRWFZvtISd95osVXPSgqvQoOsC4YRH1845P1Rs_ByeUJDRfE _tQ_jczjUU7nR8fn20CTAo5.dyCcQfmAwOR9AVVs7MzLiW0traI.LpUA89fy bHEZCaTkLehGymHINA9NUGDAccQ_VQpl0joPk8Tpw5FN3DyQNv6pop4mPkmL PJ69l.U0rjFWVzF3YwW78bz2XkOLXEfFs6qfitxwgm4I3fyzY_YHUWyRVXFR DDIVZ0HqVr_5ZE5OFIciU6l4V9dDQXfqWDCpRncHUSQDWKeEMdERxCKSNl9C _6e35DXg33zuEZlZYa50TRBmAVKpsQGNUmSW3GYBCBN0ihRATbuElph8v9pU QVRmuY6oveo0raJa2rkRGJrEGz3wQ9XLORIvcscVZySSknoQ9Ve2aYvrduAe QBAyZ4uirjeHwVMzjYys4h7eq6JBETWlTtpRc.3lAYcKY3jJ.EgCYFyWNPCN eVZD85NyDiPOyrhqWPpt2bClbZBoD1SfQIqIRxgXdO._RwfGgzc6OFa4lGim o0bUfhMeNF07.hDW3nmiVifthixlaquaTOnI..wktt4FcthmXKKNNSICQuJu 2fMdzGtBVBBQBdhMgHbLlLWPlDqrAKG7OZ0c6iY69UmZ3vGrM.4XBiheikmW D0J47Vter1FQ5G5Cu0nRX0pkGOfciptQ3zzWDCmhirn4Xqz1ME2QLJKcPWMx Dhoxhp8LQbKf7MIrGXe1py2l4w6oEPVx9g5TDeMnmB18XieUygWNBP6cY8Kf yapRNq6T7bsUDhMHYL4be1aMw5GhnU7UmSnTECLhRYU7BY4au7Gm5Uw6PrJy J5ZFFqn7hmjJjguP_A–
X-Originating-IP: [65.54.61.94]
Authentication-Results: mta1246.mail.sk1.yahoo.com from=msn.com; domainkeys=neutral (no sig); from=msn.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO snt0-omc2-s43.snt0.hotmail.com) (65.54.61.94) by mta1246.mail.sk1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:52:58 -0800
Received: from SNT143-W65 ([65.55.90.73]) by snt0-omc2-s43.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 Dec 2012 11:52:03 -0800
X-EIP: [8WRfF9W/4HCKBPDNLPwgkZDO+b8LtgkB]
X-Originating-Email: [unclaims@msn.com]
Message-ID: <SNT143-W65AD9B7BD38231E89E80F7C7310@phx.gbl>
Return-Path: unclaims@msn.com
Content-Type: multipart/alternative; boundary=”_d77f1b5b-2b70-4219-8474-4777ba3e7f12_”
From: UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com>
Subject: UN-HABITAT PAYMENT RELEASE DETAILS
Date: Tue, 18 Dec 2012 19:52:03 +0000
In-Reply-To: <1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
References: <B353BE0D877992409CB2153398733B81635C6E54@winxbeus26.exchange.xchg>,<1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 18 Dec 2012 19:52:03.0050 (UTC) FILETIME=[2672D4A0:01CDDD59]

65.55.90.73 – 65.54.61.94 –

 
Leave a comment

Posted by on 12/19/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Mr. Stephen Fred”

ATM CARD MONEY TRANSFER & COUNTERFEIT CHECK SCAM – NIGERIAN 419 SCAMMER

There are two email’s and two headers below. The first email and header was published on scammer419 Yesterday 12/17/12 – the second was published today (12/18/12) — Same scammer using different addresses and IP addresses.

EMAIL #1 –

TO: 4thekids1234@gmail.com, jlpurtee1218@yahoo.com, lschum6@aol.com, vikhadd068@aol.com, childcare4yours@gmail.com, jessicaspitler@hotmail.com, monkeyforthezoo@yahoo.com, angelinahudak@gmail.com, bruces_lil_sis@yahoo.com, pmiller140@woh.rr.com, chelli4dottogo@yahoo.com, shannonschapiro@yahoo.com mschutt5@woh.rr.com, phillips.april@ymail.com, ticktockclocking@gmail.com, aprilsplayhouse@att.net, lrichards7@cfl.rr.com, rosa8485@gmail.com, mommyme0107@yahoo.com, armstrongcare1@yahoo.com, albart@bellsouth.net, new.horizons322@att.net, thebestsweep@yahoo.com, missalisha08@ymail.com, dezy2224@yahoo.com, morgragedanielle@yahoo.com, joanna.sweet@hotmail.com, adenelly@aol.com, pratherjck3@aol.com, camillephlps@yahoo.com, cs09jedq@yahoo.com, baby_pmpn@yahoo.com, kmiller182@cfl.rr.com, kayladaniels90@yahoo.com, lisaconradi@gmail.com, confidence07011996@live.com, poncallinfo@gmail.com, myfamof3@gmail.com, kjg36@comcast.net, missrosesdaycare@yahoo.com, cooljet6@yahoo.com, anged98@yahoo.com, cowboydad75@gmail.com, crawbox08@gmail.com, sacpr210@yahoo.com, khusfelt1991@yahoo.com, dskupien@delawaresafetycouncil.org, primaryyears@aol.com, kidz1st@gmail.com, bonclaude1@aol.com, millerv25@gmail.com, krosieone@aol.com, poohcc07@aol.com, ironhilldaycare1@yahoo.com, bangelique95@gmail.com, truruler@yahoo.com, denisedr54@comcast.net, sromasko@verizon.net, portiabusaitis@gmail.com, portiabusaitis@comcast.net, dawnschafferman@comcast.net, elevatedplaceslearningcenter@gmail.com, gerlacht00@comcast.net, melissalee1209@hotmail.com, valdave@comcast.net, rgoo135623@aol.com, baybeesteps@msn.com, rhino_07@comcast.net, mseekids@yahoo.com, faithshouse@live.com, jeanneflynn59@gmail.com, rachel_vigil@yahoo.com, gspederson55@q.com, ptrcgzmn@yahoo.com, thomasjohn1088@gmail.com, earlybirddaycare@gmail.com, sabrinareiman@yahoo.com, letmcg@ymail.com, brandon.carson25@yahoo.com, christinamauro23@msn.com, katielewnard123@hotmail.com, porkyexposed@yahoo.com, mgfbower07@gmail.com, lonniejbeard@hotmail.com, aklittle0102@aol.com, jennywarn@live.com, leyadewey122@gmail.com, neen062964@hotmail.com, info@need-a-nanny.com, dork_britt@yahoo.com, tinytots80123@yahoo.com, caycestaubin@yahoo.com, ivana331@gmail.com, tstots@hotmail.com, bballvarsitygirl@gmail.com, alwaysforhim2@gmail.com, degutii@msn.com, tiffjowilliams@gmail.com, patriciacallan@msn.com

FROM: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>

SUBJECT: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!

EMAIL: Federal Bureau of Investigation Anti-Terrorist And Monitory Crime Division. Federal Bureau Of Investigation. J.Edgar.Hoover Building Washington Dc Customers Service Hours / Monday To Saturday Office Hours Monday to Saturday: Dear Beneficiary, Series of meetings have been held over the past 7 months with the secretary general of the United Nations Organization. This ended 3days ago. It is obvious that you have not received your fund which is to the tune of $3.5Million due to past corrupt Governmental Officials who almost held the fund to themselves for their selfish reason and some individuals who have taken advantage of your fund all in an attempt to swindle your fund which has led to so many losses from your end and unnecessary delay in the receipt of your fund. The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Nigeria his Excellency President Good luck Jonathan to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes. Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card?

ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $5,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2015. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account.

Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via UPS. Because we have signed a contract with UPS which should expire in next three weeks you will only need to pay $180 instead of $420 saving you $285 So if you pay before the three weeks Dec 2012 you save $285

Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $180.00 nothing more! Nothing less! And we guarantee the receipt of your fund to be successfully delivered to you within the next 24hrs after the receipt of payment has been confirmed.

Note: Everything has been taken care of by the Federal Government of Nigeria, The United Nation and also the FBI and including taxes, custom paper and clearance duty so all you will ever need to pay is $180.

DO NOT SEND MONEY TO ANYONE UNTIL YOU READ THIS: The actual fees for shipping your ATM card is $420 but because UPS have temporarily discontinued the C.O.D which gives you the chance to pay when package is delivered for international shipping We had to sign contract with them for bulk shipping which makes the fees reduce from the actual fee of $420 to $180 nothing more and no hidden fees of any sort!

To effect the release of your fund valued at $3.5Million us dollars you are advised to contact our correspondent in Africa the delivery officer Mr Stephen Fred with the information below, Name:Mr Stephen Fred Email:mr.stephenfred@yahoo.dk You are advised to contact him with the information’s as stated below:

Your full Name.. Your Address:….. Home/Cell Phone:…….. Preferred Payment Method (ATM / Cashier Check)

Upon receipt of payment the delivery officer will ensure that your package is sent within 24 working hours. Because we are so sure of everything we are giving you a 100% money back guarantee if you do not receive payment/package within the next 24hrs after you have made the payment for shipping. And make sure that you keep the receipt of the $180payment that you made because that is the prove you will show to the delivery team when they arrive at your door step with your package of delivery

Yours sincerely, Miss Donna Gwen FEDERAL BUREAU OF INVESTIGATION UNITED STATES DEPARTMENT OF JUSTICE WASHINGTON, D.C. 20535

Note: Do disregard any email you get from any impostors or offices claiming to be in possession of your ATM CARD, you are hereby advice only to be in contact with Mr Stephen Fred of the ATM CARD CENTER who is the rightful person to deal with in regards to your ATM CARD PAYMENT and forward any emails you get from impostors to this office so we could act upon and commence investigation.

HEADER:

Return-Path: <albanesi@dmghost.dmg-hosting.com.ar>
X-YahooFilteredBulk: 200.58.125.17
Received-SPF: none (domain of dmghost.dmg-hosting.com.ar does not designate permitted sender hosts)
X-YMailISG: G4vRLFYWLDtBXE2mxgWetbgPe68s2c_J4Sy1u3QrHo_wMTq2 7ltguaR_7OqUckxfw_6vp2Lr1Jg7Eu.nS2bLDg6fo4oYGP7MTDSxe12a7pKp vDuNtWg442ZrtozAbb4qwjv9yjVKzjc3q6SUJC3ROeRuYcRhx4ZTHNEwa9dJ RRunFvOz3W.7zc.2.2cpeXIR1pV74p_qpVqC3m7H8mdBoPRVTOHo4yAvFEyq HBGagGWmoRoWFUM6WeZcFGLRRd9yG4M2adkg0pGcbx9auO2ojmtRX.d4awpI tNrecy67Vucu5czgWkng.ADegJxE6eNLDqWhXtM8r1A7O_E267YruDaoRxO6 _sIUXJPaS8LB26kJPkafbJgK7Q9bXgF9ll5Efh6DIfA71GiZ_BFxWhGrotmy _KZxe6vxBpdwxzK0Rxlr8WrNY0QZMLOp0hD28W3sC.84e3mVvDE1o89.CZ5h 9jg8M2nfaP2qu3nHGA54gPG1P9JZx9oasJlLQdjhkEP6ND1NMGwvMf48kGMY 3mnmKiJxTzCRP42tdS7Y8Ho32JKgSZ3qE_UtRHNqJnXY6nt4cEAR35W0rrKt Rxajt4Z12QQVP6ynOi0a9qX6gOBgqHI0ImNxtkZaeznZBDB94jKQgd6rsgsf F.xd9S3BVrxw5c_tcsF2ZfpH5vlPphmuFtr.6wHtqPTbo1WcAAW3TzAVQgd5 P1qNkbouaz9T_2LDTBLWIumE0eZYfRwlzjApSWZq5xN7T443jat0wR.gnq8Y dJGDz8sxqmnuHdASS5COEyfmLADo5GME9Hr1nFYnYoUc9gMY6EgDUlovdax2 JWSXg640Sl6p_WEGbvRpunnYfKhxouArjEiZxy2c4lMKAGhYcq0JrGub358H ai9FMNMHAkRnf4b18ttxSIYK5obMdAtyW.Vw4jaqgXYO540R_KQljdv7peAg k9p124LIGZdkN7S_XKaNsg3O.ey154tsrBwhl14kTdz57ZxzNc7niAYFQF1V VUTONPpN4iNZT_t8.LcVzBcHhSjrqoWJ2SMpE28MH6cyiV8IsUDbddT1YIcM iZAV58stob2h.JyLctYJZ.g5G.VYjJubKffjKBTkHbCYZ1wNzGE8sWDDIJwo eRX04Jtt4F13ZI2AARhKdrG8DAr2NSIhIUoWXKs.qbgWrQgZleThlG8O6OOT G1avOrcRyDcNaaQxG32I
X-Originating-IP: [200.58.125.17]
Authentication-Results: mta1317.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=yahoo.dk; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dmghost.dmg-hosting.com.ar) (200.58.125.17) by mta1317.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 05:44:35 -0800
Received: from albanesi by dmghost.dmg-hosting.com.ar with local (Exim 4.71) (envelope-from <albanesi@dmghost.dmg-hosting.com.ar>) id 1Tkafo-0004nX-Uf; Mon, 17 Dec 2012 10:24:00 -0300
Date: Mon, 17 Dec 2012 10:24:00 -0300
Message-Id: <E1Tkafo-0004nX-Uf@dmghost.dmg-hosting.com.ar>
To: 4thekids1234@gmail.com,jlpurtee1218@yahoo.com,lschum6@aol.com,vikhadd068@aol.com,childcare4yours@gmail.com,jessicaspitler@hotmail.com,monkeyforthezoo@yahoo.com,angelinahudak@gmail.com,bruces_lil_sis@yahoo.com,pmiller140@woh.rr.com,chelli4dottogo@yahoo.com,shannonschapiro@yahoo.com,mschutt5@woh.rr.com,phillips.april@ymail.com,ticktockclocking@gmail.com,aprilsplayhouse@att.net,lrichards7@cfl.rr.com,rosa8485@gmail.com,mommyme0107@yahoo.com,armstrongcare1@yahoo.com,albart@bellsouth.net,new.horizons322@att.net,thebestsweep@yahoo.com,missalisha08@ymail.com,dezy2224@yahoo.com,morgragedanielle@yahoo.com,joanna.sweet@hotmail.com,adenelly@aol.com,pratherjck3@aol.com,camillephlps@yahoo.com,cs09jedq@yahoo.com,baby_pmpn@yahoo.com,kmiller182@cfl.rr.com,kayladaniels90@yahoo.com,lisaconradi@gmail.com,confidence07011996@live.com,poncallinfo@gmail.com,myfamof3@gmail.com,kjg36@comcast.net,missrosesdaycare@yahoo.com,cooljet6@yahoo.com,anged98@yahoo.com,cowboydad75@gmail.com,crawbox08@gmail.com,sacpr210@yahoo.com,khusfelt1991@yahoo.com,dskupien@delawaresafetycouncil.org,primaryyears@aol.com,kidz1st@gmail.com,bonclaude1@aol.com,millerv25@gmail.com,krosieone@aol.com,poohcc07@aol.com,ironhilldaycare1@yahoo.com,bangelique95@gmail.com,truruler@yahoo.com,denisedr54@comcast.net,sromasko@verizon.net,portiabusaitis@gmail.com,portiabusaitis@comcast.net,dawnschafferman@comcast.net,elevatedplaceslearningcenter@gmail.com,gerlacht00@comcast.net,melissalee1209@hotmail.com,valdave@comcast.net,rgoo135623@aol.com,baybeesteps@msn.com,rhino_07@comcast.net,mseekids@yahoo.com,faithshouse@live.com,jeanneflynn59@gmail.com,rachel_vigil@yahoo.com,gspederson55@q.com,ptrcgzmn@yahoo.com,thomasjohn1088@gmail.com,earlybirddaycare@gmail.com,sabrinareiman@yahoo.com,letmcg@ymail.com,brandon.carson25@yahoo.com,christinamauro23@msn.com,katielewnard123@hotmail.com,porkyexposed@yahoo.com,mgfbower07@gmail.com,lonniejbeard@hotmail.com,aklittle0102@aol.com,jennywarn@live.com,leyadewey122@gmail.com,neen062964@hotmail.com,info@need-a-nanny.com,dork_britt@yahoo.com,tinytots80123@yahoo.com,caycestaubin@yahoo.com,ivana331@gmail.com,tstots@hotmail.com,bballvarsitygirl@gmail.com,alwaysforhim2@gmail.com,degutii@msn.com,tiffjowilliams@gmail.com,patriciacallan@msn.com
Subject: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
From: Mr. Stephen Fred <mr.stephenfred@yahoo.dk>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – dmghost.dmg-hosting.com.ar
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [826 825] / [502 502]
X-AntiAbuse: Sender Address Domain – dmghost.dmg-hosting.com.ar albanesi@dmghost.dmg-hosting.com.ar

Mr. Stephen Fred <mr.stephenfred@yahoo.dk> <albanesi@dmghost.dmg-hosting.com.ar> mr.stephenfred@yahoo.dk

__________________________________________

EMAIL #2 –

TO: deleted@yahoo.com

FROM: “vikhadd068@aol.com” <vikhadd068@aol.com>

SUBJECT: Re: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!

EMAIL: http://oabfranca.org.br/entrance.php NOTE: I DID NOT CLICK THE LINK AS I DONT CLICK ANY LINKS/FILES RECEIVED FROM SCAM EMAILS.

HEADER:

Return-Path: <>
Received-SPF: none (domain of imb-m01.mx.aol.com does not designate permitted sender hosts) AQEBAQ–
X-YMailISG: fG83VQIWLDuwe8ej5n0IaROXvxrlzu18BJ2irW7rRnkNUMiR 0Ctsgto2LNAskyV2Q6ixNssLOsmnFDVOBVCrL.Ma4HX.zvoh5.y.Me6a47y1 Y.s4vBi98z.8nCoiFrNhF8AthsY6JNRIP0mO3NwL6he8knCzy63JqA9qhhqY FQRl4qMLiHM902WJNFvAOn.XvAyS6gBl90P7phn5AwFtzDAnWp7SjQKS8yd9 2cqKCaMlnKRjdDDXjb2Q70KZ_PcWA5mIrPPIPxX4lk8JBJe._gcgSX6kzAYp 4YvvqU7x6K6snhfvbJKtaMeaXIjmTDn.pLJ6GEKwthBTc3K6CzQF1pPdkRRD yra8kG4Jxtlb_RaSjcjAXw5qpiHxnBAx3Oek1rLM84NqcWLvSV3nRFriYeYV nhI5BWjm8wwT3AcOsJUwm97do1.YsTka4wRMCVD6cqiCuU2jAKvwx1uDI2.b RoFUQReDBAjwqAAHPZLlkdarxo05P1Uwq5jHR99zLNJlOjaSRiMEUe0PS9zs QDsD3ljuWathFexCSe6PKWbyt3x4XQhQYjJ8mtq3elH0LdNeIuahbPv6S4G8 hueVJ.bJ9cI2b2jYCsk1qnouy2MQDdlL5VbiPxDCWp7AsBes8Nb4BepjQsVR w2UcWs9.Sy1V065valQ1_avr4y87pRQOmtt5dWEaxIAO8bWhK4iCTfcE1cJY 20x8ZehazHdzyZAVwjK95yH6Y0LghsrH75EbuSGscuYeXfnXpPOU0lHJOYpM Smn8XIi4jgWio99h4HL5hAKWRirLVLu_X5PDmHnYDie5ONFtGejBROGsblcC rl9jhZH6AJlOWZyqVTRM5Ppp3S6YCnbXEAxRydb6MzVMCUdDrES1gAdSYuc_ i5b5UqWEyedgNzG5O1cUaG9VQQWVQd26QYIhUn1LH8p5cF1d4w9e3Y7VQQ8N MYYqmESf9lsGNdZFCRFIMXXUdD5OQpzT7199rPh0OAQ6e5FssdlgeHW5u8Oe Qm9rwYEstTmh6VWIAnHdJLj59EuoMNynb0YBxAks2F6YXhwIzblZ4az3IDAf 3UW5o76BBwQ424rwxaewfRAxh33BT18DwtTa_1U0vcIPi7ooZSfLIzHxatMM tdMmB1yNMhgNeqj41iMGVgytMBZI7HV5OTRdtnMQsAoEFr2MQitM8bjxFQ4k VUhdeQ30xHi1UVWyJwl9l8xmrHA-
X-Originating-IP: [64.12.227.42]
Authentication-Results: mta1395.mail.mud.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=aol.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO imb-m01.mx.aol.com) (64.12.227.42) by mta1395.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 23:38:11 -0800
Received: from mtain-mf12.r1000.mx.aol.com (mtain-mf12.r1000.mx.aol.com [172.29.96.160]) by imb-m01.mx.aol.com (AOL Mail Bouncer) with ESMTP id B186A382B708 for _______ Tue, 18 Dec 2012 02:35:08 -0500 (EST)
Received: from core-mic004a.r1000.mail.aol.com (core-mic004.r1000.mail.aol.com [172.29.104.4]) by mtain-mf12.r1000.mx.aol.com (Partner Internet Inbound) with ESMTP id 9ADBB3800008A for _______ Tue, 18 Dec 2012 02:35:08 -0500 (EST)
Date: Tue, 18 Dec 2012 02:35:08 -0500 (EST)
From: vikhadd068@aol.com
Message-ID: <52151792.8536.1355816108626.JavaMail.zimbra@core-mic004.r1000.mail.aol.com>
In-Reply-To: <1355816106.93122.YahooMailClassic@web161004.mail.bf1.yahoo.com>
Subject: Re: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Auto-Submitted: auto-replied (aol; away)
Precedence: bulk
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:335928000:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d60a050d01cac1b64
X-AOL-IP: 172.29.104.4

64.12.227.42 — 172.29.96.160 — 172.29.104.4

 
1 Comment

Posted by on 12/18/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Rev, Mark Hill” “DR. PETER CHEQUE”

CHARITY SCAM – COUNTERFEIT CHECK – FRAUD

THIS IS A NIGERIAN 419 SCAMMER

UPDATED I’VE POSTED SEVERAL EMAILS THAT I’VE RECEIVED BY PETER CHEQUE (ALSO KNOWN AS) MARK HILL

check-fraud

EMAIL: Hello: My Dear:

I wish to inform you that I concluded this transaction successful last year
with a lady in London and I am currently in St Thomas Hospital in London
waiting for the right time of God.

I dropped the (cheque in bank draft) for Your compensation, by trying to
assist me but it did not work out between
Us. The amount is US $ 5,500,000.00.
now contact my secretary Dr,Peter Cheque he will help you process.

I did this out of sympathy and good desire, I want you to make very good use
of this fund to assist the less privilege as I have few months to stay alive,
I have a kidney cancer and I know that am going to die soon.

God will bless you for your efforts and I hope you will be Satisfied with this little compensation, I will advise you to contact him

Immediately through his e-mail address 😦 secretarydrpetercheque@live.com ) for the Delivery of the bank draft to you, I hope you will have a nice life with My token of compensation for your efforts and God bless you.

Sincerely yours

Rev, Mark Hill

HEADER:

Return-Path: <revmark.hill@yahoo.com>
X-YahooFilteredBulk: 93.180.20.164
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: pwvmn3QWLDtkn6kYY_YMNtA2mo2KVOO1jpnUxR_xqcd3L6Za tTjpQHR2NMrvDpI9Ie8mJSa8nJCF_JaK1curhsIxxrCXDh963xR72_M5ZEXq 2USwVCxvOlVYGFDtvt4yCgh380X8rrXpmCzfp_YdjH.urQ7xEvzHoHWBEecK JKgFiXHwnNha7dOH3JIsYOstf5QTjAcP1MS.c0zev280tHGT_qQfiEeytuAl JQKyqrcQ5UMJipgnONdkhb0vCOBaVjon0rdOcJ7Eq2UTnR.gQz61YopdQgcD EBpxtDG.Hh6QyT40tRmgNytNt5Y3icvs2ahBMJd3eerdtTFpH9A3_845D28R f5OBFW_INRSPXlBsdjP1QR4EJ3cuqMsXRxsAGXiLr7As.YBVUG9leL6Vb0SL jK2tz_8sN4.8dysipI.PpCLxtzG2sasSzzPwT9yGe7ybfprmyCJh213lHNq0 P3VGFFv6pHN0_gd8o4uYcoVWhrsHa2Dpd7407MCOFdo4TkpZPFi.XiIJudH. PNhZcMfIY6p2miXudToKgKASedTZZfNUHD8TnDg6F0Oz7J9dkgje1DuH_LcU tzAF1g_gMYGBRXndY5gRracjt83LlDmsCj4Nq..cly_fI3HhCTbEPCsfDCWS VmODBLTxT595IxuVppGWhEHkSnPpOmq_qJz.AaDiNHKOCuB77SKbfb4pn4u4 1C7EOU9cmiaDTdwlrLY9qaZty6vHSgEOgmrRfc8JGzHCi9rSjeRKJyPVRKeA 1uP1T0j2GM1eOJYyX8n0gIvVj6oQ8wMzRWF7LR4fLjm49D7.JLch46acVP4y geKejT5nm05MkyoD2iLYS0iXTeWXPFkLTxmDuul8YhjuX2bvr9Q19MV21hZF edU0xZg1KTTvMGFBvKgz5juU.ikCl1tIuXkcY2MXmK6thLxA4D3R2liFEuV3 OAd.v4BkOu6Og_5wGOfDSK2vcxXE2hGhL5G88M.OFzn0FkuVky0_Kti_GGwU FyRKA0ZudYx6MPIP5by7EfyRu.KmOe_EClbMoNtqt7dIokp87gwQxwUjzJIg h4fQG_kDSEhZlEs1GtdwHmxo1J.qZlZeZqKoi1GQfSvYRlk0IOFYd7SiPtP. G56xaMfm2O50wWasX7vFDzR2NwqlZZjlq_81XnD2JRl0Y3GykV6HaBm.9olz lPQBTIA6yCi.n7yFLkQnejEjq.4seWdDdsm4A4M8fL.arU5m9IG9hfgRwR2M jVvhkuHykVtOyeeW7qL.G3NHK43MhpquRtuQD07HqWptUaTsU6qIv..D02yS hOjvpgYqd9NtER1ki4ibyeUinmLbv03czD7Ovk2gJhC8ue.rrV6UMznuTPBs dfqeR5_xLD378tEXNTto4Uj5vj9ZkmZ4QcpT1ULIJmVEu_1FDHlTVpsfy2RW V8FbAzp9NKN4tjbpRsLjI_9PgxD3dXSXyYFS8.jvokd9ySTPJZnE9EW2repn q_kZSqDOwKz7Mi47jxaJeA4XEPm.n7TvP4zskyT9TKxDgnbx5XamL4jekcbn 00WRYhYNCqbzs7VUjBy_tF_akjdlXSuLlK7L9U4awS3WnM2LW4KLQybRgH6a zNcZJVPFzg–
X-Originating-IP: [93.180.20.164]
Authentication-Results: mta1492.mail.mud.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mainframe.localhost) (93.180.20.164) by mta1492.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 19:07:42 -0800
Received: from User (unknown [41.211.201.178]) by mainframe.localhost (Postfix) with ESMTPA id 3A91433EEDB9; Sun, 16 Dec 2012 20:21:06 +0400 (MSK)
Reply-To: <secretarydrpetercheque@live.com>
From: “Rev, Mark Hill”<revmark.hill@yahoo.com>
Date: Sun, 16 Dec 2012 18:30:11 +0100

Rev Mark Hill <revmark.hill@yahoo.com> RETURN-PATH: revmark.hill@yahoo.com REPLY-ADDRESS: secretarydrpetercheque@live.com

X-YahooFilteredBulk: 93.180.20.164 RECEIVED-IP: 41.211.201.178 LOCATION OF IP: LAGOS NIGERIA Dr Peter Cheque secretarydrpetercheque@live.com

________________________________________________-

RESPONSE EMAIL:

EMAIL: Mr __________,

i have receive your message, yes i am Dr.Peter .O. Cheque the secretary to Rev,Mark Hill and am so happy to hear from you because your cheek has been long with me and am waiting to receive your mail since my boss kept this cheek with me.now i want to know how do you want to receive your cheek is bank to bank or do you want it through courier service.

i want you to make everything fast because we are about to enter Christmas before the date we will celebrate Christmas.

do not fail to call me immediately you receive this mail.

Dr. Peter
+2348035762383

NOTE: AN ATTACHED FILE WAS ALSO SENT WITH THIS RESPONSE EMAIL. I DIDN’T CLICK THE FILE BUT THE TITLE WAS ID_CARD1.JPG

HEADER:

Return-Path: <secretarydrpetercheque@live.com>
Received-SPF: pass (domain of live.com designates 65.54.190.101 as permitted sender) IG1lc3NhZ2UsIHllcyBpIGFtIERyLlBldGVyIC5PLiBDaGVxdWUgdGhlIHNl Y3JldGFyeSB0byBSZXYsTWFyayBIaWxsIGFuZCBhbSBzbyBoYXBweSB0byBo ZWFyIGZyb20geW91IGJlY2F1c2UgeW91ciBjaGVlayBoYXMgYmVlbiBsb25n IHdpdGggbWUgYW5kIGFtIHdhaXRpbmcgdG8gcmVjZWl2ZSB5b3VyIG1haWwg c2luY2UgbXkgYm9zcyBrZXB0IHRoaXMgY2hlZWsgd2l0aCBtZQEwAQEBAQNt dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzMCA3RleHQvcGxhaW4DAzACA3RleHQv aHRtbAMDMgJJRF9DQVJEMS5KUEcDaW1hZ2UvanBlZwMDMTM1
X-YMailISG: RUSkN6gWLDtVRR2I.osOnZooN6mof1tzTkJBSELxSzvipL2U wlBMz4XHvtip6BJimPiY3ANJpiunpS_P4t7.2UBBu67Afnlkq.PVu8k2.mbW maprp2gMR8v.iOe5sx8uj746OaF4yWi7XIT6j6MY.9iHB85lozYudtyn3MTR d4hfTWMNA1or45531SO7UrO7YC7AXu8BSAxlQfuZikUF_sjf0m4wAqJyzHeX iUWCLP.7RNA5YrCp8GGULn_5m4vXN.Qe1NR25UPRXtrMHhqsldFv5SHdpYI9 3bMw53Ry6Koa__vfO6GmqPpQkU2qiPNSJoX6.mBXDZHj_PjQohyZZ.NGeFny _2FMUJq1Eebewrq6yjHUVCAGitlH70HPTWsH5axyEaStXjlMJufOcOF2VBoY A6qEu3WI5ud2bp2jAWm3JFLniLjQWl1_scqj_lZGK.ojL.372ajYAq2ibxZK 9fD_iulppvkxLfziYl84ZCHYcHhnzD7aLh2C5veXJhAU1r.zEzkgI3qLTYD8 Dnsk9u547G4XMLgcpzOd6IuZXV9Yk4SiC9mlzHR2E4aq.PnQ3y24eVy9WMNk 9cHnUC4GIuq7hBqcK1agWzWj4WvEz4rHQ2k_FGCgdtq9nJTKkopxr1fly.Tq ktyAucn3XVU3R_8HHbaya_3BZdTQ7CloOAImnHAEKgcNKvVyXmr0lWZJmcek GXeQIfUzGSJ_LCQXoE2SyhY8MuiXW.y_bG1zZzp1Gfnh8GRDPWTjc4WQ_1bi uIBSdhjH5e9hXfFNPdASN8YeLYj7SCqzM14hLe.u277C6p..x3Fc5HDO8RPi OOxKex2UCvKl8x2QmMvcRIOBJOoLn3.ddvbQ7FjEcTY3MJWhsKZ4WZ1wIiMZ 1gIo0DzXU4Jmqv_JwKvhfh_E5AVfGFYbg50XotCg_lFJwyCq.wpolxuuVH3u nlc1AbVE99vR7UuBBbpIRsGBivT2K2Fiid.fwUZ8lyf9RF.asdeS62y7ntUn BFThAsAWLAKpDNy6YMw4RBou_kPTk1aBdldafhI2W12s9iHKsbnxW87LPKaj lGMjlHvA9_UT1nqVSLdzL8EmTXX2RoaBBmAU.PI1vLpDrbQP4C0iWaBe_xF. XP1MnJ382xCgWS37RdTUZifGQ3ZAKssK8Ip6FKH8SRqtU7HlUvhO1E02y0Tb CYixL7UcirFuTOabQf.GX5xZCtHbWr_swjJ2FeTVGkYKyOs.N_fr_rR4P0BV RqGPee3YabHAYEsmk6Q6BWCqbfnzno_hFre0itCMOdkyzCGqvlnPiNUbNpbP kh0h1EcKAvhS1k5xCmO1yh3O88Y3oXW0Jw8-
X-Originating-IP: [65.54.190.101]
Authentication-Results: mta1151.mail.mud.yahoo.com from=live.com; domainkeys=neutral (no sig); from=live.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s26.bay0.hotmail.com) (65.54.190.101) by mta1151.mail.mud.yahoo.com with SMTP; Tue, 18 Dec 2012 13:14:57 -0800
Received: from BAY155-W28 ([65.54.190.123]) by bay0-omc2-s26.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 Dec 2012 13:14:29 -0800
X-EIP: [NvgX5uvdCFPPz2bU+U8E9Qs+5Fla2BpP]
X-Originating-Email: [secretarydrpetercheque@live.com]
Message-ID: <BAY155-W28E7CCA29165639E797CC5B0310@phx.gbl>
Return-Path: secretarydrpetercheque@live.com
Content-Type: multipart/mixed; boundary=”_6622ba1a-8445-4dd5-8cb6-c35ba5e65254_”
Reply-To: <secretarydrpeterchequ@hotmail.com>
From: “DR. PETER CHEQUE” <secretarydrpetercheque@live.com>
To: deleted@yahoo.com
Subject: RE: Hello Mr (fake name)
Date: Tue, 18 Dec 2012 22:14:28 +0100
In-Reply-To: <1355814088.88125.YahooMailClassic@web161002.mail.bf1.yahoo.com>
References: <1355814088.88125.YahooMailClassic@web161002.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 18 Dec 2012 21:14:29.0111 (UTC) FILETIME=[AA87D870:01CDDD64]

FROM: DR. PETER CHEQUE secretarydrpetercheque@live.com REPLY-ADDRESS: secretarydrpeterchequ@hotmail.com RETURN-PATH: secretarydrpetercheque@live.com X-ORIGINATING-EMAIL: secretarydrpetercheque@live.com

X-ORIGINATING-IP/X-YAHOO-FILTER-BULK: 65.54.190.101 RECEIVED-IP: 65.54.190.123 — +234-8035762383

__________________________________________

DO NOT TRUST ANYONE WITH CHECKS IF THEY CANNOT EVEN SPELL IT CORRECTLY!

MOST RECENT EMAIL RECEIVED ON DECEMBER 24, 2012 —

FROM: DR PETER CHEQUE secretarydrpetercheque@live.com REPLY-ADDRESS: secretarydrpeterchequ@hotmail.com (NOTE: BOTH EMAIL’S LOOK THE SAME BUT THE LAST LETTER OF ‘CHEQUE’ ISN’T ON THE RETURN-ADDRESS AND DIFFERENT EMAIL SERVERS (LIVE AND HOTMAIL). SCAMMERS TRY TO BE SNEAKY, HOPING THE DIFFERENCE WONT BE NOTICED.)

EMAIL: Mr (fake name used) ,

i have receive your message, yes i am Dr.Peter .O. Cheque the secretary to Rev,Mark Hill, i sent you an E-mail and since then i did not hear from you and am so happy to hear from you because your cheek has been long with me and am waiting to receive your mail since my boss kept this cheek with me.now i want to know how do you wish to receive your cheek is bank to bank or do you want it through courier delivering service.

i waiting to hear from you as soon as possible.

do not fail to call me immediately you receive this mail. here is my official ID Card.

Dr. Peter
+2348035762383

A LINKED FILE TITLED ID_CARD1.JPG WAS ALSO ATTACHED TO THIS SPAM EMAIL

HEADER:

Return-Path: <secretarydrpetercheque@live.com>
Received-SPF: pass (domain of live.com designates 65.54.190.101 as permitted sender) IG1lc3NhZ2UsIHllcyBpIGFtIERyLlBldGVyIC5PLiBDaGVxdWUgdGhlIHNl Y3JldGFyeSB0byBSZXYsTWFyayBIaWxsLCBpIHNlbnQgeW91IGFuIEUtbWFp bCBhbmQgc2luY2UgdGhlbiBpIGRpZCBub3QgaGVhciBmcm9tIHlvdSBhbmQg YW0gc28gaGFwcHkgdG8gaGVhciBmcm9tIHlvdSBiZWNhdXNlIHlvdXIgY2hl ZWsgaGFzIGJlZW4gbG9uZyB3aXRoIG1lIGFuZCBhbSB3YWl0aQEwAQEBAQNt dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzMCA3RleHQvcGxhaW4DAzACA3RleHQv aHRtbAMDMgJJRF9DQVJEMS5KUEcDaW1hZ2UvanBlZwMDMTM1
X-YMailISG: u7Xw5CgWLDskNbn_vf28.6TFtwB8ZjMwD3Tr9g7mPToJbbmb qMLKMUH9Q3aUWOMruqQtUyeZT3qb70PQLUefoD5lm1jWzAawy5lgU4LJYTy3 1118IDtbWA8MAiAa6IYDI_JTW9rJqZPYcOjqWvfyAnM2aDs4_a15FWyzMsql .LvKJ6IV_HYq9uddIgSvKDZAolhSD7PIj.4b4G2f5R5r3OlrDTcFke0iLDBN AT8AI5_gh_XDBOdW9VGLf7S6ROvcCuxRwL9vy9V0LSWuptXfX6NIrNwlKnNG kC5kU7zMB63.t0bd4ZlB9Bh1fISYZzwXaxwDKMYp8NigkCruFZC0e_wsjruX X4ubJmnvqY4NN2e7UleQdF3TS0ntxX9lobcH7NkzqPOGIE1di9X5MnG2yMc9 I_AqDqmuY_neshsenroHWAUiunfWWaj6.xrv0PRcsfRnSt6Yi0O_cGYFZAQ7 4chcyWUgHi8_I4G1jGAmbYbRph5bLpOTxKRKbXs6nWkl7ZLZvbNmRfY1N14c CM3uKpPGErwMJrP4z3JDavBlz8K1P5fGcJjwvxS9ZRsqgB8j8YBLHSH3wRFd yuM8P7aIKKlEJZ8Gqw3fwett8rquubrlDvd.xF5kCGS1cWNbDHmlwKnSKZkk E_w8lcHe3BEEutUwqyY4aAC1Uqi4kU56wQgHeBHf1zO1VNKPlKaIhm7ubDul HZYXxmntR93qMGrclxIueQWvk_FnJpnozLrgjMV9BdD7X8agF9nS5ZI4IeCz rfueY5q5auoteKHQx9RUyTJ6Qsi7NVIdCqsAQJc7677ftOAb1Z_NNKQgSua. DUoLqO_.tVqz3vWPEJJSbOlFIihLHpazSLUbfT5FXfA7a1RZf548tB.4t9zY ZfbZUqVhfkZQfMus2Aj8HUljvBcfnAaBH_1vyQMewExzsULYNZZ2zK.jJxem 1Nmw_.tGS_YrCAK5A1Jp3TxedgUYThYTTBFWXiuV.gUEfBLjmzIopdrsh82l rLJh5acYoaliKMHuRn6XF3XFSOFgI03R7NdKEXVElP_CyzRlpJkUP_BjJgux BNwsgOqAAo3ocEHzmMMwEMjNCPcI50uMwsOxhr9WS6StZIp2xBkhVFObLsx9 uwRviUfvGVx1NU3fIqB0lCtqj3j5HR7d9Gvzjj_11dM5pRoAoIZ2e25n2n8W xYdRRlV28Jbawfj4mXyolDt9I8QfH9aZuFQ6hHZzA6uF.SZfIzyAdZUc8aaL GCee_WkMwEZiO4JvdIgqndkS5poxhvxbQ0m7LJXrthUUjPWHSP0ERxKLDqHE NI1UU65OnE1DSwyK97w24w3uhAzf.IOl0Q0B7w–
X-Originating-IP: [65.54.190.101]
Authentication-Results: mta1263.mail.ac4.yahoo.com from=live.com; domainkeys=neutral (no sig); from=live.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s26.bay0.hotmail.com) (65.54.190.101) by mta1263.mail.ac4.yahoo.com with SMTP; Mon, 24 Dec 2012 02:02:38 -0800
Received: from BAY155-W49 ([65.54.190.124]) by bay0-omc2-s26.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 24 Dec 2012 02:02:37 -0800
X-EIP: [BeN0YL2exaSamhdrCnicMrY51kryhvHh]
X-Originating-Email: [secretarydrpetercheque@live.com]
Message-ID: <BAY155-W4968A3A75E3CF4E33A318AB03B0@phx.gbl>
Return-Path: secretarydrpetercheque@live.com
Content-Type: multipart/mixed; boundary=”_053f2ce7-b584-4572-aae5-f7de5b457928_”
Reply-To: <secretarydrpeterchequ@hotmail.com>
From: “DR. PETER CHEQUE” <secretarydrpetercheque@live.com>

ORIGINATING IP: 65.54.190.101 RECEIVED-IP: 65.54.190.124

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Mickey Penick”

RECOVERY SCAM – ADVANCE FEE FRAUD – COUNTERFEIT CHECK SCAM

These scammers aren’t as organized as some might think. They think I am a scam victim and suddenly i’m getting recovery scam emails (note: i’ve never personally been scammed.)

scammer

SUBJECT: Contact Name: Marcus Wright Tel: +447017419229

EMAIL: You are eligible to receive a compensation payment of $2,811,041.00 USD. This compensation is being made to all of you by the United Nation for all that have suffered losses as a result of fraud, accident or illness. For more information, contact the below agent for the delivery of your cashier check $2,811,041.00 USD). Send Names/Age/Addess/Phone/Country to

Contact Name: Marcus Wright
Tel: +447017419229
E-mail: unclaims@msn.com

Please take note that you will pay a shipping/handling fee of $500.00 USD

Thanks for your patience.
Allan Wilson
Event Manager

HEADER:

Return-Path: <e446457625@exchange.1and1.com>
X-YahooFilteredBulk: 74.208.4.195
Received-SPF: none (domain of exchange.1and1.com does not designate permitted sender hosts)
X-YMailISG: iaCrEfYWLDvUk3y5l_LNyAThSP4V4xqF9eporgKJ.m3Nd03w XWrY2ydticsXeio8wTgHBJ2aFAeLqYlsViYDL2HrIhVTeUx65Cij2DslY42J 1JcGuBntGNpKwqbi8d6__JYOcu2YGgeimltqpogYdwuH6O0gdgmte_jVnTXp DBrqDY2fjlgXlQweOpF2pJ7HWFHaKpCQ2mD3O69awfl1TuWSvxmGBs8IyycW KDd_QjkI0XurTEYpvrs.juFfFY.m5LSYWPpJ7KXYTX.Olpl7C7EGASVq97fn Ih.IfX2B7m520UEhgjWa0pcChsz1tDM8HhHDmnR9BSSUdCQrUAJtq61p0.4d sTW1Ycv2ZulyOvO2VPs6Cewhrl0mWSs6lu.VylJ8TGFQkLO4_NGczucleS7U QcN7oBNMMRrqVd7wuSHqy3x6ij0Nh7YRKe7bzAmkUKDCZ6yYtehskcO0Cb6N a4NGAY2APc8FNa0Okhyr7474z8xoCK22d6iM4LrXGMnQoN7rzpyAwI.Vh4an zUSltnl9DoyHw6zpkHzTDg83U1U8H170ej1D.OIRoTzIgePf4EwQtHxPhYWp LolfCsP4uojYOJiti8JEPiaM1Iv7.wfouwvStb8RIPu.wXwzz8JKlif1WO_u jxhgh1VoiHXxW7X8SXH7hjyeQ6UATkYxU5QhFwMXDEeImNrMZmEZ_lchm0R1 1mege0p9..eO6eOso70V9lZbc5EYS6bfo5os9Fr5PcIGzoO5wIz_x.Lgj8DC mkqzAhGIJ2W23dQswOdlqiNqc15opbm17FlWeqtDQLI.9O.Kc1g55qeqx6ch W.hfLVSeSuET84Wx9HNsevw_i368gZdf6npqFXsFe6DA5AvSVCmN43utGl2S a9WJN_W4M7HqrMzhZr8GaWfQ91lsBWMjzBIHY3mbFGbrGndCIs92NgEtSZRH dL9t1FoI3uEI.ItCcN81622pEGxUf6dmMfo1GZHWXLsWAjZrxAXTra3nj5sk p7ee2IDr8MzV4Habi4.G280NGs.N08actFPy9qA9btaSbXepORrPlepnwou_ byz.WL..TkAperFe8bEy9TWl.vEMFvv5vUE9P7FVBLMYhm7GyD3PMFJ015Vx fbzb7mhHra5FJ6TzXilK_slwVG6Z1GLjhpJSASY5FnI2RGARl_s00D9Y6JAn _AprGehiYWveWJdJSa6Tw00paCosmt5_p1S_kI18yFZc.l05OXgdlPk_DO5B hwLpZ7rB8dKtgihjHxXvlGAgye4RyjUbsYJGn474XwG36A0.wuKYHBejLFhm CPR1cEK4y7v_LTZvdUmKT2LPHnd82HigOEUmkOB4Yf.OrQUChOW9x0Rpo3nn FgMqTXirC60Ho5n2RIO0HCHBhP4Uw3LoXUZabhsEGQUabVk5kbZBbP1Pjffj e1iuYoVJbVVRBP1v0cBlPBzmHiU1Soa2YIFz_HPXOgGQp.awygrJbTiJGovl jMlxGPBGrOTtGv6l6gj.DsMZoyj1Q2gT4cGTxvbKLlQVN1CM_Oh_WZgZIB8A B8fJ1qVC15o4xTnoELkVWve2LgUTZBQ-
X-Originating-IP: [74.208.4.195]
Authentication-Results: mta1349.mail.mud.yahoo.com from=exchange.1and1.com; domainkeys=neutral (no sig); from=exchange.1and1.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mout.perfora.net) (74.208.4.195) by mta1349.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 05:30:43 -0800
Received: from winxedgeus02.exchange.xchg (winxedgeus02.lxa.perfora.net [172.23.130.34]) by mrelay.perfora.net (node=mrus2) with ESMTP (Nemesis) id 0LsTxI-1T0cjc0oTQ-012CUx; Mon, 17 Dec 2012 08:18:52 -0500
Received: from winxhubus04.exchange.xchg (172.23.130.36) by winxedgeus02.exchange.xchg (172.23.130.34) with Microsoft SMTP Server (TLS) id 8.3.279.5; Mon, 17 Dec 2012 08:18:55 -0500
Received: from WINXBEUS26.exchange.xchg ([172.23.130.69]) by winxhubus04.exchange.xchg ([172.23.130.36]) with mapi; Mon, 17 Dec 2012 08:18:51 -0500
From: Mickey Penick <e446457625@exchange.1and1.com>
Date: Mon, 17 Dec 2012 08:18:50 -0500
Subject: Contact Name: Marcus Wright Tel: +447017419229
Thread-Topic: Contact Name: Marcus Wright Tel: +447017419229
Thread-Index: AQHN3FkNRoTFW9qeBEmCokF2SqOu6g==
Message-ID: <B353BE0D877992409CB2153398733B81635C6E54@winxbeus26.exchange.xchg>
X-Provags-ID: V02:K0:qa6J6jAK/tEmY1U5oAm/zSZEN6hkkm7rJiviufF0pv1 OsGjlV2iTAWrxa+UG8t3ZvDeSPO4sJF8zru9389fyCpogoi/BM ixURjJTxTWNPkRq/MHnwa26LpEVLDtNfQDcbXeg9xGiGkbgCVT A2QOsNmrL7XzUs78aEfZ64uzbxZnIRkdidfZiGrnrlTpU5spNJ ZF84KTYP+OuNc4OgXtlZ4x4qjlguiRrTtVeNFp8wIwRcMfwHFm oPRGeZcZdDudKa4Z+OaxemgG9qSiIz5LvVn97pPoJNVfUfzKNA pGyWQk46l9ap1cwOftoG7oWDg+tJUfI4fKD0YFVay173Cp1Ggp FvL7jQnFFYZsfstNVIvDRZAbRNwVBOSpXgO2UwHLDtEkgPw2Jr Ngm4U2L8Rv6XEZAXguJVFbJkGSKOn0NKps=
Content-Type: text/html; charset=”iso-8859-1″
Content-Transfer-Encoding: quoted-printable
Return-Path: e446457625@exchange.1and1.com

Mickey Penick <e446457625@exchange.1and1.com> unclaims@msn.com +44-7017419229

RECEIVED IP: 172.23.130.36 ORIGINATING IP: 74.208.4.195

 
Leave a comment

Posted by on 12/17/2012 in Other

 

Tags: , , , , , , , , , , , , , , , ,

Pashkevich Dmitry

DONATION – CHARITY SCAM

COUNTERFEIT CHECK – FRAUD

EMAIL: .. I am J. Bolten, diagnosed of cancer,I DONATE USD$10 Million to YOU.Contact my Attorney Gates,for claims via email;( ssgatesinc@aol.com ). Do Send in your alternative email and telephone number

HEADER:

Return-Path: <DMP@euro.who.int>
X-YahooFilteredBulk: 91.199.113.6
Received-SPF: none (domain of euro.who.int does not designate permitted sender hosts)
X-YMailISG: Ao5.wDgWLDsZ4cMIeQW.sQlPw55Z2dNFt22fEIu7DJVbZaqA UzCcDvGBfRInt90R78WVCWd.idvYkMo0U227P_A.Jn9eK0h1tBzxJCySb0FE I6bl_MH4hDrjTVrLOP5vqFGyOv489ub7cKKte3xXjVUznrOTzHQVH8Fs28oE Nmmlt5OB7NQFBDfxby00hWkRKB6hT3.drLYQ.e8LunmpdpM2BVc7l2BmZkyP OaAsUblPBjFASGlEYkWtPGS6EL8F37.M9eCnpqhq5_Uqx506in25AvdH1yQh O_Ja2y6FIrc6gGVPG.e86diI9fQ9twK58BXL_MDmqNHFelpUjZksQtNRrcn_ prA0DQWcuzdb7M9QrKIGw.WR0NMeh6YUQnJj_eO7nNqWTNDzm6yJvyOcewvW hQ9pumbRIAi63hmdHop3i5hvCuZt6K6niQyk7jRzYdPp2JmODQjwEl98AouT XNKhlXdv8A4O0PtFbWF0dGOC8YnGQqIZ2yXlBjSGgRqLRnfmzD5pNc7pm8DR 7sUzN5xZMKvEh6iYM4.NCEasq.z1X4MXNIjBaWaXYWWXc4CUNLAx2bDQuEom Q5xsu3nHz2kggZBIVWGyhtwvVX4GRnhT7a6rWP9hRN22NjPVxBIpJO0a5nlA npUwYEjjM0mU.D8EkXrPx4bVOcc304Y2TZMZ_DP3Koxex.XY79N90UMZkNq4 W4tbIHp0nwk80BS2R6FhxDF4ySdcxdW5QWQU5mgaIKZSxAElpzUtho4IuaCo a39c7EL_PAVMDNOyTvKX_sNVWFOx9DnyVirlUCuksehelaT7kYieNbMWMeTJ 4jQoOPJnijWZCIKGAyNZTk5RksWDMEYk_5FnRqYkr_xJQxOewVi9yP20HFU. UlE9eIGUaPmfIbDXv2GRNgbEG7Jc2MzFihM9aSE0UgGAuaivUADynRJ948gk txjo3EIx8p3fHH8BFVgWjhkoAGlKm2yYjGDMX9OmJBzB86u2.6LUcEPcAMwf wpM94DbsE3bSlRR5Yvac9QK5fCRSkc6BsNnfzlX8AoNmFWbb27VgVHyRKmw9 SiQ59zFa8lRrE_eHMW3X8_18oXxLJxjJnF1fT7prjZLonXZbHihgHbyDyyv7 aXMSXCWH5f5rvn6cdi0pfg5oi.KhlABYA0CCZHh1y.EoECvtVRCx2KDTKKmM Ou1Ar9j1iuI8L83wXzTQIKBq_gLUol9.4CI8gXlwgBgQHXAH0YiQmSdWszl0 vgazYEuDFXq5G9Roc5U2hxSbpXxnoicku6bzlGNw2mprfsQpgCiisgZ19V4k 65DY670gqW23RfgIzZepHSvFArjVqfMNOtvk6Ey7mkaj2DvcSg3Hc3lIFafl 2uvLCNRzauD9x7KX7RR7mbsCobqXlGJSVDp0yIz_S5ZaG9eMGQplxiBD.O1m 7KcnU..z7yd3K.fBtThNFUtsiAxLA9WjabOQUk6rj6yh9aAQ5RSofgidJf7n 4GQz3U.FNVy4pGcaPT39sBSv8uhc3K_Osqn8PxFV5I080KEqAqp3QJypKf.T NWnG4U_swzPXh13I8BlVUBBYvk8WK8wAkdkVtEY0qkQfkcC9pD9lPAt0jccf mT1N0tTvnsOHIPopN8MYTaqPhndOLF9966AE8ptJ9LMocJGSzxA86VSA_2wl yg4eXNwrwh.o.uohdBfsbX8LgGwFKIVOnlgV8EgfOEMvRyE1N6efqOQ_5TEi MotBvX4AWL04HgN0JOZVZU99sh1ZdKyb0ui7tvLNnAo7TQCKr1sg9EME65e3 rUpHDBdi8x6azJgyOBBvJTAVayYomIj4mHMdBlOi.CPCImjeqyNreo8HkEEK HEKz9xrp8g–
X-Originating-IP: [91.199.113.6]
Authentication-Results: mta1284.mail.mud.yahoo.com from=euro.who.int; domainkeys=neutral (no sig); from=euro.who.int; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO owa.euro.who.int) (91.199.113.6) by mta1284.mail.mud.yahoo.com with SMTP; Sun, 09 Dec 2012 05:48:14 -0800
Received: from EUROS68.CPH.EURO.WHO ([10.16.16.168]) by EUROS68.CPH.EURO.WHO ([10.16.16.168]) with mapi; Sun, 9 Dec 2012 14:29:30 +0100
From: “Pashkevich, Dmitry (CCC-UZB)” <DMP@euro.who.int>
Date: Sun, 9 Dec 2012 14:29:29 +0100
Subject: ..I am J. Bolten, diagnosed of cancer,I DONATE USD$10 Million to YOU.Contact my Attorney Gates,for claims via email;( ssgatesinc@aol.com ). Do Send in your alternative email and telephone number
Thread-Topic: ..I am J. Bolten, diagnosed of cancer,I DONATE USD$10 Million to YOU.Contact my Attorney Gates,for claims via email;( ssgatesinc@aol.com ). Do Send in your alternative email and telephone number
Thread-Index: AQHN1hE35ld3Zw5cX0KVxtG1x9PaWg==
Message-ID: <CF86913904B1E946A7A09054DF60CD8BDB464F2F61@EUROS68.CPH.EURO.WHO>
Accept-Language: en-US, da-DK
Content-Language: en-US

“Pashkevich, Dmitry (CCC-UZB)”  <DMP@euro.who.int> ssgatesinc@aol.com 

RETURN-PATH: DMP@euro.who.int

RECEIVED IP/ORIGINATING IP: 91.199.113.6 – This IP address is listed and blacklisted on many anti-scam websites

 
 

Tags: , , , , , , , , , , ,

Four Email SCAMS

A list of three scammers who emailed me back in October, 2012.  I would’ve posted them sooner, however, my spam box gets FLOODED with spam and alot of email’s (including these three) continue to get pushed down each day. So i’m posted a few of these less recent scams, in one post.

1) LOTTERY SCAM – “EUROPEAN EURO MILLIONS LOTTERY COMMISSION” — When I didn’t respond, this is the email I received:

FROM: Mr abdul saram mr.abdulsaram16@ymail.com

EMAIL: Attention:

TRANSFER OF US$11,800,000.00 TO YOUR BANK ACCOUNT.
We are writhing to know if it’s true that you are DEAD? Because we received a notification from one MR. GERSHON SHAPIRO of USA stating that you are DEAD and that you have giving him the right to claim your funds.He stated you died on a CAR accident. He has been calling us regarding this issue, but we cannot proceed with him until we confirm this by not hearing from you after 7days.Be advised that we have made all arrangements for you to receive and confirm your funds without anymore stress, and without any further delays. All we need to confirm now is your been DEAD Or still Alive.Because this MAN’S message brought shock to our minds. And we just can’t proceed with him until we confirm if this is a reality OR not.But if it happened we did not hear from you after 7days, then we say: MAY YOUR SOUL REST IN PERFECT

PEACE YOUR JOY AND SUCCESS REMAINS OUR GOAL.
May the peace of the Lord be with you wherever you may be now.

Your Faithfully,
Mr. Abdul Saram
Foreign Payment Department.
Kuala Lumpur Malaysia.
E-mail; mr.abdulsaram168@ymail.com

HEADER:

Return-Path: <mr.abdulsaram16@ymail.com>
X-YahooFilteredBulk: 202.54.119.135
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts)
X-YMailISG: zoMIZlsWLDvydzg0Dk9J5tOysBHE56cHQyyiC1YznBFFUtuX 2QmjWmBtKrEIAIZhZZvMLBsf2_VfVRuk3IH9j8m1hLMrwqczlxOjNcYd56t1 DaED9ORsgM_tamt6rYqekTqo1ZZeVBVk.n3YVF3tmTgLQTno7RUE_mPfmgyO S8g3lGMj8NpQGYdtfuXTZYiqBNy7OCiTyfihCtBixC84NBTgsDMsAj4P2vvf uvEouSXqXW_lpokkF6fkNC1eMtEPGI98ZdT_3zRWN9Ru.lwobx.vCEagLelr T6qkX56Y3yw3oYYgjSG_O1eZeznkjXOyNOjg82ND2CrRcduLWdRuJOesZKmV 3xrCwSbNU.1OEPGt99LQuUBZpHmnhEsLZ908pgJy706cOkWpiPoZ1rCWGuGK kMgJUwp_ukdV2jXRGVSbgDunXrysUGJ4JGJ7sIcy08xXkI01aKXjvxH5zSVt MLNYizgSIwbXCsVoh4kgvfVFn8tv.rcdkUiap3AJ7fxaz2BjrTg_iLcFzP7j CKXG6ul9U1zBHqq5F54fpGKFMpuGvzwMOAQT_kou94fFWb78j9yzKSJHFpzs N.MLMXSB9whHO08p5lO4G9516SCu.qO8uzo96HXGeNPbj9DIfYQcg1iWz8uo 3lMulBOyPI1h4faLSk2GSYFktoY9y7i9gU.f.9MxMaXc67eJ_PrIVIhtMswN J_wZMBwunjrY3hq2OicEy4TomsF.650j_axPHFQHMF0VIt1ySTNQfVmkwYD_ M4SQKaSrB6uU5OJM3EfBW_Humq93k7t34Dv0UpWSsFFW8shyPX21lPZJvTcZ OXXZcu._kxiXXOWX99I0m3DkvbdL_quy5FBkRomNTW_pSwiZBIdfHBGu50MS 9nIw.OfsGw1O0ATr25xhnJHFLd4PlcHTUBXfiGUamYauHYl_HmtmDcs2so5t jo1X2QbMvFUqicTPxGsJSPWzhxtucwSaWhqCBTqnKW12kmR.n19.GVeHCPoG 5fbPZ6S2rNO.LNDQzjl_7vpVXk.3WfaqAGUZaNZSKgTUx_m6dzipHtSDVyXl ZWvdU1M57p_stGRaLd7P2DLNwZA8gjZwrpTI3_hXdzz4E0HLWDqTsu70dLn3 NvwffnAgEQhrxZfe5eS8PmhRPM3oEBxVA6viz2i6xw–
X-Originating-IP: [202.54.119.135]
Authentication-Results: mta1021.mail.ac4.yahoo.com from=ymail.com; domainkeys=neutral (no sig); from=ymail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bulkhostingpanel.com) (202.54.119.135) by mta1021.mail.ac4.yahoo.com with SMTP; Sun, 07 Oct 2012 07:12:02 -0700
Received: (qmail 18600 invoked from network); 7 Oct 2012 18:40:51 +0530
Received: from unknown (HELO User) (120.140.1.40) by bulkhostingpanel.com with SMTP; 7 Oct 2012 18:40:51 +0530
Reply-To: <mr.abdulsaram168@ymail.com>
From: “Mr abdul saram”<mr.abdulsaram16@ymail.com>
Subject: Attention:
Date: Sun, 7 Oct 2012 05:24:25 +0800

Abdul Saram also sent out scam mail under the following names and email-addresses:

“Mr abdul saram” – <mr.abdulsaram16@ymail.com> – “EUROPEAN EURO MILLIONS LOTTERY COMMISSION” <europe”EUROPEAN EURO MILLIONS LOTTERY COMMISSION europe – FREE LOTTO AFFILIATED OFFICE U.K info_freelotto@ –  “Mr. Abdul”<info@yahoo.com> – “Gareth Bull” – <garethbull65@qq.com> – “Dr. Cherri Holden” – infficess@yahoo.com – “Mrs.carolynx Harold” – <info@winners.co.uk> – Mrs carolynx Harold <info@winners.co.org>

RECEIVED IP: 202.54.119.135 – LOCATION: India

ASSOCIATED IP: 41.221.17.37 – NIGERIA – 41.249.22.246

_____________________________________

2) INHERITANCE SCAM – TRANSFERING FUNDS – FRAUD

 

EMAIL: Greeting’s my dear,

I hope that you are in good health and God is always watching you and to take care of you and your Family.My name is Joy Donald and im a beautiful girl in this country of Cote d’ Ivoire. i am an ordinary girl and simple bread winner of my self. finish college degree not working .I am brought up motherless but i am thankful that I have my father with me all along till the death of my father on 20th Febuary 2010 in a private hospital here in Abidjan. he secretly called me on his bedside and told me that he has a sum of $ 12.500.000 (Tweleve Million, five hundred thousand dollars) left in a suspence account in one of the local bank here in Abidjan, that he used my name as his first daugther for the next of kin in deposit of the fund. now I can say that God is good in everywhere and in everytime. he also explained to me that it was because of this wealth and some huge amount of money his business associates supposed to balance him from the deal they had that he was poisoned by his business associates, that I should seek for a God fearing foreign partner in a country of my choice where I will transfer this money and use it for investment purpose such as real (estate management) can you be my friend,my guardian,my partner, for the time been.

dearest, i am honourably seeking your assistance in the following ways ) 1 to provide a Bank account where this money would be transferred to ) 2 to serve as the guardian of this since I am a girl of 22 years. moreover dear, i am willing to offer you some % of the sum as compensation for effort input after the successful transfer of this fund to your designate account overseas.I’m very honest person and always like to help others.

Thank you very much, i will wait for your reply. God always be with you.

Yours sincerly,
Ms Joy Donald

HEADER:

Return-Path: <ms_joydonald@hotmail.fr>
X-YahooFilteredBulk: 77.238.189.206
Received-SPF: softfail (transitioning domain of hotmail.fr does not designate 77.238.189.206 as permitted sender)
X-YMailISG: JZaHMLwWLDugrnxWgMa0KL19eLCCrSn4Vjkr9J4aFtdpeB0n RfO.FCSatFLs1uKMnFmNvRs95YCfGGD9V9ixQ2.ZUI18rrVrpd9c6YAKD_ep mGZvxWakYrLqBuZIajyrXKCMsGLNT.Aah2DmKlB56P5PAHpA0J5YhGOGuosH dDTRY0OuX_R3Cigqpyh.kfeN4GzHCORAXV1b8p5TP3x0QUK3U2ADv7qkiZba JbixTzA3LxKAdrJF3EKB6GWB0n_0_ppM3TTYmjDzqJbuNsoU6zGDYX93txZq qxUxiJMeHiVBwpAihr.pJBlWF_EyHO6sAOzxEtrSXQBDYI6r9vT28QfG2bkQ l4MbVzyT1n7Twa_dMibPyUW9rxhqG8pASUyelD5fotFzmrK0X_3wMOZbsrRO R.szB0QOzMHw2joCbG0c74FMFgackwgdLdLwfSuZjYsbQHlvUa0LVhp9U__x fzldM6GUoOtXkGubJ5MRQ6DpKzPL6C85e1jn0T0r9u1LJEuTPejfOuV0qDEV saYEVNnk4mi52SyZlcmFMeWs5t.2HixWTyQ2h4RTFfgmJLawAaYmAJGOYebQ uWegqh5C3LL_pgbxf4a9._LXUl.QPV7XNdY7wzOlJ3TlnmLnSJ3bf0U3zcHY q4MvlCc3owpjYOtD.53dx0hxoYSL2cI2KOFVPcZYz.T.ZQ1CyXAzAn6151hh nmtqAD9ouJeDgJt2SIInkOg5NHv1QWRdh_sNEiTVGdH4mHUSgvnEzn0FPZ_U l78PUoPR4fT8wEDua3xMfYaBj5Kb6a8G2qA6fBrhm86jmAjWXtcVEz0_M3g7 i3nL6AnRLdHhcPL.3Xm0akNe7iDDPlufAlUidGal8xP1Oigi8OpgcIq4Sthv QsHMTO0EfOYCaGrzoSaddqtTlZUfnctjltSptmoQ_DwMlYAY7QnXE00HvRFx EGiH.mwv7zj8Jnh6nxW3YbAtEZ9O95EeTTDlZKxOjGyEWsUl4qKh2IojbP1k pAb7WXT5XgRLMG1win4HfMlGuH15.XzvR.ArRmBQH50Qtckr5QGztIfMQLKq 1l1jsOK9RXb1A7C_DsILoPxg7yKSzmnDgVw.QA8oLyAVPHfxFAdcq3Vobrwq 2z_YIMiI7enn.1Vd0Jxek_GkywSnAcepswcn4eU.neYNWprRs9LCHxorbxkB RXlOtzwgZ7_TrVuVJPNOggjT9fqrEZYnUhUHbmi8SToV3zaP7toPD.Ux5b2z veuMgxkh_RhisgKxWbX7ku9z2CB.x2ZF4MwCiTwED3WCAQrTbu3fopeh1ICN XFDoHmtkcfuos7_eCmTGq8_SCdX5lE3TBlWZU04svWZWMIk-
X-Originating-IP: [77.238.189.206]
Authentication-Results: mta1300.mail.bf1.yahoo.com from=hotmail.fr; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm17-vm1.bullet.mail.ird.yahoo.com) (77.238.189.206) by mta1300.mail.bf1.yahoo.com with SMTP; Wed, 10 Oct 2012 09:25:01 -0700
Received: from [77.238.189.54] by nm17.bullet.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
Received: from [212.82.108.253] by tm7.bullet.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
Received: from [127.0.0.1] by omp1018.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 759852.5070.bm@omp1018.mail.ird.yahoo.com
Received: (qmail 95614 invoked by uid 60001); 10 Oct 2012 16:25:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1349886300; bh=jaEN//dfogj2VveAeEoe/VXQQN2SwrOCdupZLniFXYg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=gFNDxSA+fQ/8A8jgKkFMAaKNlbRG81Fr2Blh/islfQc7fwumPFknPMR73jC3ebIw4/Jj4IaBtCCTajqdTlzpH3FQxVOWIRcnul4FVBa1NZN2f+DtPR6t1YHzzZXcfrd1UpORj1wmOG/WHquNyYwesDFYod+iLcHYwQJEIPJrWfc=
X-YMail-OSG: bNrzragVM1mTLrq9DxIX40L1J60JiJhrQ0wuRl7w6Sd1Y7u c6kjz5pTHtaDVpdpayxVP37.bOAv5uVox3wH3edxmNiadIQU_MhECL99_P6g rvJJGcLBsCljDdhiWqr0Lia7jKJHIdfX_w4avRcs0Tu8DTDkWNA31_7_FarE 5nYlfMedww6RvY5K6h7IcIEvs2U1G.CbX9WXYhiKjfdLM1s.v6W5SIPf85RN NspEsJXiafUi1QAXAzPKLhU5.bmFjCz3JER3WhYejBKIdkPQLJ2VE8ct95FS WDB6xtDiU3tRzQcEySrIXJwoMv15ScwC9pYuVs85JwH6ypUAAjAftFarPXEd 6hujb7zfiswYXLQg55XfnQReV36PZHVy6ffLu0QeipIkfC4HHTbakq7ag8Jr XU9qFc.5IR_JpnGYiINd_iBBp1.LjenFSIHT8o9Sw1RHSZMG_iIkMM0eJSVp sZdhbJKJSLaszEdLqD3iUcFwpzHD8iot8Ip6DIO17SMm.mgMxGJeksfmf1lC SlCGFXSmSGO7XZeO4emPmb749eAOGk0CgYHYwdL2RtbFD3fSHqR4LP0KtBJw tmUvaL1yqR_mUcAzvCjSAjAAP0lgfDUNpDZVmYlwbwl6NlJmowcO23eAppF6 rBOFUIVZHkG70Ht502_wTFM_e420-
Received: from [196.201.65.21] by web171605.mail.ir2.yahoo.com via HTTP; Wed, 10 Oct 2012 17:25:00 BST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1349886300.86977.YahooMailClassic@web171605.mail.ir2.yahoo.com>
Date: Wed, 10 Oct 2012 17:25:00 +0100 (BST)
From: Joy Donald <ms_joydonald@hotmail.fr>
Reply-To: donaldjoys1@yahoo.co.th
Subject: CAN I TRUST YOU

FROM:  “Joy Donald” ms_joydonald@hotmail.fr Reply-address: donaldjoys1@yahoo.co.th

____________________________________________________

This scammer spells Federal incorrect  – ‘ Federal Republic of Benin ‘ not ‘ FREDeral – LOL they aren’t smaRT AT ALL.

3) LOTTERY SCAM – 419 SCAMMER

EMAIL: FROM DESK OF MINISTER OF FREDERAL REPUBLIC OF BENIN.

FOREIGN CONTRACTOR PAYMENT OFFICE.

ATTENTION BENEFICIARY ,

The Board of Federal Ministry of Finance Benin Republic. are here to notify you of your payment inherited funds of ($2.500.00M)U.S.D dollars . after the meeting held on 6th of NOVEMBER 2011. His Exelence the PRESIDENT OF FEDERAL REPUBLIC OF BENIN DR YAYEE BONI. has Instructed this Department to send your funds through western union money transfer for easier receive of your inherinted funds without any further delay. to avoid paying money to the fraud stars that is going on through the global.

You are required to send your name and address were you want your fund to be send through western union the maximium amount you will be receiving each day starting from tomorrow is the sum of $5000.00. also your are required to send us the sum of $105.00 dollar for Re-newing and recofirming file that was deposited in this office with your name and address bellow .

Beneficiarey name———————
Address———————– ——–
Tel phone————————- —-
Your ID copy————————–
Your city————————-
Contact MR DOUGLAS JOHN with your informations below:
CONTACT PERSON: DOUGLAS JOHN
EMAIL: ( western.union45@live.fr )
TELEPHONE : +22968449676 OR +22999203703

As soon the required fee of $105.00 is send today for the renewing reconfirming the payment file of your funds you will start receiving your funds as from tomorrow.

Send the $105 dollar through western union with the name and I am waiting for you to give information to enable you start to receive your paymeny as from tomorrow

Send the money with this below information;

RECEIVERS NAME, PETER MARK
COUNTRY: REPUBLIC DU BENIN.
CITY: COTONOU
QUESTION HOW LONG?
ANSWER IMMEDIATELY
TOTAL AMOUNT $105.00

We await to receive the western union payment informations today. Please if you a are not the real beneficiary dont repond or delite
As soon as you send the only $105.00 usd you pick this first payment immediately ok you can track it now to your private system to be sure.

Yours in service
Financial Minister
Federal republic of Benin
WAITING TO HEAR FROM YOU AS SOON AS POSSIBLE

HEADER:

Return-Path: <officefile389@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.94
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: rVs1dXIWLDsMv_.n5QvLQrk7czd0m_vZykzvsDv2bO1NcJ6B mEmKmBbytjJ2Q2q7hoVPQRFf.X6dUoEqTwfUInQ1y31cNswweQ_WvtxI.i4x G_5EcbtSTAVFV_Tb4UXEP5nfbLLR3OcUBVBsg5a5QXdq93GUClR8IM3EZ5Oq Ax7QU446TQrW4z5fvkmJx3BMyug0lDIr.UKXxO4wFuMypYMVzckAr19SaEIM 9HuVKawHWF29nJmCMUx1.u.4D0ux2wFAlii5MeUQ942cVWxRJNRPKcmbs.HI xfvch.PCVUxqRomtl.EHpyv..T7KNAcWhNhb.OyXv.2QECxKRPe1A7JQ3esP SwDsYR_GQhXSI6NrwhwyUw_L5OuoS6BVHHBBLlwcEVolhJCEGaAjbppebA8J evmsqJ5PFkMZld3WHHJKdpHcYATjH92mH_OttCP.t_gHne6LdIMpg0icfVbo JUw8u4QIpzjvDbBLcLOo7FKhjR_..Dw3CR5HiVy3MjdTZZSVWnsizrHoNYE5 ravSWhY7xBCAUFpwo3u_TWaz0OusXIdi4QFDzivf0VIeiX7U2loHfgshFWfv XZnqeScp1sfpl5.qC8A.jyo8muRr0mX9Tl9byXrF3WYKvEdt3W8eOw0pl6tr nVjmCpVK3My0FU0bhunib_bq4I.amgNLqsYq2RCFlXCeCHFfOKNnfxNjbynC hxvT_tPcgA7lKv2YKqXSpx0aPsEAli7rWut4ZUI.mbV9ciR48JO1mZKsFMun Esrk8D.4ejFipPpmySq5vieercIDg0U79Pww_IHpoccnLrUXM_pkm_n5CE5W J5j0vgLwbYEKKiNM4J.qM.pziSivmA3LHJx4AT_NN_Ifx60YZTyinP8JewNB nEbJEKBjRYYIcrvzTgHy_Hp5rIhJK65y8uhTrNI1le7l6deAErzP.vQvp7RZ UQ061OvKu0ROvUPBj6ooxDZJiQPzlk5YUlYRoNhyiOarHEJYYvHrc2MAfnbs SXemLmas9CFQe.FOnAWLXg6IJXXnlJWn0Suo3DTioi7qFA.PEES_wVpW8Dq. pHM5id.fOlTcNRbobhwM5ELiEbv8UqiWO_xk43r8CF53mgnSxRGX_ofgT.vM K7TyCiTkiLJqrRPsj2XGv6qaEwrHZQVK_zZAm8bQlHgHMW.EPX1efMclxHr7 Hv87ie3KJVlYsbpt41qN.jHZ72TTGfgMUBIpd11uFx7wBWTNJnzM8wuflbWz 7ScRo1Rd9xaY2kgiJd00y.yGR9q0Te8G7.2gs64XgAj.rJHJEesoyLAnHor7 oBWj5K.idQo2jtWtMldstigscuNvbIdpB8ho6rmCzuBDmN33y0aFRpxE8w–
X-Originating-IP: [203.188.200.94]
Authentication-Results: mta1342.mail.gq1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm12-vm8.bullet.mail.tp2.yahoo.com) (203.188.200.94) by mta1342.mail.gq1.yahoo.com with SMTP; Wed, 10 Oct 2012 07:09:33 -0700
Received: from [203.188.200.220] by nm12.bullet.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
Received: from [203.188.200.63] by tm7.bullet.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
Received: from [127.0.0.1] by omp1004.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 119691.33270.bm@omp1004.mail.tp2.yahoo.com
Received: (qmail 38888 invoked by uid 60001); 10 Oct 2012 12:59:01 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1349873941; bh=MP+++lIJyYrpj/aXzm3tMnmhmfCfqMXOi5e1kzYn3Tw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=LVkAtUGaJbi5dfKJkjQghJrT8gUU0PgdSqmZsd9E/ZHQ6/CG6mgNm+rvJDts6pp3AiUWIw0omchZ9EGQ4FunoccmA2lDVIGS7pb99sdl5hsF0AkgCspFU5fgyb8PuayE1Yj98s03K9J4GMwWfqlVMdLewAIrzkJxc6PdD07aZ9I=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=c38Gpj05IhDmqBiYzJHOdEYJeIkGQAvzHcxXPhNy+G8fqdVpH1DSEJEtXQ2/1BsyYYvWZ8vCfJOX3lA93bclbzxnjXmUqQmhkeuQy2JqNskNXltl1tRwk609ukguAOvwLPnMhfqMio8PHMWIVwSnCRb2k3C14uRVjsQ6OpWNeTA=;
X-YMail-OSG: _GARL1wVM1lqQRqVGyFk1sZRYyWzAuNVhJd1sZHEBwkfLNd PMIg9HENG
Received: from [41.138.89.38] by web92411.mail.cnh.yahoo.com via HTTP; Wed, 10 Oct 2012 20:59:00 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1349873940.38815.YahooMailClassic@web92411.mail.cnh.yahoo.com>
Date: Wed, 10 Oct 2012 20:59:00 +0800 (CST)
From: MR DOUGLAS JOHN <officefile389@yahoo.cn>
Reply-To: western.union45@live.fr
Subject: ATTENTION BENEFICIARY

41.138.89.38 – BENIN / NIGERIA

“MR DOUGLAS JOHN” <officefile389@yahoo.cn>  westernunion45@live.fr

_________________________________________

4) SCAM – MONEY ORDERS – MONEY TRANSACTION – FRAUD

EMAIL: Attention please,
My name is Kim Wong, The Owner of Kim Wong Trading LLC,Kuala Lumpur Malaysia. I have been into Manufacturing of Fabrics,Textiles and Furniture Wares since I was a little child that gives me about 23 years of experience, I majored in art in high school and took a few college art courses, Most of my work is done in hand neatings mixed with Machine Embroidery.

I have recently added designing and creating artwork on the computer, I have been selling my Works for the last 3 years and have had my work featured on trading cards, prints and in magazines. I have sold in galleries and to private collectors from all around the world, I am always facing serious difficulties when it comes to selling my works to Americans, they are always offering to pay with MONEY ORDERS OR CASHIER CHECKS which is difficult for me to cash here in Malaysia.

I am looking for a representative in the United States, Canada and Europe who will be working for me as a part time worker and I will be willing to pay 15% for every transaction, this will not affect your present state of work. Someone who would help me receive payments from my customers in the united states, I mean someone that is responsible and reliable, because the cost of coming to the state and getting this payments is very expensive and time consuming, I am working on setting up a branch in the states for now I need a representative in United States who will be handling the payment aspect for my company.

These payments are in money orders and cashier checks and they will come to you in your name, If you are willing to WORK as our representative, All you need to do is cash the money orders and Cashier Checks, deduct your 15% and wire the rest to my company cashier here in Malaysia.

If you are interested in this PART TIME JOB OFFER, Please get back to me as soon as possible and send to me the listed information below:

1.Your Full Name:
2.Your Full Home Address
3.Your Direct Cell, Home and Office Number
4.Your Age, Gender and Present Occupation
4.Your Marital Status

The only problem which I have is trust, It will not cost you any amount, you are to receive payments from customers for my company which will be sent to you by FedEx or Ups from my debtors, which would come in Money Order and cashier Cheques depending on the of the payment my customers wants to use, then you are to cash it, deduct your 15% and wire the balance back to us.

NB: All charges to wire the Balance to us will be deducted from our money, so you are rest assured that you wouldn’t spend a dime out of your 15% or your personal money.
Thanks for your assistant and God bless,
Mr Kim Wong
Kim Wong Trading LLC
Lot 925 Jalan Kepong
Kuala Lumpur 52100 Malaysia

HEADER:

Return-Path: <mr_kimwong@etorq.net>
X-YahooFilteredBulk: 211.154.152.136
Received-SPF: none (domain of etorq.net does not designate permitted sender hosts)
X-YMailISG: yoXgebkWLDvhvSfGpf994bmowTFZpMDPw.1lseHkGA6T1SnA p1t3YxvxJS8N8EA6awflpA_S2QDZLDNMysomaZ_MhaETYuaVnjK1VCJfTVKg GS9W.3ZA3E0Nh3jVpAmuwHhVIFDW4md6Ih9TNntrWk8ZC7..jVHc9sonfVfW kOEygm8wmiN5oXRKB.x2mDSGgaNgpBu41IjFp3gBszrQIbsrDvNrrbX9uTH_ p7Rmx_l0Zrnd9FnqK.6C.zDTZyUuBsTQzCnWsM8tN1i_VRV0x_8_U6RqsTFm msR1VVPtNvDefm9IQjfYvdwJi5u2l5cNzeXjhEbiJmh2X_yK3vkalx4gjUjh AA_sYJdx7rgzLQ4_6TUXm96XQ0h4Dj_q9q4rAkf4ng0GzIJuMbhIWz9SSyc9 ky06NEAdJ.cBOsYY9pgrcAknG7Y1E2ecsvgQVSvIFQkstnNfG6BfSLt4dUe5 P1m.zXjK0.Lt9okfVcAJD33H_m0P1BCnItM4qwEFQmK91MxCGzCumuWqjPgY mJB_mcLtk3GZYcEf5z6pgS4q0NcL5BxMZ9pRg2jSIh6L8.EofXjDJ0QLTH2F oIvu9VLDtSm9CGm4dH3bF.fLuKCzPWcIR0W.cTJ1lx5E6.3cSpC6tu3xvrKT 3wtlgnidfUeFjY_B40NbWu7gSyUVmUYqSZcI53AkvjJhGr8UVgQZeZQz3_dF G3IKjw1ZbJO_m6WGSUENcg71vx7nFW7LeSncqg_yPEKXpNHTZoqUy4vNPlJB .edCKetnFzhsNi.fpSYxgKwiY4zAB7lAAnGVv_LTSiuNHY8Gq4_BjbG7TUVh 1jEbBhPSdv6h2Xn2d_a7_wluSypmlmmijiwoAyjJIzXIQRxOGyAQUpLNt3ic kidbPtvVlp9C5BxHHlSC4l_TaH2audAFdA61K6KkLpVzKbs7aDlwAG_4JY.P eHDCSLcxciwXAbIVMDhDjZzvgAxY9jnt1sY71l7n7d1dl6ufMrE_o0_qDe1j gk.030j9Eoh1E1ERfEHIOI85Czc2grhxp1jZP1GPEcz_HcFqrSn_eKAq.2ab BfXWVSKD5C53t6ibYYh55uQciKnQjLdW1DfMxvcOadU56IUCpJhN_X3tzBgB Vq7jtWkEC6p8UoTEaiFTL_bWrElyr4fvGLTgBOPVxMvn1t.ZmSAZquSUnn4E qSyewFfWh_6vi30xuvWs7yvkhvzMwEH_vHf6qrBNx2h8JRqQ
X-Originating-IP: [211.154.152.136]
Authentication-Results: mta1468.mail.mud.yahoo.com from=etorq.net; domainkeys=neutral (no sig); from=etorq.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO mail.giantsea.com) (211.154.152.136) by mta1468.mail.mud.yahoo.com with SMTP; Mon, 08 Oct 2012 13:09:44 -0700
Received: from User ([82.128.3.119]) (envelope-sender <mr_kimwong@etorq.net>) by 211.154.152.136 with ESMTP for <pondillobelle@aol.com>; Tue, 09 Oct 2012 01:25:27 +0800
Reply-To: <mr_kimwong@yahoo.co.jp>
From: “Mr Kim Wong”<mr_kimwong@etorq.net>
Subject: Your assistant please
Date: Mon, 8 Oct 2012 18:24:46 +0100

FROM: Mr Kim Wong mr_kimwong@etorq.net Reply-address: mr_kimwong@yahoo.co.jp SCAMMERS THIRD EMAIL-ADDRESS: pondillobelle@aol.com

Why would anyone need three fake addresses and fake IP’s just to send an email? Only scammers go this far to confuse and hide their identities because they’re cowards who lie, cheat and steal 🙂

 
Leave a comment

Posted by on 12/07/2012 in Lottery Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: