RSS

Tag Archives: Donate

“Elena Dion”

warning_gif

CHARITY SCAM – NIGERIAN SCAMMER

This scammer has emailed me more then once with a fictitious charity proposal

Return-Path: <elenalove65@libero.it>
Received: from outrelay02.libero.it (outrelay02.libero.it [212.52.84.102])
by mtain-dh10.r1000.mx.aol.com (Internet Inbound) with ESMTP id 27FEF3800008B
for <deleted@aol.com>; Wed, 6 Feb 2013 10:22:52 -0500 (EST)
X-CTCH-Spam: Unknown
X-CTCH-RefID: str=0001.0A0C0208.5112752B.018B,ss=1,re=0.000,fgs=0
X-libjamoibt: 1821
Received: from wmail22 (172.31.0.74) by outrelay02.libero.it (8.5.140.03)
id 510795EF012DFBD0; Wed, 6 Feb 2013 16:22:19 +0100
Message-ID: <26603672.9004711360164139673.JavaMail.defaultUser@defaultHost>
Date: Wed, 6 Feb 2013 16:22:19 +0100 (CET)
From: “elenalove65@libero.it” <elenalove65@libero.it>
Reply-To: elenalove65@libero.it <elenalove65@libero.it>
Content-Type: text/plain;charset=”UTF-8″
X-SenderIP: 41.82.82.128
X-libjamv: Yq0Jw3qVR+A=
X-libjamsun: NMZhUO1EubgNhZkHzyHiYXa/C0/q1pu4
x-aol-global-disposition: G
x-aol-sid: 3039ac1d411e5112754c332f
X-AOL-IP: 212.52.84.102
X-AOL-SPF: domain : libero.it SPF : pass

Hello, I am elenadion,
How are you? hope you are fine and in perfect condition of health. Please I
went through your profile and i read it and took interest in it, please if you
don’t mind i will like you to write me on this ID ( elenadion51@yahoo.com )
hope to hear from you soon, and I will be waiting for your mail because i have
something VERY important to tell you.
Lots of love
elena.

 
 

Tags: , , , , , , , , ,

“Mrs NicolE MaroiS”

CHARITY SCAM – NIGERIAN SCAMMER

WELL GARSH DARNET, COMPLETE STRANGERS CONTINUE TO SPAM MY INBOX TO LET ME KNOW THAT THEY’VE DECIDED TO GIVE AWAY MILLIONS OF DOLLARS AND HAVE CHOSEN ME TO WHOM THEY WANT TO GIVE IT TOO! AMAZING, RIGHT? WRONGGGG!
HERES ONE OF THE EMAILS I RECEIVED:

fake-charity-scams

I AM MRS.NICOLE MAROIS, I AM A DYING WOMAN WHO HAVE DECIDED TO DONATEWHAT I HAVE TO YOU/CHURCHES/ MOTHERLESS BABIES/LESS PRIVILEGED/WIDOWS.I WASDIAGNOSED FOR CANCER FOR ABOUT 2 YEARS AGO. I HAVE BEEN TOUCHED BY GOD TODONATE FROM WHAT I HAVE INHERITED FROM MY LATE HUSBAND TO YOU FOR GOOD WORK OFGOD. I HAVE ASKED GOD TO FORGIVE ME AND BELIEVE HE HAS BECAUSE HE IS A MERCIFULGOD I WILL BE GOING IN FOR AN OPERATION SOON . I DECIDED TO WILL/DONATE THE SUM OF 4.5 MILLION DOLLARS TO YOU FOR THE GOODWORK OF GOD, AND ALSO TO HELP THE MOTHERLESS AND LESS PRIVILEGE AND ALSO FORTHE ASSISTANCE OF THE WIDOWS. AT THE MOMENT I CANNOT TAKE ANY TELEPHONE CALLSRIGHT NOW DUE TO THE FACT THAT MY RELATIVES (THAT HAVE SQUANDERED THE FUNDS IGAVE THEM FOR THIS PURPOSE BEFORE) ARE AROUND ME AND MY HEALTH STATUS ALSO. IHAVE ADJUSTED MY WILL AND MY LAWYER IS AWARE.

I WISH YOU ALL THE BEST AND MAY THE GOOD GOD BLESS YOU ABUNDANTLY, AND PLEASE USE THE FUNDS JUDICIOUSLY AND ALWAYS EXTEND THE GOOD WORK TO OTHERS. AS SOONYOU GET BACK TO ME, I SHALL GIVE YOU INFO ON WHAT I NEED FROM YOU THEN YOU WILLCONTACT THE BANK AND TELL THEM I HAVE WILLED THOSE PROPERTIES TO YOU BY QUOTINGMY PERSONAL FILE ROUTING AND ACCOUNT INFORMATION. AND I HAVE ALSO NOTIFIED THEBANK THAT I AM WILLING THAT PROPERTIES TO YOU FOR A GOOD, EFFECTIVE AND PRUDENTWORK. I KNOW I DON’T KNOW YOU BUT I HAVE BEEN DIRECTED TO DO THIS BY GOD.

YOURSFAITHFUL FRIEND,

MRS.NICOLE MAROIS

Return-Path: <renuka_paraskar@yahoo.co.in>
X-YahooFilteredBulk: 106.10.149.21
Received-SPF: none (domain of yahoo.co.in does not designate permitted sender hosts)
X-YMailISG: JzdO8hMWLDv6w53Ao7xVHXYQuqjgNCmhDx3Yq3Fy_88Lzhdc D8z7R_2_r4hTX7nFgWzJxOHiEOsxXYJUKcgsnthZ1VKF1SQNJ57F7gVDW6tA OVWpTfYFwfhZLyhnlrTQ7fuJMZUwEyJSRH2hnUMofruS5krdEXJcvl5ed0Ag HyqDbvR5AtPw.88UP6Za0qQk7X2vmlgl0psRCxq6.HwTBJWvWTXrYf8hH0wG SoVPzNDHcorhJtTUD8_FNWUFt7gebI.oibSzKeB2z1BmwMHJXIpYsD.gA.gx kGPPCJQvxVKKRx9m360eg0YZlQMDNRc7UqgmL6f_AaOFLxshKRvXbydpJ7IO e0An2jzRQmitkHwBsktdHPVEQs8MlwbGh1JpMGf7pgYQyYvYGX6Mf2hNd0KA bTBwfWKBCsQEAycm.touMBtJUU1JWku.Bz0_JXY3C18UYXrBSoR1Kjs1ZJpU kc.tyeTWv5APxM_f.v1PHFWgla3hIZYPGMJ6Crt1AphNXQd8WzmFi2M1GVte L3DAYM7n_avPOFoTvS5ZnHzbolzukEUHPm0aV1t8JYghoIwqUU68fgIpZq5h nHKEZUo025DLmnSFCRUy_5I2SdW1Eamw2umfIfFVD5Se.5N.LR7kiqqbarZr fqJclqXrzBHEBHNZX1XiekJ.qTfLgwDjafEFguPC42O.IuGYZ722f2Xs16xr vmZiwK0pgYyGuC8MBMk0wB6uEKVvJ.rrewvS2mM6u95weuPVIZ5X.tycFnki 8jN1IL16iwefkT7Lft2TQRQbjLSk7wt7QmddcKy..fYsAbWis1nsebrZFk7Z 5R44pbQWn6r61I5PAVVLA.807Wm6qU_BLL9I.naBa5GRFmK9nYM6E1ux796p ZKWovZ2uBWi5sn2xplCc4XoV8st2W2itnoquhk9GkPJZjWm9WHkseLuxHxQa 7pT_fIST68rtQ6gy7OZWMIDaOKo_b4JP8jedNSOeaA9VVgl3P3T7S560h8m6 ml4A42GaqppmdIQptUtyqAGCsAll8VAEh0EbzuJfAFu5TvUa4rxn4ADkEETh EqAQXvLceKqtdPOmq34nRIiX0bNnkoIjem5sMtr3QYis04tVYKXwF17AgVSC GgT9DxysY2rxCN8LG.CeEcdVSohIYOCh4U98qr8Unz5zRbb0jEwikQ_REEua qpR6ZUM3.sf29ihaSy6TgwGXRK9GtbE8xRkTu9TlOaFxIbB1N6zPeUNoIcHX kUpyNwH8wo6Ukcs7Cpqv7n6Gv4faKm3jThPf5xrNnFpnxOEogauqpeWA12ky h3Ou_YfEcRoH2iOJ6SpklEHtz4WMmD7fZqRsxxN4y6VAb9vGz_xEf5IZkqe5 DiE_5lllg8f5IlGBRb6lu.bdww8KcDODGrgEclVJi8kyvMtGpAZXp5xFh226 RqZScsGKrw–
X-Originating-IP: [106.10.149.21]
Authentication-Results: mta1483.mail.mud.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=yahoo.co.in; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm13-vm6.bullet.mail.sg3.yahoo.com) (106.10.149.21) by mta1483.mail.mud.yahoo.com with SMTP; Fri, 25 Jan 2013 00:30:57 -0800
Received: from [106.10.166.118] by nm13.bullet.mail.sg3.yahoo.com with NNFMP; 25 Jan 2013 08:30:49 -0000
Received: from [106.10.151.139] by tm7.bullet.mail.sg3.yahoo.com with NNFMP; 25 Jan 2013 08:30:49 -0000
Received: from [127.0.0.1] by omp1007.mail.sg3.yahoo.com with NNFMP; 25 Jan 2013 08:30:49 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 320784.56974.bm@omp1007.mail.sg3.yahoo.com
Received: (qmail 51248 invoked by uid 60001); 25 Jan 2013 08:30:49 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.in; s=s1024; t=1359102649; bh=MkT4A66/nnMis3NIfuNpmv7PwlddDIzOBxApgWALass=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tx+q+ATch/l91xNTIs4LtCE3pLUuXr1/OjzjLANn7YOiTJMeUUq6YCYNj2GdSkVA2b2tycnq7DoFFNFcaWP/6hCMy2gTxxbd0yh9ObD+7w6zMAA4fEAkIaALuiEmTA3U4d1AqKjuT6FIl3sRirduFfL5LNOZE9uZ3/ZyAKhMBNg=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.in; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=G5aCTtB7CYhaDUoeX6ROPLO5Fc2AKNJqil1jvJSbYilzFE5c1BhTTKsgPyYR6wqL9PuAjQdYq0E6cbrwDbrwT9ffccgBsIU6AeLcxrLMT63yADvllYZrkL5De6f5WzddOq9RNJBdYXUxEWK4EM87ElM6FLz1oly9YvR70/om9aU=;
X-YMail-OSG: A8fYJeIVM1knik8lRAXsN51lzzrE6lyiLdDBc1fCSuU7pIH vjWMptkRavF6XPUrCay5TtchgkVVd4aRSw77Sga0e_typ8tRnrs.L_of9KqC cuammFu_MM5NVWr6g2RoIjsY.AqeO9zqbc..PA4opyMTMY5DwUzKIcdu7ALA wUyjklzLrE5NdF48c3WHCXI7IHeFUtCmJxeSfw.fmh5LONKRaf01la0iJmuR NQRAQnZ0iqGx1ilrkMTthnrY1MCz4CS7wrNL.iSMsPfYfVqzeNP2_nHwA9Mi n9wpZs.NVi.5SmWFxTQheIs2GqkV1euhK9yU1H_RpgOz5zPdrTA1HmpunvCO eEbJFmqga7_v8Aghv7qeNNUfYkF7I_.OVpWEqxltmgfNOATaE2WT_UmTWAZr _HLiXw7bP9lC2.sB6fikGEtDji9aZQiCauD9hlIvmlM6jiQuYwwywKzL3ohw 35y3nPbb3223fvUNi9NrGtfnN1pfM5SKWrkjz7_FbX6x1q7HxZtZKPkcyqhz dlgOSoGwRoifwVO93QisoEyzf_lFdp6eotvSsPkvw7tWDSNqc3vPeFMg_TWS QUi._bWNgEP2RFHxTTO8-
Received: from [41.203.230.61] by web193601.mail.sg3.yahoo.com via HTTP; Fri, 25 Jan 2013 16:30:48 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1359102648.47005.YahooMailClassic@web193601.mail.sg3.yahoo.com>
Date: Fri, 25 Jan 2013 16:30:48 +0800 (SGT)
From: Mrs NicolE MaroiS <mrsnnicole2012@gmail.com>
Reply-To: mrs_n_m_2012@rocketmail.com
Subject: I AM MRS.NICOLE MAROIS
Content-Type: multipart/alternative; boundary=”2063643590-804923988-1359102648=:47005″

I AM MRS.NICOLE MAROIS Friday, January 25, 2013 8:30 AM
From: Mrs NicolE MaroiS mrsnnicole2012@gmail.com RETURN-ADDRESS: renuka_paraskar@yahoo.co.in REPLY-ADDRESS: mrs_n_m_2012@rocketmail.com USED_IP: 106.10.149.21 RECEIVED_IP: 41.203.230.61

 
 

Tags: , , , , , , , , ,

“Gina Jose”

CHARITY SCAM – 419 SCAM – NIGERIAN SCAMMER

01/28/13 UPDATE – RESPONSE FROM GINA JOSE – I’ve included the header details from both emails because the scammer is using different IP addresses and email addresses in each email.

stop_scams

Greetings
I know that this letter may be a very big surprise to you, and I believe that you will be honest to fulfill my final wish before I will die.
I am Mrs. Gina Jose, I am 58 years old, I am suffering from a long time cancer of the breast. From all indication my condition is really deteriorating, and my doctors have courageously advised me that I may not live beyond next month, this is because the cancer stage has reached a critical stage. I was brought up in a motherless babys home, and was married to my late husband for twenty years with only one surviving daughter and she is under-age. my husband was a very successful business man in Gold, but Unfortunately my husband died in a fatal Auto accident.
Since his death I decided not to re-marry, I sold all my inherited belongings and deposited all the sum of $1.9million dollars with a Financial Company. Presently, this money is still in their custody, and the management just wrote me as the legitimate depositor to inform me of the maturity date of my deposit or rather issue a letter of authorization to somebody to receive it on my behalf since I can not come over as a result of my illness, or they get it confiscated.
i am from FRANCE, but i resided with my husband in west africa, but Presently, I’m in the UNITED KINDOM where I have been undergoing treatment in the hospital. I have since lost my ability to talk loud and my doctors have told me that I have only a few months to live.
It is my last wish to see that my fund is invested in any charity organization of your choice and proceeds distribution among the charity organization, the motherless baby’s orphanage homes. I must let you know that this was a very hard decision, but I had to take a bold step towards this issue because I have no further option. I hope you will help see my last wishes come true.
As soon as I receive your reply I shall give you the contact of the Financial Company. I will also issue you a letter of authority, which will prove that you are the new beneficiary of my funds. Please assure me that you will act accordingly as I stated herein. Hope to hear from you soonest.
Please kindly write me
Yours Faithfully,
Gina Jose

HEADER DETAILS:

Return-Path: <.@koulouba.cenatrin.bf>
X-YahooFilteredBulk: 212.52.128.2
Received-SPF: none (domain of koulouba.cenatrin.bf does not designate permitted sender hosts)
X-YMailISG: Hs_mDrYWLDt2aAwGjtpsXghIgXIm36xCbmUZWyCLIzi5M9mL TkEAWJ_xaIWtf_vlhhAz0k7xC8YK60F3_MCbd6S_eKZqB9ksH2DkpIFqXNlf ErJjdWDGNYtA7rxaD0bTrGQGOOnyTKS31d56kfn1ddQh3xbtIXsWi4_EnFJU 2DV_nFs9cQeFTqIPDo9owIMgoIwCRbTlBEy_6lqShGxVGhfdf14SRL9cn33k VfXDQyrnyHMbFfs9dMwtjU0Jnk2PS7bLhH43nW9LDPjxBGKIBowxkO5qKeGr sXzJI1Sf5iw_jgEjSXCjp8Zwecwhaf8Ya76Oza1rfcvrLsuB3OW6kRQ0IE2E gs.oXWz4bo.DsQyMQS5ZHVfZrVAWt6njmI8Rz5oB.uEQ7i2O3K4uCcP5eOPZ 37NIBT0sW_i.a7K5glROt3TP5aaRa8bhnSIh7d2X1GcoFiEYoENain521ltJ WvkXGzdw9kv55he1_aYW.R.pznF5tu2jDXiMr3QJfjakuWqnM6lFneneBG5q eDKr31juuFUiQpXZTnegZ4Q9S1okiEcKdT8QGvLHPkzjnGOki6Tn_K4JRFt1 EEZVk.gxXgwiugr7s61yPhtpl1NS3gYzCLPX1CAUAhEzXPBzalzfSIu3J8kP KffOnR0K3h.WeAm8bYUxYIrnWJYnPU1n2OWnh1e0tmVIkAPxL6yEHVfZ4VWx W2YEwLK5nCctPUA9l4m55UmqiEr.rgb0mePdeA5y6y.x4WbGXpx0j9Ic6Ewi lFtmCFCcYJ50WZ2n5mhm20kI1pZKnIup1G7yiWLVgBWCEaeiRuBma8ZpsTwA 7NDAB35O6zDTTostolGZ7rN5C2Zg3mTdykech1AQkDiTX0MkIpcemKHyRzA7 z4eXzQUCHUuUl_sRlVuNhbbOkaJUygp5tHeNvRSuATLoSXrFKs.QRhCAn70t TV_BE8mvC0hH6kalwptOSu91NKkI.cLcB3K8woy9_VPmQgB4XxDrL7Q01UJ1 qp7jrJmsKfkFjccPtbaawk7bViZSGu7FhowAhyVfzpVa4j8KeabOXacQ8355 m3y5wiDfRSgGS2cdXgr1HZbYROa8Lp6bkt2N7OMDeE1B3L8JmmPNtMFoNJu3 UgAQrohWRgrn6zBcGbI_ZFl10VvFbchiBsRDvchU.LqdUTHCK4u05qIt2xIU E27fP9jXaC1q
X-Originating-IP: [212.52.128.2]
Authentication-Results: mta1257.mail.sk1.yahoo.com from=koulouba.cenatrin.bf; domainkeys=neutral (no sig); from=koulouba.cenatrin.bf; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO koulouba.cenatrin.bf) (212.52.128.2) by mta1257.mail.sk1.yahoo.com with SMTP; Sat, 26 Jan 2013 23:33:33 -0800
Received: from localhost (localhost [127.0.0.1]) by koulouba.cenatrin.bf (Postfix) with ESMTP id 48216349A6E for <deleted@yahoo.com>; Sun, 27 Jan 2013 07:30:17 +0000 (WET)
X-Spam-Flag: NO
X-Spam-Score: 6.316
X-Spam-Level: ******
X-Spam-Status: No, score=6.316 tagged_above=-10 required=6.6 tests=[ADVANCE_FEE_2=1.234, ADVANCE_FEE_3=1.432, ALL_TRUSTED=-1.8, AWL=0.000, BAYES_50=0.001, FH_DATE_PAST_20XX=3.188, HTML_MESSAGE=0.001, MIME_BOUND_MANY_HEX=0.803, MIME_HTML_ONLY=1.457]
Received: from koulouba.cenatrin.bf ([127.0.0.1]) by localhost (koulouba.cenatrin.bf [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C53zb0DaCJSY for <deleted@yahoo.com>; Sun, 27 Jan 2013 07:30:16 +0000 (WET)
Received: from user-PC (unknown [212.52.159.74]) by koulouba.cenatrin.bf (Postfix) with SMTP id 1481B349A76 for <deleted@yahoo.com>; Sun, 27 Jan 2013 07:30:14 +0000 (WET)
From: “Gina Jose” <“.”@koulouba.cenatrin.bf>
Subject: =?iso-8859-1?Q?From=20Gina?=
Content-Type: multipart/related; boundary=”1773bde9-9d44-48bc-9160-7cf218fcf732”
Reply-To: ginajose070@gmail.com
FROM: Gina Jose .@koulouba.cenatrin.bf <> “.”@koulouba.cenatrin.bf REPLY-ADDRESS: ginajose070@gmail.com IP_USED: 212.52.128.2 RECEIVED_IP: 212.52.159.74

01/28/13 RESPONSE FROM GINA JOSE –

Greetings to you in the name of God as i pray that this message meets you in good state of mind and health, and i thank you so much for responding to this urgent call of mine, May God Almighty be with you. all i want you to do is to help me realize my last WISH, i contacted my bank to inform them that you are the beneficiary to my fund.

i would have loved to meet with you, but the problem now is that i cannot travel because of my condition.
I am from France but i have resided in Burkina-Faso for many years with my Husband before he died.
all i want is your promise to carry out this project. you will take 30% of the amount then use 70% according to my WISH, by USING IT TO SET UP A CHARITY ORGANIZATION PROJECT. i will explain everything to the bank.

Please kindly Send me this information’s below.

FULL NAMES
OCCUPATION
POSITION
PERSONAL MOBILE NUMBER
AGE
SEX

This will enable me write a letter officially to the Financial Institute, Identifying you together with these details i am requesting, to prove to them that i selected you to receive this fund legally as the beneficiary that has promise to assist me run this project, as to enable them start attending to you and release this fund to you as soon as possible before anything will happen to me because i am now very weak.

Please, remember to put me in your daily prayers.

HEADER DETAILS:

Return-Path: <ginajose070@gmail.com>
Received-SPF: pass (domain of gmail.com designates 209.85.216.67 as permitted sender) aSBwcmF5IHRoYXQgdGhpcyBtZXNzYWdlIG1lZXRzIHlvdSBpbiBnb29kIHN0 YXRlIG9mIG1pbmQgYW5kIGhlYWx0aCwgYW5kIGkgdGhhbmsgeW91IHNvIG11 Y2ggZm9yIHJlc3BvbmRpbmcgdG8gdGhpcyB1cmdlbnQgY2FsbCBvZiBtaW5l LCBNYXkgR29kIEFsbWlnaHR5IGJlIHdpdGggeW91LiDCoCDCoGFsbCBpIHdh bnQgeW91IHRvIGRvIGlzIHRvIGhlbHAgbWUgcmVhbGl6ZSBteQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzc-
X-YMailISG: 5T47JY8WLDt5_8aK8CqhLEzOps2kuqFvzjYGYWweqZyAQa91 021pDM3AFhid85T6pMmiDuUaVcXWza41FkVeRCzvV0UXBy2RKjnz1otGCUZ_ 0jTJrsnf7l4wO_Hmaa33jRGlghPHYw6TnAPnBmKHx1NUKh9NvWk3XKmH5kbB _y.8YULv8MhTjkfgTfEbUviXwf0OvUyyA9ttcXiVuucgi1AjREuyC6KuMsDk SsYaYxSmQ7C0eBf0HUhAw5hEpzSbjiUfxr5tm5_0ZhnL2Mi0pev7IP76_lZS TksiZDLO.69HDl.CZTjp_97KcQrDEeYHIbN8niW4dPughbtEhtGBp3DP3H.D yc9VvXwWg7WWmsFDFWfbU4zqmvovvns2_856zrLagt7s40vQko1BvzwtncnD 4DgZFbSdRXapO.EmvWPYDgZ7HcufAMWcXGmChtEuSjk0QUO.fCPuwGaMTQDm gXEUM91SFM1jDyKyLK41oBRNo7KUzNcnjtjUGsRjFUDT97OnDbNSlEx0kXM9 ehqXvmAtvEtPwWEKDXtJpwodkqRp13MuMAXUFOLnEf0ksUldyPvcNwtb1VEo oH0Rntz1pVcYOU_LnlfGq2O2FKu0fKqELu7e6SPjvC0StFX7RCCfOwnECcPW GRBqytOX5dwwWidJuwYWf74k0LJt9BYjDWk9oDunOqbzQnCSEP2kWn0ro3RG ZBK3HKeZBYtwCeYJM02u2GJNTDWkIFINcN563uUZAoP438TgMmniVR9vvEi_ 2AC7cuDp14Pha0d05UhwauMRvP.TcG6GBmSrnzAe0dOJOyBG3etf4IXw4Jbi 2uEFiFQTOrGKPAHsy9EVa1ITr7SIQ9GUXaBG4KAOLpSrYaGiXqh3nGEenqjz cruCrS.pRdJJPdbgvPFzVfDkaF2XCdcntExQqMIKmLdU3v73B3bEHS_d.Mkw mR9FtcWULFUjHMAu4zXEeMSKBCBMMPneHlo_oHUCsy5ciFSNftgiQheaTxyJ IvMFafp_KIxSKqzsEKFJTyfsjY1UARfODr5PJPFiCb329KNTT9joFX9PjnaW uHD9iKycgcSemhqkTK5IAB649DbDnimx2am7_zuJKJQxo.ne0qVZ1gjxtXPt 5FP.k8c6f9oKZCN3LD.hJI3mOhwnOAn9SKS1zC01yesLXNazL3QX3g4wxF.B OHfJPtvdcvZ6PhG0x.B2_zJvQ1P_yEaqIfATTSvrd1BsU2taRgi2eza1rn5X MiZ6b_HgfkuvmjHAVvBtNKX.AEUTvsImXXL3Jq6dFaVNnGLUpKmC2XmKEjSn BJX6B3ZSZWukssyu3fw9i_SyDOU_rDk.26yB5LxLbHIz_aFu.qvTR9oHNIHZ gOzJFHKZ9rrtWptaMCMzoD5fuIy.qlP1i1rfd_HjWonOo0mn
X-Originating-IP: [209.85.216.67]
Authentication-Results: mta1284.mail.sk1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-qa0-f67.google.com) (209.85.216.67) by mta1284.mail.sk1.yahoo.com with SMTP; Mon, 28 Jan 2013 07:02:33 -0800
Received: by mail-qa0-f67.google.com with SMTP id bv4so390355qab.2 for <deleted@yahoo.com>; Mon, 28 Jan 2013 07:02:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:content-type; bh=mZUYb4uMmA7+IXP62BOsBzsxWaO5ceJXtt4TeDufiM8=; b=tqduSfE10FPeWbxp7g++NxxB5cw1aqqTNthq2/kXpgXPGOdOg6OyWs0myq0DbS4/nO XsEviE9MA7AA5E4othyGRj1w34d1mRN+x5lnRwZ3CE5tXkatkNn4JArcBlK1kPEdPFOz EKSqJX4gv4/liXleo2x2eFZyZKnmx4m/vd2lMaaAFKEWw8Vb/jwBA+FXPazmpM0f1T+S qxjXly4C+UcOYYZOw0rdkYLjZSHmwkuHQhvTmHI7cXkuUvWnrdj6UGlS40B18HPUGhjb SAui4fuNRHwtg7a46pWP3zheuNf1jubnC9v4FDbNCv72WAaE45EJNp3rqt8RkfYjc147 K+KA==
X-Received: by 10.229.37.205 with SMTP id y13mr3794091qcd.94.1359385352399; Mon, 28 Jan 2013 07:02:32 -0800 (PST)
Received: by 10.49.14.131 with HTTP; Mon, 28 Jan 2013 07:02:32 -0800 (PST)
In-Reply-To: <1359279980.81167.YahooMailClassic@web161001.mail.bf1.yahoo.com>
References: <20130127073015.1481B349A76@koulouba.cenatrin.bf> <1359279980.81167.YahooMailClassic@web161001.mail.bf1.yahoo.com>
Message-ID: <CAJ8ikZb9fYvS+4Bo_On5yPgzT7t3QTRT_0ME_KqsS8UTZk023A@mail.gmail.com>
Subject: Re: From Gina
From: Gina Jose <ginajose070@gmail.com>

Gina Jose ginajose070@gmail.com IP_USED: 209.85.216.67 RECEIVED_IP: 10.49.14.131

 
1 Comment

Posted by on 01/27/2013 in Charity/Donation Scam

 

Tags: , , , , , , , , , , , , ,

“TOBY DAVIES”

WARNING – INHERITANCE SCAM – PROPOSAL – FRAUD

There is two emails from this scammer with the newest email, which was received Jan 27, 2013, first, then below is the email received Jan 19, 2013. 

Hello,

I want to drop you a quick note since i did not hear
back from you concerning the information I sent you the
other day. In case you did not receive the letter introducing my
intent, I am Mr. Toby Davies from UK. London.
I was a personal associate of late Mr. Rafik Hariri, Born in Lebanon
in 1944, the late Rafik Hariri was a Lebanese self-made billionaire
and business tycoon, He was five times Prime Minister of Lebanon.
Please you are advice to view this site for confirmation.

http://www.rhariri.com/general.aspx?pagecontent=biography

I got your mail through my private search and out of Desperation I
decided to reach you through this medium. Mr. Rafik Hariri deposit
759,000 thousand Pounds in a bank here in the UK. Before he died. I am the only one aware of this deposit, and have 100% access to transfer this said amount since I have all necessary documents to do this.
I want to invest this money in your country; the need to move out
this money arose when the United Kingdom Leaders generally agreed
that some of the money held in dormant accounts would be used to fund
youth and community projects. You can confirm this in the website below.

http://news.bbc.co.uk/2/hi/business/4017381.stm

I am in a sincere desire of your humble assistance in this regard.
Now permit me to ask these few questions:-
Can I completely trust you?
(2) I am ready to offer you 25% of this (759 000.00 Pounds) I hope
it is acceptable by you?
Please consider this and get back to me as soon as possible through
my personal email address: tdavies02@live.com

Thank you so much.
Mr. Toby Davies.

HEADER DETAILS:

Return-Path: <tdavies04@hotmail.com>
X-YahooFilteredBulk: 81.193.115.129
Received-SPF: softfail (transitioning domain of hotmail.com does not designate 81.193.115.129 as permitted sender)
X-YMailISG: 00fI17gWLDtIE7JXMfZpgfJIpYYzZiyL8cETtUWseiFMn6xE sbMTvEIaIpv_R55BGTKG1y4D33CwCjrgZOxkHG1AC5QBNlurdcDQjNZRJiUE 9_uzIwekMQldl4ZFQ2.4ncHXYZn91WA3N_h1tM3pI0XX8nWzbIwMWB5ocgsn XsSkVkLjvCrE.y3YgLha6Oq0PSew5XSRl3WGPj10nHpCkXTaAtznbdcVKZor XN7.FHoulp.jucqqADE4L.ayoo_pKfPoGCGpwfQZkj9gaMmqvgqMA6YCbTB1 JMgpDza7u_7EixqtNzifAUhRq7kYzyBooNKFkw4N_RWBDBX3x8YRVoUzLCdq idLeTZuiOBLndQYv3uC1g1fTuuB2XYZsZa7qQN5clUTMmh3CAxVv42fxiv.z EudVHH87nFUmcOJASbe_f992gXfc0hPFx_KG3mx1255wsXRhBjmPwnP3eBaL HMA8SurQsnKAxggdrRXrQBktAW1IE7_CKGwt1e8XtRCo6QzphClOSKISBEZM t76Jq4QMqkCbGvHRiw0K3EgP5ObmyORa.Ej9AveYa06SsAbFHtbiBl6t2XvG TdFYFzy4woQeBQKI0cC9nYqE6CGHqcyCIdXNd4g3N6Fidakt40wNpFxSbGzG e8Mf85ElnMPVM1txTAeNqdUhln9HOjwQq9ssrUWNUeDyrdroi6VXIajKuCq_ YK7h4LL_u_6Xfukj7GmQt6OG_womyV4d.VgLTYrebyyEHucy5OWiJ7oDUuFH ITbQUlYQFi6F8bwI6ybVrEyt7c6k_L2scx3o5HEwlkWa4VcANsDzObyQls3z mwDafe1RKpXKlRvvlPHkza2kAWUHGLnoxzV9h6Q0D2L36qwTmFXmMN37oS7n 7oT48j96i7mL2HMzJads3CiCiJR5DIJ4rEXvS81zFXL0OQdB.bvR67vE6KfI RcDbl.MRJael1.tYqsmx7xigJs4uT5bbtar811zyGknbbt6MrNKH1OiPtU7U 4XA_S6vmLVbKcH0OaYEaLr_kwiAP0bMtDuGjjtj7Q.Reoyu08T4PXJpRvqTi 0WM53kFTMIj.h7WkZv3Rc9lqK17UzwV2rSdynTOiHykk98mPUIpSTIp3BvtS 5X0gjOTUHkz8qYaaa4zZ7auEMVkAled5HOsL19VjviM_kMo5BfPTu4h0hr5z FRFTUGAsIM1lgqokUah510sa2pwYqN2Fx2AgzJBWv.cdWZsB_SGcqCflq9Ai l0GuLOOI3ppPcC4S_Ook5eqvOTQ8mAWSYdis6D5uO1xRyBiCt_d6M1PiedLp zt8scCMKSVN9M_TI4c9PxcrFl3QvCDtLSMhFKEkio7WjfXJATLbn_NiscDcb NzX5srvP9aVN6VTTDbdk9X_7vQow79FncPN5sV4guoR9q3TT3tMW8JJFkkqd V1MFDrpyfC7OTqUy7dRbQJuC55t4W4wTenb.373yb9__H470NK.pu3PnV7j5 mC4xLl6pSSzBnRuwVrwtSME5zSaGaHpGqqXt4YiPgccjh5Z6YxVtUvmJVh5n yqI4UUaDwoBJ.I79qXSNCnG19fOZI8x51bdhjtXRbKHkB5be3BRtOEX7fiNV MCfp._RmNUkRpJFseBB.L1XQfB46uNH5GFRkqKjoLZBOWvkPkbEPcraPKDLW P6VeOVihB6ks2R1p.lJLU1rdp2suFmHpiPLzK09ZhC_Pa_h9djHkk0IhIAdS Yqh_tM1w_T4jaW1s.8gjHYEPAlj2pi0m9DXoaRaaqliZGEX6AkEbSs6T3Lhm bHBUGWMBBwUE
X-Originating-IP: [81.193.115.129]
Authentication-Results: mta1290.mail.sk1.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.cardosoeconceicao.com) (81.193.115.129) by mta1290.mail.sk1.yahoo.com with SMTP; Sat, 19 Jan 2013 02:59:29 -0800
Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.cardosoeconceicao.com (Postfix) with ESMTP id 83E868F62B2; Wed, 16 Jan 2013 12:04:32 +0000 (WET)
X-Virus-Scanned: amavisd-new at cardosoeconceicao.com
Received: from mail.cardosoeconceicao.com ([127.0.0.1]) by localhost (mail.cardosoeconceicao.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AxidReusR4iH; Wed, 16 Jan 2013 12:04:32 +0000 (WET)
Received: from [192.168.0.6] (h-66-166-167-203.mclnva23.static.covad.net [66.166.167.203]) by mail.cardosoeconceicao.com (Postfix) with ESMTPA id 97D808F629F; Wed, 16 Jan 2013 12:04:25 +0000 (WET)
Content-Type: text/plain; charset=”iso-8859-1″
To: Recipients <tdavies04@hotmail.com>
From: tdavies04@hotmail.com
Date: Wed, 16 Jan 2013 06:47:02 -0500
Reply-To: tdavies02@live.com
Message-Id: <20130116120426.97D808F629F@mail.cardosoeconceicao.com>

tdavies04@hotmail.com <> tdavies02@live.com RECEIVED_IP: 66.166.167.203 IP_USED: 81.193.115.129

Hello,

I want to drop you a quick note since i did not hear
back from you concerning the information I sent you the
other day. In case you did not receive the letter introducing my
intent, I am Mr. Toby Davies from UK. London.
I was a personal associate of late Mr. Rafik Hariri, Born in Lebanon
in 1944, the late Rafik Hariri was a Lebanese self-made billionaire
and business tycoon, He was five times Prime Minister of Lebanon.
Please you are advice to view this site for confirmation.

http://www.rhariri.com/general.aspx?pagecontent=biography

I got your mail through my private search and out of Desperation I
decided to reach you through this medium. Mr. Rafik Hariri deposit
759,000 thousand Pounds in a bank here in the UK. Before he died. I am the only one aware of this deposit, and have 100% access to transfer this said amount since I have all necessary documents to do this.
I want to invest this money in your country; the need to move out
this money arose when the United Kingdom Leaders generally agreed
that some of the money held in dormant accounts would be used to fund
youth and community projects. You can confirm this in the website below.

http://news.bbc.co.uk/2/hi/business/4017381.stm

I am in a sincere desire of your humble assistance in this regard.
Now permit me to ask these few questions:-
Can I completely trust you?
(2) I am ready to offer you 25% of this (759 000.00 Pounds) I hope
it is acceptable by you?
Please consider this and get back to me as soon as possible through
my personal email address: tdavies01@live.com

Thank you so much.
Mr. Toby Davies.

HEADER DETAILS:

Return-Path: <mario@cardosoeconceicao.com>
X-YahooFilteredBulk: 81.193.115.129
Received-SPF: pass (domain of cardosoeconceicao.com designates 81.193.115.129 as permitted sender)
X-YMailISG: rjCBn3IWLDt9C0.z07ff50HlGys7P0FLTF_ZGWhKSLDGBR8P cjB9Z3XZIiZWXx80x_RxOg4eKIMgZTacNrIIQK4LFttPIAQ5HzvaUQT27u_2 QxLJ3ysBHWvDBiDshXYjJulF19VKWrEjYMDnQtp6mcGuxqzaVz0HOV1x5A7q aFFhgAaLevStXgI75kFzYyPj51rmKp6X7RpOOMDX5xmBD7dzDjULRUXGDKr7 .OtaDFI8.9r3x4vF6.iBnAmOWnfs.cJ.z90DUeW1SoFLM_FDDYwdKaNmZqpI b49qMsUGjG6dzumWHImnwknyuGyJvWqlDPDgeI4zdQ5Rh4pskj3DXl4d3gjs aQnZI9Gu_Pmavek1C9zd1BAnNh2affyaGIjKesByZHigYzvChKcj4FmZQpXX uM69rR0Uqs2Pd.AOS81axmd74quEF2LA8QpvX_mG41ksyTrDeR2c9zT0hcaR kmuR6E7bZndQVXD3NQMtDX7k0BUf2wvzJEHmfOgZrRXIpzH.RU2NkFmV4yuE Y.AfXU39qLK1XlxdfuMfDMR9hM.hBW_uNH0TFmjXShefRBCf8mzx48X.JnRp b940yXXJw3PCK71RVNp76ijbK1zV5F.RhKfKmv8GWWfxKAaG.Ow8iGBKhOqp Svitp.7TpL6TvKcghNAFE7A8Ik1O3fAjZ1ZX83O9nd5X7Boqr.mrlahfGwZ2 g.mMeZ8I_gLidUlVLSYIoySUrKyv4BkjgaVFdJzLa.S1EEp49fm6sruglMd4 qBxA.Zj.nB2XlQLwnMrsBxWDVqct8bbdltkmsHRU2zCtWtB2TF.a7c76e.fg Qea3fQejq.GPrM4bxCecTWmPvf9avrtFCERB0C.SRfrlIyZmAQw.5_QPOMCB 77NG3CkmjuuKeMxHqnHcNVX.tcwzaJ1M_2n6tddXs1_mQqyEoH_jGZTuriJT h5Cg0AUMtfnMnNLEsTgyM_8IFiqwvz5.qA4iYQ6a2CmwqEBTahQ5rKAQk70d Sf1DdAeV4RFGFx2p3B46iQ.OfBOB45XpjzY7jfLL3WSVZOFpbOmftOJ3z7MK Ti9RsfjT2sXLyo9CTKo9LJ.yLJvCXwODDbNlckPvhvl6jMkb0sFaUFAemp2N dN4QCf0YutUc.aD17vgCFJ56qbDDUd88i0RBacY_WzbU0_0tWOboOIy68T.B 2ThuUxpFI8CKNCJn4XLEih.dQiVvXaHHMnEQ5NZl0_uTNWBOLA9WPiMznGtX tJ3dlJTkUzzsm3bbFM8SYRSBUcuXNNX_Y.Xe4Lri6qinPVvxcaT1WtH_YkaG 1Y4E2Yx9s.xaOTuycIRCoDaUr_vcUBSDlJ9bN6vDo4R2mxW.5VlNm9JS9R.Y HKK6mkJ.cOvORM0L0tw16joFbLr_Ak5zdYgMG6xZ7AjvOYekpM8qAZwC2HBO 4NqyIhgC2wZA5LgERwd1M1NotmcgLZ7iJxLdGkXoLMdN4lWzm8qR9ZvRJOQy 04xm7pLS3wDFfGyrFeg6Bq4YV11RXbuAqv.2IlWVfrvgg12MdkFAI4MDY4w6 03VklxDifldE3f_mXfhCCix9rHhQc1fI5YGU2zCmSy_eWuVxUMeSs3T3KHA2 MYs7Yf2E.2r2bYK._fJz0BPPymJwr5YldTL3yNqFwp71E0Ok8y9Ioa3xCY15 94MoroVbNgKFbA–
X-Originating-IP: [81.193.115.129]
Authentication-Results: mta1298.mail.ac4.yahoo.com from=cardosoeconceicao.com; domainkeys=neutral (no sig); from=cardosoeconceicao.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.cardosoeconceicao.com) (81.193.115.129) by mta1298.mail.ac4.yahoo.com with SMTP; Wed, 16 Jan 2013 02:22:47 -0800
Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.cardosoeconceicao.com (Postfix) with ESMTP id C408A45F2E6; Tue, 15 Jan 2013 11:49:35 +0000 (WET)
X-Virus-Scanned: amavisd-new at cardosoeconceicao.com
Received: from mail.cardosoeconceicao.com ([127.0.0.1]) by localhost (mail.cardosoeconceicao.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hXwSNtGolDvE; Tue, 15 Jan 2013 11:49:32 +0000 (WET)
Received: from mail.cardosoeconceicao.com (mail.cardosoeconceicao.com [10.0.0.206]) by mail.cardosoeconceicao.com (Postfix) with ESMTP id 9E6C945F283; Tue, 15 Jan 2013 11:49:29 +0000 (WET)
Date: Tue, 15 Jan 2013 11:49:29 -0000 (WET)
From: TOBY DAVIES <mario@cardosoeconceicao.com>
Reply-To: “tdavies01@live.com” <tdavies01@live.com>
Subject: HELLO FRIEND
Message-ID: <f9fec169-aee7-4125-b99c-b9c7af282c5f@mail.cardosoeconceicao.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
X-Originating-IP: [41.138.188.58]

TOBY DAVIES mario@cardosoeconceicao.com <>  tdavies01@live.com 10.0.0.206

ORIGINATING_IP: 41.138.188.58 <> 81.193.115.129

 
1 Comment

Posted by on 01/19/2013 in Inheritance Scam

 

Tags: , , , , , , , , , , , , ,

“PGFA | irene elvis”

INHERITANCE SCAM / CHARITY SCAM – NIGERIAN 419 SCAMMER

fake-charity-scams

NOTE: The first part of the email is probably a automatic email sent by a website and the scammer used it to send the below part of the email.

Hello,
I am sending you this invitation to join “The Pakistan Game Fish Association | PGFA”, PGFA is a non-profit organization committed to the conservation of Game Fish in Pakistan and the promotion of responsible, ethical and safe angling (Sport Fishing) practices through dissemination of rules, information and fishing records, its a group of like-minded anglers who have come together to build awareness on ethical standards of angling. Their charter includes a special focus on a catch and release culture which shall ultimately help in the protection of marine ecosystems, and Pakistan’s natural heritage.
Each of us is capable of making choices, having an opinion, creating a positive outcome and being a proactive member of the Angling Community of Pakistan.
Lead by example “Join PGFA” its FREE and encourage others to participate and together we can ensure that the Arabian Sea we have been entrusted with continues to teem with life.
Click Here to Join the Big Catch Race
Custom message from “Sender” to you:
————————————————————————
Sister irene

surprise since I don’t know or met with you before. First I must introduce myself
I am Mrs. Mercy.D.Jordan,a citizen of South Africa, I am 45 years old, I am suffering from a long time cancer of the breast.from all indication my condition is really deteriorating, and my doctors have courageously advised me that I may not live beyond the next Six months; this is because the cancer stage has reached a critical stage.

I am married to Late Eng.D.Jordan, a Diamond merchant here in Abidjan before his death on the 19th November 2008. We were married for years without a child. Before the death of my late husband,he deposited the sum of (6.300.000) Six million three hundred United State dollars in one of the Finance Security House here in Abidjan.

I want a church, organization or good person that will use this funds to help the
orphans, widows and the less privileges ones that need financial assistance. Using part of this money to provide facilities for God’s work, l took this decision because I don’t have any child that will inherit this money and my husband relatives are not worthy to inherit this money, it had been their wish to see my husband dead in order that they might inherit his wealth since we have no child. This is why I am taking this decision, to donate this fund to a church.

I don’t need any telephone communication in this regard because of my health hence the presence of my husband’s relatives are around me always.

I don’t want them to know about this development and l know that With God all things are possible.As soon as I receive your reply I shall give you the contact of the Finance Security House,I will also issue a letter of authorization to the Security House that will prove you the present beneficiary of this money. I also want you to always remember me in prayer. Any delay in your reply will give me room in sourcing for another good person, church, organization for this same purpose. Please assure me that you will act accordingly as I Stated herein Hoping to receive your response immediately,

Your Beloved one.
Sister irene elvis
————————————————————————
Thank you for your time,
Team PGFA

Return-Path: <ireneelvis805@yahoo.com>
X-YahooFilteredBulk: 76.12.210.180
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: WuOtpS8WLDuGhOONoV91LCzRasn22tcFONvHO8gT4O6CD4h8 Iiu3nug8Ssjsw91MxmAiXC5k8IxN0SRuEOhiCETJsIX14_K._BK.xuJdzOgj x.ekw14u.6L5qxrk7S66lXhpluVCJNeujOgANgwQNKWB6y4FuNzKCofVMe2R eb4jlwtFpxRDbgiwQacI2Ff9x2xP8QGZFfKUjUAz2K4wldThAjQj4D8GZMl. _StWnbKQhAeexVrAKsbfgYsGsVt2WFJWOYU3voageApt4WWsfJrEhQUlm3YS 0Z4FelR74hIIMvg0aYIqn1ngmQCHj8uSK3.Skb8mku3kCJ7S03YXyJu4bU6E nURibPoh7pzUdYgLv9OjTx360s1.sIqp4BHaIqU0iGVVmtBOpLRv4XeKfmhc egv20jeps4rF0wVmT4xvvf82kKpeMkmqHrePK7_wdM0BINTqC3tZHBMRoZ_B KnIIlfv.z5PHmXJqr9XeYwHFtVPEXhLOaiVg0H.nIxGOYdK1Zl3_ViOD5YOH z7crqHhuXPC.583ABupIODm3Mg.u2r13bBwlxmtE3G6Mz1azDEV1dGdQCWS9 TBWaL6QkMincQcLB1Xxtgc0ySfApGgvX_m3nOWyI.NG_p4.r58G3OZWv1olp SQHfwcph_8gT7_3t7S0XxsXBAKmQN8_wmmcs5xD.kSj.Lg0ryZwHWnKfu5Z1 gupy0.VBu5lR8HVlTKy3sT4sBPX4fnerlLIsH38n4UKLLgPTbo2HKXUcTbaA LYoKS8KySOWboX1Wiw8jhhmGwX1XQ.dQFiSBYJztod_mJFv4excQ_e.k0v8i j68glcqpMaL1Mu40eNOyXySpYqj3Rlu.lKlDeVjUSgAhPuHa0vO3AO886uG5 8lfcWzLmIRq3VOpvlu_KVAtsRrn3EZLmolAhhB9Wlk.JHkguVjgae1BOHJVd k5T9v4dXzXk2eZj4K3WhEoW0JYhsx.wHJK5pbNxLvzx9tfFQtdVFITs4NAin kn8g5dgMUbuLu9oTRbEGjsKZ6oMZRJdeWCFGnanfAK4FhcjlC.oBslb4M130 8hq9.3g4jzEsajwmWxMmxtWQduJWvJ54DKpzPLa10c8ayih1puCq7LxA8Rh4 MGSfNVJD83M__sfApw_KqEE6p9X1OiXObJdrI2qVVfBVYOiZbWU.UfHCsQ3U oWGvqZkgUQ2i9.6DKDGPu6jaj1qqeDcDy0C0GC26F9bSyc7QeZ8BeWYfOoZM pqh5TVr9n2C5P5kkIRBSg60jF4ye9mA8xYSTTpfc8qNIUX4cPNrLeFDykKay Be.a8R_XFpoP8MXhWByBdZOG7_dBfD0purUDkR3v6MXKrYPqUTUpw2E_ovDG Em_4F9krRziyFRrHdO5AG2OXsnnWrgXjxasu8JZA_XxboXGUVnc.MpWGEd5i xNt5LDMMza2HxT3ENlfM6OMemJMC
X-Originating-IP: [76.12.210.180]
Authentication-Results: mta1108.mail.gq1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO www346.safesecureweb.com) (76.12.210.180) by mta1108.mail.gq1.yahoo.com with SMTP; Thu, 10 Jan 2013 11:16:16 -0800
Received: from mail pickup service by www346.safesecureweb.com with Microsoft SMTPSVC; Wed, 9 Jan 2013 11:00:13 -0500
From: “PGFA | irene elvis” <ireneelvis805@yahoo.com>
To: “Team PGFA” <info@pgfa.org>
Subject: The Pakistan Game Fish Association | PGFA
Date: Wed, 9 Jan 2013 11:00:12 -0500
Content-Type: multipart/alternative; boundary=”—-=_NextPart_000_04C4_01CDEE58.7F61A1D0″
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913
Message-ID: <NORTHCAROLINATGpaoG00000162@www346.safesecureweb.com>

PGFA irene elvis ireneelvis805@yahoo.com RETURN-PATH: ireneelvis805@yahoo.com REPLY-ADDRESS: info@pgfa.org

RECEIVED IP: 76.12.210.180 ORIGINATING IP: 76.12.210.180

 

Tags: , , , , , , , , ,

“Cecile GOMEZ”

INHERITANCE (CHARITY) SCAM – NIGERIAN (419) SCAMMER

NOTE: This scammer sent two (different) emails within minutes of each other. Both emails look similar but were a little different due to a few things, including, an image yahoo blocked was posted by the scammer in the first email but the scammer didn’t post any images in the second email. Also, both emails have different originating IP’s but the same received IP (41.216.50.35) which is a IP located in Africa — check both headers below for additional information.


EMAIL NUMBER ONE:

Hello I will contact you by the will of God as it is thanks to him that my choice was focused on you. And God’s choice is always the best. I GOMEZ Cecile French nationality but for health reasons I am currently in a hospital in London. Unfortunately I do not have a legal heir who can enjoy my fortune. That is why I have contacted you to inherit my property to carry out humanitarian projects especially good care of orphans. Since my days are numbered made my health deteriorated so I do not want to die and leave this large sum to the bank or there are people who are in need. So I would go through your channel to do good to these poor children. If you agree to my offer of donation.
contact email: cecilegomez268@yahoo.fr
God bless you

HEADER NUMBER ONE:

Return-Path: <eliana.cortassa@alice.it>
X-YahooFilteredBulk: 82.57.200.119
Received-SPF: none (domain of alice.it does not designate permitted sender hosts)
X-YMailISG: miS4fJcWLDt_DZy4IOQyQdmRBKBlc_v9.x98VBEgMEZSH3_E m3ERR7Jsuw4ljWQxBeFsN1MvBvut8DSBNizvqfuv97OSpg_OuM3jumW..O_n WRzxsfHFMq2JWTqpWLLnNJvIjFrBPAhXLJWudKHF9ZY_YnWzNI0dewh27MIQ ZwOPK_c7k1O3nFHJRDu5_aE0r5hod.qemWnJpiMa34JPcxA6Vt_2xUghJy4j 7UAFfeP.cqsajxCSGUfjAkEyVHu5CulNGe9aMt09ZwixnmEgx4WZPShrlEEb mC285to2_WG4SX22B9XOAYIAj138O_KzoMQMs6xzbEvMJIPrfCHKnzKu_PU5 7vXb37RMzDnY6te3CmlRaIiEOf3tez9GFTG_IkICtAvNGz.MY2_pYxfAAewo ty61sP9d8682lMj3n9DNYqcp7553OSZthVyF4.zRqei.cOtN.ohOomrYsays Ptsy6XJ3WIJCSJinXdSBN6C2xiV90LC.NIjYDEPgsvGaEVI1jXxEMoZ9wJKx qvSEQxM5c05AblqDX0yODEWynxKLeWzCafueuOHhlijXAtthYi8zMVTX9dA2 EQwYZ8PQN4CBTTzyNNQQIYT4f5S4yoW4K5Bb0Ydgnluhan6Ofy9gmBG96i3X rQU_SNhuqJxVThyVHrXYJy_M249pU7AE9h9nkep6jTTsME_wbBkZ0WRiTPu2 DOTxgYUk8zvMho9CRbJO7qmzNAwLdKAfhtMJtCuLZic25oA65gCA24X8h3vA 0KtTY_XeBZ2szfxlVM1ksQtL5IbM1avb1opedENc3anX5PWctrlT34Fpwc6d rQoO_KU0lHr72ryaTcZqqsGm6wqFB_7g513.fOj6q9trXUjeJUoc9uQfvu6M wJ0vjELKMCo9ActP8uNGNS4ZaN0.oPZ_UaZITx3jTSM6F2bkw6hfyWuhrZ3n TcqGA30E5D4wmaq0cnLZg24eGyA5YJPs83edbmmtsAgJz5mSYqeduj9l5Acp jUZqXSTfm.ridkY5P_4VBZfyHp3ldBDKYEuEP116FHwJ5Bm72pxFS6o6IaN4 6bVrlxp5v0uoyTs4Oy4hmxM20UdAhiUhwJUPkgemzsKp6.jQ.NtiFQeU5pQI FXX65Sp_D74yYCs9nrk2zAmbV3oPjP5kpPZmVAtqOnXzmzLA3Ep8KxE0HPiJ EbS_JOWUST2emUIBQ9XD8lMRB0Bfw3nEnc6_Vuo.5XB9vVI9oV0DaTT6yQv9 Kq6fEwVEJzgW1IQnoC2EV6tqK_nKDq32We395JMnb8_ArPwqZt7QsfVhrVoA NpPO8kFoaHVbXWxhfIfXA2iKomNB7iVIayg_4A5s5CMDPwXKFs1kDrVSy7h. 5LE4TV67ePP6u8XKM5rECVktEX20rr6LhfGqngc.xqX7jjicOQXvbRv_ypFI AUXXzy7avEj0KMbkpF4PtSmsSSx5NgP2flQv.C36WQRu_b3be3.lzwHm.hH4 J05aJO.gvxyw5RHFBbQUuia9Nl.3OvJUwRpISwCp8nKleXEbDuWyxxHcytn5 GPuJ3M28n5I3p4KS_jKUYIJe6ySv2GLU883WbZCF29sSgg_meqgesybYsdmF 47gTZuj7d956x5VsGMLSNgRpp3ZYrxddplZyr2cZ80Gfjq48a43v1JP4MkaH PvuWXDVFzrqCIRX9HrRhhjtTRJZkm36wWw4hg5CV
X-Originating-IP: [82.57.200.119]
Authentication-Results: mta1284.mail.ac4.yahoo.com from=alice.it; domainkeys=neutral (no sig); from=alice.it; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp303.alice.it) (82.57.200.119) by mta1284.mail.ac4.yahoo.com with SMTP; Sat, 05 Jan 2013 07:04:08 -0800
Received: from feu24-alice (82.57.204.79) by smtp303.alice.it (8.6.058.01) id 509146560258A44A; Sat, 5 Jan 2013 15:57:19 +0100
Received: from (41.216.50.35) by alicemail.rossoalice.alice.it; Sat, 5 Jan 2013 15:57:19 +0100
Message-ID: <13c0b374efb.eliana.cortassa@alice.it>
Date: Sat, 5 Jan 2013 15:57:19 +0100 (CET)
From: Cecile GOMEZ <eliana.cortassa@alice.it>
Reply-To: cecilegomez268@yahoo.fr
Subject: WELL LOVE

FROM: Cecile GOMEZ eliana.cortassa@alice.it RETURN-ADDRESS: eliana.cortassa@alice.it REPLY-ADDRESS: cecilegomez268@yahoo.fr ORIGINATING-IP: 82.57.200.119 RECEIVED-IP: 41.216.50.35

____________________________________________________________

EMAIL NUMBER TWO:

Hello

I will contact you by the will of God as it is thanks to him that my choice was focused on you. And God’s choice is always the best. I GOMEZ Cecile French nationality but for health reasons I am currently in a hospital in London. Unfortunately I do not have a legal heir who can enjoy my fortune. That is why I have contacted you to inherit my property to carry out humanitarian projects especially good care of orphans. Since my days are numbered made my health deteriorated so I do not want to die and leave this large sum to the bank or there are people who are in need. So I would go through your channel to do good to these poor children. If you agree to my offer of donation.
contact email: cecilegomez268@yahoo.fr
God bless you

HEADER NUMBER TWO:

Return-Path: <eliana.cortassa@alice.it>
X-YahooFilteredBulk: 82.57.200.117
Received-SPF: none (domain of alice.it does not designate permitted sender hosts)
X-YMailISG: 1h_MycoWLDu18D41tm1z87pwt6EAmInTosRnwnkOgCgsbvpa VRwaFLMirEpfzPBz_ip6KczwnNCehyEZ1I7mZvLYE_7aC4dLO2FLCCr6DHuK g7uE8U6QNcj2w6z1RsI0n7l0hojc7Cz7oYz7OA2ttZZnq5rT9xHIrpM9UNoj 45l0UY0A5PQSluqASzhCJ6fZG4ZZ8P27TH68KrkvSPowsaGHigeewkhtxSKa umFRhDIeItwXlAqJOs.wUtnl6IdQOkd_7HJ30cw8UBslofwd9zdyGxWw6Rw. MXMXWl9.P.hFZZSYCvp67eL47tVdhvfB5UHm7qrRbEIj.YAPUxJllAi8l83k gnntKEC2vXhOriT4QkNp67uQCCHi.6eyNVoqz9M5rsARf5ug76cZSrDMJbMw EQZjwVzF8Ctndw1vG3GVadE0OKzxX9RMvz_L_CfhrBsp8BeXgofylk1zN3yX Ynir7ymKdkAA2rViEDcQlzbuyCiLVGb27uGegHSNP0sAJhqdQ5WP3rCxVTsK eRgcOn65rQuK0zyYJCdRKXxf_Ca24VeVfPimka_LJPVBel_6.J4HvtCsf4SW wAqV4mW.Y_NQ.hDOUFlAHk5rcU4yP0tkJoCOUi907xT9dUVZtPvKBI1Moc4q rkkvAITlc7H4j9cIhAVZY0f6plADZVFMoePvlCLhpOXVhGWuH10IHqLnmtZq oVHaUXSCRJNlNXpS35Igt0koNC09Ekevqq4JkyqwzNAVQmGIti_VpvXysXO_ qCRSlNuyyN5zRSXy60g6EsgPFH5u2q607fi20lCYWPkNI2PnYuykOIvD_Prh Pqyx9qyZAWjXuJTpxQXSeJRPxLoncbR3XQEe6bg9N4J9.gzMiF.fTnkj4fV9 Yb0BUNEsiy4UBwIul4YRFbVVJXfGVbWDLWJo9LxCup3syPsvkszezPw3Okgb z3Wgc6k_6O97rbEZmQFTZn3EAfBNyjKLOx0xLIiXtBqf0LV6UjuTA9t9MA2J 57QYuPf34FpRIlgxtUXXSNhb7HfaCriMfK6wifmpTy9HIx2EGmt8TKNCNUa7 VuKiVOTuQVFJwW_gcS_8eUs67dIk6k.wJCoqSMNOVXF8SgWxAkS..MSqRy7H 5zsIHUmBhZdfApWjL3KzAh5BO3cY7EssLIOX8faU4siY1.tncj6DMEXwjsNy gsxs9Lr.742xpI8cgUbVxIjFmHf98XRmq7o3lzC_E6zfP14whtLkSoKuCZ9. 600fWlYgbEFFisyvrztOj.Zd0zuRENRcZSsVp_FjHztnh17MHfLmIxUxlAV6 PQpK0Qmh8_AfYzc7HkFq.eMLC56uYy1LTIspU2KNtSIm7lU7Qj3Oevuyj5WP .S1SUL7TY7p2.0S5.73U0DTR9IQhD0p8qFwkoH0j1FfUVmJYdNjWJ5EKrEv1 j2X8FnuubnOceBiE0uUgpIiDHheoGJVjf3Lin.RosnWlvuHc_aeUP3GrbS3n qzNGsyB_gCJYGdzx4QWnD2wSj9k5kvj2bpANngTBhoWzXF4bErlXXePCw8SW cgZUfAysDhjs8wHQBwzlZsnjqHymmPsmXaawTKe6VJQJJ6iJrhrsDKBaKc5U PWVTYYThYVSEjw–
X-Originating-IP: [82.57.200.117]
Authentication-Results: mta1273.mail.mud.yahoo.com from=alice.it; domainkeys=neutral (no sig); from=alice.it; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp301.alice.it) (82.57.200.117) by mta1273.mail.mud.yahoo.com with SMTP; Sat, 05 Jan 2013 06:59:23 -0800
Received: from feu24-alice (82.57.204.79) by smtp301.alice.it (8.6.058.01) id 50AA53640293495B; Sat, 5 Jan 2013 15:59:05 +0100
Received: from (41.216.50.35) by alicemail.rossoalice.alice.it; Sat, 5 Jan 2013 15:59:05 +0100
Message-ID: <13c0b38edae.eliana.cortassa@alice.it>
Date: Sat, 5 Jan 2013 15:59:05 +0100 (CET)
From: Cecile GOMEZ <eliana.cortassa@alice.it>
Reply-To: cecilegomez268@yahoo.fr
Subject: WELL LOVE

ORIGINATING/FILTER-BULK: 82.57.200.117 RECEIVED-IP: 41.216.50.35

FYI, the return address used by this scammer is Eliana Cortassa which leads me to believe that the name is also one of the fake names being used in an attempt to scam people. Either that or ”Eliana” is the scammers fake banker or lawyer.

 

Tags: , , , , , , , , , , , , , ,

Suzana Davis s_davisx0003@yahoo.co.jp s_davisx00001@yahoo.co.jp

FRAUD ALERT: DONATION / CHARITY SCAM – NIGERIAN 419 SCAMMER

Name/Email-Address: Suzana Davis <s_davisx0003@yahoo.co.jp> ReplyTo: s_davisx00001@yahoo.co.jp

Subject: Re: GREETINGS IN THE NAME OF OUR LORD JESUS CHRIST.

Email: BELOVED

GREETINGS IN THE NAME OF OUR LORD JESUS CHRIST

I AM MRS SUZANA DAVIS FROM KUWAIT, A WIDOW TO LATE MR JOHNSON DAVIS NOW A NEW CHRISTAIN CONVERT, SUFFERING FROM LONG TIME CANCER OF THE BREAST, FROM ALL INDICATION MY CONDITIONS IS REALLY DETERIORATING AND IT IS QUITE OBVIOUS THAT I WON\’T LIVE MORE THAN 2 MONTHS, ACCORDING TO MY DOCTOR, THIS IS BECAUSE THE CANCER STAGE HAS GOTTEN TO A VERY BAD STAGE. MY LATE HUSBAND DIED LAST TWO YEARS,AND DURING THE PERIOD OF OUR MARRIAGE WE COULD\’NT PRODUCE ANY CHILD.

MY LATE HUSBAND WAS VERY WEALTHY AND AFTER HIS DEATH, I INHERITED ALL HIS BUSINESS AND WEALTH. THE DOCTOR HAS MADE IT CLEAR TO ME THAT I MAY NOT LIVE FOR MORE THAN 2 MONTHS, SO I NOW DECIDED TO DIVIDE THE PART OF THIS WEALTH, TO CONTRIBUTE TO THE DEVELOPMENT OF THE CHURCHES IN AFRICA, AMERICA ASIA, AND EUROPE. I SELECTED YOU AFTER VISITING THE WEBSITE AND I PRAYED OVER IT. I AM WILLING TO DONATE THE SUM OF $7,800,000,00 USD (SEVEN MILLION UNITED STATES DOLLARS) TO THE LESS PRIVILEGED.

PLEASE I WANT YOU TO NOTE THAT THE FUND IS LYING IN ONE OF THE INTERNATIONAL SECURITY FINECE COMPANY IN ABIDJAN COTE D\’IVORIE. ONCE I HEAR FROM YOU, I WILL FORWARD TO YOU ALL THE INFORMATIONS YOU WILL USE TO GET THIS FUND TRANSFERED FROM THE BANK HERE AND TO YOUR ACCOUNT I HONESTLY PRAY THAT MY DEAR PLS I WILL LIKE YOU TO CONTACT ME

MAY THE GRACE OF OUR LORD JESUS THE LOVE OF GOD AND THE FELLOWSHIP OF GOD BE WITH YOU AND YOUR FAMILY PLS FOR THE SAFETY OF THIS FUND LET IT BE BETWEEN YOU AND MY DOCTOR

I AWAIT YOUR URGENT REPLY
YOUR SISTER IN CHRIST

MRS SUZANA DAVIS

Header:

Return-Path: <s_davisx0003@yahoo.co.jp>
X-YahooFilteredBulk: 77.238.189.206
Received-SPF: softfail (transitioning domain of yahoo.co.jp does not designate 77.238.189.206 as permitted sender)
X-YMailISG: qzEvR5UWLDtpRnW6ifr8BGfUpchJ2CozItM51BwSnGroXEhL svjYKgw0h6wkpwJzdyuBt.F48u6oNQihFUDtlLNnWmf4aejyTAOTMhQBCbUK aMJbPoxUrc_Y8jh_Gt_8cGWvQS0dMPdgX8Virgh32U_Zdu6UNrpFXTxEZd8M AvkabKly5ZrJyYowkOQMZ5MOZNmqXSwxxDm.LzbbzD1p3CFQxaijPfluo8ko JjJ9jzkZdznrYDInmuubwP.QHOoV5Ext2D2grvGmuVYjw0k5lMpLM86.RAEr 3U1h5YOavH9XBGFPp4gyHQvi2PbwBP3tJLYptmZZQ8t6XWq4sJqlOaFLP4sB gN7Csq5lEAWnsiGOWx9qgWYa6fX.TRutqp2yhwBD0Qff.9LuyWSasLzBtw6k J9SUPFz_ZtWelvs5ZW4FqB26cbGE8g0.iR4qkmOGi_OR18mU31ZjotAynp4q 4oThggejbuHyeFNfTmdKh0UXlGqRqpkCuNKOokmOX_B3tU2xvqn3vvqLUSiv 5aK1grAQeTZfi53ibFuh9nj5Tt5N9esq.jEZV4rc9BCaUs_mmypXFBqiCszi uN6vkfgQWDTBlOsrrrgdduCHPjseCFwkjAKLCEiUmO0qUeI3zPmbZIek_fRQ XPXWyz9aYE.vCa4Ko3v3N9VqDg_FBgGV3rLobNpE1TXM3vPQ4naZgChJWmDL ey9ai6AfNDBm2Pg3XlErj4ZTdD0ILf6aMs0xyoAY6sIsczMtW3RjivIAVqkU BaB7g1usmIjO1wyENMlrptquDA_BWnV99hU9qnx6chFXCxxYV3PYM37wFK2v kL3RDNSbM0VbYoKCbSG.hUI7P_iAgFB.QyITm5eVaw.s.iqPJtxUG6GkyShB 3zjlgvXTnT2LetLm.VJuiKMmFySCy2lPkTTcbRY6xLJmZLkbWtNtCyIyiqZq BoSPlA2gNOkNG13af3X1gWTyxU5wuqxdIwI2UcbJSlnGcVcAfcLjwvV0eu2Y BusXUJXQhush2xC0Com17i3MzLbOqnL3qXor39V6w_NENKoiU.ev_ta6WKAM QbTsslBNU_UTCCNreFzUPw5khdoxtgnemf_CU5WpWOQVpVCKSZ80zJIn_YRk gcJbBDuiTY7FKDh05fWCVkmuGNanv2JI6Ni8Yrbb.G4Yy.IkcpL6oCrUKSuA .Kk6g2OV4op_tZgRcujiL_ZALBGWKNN4nB0VLglBEN.xdKTKwqiLV.0v48VK e4D5ypDtqzcv2.lkvUNqgz9fGJ0sW_e4TutSk2T1HllR1CykaZURag_WLUbc AvDLzDLhBsTwbMrlEWFh0j2ycEYh6ItnTZiveUbZqGFqxKQ.am_cbQ–
X-Originating-IP: [77.238.189.206]
Authentication-Results: mta1326.mail.gq1.yahoo.com from=yahoo.co.jp; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm17-vm1.bullet.mail.ird.yahoo.com) (77.238.189.206) by mta1326.mail.gq1.yahoo.com with SMTP; Wed, 24 Oct 2012 17:56:10 -0700
Received: from [77.238.189.230] by nm17.bullet.mail.ird.yahoo.com with NNFMP; 25 Oct 2012 00:56:08 -0000
Received: from [212.82.108.243] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 25 Oct 2012 00:56:08 -0000
Received: from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 25 Oct 2012 00:56:08 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 302246.80803.bm@omp1008.mail.ird.yahoo.com
Received: (qmail 31884 invoked by uid 60001); 25 Oct 2012 00:56:08 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1351126568; bh=5nadoiiQqJmkYMDbGKmQ4fjNvZyA3jjeMJ1+qbTcrnc=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=d+ctxqL+SMoIiR72dDHyvQ/LHHeduYKiKV/p3FiCRP7gpBQxtZ9jlKnf6NB+lCR1jLFlqJIvUMK6QI4R8y2GpIbaBH+DNlkDtzWesScQt9YxATBQy6s2U383D6UUQlgll0DUQZL2eBDjiU0JvH2+fi/+d3qTYMowYpK2/bUshss=
X-YMail-OSG: SQkC28YVM1lVL5Qpm3tyC0CIFB_hg34B.wfIcQZ2A8UMTVW vHl5xCbc2in3bVVSnmG7pFO9XrRUskq5Nta2EgrUxpi84XRxDWSvOK4i.pnA ypkNnaqyGKKsbwpR_FONxZmjmRBxZsN_3IDFZxdBv4x8.wNaBRezK7E.gKFK zJXZXVsPbr7CQFb0YSg8.MyjFaqGZsCzOQhGusrF1ZatRq6DOdnVTw.QhZVg ijGlxNz_mw7woi0JcIanUu05RxS.IBqCFqcD5wkRvPuR7q2d63L1sywBBQWJ lLlLjFtxClFdjokskpiVmbFuqaHTwpdw4QJIfyK2ZvQrzjSsBRtE2MN181LI fVFo4W6QhaJjFAFlB3rsVeYfbGMOa0M87MdiTV_KC.BcYZoXzJj5Nfft0U27 VmXInStClvPSnXgsFRn0R8VTGXYSPMQdY51EM1AckEaiqhF.9EmmSqKBmuEW wbKGlyy9K65XLF972TQiD5_6GRdk1T5c_IpQWrzUBXEx5I2Qw_OBi_S.hrUg XQmXccdaL2VkV3HcxeYG7PlcQftgP3EeWBukzScPsDWgpMe6vLUYapMeiHhg byL127QlOiY8bR5WZkdYNrwX7oa.FGZ3l0Ec3lQ–
Received: from [213.136.125.248] by web28805.mail.ir2.yahoo.com via HTTP; Thu, 25 Oct 2012 01:56:08 BST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1351126568.31448.YahooMailClassic@web28805.mail.ir2.yahoo.com>
Date: Thu, 25 Oct 2012 01:56:08 +0100 (BST)
From:
Suzana Davis <s_davisx0003@yahoo.co.jp>
Reply-To: s_davisx00001@yahoo.co.jp
Subject: GREETINGS IN THE NAME OF OUR LORD JESUS CHRIST.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”-779725378-1120749859-1351126568=:31448″
Content-Length: 3833

(FIRST HEADER) RECEIVED IP: 213.136.125.248 X-ORIGINATING-IP/X-YAHOO-FILTERBULK: 77.238.189.206

Below is the header from a second email sent to my spam filter from this scammer. The email addresses are the same but IP’s and other information are different!

Return-Path: <s_davisx0003@yahoo.co.jp>
X-YahooFilteredBulk: 77.238.189.94
Received-SPF: softfail (transitioning domain of yahoo.co.jp does not designate 77.238.189.94 as permitted sender)
X-YMailISG: x7HArFwWLDuJisIkTC5ou37Hm_4sFd3L_JpgK_.PQ2wYRzIJ CJhLqrfLhVBnDgWg3YXxiuahkU0f_Ccui5N6VNSQUoLyGPADSP9tsjp7VDFp Z21a2Z5cGPV3GsbCQG8w4HvZpvcd9r67rs.iK51YR1aaxYaRLIZcRpS0qELi orcNm0EaD5w2GrEUd4Nbu_RgtA.Lp_dNpXSeXfDJGhe4RFqbv6baGYwIsGwb tpCpkrLdQh.s8StC1HOZXiedc4ukxfwfXXOkyJ5n_UYynHxOYDK8tOGTjG5y GmwSLa7oLHQEZf9aikPuBSFN.DFOahZLt9OXYPo6DNAABIEtj_bSP4_PCqsB mNMyV.uQ_VEwuStA2Um3J.BfTg2IP4MagO_A7cAPaB83y6cwn5e1DA2yEvLm Za_dFbTAFmprR8.GSKNzJwBOCdpJ9McAP0lmJB2f91zQLfWXuifHEXKGEE5Z Q6gng2D60hGzPwrLcNknSawKlcDvVM4yReSFxhU8IRRVnU2SWjgt8xsvEEsI tRDi9q5ekcT9tl2u8eIoJNTdTtIAtVjfd4sxRXERZAhdN1T2XI8Urd4gTgrq OkSzoIB2pX6HpIxFeP8LjVIHF_bbCm4lIaRLSl3DhQ8RmF3tYw4riUn7.9Yk 4cRe49K8Tmvvaaly_.KOdS8D8oYVbAqM1MmjTaLbtYjCGVHhLh1f8Aj.RFwH wwKeRttkG50_GklMuPgB0uTbZDSX1_w9uw6XRUuZawNMFtxKVfcxxqMQnyJP _T9C6NZVGNY9at8JrjayCo_UK7.g529o4dekJtjZGH2UrGms.uT8ziom__Dl aOTYx9k5REZggY8hfnvSFu7HE309R3YmxXklXpD79ztC2vQQl4bsyt4jlKYh HbakZrlpNgRPtZqUiLEjnz8eqR_fejBGPtfdxn..UdxBK2enOpM9ruO4TwyI tmkzSr7MY.AaBCCrhdluEvN5i5neVmBLjZY5X6edEmPzW7McPSCf6pEZ148H gra7ev7dGy_wM6cteCLcJqZkDD9U_wm.hISBJL6FUnReA5BqxYjazhD7uCVx d9G333X8Jf5LhnMZBNCJMhRCmDnLF4YVN1mDDRQHBerhLIGLiZ7DUtcp0tkV qjTJoKltJ7846RKOJ5nhj__58JrYjB__99fz8UJbpUNj8jsQNCP7Yp1c68Gv 5sPLlHfN20yNOEO3zToKUqoBIT5dUDEUksocIESYu7lPV8DV2FX3OWXlH6Wx cVjRQvRu3WS8K6dMu_zG6BQP2re7qjFckT7MnY5B34EBvUzO3Xd17qHHYAxV _5I2GOiblV3drkq9LuNPtCfLhVXBgxBWV4V3tifn3lRzpe_EFLWa
X-Originating-IP: [77.238.189.94]
Authentication-Results: mta1125.mail.gq1.yahoo.com from=yahoo.co.jp; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm9-vm1.bullet.mail.ird.yahoo.com) (77.238.189.94) by mta1125.mail.gq1.yahoo.com with SMTP; Thu, 18 Oct 2012 08:56:01 -0700
Received: from [77.238.189.57] by nm9.bullet.mail.ird.yahoo.com with NNFMP; 18 Oct 2012 15:55:51 -0000
Received: from [212.82.108.112] by tm10.bullet.mail.ird.yahoo.com with NNFMP; 18 Oct 2012 15:55:51 -0000
Received: from [127.0.0.1] by omp1021.mail.ird.yahoo.com with NNFMP; 18 Oct 2012 15:55:51 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 530050.80966.bm@omp1021.mail.ird.yahoo.com
Received: (qmail 42559 invoked by uid 60001); 18 Oct 2012 15:55:50 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1350575750; bh=2nMTUGCzPZDWO6gAyIZH4LQ//mdwcq/OZ9+4HN2hx00=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=3PGfkNI0JPpnIH2WmPwCc+mSVNxkEJnniSS660zlTlovkFizoUIh2UavQ4CHr16inDmZP0H7toW4r6h6IMqJTaNfmFkb0fK5PKJ+29UB3kFVRgF9uX9CVkm3OnDklDRpXEFRx+rog6fTXtKVRvwlo2twBgnH15ewiPehrC8sJtQ=
X-YMail-OSG: u1atfa0VM1mKmfJ9jBbW9LY8QhsuT8.Qz7g5Kp1NzBDF1Hj RWrrsKUp_pQnIrTEgUVQJNH_5zPARrQdRbh9GNbh_C.dy274h2.H0Bau60d6 Af1PaH8YkFg9CBe8npbM3C1X8MdAPRaWW9_8ly5XsxEBZEHTltr.eulx1mkz ouZZg1YoFt_iLRcqLcte6lM8ZGZTqzIVHShY_FA6z9UHdrRJB9a9AVw1r_MN WN6ucnvpOp1FaUaM57PAYrw8Gql4m1auQOteUMeqFQg2BPXWBH17mn1Qf8I9 20zLeTw6YZfkywB9CsX7.9LmX87oLdqpHb3Ku8UWt0GfL0fq1twJFfIuuDh4 I90dGAJv4YC_xU4FiZ44o6P67J0HzIAyuHYsVF9K97F8sdNU5oKl9zbycNmx Tj9c0MHx3AX3znMHbTTyeyl78VudBLC57n2v5LkkvTH.lDzfHPeD6NZKlrqB 6VccJV2xcOE8FvJPhklL4VIgavPBkESNBv4xDfu7L4yxhsDLvUSvHGazF9ps npwshPBdMQ5ljgYctjU_FGiAmAZd9kSdNcsXUZc1BLilo6zzP7mu6moFCKE8 ygD8yKLmVvBgtJK674gETCAUIU.If8DS.aSd.Rgw1znARLJaB2yHIcDIYGg- –
Received: from [196.201.84.160] by web28803.mail.ir2.yahoo.com via HTTP; Thu, 18 Oct 2012 16:55:50 BST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1350575750.36820.YahooMailClassic@web28803.mail.ir2.yahoo.com>
Date: Thu, 18 Oct 2012 16:55:50 +0100 (BST)
From: Suzana Davis <s_davisx0003@yahoo.co.jp>
Reply-To: s_davisx00001@yahoo.co.jp
Subject: GREETINGS IN THE NAME OF OUR LORD JESUS CHRIST

(SECOND HEADER) RECEIVED IP: 196.201.84.160 (SECOND HEADER) X-ORIGINATING-IP: 77.238.189.94]

 

 
 

Tags: , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: