RSS

Tag Archives: Fake Check

Four Email SCAMS

A list of three scammers who emailed me back in October, 2012.  I would’ve posted them sooner, however, my spam box gets FLOODED with spam and alot of email’s (including these three) continue to get pushed down each day. So i’m posted a few of these less recent scams, in one post.

1) LOTTERY SCAM – “EUROPEAN EURO MILLIONS LOTTERY COMMISSION” — When I didn’t respond, this is the email I received:

FROM: Mr abdul saram mr.abdulsaram16@ymail.com

EMAIL: Attention:

TRANSFER OF US$11,800,000.00 TO YOUR BANK ACCOUNT.
We are writhing to know if it’s true that you are DEAD? Because we received a notification from one MR. GERSHON SHAPIRO of USA stating that you are DEAD and that you have giving him the right to claim your funds.He stated you died on a CAR accident. He has been calling us regarding this issue, but we cannot proceed with him until we confirm this by not hearing from you after 7days.Be advised that we have made all arrangements for you to receive and confirm your funds without anymore stress, and without any further delays. All we need to confirm now is your been DEAD Or still Alive.Because this MAN’S message brought shock to our minds. And we just can’t proceed with him until we confirm if this is a reality OR not.But if it happened we did not hear from you after 7days, then we say: MAY YOUR SOUL REST IN PERFECT

PEACE YOUR JOY AND SUCCESS REMAINS OUR GOAL.
May the peace of the Lord be with you wherever you may be now.

Your Faithfully,
Mr. Abdul Saram
Foreign Payment Department.
Kuala Lumpur Malaysia.
E-mail; mr.abdulsaram168@ymail.com

HEADER:

Return-Path: <mr.abdulsaram16@ymail.com>
X-YahooFilteredBulk: 202.54.119.135
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts)
X-YMailISG: zoMIZlsWLDvydzg0Dk9J5tOysBHE56cHQyyiC1YznBFFUtuX 2QmjWmBtKrEIAIZhZZvMLBsf2_VfVRuk3IH9j8m1hLMrwqczlxOjNcYd56t1 DaED9ORsgM_tamt6rYqekTqo1ZZeVBVk.n3YVF3tmTgLQTno7RUE_mPfmgyO S8g3lGMj8NpQGYdtfuXTZYiqBNy7OCiTyfihCtBixC84NBTgsDMsAj4P2vvf uvEouSXqXW_lpokkF6fkNC1eMtEPGI98ZdT_3zRWN9Ru.lwobx.vCEagLelr T6qkX56Y3yw3oYYgjSG_O1eZeznkjXOyNOjg82ND2CrRcduLWdRuJOesZKmV 3xrCwSbNU.1OEPGt99LQuUBZpHmnhEsLZ908pgJy706cOkWpiPoZ1rCWGuGK kMgJUwp_ukdV2jXRGVSbgDunXrysUGJ4JGJ7sIcy08xXkI01aKXjvxH5zSVt MLNYizgSIwbXCsVoh4kgvfVFn8tv.rcdkUiap3AJ7fxaz2BjrTg_iLcFzP7j CKXG6ul9U1zBHqq5F54fpGKFMpuGvzwMOAQT_kou94fFWb78j9yzKSJHFpzs N.MLMXSB9whHO08p5lO4G9516SCu.qO8uzo96HXGeNPbj9DIfYQcg1iWz8uo 3lMulBOyPI1h4faLSk2GSYFktoY9y7i9gU.f.9MxMaXc67eJ_PrIVIhtMswN J_wZMBwunjrY3hq2OicEy4TomsF.650j_axPHFQHMF0VIt1ySTNQfVmkwYD_ M4SQKaSrB6uU5OJM3EfBW_Humq93k7t34Dv0UpWSsFFW8shyPX21lPZJvTcZ OXXZcu._kxiXXOWX99I0m3DkvbdL_quy5FBkRomNTW_pSwiZBIdfHBGu50MS 9nIw.OfsGw1O0ATr25xhnJHFLd4PlcHTUBXfiGUamYauHYl_HmtmDcs2so5t jo1X2QbMvFUqicTPxGsJSPWzhxtucwSaWhqCBTqnKW12kmR.n19.GVeHCPoG 5fbPZ6S2rNO.LNDQzjl_7vpVXk.3WfaqAGUZaNZSKgTUx_m6dzipHtSDVyXl ZWvdU1M57p_stGRaLd7P2DLNwZA8gjZwrpTI3_hXdzz4E0HLWDqTsu70dLn3 NvwffnAgEQhrxZfe5eS8PmhRPM3oEBxVA6viz2i6xw–
X-Originating-IP: [202.54.119.135]
Authentication-Results: mta1021.mail.ac4.yahoo.com from=ymail.com; domainkeys=neutral (no sig); from=ymail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bulkhostingpanel.com) (202.54.119.135) by mta1021.mail.ac4.yahoo.com with SMTP; Sun, 07 Oct 2012 07:12:02 -0700
Received: (qmail 18600 invoked from network); 7 Oct 2012 18:40:51 +0530
Received: from unknown (HELO User) (120.140.1.40) by bulkhostingpanel.com with SMTP; 7 Oct 2012 18:40:51 +0530
Reply-To: <mr.abdulsaram168@ymail.com>
From: “Mr abdul saram”<mr.abdulsaram16@ymail.com>
Subject: Attention:
Date: Sun, 7 Oct 2012 05:24:25 +0800

Abdul Saram also sent out scam mail under the following names and email-addresses:

“Mr abdul saram” – <mr.abdulsaram16@ymail.com> – “EUROPEAN EURO MILLIONS LOTTERY COMMISSION” <europe”EUROPEAN EURO MILLIONS LOTTERY COMMISSION europe – FREE LOTTO AFFILIATED OFFICE U.K info_freelotto@ –  “Mr. Abdul”<info@yahoo.com> – “Gareth Bull” – <garethbull65@qq.com> – “Dr. Cherri Holden” – infficess@yahoo.com – “Mrs.carolynx Harold” – <info@winners.co.uk> – Mrs carolynx Harold <info@winners.co.org>

RECEIVED IP: 202.54.119.135 – LOCATION: India

ASSOCIATED IP: 41.221.17.37 – NIGERIA – 41.249.22.246

_____________________________________

2) INHERITANCE SCAM – TRANSFERING FUNDS – FRAUD

 

EMAIL: Greeting’s my dear,

I hope that you are in good health and God is always watching you and to take care of you and your Family.My name is Joy Donald and im a beautiful girl in this country of Cote d’ Ivoire. i am an ordinary girl and simple bread winner of my self. finish college degree not working .I am brought up motherless but i am thankful that I have my father with me all along till the death of my father on 20th Febuary 2010 in a private hospital here in Abidjan. he secretly called me on his bedside and told me that he has a sum of $ 12.500.000 (Tweleve Million, five hundred thousand dollars) left in a suspence account in one of the local bank here in Abidjan, that he used my name as his first daugther for the next of kin in deposit of the fund. now I can say that God is good in everywhere and in everytime. he also explained to me that it was because of this wealth and some huge amount of money his business associates supposed to balance him from the deal they had that he was poisoned by his business associates, that I should seek for a God fearing foreign partner in a country of my choice where I will transfer this money and use it for investment purpose such as real (estate management) can you be my friend,my guardian,my partner, for the time been.

dearest, i am honourably seeking your assistance in the following ways ) 1 to provide a Bank account where this money would be transferred to ) 2 to serve as the guardian of this since I am a girl of 22 years. moreover dear, i am willing to offer you some % of the sum as compensation for effort input after the successful transfer of this fund to your designate account overseas.I’m very honest person and always like to help others.

Thank you very much, i will wait for your reply. God always be with you.

Yours sincerly,
Ms Joy Donald

HEADER:

Return-Path: <ms_joydonald@hotmail.fr>
X-YahooFilteredBulk: 77.238.189.206
Received-SPF: softfail (transitioning domain of hotmail.fr does not designate 77.238.189.206 as permitted sender)
X-YMailISG: JZaHMLwWLDugrnxWgMa0KL19eLCCrSn4Vjkr9J4aFtdpeB0n RfO.FCSatFLs1uKMnFmNvRs95YCfGGD9V9ixQ2.ZUI18rrVrpd9c6YAKD_ep mGZvxWakYrLqBuZIajyrXKCMsGLNT.Aah2DmKlB56P5PAHpA0J5YhGOGuosH dDTRY0OuX_R3Cigqpyh.kfeN4GzHCORAXV1b8p5TP3x0QUK3U2ADv7qkiZba JbixTzA3LxKAdrJF3EKB6GWB0n_0_ppM3TTYmjDzqJbuNsoU6zGDYX93txZq qxUxiJMeHiVBwpAihr.pJBlWF_EyHO6sAOzxEtrSXQBDYI6r9vT28QfG2bkQ l4MbVzyT1n7Twa_dMibPyUW9rxhqG8pASUyelD5fotFzmrK0X_3wMOZbsrRO R.szB0QOzMHw2joCbG0c74FMFgackwgdLdLwfSuZjYsbQHlvUa0LVhp9U__x fzldM6GUoOtXkGubJ5MRQ6DpKzPL6C85e1jn0T0r9u1LJEuTPejfOuV0qDEV saYEVNnk4mi52SyZlcmFMeWs5t.2HixWTyQ2h4RTFfgmJLawAaYmAJGOYebQ uWegqh5C3LL_pgbxf4a9._LXUl.QPV7XNdY7wzOlJ3TlnmLnSJ3bf0U3zcHY q4MvlCc3owpjYOtD.53dx0hxoYSL2cI2KOFVPcZYz.T.ZQ1CyXAzAn6151hh nmtqAD9ouJeDgJt2SIInkOg5NHv1QWRdh_sNEiTVGdH4mHUSgvnEzn0FPZ_U l78PUoPR4fT8wEDua3xMfYaBj5Kb6a8G2qA6fBrhm86jmAjWXtcVEz0_M3g7 i3nL6AnRLdHhcPL.3Xm0akNe7iDDPlufAlUidGal8xP1Oigi8OpgcIq4Sthv QsHMTO0EfOYCaGrzoSaddqtTlZUfnctjltSptmoQ_DwMlYAY7QnXE00HvRFx EGiH.mwv7zj8Jnh6nxW3YbAtEZ9O95EeTTDlZKxOjGyEWsUl4qKh2IojbP1k pAb7WXT5XgRLMG1win4HfMlGuH15.XzvR.ArRmBQH50Qtckr5QGztIfMQLKq 1l1jsOK9RXb1A7C_DsILoPxg7yKSzmnDgVw.QA8oLyAVPHfxFAdcq3Vobrwq 2z_YIMiI7enn.1Vd0Jxek_GkywSnAcepswcn4eU.neYNWprRs9LCHxorbxkB RXlOtzwgZ7_TrVuVJPNOggjT9fqrEZYnUhUHbmi8SToV3zaP7toPD.Ux5b2z veuMgxkh_RhisgKxWbX7ku9z2CB.x2ZF4MwCiTwED3WCAQrTbu3fopeh1ICN XFDoHmtkcfuos7_eCmTGq8_SCdX5lE3TBlWZU04svWZWMIk-
X-Originating-IP: [77.238.189.206]
Authentication-Results: mta1300.mail.bf1.yahoo.com from=hotmail.fr; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm17-vm1.bullet.mail.ird.yahoo.com) (77.238.189.206) by mta1300.mail.bf1.yahoo.com with SMTP; Wed, 10 Oct 2012 09:25:01 -0700
Received: from [77.238.189.54] by nm17.bullet.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
Received: from [212.82.108.253] by tm7.bullet.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
Received: from [127.0.0.1] by omp1018.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 759852.5070.bm@omp1018.mail.ird.yahoo.com
Received: (qmail 95614 invoked by uid 60001); 10 Oct 2012 16:25:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1349886300; bh=jaEN//dfogj2VveAeEoe/VXQQN2SwrOCdupZLniFXYg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=gFNDxSA+fQ/8A8jgKkFMAaKNlbRG81Fr2Blh/islfQc7fwumPFknPMR73jC3ebIw4/Jj4IaBtCCTajqdTlzpH3FQxVOWIRcnul4FVBa1NZN2f+DtPR6t1YHzzZXcfrd1UpORj1wmOG/WHquNyYwesDFYod+iLcHYwQJEIPJrWfc=
X-YMail-OSG: bNrzragVM1mTLrq9DxIX40L1J60JiJhrQ0wuRl7w6Sd1Y7u c6kjz5pTHtaDVpdpayxVP37.bOAv5uVox3wH3edxmNiadIQU_MhECL99_P6g rvJJGcLBsCljDdhiWqr0Lia7jKJHIdfX_w4avRcs0Tu8DTDkWNA31_7_FarE 5nYlfMedww6RvY5K6h7IcIEvs2U1G.CbX9WXYhiKjfdLM1s.v6W5SIPf85RN NspEsJXiafUi1QAXAzPKLhU5.bmFjCz3JER3WhYejBKIdkPQLJ2VE8ct95FS WDB6xtDiU3tRzQcEySrIXJwoMv15ScwC9pYuVs85JwH6ypUAAjAftFarPXEd 6hujb7zfiswYXLQg55XfnQReV36PZHVy6ffLu0QeipIkfC4HHTbakq7ag8Jr XU9qFc.5IR_JpnGYiINd_iBBp1.LjenFSIHT8o9Sw1RHSZMG_iIkMM0eJSVp sZdhbJKJSLaszEdLqD3iUcFwpzHD8iot8Ip6DIO17SMm.mgMxGJeksfmf1lC SlCGFXSmSGO7XZeO4emPmb749eAOGk0CgYHYwdL2RtbFD3fSHqR4LP0KtBJw tmUvaL1yqR_mUcAzvCjSAjAAP0lgfDUNpDZVmYlwbwl6NlJmowcO23eAppF6 rBOFUIVZHkG70Ht502_wTFM_e420-
Received: from [196.201.65.21] by web171605.mail.ir2.yahoo.com via HTTP; Wed, 10 Oct 2012 17:25:00 BST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1349886300.86977.YahooMailClassic@web171605.mail.ir2.yahoo.com>
Date: Wed, 10 Oct 2012 17:25:00 +0100 (BST)
From: Joy Donald <ms_joydonald@hotmail.fr>
Reply-To: donaldjoys1@yahoo.co.th
Subject: CAN I TRUST YOU

FROM:  “Joy Donald” ms_joydonald@hotmail.fr Reply-address: donaldjoys1@yahoo.co.th

____________________________________________________

This scammer spells Federal incorrect  – ‘ Federal Republic of Benin ‘ not ‘ FREDeral – LOL they aren’t smaRT AT ALL.

3) LOTTERY SCAM – 419 SCAMMER

EMAIL: FROM DESK OF MINISTER OF FREDERAL REPUBLIC OF BENIN.

FOREIGN CONTRACTOR PAYMENT OFFICE.

ATTENTION BENEFICIARY ,

The Board of Federal Ministry of Finance Benin Republic. are here to notify you of your payment inherited funds of ($2.500.00M)U.S.D dollars . after the meeting held on 6th of NOVEMBER 2011. His Exelence the PRESIDENT OF FEDERAL REPUBLIC OF BENIN DR YAYEE BONI. has Instructed this Department to send your funds through western union money transfer for easier receive of your inherinted funds without any further delay. to avoid paying money to the fraud stars that is going on through the global.

You are required to send your name and address were you want your fund to be send through western union the maximium amount you will be receiving each day starting from tomorrow is the sum of $5000.00. also your are required to send us the sum of $105.00 dollar for Re-newing and recofirming file that was deposited in this office with your name and address bellow .

Beneficiarey name———————
Address———————– ——–
Tel phone————————- —-
Your ID copy————————–
Your city————————-
Contact MR DOUGLAS JOHN with your informations below:
CONTACT PERSON: DOUGLAS JOHN
EMAIL: ( western.union45@live.fr )
TELEPHONE : +22968449676 OR +22999203703

As soon the required fee of $105.00 is send today for the renewing reconfirming the payment file of your funds you will start receiving your funds as from tomorrow.

Send the $105 dollar through western union with the name and I am waiting for you to give information to enable you start to receive your paymeny as from tomorrow

Send the money with this below information;

RECEIVERS NAME, PETER MARK
COUNTRY: REPUBLIC DU BENIN.
CITY: COTONOU
QUESTION HOW LONG?
ANSWER IMMEDIATELY
TOTAL AMOUNT $105.00

We await to receive the western union payment informations today. Please if you a are not the real beneficiary dont repond or delite
As soon as you send the only $105.00 usd you pick this first payment immediately ok you can track it now to your private system to be sure.

Yours in service
Financial Minister
Federal republic of Benin
WAITING TO HEAR FROM YOU AS SOON AS POSSIBLE

HEADER:

Return-Path: <officefile389@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.94
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: rVs1dXIWLDsMv_.n5QvLQrk7czd0m_vZykzvsDv2bO1NcJ6B mEmKmBbytjJ2Q2q7hoVPQRFf.X6dUoEqTwfUInQ1y31cNswweQ_WvtxI.i4x G_5EcbtSTAVFV_Tb4UXEP5nfbLLR3OcUBVBsg5a5QXdq93GUClR8IM3EZ5Oq Ax7QU446TQrW4z5fvkmJx3BMyug0lDIr.UKXxO4wFuMypYMVzckAr19SaEIM 9HuVKawHWF29nJmCMUx1.u.4D0ux2wFAlii5MeUQ942cVWxRJNRPKcmbs.HI xfvch.PCVUxqRomtl.EHpyv..T7KNAcWhNhb.OyXv.2QECxKRPe1A7JQ3esP SwDsYR_GQhXSI6NrwhwyUw_L5OuoS6BVHHBBLlwcEVolhJCEGaAjbppebA8J evmsqJ5PFkMZld3WHHJKdpHcYATjH92mH_OttCP.t_gHne6LdIMpg0icfVbo JUw8u4QIpzjvDbBLcLOo7FKhjR_..Dw3CR5HiVy3MjdTZZSVWnsizrHoNYE5 ravSWhY7xBCAUFpwo3u_TWaz0OusXIdi4QFDzivf0VIeiX7U2loHfgshFWfv XZnqeScp1sfpl5.qC8A.jyo8muRr0mX9Tl9byXrF3WYKvEdt3W8eOw0pl6tr nVjmCpVK3My0FU0bhunib_bq4I.amgNLqsYq2RCFlXCeCHFfOKNnfxNjbynC hxvT_tPcgA7lKv2YKqXSpx0aPsEAli7rWut4ZUI.mbV9ciR48JO1mZKsFMun Esrk8D.4ejFipPpmySq5vieercIDg0U79Pww_IHpoccnLrUXM_pkm_n5CE5W J5j0vgLwbYEKKiNM4J.qM.pziSivmA3LHJx4AT_NN_Ifx60YZTyinP8JewNB nEbJEKBjRYYIcrvzTgHy_Hp5rIhJK65y8uhTrNI1le7l6deAErzP.vQvp7RZ UQ061OvKu0ROvUPBj6ooxDZJiQPzlk5YUlYRoNhyiOarHEJYYvHrc2MAfnbs SXemLmas9CFQe.FOnAWLXg6IJXXnlJWn0Suo3DTioi7qFA.PEES_wVpW8Dq. pHM5id.fOlTcNRbobhwM5ELiEbv8UqiWO_xk43r8CF53mgnSxRGX_ofgT.vM K7TyCiTkiLJqrRPsj2XGv6qaEwrHZQVK_zZAm8bQlHgHMW.EPX1efMclxHr7 Hv87ie3KJVlYsbpt41qN.jHZ72TTGfgMUBIpd11uFx7wBWTNJnzM8wuflbWz 7ScRo1Rd9xaY2kgiJd00y.yGR9q0Te8G7.2gs64XgAj.rJHJEesoyLAnHor7 oBWj5K.idQo2jtWtMldstigscuNvbIdpB8ho6rmCzuBDmN33y0aFRpxE8w–
X-Originating-IP: [203.188.200.94]
Authentication-Results: mta1342.mail.gq1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm12-vm8.bullet.mail.tp2.yahoo.com) (203.188.200.94) by mta1342.mail.gq1.yahoo.com with SMTP; Wed, 10 Oct 2012 07:09:33 -0700
Received: from [203.188.200.220] by nm12.bullet.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
Received: from [203.188.200.63] by tm7.bullet.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
Received: from [127.0.0.1] by omp1004.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 119691.33270.bm@omp1004.mail.tp2.yahoo.com
Received: (qmail 38888 invoked by uid 60001); 10 Oct 2012 12:59:01 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1349873941; bh=MP+++lIJyYrpj/aXzm3tMnmhmfCfqMXOi5e1kzYn3Tw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=LVkAtUGaJbi5dfKJkjQghJrT8gUU0PgdSqmZsd9E/ZHQ6/CG6mgNm+rvJDts6pp3AiUWIw0omchZ9EGQ4FunoccmA2lDVIGS7pb99sdl5hsF0AkgCspFU5fgyb8PuayE1Yj98s03K9J4GMwWfqlVMdLewAIrzkJxc6PdD07aZ9I=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=c38Gpj05IhDmqBiYzJHOdEYJeIkGQAvzHcxXPhNy+G8fqdVpH1DSEJEtXQ2/1BsyYYvWZ8vCfJOX3lA93bclbzxnjXmUqQmhkeuQy2JqNskNXltl1tRwk609ukguAOvwLPnMhfqMio8PHMWIVwSnCRb2k3C14uRVjsQ6OpWNeTA=;
X-YMail-OSG: _GARL1wVM1lqQRqVGyFk1sZRYyWzAuNVhJd1sZHEBwkfLNd PMIg9HENG
Received: from [41.138.89.38] by web92411.mail.cnh.yahoo.com via HTTP; Wed, 10 Oct 2012 20:59:00 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1349873940.38815.YahooMailClassic@web92411.mail.cnh.yahoo.com>
Date: Wed, 10 Oct 2012 20:59:00 +0800 (CST)
From: MR DOUGLAS JOHN <officefile389@yahoo.cn>
Reply-To: western.union45@live.fr
Subject: ATTENTION BENEFICIARY

41.138.89.38 – BENIN / NIGERIA

“MR DOUGLAS JOHN” <officefile389@yahoo.cn>  westernunion45@live.fr

_________________________________________

4) SCAM – MONEY ORDERS – MONEY TRANSACTION – FRAUD

EMAIL: Attention please,
My name is Kim Wong, The Owner of Kim Wong Trading LLC,Kuala Lumpur Malaysia. I have been into Manufacturing of Fabrics,Textiles and Furniture Wares since I was a little child that gives me about 23 years of experience, I majored in art in high school and took a few college art courses, Most of my work is done in hand neatings mixed with Machine Embroidery.

I have recently added designing and creating artwork on the computer, I have been selling my Works for the last 3 years and have had my work featured on trading cards, prints and in magazines. I have sold in galleries and to private collectors from all around the world, I am always facing serious difficulties when it comes to selling my works to Americans, they are always offering to pay with MONEY ORDERS OR CASHIER CHECKS which is difficult for me to cash here in Malaysia.

I am looking for a representative in the United States, Canada and Europe who will be working for me as a part time worker and I will be willing to pay 15% for every transaction, this will not affect your present state of work. Someone who would help me receive payments from my customers in the united states, I mean someone that is responsible and reliable, because the cost of coming to the state and getting this payments is very expensive and time consuming, I am working on setting up a branch in the states for now I need a representative in United States who will be handling the payment aspect for my company.

These payments are in money orders and cashier checks and they will come to you in your name, If you are willing to WORK as our representative, All you need to do is cash the money orders and Cashier Checks, deduct your 15% and wire the rest to my company cashier here in Malaysia.

If you are interested in this PART TIME JOB OFFER, Please get back to me as soon as possible and send to me the listed information below:

1.Your Full Name:
2.Your Full Home Address
3.Your Direct Cell, Home and Office Number
4.Your Age, Gender and Present Occupation
4.Your Marital Status

The only problem which I have is trust, It will not cost you any amount, you are to receive payments from customers for my company which will be sent to you by FedEx or Ups from my debtors, which would come in Money Order and cashier Cheques depending on the of the payment my customers wants to use, then you are to cash it, deduct your 15% and wire the balance back to us.

NB: All charges to wire the Balance to us will be deducted from our money, so you are rest assured that you wouldn’t spend a dime out of your 15% or your personal money.
Thanks for your assistant and God bless,
Mr Kim Wong
Kim Wong Trading LLC
Lot 925 Jalan Kepong
Kuala Lumpur 52100 Malaysia

HEADER:

Return-Path: <mr_kimwong@etorq.net>
X-YahooFilteredBulk: 211.154.152.136
Received-SPF: none (domain of etorq.net does not designate permitted sender hosts)
X-YMailISG: yoXgebkWLDvhvSfGpf994bmowTFZpMDPw.1lseHkGA6T1SnA p1t3YxvxJS8N8EA6awflpA_S2QDZLDNMysomaZ_MhaETYuaVnjK1VCJfTVKg GS9W.3ZA3E0Nh3jVpAmuwHhVIFDW4md6Ih9TNntrWk8ZC7..jVHc9sonfVfW kOEygm8wmiN5oXRKB.x2mDSGgaNgpBu41IjFp3gBszrQIbsrDvNrrbX9uTH_ p7Rmx_l0Zrnd9FnqK.6C.zDTZyUuBsTQzCnWsM8tN1i_VRV0x_8_U6RqsTFm msR1VVPtNvDefm9IQjfYvdwJi5u2l5cNzeXjhEbiJmh2X_yK3vkalx4gjUjh AA_sYJdx7rgzLQ4_6TUXm96XQ0h4Dj_q9q4rAkf4ng0GzIJuMbhIWz9SSyc9 ky06NEAdJ.cBOsYY9pgrcAknG7Y1E2ecsvgQVSvIFQkstnNfG6BfSLt4dUe5 P1m.zXjK0.Lt9okfVcAJD33H_m0P1BCnItM4qwEFQmK91MxCGzCumuWqjPgY mJB_mcLtk3GZYcEf5z6pgS4q0NcL5BxMZ9pRg2jSIh6L8.EofXjDJ0QLTH2F oIvu9VLDtSm9CGm4dH3bF.fLuKCzPWcIR0W.cTJ1lx5E6.3cSpC6tu3xvrKT 3wtlgnidfUeFjY_B40NbWu7gSyUVmUYqSZcI53AkvjJhGr8UVgQZeZQz3_dF G3IKjw1ZbJO_m6WGSUENcg71vx7nFW7LeSncqg_yPEKXpNHTZoqUy4vNPlJB .edCKetnFzhsNi.fpSYxgKwiY4zAB7lAAnGVv_LTSiuNHY8Gq4_BjbG7TUVh 1jEbBhPSdv6h2Xn2d_a7_wluSypmlmmijiwoAyjJIzXIQRxOGyAQUpLNt3ic kidbPtvVlp9C5BxHHlSC4l_TaH2audAFdA61K6KkLpVzKbs7aDlwAG_4JY.P eHDCSLcxciwXAbIVMDhDjZzvgAxY9jnt1sY71l7n7d1dl6ufMrE_o0_qDe1j gk.030j9Eoh1E1ERfEHIOI85Czc2grhxp1jZP1GPEcz_HcFqrSn_eKAq.2ab BfXWVSKD5C53t6ibYYh55uQciKnQjLdW1DfMxvcOadU56IUCpJhN_X3tzBgB Vq7jtWkEC6p8UoTEaiFTL_bWrElyr4fvGLTgBOPVxMvn1t.ZmSAZquSUnn4E qSyewFfWh_6vi30xuvWs7yvkhvzMwEH_vHf6qrBNx2h8JRqQ
X-Originating-IP: [211.154.152.136]
Authentication-Results: mta1468.mail.mud.yahoo.com from=etorq.net; domainkeys=neutral (no sig); from=etorq.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO mail.giantsea.com) (211.154.152.136) by mta1468.mail.mud.yahoo.com with SMTP; Mon, 08 Oct 2012 13:09:44 -0700
Received: from User ([82.128.3.119]) (envelope-sender <mr_kimwong@etorq.net>) by 211.154.152.136 with ESMTP for <pondillobelle@aol.com>; Tue, 09 Oct 2012 01:25:27 +0800
Reply-To: <mr_kimwong@yahoo.co.jp>
From: “Mr Kim Wong”<mr_kimwong@etorq.net>
Subject: Your assistant please
Date: Mon, 8 Oct 2012 18:24:46 +0100

FROM: Mr Kim Wong mr_kimwong@etorq.net Reply-address: mr_kimwong@yahoo.co.jp SCAMMERS THIRD EMAIL-ADDRESS: pondillobelle@aol.com

Why would anyone need three fake addresses and fake IP’s just to send an email? Only scammers go this far to confuse and hide their identities because they’re cowards who lie, cheat and steal 🙂

Advertisements
 
Leave a comment

Posted by on 12/07/2012 in Lottery Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“HOUSE OF LORD’S ORGANIZATION UK LONDON”

INHERITANCE / LOTTERY SCAM – COUNTERFEIT CHECK

ATTENTION: This scammer had previously sent me a similar email on November 13, 2012 under the same email-address of info@lordsdept.org but the reply-address was managementfile1@gmail.com IP 41.216.50.32 (location: Nigeria) and 213.154.64.102 – For more information click: HOUSE OF LORD’S ORGANIZATION UK LONDON 11/13/12

EMAIL: ATTN PLEASE
The HOUSE OF LORD’S ORGANIZATION UK LONDON Have just concluded the meeting
with the board of Trustees of United Nations Organization and
Representative of all the financial institutions, The meeting that has
been for the past eight months on financial matters, It has been agreed to
release all long terms debt, These are the classes we are looking into:
those whom has been one way or the other denied their Inheritance or
Contract payment/award payment due to corrupt official services,

After our mutual investigation in the recent schedule for payment of
outstanding debts incurred since 1999 to 2012 according to your file
record where we got your email address; your payment is categorized under
section {B}: Contract type: Lottery/inheritance/ unpaid contract funds/
Undelivered Lottery fund, Attn: Beneficiary, We have decided to bring to
your attention, that you were listed as one of the beneficiary, The
executive council Have decided to pay as many they have their file record
on their desk on a direct wired transfer, The total sum of $5.5usd has
been approved under your file according to elect,

Contact the processing/paying manager for your direct payment of US$5.5M
(five Million Five Hundred Thousand United States Dollars), you are
directed to contact the International Remittance Department of Benin
Republic who is In-charge of the payment
via E-mail:
E-mail: olusegunoniwon@ymail.com
E-mail: consultationdept@yahoo.com
Phone: +229 674 067 42.
CONTACT PERSON: MRS. ANDRIANA U. OLUSEG
INTERNATIONAL FUND REMITTING DIRECTOR.
HOUSE OF LORDS BENIN REPUBLIC.
Also provide the following detail to her for immediate release of your fund,
Also it is very necessary and important that you send us an e-mail
containing your vital information?? As requested below so that you will be
given an immediate response and directives on what to do next:

Full Names:
Address:
City:
Zip/Postal Code:
State:
Country:
Present Occupation:
Company Owner:
Company Name:
Gender:
Age:
Reachable Tel#/Mob:…………..*No Voice Mail Service*
Fax:

THIS REQUIREMENT MUST BE PROVIDED TO HER COMPLETELY,
As soon as the International Remittance Department in your file location
receives your information, your US$5.5M will be Transfer to your nominated
Bank account. this payment terms is to keep a clean slate of all debts
owned by the government and company to individuals either by contract or
award fund, we hereby plead for any inconvenient that you might have
received by any of this corrupt officials, The United Nations Organization
will not be interested in your story of not receiving your payment if you
fail to abide to this Instruction.
Yours Faithful,
Mr. Anderson Paul
Public Relation Officer
Strand Bridge House 138-142 Strand,
City of London,
E-mail: com.unit@net.hr
Hot line +44 020 8759 9090
OUR REF: H/L/UNN/APXB/TF/08
IMMEDIATE PAYMENT
#:WB/PC/FMF/MIN/UN/APXB/08.
HOUSE OF LORDS LIAISON HEADQUARTERS UK LONDON OFFICE.

SORRY IF YOU RECEIVED THIS MESSAGE IN JUNK BOX IS DUE TO OUR SLOW NETWORK

HEADER:

Return-Path: <info@lordsdept.org>
X-YahooFilteredBulk: 213.154.64.102
Received-SPF: none (domain of lordsdept.org does not designate permitted sender hosts)
X-YMailISG: n17TtrcWLDsdDEuSkY_HSkT51L21bPdZBMwxi6AQhYevQE6n 5AHJGUMCXxFcQWA_8b.NyHFBqZMcO.UjZ8FCertxLymBdRPX5yB160N2TGnm qwaPHWExX39Nk3fcXAu.PafkPhJjSLuBXZu9PORr5C.y390tBzQRaxX_Ajeo 7Hur_RtoMBNsEKEcS1NY_jJ7MVItgwhEdNv6BMjqx_b1MlG92f5bS_CtuAVd .oh_JKiqCucKnJdR_vA8__9UE.1fwuLwZ2jBdATHKGRXWA9jdgOwV3Ib69fT EOd7eaFTWdb_5Z16_.TYe.j7ArE3IJKpEKIk4E3slNCtWmGIRFmTka.H7YVU kHIFWlOe90o2tvuCYr8RvUv71WE0TgPgVl6Khq6RD5q1jIaXuAGNiZL303nP R7TIfXxur5a8ZC_2oHyszcv9WRLQjWFSCzGvGQYUJrk_g_Fa1qrpUjRjeM2i l0G7FO2XeR9HCwaTT2znjIqPkdy2KwzEIIjCz.N4kogQKc2kG9n6xWFpcpLo 74MXi2XlqMqfjw4Cj80wiP3jwE0ktGXxBGMSU_2n3YAQ21o2uVONL1mXGIl5 4bMmhVshiHKswZJfj1BN.SBP2D3c53qVkVjkIDCET06u1nIveivDP4Y_oe4g Gp0bTWt5y_R1RqFMmD.AIwh_MS5N2hQgXY2q7xk1_gsgMw2uKxCqk5wcw1df NMnauhxNQjJs0_tgmkT.nJ.KTOhA_qgdK986CusmuMctpQOH_ihBK.jvNTSK btYCtI0byx3BytVo7snXt8QYK6E5Jx9k3ZzauOFpR59.AeWK_EuKrJxb5kp_ 3EZ1tBGHB.ss6mypa8vfMvhb8TINeip6CZPnWI2wlXwUR.ZEKIJrohmFVHFm KFYVmymAMCOdWOLWh2A.dyJSUrjLje2_aZ.DSuRVGpoAtJLHe0QsBF20RzyD 7dC25DeBhkcO8UHLsvng7wFO2coQ2XMhsp.ayEqCe4X2lpjsh2lah9Xo7V7L pPiABw_yasLUGHztyfOUYJ9OSusCqxN.k2MPixuf1vKCB7pq65Iyc4p2uGVC K6bnKMICrei.rxdj1vvTYbKEmvHVsmn.tfhS5B0nTlah3FmibbEpZKHX7Upe wqrzGbwYMdD9LSIDpmkIqF3bRJMX91BdA08UsLs4_E931bhwDffu1ERuYjIw WyEwbhIfjONgETEO8gEzvb42sZbk90Wsxo5b2y1F4ypAzD7R2VyYuQIFQHpb _kcoyrCgQZolEt10hXFRxy0X5MWOAFCOxnDTvDjoJuR2m5Q4DJk8Ic5xuXp8 QCyFyE5lHJPSNnKZ9A15ErmDah0X_ZcVtz5Ri2C_TQNylkHidCSUd8sG0SJb Mg567n3VzIfX6JYHtqlSY9NbCE.G8GC_kNiS.WMe0oeKI7OGev6vbuV8Hzjf yRICVnPIJjSU56vQ91Rk6elLYGnonbkMLw–
X-Originating-IP: [213.154.64.102]
Authentication-Results: mta1349.mail.mud.yahoo.com from=lordsdept.org; domainkeys=neutral (no sig); from=lordsdept.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtpgp.orange.sn) (213.154.64.102) by mta1349.mail.mud.yahoo.com with SMTP; Sat, 01 Dec 2012 01:51:12 -0800
Received: from sunumail.sn (HELO srv1-smtfree-msg.orange.sn) ([213.154.64.61]) by smtpgp.orange.sn with ESMTP; 01 Dec 2012 09:17:34 +0000
Received: from [213.154.64.43] (helo=www.sunumail.sn) by srv-smtfree.orange.sn with smtp (Exim 4.43) id 1Tejj5-000827-EM; Sat, 01 Dec 2012 09:51:11 +0000
Received: from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)
Message-ID: <55073.41.203.79.249.1354355471.sunumail@www.sunumail.sn>
Date: Sat, 1 Dec 2012 09:51:11 -0000 (GMT)
Subject: NOW CONTACT THE GLOBAL FUND REMITTING OFFICE FOR YOUR APPROVED CHEQUE.
From: HOUSE OF =?iso-8859-1?Q?LORD=92S_ORGANIZATION_UK_LONDON?= <info@lordsdept.org>
Reply-To: consultationdept@yahoo.com
User-Agent: SUNUMAIL/1.4.2
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: info@lordsdept.org
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to false
Content-Length: 3749

HOUSE OF LORD’S ORGANIZATION UK LONDON

Some other email addresses and IP’s used by HOUSE OF LORD’S ORGANIZATION UK LONDON SCAM – info@lordsdept.org <> com.unit@net.hr <> managementfile1@gmail.com <>  olusegunoniwon@ymail.com <>  freshtools@wanadoo.fr <> hackk@smtp.com <> 213.154.64.102 <> 213.154.64.43 <> from 41.216.50.32 (SquirrelMail authenticated user david_fletcher) by http://www.sunumail.sn <>

RECEIVED: from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)

MESSAGE-ID: <55073.41.203.79.249.1354355471.sunumail@www.sunumail.sn>

More scammers who’ve sent out email spam under 41.203.79.249 are:

From: <sales1@home.fanwrestling.com>
Subject: Fwd: Re: Wire Transfer Confirmation
From: Tagged<Tagged@taggedmail.com>
Subject: Re: Fwd: Wire Transfer Confirmation (FED REFERENCE
From: <hien_u_spine@hhp.sugarmotor.net>
Subject: hien_u_spine@hhp.sugarmotor.net � ROLEX Inc � Disc
From: <kathytessendorf@mailfront.cbulock.com>
Subject: kathytessendorf@mailfront.cbulock.com � ROLEX Inc
From: LinkedIn Password <password@linkedin.com>
Subject: Reset Your LinkedIn Password
From: <Harrietjeancy@gmail.com>
Subject: Fwd: Re: Your Flight US 66-56833
From: “Purchase Vigara” <EAF01C7@tennlandforsale.com>
Subject: Weekend sale

western_uniontransfer121@hotmail.com — Received: from col0-omc4-s16.col0.hotmail.com ([unknown] [65.55.34.218]) by vms172065.mailsrvcs.net

From: Western Union Payment Center western_uniontransfer121@hotmail.com
Subject: FROM WESTERN UNION AGENT MR.PAUL EZE
X-Originating-IP: [65.55.34.218]
X-Originating-IP: [41.203.79.249]

From: Office Ups Courier
Subject: Urgent Delivery of your ATM Card Payment Through UPS Company Delivery.
X-Originating-IP: [77.238.189.61]
To: undisclosed recipients: ;
Reply-to: upsofficecourier@yahoo.com.hk

Received: from [41.203.79.249] by web29301.mail.ird.yahoo.com

From: Money Gram
Subject: Dear Customer.
X-Originating-IP: [77.238.189.216]

Received: from [41.203.79.249] by web132219.mail.ird.yahoo.com

Received: from nm25-vm8.bullet.mail.ukl.yahoo.com ([unknown] [217.146.177.154])
by vms169119.mailsrvcs.net
(Sun Java(tm) System Messaging Server
Received: from [127.0.0.1] by omp1016.mail.ukl.yahoo.com with NNFMP; Tue,
29 Nov 2011 19:54:16 +0000
Received: (qmail 69819 invoked by uid 60001); Tue, 29 Nov 2011 19:54:16 +0000
Received: from [41.203.79.249] by web26303.mail.ukl.yahoo.com
Date: Tue, 29 Nov 2011 19:54:15 +0000 (GMT)
From: “Mr.Edwin Aja”
Subject: CONTACT DIPLOMATIC AGENT IMMEDIATELY
X-Originating-IP: [217.146.177.154]
Reply-to: adamsvictor14@yahoo.fr

IP 209.239.47.191 as relay: IP: 41.203.79.249

YOUR BANK DRAFT DELIVERY NOTIFICATION!!!
Contact Person: REV.TEDDY HARRIS
UPS Courier Company.
E-mail: upscompainy1133@hotmail.com

419 from above IP, using 3 Yahoo IP addresses, including 98.138.91.34, as relays:

YOUR WESTERN UNION PAYMENT CALL TO CONFIRM @ +229-98679197
Vital Finance Bank Western Union Department.
Location Address; Plot 1261, Adeola Hopewell Street CO/B/REP,
Contact Person: Mr Chris Mike.
Tele phone Number: +229-98679197
Email Address: ( westernuniontransfe6@globomail.com )

“Western Union” Spam from above IP (Lagos, Nigeria), using IP 196.1.218.76 as relay:

Call Mr Kevin Anthony For Your Mtcn.
webmail address:( western_union001@qatar.io)
tele phone.+229-984-168-39
Contact person Mr Kevin Anthony.
November 17 2010 03:11 PM
H.User7043 commented…
“Western Union” SpamScam from above IP (Lagos, Nigeria), using IP 211.55.29.156 as relay:

MESSAGE FROM WESTERN UNION
Director; Tuker Hans
E-Mail :(cbbj@ymail.co)
Direct line: +229-66-614-055
October 09 2010 09:39 AM
H.User7043 commented…
From “Tony Chris,” purporting to be a poatmaster in Ghana, as a follow-up to an email from a “Barrister Paule Eze,” offering me an ATM card worth 2.4 million Euros.

“Attention Beneficiary,
From: TONY CHRIS ”

 

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Bonjour”

419 SCAM – FRAUD – NIGERIAN SCAMMER

 

Bonjour , 

Je vous contacte de la sorte car je souhaite communiquer avec le monde et fais une chose que je devrais peut être pas dû. Je souffre d’une maladie très grave que je n’arrive presque pas à trouver le sommeil. J’envisage de vous mettre en possession de mes biens.J’avais travaillé dans le secteur pétrolier au Koweït. Ensuite j’avais décidé de mettre en place plusieurs centres. J’ai une mallette remplir et cerlé,soit 2.500.000 d’Euros qui sont jusqu’à ce jour dans une banque étrangère en AFRIQUE . Je sais qu’on se connait pas, mais ce que je demande à DIEU c’est de rendre votre cœur saint afin de réaliser mes projets avec ce don c’est à dire, construire des centres d’aide sociale. Je veux que vous rentriez en contacte avec mon notaire puisque Je l’ai acquise toute ma vie et la seule chose que je pourrai faire de bien sur cette terre avant de m’en aller c’est de savoir que ce don servira à rendre heureux la personne a qui je le ferai. En effet je suis gravement malade et je suis à l’approche de ma mort c’est ce que mon docteur me la confirmer ce qui me laisse un peu perplexe, pour avoir vous contacter a été une grande réflexion. Malheureusement nous n’avons pas eu la chance d’avoir des enfants mon marie et moi. Après Cinq années de vie commune, mon époux est mort dans un accident. Si Vous êtes d’accord j’attends alors votre réponse à ma lettre. Veuillez prier pour moi car je suis dans une situation critique.

 

Return-Path:   <blackweardesign@moov.mg>
X-YahooFilteredBulk:   196.192.32.61
Received-SPF:   pass (domain of moov.mg designates 196.192.32.61 as permitted sender)
X-YMailISG:   bwx8weMWLDsQQjWKBr4l3K0Yd4C43qxN3b20kfCMcGiIqGuk 0gY3_xmQAxfrzOtgq5RR_ZHnJrfYGkXVam1pZ.qmn41GVoggO7hqYAgq82.I qgcjt6DkUaIlzZXQ7rFc4AWCdFB2R69fuLNVrBCdy3ud1WIJq477k_4nj1K7 MKn2.p2l5Y7BD7qRoGZGYBnwYq1kWDZeCLoh8pCoFpZyjll58BFUG5GQYtF5 OZd4KPWPkbhvqU_7c.rUINpXGzadiVuyVBYKGofNZjrbT24_yWJuRPOu2V6Y U6uPYiidl0E5biW21rQViDH1e1u_cCqrZ1.HKIb6b2HWV3yfqdGznzFRGWso s_hmrGBS.VtxYRPxzLJHg8Z_gzdJ4jsWAoOirJf46dxz38t2mGlyJUZf9t0w DCvbGIdrK6UTLqR8VIwIRn4bQyuIMxN7DJXaRHVlHaK7_1friBmBmc.rh9xo AxsbPaT5GGS3bUPa97zmEmxt01o.DEKms.qpi3lUQ_uoAZhvitVcXIzm3VFc 3szSbmehvZ._y_R59TV2mXwtu9t6CHTYlsNsxTGqrs2NRMP8eBB343DwmxMh Mt.JL8jXgsgjaI0HMHQ3E3vLaQdYW0aFIGO4u02o8IdM5YzoAl9itSHMUkmL AruASq.PsnK9JEZOTrfcxicBHE3N1V9xqfsObfl73czGxL_OXUZ4rYZ9lQAU osqZFKjGj6SkGUjBPfo87SqrZ5jhRYxogex3D922HcqO.RJMN0ONh_MULrPh iyPk.asB35xgmxXiXsmvqvMLaWdO2JBT6sxeL0QeGO1xwnyFTHyFL5xhUjxC SGCj_MGa0TReEEgWjR__N_tOhOH_iWP2hzKHCIJX5ZdyKjV1zkqWd_.PLiRs I.Kx4zw1e9dLwholt.bUglOjupabBLEvNHt0tN6F.mptefUFMeqi0wZ1i.Dw hDU.FcQQjfhK1mB6KQYNr8TfCZbIMbEjga_QSIouuAaHuEYGzPdbSjAtyfnt hc7ybPX7c7XMgOPK4nhPBDnzke9RP9E2aaVZ5A4tcBt3GgkwKShjeuDOTF_h JwUlOE3GBER5r0we9ikY8uGQAmvu17w2t_f7UrnZyKzzH6qRm_uRWy3R15J3 VMGhQkTXyylzEWXLG586Z8tlYbFSG7Saq1nC8VDb5U3kAy_ntU6wZfj694t5 DeSrL21XdJiP55VWzyc7OF3wBC92kfaQspQRt9XQ.MHBKTfmlqgYxIfwcZHn MstkNPPAsjivDR9iBbzANn.lRnu1NBVlHK87P5Frr5XXkXLXaSxSBWUnIfM5 E7j_84Cjx9RGRenRcKZCC70fBwXZuzSbyw6Wu6cZYhkA6A.Q2k.0rJa.
X-Originating-IP:   [196.192.32.61]
Authentication-Results:   mta1005.mail.ac4.yahoo.com from=unknown; domainkeys=neutral (unknown); from=unknown; dkim=neutral (unknown)
Received:   from 127.0.0.1 (EHLO mx-out.dts.mg) (196.192.32.61) by mta1005.mail.ac4.yahoo.com with SMTP; Tue, 27 Nov 2012 11:25:30 -0800
Received:   from localhost (localhost [127.0.0.1]) by mx-out.dts.mg (Postfix) with ESMTP id C7B96803876; Tue, 27 Nov 2012 15:17:21 +0300 (EAT)
X-Virus-Scanned:   Debian amavisd-new at mx-out.dts.mg
Received:   from mx-out.dts.mg ([127.0.0.1]) by localhost (mx-out.dts.mg [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v5mcG8rOEEAS; Tue, 27 Nov 2012 15:17:21 +0300 (EAT)
Received:   from smtp.dts.mg (smtp.dts.mg [196.192.32.27]) by mx-out.dts.mg (Postfix) with ESMTP id A5EB8803871; Tue, 27 Nov 2012 15:17:15 +0300 (EAT)
Received:   from z01.dts.mg (z01.dts.mg [196.192.32.50]) by smtp.dts.mg (Postfix) with ESMTP id A6A521D99093; Tue, 27 Nov 2012 15:19:01 +0300 (EAT)
Date:   Tue, 27 Nov 2012 15:18:55 +0300 (EAT)
From:  
MARIE <blackweardesign@moov.mg>
Reply-To:   “marieb.pouvost@yahoo.ca” <marieb.pouvost@yahoo.ca>
Message-ID:   <1595992550.635399.1354018735157.JavaMail.root@moov.mg>
Subject:   Bonjour ,
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”—-=_Part_635398_1213173424.1354018735148″
X-Originating-IP:   [41.79.217.122]
X-Mailer:   Zimbra 7.2.0_GA_2669 (ZimbraWebClient – GC16 (Win)/7.2.0_GA_2669)
To:   undisclosed-recipients:;
X-SpamTest-Envelope-From:   blackweardesign@moov.mg
X-SpamTest-Group-ID:   00000000
X-SpamTest-Info:   Profiles 24807 [Sep 11 2011]
X-SpamTest-Info:   {TO: undisclosed}
X-SpamTest-Method:   none
X-SpamTest-Rate:   20
X-SpamTest-Status:   detected
X-SpamTest-Status-Extended:   detected
X-SpamTest-Version:   SMTP-Filter Version 3.0.0 [0284], KAS30/Release
Content-Length:   4529

SAME SCAMMER – DIFFERENT EMAIL INFORMATION —

Yolaine Provot (sonema@moov.mg) Bonjour,

 
Bonjour,
Je suis une veuve d’origine française née le 24 Février 1946 à CHENOVE (21) pour la raison de mon état de santé qui ne cesse pas de se dégradé de jour en jour. Je vous écris parce que je recherche une personne à qui faire confiance pour la bonne réalisation de mon projet de donation. Je veux vraiment donner de moi ma fortune d’argent actuellement disponible sous section de gardiennage auprès d’une Banque en République du BÉNIN B.O.A . Mon état de santé si vraiment critique ne me permet plus de sortir de l’hôpital où cette ma maladie me confine, je souffre de CANCER du cerveau qui se traite depuis plus de 1 An pour aujourd’hui. Je ne comprends plus rien de ma vie, c’est des raisons qui me poussent à vous contacter et de savoir si je peux bien sûr vous faire confiance et vous faire part de cette donation. Si oui, écrivez moi directement à mon adresse e_mail que voici ( yolaineprovot@yahoo.fr  )

Veuillez beaucoup m’excuser quant à ma façon de prendre ce contact avec vous. Je m’en vais bien vous faire savoir que je parle couramment le français.
Je suis Yolaine Provot, née le 24 Février 1946 à CHENOVE (21).

Je souhaite vous lire très bientôt,

Yolaine Provot, ( yolaineprovot@yahoo.fr  ) Pour avoir plus d’info sur mon etat de santé  contacté moi (+44 703 5944 846 )

(sender IP is 196.192.32.61) header.from=sonema@moov.mg
 
Received: from mx-out.dts.mg ([196.192.32.61]) 
Received: from localhost (localhost [127.0.0.1])
 by mx-out.dts.mg (Postfix) with ESMTP id 6DB97800E6B;
 Mon, 29 Oct 2012 15:13:27 +0300 (EAT)
X-Virus-Scanned: Debian amavisd-new at mx-out.dts.mg
Received: from mx-out.dts.mg ([127.0.0.1])
 by localhost (mx-out.dts.mg [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id nkYxWdxBvbJa; Mon, 29 Oct 2012 15:13:27 +0300 (EAT)
Received: from smtp.dts.mg (smtp.dts.mg [196.192.32.27])
 by mx-out.dts.mg (Postfix) with ESMTP id E0910800E7B;
 Mon, 29 Oct 2012 15:10:36 +0300 (EAT)
Received: from z04.dts.mg (z04.dts.mg [196.192.32.54])
 by smtp.dts.mg (Postfix) with ESMTP id 606B21D98E16;
 Mon, 29 Oct 2012 15:00:36 +0300 (EAT)
Date: Mon, 29 Oct 2012 15:10:33 +0300 (EAT)
From: Yolaine Provot <sonema@moov.mg>
Reply-To: Yolaine Provot <yolaineprovot@yahoo.fr> 

Email Scam Scammers Scamming

MARIE <blackweardesign@moov.mg>  blackweardesign@moov.mg — “marieb.pouvost@yahoo.ca” <marieb.pouvost@yahoo.ca> Financialbank130@ymail.com << TONY OSITA << bocononfa@yahoo.fr << mail@cervicalcancer-symptoms.info << sonema@moov.mg <<

41.79.217.122 – NIGERIA

TONY OSITA – Nigerian 419 (same IP)

From FINANCIAL BANK INTERNATIONAL PLC Tue Nov 13 06:20:03 2012
X-Apparently-To: via 72.30.239.49 – Scam Warners – > 77.238.189.90 << Received: from [41.79.217.122] by web133106.mail.ir2.yahoo.com via HTTP; Tue, 13 Nov 2012 14:20:03 GMT 
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460 — Bonjour

The above scammers are also attempting to fraud others in an Inheritance Scam (41.79.217.122) for more details on this scammer, please click: Mr. Mark Brown

 
1 Comment

Posted by on 11/28/2012 in Inheritance Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

“FedEx Online®”

NIGERIAN SCAM – 419 – FRAUD

EMAIL: We have been waiting for you to contact us for your confirm package that
is registered with us for shipping to your residential location. We had
thought that your sender gave you our contact details. It may interest you
to know that a letter is also added to your package. We understand that
the content of your package itself is a Bank Draft. The package is
registered with us for mailing by your colleague, and your colleague
explained that he is from the U.S.A but he is currently in Africa for a
three (3) months Surveying Project as he works with a consultant firm in
Nigeria, We are sending you this email because your package is been
registered on a Special Order. For your information, the VAT & Shipping
Charges as well as Insurance fees have been paid by your colleague before
your package was registered. Note that the payment that is made on the
Insurance, Premium & Clearance Certificates, are to certify that the Bank
Draft is not a Drug Affiliated Fund (DAF) neither is it funds to sponsor
Terrorism in your country. This will help you avoid any form of query from
the Monetary Authority of your country. However, you will only have to pay
a sum of $125 USD to the FedEx Delivery Department being full payment for
the Security Keeping Fee of the FedEx Company as stated in our privacy
terms & condition page. Please note that packages are not shipped nor
delivered on Saturdays, Sundays and on holidays. If your order has been
placed on any of these days, then it may be shipped the following business
day.

Kindly complete the below form and send it to the FedEx Online team. This
is mandatory to reconfirm your Postal address and telephone numbers.

1: FULL NAMES:
2: TELEPHONE:
3: POSTAL ADDRESS:
4: COUNTRY/STATE:

Contact Us between:

Mondays-Fridays: 9:00am – 9:00pm EST
Saturdays: 10:00am – 5:00pm EST
Sundays: 10:00am – 4:00pm EST

Have a great day!

Mr. Thompson Williams.
Direct Tel: +2347033356828
fedexonline_01@yahoo.com.hk

FedEx Online®
©Copy Right Reserved 1994-2012.

HEADER:

Return-Path: <karuiz@fices.unsl.edu.ar>
X-YahooFilteredBulk: 200.41.60.169
Received-SPF: none (domain of fices.unsl.edu.ar does not designate permitted sender hosts)
X-YMailISG: o5TE0VcWLDs6A2iGWRrKiXjvpJ9iJzbVh0d6tg62Wj0icTj9 vmZMCQOukMdUDCGoZuIRp9z0IxNUHMgxvIvYYj2aIPbsDGNdoASLbiisEdUj QBEi1ddHF1qDGdoXfPO5fGq3r96t6.3EMAlu.gZYrqage8higRm6BtMly.rw mIfRU6DCgMO6xe2wenEds3y7f6jkHz8PujZvzVXG06KZXqLfUgswmKyLgCBr XoMranvoL1UpF2zrp9IkEggsDk.stcAvIzVsHemNO52EoccEi9gmti7.KoIW FADXVh5rt92uodAMmY0yUyx5SH8xuTnS8HVA1jqbABSY05OsZuiqD2tnbAyL bLlh4CNm20SRui2X4Xy8KYvHstQSJ2JED57ifWlUyjgIAc0kmiT8UPezvxUv IWwuGwuz0cdnaBz9yWtkze4VsD7mfNV5e55TkF1PnlOQV80xSuZBMTspTRHI Rt3llF72gAFNpNhgBjq1mr36YDryiv6cVF80QRdJY_AvV0JqeMTxkYepk7Zo ZibOOHy5tUxHe1RaLqqXs0WImOyiFBDXjq7mpvYjAYsdHOQOyqNLUN6Hg6u1 tVFo3zVplBVnDXYMSRMyggTOWeOwUWkEw0lYPrWCvkmgmSLj_PXFULib.MPx K7S5XbZpInbFirVmMyQMMjCReCffKzB5eKrZIIbECa1FeVd9PHa6ZIj_LsD0 Yq1pZsf06cF3tpdiRlgAzGrJolauz8y8xqW1iCEc8cvOJudahvuRDsb09YaP DEdo6Nd8twXlDmXqNqVY77QtOAFP6Z6QZzgxq5yu9O6Mv1mI4NhapzzH1k3. afEn6fF4JN4HxcuOEp2Rr_U3ikODeO8VSsJ.qEVvjRitKUHx_V6pncw6HkWN tB7_Lr2JJDj37KsTC9ntsBwAVvF26zHppnpw5jw8jYccPfUnUtzPoWlp6Bi9 o6ZrjPB.DXes_i1kpLdprNB8ehDnWXVLwqQqH31W4qYFuFnyZuj3rhLaUUx3 3J3Vqm2tYLv7DmSdzbfkolSriSZ4yVm_POZLOrsbax7kfm6oXgbPLD2cKab3 ObsRlQiaLIEsfxk7nsR8nxE4NzateWWVNkdKO1n40_7N80WGh_yoBa692ABI HHJO2MTarJriQnZz7soxNKn8AuVrxZVZRo_ebnck6pA4Rfh_0R1sUQIjroJI Pw6gJD2qGOTgx1edsoeYVA6oBf_5ab34B9EC0w80NN8JA8nOVBzVJMhtm.8z 6LOwSdTnFg0X3pOkrEr51x.Gto.BuQNSGp6tYNIzckUKiL24O3dxUNaf4_gX k28hY3hB2zgdLlorQVCWrA5.YESR7.ZspdMBR0exRen9wmIK48IOaFt5H.DR dA–
X-Originating-IP: [200.41.60.169]
Authentication-Results: mta1183.mail.mud.yahoo.com from=fices.unsl.edu.ar; domainkeys=neutral (no sig); from=fices.unsl.edu.ar; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO scooby.fices.unsl.edu.ar) (200.41.60.169) by mta1183.mail.mud.yahoo.com with SMTP; Tue, 27 Nov 2012 02:01:25 -0800
Received: (qmail 24449 invoked by uid 33); 26 Nov 2012 15:51:22 -0300
Cc: recipient list not shown: ;
Received: from 41.71.190.77 (SquirrelMail authenticated user karuiz) by correo.fices.unsl.edu.ar with HTTP; Mon, 26 Nov 2012 15:51:22 -0300 (ARGSL-ST)
Message-ID: <2322.41.71.190.77.1353955882.squirrel@correo.fices.unsl.edu.ar>
Date: Mon, 26 Nov 2012 15:51:22 -0300 (ARGSL-ST)
Subject:
From:
FedEx =?iso-8859-1?Q?Online=AE?= <karuiz@fices.unsl.edu.ar>
Reply-To: fedexonline_01@yahoo.com.hk
User-Agent: SquirrelMail/1.4.9a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
Content-Length: 2014

41.71.190.77+ << 2347033356828 << FedEx Online®  << karuiz@fices.unsl.edu.ar << fedexonline_01@yahoo.com.hk <<
A scammer(s) under the email-address <mcmunoz@fices.unsl.eu.ar> and graniteloans1010@xnmsn.com sent scam mail out under the same Originating-IP as the above sender. The receiving IP’s location was Nigeria (just like the above senders receiving IP) as well. 200.41.60.169 and 41.203.64.132

Other spam/scam sent under the same IP address are:

 “Sampaio” <SharofSampaio@acupunctureinfo.net>
Subjectnone/blank
From: “Lynnette Grover” <AmparoloreleiVick@centraloregon
Subject: Enlarge At Home Today
From: postmaster@sagemuller.com.ar
Subject: Notificaci=?unicode-1-1-utf-7?Q?+APM-n de es
From: Sewell <inwglae@bluegrassjunction.com>
Subject: Software discounts
From: Pill <lrshipley@instuttgart.de>
Subject: When you need it
From: <caesargq6@clickfoc.us>
Subject: More games, more chances, bigger jackpots 1500 eur
From: <limitlessi2@pip.com.au>
Subject: Best casino games 1500 euro bonus!
From: <politicizingwwk86@fiemg.com.br>
Subject: Best casino games 1500 euro bonus!
From: <misspends@biolconseils.ch>
Subject: Biggest casino online 1500 euro bonus!
From: <thule107@buhrmann.com>
Subject: Biggest casino online 1500 euro bonus!
From: <venousuu@pacunion.com>
Subject: Euro casino online 1500 euro bonus!
From: Валентин ��
Subject: мы тoльko делaеm рekлaмy
From: До��на Павл��ва
Subject: Прoдaжa бaзы в Кoлoмнe. Цeнa
From: Артемий В��но��ра��ов
Subject: КАЧЕСТВЕНН
From: <mainmastsu20@cochamber.com>
Subject: Best erect pills
From: <tunnelingh@mc2school.org>
Subject: Best erect pills
From: <stileskp1161@barronheating.com>
Subject: Get some penis pills
From: <loftwp@blomnet.com>
Subject: Get some penis pills
From: <josiea8@alumni.insead.edu>
Subject: Find pills for cheap prices
From: “Sarahi LAMBERT” <MaciPetet@online.no>
Subject: Re: 62735418449971656

Some previous names and email-addresses under the IP 41.203.64.132 – Location: Nigeria

5-Jul-12 11:36 41.203.64.132 mcoxman gsterling123@gmail.com Nigeria
22-Jun-12 21:56 41.203.64.132 Mike001 phonesmartltd8@gmail.com Nigeria Evidence
17-May-12 03:08 41.203.64.132 pemmy pemmy004@yahoo.com Nigeria
10-May-12 16:57 41.203.64.132 kingcxt cxtblade2@hotmail.co.uk Nigeria
10-May-12 16:53 41.203.64.132 king cxtblade2@hotmail.co.uk Nigeria
5-May-12 03:52 41.203.64.132 ohison ohiluckyson@yahoo.com Nigeria
2-May-12 16:41 41.203.64.132 Frank Richards frankimobiletech98orders@gmail.com Nigeria
23-Apr-12 08:07 41.203.64.132 infotech shecool174@yahoo.com

FYI, the REAL FedEX doesn’t sign up with free Yahoo email-addresses. They have their own domain. And they don’t send out email’s like the one above. Only scammers get into irrelevant details.

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

Anthony Webb a.k.a “Nicholas Conel Dunii” a.k.a “Peter Collins Claim” a.k.a “Nicholas Matrwe”

Employment (Job) Scam – Nigerian 419 Scam

ATTENTION:Anthony Webb also scams under these names/addresses;
Nicholas matrwe@yahoo.com ( Nicholas Matrwe )
Nicholasconeldunii@yahoo.com ( Nicholas Coneldunii )
coneldunii@yahoo.com ( Conel Dunii )
red4x4tj@yahoo.com
hugemelvin@yahoo.com ( Huge Melvin / Melvin Huge )
upesaspelltemple65@yahoo.com ( Upesa Spell Temple ) – If you type Upesa Spell Temple in the search log (top right-hand corner) you will see past scams sent under this name/email address.
brigettetre@yahoo.com ( Brigette Tre )
armstrongcare1@yahoo.com ( Armstrong Care )
collinpeterclaim1@yahoo.com ( Collin Peter Claim / Peter Collins Claim )
ironhilldaycare1@yahoo.com ( Iron Hill Daycare )
operator12@taishan-international.biz
Skype: operator1286
operator1286@hotmail.fr
dezy2224@yahoo.com

EMAIL NUMBER ONE SENT BY Anthony Webb <paredese@comcast.net> with the reply address of fredsam002@yahoo.com

SUBJECT: BABYSITTER/NANNY NEEDED ASAP!!!

EMAIL: Hello There,

My name is Anthony Webb from London,UK.  We have a little girl(2 years old),her name is Aggie and would need a Babysitter/Nanny who will take care of her during our stay in the United States and i believe that with a caring nanny,she will be comfortable. We would be spending 2 weeks vacation 12th to – 24th of November,2012 before returning back to London, England. I want you to babysit her from Monday through Friday, 10am – 4pm daily.
 
I will like to know your price for babysitting her including any other costs. Get back to me so that we can proceed further.
 
Thanks.
 Anthony

MY BAITING REPLY SENT ONE MONTH LATER: Hello, I would be interested if the job is still available. What City? I don’t like travelling more then 20 minutes commute but depending on payment, benefits, etc.  Please message me back if you’re still looking for someone.. Thank you..

”Anthony Webb” wrote back fairly quick under a new email-address anthonywebb01@yahoo.com

EMAIL NUMBER TWO: Thank you for getting back to us.We will be coming to the States on 3rd December, 2012 and we will need your service from 4th of to – 18th of December,2012 excluding Weekends. Will you will be available at that period? Firstly we want to get a Babysitter/Nanny for our little girl before we book our vacation home. We are not sure of the area we would be visiting since we don’t have a nanny to take good care of her. Which part do you live (City & State)? Your decision will determine where we would be staying in your location, let us know if you can take care of her in your home. 

Am offering $200 for the nanny job per week from Monday-Friday from 10am-4pm , the main reason why we need your service is that we will be busy during week days because we have to visit some places and we also have lot of Humanitarian works to do around the City.We w ill be dropping her off and pick her up later around your schedules. My daughter is a kid one would like to be with…full of fun and love playing around…she loves toys. I am sure you will be able to give the best care.She is gentle,hardly fall sick,she likes sports,loves to watch cartoons,likes going to the beach,she likes to watch TV mostly and can eat by herself,I’m sure you wont have problems with her.Kindly answer all my questions accordingly. as i am to forward this email to my company as proof that I am paying for a hand in child care.So they can include that in my traveling expenses which is to be paid to me.

The payment will be make in form of US certified check/Money order and it will get to you prior to my arrival in order to make payment for your service and the duration that my kid will be taken care of.Please get back to me with your Name ,Address and phone #. 

I am offering you $400 for the service and the payment will be sent to you from one of my client as soon as you get back to me with your full mailing information i mean your contact Address with your contact phone number and the tracking number used in mailing of the check will also be sent to you if you need it.But just one thing that i need to clarify right now is that will you be able to take care of her in my house or you want the agent to bring her down to your house after and when the check has cleared,will you be able to send the remaining amount to the Traveling agency that will process our flight and hotel reservation ??? 

If i may ask, how long have you been doing this Nanny Job? Could you please tell me more about yourself.Hoping to read from you soon.

Kind Regards,
Anthony.

FIRST EMAIL HEADER:

Return-Path: <paredese@comcast.net>
X-YahooFilteredBulk: 76.96.30.16
Received-SPF: pass (domain of comcast.net designates 76.96.30.16 as permitted sender)
X-YMailISG: w9HZbUMWLDugWjkkZVsrVFrnt7mKBiRe4Vhr7H2aTzOySAlE H.NzpX2wkMNQ8Xj0s4FKAxYIFHimUsvSofe8irt5SpLJ7kCl0.iPHB0hpVZQ IPbeCPGYVzBAoc.PP9Fa2oHu_OYnHo_mhgu3KaQX_T0_CawHUL68HxmmP.d_ iTGWv_HV8S6J6JbdhfT_IqYhegGBmGOOuOH9o5GRfktQkyKSWNRK7epWy3_T G5WFKshB16gNrwazp.rNmP5L5o0pdbGmReIwiO3VYkX7he1wY01ro8Rc9Cvb 62tUpBl_lz3XSkaJi4wugG8alvxGEqbNNIQPPtUGZ.Cj5ioe7TJHRwTdnhyk hC6p8ufx0zp2o.qNFGLvq98AEzhPrbAzP_1KHg_tcENK2C_fqoBovlX_ax49 u.hRrKNSHOZ8NVxcK4NJVcte1h5VmanH__Gw0HytHBATFWW6NBbSu3xo6nGb 3g6uev2THTULgp1qqRVNxDoku3cT_zFKRm5QpeKHDeGgVFg4tgPWOCV9zfxU AuItab8xCDC79PoEEVSYkQ37RRUiKmTJmBRjmN12yuaLaiXrowCeeNsUeims CsNvZu1ABwxNqEk45o2G2uBaQWXFSlEpziSd_1bN.s1JbyhYrgbJR9kOmrip rWOuLabniTTX8zvT2ZK.TNmeMrwGGzftEWGXSkAFGK1_HSSg9CDnHQ2SDQAd Vbl9zDkYxj_e0ujvB9d4IggGS41FJM_OZunV3xMWqd8LOJjnHYrsq3Nod.1_ RvGRf0FpugGJLA1hUByUD8iJMjaeogGZ.eRhwCU.6R8vtuzepaCXAkOSrWcK 75BXu80hjtCgz.Oh84A9yDZ_W7LFDbjzCuWb7zDUozaM5fe_klf2yvwjSpcS gpzH5AROIOBEQNRKhPAF.i5zIGfooLzo5xbcZ0vOQ1u0xAWZLt_erCUj2OPQ pRSvpdDh0FHvEf9FjBQyxePbToRxBktm0Ypx7BrPzJ0hVWFCiGqK01DclztT oeihGZaNU5CcPx0SjaCR7k6WlIEUmq7THpO8d4I_3UxoWrISske9RpParcah _pHDuPE.1iqvtVROeq22QKRgyhEQ_dc_9yC_dqiJ89DFfBhBpE37zltXxBj0 vh_qdKRop5SgL043x03wwUNmp3g.sM3sgatKFZxgBHvfB3uap6Whl3XgkbLY VN4-
X-Originating-IP: [76.96.30.16]
Authentication-Results: mta1284.mail.sk1.yahoo.com from=comcast.net; domainkeys=neutral (no sig); from=comcast.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO qmta01.emeryville.ca.mail.comcast.net) (76.96.30.16) by mta1284.mail.sk1.yahoo.com with SMTP; Mon, 22 Oct 2012 05:10:11 -0700
Received: from omta15.emeryville.ca.mail.comcast.net ([76.96.30.71]) by qmta01.emeryville.ca.mail.comcast.net with comcast id EBuy1k0051Y3wxoA1CAAvE; Mon, 22 Oct 2012 12:10:10 +0000
Received: from sz0115.ev.mail.comcast.net ([76.96.40.137]) by omta15.emeryville.ca.mail.comcast.net with comcast id ECAA1k0012xZMJ48bCAA20; Mon, 22 Oct 2012 12:10:10 +0000
Date: Mon, 22 Oct 2012 12:10:09 +0000 (UTC)
From:
Anthony Webb <paredese@comcast.net>
To: fredsam002@yahoo.com
Message-ID: <1476744060.725012.1350907809979.JavaMail.root@sz0115a.emeryville.ca.mail.comcast.net>
Subject: Babysitter/Nanny needed ASAP!!!
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”—-=_Part_725011_1665355573.1350907809978″
X-Originating-IP: [::ffff:197.177.153.97]
X-Mailer: Zimbra 6.0.13_GA_2944 (ZimbraWebClient – SAF3 (Win)/6.0.13_GA_2944)
Content-Length: 4584
SECOND EMAIL HEADER:
Return-Path: <anthonywebb01@yahoo.com>
X-Originating-IP: [98.136.218.175]
Authentication-Results: mta1236.mail.sk1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm11-vm8.bullet.mail.gq1.yahoo.com) (98.136.218.175) by mta1236.mail.sk1.yahoo.com with SMTP; Sat, 24 Nov 2012 02:24:38 -0800
Received: from [98.137.12.60] by nm11.bullet.mail.gq1.yahoo.com with NNFMP; 24 Nov 2012 10:24:37 -0000
Received: from [98.137.12.211] by tm5.bullet.mail.gq1.yahoo.com with NNFMP; 24 Nov 2012 10:24:37 -0000
Received: from [127.0.0.1] by omp1019.mail.gq1.yahoo.com with NNFMP; 24 Nov 2012 10:24:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 868912.28458.bm@omp1019.mail.gq1.yahoo.com
Received: (qmail 12919 invoked by uid 60001); 24 Nov 2012 10:24:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353752677; bh=m8e9F3qHYKdizTVN5ph85YVx6rmvOCdnmbQ9U3smpxI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=S/E5qZedIlygps6BxSAV3xP76gx4+Wp4skHc3ZhovvTrvAhrFcN5/ftirXMYf2F0jcbkFgqIJfsbmsDLe0Ne1BrOXPdbw2AyDMYjnzO0zfZ4o89ql/V7QpcuFik4+DB/xgfO7Gv0jXfA7/KwWzDAFwzJgJIRp1GvZfj4f4jRDE0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=CiLyc+ZGeJXRcB5z7ZUp0CdW/QVmSn2XNOmw+ii45tVn+kZJBb8PZCC71CCUR/3VUL9+eApxuF22ZSbdotnuAvWo2uZbI4Q1DLcVU97Eyipy9ucqTazWVLIGsvO+kFJllXQcd2kkjFfHJbKOvPI1m6Puq9YvaHUQiZwpNtsY0yM=;
X-YMail-OSG: QXhD4koVM1kSdwuTlzTZ07kQ3UHiqUmfNzMsviXi_c_5uTv Djjn8R226sV1KgngZRKwoNXxF8zyE3k4EkICD9.eB8.WMx0z9Bqpj2jVIzHA 4kELxh_2q3LJY8L6mOBN5dg4jQPY.jClqcEAtVKwuKrivYHDYte_9rUIMQGS bBxHw1Up1ZiJOTOYoaDVPCf4KaSS0MPDUgzMRFHtwheMr5mzaF9BEqw0Vnji H63iOQcZZz8RssS.nYBtBrpBsoj.RJBpGxddIpnMJ8kV4rB3Si1IGX7hFMlk lL2avU7y7JfQYvZQVfKpRh_e4ak8sG5L2M6MaOoyyrhihuuBeyRzA_.j0YWz 6HeO.XIIApfDTVC0xPivmRuDgSDPsdRjcaAc4rvFeryOT6Q8M_OmMoQo6fTF UXsliob_VwKRvHvw27qlnKlHvSssCKoXWNkg94u4PzcIG9Y4WYbMVdUU5zz5 7zBUJGfkEiOJEVV.WBPasyMoS0Atateg-
Received: from [8.21.6.226] by web164001.mail.gq1.yahoo.com via HTTP; Sat, 24 Nov 2012 02:24:37 PST
X-Mailer: YahooMailWebService/0.8.123.460
References: <1476744060.725012.1350907809979.JavaMail.root@sz0115a.emeryville.ca.mail.comcast.net> <1353742304.37719.YahooMailClassic@web161002.mail.bf1.yahoo.com>
Message-ID: <1353752677.10885.YahooMailNeo@web164001.mail.gq1.yahoo.com>
Date: Sat, 24 Nov 2012 02:24:37 -0800 (PST)
From: Anthony Webb <anthonywebb01@yahoo.com>
Reply-To: Anthony Webb <anthonywebb01@yahoo.com>
Subject: Re: Babysitter/Nanny needed ASAP!!!

80.191.209.4 <> 98.136.218.175 <> 76.96.30.16 <> mta1284.mail.sk1.yahoo.com <> nm11-vm8.bullet.mail.gq1.yahoo.com <> onlineme20@gmail.com <> almanaraforallarab@yahoogroups.com <> 197.177.153.97 <> 76.96.40.137

Received from: from sz0115.ev.mail.comcast.net ([76.96.40.137]) by omta15.emeryville.ca.mail.comcast.net with comcast id ECAA1k0012xZMJ48bCAA20; Mon, 22 Oct 2012 12:10:10 +0000

Anthony Webb <anthonywebb01@yahoo.com> <paredese@comcast.net>

 
1 Comment

Posted by on 11/26/2012 in Employment (Job) Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , ,

Video

Scam Victim Speaks Out

Fake check scam. Victim of a fake check scam tells his scam story.

Youtube video uploaded by ConsumerFederation

 
Leave a comment

Posted by on 11/26/2012 in Uncategorized

 

Tags: , , , , , , , ,

 
%d bloggers like this: