RSS

Tag Archives: FBI

“Federal Bureau of Investigation Benin”

NIGERIAN SCAM – FBI IMPOSTER

Email came with attached file.

advance_fee_fraud

Your Approved Funds

From: FEDERAL BUREAU OF INVESTIGATION <0.287file777777777@att.net>
To:
Sent: Wednesday, February 6, 2013 6:59 AM
Subject: Fw: FBI YOUR LEGAL PAYMENT US$8.5M OPEN THE ATTACHMENT

From: FEDERAL BUREAU OF INVESTIGATION [mailto:0.287file777777777@att.net]
Sent: Wednesday, February 06, 2013 9:23 AM
Subject: Fw: FBI YOUR LEGAL PAYMENT US$8.5M OPEN THE ATTACHMENT
From FEDERAL BUREAU OF INVESTIGATION Wed Feb 6 06:59:31 2013
X-Apparently-To: deleted@ymail.com via
Return-Path: <0.287file777777777@att.net>
X-YahooFilteredBulk: 98.139.44.163
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: RTtdbbsWLDuVtMh48dsz030bEUJEk0otAy_NBen.shNxxVpm
.1Q.F7SVQfD5ZkPSQdjWyGrrVAgtJRKHbmBWGqOUtwy7EsP3ZZvrnGzSK9W1
iaJVqOwSwIapSJJL9FVpIba_ltDeEQBAUea.D2s3bW7.ln4KimDAUy7XO7PH
IoQDucSOusPVTTy2bguXnqBrcZrxMe7NU_zNzaJSJlqz.crQbxGRJV16Ki0Y
gS4ShqjoVHs3RmJY1At8Iz4gVcr706Pp3gKLbHI5wT2y.lC1DVRjlnUslzWl
mSmvRQ0iKYB7z_w89b7zBL83RnGq2q7bX1etbWtYmzUtfxkvg1dLNUGBd_h6
tVc.Yfn2YnMg2f2chQS_lQXLFnVUU7YQCSiaB24BJtY5h2KK.WIqLwSbOxJX
E1CkKfPN3KMv0igIX.uXDGhsIovxmZXGyvoIcaixG.g7LNp4vySBZ.tIVpXZ
ugTm.lGsrF35jqd1j48bWbcVur58_e_TJaizZGYSufsM84yRue0R4Jz7E1jZ
1EIS2tRzpUhATek6looMKy9LFS4v_JuQCCpCeQB6F_v26sGwGy3HqU_yfd6t
om_FGWTDU727SXli9WLvaOthJkKjzc9Z8OjorzXFxzQiN1j8SeTPAVnxNXgt
I2ai65toE9D7vu9wuFC_x8inN26uzGgaLoBJIAISvZiqQ23ioUvYie.sNl71
hMoMxCWn2V5XzYq8PW1xnk2jfHABnx2mViiQZzQZEw56jkkRJodVxcNgXcCz
JNd2P3.d7.UvE7i1RvMBrihvCJfcq2NCCbflBGQ4XWQgvODAgr5LQNdcr9l9
TEYLv0OR39dOAGo19ArtBPWK61sXBDMUPBp1aG2kXTA_pwGYR1hnqeJvAEz3
BPiWT7YJjiQYEvr5q6XFHVfgSeEbebHi8fXo2vyGeD_yVrDwzbbge.eSpN4B
DcgcsJao8l.xl1X4gEbSgYcwZoGycA5DovtEG0Dc9njlow2A6fsw53q1NrnZ
2R7wDcVQFel49fx6kZNMMTgYTij4oeHJcDI2tj4M2gt43srXNZcN5Zvlx9T6
3SbqNa.8581f2PozsV74lCaGEkEMI3ADhiFerGKYru5dyf2VOiBtkhH8q98N
BEOLPB4pP5BCQQtuHdhrHkHlpacSfUvIi3RDVM9Dyd_gmHO6LU6CFaMScZg4
iFoRBoa9n2HIEQ5sZ5nW6jQtFzug24w9e0f1Bq6jtfLg6Ti9w4BcLeJdO2.F
hciBZae1QySjLPA.zOp_M3fneVsOOXNu.8Tw1ZaU.hja5_wAIpfyhD8PgcfQ
I4halmxy4GUTod38ew8wquGG8m74MSgl7eVF.ZrBdgZE3I2iDnUfxUUBQHEC
DnXrxKCWyUeswCszStBrgH.b
X-Originating-IP: [98.139.44.163]
Authentication-Results: mta1061.mail.ac4.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm14-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.163)
by mta1061.mail.ac4.yahoo.com with SMTP; Wed, 06 Feb 2013 14:59:36 +0000
Received: from [98.139.44.99] by nm14.access.bullet.mail.sp2.yahoo.com with NNFMP; 06 Feb 2013 14:59:33 -0000
Received: from [98.139.44.78] by tm4.access.bullet.mail.sp2.yahoo.com with NNFMP; 06 Feb 2013 14:59:32 -0000
Received: from [127.0.0.1] by omp1015.access.mail.sp2.yahoo.com with NNFMP; 06 Feb 2013 14:59:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 434289.10003.bm@omp1015.access.mail.sp2.yahoo.com
Received: (qmail 44710 invoked by uid 60001); 6 Feb 2013 14:59:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1360162771; bh=Wk5yCSwojfjITevtlgeqNujZlxpy1zzmIqgroGniwOI=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=bpG9S8ljRJ2+RRWR4gJyLu0U+gtzUlNCmF1PxRksdHUrEdHxyVLqRA4URKvhwyUx2k9yyaxrJWHA7M/IqOoCzboXQaw/My+9ijTb5gEU3UWzq2Bfc9hMUNaWsLneZp0dmN0RHF+henR6F7CbHqd85oAG1X9MbV/2JRURT4uiV6Q=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=p/2iZdj3ynSADwsdeQxX4TUA1620O6BEXWqmkLfqbnUop8x5DAxHw/a2lVJMxbEhwoKgPsWfhwT80qCQ8FpjNAK3kyD4bf+Vosg5hMNCDOADRCAZMeCp0b56ghOghu1n1JpZVx95TSviQffib3kTo0O1gBgIhscUtVvW/sOr3fw=;
X-YMail-OSG: qQlKmPYVM1mvg8TbAPuHhPELCds4rmsmsSVZMyFk1Pool6o
PhtBPSUBLfL6UpY04t_qK4jEY0L.j50KBV0msrRJBSa2p2tN7gQOuJFSjd8o
GtmdhbFd1vzjtVF4tJVZHJC7accN9.s4mjV3tq3xgJniRR7ud1QA6YOFvs3u
fvOjq1gRZKObfshcwjabjrltNMamhLyfWUvl1Upf8JxLT.6quOXxEhKeugFR
aT2aQfIq5k6Fzd5JdsFhud6YeayhBIOgJYGkcznQ6gzlg7OEu9gdbeU42Nzt
2WGxWwPit_QkoBETknLUx.C8Jj4fwv.g2HlvCmZhYdQ1RLCHirdZrX_Z1lmA
jXJ7O9woM4egmRTZtaDHZ0FdKqstL3HUT1paZn5.54tpIdfnTyRNXNzVrTkC
eADpEMt8fwCWCGXfsaPrDD9l7EP.XaIr7cK01D0UAllP6.J4DnTtcPmKl1Co
229z5mCMM3P7I5BEvIZ5OPkvjs14EB3D9Nj8I_vlaWiojhefGDjsRPoG.DpO
bHMRwbTWWqX3AvPfL6UYo
Received: from [68.71.76.242] by web184804.mail.gq1.yahoo.com via HTTP; Wed, 06 Feb 2013 06:59:31 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.132.503
Message-ID: <1360162771.18696.YahooMailClassic@web184804.mail.gq1.yahoo.com>
Date: Wed, 6 Feb 2013 06:59:31 -0800 (PST)
From: FEDERAL BUREAU OF INVESTIGATION <0.287file777777777@att.net>
Reply-To: federalgovernmentbenin@superposta.com
Subject: Fw: FBI YOUR LEGAL PAYMENT US$8.5M OPEN THE ATTACHMENT
Content-Type: multipart/mixed; boundary=”-1662700043-1704866853-1360162771=:18696″
0.287file777777777@att.net REPLY_ADDRESS: federalgovernmentbenin@superposta.com RECEIVED_IP: 68.71.76.242 IP_USED: 98.139.44.163

Ip Address 3rd Party Info Provider City Flag Country
* 68.71.76.242 Millennium Telcom Llc Keller United States
98.139.44.78 Yahoo! Sunnyvale United States
98.139.44.99 Yahoo! Sunnyvale United States
98.139.44.163 Yahoo! Sunnyvale United States

 
Leave a comment

Posted by on 02/07/2013 in Other

 

Tags: , , , , , , , , ,

“fbiwashingtondc73@yahoo.com”

RECOVERY SCAM – FBI IMPOSTER – NIGERIAN SCAMMER

These scammers are jokes. For one, I’m sure the FBI wouldn’t need ME to tell them my name. For two, they certainly wouldn’t be using free yahoo email accounts and three, I’ve never been scammed so this email (like similar ones before) are sent to numerous email users and the scammer is hoping for a gullable hit.

scam-alert

Attention: Beneficiary,

This is an official advice from the Federal Bureau of Investigation and it is only for SCAM VICTIMS. It has come to our notice that the Bank of America has a huge amount of money worth $10.5 Million United State Dollars in your name and to be transfer to your account but we the F.B.I need a proper verification document called Diplomatic Immunity Seal Of Transfer (DIST) to prove you are the beneficiary and to start the transfer of your fund to your account.

We have decided to contact you directly to acquire the proper verifications and proof from you to show that you are the rightful person to receive this fund. We want to make sure its a clean and legal money you are about to receive before we can instruct the Bank to transfer your fund to your account. So you are advice to forward us the “Diplomatic Immunity Seal Of Transfer” (DIST), if you have it in your position to verify that the money you are about to receive is legal and legitimate.

Note if you dont have these documents as required, you are advice to contact Mr. Tom Warren, the person in charge in getting your said document called “Diplomatic Immunity Seal of Transfer” (DIST), for your immediate fund transfer to your Personal Bank Account. Also we have confirmed that the amount required to procure your document which is called the Diplomatic Immunity Seal of Transfer (DIST) will cost you a total sum of $1,500USD. You are advice to mail Mr. Tom Warren with his contact information give below and request for the payment information on how you can make the available payment ready via Western Union or Money Gram so he can get your D.I.S.T Document procured by your name, for immediate transfer of your fund to your personal bank account. Contact him with his information’s given below;

Name: Mr. Tom Warren
E-mail: mr.tomwarren@ymail.com
Tel: (509) 588-1725

You should also contact Mr. Tom Warren with the required details regarding the transfer of your fund to your own personal Bank Account and only with the following requirement to get your D.I.S.T Document procured by your name with the information’s needed below;

*Full Name…
*Address…
*City…
*State…
*Zip code…
*Nationality…
*Occupation…
*Telephone…
*Email…
*Sex…
*Age…

WARNING: We have requested for the D.I.S.T Document to make available the most complete and updated records possible for the enhancement of public safety, welfare and security of society while recognizing the importance of individual privacy rights. Failure to produce the above requirement to us, legal action will be taken immediately by arresting and detaining you. You shall be tried and if found guilty, you will be jailed as terrorism, drug trafficking and money laundering is a serious problem in our community today. We the F.B.I will not stop at any length in tracking down and prosecuting any criminal who indulge in this criminal act. You’re advised to keep us posted with the requirement to enable us follow up with the release of your fund transfer immediately to your own personal Bank Account.

Regard,

Federal Bureau Investigation.
Robert S. Mueller III,
FBI, Director.

Return-Path: <upservic@srv1.infseg.cl>
X-YahooFilteredBulk: 200.63.98.22
Received-SPF: none (domain of srv1.infseg.cl does not designate permitted sender hosts)
X-YMailISG: JLjueiwWLDtczw.Cg.rJtL5iqVAtk_aEPD3AQp3BBX.4k.6F p9TNHnZ4_8ylQd7907X0zHvuxfH61vTzJGcNHDarNc9CFPkTh4X3MD1TbmSG 35j.8yT_7DlaA4Ap8FztVCf4NQtdFzVYqFhIb7SC4eegiq4atXpB37w.zF8e anUR_R3kizuoHni0968KnkZhwXmlWjYNBBchFED3w2iIpItW1pP.Y2O0wuhv RuxrgpC8gx7BMm4UzvjL26MP5H6doANpMm50QCqGSbKvrJTMg392MWR2FOS9 8RcrE9XSKPd52HMYBAoFJDetnbOm0xB.sWYA3vegP14lDBnyi7926.Tq.kij FlzDpjSHllzMVrKFSHeZxloGSvVQBCotHWJacDr6BUj7E7HccP1T1rgxJ1kh YTWY2v0zvJ2vMXzhLqdGkYIP5C4.ezFkYMoKzFJUmz.Ybht.rut5WQ22SFLU V43xLHAlIrw6AhMO6iJLZCYJBVYib2TqVGTxR9q5Nttv0gWg3eB7TpLbDUYt Mf92xumiySH8oRZbBRSFjtL4rqoiNf49T8k8lglcbI6tkqeLaCX2An4aSz._ 0tyLhZdk8RbLNwhOgECxtBszxRhVlv2LgEI5ERgBhIMHwxHDUNvPmhCudNUM AH9MnwSUYxaO9e9eUsRDiKuKgDYzSH24wY9LyvN4nZ7eSjstYf0Z047GBOlo mqbAEsXmTBI3h7P4i8CA2gcoWQPHYHD9oYo2teQOeZ.vgt7J2LXw0zQvcOop 7dID4sCi67me1x8DSNR3QXD6O1W5h_km4PdwHq_NsGYQLYCBhavif4b4kjKa 2fKEHV3OEp7j3J5jHYelYEQfFM5qPMffQF5HddA1.kp5WKKLZq.6r49xbn4x 0W7GCuVuZcHrSgK4S2t6sqfEyx38NUkfIiEZ2TXvka72KS1N4lI5nMmcvR0T N9psVfYIsLB6jqNr5vEoCks.dsVhn5nR4Rk6I5ikDTYWT8zWd1a1OxAIgPt4 3s_Xu0lC8h5VcY1lqLBXUMZE62vabrPZOHtacSfVM9jXGyAS7bjthWY34AC8 2IbL8O8zrL2M.DeSBvwdIHnUDIEV_.gx5hwTMcMAJaZtw1fIBSoSGxsV458L rkARwT7553wvYQ_cjRz_4tInTYOyIyryVF5SR0V_KXAtOHSyBSmOnGhg8n2X 5Q.Lml88DEv.kOaj_TK1ig6hQY7WLoJOfDej817i8d7_RS.hQ4gTk_TrJ.Tu tX3bpr_JhC5CaGkIgbfaCiFvqsGh3CPx4f5j6ZAjl5mrMAFF42cfafVBNE0p XTV3BbI0pSKkON.3LCipvTpkndAiinSHAe_pSHaeE26o4c.c
X-Originating-IP: [200.63.98.22]
Authentication-Results: mta1262.mail.sk1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO srv1.infseg.cl) (200.63.98.22) by mta1262.mail.sk1.yahoo.com with SMTP; Thu, 24 Jan 2013 06:07:15 -0800
Received: from upservic by srv1.infseg.cl with local (Exim 4.80) (envelope-from <upservic@srv1.infseg.cl>) id 1TyM5O-0002OD-3C for deleted@yahoo.com; Thu, 24 Jan 2013 09:39:18 -0300
Subject: F.B.I 2013 NOTICE
X-PHP-Script: http://www.upservice.cl/wp-content/themes/picnic/cache/images/error_crime.php for 197.255.175.145
From: <fbiwashingtondc73@yahoo.com>
Reply-To: mr.tomwarren@ymail.com
Message-Id: <E1TyM5O-0002OD-3C@srv1.infseg.cl>
Date: Thu, 24 Jan 2013 09:39:18 -0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – srv1.infseg.cl
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [504 504] / [47 12]
X-AntiAbuse: Sender Address Domain – srv1.infseg.cl
X-Get-Message-Sender-Via: srv1.infseg.cl: authenticated_id: upservic/only user confirmed/virtual account not confirmed

FROM: Tom Warren Thomas Warren fbiwashingtondc73@yahoo.com <fbiwashingtondc73@yahoo.com> mr.tomwarren@ymail.com RETURN-ADDRESS: upservic@srv1.infseg.cl PHONE NUMBER: 509-588-1725 RECEIVED_IP: 197.255.175.145 IP_USED: 200.63.98.22

 
Leave a comment

Posted by on 01/27/2013 in Other

 

Tags: , , , , , , , , , , , ,

“FEDERAL BUREAU OF INVESTIGATION AFRICAN DIVISION”

NIGERIAN SCAM – FBI IMPOSTER – FRAUD

419

NOTE: AN ATTACHED LINK WAS ALSO SENT WITH THIS EMAIL, TITLED “FEDERAL BUREAU OF INVESTIGATION AFRICAN DIVISION”

Message contains attachments1 File (35KB) 
FEDERAL BUREAU OF INVESTIGATION AFRICAN DIVISION.rtf
PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY

HEADER DETAILS:

Return-Path: <webxccccx4@att.net>
X-YahooFilteredBulk: 66.94.236.140
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: zzxWd9sWLDuQXSC1RZR6QO4b9JXw3fErq_cQzCr_3CK8OISE 8rPlYaX_TdwN9vgHTzqDgT0TYnS1s102HITQ7GpEBERUIasBEImvBxJRZcHt Sb4qki89Qv3fmKVv6GwLWVqJ7chRB1AbM0mhgSC4TS4Oj3PcJK83fEEmGUQ_ z_P4e90GzDcFa67E7ukY_JtgfhWytOfKoPn4CuAVoRToBOqnLPlhw4Kdho5Y .bJ6UjVu4c2h_VQInuWJn6Pt8ydBGj7GDseMxXP.H9guPuDLaYj.4hpFpHTC LY0aTvI1a2gfZm.6J7rWeUjxXuKS8ZmzDvy5y0wLBON2Vj87WWk48djvN3O. UH_sKRfVCtLFi5KAAbPLLSO6z3o9albHprHXOSU8QrsNi03XxRc1POASTti2 4CzDBBUdut.A3zZK4ZdDVWgrgxTlk7TqOGjS4AySVNiX2NwDU4TwTwYgDk8E Vf4YU_SS6.VJpIPl1MQZ9cXHtphFLCmipCCLv9Rp..FW.3x8tr3O9iS5Y4u8 jf5zT8ekjDiedWnp.gmeVKu8xbghD9ZGj0vpo_wjOwi0a3UwErXfjQ01TEhg ieYJds2pTPVjf3kI58_cyOS0S4NKrBrj_BbRMSiVIS.Har6GKBDwGTIieR4J BCt7O9Ei2nJPNQ9zOoUvWg8j.c0.pXH6YCc1VT7HlJRtJUYh0zb8GOcmSNmo os95De9ZRvEvtAOVzofmVsC1Q0HEbuSMmtq2Wt2xHo80y2ERnxBwqU69egje ID2sLsE9yp5_B3Bs3D0DL1A1U2HUVEodE_X4UTFp5ddBF51CvyTtbgnsrCIH 7JIHhHzsLoZxwN8tmxIjPY3mOEHCTu4Pw8FRkRLoVxD_vhHLLorALqjEkhXa j7AK5JCkcRN8g_xddJSnYIsOq.2r9vKQJ89m37.B9.RYTt26SZshQOQkgYnA KEiNKA_JdQNgCWB1hi.F1Z24RRGNOrdu8VXsu2NYmRndzoZ8hEo0A1RDwXL1 o1BlFR5TOelUr6TSUdZBcQ935ugwVH8w8HXgZRJdZ9nXEOxhnjiHHeFZPfU6 4d1Y0Qi8cIUjtGnpFvnOBS9gXgrN71vCKcQaxgd..Dw9ZdYmdotAlL.H8ajY ptuGB0xgiTwBKGcEV0MyVNcetyiE4Cd94ejKQfs-
X-Originating-IP: [66.94.236.140]
Authentication-Results: mta1025.mail.ac4.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm22-vm1.access.bullet.mail.mud.yahoo.com) (66.94.236.140) by mta1025.mail.ac4.yahoo.com with SMTP; Tue, 15 Jan 2013 06:38:12 -0800
Received: from [66.94.237.201] by nm22.access.bullet.mail.mud.yahoo.com with NNFMP; 15 Jan 2013 14:38:12 -0000
Received: from [66.94.237.118] by tm12.access.bullet.mail.mud.yahoo.com with NNFMP; 15 Jan 2013 14:38:11 -0000
Received: from [127.0.0.1] by omp1023.access.mail.mud.yahoo.com with NNFMP; 15 Jan 2013 14:38:11 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 941997.83283.bm@omp1023.access.mail.mud.yahoo.com
Received: (qmail 64750 invoked by uid 60001); 15 Jan 2013 14:38:11 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1358260691; bh=KD+0Hu1CHKQ3UVOa++eL+HPnf64s7GUcrdvD5tlumq8=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=axY/m1p+zGzLz2vhB3SirnIqNuYTvAeM72KfYFhByDEJt4FtaaK6OCUlUeqMLpqZtB1khbJeqlU27yHXbyH69O6ibMRB1Oqne7JxIXBvkQho0egEvYcd/2WSjRe1pNUHe3y+3IWL1627kuCgUz2eksOzcaGex7gMm8x6t3Mp9tY=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=naFhkt6WEEpdDu7Mmq3iWNzl3BRETUxk7b8VqgQ1tPiAgvLUN1un3L+RQOyEw1SdONKdmiNiFWarU6LWsPmCJY3d7wrfVj5Y8/aDlVTiNITXT/1SwEiagJYq2gLnSFROsSLAJTTTg71Pr7TMfOA081QwgPHv9F4XD2Jw9+je5Dw=;
X-YMail-OSG: ngK6G_0VM1l3RsocqDXSYMfMGfDxHjezzJeFVquje_4O3IA uOZVDWiDraGBML9hgQe6OMp3QZfbZhIl__6OSz.VFO_eil2GH33v9uFaS6ZS a.EoinPA9lfp2RE7qMem9.S0g7zEf_XXHj8Wyd7lCiHD_je.qzO_4XuVmcxn cGODwCnAxOyI6MgQPYlSDxX5XuHFY3sPTAgcAgxYdhDSXFfQJwR0clz2I7Zd pRsgE7KFhyQ0LqLBwCb2IYMzAgrWPu30ug5oa7u444QYuQOvLraFv5.NCj9M P1rPh5tmFRzVmDeT0Vpmyq2FIwFtHRkEuHxclYI9J1gl953bWRwFDFqaeTsc DWik0Qa.E8.NI4E0IjCLhP3.miedn7S7MXpNOWoXfIA03mFTFQhXYLmZ3UvU bb8y8cty.D4B0X6iMoRTHt3uF4hgKgkjr4PKoCmSGYxNV3rIVGX6Bv0BtdQY k.XKdpEzQjjtjxgn7YRHyDXwtdgvmPQXHxQfWBCBKaq0SmCX9RiqJlodMyqC mP51CSZYe
Received: from [12.205.29.196] by web181405.mail.ne1.yahoo.com via HTTP; Tue, 15 Jan 2013 06:38:10 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358260690.55219.YahooMailClassic@web181405.mail.ne1.yahoo.com>
From: FEDERAL BUREAU OF INVESTIGATION AFRICAN DIVISION <webxccccx4@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION

FEDERAL BUREAU OF INVESTIGATION AFRICAN DIVISION webxccccx4@att.net

12.205.29.196 <> 66.94.236.140

 
1 Comment

Posted by on 01/27/2013 in Other

 

Tags: , , , , , , ,

“Agent David Jackson”

NIGERIAN SCAM – FBI IMPOSTER – ADVANCE FEE FRAUD

UPDATE: THIS SCAMMER EMAILED ME AGAIN — BOTH EMAILS ARE IDENICAL BUT WERE SENT UNDER DIFFERENT IP ADDRESSES — I’VE POSTED BOTH HEADER DETAILS BELOW THE EMAILS.

NOTE: AN ATTACHED FILE WAS ALSO SENT WITH THESE EMAILS TITLED “FBI AGENT”

PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY 

HEADER INFORMATION:

Return-Path: <webxcc14@att.net>
X-YahooFilteredBulk: 66.94.236.142
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: xoKjTDIWLDuBkmVXmCPlfbv_WZIjE5wra.dGk.EGLHd0_Ik. pzXPk3w2kzAxCK7MZDCnIjPAHX4nkOLUWkVgvqANtwsS4AgS4bOVG8Lv99o6 3BMAirzElljzLZY4wdsWw9WleH1CZEp5.UMq53jijuMwtIYd7x.ExSbD27Ot r3_dTsJdFRmlrUqFnlFrxRjc4clsrYTx8MHP8xgBArE0aAgckgmkh_NFaXes eFxkLeTk8B2toXNzOIeea16MI2RpMzkNQqVdZlAbQv9U61_3c.oKDxZ4sV.5 gY8pcctoBsIZGG9tOZpijSRxkY_VNxPwzsIyYElyeo1jXVFkDNpuiHONH_U3 ApMQzh.wDU.jhNuXBYpwGIlhfv9oTEq_hUh8LCwDygA8_4mjrCUa0F.lWk.R FtrDdBD3ltOXTwhRO32pjVB1CPDt6LTZ8YdYZkkguJVLCSNZdLESt5PiVvd6 lGX8smgbIpn7foNPQkAZVH9SBLePPnJ0LgJ60bsjU83T4qfyrukgl9KdXub7 MABdwmieVghKVFJMzfloN9dLl3RNh.YOCUdkfqwYsgMbeNtb5H7_eCFoK7OP D7gfZPsFtVjEXCNrOM0LafoFgGhsN8EKmcfG2ezRE4LEMYJCNNTmTHWcR57P jIP1Um.Sqshw1pFjj1DLniKvydPsCH3Ss_G6feYrvRrZQNOYYsMXe7s4p14o d9cxRoG0dZtitQC0n3nLFx4qiuT2TFhofBB.T.t1sPhZQdnHcBuQzEmbw1i1 xoI73b1xEwHowauOTWfTtt9TFec9QoAuR69SdrMYaMquwaBt.7t3JqTeIs3B V2nXriD8bMHx3ZE7uBxrrmHVS1GX7GYQgT.k3k.6tvB.2iG91etu1UizkS0X 9k4tNRukg_JqZO3GaUA4m9_by.IJ2P6ysrjfW5D4Cdk0a40F1JmzcsALitH5 khgOiV_0COJR5YLbv80xYavNu8lx5CcGP2ls_jfPSGGVbec3_kdLutEoMV3b wnZyd3FgAPiF46OlBp6wWlEU4ArRRbe4io1JVzBUJJyEfH19Rn_rSE7QLov8 CCmTFPY0xi4mWBEnBbzqZMBQ.2BgATYUweIU9yCuYLbnrAo10iRptjeTPSHA kthPnAzgcpRZn8pVoo_4jpjojKgxrTHoXjOlKzuAULhX2atdExaU5Sh_gJzC pfBqTBC04EV5r4qQEO12X4W7YTkZMSgisiCHupFcs9RXCE7u4lBAm7jVSZzk H8UZHkKp6JWDlPMGbgmKLnzIKNn.Uv1xksWV28YWO2S.3H_reW8aFmqzUlYo fqpup8uBX7hERv.02iQgBflO9NRe48RUorCY2YsBeBUqEz3UYD_FL8yNVGz7 wfXDZjkeJwjKpvZjlyR62Bcp6CNEaS_VeNV51bbgrMtOyPv95FYzuVIVQnXa J6AQ735T
X-Originating-IP: [66.94.236.142]
Authentication-Results: mta1133.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm23-vm1.access.bullet.mail.mud.yahoo.com) (66.94.236.142) by mta1133.mail.bf1.yahoo.com with SMTP; Fri, 11 Jan 2013 05:00:52 -0800
Received: from [66.94.237.199] by nm23.access.bullet.mail.mud.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
Received: from [98.139.44.93] by tm10.access.bullet.mail.mud.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
Received: from [127.0.0.1] by omp1030.access.mail.sp2.yahoo.com with NNFMP; 11 Jan 2013 13:00:51 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 296482.1479.bm@omp1030.access.mail.sp2.yahoo.com
Received: (qmail 37215 invoked by uid 60001); 11 Jan 2013 13:00:50 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1357909250; bh=AMv2pcNcaeNlJVqHQriJ4Ri1HfCs/cWs5cs0YO/zIGY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=dOKri5+JYYcxJT9h7uxBXePMdTKL9LgDJaDxXAXuKXkol/FHCkW7VSrnFN/3MjPpf5yDolF9ISRT3voPGp6JR3IPgQ6gQn09IbTLKDTDiZCJtIt6LZ6Nh5IFb/P7xZF91BeaW6wRFYV9bDF79MeUxbR1nBQ9Uxx+tDmuc2EHvuA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=IJMFPznKpHxDIYQ9bzl24Q3XMLcjmLv3vEQCNFIYPov7S/flRvjby7HCwZuoE1DPiKcsiN1BxsM/0aotpqOdM0QTrBTCejq8SrPEheI4TCwU7Ow9eW7VZcnTNDZH4zvHDSWPf1dZ4Lt/aiO8S5x9o4N5yeWcTXUfe7p83oGb8hE=;
X-YMail-OSG: TDmS3ggVM1nfAjpQSEiVdV88KjCqKzlApmBtrsiihrc8lyv SQXEYaC4icuKbPOXdw0EDFm2oJY1QxbTQ9LQNzqiBT8cLE1ctrswApbp5smO UN.d_cYwa7eVA.2gprfdTU5BLUnee57BJB7mmSZ6cdmaK0zaCmqtEjZOFNCy IEjbDJzhAllb4ufC.JkScVlCUEAYHdm47QsJ29uunh.nwHbpwD5Aqc7OZPRd g1HSfA.SpgPudxZKy7x5x9C1zF5i3wRJiGN.hUGxF_orR7J1wxmW6uixQ4Q8 HcuUu9Inx20Xp7X1gWIXpxSKuGG2i5sX2GIEe.jDAXtXKBES6vuBRUc81DV_ WU8Pu2Bzqt5ECCkCZyrlYveBNfRo2anoYH00EU0JO7uvnmLlC82wp9tEtKHK F0IlSIOGPTMvMsscdUYj79v3PD3P2dZ.SuKoSdB.9fq5nJK1xTUKEg6T9jcI 9PgL80ABFGZFlkHIbPNHXy_0Qku6Wbj0YoV79stu043EWcSjVc..30TYjf_G ZyVd1eNlz
Received: from [72.64.146.136] by web185002.mail.gq1.yahoo.com via HTTP; Fri, 11 Jan 2013 05:00:50 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357909250.70203.YahooMailClassic@web185002.mail.gq1.yahoo.com>
Date: Fri, 11 Jan 2013 05:00:50 -0800 (PST)
From: Agent David Jackson <webxcc14@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

Agent David Jackson webxcc14@att.net 72.64.146.136 >< 66.94.236.142 REPLY-ADDRESS: david_jackson141@yahoo.co.jp

___________

FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY

Return-Path: <webxcc14@att.net>
X-YahooFilteredBulk: 98.139.44.167
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: jjzWyiIWLDvQAq1bz5qLzCO2.QJuQdBJN6zZ8UglWMf8e7nM 9jdFsjujbwAPbjhWkM9RYr5QgmMx_7ksYyMP7Jjs3XZYq8QJ.JOCflql1Phg uIEC1jKdcia99ibuuIZ1iyTS.YAWVHLQm773M33.9zH3akABbi3OAxcFZdPa _TyUllSVHN5uC3.lOCrpSjlvoHAKplQ8reqYGh_wUeyz8biM7zko0f2p3pdz bZsUy.1wsFHQaiIztozIyIdoXX8_dQr9O0DwjrcYx8_mrsoohQXDmv0Qd0F7 bo.bDYicT6riOqq72kZPXTe5UREAcMQnls_gqnDfYn2tNUkhIP.JFtt3kFOD NQ1lhN3.C2p0oKrVYvZPPwJltKHjidAvCn4Q8ihWax_B3SnFA7QB73pYOvjy mJmU_WrXbJXxa1H3lKu1OYy8eYc5trelPUzNd06xUgb5u.q4lsRv4pEMuhlC 3EIjl6qhXHmCkyjNzL0guKnsS_nNfVyv6IhA_UoAdGURE8PYvSRu.uKVpE5s PuFvknOdTp5VKOqZlPWZRtIwAFiiuFeTyBC7d2LpH8MRTjRMq0LLXjaeDRRf 27t1hfEygTEKI84MjRY31u6pEyJVx_f14A14xGLL2R8a7nBQnoTZ6xqa2PVy ifE_vufn7zejkeijo26POkYD14lPWROAf34bIoR6VvEMzvGGmgldWYKtP6_T OdwC8QgTaGzINGVLw.oBXZ5QLgJjOuRIwZ8ZglAmJKEmuuzzOp4khM4oIbwN Xm0i_P90x5x8kAmH8507dNT2yBBXcT2C0nj_gWggOL8NO9LfVtPUMC_UPviL GfefUvwQgd73k4k8woYRnAC5xVKMX6DZpW1mACwOFYmO3ukpLYaih0AW7ZN2 WGty8iF7Ra1AQp0HRbTxBV1uNd13_qvS8BpSUt0FxtwWBk3zZuJmd8ZdL1EW Mj5JrL8GFK_uz7NU71hIndLApqMh453FEbGnqUXiDVvaIPzku.a1ncAWuacT xHju1mSZQzcrmbN7jHnFzE8inD6aIBDf5BKcN7xa.w.KsGbrgwHT9dyTWCiB U.oXyIM72g4dZkOOe5WYd3MIpUw0a_YM6Lv.X.4CzTJAALD0jm5_ffFE4hzX UIusKF5370W9qtmDSI6cpy59NfzqeNA8T1FVQzuvHCzSV0IbXk4Y7LyOPCOF jYe7w2CWd8xrD2EBt.d5BEAupDSqk9bUSxQsNtDD_eN9Cq9Ka_NEMmnj2y6l FY.ygqon9EjdQ0HJdOB8CSLRsd.OpSSwWu9h0JRBaFxn4gZebvUrtEAWma6B wV6WwPJGCV1rsIa3NaCj2xumef.yT.F73q3WzUWX2qU66IvuMLYSHN5qNLmi 42Ez_5GDASpIpdzYuA_x._xh1oo-
X-Originating-IP: [98.139.44.167]
Authentication-Results: mta1045.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm16-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.167) by mta1045.mail.bf1.yahoo.com with SMTP; Mon, 14 Jan 2013 05:27:27 -0800
Received: from [98.139.44.105] by nm16.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
Received: from [98.139.44.73] by tm10.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
Received: from [127.0.0.1] by omp1010.access.mail.sp2.yahoo.com with NNFMP; 14 Jan 2013 13:27:24 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 252445.15343.bm@omp1010.access.mail.sp2.yahoo.com
Received: (qmail 27093 invoked by uid 60001); 14 Jan 2013 13:27:23 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1358170043; bh=Zm+DJwrwGZlIA/LG24aCrFEpyMJ8dMFzxwrXD14xR1w=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=5ml0Xm3/BrZ7EuPmGpWRgsPNYtHEUNpHsbSSLkkKDgu0u9cI10VSDqgFfoGsE2hrjAML3CC4/aUra7VOYh1GwZZmELiL2PnYvSrBDs508LqoJo0Jk0c40hixsaQO+7NRh0ui3n9wKVixAzfuMuBORXUz4isAM9Uj2r8RRq2OPvo=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=5Cl+v6lPr2mrClM1Tr3uoEcxJGT6po046oHmJqVXsidvAjGm2h818ba09wHtcX4h6be+zslui+s2f0LUbzuCsqrDY9DxKTWX/P0a5jX1HE5fg8cg2gWioTCmUnizj5Hnpk8JXnSQBmXO05ybxFll6OTtEZ8KJfQhTw0INVCPdGE=;
X-YMail-OSG: .au7dWcVM1mjbQkta19wLaNG8g565zmamCIhdNrIz5J4oiR Ei87Eg4zRlKOTdWciw.equT5lByIRZtVJfezeL10GmmrKTYeitYPptLbUICU 3Anf.JK_3NAzOf99bdmAe2djTDVFpgkFD82cg4kjZTZjr5gofpaquzxJRp3i DRy5pvhmKi0SE6TRfn1x7wsGYnfPcKA3cWENK_oBoLL3yv37iM860nmaqUCk ppgmkkgx1JZEmdnTtvjUzzdkfWPoN_LLOJiuKRtHby4bABJGJwhzpQEebrFJ 6GriB_Yhx74xtLzYjZL3gtysoUF0QZN4xJRBYjkGbB_kNsbH_XjgdYxlJFzs WOYEZ0HTWXt2ZO19n_285v1Lpod0jDlJGke15uWv2QkBAdb8npYY0TJpxV0u Gqj4IxurvaVeU0V1zj30cyHHuIeX4sW_mftM7AI3WRXykHTZiLe.e4mZ8PJW 9krGUKD5CM.vs2nGKr0tUFPFhuaZ1B18Mc.me7eflQ2zq.F92sv8c2mNAADB Qbpuzc04-
Received: from [64.72.78.27] by web185001.mail.gq1.yahoo.com via HTTP; Mon, 14 Jan 2013 05:27:23 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358170043.12150.YahooMailClassic@web185001.mail.gq1.yahoo.com>
Date: Mon, 14 Jan 2013 05:27:23 -0800 (PST)
From: Agent David Jackson <webxcc14@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

Agent David Jackson webxcc14@att.net RECEIVED_IP: 64.72.78.27 ORIGINATING: 98.139.44.167

_______

Message contains attachments1 File (36KB)
FEDERAL BUREAU OF INVESTIGATION IN NIGERIA.rtf
PLEASE VIEW THE ATTACHED MESSAGE AS A MATTER OF URGENCY

Return-Path: <webxccccx4@att.net>
X-YahooFilteredBulk: 98.139.44.169
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 9LjqTrgWLDsWa.HbSNWNBH8jAOpaObL1Edc7fNdmRImcUBZv xZofYsr2bdMW1WQHSWtYRWXFljhG0QgPPk.D7mX2yHJMul_Vd6cPN4lzpqBR QObxIsLNz908K0NbbkGfnPzo77OMUH6cdcV4k3GrPli1vAdxeFm_iNCu4EDE FIohu2_hWwnjV9DF4dxpCK9yrXrnp4W7oLuqKByLsWDTXHH6PuvHUZ9HRRDl InKZ3SeEQJ1Ruj8sAnn2stoWc6z4W3KN2OPEA7a5uUjI5dzAM21Xj1uOGpKn PmSpxJRQPUhDOK6xgSRVwyJxqFSS5akOAejt94XnGPVkOcdxHVZuK0VxXlpb aD1YL2o6EPhq3kXV9S1eje77SfpxGupfC4WxqpyyuWTyI38uHjGGkQoK3992 yz7cogcpQzLdN9xoT9jYkoR9VGRUHMeY36p5xjZai0NB4CrYoNSaeXPCOWz9 4fRkfNe_WL2yLRLLYbyQhCJ0UJvG8yqZL2BE.9kW1SCfI0pt.25Kqw2tZ2Sx H8lRk0x5_GRlZ06JVi1AqY21IHiD5uwSxqPliBBh98MJ.xID7VjJTa9nlnTk HJr8QB5cLaID3qIjqNk1TtKW6GXe.c7lDu3EdhMMFN6V1Eu6h7_HWdUegkgw BLcuC9zufbTkI5Q1A03yx8bbdtfB1PtDR.FkI8LtsxChfPPRp7jP20Ql0Akb 7qAvyLlGfPS.Em8lyeU67O5P2NZR8hhQqnykedIJ2jU7X1rhPpFDhkyyDGQD RhIG3n76WgTWbxraLq337f4HO8U.CZkBxLB4vk4nNGHzwNBy9WkQoi8PaOxy mttNuXtL5PTI9BzPEA57na.7RC4HxDvsk.vrwy2TM9TKoZpvtOlZQN3R11zc 4Sg8aWHhUgbKGr3uLdUDb6YO5bfdhgW_5irq_AFLOV3pF0KgJPKaFVK32Zsv gpdAFBGqKnR4aVtz66hNwydDm8MSTEveB9s36Um1t3KeRpi3r5dzMWbIrMdE h7uhz4Lptww7j34aj5BEjFYZWAFOquX54B5wcukO9m6Uh25R_TmWAywlRYkU R.qQMKfyzIoeOyIH2.3LrhEnVI2eJgi02ubeV07iw0AxahIbojmQgKC_4ykW lA9Et8DKXwa8AtthOC7iTi_u8GVYySxoQXybEeg6YJZy54nVe2S_i3EBEuoX Kglb.lN7Lb8mnxfg2Va1gc5C87kw1Fao1EPlxuW2lFHw7TFBkPztB4gqXZ53 yyZVMfuJNVH0MqwFKzHmlMiOnvSzUAUeaQdPJw7aLMQfmhaw2GAGhai1dXgv mt0.4i7IWKBrgvWMq33efz2j0eP3j__qyRDv1KvA_P8s3mo_km1zL9AxVcJz Ck5iaJSS4FgdahKCBDhjVVOMDzJHUb32fHn._RHdHjVfeVjCdOdqGvaxffXR nh_xZpfMuA–
X-Originating-IP: [98.139.44.169]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm17-vm1.access.bullet.mail.sp2.yahoo.com) (98.139.44.169) by mta1285.mail.ac4.yahoo.com with SMTP; Wed, 16 Jan 2013 05:46:47 -0800
Received: from [98.139.44.97] by nm17.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:45 -0000
Received: from [98.139.44.66] by tm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:44 -0000
Received: from [127.0.0.1] by omp1003.access.mail.sp2.yahoo.com with NNFMP; 16 Jan 2013 13:46:44 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 938289.74941.bm@omp1003.access.mail.sp2.yahoo.com
Received: from [216.171.90.22] by web181401.mail.ne1.yahoo.com via HTTP; Wed, 16 Jan 2013 05:46:43 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1358344003.16284.YahooMailClassic@web181401.mail.ne1.yahoo.com>
From: AGENT DAVID JACKSON <webxccccx4@att.net>
Reply-To: david_jackson141@yahoo.co.jp
Subject: FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

DAVID JACKSON webxccccx4@att.net REPLY_ADDRESS: david_jackson141@yahoo.co.jp RETURN_PATH: webxccccx4@att.net RECEIVED_IP: 216.171.90.22 IP_USED: 98.139.44.169

FEDERAL BUREAU OF INVESTIGATION IN NIGERIA

 
Leave a comment

Posted by on 01/16/2013 in Other

 

Tags: , , , , , , , , , , , , , , ,

“Mr. Stephen Fred”

NIGERIAN SCAMMER – FBI IMPOSTER – ADVANCE FEE FRAUD

Okay, this is funny. This Nigerian scammer has been spamming me with phony lottery (atm) scams. I have posted dozens of email-addresses, IPs, names, etc that this fraudster has been using. In the email below he claims that ‘Anderson Smith’ was arrested one month ago but this scammer IS Anderson Smith and Anderson Smith’ emailed me a few days ago. (obviously not arrested.)

Anyway, this scammer sent me a email yesterday and I noticed he fowarded the email to atleast 75 other email-accounts so I decided to forward a message warning all the other accounts just incase one believed him. Well, today I get the below email.. I’m thinking one of the people I people I forwarded the message to could of possibly forwarded it back to the scammer? Oh maybe the scammer had an email up there? I don’t no. Hmm.

Dear: (my fake name)

Thanks for your email, i pray this email gets to you in good state of mind.

This Mr. Anderson Smith was the former correspondent delivery officer in the atm and check department here in the FBI branch office Nigeria. Who was sentenced to jail last month because he has been the one who has been scamming people round the world by the FBI after much investigations had been done in his office

Now he is about to scam out your money from your pocket, you are strictly advice to stop all transactions you have been holding with anybody and forward the write up to me, so i can send to the FBI head office right the way for proper investigations.

I will also like to inform you that your funds is still with the security keeping company who are in control of making sure your funds is been delivered to you right in your door front within the next 24 working hours.

You are advised to contact me with the information’s as stated below:

Your full Name.
Your Address:…..
Home/Cell Phone:……..
Preferred Payment Method (ATM / Cashier Check)

We await your swift response to this email in know distant time.

Best Regards:
Mr Stephen Fred
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts) aSBwcmF5IHRoaXMgZW1haWwgZ2V0cyB0byB5b3UgaW4gZ29vZCBzdGF0ZSBv ZiBtaW5kLiBUaGlzIE1yLiBBbmRlcnNvbiBTbWl0aCB3YXMgdGhlIGZvcm1l ciBjb3JyZXNwb25kZW50IGRlbGl2ZXJ5IG9mZmljZXIgaW4gdGhlIGF0bSBh bmQgY2hlY2sgZGVwYXJ0bWVudCBoZXJlIGluIHRoZSBGQkkgYnJhbmNoIG9m ZmljZSBOaWdlcmlhLiBXaG8gd2FzIHNlbnRlbmNlZCB0byBqYQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzEw
X-YMailISG: YRAg_6UWLDsNPJ41NgYqJwAf5OJLkgUP_WnGcMzl8tpjvtMl _rR7NL5SqQ5ckG58fvfr6m0wcweGFaHpNtYbxDMuVDaIIh1l3K5mNhJuuUo_ 1gL0f1X33EdIEWkU5mPAyilJBlXEpEzk7F_IyU989l1G9TzWOre1Rm4NVrtv wL._Vi2pXJgOQWfreL61PfLIlsJaWcVz4qtNDDj2gyD40PxwRgmAN75tZ4nn aRWQg0kEw6lZsV6CpK5tBR93lSxR5BijjoPWypit6rRfFHu2RPGypmHaaT5i NyOQ3dFSpUGR0qaoBtZbkYY6RfdMQeiKvQSJUW3FpI9_7lT9PcuRP8ulxAyH IdKsAozRLeGkYH_HEicxkXssyyV0P5VqNhSjcN.FVIQIMg49oMMuyXhq6Ams KYFWO16wfZulmhe3zhfu8iLnXUOx1asM1CoRtivrLypsvcMHW2z3jV3Sf4xn gIGmDsHpgafAgkUO3QWxCyUJLenj8Dj_BwC0KlH1rTcmzgg1cDn.8n1xfx4I TffWkboW6Eu0ftF39kDBSKHoC1iLW1RlaaenH.P0luai9hY6QXflsWADaNMp vyw3FUaI9ZssiJp679eh4kt0pGwVUec2kSxHDhpu7SLrLfsGFNoF0pPZYXUt uGRiYlJUlUr5v8msaTOvPCQ35gQ51eUcQaRxD4v2KkyvHegnUen7ToXi2Kh_ OKg9ouVRwnkubOu7lDdfjAzSeczwtAcm5f2ubi7_l3rFwW9zApCW4_AjeWmd 7vvS5V1nYymEkC31.V8sS56xjK3kQCE2iE9j0pUAjktDOX6wn8J_4Ayq1PGI JXgjS5w9nTji3nRHdgxyZOWsXn0db6EffdhNgia3_uSx8P4LjSMZZ7l7PS2t R0PhNr9NWBA._lPQRp.ZCkvQ.8fqwvIlrCFFnsl0SMfnnvOGhZygyoSDyQDm CBfSA7cKbH3v.lGz0WBYswdnCdFJQrwjekmXVAKaUQt440eGAHPbesQ0ln9U PSqwPsVIJt7QkPvTDHPfdX1TOmMQogOlC1_Pt08aiFWDsz.hfNhiKZl1XK82 uJT_t0sFbY8LfjS.p25d_9wZv04b8nl7s5nCniDYVnKK9LESNJdIkvjYCVgb WGkqKQSwqmZou53wA60pT5kbAMhI2QtgZo59Jrt_qvNwcY82MaPQKLLMaFGN a_I2Gwi0ptjskEuktAOgHo9vf3tIbLhf.cNFXjFPrGYa4yPAkAR_C1RMGzCi eEu2c3Go8MzGJFVU0PFqESSugO1nYIzz7W4yaGauPPLzBhykdx2OBa._GR.x 6IyB0YF2._YiCvukGztRVMt0SLWP2kQarf68uCf11I2A4mPMlitmKL._tD.x kkfi6Zc9B.JKZieJlcetzb7nwXocEQaWXoZUH1twHVOZ8dyzq3AnFQxdxoD9 G4mkqGOembFIUmoPAkuk2.N1hJoPV672fTBJY_dMNjDU_OM1tua2bQhWEaV9 RB9WTSbJRX_xtzqg0OrPgSmaXawGuXf0u4RaLPOD8kQiMN9f3w0LTGpfzNF9 8Rvgg796.RX_9Zj_ho8NkHiqorsQgxJeAkzeCQnhuNyKZTd8ZiwYbk_jS8OY .8E_qA6ixSW3NL.CC4hF64r.DdClBZQLn0xSC1PeTm3AGG38oY6zt26wqSnu hrLzp2rqW6lj8PfrLPMzw.Gqo8wMvm6Om0JtuF0gPL_NJ3YY50rFVWWnWA–
X-Originating-IP: [77.238.189.211]
Authentication-Results: mta1213.mail.ac4.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm4-vm0.bullet.mail.ird.yahoo.com) (77.238.189.211) by mta1213.mail.ac4.yahoo.com with SMTP; Thu, 20 Dec 2012 02:24:58 -0800
Received: from [77.238.189.234] by nm4.bullet.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
Received: from [212.82.108.243] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
Received: from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 56404.21902.bm@omp1008.mail.ird.yahoo.com
Received: (qmail 69722 invoked by uid 60001); 20 Dec 2012 10:24:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1355999096; bh=pyOeaUKKOWWZW3lLdVTTiYRo9J3z45S6mIgOy2HgFlE=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=6sEt/VfUuEDUeUudSXs2M1ShOX0eWuYo7bOFh/XdhIPki+ZIyWn9FslcZYIOK+sL8m2MaPtDxi6PNqGk3ODuJVgRnYkMO9IvTfVw4QnvNAaE0M7IfkAvckE4iO1WwKrgM4BNroefkyNDvwH2m/l87dYrH6Im4aiMBs/53/5CRh0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=4oyJFxMb7QIfFN0qOOV5EQRhasHrL0MG/qXmF0XzHB3Z75TEzL5ABDN+fjzt3FxSN4mb8R65+JBQMcZgeYn8hdlOLtIV7RGsbY7RDzkjKCf/9HGA0mDNi4dbn7Oof6iDUGP+kjNmcqlB3BqyHnRKxJyfsGxbxGwxQB5nyfnYApU=;
X-YMail-OSG: gJ29ik4VM1lXPyNG1YswL1rjwFhoTxeyDPqgBh6qE0W3Pqd SBPMiD2ZzSxd7xBXJUeIU9HeH8gYoc_o0hqMUZ.qWnc3PHsey18hkIJmRVZQ yDDgnrXDyofzHPQaZVicPUr9PhVOPPvLSyF37PopUuxDIHztw_T1fAI6YJN3 .IY9klRHXSdhx1XzjXDiWH_LvYN69G9aOSo0rZgdyeHU0M8MLOq7kfarzh9P bTtG.jAKXiYSxzvh4HXO1BJJ4nyYbdwX1bmpjdGVdXFLJ63kWgxitArYUuQ8 Aebx62dNlVOnuz3S5Wit3dSljkkO6nzX6N23R7uQUBOYLas3hJt9ayP4NSI0 9bWoBPZmOLXWneE8s8tCtkcKyynk9esWOszaD5qVI4GnBogGS9PyOOt_UJwD sMJf2NMf4K55JsKHz4XsW2WTb0G5d0vkdPg–
Received: from [41.71.177.225] by web171903.mail.ir2.yahoo.com via HTTP; Thu, 20 Dec 2012 10:24:56 GMT
X-Mailer: YahooMailWebService/0.8.129.483
References: <1355977301.69904.YahooMailClassic@web161001.mail.bf1.yahoo.com>
Message-ID: <1355999096.69523.YahooMailNeo@web171903.mail.ir2.yahoo.com>
Date: Thu, 20 Dec 2012 10:24:56 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Reply-To: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: YOUR FUNDS IS OUT FOR DELIVERY TO YOUR DOOR FRONT! GET BACK TO US NOW.

“Mr. Stephen Fred” <mr.stephenfred@yahoo.dk> 41.71.177.225 – 77.238.189.211

 
Leave a comment

Posted by on 12/22/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , ,

“Mr. Stephen Fred”

LOTTERY SCAM – FBI IMPOSTER – ATM CARD MONEY TRANSFER – FRAUD

CLICK HERE for an earlier post which lists two more emails and headers of Stephen Fred

UPDATED RESPONSE FROM STEPHEN FRED RECEIVED ON 12/27/12 (below) — Also, check all headers, because you’ll notice different IP addresses being used with each email he sends.

12/27/12 EMAIL: Dear Friend

We are writing you to inform you that someone came to our office claiming that he is your Next of Kin and wants to claim your ATM CARD which is in our custody, for he said that you just died of a deadly diseases, we from the Finance House keeping your ATM CARD worth US$3.5 MILLION UNITED STATE DOLLAR can’t just release the ATM CARD to him because we should have received a call from a member of your family or you could have stated this to us since you have failed to pay just the sum of US$180 for the delivery and insurance fee. When he said he wanted to claim your ATM CARD despite your inability to respond back to us and that he was willing to pay the sum of $180USD for the delivery and insurance fee, the Board members were so skeptical about this and has asked me to contact you once again to know if you are still alive and to know if he is trying to steal your money from us.

Do get back to us if you are still there so that we will not foolishly handover your ATM CARD to someone else who claims to be your next of Kin. We will be glad to send you your ATM CARD iF you are still there so that we can arrest this person who says he is from your family.

Your response will make a difference and sort this out. This will be best if you are alive and if you are dead , we want who ever that receives this mail , to have a Rest in peace and we are going to have a change of ownership to the next of Kin.

Regards,
Mr Stephen Fred

_________________________________________________

12/19/12 EMAIL: Dear:

Thanks for emailing us, i pray this email gets to you in good state of mind.

First of all i want you to understand that this email you are about you read is directly from the F.B.I (Federal Bureau of Investigation) Office, so that is why i will appreciate it if you pay attention to what ever in have to say to you.

Am Mr. Stephen Mark the new correspondent delivery officer who is in charge of making sure your funds gets to you right at your door front, and am assuring you that this no scam, this is my profession for the past 25 years.Transferring money to people who are been compensated by the FBI round the world.

If you will like to know! your email address was gotten by the FBI last week after passing out an investigation on a fraudster here in Africa, and your email address was among the emails of those that has been scammed by this heartless fraudster, so after series of meetings has been made with the secretary general of the United Nations Organization and the FBI they have come to a final conclusion to release the sum of$150,000,000,000 MILLION USD to the scammed victims.

The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Nigeria his Excellency President Good luck Jonathan to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes.Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card?
ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $5,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2016. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account.

Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via UPS. Because we have signed a contract with UPS which should expire in next three weeks you will only need to pay $180 instead of $420 saving you $285 So if you pay before the three weeks June 2012 you save $285 Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $180.00 nothing more! Nothing less! And we guarantee the receipt of your fund to be successfully delivered to you within the next 24 hours after the receipt of payment has been confirmed.

You are advised to contact me with the information’s as stated below:

Your full Name..
Your Address:…..
Home/Cell Phone:……..
Preferred Payment Method (ATM / Cashier Check)

I await your immediate reply so as to move ahead with the delivery of your funds to your door front in the next 24 hours.

Best Regards:
Mr Stephen Mark
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

12/19/12 HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
X-YahooFilteredBulk: 77.238.189.196
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts)
X-YMailISG: miz.PSkWLDvm8OHiL48MwW7HgCGZcY9wyYfPB0bWgcwKjEva TQwyGMTEfGBukWTJXp6K3_lMdOr8o3lm7TXrmPoc4SYUT3RVw6rGmRAryrmR vzFdPJ7nWMn8LKQrp74PYAgJV4aKVfzqyjt6AWzoohYTZOMagwlgMOTaPzTw rGipFSZ5Eobv4U_GlaNlE_77Ddk6T98GFT9V.aLJnAc0Ph4j3q6vJfarMtOQ NrJ0NJrxpVmlky589fuZQPic.EkeCD30o7kG6qwUIV44GPS5N2hb9u3CnUKO Idl.D9s3x8My32Vjz8f8SthSPf2bIAF159pdZwtc98SBOvRla.GQlOJ_qc1g BVwFqn5SUVXM9a5hmQj.BXKYJuCZuxSquLjVxtHH1rBh9EGqnA09aSKtoHSH bKbHNSkq6SkKdYfbF6ymr7Xg546oVhvmCv37ZGcxagiSNzoXXOrMTZgeQvdn LUhuKcL3GG1fQFdFazm82hezg0qQk7RdFP5xxpsuNTPgXrIUDMpFXjcjiQX. 56SsbW2xWvtdWS4tKKkLwaoVOEBhN8oFDaAjWHad_O77JiouWVwI9UZVRnsb epl8cLnKbZF6ir3kuH5sRj17HH1TFrTI_Yn0ON8OGQMcql6xsFmzGVuDmNVU 9NzXr3WX4wwnq1eIKU7Rlrf0i4MYsNZGO5VNVHNJ_lscTQGsyOd8Qb5ZQn4T 3GuOsvDM_mbrBpHu79D8ihDJ4z9GyDjWZAWAwent8y9HXlBijC8p9BCkVvz9 7bsWQfsNlFjIjrBa_msrlpK1AcwxQ3thkIw8XJ7ZZg7WO9VyRxTxOOVVzkqe quk8zEmWht_j_AFgtqjtBshl1ZBXWvjnUy7EbyyXzurKVIEFwtDGX8PDfX0i nhenxR8A.Cc4Tx6lAc3WrDHC_nhTnCdkdOu4QoHc2YAhQLsnDHrVNu1A5I8s BdFXnu5qPsLugzcNIIcjqcV3jdGpTvem9lKvB.26V8q9QxjHW6kAc7QhiRCj oTNYV1SlvAJcZuT8K8NAnkkB87v1nGfSSlVMpObPRdAUF85rgPEzQxr.WC4v _lVsNv_bFAENAGxZQEUa5peHi9bk3SUoYl839PLfNH42AWyqw.r.uEDGgYgt YVf3htF6YiWLWvMqeK0vFhXSbGSUeNWQejxn4bLX4hKc7dcNPN2X4lxDHV4Z TtgqG4qSWGI0T31Ja328K7tD0tv.6MoNpwNtC7rR_ZYySGuxBSy65pYmhzn7 fD5hzdiIiAums7aVzssL3et4ky6.RBgIHcG4CxHLGTeA6UnT.gF7oZRWMY8b 4efHUmr2._obPGoTIsNZrbXF0k5iLpTUAKgu_6ZfsR_ayUUr8XC.Y7JvnlGf Qj7GhkHo12CIBoSS2qKhAFSH9vHhX0Xx86FPWuv84Dun4Hw-
X-Originating-IP: [77.238.189.196]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm0.bullet.mail.ird.yahoo.com) (77.238.189.196) by mta1299.mail.sk1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:48:41 -0800
Received: from [77.238.189.232] by nm12.bullet.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
Received: from [212.82.108.126] by tm13.bullet.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
Received: from [127.0.0.1] by omp1035.mail.ird.yahoo.com with NNFMP; 18 Dec 2012 19:48:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 955255.21914.bm@omp1035.mail.ird.yahoo.com
Received: (qmail 872 invoked by uid 60001); 18 Dec 2012 19:48:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1355860117; bh=8wr5+nuRl/ns3gTGRezUcxkLMAwD+/aKdXnRIi6o6TY=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=6oJFhfa3p393I0xyrjhWQkUUjMFtdPImK5K243mP8aw2j2Ggo3ikcPl1+eRnjxs7VpIY5Mz0F5DSU0EE/k/BweIBKvdlUq2Lri6CqF4vqu2RlNRlEilW5g8O1z5wLje7bh7lo9Al99Bl2UQ+o+5LRnSqsydSUBCepF1X9HSMiX4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=cxaqwhvwCd3wwPtAVfKDnME1KkqzhntFJbBJXbDovmDNwyaVmX+FfJ2NhERfEIIpGd4n8o4ciZPL7kvjkyGgXsmTH1riWPjOmGcRURgnnscU5QMg64kJTobNnMXFiA8qhYFfLrHWgNE6qkx0mpKBiGQCJ6+MIiFbgBmp2v1SV7s=;
X-YMail-OSG: BjMYFAMVM1mnis_308ZVtMLR8Q8RKjoBERe2MAKplDV68cK RggpmS3_GIfS.MlTnm3NSn4KH2I7R1Pw8szBwplBfRNwRJe8f9qo0KvFmbIa XNyfXRa3a.3CF_.LzUvsypRymwmrvV2iaeh_kvvwQpu6zyZ1XZ6FIsJfkpYg TLvlzNdVM3ET7UUGV.zw8Qp8J.Toaem6Caq3aLMS.eA.BQfMs0UJTlPt6wUd mQRAWgRagh1QXMK1QVys_1Xj1NJ.bhuSPOXPhUTRSuN37VSXzysseRAnOvEq v9pWabsobdmSltAtLZbMm2NBz9OQMCID1e8Prxaa.vZQLIckB8OdFabnmGqG cPs.6D04GXE_gwrx2SRP3lTHI2TZFEOmJKHiPu0fRVZ0Iwyo0drq_UXofLZi CeWryBPYEBpAIZSPRIVnfB_TfD74keU.3FCnK.xFQiVraI7XdRsQxC9ffPg- –
Received: from [87.248.115.210] by web171905.mail.ir2.yahoo.com via HTTP; Tue, 18 Dec 2012 19:48:37 GMT
X-Mailer: YahooMailWebService/0.8.129.483
References: <E1Tkafo-0004nX-Uf@dmghost.dmg-hosting.com.ar> <1355817424.21167.YahooMailClassic@web161003.mail.bf1.yahoo.com>
Message-ID: <1355860117.783.YahooMailNeo@web171905.mail.ir2.yahoo.com>
Date: Tue, 18 Dec 2012 19:48:37 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Reply-To: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
In-Reply-To: <1355817424.21167.YahooMailClassic@web161003.mail.bf1.yahoo.com>

“Mr. Stephen Fred” <mr.stephenfred@yahoo.dk> 87.248.115.210 — 77.238.189.196  mr.stephenfred@yahoo.dk Stephen Fred also sends out scam mail under: vikhadd068@aol.com – albanesi@dmghost.dmg-hosting.com.ar – 64.12.227.42 – 172.29.96.160 – 172.29.104.4 – 200.58.125.17

_____________________________________-

12/27/12 HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts) bSB5b3UgdGhhdCBzb21lb25lIGNhbWUgdG8gb3VyIG9mZmljZSBjbGFpbWlu ZyB0aGF0IGhlIGlzIHlvdXIgTmV4dCBvZiBLaW4gYW5kIHdhbnRzIHRvIGNs YWltIHlvdXIgQVRNIENBUkQgd2hpY2ggaXMgaW4gb3VyIGN1c3RvZHksIGZv ciBoZSBzYWlkIHRoYXQgeW91IGp1c3QgZGllZCBvZiBhIGRlYWRseSBkaXNl YXNlcywgd2UgZnJvbSB0aGUgRmluYW5jZSBIb3VzZSBrZWVwaQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzk-
X-YMailISG: L0eJ1l0WLDsrmzhsNc4ma_ZTXhvmHQ2AKw1S.hbjK7f0cFYW 9CyYcBU7kl_AGjll0mshaAP10b6HHWwmyr9NHIlVfiz7naOArbwf87HAw5k3 9ZezwwxiQSn4Lh.0FELX.Gv7N9cLWGfm7FzsbwAHegFAuQ0MKWAVoejRLT4h Mva1W4NkDaUXxkm7lo6wQpYGPnrh1K29QdN7hMvxGaW3l828rdEa8u7R8tSF P4hN0LiGmfNFwx6QzZuEf6A2NwhmTwMxG9LGWort8xV0_dR.OhnQJhmjuBsc 9oIinp2hK1fR6VBZJthF5_gO2Ec_LX4HyhlnJbJtts4p8lgQTMe7REbczek3 JiKVpW7iC3Dl0cJmqyvbbaKQv_d6aYyCdG44SAiKQgTmIL6Q7kOxmbX5E9oX VHkWJ_n0X.iXcwGRTEKSP3N9Db.XTjTantv3oyhi4UKKjHCgO9L3K48vqx.y lykB.B__.iVEcJGgz2YelmZhbBJNrlsIo7PxJEUxWEzxTZXrAZwV5WM1ED12 7in.6D0uDbboS5zNAKWDInTs4lGmB48ZR_SPDK_.8iJUyJcPBLptswWDIfVy SG3KXeDQEq_gRLrZJQu.GvdtTETqw6J9MoijRpq50_OqvaiigEPjEVGea1.i 2NV5sTGYsiQuUkTJ0EwtBLKGaOcnFciopJ6uqRPA06N_bjwNg6bwirsb0.Pw TyM8CwA3kUeNU0ZAsAcZzlcdl56wTn12drIQyW0n7OP7S0lSvMdiuaGC_j4a NxJSv42fKw4LYMQO5OIPzV78fRppt9C0BSUplNoqZVt8Izbpi88gTHeIPbBd Zyb2SDqGMH9jiwZ5bWrrFCbgYSwl3tQfxosaZFrdf0OIQo901XDPItNnBGln b1o9tF_x8WLFMysnHJKkFaC0Duf0SBaJm4aHuia8YORRHroLa5yXpeLS6y59 WEFMio5sBul0wafKisJEVvqNHjXqzbAzfaehELW1CGdGkLU24xPfHgSA8vxA eqXvjzr7To3C8EkjD5lUYc3NBvtTlqALkVn68dQdQsag6x7JLFNcdac7JGMv oNECu157ZIvAfMtLBOV0OvC9nLIefLT0g_J8jUItQ32lvNCyl.D_2YSwpccJ AcP9rORLXX_lWEayqQq_5nrNbRCCqVtfXVRUQQYwP1bRTvXisvVzpPt1c73S 3bqDK_hTagtrLh9ePwchtdyyMd6EzPV4QOu3aFqkRTm57XswMGOlt7oqZhqk wio.Ss9vFlZffudcNSzbJyVIkseXhkuln9rOZe0MJ14LXV3wBx49OW5XVvPX AIb6lHsnsSEfOQ_EyOiYrvmr6M.zA9MjVNS6ciGoAjDICt35c..p9yBcEx3C IJWyVUBwpr9ahbKgag9UyARGPO52F2gQuE1UmZTpda31lkajMG.ABKRPfA9O 75Kr9w–
X-Originating-IP: [77.238.189.68]
Authentication-Results: mta1014.mail.ac4.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ird.yahoo.com) (77.238.189.68) by mta1014.mail.ac4.yahoo.com with SMTP; Thu, 27 Dec 2012 14:37:06 -0800
Received: from [77.238.189.230] by nm15.bullet.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
Received: from [212.82.108.112] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
Received: from [127.0.0.1] by omp1021.mail.ird.yahoo.com with NNFMP; 27 Dec 2012 22:37:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 965884.6310.bm@omp1021.mail.ird.yahoo.com
Received: (qmail 43155 invoked by uid 60001); 27 Dec 2012 22:37:03 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1356647823; bh=1SbVX8ahIFjSZR3xschcHhVMo6cKx+s+O0qsgJDfn88=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=ku28W2L4rzibEW8KJtxQ8GYY3RM9A2ysRyCDI2Gln9rf6xXk1lWOnKtbTMIIJazEsPbkuoYGbW5QhPyb8stsKii95Pitv0qXFms/i/j3yu6f20ZJk1yqJYZFu8o4FHUd/rIZOrSxXgO0hP0Tv0Z0ohOWTbhm6KDmDemVNqUgwOE=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=SwE6kjNZXtdDz4oisXUvfUkWuvKIwQMtTjCPaUvGZX1g+a1kloixYRBnYnLpM10PHrqlXbp5P0n/Q2fnRYk8ADDaUInNU0wJw5TF7LxaejP592OppJq8wF4GzljgrEKqR4d/FwgPUcycDjnS/pJ9NWMfoCNj1KQaXv0nnjMn3aE=;
X-YMail-OSG: a7CZw8EVM1nb9WgP6LjiWSeVEjNQvjeH9d6HH4HQwVNgho2 Yo454QVEoYdNFuzr.uK.l3dR3Cv.Dsa8amnGZAj6ylZn9ciNvp.JGiOuMA7O kMzUr2COJi5oHfEhJxsNrnx3l67pCUj0kES.IcUPALk66ryXMPiPelATHZjW jheZwLOczwYgem_oZGZkyfJwUyo54l8hkyLUvt4BJ.Linr5MnYn80kleDkbf x72B5ccMKFq.hc4SMdXR1tjKas2_SlDVr4gflKAbKC8PZy7gtgYi_QCSTJSn sbBawKc1HjL.YEEtHJ8tbpi6gNjrqAgc7lPL3QeJctjTZR6G.3FH3TOPgPFn DUQovSsYQbJDEiEZXrLOScPlRVX_gjEW.73r5k7Mwt8RS1Bh6fZB1JvsxGd_ 7D9fNBLRoecCPHV6kyertDGeUXXUPI4ScTmPDrLXwFuzNM5uGL8t3Osvfrw- –
Received: from [41.138.184.157] by web171905.mail.ir2.yahoo.com via HTTP; Thu, 27 Dec 2012 22:37:03 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356647823.42332.YahooMailClassic@web171905.mail.ir2.yahoo.com>
Date: Thu, 27 Dec 2012 22:37:03 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: SEASONS GREETINGS——-PLEASE GET BACK TO US IMMEDIATELY!
Content-Type: multipart/alternative; boundary=”1200650283-1721883567-1356647823=:42332″

41.138.184.157 >< 77.238.189.68

 
Leave a comment

Posted by on 12/19/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , ,

“Mr. Stephen Fred”

ATM CARD MONEY TRANSFER & COUNTERFEIT CHECK SCAM – NIGERIAN 419 SCAMMER

There are two email’s and two headers below. The first email and header was published on scammer419 Yesterday 12/17/12 – the second was published today (12/18/12) — Same scammer using different addresses and IP addresses.

EMAIL #1 –

TO: 4thekids1234@gmail.com, jlpurtee1218@yahoo.com, lschum6@aol.com, vikhadd068@aol.com, childcare4yours@gmail.com, jessicaspitler@hotmail.com, monkeyforthezoo@yahoo.com, angelinahudak@gmail.com, bruces_lil_sis@yahoo.com, pmiller140@woh.rr.com, chelli4dottogo@yahoo.com, shannonschapiro@yahoo.com mschutt5@woh.rr.com, phillips.april@ymail.com, ticktockclocking@gmail.com, aprilsplayhouse@att.net, lrichards7@cfl.rr.com, rosa8485@gmail.com, mommyme0107@yahoo.com, armstrongcare1@yahoo.com, albart@bellsouth.net, new.horizons322@att.net, thebestsweep@yahoo.com, missalisha08@ymail.com, dezy2224@yahoo.com, morgragedanielle@yahoo.com, joanna.sweet@hotmail.com, adenelly@aol.com, pratherjck3@aol.com, camillephlps@yahoo.com, cs09jedq@yahoo.com, baby_pmpn@yahoo.com, kmiller182@cfl.rr.com, kayladaniels90@yahoo.com, lisaconradi@gmail.com, confidence07011996@live.com, poncallinfo@gmail.com, myfamof3@gmail.com, kjg36@comcast.net, missrosesdaycare@yahoo.com, cooljet6@yahoo.com, anged98@yahoo.com, cowboydad75@gmail.com, crawbox08@gmail.com, sacpr210@yahoo.com, khusfelt1991@yahoo.com, dskupien@delawaresafetycouncil.org, primaryyears@aol.com, kidz1st@gmail.com, bonclaude1@aol.com, millerv25@gmail.com, krosieone@aol.com, poohcc07@aol.com, ironhilldaycare1@yahoo.com, bangelique95@gmail.com, truruler@yahoo.com, denisedr54@comcast.net, sromasko@verizon.net, portiabusaitis@gmail.com, portiabusaitis@comcast.net, dawnschafferman@comcast.net, elevatedplaceslearningcenter@gmail.com, gerlacht00@comcast.net, melissalee1209@hotmail.com, valdave@comcast.net, rgoo135623@aol.com, baybeesteps@msn.com, rhino_07@comcast.net, mseekids@yahoo.com, faithshouse@live.com, jeanneflynn59@gmail.com, rachel_vigil@yahoo.com, gspederson55@q.com, ptrcgzmn@yahoo.com, thomasjohn1088@gmail.com, earlybirddaycare@gmail.com, sabrinareiman@yahoo.com, letmcg@ymail.com, brandon.carson25@yahoo.com, christinamauro23@msn.com, katielewnard123@hotmail.com, porkyexposed@yahoo.com, mgfbower07@gmail.com, lonniejbeard@hotmail.com, aklittle0102@aol.com, jennywarn@live.com, leyadewey122@gmail.com, neen062964@hotmail.com, info@need-a-nanny.com, dork_britt@yahoo.com, tinytots80123@yahoo.com, caycestaubin@yahoo.com, ivana331@gmail.com, tstots@hotmail.com, bballvarsitygirl@gmail.com, alwaysforhim2@gmail.com, degutii@msn.com, tiffjowilliams@gmail.com, patriciacallan@msn.com

FROM: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>

SUBJECT: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!

EMAIL: Federal Bureau of Investigation Anti-Terrorist And Monitory Crime Division. Federal Bureau Of Investigation. J.Edgar.Hoover Building Washington Dc Customers Service Hours / Monday To Saturday Office Hours Monday to Saturday: Dear Beneficiary, Series of meetings have been held over the past 7 months with the secretary general of the United Nations Organization. This ended 3days ago. It is obvious that you have not received your fund which is to the tune of $3.5Million due to past corrupt Governmental Officials who almost held the fund to themselves for their selfish reason and some individuals who have taken advantage of your fund all in an attempt to swindle your fund which has led to so many losses from your end and unnecessary delay in the receipt of your fund. The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Nigeria his Excellency President Good luck Jonathan to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes. Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card?

ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $5,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2015. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account.

Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via UPS. Because we have signed a contract with UPS which should expire in next three weeks you will only need to pay $180 instead of $420 saving you $285 So if you pay before the three weeks Dec 2012 you save $285

Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $180.00 nothing more! Nothing less! And we guarantee the receipt of your fund to be successfully delivered to you within the next 24hrs after the receipt of payment has been confirmed.

Note: Everything has been taken care of by the Federal Government of Nigeria, The United Nation and also the FBI and including taxes, custom paper and clearance duty so all you will ever need to pay is $180.

DO NOT SEND MONEY TO ANYONE UNTIL YOU READ THIS: The actual fees for shipping your ATM card is $420 but because UPS have temporarily discontinued the C.O.D which gives you the chance to pay when package is delivered for international shipping We had to sign contract with them for bulk shipping which makes the fees reduce from the actual fee of $420 to $180 nothing more and no hidden fees of any sort!

To effect the release of your fund valued at $3.5Million us dollars you are advised to contact our correspondent in Africa the delivery officer Mr Stephen Fred with the information below, Name:Mr Stephen Fred Email:mr.stephenfred@yahoo.dk You are advised to contact him with the information’s as stated below:

Your full Name.. Your Address:….. Home/Cell Phone:…….. Preferred Payment Method (ATM / Cashier Check)

Upon receipt of payment the delivery officer will ensure that your package is sent within 24 working hours. Because we are so sure of everything we are giving you a 100% money back guarantee if you do not receive payment/package within the next 24hrs after you have made the payment for shipping. And make sure that you keep the receipt of the $180payment that you made because that is the prove you will show to the delivery team when they arrive at your door step with your package of delivery

Yours sincerely, Miss Donna Gwen FEDERAL BUREAU OF INVESTIGATION UNITED STATES DEPARTMENT OF JUSTICE WASHINGTON, D.C. 20535

Note: Do disregard any email you get from any impostors or offices claiming to be in possession of your ATM CARD, you are hereby advice only to be in contact with Mr Stephen Fred of the ATM CARD CENTER who is the rightful person to deal with in regards to your ATM CARD PAYMENT and forward any emails you get from impostors to this office so we could act upon and commence investigation.

HEADER:

Return-Path: <albanesi@dmghost.dmg-hosting.com.ar>
X-YahooFilteredBulk: 200.58.125.17
Received-SPF: none (domain of dmghost.dmg-hosting.com.ar does not designate permitted sender hosts)
X-YMailISG: G4vRLFYWLDtBXE2mxgWetbgPe68s2c_J4Sy1u3QrHo_wMTq2 7ltguaR_7OqUckxfw_6vp2Lr1Jg7Eu.nS2bLDg6fo4oYGP7MTDSxe12a7pKp vDuNtWg442ZrtozAbb4qwjv9yjVKzjc3q6SUJC3ROeRuYcRhx4ZTHNEwa9dJ RRunFvOz3W.7zc.2.2cpeXIR1pV74p_qpVqC3m7H8mdBoPRVTOHo4yAvFEyq HBGagGWmoRoWFUM6WeZcFGLRRd9yG4M2adkg0pGcbx9auO2ojmtRX.d4awpI tNrecy67Vucu5czgWkng.ADegJxE6eNLDqWhXtM8r1A7O_E267YruDaoRxO6 _sIUXJPaS8LB26kJPkafbJgK7Q9bXgF9ll5Efh6DIfA71GiZ_BFxWhGrotmy _KZxe6vxBpdwxzK0Rxlr8WrNY0QZMLOp0hD28W3sC.84e3mVvDE1o89.CZ5h 9jg8M2nfaP2qu3nHGA54gPG1P9JZx9oasJlLQdjhkEP6ND1NMGwvMf48kGMY 3mnmKiJxTzCRP42tdS7Y8Ho32JKgSZ3qE_UtRHNqJnXY6nt4cEAR35W0rrKt Rxajt4Z12QQVP6ynOi0a9qX6gOBgqHI0ImNxtkZaeznZBDB94jKQgd6rsgsf F.xd9S3BVrxw5c_tcsF2ZfpH5vlPphmuFtr.6wHtqPTbo1WcAAW3TzAVQgd5 P1qNkbouaz9T_2LDTBLWIumE0eZYfRwlzjApSWZq5xN7T443jat0wR.gnq8Y dJGDz8sxqmnuHdASS5COEyfmLADo5GME9Hr1nFYnYoUc9gMY6EgDUlovdax2 JWSXg640Sl6p_WEGbvRpunnYfKhxouArjEiZxy2c4lMKAGhYcq0JrGub358H ai9FMNMHAkRnf4b18ttxSIYK5obMdAtyW.Vw4jaqgXYO540R_KQljdv7peAg k9p124LIGZdkN7S_XKaNsg3O.ey154tsrBwhl14kTdz57ZxzNc7niAYFQF1V VUTONPpN4iNZT_t8.LcVzBcHhSjrqoWJ2SMpE28MH6cyiV8IsUDbddT1YIcM iZAV58stob2h.JyLctYJZ.g5G.VYjJubKffjKBTkHbCYZ1wNzGE8sWDDIJwo eRX04Jtt4F13ZI2AARhKdrG8DAr2NSIhIUoWXKs.qbgWrQgZleThlG8O6OOT G1avOrcRyDcNaaQxG32I
X-Originating-IP: [200.58.125.17]
Authentication-Results: mta1317.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=yahoo.dk; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dmghost.dmg-hosting.com.ar) (200.58.125.17) by mta1317.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 05:44:35 -0800
Received: from albanesi by dmghost.dmg-hosting.com.ar with local (Exim 4.71) (envelope-from <albanesi@dmghost.dmg-hosting.com.ar>) id 1Tkafo-0004nX-Uf; Mon, 17 Dec 2012 10:24:00 -0300
Date: Mon, 17 Dec 2012 10:24:00 -0300
Message-Id: <E1Tkafo-0004nX-Uf@dmghost.dmg-hosting.com.ar>
To: 4thekids1234@gmail.com,jlpurtee1218@yahoo.com,lschum6@aol.com,vikhadd068@aol.com,childcare4yours@gmail.com,jessicaspitler@hotmail.com,monkeyforthezoo@yahoo.com,angelinahudak@gmail.com,bruces_lil_sis@yahoo.com,pmiller140@woh.rr.com,chelli4dottogo@yahoo.com,shannonschapiro@yahoo.com,mschutt5@woh.rr.com,phillips.april@ymail.com,ticktockclocking@gmail.com,aprilsplayhouse@att.net,lrichards7@cfl.rr.com,rosa8485@gmail.com,mommyme0107@yahoo.com,armstrongcare1@yahoo.com,albart@bellsouth.net,new.horizons322@att.net,thebestsweep@yahoo.com,missalisha08@ymail.com,dezy2224@yahoo.com,morgragedanielle@yahoo.com,joanna.sweet@hotmail.com,adenelly@aol.com,pratherjck3@aol.com,camillephlps@yahoo.com,cs09jedq@yahoo.com,baby_pmpn@yahoo.com,kmiller182@cfl.rr.com,kayladaniels90@yahoo.com,lisaconradi@gmail.com,confidence07011996@live.com,poncallinfo@gmail.com,myfamof3@gmail.com,kjg36@comcast.net,missrosesdaycare@yahoo.com,cooljet6@yahoo.com,anged98@yahoo.com,cowboydad75@gmail.com,crawbox08@gmail.com,sacpr210@yahoo.com,khusfelt1991@yahoo.com,dskupien@delawaresafetycouncil.org,primaryyears@aol.com,kidz1st@gmail.com,bonclaude1@aol.com,millerv25@gmail.com,krosieone@aol.com,poohcc07@aol.com,ironhilldaycare1@yahoo.com,bangelique95@gmail.com,truruler@yahoo.com,denisedr54@comcast.net,sromasko@verizon.net,portiabusaitis@gmail.com,portiabusaitis@comcast.net,dawnschafferman@comcast.net,elevatedplaceslearningcenter@gmail.com,gerlacht00@comcast.net,melissalee1209@hotmail.com,valdave@comcast.net,rgoo135623@aol.com,baybeesteps@msn.com,rhino_07@comcast.net,mseekids@yahoo.com,faithshouse@live.com,jeanneflynn59@gmail.com,rachel_vigil@yahoo.com,gspederson55@q.com,ptrcgzmn@yahoo.com,thomasjohn1088@gmail.com,earlybirddaycare@gmail.com,sabrinareiman@yahoo.com,letmcg@ymail.com,brandon.carson25@yahoo.com,christinamauro23@msn.com,katielewnard123@hotmail.com,porkyexposed@yahoo.com,mgfbower07@gmail.com,lonniejbeard@hotmail.com,aklittle0102@aol.com,jennywarn@live.com,leyadewey122@gmail.com,neen062964@hotmail.com,info@need-a-nanny.com,dork_britt@yahoo.com,tinytots80123@yahoo.com,caycestaubin@yahoo.com,ivana331@gmail.com,tstots@hotmail.com,bballvarsitygirl@gmail.com,alwaysforhim2@gmail.com,degutii@msn.com,tiffjowilliams@gmail.com,patriciacallan@msn.com
Subject: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
From: Mr. Stephen Fred <mr.stephenfred@yahoo.dk>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – dmghost.dmg-hosting.com.ar
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [826 825] / [502 502]
X-AntiAbuse: Sender Address Domain – dmghost.dmg-hosting.com.ar albanesi@dmghost.dmg-hosting.com.ar

Mr. Stephen Fred <mr.stephenfred@yahoo.dk> <albanesi@dmghost.dmg-hosting.com.ar> mr.stephenfred@yahoo.dk

__________________________________________

EMAIL #2 –

TO: deleted@yahoo.com

FROM: “vikhadd068@aol.com” <vikhadd068@aol.com>

SUBJECT: Re: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!

EMAIL: http://oabfranca.org.br/entrance.php NOTE: I DID NOT CLICK THE LINK AS I DONT CLICK ANY LINKS/FILES RECEIVED FROM SCAM EMAILS.

HEADER:

Return-Path: <>
Received-SPF: none (domain of imb-m01.mx.aol.com does not designate permitted sender hosts) AQEBAQ–
X-YMailISG: fG83VQIWLDuwe8ej5n0IaROXvxrlzu18BJ2irW7rRnkNUMiR 0Ctsgto2LNAskyV2Q6ixNssLOsmnFDVOBVCrL.Ma4HX.zvoh5.y.Me6a47y1 Y.s4vBi98z.8nCoiFrNhF8AthsY6JNRIP0mO3NwL6he8knCzy63JqA9qhhqY FQRl4qMLiHM902WJNFvAOn.XvAyS6gBl90P7phn5AwFtzDAnWp7SjQKS8yd9 2cqKCaMlnKRjdDDXjb2Q70KZ_PcWA5mIrPPIPxX4lk8JBJe._gcgSX6kzAYp 4YvvqU7x6K6snhfvbJKtaMeaXIjmTDn.pLJ6GEKwthBTc3K6CzQF1pPdkRRD yra8kG4Jxtlb_RaSjcjAXw5qpiHxnBAx3Oek1rLM84NqcWLvSV3nRFriYeYV nhI5BWjm8wwT3AcOsJUwm97do1.YsTka4wRMCVD6cqiCuU2jAKvwx1uDI2.b RoFUQReDBAjwqAAHPZLlkdarxo05P1Uwq5jHR99zLNJlOjaSRiMEUe0PS9zs QDsD3ljuWathFexCSe6PKWbyt3x4XQhQYjJ8mtq3elH0LdNeIuahbPv6S4G8 hueVJ.bJ9cI2b2jYCsk1qnouy2MQDdlL5VbiPxDCWp7AsBes8Nb4BepjQsVR w2UcWs9.Sy1V065valQ1_avr4y87pRQOmtt5dWEaxIAO8bWhK4iCTfcE1cJY 20x8ZehazHdzyZAVwjK95yH6Y0LghsrH75EbuSGscuYeXfnXpPOU0lHJOYpM Smn8XIi4jgWio99h4HL5hAKWRirLVLu_X5PDmHnYDie5ONFtGejBROGsblcC rl9jhZH6AJlOWZyqVTRM5Ppp3S6YCnbXEAxRydb6MzVMCUdDrES1gAdSYuc_ i5b5UqWEyedgNzG5O1cUaG9VQQWVQd26QYIhUn1LH8p5cF1d4w9e3Y7VQQ8N MYYqmESf9lsGNdZFCRFIMXXUdD5OQpzT7199rPh0OAQ6e5FssdlgeHW5u8Oe Qm9rwYEstTmh6VWIAnHdJLj59EuoMNynb0YBxAks2F6YXhwIzblZ4az3IDAf 3UW5o76BBwQ424rwxaewfRAxh33BT18DwtTa_1U0vcIPi7ooZSfLIzHxatMM tdMmB1yNMhgNeqj41iMGVgytMBZI7HV5OTRdtnMQsAoEFr2MQitM8bjxFQ4k VUhdeQ30xHi1UVWyJwl9l8xmrHA-
X-Originating-IP: [64.12.227.42]
Authentication-Results: mta1395.mail.mud.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=aol.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO imb-m01.mx.aol.com) (64.12.227.42) by mta1395.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 23:38:11 -0800
Received: from mtain-mf12.r1000.mx.aol.com (mtain-mf12.r1000.mx.aol.com [172.29.96.160]) by imb-m01.mx.aol.com (AOL Mail Bouncer) with ESMTP id B186A382B708 for _______ Tue, 18 Dec 2012 02:35:08 -0500 (EST)
Received: from core-mic004a.r1000.mail.aol.com (core-mic004.r1000.mail.aol.com [172.29.104.4]) by mtain-mf12.r1000.mx.aol.com (Partner Internet Inbound) with ESMTP id 9ADBB3800008A for _______ Tue, 18 Dec 2012 02:35:08 -0500 (EST)
Date: Tue, 18 Dec 2012 02:35:08 -0500 (EST)
From: vikhadd068@aol.com
Message-ID: <52151792.8536.1355816108626.JavaMail.zimbra@core-mic004.r1000.mail.aol.com>
In-Reply-To: <1355816106.93122.YahooMailClassic@web161004.mail.bf1.yahoo.com>
Subject: Re: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Auto-Submitted: auto-replied (aol; away)
Precedence: bulk
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:335928000:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d60a050d01cac1b64
X-AOL-IP: 172.29.104.4

64.12.227.42 — 172.29.96.160 — 172.29.104.4

 
1 Comment

Posted by on 12/18/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

” FBI ” fbi-office1100@libero.it

RECOVERY SCAM – FBI IMPOSTER – NIGERIAN SCAMMER

Additional information at the end of this post regarding a romance scam by this same scammer, different scam.

Email:

US-FBI-SHADEDSEAL.SVG FEDERAL BUREAU OF INVESTIGATION FBI SEATTLE DIVISION 1110 THIRD AVENUE SEATTLE. 98101-2904

THIS IS ROBERT S. MUELLER III OF FEDERAL BUREAU OF INVESTIGATION (FBI). THE FBI IN ALLIANCE WITH THE ECONOMIC COMMUNITY OF WEST AFRICAN STATES (ECOWAS), WITH THEIR HEAD OFFICE THERE IN NIGERIA HAS BEEN WORKING TOWARDS THE TOTAL ERADICATION OF FRAUDSTERS AND SCAM IN THE WESTERN PART OF AFRICA WITH THE HELP OF THE UNITED STATES GOVERNMENT AND THE (U.N) UNITED NATIONS. WE HAVE BEEN ABLE TO TRACK DOWN SO MANY OF THIS SCAMMERS IN VARIOUS PARTS OF WEST AFRICAN STATES, WHICH INCLUDES (NIGERIA, REPUBLIC OF BENIN, TOGO, GHANA CAMEROUN AND SENEGAL) AND THEY ARE ALL IN OUR CUSTODY OVER THERE IN LAGOS NIGERIA, MEANWHILE DURING THE PROCESS OF ARREST, WE WERE ABLE TO RECOVER SOME FUNDS FROM THE PROSECUTED SCAMMER.

REGARDING THIS GREAT ACHIEVEMENT, THE (U.N) UNITED NATIONS ANTI-CRIME COMMISSION AND THE UNITED STATE GOVERNMENT HAVE ORDERED THAT THE MONEY RECOVERED FROM THESE SCAMMERS BE SHARED AMONG 100 LUCKY PEOPLE AROUND THE GLOBE. THIS EMAIL IS BEEN DIRECTED TO YOU BECAUSE YOUR EMAIL ADDRESS WAS FOUND IN ONE OF THE FILE AND COMPUTER HARD DISK RECOVERED FROM THE PROSECUTED SCAMMERS THERE IN OUR CUSTODY. YOU ARE THEREFORE BEING COMPENSATED WITH THE SUM OF $1MILLION DOLLARS. WE HAVE ALSO ARRESTED ALL THOSE WHO CLAIMED TO BE BARRISTERS, BANK OFFICIALS, LOTTERY AGENTS, PERSON OR GROUP OF PERSON’S WHO CLAIM TO HAVE FUNDS IN THEIR CUSTODY THAT BELONGED TO YOU OR WANT YOU TO BE THE NEXT OF KIN OF SUCH FUNDS WHICH DO NOT EXIST.

SINCE YOUR EMAIL APPEARED AMONG THE LUCKY BENEFICIARIES WHO WILL RECEIVE A COMPENSATION OF $1MILLION DOLLARS, WE HAVE ARRANGED YOUR PAYMENT THROUGH OUR SWIFT CARD PAYMENT CENTER WITH ZENITH BANK PLC.

PLEASE, FEEL FREE TO CONTACT THE PROCESSING OFFICER DR. MIKE OBARU. THE SWIFT CARD HAS BEEN SPECIALLY PREPARED TO ENABLE YOU WITHDRAW YOUR MONEY IN ANY ATM MACHINE IN ANY PART OF THE WORLD, SO YOU ARE THEREFORE ADVISED TO CONTACT THE PROCESSING OFFICER DR. MIKE OBARU WITH THE REQUIRED INFORMATION AS STATED BELOW.

CONTACT PERSON: DR. MIKE OBARU. DIRECTOR ZENITH BANK PLC SWIFT CARD PAYMENT CENTER CONTACT EMAIL: (ZENITHATMDEPARTMENT01@HOTMAIL.COM) TEL:+2348125279893

YOU ARE ADVICE TO FORWARD THE INFORMATION BELOW TO DR. MIKE OBARU TO ENABLE HIM SEND YOUR ATM LOADED ATM CARD INCLUDING YOUR PIN FOR EASY ACCESSIBILITY.

YOUR FULL NAME__________________________ YOUR ADDRESS____________________________ P.O.BOX_________________________________ COUNTRY_________________________________ TELEPHONE NUMBER________________________ MOBILE NUMBER___________________________ FAX NUMBER______________________________ OCCUPATION______________________________ MARITAL STATUS__________________________ AGE _______________ SEX___________________

OFFICIALLY SIGN.    ROBERT S.MUELLER III FEDERAL BUREAU OF INVESTIGATION J. EDGAR HOOVER BUILDING 935 PENNSYLVANIA AVENUE, NW WASHINGTON, D.C. 20535-0001, USA http://www.fbi.gov/about-us/executives/director (fake fbi website. I am keeping it on here incase a potential victim uses a search-engine.)

HEADER:

Return-Path:   <fbi-office1100@libero.it>
X-YahooFilteredBulk:   212.52.84.102
Received-SPF:   pass (domain of libero.it designates 212.52.84.102 as permitted sender)
X-YMailISG:   xAtmkYEWLDvD0iBY2KNVvnzKATvf2rmIHFIADQoJJMosMAvJ my.Jfzk7bNiaJvj64Ho6AJfKr9R1oToqR9zlNnXOgGLmEre.RoQd1KFo8MO. 6PU_m0juNZ48raeERM7KHpLz_TfqBH2Km1F0iDYk4cwmgg3Yn33PJwJu3DnM vN3WA9crjid3TJlpmsZm_ZziohvZkVl0LhiMfDWf23rA.h7I1_h0BVzMNq7g BJynJp7yTevnB8UUzjxgoZwwqFKCI0oZ.ng7mS4Enp8C_f1PFwhbc5GfBp6O IkJy1nxQ0fAFqU4iIvrFqwuKqoQWJjLDTR9sXmMths6fpSosVcsJtKEPez9K P6oyzjQ.NbLDsz16NMhE4h1NCXmsbuZLy51MM3yG2bxT3R.jo04is92y9hJb xTJkBXpDVaJe0iZEpVMkiNSZ8i0swhQs1933AnuX2eX5CXgQyWBcrIj3VSy6 bSgXR6CMNIvtIhJ0zz5_aDFV_oRLilAt8IH5xsi9XR2XnczxHZ0ZOcISuSuy cUYT9_7f3On.1oY4O.56xbBo73_88iiP7uiDUSsfMonq5X7ngm260dwE0DaF HnPS3qbR5J93dpJx0wpVRptSFmzUnoDZ_CGiXbineduNHB2eR0or5SrmeNXv BYwZ3VjaoCrPyxMb2nBKH798BjkY.Bea6ez_cEXKpKYylH5mKfFyuCH6b1oK nAKIhx_fldos1FW.8mP4Nz3Mcd1OpVnjnkBZeiOkrLiWCV1jkaRyWXx5XNHd R1uXpiQCnsZAthbAIAyZsU6C.5Ki7ckEY2Mg1nfL2AaulFbgM96IEGi7SqIF dkE4Ha9PV7Ampe5g3Nfz5twkwEVwcM_5oliaVjYNaAHGnezm03WBr3TthvSo qqUbOdE.huUlRdLsaiMYb8jjrGGeH8WDvXZ9NDzDyCW_Rt2iZibfgpCAO7S6 kqsAmPul7ibaj8iiWLIMia.OwQE7JARPN0m7iZsrC6_wne8Beb8FHsGLvMKJ 4zKZ8IT4Hhz6Ien3cGlfTPoZMkXZOZmIpiK2Qdd5hhILkhDFAkECZItupWzP 5uJzRJqNO67KtmhN_VnQlxbwz0KB_hcKHTumnJeAxn.XxXK5ENz8ukLuoGrC wEj_YYllwKpnP_xrnTYY7vAWzmXKD0tCBCdAtswAuQLlc2lCBsu5i_LIp9ox EH.si_2gIbug99h1gRq6uyfxLblSLkoijVHuxynBW.oZU7wtTPvTSOWjY1b3 6bGsOUdGk4GVDeZ89C.LUvcgx5sI1B1vW6VdX8WiggddY15uA3XK.a8g0Drl .JgxEIhczxPal4C6cs1NfUDSb89oBBFsxTx9hj_KTWiqeHxwATvYbDyThMF0 hZ5yN4vzhj6GNog6TAkfkWXl3Yy7rY_gQiTPb7y3VuhlrjL5x9t6ySoYYbJN 8y3WDq6YQfBWrdIH28qPy73FOx_Bk2bvA1QvuCcfM3wDJa1_7PawPAdNX1mZ 4TRD3tMHOab4NC0Oc79D.uKzieP31FrQ_vFGW19c4Wi._JpKAdCRuh5SMCOX EkM._vjyhmVKyGohrXRGk3C69Rv9nQoBSsoy5nqnP3mUTyqeEZA0ISjrYNyw 2N2SYL3Z5rj_550.MN3DEOMRJ1BMBu_cr0MnHzVfs6Bt
X-Originating-IP:   [212.52.84.102]
Authentication-Results:   mta1192.mail.bf1.yahoo.com from=libero.it; domainkeys=neutral (no sig); from=libero.it; dkim=neutral (no sig)
Received:   from 127.0.0.1 (EHLO outrelay02.libero.it) (212.52.84.102) by mta1192.mail.bf1.yahoo.com with SMTP; Mon, 15 Oct 2012 04:09:59 -0700
X-CTCH-Spam:   Bulk
X-CTCH-RefID:   str=0001.0A0B0208.507BED78.0140,ss=3,sh,re=0.000,fgs=16
X-libjamoibt:   1821
Received:   from wmail74 (172.31.0.38) by outrelay02.libero.it (8.5.140.03) id 50764619008E2E89; Mon, 15 Oct 2012 13:09:54 +0200
Message-ID:   <27451027.1527241350299394356.JavaMail.defaultUser@defaultHost>
Date:   Mon, 15 Oct 2012 13:09:54 +0200 (CEST)
From:   “fbi-office1100@libero.it” <fbi-office1100@libero.it>
Reply-To:   “fbi-office1100@libero.it” <fbi-office1100@libero.it>
Subject:   LEGAL MAIL
MIME-Version:   1.0
Content-Type:   text/plain;charset=”UTF-8″
Content-Transfer-Encoding:   7bit
X-SenderIP:   196.46.245.24
X-libjamv:   zn1mBWAiz0I=
X-libjamsun:   dpN/pSNPH5urOmpbGr9iSSTqQoO028QCt0Pe4TZ9g28=
Content-Length:   2999

702303213 ZENITHATMDEPARTMENT01@HOTMAIL.COM

Email-Address: fbi-office1100@libero.it 

IP: 196.46.245.24 – NIGERIA (Lagos)

IP: 41.206.11.37 Lagos, Nigeria

IP: 192.168.34.227

212.52.84.102

animated gif

ATTENTION: 

A Nigerian with the IP address of – 41.206.11.37 – commented on this post, I didn’t accept the comment but I will post what he said below. Also, Lagos, Nigeria is where the comment is originating from which already set me off, but I didn’t want to post him unless I had some type of proof of negative activity. Well, I found warnings from this scammer who using the name “ Elias ” – upesaspelltemple65@yahoo.com –okdousplltemple@yahoo.com (notice in the comment he puts okdousplltemple@yahoo.co but forgets to put the “M” – Somebody needs to tell this thief that only 3rd world countries believe in that spelling casting nonsense. Of course there probably are a small amount of vulnerable people who do believe it, most of us don’t believe it.

Sneaky little rats, below is the comment he sent. 

“this is a spell caster I contacted 2weeks ago. he is really great. I have been scammed initially by other spell casters of almost a thousand of dollars. I am not rich, I work my ass for this hard earned money. But my sadness was turned to joy when I met Dr.okdou he is really terrific and you will get results for whatever you are seeing he for within very few days. he is so honest and sticks to his promises. His contact is below: okdousplltemple@yahoo.co  ”

Also below I’ve posted the names and email addresses of scammer(s) who have sent scam to (potential) victims under the host IP address which is used by the scammer to fool victims into thinking they’re from the United States. The host IP is 207.46.202.15. — however, the scammers REAL IP is  41.206.11.37 which is originating from Africa (Nigeria) — Any questions feel free to ask.

“Elias” – upesaspelltemple65@yahoo.com – okdouspIItemple@yahoo.com ← This Nigerian Scammer is scamming under the following names/email address/etc below:

1) Gerald Moris – geraldmoris50@yahoo.com –

Image

Gerald Moris is pretending to be this man posted above. He tries to lure vulnerable lonely woman on dating websites then tries to scam them out of money.

Host of this IP: 41.206.11.37.vgccl.net >< ISP:MTN NIGERIA >< IP-Address: 41.206.11.37 (Lagos Nigeria)
Contact Email: hotmaster@mtnnigeria.com ><

Organization: IP Block Assigned for MTN N Corporate Clients

Host IP is: 207.46.202.15 which is listed as Beverly Hills, California ><

Host name for this IP: – 1661882.r.msn.com >< 1654287.r.msn.com

Registrar:Markmonitor.com >< http://www.markmonitor.com

Referral URL

http://www.markmonitor.com

ns4.msft.net
ns5.msft.net
ns2.msft.net
ns3.msft.net
ns1.msft.net

41.206.11.37 <- This Nigerian Scammer is connected to the list of IP’s below. (this IP is most likely in some internet cafe where all the cowards meet up and spend their life on the computer trying to rob people.)

te0-2-0-6.mpd21.fra03.atlas.cogentco.com IP: 154.54.62.217 130.117.14.214 (130.117.14.214) 188.138.112.3 ↔ 212.193.237.224 volkan@msn.com 213-152-230-91.mtnns.net – 213.152.230.91 —- xe-2-0-0.mpr2.lhr3.uk.above.net (64.125.28.93) 41.220.75.237 (41.220.75.237.vgccl.net)- Lagos, Nigeria 41.181.77.95 – South Africa City: Johannesburg

static-ip-188-138-112-3.inaddr.ip-pool.com – 188.138.112.3 – volkan@msn.com

_______________________________________________________

ANOTHER SCAM EMAIL SENT BY THE ABOVE SCAMMER –

Fake FBI Scammer is also ” Juillet ” A.k.a ”Romance Scammer”

Hello Dear,
my name is Juliet,
I am, very happy to contact you, to day
i wish to be in good relationship, with you,
and i will be very happy if you can reply me
through my private Email: juillet kamala@yahoo.com

return-path:
envelope-to: scamdex_dmca@HUN1P0T,paypal@HUN1P0T,scamdex@HUN1P0T
delivery-date: Fri, 05 Oct 2012 19:52:55 -0700
received:
from outrelay03.libero.it ([212.52.84.103]:37683)by lester.HUN1P0T with esmtp (Exim 4.77)(envelope-from )id 1TKKVa-00050G-BB; Fri, 05 Oct 2012 19:52:55 -0700
from wmail12 (172.31.0.42) by outrelay03.libero.it (8.5.140.03) id 506C837E0059E570; Sat, 6 Oct 2012 04:52:50 +0200
message-id:
date: Sat, 6 Oct 2012 04:52:50 +0200 (CEST)
from: “23456789juli@libero.it”
reply-to: “23456789juli@libero.it”
subject: hi
mime-version: 1.0
content-type: text/plain;charset=”UTF-8″
content-transfer-encoding: 7bit

___________________________________________________

none (domain of dsnrelay.libero.it does not designate permitted sender hosts) YWdlL3JmYzgyMgMDNQ–
X-YMailISG: nmmVK2kWLDtJxNGdAzHdbyoPWiscf9Y5sfY.IakKrUePMq1t 32dtFcrQ69cMcj_2gGCfyQi04cyKGiaFNndEglLACJX1urKbjLisdKVhhdiH WS9pLOdM7ZeGRZfVqIzd46A5Ou2v6IjJ0eZXK75uMoNSZBErVXqTHjmrrKWX GDsqpJ102bTmiFTBRpPHzW6QSVj1UVgXKUbqiHguH5Hm69ylMuNdMuD8Sth7 jlGwrcLyp8VvoKh82cW7pfDcS60Mw6MIWeAPepfGDPTUHuQk21e0ZL4kogpi 8mLfjiUj4kBxiIlGDggSEwCiJR4wrGLErZ.FJoMy.SnBYRMugb_cB7yZKXWq mKLNnNDrhk4NVL3szpFMl7JQhSa_vzL6jPGr5IxAL_YFtGBXb5NPQ6.zNnEF MkfT9dEJfN8kZv._yaGRtbataqLzoKDVtzE2MhPxrYwlwSpNK3qV.ZSiT0l0 K234WioX7_NqP2uKDIx63p.01CBzzgu2iwD5scbOhr_9gAyqyg12Z6rMO9G0 _2eWEoPC1JmZRkEbGhxoMi0rkHn6ms0Mm4qyEuDmUBjYGvbJKN57I53n.LoV T9zumu.iZeEdrj97uBe1LvDSB.5DEf.I8_Vu72n2V.l4eUFHz2pCc6la7PvR wo72kNlDMaG_U7kN03_hdwvhW81yJFrCCVCgehNDuOKcPnAZKqdzwS0X3855 lJ4MFsbsX1gexEdgQGkA1rtKHEtcSgzqbG9RwarfalZFu_bLvbRbnn2RcxRV KqquWHlheHedyaZZutNXelnZ1k9IzbqJXmt4JNGH7LBkxC5xliIOsjQtORMM x4aYPSy1cIcrBY_ziu3XUvw-
X-Originating-IP: [212.52.84.43]
Authentication-Results: mta1318.mail.gq1.yahoo.com from=mailrelay11.libero.it; domainkeys=neutral (no sig); from=mailrelay11.libero.it; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dsnrelay.libero.it) (212.52.84.43) by mta1318.mail.gq1.yahoo.com with SMTP; Thu, 18 Oct 2012 00:07:13 -0700
X-libjamoibt: 1020
Received: from mailrelay11.libero.it (192.168.32.95) by dsnrelay.libero.it (8.5.133) id 4F5A21B7479B2052 for <>; Thu, 18 Oct 2012 09:07:11 +0200
Received: from localhost (localhost) by mailrelay11.libero.it (MOS 4.2.3-GA) with internal id MLR71868; Thu, 18 Oct 2012 09:07:11 +0200
From: Mail Delivery Subsystem <MAILER-DAEMON@mailrelay11.libero.it> Add sender to Contacts
Message-Id: <201210180707.MLR71868@mailrelay11.libero.it>
Content-Type: multipart/report; report-type=delivery-status; boundary=”MLR71868.1350544031/mailrelay11.libero.it”
Subject: Returned mail: RCPT TO:<fbi-office1100@libero.it> Mailbox disabled (from ims4b7.libero.it)
Auto-Submitted: auto-generated (failure)
X-DSN-Junkmail-Status: score=10/55, host=mailrelay11.libero.it
X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A0B0201.507FAA9F.0066,ss=1,re=0.000,fgs=256, ip=0.0.0.0, so=2011-06-21 16:49:39, dmn=2011-06-08 23:29:05
X-Mirapoint-Loop-Id: dba025d3596373ad78331c32509687d7

192.168.32.95 <> 212.52.84.43

mtalibero17.libero.it [192.168.34.227]

—– The following addresses had permanent delivery errors —–
fbi-office1100

“fbi-office1100@libero.it” <fbi-office1100@libero.it> MAILER-DAEMON@mailrelay11.libero.it ims4b7.libero.it

 
1 Comment

Posted by on 10/18/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: