RSS

Tag Archives: Fake Check

“Dr. David Snead” ( James Udo)

WARNING – ATM CARD SCAM – ADVANCE FEE FRAUD

credit-card-scams

Subject Line: Attention Beneficiary

United Nations Assisted Program
Directorate of International Payment
United Nations Liaison Office – Africa

Attention Beneficiary,

This email is to notify you about the release of your outstanding payment
which is truly 3.500,000.00 Million Euro The Federal Government scheduled a
time frame to settle all foreign debts which includes
Contract/Inheritance/Lottery (Sponsored by Microsoft and Shell Petroleum
Lottery) and other international loans. News had it that over the past,
numerous individual(s) who happen to be impostors (claiming to be
individuals, banks and organizations) are claiming to release numerous sums
of fund via numerous ways.

You have two options to receive your payment which is either a Pin Based ATM
card or Certified Cashier’s Check. You are advised to select one out of the
two options on how you wish to receive your 3.500,000.00 Million Euro
through ATM card or Check which will be shipped via EMS COURIER COMPANY and
would get to you within 2 to 3 working days almost.

The actual fees for shipping your ATM Card/ Check is 249.99 Euro but because
EMS COURIER COMPANY have temporarily discontinued the C.O.D which gives you
the chance to pay when package is delivered for international shipping as
stated on their site,We had to sign a contract with them for bulk
shipping which makes the fees reduce from the actual 249.99 Euro to 149.99
Euro nothing more and no hidden fees of any sort! You are advised to contact
the dispatching officer responsible for the shipping of your Check or ATM
Card with the following information for shipping of your payment through
Check or ATM Card.

Contact: James Udo.

United Nation Dispatching Officer

E-Mail: atm@icreditbase.co.uk

TelePhone: +22964697400

Make Sure you provide him with the following information:

1,Your full Name.
2,Your Address where your payment will be dispatch to you:
3,Home/Cell Phone:
4,Preferred Payment Method (Check or ATM):

The dispatching officer will provide you with instructions on how you are to
make the payment of 149.99 Euro only for the shipping of your ATM Card or
Cashier’s Check. Remember that you are not paying any fees extra no matter
what. Once again note that the actual EMS COURIER COMPANY Retail Price is:
249.99 Euro Your Price (Because of our contract signed): 149.99 Euro
(100.00 Euro Savings!)

Respectfully,
Dr. David Snead
UN Envoy (African Region)

Return-Path: <snead@un.org>
X-YahooFilteredBulk: 97.79.236.67
Received-SPF: fail (domain of un.org does not designate 97.79.236.67 as permitted sender)
X-Originating-IP: [97.79.236.67]
Authentication-Results: mta1405.mail.mud.yahoo.com from=un.org
Received: from 127.0.0.1 (EHLO gvo23667.gvodatacenter.com) (97.79.236.67) by mta1405.mail.mud.yahoo.com with SMTP; Mon, 04 Mar 2013 05:54:33 -0800
Received: from localhost.localdomain ([127.0.0.1]:55430 helo=localhost) by gvo23667.gvodatacenter.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.80) (envelope-from <snead@un.org>) id 1UCVUa-0004Gf-LH; Mon, 04 Mar 2013 07:31:48 -0600
Received: from 41.74.2.52 ([41.74.2.52]) by 97.79.236.67 (Horde Framework) with HTTP;
Message-ID: <20130304073146.83652qj3zgufjdj6@97.79.236.67>
From: “Dr. David Snead” <snead@un.org>
Reply-to: atm@icreditbase.co.uk
Subject: Attention Beneficiary
User-Agent: Internet Messaging Program (IMP) H3 (4.3.11)
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – gvo23667.gvodatacenter.com
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain – un.org
X-Get-Message-Sender-Via: gvo23667.gvodatacenter.com: authenticated_id: info@brithway.com
Dr David Snead snead@un.org

Advertisements
 
Leave a comment

Posted by on 03/09/2013 in Lottery Scam

 

Tags: , , , , , , , , , ,

“UNITED NATION CLAIMS DEPARTMENT”

RECOVERY SCAM – COUNTERFEIT CHECK FRAUD – 419 SCAMMER

NOTE: YOU WILL NOTICE TWO HEADERS UNDER THE EMAIL. THAT IS BECAUSE I’VE RECEIVED MORE THAN ONE EMAIL BY THIS SCAMMER AND EACH EMAIL HEADER IS DIFFERENT BECAUSE THE FRAUDSTER IS USING FAKE IPS TO AVOID DETECTION. IF YOU RECEIVE ANY EMAIL’S FROM AN UNKNOWN INDIVIGUAL AND THE IP’S MATCH ANY OF THE IPS BELOW, YOU’RE MOST LIKELY DEALING WITH A SCAMMER.

freemoney

EMAIL: United Nations Habitat Office

3 Whitehall Court
London
SW1A 2EL
Tel: +447017419229
Email: un_msn@msn.com

Good Day,

This is to inform you that we have received your email contact as one of the successful claimants for the UN-HABITAT compensation payments.

For your information, this compensation payment is being made to all of you who have lost your money through any on-line banking transactions or as a result of internet fraudulent activities. It has come to the notice of the Governing Council of the United Nations Human Settlement Programme that many of you have lost your money by falling victim to some internet fraudsters.

The United Nations Human Settlements Programme, UN-HABITAT, is the United Nations agency for human settlements. It was created in 1991 as a subsidiary organ of the UN Security Council and it’s mandated by the UN General Assembly to promote humanly, socially and to process claims and pay compensation for the losses and damages suffered by beneficiaries.

We were officially contracted by the Governing Council of the UN-HABITAT to convey the delivery of Check payment to your resident address. We guarantee your safety in this transaction as we have concluded every arrangement to dispatch your Check parcel for delivery to you through our FEDEX Delivery. With this delivery option, your check parcel will get to your door-step within 2 working days of shipment from our office.

In accordance with the procedures established by the Governing Council of the United Nations Human Settlements Programme you are expected to provide the below information.

Full Name:
Address:
City:
State:
Zip Code:
Country:
Mobile Number:

A shipping/handling fee of $500 USD to enable us deliver your cashier check parcel to your provided address.

We recommend that you send the required shipping/handling charges ($500 USD) via Western Union Money Transfer® using the below information.

NAME: Ben Smith
COUNTRY: london, United Kingdom
Text Question: Color
Text Answer: White
MTCN #:___________

Money Transfer Control Numbers (MTCN) are to be provided by you after payment with the western union.

Also, you are required to send us a scan copy of your passport or Identity card. This is to confirm your identity by our delivery officers during delivery in your country.

Upon our receipt/confirmation of the above requirements, your check parcel will be insured and dispatched for delivery to your address within 48 hours.

Your satisfaction is our priority and we look forward to provide you with the best of our quality services. Do have a wonderful day in anticipation of hearing from you soon.

Regards,

Marcus Wright
Dispatch Officer)

HEADER:

Return-Path: <unclaims@msn.com>
X-YahooFilteredBulk: 65.55.90.110
Received-SPF: pass (domain of msn.com designates 65.55.90.110 as permitted sender)
X-YMailISG: Q4P8yzQWLDsIYkC2RV9ZvS_EDjC245d9dFAmW2vnK4a6Jm0Y DIqOn7BURltdMROsZSDYHKLiW3Ge4URNT9rVB5bC9egwdn27lwj096smGSaH S6XoI420qujbv8PXR26Q.e1pRyO1zEcJXn1m51WwnG_FW9V7gM1_dsQCZKuw hYt7biegQCY3CoZECESZ6u4H0HUqz.7IrIAlyQOZtMhiF8nIj6Lml82qqZs0 Ze2_E09oOSsMYRP0nkJDUjs9.g0UWMwi527505334PvuqSu9EUJSU3yRDTFw 8gNEUnw1qYZsxZrJe0GfoPpn7NR1Zl8mij58BhSaTEqjzjXJR3u3J1wDOeWe CjzAm4OyFt4SZh.B.6tNsLmXkb8vMhS4Ubqyv2zZC5kDDKnfNDFxs53g.Ykb N0OsTfsk2GwqwJEGMg2xs1WPt4BnZeN0y21C2C0_oWt50sUSSpC7BDHwhghD _xlVIp.gPfgZvpG99j9mKZNCmNMU3gN2kARj4a_H6qgI1ZbHBpb1NDBTFu8K XHtU9lre5CA4ejNXxXqgjmAMZbtq5buf8bM80ZGkcuCMFpD.htXTL8jAj55p wU8c91G1eVGexCnTTvmGbVKi6UtRaIJFUZX7XphQjb.5.7MNitICPqBSZsdp wRcoJ7fDJrdFG4kJV9NMluCn9JgjTdCm_zMIOFgWbTr58VSJ9EjtMUEJBwTN sWsHkCoy90KG.PKF6so73QsQA7Ob0Fx3YK_nJZA3VZ5dbzlNhiMyu4xt3F33 MChOB1OqMJ2z.STCaGCXfWj1g0jUiLWoWRUZZPQt8WQY6STWZUg6PBOAqvJl MgYbB7hhkAzm.GAwusD0_NOYA84gd3j6VNkDNhFnLQS0uh3i3aDEQSg5bwdT ffh6DnxtkQXOCX3UhlfMhacIpMC9NOv5lH7WsU5xX8KoGtKGTXWQGWIbTq8r XO8COK5DqvVSfSfPn_vwfR0D1QJnb1gb1ZgKLg4jwNY_.FgUGOXjUBGuruaF aRpmJtibDZlGtLyXhJKZxyp48GpQ2brrjWiXCK_yH1udci3Y9N_1qRDEDqKt eJayK1Phc9RAWhCRPyTGXIUpbcLJhyh7X8.J72EN6E0ZP.q2YF4t23r1l62i ivcgCEL3CUcAFMqAYQuWlAqOHGmX7J1d3JcQMNL3XcOM5IGQ1rtH0i4cbCvE M1xypCSrQ4vycwVCrK3L9DzlvXxY2Vslvr.CScSV79f1HsV6q_K12VN7M7jz RaQXDif9C_tFxLVy7tImzSHNIEtAY4dwfH5rrr55PmTUtEUz.6KEQJbAs8lz N3eK.l9Gp9cBVG0-
X-Originating-IP: [65.55.90.110]
Authentication-Results: mta1019.mail.bf1.yahoo.com from=msn.com; domainkeys=neutral (no sig); from=msn.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO snt0-omc2-s35.snt0.hotmail.com) (65.55.90.110) by mta1019.mail.bf1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:51:23 -0800
Received: from SNT143-W32 ([65.55.90.71]) by snt0-omc2-s35.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 Dec 2012 11:51:22 -0800
X-EIP: [/TV7qSeM3qmM9iU1AqKrwfvgxpWqD2/e]
X-Originating-Email: [unclaims@msn.com]
Message-ID: <SNT143-W32684D9215E2ED28219FD9C7310@phx.gbl>
Return-Path: unclaims@msn.com
Content-Type: multipart/alternative; boundary=”_3dea15d0-14b7-43d8-8b0a-3b827210a014_”
From: UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com>
Subject: RE: Contact Name: Marcus Wright Tel: +447017419229
Date: Tue, 18 Dec 2012 19:51:22 +0000
In-Reply-To: <1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
References: <B353BE0D877992409CB2153398733B81635C6E54@winxbeus26.exchange.xchg>,<1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 18 Dec 2012 19:51:22.0097 (UTC) FILETIME=[0E09E610:01CDDD59]

UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com> 65.55.90.71 – 65.55.90.110

HEADER NUMBER TWO:

Return-Path: <unclaims@msn.com>
X-YahooFilteredBulk: 65.54.61.94
Received-SPF: pass (domain of msn.com designates 65.54.61.94 as permitted sender)
X-YMailISG: FbVe49gWLDvy_H0HGyCvr5GlHi1Ad0EQxycJEWfEdPYeo2hb TF_L7_0plwdxv1FO_5ZBxOLniR5jVE1h.Fy8kvu._4ctcsh.b._rZqUnvBaZ X3jaWCnb1qKO18FS_hNsKnY7Zd_VhBurPjPk72clM6bgMjU.tIIfnG4H8Y4M J661nkVpIy6scF5iyZ_GtYTr4aKug9cqZtjYPGPyFDjks_s2MbDdye5pGdWG DNiifYQQC.X.8Lfr3c7DCNRxhtb6wQBckrCai9vFX9DWGhIWU4gvrrWtMML5 aMLnx.ocyyiIjfwYCHTVeCsCpSCRBsEoCxIwjdzPnYUg069I9LA0b.Gh9jiA Pe.d6H2UjS60goCV8fBpX69A1doeRqa2Y9LScgym.dUPsUJy4ATjT7QTuAHc 4LVPQqoI0V2kyvVfsnWyCY4QWmfxjXW8IFP_ZQ.Pdr.3MF39DG.ximBCtFDB v0UlcQVxTx5jRRWFZvtISd95osVXPSgqvQoOsC4YRH1845P1Rs_ByeUJDRfE _tQ_jczjUU7nR8fn20CTAo5.dyCcQfmAwOR9AVVs7MzLiW0traI.LpUA89fy bHEZCaTkLehGymHINA9NUGDAccQ_VQpl0joPk8Tpw5FN3DyQNv6pop4mPkmL PJ69l.U0rjFWVzF3YwW78bz2XkOLXEfFs6qfitxwgm4I3fyzY_YHUWyRVXFR DDIVZ0HqVr_5ZE5OFIciU6l4V9dDQXfqWDCpRncHUSQDWKeEMdERxCKSNl9C _6e35DXg33zuEZlZYa50TRBmAVKpsQGNUmSW3GYBCBN0ihRATbuElph8v9pU QVRmuY6oveo0raJa2rkRGJrEGz3wQ9XLORIvcscVZySSknoQ9Ve2aYvrduAe QBAyZ4uirjeHwVMzjYys4h7eq6JBETWlTtpRc.3lAYcKY3jJ.EgCYFyWNPCN eVZD85NyDiPOyrhqWPpt2bClbZBoD1SfQIqIRxgXdO._RwfGgzc6OFa4lGim o0bUfhMeNF07.hDW3nmiVifthixlaquaTOnI..wktt4FcthmXKKNNSICQuJu 2fMdzGtBVBBQBdhMgHbLlLWPlDqrAKG7OZ0c6iY69UmZ3vGrM.4XBiheikmW D0J47Vter1FQ5G5Cu0nRX0pkGOfciptQ3zzWDCmhirn4Xqz1ME2QLJKcPWMx Dhoxhp8LQbKf7MIrGXe1py2l4w6oEPVx9g5TDeMnmB18XieUygWNBP6cY8Kf yapRNq6T7bsUDhMHYL4be1aMw5GhnU7UmSnTECLhRYU7BY4au7Gm5Uw6PrJy J5ZFFqn7hmjJjguP_A–
X-Originating-IP: [65.54.61.94]
Authentication-Results: mta1246.mail.sk1.yahoo.com from=msn.com; domainkeys=neutral (no sig); from=msn.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO snt0-omc2-s43.snt0.hotmail.com) (65.54.61.94) by mta1246.mail.sk1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:52:58 -0800
Received: from SNT143-W65 ([65.55.90.73]) by snt0-omc2-s43.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 Dec 2012 11:52:03 -0800
X-EIP: [8WRfF9W/4HCKBPDNLPwgkZDO+b8LtgkB]
X-Originating-Email: [unclaims@msn.com]
Message-ID: <SNT143-W65AD9B7BD38231E89E80F7C7310@phx.gbl>
Return-Path: unclaims@msn.com
Content-Type: multipart/alternative; boundary=”_d77f1b5b-2b70-4219-8474-4777ba3e7f12_”
From: UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com>
Subject: UN-HABITAT PAYMENT RELEASE DETAILS
Date: Tue, 18 Dec 2012 19:52:03 +0000
In-Reply-To: <1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
References: <B353BE0D877992409CB2153398733B81635C6E54@winxbeus26.exchange.xchg>,<1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 18 Dec 2012 19:52:03.0050 (UTC) FILETIME=[2672D4A0:01CDDD59]

65.55.90.73 – 65.54.61.94 –

 
Leave a comment

Posted by on 12/19/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Mr. Stephen Fred”

ATM CARD MONEY TRANSFER & COUNTERFEIT CHECK SCAM – NIGERIAN 419 SCAMMER

There are two email’s and two headers below. The first email and header was published on scammer419 Yesterday 12/17/12 – the second was published today (12/18/12) — Same scammer using different addresses and IP addresses.

EMAIL #1 –

TO: 4thekids1234@gmail.com, jlpurtee1218@yahoo.com, lschum6@aol.com, vikhadd068@aol.com, childcare4yours@gmail.com, jessicaspitler@hotmail.com, monkeyforthezoo@yahoo.com, angelinahudak@gmail.com, bruces_lil_sis@yahoo.com, pmiller140@woh.rr.com, chelli4dottogo@yahoo.com, shannonschapiro@yahoo.com mschutt5@woh.rr.com, phillips.april@ymail.com, ticktockclocking@gmail.com, aprilsplayhouse@att.net, lrichards7@cfl.rr.com, rosa8485@gmail.com, mommyme0107@yahoo.com, armstrongcare1@yahoo.com, albart@bellsouth.net, new.horizons322@att.net, thebestsweep@yahoo.com, missalisha08@ymail.com, dezy2224@yahoo.com, morgragedanielle@yahoo.com, joanna.sweet@hotmail.com, adenelly@aol.com, pratherjck3@aol.com, camillephlps@yahoo.com, cs09jedq@yahoo.com, baby_pmpn@yahoo.com, kmiller182@cfl.rr.com, kayladaniels90@yahoo.com, lisaconradi@gmail.com, confidence07011996@live.com, poncallinfo@gmail.com, myfamof3@gmail.com, kjg36@comcast.net, missrosesdaycare@yahoo.com, cooljet6@yahoo.com, anged98@yahoo.com, cowboydad75@gmail.com, crawbox08@gmail.com, sacpr210@yahoo.com, khusfelt1991@yahoo.com, dskupien@delawaresafetycouncil.org, primaryyears@aol.com, kidz1st@gmail.com, bonclaude1@aol.com, millerv25@gmail.com, krosieone@aol.com, poohcc07@aol.com, ironhilldaycare1@yahoo.com, bangelique95@gmail.com, truruler@yahoo.com, denisedr54@comcast.net, sromasko@verizon.net, portiabusaitis@gmail.com, portiabusaitis@comcast.net, dawnschafferman@comcast.net, elevatedplaceslearningcenter@gmail.com, gerlacht00@comcast.net, melissalee1209@hotmail.com, valdave@comcast.net, rgoo135623@aol.com, baybeesteps@msn.com, rhino_07@comcast.net, mseekids@yahoo.com, faithshouse@live.com, jeanneflynn59@gmail.com, rachel_vigil@yahoo.com, gspederson55@q.com, ptrcgzmn@yahoo.com, thomasjohn1088@gmail.com, earlybirddaycare@gmail.com, sabrinareiman@yahoo.com, letmcg@ymail.com, brandon.carson25@yahoo.com, christinamauro23@msn.com, katielewnard123@hotmail.com, porkyexposed@yahoo.com, mgfbower07@gmail.com, lonniejbeard@hotmail.com, aklittle0102@aol.com, jennywarn@live.com, leyadewey122@gmail.com, neen062964@hotmail.com, info@need-a-nanny.com, dork_britt@yahoo.com, tinytots80123@yahoo.com, caycestaubin@yahoo.com, ivana331@gmail.com, tstots@hotmail.com, bballvarsitygirl@gmail.com, alwaysforhim2@gmail.com, degutii@msn.com, tiffjowilliams@gmail.com, patriciacallan@msn.com

FROM: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>

SUBJECT: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!

EMAIL: Federal Bureau of Investigation Anti-Terrorist And Monitory Crime Division. Federal Bureau Of Investigation. J.Edgar.Hoover Building Washington Dc Customers Service Hours / Monday To Saturday Office Hours Monday to Saturday: Dear Beneficiary, Series of meetings have been held over the past 7 months with the secretary general of the United Nations Organization. This ended 3days ago. It is obvious that you have not received your fund which is to the tune of $3.5Million due to past corrupt Governmental Officials who almost held the fund to themselves for their selfish reason and some individuals who have taken advantage of your fund all in an attempt to swindle your fund which has led to so many losses from your end and unnecessary delay in the receipt of your fund. The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Nigeria his Excellency President Good luck Jonathan to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes. Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card?

ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $5,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2015. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account.

Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via UPS. Because we have signed a contract with UPS which should expire in next three weeks you will only need to pay $180 instead of $420 saving you $285 So if you pay before the three weeks Dec 2012 you save $285

Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $180.00 nothing more! Nothing less! And we guarantee the receipt of your fund to be successfully delivered to you within the next 24hrs after the receipt of payment has been confirmed.

Note: Everything has been taken care of by the Federal Government of Nigeria, The United Nation and also the FBI and including taxes, custom paper and clearance duty so all you will ever need to pay is $180.

DO NOT SEND MONEY TO ANYONE UNTIL YOU READ THIS: The actual fees for shipping your ATM card is $420 but because UPS have temporarily discontinued the C.O.D which gives you the chance to pay when package is delivered for international shipping We had to sign contract with them for bulk shipping which makes the fees reduce from the actual fee of $420 to $180 nothing more and no hidden fees of any sort!

To effect the release of your fund valued at $3.5Million us dollars you are advised to contact our correspondent in Africa the delivery officer Mr Stephen Fred with the information below, Name:Mr Stephen Fred Email:mr.stephenfred@yahoo.dk You are advised to contact him with the information’s as stated below:

Your full Name.. Your Address:….. Home/Cell Phone:…….. Preferred Payment Method (ATM / Cashier Check)

Upon receipt of payment the delivery officer will ensure that your package is sent within 24 working hours. Because we are so sure of everything we are giving you a 100% money back guarantee if you do not receive payment/package within the next 24hrs after you have made the payment for shipping. And make sure that you keep the receipt of the $180payment that you made because that is the prove you will show to the delivery team when they arrive at your door step with your package of delivery

Yours sincerely, Miss Donna Gwen FEDERAL BUREAU OF INVESTIGATION UNITED STATES DEPARTMENT OF JUSTICE WASHINGTON, D.C. 20535

Note: Do disregard any email you get from any impostors or offices claiming to be in possession of your ATM CARD, you are hereby advice only to be in contact with Mr Stephen Fred of the ATM CARD CENTER who is the rightful person to deal with in regards to your ATM CARD PAYMENT and forward any emails you get from impostors to this office so we could act upon and commence investigation.

HEADER:

Return-Path: <albanesi@dmghost.dmg-hosting.com.ar>
X-YahooFilteredBulk: 200.58.125.17
Received-SPF: none (domain of dmghost.dmg-hosting.com.ar does not designate permitted sender hosts)
X-YMailISG: G4vRLFYWLDtBXE2mxgWetbgPe68s2c_J4Sy1u3QrHo_wMTq2 7ltguaR_7OqUckxfw_6vp2Lr1Jg7Eu.nS2bLDg6fo4oYGP7MTDSxe12a7pKp vDuNtWg442ZrtozAbb4qwjv9yjVKzjc3q6SUJC3ROeRuYcRhx4ZTHNEwa9dJ RRunFvOz3W.7zc.2.2cpeXIR1pV74p_qpVqC3m7H8mdBoPRVTOHo4yAvFEyq HBGagGWmoRoWFUM6WeZcFGLRRd9yG4M2adkg0pGcbx9auO2ojmtRX.d4awpI tNrecy67Vucu5czgWkng.ADegJxE6eNLDqWhXtM8r1A7O_E267YruDaoRxO6 _sIUXJPaS8LB26kJPkafbJgK7Q9bXgF9ll5Efh6DIfA71GiZ_BFxWhGrotmy _KZxe6vxBpdwxzK0Rxlr8WrNY0QZMLOp0hD28W3sC.84e3mVvDE1o89.CZ5h 9jg8M2nfaP2qu3nHGA54gPG1P9JZx9oasJlLQdjhkEP6ND1NMGwvMf48kGMY 3mnmKiJxTzCRP42tdS7Y8Ho32JKgSZ3qE_UtRHNqJnXY6nt4cEAR35W0rrKt Rxajt4Z12QQVP6ynOi0a9qX6gOBgqHI0ImNxtkZaeznZBDB94jKQgd6rsgsf F.xd9S3BVrxw5c_tcsF2ZfpH5vlPphmuFtr.6wHtqPTbo1WcAAW3TzAVQgd5 P1qNkbouaz9T_2LDTBLWIumE0eZYfRwlzjApSWZq5xN7T443jat0wR.gnq8Y dJGDz8sxqmnuHdASS5COEyfmLADo5GME9Hr1nFYnYoUc9gMY6EgDUlovdax2 JWSXg640Sl6p_WEGbvRpunnYfKhxouArjEiZxy2c4lMKAGhYcq0JrGub358H ai9FMNMHAkRnf4b18ttxSIYK5obMdAtyW.Vw4jaqgXYO540R_KQljdv7peAg k9p124LIGZdkN7S_XKaNsg3O.ey154tsrBwhl14kTdz57ZxzNc7niAYFQF1V VUTONPpN4iNZT_t8.LcVzBcHhSjrqoWJ2SMpE28MH6cyiV8IsUDbddT1YIcM iZAV58stob2h.JyLctYJZ.g5G.VYjJubKffjKBTkHbCYZ1wNzGE8sWDDIJwo eRX04Jtt4F13ZI2AARhKdrG8DAr2NSIhIUoWXKs.qbgWrQgZleThlG8O6OOT G1avOrcRyDcNaaQxG32I
X-Originating-IP: [200.58.125.17]
Authentication-Results: mta1317.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=yahoo.dk; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dmghost.dmg-hosting.com.ar) (200.58.125.17) by mta1317.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 05:44:35 -0800
Received: from albanesi by dmghost.dmg-hosting.com.ar with local (Exim 4.71) (envelope-from <albanesi@dmghost.dmg-hosting.com.ar>) id 1Tkafo-0004nX-Uf; Mon, 17 Dec 2012 10:24:00 -0300
Date: Mon, 17 Dec 2012 10:24:00 -0300
Message-Id: <E1Tkafo-0004nX-Uf@dmghost.dmg-hosting.com.ar>
To: 4thekids1234@gmail.com,jlpurtee1218@yahoo.com,lschum6@aol.com,vikhadd068@aol.com,childcare4yours@gmail.com,jessicaspitler@hotmail.com,monkeyforthezoo@yahoo.com,angelinahudak@gmail.com,bruces_lil_sis@yahoo.com,pmiller140@woh.rr.com,chelli4dottogo@yahoo.com,shannonschapiro@yahoo.com,mschutt5@woh.rr.com,phillips.april@ymail.com,ticktockclocking@gmail.com,aprilsplayhouse@att.net,lrichards7@cfl.rr.com,rosa8485@gmail.com,mommyme0107@yahoo.com,armstrongcare1@yahoo.com,albart@bellsouth.net,new.horizons322@att.net,thebestsweep@yahoo.com,missalisha08@ymail.com,dezy2224@yahoo.com,morgragedanielle@yahoo.com,joanna.sweet@hotmail.com,adenelly@aol.com,pratherjck3@aol.com,camillephlps@yahoo.com,cs09jedq@yahoo.com,baby_pmpn@yahoo.com,kmiller182@cfl.rr.com,kayladaniels90@yahoo.com,lisaconradi@gmail.com,confidence07011996@live.com,poncallinfo@gmail.com,myfamof3@gmail.com,kjg36@comcast.net,missrosesdaycare@yahoo.com,cooljet6@yahoo.com,anged98@yahoo.com,cowboydad75@gmail.com,crawbox08@gmail.com,sacpr210@yahoo.com,khusfelt1991@yahoo.com,dskupien@delawaresafetycouncil.org,primaryyears@aol.com,kidz1st@gmail.com,bonclaude1@aol.com,millerv25@gmail.com,krosieone@aol.com,poohcc07@aol.com,ironhilldaycare1@yahoo.com,bangelique95@gmail.com,truruler@yahoo.com,denisedr54@comcast.net,sromasko@verizon.net,portiabusaitis@gmail.com,portiabusaitis@comcast.net,dawnschafferman@comcast.net,elevatedplaceslearningcenter@gmail.com,gerlacht00@comcast.net,melissalee1209@hotmail.com,valdave@comcast.net,rgoo135623@aol.com,baybeesteps@msn.com,rhino_07@comcast.net,mseekids@yahoo.com,faithshouse@live.com,jeanneflynn59@gmail.com,rachel_vigil@yahoo.com,gspederson55@q.com,ptrcgzmn@yahoo.com,thomasjohn1088@gmail.com,earlybirddaycare@gmail.com,sabrinareiman@yahoo.com,letmcg@ymail.com,brandon.carson25@yahoo.com,christinamauro23@msn.com,katielewnard123@hotmail.com,porkyexposed@yahoo.com,mgfbower07@gmail.com,lonniejbeard@hotmail.com,aklittle0102@aol.com,jennywarn@live.com,leyadewey122@gmail.com,neen062964@hotmail.com,info@need-a-nanny.com,dork_britt@yahoo.com,tinytots80123@yahoo.com,caycestaubin@yahoo.com,ivana331@gmail.com,tstots@hotmail.com,bballvarsitygirl@gmail.com,alwaysforhim2@gmail.com,degutii@msn.com,tiffjowilliams@gmail.com,patriciacallan@msn.com
Subject: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
From: Mr. Stephen Fred <mr.stephenfred@yahoo.dk>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – dmghost.dmg-hosting.com.ar
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [826 825] / [502 502]
X-AntiAbuse: Sender Address Domain – dmghost.dmg-hosting.com.ar albanesi@dmghost.dmg-hosting.com.ar

Mr. Stephen Fred <mr.stephenfred@yahoo.dk> <albanesi@dmghost.dmg-hosting.com.ar> mr.stephenfred@yahoo.dk

__________________________________________

EMAIL #2 –

TO: deleted@yahoo.com

FROM: “vikhadd068@aol.com” <vikhadd068@aol.com>

SUBJECT: Re: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!

EMAIL: http://oabfranca.org.br/entrance.php NOTE: I DID NOT CLICK THE LINK AS I DONT CLICK ANY LINKS/FILES RECEIVED FROM SCAM EMAILS.

HEADER:

Return-Path: <>
Received-SPF: none (domain of imb-m01.mx.aol.com does not designate permitted sender hosts) AQEBAQ–
X-YMailISG: fG83VQIWLDuwe8ej5n0IaROXvxrlzu18BJ2irW7rRnkNUMiR 0Ctsgto2LNAskyV2Q6ixNssLOsmnFDVOBVCrL.Ma4HX.zvoh5.y.Me6a47y1 Y.s4vBi98z.8nCoiFrNhF8AthsY6JNRIP0mO3NwL6he8knCzy63JqA9qhhqY FQRl4qMLiHM902WJNFvAOn.XvAyS6gBl90P7phn5AwFtzDAnWp7SjQKS8yd9 2cqKCaMlnKRjdDDXjb2Q70KZ_PcWA5mIrPPIPxX4lk8JBJe._gcgSX6kzAYp 4YvvqU7x6K6snhfvbJKtaMeaXIjmTDn.pLJ6GEKwthBTc3K6CzQF1pPdkRRD yra8kG4Jxtlb_RaSjcjAXw5qpiHxnBAx3Oek1rLM84NqcWLvSV3nRFriYeYV nhI5BWjm8wwT3AcOsJUwm97do1.YsTka4wRMCVD6cqiCuU2jAKvwx1uDI2.b RoFUQReDBAjwqAAHPZLlkdarxo05P1Uwq5jHR99zLNJlOjaSRiMEUe0PS9zs QDsD3ljuWathFexCSe6PKWbyt3x4XQhQYjJ8mtq3elH0LdNeIuahbPv6S4G8 hueVJ.bJ9cI2b2jYCsk1qnouy2MQDdlL5VbiPxDCWp7AsBes8Nb4BepjQsVR w2UcWs9.Sy1V065valQ1_avr4y87pRQOmtt5dWEaxIAO8bWhK4iCTfcE1cJY 20x8ZehazHdzyZAVwjK95yH6Y0LghsrH75EbuSGscuYeXfnXpPOU0lHJOYpM Smn8XIi4jgWio99h4HL5hAKWRirLVLu_X5PDmHnYDie5ONFtGejBROGsblcC rl9jhZH6AJlOWZyqVTRM5Ppp3S6YCnbXEAxRydb6MzVMCUdDrES1gAdSYuc_ i5b5UqWEyedgNzG5O1cUaG9VQQWVQd26QYIhUn1LH8p5cF1d4w9e3Y7VQQ8N MYYqmESf9lsGNdZFCRFIMXXUdD5OQpzT7199rPh0OAQ6e5FssdlgeHW5u8Oe Qm9rwYEstTmh6VWIAnHdJLj59EuoMNynb0YBxAks2F6YXhwIzblZ4az3IDAf 3UW5o76BBwQ424rwxaewfRAxh33BT18DwtTa_1U0vcIPi7ooZSfLIzHxatMM tdMmB1yNMhgNeqj41iMGVgytMBZI7HV5OTRdtnMQsAoEFr2MQitM8bjxFQ4k VUhdeQ30xHi1UVWyJwl9l8xmrHA-
X-Originating-IP: [64.12.227.42]
Authentication-Results: mta1395.mail.mud.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=aol.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO imb-m01.mx.aol.com) (64.12.227.42) by mta1395.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 23:38:11 -0800
Received: from mtain-mf12.r1000.mx.aol.com (mtain-mf12.r1000.mx.aol.com [172.29.96.160]) by imb-m01.mx.aol.com (AOL Mail Bouncer) with ESMTP id B186A382B708 for _______ Tue, 18 Dec 2012 02:35:08 -0500 (EST)
Received: from core-mic004a.r1000.mail.aol.com (core-mic004.r1000.mail.aol.com [172.29.104.4]) by mtain-mf12.r1000.mx.aol.com (Partner Internet Inbound) with ESMTP id 9ADBB3800008A for _______ Tue, 18 Dec 2012 02:35:08 -0500 (EST)
Date: Tue, 18 Dec 2012 02:35:08 -0500 (EST)
From: vikhadd068@aol.com
Message-ID: <52151792.8536.1355816108626.JavaMail.zimbra@core-mic004.r1000.mail.aol.com>
In-Reply-To: <1355816106.93122.YahooMailClassic@web161004.mail.bf1.yahoo.com>
Subject: Re: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Auto-Submitted: auto-replied (aol; away)
Precedence: bulk
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:335928000:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d60a050d01cac1b64
X-AOL-IP: 172.29.104.4

64.12.227.42 — 172.29.96.160 — 172.29.104.4

 
1 Comment

Posted by on 12/18/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Rev, Mark Hill” “DR. PETER CHEQUE”

CHARITY SCAM – COUNTERFEIT CHECK – FRAUD

THIS IS A NIGERIAN 419 SCAMMER

UPDATED I’VE POSTED SEVERAL EMAILS THAT I’VE RECEIVED BY PETER CHEQUE (ALSO KNOWN AS) MARK HILL

check-fraud

EMAIL: Hello: My Dear:

I wish to inform you that I concluded this transaction successful last year
with a lady in London and I am currently in St Thomas Hospital in London
waiting for the right time of God.

I dropped the (cheque in bank draft) for Your compensation, by trying to
assist me but it did not work out between
Us. The amount is US $ 5,500,000.00.
now contact my secretary Dr,Peter Cheque he will help you process.

I did this out of sympathy and good desire, I want you to make very good use
of this fund to assist the less privilege as I have few months to stay alive,
I have a kidney cancer and I know that am going to die soon.

God will bless you for your efforts and I hope you will be Satisfied with this little compensation, I will advise you to contact him

Immediately through his e-mail address 😦 secretarydrpetercheque@live.com ) for the Delivery of the bank draft to you, I hope you will have a nice life with My token of compensation for your efforts and God bless you.

Sincerely yours

Rev, Mark Hill

HEADER:

Return-Path: <revmark.hill@yahoo.com>
X-YahooFilteredBulk: 93.180.20.164
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: pwvmn3QWLDtkn6kYY_YMNtA2mo2KVOO1jpnUxR_xqcd3L6Za tTjpQHR2NMrvDpI9Ie8mJSa8nJCF_JaK1curhsIxxrCXDh963xR72_M5ZEXq 2USwVCxvOlVYGFDtvt4yCgh380X8rrXpmCzfp_YdjH.urQ7xEvzHoHWBEecK JKgFiXHwnNha7dOH3JIsYOstf5QTjAcP1MS.c0zev280tHGT_qQfiEeytuAl JQKyqrcQ5UMJipgnONdkhb0vCOBaVjon0rdOcJ7Eq2UTnR.gQz61YopdQgcD EBpxtDG.Hh6QyT40tRmgNytNt5Y3icvs2ahBMJd3eerdtTFpH9A3_845D28R f5OBFW_INRSPXlBsdjP1QR4EJ3cuqMsXRxsAGXiLr7As.YBVUG9leL6Vb0SL jK2tz_8sN4.8dysipI.PpCLxtzG2sasSzzPwT9yGe7ybfprmyCJh213lHNq0 P3VGFFv6pHN0_gd8o4uYcoVWhrsHa2Dpd7407MCOFdo4TkpZPFi.XiIJudH. PNhZcMfIY6p2miXudToKgKASedTZZfNUHD8TnDg6F0Oz7J9dkgje1DuH_LcU tzAF1g_gMYGBRXndY5gRracjt83LlDmsCj4Nq..cly_fI3HhCTbEPCsfDCWS VmODBLTxT595IxuVppGWhEHkSnPpOmq_qJz.AaDiNHKOCuB77SKbfb4pn4u4 1C7EOU9cmiaDTdwlrLY9qaZty6vHSgEOgmrRfc8JGzHCi9rSjeRKJyPVRKeA 1uP1T0j2GM1eOJYyX8n0gIvVj6oQ8wMzRWF7LR4fLjm49D7.JLch46acVP4y geKejT5nm05MkyoD2iLYS0iXTeWXPFkLTxmDuul8YhjuX2bvr9Q19MV21hZF edU0xZg1KTTvMGFBvKgz5juU.ikCl1tIuXkcY2MXmK6thLxA4D3R2liFEuV3 OAd.v4BkOu6Og_5wGOfDSK2vcxXE2hGhL5G88M.OFzn0FkuVky0_Kti_GGwU FyRKA0ZudYx6MPIP5by7EfyRu.KmOe_EClbMoNtqt7dIokp87gwQxwUjzJIg h4fQG_kDSEhZlEs1GtdwHmxo1J.qZlZeZqKoi1GQfSvYRlk0IOFYd7SiPtP. G56xaMfm2O50wWasX7vFDzR2NwqlZZjlq_81XnD2JRl0Y3GykV6HaBm.9olz lPQBTIA6yCi.n7yFLkQnejEjq.4seWdDdsm4A4M8fL.arU5m9IG9hfgRwR2M jVvhkuHykVtOyeeW7qL.G3NHK43MhpquRtuQD07HqWptUaTsU6qIv..D02yS hOjvpgYqd9NtER1ki4ibyeUinmLbv03czD7Ovk2gJhC8ue.rrV6UMznuTPBs dfqeR5_xLD378tEXNTto4Uj5vj9ZkmZ4QcpT1ULIJmVEu_1FDHlTVpsfy2RW V8FbAzp9NKN4tjbpRsLjI_9PgxD3dXSXyYFS8.jvokd9ySTPJZnE9EW2repn q_kZSqDOwKz7Mi47jxaJeA4XEPm.n7TvP4zskyT9TKxDgnbx5XamL4jekcbn 00WRYhYNCqbzs7VUjBy_tF_akjdlXSuLlK7L9U4awS3WnM2LW4KLQybRgH6a zNcZJVPFzg–
X-Originating-IP: [93.180.20.164]
Authentication-Results: mta1492.mail.mud.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mainframe.localhost) (93.180.20.164) by mta1492.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 19:07:42 -0800
Received: from User (unknown [41.211.201.178]) by mainframe.localhost (Postfix) with ESMTPA id 3A91433EEDB9; Sun, 16 Dec 2012 20:21:06 +0400 (MSK)
Reply-To: <secretarydrpetercheque@live.com>
From: “Rev, Mark Hill”<revmark.hill@yahoo.com>
Date: Sun, 16 Dec 2012 18:30:11 +0100

Rev Mark Hill <revmark.hill@yahoo.com> RETURN-PATH: revmark.hill@yahoo.com REPLY-ADDRESS: secretarydrpetercheque@live.com

X-YahooFilteredBulk: 93.180.20.164 RECEIVED-IP: 41.211.201.178 LOCATION OF IP: LAGOS NIGERIA Dr Peter Cheque secretarydrpetercheque@live.com

________________________________________________-

RESPONSE EMAIL:

EMAIL: Mr __________,

i have receive your message, yes i am Dr.Peter .O. Cheque the secretary to Rev,Mark Hill and am so happy to hear from you because your cheek has been long with me and am waiting to receive your mail since my boss kept this cheek with me.now i want to know how do you want to receive your cheek is bank to bank or do you want it through courier service.

i want you to make everything fast because we are about to enter Christmas before the date we will celebrate Christmas.

do not fail to call me immediately you receive this mail.

Dr. Peter
+2348035762383

NOTE: AN ATTACHED FILE WAS ALSO SENT WITH THIS RESPONSE EMAIL. I DIDN’T CLICK THE FILE BUT THE TITLE WAS ID_CARD1.JPG

HEADER:

Return-Path: <secretarydrpetercheque@live.com>
Received-SPF: pass (domain of live.com designates 65.54.190.101 as permitted sender) IG1lc3NhZ2UsIHllcyBpIGFtIERyLlBldGVyIC5PLiBDaGVxdWUgdGhlIHNl Y3JldGFyeSB0byBSZXYsTWFyayBIaWxsIGFuZCBhbSBzbyBoYXBweSB0byBo ZWFyIGZyb20geW91IGJlY2F1c2UgeW91ciBjaGVlayBoYXMgYmVlbiBsb25n IHdpdGggbWUgYW5kIGFtIHdhaXRpbmcgdG8gcmVjZWl2ZSB5b3VyIG1haWwg c2luY2UgbXkgYm9zcyBrZXB0IHRoaXMgY2hlZWsgd2l0aCBtZQEwAQEBAQNt dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzMCA3RleHQvcGxhaW4DAzACA3RleHQv aHRtbAMDMgJJRF9DQVJEMS5KUEcDaW1hZ2UvanBlZwMDMTM1
X-YMailISG: RUSkN6gWLDtVRR2I.osOnZooN6mof1tzTkJBSELxSzvipL2U wlBMz4XHvtip6BJimPiY3ANJpiunpS_P4t7.2UBBu67Afnlkq.PVu8k2.mbW maprp2gMR8v.iOe5sx8uj746OaF4yWi7XIT6j6MY.9iHB85lozYudtyn3MTR d4hfTWMNA1or45531SO7UrO7YC7AXu8BSAxlQfuZikUF_sjf0m4wAqJyzHeX iUWCLP.7RNA5YrCp8GGULn_5m4vXN.Qe1NR25UPRXtrMHhqsldFv5SHdpYI9 3bMw53Ry6Koa__vfO6GmqPpQkU2qiPNSJoX6.mBXDZHj_PjQohyZZ.NGeFny _2FMUJq1Eebewrq6yjHUVCAGitlH70HPTWsH5axyEaStXjlMJufOcOF2VBoY A6qEu3WI5ud2bp2jAWm3JFLniLjQWl1_scqj_lZGK.ojL.372ajYAq2ibxZK 9fD_iulppvkxLfziYl84ZCHYcHhnzD7aLh2C5veXJhAU1r.zEzkgI3qLTYD8 Dnsk9u547G4XMLgcpzOd6IuZXV9Yk4SiC9mlzHR2E4aq.PnQ3y24eVy9WMNk 9cHnUC4GIuq7hBqcK1agWzWj4WvEz4rHQ2k_FGCgdtq9nJTKkopxr1fly.Tq ktyAucn3XVU3R_8HHbaya_3BZdTQ7CloOAImnHAEKgcNKvVyXmr0lWZJmcek GXeQIfUzGSJ_LCQXoE2SyhY8MuiXW.y_bG1zZzp1Gfnh8GRDPWTjc4WQ_1bi uIBSdhjH5e9hXfFNPdASN8YeLYj7SCqzM14hLe.u277C6p..x3Fc5HDO8RPi OOxKex2UCvKl8x2QmMvcRIOBJOoLn3.ddvbQ7FjEcTY3MJWhsKZ4WZ1wIiMZ 1gIo0DzXU4Jmqv_JwKvhfh_E5AVfGFYbg50XotCg_lFJwyCq.wpolxuuVH3u nlc1AbVE99vR7UuBBbpIRsGBivT2K2Fiid.fwUZ8lyf9RF.asdeS62y7ntUn BFThAsAWLAKpDNy6YMw4RBou_kPTk1aBdldafhI2W12s9iHKsbnxW87LPKaj lGMjlHvA9_UT1nqVSLdzL8EmTXX2RoaBBmAU.PI1vLpDrbQP4C0iWaBe_xF. XP1MnJ382xCgWS37RdTUZifGQ3ZAKssK8Ip6FKH8SRqtU7HlUvhO1E02y0Tb CYixL7UcirFuTOabQf.GX5xZCtHbWr_swjJ2FeTVGkYKyOs.N_fr_rR4P0BV RqGPee3YabHAYEsmk6Q6BWCqbfnzno_hFre0itCMOdkyzCGqvlnPiNUbNpbP kh0h1EcKAvhS1k5xCmO1yh3O88Y3oXW0Jw8-
X-Originating-IP: [65.54.190.101]
Authentication-Results: mta1151.mail.mud.yahoo.com from=live.com; domainkeys=neutral (no sig); from=live.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s26.bay0.hotmail.com) (65.54.190.101) by mta1151.mail.mud.yahoo.com with SMTP; Tue, 18 Dec 2012 13:14:57 -0800
Received: from BAY155-W28 ([65.54.190.123]) by bay0-omc2-s26.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 Dec 2012 13:14:29 -0800
X-EIP: [NvgX5uvdCFPPz2bU+U8E9Qs+5Fla2BpP]
X-Originating-Email: [secretarydrpetercheque@live.com]
Message-ID: <BAY155-W28E7CCA29165639E797CC5B0310@phx.gbl>
Return-Path: secretarydrpetercheque@live.com
Content-Type: multipart/mixed; boundary=”_6622ba1a-8445-4dd5-8cb6-c35ba5e65254_”
Reply-To: <secretarydrpeterchequ@hotmail.com>
From: “DR. PETER CHEQUE” <secretarydrpetercheque@live.com>
To: deleted@yahoo.com
Subject: RE: Hello Mr (fake name)
Date: Tue, 18 Dec 2012 22:14:28 +0100
In-Reply-To: <1355814088.88125.YahooMailClassic@web161002.mail.bf1.yahoo.com>
References: <1355814088.88125.YahooMailClassic@web161002.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 18 Dec 2012 21:14:29.0111 (UTC) FILETIME=[AA87D870:01CDDD64]

FROM: DR. PETER CHEQUE secretarydrpetercheque@live.com REPLY-ADDRESS: secretarydrpeterchequ@hotmail.com RETURN-PATH: secretarydrpetercheque@live.com X-ORIGINATING-EMAIL: secretarydrpetercheque@live.com

X-ORIGINATING-IP/X-YAHOO-FILTER-BULK: 65.54.190.101 RECEIVED-IP: 65.54.190.123 — +234-8035762383

__________________________________________

DO NOT TRUST ANYONE WITH CHECKS IF THEY CANNOT EVEN SPELL IT CORRECTLY!

MOST RECENT EMAIL RECEIVED ON DECEMBER 24, 2012 —

FROM: DR PETER CHEQUE secretarydrpetercheque@live.com REPLY-ADDRESS: secretarydrpeterchequ@hotmail.com (NOTE: BOTH EMAIL’S LOOK THE SAME BUT THE LAST LETTER OF ‘CHEQUE’ ISN’T ON THE RETURN-ADDRESS AND DIFFERENT EMAIL SERVERS (LIVE AND HOTMAIL). SCAMMERS TRY TO BE SNEAKY, HOPING THE DIFFERENCE WONT BE NOTICED.)

EMAIL: Mr (fake name used) ,

i have receive your message, yes i am Dr.Peter .O. Cheque the secretary to Rev,Mark Hill, i sent you an E-mail and since then i did not hear from you and am so happy to hear from you because your cheek has been long with me and am waiting to receive your mail since my boss kept this cheek with me.now i want to know how do you wish to receive your cheek is bank to bank or do you want it through courier delivering service.

i waiting to hear from you as soon as possible.

do not fail to call me immediately you receive this mail. here is my official ID Card.

Dr. Peter
+2348035762383

A LINKED FILE TITLED ID_CARD1.JPG WAS ALSO ATTACHED TO THIS SPAM EMAIL

HEADER:

Return-Path: <secretarydrpetercheque@live.com>
Received-SPF: pass (domain of live.com designates 65.54.190.101 as permitted sender) IG1lc3NhZ2UsIHllcyBpIGFtIERyLlBldGVyIC5PLiBDaGVxdWUgdGhlIHNl Y3JldGFyeSB0byBSZXYsTWFyayBIaWxsLCBpIHNlbnQgeW91IGFuIEUtbWFp bCBhbmQgc2luY2UgdGhlbiBpIGRpZCBub3QgaGVhciBmcm9tIHlvdSBhbmQg YW0gc28gaGFwcHkgdG8gaGVhciBmcm9tIHlvdSBiZWNhdXNlIHlvdXIgY2hl ZWsgaGFzIGJlZW4gbG9uZyB3aXRoIG1lIGFuZCBhbSB3YWl0aQEwAQEBAQNt dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzMCA3RleHQvcGxhaW4DAzACA3RleHQv aHRtbAMDMgJJRF9DQVJEMS5KUEcDaW1hZ2UvanBlZwMDMTM1
X-YMailISG: u7Xw5CgWLDskNbn_vf28.6TFtwB8ZjMwD3Tr9g7mPToJbbmb qMLKMUH9Q3aUWOMruqQtUyeZT3qb70PQLUefoD5lm1jWzAawy5lgU4LJYTy3 1118IDtbWA8MAiAa6IYDI_JTW9rJqZPYcOjqWvfyAnM2aDs4_a15FWyzMsql .LvKJ6IV_HYq9uddIgSvKDZAolhSD7PIj.4b4G2f5R5r3OlrDTcFke0iLDBN AT8AI5_gh_XDBOdW9VGLf7S6ROvcCuxRwL9vy9V0LSWuptXfX6NIrNwlKnNG kC5kU7zMB63.t0bd4ZlB9Bh1fISYZzwXaxwDKMYp8NigkCruFZC0e_wsjruX X4ubJmnvqY4NN2e7UleQdF3TS0ntxX9lobcH7NkzqPOGIE1di9X5MnG2yMc9 I_AqDqmuY_neshsenroHWAUiunfWWaj6.xrv0PRcsfRnSt6Yi0O_cGYFZAQ7 4chcyWUgHi8_I4G1jGAmbYbRph5bLpOTxKRKbXs6nWkl7ZLZvbNmRfY1N14c CM3uKpPGErwMJrP4z3JDavBlz8K1P5fGcJjwvxS9ZRsqgB8j8YBLHSH3wRFd yuM8P7aIKKlEJZ8Gqw3fwett8rquubrlDvd.xF5kCGS1cWNbDHmlwKnSKZkk E_w8lcHe3BEEutUwqyY4aAC1Uqi4kU56wQgHeBHf1zO1VNKPlKaIhm7ubDul HZYXxmntR93qMGrclxIueQWvk_FnJpnozLrgjMV9BdD7X8agF9nS5ZI4IeCz rfueY5q5auoteKHQx9RUyTJ6Qsi7NVIdCqsAQJc7677ftOAb1Z_NNKQgSua. DUoLqO_.tVqz3vWPEJJSbOlFIihLHpazSLUbfT5FXfA7a1RZf548tB.4t9zY ZfbZUqVhfkZQfMus2Aj8HUljvBcfnAaBH_1vyQMewExzsULYNZZ2zK.jJxem 1Nmw_.tGS_YrCAK5A1Jp3TxedgUYThYTTBFWXiuV.gUEfBLjmzIopdrsh82l rLJh5acYoaliKMHuRn6XF3XFSOFgI03R7NdKEXVElP_CyzRlpJkUP_BjJgux BNwsgOqAAo3ocEHzmMMwEMjNCPcI50uMwsOxhr9WS6StZIp2xBkhVFObLsx9 uwRviUfvGVx1NU3fIqB0lCtqj3j5HR7d9Gvzjj_11dM5pRoAoIZ2e25n2n8W xYdRRlV28Jbawfj4mXyolDt9I8QfH9aZuFQ6hHZzA6uF.SZfIzyAdZUc8aaL GCee_WkMwEZiO4JvdIgqndkS5poxhvxbQ0m7LJXrthUUjPWHSP0ERxKLDqHE NI1UU65OnE1DSwyK97w24w3uhAzf.IOl0Q0B7w–
X-Originating-IP: [65.54.190.101]
Authentication-Results: mta1263.mail.ac4.yahoo.com from=live.com; domainkeys=neutral (no sig); from=live.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s26.bay0.hotmail.com) (65.54.190.101) by mta1263.mail.ac4.yahoo.com with SMTP; Mon, 24 Dec 2012 02:02:38 -0800
Received: from BAY155-W49 ([65.54.190.124]) by bay0-omc2-s26.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 24 Dec 2012 02:02:37 -0800
X-EIP: [BeN0YL2exaSamhdrCnicMrY51kryhvHh]
X-Originating-Email: [secretarydrpetercheque@live.com]
Message-ID: <BAY155-W4968A3A75E3CF4E33A318AB03B0@phx.gbl>
Return-Path: secretarydrpetercheque@live.com
Content-Type: multipart/mixed; boundary=”_053f2ce7-b584-4572-aae5-f7de5b457928_”
Reply-To: <secretarydrpeterchequ@hotmail.com>
From: “DR. PETER CHEQUE” <secretarydrpetercheque@live.com>

ORIGINATING IP: 65.54.190.101 RECEIVED-IP: 65.54.190.124

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Mickey Penick”

RECOVERY SCAM – ADVANCE FEE FRAUD – COUNTERFEIT CHECK SCAM

These scammers aren’t as organized as some might think. They think I am a scam victim and suddenly i’m getting recovery scam emails (note: i’ve never personally been scammed.)

scammer

SUBJECT: Contact Name: Marcus Wright Tel: +447017419229

EMAIL: You are eligible to receive a compensation payment of $2,811,041.00 USD. This compensation is being made to all of you by the United Nation for all that have suffered losses as a result of fraud, accident or illness. For more information, contact the below agent for the delivery of your cashier check $2,811,041.00 USD). Send Names/Age/Addess/Phone/Country to

Contact Name: Marcus Wright
Tel: +447017419229
E-mail: unclaims@msn.com

Please take note that you will pay a shipping/handling fee of $500.00 USD

Thanks for your patience.
Allan Wilson
Event Manager

HEADER:

Return-Path: <e446457625@exchange.1and1.com>
X-YahooFilteredBulk: 74.208.4.195
Received-SPF: none (domain of exchange.1and1.com does not designate permitted sender hosts)
X-YMailISG: iaCrEfYWLDvUk3y5l_LNyAThSP4V4xqF9eporgKJ.m3Nd03w XWrY2ydticsXeio8wTgHBJ2aFAeLqYlsViYDL2HrIhVTeUx65Cij2DslY42J 1JcGuBntGNpKwqbi8d6__JYOcu2YGgeimltqpogYdwuH6O0gdgmte_jVnTXp DBrqDY2fjlgXlQweOpF2pJ7HWFHaKpCQ2mD3O69awfl1TuWSvxmGBs8IyycW KDd_QjkI0XurTEYpvrs.juFfFY.m5LSYWPpJ7KXYTX.Olpl7C7EGASVq97fn Ih.IfX2B7m520UEhgjWa0pcChsz1tDM8HhHDmnR9BSSUdCQrUAJtq61p0.4d sTW1Ycv2ZulyOvO2VPs6Cewhrl0mWSs6lu.VylJ8TGFQkLO4_NGczucleS7U QcN7oBNMMRrqVd7wuSHqy3x6ij0Nh7YRKe7bzAmkUKDCZ6yYtehskcO0Cb6N a4NGAY2APc8FNa0Okhyr7474z8xoCK22d6iM4LrXGMnQoN7rzpyAwI.Vh4an zUSltnl9DoyHw6zpkHzTDg83U1U8H170ej1D.OIRoTzIgePf4EwQtHxPhYWp LolfCsP4uojYOJiti8JEPiaM1Iv7.wfouwvStb8RIPu.wXwzz8JKlif1WO_u jxhgh1VoiHXxW7X8SXH7hjyeQ6UATkYxU5QhFwMXDEeImNrMZmEZ_lchm0R1 1mege0p9..eO6eOso70V9lZbc5EYS6bfo5os9Fr5PcIGzoO5wIz_x.Lgj8DC mkqzAhGIJ2W23dQswOdlqiNqc15opbm17FlWeqtDQLI.9O.Kc1g55qeqx6ch W.hfLVSeSuET84Wx9HNsevw_i368gZdf6npqFXsFe6DA5AvSVCmN43utGl2S a9WJN_W4M7HqrMzhZr8GaWfQ91lsBWMjzBIHY3mbFGbrGndCIs92NgEtSZRH dL9t1FoI3uEI.ItCcN81622pEGxUf6dmMfo1GZHWXLsWAjZrxAXTra3nj5sk p7ee2IDr8MzV4Habi4.G280NGs.N08actFPy9qA9btaSbXepORrPlepnwou_ byz.WL..TkAperFe8bEy9TWl.vEMFvv5vUE9P7FVBLMYhm7GyD3PMFJ015Vx fbzb7mhHra5FJ6TzXilK_slwVG6Z1GLjhpJSASY5FnI2RGARl_s00D9Y6JAn _AprGehiYWveWJdJSa6Tw00paCosmt5_p1S_kI18yFZc.l05OXgdlPk_DO5B hwLpZ7rB8dKtgihjHxXvlGAgye4RyjUbsYJGn474XwG36A0.wuKYHBejLFhm CPR1cEK4y7v_LTZvdUmKT2LPHnd82HigOEUmkOB4Yf.OrQUChOW9x0Rpo3nn FgMqTXirC60Ho5n2RIO0HCHBhP4Uw3LoXUZabhsEGQUabVk5kbZBbP1Pjffj e1iuYoVJbVVRBP1v0cBlPBzmHiU1Soa2YIFz_HPXOgGQp.awygrJbTiJGovl jMlxGPBGrOTtGv6l6gj.DsMZoyj1Q2gT4cGTxvbKLlQVN1CM_Oh_WZgZIB8A B8fJ1qVC15o4xTnoELkVWve2LgUTZBQ-
X-Originating-IP: [74.208.4.195]
Authentication-Results: mta1349.mail.mud.yahoo.com from=exchange.1and1.com; domainkeys=neutral (no sig); from=exchange.1and1.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mout.perfora.net) (74.208.4.195) by mta1349.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 05:30:43 -0800
Received: from winxedgeus02.exchange.xchg (winxedgeus02.lxa.perfora.net [172.23.130.34]) by mrelay.perfora.net (node=mrus2) with ESMTP (Nemesis) id 0LsTxI-1T0cjc0oTQ-012CUx; Mon, 17 Dec 2012 08:18:52 -0500
Received: from winxhubus04.exchange.xchg (172.23.130.36) by winxedgeus02.exchange.xchg (172.23.130.34) with Microsoft SMTP Server (TLS) id 8.3.279.5; Mon, 17 Dec 2012 08:18:55 -0500
Received: from WINXBEUS26.exchange.xchg ([172.23.130.69]) by winxhubus04.exchange.xchg ([172.23.130.36]) with mapi; Mon, 17 Dec 2012 08:18:51 -0500
From: Mickey Penick <e446457625@exchange.1and1.com>
Date: Mon, 17 Dec 2012 08:18:50 -0500
Subject: Contact Name: Marcus Wright Tel: +447017419229
Thread-Topic: Contact Name: Marcus Wright Tel: +447017419229
Thread-Index: AQHN3FkNRoTFW9qeBEmCokF2SqOu6g==
Message-ID: <B353BE0D877992409CB2153398733B81635C6E54@winxbeus26.exchange.xchg>
X-Provags-ID: V02:K0:qa6J6jAK/tEmY1U5oAm/zSZEN6hkkm7rJiviufF0pv1 OsGjlV2iTAWrxa+UG8t3ZvDeSPO4sJF8zru9389fyCpogoi/BM ixURjJTxTWNPkRq/MHnwa26LpEVLDtNfQDcbXeg9xGiGkbgCVT A2QOsNmrL7XzUs78aEfZ64uzbxZnIRkdidfZiGrnrlTpU5spNJ ZF84KTYP+OuNc4OgXtlZ4x4qjlguiRrTtVeNFp8wIwRcMfwHFm oPRGeZcZdDudKa4Z+OaxemgG9qSiIz5LvVn97pPoJNVfUfzKNA pGyWQk46l9ap1cwOftoG7oWDg+tJUfI4fKD0YFVay173Cp1Ggp FvL7jQnFFYZsfstNVIvDRZAbRNwVBOSpXgO2UwHLDtEkgPw2Jr Ngm4U2L8Rv6XEZAXguJVFbJkGSKOn0NKps=
Content-Type: text/html; charset=”iso-8859-1″
Content-Transfer-Encoding: quoted-printable
Return-Path: e446457625@exchange.1and1.com

Mickey Penick <e446457625@exchange.1and1.com> unclaims@msn.com +44-7017419229

RECEIVED IP: 172.23.130.36 ORIGINATING IP: 74.208.4.195

 
Leave a comment

Posted by on 12/17/2012 in Other

 

Tags: , , , , , , , , , , , , , , , ,

Pashkevich Dmitry

DONATION – CHARITY SCAM

COUNTERFEIT CHECK – FRAUD

EMAIL: .. I am J. Bolten, diagnosed of cancer,I DONATE USD$10 Million to YOU.Contact my Attorney Gates,for claims via email;( ssgatesinc@aol.com ). Do Send in your alternative email and telephone number

HEADER:

Return-Path: <DMP@euro.who.int>
X-YahooFilteredBulk: 91.199.113.6
Received-SPF: none (domain of euro.who.int does not designate permitted sender hosts)
X-YMailISG: Ao5.wDgWLDsZ4cMIeQW.sQlPw55Z2dNFt22fEIu7DJVbZaqA UzCcDvGBfRInt90R78WVCWd.idvYkMo0U227P_A.Jn9eK0h1tBzxJCySb0FE I6bl_MH4hDrjTVrLOP5vqFGyOv489ub7cKKte3xXjVUznrOTzHQVH8Fs28oE Nmmlt5OB7NQFBDfxby00hWkRKB6hT3.drLYQ.e8LunmpdpM2BVc7l2BmZkyP OaAsUblPBjFASGlEYkWtPGS6EL8F37.M9eCnpqhq5_Uqx506in25AvdH1yQh O_Ja2y6FIrc6gGVPG.e86diI9fQ9twK58BXL_MDmqNHFelpUjZksQtNRrcn_ prA0DQWcuzdb7M9QrKIGw.WR0NMeh6YUQnJj_eO7nNqWTNDzm6yJvyOcewvW hQ9pumbRIAi63hmdHop3i5hvCuZt6K6niQyk7jRzYdPp2JmODQjwEl98AouT XNKhlXdv8A4O0PtFbWF0dGOC8YnGQqIZ2yXlBjSGgRqLRnfmzD5pNc7pm8DR 7sUzN5xZMKvEh6iYM4.NCEasq.z1X4MXNIjBaWaXYWWXc4CUNLAx2bDQuEom Q5xsu3nHz2kggZBIVWGyhtwvVX4GRnhT7a6rWP9hRN22NjPVxBIpJO0a5nlA npUwYEjjM0mU.D8EkXrPx4bVOcc304Y2TZMZ_DP3Koxex.XY79N90UMZkNq4 W4tbIHp0nwk80BS2R6FhxDF4ySdcxdW5QWQU5mgaIKZSxAElpzUtho4IuaCo a39c7EL_PAVMDNOyTvKX_sNVWFOx9DnyVirlUCuksehelaT7kYieNbMWMeTJ 4jQoOPJnijWZCIKGAyNZTk5RksWDMEYk_5FnRqYkr_xJQxOewVi9yP20HFU. UlE9eIGUaPmfIbDXv2GRNgbEG7Jc2MzFihM9aSE0UgGAuaivUADynRJ948gk txjo3EIx8p3fHH8BFVgWjhkoAGlKm2yYjGDMX9OmJBzB86u2.6LUcEPcAMwf wpM94DbsE3bSlRR5Yvac9QK5fCRSkc6BsNnfzlX8AoNmFWbb27VgVHyRKmw9 SiQ59zFa8lRrE_eHMW3X8_18oXxLJxjJnF1fT7prjZLonXZbHihgHbyDyyv7 aXMSXCWH5f5rvn6cdi0pfg5oi.KhlABYA0CCZHh1y.EoECvtVRCx2KDTKKmM Ou1Ar9j1iuI8L83wXzTQIKBq_gLUol9.4CI8gXlwgBgQHXAH0YiQmSdWszl0 vgazYEuDFXq5G9Roc5U2hxSbpXxnoicku6bzlGNw2mprfsQpgCiisgZ19V4k 65DY670gqW23RfgIzZepHSvFArjVqfMNOtvk6Ey7mkaj2DvcSg3Hc3lIFafl 2uvLCNRzauD9x7KX7RR7mbsCobqXlGJSVDp0yIz_S5ZaG9eMGQplxiBD.O1m 7KcnU..z7yd3K.fBtThNFUtsiAxLA9WjabOQUk6rj6yh9aAQ5RSofgidJf7n 4GQz3U.FNVy4pGcaPT39sBSv8uhc3K_Osqn8PxFV5I080KEqAqp3QJypKf.T NWnG4U_swzPXh13I8BlVUBBYvk8WK8wAkdkVtEY0qkQfkcC9pD9lPAt0jccf mT1N0tTvnsOHIPopN8MYTaqPhndOLF9966AE8ptJ9LMocJGSzxA86VSA_2wl yg4eXNwrwh.o.uohdBfsbX8LgGwFKIVOnlgV8EgfOEMvRyE1N6efqOQ_5TEi MotBvX4AWL04HgN0JOZVZU99sh1ZdKyb0ui7tvLNnAo7TQCKr1sg9EME65e3 rUpHDBdi8x6azJgyOBBvJTAVayYomIj4mHMdBlOi.CPCImjeqyNreo8HkEEK HEKz9xrp8g–
X-Originating-IP: [91.199.113.6]
Authentication-Results: mta1284.mail.mud.yahoo.com from=euro.who.int; domainkeys=neutral (no sig); from=euro.who.int; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO owa.euro.who.int) (91.199.113.6) by mta1284.mail.mud.yahoo.com with SMTP; Sun, 09 Dec 2012 05:48:14 -0800
Received: from EUROS68.CPH.EURO.WHO ([10.16.16.168]) by EUROS68.CPH.EURO.WHO ([10.16.16.168]) with mapi; Sun, 9 Dec 2012 14:29:30 +0100
From: “Pashkevich, Dmitry (CCC-UZB)” <DMP@euro.who.int>
Date: Sun, 9 Dec 2012 14:29:29 +0100
Subject: ..I am J. Bolten, diagnosed of cancer,I DONATE USD$10 Million to YOU.Contact my Attorney Gates,for claims via email;( ssgatesinc@aol.com ). Do Send in your alternative email and telephone number
Thread-Topic: ..I am J. Bolten, diagnosed of cancer,I DONATE USD$10 Million to YOU.Contact my Attorney Gates,for claims via email;( ssgatesinc@aol.com ). Do Send in your alternative email and telephone number
Thread-Index: AQHN1hE35ld3Zw5cX0KVxtG1x9PaWg==
Message-ID: <CF86913904B1E946A7A09054DF60CD8BDB464F2F61@EUROS68.CPH.EURO.WHO>
Accept-Language: en-US, da-DK
Content-Language: en-US

“Pashkevich, Dmitry (CCC-UZB)”  <DMP@euro.who.int> ssgatesinc@aol.com 

RETURN-PATH: DMP@euro.who.int

RECEIVED IP/ORIGINATING IP: 91.199.113.6 – This IP address is listed and blacklisted on many anti-scam websites

 
 

Tags: , , , , , , , , , , ,

“Adin Kones” Also Goes By The Names Dr Mike Bruni & Abdul KuKu

NIGERIAN SCAM – BUSINESS PARTNER – COUNTERFEIT CHECK

Feb. 5, 2013 UPDATE – Adin Kones is now going under the names Dr. Mike Bruni also spelt Mike iBruni or Mike Brunni — and Abdul KuKu — I’ll post the newest email along with the header information, below.
freemoney
02/05/13 EMAIL –

SUBJECT LINE: Good News At Last!!! !!Good News At Last !! Dear Porky Pig

Dear Friend,

I’m sorry but happy to inform you about my success getting those funds transferred under the cooperation of a new partner from china though i tried my best to involve you in the businnes but God decided the whole situations.

Presently i’m in china for investment projects with my own share of the total sum. meanwhile,i didn’t forget your past efforts and attempts to assist me in transferring those funds despite that it failed us some how.

Now contact my secretary in Burkina Faso his name is Mr Abdul Kuku on his address(abdul_kuku2000@yahoo.com) Ask him to send you the total Cheque of $150.000.00 which i depossit for you in compensating you for all the past efforts and attempts to assist me in this matter. I appreciated your efforts at that time very much.

So feel free and get in touched with my secretary Mr Abdul Kuku, and instruct him where to send the amount to you.Please do let me know immediately you receive it so that we can share the joy after all the sufferness at that time.in the moment, I’m very busy here because of the investment projects which I and the new partner are having at hand, finally, remember that I had forwarded instruction to the secretary on your behalf to receive that amount, so feel free to get in touch with Mr Abdul Kuku he will send the amount to you.

Regards,
Dr Mike Ibruni

Cadeaux pour la Saint-Valentin à prix soldés ! Bagues, bracelets, montres sont à visiter sur Voila.fr

HEADER DETAILS:

Return-Path: <drmikeibruni@voila.fr>
Received-SPF: none (domain of voila.fr does not designate permitted sender hosts) b3JtIHlvdSBhYm91dCBteSBzdWNjZXNzIGdldHRpbmcgdGhvc2UgZnVuZHMg dHJhbnNmZXJyZWQgdW5kZXIgdGhlIGNvb3BlcmF0aW9uIG9mIGEgbmV3IHBh cnRuZXIgZnJvbSBjaGluYSB0aG91Z2ggaSB0cmllZCBteSBiZXN0IHRvIGlu dm9sdmUgeW91IGluIHRoZSBidXNpbm5lcyBidXQgR29kIGRlY2lkZWQgdGhl IHdob2xlIHNpdHVhdGlvbnMuIFByZXNlbnRseSBpJ20gaW4gYwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzM-
X-YMailISG: N4280cUWLDumNz0wH7sAC372K0d5L0tGTAGx2kZXSdevVjEI hzc4jf7ybXNaIitc8hbPcxiAeilkPR6HJew_eU3ZNSYXbO1MbP6gAgWymylu yYBBZZDRUaJ2SETKYT1sPPPl5sgFPUQ8OzLbnnFLD1T7VpybJp1bZrkxmICX AM68UROudtComCH4wtLEsS6f23lrdaObymRtk8LF0lkc_AFHWkF5auIDY26d E4YdjqStIC0vA6LpNORVEWhgA8X3kymsytDYWSygvK.ShKEa2FGW7X5fUpiu Tvdvfz08NuEZOBAZMPvoloF6GyexZ5V4ObfPdMIGOFDZcAH_KZ9Ec0IjEdad J4BeeZJMEA9zkFHlBDQeTG9LEyHKZ7.Xj4HMEf.JxQBaKOEhh.YItyNZFfzG vyGBa6P9R.ALex2vN1ekRufd4SU9XRD695_61gSevJjxya_Wgk98xf1PINf5 H74HZKrL7rRIAEHQ2ulIpBQwMXsD_PQF3OvdT0aPWSMiNNOnXp2r7qMIwO0o NitiJgtJY9lyu528Vz.1_agKKhh2KNmmX.NLnh3H6XqMGYpkzA6mcdJOpqV5 YP3QH_ehJO03C.sztIb9m_7ieCP18DfItf53yy_KwrNynmKXnAf61jisDOSq uWUJfoQ1PIGuvmcRcV5UJyiXACADDqE18XzlnXJIZoiaWSWr_BDRFDbSKsWf WLVKsmNghe_y6sLRSAE3KSfPqJ8XpG7MZA7mz.B6VlvNOdf0o5mYXLrmObc1 X1Eb8nq1uZnIgudYPLIOG.EnKwZvcpJTrEcCLhARjzmHhqt.nk_MwIGhv7xH 7wL7w0Ok0GQrENJiPbzknw.pkhKYlmET8zKpO_Aj9lre3QnkpwJ2ET4Sz3bH ssuP6vYQpHfDt2TeVCrTpD9YHw.M92ckCLsuOJWOAbCjWlEZliAbEDNlJA4F 9GeQuQlXYxh_bZOnygXfYWtvv.8G8EYpoUykqaQ.NQaVHzk8IZgsuI0Cc4oi 2qLZvmorMQRxaOMnObJzo7jPjonPouF6zvw6CFkbGrtmRQFJhBoJdR.GBhhg 3_2fx94LD0KH.dp8NtwnssPjaIaInkMbu1Clf1Xcn9znKIqfJC89YbL4TrGc aOrKWKDr5feOUA6ukYt39HVmuc2niS9zgj5VJJmWvKxnjhGz3EU63.RZt2ys LdBNaq66nQgEXKp6252djnFuyGHTlAH3.uBq.tctAG_66.8PkGGKeGiK50KT iV572PVkdxs3SmgheG3a5BNStqQIBW3zGEfieR0KogAo.TQZj.B8ItTAx_HT iIZuQrFf8ygG653n86V1ASNd532XiEIne_CLNqEH_UXbBrhDmUk.xOZ9wPY-
X-Originating-IP: [193.252.22.125]
Authentication-Results: mta1270.mail.sk1.yahoo.com from=voila.fr; domainkeys=neutral (no sig); from=voila.fr; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtpout.voila.fr) (193.252.22.125) by mta1270.mail.sk1.yahoo.com with SMTP; Tue, 05 Feb 2013 13:59:07 -0800
Received: from wwinf7128 ([10.232.48.95]) by mwinf5d65 with ME id wlz61k00A23DiQA03lz6Wk; Tue, 05 Feb 2013 22:59:06 +0100
From: drmikeibruni <drmikeibruni@voila.fr>
Reply-To: drmikeibruni <drmikeibruni@voila.fr>
Message-ID: <464817694.472421360101546137.JavaMail.www@wwinf7128>
Subject: Good News At Last!!! !!Good News At Last !! Dear
X-Originating-IP: [206.82.130.170]

drmikeibruni drmikeibruni@voila.fr <> Abdul KuKu abdul_kuku2000@yahoo.com IP_USED: 206.82.130.170 <> 193.252.22.125 RECEIVED_IP: 10.232.48.95

Received: from [41.203.233.128] by web192205.mail.sg3.yahoo.com via HTTP; Fri, 27 Jul 2012 02:53:52 SGT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <1343328832.70464.YahooMailClassic@web192205.mail.sg3.yahoo.com>
From: Dr Mike Ibruni mikeibruni@gmail.com
Reply-To: dr.mikeibrunni@hotmail.fr Return-Path: dr.mikeibrunni@hotmail.fr

________________________

Dec. 9, 2013 EMAIL: Dear belove one,

I’m sorry but happy to inform you about my success getting my father’s funds transferred under the cooperation of a new partner from china though i tried my best to involve you to assist me but God decided the whole situations.

Presently i’m in china for investment projects with my own share of the total sum. meanwhile,i didn’t forget your past efforts and attempts to assist me in transferring those funds despite that it failed us some how.

Now contact my Pastor in Burkinafaso his name is Pastor Abdul Kuku on his e-mail address below ( abdul_kuku2000@yahoo.com) Ask him to send you the total Cheque of $150.000.00 which i depposit in the bank for compensating you for all the past efforts and attempts to assist me in this matter. I appreciated your efforts at that time very much.

So feel free and get in touched with my pastor Abdul Kuku, and instruct him where to send the amount to you.Please do let me know immediately you receive it so that we can share the joy after all the sufferness at that time.in the moment, I’m very busy here because of the investment projects which I and the new partner are having at hand, finally, remember that I had forwarded instruction to my pastor on your behalf to receive that fund, so feel free to get in touch with pastor Abdul Kuku he will send the amount to you.

Regards,
Miss Adin Kones

HEADER:

Return-Path: <adinkones@hotmail.fr>
X-YahooFilteredBulk: 65.55.90.93
Received-SPF: pass (domain of hotmail.fr designates 65.55.90.93 as permitted sender)
X-YMailISG: nTToJiQWLDtSpmjFCv8wd1UJRm5dtSupUrbEwr6JYD_yb2Pv CB7FKbAvoEoVMCpW0BSDMazuEmnYo_do8aUZfqHM26UsAJhzN5pgaYiq_kp8 XD6rNbQocEBotDADYsoIiYYH6eaCTLkSAX9zBZghkblW7Dq8ntrL_f9cT.WK 699FLKShM66M24UzCUB.Xpx4G.bU1pTaGLJPoIm9SDUQdf923T1O0sJzBTMY OpnWO9y8vkwATACSGb_Tw2fDUrf6B5vZf8yHW3_oWcuh0YlAWE8tmY.a73Du ma7ylj_EHpK0vJ8t_xR5AnPEO2MAq8qb4Lv2t3J65VxxefZUgLgsJW1jqNiN iZRNeN.0DMr38CDlbzD6Rt0eWDYVL9IV9B2AOqKyxw81oOlr3kfWJinDUPb8 EACFSStrKt1s4Q0_XP08eqRRZrZ_bDWY37kQ4b.AUHXmamlU87Os3T61tHyN cQRJwWig0snDuQw8ZZ5iSABTlNhtFZ5SyWdrQDLgzk9o7SKc2nCu6isd6Iy8 _2WPmMPQK.z4lSAQO7GgbVsgLb2ejrGyUBa9reYiRPiX.MMXwq_xgJGqcAHB aPOIQfCdY_f1TCO3iVIEokxTcQOqqOBLyjsuI_VabrBbEM.G1_nPmTQ_753g akftY7BFHz5HrhVAnDYGmpW14AVPaC6jWPz8YQaf3U38oybbxHbr2uIpjgRY 3ffNAuw0ma5wRWSvOYTvkEeUIxZWfF_xbCTPbLNclJjyir.O5HnY5NUA_W4Y lTMmEK2Guqmb.8kdpNrE9XLkC5W3wkEmgXiL_xzjXFCrOBKZuANTBxPz2.Hm PmuDry6QMavij83IZ5rIjy4UDK_c4AxCHsJvnhojCotm30PrKwMf5NBdEWLz 51ABWeWwgz.V8Oo7Qr.UziYKHoSvlTIGv6Zc.HK9DGc6J.rVHPxtzQONHx5g LEEjuEbUcIQiS5DQpuDbwrpdKA9H0Pw4jdKYIWukzNNbjqjkWavCqZndpaxV TuCXscxq1Dbp2xf87haCJKrgQiHwQ_do8fZVhnwWCqC8LP.aBqNNjI2Vtcwt Rw.2ZFroX6D.V4URVfuf7zBj6OVn1NN1Y5R7YB0ktJ1SrP228s_ZMy_Jk4AG kMSDup3n80yBGJ42d7g5uPCn7mPp5mVnD3Fn1wE9Jv0CM0z_LEqjr7CEMAER quJOXhqVm94vjbJrqmH.MTJwAGdTLrCu3fq1jqCMVY7ESUt4vo_xQ40e5yxL vWlSYp74i3ZGpPz1mbVRfSfh_8c.E_YlUiXQQNOz_R9mZufQArefgc77XAln EaF_XTQfbML2
X-Originating-IP: [65.55.90.93]
Authentication-Results: mta1319.mail.bf1.yahoo.com from=hotmail.fr; domainkeys=neutral (no sig); from=hotmail.fr; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO snt0-omc2-s18.snt0.hotmail.com) (65.55.90.93) by mta1319.mail.bf1.yahoo.com with SMTP; Sat, 08 Dec 2012 04:54:07 -0800
Received: from SNT128-W50 ([65.55.90.72]) by snt0-omc2-s18.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Sat, 8 Dec 2012 04:54:07 -0800
X-Originating-IP: [196.28.249.59]
X-EIP: [JhdJ11vB2thH416HLDqe/5mX7nR6aT2T]
X-Originating-Email: [adinkones@hotmail.fr]
Message-ID: <SNT128-W505C0F35AC087D92229699C44B0@phx.gbl>
Return-Path: adinkones@hotmail.fr
Content-Type: multipart/alternative; boundary=”_9d4b84ee-708c-425c-b0d0-e52ad861feff_”
From: Adin Kipkalya Kones <adinkones@hotmail.fr>
Subject: Dear belove one, Good news at last!
Date: Sat, 8 Dec 2012 12:54:06 +0000

SUBJECT: Dear belove one, Good news at last!

“Adin Kipkalya Kones” <adinkones@hotmail.fr> – abdul_kuku2000@yahoo.com <- her make believe pastor who is really the same scammer or a scam partner on a different email address.

RECEIVED IP:  65.55.90.72 SCAMMER HAD TWO X-ORIGINATINGIP’s IN THIS RECENT EMAIL: 196.28.249.59 – – 65.55.90.93 AUTHENTICATION-RESULTS: mta1319.mail.bf1.yahoo.com

Below is other information on Adin Kones sent in previous emails

Miss Adin Kones missadinkones2@voila.fr – Reply-to: missadinkones3@voila.fr

X-Originating-IP: 41.203.237.17
X-Originating-Email: [omar_fff06@msn.com]
Return-Path: omar_fff06@msn.com
From: SAFI OUEDRAOGO <safiouedraogo@voila.fr>
Reply-To: [safiouedraogo@voila.fr]
Subject: Treat As Urgent And Call Me Now +226 76 38 89 06,
FROM: Miss Safi Ouedraogo
AUDITING / ACCOUNTING DIRECTOR
ISLAMIC DEVELOPMENT BANK (ISDB)
BURKINA FASO WEST AFRICA
PHONE: +22676388906

Some more IP’s from Kones previous emails: 41.138.107.61 Location: Nigeria — This scammer also responded under a different Originating-IP of 65.55.90.103 – 65.55.90.71 <> 2-2676388906

Click Adin Kones for previous emails from this 419 scammer. I’ve been baiting this scammer although I’ve only sent in a couple emails because I am overwhelmed with spam mail so it’s hard to keep up. This fraudster wants to send me a counterfeit check to cash and mail funds back. No chance in BLEEP!
 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: