RSS

Tag Archives: Hart

“David Smith Esq”

NIGERIAN SCAM – ADVANCE FEE FRAUD

ATTENTION: This scammer sent the scam in a form of a file. However, after investigating a little, I found out that this scammer is also Pere Hart <> Paul Kunet — I have posted dozens of emails from this fraudster alone. Each email contained different IP addresses, email addresses, fake agent names, fake customer care officers, etc. — Be careful, this Nigerian scammer is very persistent.

stop_scams

Return-Path: <olamido@aol.com>

X-YahooFilteredBulk: 98.138.90.78
Received-SPF: neutral (98.138.90.78 is neither permitted nor denied by domain of aol.com)
X-YMailISG: e8MvdNMWLDv1UmRT2_yweytc9ZTc_ZwqDMeIu2NLuvWpaL77 IXvbEWYBku_Fw_FIM7jarAKbSJoLgONZnfZWULAwNPpTl7mclzYJocNVuTDv QeEiLt309pJerpStd3BuurXMwfEZFWgjSRiLKqEuYco2u4WYAppkLAvZQU8P oKBZKhdpP5iTX36Ml3b1HQxniq1rIstqovR7THaYb2wOO8G72FQPyg6t9X34 JW2nSLH2qa5QUcyBDqlaZjcvr7Z8KW9BtxIKiI9fbt0zpJnCIz0huvfLT92Q GaueuzIJzXfURnOiLlryp49g5ZRGbTBDwuDtZ4X7mycmBCEBUDiZapCeOKKY OevtMSmjP8.RHYivp17LtvJx9CBtbSh6O2_xOYGPf3yiBf7jBNd4Lfww0kwb QR1VY2RtnP4k30iGppPCfrNxWDgwJ9jh.G1CPf99JXmUlCP_vI5mHldv0.FW cWfDQH4j00WrIHnWTeZMMLczGStYgeog4.T3UDBhApRONqd2hbjXbLNKco3d x_77MAXQ07vdrA47Yo97r4MyDdiWJV_q8LrTz3xgoBeNpt4fof3H5mrW7kdS tcpAI9nBa2HpBhMzLSeDRzRI5NVviYTcPG0wMA03L6.vkeserIhBCz7_hbH5 Guol_ZlsZAdFtBu3.Zs_vuA7SgGEBSZyO4ydtTAJ63firC9ocWPciH5iCYnO 7dj4kxFk8bSdlPTIJMF8nSQT8yF2qkLU9pttEFHPuA62Vv51Lbrjh6igEC_f Y0WQs4r4ICid.W1KkMChbwrsU.BwHw6Ss3vDtra.hyNLvWYdabGc4iKGRfGm BreLJR6dZ7Py2MtcKjUaRHbgFVSBx7VCMENyylhlMy9WKnPAFiikXbFh6EE7 KTmVRhV7YpOweuf2vvzEo0qXf52CScMVQRRydZfu0KgxKugfSyVSQCZXq.a2 m0c9QwPL2C2q0BlIVtuEXhmOMmzAEdHrO26wEsR0gata3yv8SYHn4Jf0oaKj YbnQyQWg7nxxRuziWpF7M0f4SdSwOaFGaolejCWtx76vb8vEFsGQsqJNSXbg vfD7C3CT47GGi.Be4Whef2cPtwCdQqbK0lrI.UD2e24vuv3lyp1iAJWgGiWd AhHm2yRofrXOAv2iE3DzAx4Mi1uP3Cir1SpE0roN6QpR2jLvts1LvS1r5Qtu cfyFky2THJ8CX7VpywFHK33PVFmF8DOtc_E-
X-Originating-IP: [98.138.90.78]
Authentication-Results: mta1343.mail.bf1.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=aol.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ne1.yahoo.com) (98.138.90.78) by mta1343.mail.bf1.yahoo.com with SMTP; Fri, 12 Oct 2012 04:18:55 -0700
Received: from [98.138.90.52] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 12 Oct 2012 11:18:53 -0000
Received: from [98.138.226.129] by tm5.bullet.mail.ne1.yahoo.com with NNFMP; 12 Oct 2012 11:18:53 -0000
Received: from [127.0.0.1] by smtp216.mail.ne1.yahoo.com with NNFMP; 12 Oct 2012 11:18:53 -0000
X-Yahoo-Newman-Id: 119889.56474.bm@smtp216.mail.ne1.yahoo.com
Message-ID: <119889.56474.bm@smtp216.mail.ne1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: GvHM4Z4VM1mrbNwvke0jp863UTCgDCY1wHCSXwd85GN_lOE .QZV7mw5IIG6L6_reF51VKCmxNWpmuPoT6ao46AkPunGEX9v3i04.4IMBYMA K46HpTI8XV28lObvztL8r__FXT1bJCYaGNIH3nB84VporEjKTPkgt7.SmRRA asMIW8rHwpeqs.f40J4.eXAhBVS5btiQz4X5YL7Qjx4K2zj1yultECeGC.7F fjdl0ihjhQPJjeG9Q.w5Y9fs3V6Xi4wHWxauBTt7KCNmxQGvYmjBcsr3hCsD xdslhXqOAx7c6vXleH23zT9aIP6qr0TCIEVOQomGL2rh3LoXKfqTVL6HpPuw 2DYZIHcSgNZJCgFmxZ0KLhPmnFnbIPwdD8.eNYoAKU8O_wyRuMtoruUBJ.oC BrxIcN.hW3HQgfJ530zSd7DVUzS5PjUFzTV4Eki2dNiGSpBtq8bYcLbQojah ssVFU1W20Sj86IHdr32XHGaHIoSZ6jk4ndJVCq_qI9l6DpSlvWA–
X-Yahoo-SMTP: ELlqi7WswBBJ3HhQsmFiH_77CcMUU32BiwPxZDD_RvxPEYhI
Received: from User (olamido@41.58.27.102 with login) by smtp216.mail.ne1.yahoo.com with SMTP; 12 Oct 2012 04:18:53 -0700 PDT
Reply-To: <davidsmith5421@gmail.com>
From: “David Smith Esq”<olamido@aol.com>
Subject: Read Attache File Of David Smith Esq.txt

David Smith Esq olamido@aol.com REPLY-ADDRESS: davidsmith5421@gmail.com RETURN-ADDRESS: olamido@aol.com

IP_USED: 98.138.90.78 RECEIVED_IP: 41.58.27.102 LOCATION: NIGERIA

 
Leave a comment

Posted by on 01/30/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , ,

“Hart”

LOTTERY / INHERITANCE SCAM – NIGERIAN SCAMMER – ADVANCE FEE FRAUD

EMAIL: Attached Information Circular concern your inheritance payment funds from Central Bank of Nigeria. Open the attached message and read carefully by following the instructions

The attached file was titled From CBN.txt

HEADER:

Return-Path: <centralmessage.info@e-mail.ua>
X-YahooFilteredBulk: 98.136.216.183
Received-SPF: none (domain of e-mail.ua does not designate permitted sender hosts)
X-YMailISG: LCUay28WLDsXVnOIpfCgBYTNfUXrE2LzwaL2yegEkWenpW4X SBC_EuDaR.w80oTiRw0ETbWjvP.oR9xLNcD7JUMv_xI1fNeJP8k.KcZ.dqTR __CHSWogq6Y_qJChRBP51wqiJprgGE6Mb26FPmLdxsI19IKF5MhcLCzgz9GZ 3upzi_Ggbhkx_e3AU_ldOE7IjHvUEtfkyyUafscGRUZedVhSP724ErueRN2I 7ApPQGxnfFiOtG.dibMzZJI3Su.kp6G8iOWXb2FGW0vPwm3toR_flnLYadVP nnu6ZkppI8WzKexY6Z5ljQvaC7ibS3tNTjvvgqGeCBLy3ggRYTuqRdNUgv_o u2sVjXiNgoGbtBZPa.5yk3VWGdgVbHDtx1oLpa0Wh9L1tHBn.5s1of3So1ip 5gIjzhWrgo.JckvFtRMuZG26_mlOj4ygNpptgIajS._Lw3klr26swSLCCRri AnVgqAAF5T3Wdj3BVRBG3M96yG_ZlDXb7Jn97xRrReXrvxv7D.tL9vUQ5JcT WffcRC9NOnNc6eDWKlkueUcyGhcpb63wnettpvysZo.99iN2MvMfZBL01NBO atm5VrDsFhdS4cD9ib15fVbBeFxzW9NReDqTzONBUhGxLesQfAA1KOcuXrI2 gC..B0r7T1qgztq0Ju0EeAkkvO2IyRwoukFjWljhIbuGJZqAT0bYhMwX74T6 dKnM_2oeqrmxZBspkNnK4vxHP2XQdyu4kWV8.CoGdS8.VYITfT.USxCmjR9W oEAq5dbf22iPkCLvRMXRl4AeQi_gsL_kCH6CfzyOZMLxZYyFEPr8n.aIYDVW YyJtqybgme9zxTBZ3vhJZA6vJ51x2KHav65hdOU5w.ys0gti7YQ9VUmm0nLc veTHe1RMnICMIFT2sJiTVgeXBAPwxh72ypfOv3S2CbifYFxKoEbwhZ1vWSQq Ou7vnqZUiHMjgjOL2gDZhHThAtEgbhASmRAJV1mcCfD.rA2xUUvAuABp5EhZ KDwQNQOBSSAbb6LMwTdJutCMSX3UV2JGPsTdNxApKbDdElB4X.Dp.ltkOFpW xiwJ9Ca_QYezP9RF.0aZuiwvthXDfB1Z0LE9TSitaiDn8dU4.DK1qReYxkqv Bg2YMCOuvQXMCKn8N4OFQev40jW74tjGkhwxAiJJU88IDDc-
X-Originating-IP: [98.136.216.183]
Authentication-Results: mta1198.mail.gq1.yahoo.com from=e-mail.ua; domainkeys=neutral (no sig); from=e-mail.ua; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm29-vm8.bullet.mail.gq1.yahoo.com) (98.136.216.183) by mta1198.mail.gq1.yahoo.com with SMTP; Thu, 11 Oct 2012 10:40:45 -0700
Received: from [98.137.12.56] by nm29.bullet.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
Received: from [208.71.42.194] by tm1.bullet.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
Received: from [127.0.0.1] by smtp205.mail.gq1.yahoo.com with NNFMP; 11 Oct 2012 17:40:42 -0000
X-Yahoo-Newman-Id: 454267.58831.bm@smtp205.mail.gq1.yahoo.com
Message-ID: <454267.58831.bm@smtp205.mail.gq1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: sOZOVKMVM1mnA9AK4aaLG13dw.2te_jOnoIlkFSo78oTN3g yI.ys52b1V4VsGigPYxlplzI2Rs3TVbBAn.RWDpO0rj1fhfJmsdfaoXQmnis py73qobzWcXu4_GfpxCdEjTRZ6ejB3dbb.R94ACw1ti_ojo8XsTHy.KWnbLX NSdN5e.LRbtRUgaegUmCah5EI0VYpVmWcekFbCGwQGmfWOSGlb04qa7FBlyy XcOh6c5GuIqvhM1wDjDoKUtf7oSMaa6ozaTNU00Z_y8KeSBonZROIe1D10l3 43tNvsoJ7v6A7kguKsNOT3zh_pWXFWPmI8YNiC9jfnlDYqAdt8n38xv84WYB bzPE0uio7lRXj4HPPpWmp11SYYlKHj2SuJ0fTgQHMKkQsZO2Lb0EzjX9xuT1 0aRkaaqfYIKxuquOeXqq8ENytIue2XIpeTeLAf84qlSyv4CMyDIjw02HSUgW 2quxD829qRALehBycbxfAZscfqIKIs.BrdjgD7.bDbpTpU3jrs_hUis45VTc Pua5HfCU-
X-Yahoo-SMTP: zDMiCVOswBDcK9OIGzmdQnoU.CR0Quer1VzIrWkm300MMv4-
Received: from User (centralmessage.info@41.58.12.225 with login) by smtp205.mail.gq1.yahoo.com with SMTP; 11 Oct 2012 10:40:42 -0700 PDT
Reply-To: <drperehartcentralbank.org@e-mail.ua>
From: “Hart” <centralmessage.info@e-mail.ua>
Subject: Open the attached message and read carefully by following the instructions

Hart centralmessage.info@e-mail.ua – REPLY-ADDRESS: drperehartcentralbank.org@e-mail.ua RETURN-PATH:   centralmessage.info@e-mail.ua

RECEIVING IP: 41.58.12.225 ORIGINATING-IP: 98.136.216.183 — 208.71.42.194

BELOW IS ADDITIONAL IP’S AND ADDRESSES USED BY PERE HART

FROM: Dr Pere Hart dr.perehartoffice@gmail.com REPLY-TO: <dr.perehart@yahoo.com.ph> RETURN-PATH: <drperehartoffice@gmail.com>

RECEIVED-IP: 125.88.125.201 ORIGINATING-IP: 77.238.189.207 — 72.51.25.85

CLICK HERE to read a list of emails and headers sent by the same scammer as above. Hart also goes by Pere Hart as well as NNPC and Paul Kunert / Paul Kunet — Etc

 

Tags: , , , , , , , , , , , , , , ,

 
%d bloggers like this: