RSS

Tag Archives: John Williams

“Mr. John William”

INHERITANCE SCAM / 419 SCAM

avoid-scams

From: “Mr John william” <spk@spkdigi.com>

Dear

I was just browsing your profile decided to contact you in this transaction, I would first like to express my sorrow at the death of my client who died with the UN-defined family member or relative.

My name is Mr John William, the personal Accounting officer of late Customer. I would like to know if we can work together. I would like you to act as the next of kin of my deceased Customer who has an account in which the total amount of £ 7.5million British pounds is deposited inside it, with the financial institution in London 40% shall be yours at the end.

He died without any registered next of kin and as such the funds now have an open mandate to beneficiary.Soviet Directors adopted a resolution and I was mandated to provide his next of kin for the payment of the money or forfeit the money to the bank as abandoned property.

Fortunately, it will be very easy for me to make you become his official next of kin, because you share same name identity with my late Customer. I’m his personal characteristics and investment auditor. If you are interested, let me know so I can give you more information about what we should do.I urgently hope to get your response as soon as possible.

All i need from you is trust.
Please provide me with your direct mobile telephone numbers, your
present country of residence and your age in your reply to this mail.
Send your reply to my confidential

email: mrjohnwilliam@dvaar.com
email: mrjohnwilliam@outlook.com

Sincerely,
Mr John William.

Return-Path: spk@spkdigi.com
X-YahooFilteredBulk: 209.200.245.224
X-Originating-IP: [209.200.245.224]
Authentication-Results: mta1486.mail.bf1.yahoo.com from=spkdigi.com; domainkeys=neutral (no sig); from=spkdigi.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO sm-mail2.lunarbreeze.com) (209.200.245.224) by mta1486.mail.bf1.yahoo.com
Received: by sm-mail2.lunarbreeze.com via HTTP; Sun, 26 May 2013 05:46:50 -0700
From: Mr John william <spk@spkdigi.com>
Date: Sun, 26 May 2013 05:46:50 -0700
Reply-To: mrjohnwilliam@dvaar.com
Message-ID: <74da0f5b$21c21907$b378cb8$@com>
X-Originating-IP: [41.206.11.32]
Mr. John Williams

mrjohnwilliam@dvaar.com
mrjohnwilliam@outlook.com

 
Leave a comment

Posted by on 05/27/2013 in Inheritance Scam

 

Tags: , , , , , , ,

“Dr. John Williams”

WARNING – NIGERIAN SCAM (419 SCAM)

Attention: This scammer is believed to be the same “John Willians” that has sent numerous other scam emails. However, scammers like to use generic names like ‘John Smith’ or ‘Williams’ so it may infact be another scammer.   (Williams is the most popular last name used by scammers, atleast on here.) — If you type (Dr.) John Williams in the search bar you will see multiple other emails I’ve posted with this name.

Return-Path: <kkoliavasili@yahoo.gr>
X-YahooFilteredBulk: 77.238.189.198
X-Originating-IP: [77.238.189.198]
Authentication-Results: mta1216.mail.sk1.yahoo.com from=voila.fr; domainkeys=fail (bad syntax); from=yahoo.gr; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm8-vm1.bullet.mail.ird.yahoo.com) (77.238.189.198) by mta1216.mail.sk1.yahoo.com with SMTP; Tue, 12 Feb 2013 22:53:09 -0800
Received: from [212.82.105.245] by nm8.bullet.mail.ird.yahoo.com with NNFMP; 13 Feb 2013 06:53:08 -0000
Received: from [212.82.108.249] by tm17.bullet.mail.ird.yahoo.com with NNFMP; 13 Feb 2013 06:53:08 -0000
Received: from [127.0.0.1] by omp1014.mail.ird.yahoo.com with NNFMP; 13 Feb 2013 06:53:08 -0000
X-Yahoo-Newman-Id: 131868.58062.bm@omp1014.mail.ird.yahoo.com
Received: (qmail 6876 invoked by uid 60001); 13 Feb 2013 06:46:28 -0000
Received: from [41.138.103.167] by web172303.mail.ir2.yahoo.com via HTTP; Wed, 13 Feb 2013 06:46:27 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.133.508
Message-ID: <1360737987.6350.YahooMailClassic@web172303.mail.ir2.yahoo.com>
Date: Wed, 13 Feb 2013 06:46:27 +0000 (GMT)
From: “Dr.Williams John” <w.princejohn@voila.fr>
Reply-To: williamsjohndr@yahoo.fr
Subject: YOUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION

YOUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION
From: Dr.John Williams
Ouagadougou – Burkina Faso

My Dear Friend,

I work with a bank In West Africa, Burkina faso .I have a business transaction for you.

In my department we discovered an abandoned sum of Twenty Million Five Hundred Thousand Euro. In an account that belongs to one of our foreign customer who died along with his entire family in car bomb in Iraq.

Since his supposed next of kin died along side with him at the Bomb blast, there is nobody to claim the left over balance in the account. It is therefore upon this discovery that I and other officials in my department decided to seek your assistance and present you to the bank as his business partner because a business partner can come from any pat of the world. Further the transaction is hundred percent guarantees.

If you accept i would give you the guide lines of how we can achieve this transfer of the money to your account. And we will share the money 75 for us while the rest 25% is for you.

I expect that you will give me your telephone and fax numbers for easy communication with you and for more details.

YOUR FULL INFORMATIONS
================================== ===== ===== ===== =====
1. Full Name:
2. Telephone Numbers: ..
3. Your Occupation:
4. Your Country:
5. City: ..
6. Age: …

Best Regards
Dr. John Williams

 
 

Tags: , , , , , , ,

“Abadi Toma” aka “Zibo Idirisa”

WARNING – NIGERIAN SCAM – BUSINESS PROPOSAL SCAM

ATTENTION: Abadi Toma also sends scams under the names Zibo Idirisa ( also spelt Zibo Idrisa ) and John Williams

Authentication-Results: hotmail.com; spf=none (sender IP is 212.82.109.209) smtp.mailfrom=wendetinra@yahoo.fr; dkim=none header.d=yahoo.cn; x-hmca=none
X-SID-PRA: abadi.toma@yahoo.cn
X-Message-Info: o9rlR4nWDTfJuzYaLPaTp3ORMES0Blz4ED0pVj+LLYZOYzosVJdO5R74HPb49X9sDW81nrcF/8gUX1PgbXmu2nk4OY6TNsgs6xgnK52TOYOdMr498OkUs2A89TdTHGTnn+4h9aB0+fnKdbrZ9YTeuPDpc+W2Ho9b
Received: from nm25-vm8.bullet.mail.ird.yahoo.com ([212.82.109.209]) by SNT0-MC2-F17.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Received: from [77.238.189.55] by nm25.bullet.mail.ird.yahoo.com with NNFMP; 21 Feb 2013 00:34:41 -0000
Received: from [212.82.108.119] by tm8.bullet.mail.ird.yahoo.com with NNFMP; 21 Feb 2013 00:34:41 -0000
Received: from [127.0.0.1] by omp1028.mail.ird.yahoo.com with NNFMP; 21 Feb 2013 00:34:41 -0000
X-Yahoo-Newman-Id: 679400.18968.bm@omp1028.mail.ird.yahoo.com
Received: (qmail 12788 invoked by uid 60001); 21 Feb 2013 00:34:41 -0000
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding;
b=gJWZE0eJJ/TeqlEHAXvas+ks4WOmqwGflMBmTowkJCHLKE1qnMk0fPrfnVbXQ+gRMjPvEPPmzVTkiOQ18WUbRUBpgz+RhCeuO7DL/H9ejjubJPJcSq0iAMebjzgvKeZaZZeeFl9d/24M+NGwvOH0rzeGWk41DhJTlIJ5peOwrDI=;
X-YMail-OSG: rkLXn00VM1lXRL7JjoWLrGGbmXobCt_TAXxbKxYqhXlB.Ng
4up9vYAvEX6SVegCMKlCL6E_YNL_TB1f.GM797waKqGhuZOxZslAAYCDvktT
l.un5sRIxYvg7ZQWCIUss._3Qbrn20B9qwa.Lixs1LELjThAmrVjc5m.gJDM
awRrYV242Ii4bLJWM4zo.USxVuNWq5Fo6lhSzStRwx3Haj0dv9.S89wuofFM
K_8YADnwsznItJ3qrfyoD2X0349wfxgYjcM98UXLLYLoDwaIG0aJdal6Derg
L4lTN7.9MXNXB2HyQbOV69Fz7FH8vwni8L060XlFDE9QfS2uH.3O_OGYyiUN
fYdoSveIug81Jmftvk.tc8.BSMBlZSIDwZ8G9E.8AEVZKvAe1pUYh1M3rJWO
t8oybh7whKfrawTq7HG2aotIb9DSfrAFGuzk_zqHolfqLdv0VT2SVXxx4aiB
b6eOzUCIMz8c6W8WisABB0ZAd.RAPY2uL2MZMm_GxobuBXwRK7crMxsBWrXO
W39wXmiQgbdRNCWtuMGL78rFY2FQquyNxiTK4kukS9lh9zE_eP8g9t4G8rp6
RQ_xMxE9Ks.t_ej8_thgvjyAnN3Z_PtrRs6bHMfvs
Received: from [41.138.103.86] by web171404.mail.ir2.yahoo.com via HTTP; Thu, 21 Feb 2013 00:34:41 GMT
X-RocketYMMF: wendetinra
From: Abadi Toma <abadi.toma@yahoo.cn>
Reply-To: abadi.toma@voila.fr
Subject: Do you love god then let work together
Return-Path: wendetinra@yahoo.fr
You can tell by the return-address that this scammer also, more then likely, scams under the name Wende Tinra as well.
Do you love god then let work together
From: Mr Abadi Toma
Ouagadougou – Burkina Faso

My Dear Friend,

I work with a bank In West Africa, Burkina faso .I have a business transaction for you.

In my department we discovered an abandoned sum of Twenty Million Five Hundred Thousand Euro. In an account that belongs to one of our foreign customer who died along with his entire family in car bomb in Iraq.

Since his supposed next of kin died along side with him at the Bomb blast, there is nobody to claim the left over balance in the account. It is therefore upon this discovery that I and other officials in my department decided to seek your assistance and present you to the bank as his business partner because a business partner can come from any pat of the world. Further the transaction is hundred percent guarantees.

If you accept i would give you the guide lines of how we can achieve this transfer of the money to your account. And we will share the money 75 for us while the rest 25% is for you.

I expect that you will give me your telephone and fax numbers for easy communication with you and for more details.

YOUR FULL INFORMATIONS
============================
1. Full Name: ……………..
2. Telephone Numbers: ………..
3. Your Occupation: ………….
4. Your Country: ……………
5. City: ………………
6. Age: ………………..

Home Address:11-25/avenue.Kanazoe.
B:P 1508
Ouaga. Burkina-faso
TelephoneT +226 79235711
Best Regard
Mr Abadi Toma

 
 

Tags: , , , , , , , , ,

“Zibo Idrisa” aka “John Williams”

WARNING: BUSINESS PROPOSAL SCAM – 419 SCAM

This Nigerian scammer also sends out scams under the names Abadi Toma as well as Wende Tinra

YOUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION
From: DR.ZIBO IDIRISA
Ouagadougou – Burkina Faso

My Dear Friend,

I work with a bank In West Africa, Burkina faso .I have a business transaction for you.

In my department we discovered an abandoned sum of USD 20.5million Euros (Twenty Million Five Hundred Thousand Euro.) In an account that belongs to one of our foreign customer who died along with his entire family in car bomb in Iraq.

Since his supposed next of kin died along side with him at the Bomb blast, there is nobody to claim the left over balance in the account. It is therefore upon this discovery that I and other officials in my department decided to seek your assistance and present you to the bank as his business partner because a business partner can come from any pat of the world. Further the transaction is hundred percent guarantees.

If you accept i would give you the guide lines of how we can achieve this transfer of the money to your account. And we will share the money 75 for us while the rest 25% is for you.

I expect that you will give me your telephone and fax numbers for easy communication with you and for more details.

YOUR FULL INFORMATIONS
================================== ===== ===== ===== =====
1. FULL NAME:
2. TELEPHONE NUMBERS: ..
3. YOUR OCCUPATION:
4. YOUR COUNTRY:
5. CITY: ..
6. AGE: …
================================== ===== ===== ===== =====
BEST REGARDS
DR.ZIBO IDIRISA
HOME ADDRESS:11-25/AVENUE.KANAZOE.
B:P 1508
OUAGA. BURKINA-FASO
TELEPHONE/T +226 79235711

Return-Path: asys37@yahoo.fr
X-YahooFilteredBulk: 77.238.189.209
X-Originating-IP: [77.238.189.209]
Authentication-Results: mta1240.mail.sk1.yahoo.com from=voila.fr; domainkeys=fail (bad syntax); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm13-vm1.bullet.mail.ird.yahoo.com) (77.238.189.209) by mta1240.mail.sk1.yahoo.com with SMTP; Sun, 24 Feb 2013 09:32:44 -0800
Received: from [77.238.189.56] by nm13.bullet.mail.ird.yahoo.com with NNFMP; 24 Feb 2013 17:32:42 -0000
Received: from [212.82.108.245] by tm9.bullet.mail.ird.yahoo.com with NNFMP; 24 Feb 2013 17:32:42 -0000
Received: from [127.0.0.1] by omp1010.mail.ird.yahoo.com with NNFMP; 24 Feb 2013 17:32:42 -0000
X-Yahoo-Newman-Id: 358646.83540.bm@omp1010.mail.ird.yahoo.com
Received: (qmail 90282 invoked by uid 60001); 24 Feb 2013 17:32:42 -0000
Received: from [41.138.99.125] by web171303.mail.ir2.yahoo.com via HTTP; Sun, 24 Feb 2013 17:32:41 GMT
X-Mailer: YahooMailClassic/15.1.4 YahooMailWebService/0.8.134.513
Message-ID: <1361727161.82961.YahooMailClassic@web171303.mail.ir2.yahoo.com>
From: zibo idrisa <zibo_77@voila.fr>
Reply-To: ziboidirisa@yahoo.fr
Subject: YOUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION

YOUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION
From: DR.ZIBO IDIRISA
Ouagadougou – Burkina Faso

My Dear Friend,

I work with a bank In West Africa, Burkina faso .I have a business transaction for you.

In my department we discovered an abandoned sum of USD 20.5million Euros (Twenty Million Five Hundred Thousand Euro.) In an account that belongs to one of our foreign customer who died along with his entire family in car bomb in Iraq.

Since his supposed next of kin died along side with him at the Bomb blast, there is nobody to claim the left over balance in the account. It is therefore upon this discovery that I and other officials in my department decided to seek your assistance and present you to the bank as his business partner because a business partner can come from any pat of the world. Further the transaction is hundred percent guarantees.

If you accept i would give you the guide lines of how we can achieve this transfer of the money to your account. And we will share the money 75 for us while the rest 25% is for you.

I expect that you will give me your telephone and fax numbers for easy communication with you and for more details.

YOUR FULL INFORMATIONS
================================== ===== ===== ===== =====
1. FULL NAME:
2. TELEPHONE NUMBERS: ..
3. YOUR OCCUPATION:
4. YOUR COUNTRY:
5. CITY: ..
6. AGE: …
================================== ===== ===== ===== =====
BEST REGARDS
DR. ZIBO IDIRISA
HOME ADDRESS:11-25/AVENUE.KANAZOE.
B:P 1508
OUAGA. BURKINA-FASO
TELEPHONE/T +226 79235711

Subject Line: OUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION
From zibo idrisa
Return-Path: <asys37@yahoo.fr>
X-YahooFilteredBulk: 212.82.109.249
X-Originating-IP: [212.82.109.249]
Authentication-Results: mta1005.mail.ne1.yahoo.com from=voila.fr; domainkeys=fail (bad syntax); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm21-vm9.bullet.mail.ird.yahoo.com) (212.82.109.249) by mta1005.mail.ne1.yahoo.com with SMTP; Wed, 27 Feb 2013 21:55:14 +0000
Received: from [77.238.189.234] by nm21.bullet.mail.ird.yahoo.com with NNFMP; 27 Feb 2013 21:53:12 -0000
Received: from [212.82.108.238] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 27 Feb 2013 21:53:12 -0000
Received: from [127.0.0.1] by omp1003.mail.ird.yahoo.com with NNFMP; 27 Feb 2013 21:53:12 -0000
X-Yahoo-Newman-Id: 294415.95428.bm@omp1003.mail.ird.yahoo.com
Received: (qmail 91514 invoked by uid 60001); 27 Feb 2013 21:53:12 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1362001992; bh=RNz/g0A+SosZesalRLUJmon/aCsLLFsFg8Jz9R3+xWQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Content
Received: from [41.138.96.193] by web171303.mail.ir2.yahoo.com via HTTP; Wed, 27 Feb 2013 21:53:11 GMT
From: zibo idrisa <zibo_77@voila.fr>
Reply-To: ziboidirisa@yahoo.fr
Subject: YOUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION

Dr. Zibo Idrisa 41.138.100.220 – BF – BURKINA FASO – KADIOGO – OUAGADOUGOU – zibo_77@voila.fr ziboidirisa@yahoo.fr zibo idrisa zibo_77@voila.fr

 
1 Comment

Posted by on 03/01/2013 in Business Proposal

 

Tags: , , , , , , , , , , , ,

“Dr.John Williams”

419 SCAM – BUSINESS PARTNER SCAM – NIGERIAN SCAMMER

This Nigerian scammer has sent me previous spam under similar names as well as fake agent names, etc. This scammer has used multiple email addresses, sending scams under multiple IP addresses. For more information on this fraudster, click: Dr. Williams Johnson and/or John Williams

YOUR CO-OPERATION AND ASSISTANCE IN THIS TRANSACTION
From:Dr.John Williams
Ouagadougou – Burkina Faso

My Dear Friend,

I work with a bank In West Africa, Burkina faso .I have a business transaction for you.

In my department we discovered an abandoned sum of Twenty Million Five Hundred Thousand Euro. In an account that belongs to one of our foreign customer who died along with his entire family in car bomb in Iraq.

Since his supposed next of kin died along side with him at the Bomb blast, there is nobody to claim the left over balance in the account. It is therefore upon this discovery that I and other officials in my department decided to seek your assistance and present you to the bank as his business partner because a business partner can come from any pat of the world. Further the transaction is hundred percent guarantees.

If you accept i would give you the guide lines of how we can achieve this transfer of the money to your account. And we will share the money 75 for us while the rest 25% is for you.

I expect that you will give me your telephone and fax numbers for easy communication with you and for more details.

YOUR FULL INFORMATIONS
==================================
Your Name.__________________
Your Home Addresses.________
City._______________________
Country.____________________
Home Telephone._____________
Private Telephone.__________
Fax No._____________________
Marital Status._____________
Sex.________________________
Age.________________________
Occupation._________________
Religion.___________________
Your picture._______________

Best Regards
Dr.John Williams

HEADER DETAILS:

Return-Path: <kaboremoustapha@yahoo.fr>
X-YahooFilteredBulk: 77.238.189.60
Received-SPF: none (domain of yahoo.fr does not designate permitted sender hosts)
X-YMailISG: cx_BzRkWLDuye5ktoEEJqehgfsSx0nc75MFAOM1DdRccaZlc 3lD_zRzZ6NNxlN7FlFBrky9rjDj9xlPg12Dv5OEnCybCAMuE1c3kFN6.cp3X KvyQyJftL7jbWNPkYe13.X2LRT.XD4S_JmEBx0TpNmJvlx3u_paVvlGa3EcP L.XEDt21voYLUm1PavQ8u6JQemojE33IYygo55.Y21QOP2fUBAxLtUI6UkFB 8Kb.j3rEnehAVniF6Ng35K8UivYOmiCtW_pcNHDh.TOnhdR14vG5JoeV4SLW OIKg4cQqeS6HlnsOCRJ4onU17wIyTWa3qWlk4apLrSd6tn.gAcp56gudMpLa 7EzADoKAumfa1_AOp8LdUy39DdFkRs7olWHP4gPZQpo8ooE56WdoQ0JtZJmE 4USBrS3xy.sG9kkq8j2BHPPt4VbGIgNK.dWr25Bm1z2NuuhMhduOkf_W0Tt0 zBL1iz4U_4CdbJlBQf9tt2j6XJfbew5.OcfaL89COrgyNgO4vAH9atRAPFn_ SUrTQhJRs9tFNlUlzCWVT5rrGRYFIi34bgi5qvREey_J7DAxMrlgR9qhNeiE GHhplL5md8VwPLnZtFd4VBLM_LcJExjz4pWHvR9VO5BMTA.gH538M9k7r2ZU rQHEzExpLag7K_XNyRjI71ug16bMlmNuSW0umIM9PPbQR7_TyI_BZpuZi8cG QDUh7LQiQ1f5BA3cqRcfpgwrCsjgHdidz7UdKCejMyMN9NgWGeBIf5QoTJk3 _Qj5WJK3v8NZhYufxQ7tYszXHnkaiDxgKHiZxppnSetvfBA5vaS483QJr.op 902yvp5wwT_rUao4oWOy44y_yq1g_SrE3WYIGdyd1VsDIDYAfnfuWErBabYY xZXtj5mp2mSMPq6Efrh0BnCIzUqijgo186bYfydD4bhZ9lT3PeB2Q79de3iz kXL8PzRaFXuQ0uYjV9wUUAKm3clmmmtUqr7rjs_Wh1KSnCnqGnsWHnHlyjiu 1CMNS92OxR0JueIKGRUohGoHnlHsSN9vJHmbfXxY52CtTQsHkGxA3snZQ4Qd 1Kc4nUKcNfkkJuqg8gmzQPeIb42KNPkHO6YloiYIf2ScowARxpN6qtHYs4za WiGtLMHfG.DNi_X0SAvXspfMd.grYR2G9VODYvSCQgiqgkphQBC06hYc7xlT vklfqnsfX8BNu687dn6oja2YsHshKuFHO.hfg7ilIl9C4S0g.s3FaV4yqoho llWYPXAJWvGYRU2jT6rikFJy_wgy5sb5EeIj3Bz3_NApAWJe7arDVq.KJkFb yaLRMK6aA0zET2zNPdU_bWL_pbaZ20ClvDwPy0vL0.xChIs4NOYDK3fWVvEi yU.L0olrA7blKrK9XvPnzEHra0iTqqfs6Zca_bnu9jdBxPvbj7NpWbsHXJjF pG3ntQM9af2eUdMyx9qxnl5qhRxfCKX3eLSkEFZ9MQ–
X-Originating-IP: [77.238.189.60]
Authentication-Results: mta1214.mail.sk1.yahoo.com from=voila.fr; domainkeys=fail (bad syntax); from=yahoo.fr; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm3.bullet.mail.ird.yahoo.com) (77.238.189.60) by mta1214.mail.sk1.yahoo.com with SMTP; Sun, 27 Jan 2013 12:08:38 -0800
Received: from [77.238.189.48] by nm3.bullet.mail.ird.yahoo.com with NNFMP; 27 Jan 2013 20:07:52 -0000
Received: from [212.82.108.132] by tm1.bullet.mail.ird.yahoo.com with NNFMP; 27 Jan 2013 20:07:52 -0000
Received: from [127.0.0.1] by omp1037.mail.ird.yahoo.com with NNFMP; 27 Jan 2013 20:07:52 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 688974.72894.bm@omp1037.mail.ird.yahoo.com
Received: (qmail 89533 invoked by uid 60001); 27 Jan 2013 20:07:52 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1359317272; bh=g45vm9O4LY0q4S5jUXhRp+/yXSheAYGhmFOIoUqZv3Q=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=CkuvsbPolf4zkSNVj49n6ngzh6+P62R+ce5jyd4wCku7usBSwWpmsVyV/0M244IeGHUyyu+MsfF45pPaebAuI4NdPZpKt7GQvFamTLh7/2mvGs/efYuOwRkEFusP+VTQntWGkFAtovBKlMZcXfzLymqwXdrnmoIsEezelpqaCMM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.fr; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=CLXSCs/LgT4xt1opxpGEUlSbVMRTHPNTm/alw142d1X6qJ59u765aTBQZXWRa7a80iMmF4Uj+mCrMwVnqSx5ceauSH2nc6bqycxxeJdoPAIPDOxX0H+Qm6z5i/L3ovFRVZqt3P2mtXeuWgNl2+VtMuSBwTpoeJ+upiva+hFmsDE=;
X-YMail-OSG: o.E14gsVM1kpGQ8.9A8a8xs41dhhZItM3yTbFPjdZ6uQdcH jf8uxZNBZvGuv2XZ6aC1pa63WvL937j4eturfSQ7vFhQ6fRAstfiLGznzfF1 9vbnZsWLFAubHk194gs1.zMSWL_m6kLhwZiILR2GNCJUvEH4KS.lfJZb4v96 8Ardi3JH_aQ7Mdi2MR0G_rKpAS7KGnGr_QTXM47COynX_DK4qrguNbneaIZW u07LkBu0AxBbI10HsJGVhZ7PmQmoGXmJvytqlqa47sI4EvvJgrhC4XHxsdXv 16puOyR08zBFbRjS95YQRPu57ZQoT.DF4d5gXaro7TWQRua7kR3LQjvZKMVf bknUyRZIr82CBenid4UYZclBYMr6wtpi4k.qQI0Sd9MpqeywggztvDtWAfLV vvzRPCXVZRbz.BAE5KIcNQxDgu6HCkF7iC9LjfNATz3n4LBC3_23NxH3yzJn CEzAxJ9nS3FgcnkVUJqSkzfJFEW3C8QpgHsDJFmck0.O6VqAmsOXwa6kNYX_ xwoDpd.1HCjpsxvxjnK9zgmNaE.avWT8uuPBG6f2uK4IJWXe4e4L2wdBJtcv eFE1mBzog7x9c2HAIlLjb.WTAWBTeK3ulZ9qRMfRxMuXZmZ9RuWOBTK.ZBcs Z4JbL6Ehm7a2F2yDgqKCsnon64cCtiVWPe6mU
Received: from [41.203.235.116] by web172006.mail.ir2.yahoo.com via HTTP; Sun, 27 Jan 2013 20:07:52 GMT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1359317272.89323.YahooMailClassic@web172006.mail.ir2.yahoo.com>
Date: Sun, 27 Jan 2013 20:07:52 +0000 (GMT)
From: “Dr.John Williams” <john_w2001@voila.fr>
Reply-To: williamsjohndr@yahoo.fr
Subject: From:Dr.John Williams

From: Dr. John Williams john_w2001@voila.fr REPLY-ADDRESS: williamsjohndr@yahoo.fr RETURN-ADDRESS: kaboremoustapha@yahoo.fr IP_USED: 77.238.189.60 RECEIVED_IP: 41.203.235.116

 
 

Tags: , , , , , , , ,

“Barrister Mendy Samba”

INHERITANCE SCAM – NIGERIAN SCAMMER

MENDY SAMBA also known as MENDY CHAMBERS and AMINATA BANGALI has sent me three more scam emails. I will post them all below and include the header information for each email. (Note: The scammer has used the same email-addresses and received IPs. However, the Nigerian scammer used a different originating IP in each email.)

scams_target_you_scammer419

FIRST EMAIL: ATTENTION:

Thanks so much for your email. With regards to your lawyer, I don’t see any reason for your to contact him at this early stage as his services are not required at this point. But when the process is concluded, you will contact him to process resettlement visa for Aminata Bangali. The necessary legal requirements will be taken care of through my chamber.

I implore you to keep the deal strictly confidential, while we try to put the necessary arrangements in place to legally have the funds approved for transfer to you. To kick start the process, do be informed that I am drafting the Memorandum of Understanding/Power of Attorney between you and my client, which will be forwarded to you for your assessment and acceptance. The said agreement will legally protect your interest and that of my client and will establish the details of the partnership agreement between the parties involved.

I have briefed my client about your interest and she’s excited and looking forward to the adventure. I have given her your email address and she will be contacting you soon. The company in Spain will also be contacting you to give you the necessary guarantee as we progress and we have already contacted the company about the processing fee and we are waiting to hear from them to know the exact cost. Please, note that you can verify my client’s claim directly from the company by quoting her name as next of kin and quoting the deposit certificate number. You can contact the company directly on the following email address:

Email: info@guarantytrustsec.com
Contact person: Dr. Thomas Woods

Be informed that your commitment and reliability will be highly appreciated. I am using my office and personality to guarantee that the transfer will be carried out smoothly and securely once we meet the legal requirements.

Do kindly confirm your contact information in the following manner required to process the MOU/POA.

1. FULL NAME AND CONTACT ADDRESS
2. OCCUPATION
3. DATE OF BIRTH
4. MARITAL STATUS
5. NEXT OF KIN
6. PHONE NUMBER
7. OTHER CONTACT DETAILS
8. COPY OF YOUR INTERNATIONAL PASSPORT OR OTHER IDENTITY

I wish to use this opportunity to let you know that your honesty and reliability will be highly appreciate and I will ensure that the transfer of the said fund is carried out smoothly without problems of any kind. I am only doing my best to assist the innocent woman to ensure a better and more secured life and I want to believe you quite understand her situation clearly.

Kindly get back to me within the hour with the needed details.

Yours Sincerely,

Advocate Mendy Samba( Attorney At Law )

1ST HEADER – INFORMATION

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) bC4gV2l0aCByZWdhcmRzIHRvIHlvdXIgbGF3eWVyLCBJIGRvbid0IHNlZSBh bnkgcmVhc29uIGZvciB5b3VyIHRvIGNvbnRhY3QgaGltIGF0IHRoaXMgZWFy bHkgc3RhZ2UgYXMgaGlzIHNlcnZpY2VzIGFyZSBub3QgcmVxdWlyZWQgYXQg dGhpcyBwb2ludC4gQnV0IHdoZW4gdGhlIHByb2Nlc3MgaXMgY29uY2x1ZGVk LCB5b3Ugd2lsbCBjb250YWN0IGhpbSB0byBwcm9jZXNzIHJlcwEwAQEBAQ–
X-YMailISG: 04m5KF8WLDt9dnxMwru_HLy2sSrgLReVAcDiwDIPzpbEYTGf O7z8zbwixEjRtXDkiSQUs6VcvO6iyB53Bkb.oykn3qbCLcoIB6iIQyCAQcHn V_OhckVZ.aksC5gfiEvSjoVCjwg7bi1QX0m5pl7wxXy.EtPYskuuC3BcGxJq brJmJopk4pfinlDZvQWNL6Oc76k7hyq1tePHdvj6eNNteTK1accRm6PUjt.U gJDFNWPFFbybxhdcE1HA1LVRJvY1NQAcj1t630BbjJjarC6nnEaTVVIcfpQT er6YtiVb8oheGLU8CHvjFz45hTR1_k8FEe9FQWs7m_NF4xQRp3GzNVdwpiT7 WAuaBYqEkotAKosBNu4yIkidDEiW21FPPilKiifix.nRsr.OvWsJ3ITfxap_ TTO_Am_baq9jWWqC8MiaQcAbhkxdnOFD8s2ejl4Zau.D41QiOWmhFHyfYiog TxjjDGIzZF5vrE31Z0PVeVSdm8jPolkneCTSvDx9AGefuqZ2rxGOcCbDG0OF C_ZX.kmoHEHnvjddHAQnEkcUoHpPYZY2s.q2ZAUsW0VVGWuv6DvmZmCPItFu CBlPY.YslBLY3tlCqg1kWOpG84QLD6c3WbJG781s5CPFpV_A0DqrQ7X9GPQV z1JEh2qnxWwlzQzqtdRknKEvkovPj2PC1hmnaFkOhSPj4fXlEnuY9wqFzY21 m.S13mK._4W1ELitIHMuDf5x13FBERdMJ_4_bHCIvGsZZNbbRf5CZBDhvye9 plIFahkJA_ZRgeajZnm5YbcP97FWqaFgETl3qq4ahI_mGKC4j06fsclgGPqO en06EdIb7B_TnatgAsV1gOcIIMrAmUkdwxm8aeVO1_mYazrsEuC3uno48wp8 HF_Gmm5nhFGaE4i2i9w6TgJ9zuJXzmf9MDiL08qEi0uNb02qS_QRrnUj.YJi ulO1a87j8vqYxdl.6koj6R0gYpnftZDOA_q3yZLDoRxM6tvkgDtrpnUiKDUJ EK43yf0ePPFXprNLKtlE33xELzq293lPZ18BOXQLS0pa0rt2o.nodjEdh4z1 bcrETtiq0pik3Is0VVE.85cnIoJC8ZzO4Q.eKVazIorivI8_u3op4JhbiVLZ aw5Bi.dVLDDWN6MnQUGYb9nnSbhsutUBjuJ6Wt2v
X-Originating-IP: [64.98.42.5]
Authentication-Results: mta1277.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.5) by mta1277.mail.ac4.yahoo.com with SMTP; Sun, 13 Jan 2013 06:27:15 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay06.b.hostedemail.com (Postfix) with SMTP id 451315E9F8 for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:27:15 +0000 (UTC)
X-Panda: scanned!
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 4469
Received: from webmail07 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf08.b.hostedemail.com (Postfix) with ESMTPA for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:27:15 +0000 (UTC)
Received: from 41.138.179.177 ([41.138.179.177]) by webmail07 (Webmail) with HTTP; Sun, 13 Jan 2013 14:27:14 +0000 (UTC)
Date: Sun, 13 Jan 2013 14:27:14 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <1916237468.29168.1358087235091.JavaMail.mail@webmail07>
Subject: Re: GREETINGS FROM AFRICA( More Details )
X-Mailer: Webmail
X-Originating-IP: [41.138.179.177]

64.98.42.5

_____________________

SECOND EMAIL: PLEASE, FIND ATTACHED THE DEPOSIT CERTIFICATES OF MY CLIENT’S FUND. NOTE: TWO ATTACHED FILES WERE SENT WITH THIS EMAIL TITLED “AGREEMEN 101” AND “CERTIFICATE OF DEPO 001”

2ND HEADER INFORMATION:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) RklDQVRFUyBPRiBNWSBDTElFTlQnUyBGVU5ELiABMAEBAQEDdGV4dC9odG1s AwMxAkFncmVlbWVudCAxMDEuanBnA2ltYWdlL2pwZWcDAzExNjUCQ0VSVElG SUNBVEUgT0YgREVQTyAwMDEuanBnA2ltYWdlL2pwZWcDAzY0Mg–
X-YMailISG: M0bKmoIWLDv63kKzxOEndptXp.7zvC0TJUVBOwfWgk24Wvc0 bi7PgOqwK0A9RE6NhtraNE_SZowuJ31bixqsmyDiWNNWlZcM.o2_pzjLt0Ia H7sJksHnQ_GGvyfzwSQ9PKZJBmlZl8Aw5WOy5LEq1CqgoFr.FMXz_.wM51H. LAjMuSnYvvuQb9dnVd6RYYRNrmW9QHxCsKDiGzkPQMEF_15Nwdsbb_iZ1mop 1GJry4lVc1UMYVcURhKVeruidysBeiCg9Ks_lqUDoUCyeflAaZRjdcSFRhzD HBtrM68fAExh0601NZrjsv9gxhh5c_KULam1Ql6R3rg6tISy0_lvYTkCI22Y 92v6XlHWLVsIj5FLm0gB6Hy5syepXygpU0ccub4BzJsEctoMixLzK1.vdQyG GaxePaw_Ph_55k9pTJJWBCtxGMD9374mys.gF4rmhGaakicSSr.evJ0e0kW9 rVBUvPjWEw17yErVJE20zz78lLhCeb.yhvLw8BFe7EUFGhXs2Lzna6WPmd0w rcNejoHTq7uXu7MSNhd_x7MUBLlYxQipy9_bZQtUTc5YGzaCvvCKzGLPCIso u0DovZ2CiWPkYBvBJDBVKC2uHefv41rCje6VV.4bHzt4DmfQoAnPJEn6zLio uWwfRB_f3fhoBtiByP4aLICJaEEqcDbNAE7X2u8v0aO1hDQQ.jGRjIMkBVdv jibyKiMT_nESBTk5jIxbHVW5SNitSOTG1_.6xOXFXaz7Ws3Gh2caj5dQxleQ 65UHSPdk9tB266Vv3nUJ1HOVtIgZrEU5EsplZ4blV7Pqa_AQ041jTLGrUwQd GhKN.Cm1e4Y0885YbwBCEOZwks2gbzEb6KNzwJ7lMHCKbNz8RI2EWTED2GJs 9VwrYWJLBf_UE0oyxwajhR.k9tCG25X3nkPAm4aNbp8azLw2lXhjnrUu7azQ tYrugQVhK0FB4PRvOtvdS_h72lUGQw9KVfizt5ISed7Sa.Ch8d52XIiN2844 CQ5VbaaK_tkIlLELgiWUqbXR7WzguxN2JbJ.lyl5BG_70QJPaGe8jgf7ohQD 6bIFazaSlL1R6jgaWypgCSj9IVreoSYuof6l4anLT_bNLaWm7g–
X-Originating-IP: [64.98.42.67]
Authentication-Results: mta1270.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.67) by mta1270.mail.ac4.yahoo.com with SMTP; Sun, 13 Jan 2013 06:29:26 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay01.b.hostedemail.com (Postfix) with SMTP id A8943146A059 for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:29:26 +0000 (UTC)
X-Panda: scanned!
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 1875701
Received: from webmail07 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf10.b.hostedemail.com (Postfix) with ESMTPA for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:29:25 +0000 (UTC)
Received: from 41.138.179.177 ([41.138.179.177]) by webmail07 (Webmail) with HTTP; Sun, 13 Jan 2013 14:29:25 +0000 (UTC)
Date: Sun, 13 Jan 2013 14:29:25 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <619678690.29189.1358087365863.JavaMail.mail@webmail07>
Subject: DEPOSIT CERTIFICATES OF MY CLIENTS FUND
Content-Type: multipart/mixed; boundary=”—-=_Part_29188_651041165.1358087365783″
X-Mailer: Webmail
X-Originating-IP: [41.138.179.177]

“Barrister Mendy Samba” <mendychambers@mendychambers.com> REPLY-ADDRESS: mendychambers@gmail.com ORIGINATING/RECEIVED IP: 41.138.179.177 —– 64.98.36.5 —— ORIGINATING: 64.98.42.67

____________________

THIRD EMAIL: I am attaching my passport copy as a reference NOTE: an attached file was also sent with this email which included a fake passport. The title of the file was “Mendy SA”

3RD HEADER INFORMATION:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) ZmVyZW5jZSABMAEBAQEDdGV4dC9odG1sAwMxAm1lbmR5IFNBTUJBLkpQRwNp bWFnZS9qcGVnAwM4Mw–
X-YMailISG: zPVv7I0WLDsu.s.Ysyspp4f_fWriIeE68pg9psqNgVdRguDo _rLQvGuv4_Cg60ZSt.2HHOivooPysnmrTAAY.uShn6fuPG3svNTC0oKB6CFr S6TLBL8al8ZilKn49KLgeTzFD7eyhHDJQ6QwJtIpVdoQM5ZM0ghFfj.5GZQA hU5pEH0JuLu7L_bhN2OVCU_r2D5VpbCAmd9VVxkksJnwuaehbcsE1pkLKGxE wai4CKqgOyDLxN._ZJjreFiRFXbuvydeL3fT.wx5nCc5XF5g92KYrNTLz3o6 QP2kwNLbKvi2WEL5OlOSMgiXQiK5GzMBCFSIFlRWWduzWrpj9Aog70AaF_tP zHfvKMq0pe7uyQEvtzDi86M.anVkf7ymwnL8qRnXTIdNWXFYy4LaFSwy2NKJ 0CsY2JPGuyzNIuGI0gKqSUAvJq9R7vFJBVqbIjSnWfKz1KHWOFIWJdsNFnRu cLsxWvdVpzmZavMXPvvvoud3r0XnkLrP8uyCZ_hXEj14CeBj9ag0PBHQbs_X 29kvABmn5Jm9vxZV0hLi8d1yF6__CITi88y2E8_nkXJVFlmJuo4R54.G7Nmx 0YuCbEazsx8kvEJbDYkP5CKVIHrfFO3kSCQvi1EKsHp4Ik8BXcWb_MWkEUti FlfUuROEqERcXFIA3qHp07xdfjxo.5meRQahcxrlORRYEqJfKMJ2JfmwT23O PIN0i8vEuFe8jXJZQinTAs777783ISg.DlXIzzK4HnASLAy.Og3tsUake1SN Tyk70oeA1WenNH120U08ZWyVTc5ainc4VJ64eBZnJ2G6J4BD7MvXoaE9PCK2 GP9bO_mS6RL35.TaHW5ZjM7g8YbgNf4GmvelNaAytPrqGwOPawaNEuvPewKa t3wEYSdOqmkPFXo0S2d2cUhtZszHyZMVFhNJfQ.v0jmGN3gW5ptIrLa302Ob igESzqyKtB6ae42uoFqWzH7BL.cf5Gnez3JZp0xm4NsrWsI.w45_xmuHoh0x Z4836la.CrYNKahtjpOUQx.jwG3apAWfXPSwDUJkYOd.R6PaHrn0LBHSg6bX RDzwXfADW5yMl3fl8jQDqTvTzUl1xnq4D_Jp6O269mk.t2ZXJLKtckGcMjCX BYniEZcDcg–
X-Originating-IP: [64.98.42.164]
Authentication-Results: mta1171.mail.bf1.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.164) by mta1171.mail.bf1.yahoo.com with SMTP; Sun, 13 Jan 2013 06:31:00 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay06.b.hostedemail.com (Postfix) with SMTP id 4B6875E9F9 for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:30:59 +0000 (UTC)
X-Panda: scanned!
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 86929
Received: from webmail07 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf07.b.hostedemail.com (Postfix) with ESMTPA for <deleted@yahoo.com>; Sun, 13 Jan 2013 14:30:59 +0000 (UTC)
Received: from 41.138.179.177 ([41.138.179.177]) by webmail07 (Webmail) with HTTP; Sun, 13 Jan 2013 14:30:58 +0000 (UTC)
Date: Sun, 13 Jan 2013 14:30:58 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <1490255423.29212.1358087459089.JavaMail.mail@webmail07>
Subject: =?UTF-8?B?TXkgUGFzc3BvcnQgQ29weSBBdHRhY2hlZOKAjyEh?=
Content-Type: multipart/mixed; boundary=”—-=_Part_29211_1002852497.1358087458957″
X-Mailer: Webmail
X-Originating-IP: [41.138.179.177]

Barrister Mendy Samba mendychambers@mendychambers.com REPLY-ADDRESS: mendychambers@gmail.com ORI-IP: 41.138.179.177 RECEIVED IP: 64.98.36.5 ORIGINATING/FILTER-BULK: 64.98.42.164 RECEIVED_IP: 41.138.179.177

 
Leave a comment

Posted by on 01/15/2013 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

“Dr. Robert Williams” a.k.a “Mr. John Williams” a.k.a “Peter John” a.k.a “Mr. John Mark”

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: This fraudster has been very persistent, spamming my inbox for months under various names, addresses and IPs including Barrister Nector FBI OFFICE Scam as well as (MR) Paul Johnson Lottery Scam — Below is a list of several emails sent by this scammer.

Subject: HELLO ,
From: Mr. John F. Williams peterjohn848@yahoo.cn

HELLO ,

I have contacted you because I’ve sent you the first payment of $5,000 today from your winning funds total amount of $1.5Million USD,Therefore you need to contact western union agent Mr. John Mark for him to give you the transfer payment information and MTCN.

Agent: Mr. John Mark
Email: ( nunionwester165@yahoo.fr )
Phone: +229 68433916 nunionwester165@yahoo.fr

Please try to contact him today for him to forward the payment information to you, Remember to Indicate the registration code of EB-2520 to him when e-mailing or calling him, Also he will be sending you $5,000.00 daily as per my discussion with him, this is what he needed from you to send you the first payment.

You’re full Name…………
Your Country………………..
You’re Telephone Number……..
Your Age……………………..
You’re Copy of Your ID………..
Your Sex …………………….

Do get in touch with me once you have got the transfer.
Sincerely,
Mr. John F. Williams.

Return-Path: <peterjohn848@yahoo.cn>
X-YahooFilteredBulk: 106.10.151.65
X-Originating-IP: [106.10.151.65]
Authentication-Results: mta1575.mail.ne1.yahoo.com
Received: from 127.0.0.1 (EHLO nm23-vm2.bullet.mail.sg3.yahoo.com) (106.10.151.65) by mta1575.mail.ne1.yahoo.com with SMTP; Tue, 09 Apr 2013 13:53:54 +0000
Received: from [106.10.166.120] by nm23.bullet.mail.sg3.yahoo.com with NNFMP; 09 Apr 2013 13:53:51 -0000
Received: from [106.10.151.138] by tm9.bullet.mail.sg3.yahoo.com with NNFMP; 09 Apr 2013 13:53:51 -0000
Received: from [127.0.0.1] by omp1006.mail.sg3.yahoo.com with NNFMP; 09 Apr 2013 13:53:51 -0000
Received: from [41.79.217.121] by web15303.mail.cnb.yahoo.com via HTTP; Tue, 09 Apr 2013 21:53:46 CST
From: “Mr. John F. Williams” <peterjohn848@yahoo.cn>
Reply-To: nunionwester165@yahoo.fr
Subject: HELLO ,

 +22968433916 nunionwester165@yahoo.fr Mr. John F. Williams
FBI OFFICE INHERITANCE LOTTERY SCAM

Subject: TRANSFER MTCN

Hello,

I am contacting you because I have sent you the first payment of Euro 5, 000 today from your winning funds total amount of Euro1.5Million , Therefore you need to contact the western union agent Rev. Jerry Young for him to give you the transfer payment information and MTCN to pick up the money at WU Branch over there.

W.U Agent: Rev. Jerry Young
Email: wu_payment0@yahoo.com.my
Phone: +229 98644349

Please try to contact him today and ask him to forward the payment information to you, remember to indicate the funds registration code of EB-2520 to him when e-mailing or calling him, Also he will be sending you Euro5,000.00 daily as per our board discussion with him.

Do get in touch with me once you have received the transfer.

Sincerely,
Dr. Robert Williams
IMF Managing Director Benin.
E-mail: bobwilliamson@superposta.com

HEADER:

Return-Path: <yiyu2016@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.71
X-Originating-IP: [203.188.201.71]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=superposta.com; domainkeys=fail (bad syntax); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15-vm3.bullet.mail.tp2.yahoo.com) (203.188.201.71) by mta1285.mail.ac4.yahoo.com with SMTP; Wed, 12 Dec 2012 02:55:25 -0800
Received: from [203.188.200.82] by nm15.bullet.mail.tp2.yahoo.com with NNFMP; 12 Dec 2012 10:55:20 -0000
Received: from [202.165.102.49] by tm3.bullet.mail.tp2.yahoo.com with NNFMP; 12 Dec 2012 10:55:20 -0000
Received: from [127.0.0.1] by omp103.mail.cnb.yahoo.com with NNFMP; 12 Dec 2012 10:55:20 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 348533.56547.bm@omp103.mail.cnb.yahoo.com
Received: (qmail 16962 invoked by uid 60001); 12 Dec 2012 10:55:19 -0000
Message-ID: <1355309719.81269.YahooMailClassic@web92104.mail.cnh.yahoo.com>
Date: Wed, 12 Dec 2012 18:55:19 +0800 (CST)
From: “Dr. Robert Williams” <officefilepayment@superposta.com>
Reply-To: westernunionmoneytransfer403@yahoo.fr Western Union Money Transfer
Subject: TRANSFER MTCN

FROM: Dr. Robert Williams <officefilepayment@superposta.com> REPLY-TO: westernunionmoneytransfer403@yahoo.fr RETURN-PATH: yiyu2016@yahoo.cn
ANOTHER ADDRESS GIVEN BY SCAMMER – bobwilliamson@superposta.com
RECEIVED IP: 41.223.248.96 LOCATION: Benin, Nigeria

Below is a phishing scam email / header sent by the same received IP as the scammer above. The originating (fake) IP are different but if you receive a unknown email with any IP’s shown on this post, you’re more than likely dealing with a scammer.

Return-Path: <carecustomer625@yahoo.com>
X-YahooFilteredBulk: 98.139.91.80
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-Originating-IP: [98.139.91.80]
Authentication-Results: mta1031.sbc.mail.sp1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 8.224.216.104 (EHLO fgateway15.isp.att.net) (207.115.11.45)
by mta1031.sbc.mail.sp1.yahoo.com with SMTP; Sun, 23 Sep 2012 07:26:25 -0700
Received: from nm10.bullet.mail.sp2.yahoo.com ([98.139.91.80])
by att.net (frfwmxc15) with SMTP
id <20120923141959f01008dmffe>; Sun, 23 Sep 2012 14:19:59 +0000
X-Originating-IP: [98.139.91.80]
Received: from [72.30.22.77] by nm10.bullet.mail.sp2.yahoo.com with NNFMP; 23 Sep 2012 14:19:59 -0000
Received: from [66.94.237.111] by tm11.bullet.mail.sp2.yahoo.com with NNFMP; 23 Sep 2012 14:19:59 -0000
Received: from [127.0.0.1] by omp1016.access.mail.mud.yahoo.com with NNFMP; 23 Sep 2012 14:19:59 -0000
Message-ID: <1348409998.34442.YahooMailClassic@web182201.mail.bf1.yahoo.com>
Date: Sun, 23 Sep 2012 07:19:58 -0700 (PDT)
From: Yahoo Member Services <carecustomer625@yahoo.com>
Reply-To: carecustomer625@yahoo.com
Subject: Yahoo Warning

EMAIL: Dear Subscriber,
Your E-mail account has exceeded its limit and needs to be verified, if not verified within 24 hours, 
we shall suspend your account.Click to verify your email account.
Please note: You serve the risk of losing your account permanently if it is not verified.
Thank you for your usual co-operation.
We apologize for the inconvenience

Sincerely,
Yahoo! Mail Product Management.
Copyright © 2012 Mail! Inc. (Co. Reg. No. 2344507D)All Rights
Reserved. Intellectual Property Rights Policy

 
Leave a comment

Posted by on 12/14/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

Nigerian scammer under multiple names and email addresses

WARNING: Nigerian 419 SCAM – Advance Fee Fraud

NAME(s) of Scammer: MR John wllIams okoye <> Julio Brooks <> Shila Saabira <> John Williams <> Kenneth Fennell <> Julio Cossa <> WlIiams <>
Email Addresses scammer has used – 000office1786@att.net <> mrjohnwlliamsokoye96@yahoo.com <>   julio_brooks0000@hotmail.com (currently suspended) — <> brooks_julio@yahoo.co.za <> weberth@att.net <> shila2saabira@yahoo.co.uk <> 007saabira1000@att.net <> kennethfennell2011@att.net <>
EMAIL: Your atm card is ready

FNB BANK OF SOUTH AFRICA
TOWN SQUARE, JOHANNESBURG SOUTH AFRICA
JOHANNESBURG SOUTH AFRICA
JOHANNESBURG SOUTH AFRICA

THIS IS TO BRING TO YOUR NOTICE THAT YOUR ATM DEBIT CARD HAS BEEN ISSUED AND FORWARDED TO MY DESK FOR ONWARD DELIVERY TO YOUR DESIGNATED ADDRESS. IT IS IMPORTANT THAT WE NOTIFY YOU ABOUT THE DISPATCH CHARGE AND ADMINISTRATIVE CHARGES OF YOUR VISA DEBIT CARD, THE DISPATCH COST VIA COURIER SERVICE IS 250 $WHILE THE ADMINISTRATIVE CHARGES IS 100$. TOTAL 350usd$.THE CHEAPEST MEANS OF COURIER IS DHL COURIER.THEY WILL DELIVER IT .

RECONFIRM YOUR ADDRESS AND PHONE NUMBER

AS SOON AS YOU SEND THE MONEY, AS MATTER OF URGENCY FORWARD PAYMENT INFORMATION TO ME AS FOLLOWS,
FULL NAME AND ADDRESS OF SENDER, CITY MONEY IS SEND FROM AND MONEY TRANSFER CONTROL NUMBERS FOR EASY PICK UP.

BEAR IN MIND THAT THE VISA CARD WILL BE SENT TO THE ADDRESS YOU SUBMITTED TO THIS OFFICE VIA SPECIAL DELIVERY SERVICE, BECAUSE OF THE VALUE OF THE CARD AND SAFETY. SO IF THERE IS ANY CHANGE IN ADDRESS, KINDLY INFORM US TO AVOID DELIVERY TO A WRONG PLACE.

YOUR DEBIT CARD WILL BE VALID FOR TWO YEARS AND YOU CAN DOWN LOAD TO CHECK YOUR ACCOUNT BALANCE FROM ANY ATM MACHINE USING YOUR PIN NUMBER. IN CONCLUSION, YOUR VISA DEBIT CARD WOULD BE SENT TO YOU UPON THE RECEIPT OF YOUR DISPATCH FEE.

NOTE: YOUR LIMIT OF WITHDRAWAL IS US$14,000.00 PER DAY.TOTAL AMOUNT ON THE CARD IS US$14,800,000.00
REGARDS.

JULIO COSSA

CALL ME AT +27731407825

HEADER:
Return-Path: <000office1786@att.net>
X-YahooFilteredBulk: 98.138.229.136
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 0YJRxDYWLDsCUr.n7IoNAZMacW_IPkeQcq5vSG0bG2YNP.HN 9M3VtcETkRSMYwKwgBLlJQsP2caCVc8Usr5tFIT1XKnYPvv1XGBjh_Zm4_Sk Lh5FnG7qtHO7RYEVwpfpulUD.b.WPYHvwkd4Phup0Sj_59grU8CWo.ORcYo5 Xin7qEi3mUzh1FDXQI48_YrZEDFfZgrqal619U.lus3SUE9Y3_BVlsVuKbWa Ch2tM1jPxbkS4QeavSR90q.BjZk7Kz3S1S7EwUQjfhM8y_.3dc2Dj92N4r5s Rj2f.E38Ur9nFKXbFCZCczGkYiDruDoST6oB1MoMnoMcMq7_pHil.zMf70KG u3JodC78kPCJ5GaRgE1fQTAu3w7gDl031ho6uQz9SOot3kfczFgwAsFvv8u1 C8h1nXUoy_F7bj6SOO4Av0JKcJEMRJzIi2BGUxi.8ppntUCgBtxiN3mad3F1 1hOl9hJ90DMPH6bNc_8Fqe3xwcbdWLU_MgOV8lad8AUh69EkS4MlmVFqpn2f t6ac6gbGoYPotmO3Q8LQ_FNUjh7OVT4XJbAmVXXk6cS6toKHYlrcdysS_r_w WUU1NgcYXhnl5kUO_l2BEHCest4HURBIll68PpfEJR65QYfSIkS.6F.kKO1z mk9QY1135pZE6Gky0F3SdymwnJg6cYbGPgVSjufZGoQdShA69LR4MidwX.Tt HZrA_haoBEjHPVqKjGC_NsIiDR0xEyLDwhwuI4Hxmo3ALFg43uPX10Hh1jKf 9vMLahXMJMFJbNERDBTI3lOWWsl5qwhzbQsvC5jlYk62L88SP29PpQ6DcNR2 jtFSb4XYnQYkxOgwhpkO_YzARL8s1sX4e61mMtq0wHlVkrcaYgPuXMvop4u6 XEMGNZhzZAOsL2GygdZ6GlqRDPU8xu8GpwQbyd.EokpQl.R2Q7sFnCpUbk.3 W1f4sNLTblUT0B7SDvUZQDpCZ8uVrhC6ZiB20Ekrdw55xpe9DF0j7xAwXjpD yaBmJz50tgT_GfElCNxncpGfSEo-
X-Originating-IP: [98.138.229.136]
Authentication-Results: mta1426.mail.mud.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm37-vm8.bullet.mail.ne1.yahoo.com) (98.138.229.136) by mta1426.mail.mud.yahoo.com with SMTP; Fri, 19 Oct 2012 04:39:46 -0700
Received: from [98.138.226.178] by nm37.bullet.mail.ne1.yahoo.com with NNFMP; 19 Oct 2012 11:39:46 -0000
Received: from [66.94.237.118] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 19 Oct 2012 11:39:46 -0000
Received: from [127.0.0.1] by omp1023.access.mail.mud.yahoo.com with NNFMP; 19 Oct 2012 11:39:46 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 128338.22408.bm@omp1023.access.mail.mud.yahoo.com
Received: (qmail 99372 invoked by uid 60001); 19 Oct 2012 11:39:45 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1350646785; bh=SKoypwz9pBl3Qk1pZ6rq2MwtHjpohKEF4jD5cIqIMD4=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=zWt12NTCFwvGtNPS/CDBP6i4JwuM8fg0vwZ0czSY2Xl53K/L4YQl9HDk+s7GADG7p0hhG68mU6MpdVqoENa/Mc5feEN2kecavXSJ1wHur8BLqjsJG0OkGHO3x1tec1PWiZBywOsa7gv4+6qbb66uwqapU7mWbHMVh/Q+fkVElL4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=K+Ye6WpHrH4G5XWMJKMhaZEZ2Nl2pGuu6lqOhzzupzsQJjRx0SVrgEpaEMAqHtSo/2ErGJvuJn/CmBCOh49OXUFnpie04fjDzdG1RjMCZeRfRIhktWVd8VASE1EG2E7b7oTHssUYnt8CI6heLsgIPmGb6Is5HrizOUW2sCL1TUE=;
X-YMail-OSG: LyU19ZEVM1nu.UV08L7pgvbJh1jPFCh0Kh3E35owYF2l5ov JcAgu1oQhenvrYZ2nr2ALZqJ9R9TSqmx7AnT15itR_VM3nOAp92XEZcgaaSj TU42xkqT8fSouuG9Q3MVvnxkWRbWaJEvkLDztwjnSDjyaNLQR1E_aYPhn19w zctioR_k16Ibp6iRjmPBL21.wjbONXNp0l9zMHB6ITnVQQJuME2crYCEcuTR .SKdFtpm8wluYahqGzOrDzG2i8noe.loMii0bloII6X5L7dtU7pVSfElOd7M zjh2PlLbXtjZXSupUDaELC3Xi3ht9DjV5wjWOSc0NN4QVzQELqwU7CbwOSCH ZD2BBC3a57acUqHUJ1Ro2Iji7adCvGixh7M.v_yI7o3CKp3.v2aHGlSf8qtz N2qEGhtkBYjDa18vfiwQMfVvsEje._bFjkLVdekyUKL.no_hAvR2iy5ezz7k 8YcaNAaYDKtpsCnowfnifZsIO5DgEGW_Wwr0.C44NuTml1zzkfMsuPjPoshh lewHg1LwTCJ704YOletjN
Received: from [68.71.76.242] by web184401.mail.bf1.yahoo.com via HTTP; Fri, 19 Oct 2012 04:39:45 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1350646785.64238.YahooMailClassic@web184401.mail.bf1.yahoo.com>
Date: Fri, 19 Oct 2012 04:39:45 -0700 (PDT)
From: MR John wllIams okoye <000office1786@att.net>
Reply-To: mrjohnwlliamsokoye96@yahoo.com
Subject: Fw: ATTENTION
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”1009959307-1912693192-1350646785=:64238″
Content-Length: 30547

Other IP ADDRESSES SENT BY THIS NIGERIAN SCAMMER ARE: 69.31.101.237 — 108.59.8.174 — 75.149.131.21 — 68.71.76.242 — 

75.149.131.21 —  “COMPENSATION AND FINANCE HOUSE”<info@compensation.com>

 

If you have any additional information on this scammer please put it in the comments so I can add it on the list! Thank you.

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“Aminata Bangali” (a.k.a) “Barrister Mendy Chambers”

NIGERIAN 419 SCAM – FAKE – FRAUD – SCAMMER – BEWARE

NOTE: AMINATA BANGALI also goes by the name MENDY SAMBA and MENDY CHAMBERS and MORGAN CHAMBERS — Click here for a list of emails sent by this scammer under multiple names, email addresses and IP addresses.

Animated Words - Warning

Subject: Regarding My Money In Spain Second email response: Hello,

I am surprised I have not heard from you again since your response to my proposal. I thought you really wanted to assist me after my explanation of my plight and all that I am going through at the moment. If you really want to help me, but have your doubts you can TRAVEL TO SPAIN before making any payment for the legal documents.

I will really appreciate if you can help me because of my situation. Life is horrible where I live presently and if you are able to help me release the money from the company and transferred to your country, I will really appreciate and God will bless you.

Please, feel free to contact the company directly to verify my claims. Contact the company via the following email address and if you really want to help me, please do so without having any doubts and I will be glad.

Company Email: info@guarantytrustsec.com
Contact Person: Dr. Thomas Woods

Thank you and do have a nice weekend.

Aminata.

Header to second email:

Return-Path: <aminata2@mendyschambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendyschambers.com) ZnJvbSB5b3UgYWdhaW4gc2luY2UgeW91ciByZXNwb25zZSB0byBteSBwcm9w b3NhbC4gSSB0aG91Z2h0IHlvdSByZWFsbHkgd2FudGVkIHRvIGFzc2lzdCBt ZSBhZnRlciBteSBleHBsYW5hdGlvbiBvZiBteSBwbGlnaHQgYW5kIGFsbCB0 aGF0IEkgYW0gZ29pbmcgdGhyb3VnaCBhdCB0aGUgbW9tZW50LiBJZiB5b3Ug cmVhbGx5IHdhbnQgdG8gaGVscCBtZSwgYnV0IGhhdmUgeW91cgEwAQEBAQ–
X-YMailISG: M.Nmof0WLDsFih4I0o8x5_AARYFowqSk.Yfs9uU.KvA0w.T. j9lbn.RGDr3PBF6LuyiX39PMrjecJ4mPBlcvfQ6tbGY3CWAvi336fTeS22D8 Q_wMb9Zf8KTBhMjacT1R9XiSM8ualyFz7HPG_DRdzqCBZephBFTr.0erHNxA w5AUPelotN66MKeijKlRqCE0ddWHzGrq4sYttw796vWp8CRdWz4iNyCejjxZ vNGicPT5Yd.tyivtscjRyjs02ckIn7sSGheUTdsVn9.5B7G2yYjx1koOUQbe KVUiUDO9kiq1WW5MRIn_gsrfK7AwVGbDy2osL8kygdrjGyZ2fhWy4CIX6CXE G6oEW3H_GUocKE_opJ4dlvwLo15Xm36HZJxjQ5z5MifaufFe7oucPLL1dcD2 y2z2yWNq60XJOtUeomloBkgKFjcCzL737Hhm.yXz4um3M6idTXiX58zoty3_ 0TiFxhGjgiMHDashNWnpNWen4h48F622iwXTgUqS6er8bBbu3UO9F4smIa2Z 97AZ8XkekG7zM0yRqt6.bTKKM0tGb3i.xVQSUg7kNKHTD_EMESASCfu9r2Td 3_IW7FoA72jEO8YEGXOgmx5TX2m_W7JQnKN9VhYOKUnxDYdaLC5sZJTwurwJ T20tD.flXEsCanD5x8y5fqKj_NrBqKJml9.9CR9xIuboLnb0ovzx1qI8xWlC 20XHzKPZzCHaKEmpl6Q_ZFX.OfgxOT6xuVsLHzg_ycg10uKzeoXZN9cc36y_ Ni8sH3M9WRJveZ.pzs3UiXXtIdK1ZyaqEYCY7vv9ipuQ6ENF1zckNG_pNeWT ByC.zlqlvrHee8c0wLKh8RanIzUWrlREHBBSA8KvBxZ7Hpe_Vq9RDK6p1OOO ywaKnpXXoNu_ii_xqqzKLdcI3gZuK.5_8SwiAaru_mgdaC7THKfhQjClByf9 ziI0aJlj3lVBwhoPoHPHyJxZH.mDImO2eUKCnbKJm1EFiCRMZNEBNe3CN6Ch NQVGD1xCB6WNs5SvuP20s23_YINnvIwP2BqkI_ZAglI1IxwlXORv4MO6SHHB XeqzNEot4Biua07t2AXc.2S3gcn6W9B1PGpuzDOkbq._k0AR6GD5VsvAXg8_ KTktJG8s3vQ0RWvcj58Lr.8NDKrnefgUFH4vZYphFXpiqBofgIEIOdlTRdL5 sSWU4dJu7Wtk9mn2rs0FRdWTmI4O0bPB.k7x3CjzJoBMeWtFGRhx6DFF0qvd 7oqzOOu5wHTdYjS4tOLGOog.q1eceCUwpGQWARoJg0XQGxxl
X-Originating-IP: [64.98.42.177]
Authentication-Results: mta1196.mail.mud.yahoo.com from=mendyschambers.com; domainkeys=neutral (no sig); from=mendyschambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.177) by mta1196.mail.mud.yahoo.com with SMTP; Sun, 11 Nov 2012 04:54:41 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay06.b.hostedemail.com (Postfix) with SMTP id C879A21247F; Sun, 11 Nov 2012 12:54:40 +0000 (UTC)
X-Panda: scanned!
X-Spam-Summary: 2,0,0,,d41d8cd98f00b204,aminata2@mendyschambers.com,::::::::::::::::::::::::::::::::::::::::,RULES_HIT:152:355:375:379:387:408:541:582:800:966:973:988:989:1152:omf04|1005758208|46D71D5
X-Session-Marker: 616D696E61746132406D656E6479736368616D626572732E636F6D
X-Filterd-Recvd-Size: 1695
Received: from webmail10 (imap-ext [64.98.36.5]) (Authenticated sender: aminata2@mendyschambers.com) by omf04.b.hostedemail.com (Postfix) with ESMTPA; Sun, 11 Nov 2012 12:54:39 +0000 (UTC)
Received: from 41.71.177.75 ([41.71.177.75]) by webmail10 (Webmail) with HTTP; Sun, 11 Nov 2012 12:54:39 +0000 (UTC)
Date: Sun, 11 Nov 2012 12:54:39 +0000 (UTC)
From:
Aminata Bangali <aminata2@mendyschambers.com>
Reply-To: aminatabangali@africamail.com
Message-ID: <2087196457.7154.1352638479561.JavaMail.mail@webmail10>
Subject: Regarding My Money in SPAIN!!
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Webmail
X-Originating-IP: [41.71.177.75]
Content-Length: 981

Every email address posted below is a email belonging to a scammer who is using multiple (fake proxy) IP address. (The originating Nigeria IP is the correct location but many of the other IP’s listed below is a fake host IP thats being used to fool potential victims. There are many more emails under the fake IPs but if I can warn even one person, its worth it)

Aminata Bangali has many email addresses. A few handful include <> aminata2@mendyschambers.com <> aminatabangali@africamail.com <> aminatabangali@mendychambers.com <> aminatabangali@yahoo.com <> aminatabangali@msn.com <> aminatabangali@gmail.com <> info@guarantytrustsec.com <> aminata2@mendyschambers.com

Originating IP:  41.71.177.75 Location: Lagos, Nigeria Originating IP: 64.98.42.177 Location: Toronto, Canada – smtprelay.b.hostedemail.com – mta1196.mail.mud.yahoo.com 10.5.19.254 >< by smtprelay06.b.hostedemail.com 64.98.36.5 >< Authenticated sender: aminata2@mendyschambers.com by omf04.b.hostedemail.com

Aminata Bangali is using 64.98.36.4 for alot of the below email-addresses

<> aminata1@mendychambers.com  <> aminata2@mendychambers.com aminata3@mendychambers.com <> aminata4@mendychambers.com <> aminata5@mendychambers.com  <> aminata6@mendychambers.com <> aminata7@mendychambers.com <> aminata8@mendychambers.com <> aminata9@mendychambers.com <> aminata10@mendychambers.com

aminata11@mendychambers.com  <> aminata12@mendychambers.com aminata13@mendychambers.com <> aminata14@mendychambers.com <> aminata15@mendychambers.com  <> aminata16@mendychambers.com <> aminata17@mendychambers.com <> aminata18@mendychambers.com <> aminata19@mendychambers.com <> aminata20@mendychambers.com <>

aminata21@mendychambers.com  <> aminata22@mendychambers.com aminata23@mendychambers.com <> aminata24@mendychambers.com <> aminata25@mendychambers.com  <> aminata26@mendychambers.com <> aminata27@mendychambers.com <> aminata28@mendychambers.com <> aminata29@mendychambers.com <> aminata30@mendychambers.com <>

aminata31@mendychambers.com  <> aminata32@mendychambers.com aminata33@mendychambers.com <> aminata34@mendychambers.com <> aminata35@mendychambers.com  <> aminata36@mendychambers.com <> aminata37@mendychambers.com <> aminata38@mendychambers.com <> aminata39@mendychambers.com <> aminata40@mendychambers.com <>

aminata41@mendychambers.com  <> aminata42@mendychambers.com <> aminata43@mendychambers.com <> aminata44@mendychambers.com <> aminata45@mendychambers.com  <> aminata46@mendychambers.com <> aminata47@mendychambers.com <> aminata48@mendychambers.com <> aminata49@mendychambers.com <> aminata50@mendychambers.com <>

Aminata Bangali is using 74.208.5.90 – Wayne, Pennsylvania for the email-addresses below:

– aminatabangali@africamail.com <> aminatabangali1@africamail.com <> aminatabangali2@africamail.com <> aminatabangali3@africamail.com <> aminatabangali4@africamail.com <> aminatabangali5@africamail.com <> aminatabangali6@africamail.com <> aminatabangali7@africamail.com <> aminatabangali8@africamail.com <> aminatabangali9@africamail.com <> aminatabangali10@africamail.com <> aminatabangali11@africamail.com <> aminatabangali12@africamail.com <> aminatabangali13@africamail.com <> aminatabangali14@africamail.com <> aminatabangali15@africamail.com <> aminatabangali16@africamail.com <> aminatabangali17@africamail.com <> aminatabangali18@africamail.com <> aminatabangali19@africamail.com <> aminatabangali20@africamail.com <> aminatabangali21@africamail.com <> aminatabangali22@africamail.com <> aminatabangali23@africamail.com <> aminatabangali24@africamail.com <> aminatabangali25@africamail.com <> aminatabangali26@africamail.com <> aminatabangali27@africamail.com <> aminatabangali28@africamail.com <> aminatabangali29@africamail.com <> aminatabangali30@africamail.com <> aminatabangali31@africamail.com <> aminatabangali32@africamail.com <> aminatabangali33@africamail.com <> aminatabangali34@africamail.com <>

aminatabangali35@africamail.com <> aminatabangali36@africamail.com <> aminatabangali37@africamail.com <> aminatabangali38@africamail.com <> aminatabangali39@africamail.com <> aminatabangali40@africamail.com <> aminatabangali41@africamail.com <> aminatabangali42@africamail.com <> aminatabangali43@africamail.com <> aminatabangali44@africamail.com <> aminatabangali45@africamail.com <> aminatabangali46@africamail.com <> aminatabangali47@africamail.com <> aminatabangali48@africamail.com <>

aminatabangali49@africamail.com <> aminatabangali50@africamail.com <> aminatabangali51@africamail.com <> aminatabangali52@africamail.com <> aminatabangali53@africamail.com <> aminatabangali54@africamail.com <> aminatabangali55@africamail.com <> aminatabangali56@africamail.com <> aminatabangali57@africamail.com <> aminatabangali58@africamail.com <> aminatabangali59@africamail.com <> aminatabangali60@africamail.com <> aminatabangali61@africamail.com <> aminatabangali62@africamail.com <>

Bill Hogarty 1 2 3 4 5 6 7 8 9 10 @ hughes.net

Dark Wing 1 2 3 4 5 6 7 8 9 10 @ hughes.net

 Darkwing@hughes.net  <> Billhogarty@hughes.net 69.35.40.37

The list goes on so anything with a similar pattern is most likely a dirty little Nigerian scammer – A few more IP’s below that are used by scammers.  I will update.

66.196.118.36 – Sunnyvale, California

66.55.37.72 – US

173.194.73.26 – Mountain View, California

67.195.168.230 – Plainfield, Illinois

74.208.5.90 Wayne – Wayne, Pennsylvania

64.98.36.4 – San Francisco, California

 
Leave a comment

Posted by on 11/12/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“MR JOHN FILLER”

WARNING: Nigerian (419) Scam – Benin, Nigeria (additional info at bottom of this post)

Possible aliases: Fred Williams >< fredwilliams3@rediffmail.com ><  www_western_uniontransfer276@superposta.com

Aminata Bangali a.k.a Seferian Bonnie >< aminatabangali@africamail.com >< aminatabangali7@gmail.com

>< Aminata Bangali >< mendy12@sambachambers.com >< aminatabangali2@gmail.com >< aminata22@infonets.info >< aminatabangali6@gmail.com >< info@guarantytrustsec.com >< SeferiaB@trumbullps.org >< go@win.com >< SeferiaB@trumbullps.org ><

Malicious IP’s to avoid – – 41.216.50.79 ( web92415.mail.cnh.yahoo.com ) >< 41.218.238.107 >< 41.216.50.209 >< 41.138.172.76 >< 74.125.83.67 ( mail-ee0-f67.google.com ) >< 10.14.193.136 >< 10.14.175.68 >< 64.98.42.56 >< 10.5.19.254 >< 64.98.36.5 >< 64.251.52.6 >< 203.188.201.85 >< 203.188.200.143 >< 119.42.242.156 >< 

Name  & Email-Address:MR JOHN FILLER >< accoun93222099@gmail.com >< westernunion706@yahoo.co.kr

Subject: ATTENTION, FROM OFFICE WU MTCN 5904370136

Email: WESTERN UNION MONEY TRANSFERWORLDWIDE:
OFFICE OF THE WESTERN UNION MONEY TRANSFER. COTONOU
FROM OFFICE OF THE WESTERN UNION MONEY TRANSFER
ADDRESS NO.72 AGATA ROAD,COTONOU BENIN REPUBLIC
WESTERN UNION HEAD OFFICE DEPARTMENT REPUBLIC OF BENIN.
FOREIGN CONTRACTOR PAYMENT OFFICE
TELEPHONE : +229 99 35 55 58
EMAIL:
 westernunion706@yahoo.co.kr
WEB: www(dot)westernunion(dot)com (spoofed link)
DEAR CUSTOMER,

FOLLOW UP THE INSTRUCTION GIVEN BELOW BECAUSE AFTER OUR MEETING HELD WITH THE
FBI,UNITED NATION, BOARD DIRECTORS OF WESTERN UNION AND FEDERAL MINISTRY OF
FINANCE, THEY FINALIZE THAT YOU HAVE ONLY 48HOURS GIVEN TO RECEIVE YOUR FIRST
PAYMENT OF $5,000 USD FROM THE TOTAL FUNDS WHICH IS (4.8M) SINCE YOU ARE FINDING
IT DIFFICULT TO MAKE THIS PAYMENT, WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND
PAY WHATEVER YOU HAVE FOR THE FEES SINCE YOU ARE NOT ABLE TO COME UP WITH THE
REQUIRED SUM..

OUR GOVERNMENT HAVE WARN YOU TO STOP FURTHER COMMUNICATION/DEALING WITH ANY
BANKS THAT HAVE NO WEBSITE DUE TO FRAUD GOING ON WORLDWIDE. ANY BANKS THAT IS
CONTACTING YOU WITHOUT WEBSITE IS FAKE.PLEASE VIEW OUR WEBSITE NOW
Scammer had spoofed link posted here.

THEREFORE GO STRAIGHT NOW AND PAY ANY AMOUNT YOU HAVE AT HAND FOR THE FEES TO
ENABLE US RELEASE YOUR PAYMENT THAT IS PLACE ON HOLD BY THE MANAGEMENT AND BE
INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR FEES UPON CASHING UP
OF YOUR FIRST 5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT
FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO CANCEL YOUR
TRANSFER AND CAN NEVER CASH UP THE BALANCE SUM.

HERE IS THE INFORMATION OF YOUR FIRST PAYMENT BUT IT IS PLACE ON HOLD BY THE
MANAGEMENT AND YOU CAN NOT BE ABLE TO PICK UP UNTIL YOU SEND THE DEMAND WHICH IS
ANY AMOUNT OF MONEY YOU HAVE, JUST TO PROVE HOW SERIOUS YOU ARE.

This Nigerian had yet another link to their fraud in BJ a.k.a Benin, Nigeria. Although the scammer is trying to fool potential victims with IP’s ”originating” from the USA. The slimballs IP address is 41.216.50.209 (additional info at bottom of this post.)

1.SENDER NAME:… JACQUELINE GROVER
2.TEST QUESTION:….WHAT COLOR?
3.TEST ANSWER:……WHITE.
4.AMOUNT ……….$5,000 USD
5.MTCN….. 5904370136 (Available for pick up by receiver)

FOR YOUR INFORMATION DO NOT EXPECT THE RELEASING OF YOUR PAYMENT WITHOUT SENDING
THE MONEY REQUIRED AND REMEMBER THAT YOU ARE GIVEN ONLY 24HOURS TO COMPLY OR
YOUR TRANSFER WILL BE CANCEL IMMEDIATELY SINCE YOU ARE TOLD TO SEND ANY AMOUNT
OF MONEY YOU HAVE IN ORDER TO HELP YOU.BELOW IS OUR ACCOUNT OFFICER NAME WHICH
YOU WILL USE TO SEND WHATEVER YOU HAVE TO ENABLE US RELEASE YOUR FIRST PAYMENT
IMMEDIATELY.

1.RECEIVER NAME:….NNALUE BONIFACE
2.COUNTRY:…………. BENIN REPUBLIC
3.CITY :…………… COTONOU .
4..TEST QUESTION:…..WHAT COLOR?
5.TEST ANSWER:……WHITE.
6.AMOUNT ………..ANY

SEND US THE MTCN NUMBER IMMEDIATELY YOU SEND THE MONEY AND IMMEDIATELY WE
CONFIRM THE TRANSFER FEE WE WILL RELEASE YOUR FIRST PAYMENT $5000 TODAY AND NOT
TOMORROW

REGARDS MY DIRECT PHONE LINE IS +229 99 35 55 58 MR  JOHN FILLER FROM THE HEAD
OFFICE OF WESTERN UNION BENIN REPUBLIC FOR YOUR PAYMENT

MR JOHN FILLER
GENERAL OPERATION MANAGER.
VITAL FINANCE
WESTERN UNION DEPARTMENT
EMAIL: westernunion706@yahoo.co.kr
TELEPHONE NUMBER:+22999355558

Read the rest of this entry »

 
Leave a comment

Posted by on 11/09/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: