RSS

Tag Archives: Fraudster

“Office Customerscare”

ADVANCE FEE FRAUD – LOTTERY SCAM

This post shows 4 different emails from the same scammer. I’ve been scam-baiting this one but stopped over a month ago and I still receive emails daily so it’s hard to keep up. This particular scammer(s) always emails under different IP’s and email-addresses so I have posted each header in order as well.

1st EMAIL —

WESTERN UNION MONEY
HELLO MY DEAR
THIS IS SEVERAL TIMES WE WESTERN UNION BENIN REPUBLIC ARE SENDING YOU THIS THE SAME EMAIL TO START PICKING UP YOUR PAYMENT AS WE TOLD YOU BEFORE THIS INFORMATION REACH US SINCE LAST THREE WEEK AGO FROM OUR CORPORATE HEADQUARTERS ECO BANK WESTERN UNION,
STATES THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST $5,000:00 FROM YOUR TOTAL (FUND) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND PAY WHATEVER YOU HAVE FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM $250, TIME IS OF THE ESSENCE HERE,
SINCE YOU DON’T HAVE THE REQUIRE SUM OF$250, SO GO AND SEND ANY AMOUNT OF MONEY THAT YOU HAVE AT HAND STARTED FROM $40 TO UP $250, WE WILL ACTIVATE YOUR MTCN AND SEND TO YOU TODAY, UPON RECEIPT OF THIS PAYMENT,
BELOW IS THE MTCN OF YOUR FIRST PAYMENT, SO YOU ARE TO TIPE WWWW.WESTERNUNION.COM AND PUT THE SENDER FIRST NAME AND SENDER LAST NAME BEFORE THE MONEY TRANSFER CONTROL NUMBER (MTCN): THEN CLICK THE STATUS THEN YOU WILL SEE THE AVAILABILITY OF THE FUND ONLINE BUT IT CAN NOT BE PICKED UP DUE TO THE TRANSFER NEED TO BE ACTIVATED OKAY

1.WWW.WESTERNUNION.COM
2.MTCN 0560139994
3.SENDER EMMANUEL OKOYE
4.AMOUNT $5,000
BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST 5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP THE BALANCE SUM. SO I WANT YOU TO SEND THE AMOUNT YOU HAVE AT HAND. WITH THIS INFORMATION BELLOW. AND UPDATE US AMOUNT THAT YOU SEND AND THE MTCN.SEND THE PAYMENT DETAIL TO THIS EMAIL,(officecustomerscare@yahoo.com)
1. RECEIVER NAME… Ikwunne O Anthony
2. COUNTRY… BENIN REPUBLIC.
3. CITY… COTONOU.
4. TEST QUESTION…HONEST
5. ANSWER…TRUST.

THIS LAST NOTICE TO YOU IF YOU FAIL TO SEND THE MONEY TODAY YOUR PAYMENT FILE WILL BE CANCEL FINAL SO RUSH TO WESTERN UNION OR MONEY GRAM NOW AND SEND ANY MONEY THAT YOU HAVE AT HAND NOW START FROM $40 TO UP $250,
CALL ME ON THIS LINE AS SOON AS YOU SEND THE MONEY  +229 68377742
DR.CHINEYE NWACHUKWU
OPRATION MANAGER.
WESTERN UNION DEPARTMENT
PHONE NO.. +229 98677751

2nd EMAIL (RESPONSE) — Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

3rd EMAIL (RESPONSE) — Hello my dear you can go ahead and the send the one that you have at hand ok waiting for your urgent reply with the payment information, good luck?

(The 3rd email is the same as the second but was sent on a seperate day with seperate header information)

4TH EMAIL — ATTENTION BENEFICIARY; THIS IS TO INFORM YOU THAT WE HAVE CONCLUDED TO EFFECT YOUR PAYMENT VIA WESTERN UNION BY $5000USD DAILY UNTIL THE TOTAL PAYMENT OF$1,500,000,00USD IS COMPLETELY SEND TO YOU.THE DIRECTOR ADMINISTRATOR OF FUND RELEASE HAS ALREADY SIGNED YOUR PAYMENT.NOW CONTACT WESTERN UNION PAYMENT OFFICER WITH YOUR FULL INFORMATION TO START RECEIVING YOUR MONEY AND ALSO FOLLOW THEIR INSTRUCTION.

YOUR FULL NAME :::::::
YOUR PHONE NUMBER:::::
YOUR COUNTRY:::::::::::
YOUR ADDRESS:::::::::::

CONTACT PERSON MR TERRY SAMSON
E MAIL ADDRESS (western_union09@wss-id.org)
PHONE NUMBER +229 98841150

Regard
Mark James.
WESTERN UNION PAYMENT
SECRETARY HEADQUARTER

1ST EMAIL HEADER:

Return-Path: <office_dooog@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.73
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: YTQQLVYWLDtr8GvJiSxswwRjP7wnkQFwbp2etVmaNl0FiaXv WEWUyzcgnOMV_Qxqdh9W6bDVUk0oJ2n4H_.OqH3FVMd.Y5SeQLY8WPB3FzvF PDksuUJsc8jsOTNRuyWFfYR3l5wAZDJgIWuiiGdSmgdTu68C3rqyg3O3KdWs h.EODC.8..TyOEAnTAvAstMaGS8Ncy0SIJObOaOjtoBxXs6HTVJjL2nLqQq. V8jcqhibon.BQ9tsji3ubP5LyOllUnFxk7kElsMu7n0vVWWSlivsKIy_S5n1 TnjjQsj6Z6unrH0LPjxjeSxKbAjjeU63LUw4W.D9he2EEs26JXAWNlSyN_RA mHtPVevectbOeAKgC.m._frVA4tVlBJnUDlnVGkTYGWpICSFxTT9LPW_EEeJ l2XotLG4IwrFUfDfi_oT5YhbAo7jPwjxliFYxO_jm1h_wnaqEAIoQUqbckjp VIOOy.9bM6cUUjn4sXuLElKl.HyFw3R3uBNExQYnmx4RLVovyUrURD0ciS64 y4A8HjS0d8vV45llBD7G.G.oahtQT4gZsScBryrPWxrTQ3pLGp8tSk2zK.n2 eeTHvEQSRnZIbN0eOuFt75vrczEzEp24_Wxy.kkTt24Ghr67RLbx14T8AWJX oN_fjH0I4fLe4bZg9kWJjC5AIUtbrQ2yjsGa8Rqmniy4tDcDdplQBJNCIttH Y6iPtc8dzN6XRG89qgna5ydQU4LybEz.EW03VSf5bIAK7G7wCnLMhQCLLxgk ly1aVYK.aBw2ZGGdBfsnGxEQGmjWgPW9Y8yaS38MKaKk5BlVKjdKTv4Du9tr 7v1Q0Ahg1rbEQYh8bXhTn4R03SCnAeBhjAproiLkSzIk_nlJpbqzYS_tDYFN eublP_kgPayXAilWx.ksYpuHs_SFNkLaI2tWIn4oFvj8Hul6cqhvS1pJwTK2 8xjAkTjf5BRCJ73jx3wjykpTf9CXKVLe4qVn43MdJwIGfeb9p6tuMcY5ae7w c0GAOM3ZK4N_pO93ZKX2sJA.aGW8uNMDRTGyX1W7L7EKmy.ZYJQMjrOnd1Pp 8VcXJpyj7WUoKAXFir41peZR3kuJAGhW1GbparzRRCsM53A5wxeRRRvbeQlP o9SRMR9hJ7G68eklKQlZiNlLHYAN75iIROMHam0GQkoQl658wOksxxV0w1yE mwld8PgOs6.ieT5hfoq6JOm_CZnFaWvDCuNdzu7iw15xSb996aG1QW0ovKDm ivdO.r3OOe2nezrbgWHscU8DcPD0SD__8p7aOAMpHGW.0iovFBMBhXwhAkfD _c5Tjzjt4SpvsBLMK1O5olWM9ZTOgPGebcxgdbmbvX9l8w–
X-Originating-IP: [203.188.201.73]
Authentication-Results: mta1299.mail.sk1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm9-vm7.bullet.mail.tp2.yahoo.com) (203.188.201.73) by mta1299.mail.sk1.yahoo.com with SMTP; Thu, 15 Nov 2012 00:06:47 -0800
Received: from [203.188.200.142] by nm9.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 15 Nov 2012 08:06:45 -0000
X-Yahoo-Newman-Id: 597653.91745.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 1033 invoked by uid 60001); 15 Nov 2012 08:06:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1352966804; bh=sqgSO8xP/LR+hXQMdA2e6Ah1eNeIaTHiSoq/jXQJhqw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Yws8UW5RVEL2oPJjowNq8quCXz9OzL0CxZrfGMUtTLq9P49zyzmh4cHIIaccgUS6cadGW2uanBjRYI1LgN7qnDfXWjIk1fJUorh8XSrtSnhaoUyUmvLuinqV/FZQLQV6ArVs06/OCE6rJG6RrChDzUt4hI5ALQRFiJ3ZkZnKHy8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Lytcrsw3vUiLafw/lAGi2G0Q0Tb6yrnlT4ruv+ReTjQFhJriBDR+YxFNsAJmBt2mYpnus+zpYYvm4eYTFIsF0fqvBhc21W3x1a+iiSAPgC+CPtqGdn9cWtDgfR5n6UI9cuY9jwzCd+BU5PzXNKOXbca69Rp1IZVW4Uh5V+L0jKc=;
X-YMail-OSG: O7Gnv7UVM1lkD_jTVvQ9yvdVYlFxea2vZYOteXXHXMW9Qko jdT9UCaq6
Received: from [41.216.44.199] by web92416.mail.cnh.yahoo.com via HTTP; Thu, 15 Nov 2012 16:06:43 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1352966803.94317.YahooMailClassic@web92416.mail.cnh.yahoo.com>
Date: Thu, 15 Nov 2012 16:06:43 +0800 (CST)
From: “DR.CHINEYE NWACHUKWU” <office_dooog@yahoo.cn>
Reply-To: officecustomerscare@yahoo.com
Subject: WESTERN UNION MONEY

2ND EMAIL HEADER:

Return-Path: <officecustomerscare@yahoo.com>
X-YahooFilteredBulk: 98.139.212.254
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: VLLNlMkWLDtUbQTbov0porruXohSlGjiyaNfjajWB0Cduvem OEGnfKhhlF4xKrU2tbM7tHSjRtnksOtCmBni7.2lTKxqM.zJc0kyzLSmp0nG i_CbXXHC8eh56HcFkIULD.BdzbjU3UfTNf7R.IJyVWYbK4FdG2DbERiFQ4AL 2W3kyMd2NrGNWVi84alfEJaPHmLcuiCe1dLIUuBMMg3BNKZYFjFuj1Cbr1QS fmYvDQcEL9QkVQFRA1r4HQalx1x.gCGsnuJ2c9o5WMKTqxEw1lfIpbsWdvZb 0oKivkDXKT0HKUzKdomv4xD1rCw13jYJ0yXJK0BLZfjeePYsPyENUOsfKq9Y Nsoj1dG59zkCJKyLFnd4kgct.GcOBFGPoqpevxYvub8VNcT0gOhnFqLdU38G 72Wja4aTwyX2PGzlzRnU6lmTFEBVcSg3lAYandBAzew3G7Yidyq9q1dnArb3 aue0WfEzyULn8QnrFCgUnH0L2oQF5ev9nBRp.V7MwiTHNOL02o3SMhpcTzSL 52bdZyM3GnxXlVmICHIGyw3cjZkp4_5N.3WtCcf84ScjcaJVKOWt4ReEQVXz 1BtjyULP_fiWN1GESbbrTsmE5WwCpijqJaFqFw45b6wli268.1f0LfkNr.4z YlGykrhi5NCIpY_7esUOObjfjns3nvhb2j5mCdx7_hWj9lolzI2w0DcE3rdp sgN2GDBvVZ680RMztbImaCT.cTURBiiCwvdgTcUy0Mu0E.lTCpJPstDT6ZlW Di1Hoob5dN4ln1HGBipY7Z5mrwTFmtlfI1gjFum_SEDYSmuHGh7eTWZ.BoSU ..k.g0Z8apbapJclKdfT1VK5b1PTmnhtp0OwH3TkTAIf_pAo19ji1fUKzKDZ EMdkEFWD_lfFSXaZjN5LQxHHk0l0N6rCojsf0_lY0srKWve2SaahYAwGBjAV tPNotMOJ51vzMiyw9Zlgyn_jFQ6KxZb5_8Jf8wqtd85wZFjSV6QXpmyxDCKT BahVlS5eGljKzuKTRb0dPV1.M9TxnEImZOHOKCzELtPfnvAeYRoQI25sr133 QlJUxK4HOn1WdLoMNCYBk5J9fmNaV4mS4MQtnFmyIz6wEMbpqkh5CYIrF_8a 5wUl2MuedcVKiMKjzJ2tIETeEsnKcOIDytHmAkQDqTOW2ji6B9lvQQmqB4Ad A9EnFyF4tcz6dmhzNuJh.b_dhtlKSZ.m4PC6WeOEvnrqaf5k3Sy5nN11UGqE 6ok1.QuDzlLWvjzFTfU4a4QZxV5a7pd64zvhBsFGvxUQSVvpBL.8YqBW77Wu hit9.w–
X-Originating-IP: [98.139.212.254]
Authentication-Results: mta1227.mail.sk1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15-vm0.bullet.mail.bf1.yahoo.com) (98.139.212.254) by mta1227.mail.sk1.yahoo.com with SMTP; Sun, 02 Dec 2012 22:55:27 -0800
Received: from [98.139.215.141] by nm15.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:55:26 -0000
Received: from [98.139.212.223] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:55:23 -0000
Received: from [127.0.0.1] by omp1032.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 06:55:23 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 790906.43532.bm@omp1032.mail.bf1.yahoo.com
Received: (qmail 63457 invoked by uid 60001); 3 Dec 2012 06:55:23 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354517723; bh=D22VWzs/hPiPuo7CTSZY9WVrAb3WF520cs1fAxQD+yQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=M+WHRGyJ+Obkc6ezHvdZOt7XhENLPL3udu25sOZBN2bEv8bvyklwtQ6DLpmKzRRpBXOT706jn4vx+mPHl7Ss1QRzP9+0Wo6Ei7G3drwBg4JNSK0krATXorvXYUy6GzTqTOR3umwdQ0HSFEkjOZOm/e7lrZzQypAAF2HsfzCs/yE=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-
Received: from [41.216.44.199] by web161601.mail.bf1.yahoo.com via HTTP; Sun, 02 Dec 2012 22:55:23 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354517723.57854.YahooMailClassic@web161601.mail.bf1.yahoo.com>
Date: Sun, 2 Dec 2012 22:55:23 -0800 (PST)
From: Office Customerscare <officecustomerscare@yahoo.com>
Subject: Re: WESTERN UNION MONEY
In-Reply-To: <1354346435.35920.YahooMailClassic@web161004.mail.bf1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”-83809723-1967636313-1354517723=:57854″

3RD EMAIL HEADER:

Return-Path: <officecustomerscare@yahoo.com>
X-YahooFilteredBulk: 72.30.239.148
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: 19QBmTwWLDt95EV2ebP6OidYWqd1j1U2Pdisxv.rlfwDDGY5 69ILUE_kjRPOWAe40.wXl4PoTGUhChdXTKcgusQIibh0IPY_D0Ei53Wrj3P2 DDAmqC8G56tWm3H_2xzLI52rgBO8bDRU9eSbv2pm3Azd_QOUM2JKPXkfNgvF tl4uGNQOLg59unuxlWy7GcvTf7k_qoqXCzJmrjoh8hal1wltXqDrPCdnPvy. gFAaiJyTkAU00qxgTiQBoHammaTYZ4ZKrv1Bj7dJ1Ay0unZZGeZ_8m2Gszaf Hwkx24CP1NPhsf3bn1yuJzkA3iUs9lmwihY8jKVEyWkaKzas.DMkI_qi4SpH ZcprZOz7Wo6Ip0Xe7ngKq.DJvGhyKa6y3Mo9rBfkwPSE1QwldTeMrv.HiKNc J7.fdByCHPm9iuieID3uhsZuZxJJIk_dE_HSPw5N3kU3zc7fJYmx.cnjr3Wf 2ypCCkWSg4Xl.J_9t27tMPFXSJSoGwnm1vLC91UKaZD.u1dtZUXXxB5tay_6 GXotgxrPGmqkwvJ1U.b3XhbbjAW7JSmUeiIRB4cduWQUVHj_rnXP_czMPQVD 4N5bIlcCPjZh3eSRW3gf3AEFVFfPfJx8dm3puMNiCNIHEOWM.KXpLJkyXgwj CXCCZTVhjugOJr6sn4MUCKseOTSyKsr9xa8mUcQ7Ob3w7yUH9YsolFteJokZ 791VNvwM.fuDRTa4C7_GNiOQkrjQtbT08_fPhS4e5p8AUbAPtXoVVhGyrysS WNwPxxltk8XRhk_dX67wDsZjyOfXPmDB3HLalZHqy18lbOcSTBFWISoihgww mPfGu3xD9UWTgN63IDe.rcwpwuXNg9AUAD4WI2TC1TkLuaiTIMBHc1hUskD6 YD46YkgYu9COqzPN4SopL_xQJrvUF.PV5BY4NQB5A_ZB2qJd1gRrxiH7F2oM WMR0CXNOYrY9TXM7XVLamxfO0CSlGMEfV72DaaT_VdZEOlfYoPd4lJDJmB_N sx2jYYAEsdbk4xs6H_9732N8KEwn6jyiAlysubWeSNzm_bnMmkZWyun_skUk lz4XKNVqrbYacm35w2StbbyHFWA8Oo1zW2qh9zv_DmYJfZdb6uGfCzwiuoY3 n24tw2e56bUSpjpwHGWyNJG5h17GA.7b0IXQjO.t5i4rXNFLy4dlPo8Ql.KL 7o3hOnvqv8SS3l.1ctFHuH50C0Qb8SFAoSBMFFfAJNxfMjdPOZxRzdCI54Rr wbWeyGdrtM3CPB2GdyVVli6zsFLRpSNohN6nXHYzK_sThaAO.uWlopq9Mi7R 7gMJVHuSRow-
X-Originating-IP: [72.30.239.148]
Authentication-Results: mta1368.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm39-vm4.bullet.mail.bf1.yahoo.com) (72.30.239.148) by mta1368.mail.mud.yahoo.com with SMTP; Mon, 03 Dec 2012 06:21:13 -0800
Received: from [98.139.215.140] by nm39.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 14:21:11 -0000
Received: from [98.139.212.194] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 14:21:11 -0000
Received: from [127.0.0.1] by omp1003.mail.bf1.yahoo.com with NNFMP; 03 Dec 2012 14:21:11 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 750916.31792.bm@omp1003.mail.bf1.yahoo.com
Received: (qmail 15592 invoked by uid 60001); 3 Dec 2012 14:21:11 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1354544471; bh=+YYliwmsShAvNwhPLyzJNYE1MPX34bjAR9RvOUaGZQw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=T9KwqKkebNxfAW3bEGZimvC7gz9wDwXYuJCHcFJKyIMKz+2fgGWIXJY7hbmEDeCEDL5nkFpao0O8/BJLEktQpgL/Oc8jlwc4lhbKFPAsVSV5XtdqnIgfQv+QUZOwGSNXAEzCLteM/75epq2GVgFNFQgSBnbamPziTry6CjeHtGA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=o9sVFcOkfqm1EvfSTDuAbchXwIrh1CcZ/q9lVAsMZNG9iKgZzGUjcyCwN6W2BlBR/8N1BCU063PBnoZz65AMfqMww9vx0tKyy44myRUE6CCrpuSb6Q4IvBJvmXmIBv8uMwFHW7T9qQ9GntFtNWZAEBsJEOoiU1w2LqVEwcJ/LaA=;
X-YMail-OSG: 01EGTb8VM1m0Oj0eiFuBd82hpLH5OcmVrv4NLOE.DGTQuBD xtJPpsSc0mVlekI3jqbZq
Received: from [41.216.50.26] by web161604.mail.bf1.yahoo.com via HTTP; Mon, 03 Dec 2012 06:21:11 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354544471.96769.YahooMailClassic@web161604.mail.bf1.yahoo.com>
Date: Mon, 3 Dec 2012 06:21:11 -0800 (PST)
From: Office Customerscare <officecustomerscare@yahoo.com>
Subject: Re: WESTERN UNION MONEY
In-Reply-To: <1354346435.35920.YahooMailClassic@web161004.mail.bf1.yahoo.com>

4TH HEADER:

Return-Path: <yajie3128198@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.9
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: emIYTZsWLDsWBcwgel.WAdTfmAz7lIDU50.tyqE5VPt1VGpv VeukhIjY1Cn.KU8zhzCD_Pw_36n4JbpBBnAvEduvgl5qSCqKBsweGyX_h2Ds wNqtHkWk84quxCURRbnzMjvGUohntskqKJ9WLPygNjL0APgEgATzpDrLvj8k VuA9FW29oKwfhjurxzDZCcZH2Oo2zAfZnsdooccof.1DHRU8.6up3Noi8BNz 8uT6vrZfuFUPZ8DeDut0XwFw6QVwjr1qEX04NI..JcSraqBEfIQfTaoAwHus vr6Lj_dvPNX5tWGkfcNnjurajknIRROwwtXaASLQ7Cx8Uh3N5NoiCPSRcyUG yKVTej8g1qqyPvMgRR.Xg5HP87.bsB_o_vmswcSNF8KDt9Xkig3exi2o.Llu bLaJLyQxnGQMqS2eBdVt7G9icsk0YsTnLfPjvmsUkuS7kjMMvIL8AvgT8Wld 0y2mIrI71WQLbuCmqFVBhujChu2eWJ200uDJKrDtjv9_yZnFECzHIn02pCyw CDCDxpVA63zdAbSelgfxij7sHg1_jZCnlbyUm2cEPdLk15uFHsM.7nvxrgUY 5LsHbzlOaBg0rJ9x6AjwIurAG9AqXXMS28ewOfH2p.VXst11fH7r9U5jjOcl nrsDfP6NHDykG0m5xL.B6nKv_VGrJFtJ2d7bJ49SJD3fHvm08HTy3IukXkbR _af4nG35A546UhnaBoCPZY2XgqgjyqfjS7wIp_.Xpne8dHrzvdiv2fGZoxNs cdmCT929aSNoBVS7qmf.Vqh4Ba0Cq0iGPC69oPzjoseElXh_w.rLeV3Vhtmh v4w396qlHszg2qTh1ti6kqxrlGBJ5Es5_rFAUpfV_Iyc523_g9gcXSF639qk 5L5ibU_TC20R6g7C8emmS0Xz4A881Mgir2IBDvlQCykLm36iOT7Jt3KtGd0Q 8zo2IoPSQNQeUnRVvOOs_1u4tawNtF3beclZPl1jNKjb13l6FkwaL.Pl0fMr 0zPIZaLlHadKxr2LSmAlVNFkwxzVF.ejbaqH1T4Bf.HF1_4vrPHyGwypU4oT _Rd9trwPjtmiazFmvyW4zVt6P3uo6oNViHQvSKESLhBEb0dp1mJ24JmpYudY 9FOXDLAfJNTHD0OBlfo4j0ZN5tFbVqku8MM2wJkkVdHXcav.NP88edHCmGkG 3hnvwRmaS.xRh57w.78MDdmqgr8JsPvQbi7hbuZbxtyPysPjavf.Mn1dKiU8 MDzL6_L.ARVxcwWXZuD__sEtleqB
X-Originating-IP: [203.188.201.9]
Authentication-Results: mta1048.mail.ac4.yahoo.com from=rediffmail.com; domainkeys=fail (bad syntax); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm8-vm7.bullet.mail.tp2.yahoo.com) (203.188.201.9) by mta1048.mail.ac4.yahoo.com with SMTP; Fri, 30 Nov 2012 06:06:08 -0800
Received: from [203.188.200.80] by nm8.bullet.mail.tp2.yahoo.com with NNFMP; 30 Nov 2012 14:06:04 -0000
Received: from [203.209.230.76] by tm1.bullet.mail.tp2.yahoo.com with NNFMP; 30 Nov 2012 14:06:03 -0000
Received: from [127.0.0.1] by omp105.mail.cnb.yahoo.com with NNFMP; 30 Nov 2012 14:06:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 676497.39980.bm@omp105.mail.cnb.yahoo.com
Received: (qmail 62200 invoked by uid 60001); 30 Nov 2012 14:06:03 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1354284362; bh=y53EsIyh7n71+dZ/04bpw8ev0uIRHfZGOGFr7f2xT6g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=2YdCEBsGYX6t8lq6v3RHWBeQNjh949+Bf0uHOzdQF4HHzc99e4R1GTkk82F+ACxM92FYk6ciYRMBFJjgw2vTXqxajDQF2mGe9gcYWTzOWlcMZcKOpAlTdfZ0a/Q5L57cgywjlceOUq8CTwQTYdP7c8C7RolTF4JhNYOVKXiweg8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=GvTvbvzMaFegUf3UU+0sN9uBuXGXz9nGn8DJZsM7LuwwyYt/3ZLa/bfYTxLdIOMSKzvNeyVM1QZb+7O0P99zR4/vnljfB45mZ1c63OSyAeHSYzBLiIpy7fSSyVzqdmyGQmITI9SAFiL0VKPGWWc8GDdA8JtUfxELE16aQoEAntI=;
X-YMail-OSG: uMubNSsVM1lY53F0TXaMY83uS7TEq6JQlDsaehAolKSsGNi urJ9D0OkSh22JWyfGoQTj
Received: from [41.216.63.171] by web92205.mail.cnh.yahoo.com via HTTP; Fri, 30 Nov 2012 22:06:01 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.127.475
Message-ID: <1354284361.58719.YahooMailClassic@web92205.mail.cnh.yahoo.com>
Date: Fri, 30 Nov 2012 22:06:01 +0800 (CST)
From: OFFICE <offficialofficee@rediffmail.com>
Reply-To: western_union09@wss-id.org
Subject: REPY TO WESTERN UNION PAYMENT OFFICER

“Office Customerscare” <officecustomerscare@yahoo.com> <> DR.CHINEYE NWACHUKWU <> westernunion09@wss-id.org <> offficialofficee@rediffmail.com <> +22998841150 –  +22998677751 – +22968377742<office_dooog@yahoo.cn>

_______________________________________________

Associated Email: western2union1money0transfer@live.com
Associated User Account: Mr.Barry Grant
IP: 41.216.63.171

Associated Email: johneric777777@yahoo.com.ph; western_union2011@superposta.com
Associated User Account: Mr. JOHN ERIC.

The ip address 41.216.63.171 has been recorded as a spammers ip. If you have had a member sign up with this address you may want to consider contacting them, and possibly banning them from your site.

Other scammer IP’s in this range:

41.216.50.26
41.216.44.198
41.216.44.37
41.216.50.204
41.216.50.32
41.216.192.148
41.216.133.26
41.216.50.182
41.216.63.171
41.216.44.196
41.216.50.181
41.216.63.171
41.216.50.33
41.216.50.33

________________________________________________

Associated Email: kennethkuye58@yahoo.com.ph; emscompany78@yahoo.com.au
Associated User Account: Kenneth Kuye
IP: 41.216.44.199
The ip address 41.216.44.199 has been recorded as a spammers ip. If you have had a member sign up with this address you may want to consider contacting them, and possibly banning them from your site.

_______________________________________________

Associated Email: office.filemail21@yahoo.com.ph; western_union3852253@yahoo.com.au
Associated User Account: Mr Kenneth Kuye
IP: 41.216.50.26
The ip address 41.216.50.26 has been recorded as a spammers ip. If you have had a member sign up with this address you may want to consider contacting them, and possibly banning them from your site.

_______________________________________________

The additional IP’s have been blacklisted on atleast one anti-spam (scam) website and reported by other internet users.

Spammers Sent From 72.30.239.207
From: Standard Credit International Finance <thomasdavid
Subject: none/blank
From: Nadia kallon mbembe <nadimbem@rambler.ru>
Subject: Hello dear
From: Ibrahim Sanogo <ibrahimsanogo@voila.fr>
Subject: GREAT CONFIDENTIAL BUSINESS
From: “DR. B.S RUMA”<bsruma1@hotmail.com>
Subject: Call for assistance Tel: +44 (702) 401 6959
From: 郑���阳
Subject: 艳君
From: “ypyqv” <zabelvineewm@yahoo.com>
Subject: 何丽壤何丽壤
From: 唐湘祁
Subject: 楊家團
From: “Mrs. Sharon Crawford”<info203932@skymail.mn>
Subject: COMPENSATION ALERT, OPEN ATTACHMENT TO READ ALERT
From: YAHOO MICROSF 2012 <claimagent45@gmail.com>
Subject: Co
From: EURO LOTTERY PROMOTION AWARD <drmartins123@gmail.c
Subject: YOU HAVE WON
From: MATHEW SILVER <mathewsilver1290@gmail.com>
Subject: DETAILS OF THE MONEY IS ATTACHED
From: “AGENT JAMES BURTON”< kjhguigu@hotmail.com>
Subject: FROM FEDERAL BUREAU OF INVESTIGATION {FBI}SOLID PR
From: UNTED NATION PAYOUT <anthonymark.clyd@gmail.com>
Subject: (FIND ATTACHED) TO CONFIRM YOUR PAYMENT INSTRUCTIO
From: dso <obregonhjmou@yahoo.cn>
Subject: 请查收!
From: “Mr.Law Kanu” <lawkanuu@gmail.com>
Subject: AT LAST YOUR PART PAYMENT HAS BEEN APPROVED
From: “MR. SUNNY LUCAS” <sunluccas111222@rediffmail.com>
Subject: SOUTH AFRICAN NETWORK FOR WOMEN
From: “CARD OFFICE”<drgoodluck001@aol.com>
Subject: payment of US$2.182.Million Dollars only via ATM C
From: “Mr.Ibrahim”<lamored.ibrahim8442@live.com>
Subject: VIEW THE ATTACH OF YOUR COMPENSATION FUND
From: “MS GRACE SMALLWOOD”<mr.johnwalker444@hotmail.com>
Subject: HIS IS TO NOTIFY YOU THAT YOUR FUNDS ARE CURRENTLY

From: COMMITTEE ON FOREIGN PAYMENT <web.np@att.net>
Subject: ATTENTION
From: john graig <web66778822@att.net>
Subject: GOOD DAY
From: Nadia kallon mbembe <nadimbem@rambler.ru>
Subject: hello dear
From: “Mr.Steve Gulliver” <stevegulliver001@gmail.com>
Subject: INVESTMENT PROPOSAL
From: “Mr. Donald Wilson”<michealscolls25@att.net>
Subject: Confidential Account information
From: UNITED NATIONS ORGANIZATION <unitednations22010@gm
Subject: PAYMENT ORDER VIA ATM CARD
From: pavel_stuleanic_12@yahoo.com
Subject: Curs Italiana – Invata italiana fara profesor
From: Zana Clement <zanaclement2011@yahoo.com>
Subject: From Miss Zana Clement
From: e_x_t_r_a2000@yahoo.com
Subject: Economizor de energie electrica!
From: emo_love191@yahoo.com
Subject: Economizorul care reduce factura la curent cu cel
From: “United Nations�”<publication@un.org>
Subject: Attn: BENEFICIARY, Notification of Your Unclaimed
From: Oferta zilei <alexandra1975stefan@yahoo.com>
Subject: Tigaia magica Dry Cooker
From: Google Corporation <claims.sector@webname.com>
Subject: Google’s 14th Happy Anniversary
From: POWER-BALL ONLINE PROMOTION <info.pball.promotion1
Subject: CONGRATULATIONS. (VIEW THE ATTACHMENT FILE FOR MOR
From: MICROSOFT AWARD <awardm2012@gmail.com>
Subject: Good News And Congratulations You Are Lucky Winner
From: CANADA UK LOTTERY PROMOTION
Subject: Congratulation,[Kindly Open The Attach File
From: Musa Ahmed <musaahmed20222@gmail.com>
Subject: CAN WE WORK TOGETHER WITH TRUST?
From: William Nii Offori <douglaakana12@gmail.com>
Subject: Dear friend kindly view the attached file and get
From: “tristardamith@yahoo.com” <tristardamith@yahoo.com
Subject: GUESS WHO HAS A CRUSH ON YOU!
From: HEINEKEN PREMIUM PROJECT 2012
Subject: HEINEKEN PREMIUM PROJECT 2012
From: Felix Hachel <felll_hachel@hotmail.com>
Subject: Your transfer is ready
From: “#10090246 _____Get-a,holiday-bonus!_____Last<Hour
Subject: Last Hours to Save! 40% Off! Order #10090246Exp|re
From: MRS GRACE MANDA <gracemanda147@gmail.com>
Subject: I NEED YOUR ASSISTANCE ON THIS TRANSITION

Other Spammers IPs in this Range

41.216.50.33
41.216.133.26
41.216.50.204
41.216.50.182
41.216.44.198
41.216.50.33
41.216.50.26
41.216.50.79
41.216.50.33
41.216.160.135
41.216.44.37
41.216.50.26
41.216.38.164
41.216.40.128

 
Leave a comment

Posted by on 12/05/2012 in Lottery Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“NNPC” also known as PAUL KUNERT

WARNING: SCAM – FRAUD

UPDATE: Paul Kunert (Kunet) is a scammer that I posted yesterday, December 3, 2012. Paul Kunert sent the same exact email’s as this scammer and sent them under the same IP (213.230.19.136) for additional information click his linked name.

Dr. Pere Hart – Lottery Scam posted on scammer419 on October 21, 2012 is the same scammer as NNPC, different scam.  Click the link for more information

Warning Caution Icon Sign Glassy Shiney Clip Art

EMAIL: An attached file was linked to this email that had the same title as another scammer that i posted on this site a month earlier. the email addresses and ip’s have been reported by other internet users and websites as well.

HEADER:

Return-Path: <mabiola@nnpcgroup.com>
X-YahooFilteredBulk: 202.181.246.218
Received-SPF: permerror (encountered permanent error during SPF processing of domain of nnpcgroup.com)
X-YMailISG: FuucFhgWLDshkfFuV5fDevDyn0hi2_MU3I8l8IWaMLVIEIuz NKf3NWKmyNhQdLoE56sqj8U_3Ubcj8OfUmEFjup1EZpdSK0QKIWMlJjD6ABw 7RYdhreTv2Bm4i.WRJxqaI0MPQwCPlp29KJ2sgBKpJV1hkZTSz6ZVm2U97j8 hZMBu5k5IgASzO0ibvoEpponfvo.fQVeXf7B0.M_i8VEA_4e257ilsiYu04h 8YUO4QtW642l62.Je8YwZuKUn1ZFZqU5NkM55tAWaCUAvXIitjWlZKS0TRxg kHmPUQeyT7LZzjb59EMoHsjU7zFjBEM1bb_f18xH7cnhQuSTyNVkrOYUAj0C 5fkR3of5DkTEEbE3OTx1ME_x3kR4nfE7TfhkkzmZulEMAJLsOcmmRLTPeb6s 4MfwuntLGCQj9ZYRJYqqB83K_KO0JzyGuXfkhuClo_rEdpgh9TAfD_mGRH76 solGibHIJsucJTq1_cxMM.Ko9drDCwHdE5Y6gaUhU23S025ANpPVyriGKFzz _MUPRqNK3n_03dMu_13EZBndFyKJX4.4l0XLdfNnS06kd93FOR5u8_tsY9KY SRiu5X_QzjoxTy8v416neLCsRo0vwyWzM50Xn5_0f5wXAoOnavzSsMhgo7HE pwxrmk_Vhc6ENKP9LVOFQfMvL1ZAHOefrtPe_kvWlDqLpykthbrnRTmXkuxz M7XTEhPwrFQKcIKqTbWXnGImhyCQzqpmsH_X5p_uUIRlzIe41Ybs89FihVU. Y4lUG8XrysjZJqdc2ndbb7cWLW1Q5b_QnA7Hft6j4f3vh25LU6AAvBigVyTm f.FRgXxeQNP4HoKfstNkkCMvFVumZ0Ikl7o5iSCeuCaJfiVRMcBsDN1uSRFw qQQWF2_RYPIArf4KAZIEBsmq1AlrdElzPywpFxhJgrD7a6V.cjIzD9vjrdO9 ljaQGFLCS.q8y51qBFZpFYYseaEMnt3jJgYEcpjLNKVR6YmjFfSTmT.rFD2b zte6AWqyGobaKMgQL9gHMVwpGhFOM5v5y6IDKAUIbw8NP5GSEZiAQiFElzPW a4LuP.XQSSNxvBNHWfZGSe5eqH_YcCZZH2dS5C2dZrmGNERb5L.1HvIpwPNT f3EtOddYQyqUWS.TC3u1CuUDrcR66ObHy9uf8_Hqf5VJb2Bj4tOfRthCbD.p 3nYD0Uat.DIAXprmX6VjcsfM3sN1.Dg0XNw9lTxYi4651.m0.7XkBTYP5Tr9 JMIOiOX9IVEjig5yKN1XMGz3r_ODg0gnhbtmZt.ImVY4vLOP_FpEgduDVWNb hwiXH6xZT_nW1XOcfEazL0Zw9nUCA9Cexq4iyKw0NTo7Xkr8dSL8JXsAyzTG _uVbL0x8nXYjeewDIAuS7dKHUK5M20jUpAUNthLTONSumeoGbggbpJFTlHIz AxPp3v077Qod7NiVkG4dQ68knDKplPdecjla_7QQxr.UamzZ2qvomY7zIXvd 9Se0G4ohmnYSsxoXR7UMLwiFK29oKb7egIrYKq.i7Im0nMWLXIn2k7KgajfU 0q_0jsVF_VKyfKoI02yc4rE8qucMPLgNZ5H2p9NQYr.vA8itbI7WCfKhUFPq 3269QnfwB8kqKpwkS09SOXPWvKRtQqUKSyQOpA–
X-Originating-IP: [202.181.246.218]
Authentication-Results: mta1388.mail.bf1.yahoo.com from=nnpcgroup.com; domainkeys=neutral (no sig); from=nnpcgroup.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.hkscholar.com) (202.181.246.218) by mta1388.mail.bf1.yahoo.com with SMTP; Wed, 21 Nov 2012 08:51:29 -0800
Received: from ([213.230.19.136]) by mail.hkscholar.com (Merak 4.4.2) with SMTP id 21320A3A; Wed, 21 Nov 2012 14:43:11 +0800
Reply-To: <mabiola2@e-mail.ua>
From: “NNPC” <mabiola@nnpcgroup.com>
Subject: Message from NNPC
Date: Wed, 21 Nov 2012 09:43:55 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_00CD_01C2A9A6.671FFFB0″
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

X-Originating-IP: [202.181.246.218]
Authentication-Results: mta1231.mail.bf1.yahoo.com from=nnpcgroup.com; domainkeys=neutral (no sig); from=nnpcgroup.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.hkscholar.com) (202.181.246.218) by mta1231.mail.bf1.yahoo.com with SMTP; Wed, 21 Nov 2012 19:30:34 -0800
Received: from ([41.190.3.128]) by mail.hkscholar.com (Merak 4.4.2) with SMTP id 21320A3A; Wed, 21 Nov 2012 14:37:08 +0800
Reply-To: <mabiola2@e-mail.ua>
From: “NNPC”<m.abiola@nnpcgroup.com> Add sender to Contacts
Subject: Attached message from NNPC
Date: Wed, 21 Nov 2012 07:40:53 +0100

“NNPC” <m.abiola@nnpcgroup.com> RECEIVED: from ([41.190.3.128]) by mail.hkscholar.com (Merak 4.4.2) with SMTP id 21320A3A; Wed, 21 Nov 2012 14:37:08 +0800

NNPC – mabiola@nnpcgroup.com – mabiola2@e-mail.ua – m.abiola@nnpcgroup.com – <mabiola2@e-mail.ua> 202.181.246.218  – 41.190.3.128 – 213.230.19.136 – Email addresses and IP’s used by NNPC a.k.a Paul Kunert a.k.a Dr Pere Hart officeonline82@yahoo.com Reply-address: dr.pereh@yahoo.com — 72.51.25.85 – 213.230.19.136 – <kunert03@e-mail.ua> – <kunert01@e-mail.ua> –  77.238.189.210 – 213.230.19.136 (note paul kunet sent numerous emails and each email had different reply-to addresses and ips. click here for more information.)

 

Some Scam Messages Sent From The Above IPs

From: “Elsie Carroll” <amadowindsurfvalencia@webstersonl
Subject: You can have happiness for hours
From: “Better Business Bureau” <info@bbb.org>
Subject: BBB assistance Re: Case # 66139090
From: “Better Business Bureau” <info@bbb.org>
Subject: BBB assistance Re: Case # 64924263
From: “Better Business Bureau” <info@bbb.org>
Subject: BBB assistance Re: Case # 35201806

From: cradlekx7@bmatter.com
Subject: Groupon dicount gifts
From: Горшков
Subject: Мастер-класс на тему “Функции
From: “Ester Snow” <langg2@reincarnatietherapie.com>
Subject: Your buddy is too small? Not a problem with modern
From: “Sharlene Montes” <liberalizationspff0@8bitandroid
Subject: Long buddy will bring you a lot of unforgettable n

From: noreply@breitling.com
Subject: tammyiversage@amail.bulock.com © BREITLING Inc ® T
From: noreply@rolex.com
Subject: psychology4321@cli.metraimmobiliare.com � Rolex In
From: З
Subject: Разрешения на работу, граждан
From: gabriele_hail@afternoon.kfm-sa.com
Subject: gabriele_hail@afternoon.kfm-sa.com Breitling Disco
From: <alonso.rusten@england.shortcutter.com>

From: “Santander”<notice@security.org>
Subject: Your account was accesed by a third part
From: “PayPal”<notice@ppal.com>
Subject: You have changed your PayPal email address
From: “PayPal”<notice@security.org>
Subject: You have changed your PayPal email address
From: “ECONOMIC & FINANCIAL CRIMES COMMISSION (EFCC)
Subject: Dear Beneficiary,contact Mr.Robinson

Associated IPs174.5.213.253 — 208.66.195.3 — 129.10.156.203 — 64.94.177.214 — 67.52.189.82 —  31.222.169.29 — 68.22.33.134 — 129.63.210.141 — 91.183.41.102 — 41.251.31.139 — 91.118.19.50 — 41.141.36.169 — 80.255.46.3 –41.190.2.218 — 41.190.2.159 — 41.190.3.221 — 41.190.2.161

41.190.3.29
41.190.2.163
41.190.3.66
41.190.3.116
41.190.2.166
41.190.2.167
41.190.2.168
41.190.2.169
41.190.2.170
41.190.2.171
41.190.2.172
41.190.3.135
41.190.3.213
41.190.2.175
41.190.2.176
41.190.2.177
41.190.2.180
41.190.3.97

41.190.4.95

 
1 Comment

Posted by on 12/04/2012 in Other

 

Tags: , , , , , , , , , , , , , , , ,

Jack Alan Hardy notification@security.com ication@security.com

INHERITANCE (BENEFICIARY) SCAM – “TRANSFER FUNDS”

HARDY AND CO. CHAMBERS
LEGAL HEAD, HARDY and Co. Chambers.
892 Bulovard – Airport Road – Kumassi,
00233
Kumassi – GHANA.
Good day to you,
Compliments of the season my dearest friend.

My name is Jack Alan Hardy (esq) From Ghana, I hope my message meets you in good health.

I wish to notify you (again) that you were listed as the beneficiary to a total sum of (Four Million Seven Hundred And Fifty Thousand $) in the intent of the deceased (late) Madame. M. Olivia. I contacted you because you bear the same last name with my deceased client and therefore I can present you as the beneficiary to the inheritance, since there is no written will from my late client.

I received a notification from the Central Bank (BANK OF GHANA H/Q) that the funds will be confiscated to Government’s treasury account as un-claimed funds due to account in-activity for the past 14 Months since she passed away to glory (Natural Cardiac Arrest) at age 71, I have two weeks only to present a beneficiary in order to avoid this action. Please, I am in need of your support, for I cannot do this alone.

I am prepared to provide you with all the documents which might be required by the holding Bank to enable them release this inheritance funds to you. All the papers work required will be processed in your acceptance of my proposal.As I am prepared to offer you 45%, 50% for me, while 5%  will be set aside for any expenses we invest into this business, that is to say that any money spent during the period of this business will be fully refunded once the funds has been transferred into your nominated bank account or any other safer means you prefer.
Upon your acceptance I request that you kindly forward to me your details as listed below.
Your Full Name:
Full Address:
Personal Number:
Contact E-mail:
Date you was born:

I will truly appreciate your response.
Yours sincerely,
Jack Alan Hardy (Esq)

NOTE: I AM NOT HERE TO WASTE YOUR TIME NEITHER SHOULD YOU WASTE MY TIME.
Thank you for your understanding

HEADER:

Return-Path: <notification@security.com>
X-YahooFilteredBulk: 196.200.16.19
Received-SPF: none (domain of security.com does not designate permitted sender hosts)
X-YMailISG: BE35evUWLDtLBivnQgls9qjTzn9WCBnXj0u3iE0u6.Oj3O8A fTMCW_KssRPseNb.LbA7rZuOovQnoQbyYA6wrZGnrsmAIv0FWenZOaATN7g1 bPQP4O3PZKoJT4x6GQRNTCOu9rZXeK5Hu7rBdf8jzAfQ0euy18XR.GUFALEO Nukk8R5bjaUnSjsVS9.GMM5rdLGyI6DVDeoPn1Muw_us9vx_YkwBBjalJWjC lkwPOCTj3lKd5_81pEJvK6hopnyoTGYmisUwhfSBTCY5bDsTWiJhBcCEpZYh fGryqbtuVXtYU07WYQKuOAz0jXDHr6f66aCNW4yNVZFsHtKa3fgAUD_ENvt6 FVoGUsExm95svM5mMlWUf1zQZIHx9BhmmtF0ATvnwhQyolX9mUOwd2eFZgcN 5JsJd3MEOqYWzF91391X2bo7TtJSHqA8L4EVgGivyDOWPOHwc54GgrJIXF_T s6yiw2VL54y_qCLZJ5h735OCAPHxRZsEnKg8IcDP37JAMTWoOiirDgGIZBI4 HneVkFYkK1VegprlX.LOIyqmIc1vqamdjjHSVVWV6jVZMJCm1DGAdphPwlB5 bfJ33PIbumh0X9ZORuOUz8527.PA1EY4mQ1X_OeagE6Zg62v0R7FV6oMnl4R zedcEX4z290Kl8gM4kl5Uf4UuxlkWRaBSTffUCOjT2dF9omrpL1R4xCGhzRh 4VAiZ7lTmCUhyUzcHHs4jw5aNi9EC6eARBu6_JCbF2qYBRQHNm_5polvd.nO SfVp9S9ecD_NawXpKeI1Xd6IlvXxcQ85yalx4agHHb6yPT6jJgY4c3.SFhC8 4IwbpSgwAsneBl5GWpZC9tPGadG7U2k9wDnrWrixfvE3Fzk_2GfDUmf_Fe3v L3cRPZaN.Az7P5jutsV8E1pMIUKR6dS95.Ph1XawaLEb4v_8sUcDJo2_RLig U0GmEp3i1jBCNPTsOHREZYmnzg2oUmUUQQU7PINWarIB9aSVDI2d253KJmaT lZMQbMK5lpCHr24SzrQxsV.JblzTukH_1ZRWtb9r1tP7BchYS9OHrSAgm4eT 5vUS8VpSkLj.UxXCJknhj.bdGydITce3vFRsmX5QNYXw0K6oaRfeyt.h_h8B cidaGa2Et2fXenSCifP61KsXiAHKo2GWlRkUjmBDN3AFJn.QcrYe_yG4pnDp N2zRJZInfokjuJZa5WesPT7N02vb_89ZgOsJ58TAk.4JOVmay2y.jDxB8C1y yJALHYF80fgCLMXh0j_Eb_L3r7859U5zZWRLgBwyLMjNoYe.XmQRWvxpNO41 gWDStKGQATzmEXHH3250JtWwkMy2HasHZBv2b2dhOfPxEorrbLAFF1KnDWE2 yddtrahQkKL8LPOEDaC_bZJvaOAqC6ikZIPMlgo-
X-Originating-IP: [196.200.16.19]
Authentication-Results: mta1128.mail.gq1.yahoo.com from=security.com; domainkeys=neutral (no sig); from=security.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp04.accessekenya.com) (196.200.16.19) by mta1128.mail.gq1.yahoo.com with SMTP; Thu, 04 Oct 2012 21:48:23 -0700
Message-Id: <8d1c36$3nngbt@smtpout.accesskenya.com>
Received: from 41.220.120.236.accesskenya.com (HELO mail.vegpro-group.com) ([41.220.120.236]) by smtpout.accesskenya.com with ESMTP; 05 Oct 2012 07:47:54 +0300
Received: from Editor2.vegpro-group.com (192.168.16.171) by mail.vegpro-group.com (Axigen) with ESMTP id 21620B; Fri, 5 Oct 2012 07:28:17 +0300
Content-Description: Mail message body
To: Recipients <notification@security.com>
From: “Jack Alan Hardy” <notification@security.com>
Date: Fri, 05 Oct 2012 07:47:58 +0300
Reply-To: goldpack66@gmail.com In-Reply-To: <8d1c36$3nngbt@smtpout.accesskenya.com>
X-CTCH-PVer: 0000001
X-CTCH-Spam: Bulk
X-CTCH-VOD: Unknown
X-CTCH-Flags: 0
X-CTCH-RefID: str=0001.0A0B0203.506E6678.0049,ss=3,pt=113349,fgs=0
Subject: FROM JACK VERY IMPORTANT

“Jack Alan Hardy” <notification@security.com> ication@security.com

 

41.220.120.236

 
Leave a comment

Posted by on 12/02/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

Paul Kunet (Kunert)

EMAIL SCAMMER – PAUL KUNERT (KUNET) – EACH HEADER IS USING A FAKE ADDRESS TO CONFUSE (POTENTIAL) VICTIMS. AND EACH EMAIL HEADER HAD A RECEIVING IP WITH A NIGERIAN LOCATION

UPDATE: Paul Kunet also sends out scam under NNPC under various addresses and ip’s including – mabiola@nnpcgroup.com – mabiola2@e-mail.ua – m.abiola@nnpcgroup.com – <mabiola2@e-mail.ua> 202.181.246.218  – 41.190.3.128 – 213.230.19.136 — for more information click: NNPC – SCAMMER

Paul Kunet and/or Paul Kunert has sent MANY emails. Therefore, I am going to post each of the headers because the return email-address and IP’s on each email are different. If you receive a email from an unknown Internet user and googled the address and/or IP address and ended up here, then you’re most likely talking to a scammer.

NOTE: I didn’t post the actual email’s but I do have them saved. I just posted the headers because posting the email’s would take up more room below so if you would like to compare emails just let me know!

________________________________________

Return-Path: <kunert03@e-mail.ua>
X-YahooFilteredBulk: 77.238.189.210
Received-SPF: none (domain of e-mail.ua does not designate permitted sender hosts)
X-YMailISG: uz2zgCQWLDvA5U9Wv9gDEl6GyPs4LNxRzvAj8opVuoq7p6zv twi2EFEinL1GuboSa2t022Py3ynOSCyVShKHCBfM9Gu.cTZ7EaVnYwEMSZBL htJqs2gZsJi9Kx7GAkqpUxFJtfotfU_ilBgTeUv7U5TaBNMfsbCL4KHoKqMX 4GcN7rdYltCILT5XzRlICjzMSN4LxyzL1sFz71rYrHnvYkVcdFM.t0kKvbHU sq4nsZ3elrFZ8LmRTvePsqavTLXwtFQZfZdUs5GFZOZtzjSDe69XtLY7oGN1 cUuUltsLnI8DockY.vYcelJInb2PCuFViVqkp3Ri5v_lbjEY1UtXSIKV5..7 IVKcEWv9g5PUSKRfIbLm7.RETJx4j8GOrmJLLgT4D32gwUKs22oVJGzB39v5 Y7HcCe2FiGc23kdYvA.3cICY0pfYtp3rPzd53eh8HqU7CTlhQt7XNCKuYsCF OqfxcpuCDSLf6UlmAcJKT0wEFj.r39Zjci1dM1cOD6XQZhi0TTOwfSwP4hmU j7TZAkTSBLZK_3lvXcxWq5eQ5P_JWaPnbOC9ObAfUB7RZr3.TUoymzm5mlnk yRy2p4oskqshMyi9tW0WuUdCYbxezLKAkZlJ9lxQWq5omS2ynsUMcYJSXvbl AiW6ZzMM6W4cyQwURLStzEoMD5gpf8ypjNGJFwdwLxR1DK4DvXhWT_x9EHKc rSmegcFO8fpnxDgiMp5yOsczZEnNdckNPmeey_BVBUyDbKLyHegwYAW83hyO IP7LphF9SVql87P9XR2Ku5oNswP5Eicv2McSCobp3G_PgsTpNZqzhiBg4I.S f6AsTb0AfLc74jwWN4kr456j3a8EBM0iSSVuBPIl3kpBZmGRRHp00Lh5unmq bllWrDyn..DRLmJr_muz0kGwTxUsf8T5lSTIjqas9qcFRvn_breAvnZ162mM 1JZz8hDIhACLQRT62j_pjhOKAcnnY0VCkL.WNfly7yANzAbjHyrZnyvoXGEQ PUWLFME71uSlaTcmdSFMPOH4al6E.lv8WYw34x_HL4z2czpmtNNykF.xodjz ak2Brvkaf3Dde9CXarJ8yz_2il8FcSdFus8DpwbF8RQ8gXUv.JRAZmUCQTdh 4EVdkAo9fM8XAZ5PVivjHMZVlyHHYgYu8gycPzgmI4SG7B.9uUdWqvb52IpY AjoNigpPuGFRJI142SI-
X-Originating-IP: [77.238.189.210]
Authentication-Results: mta1116.mail.gq1.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO nm6-vm0.bullet.mail.ird.yahoo.com) (77.238.189.210) by mta1116.mail.gq1.yahoo.com with SMTP; Fri, 05 Oct 2012 08:21:48 -0700
Received: from [77.238.189.51] by nm6.bullet.mail.ird.yahoo.com with NNFMP; 05 Oct 2012 15:21:45 -0000
Received: from [217.146.189.99] by tm4.bullet.mail.ird.yahoo.com with NNFMP; 05 Oct 2012 15:21:45 -0000
Received: from [127.0.0.1] by smtp115.mail.ird.yahoo.com with NNFMP; 05 Oct 2012 15:21:45 -0000
X-Yahoo-Newman-Id: 47619.90145.bm@smtp115.mail.ird.yahoo.com
Message-ID: <47619.90145.bm@smtp115.mail.ird.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: 0T5NBy0VM1kObUTZkAyVC3luZHJ3SlVhEh3tWoWRJ3d24ls jHB8Aep7i9YeDAOY6yIIpCbSZOs_WXyRTE89oDaHY27Da7hcpXmer5p71H5j 4oW1AfazM0GYJd4ULRwC4kaorrUAb.MUV490Th1OEabhOtFu3b6XFu6Lv5Bg bKmyQ3E2TuW080GxWyY8nOr1NeGBCMpy6GKg4S2xRYrykSweH597_.HeVhCg DsM6JtquNv9H1c3jVs_i7KzTi0LzOAXyStU88cQp4Hwi4EbHP1tztLcVCZCS in8cVpzBhZnfi1QfhhfXGh0QT_ZIHg0a3KWpfrN7vhLgG6IApEGrtz4QZT_H DHQOMWSbtrt68XIRkNRjon5QuC6S1HD4_AvnxtQJgoZBALp24K.NPV42kl.7 8Um2rh8XD9YDzZJ8J.v5Q34e8O9pSa1lb6hcSWtaXsSLFxathXZY602JuCUp JQQFx2G9Bo3ldXD1zNLYjY0CS9z1KwWgAvA–
X-Yahoo-SMTP: O6_qdwuswBACWAKqY5WV46rcRuRKcFD_Xf.u0UBJ
Received: from User (kunert03@213.230.19.136 with login) by smtp115.mail.ird.yahoo.com with SMTP; 05 Oct 2012 08:21:44 -0700 PDT
Reply-To: <kunert01@e-mail.ua>
From: “Paul Kunert” <kunert03@e-mail.ua>
Subject: Attached message from Paul Kunert
Date: Fri, 5 Oct 2012 18:18:55 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_0102_01C2A9A6.72E28560″
X-Priority: 3

213.230.19.136 —-  77.238.189.210

Example Messages Sent From 77.238.189.210
From: Miss Sarah Coulibaly <angbozansarah@dvaar.com>
Subject: Dearest One,
From: Phillipe Ouattarra <phillipeouatt@gmail.com>
Subject: Dear friend
From: “chamillionare718@yahoo.com” <chamillionare718@yah
Subject: FW:
From: Blaise Samake <blaise.samake40@gmail.com>
Subject: Good day,
From: “Mr.James Morgan” <mr.jamesmorgan815@yahoo.dk>
Subject: I await your response.
From: sandra <sanmorg263@yahoo.co.jp>
Subject: My Dearest One,
From: Ibrahim Sanogo <ibrahimsanogo@voila.fr>
Subject: GREAT CONFIDENTIAL BUSINESS
From: Josephine Hadi <josephine.hadi1@live.fr>
Subject: From Miss Princess Josephine Hadi
From: Miss Nancy Luke Attah <nancy2012attah0@yahoo.co.jp
Subject: From Miss Nancy Attah
From: Catherine Hermann <catherin_hermann@voila.fr>
Subject: DONACION PARA EL TRABAJO DEL DIOS
From: “work.mission@yahoo.com.ph” <work.mission@yahoo.co
Subject: Request from Dave’s Wife, Julie writing from hospi
From: Ms Estel Bedie <msbediehenry@zipmail.com.br>
Subject: Mrs Estel’s Private Investment Fund
From: “sha_ali_4_u@yahoo.com” <sha_ali_4_u@yahoo.com>
Subject: You have (1) unread message
From: “SB Artists Management” <sbam555@yahoo.com>
Subject: =?windows-1252?B?Q29uY2VybjogTmFkaXIgQUxJRVYgLSBhc=?=
From: Bahi Arafat <bahiarafat01@sify.com>
Subject: From Mr Arafat
From: “Mrs Vick A. Melind” <drmrsntcarlos@gmail.com>
Subject: My Donation €4,000,000
From: “Mrs. Anna Robinson” <annarob00@gmail.com>
Subject: Reply-To-My-Private-Mailbox
From: Mr Souhel Youssif <mrsohy691974@gmail.com>
Subject: DEAL OF TRUST.
From: “Mr Boromo Williams.” <bwse2008@gmail.com>
Subject: CAREFULLY READ THIS & REPLY BACK,
From: MR JOSHUA BLAISE <mrjoshua.blaise@gmail.com>
Subject: YOUR HELP PLS.($4.5M DOLLARS)
From: Sam Kandolo <hlttr12@gmail.com>
Subject: My Proposal…
From: Robert Makou <drjaviskona@gmail.com>
Subject: My Business Proposal For You.
From: Chantal Akissi <chantal_akiss20@yahoo.com>
Subject: Please think about this offer.
From: Mme Kelly Osbourne <kelly.bourne01@gmail.com>
Subject: =?utf-8?B?QSBsaXJlIGF0dGVudGl2ZW1lb=?=
From: Mr Collins Musa <mrcollins.mus04@gmail.com>
Subject: PLEASE DO REPLY FOR MORE DETAILS / CALL ME AT (+22

Associated Harvesters
85.120.152.208 | H
207.150.196.48 | HS
173.45.70.178 | HSD
174.121.47.129 | HSW
109.14.54.107 | H
41.202.76.174 | HD
41.236.249.134 | H
67.19.122.2 | H
216.12.207.226 | HC
41.189.39.157 | HS
91.105.37.76 | H
62.163.32.190 | H
62.163.37.157 | H
74.86.14.10 | H
70.87.196.242 | H
208.53.147.89 | H
209.160.32.70 | H
194.72.9.17 | HC
208.66.195.2 | H

41.66.6.74 | HS
41.206.85.34 | H
74.222.4.133 | H
208.66.195.6 | H
41.218.251.251 | HSD
195.229.242.53 | HCR
210.49.239.89 | H
196.29.105.9 | HR
207.150.196.53 | HS
115.124.113.134 | HS
74.12.48.142 | HSD
75.125.194.194 | HS
41.189.38.204 | HSD
41.82.173.158 | H
209.160.72.139 | HS
208.66.195.4 | H
75.37.116.174 | H
41.82.75.98 | H
74.53.243.18 | HC
208.66.195.7 | H
216.40.220.34 | H
69.46.20.87 | HS
173.45.77.106 | HS
174.142.104.81 | HS
208.65.60.105 | H
66.235.180.7 | HS
74.222.11.76 | H
24.69.53.23 | H
81.195.121.253

________________________________________

“Paul Kunert” <kunert03@e-mail.ua>

X-Originating-IP: [98.138.91.37]
Authentication-Results: mta1265.mail.ac4.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO nm18-vm0.bullet.mail.ne1.yahoo.com) (98.138.91.37) by mta1265.mail.ac4.yahoo.com with SMTP; Sun, 07 Oct 2012 00:21:23 -0700
Received: from [98.138.226.177] by nm18.bullet.mail.ne1.yahoo.com with NNFMP; 07 Oct 2012 07:21:20 -0000
Received: from [98.138.226.132] by tm12.bullet.mail.ne1.yahoo.com with NNFMP; 07 Oct 2012 07:21:20 -0000
Received: from [127.0.0.1] by smtp219.mail.ne1.yahoo.com with NNFMP; 07 Oct 2012 07:21:20 -0000
X-Yahoo-Newman-Id: 925237.87603.bm@smtp219.mail.ne1.yahoo.com
Message-ID: <925237.87603.bm@smtp219.mail.ne1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: aMaIVAsVM1mcsPMBdHpy_Od726OlFwrt4i.RfI70J1kdbqn lFLa2cnB.svc062TsBmOwspfg8MzbnuuPt9GdSc7W0m_lX5DN86Rb3Lpg4s_ _XvSGAe89EYvhPqKRyOZNs8NGgNVVhAJBZNXUpnWmltay8aXE8FmBgybQznG Bwzed.xFuAACKwn9Tr9YzEQ0A4nuqwPi3E49j6pOIvK8_ezRxWNpCyEQl7Wd 4bw3yOUinFkBsS.prFqAEm0jX.s2ddwxObQ0C.Xp5LqHBHhQMe0yWoT8B0g1 YgIVTskyjv46gHqToDLrxgiJn0Ku46w5qzL98Puphv5moQjizry6l.D47ke9 ZhtoU7xZq_nZpu4bdHxSVIGDPt494z784uLQ0WAl9afUUcHrSTHaqErBGxPf 058iZcBa3iP_1SSm6YPk4mxvcr1.9G6r4D7RlwX26QDL7aEuxoQRb_1h5FMU yxrkJQO80h6HkZYijGeOP_Cb_El2rYqDC9Wvn8J5tKnY-
X-Yahoo-SMTP: cgj1Dz6swBAPotAFLnguhWhhyXRXcWKIb_80lDs-
Received: from User (kunert03@41.190.2.188 with login) by smtp219.mail.ne1.yahoo.com with SMTP; 07 Oct 2012 00:21:20 -0700 PDT
Reply-To: <kunert02@e-mail.ua>
From: “Paul Kunert”<kunert03@e-mail.ua> Add sender to Contacts
Subject: Attached mail from Paul Kunert
Date: Sun, 7 Oct 2012 08:21:19 +0100

IP: 41.190.2.188 LOCATION: NIGERIA

RETURN-PATH: 98.138.91.37

________________________________________

Attached message from Paul Kunert

Return-Path: <kunert03@e-mail.ua>
X-YahooFilteredBulk: 98.136.217.65

Received: from [98.137.12.60] by nm22.bullet.mail.gq1.yahoo.com with NNFMP; 05 Oct 2012 12:44:42 -0000
Received: from [208.71.42.214] by tm5.bullet.mail.gq1.yahoo.com with NNFMP; 05 Oct 2012 12:44:42 -0000
Received: from [127.0.0.1] by smtp225.mail.gq1.yahoo.com with NNFMP; 05 Oct 2012 12:44:42 -0000
X-Yahoo-Newman-Id: 255385.13736.bm@smtp225.mail.gq1.yahoo.com
Message-ID: <255385.13736.bm@smtp225.mail.gq1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: oeD.OjAVM1nT5.oYbwvoQZ0_sc1r8Tj.RdorTUt2RW_PkRI fJgoiRocZ7uhixUjQ0FF_1KTxyAv3b6U6OuWV0.MGXQkLH81RrTGQ6avKn6W 2v0f.O0DS5w3Y3_NWbRmnzYUwR766kWEblokyKpl8a61i1ZslIwztHVG_kju RfFCbeZdCuNPlrzWwgPgDcZunb1tDgMcdCEsXNvP3vJKTJphjko6NuaUmKB_ heVSO_8PCHoMeqFtkFvUtqb.K6W6wFUxAoGkOhOq1fN3qVH3HdHIigpH57d8 3jzBznM8gSPsRBLKi4lHQSFJes.lb5Umop6wIOIL.Xix4yLvEfF3tZIhpoIb 90z.XGESS2NWURgttG.O4_96iJf5.LzEO8TsWvrhm0AYWO8OUiKjT0K67KKC GOqe8tNIma2jW.OO4Eaqo_GfNs1poBVVRbF7K95eZbjzOf2Mo3dzk4stm5XP diXR_p9O7rsPRodPiOWtcDuinet9mNOFXtoIeoSLkX8l9
X-Yahoo-SMTP: lSXdSeSswBBwbDV745xUu6IpKX26HqApS7oconBY
Received: from User (kunert03@41.190.3.165 with login) by smtp225.mail.gq1.yahoo.com with SMTP; 05 Oct 2012 05:44:42 -0700 PDT
Reply-To: <kunert01@e-mail.ua>
From: “Paul Kunert”<kunert03@e-mail.ua> Add sender to Contacts
Subject: Attached message from Paul Kunert
Date: Fri, 5 Oct 2012 05:44:41 -0700

_____________________________________________

Return-Path: <kunert03@e-mail.ua>
X-YahooFilteredBulk: 98.139.213.161
Received-SPF: none (domain of e-mail.ua does not designate permitted sender hosts)
X-YMailISG: cmGpZdAWLDuxhP.iqEaa9hAPGRa7FDSu6mKyBNeCuVXpnSJL bjMzL_qiIyvMwVs1HFVVp4xDWbv7yThN9n0bcVL4xWrKyksSD9oNZ0RUcJpn affnLXiZOkHjgoHUSICBEtTdEsKY1RNiYcChXiinSxzw6du7sE_WvjaYxQVk yw9y34KHlY3pulbnfXDlrVTl0lxshO40cJPuNGo0lDa8WyDCC1PBOAfzsEsC DBPVOvKYzIbQfeaWDwp_ErlrS3u2U2AKDSIRicaneVAqNNoJKrYkpN1n.0D8 UNVrRn8Mt3JWZW5jrC1wTCmbYdNJDbgG113hruz9H04jp66GvKN3ksjVjQYN ._6lLMmiYZkde3u4yiG2ojXinZwg9kATvy7iYA_3LPwRmihx8WGM_1YMb6fu YzEU8fb7XgwPqGKAefJ6xlBWpipKfg.tNvOVXxN9gPomjlS.pbxTQjT5UMoH k6hoAPL9HIsmz0Mf6ROA.X7WgLSoJl83Fxec85ypa8x6weHcUUTOp.HSbH8. W1RPb0KwlHM9wexdTm.6KjggK0tSMFSnb89xIjIe84aXUcssrRZcpO03pFpe l51hzoRCVqHq_i0Vskr9aDrq3wKQCZ0vHtmhOGxJA3gDCpaXykNgzr5LENT6 kkQsU11syfxI3jO4xTmqDcXC_QyISEFCA5cl7OPX.UJ9g_ONMyah2WmyWslX uQXHH377pfTQ8Gxe8hDKzW0VolCEeZm72Y9KmqmhNoO9jeGa31ggxgOIgGHJ Qk0RZcw2rugsmas7BfDnoR0TDq9dc5AA8Yinyc1Boj_RH4wlC8qebzUGOJDY 8UciI4JVQI3u7YyOirpWVoTBgDglNFTIottwB1QTlw2sDwMOLUPP1p1DGlfk P9uydeWWba2XZv6DOz9Wk77DbBvR_1VIPrcv7bPXAevBO0LboTPo7dGlEh07 .pwPcgXmt.0iqRB.DOOCTqMySjWvNwN0h0gTlP6hCdQGEmNqu8zsSPOGI28g IjKxrieezARgq.wP2aJKS5jgG7H.Elmg3FuQ0eQ_Xe0h2SxmOcglx12p0Wn_ yaD7AXCfB94tf3NdE1gpVREEgP6qOxtMF7ADw8mfOPFMwlLFR4GIcmgAL0Sw ModCoimq6Jt4.j6yMqf_YeFtkidSKuebGU.HcRtQ0.2KWUU3Mu6vUgrsfSDu 9E.S3OywXMw-
X-Originating-IP: [98.139.213.161]
Authentication-Results: mta1100.mail.bf1.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm24-vm0.bullet.mail.bf1.yahoo.com) (98.139.213.161) by mta1100.mail.bf1.yahoo.com with SMTP; Thu, 04 Oct 2012 23:09:43 -0700
Received: from [98.139.212.153] by nm24.bullet.mail.bf1.yahoo.com with NNFMP; 05 Oct 2012 06:09:41 -0000
Received: from [98.139.211.203] by tm10.bullet.mail.bf1.yahoo.com with NNFMP; 05 Oct 2012 06:09:41 -0000
Received: from [127.0.0.1] by smtp212.mail.bf1.yahoo.com with NNFMP; 05 Oct 2012 06:09:41 -0000
X-Yahoo-Newman-Id: 817690.47386.bm@smtp212.mail.bf1.yahoo.com
Message-ID: <817690.47386.bm@smtp212.mail.bf1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: _hcV7D8VM1n9YE09yFWe62AboF5Kb8cFhEATGW16Q.syCCA X7.0spNKn2a_o0V0Lq88Wi37chDLESMjlxy0aaP1IdU77Dj1nMSpcDNvvZED pBVnGOXclLBXJxVN9BCi7I1WsE2IqV2cJCBVsVRIPqHGgp69hKrh0CKtsENX 3wc9mwTQK43tOX7xJXT_lbUKgZ75wJEf907uWOHyCpeiaFpEEHO16ie1Y16W 9ZWBi9aW0ScL0ObY2FXdXuQWjWZjlu_i.kAICFadZL5YiTWdFxK2UgsWinuA nQq5iwpgfwA34Zm2vVxjnBPXxVKVZqiH1VE1muKK8a30kWVedIcXx9gTY8CR SCI9S11DIBCc4Q5pDEv6D8ic1Pdd4q_c8eWrPRnTfrUbMjp.l5eCcdre0UJ7 uKCndg0O13TtfmxfzcdDR.nipcmCDeLUW7Z4hEPTmrFcKZPAEW6jRHIO6Hkp hWd2wOAol5j_5pf4f64rIRXDLWzgx3S2bfmpZR0ruBg–
X-Yahoo-SMTP: qVA2512swBCvmquTqBHkYVRza6AhdQ.MGvYxddLi
Received: from User (kunert03@41.190.3.28 with login) by smtp212.mail.bf1.yahoo.com with SMTP; 04 Oct 2012 23:09:41 -0700 PDT
Reply-To: <kunert01@e-mail.ua>
From: “Paul Kunert”<kunert03@e-mail.ua>
Subject: Attached message from Paul Kunet
Date: Fri, 5 Oct 2012 07:09:41 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_00E5_01C2A9A6.55CD3D6A”
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

IP: 41.190.3.28

_________________________________________________

“Paul Kunert” <joanwist4real1@e-mail.ua>

Return-Path: <joanwist4real1@e-mail.ua>
X-YahooFilteredBulk: 98.136.216.237
Received-SPF: none (domain of e-mail.ua does not designate permitted sender hosts)
X-YMailISG: mcctkXUWLDtDBcCYFXyusvuSgrzFpMqvkeuWu9htMhHl8L.K 5YIRzBIVhx0oA05ld.6Q.BJh8iTiffWbPFKQmHOqIcHvw2mQoN61PLvs1b8e 4W6FFmu4BPUdeEb2iIQids6T9dm3XmeGB2T15zR1WZS4hlWauF0qRowgmzdw .SdMZDvB5_EfOSqYk9R_9475iXykkBcjC6Hd_NWjQS1uBYrbXxb0dD746MAU ynTavjd3MYbSWK3pzHVuAqz.Q1nSaESVDU0rWgTj8EO3_FkcObebI5c0Rmwr hoMkm_doO9xfzIl6e7O4h7vKeRaBy0DPQE9_J6vpIAaRW4gTOv3RzZeAOr4c ZZmjDPzABu2rVAQtXfyb.aPEcjqde4BhDWcS4Pg4Eb.rI7szR57OHfbFN3ik 1FgzxbiTrTn1J0BlVoBcWM8uGOylF9nUZU911L2sUinBQlPTGvsQEcbh0nvj S0toI7cTEUr9qGXVF99LRA5h4904X5Y311NeRoQQMWG3Dye94uyEys6ZXeRP k0sbLI1fx0IbCH_sNjUZN6SAYp.LH2gDpRRa.idtzw5sg5s7FW8RmoKHPcjL EAYbu2kRLYo_b6vG0Xjs233lCtG9DRUj5orGliopm6NEO_9AOpjhWZvXBFtM d27hzooUpvD28rH..BGqGs_jITjsz9gjxJ6fPtj5UnC4Tt61_rXdYlp8knGs QgYrqKE4kbdu9JaNByQR4.Nl9LFTT2ZPk47uefF3xc74pV14zQuw.qHgrbIQ QZep1j_spZ6q8v5mcxm0173WkGYnA46dVL33TilqKCYRBuUC2isMiPXX36FC g8RIzmS5zW_1cSFvSyYnDQ4xzCk3oc6kA2MJaJfQ6sK0cAtCJJ4Ss4wHDs6s QmsctzuR1JHkrHuZ4xf1f5voPC0W8rudMyA9IT3AvHlf32iMW_5BdGdHFYzT JiCJOk9pxlUl0SXDTyUszHtDel2I276QAm1gaJEBLpgW6sBZG8OOeY0W4Jw0 OgVma3kGBMQCw3I2hWKcesFLCXV1W9_03RsZampz6GFQMaan8Uk.PIuhlJSq ut7ByzIDGILM4VvkE4rY4xXE0OzD3.tmZgl7pBzjUR_g6TSnToS.aylHoXBJ Z1zmaTBwNb1EM0xgXinOiB4BbtTtdeMQ6iWy6ZTvHgxpHLtAGaz95SKtm13d jmZTPs2YUhvHswbGeMJLWU.jR2DWf1wiT9n64C0kPiSXSQ–
X-Originating-IP: [98.136.216.237]
Authentication-Results: mta1149.mail.mud.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO nm37-vm2.bullet.mail.gq1.yahoo.com) (98.136.216.237) by mta1149.mail.mud.yahoo.com with SMTP; Thu, 27 Sep 2012 05:27:13 -0700
Received: from [98.137.12.57] by nm37.bullet.mail.gq1.yahoo.com with NNFMP; 27 Sep 2012 12:27:11 -0000
Received: from [208.71.42.214] by tm2.bullet.mail.gq1.yahoo.com with NNFMP; 27 Sep 2012 12:27:11 -0000
Received: from [127.0.0.1] by smtp225.mail.gq1.yahoo.com with NNFMP; 27 Sep 2012 12:27:11 -0000
X-Yahoo-Newman-Id: 218385.41445.bm@smtp225.mail.gq1.yahoo.com
Message-ID: <218385.41445.bm@smtp225.mail.gq1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: WH9WPKEVM1kXp4ok_6hfSESP1Oy4n8qpfic1jgXeMETkr65 0LxNnqyeJzxQLwjMLKtzLB4xxzfs9keFhjydzSUGqYzC_54tl_veKc9jF6CA Jcm.T7dAxelog49SJAoCiPnyjFQN9nYfp_T6SMx95JnqV4323X7sROdgFTbg 5AYbSHVpppVW2Dty_GxOFpzB9c2kqbd8BnE8RRvvOOHql5qMin06X5blqHLo RiC696JMsMfvORU9Fp12gc0cO.CyCbiHpfRH1.fTR8If7L2aPikBNEXVj3Mw 0xquCew8HKks1IdrcVzwyadxQukP8R8ctb07B8C9DqcfU.87Ei_C6rouVvaD Rh5Au3LhTcNFJDJvlt4.HvYEstN18iK9yLjPqhCC4yfUXrdF1bDZKKQjcFLD wJGgm3VRv03bSHTxcKuooA4VdqULjMuAr4w–
X-Yahoo-SMTP: 8QgoOC.swBD5DCtAAG.6DhGxZ8qf1FhoxJ9cCycI1w–
Received: from User (joanwist4real1@41.190.3.220 with login) by smtp225.mail.gq1.yahoo.com with SMTP; 27 Sep 2012 05:27:11 -0700 PDT
Reply-To: <paulkunert42@yahoo.com>
From: “Paul Kunert” <joanwist4real1@e-mail.ua>
Subject: Attached message from Paul Kunert
Date: Thu, 27 Sep 2012 13:25:56 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_00DC_01C2A9A6.74B8CD6E”

IP: 41.190.3.220 (NIGERIA)

OTHER SCAM / SPAM SENT FROM 41.190.3.220 ARE:

From: Dell Crowe via LinkedIn <member@linkedin.com>
Subject: Re: FW: End of Aug. Stat.
From: <accounting@smashedstack.com>
Subject: Re: FW: End of Aug. Statement Required
From: “Bridgett W. Navarro” <coopercurtis@glassoc.com>
Subject: Buy Cialis Online – the LOWEST PRICES GUARANTEED,

__________________________________________________

Associated Harvesters
67.228.80.90 | H
208.66.195.11 | H
66.90.101.61 | H
75.125.52.66 | H
65.111.169.191 | H
208.66.195.10 | H
209.160.32.68 | HS
87.118.98.62 | H
213.103.243.157 | H
67.86.138.59 | HC
216.40.222.50 | H
67.228.115.170 | H
71.158.134.213 | HC
216.40.222.82 | HSD
216.40.220.34 | H
77.160.89.4 | H
208.66.195.5 | H
24.37.14.73
208.101.44.3 | H
87.210.12.92
74.86.209.74 | H
75.125.47.162 | HSDW
194.237.165.84 | H
70.85.113.242 | H
24.10.35.67 | H
74.124.192.3 | H
68.103.197.12 | H
216.40.220.18 | H
67.19.250.26 | H
208.66.195.2 | H
209.11.244.162 | H
189.152.69.96 | H
208.53.147.89 | H
216.40.222.98 | H
209.160.65.42 | H
74.53.243.18 | HC
87.244.228.251
216.12.207.226
75.125.194.178
208.66.195.6
74.53.249.34
74.86.14.10

_________________________________________________

OTHER EMAIL SPAM SENT USING THE SAME IP’s AS THE ABOVE SCAMMER

From: “Dirk Clinton” <backyards6@tattoogalaxy.com>
Subject: We change your life to a better.
From: “OctaviaAngeles” <dorineleda@ge-smart.com>
Subject: Buy Brand & Generic Levitra Online :: OVERNIGHT Sh
From: <WhitlockyfdO8FUMIKO@aol.com>
Subject: V1aagra 150mg, 90 pills, USD 5.06 per pill + FREE
From: “Amazon.com” <account-update@amazon.com>
Subject: Re: End of Aug. Statement Required
From: <LeonardoHundley@mail.com>
Subject: Re: FW: End of Aug. Statement Required
From: ВЭД: НДС с��ав��а 0
Subject: Бухгалтерский учет внешнеэкон
From: Но��ый зако�� о бу��учет��
Subject: Новшества в бухгалтерии
From: “Terri Reyes” <prefectpc78@gordonsglassltd.com>
Subject: Your long item will enliven your life.
From: Tagged<Tagged@taggedmail.com>
Subject: UPS: Your Package H2158853444
From: “ВО��О
Subject: РАСПРОДАЖА ДЕРЕВЯНН
From: “36 ��оток”
Subject: ЗЕМЛЯ даром (реально!) под ИЖ

 
1 Comment

Posted by on 12/02/2012 in Business Proposal

 

Tags: , , , , , , , , , , , , , , , , , , , , ,

“HOUSE OF LORD’S ORGANIZATION UK LONDON”

INHERITANCE / LOTTERY SCAM – COUNTERFEIT CHECK

ATTENTION: This scammer had previously sent me a similar email on November 13, 2012 under the same email-address of info@lordsdept.org but the reply-address was managementfile1@gmail.com IP 41.216.50.32 (location: Nigeria) and 213.154.64.102 – For more information click: HOUSE OF LORD’S ORGANIZATION UK LONDON 11/13/12

EMAIL: ATTN PLEASE
The HOUSE OF LORD’S ORGANIZATION UK LONDON Have just concluded the meeting
with the board of Trustees of United Nations Organization and
Representative of all the financial institutions, The meeting that has
been for the past eight months on financial matters, It has been agreed to
release all long terms debt, These are the classes we are looking into:
those whom has been one way or the other denied their Inheritance or
Contract payment/award payment due to corrupt official services,

After our mutual investigation in the recent schedule for payment of
outstanding debts incurred since 1999 to 2012 according to your file
record where we got your email address; your payment is categorized under
section {B}: Contract type: Lottery/inheritance/ unpaid contract funds/
Undelivered Lottery fund, Attn: Beneficiary, We have decided to bring to
your attention, that you were listed as one of the beneficiary, The
executive council Have decided to pay as many they have their file record
on their desk on a direct wired transfer, The total sum of $5.5usd has
been approved under your file according to elect,

Contact the processing/paying manager for your direct payment of US$5.5M
(five Million Five Hundred Thousand United States Dollars), you are
directed to contact the International Remittance Department of Benin
Republic who is In-charge of the payment
via E-mail:
E-mail: olusegunoniwon@ymail.com
E-mail: consultationdept@yahoo.com
Phone: +229 674 067 42.
CONTACT PERSON: MRS. ANDRIANA U. OLUSEG
INTERNATIONAL FUND REMITTING DIRECTOR.
HOUSE OF LORDS BENIN REPUBLIC.
Also provide the following detail to her for immediate release of your fund,
Also it is very necessary and important that you send us an e-mail
containing your vital information?? As requested below so that you will be
given an immediate response and directives on what to do next:

Full Names:
Address:
City:
Zip/Postal Code:
State:
Country:
Present Occupation:
Company Owner:
Company Name:
Gender:
Age:
Reachable Tel#/Mob:…………..*No Voice Mail Service*
Fax:

THIS REQUIREMENT MUST BE PROVIDED TO HER COMPLETELY,
As soon as the International Remittance Department in your file location
receives your information, your US$5.5M will be Transfer to your nominated
Bank account. this payment terms is to keep a clean slate of all debts
owned by the government and company to individuals either by contract or
award fund, we hereby plead for any inconvenient that you might have
received by any of this corrupt officials, The United Nations Organization
will not be interested in your story of not receiving your payment if you
fail to abide to this Instruction.
Yours Faithful,
Mr. Anderson Paul
Public Relation Officer
Strand Bridge House 138-142 Strand,
City of London,
E-mail: com.unit@net.hr
Hot line +44 020 8759 9090
OUR REF: H/L/UNN/APXB/TF/08
IMMEDIATE PAYMENT
#:WB/PC/FMF/MIN/UN/APXB/08.
HOUSE OF LORDS LIAISON HEADQUARTERS UK LONDON OFFICE.

SORRY IF YOU RECEIVED THIS MESSAGE IN JUNK BOX IS DUE TO OUR SLOW NETWORK

HEADER:

Return-Path: <info@lordsdept.org>
X-YahooFilteredBulk: 213.154.64.102
Received-SPF: none (domain of lordsdept.org does not designate permitted sender hosts)
X-YMailISG: n17TtrcWLDsdDEuSkY_HSkT51L21bPdZBMwxi6AQhYevQE6n 5AHJGUMCXxFcQWA_8b.NyHFBqZMcO.UjZ8FCertxLymBdRPX5yB160N2TGnm qwaPHWExX39Nk3fcXAu.PafkPhJjSLuBXZu9PORr5C.y390tBzQRaxX_Ajeo 7Hur_RtoMBNsEKEcS1NY_jJ7MVItgwhEdNv6BMjqx_b1MlG92f5bS_CtuAVd .oh_JKiqCucKnJdR_vA8__9UE.1fwuLwZ2jBdATHKGRXWA9jdgOwV3Ib69fT EOd7eaFTWdb_5Z16_.TYe.j7ArE3IJKpEKIk4E3slNCtWmGIRFmTka.H7YVU kHIFWlOe90o2tvuCYr8RvUv71WE0TgPgVl6Khq6RD5q1jIaXuAGNiZL303nP R7TIfXxur5a8ZC_2oHyszcv9WRLQjWFSCzGvGQYUJrk_g_Fa1qrpUjRjeM2i l0G7FO2XeR9HCwaTT2znjIqPkdy2KwzEIIjCz.N4kogQKc2kG9n6xWFpcpLo 74MXi2XlqMqfjw4Cj80wiP3jwE0ktGXxBGMSU_2n3YAQ21o2uVONL1mXGIl5 4bMmhVshiHKswZJfj1BN.SBP2D3c53qVkVjkIDCET06u1nIveivDP4Y_oe4g Gp0bTWt5y_R1RqFMmD.AIwh_MS5N2hQgXY2q7xk1_gsgMw2uKxCqk5wcw1df NMnauhxNQjJs0_tgmkT.nJ.KTOhA_qgdK986CusmuMctpQOH_ihBK.jvNTSK btYCtI0byx3BytVo7snXt8QYK6E5Jx9k3ZzauOFpR59.AeWK_EuKrJxb5kp_ 3EZ1tBGHB.ss6mypa8vfMvhb8TINeip6CZPnWI2wlXwUR.ZEKIJrohmFVHFm KFYVmymAMCOdWOLWh2A.dyJSUrjLje2_aZ.DSuRVGpoAtJLHe0QsBF20RzyD 7dC25DeBhkcO8UHLsvng7wFO2coQ2XMhsp.ayEqCe4X2lpjsh2lah9Xo7V7L pPiABw_yasLUGHztyfOUYJ9OSusCqxN.k2MPixuf1vKCB7pq65Iyc4p2uGVC K6bnKMICrei.rxdj1vvTYbKEmvHVsmn.tfhS5B0nTlah3FmibbEpZKHX7Upe wqrzGbwYMdD9LSIDpmkIqF3bRJMX91BdA08UsLs4_E931bhwDffu1ERuYjIw WyEwbhIfjONgETEO8gEzvb42sZbk90Wsxo5b2y1F4ypAzD7R2VyYuQIFQHpb _kcoyrCgQZolEt10hXFRxy0X5MWOAFCOxnDTvDjoJuR2m5Q4DJk8Ic5xuXp8 QCyFyE5lHJPSNnKZ9A15ErmDah0X_ZcVtz5Ri2C_TQNylkHidCSUd8sG0SJb Mg567n3VzIfX6JYHtqlSY9NbCE.G8GC_kNiS.WMe0oeKI7OGev6vbuV8Hzjf yRICVnPIJjSU56vQ91Rk6elLYGnonbkMLw–
X-Originating-IP: [213.154.64.102]
Authentication-Results: mta1349.mail.mud.yahoo.com from=lordsdept.org; domainkeys=neutral (no sig); from=lordsdept.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtpgp.orange.sn) (213.154.64.102) by mta1349.mail.mud.yahoo.com with SMTP; Sat, 01 Dec 2012 01:51:12 -0800
Received: from sunumail.sn (HELO srv1-smtfree-msg.orange.sn) ([213.154.64.61]) by smtpgp.orange.sn with ESMTP; 01 Dec 2012 09:17:34 +0000
Received: from [213.154.64.43] (helo=www.sunumail.sn) by srv-smtfree.orange.sn with smtp (Exim 4.43) id 1Tejj5-000827-EM; Sat, 01 Dec 2012 09:51:11 +0000
Received: from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)
Message-ID: <55073.41.203.79.249.1354355471.sunumail@www.sunumail.sn>
Date: Sat, 1 Dec 2012 09:51:11 -0000 (GMT)
Subject: NOW CONTACT THE GLOBAL FUND REMITTING OFFICE FOR YOUR APPROVED CHEQUE.
From: HOUSE OF =?iso-8859-1?Q?LORD=92S_ORGANIZATION_UK_LONDON?= <info@lordsdept.org>
Reply-To: consultationdept@yahoo.com
User-Agent: SUNUMAIL/1.4.2
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: info@lordsdept.org
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to false
Content-Length: 3749

HOUSE OF LORD’S ORGANIZATION UK LONDON

Some other email addresses and IP’s used by HOUSE OF LORD’S ORGANIZATION UK LONDON SCAM – info@lordsdept.org <> com.unit@net.hr <> managementfile1@gmail.com <>  olusegunoniwon@ymail.com <>  freshtools@wanadoo.fr <> hackk@smtp.com <> 213.154.64.102 <> 213.154.64.43 <> from 41.216.50.32 (SquirrelMail authenticated user david_fletcher) by http://www.sunumail.sn <>

RECEIVED: from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)

MESSAGE-ID: <55073.41.203.79.249.1354355471.sunumail@www.sunumail.sn>

More scammers who’ve sent out email spam under 41.203.79.249 are:

From: <sales1@home.fanwrestling.com>
Subject: Fwd: Re: Wire Transfer Confirmation
From: Tagged<Tagged@taggedmail.com>
Subject: Re: Fwd: Wire Transfer Confirmation (FED REFERENCE
From: <hien_u_spine@hhp.sugarmotor.net>
Subject: hien_u_spine@hhp.sugarmotor.net � ROLEX Inc � Disc
From: <kathytessendorf@mailfront.cbulock.com>
Subject: kathytessendorf@mailfront.cbulock.com � ROLEX Inc
From: LinkedIn Password <password@linkedin.com>
Subject: Reset Your LinkedIn Password
From: <Harrietjeancy@gmail.com>
Subject: Fwd: Re: Your Flight US 66-56833
From: “Purchase Vigara” <EAF01C7@tennlandforsale.com>
Subject: Weekend sale

western_uniontransfer121@hotmail.com — Received: from col0-omc4-s16.col0.hotmail.com ([unknown] [65.55.34.218]) by vms172065.mailsrvcs.net

From: Western Union Payment Center western_uniontransfer121@hotmail.com
Subject: FROM WESTERN UNION AGENT MR.PAUL EZE
X-Originating-IP: [65.55.34.218]
X-Originating-IP: [41.203.79.249]

From: Office Ups Courier
Subject: Urgent Delivery of your ATM Card Payment Through UPS Company Delivery.
X-Originating-IP: [77.238.189.61]
To: undisclosed recipients: ;
Reply-to: upsofficecourier@yahoo.com.hk

Received: from [41.203.79.249] by web29301.mail.ird.yahoo.com

From: Money Gram
Subject: Dear Customer.
X-Originating-IP: [77.238.189.216]

Received: from [41.203.79.249] by web132219.mail.ird.yahoo.com

Received: from nm25-vm8.bullet.mail.ukl.yahoo.com ([unknown] [217.146.177.154])
by vms169119.mailsrvcs.net
(Sun Java(tm) System Messaging Server
Received: from [127.0.0.1] by omp1016.mail.ukl.yahoo.com with NNFMP; Tue,
29 Nov 2011 19:54:16 +0000
Received: (qmail 69819 invoked by uid 60001); Tue, 29 Nov 2011 19:54:16 +0000
Received: from [41.203.79.249] by web26303.mail.ukl.yahoo.com
Date: Tue, 29 Nov 2011 19:54:15 +0000 (GMT)
From: “Mr.Edwin Aja”
Subject: CONTACT DIPLOMATIC AGENT IMMEDIATELY
X-Originating-IP: [217.146.177.154]
Reply-to: adamsvictor14@yahoo.fr

IP 209.239.47.191 as relay: IP: 41.203.79.249

YOUR BANK DRAFT DELIVERY NOTIFICATION!!!
Contact Person: REV.TEDDY HARRIS
UPS Courier Company.
E-mail: upscompainy1133@hotmail.com

419 from above IP, using 3 Yahoo IP addresses, including 98.138.91.34, as relays:

YOUR WESTERN UNION PAYMENT CALL TO CONFIRM @ +229-98679197
Vital Finance Bank Western Union Department.
Location Address; Plot 1261, Adeola Hopewell Street CO/B/REP,
Contact Person: Mr Chris Mike.
Tele phone Number: +229-98679197
Email Address: ( westernuniontransfe6@globomail.com )

“Western Union” Spam from above IP (Lagos, Nigeria), using IP 196.1.218.76 as relay:

Call Mr Kevin Anthony For Your Mtcn.
webmail address:( western_union001@qatar.io)
tele phone.+229-984-168-39
Contact person Mr Kevin Anthony.
November 17 2010 03:11 PM
H.User7043 commented…
“Western Union” SpamScam from above IP (Lagos, Nigeria), using IP 211.55.29.156 as relay:

MESSAGE FROM WESTERN UNION
Director; Tuker Hans
E-Mail :(cbbj@ymail.co)
Direct line: +229-66-614-055
October 09 2010 09:39 AM
H.User7043 commented…
From “Tony Chris,” purporting to be a poatmaster in Ghana, as a follow-up to an email from a “Barrister Paule Eze,” offering me an ATM card worth 2.4 million Euros.

“Attention Beneficiary,
From: TONY CHRIS ”

 

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Dr Jerry Frank”

419 SCAM also known as ADVANCE FEE FRAUD

This Nigerian scammer also had multiple spoofed links in his email. I didn’t post those up here but I did post the rest of his email. Very persistent scammer(s)

 

EMAIL: FROM THE WESTERN UNION HEAD OFFICE DEPARTMENT

REPUBLIC OF BENIN. FINAL RELEASE YOUR MTCN?
Send Money Worldwide
Our Ref:WUMT0XX2/987
E-MAIL: ( customercare_benin@live.com )
TELEPHONE : +229-99 34 72 99
YOUR FULL RESPECT,

I’m Assistant Manager Western Union Branch Cotonou (Bank of Africa Benin SA) Benin Republic, My Name Is DR JERRY FRANK, I am responding back to you this morning to inform you that Our General manager just passed away 5days ago(((Died)))and all the files/documents was handed over to me yesterday, Luckily i went through all the files and found out that you have incomplete transfer in our custody,Total funds $2.5M.

AFTER THE MONEY HAVE BEEN TRANSFERRED CORRECTLY TO YOUR ADDRESS WE WILL MAIL YOU THE PAYMENT INFORMATION’S YOU NEED TO PICK UP YOUR MONEY IN ANY WESTERN UNION AROUND YOUR LOCATION CORRECTLY. BECAUSE THE ONE THAT IS HERE IS NOT CORRECT BECAUSE WE HAVE NOT RECEIVED OUR $50.00 USD ONLY TRANSFERRING CHARGE FOR YOUR DAILY $5000.00 USD.

REASON WHY WE NEED YOU TO SEND US THE $50.00 USD IS THAT WE TRIED TO DEDUCT THE TRANSFERRING FEE OUT FROM YOUR FUND BUT THE MINISTER ADMINISTRATOR TRUST FUND OF BENIN REPUBLIC TOLD US THAT NO ONE HAS RIGHT OVER YOUR FUND AS IT HAVE BEEN SIGNED AND STAMPED THAT NO MONEY SHOULD BE DEDUCTED UNTIL IT GETS TO YOUR HANDS TO AVOID STEALING SOME OF THE FUNDS SO IF YOU WANT TO TRACK THE MONEY AND CONFIRM IF THE FUNDS IS TRANSFERRED ENTER OUR CODE
HERE IS THE CONTACT INFORMATION OF WESTERN UNION,

DIRECTOR GENERAL…DR .JERRY FRANK
EMAIL ADRESS … Email :customercare_benin@live.com
PHONE NUMBER +229-99347299

THEN CLICK TRACKING AND ENTER THE MTCN NUMBER; TRACK YOUR PAYMENT ONLINE /MTCN # MTCN:- 6690348967
(www.westernunion.com) SENDER: Azubike Nnekwe

ENTER SENDERS FIRST AZUBIKE ….. ENTER SENDERS LAST NAME..NNEKWE . AND CLICK TRACKING AND IT WILL SHOW YOU THAT YOUR FUNDS IS AVAILABLE FOR YOU TO PICK IT UP SENDER NAME: Azubike Nnekwe

MTCN :==================MTCN # 6690348967

FINALLY URGENT SEND US THE $50 USD TO ENABLE US PROCEED ON YOUR PAYMENT IMMEDIATELY RIGHT.

BELOW IS OUR ACCOUNT’S INFORMATION FOR YOU TO SEND THE $50.00 USD THROUGH WESTERN UNION MONEY TRANSFER BEEN OUR TRANSFERRING CHARGE FOR YOUR $5000.00 USD,

RECEIVER:………NWASA EMEKA
COUNTRY…….. BENIN REPUBLIC
CITY ………………….. COTONOU
MTCN…………………………….
QUESTION: WHEN
ANSWER………… TODAY.

SENDERS NAME………………
AMOUNT:…………….$50.00, USD

YOUR URGENT RESPOND IS HIGHLY NEEDED .

WE ARE WAITING TO HEAR FROM YOU AS SOON AS YOU RECEIVE THIS MESSAGE TO QUICKEN THE PROCESS OF THE RELEASING YOUR PAYMENT TO YOU TODAY.
THEN CONTACT US WITH YOUR FULL INFORMATION.

EMAIL ADRESS : customercare_benin@live.com
PHONE NUMBER +229-99 34 72 99
Assistant Manager
DR JERRY FRANK
DIRECTOR GENERAL…

OFFICE OF THE WESTERN UNION MONEY TRANSFER.
COTONOU BENIN REPUBLIC/
OPPOSITE POST OFFICE COTONOU

FROM THE DESK OF DR JERRY FRANK
THE DIRECTOR OF WESTERN UNION MONEY TRANSFER WORLD WIDE BENIN REPUBLIC COTONOU OF WEST AFRICAN FASTER WAY OF RECEIVING MONEY

HEADER:

Return-Path: <officefile744@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.226
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: 2pnBCPMWLDvoKbKfRYQP2unOn73tRr_zc6_3LV02TBnYNTTC alVWryLtp99iB4fAds.OZlImdb9GjhN9fGL1OstpU40_S7tAcWfmrjRKVtCi zYS1JM4sLbtp6tKM4fNakzZ4o0iag0A.8wHH.eLSoQDXhgZwy1EKwYvOPvT7 qcTZ63Bxww3xr9cYvavXq1h0bEuL_hmfeLFGbHdjKIQ7N1gM7vvXykmXkoGD t7klbDAK7qovUtFToRQHvgRj43AKfiMkjTGokrLA.EFmeK4KE27IAwRWdZlI JM0uU2V0UBjVH8eO01I7xT.KxaFBBjmoznk4okvodLviJpn9m9C2AnWV8_u2 DFeeqzTKrem0JvX2jXit4YtGRd5A..CZ7xWWcVj5.AD5FKb09F8sc6euFn1B FnyS9lMOcPP2FM5RE.OWF9SbmJbA9H0YYmJE_ypqwfEzaI.XV8NetZ9evC3e mJlRXHL58Gd6j69zWvxjYqoUCQD5K48of6evdBzNmX7Rz08OgtJOZ19qkEPO gFr0.Kv2BY7Lvf0vB6h1J3luZPXeeEbXW5d36IxKfn9fMkSxqzQJmF9nbCep XhFXyB5hAEQRp2sBj0fGMXRmMvI3erVaew0CF0meAC7UncgPGRjN4qj1Rut5 jQCoHDS5T8njYTLbJENbXWkut_KTniDEkK9vvq1TOrYTKnfIM1zkRvWVJXEQ 7ijJC9wV3FEQDsDgeuW4eQ4HnILMt.G0YJK4YVWVVj91vlJAqXgYL4J3Jw6K DYvEb3XAyGOpR18EWz8iVTBmpGm13bhvG5_VQxIb0cnnzsTbR3Yu_2k4scW7 DgpyttmP0CLqlotNyFnfi8G9J7JBo06liIdC3PxQ81poost55e2pvrILKz.C ic9rl2DsqiPXlEIYN678Wp9PPlbmxDXMfLOsUQe2wsdbqicGAU62dFqoqbAy kgJybde1Jv39lusYDa2yodYxZOTwgsOzcvHPFXKGprQNgxvEx72LZTh6wxoQ FDqjH4H_QJhw2ss5i31AraBa0Rz59ZM16PMjGwj2YPC8NKtOHCMrzBhhHzww VVikK6yQ99FWPO8MfeWp4I4h2EougUI3a5.6B0JzHGQr6is8ywGHTSIlFcs. Ch.7xeVcAAJ7Ll9Jnxb9uUVA1sBP.9iNzLXFfow_HviTAObtkqFMDx_2moTD chpqwU.EUraPmoV_lXYYvx1X.8Ldjr3t4eVqfNWpgse6ngyFeBgB_jXRBufF bMXx4og93jBWuiNr6F20jK_sdT.waApS7DKJXHCZdoYZDpQN3vNLXiYn8DiI uxX5wHdpdRvb9wiX7u_XmyW.ezaYiTJwoVpUG1E6z_PvVxxcpTCa24XTYokR 18jjB0ffB3YE6t4j6Q8TAjL54j03mOs0coFAS2qUOiUhFM4bIt_8G39AUns9 4nO5bGIuKK42ZnoRKL1vtRIgpHyMeW7gDk_Q
X-Originating-IP: [203.188.200.226]
Authentication-Results: mta1026.mail.gq1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm5.bullet.mail.tp2.yahoo.com) (203.188.200.226) by mta1026.mail.gq1.yahoo.com with SMTP; Fri, 16 Nov 2012 17:28:00 -0800
Received: from [203.188.200.81] by nm12.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 01:25:40 -0000
Received: from [203.209.230.76] by tm2.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 01:25:40 -0000
Received: from [127.0.0.1] by omp105.mail.cnb.yahoo.com with NNFMP; 17 Nov 2012 01:25:39 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 948588.73673.bm@omp105.mail.cnb.yahoo.com
Received: (qmail 58178 invoked by uid 60001); 17 Nov 2012 01:25:39 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1353115538; bh=Z/45bT2Hzt0RkF/DkjKN0108II0rCoYQL7BeXidyzHc=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=YCrXpfBPEYXMCs4HobCtrN5KkIRVSs7r+pyVajF3/r97VbixozaTFKfCtqGc4MBo23DcFnkB1PdRaHyStuIggcFPOjH4ELizCmv6i3mDv1zBJ0WDqjyGTpojuvBltATL6HHvAgApWb4BqRgu+lhNlnnNGZIl9FVmHtMxsV8/KUM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=FQYDZkkSgpqkUQa5rHbLaMMFa6P8JrZs6EdlxP5aTl0587cM9Gt3s7PJPVSJ65OmP1BVvpn+/hox24ucihsuLJDp7ZAhPVYmMLnF7WJc7Agim+7lCxKu/+19tQ/Uj2kEFzwJZQD1BQHusJGyRmAlPdjtd8FotKikr9z/iRyNEN4=;
X-YMail-OSG: bCDk5SIVM1kwQFU2C124e1Xvdd2Hs0aYRIpHBAgcZ4XdVeQ Yi8Dv8VZt
Received: from [41.216.50.207] by web92410.mail.cnh.yahoo.com via HTTP; Sat, 17 Nov 2012 09:25:37 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353115537.57775.YahooMailClassic@web92410.mail.cnh.yahoo.com>
Date: Sat, 17 Nov 2012 09:25:37 +0800 (CST)
From: Dr Jerry Frank <officefile744@yahoo.cn>
Reply-To: customercare_benin@live.com
Subject: FUNDS $2.5M IS RELEASED
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”-1228034759-1504060392-1353115537=:57775″
Content-Length: 38983
Dr Jerry Frank – officefile744@yahoo.cn – customercarebenin@live.com
 
Leave a comment

Posted by on 12/01/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , ,

Mr. Mark Brown <> Western Union Office

Inheritance “Beneficiary” Scam – 419 Nigerian Scammer

This IP is being used by more than one scammer and if you received an idenical IP from an unknown online user then it’s a scammer. For some other emails, email-addresses, names, etc under the same Nigerian IP, please click: Bonjour 41.79.217.122

From: mr.dango.dangi1@gmail.com
IP: 41.79.217.122
Subject: WESTERN UNION BENIN REPUBLIC hr1-8nw24
Tel: Not found

Western Union Administrative Office®
Porto Novo , Benin Republic

Attention Beneficiary:
This is to officially inform you that, We are still waiting for the details of the western union payment information as soon as you send the charge of US$200 only.

You are hereby ask to remit the fees US$200 to the following information below:

Receiver Name::: Victoria Nnamdi
Receiving Country::: Benin Republic
City:::::  Porto Novo
Question::::: Payment?
Answer::::: Completed
Amount:::: $200.USD (Only)

On the receipt of the US$200 ,your payment shall be release to you within 24 hours. I wait to hear from you as soon as possible, send me the payment
information via E-mail.

Best Regards.
Mr. Mark Brown
Chief Managing Director
Western Union Head Office,
Benin Republic

 
2 Comments

Posted by on 11/28/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: