RSS

Tag Archives: Email Scams

“Gulf International Bank”

WARNING – EMAIL SCAM / PHONY LOAN OFFER

loan-scams

Subject: Loan Offer..
From: Gulf International Bank <fes01@singnet.com.sg>
Reply-Address: gulfinternationalloan2@in.com Return-Address: gulfinternationalloan1@in.com

We are Gulf International Bank we give out Loan at 3%Rate to client who are in need and willing to obtain loan from our bank.

Our Loan condtion is for your Loan to have Insurance coverage. If Interested contact us with below information.

Full Name…
Country…
Age…
Amount Needed…
Loan Duration…

Best Regard
DAVID
E-mail:gulfinternationalloan1@in.com

Return-Path: fes01@singnet.com.sg
X-Originating-IP: [165.21.101.74]
Authentication-Results: mta1062.mail.ne1.yahoo.com
Received: from 127.0.0.1 (EHLO comsmtp1.singnet.com.sg) (165.21.101.74) by mta1062.mail.ne1.yahoo.com
Received: from pike.singnet.com.sg (pike.singnet.com.sg [165.21.101.112]) by comsmtp1.singnet.com.sg (8.14.1/8.13.6) with ESMTP id r498SpCf017423; Thu, 9 May 2013 16:28:51 +0800
Received: from pike.singnet.com.sg (localhost.localdomain [127.0.0.1]) by pike.singnet.com.sg (8.13.8/8.14.2) with ESMTP id r498Sniq022191; Thu, 9 May 2013 16:28:59 +0800
Received: (from cooluser@localhost) by pike.singnet.com.sg (8.13.8/8.14.2/Submit) id r498SnOR022190; Thu, 9 May 2013 16:28:49 +0800
X-Authentication-Warning: pike.singnet.com.sg: cooluser set sender to fes01@singnet.com.sg using -f
Reply-To: gulfinternationalloan2@in.com
Subject: Loan Offer..
Message-ID: <1368088129.518b5e418c0e5@eel.singnet.com.sg>
From: Gulf International Bank <fes01@singnet.com.sg>
Reply-To: gulfinternationalloan1@in.com
User-Agent: SingNet WebMail

 

 
Leave a comment

Posted by on 05/10/2013 in Other

 

Tags: , , , , ,

“Benson And Gift Ramsey” a.k.a “Sky Loan” a.k.a “Arnaque Loan Company”

WARNING – EMAIL SCAM / NIGERIAN SCAMMER

scam-trap

If you look at the emails below you will see this scammer has sent out both Inheritance scams and loan scams under multiple names and addresses.

2@% LOAN OFFER
From: “LOAN DEPARTMENT” <bnytpt@singnet.com.sg>
Reply-To: loanoffer@gmail.com

SKY GLOBAL LOAN CORPORATION® 
Turgut Özal Bulvari 17.Cd.No.87
376 St., ANKARA, TURKEY
Ref No: TKY AKLS /96YMCH/07/ECJ-TKY
Phone: +90863493023
Email: jerrywhite4452@yahoo.com

We are a fully registered loan agency, we give out loans to all in need of help
across the globe. Our loan takes a maximum of 1 working days to get to approved
to customers across the globe. We offer lowest interest rate 2% and its fixed
with best match loan including loans for applicants with impaired or bad
credit, Pay off existing debts, reduce your monthly outgoings by consolidating
any existing personal loans and credit card debts. Our offer loan amount ranging
from $5,000.00 to a maximum of $2,Million.

Please fill in the short form below

Full Name:
Amount to borrow:
Loan Duration:
Purpose of Loan:
Country of Residence:
Mobile No:

In acknowledgment to these details,We will send you a well calculated
Terms and Conditions which will include the agreement.

Regards,
Mr. Jerry White
Email:jerrywhite4452@yahoo.com
Sky Global Loan Corporation

Return-Path: bnytpt@singnet.com.sg
X-Originating-IP: [165.21.101.74]
Authentication-Results: mta1562.mail.bf1.yahoo.com
Received: from 127.0.0.1 (EHLO comsmtp1.singnet.com.sg) (165.21.101.74) by mta1562.mail.bf1.yahoo.com
Received: from pike.singnet.com.sg (pike.singnet.com.sg [165.21.101.112]) by comsmtp1.singnet.com.sg (8.14.1/8.13.6) with ESMTP id r4L9q6nb016719; Tue, 21 May 2013 17:52:06 +0800
Received: from pike.singnet.com.sg (localhost.localdomain [127.0.0.1]) by pike.singnet.com.sg (8.13.8/8.14.2) with ESMTP id r4L9q5TW003063; Tue, 21 May 2013 17:52:15 +0800
Received: (from cooluser@localhost) by pike.singnet.com.sg (8.13.8/8.14.2/Submit) id r4L9q5ha003060;
X-Authentication-Warning: pike.singnet.com.sg: cooluser set sender to bnytpt@singnet.com.sg using -f
Reply-To: loanoffer@gmail.com
Subject: 2@% LOAN OFFER
From: LOAN DEPARTMENT <bnytpt@singnet.com.sg>
Reply-To: jerry_white4452@rediffmail.com

Subject: 2% LOAN PROMO
From: “Mr. Benson & Gift Ramsey” <paulopaesfilho@macae.rj.gov.br>
Return-Address: “Recipients” <paulopaesfilho@macae.rj.gov.br> Paul Opaesfilho

SKY GLOBAL LOAN CORPORATION®
Turgut Özal Bulvari 17.Cd.No.87
376 St., ANKARA, TURKEY
Ref No: TKY AKLS /96YMCH/07/ECJ-TKY
Phone: +90863493023
Email:jerrywhite4452@yahoo.com

We are a fully registered loan agency, we give out loans to all in need of help
across the globe. Our loan takes a maximum of 1 working days to get to approved
to customers across the globe. We offer lowest interest rate 2% and its fixed
with best match loan including loans for applicants with impaired or bad
credit, Pay off existing debts, reduce your monthly outgoings by consolidating
any existing personal loans and credit card debts. Our offer loan amount ranging
from $5,000.00 to a maximum of $2,Million.

Please fill in the short form below

Full Name:
Amount to borrow:
Loan Duration:
Purpose of Loan:
Country of Residence:
Mobile No:

In acknowledgment to these details,We will send you a well calculated
Terms and Conditions which will include the agreement.

Regards,
Mr. Jerry White
Email: jerrywhite4452@yahoo.com
Sky Global Loan Corporation

Return-Path: paulopaesfilho@macae.rj.gov.br
X-YahooFilteredBulk: 201.76.49.86
X-Originating-IP: [201.76.49.86]
Authentication-Results: mta1123.mail.gq1.yahoo.com from=macae.rj.gov.br; domainkeys=neutral (no sig); from=macae.rj.gov.br; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO hm1479-16.locaweb.com.br) (201.76.49.86) by mta1123.mail.gq1.yahoo.com with SMTP; Mon, 20 May 2013 03:58:18 -0700
Received: from mcbain0004.email.locaweb.com.br (189.126.112.85) by hm1479-21.locaweb.com.br (PowerMTA(TM) v3.5r15) id hj80sk0nvdcb; Mon, 20 May 2013 07:58:17 -0300 (envelope-from <paulopaesfilho@macae.rj.gov.br>)
Received: from bart0092.correio.biz (bart0092.email.locaweb.com.br [10.30.70.20]) by mcbain0004.email.locaweb.com.br (Postfix) with ESMTP id 61062345C42;
X-LocaWeb-COR: locaweb_2009_x-mail
Received: from [41.138.171.114] (unknown [41.138.171.114]) (Authenticated sender: paulopaesfilho@macae.rj.gov.br) by bart0092.correio.biz (Postfix) with ESMTPSA id 0454712C4E9;
Subject: 2% LOAN PROMO
To: Recipients paulopaesfilho@macae.rj.gov.br
From: Mr. Benson & Gift Ramsey <paulopaesfilho@macae.rj.gov.br>
Reply-To: loanpromocompany@rediffmail.com Loan Promo Company
X-Virus-Scanned: clamav-milter 0.97.3 at mcbain0004

Subject: Benson & Gift Ramsey
From: “YOUR ASSITANCE IS NEEDED” <kbgan2@singnet.com.sg>
Reply-To: Benson@gmail.com

Hello First and foremost I want to introduce myself to you.
My Name is Benson Ramsey Son to Late Dr. Emi Ramsey. I am 19 yrs old Boy and my Sister is 15 yrs.
Our Father was killed during rebel crisis in Libya and we are now in A refugee camp here is west Africa, cotonou benin republic.
My consignment contains Thirty five million United States dollars.
The consignment gets abroad through the help of A U.N diplomat Christopher zimmerman. The fact is that Mr. Christopher zimmerman is supposed to have delivered this consignment to Miss Diana perhogan.The week Mr. Christopher Zimmerman was suppose to deliver the consignment to her,when he got to the airport after clearing the consignment ,he called Miss Diana perhogan to tell him the description to her house for the delivery, but her House maid answered the call and told Mr. Christopher Zimmerman that Miss Diana perhogan had A fatal car auto accident which lead to her death,that was why Mr. Christopher Zimmerman has to deposit the consignment with A warehouse over there and called us to informed us about what is happening.Please my sister and I seek for you to stand as our Beneficiary / God Loving Parent to get in contact with the Diplomat so that he can be able to deliver the Consignment to you. You can get back to us.
Please, Contact Mr. Christopher Zimmerman on time and get back to us through mail, He is in the USA right now Thanks and God bless you Benson & Gift Ramsey

Return-Path: kbgan2@singnet.com.sg
X-Originating-IP: [165.21.101.75]
Authentication-Results: mta1388.mail.bf1.yahoo.com from=singnet.com.sg; domainkeys=neutral (no sig); from=singnet.com.sg; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO comsmtp2.singnet.com.sg) (165.21.101.75) by mta1388.mail.bf1.yahoo.com with SMTP; Sat, 18 May 2013 03:09:29 -0700
Received: from discus.singnet.com.sg (discus.singnet.com.sg [165.21.101.119]) by comsmtp2.singnet.com.sg (8.13.8/8.13.6) with ESMTP id r4IABtwx015497; Sat, 18 May 2013 18:11:55 +0800
Received: from discus.singnet.com.sg (localhost.localdomain [127.0.0.1]) by discus.singnet.com.sg (8.13.8/8.14.2) with ESMTP id r4IA99Am020247; Sat, 18 May 2013 18:09:19 +0800
Received: (from cooluser@localhost) by discus.singnet.com.sg (8.13.8/8.14.2/Submit) id r4IA9862020242;
X-Authentication-Warning: discus.singnet.com.sg: cooluser set sender to kbgan2@singnet.com.sg using -f
Reply-To: Benson@gmail.com
Subject: Benson & Gift Ramsey
From: YOUR ASSITANCE IS NEEDED <kbgan2@singnet.com.sg>
Reply-To: bensonramsey12@gmail.com
User-Agent: SingNet WebMail

Hello First and foremost I want to introduce myself to you. My Name is Benson Ramsey Son to Late Dr. Emi Ramsey. I am 19 yrs old Boy and my Sister is 15 yrs.
Our Father was killed during rebel crisis in Libya and we are now in A refugee camp here is west Africa, cotonou benin republic.
My consignment contains Thirty five million United States dollars. 
The consignment gets abroad through the help of A U.N diplomat Christopher zimmerman. The fact is that Mr. Christopher zimmerman is supposed to have delivered this consignment to Miss Diana perhogan.The week Mr. Christopher Zimmerman was suppose to deliver the consignment to her,when he got to the airport after clearing the consignment ,he called Miss Diana perhogan to tell him the description to her house for the delivery, but her House maid answered the call and told Mr. Christopher Zimmerman that Miss Diana perhogan had A fatal car auto accident which lead to her death,that was why Mr. Christopher Zimmerman has to deposit the consignment with A warehouse over there and called us to informed us about what is happening. Please my sister and I seek for you to stand as our Beneficiary / God Loving Parent to get in contact with the Diplomat so that he can be able to deliver the Consignment to you. You can get back to us.
Please, Contact Mr. Christopher Zimmerman on time and get back to us through mail, He is in the USA right now Thanks and God bless you Benson & Gift Ramsey

Benson & Gift Ramsey
From vendas@frisa.com.br
Return-Path: <vendas@frisa.com.br>
X-Originating-IP: [201.76.49.91]
Authentication-Results: mta1025.mail.gq1.yahoo.com
Received: from 127.0.0.1 (EHLO hm1479-21.locaweb.com.br) (201.76.49.91) by mta1025.mail.gq1.yahoo.com
Received: from mcbain0007.email.locaweb.com.br (189.126.112.75) by hm1479-21.locaweb.com.br (PowerMTA(TM) v3.5r15) id hem2420nvdc4; Mon, 22 Apr 2013 15:41:04 -0300 (envelope-from <vendas@frisa.com.br>)
Received: from bart0027.correio.biz (unknown [10.50.0.139]) by mcbain0007.email.locaweb.com.br (Postfix) with ESMTP id CBD7C2800B8; Mon, 22 Apr 2013 15:41:03 -0300 (BRT)
X-LocaWeb-COR: locaweb_2009_x-mail
Received: from [172.129.3.131] (AC810383.ipt.aol.com [172.129.3.131]) (Authenticated sender: vendas@frisa.com.br) by bart0027.correio.biz (Postfix) with ESMTPSA id D428215C430;
Subject: Benson & Gift Ramsey
<vendas@frisa.com.br>
From: vendas@frisa.com.br
Reply-To: benson_ramsey@hotmail.com Benson Ramsey
Message-Id: <20130422184046.D428215C430@bart0027.correio.biz>
X-Virus-Scanned: clamav-milter 0.97.3 at mcbain0007
X-CMAE-Verdict: spam

This scammer also uses the following email addresses;

gerencia@custelplazahotel.com.br
skyloan@yahoo.com
skyloan@gmail.com
skyloan@aol.com
skyloan@live.com
skyloan@hotmail.com
jerrywhite4452@rediffmail.com Mr Jerry White
firstwave@singnet.com.sg First Wave,
dhazuken1977@hotmail.com

 
1 Comment

Posted by on 04/28/2013 in Inheritance Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

“PAN PACIFIC HOTEL”

WARNING – EMPLOYMENT SCAM / EMAIL SCAMMER

caution-job-scams

New Private Message from Hotel
From: “Ebi George” <dont-reply@grou.ps> Reply-Address: canadian_hotel@rocketmail.com Return-Address: bounce@grou.ps

Ebi George (from Hotel) sent you a private message:

PAN PACIFIC HOTEL JOB DISCRIPTIONS.
Suite 300-999 Canada Place Vancouver Canada.
From Mrs Jenefar Goba , Manager PAN PACIFIC HOTEL Canada.
This Invitation mail is from PAN PACIFIC HOTEL Canada, Pls PAN PACIFIC Hotel Needs Men And Women, Who Can Work And Live here In Hotel PAN PACIFIC Hotel Will Pay For Your Ticket And The Visa Fee In Your Country,If You Are Interested kindly Contact us Back Ok.
E Mail; canadian_hotel@rocketmail.com
please reply me back

Mrs Jenefar Gobat General Manager PAN PACIFIC HOTELS VANCOUVER CANADA

To reply this message, you may want to join Hotel. If this was unsolicited and you get too many of these emails, please report this activity by forwarding to reportabuse@grou.ps

Return-Path: <bounce@grou.ps>
X-YahooFilteredBulk: 83.149.67.205
Received-SPF: pass (domain of grou.ps designates 83.149.67.205 as permitted sender)
X-Originating-IP: [83.149.67.205]
Authentication-Results: mta1348.mail.gq1.yahoo.com from=grou.ps; domainkeys=neutral (no sig); from=grou.ps; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO g3.mta1.grou.ps) (83.149.67.205) by mta1348.mail.gq1.yahoo.com with SMTP; Sat, 20 Apr 2013 00:38:24 -0700
Received: from hotelc.grou.ps (app3.grou.ps [83.149.67.211]) by g3.mta1.grou.ps (Postfix) with ESMTP id 31218246D96
X-DKIM: Sendmail DKIM Filter v2.8.3 g3.mta1.grou.ps 31218246D96
From: Ebi George dont-reply@grou.ps
Subject: New Private Message from Hotel
Message-ID: <f3ed678f2d0ba312b82a0b7a0b57d036@hotelc.grou.ps>
X-Mailer: GROU.PS Mailer
List-Unsubscribe: <mailto:http://grou.ps/noemail.php?x1=THQ%5C%5D%5B%60Im1+%26H%22b_LgpF%29%5C&x2=T%262%3CN%3B%3A%28%3Fe2%3Ct%3CVxx%2F%40g%26%5C&gt;

New Private Message from Hotel
From: “Mrs Jenefar Gobat” <dont-reply@grou.ps>
Mrs Jenefar Gobat (from Hotel) sent you a private message:
PAN PACIFIC HOTEL JOB DISCRIPTIONS.
Suite 300-999 Canada Place Vancouver Canada.
From Mrs Jenefar Goba Manager PAN PACIFIC HOTEL Canada.
This Invitation mail is from PAN PACIFIC HOTEL Canada, Pls PAN PACIFIC Hotel Needs Men And Women, Who Can Work And Live here In Hotel PAN PACIFIC Hotel Will Pay For Your Ticket And The Visa Fee In Your Country,If You Are Interested kindly Contact us Back Ok.
E Mail; canadian_hotel@rocketmail.com
please reply me back
Mrs Jenefar Gobat General Manager PAN PACIFIC HOTELS VANCOUVER CANADA
To reply this message, you may want to join Hotel. If this was unsolicited and you get too many of these emails, please report this activity by forwarding to reportabuse@grou.ps

Return-Path: bounce@grou.ps
X-YahooFilteredBulk: 83.149.67.205
X-Originating-IP: [83.149.67.205]
Authentication-Results: mta1095.mail.gq1.yahoo.com from=grou.ps; domainkeys=neutral (no sig); from=grou.ps; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO g3.mta1.grou.ps) (83.149.67.205) by mta1095.mail.gq1.yahoo.com with SMTP; Sat, 20 Apr 2013 01:37:06 -0700
Received: from hotelc.grou.ps (app3.grou.ps [83.149.67.211]) by g3.mta1.grou.ps (Postfix) with ESMTP id D5F3724663A
X-DKIM: Sendmail DKIM Filter v2.8.3 g3.mta1.grou.ps D5F3724663A
From: Mrs Jenefar Gobat <dont-reply@grou.ps>
Subject: New Private Message from Hotel

New Private Message from Hotel

Saturday, April 20, 2013 10:58 AM
 
From:
“Mrs Jenefar Gobat” <dont-reply@grou.ps>

Mrs Jenefar Gobat (from Hotel) sent you a private message:

PAN PACIFIC HOTEL JOB DISCRIPTIONS.
Suite 300-999 Canada Place Vancouver Canada.
From Mrs Jenefar Goba , Manager PAN PACIFIC HOTEL Canada.
This Invitation mail is from PAN PACIFIC HOTEL Canada, Pls PAN PACIFIC Hotel Needs Men And Women, Who Can Work And Live here In Hotel PAN PACIFIC Hotel Will Pay For Your Ticket And The Visa Fee In Your Country,If You Are Interested kindly Contact us Back Ok.
E Mail; canadian_hotel@rocketmail.com
please reply me back
Mrs Jenefar Gobat General Manager PAN PACIFIC HOTELS VANCOUVER CANADA

To reply this message, you may want to join Hotel. If this was unsolicited and you get too many of these emails, please report this activity by forwarding to reportabuse@grou.ps

Return-Path: <bounce@grou.ps>
X-YahooFilteredBulk: 83.149.67.201
X-Originating-IP: [83.149.67.201]
Authentication-Results: mta1083.mail.gq1.yahoo.com
Received: from 127.0.0.1 (EHLO g2.mta1.grou.ps) (83.149.67.201) by mta1083.mail.gq1.yahoo.com with SMTP; Sat, 20 Apr 2013 03:59:33 -0700
Received: from hotelc.grou.ps (app2.grou.ps [83.149.67.210]) by g2.mta1.grou.ps (Postfix) with ESMTP id 18F5C245D77
From: Mrs Jenefar Gobat <dont-reply@grou.ps>
Subject: New Private Message from Hotel
X-Mailer: GROU.PS Mailer
List-Unsubscribe: <mailto:http://grou.ps/noemail.php?x1=THQ%5C%5D%5B%60Im1+%26H%22b_LgpF%29%5C&x2=T%262%3CN%3B%3A%28%3Fe2%3Ct%3CVxx%2F%40g%26%5C&gt;

 
 

Tags: , , , , , , , , , , ,

“Paypal Service Support”

WARNING – EMAIL SCAM / PAYPAL PHISHING ATTACK

Subject: Notice Of Policy Uptadeþ

This is an automated email, please do not reply

Dear PayPal User
Your account has been limited : You Must Confirm Your Information!

Please click on the following link to Confirm It:

Click here to Confirm Your Account Information.

You Must Confirm Your Information To Save It .

Thanks You For Helping,
The PayPal Team

Need Assistance?
We’re happy to help by phone at 1-514-748-5774, Monday to Friday 9:00am to 5:00 pm EST, or by email
Copyright 2012. All rights reserved. PayPal

Email ID: 15464

Return-Path: west-heaton.co.uk@hosts.co.uk
X-YahooFilteredBulk: 85.233.160.25
Received-SPF: pass (domain of hosts.co.uk designates 85.233.160.25 as permitted sender)
X-Originating-IP: [85.233.160.25]
Authentication-Results: mta1107.mail.gq1.yahoo.com from=hosts.co.uk
Received: from 127.0.0.1 (EHLO outgoing-smtp.namesco.net) (85.233.160.25) by mta1107.mail.gq1.yahoo.com
Received: from [192.168.0.76] (helo=nutmeg.hosts.co.uk) by outgoing-smtp.namesco.net with esmtp (Exim 4.72) (envelope-from <west-heaton.co.uk@hosts.co.uk>) id 1UOXgz-0003sR-6K
Received: from west-heaton.co.uk by nutmeg.hosts.co.uk with local (Exim 4.69) (envelope-from <west-heaton.co.uk@hosts.co.uk>) id 1UOXgy-0005Gn-CD
Subject: Notice Of Policy Uptade<FE>
From: <Paypal@ServiceSupport.com>
Reply-To: Paypal@ServiceSupport.com
Message-Id: <E1UOXgy-0005Gn-CD@nutmeg.hosts.co.uk>
Sender: <west-heaton.co.uk@hosts.co.uk>
X-namescosender: 334336 45679
X-namesco: 192.168.0.151
X-Spam-Score: 2.0 (++)

Paypal@ServiceSupport.com <Paypal@ServiceSupport.com> 1-5147485774

 

Tags: , , , , , ,

“Nicholas Matrwe” a.k.a “Nicholas Conel Dunii”

WARNING – NIGERIAN SCAM / EMAIL SCAM

This Nigerian scammer sent me several idenical emails however, he was using different email addresses. He has been posted on Scammer419 over the months under various names and differents scams including childcare scams, spell caster scams, etc. Look below for additional names and email addresses.

Subject Line: Inquiry
Dear,

Having gone through your listed products, we offer great interest to do a purchase agreement with your company. Please get back to us with the following information

Please Quote.

1. Prices FOB
2. Payment terms
3. Delivery Period
5. Specified delivery date assuming from the Date of Order.
Please your quick reply will be highly appreciated

Regards,
Mike
NESTLE USA, INC.;
Address – 383 MAIN AVE
5TH FL NORWALK CT 0685
Washington DC, DC
Tel 1-202-386-6754
Tel 1-239-645-4730
Fax 1-650-989-1209

Return-Path: matrwe@yahoo.com
X-YahooFilteredBulk: 202.158.87.131
X-Originating-IP: [202.158.87.131]
Authentication-Results: mta1286.mail.ac4.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO ommo.net) (202.158.87.131) by mta1286.mail.ac4.yahoo.com with SMTP; Sat, 23 Mar 2013 06:01:22 -0700
From: “Nicholas” <matrwe@yahoo.com>
Reply-To: matrwe@yahoo.com
To: hugemelvin@yahoo.com

X-Originating-IP: 207.236.237.38

12023866754
12396454730
16509891209
+33-476750767
+33476750989

List of names / addresses used by this scammer;

Nicholas matrwe@yahoo.com ( Nicholas Matrwe )
Nicholasconeldunii@yahoo.com ( Nicholas Coneldunii )
coneldunii@yahoo.com ( Conel Dunii )
red4x4tj@yahoo.com
hugemelvin@yahoo.com ( Huge Melvin / Melvin Huge )
upesaspelltemple65@yahoo.com ( Upesa Spell Temple ) – If you type Upesa Spell Temple in the search log (top right-hand corner) you will see past scams sent under this name/email address.
brigettetre@yahoo.com ( Brigette Tre )
armstrongcare1@yahoo.com ( Armstrong Care )
collinpeterclaim1@yahoo.com ( Collin Peter Claim / Peter Collins Claim )
ironhilldaycare1@yahoo.com ( Iron Hill Daycare )
operator12@taishan-international.biz
Skype: operator1286
operator1286@hotmail.fr
anthonywebb01@yahoo.com ( Anthony Webb ) – The name/email address sounded familiar so I searched this site and re-discovered a childcare scam sent by this scammer.

 
Leave a comment

Posted by on 03/24/2013 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , ,

“Mr. Ibrahim Larmode” a.k.a “Henry Ezeobi” a.k.a “Mr. Andrew Leek”

LOTTERY SCAM / RECOVERY SCAM

Click here for other emails, names, addresses, etc used by this scammer who also spells his (fake) name as Ibrahim Lamorde

<h3 “”=”” tabindex=”-1″ id=”yui_3_7_2_1_1371776783900_2639″> Economic Financial Crimes Commission {EFCC}
From: (E.F.C.C) Benin Republic email328282@earthlink.net
This message contains blocked images

EFCC Nigeria  - Home Page

BENIN REPUBLIC FOREIGN  PAYMENT INVESTIGATION DEPARTMENT
FROM THE DESK OF ALHAJI NUHU RIBADU THE ECONOMIC CRIMES COMMISSION E.F.C.C BENIN REPUBLIC REF NO:…PDSP/NSI/OO5/ DSF2012

E-MAIL ADDRESS ( 
eco_nomicfinancial@yahoo.com.ph 
MOTTO: NO BODY IS ABOVE THE LAW!!!
Kind Attention Please:
The Economic Financial Crimes Commission {EFCC}, through our intelligence Monitoring Network have discovered that some group of unscrupulous elements have fraudulently using the federal government of Benin Republic letter headed paper to miss-inform creditors like you causing a lot of problems and irregularities towards the release of your long overdue payment because of all this fraudulent act this office has been dully intervened on the release of your funds. We have been mapped out to verify and investigate  properly on your fund by the current president of the Federal Republic of Benin, Dr Boni Yayi . Based on our findings in this investigation department we wish to warn you against some Miscreants, Hoodlums and Touts who go about scamming innocent people by claiming to be who they are not and thereby tarnishing the image of this wonderful country, Benin Republic.
We were informed that some Hoodlums are contacting you in respect to the collection of your fund which was long approved in your favor. As a matter of fact we have been on this investigation for some time, known to no one but the Presidency and some top government official who are in support of this investigation teamed to help stop fraudulent activities in country, and as well restore the image that has been tarnished by this group of people.
Although we have been able to come up with some good resul! t about the people that have extorted money from you illegally, and we wish to list them so that you will personally indicate them by writing back to us with the name of whom scammed you among them as we want to make sure your payment is routed to you without any further delay. Note that we will surely deal and bring to book the people using the names of government officials below. If only you will cooperate with us by co indicating correctly any of them.
The Scammers using below government officials names have been arrested:
1) Prof. Charles soludo
2) Chief Joseph Sanusi
3) Dr. R. Rasheed
4) Barrister Awele Ugorji
5) Rev. Nicholas Smith               (Guaranty Trust Bank Plc)
6) Barrister Ucheuzo Williams
7) Mr. Ernest Chukwudi Obi
8) Dr. Patrick Aziza     (Deputy Governor – Policy  / Board Member)
9) Mr. Tunde Lemo
Deputy Governor – Financial Sector Surveillance / Board Member
10) Mrs. W. D. A. Mshelia
Deputy Governor – Corporate Services / Board Members
11) Mrs. Okonjo Iweala
12) Mrs. Rita Ekwesili
13) Barr Jacob Onyema
14) Dr. Godwin Oboh:         Director Union Bank Of Benin.
15) Mr John Collins:                 Global Diplomat Director.
16) Mrs. Farida Waziri 

The above listed names are been traced/investigated by the EFCC and some of them have eloped the country, and note that if any of them is caught and found guilty he/she we go to jailed for 25 years (Twenty Five Years) as it is under the Degree 47 of the Constitution of this EFCC under the section 101(b)of criminal law.
You will received your  ATM Card to your designated address within less then 48hrs. As mandated scheduled through speed link Courier Service Company,
MEANWHILE, THE FOLLOWING DETAILS ARE FOR YOUR PERUSAL AND IMMEDIATE SHIPMENT OF YOUR ATM CASH PAYMENT CARD TO YOUR DOOR STEP SO AS TO EXPEDITE YOUR COMPLIANCE:-

(1). YOUR ATM CARD NUMBER IS::::::::::::::::::::: :637 955 331 3000 049 772
(2).! YOUR ATM ACTIVATION CODE NUMBER IS::::::::::::::::::::::: 401202
(3). YOUR ATM CARD PIN NUMBER IS:::::::::::::::::::::::::::: XXXX
(4). YOUR CARD EXPIRY DATE IS:::::::::::::::::::::::::8/ 6/14
(5). SPECIAL ANTI FRAUD UNIT SCREENED NUMBER IS::::::::::::SAFUCN2244923NG
(6). FEDERAL MINISTRY OF FINANCE (F.M.F) APPROVAL NUMBER IS::::::::::::FMF11
(9) DIPLOMATIC IMMUNITY COVERAGE NO: 2514.
(10) AIRPORT CHARGES OR FEE::::::::::::::::COVERED


The only $77.00 is required from you to enhance shipment delivery of this ATM Macter Card to your door step without any hitch and delay.
 
HOWEVER, KINDLY USE THE WESTERN UNION MONEY TRANSFER (WU) RECEIVER’S DETAILS BELOW TO SEND  FEE AS SOON AS YOU RECEIVE THIS NOTIFICATION RESPONSE TODAY SO AS TO FACILITATE SHIPMENT OF YOUR ATM CARD TO YOUR DOORSTEP AS QUICKLY AS POSSIBLE:-
 
Received Name: Ezeobi Henry,
Country:::Benin Republic
City::::::::Cotonou
Test Question: What For
Answer:Service
Amount: 
$77.00 Dollar
Sender Name:::
Mtcn No::::::::::: 

We apologize on behalf of the President and the people of Benin Republic for any delay and lost this must have coursed you in any way and promise that such thing will not occur again in the future.  More importantly, if  you are currently dealing with any one of them regarding your fund, we urge you to stop further contact with them as you are taking a very big risk!!!  It might interest you to know that you will never get your fund from them as they have nothing to offer.

 
The hoodlums will continue coming up with expenses and thereby requesting for money from you until you go Bankrupt. we are here to fight crimes and serve humanity the best way we can. Official notice has been sent to Foreign Security Units in collaboration to ensure genuine and success implementation of all payment done over funds owed to beneficiaries. We shall further monitor your funds until you receive your fund.
 
We look forward to your maximum cooperation in anticipation.
Yours sincerely, Mallam Nuhu Ribadu Executive Chairman.
FROM THE DESK OF THE ECONOMIC CRIMES COMMISSION E.F.C.C

 419 scammers end up in jail!      MR.IBRAHIM LAMORDE,Executive Chairman.
Economic and Financial Crimes Commission. (E.F.C.C) Benin Republic


Return-Path: email328282@earthlink.net
X-YahooFilteredBulk: 209.86.89.61
X-Originating-IP: [209.86.89.61]
Authentication-Results: mta1205.mail.bf1.yahoo.com
Received: from 127.0.0.1 (EHLO elasmtp-galgo.atl.sa.earthlink.net) (209.86.89.61)
by mta1205.mail.bf1.yahoo.com with SMTP; Mon, 03 Jun 2013 06:42:46 -0700 ELNK-Trace:X-Originating-IP;
Received: from [209.86.224.35] (helo=elwamui-huard.atl.sa.earthlink.net)
by elasmtp-galgo.atl.sa.earthlink.net with esmtpa (Exim 4.67)
(envelope-from <email328282@earthlink.net>)
id 1UjV23-0002Tj-Gr; Mon, 03 Jun 2013 09:42:43 -0400
Received: from 212.119.105.65 by webmail.earthlink.net with HTTP; Mon, 3 Jun 2013 09:42:42 -0400
Message-ID: <1281314.1370266963089.JavaMail.root@elwamui-huard.atl.sa.earthlink.net>
From: “(E.F.C.C) Benin Republic” <email328282@earthlink.net>
Reply-To: “(E.F.C.C) Benin Republic” <eco_nomicfinancial@yahoo.com.ph>
Subject: Economic Financial Crimes Commission {EFCC}
X-Mailer: EarthLink Zoo Mail 1.0
X-ELNK-Trace: d8290f4c8da1a38cbf0e0445e0bafa369ef193a6bfc3dd4848f0c54b8a9dee0e076609499e925095a8438e0f32a48e08350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 209.86.224.35

MR. IBRAHIM LAMORDE Executive Chairman
Economic and Financial Crimes Commission EFCC

Subject Line: RE: PLEASE CONFIRM IF DEAD OR ALIVE‏‏
ECONOMIC & FINANCIAL CRIMES COMMISSION
INVESTIGATION OFFICE
NIGERIA – DESK
E-mail: ibrahimlarmode79@hotmail.com
Our…..Ref. No EFCC/NG/FL/06/11

Attention; Beneficiary,

I have just received your respond in regards to my message and to be candid with you I was surprised to hear that you did not authorized Mr. Kyle Burris to receive your fund on your behalf, as a matter of fact you are alive and healthy. Meanwhile, I have reported him to the Police which he has been arrested for trying to impersonate your fund with his false claim and they promised to jail him.

For your information, you are require to reconfirm the below info to enable me document it in your Payment file to avoid further complication over your fund.

YOUR FULL NAME
YOUR CONTACT ADDRESS
TELEPHONE NUMBERS
OCCUPATION
AGE

With this information we are going to update your account and send it to the paying bank for them to process the release of your fund immediately without further delay.

Thanks,
Mr. Ibrahim Lamorde
Chairman EFCC Investigation Office

Return-Path: ibrahimlarmode79@hotmail.com
Received-SPF: pass (domain of hotmail.com designates 65.55.111.90 as permitted sender)
X-Originating-IP: [65.55.111.90]
Authentication-Results: mta1049.mail.ac4.yahoo.com from=hotmail.com; domainkeys=neutral (no sig); from=hotmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO blu0-omc2-s15.blu0.hotmail.com) (65.55.111.90) by mta1049.mail.ac4.yahoo.com with SMTP; Mon, 18 Mar 2013 21:35:00 -0700
Received: from BLU162-W42 ([65.55.111.72]) by blu0-omc2-s15.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 18 Mar 2013 21:35:00 -0700
X-EIP: [SetNYBkHsWCu+xp5rwuo8TTkE55k8m3r]
X-Originating-Email: [ibrahimlarmode79@hotmail.com]
Message-ID: <BLU162-W42488CD096C1619EA036B5C9E90@phx.gbl>
Return-Path: ibrahimlarmode79@hotmail.com
From: “Mr. Ibrahim Larmode” <ibrahimlarmode79@hotmail.com>
Subject: =?windows-1256?Q?RE:_PLEASE?= =?windows-1256?Q?_CONFIRM_I?= =?windows-1256?Q?F_DEAD_OR_?= =?windows-1256?Q?ALIVE=FE=FE?=

Mr Ibrahim Larmode ibrahimlarmode79@hotmail.com

 
Leave a comment

Posted by on 03/20/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

“EBotes” a.k.a “Stephenie Barry”

WARNING – EMAIL SCAM

scam-alert

Subject Line: CONFERENCE INVITATION 2013

PLEASE CONTACT Stephenie Barry VIA EMAIL:stephenie_barry@aol.com OR THE CONFERENCE SECRETARIAT VIA EMAIL:ISSAVWC_summit@mynet.com DIRECTLY FOR MORE INFORMATION

Dear Sir/Madam.

You are cordially invited to join us at the international summit against sexual assault, violence on women and children (ISSAVWC 2013). The international summit will commence from 21st to 24th and 27th to 30th May 2013 here in United States of America and Senegal.

Our mission is to support and help Strengthening the Fight against sexual assault, violence on women and children. In this conference, we want to gather the world and offer a rich program with lectures, symposia, poster sessions and social events.

If you are interested in attending this summit, please contact the ISSAVWC Secretariat for more information via email: ISSAVWC_summit@mynet.com and register as soon as possible. You can also contact me via my E-mail:stepheniebarry@aol.com.

We look forward to welcoming you all to ISSAVWC 2013

Sincerely,

Stephenie Barry,
E-mail:stephenie_barry@aol.com

Return-Path: <ebotes@ncpg.gov.za>
X-YahooFilteredBulk: 163.195.16.11
Received-SPF: none (domain of ncpg.gov.za does not designate permitted sender hosts)
X-Originating-IP: [163.195.16.11]
Authentication-Results: mta1204.mail.ac4.yahoo.com from=ncpg.gov.za; domainkeys=neutral (no sig); from=ncpg.gov.za; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.wcape.gov.za) (163.195.16.11) by mta1204.mail.ac4.yahoo.com with SMTP; Mon, 18 Mar 2013 16:10:45 -0700
Received: from [10.240.6.226] (helo=NCSRV1.ncpg.gov.za) by mail.wcape.gov.za with esmtp (Exim 4.66) (envelope-from <ebotes@ncpg.gov.za>) id 1UHjCV-0002Cc-PS; Tue, 19 Mar 2013 01:10:43 +0200
Received: from NCDOM-MTA by NCSRV1.ncpg.gov.za with Novell_GroupWise; Tue, 19 Mar 2013 01:07:08 +0200
Message-Id: <5147BA3702000089000144B2@NCSRV1.ncpg.gov.za>
X-Mailer: Novell GroupWise Internet Agent 7.0.3
From: “EBotes” <ebotes@ncpg.gov.za>
Subject: CONFERENCE INVITATION 2013

EBotes ebotes@ncpg.gov.za
stephenie_barry@aol.com
ISSAVWC_summit@mynet.com

 
Leave a comment

Posted by on 03/20/2013 in Other

 

Tags: , , , , ,

“Mathew Annan”

WARNING – NIGERIAN SCAM / BUSINESS PROPOSAL SCAM

I don’t know who Jenny Wren is or why this scammer is calling me that name. Oh wait, I DO no why. Because they are dumb as rocks and disorganized. He did email me back a second time with the correct (fake) scam baiting name I use. I’ve posted all the emails below.

Subject Line: Re: PLEASE I NEED YOUR ASSISTANCE.,,
Dear ,

First of all let me start by thanking you for your kind and swift response indeed i am very happy to hear from you and i hope and pray that Almighty God will bless us,protect us and guide us as we partake into this projects.My previous email was actually meant for you but may be i made a mistake with your name but i did had your correct email address but all the same i still thank God that i have been able to locate you.

Please kindly provide m with your following details this will enable me to use your details to draft a message which you will be sending to the Paying Bank where the funds was deposited, i will provide you with the full details of the Bank and the contract names,codes and numbers and as soon as you send them to the Bank they will listen to you after crosschecking with what they had in their records.

Kindly send me the following details:
Full Name:
Address:
Country:
Age:
Occupation:
Telephone Number.

As soon as i receive these details we will proceed further,once again thanks very much for your time and your co-operation.Please feel free to call me on my phone as soon as you receive this message.

Yours Sincere,
Mathew Annan.
RESIDENTIAL ADDRESS
No GHD 5654 ROMA-HILLS
ESTATE ACCRA
GHANA.
+233240846088

Return-Path: <annan_mathew@yahoo.co.uk>
X-Originating-IP: [77.238.189.197]
Authentication-Results: mta1076.mail.gq1.yahoo.com
Received: from 127.0.0.1 (HELO nm9-vm0.bullet.mail.ird.yahoo.com) (77.238.189.197) by mta1076.mail.gq1.yahoo.com with SMTP; Wed, 20 Mar 2013 17:02:14 -0700
Received: from [77.238.189.55] by nm9.bullet.mail.ird.yahoo.com with NNFMP; 21 Mar 2013 00:02:12 -0000
Received: from [212.82.108.132] by tm8.bullet.mail.ird.yahoo.com with NNFMP; 21 Mar 2013 00:02:12 -0000
Received: from [127.0.0.1] by omp1037.mail.ird.yahoo.com with NNFMP; 21 Mar 2013 00:02:12 -0000
X-Yahoo-Newman-Id: 503156.49297.bm@omp1037.mail.ird.yahoo.com
Received: from [41.215.162.88] by web172204.mail.ir2.yahoo.com via HTTP; Thu, 21 Mar 2013 00:02:12 GMT
References: <20130319081637.3343416CF403C@orcus.ibone.ch> <1363762517.87764.YahooMailClassic@web161002.mail.bf1.yahoo.com>
Message-ID: <1363824132.85133.YahooMailNeo@web172204.mail.ir2.yahoo.com>
From: Mathew Annan <annan_mathew@yahoo.co.uk>
Reply-To: Mathew Annan annan_mathew@yahoo.co.uk
Subject: Re: PLEASE I NEED YOUR ASSISTANCE Annan Mathew annan_mathew@yahoo.co.uk +23-3240846088

Subject Line: PLEASE I NEED YOUR ASSISTANCE.

Hello Dear Friend Jenny Wren

I am Mathew Annan, a Ghanaian Origin, a co-coordinator contract
Award and re-view committee. Being the Head of the Committee, Our
main responsibilities/work is to award, re-view all government
contract projects to co-operate individuals or organizations. I was
very impressed with your profile and your achievements and that is why
i am contacting you for this transaction.

The only source we benefit from this contract project is over
invoicing the prices of contracts, apart from our monthly salary. This
is to tell you clear the source of this fund is “over quotation from
contract projects” Recently, I and my partner was able to secure/save
the total sum of ($31,000,000.00) which we made from the recently
completed contract awarded for the supply and construction of
Ghanaian oil refinery company that started work last year. The whole
amount was deposited in an escrow account of bank for further credit
to you once you applied for the release through my guide line.

The reason why you were contacted to receive this fund on my behalf is because:
(1) We are not allow to operate on foreign account transfer
transactions, while in service,
(2)We cannot establish foreign project while on duty post, unless
after our resignation or retirement from government service .So what i
want you to do is, i will release the contact of the bank, including
the account information for you to contact the bank directly for the
release and transfer of the money into your own bank account.

Once you reply me, I will write an application letter, and send it
to you, to forward it to the bank address which I will give you, very
simple, there is no risk involve, am giving you 100% assurance, “so
many people who was working here as the Head of this Organization has
done this and some resigned, some re-tired after succeeding.

Meanwhile for your helping me in receiving this Fund into your own
Account, you will have 35% of the total fund as your benefit as soon
as you confirmed that the money is in your account. It will take less
than seven working days to conclude this transaction once the bank
received and approve your application.

Note, that you will not let any bank officials here know that I am the
one that gave you these information, as soon as you received this
money, I will resign and come to join you there for investment.

Thanks for your understanding and kind co-operation.
Hope to hear from you soonest.

Yours Sincere,
Mathew Annan.
RESIDENTIAL ADDRESS
No GHD 5654 ROMA-HILLS
ESTATE ACCRA
GHANA.
+233240846088

Return-Path: <anonymous@intranetsessccola.mmteamservers.net>
X-YahooFilteredBulk: 91.142.223.111
Received-SPF: none (domain of intranetsessccola.mmteamservers.net does not designate permitted sender hosts)
X-Originating-IP: [91.142.223.111]
Authentication-Results: mta1028.mail.ne1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO intranetsessccola.mmteamservers.net) (91.142.223.111) by mta1028.mail.ne1.yahoo.com with SMTP; Mon, 18 Mar 2013 23:26:24 +0000
Message-ID: <20130318172541.24301.qmail@intranetsessccola.mmteamservers.net>
Subject: PLEASE I NEED YOUR ASSISTANCE.
From: Mr Mathew Annan <mathewannan22@gmail.com>
Reply-To: mrmathewannan@gmail.com

Return-Path: <ftpweb524@orcus.ibone.ch>
X-YahooFilteredBulk: 46.163.85.237
Received-SPF: none (domain of orcus.ibone.ch does not designate permitted sender hosts)
X-Originating-IP: [46.163.85.237]
Authentication-Results: mta1298.mail.mud.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO orcus.ibone.ch) 46.163.85.237 by mta1298.mail.mud.yahoo.com with SMTP; Tue, 19 Mar 2013 01:16:38 -0700
Received: by orcus.ibone.ch (orcus.ibone.ch, from userid 1168) id 3343416CF403C; Tue, 19 Mar 2013 09:16:37 +0100 (CET)
Subject: PLEASE I NEED YOUR ASSISTANCE.,,
From: Mr Mathew Annan <mathew_annan@yahoo.com>
Reply-To: annan_mathew@yahoo.co.uk
Message-Id: <20130319081637.3343416CF403C@orcus.ibone.ch>

+23 3240846088 Mr Mathew Annan a.k.a Annan Mathew
mathewannan22@gmail.com
mrmathewannan@gmail.com
anonymous@intranetsessccola.mmteamservers.net
mathew_annan@yahoo.com
annan_mathew@yahoo.co.uk
ftpweb524@orcus.ibone.ch

Why would someone need to use 6+ email addresses just to send out an email or two?.. Only scammers use multiple email addresses.

Subject: Hello Dear Friend

From Mathew Annan
+233240846088
Email:mathew_annan@yahoo.com

Hello Dear Friend
I am Mathew Annan, a Ghanaian Origin, a co-coordinator contract
Award and re-view committee. Being the Head of the Committee, Our
main responsibilities/work is to award, re-view all government
contract projects to co-operate individuals or organizations. I was
very impressed with your profile and your achievements and that is why
i am contacting you for this transaction.
The only source we benefit from this contract project is over
invoicing the prices of contracts, apart from our monthly salary. This
is to tell you clear the source of this fund is “over quotation from
contract projects” Recently, I and my partner was able to secure/save
the total sum of ($31,000,000.00) which we made from the recently
completed contract awarded for the supply and construction of
Ghanaian oil refinery company that started work last year. The whole
amount was deposited in an escrow account of bank for further credit
to you once you applied for the release through my guide line.
The reason why you were contacted to receive this fund on my behalf is because:
(1) We are not allow to operate on foreign account transfer
transactions, while in service,
(2)We cannot establish foreign project while on duty post, unless
after our resignation or retirement from government service .So what i
want you to do is, i will release the contact of the bank, including
the account information for you to contact the bank directly for the
release and transfer of the money into your own bank account.
Once you reply me, I will write an application letter, and send it
to you, to forward it to the bank address which I will give you, very
simple, there is no risk involve, am giving you 100% assurance, ?so
many people who was working here as the Head of this Organization has
done this and some resigned, some re-tired after succeeding.
Meanwhile for your helping me in receiving this Fund into your own
Account, you will have 35% of the total fund as your benefit as soon
as you confirmed that the money is in your account. It will take less
than seven working days to conclude this transaction once the bank
received and approve your application.
Note, that you will not let any bank officials here know that I am the
one that gave you these information, as soon as you received this
money, I will resign and come to join you there for investment.
Thanks for your understanding and kind co-operation.
Hope to hear from you soonest.
NB: PLEASE GET BACK TO ME THROUGH MY PERSONAL CONTACT EMAIL ADDRESS: mathew_annan@yahoo.com
Yours Sincere,
Mathew Annan.
RESIDENTIAL ADDRESS
No GHD 5654 ROMA-HILLS
ESTATE ACCRA
GHANA.
+233240846088
Email: mathew_annan@yahoo.com
**************** CAUTION – Disclaimer *****************
This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely for the use of the addressee(s). If you are not the intended recipient,please notify the sender by e-mail and delete the original message. Further, you are not to copy, disclose, or distribute this e-mail or its contents to any other person and any such actions are unlawful. This e-mail may contain viruses. NTPC Ltd. has taken every reasonable precaution to minimize this risk, but is not liable for any damage you may sustain as a result of any virus in this e-mail. You should carry out your own virus checks before opening the e-mail or attachment. NTPC Ltd reserves the right to monitor and review the content of all messages sent to or from this e-mail address. Messages sent to or from this e-mail address may be stored on the NTPC Ltd e-mail system. If you have received this email in error, please notify to mailadmin@ntpc.co.in
***NTPC Ltd******** End of Disclaimer

mailadmin@ntpc.co.in
mathew_annan@yahoo.com
rpjstephen@ntpc.co.in <rpjstephen@ntpc.co.in>
+23-3240846088
Return-Path: rpjstephen@ntpc.co.in
X-YahooFilteredBulk: 202.54.110.183
Received-SPF: none (domain of ntpc.co.in does not designate permitted sender hosts)
X-Originating-IP: [202.54.110.183]
Authentication-Results: mta1369.mail.ne1.yahoo.com
Received: from 127.0.0.1 (EHLO CorpMR1.ntpc.co.in) (202.54.110.183) by mta1369.mail.ne1.yahoo.com with SMTP; Wed, 27 Mar 2013 04:01:38 +0000
From: Mathew Annan
Subject: Hello Dear Friend
From: rpjstephen@ntpc.co.in
Message-ID: <OFF54A9AD1.05E22CBB-ON65257B3A.007A66D0-65257B3A.007A66E3@ntpc.co.in>
X-Mailer: Lotus Domino Web Server Release 8.5FP1 June 15, 2009
X-MIMETrack: Serialize by Notes Server on CorpMR1/NTPC/IN(Release 8.5FP1|June 15, 2009) at 03/27/2013 03:46:57 AM, Serialize complete at 03/27/2013 03:46:58 AM, Itemize by Notes Server on CorpMR1/NTPC/IN(Release 8.5FP1|June 15, 2009) at 03/27/2013 03:46:58 AM, Serialize by Router on CorpMR1/NTPC/IN(Release 8.5FP1|June 15, 2009) at 03/27/2013 09:31:21 AM, Serialize complete at 03/27/2013 09:31:21 AM +23 3240846088
X-KeepSent: F54A9AD1:05E22CBB-65257B3A:007A66D0; type=4; name=$KeepSent
X-Notes-Item: deleted@yahoo.com; name=AltBlindCopyTo

Re: Hello Mr. Annan
From: “Mathew Annan” <mathew_annan@yahoo.com>

Dear Friend N. Jones,

Thanks so much for your kind and swift response i am indeed very happy and glad that you are interested in working this out with me and i promise you that everything is going to be fine with God by our side.

Provide me with the following details to enable us proceed further:

1. Full Name:
2. Address:
3.Occupation:
4.Telephone No:
5.Age:

As soon as i receive these information’s from you i will use your details to draft a message which you will be sending to the Paying Bank where the fund was deposited,i am going to provide you with the Bank Details together with other relevant details regarding the name of the contract,codes,number and every other thing.

Feel free to call me through my private telephone Number which is +233240846088

Thanks
Mathew Annan
+233240846088.

Return-Path: <mathew_annan@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-Originating-IP: [98.139.212.154]
Authentication-Results: mta1237.mail.sk1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm3-vm0.bullet.mail.bf1.yahoo.com) (98.139.212.154) by mta1237.mail.sk1.yahoo.com with SMTP; Wed, 27 Mar 2013 01:57:33 -0700
Received: from [98.139.212.153] by nm3.bullet.mail.bf1.yahoo.com with NNFMP; 27 Mar 2013 08:57:30 -0000
Received: from [98.139.212.236] by tm10.bullet.mail.bf1.yahoo.com with NNFMP; 27 Mar 2013 08:57:30 -0000
Received: from [127.0.0.1] by omp1045.mail.bf1.yahoo.com with NNFMP; 27 Mar 2013 08:57:30 -0000
X-Yahoo-Newman-Id: 928523.58842.bm@omp1045.mail.bf1.yahoo.com
Received: from [41.215.162.97] by web162606.mail.bf1.yahoo.com via HTTP; Wed, 27 Mar 2013 01:57:30 PDT
X-Mailer: YahooMailWebService/0.8.139.530
References: <1364363268.18835.YahooMailClassic@web161003.mail.bf1.yahoo.com>
Message-ID: <1364374650.21122.YahooMailNeo@web162606.mail.bf1.yahoo.com>
From: Mathew Annan <mathew_annan@yahoo.com>
Reply-To: Mathew Annan mathew_annan@yahoo.com
Subject: Re: Hello Mr. Annan

+23 324 084 6088

 
 

Tags: , , , , , , , , , , , , , , ,

“Gary Smith”

WARNING – EMAIL SCAM / PHONY LOAN OFFER

online-loan-scam

Subject Line: [ No Subject ]

Do You Need A Loan? If Yes Fill The Form Below
Name:
Amount:
Duration:
Mobile:
Country:

Return-Path: <abcfinancefirm@gmail.com>
Received-SPF: pass (domain of gmail.com designates 209.85.128.193 as permitted sender)
X-Originating-IP: [209.85.128.193]
Authentication-Results: mta1011.mail.ne1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-ve0-f193.google.com) (209.85.128.193) by mta1011.mail.ne1.yahoo.com
Received: by mail-ve0-f193.google.com with SMTP id 15so59550vea.0
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:reply-to:date:message-id:subject:from:to :content-type; bh=tjkC4Cn8Xdj0mdl/LbkLnu9xowMzaMvna8UpPsd4t7g=; b=gb7hx3ymCCI82Nw2lqe7BQ2/73GfCKBErZZIQddx7JWY2yrAuu1emP5DMHszdSuVgZ nQZfUgwPLkjQy3FVkxL2yekJSJe3mXmmXGjR3jBQC9aBvmHOj/qFqT8EwqY7HXXJUhEB xnBAXlFLkFTsTCIsv0w2Om87kQmX+w3PeFFejLPHbSSjvFpK8aJOMCudUqe1kBnCULbO acB8aauvIeAV0OqPYjY9hT/07iFhlpaexCPRuOM6tpROlhBmkVx8YEN3emtkbp37Bapc WXcaPZg82NRcsp9fQ2TotaeeVT4HCbcMxT7E9W/WFv7N519mMrgMshKylvaf14r3Xb5I mCww==
X-Received: by 10.58.44.194 with SMTP id g2mr1546810vem.1.1363686526577; Tue, 19 Mar 2013 02:48:46 -0700 (PDT)
Received: by 10.52.170.52 with HTTP; Tue, 19 Mar 2013 02:48:46 -0700 (PDT)
Reply-To: garysmithloaninvestment@gmail.com
From: gary smith <abcfinancefirm@gmail.com>

gary smith abcfinancefirm@gmail.com
Abc Finance Firm
Reply-Address: garysmithloaninvestment@gmail.com Gary Smith Loan Investment

 
Leave a comment

Posted by on 03/20/2013 in Other

 

Tags: , , , , , , , ,

“Nicholas Coneldunii” aka “Conel Dunii”

WARNING – EMAIL SCAM

I don’t have a company and this scammer hasn’t gone threw anything.

Subject Line: Please quote.

Dear,

Having gone through your listed products, we offer great interest to do a purchase agreement with your company. Please get back to us with the following information

Please Quote.

1. Prices FOB
2. Payment terms
3. Delivery Period
5. Specified delivery date assuming from the Date of Order.
Please your quick reply will be highly appreciated

Nicholas.
amex furniture and fabrics
2 avenues Gabriel
75382 Paris Codex 08. France.
PH: +33 4 7675 0767 / FX: +33 4 7675 0989
Mail: operator12@taishan-international.biz
Skype: operator1286
MSN: operator1286@hotmail.fr

X-Originating-IP: [207.236.237.38]
Authentication-Results: mta1296.mail.sk1.yahoo.com
Received: from 127.0.0.1 (EHLO toroondcbmts04-srv.bellnexxia.net) (207.236.237.38) by mta1296.mail.sk1.yahoo.com with SMTP; Tue, 19 Mar 2013 07:54:11 -0700
Received: from toip38-bus.srvr.bell.ca ([67.69.240.39]) by toroondcbmts04-srv.bellnexxia.net (InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP id <20130319145410.FLKF2338.toroondcbmts04-srv.bellnexxia.net@toip38-bus.srvr.bell.ca>
X-IronPort-AV: E=Sophos;i=”4.84,872,1355115600″; d=”scan’208″;a=”416365694″
Received: from ntscanada.com ([207.61.132.211]) by toip38-bus.srvr.bell.ca with ESMTP;
Received: from [192.168.100.252] ([202.158.86.71]) by ntscanada.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 19 Mar 2013 10:56:44 -0400
From: Nicholas coneldunii@yahoo.com
Date: Tue, 19 Mar 2013 21:53:57 +0700
Reply-To: coneldunii@yahoo.com
Return-Path: Nicholasconeldunii@yahoo.com
Message-ID: <EXMAILKiaexdDAO2Rpy000015bd@ntscanada.com>
Nicholas@yahoo.com Nicholas@yahoo.com

Return-Path: <Nicholasconeldunii@yahoo.com>
X-Originating-IP: [207.236.237.39]
Authentication-Results: mta1318.mail.bf1.yahoo.com from=; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO toroondcbmts05-srv.bellnexxia.net) (207.236.237.39) by mta1318.mail.bf1.yahoo.com with SMTP; Tue, 19 Mar 2013 08:05:27 -0700
Received: from toip58-bus.srvr.bell.ca ([67.69.240.185]) by toroondcbmts05-srv.bellnexxia.net (InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP id 20130319150527.MNRG26520.toroondcbmts05-srv.bellnexxia.net@toip58-bus.srvr.bell.ca
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Av9/AIB3SFHPPYTT/2dsb2JhbABDgkEGAYEVZIZnpQoTghkXkhAEBAGBVhZ0ghcBAQEGAQEBAxAggV4BDgExhUkBAQEBAwGCJQEBAQgBAQIOAaEmhlqISgmBaIVyASMDAYoLgWYoijeBGYEcMYMqA4F1hko0iiaBZ4dcgQGEaoQ7Al2DFoFn
X-IronPort-AV: E=Sophos;i=”4.84,872,1355115600″; d=”scan’208″;a=”18212833″
Received: from ntscanada.com ([207.61.132.211]) by toip58-bus.srvr.bell.ca with ESMTP; 19 Mar 2013
Received: from [192.168.100.252] ([202.158.86.71]) by ntscanada.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 19 Mar 2013 11:07:46 -0400
Subject: Please quote.
From: Nicholas coneldunii@yahoo.com
Reply-To: coneldunii@yahoo.com Conel Dunii
Return-Path: Nicholasconeldunii@yahoo.com
Message-ID: <EXMAILPVUlT3XIhFTN600001763@ntscanada.com>

Phone: +3-3476750767 / Fax: +33476750989

Return-Path: <Nicholasconeldunii@yahoo.com>
X-YahooFilteredBulk: 207.236.237.41
X-Originating-IP: [207.236.237.41]
Authentication-Results: mta1160.mail.gq1.yahoo.com from=; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO toroondcbmts07-srv.bellnexxia.net) (207.236.237.41) by mta1160.mail.gq1.yahoo.com with SMTP; Tue, 19 Mar 2013 07:40:42 -0700
Received: from toip34-bus.srvr.bell.ca ([67.69.240.35]) by toroondcbmts07-srv.bellnexxia.net (InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP id <20130319144042.KRPM15122.toroondcbmts07-srv.bellnexxia.net@toip34-bus.srvr.bell.ca>
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Av9/AHR1SFHPPYTT/2dsb2JhbABDgkEGAYEVZIZnpRATghkXkhAEBAGBbHSCFwEBAQYBAQEDECCBXgEOATGFSQEBAQEDAYIlAQEBCAEBAg4BoSCGWohKCYFohXEBIwMBiguBZiiKN4EZgRwxgyoDgXWGSjSKJoFnh1yBAYRqhDsCXYMWgWc
X-IronPort-AV: E=Sophos;i=”4.84,872,1355115600″; d=”scan’208″;a=”412232622″
Received: from mail.obright.ca (HELO ntscanada.com) ([207.61.132.211]) by toip34-bus.srvr.bell.ca with ESMTP; 19 Mar 2013 10:40:33 -0400
Received: from [192.168.100.252] ([202.158.86.71]) by ntscanada.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 19 Mar 2013 10:43:14 -0400
Content-Description: Mail message body
Subject: Please quote.
From: Nicholas coneldunii@yahoo.com
Date: Tue, 19 Mar 2013 21:40:28 +0700
Reply-To: coneldunii@yahoo.com
Return-Path: Nicholasconeldunii@yahoo.com
Message-ID: <EXMAILwPGxgelXDeqoM0000139e@ntscanada.com>

 
Leave a comment

Posted by on 03/20/2013 in Other

 

Tags: , , , , , , , , , , ,

 
%d bloggers like this: