RSS

Tag Archives: John Williams

“Mr. John William”

INHERITANCE SCAM / 419 SCAM

avoid-scams

From: “Mr John william” <spk@spkdigi.com>

Dear

I was just browsing your profile decided to contact you in this transaction, I would first like to express my sorrow at the death of my client who died with the UN-defined family member or relative.

My name is Mr John William, the personal Accounting officer of late Customer. I would like to know if we can work together. I would like you to act as the next of kin of my deceased Customer who has an account in which the total amount of £ 7.5million British pounds is deposited inside it, with the financial institution in London 40% shall be yours at the end.

He died without any registered next of kin and as such the funds now have an open mandate to beneficiary.Soviet Directors adopted a resolution and I was mandated to provide his next of kin for the payment of the money or forfeit the money to the bank as abandoned property.

Fortunately, it will be very easy for me to make you become his official next of kin, because you share same name identity with my late Customer. I’m his personal characteristics and investment auditor. If you are interested, let me know so I can give you more information about what we should do.I urgently hope to get your response as soon as possible.

All i need from you is trust.
Please provide me with your direct mobile telephone numbers, your
present country of residence and your age in your reply to this mail.
Send your reply to my confidential

email: mrjohnwilliam@dvaar.com
email: mrjohnwilliam@outlook.com

Sincerely,
Mr John William.

Return-Path: spk@spkdigi.com
X-YahooFilteredBulk: 209.200.245.224
X-Originating-IP: [209.200.245.224]
Authentication-Results: mta1486.mail.bf1.yahoo.com from=spkdigi.com; domainkeys=neutral (no sig); from=spkdigi.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO sm-mail2.lunarbreeze.com) (209.200.245.224) by mta1486.mail.bf1.yahoo.com
Received: by sm-mail2.lunarbreeze.com via HTTP; Sun, 26 May 2013 05:46:50 -0700
From: Mr John william <spk@spkdigi.com>
Date: Sun, 26 May 2013 05:46:50 -0700
Reply-To: mrjohnwilliam@dvaar.com
Message-ID: <74da0f5b$21c21907$b378cb8$@com>
X-Originating-IP: [41.206.11.32]
Mr. John Williams

mrjohnwilliam@dvaar.com
mrjohnwilliam@outlook.com

 
Leave a comment

Posted by on 05/27/2013 in Inheritance Scam

 

Tags: , , , , , , ,

“Dr. John Williams”

WARNING – NIGERIAN SCAM (419 SCAM)

Attention: This scammer is believed to be the same “John Willians” that has sent numerous other scam emails. However, scammers like to use generic names like ‘John Smith’ or ‘Williams’ so it may infact be another scammer.   (Williams is the most popular last name used by scammers, atleast on here.) — If you type (Dr.) John Williams in the search bar you will see multiple other emails I’ve posted with this name.

Return-Path: <kkoliavasili@yahoo.gr>
X-YahooFilteredBulk: 77.238.189.198
X-Originating-IP: [77.238.189.198]
Authentication-Results: mta1216.mail.sk1.yahoo.com from=voila.fr; domainkeys=fail (bad syntax); from=yahoo.gr; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm8-vm1.bullet.mail.ird.yahoo.com) (77.238.189.198) by mta1216.mail.sk1.yahoo.com with SMTP; Tue, 12 Feb 2013 22:53:09 -0800
Received: from [212.82.105.245] by nm8.bullet.mail.ird.yahoo.com with NNFMP; 13 Feb 2013 06:53:08 -0000
Received: from [212.82.108.249] by tm17.bullet.mail.ird.yahoo.com with NNFMP; 13 Feb 2013 06:53:08 -0000
Received: from [127.0.0.1] by omp1014.mail.ird.yahoo.com with NNFMP; 13 Feb 2013 06:53:08 -0000
X-Yahoo-Newman-Id: 131868.58062.bm@omp1014.mail.ird.yahoo.com
Received: (qmail 6876 invoked by uid 60001); 13 Feb 2013 06:46:28 -0000
Received: from [41.138.103.167] by web172303.mail.ir2.yahoo.com via HTTP; Wed, 13 Feb 2013 06:46:27 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.133.508
Message-ID: <1360737987.6350.YahooMailClassic@web172303.mail.ir2.yahoo.com>
Date: Wed, 13 Feb 2013 06:46:27 +0000 (GMT)
From: “Dr.Williams John” <w.princejohn@voila.fr>
Reply-To: williamsjohndr@yahoo.fr
Subject: YOUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION

YOUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION
From: Dr.John Williams
Ouagadougou – Burkina Faso

My Dear Friend,

I work with a bank In West Africa, Burkina faso .I have a business transaction for you.

In my department we discovered an abandoned sum of Twenty Million Five Hundred Thousand Euro. In an account that belongs to one of our foreign customer who died along with his entire family in car bomb in Iraq.

Since his supposed next of kin died along side with him at the Bomb blast, there is nobody to claim the left over balance in the account. It is therefore upon this discovery that I and other officials in my department decided to seek your assistance and present you to the bank as his business partner because a business partner can come from any pat of the world. Further the transaction is hundred percent guarantees.

If you accept i would give you the guide lines of how we can achieve this transfer of the money to your account. And we will share the money 75 for us while the rest 25% is for you.

I expect that you will give me your telephone and fax numbers for easy communication with you and for more details.

YOUR FULL INFORMATIONS
================================== ===== ===== ===== =====
1. Full Name:
2. Telephone Numbers: ..
3. Your Occupation:
4. Your Country:
5. City: ..
6. Age: …

Best Regards
Dr. John Williams

 
 

Tags: , , , , , , ,

“Abadi Toma” aka “Zibo Idirisa”

WARNING – NIGERIAN SCAM – BUSINESS PROPOSAL SCAM

ATTENTION: Abadi Toma also sends scams under the names Zibo Idirisa ( also spelt Zibo Idrisa ) and John Williams

Authentication-Results: hotmail.com; spf=none (sender IP is 212.82.109.209) smtp.mailfrom=wendetinra@yahoo.fr; dkim=none header.d=yahoo.cn; x-hmca=none
X-SID-PRA: abadi.toma@yahoo.cn
X-Message-Info: o9rlR4nWDTfJuzYaLPaTp3ORMES0Blz4ED0pVj+LLYZOYzosVJdO5R74HPb49X9sDW81nrcF/8gUX1PgbXmu2nk4OY6TNsgs6xgnK52TOYOdMr498OkUs2A89TdTHGTnn+4h9aB0+fnKdbrZ9YTeuPDpc+W2Ho9b
Received: from nm25-vm8.bullet.mail.ird.yahoo.com ([212.82.109.209]) by SNT0-MC2-F17.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Received: from [77.238.189.55] by nm25.bullet.mail.ird.yahoo.com with NNFMP; 21 Feb 2013 00:34:41 -0000
Received: from [212.82.108.119] by tm8.bullet.mail.ird.yahoo.com with NNFMP; 21 Feb 2013 00:34:41 -0000
Received: from [127.0.0.1] by omp1028.mail.ird.yahoo.com with NNFMP; 21 Feb 2013 00:34:41 -0000
X-Yahoo-Newman-Id: 679400.18968.bm@omp1028.mail.ird.yahoo.com
Received: (qmail 12788 invoked by uid 60001); 21 Feb 2013 00:34:41 -0000
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding;
b=gJWZE0eJJ/TeqlEHAXvas+ks4WOmqwGflMBmTowkJCHLKE1qnMk0fPrfnVbXQ+gRMjPvEPPmzVTkiOQ18WUbRUBpgz+RhCeuO7DL/H9ejjubJPJcSq0iAMebjzgvKeZaZZeeFl9d/24M+NGwvOH0rzeGWk41DhJTlIJ5peOwrDI=;
X-YMail-OSG: rkLXn00VM1lXRL7JjoWLrGGbmXobCt_TAXxbKxYqhXlB.Ng
4up9vYAvEX6SVegCMKlCL6E_YNL_TB1f.GM797waKqGhuZOxZslAAYCDvktT
l.un5sRIxYvg7ZQWCIUss._3Qbrn20B9qwa.Lixs1LELjThAmrVjc5m.gJDM
awRrYV242Ii4bLJWM4zo.USxVuNWq5Fo6lhSzStRwx3Haj0dv9.S89wuofFM
K_8YADnwsznItJ3qrfyoD2X0349wfxgYjcM98UXLLYLoDwaIG0aJdal6Derg
L4lTN7.9MXNXB2HyQbOV69Fz7FH8vwni8L060XlFDE9QfS2uH.3O_OGYyiUN
fYdoSveIug81Jmftvk.tc8.BSMBlZSIDwZ8G9E.8AEVZKvAe1pUYh1M3rJWO
t8oybh7whKfrawTq7HG2aotIb9DSfrAFGuzk_zqHolfqLdv0VT2SVXxx4aiB
b6eOzUCIMz8c6W8WisABB0ZAd.RAPY2uL2MZMm_GxobuBXwRK7crMxsBWrXO
W39wXmiQgbdRNCWtuMGL78rFY2FQquyNxiTK4kukS9lh9zE_eP8g9t4G8rp6
RQ_xMxE9Ks.t_ej8_thgvjyAnN3Z_PtrRs6bHMfvs
Received: from [41.138.103.86] by web171404.mail.ir2.yahoo.com via HTTP; Thu, 21 Feb 2013 00:34:41 GMT
X-RocketYMMF: wendetinra
From: Abadi Toma <abadi.toma@yahoo.cn>
Reply-To: abadi.toma@voila.fr
Subject: Do you love god then let work together
Return-Path: wendetinra@yahoo.fr
You can tell by the return-address that this scammer also, more then likely, scams under the name Wende Tinra as well.
Do you love god then let work together
From: Mr Abadi Toma
Ouagadougou – Burkina Faso

My Dear Friend,

I work with a bank In West Africa, Burkina faso .I have a business transaction for you.

In my department we discovered an abandoned sum of Twenty Million Five Hundred Thousand Euro. In an account that belongs to one of our foreign customer who died along with his entire family in car bomb in Iraq.

Since his supposed next of kin died along side with him at the Bomb blast, there is nobody to claim the left over balance in the account. It is therefore upon this discovery that I and other officials in my department decided to seek your assistance and present you to the bank as his business partner because a business partner can come from any pat of the world. Further the transaction is hundred percent guarantees.

If you accept i would give you the guide lines of how we can achieve this transfer of the money to your account. And we will share the money 75 for us while the rest 25% is for you.

I expect that you will give me your telephone and fax numbers for easy communication with you and for more details.

YOUR FULL INFORMATIONS
============================
1. Full Name: ……………..
2. Telephone Numbers: ………..
3. Your Occupation: ………….
4. Your Country: ……………
5. City: ………………
6. Age: ………………..

Home Address:11-25/avenue.Kanazoe.
B:P 1508
Ouaga. Burkina-faso
TelephoneT +226 79235711
Best Regard
Mr Abadi Toma

 
 

Tags: , , , , , , , , ,

“Zibo Idrisa” aka “John Williams”

WARNING: BUSINESS PROPOSAL SCAM – 419 SCAM

This Nigerian scammer also sends out scams under the names Abadi Toma as well as Wende Tinra

YOUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION
From: DR.ZIBO IDIRISA
Ouagadougou – Burkina Faso

My Dear Friend,

I work with a bank In West Africa, Burkina faso .I have a business transaction for you.

In my department we discovered an abandoned sum of USD 20.5million Euros (Twenty Million Five Hundred Thousand Euro.) In an account that belongs to one of our foreign customer who died along with his entire family in car bomb in Iraq.

Since his supposed next of kin died along side with him at the Bomb blast, there is nobody to claim the left over balance in the account. It is therefore upon this discovery that I and other officials in my department decided to seek your assistance and present you to the bank as his business partner because a business partner can come from any pat of the world. Further the transaction is hundred percent guarantees.

If you accept i would give you the guide lines of how we can achieve this transfer of the money to your account. And we will share the money 75 for us while the rest 25% is for you.

I expect that you will give me your telephone and fax numbers for easy communication with you and for more details.

YOUR FULL INFORMATIONS
================================== ===== ===== ===== =====
1. FULL NAME:
2. TELEPHONE NUMBERS: ..
3. YOUR OCCUPATION:
4. YOUR COUNTRY:
5. CITY: ..
6. AGE: …
================================== ===== ===== ===== =====
BEST REGARDS
DR.ZIBO IDIRISA
HOME ADDRESS:11-25/AVENUE.KANAZOE.
B:P 1508
OUAGA. BURKINA-FASO
TELEPHONE/T +226 79235711

Return-Path: asys37@yahoo.fr
X-YahooFilteredBulk: 77.238.189.209
X-Originating-IP: [77.238.189.209]
Authentication-Results: mta1240.mail.sk1.yahoo.com from=voila.fr; domainkeys=fail (bad syntax); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm13-vm1.bullet.mail.ird.yahoo.com) (77.238.189.209) by mta1240.mail.sk1.yahoo.com with SMTP; Sun, 24 Feb 2013 09:32:44 -0800
Received: from [77.238.189.56] by nm13.bullet.mail.ird.yahoo.com with NNFMP; 24 Feb 2013 17:32:42 -0000
Received: from [212.82.108.245] by tm9.bullet.mail.ird.yahoo.com with NNFMP; 24 Feb 2013 17:32:42 -0000
Received: from [127.0.0.1] by omp1010.mail.ird.yahoo.com with NNFMP; 24 Feb 2013 17:32:42 -0000
X-Yahoo-Newman-Id: 358646.83540.bm@omp1010.mail.ird.yahoo.com
Received: (qmail 90282 invoked by uid 60001); 24 Feb 2013 17:32:42 -0000
Received: from [41.138.99.125] by web171303.mail.ir2.yahoo.com via HTTP; Sun, 24 Feb 2013 17:32:41 GMT
X-Mailer: YahooMailClassic/15.1.4 YahooMailWebService/0.8.134.513
Message-ID: <1361727161.82961.YahooMailClassic@web171303.mail.ir2.yahoo.com>
From: zibo idrisa <zibo_77@voila.fr>
Reply-To: ziboidirisa@yahoo.fr
Subject: YOUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION

YOUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION
From: DR.ZIBO IDIRISA
Ouagadougou – Burkina Faso

My Dear Friend,

I work with a bank In West Africa, Burkina faso .I have a business transaction for you.

In my department we discovered an abandoned sum of USD 20.5million Euros (Twenty Million Five Hundred Thousand Euro.) In an account that belongs to one of our foreign customer who died along with his entire family in car bomb in Iraq.

Since his supposed next of kin died along side with him at the Bomb blast, there is nobody to claim the left over balance in the account. It is therefore upon this discovery that I and other officials in my department decided to seek your assistance and present you to the bank as his business partner because a business partner can come from any pat of the world. Further the transaction is hundred percent guarantees.

If you accept i would give you the guide lines of how we can achieve this transfer of the money to your account. And we will share the money 75 for us while the rest 25% is for you.

I expect that you will give me your telephone and fax numbers for easy communication with you and for more details.

YOUR FULL INFORMATIONS
================================== ===== ===== ===== =====
1. FULL NAME:
2. TELEPHONE NUMBERS: ..
3. YOUR OCCUPATION:
4. YOUR COUNTRY:
5. CITY: ..
6. AGE: …
================================== ===== ===== ===== =====
BEST REGARDS
DR. ZIBO IDIRISA
HOME ADDRESS:11-25/AVENUE.KANAZOE.
B:P 1508
OUAGA. BURKINA-FASO
TELEPHONE/T +226 79235711

Subject Line: OUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION
From zibo idrisa
Return-Path: <asys37@yahoo.fr>
X-YahooFilteredBulk: 212.82.109.249
X-Originating-IP: [212.82.109.249]
Authentication-Results: mta1005.mail.ne1.yahoo.com from=voila.fr; domainkeys=fail (bad syntax); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm21-vm9.bullet.mail.ird.yahoo.com) (212.82.109.249) by mta1005.mail.ne1.yahoo.com with SMTP; Wed, 27 Feb 2013 21:55:14 +0000
Received: from [77.238.189.234] by nm21.bullet.mail.ird.yahoo.com with NNFMP; 27 Feb 2013 21:53:12 -0000
Received: from [212.82.108.238] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 27 Feb 2013 21:53:12 -0000
Received: from [127.0.0.1] by omp1003.mail.ird.yahoo.com with NNFMP; 27 Feb 2013 21:53:12 -0000
X-Yahoo-Newman-Id: 294415.95428.bm@omp1003.mail.ird.yahoo.com
Received: (qmail 91514 invoked by uid 60001); 27 Feb 2013 21:53:12 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1362001992; bh=RNz/g0A+SosZesalRLUJmon/aCsLLFsFg8Jz9R3+xWQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Content
Received: from [41.138.96.193] by web171303.mail.ir2.yahoo.com via HTTP; Wed, 27 Feb 2013 21:53:11 GMT
From: zibo idrisa <zibo_77@voila.fr>
Reply-To: ziboidirisa@yahoo.fr
Subject: YOUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION

Dr. Zibo Idrisa 41.138.100.220 – BF – BURKINA FASO – KADIOGO – OUAGADOUGOU – zibo_77@voila.fr ziboidirisa@yahoo.fr zibo idrisa zibo_77@voila.fr

 
1 Comment

Posted by on 03/01/2013 in Business Proposal

 

Tags: , , , , , , , , , , , ,

“Dr.John Williams”

419 SCAM – BUSINESS PARTNER SCAM – NIGERIAN SCAMMER

This Nigerian scammer has sent me previous spam under similar names as well as fake agent names, etc. This scammer has used multiple email addresses, sending scams under multiple IP addresses. For more information on this fraudster, click: Dr. Williams Johnson and/or John Williams

YOUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION
From:Dr.John Williams
Ouagadougou – Burkina Faso

My Dear Friend,

I work with a bank In West Africa, Burkina faso .I have a business transaction for you.

In my department we discovered an abandoned sum of Twenty Million Five Hundred Thousand Euro. In an account that belongs to one of our foreign customer who died along with his entire family in car bomb in Iraq.

Since his supposed next of kin died along side with him at the Bomb blast, there is nobody to claim the left over balance in the account. It is therefore upon this discovery that I and other officials in my department decided to seek your assistance and present you to the bank as his business partner because a business partner can come from any pat of the world. Further the transaction is hundred percent guarantees.

If you accept i would give you the guide lines of how we can achieve this transfer of the money to your account. And we will share the money 75 for us while the rest 25% is for you.

I expect that you will give me your telephone and fax numbers for easy communication with you and for more details.

YOUR FULL INFORMATIONS
==================================
Your Name.__________________
Your Home Addresses.________
City._______________________
Country.____________________
Home Telephone._____________
Private Telephone.__________
Fax No._____________________
Marital Status._____________
Sex.________________________
Age.________________________
Occupation._________________
Religion.___________________
Your picture._______________

Best Regards
Dr.John Williams

HEADER DETAILS:

Return-Path: <kaboremoustapha@yahoo.fr>
X-YahooFilteredBulk: 77.238.189.60
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: cx_BzRkWLDuye5ktoEEJqehgfsSx0nc75MFAOM1DdRccaZlc 3lD_zRzZ6NNxlN7FlFBrky9rjDj9xlPg12Dv5OEnCybCAMuE1c3kFN6.cp3X KvyQyJftL7jbWNPkYe13.X2LRT.XD4S_JmEBx0TpNmJvlx3u_paVvlGa3EcP L.XEDt21voYLUm1PavQ8u6JQemojE33IYygo55.Y21QOP2fUBAxLtUI6UkFB 8Kb.j3rEnehAVniF6Ng35K8UivYOmiCtW_pcNHDh.TOnhdR14vG5JoeV4SLW OIKg4cQqeS6HlnsOCRJ4onU17wIyTWa3qWlk4apLrSd6tn.gAcp56gudMpLa 7EzADoKAumfa1_AOp8LdUy39DdFkRs7olWHP4gPZQpo8ooE56WdoQ0JtZJmE 4USBrS3xy.sG9kkq8j2BHPPt4VbGIgNK.dWr25Bm1z2NuuhMhduOkf_W0Tt0 zBL1iz4U_4CdbJlBQf9tt2j6XJfbew5.OcfaL89COrgyNgO4vAH9atRAPFn_ SUrTQhJRs9tFNlUlzCWVT5rrGRYFIi34bgi5qvREey_J7DAxMrlgR9qhNeiE GHhplL5md8VwPLnZtFd4VBLM_LcJExjz4pWHvR9VO5BMTA.gH538M9k7r2ZU rQHEzExpLag7K_XNyRjI71ug16bMlmNuSW0umIM9PPbQR7_TyI_BZpuZi8cG QDUh7LQiQ1f5BA3cqRcfpgwrCsjgHdidz7UdKCejMyMN9NgWGeBIf5QoTJk3 _Qj5WJK3v8NZhYufxQ7tYszXHnkaiDxgKHiZxppnSetvfBA5vaS483QJr.op 902yvp5wwT_rUao4oWOy44y_yq1g_SrE3WYIGdyd1VsDIDYAfnfuWErBabYY xZXtj5mp2mSMPq6Efrh0BnCIzUqijgo186bYfydD4bhZ9lT3PeB2Q79de3iz kXL8PzRaFXuQ0uYjV9wUUAKm3clmmmtUqr7rjs_Wh1KSnCnqGnsWHnHlyjiu 1CMNS92OxR0JueIKGRUohGoHnlHsSN9vJHmbfXxY52CtTQsHkGxA3snZQ4Qd 1Kc4nUKcNfkkJuqg8gmzQPeIb42KNPkHO6YloiYIf2ScowARxpN6qtHYs4za WiGtLMHfG.DNi_X0SAvXspfMd.grYR2G9VODYvSCQgiqgkphQBC06hYc7xlT vklfqnsfX8BNu687dn6oja2YsHshKuFHO.hfg7ilIl9C4S0g.s3FaV4yqoho llWYPXAJWvGYRU2jT6rikFJy_wgy5sb5EeIj3Bz3_NApAWJe7arDVq.KJkFb yaLRMK6aA0zET2zNPdU_bWL_pbaZ20ClvDwPy0vL0.xChIs4NOYDK3fWVvEi yU.L0olrA7blKrK9XvPnzEHra0iTqqfs6Zca_bnu9jdBxPvbj7NpWbsHXJjF pG3ntQM9af2eUdMyx9qxnl5qhRxfCKX3eLSkEFZ9MQ–
X-Originating-IP: [77.238.189.60]
Authentication-Results: mta1214.mail.sk1.yahoo.com from=voila.fr; domainkeys=fail (bad syntax); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm3.bullet.mail.ird.yahoo.com) (77.238.189.60) by mta1214.mail.sk1.yahoo.com with SMTP; Sun, 27 Jan 2013 12:08:38 -0800
Received: from [77.238.189.48] by nm3.bullet.mail.ird.yahoo.com with NNFMP; 27 Jan 2013 20:07:52 -0000
Received: from [212.82.108.132] by tm1.bullet.mail.ird.yahoo.com with NNFMP; 27 Jan 2013 20:07:52 -0000
Received: from [127.0.0.1] by omp1037.mail.ird.yahoo.com with NNFMP; 27 Jan 2013 20:07:52 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 688974.72894.bm@omp1037.mail.ird.yahoo.com
Received: (qmail 89533 invoked by uid 60001); 27 Jan 2013 20:07:52 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1359317272; bh=g45vm9O4LY0q4S5jUXhRp+/yXSheAYGhmFOIoUqZv3Q=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=CkuvsbPolf4zkSNVj49n6ngzh6+P62R+ce5jyd4wCku7usBSwWpmsVyV/0M244IeGHUyyu+MsfF45pPaebAuI4NdPZpKt7GQvFamTLh7/2mvGs/efYuOwRkEFusP+VTQntWGkFAtovBKlMZcXfzLymqwXdrnmoIsEezelpqaCMM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=CLXSCs/LgT4xt1opxpGEUlSbVMRTHPNTm/alw142d1X6qJ59u765aTBQZXWRa7a80iMmF4Uj+mCrMwVnqSx5ceauSH2nc6bqycxxeJdoPAIPDOxX0H+Qm6z5i/L3ovFRVZqt3P2mtXeuWgNl2+VtMuSBwTpoeJ+upiva+hFmsDE=;
X-YMail-OSG: o.E14gsVM1kpGQ8.9A8a8xs41dhhZItM3yTbFPjdZ6uQdcH jf8uxZNBZvGuv2XZ6aC1pa63WvL937j4eturfSQ7vFhQ6fRAstfiLGznzfF1 9vbnZsWLFAubHk194gs1.zMSWL_m6kLhwZiILR2GNCJUvEH4KS.lfJZb4v96 8Ardi3JH_aQ7Mdi2MR0G_rKpAS7KGnGr_QTXM47COynX_DK4qrguNbneaIZW u07LkBu0AxBbI10HsJGVhZ7PmQmoGXmJvytqlqa47sI4EvvJgrhC4XHxsdXv 16puOyR08zBFbRjS95YQRPu57ZQoT.DF4d5gXaro7TWQRua7kR3LQjvZKMVf bknUyRZIr82CBenid4UYZclBYMr6wtpi4k.qQI0Sd9MpqeywggztvDtWAfLV vvzRPCXVZRbz.BAE5KIcNQxDgu6HCkF7iC9LjfNATz3n4LBC3_23NxH3yzJn CEzAxJ9nS3FgcnkVUJqSkzfJFEW3C8QpgHsDJFmck0.O6VqAmsOXwa6kNYX_ xwoDpd.1HCjpsxvxjnK9zgmNaE.avWT8uuPBG6f2uK4IJWXe4e4L2wdBJtcv eFE1mBzog7x9c2HAIlLjb.WTAWBTeK3ulZ9qRMfRxMuXZmZ9RuWOBTK.ZBcs Z4JbL6Ehm7a2F2yDgqKCsnon64cCtiVWPe6mU
Received: from [41.203.235.116] by web172006.mail.ir2.yahoo.com via HTTP; Sun, 27 Jan 2013 20:07:52 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1359317272.89323.YahooMailClassic@web172006.mail.ir2.yahoo.com>
Date: Sun, 27 Jan 2013 20:07:52 +0000 (GMT)
From: “Dr.John Williams” <john_w2001@voila.fr>
Reply-To: williamsjohndr@yahoo.fr
Subject: From:Dr.John Williams

From: Dr. John Williams john_w2001@voila.fr REPLY-ADDRESS: williamsjohndr@yahoo.fr RETURN-ADDRESS: kaboremoustapha@yahoo.fr IP_USED: 77.238.189.60 RECEIVED_IP: 41.203.235.116

 
 

Tags: , , , , , , , ,

“Barrister Mendy Samba”

INHERITANCE SCAM – NIGERIAN SCAMMER

MENDY SAMBA also known as MENDY CHAMBERS and AMINATA BANGALI has sent me three more scam emails. I will post them all below and include the header information for each email. (Note: The scammer has used the same email-addresses and received IPs. However, the Nigerian scammer used a different originating IP in each email.)

scams_target_you_scammer419

FIRST EMAIL: ATTENTION:

Thanks so much for your email. With regards to your lawyer, I don’t see any reason for your to contact him at this early stage as his services are not required at this point. But when the process is concluded, you will contact him to process resettlement visa for Aminata Bangali. The necessary legal requirements will be taken care of through my chamber.

I implore you to keep the deal strictly confidential, while we try to put the necessary arrangements in place to legally have the funds approved for transfer to you. To kick start the process, do be informed that I am drafting the Memorandum of Understanding/Power of Attorney between you and my client, which will be forwarded to you for your assessment and acceptance. The said agreement will legally protect your interest and that of my client and will establish the details of the partnership agreement between the parties involved.

I have briefed my client about your interest and she’s excited and looking forward to the adventure. I have given her your email address and she will be contacting you soon. The company in Spain will also be contacting you to give you the necessary guarantee as we progress and we have already contacted the company about the processing fee and we are waiting to hear from them to know the exact cost. Please, note that you can verify my client’s claim directly from the company by quoting her name as next of kin and quoting the deposit certificate number. You can contact the company directly on the following email address:

Email: info@guarantytrustsec.com
Contact person: Dr. Thomas Woods

Be informed that your commitment and reliability will be highly appreciated. I am using my office and personality to guarantee that the transfer will be carried out smoothly and securely once we meet the legal requirements.

Do kindly confirm your contact information in the following manner required to process the MOU/POA.

1. FULL NAME AND CONTACT ADDRESS
2. OCCUPATION
3. DATE OF BIRTH
4. MARITAL STATUS
5. NEXT OF KIN
6. PHONE NUMBER
7. OTHER CONTACT DETAILS
8. COPY OF YOUR INTERNATIONAL PASSPORT OR OTHER IDENTITY

I wish to use this opportunity to let you know that your honesty and reliability will be highly appreciate and I will ensure that the transfer of the said fund is carried out smoothly without problems of any kind. I am only doing my best to assist the innocent woman to ensure a better and more secured life and I want to believe you quite understand her situation clearly.

Kindly get back to me within the hour with the needed details.

Yours Sincerely,

Advocate Mendy Samba( Attorney At Law )

1ST HEADER – INFORMATION

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) bC4gV2l0aCByZWdhcmRzIHRvIHlvdXIgbGF3eWVyLCBJIGRvbid0IHNlZSBh bnkgcmVhc29uIGZvciB5b3VyIHRvIGNvbnRhY3QgaGltIGF0IHRoaXMgZWFy bHkgc3RhZ2UgYXMgaGlzIHNlcnZpY2VzIGFyZSBub3QgcmVxdWlyZWQgYXQg dGhpcyBwb2ludC4gQnV0IHdoZW4gdGhlIHByb2Nlc3MgaXMgY29uY2x1ZGVk LCB5b3Ugd2lsbCBjb250YWN0IGhpbSB0byBwcm9jZXNzIHJlcwEwAQEBAQ–
X-YMailISG: 04m5KF8WLDt9dnxMwru_HLy2sSrgLReVAcDiwDIPzpbEYTGf O7z8zbwixEjRtXDkiSQUs6VcvO6iyB53Bkb.oykn3qbCLcoIB6iIQyCAQcHn V_OhckVZ.aksC5gfiEvSjoVCjwg7bi1QX0m5pl7wxXy.EtPYskuuC3BcGxJq brJmJopk4pfinlDZvQWNL6Oc76k7hyq1tePHdvj6eNNteTK1accRm6PUjt.U gJDFNWPFFbybxhdcE1HA1LVRJvY1NQAcj1t630BbjJjarC6nnEaTVVIcfpQT er6YtiVb8oheGLU8CHvjFz45hTR1_k8FEe9FQWs7m_NF4xQRp3GzNVdwpiT7 WAuaBYqEkotAKosBNu4yIkidDEiW21FPPilKiifix.nRsr.OvWsJ3ITfxap_ TTO_Am_baq9jWWqC8MiaQcAbhkxdnOFD8s2ejl4Zau.D41QiOWmhFHyfYiog TxjjDGIzZF5vrE31Z0PVeVSdm8jPolkneCTSvDx9AGefuqZ2rxGOcCbDG0OF C_ZX.kmoHEHnvjddHAQnEkcUoHpPYZY2s.q2ZAUsW0VVGWuv6DvmZmCPItFu CBlPY.YslBLY3tlCqg1kWOpG84QLD6c3WbJG781s5CPFpV_A0DqrQ7X9GPQV z1JEh2qnxWwlzQzqtdRknKEvkovPj2PC1hmnaFkOhSPj4fXlEnuY9wqFzY21 m.S13mK._4W1ELitIHMuDf5x13FBERdMJ_4_bHCIvGsZZNbbRf5CZBDhvye9 plIFahkJA_ZRgeajZnm5YbcP97FWqaFgETl3qq4ahI_mGKC4j06fsclgGPqO en06EdIb7B_TnatgAsV1gOcIIMrAmUkdwxm8aeVO1_mYazrsEuC3uno48wp8 HF_Gmm5nhFGaE4i2i9w6TgJ9zuJXzmf9MDiL08qEi0uNb02qS_QRrnUj.YJi ulO1a87j8vqYxdl.6koj6R0gYpnftZDOA_q3yZLDoRxM6tvkgDtrpnUiKDUJ EK43yf0ePPFXprNLKtlE33xELzq293lPZ18BOXQLS0pa0rt2o.nodjEdh4z1 bcrETtiq0pik3Is0VVE.85cnIoJC8ZzO4Q.eKVazIorivI8_u3op4JhbiVLZ aw5Bi.dVLDDWN6MnQUGYb9nnSbhsutUBjuJ6Wt2v
X-Originating-IP: [64.98.42.5]
Authentication-Results: mta1277.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.5) by mta1277.mail.ac4.yahoo.com with SMTP; Sun, 13 Jan 2013 06:27:15 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay06.b.hostedemail.com (Postfix) with SMTP id 451315E9F8 for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:27:15 +0000 (UTC)
X-Panda: scanned!
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 4469
Received: from webmail07 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf08.b.hostedemail.com (Postfix) with ESMTPA for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:27:15 +0000 (UTC)
Received: from 41.138.179.177 ([41.138.179.177]) by webmail07 (Webmail) with HTTP; Sun, 13 Jan 2013 14:27:14 +0000 (UTC)
Date: Sun, 13 Jan 2013 14:27:14 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <1916237468.29168.1358087235091.JavaMail.mail@webmail07>
Subject: Re: GREETINGS FROM AFRICA( More Details )
X-Mailer: Webmail
X-Originating-IP: [41.138.179.177]

64.98.42.5

_____________________

SECOND EMAIL: PLEASE, FIND ATTACHED THE DEPOSIT CERTIFICATES OF MY CLIENT’S FUND. NOTE: TWO ATTACHED FILES WERE SENT WITH THIS EMAIL TITLED “AGREEMEN 101” AND “CERTIFICATE OF DEPO 001”

2ND HEADER INFORMATION:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) RklDQVRFUyBPRiBNWSBDTElFTlQnUyBGVU5ELiABMAEBAQEDdGV4dC9odG1s AwMxAkFncmVlbWVudCAxMDEuanBnA2ltYWdlL2pwZWcDAzExNjUCQ0VSVElG SUNBVEUgT0YgREVQTyAwMDEuanBnA2ltYWdlL2pwZWcDAzY0Mg–
X-YMailISG: M0bKmoIWLDv63kKzxOEndptXp.7zvC0TJUVBOwfWgk24Wvc0 bi7PgOqwK0A9RE6NhtraNE_SZowuJ31bixqsmyDiWNNWlZcM.o2_pzjLt0Ia H7sJksHnQ_GGvyfzwSQ9PKZJBmlZl8Aw5WOy5LEq1CqgoFr.FMXz_.wM51H. LAjMuSnYvvuQb9dnVd6RYYRNrmW9QHxCsKDiGzkPQMEF_15Nwdsbb_iZ1mop 1GJry4lVc1UMYVcURhKVeruidysBeiCg9Ks_lqUDoUCyeflAaZRjdcSFRhzD HBtrM68fAExh0601NZrjsv9gxhh5c_KULam1Ql6R3rg6tISy0_lvYTkCI22Y 92v6XlHWLVsIj5FLm0gB6Hy5syepXygpU0ccub4BzJsEctoMixLzK1.vdQyG GaxePaw_Ph_55k9pTJJWBCtxGMD9374mys.gF4rmhGaakicSSr.evJ0e0kW9 rVBUvPjWEw17yErVJE20zz78lLhCeb.yhvLw8BFe7EUFGhXs2Lzna6WPmd0w rcNejoHTq7uXu7MSNhd_x7MUBLlYxQipy9_bZQtUTc5YGzaCvvCKzGLPCIso u0DovZ2CiWPkYBvBJDBVKC2uHefv41rCje6VV.4bHzt4DmfQoAnPJEn6zLio uWwfRB_f3fhoBtiByP4aLICJaEEqcDbNAE7X2u8v0aO1hDQQ.jGRjIMkBVdv jibyKiMT_nESBTk5jIxbHVW5SNitSOTG1_.6xOXFXaz7Ws3Gh2caj5dQxleQ 65UHSPdk9tB266Vv3nUJ1HOVtIgZrEU5EsplZ4blV7Pqa_AQ041jTLGrUwQd GhKN.Cm1e4Y0885YbwBCEOZwks2gbzEb6KNzwJ7lMHCKbNz8RI2EWTED2GJs 9VwrYWJLBf_UE0oyxwajhR.k9tCG25X3nkPAm4aNbp8azLw2lXhjnrUu7azQ tYrugQVhK0FB4PRvOtvdS_h72lUGQw9KVfizt5ISed7Sa.Ch8d52XIiN2844 CQ5VbaaK_tkIlLELgiWUqbXR7WzguxN2JbJ.lyl5BG_70QJPaGe8jgf7ohQD 6bIFazaSlL1R6jgaWypgCSj9IVreoSYuof6l4anLT_bNLaWm7g–
X-Originating-IP: [64.98.42.67]
Authentication-Results: mta1270.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.67) by mta1270.mail.ac4.yahoo.com with SMTP; Sun, 13 Jan 2013 06:29:26 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay01.b.hostedemail.com (Postfix) with SMTP id A8943146A059 for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:29:26 +0000 (UTC)
X-Panda: scanned!
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 1875701
Received: from webmail07 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf10.b.hostedemail.com (Postfix) with ESMTPA for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:29:25 +0000 (UTC)
Received: from 41.138.179.177 ([41.138.179.177]) by webmail07 (Webmail) with HTTP; Sun, 13 Jan 2013 14:29:25 +0000 (UTC)
Date: Sun, 13 Jan 2013 14:29:25 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <619678690.29189.1358087365863.JavaMail.mail@webmail07>
Subject: DEPOSIT CERTIFICATES OF MY CLIENTS FUND
Content-Type: multipart/mixed; boundary=”—-=_Part_29188_651041165.1358087365783″
X-Mailer: Webmail
X-Originating-IP: [41.138.179.177]

“Barrister Mendy Samba” <mendychambers@mendychambers.com> REPLY-ADDRESS: mendychambers@gmail.com ORIGINATING/RECEIVED IP: 41.138.179.177 —– 64.98.36.5 —— ORIGINATING: 64.98.42.67

____________________

THIRD EMAIL: I am attaching my passport copy as a reference NOTE: an attached file was also sent with this email which included a fake passport. The title of the file was “Mendy SA”

3RD HEADER INFORMATION:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) ZmVyZW5jZSABMAEBAQEDdGV4dC9odG1sAwMxAm1lbmR5IFNBTUJBLkpQRwNp bWFnZS9qcGVnAwM4Mw–
X-YMailISG: zPVv7I0WLDsu.s.Ysyspp4f_fWriIeE68pg9psqNgVdRguDo _rLQvGuv4_Cg60ZSt.2HHOivooPysnmrTAAY.uShn6fuPG3svNTC0oKB6CFr S6TLBL8al8ZilKn49KLgeTzFD7eyhHDJQ6QwJtIpVdoQM5ZM0ghFfj.5GZQA hU5pEH0JuLu7L_bhN2OVCU_r2D5VpbCAmd9VVxkksJnwuaehbcsE1pkLKGxE wai4CKqgOyDLxN._ZJjreFiRFXbuvydeL3fT.wx5nCc5XF5g92KYrNTLz3o6 QP2kwNLbKvi2WEL5OlOSMgiXQiK5GzMBCFSIFlRWWduzWrpj9Aog70AaF_tP zHfvKMq0pe7uyQEvtzDi86M.anVkf7ymwnL8qRnXTIdNWXFYy4LaFSwy2NKJ 0CsY2JPGuyzNIuGI0gKqSUAvJq9R7vFJBVqbIjSnWfKz1KHWOFIWJdsNFnRu cLsxWvdVpzmZavMXPvvvoud3r0XnkLrP8uyCZ_hXEj14CeBj9ag0PBHQbs_X 29kvABmn5Jm9vxZV0hLi8d1yF6__CITi88y2E8_nkXJVFlmJuo4R54.G7Nmx 0YuCbEazsx8kvEJbDYkP5CKVIHrfFO3kSCQvi1EKsHp4Ik8BXcWb_MWkEUti FlfUuROEqERcXFIA3qHp07xdfjxo.5meRQahcxrlORRYEqJfKMJ2JfmwT23O PIN0i8vEuFe8jXJZQinTAs777783ISg.DlXIzzK4HnASLAy.Og3tsUake1SN Tyk70oeA1WenNH120U08ZWyVTc5ainc4VJ64eBZnJ2G6J4BD7MvXoaE9PCK2 GP9bO_mS6RL35.TaHW5ZjM7g8YbgNf4GmvelNaAytPrqGwOPawaNEuvPewKa t3wEYSdOqmkPFXo0S2d2cUhtZszHyZMVFhNJfQ.v0jmGN3gW5ptIrLa302Ob igESzqyKtB6ae42uoFqWzH7BL.cf5Gnez3JZp0xm4NsrWsI.w45_xmuHoh0x Z4836la.CrYNKahtjpOUQx.jwG3apAWfXPSwDUJkYOd.R6PaHrn0LBHSg6bX RDzwXfADW5yMl3fl8jQDqTvTzUl1xnq4D_Jp6O269mk.t2ZXJLKtckGcMjCX BYniEZcDcg–
X-Originating-IP: [64.98.42.164]
Authentication-Results: mta1171.mail.bf1.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.164) by mta1171.mail.bf1.yahoo.com with SMTP; Sun, 13 Jan 2013 06:31:00 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay06.b.hostedemail.com (Postfix) with SMTP id 4B6875E9F9 for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:30:59 +0000 (UTC)
X-Panda: scanned!
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 86929
Received: from webmail07 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf07.b.hostedemail.com (Postfix) with ESMTPA for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:30:59 +0000 (UTC)
Received: from 41.138.179.177 ([41.138.179.177]) by webmail07 (Webmail) with HTTP; Sun, 13 Jan 2013 14:30:58 +0000 (UTC)
Date: Sun, 13 Jan 2013 14:30:58 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <1490255423.29212.1358087459089.JavaMail.mail@webmail07>
Subject: =?UTF-8?B?TXkgUGFzc3BvcnQgQ29weSBBdHRhY2hlZOKAjyEh?=
Content-Type: multipart/mixed; boundary=”—-=_Part_29211_1002852497.1358087458957″
X-Mailer: Webmail
X-Originating-IP: [41.138.179.177]

Barrister Mendy Samba mendychambers@mendychambers.com REPLY-ADDRESS: mendychambers@gmail.com ORI-IP: 41.138.179.177 RECEIVED IP: 64.98.36.5 ORIGINATING/FILTER-BULK: 64.98.42.164 RECEIVED_IP: 41.138.179.177

 
Leave a comment

Posted by on 01/15/2013 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

“Dr. Robert Williams” a.k.a “Mr. John Williams” a.k.a “Peter John” a.k.a “Mr. John Mark”

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: This fraudster has been very persistent, spamming my inbox for months under various names, addresses and IPs including Barrister Nector FBI OFFICE Scam as well as (MR) Paul Johnson Lottery Scam — Below is a list of several emails sent by this scammer.

Subject: HELLO ,
From: Mr. John F. Williams peterjohn848@yahoo.cn

HELLO ,

I have contacted you because I’ve sent you the first payment of $5,000 today from your winning funds total amount of $1.5Million USD,Therefore you need to contact western union agent Mr. John Mark for him to give you the transfer payment information and MTCN.

Agent: Mr. John Mark
Email: ( nunionwester165@yahoo.fr )
Phone: +229 68433916 nunionwester165@yahoo.fr

Please try to contact him today for him to forward the payment information to you, Remember to Indicate the registration code of EB-2520 to him when e-mailing or calling him, Also he will be sending you $5,000.00 daily as per my discussion with him, this is what he needed from you to send you the first payment.

You’re full Name…………
Your Country………………..
You’re Telephone Number……..
Your Age……………………..
You’re Copy of Your ID………..
Your Sex …………………….

Do get in touch with me once you have got the transfer.
Sincerely,
Mr. John F. Williams.

Return-Path: <peterjohn848@yahoo.cn>
X-YahooFilteredBulk: 106.10.151.65
X-Originating-IP: [106.10.151.65]
Authentication-Results: mta1575.mail.ne1.yahoo.com
Received: from 127.0.0.1 (EHLO nm23-vm2.bullet.mail.sg3.yahoo.com) (106.10.151.65) by mta1575.mail.ne1.yahoo.com with SMTP; Tue, 09 Apr 2013 13:53:54 +0000
Received: from [106.10.166.120] by nm23.bullet.mail.sg3.yahoo.com with NNFMP; 09 Apr 2013 13:53:51 -0000
Received: from [106.10.151.138] by tm9.bullet.mail.sg3.yahoo.com with NNFMP; 09 Apr 2013 13:53:51 -0000
Received: from [127.0.0.1] by omp1006.mail.sg3.yahoo.com with NNFMP; 09 Apr 2013 13:53:51 -0000
Received: from [41.79.217.121] by web15303.mail.cnb.yahoo.com via HTTP; Tue, 09 Apr 2013 21:53:46 CST
From: “Mr. John F. Williams” <peterjohn848@yahoo.cn>
Reply-To: nunionwester165@yahoo.fr
Subject: HELLO ,

 +22968433916 nunionwester165@yahoo.fr Mr. John F. Williams
FBI OFFICE INHERITANCE LOTTERY SCAM

Subject: TRANSFER MTCN

Hello,

I am contacting you because I have sent you the first payment of Euro 5, 000 today from your winning funds total amount of Euro1.5Million , Therefore you need to contact the western union agent Rev. Jerry Young for him to give you the transfer payment information and MTCN to pick up the money at WU Branch over there.

W.U Agent: Rev. Jerry Young
Email: wu_payment0@yahoo.com.my
Phone: +229 98644349

Please try to contact him today and ask him to forward the payment information to you, remember to indicate the funds registration code of EB-2520 to him when e-mailing or calling him, Also he will be sending you Euro5,000.00 daily as per our board discussion with him.

Do get in touch with me once you have received the transfer.

Sincerely,
Dr. Robert Williams
IMF Managing Director Benin.
E-mail: bobwilliamson@superposta.com

HEADER:

Return-Path: <yiyu2016@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.71
X-Originating-IP: [203.188.201.71]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=superposta.com; domainkeys=fail (bad syntax); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15-vm3.bullet.mail.tp2.yahoo.com) (203.188.201.71) by mta1285.mail.ac4.yahoo.com with SMTP; Wed, 12 Dec 2012 02:55:25 -0800
Received: from [203.188.200.82] by nm15.bullet.mail.tp2.yahoo.com with NNFMP; 12 Dec 2012 10:55:20 -0000
Received: from [202.165.102.49] by tm3.bullet.mail.tp2.yahoo.com with NNFMP; 12 Dec 2012 10:55:20 -0000
Received: from [127.0.0.1] by omp103.mail.cnb.yahoo.com with NNFMP; 12 Dec 2012 10:55:20 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 348533.56547.bm@omp103.mail.cnb.yahoo.com
Received: (qmail 16962 invoked by uid 60001); 12 Dec 2012 10:55:19 -0000
Message-ID: <1355309719.81269.YahooMailClassic@web92104.mail.cnh.yahoo.com>
Date: Wed, 12 Dec 2012 18:55:19 +0800 (CST)
From: “Dr. Robert Williams” <officefilepayment@superposta.com>
Reply-To: westernunionmoneytransfer403@yahoo.fr Western Union Money Transfer
Subject: TRANSFER MTCN

FROM: Dr. Robert Williams <officefilepayment@superposta.com> REPLY-TO: westernunionmoneytransfer403@yahoo.fr RETURN-PATH: yiyu2016@yahoo.cn
ANOTHER ADDRESS GIVEN BY SCAMMER – bobwilliamson@superposta.com
RECEIVED IP: 41.223.248.96 LOCATION: Benin, Nigeria

Below is a phishing scam email / header sent by the same received IP as the scammer above. The originating (fake) IP are different but if you receive a unknown email with any IP’s shown on this post, you’re more than likely dealing with a scammer.

Return-Path: <carecustomer625@yahoo.com>
X-YahooFilteredBulk: 98.139.91.80
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-Originating-IP: [98.139.91.80]
Authentication-Results: mta1031.sbc.mail.sp1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 8.224.216.104 (EHLO fgateway15.isp.att.net) (207.115.11.45)
by mta1031.sbc.mail.sp1.yahoo.com with SMTP; Sun, 23 Sep 2012 07:26:25 -0700
Received: from nm10.bullet.mail.sp2.yahoo.com ([98.139.91.80])
by att.net (frfwmxc15) with SMTP
id <20120923141959f01008dmffe>; Sun, 23 Sep 2012 14:19:59 +0000
X-Originating-IP: [98.139.91.80]
Received: from [72.30.22.77] by nm10.bullet.mail.sp2.yahoo.com with NNFMP; 23 Sep 2012 14:19:59 -0000
Received: from [66.94.237.111] by tm11.bullet.mail.sp2.yahoo.com with NNFMP; 23 Sep 2012 14:19:59 -0000
Received: from [127.0.0.1] by omp1016.access.mail.mud.yahoo.com with NNFMP; 23 Sep 2012 14:19:59 -0000
Message-ID: <1348409998.34442.YahooMailClassic@web182201.mail.bf1.yahoo.com>
Date: Sun, 23 Sep 2012 07:19:58 -0700 (PDT)
From: Yahoo Member Services <carecustomer625@yahoo.com>
Reply-To: carecustomer625@yahoo.com
Subject: Yahoo Warning

EMAIL: Dear Subscriber,
Your E-mail account has exceeded its limit and needs to be verified, if not verified within 24 hours, 
we shall suspend your account.Click to verify your email account.
Please note: You serve the risk of losing your account permanently if it is not verified.
Thank you for your usual co-operation.
We apologize for the inconvenience

Sincerely,
Yahoo! Mail Product Management.
Copyright © 2012 Mail! Inc. (Co. Reg. No. 2344507D)All Rights
Reserved. Intellectual Property Rights Policy

 
Leave a comment

Posted by on 12/14/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: