RSS

Tag Archives: Lagos

“MRS ZINOVIA VONDA” (AKA) Christopher Warren Smith

SCAM – BUSINESS PROPOSAL / PARTNER – FRAUD

UPDATE: I’ve received recent emails from Vonda Zinovia and have posted them below, along with the header information. Also note that this scammer used different IP’s for every email sent so look under each header to see all the IPs and email addresses.

An attached link was also sent along with the emails below. I didn’t click on any of the links, which was titled ‘ MyInternationalPassport.kpg ‘

FIRST EMAIL: Dear Friend,

I have a profiling amount in an excess of US$25.5M, which I seek your
partnership to accommodate and invest for me. You will be rewarded with
30% of the total
sum for your partnership. Can you be my partner on this?

INTRODUCTION OF MY SELF:
I am Mrs ZINOVIA VONDA, a personal secretary to Mikhail Khodorkovsky
the richest man in Russia and owner of the following companies: Chairman CEO:
YUKOS OIL (Russian Most Largest Oil Company) Chairman CEO: Menatep SBP Bank
(A well reputable financial institution with its branches all over the
world).My boss has being in dention for eight years,for political reasons
being a top leader of an opposition party to the ruling party(Government)
here in Russia,on December 7 2010,a moscow court(Judiciary) that was
influence by the Russia Government found my boss guilty and was jailed for
six years.

The present Russia Government continue to view Khodorkovsky(my boss)
release as a threat and seek to prevent his scheduled release in 2011, a
few months before Russia’s 2012 presidential elections,they believe that
if my boss is release it will work against their re-election into office
in 2012.

The U.S(America),Germany Government,the United Nations and almost all the
media in the whole world has condemned the Russia corrupt Government
officials for influencing the judiciary(Court) to give judgement in their
favour,to prevent my boss(Khodorkovsky) release before the Russia general
election in 2012.Bellow is some website regarding to the court rulings on
my boss(Khodorkovsky) case that was held in December 7 2010.

http://www.khodorkovskycenter.com/

http://www.khodorkovskycenter.com/news-resources/stories/guilty-condemnation-russian-injustice

,I am presently on a house-arrest being the confidential secretary to my
boss(Mikhail Khodorkovsky),this is the reason I am seeking your
partnership to help me secure and invest this funds in your country until
I gain my freedom from this house-arrest.

SOURCE OF FUNDS:
The funds in question is my share as compensation in some oil deals that I
and my boss had with some American oil merchant.Already the funds have
been deposited with
a finance institute in western Europe,where the final crediting is
expected to be carried out. While I was on the process, My Boss got
arrested for his involvement on politics in financing the leading and
opposing political parties (the Union of Right Forces, led by Boris
Nemtsov, and Yabloko, a liberal/social democratic party led by Gregor
Yavlinsky) which poses treat to President Dmitry Medvedev second tenure as
Russian president.

YOUR ROLE:
All I need from you is to stand as the beneficiary of the above quoted sum
and I will arrange for the documentation which will enable finance institute
transfer the sum to you. I have decided to use this sum
to relocate to your continent and never to be connected to Russia again.
The transaction has to be concluded in 2 weeks.

With this ugly situation i will not buy idea of phone discussion between
both of us but at time goes on i will introduce you to my only trustee
legal adviser who will be able to speak with you.

As soon as I get your willingness to comply through my bellow private email
address(mrszinoviavonda557@yahoo.com.hk) I will give you more details.

Thank you very much

Regards,
MRS ZINOVIA VONDA

HEADER:

Return-Path: <fanstoyo@fan.fanstoyou.com>
X-YahooFilteredBulk: 198.154.201.90
Received-SPF: none (domain of fan.fanstoyou.com does not designate permitted sender hosts)
X-YMailISG: _7P8Je0WLDv44aUHL9gT2V1yFIgwZiBazaoMuyzCpihMmIuY OO3jvEOFYzS1RBHFFhrKDpWgNUVG7liVFKCr.wv1klIK26ru.CEr7vTlO8kU Mxt66EFJR.QkWh3sN5X_FAhmR51PCPvLxkQc3lLVFf3FPJosapqvn3wSFsVd Kk0SP_iFINTItBWLdvD39pkpv0Ca4alILW09gLbG8HZCoOT7fyRW2ZxOIej8 hvcgUx0_OwMzU8xjXmiPnG9P5guiGfcw36LMEsjwaF19S1fWCeqj0C39hmnz QKZT5GYWsRg9WbrqXGJpczQKnaGUHgyjrtsFkA_2snmnMvUwpPH4Ahz3dJCR ABpVBcXFhGGPxFYqhcaX6NCgS.XIOb4NUvae540SPGOlA2DSEFqHhQ9M9BWD enhD05plK9gZJu_mZlHAcKsUBSx6lDkqWgl97EI0m80m6.qeczxjKFP.2Bkr R_aHNmTLQL.gcod9O.wpLY1Bo7PHSeWlrs6JfSznAqxlv4dNXXUMwGvyzpat v1X1LLudq0XNYYjQo66IUfMxGQz259cTxMET0yWuWEplByD5lk92vjtYEfLi gbdWOoI.zABI2aft_MgC2PRc_xvI4JB6HX8mUEo8LlaSD5eYHiMtH3M8iD8F v_d2KOUdc4G8KAaCBQPWN_DiUP3cFu4VvpJJfzYwTAXYc8jJDb7dtmv7cKa2 D4avyJI5fpqmGBbQhJY3fSJKTmdHjAtOKQYe5lZV5NivhfrJf2_tAk5YolKK 4CxW6I6qiMx8Pra3dfM3WeKnuJUnVaQSrooZvi0_OMAI2leyNKFGZpYSL4WR o9dwW_XDD9AdhnqbnegLQ_ZvYRTwaw0imvVrgiCVfhVJ5nScKlgIfruQHh0z jhWvqVQ3FD9vjj9n0mz3OgHaTcaW3yJzQ1KKlA..PdVNSSJnVXOpSO10VUX. mPcGdyCCuCep0eDIaInQ1jCMvOUdKROyGX6gBVrhhp0AuASAS9KLB8qKIgZQ ikEBaVJyvyxh.KwrzPIyDkVgl2t_Y2VAwTnnhEGrwpy2fJyPdGbT_PmmcOD3 PfDvwtRHT5zgSOuFdwPO0ZrKh2xqoq7WRKOO2kUwmIEnzCBiviAamA8eazWQ S4jDiypOoMSgGbF08lTMrWXL5YqMoaB4FhsbxcTFjCo0trbYbM0j9001ybdT hjaE78GSVt7s1DTXnrvX8XxNAd_LAO1SqbJhMJI5y_kYOWrfuJAAAzCn7nrC NaxOZvZxBJgfrkPn.gX7_Q65GDul2_jnnIga7je6P.WLmqCzd19f9c2FBLly miuWKJaGAvRPa3bOUykJtUfUfOZlwTAsXWToPD0bOMI-
X-Originating-IP: [198.154.201.90]
Authentication-Results: mta1057.mail.ne1.yahoo.com from=yahoo.com.hk; domainkeys=neutral (no sig); from=yahoo.com.hk; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO fan.fanstoyou.com) (198.154.201.90) by mta1057.mail.ne1.yahoo.com with SMTP; Thu, 20 Dec 2012 10:22:26 +0000
Received: from fanstoyo by fan.fanstoyou.com with local (Exim 4.80) (envelope-from <fanstoyo@fan.fanstoyou.com>) id 1TldGi-00012p-5O for <> Thu, 20 Dec 2012 03:22:24 -0700
Subject: BE MY BUSINESS PARTNER,,,
X-PHP-Script: fanstoyou.com/massivetraffic/massmailer/mailer.php for 41.58.0.15
From: MRS ZINOVIA VONDA <mrszino557@yahoo.com.hk>
Reply-To: mrszinoviavonda557@yahoo.com.hk
Message-Id: <E1TldGi-00012p-5O@fan.fanstoyou.com>
Date: Thu, 20 Dec 2012 03:22:24 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – fan.fanstoyou.com
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [502 500] / [47 12]
X-AntiAbuse: Sender Address Domain – fan.fanstoyou.com
X-Get-Message-Sender-Via: fan.fanstoyou.com: authenticated_id: fanstoyo/only user confirmed/virtual account not confirmed

FROM: MRS ZINOVIA VONDA mrszino557@yahoo.com.hk REPLY-ADDRESS: mrszinoviavonda557@yahoo.com.hk RETURN-ADDRESS: fanstoyo@fan.fanstoyou.com

IP: 41.58.0.15 LOCATION: Lagos, Nigeria 

X-YAHOO-FILTER-BULK: 198.154.201.90

____________________________________________

SECOND EMAIL: Dear ,

Good day and thanks for your swift response to my business proposal. All I need from you is your trust and sincerity throughout this transaction and together we are going to build up a business empire that will be inherited by our children.I am presently on a house-arrest,that is why I am seeking your partnership to help me secure and invest this funds on my behalf.I came accross your address when I was searching for someone who can help me secure my funds until I am out of this my present political predicament.

The reason why I am on a house-arrest is because I was the personal secretary to Mikhail Khodorkovsky
the richest man in Russia and owner of the following companies: Chairman CEO:
YUKOS OIL (Russian Most Largest Oil Company) Chairman CEO: Menatep SBP Bank
(A well reputable financial institution with its branches all over the
world).My boss has being in dention for eight years,for political reasons
being a top leader of an opposition party to the ruling party(Government)
here in Russia,on December 7 2010,a moscow court(Judiciary) that was
influence by the Russia Government found my boss guilty and was jailed for
six years.

The present Russia Government continue to view Khodorkovsky(my boss)
release as a threat and seek to prevent his scheduled release in 2011, a
few months before Russia’s 2012 presidential elections,they believe that
if my boss is release it will work against their re-election into office
in 2012.

The U.S(America),Germany Government,the United Nations and almost all the
media in the whole world has condemned the Russia corrupt Government
officials for influencing the judiciary(Court) to give judgement in their
favour,to prevent my boss(Khodorkovsky) release before the Russia general
election in 2012.Bellow is some website regarding to the court rulings on
my boss(Khodorkovsky) case that was held in December 7 2010.

http://www.khodorkovskycenter.com/

http://www.khodorkovskycenter.com/news-resources/stories/guilty-condemnation-russian-injustice

I have attached to this mail my international passport for your own perusal.Please keep this transaction very confidential because of my present political predicament here in Russia.

For my lawyer to proceed with the documentation of my funds in your name as the beneficiary,you are to provide me with the following information’s as stated bellow.As it will take my lawyer three working days to finish with the documentation processes.

1)Your full name and address

2)Your age and marital status

3)Your direct telephone and fax number

4)Your company name and address.

As soon as I get the above informations from you,my lawyer will be contacting you,his name is Mr Christopher Warren Smith,a senior advocate of the British Bar Association,he is my legal trustee.Please note that you will note be required to pay for any fees,but you may be required to travel to the office of the Universal E-Cash Consultant Limited where are deposited my funds to endorse your signature on the original copies of your funds authorisation documents as the beneficiary to my funds before they can transfer funds to your bank account.

I will also appreciate if you tell me a little more about your humble self.

I urgently wait for your swift response.

God bless you and your family

Regards,
Mrs Zinovia Vonda

HEADER:

Return-Path: <mrszinoviavonda557@yahoo.com.hk>
Received-SPF: none (domain of yahoo.com.hk does not designate permitted sender hosts) b3VyIHN3aWZ0IHJlc3BvbnNlIHRvIG15IGJ1c2luZXNzIHByb3Bvc2FsLiBB bGwgSSBuZWVkIGZyb20geW91IGlzIHlvdXIgdHJ1c3QgYW5kIHNpbmNlcml0 eSB0aHJvdWdob3V0IHRoaXMgdHJhbnNhY3Rpb24gYW5kIHRvZ2V0aGVyIHdl IGFyZSBnb2luZyB0byBidWlsZCB1cCBhIGJ1c2luZXNzIGVtcGlyZSB0aGF0 IHdpbGwgYmUgaW5oZXJpdGVkIGJ5IG91ciBjaGlsZHJlbi5JIAEwAQEBAQNt dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzE4AgN0ZXh0L3BsYWluAwMwAgN0ZXh0 L2h0bWwDAzEwAk1ZIElOVEVSTkFUSU9OQUwgUEFTU1BPUlQuanBnA2ltYWdl L3BqcGVnAwMxODM-
X-YMailISG: .gwS_rUWLDvH57WCGihHOxRthjj6Uhvu4.1a1pfy91flJjs4 TeMlMJyBxQ_9WSmcfyBXNhKhC9Oih4U3kVsX1JW7SLfqRvqiY0dXxwWoeHh_ _8b57HH6naqZAcPnz_D4JgWbJmc.UHWCh2pcMf7KvL1Q.GOK.lUECrsaYoYh 4F.osrEAFjALFZAejsDdW4cpHowr35qIND02_vaPOO5tz1dc56IcasaIto0l 9VD1wtezX.CGATiRl3vsVZi8WdKFF_75FAQnOhwt4KPg5yejpYXSc15csSca 8iEwfjRiSLaaHWmULzJl9oFGTvabp6LMVBkCw.QDtQr7lshfNsZTlFaZoqTn 8VLwB1tWHF.Tc_D7ppnJ4rC3ot15O6cBHN62USGp7z848cZBWn0PwllzSl8u UKR_IW9JME1tFTvotmVXsPg4Ay1Rrymr5oZOIc.oNqZ8Mdn5YwOHL5mXoiS9 D5hFzKFHGhM7zRMY_FGZf1mr9s2Ra4bGW4cKRe0wFiGenMkPF0Vbe0QSYy3T PphJko9lqrTLrxnveHNq6A0..Erk9ZONGxbLhmNUQe_nt0ENJIouUu9w.D8e T48jkNAQgipwsxJNimwpEJM9p1wHl1ECp.fvd8bLlkyvow.cnBDoYXj_qAgv GlPkylcYcPFpmonQwFPngaTwbuD7gjNj2mwFuqODDY3uIVUyo.ENOF0Soq82 IyOhGHTn65xKhW_Pm2lrz4aWFAIe6Kvlyy8htzsifQhUC7Jx5C1KiNU3NjiI 9S.7UlQhyvLRUz5GmBDMTnUJ.7BQomOD15EyhSdme1hNbN5MXg6g23kvOCnY cnaZDm7gOvrLuW_X8ONePDt208eu0JGAk4PGezaunVUILAmHjwPeCTBFaGvf upPUw9z26WS.RAVwNXH4nXi0x5.CKJLBcRADjOqewPuL7Facj4ETW03zgzDg uJ3bsmSTxSuOR9mX8q1TIzAjrbgSlhZhaw6.ZgDRBI6w1WYDKIu79av1aGJx 1cA19PRTkaO7KUalj4hcIQkprw.W2NKVlm7vt2zPx7QvesL2ZeYP0f0MEhWO sAPo8e2VtAzJL9.cCTkkpbXlpdaGAaiug_E._wguBMEIbqQCgvePfAEVLOby SR_DApto3NpaJ16L34EJPDstVFGi4P608FlZ2lMrENZ5yAHS9bbe_mIaa_Qv MJ.Ewq1dN2FjOsyW6MXnvkw947MxZfNkL4Su7nM_zDyRGftXyaMxfRWuE85Z g76ALXIMXwhIMqTQsl.PtbUapgve41qr6ZZLhJOJH5fiqQnQn7tGUubGA.U0 EpPBzwis0kAPbNlOKic8nUIjJkKlqoulpXmSllh_LdQ2Ay39vKcwtakoZYuO lxdiNr2y4ng6sJRqtiVBqw0ej_kc0IqPsXDLP9Kd2I.Mx4kcAue9F7N5ZHvP FyNDLGderBK.O7wOb9uZ._iFHLpvgEnoX7B0z3NnT7lCyfmS61hzF2CB4WOl eduHaGQaDfHa_y1hXrQbtgTHvF3I6uq5BA–
X-Originating-IP: [106.10.151.102]
Authentication-Results: mta1363.mail.bf1.yahoo.com from=yahoo.com.hk; domainkeys=pass (ok); from=yahoo.com.hk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm25-vm7.bullet.mail.sg3.yahoo.com) (106.10.151.102) by mta1363.mail.bf1.yahoo.com with SMTP; Mon, 24 Dec 2012 02:26:36 -0800
Received: from [106.10.166.121] by nm25.bullet.mail.sg3.yahoo.com with NNFMP; 24 Dec 2012 10:26:32 -0000
Received: from [106.10.150.27] by tm10.bullet.mail.sg3.yahoo.com with NNFMP; 24 Dec 2012 10:26:32 -0000
Received: from [127.0.0.1] by omp1028.mail.sg3.yahoo.com with NNFMP; 24 Dec 2012 10:26:32 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 602599.77879.bm@omp1028.mail.sg3.yahoo.com
Received: (qmail 97483 invoked by uid 60001); 24 Dec 2012 10:26:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.hk; s=s1024; t=1356344792; bh=rmeCZ+pKyq8LCvdGytDaTB9Eyp8cRYogfwCGTn+M/Ag=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=e0mBHBq34ba0f2H/C1aNdAJ1Gdp+1XJtt71RG26ZInSUQ0lmneA0OrYCNhNmZ/Bg/kAZ1QF+kmBvTILrFrB3AXt0VWKKrLuIJLYlM/nloEwgztB7+jLojJIxTqZukzlfBEHwdUAmIY13o5TZn3L125vo/Bv1Y3eX88F4dmzZkQM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.hk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=APOkFjWZKxMTwNz2FHfvbonkj+UOc6vgsooPpbgry0dQju409C6fUtJn+hV3n+fBGRLbIue5BTTEkNE9BzwuEqy+zgzOSjDWM/FdyEQi8pqXZvh5Rg77HZXRv+NILVmEG3m9hrET5r4sk3PO8yvZmSqmYFc5MTL0L2osdLT6QJU=;
X-YMail-OSG: iWMQKgcVM1mpHo_hUz8cjf9_Fo9gTOGF6uMats7r7q5sy8N yXrpFn3voxZrFE1fNwXnfbO5z6WW_d332cI.mjhSA1YfrSYCIv6_OhXDzgW7 QJATOqPYciFTtUyzfMNGroH7qdCi3u7qMkgEUkrP6lJpG6pr4iT.DHbGN2Rw L0DT9vQimkI0elU9Zh2zcy7410IChlNqw3g0vCQqk_ztl0O3zsYICEo59cTz iC7E8A.1E1MyZFaLCcm60bKDSQgoQR0IC9C3TMgkezhuPMdS9RYsx5VE8jxe 1WDANY5l0gqi0jwNuPxQlcE_KldsaITRxPPhV2eZOdbkPyNkJgiWl7qeFnZ_ rN9B5igYq32cETTWFTLQ_jaf3d4Yq2zA5GcfnBnjIXEWt9TNSyizqCqHOzV2 UFwBQGMq1yGWWOCTAbtGDWgDrGK.ayAzZTxmwHP0b0gB2u.zIg1uGfKAIy5b thLzxwcsnIv1h40PhfVXbH9KP0ELPvtAVyNuOP.V2uOcpkAzxRw54j6UhhMy iBqzPU.1lW2WvmuQZ9iCHQje3EhQgE.c5V0gmEeZ30ea5LC5gEYyDOlzHFLV tCFkdZjpGmbhLmYJ0sTF0HDueDR3idoRpTnwAPouTWeT8OkA3mRJzPCEziSy wwzvRB7hlCAI1hA2RhIBw_ipVILW4khmbQEuBTN3ROFTtJB6ZmxZs27Mtr9u mduiAJMIWUXsd_PYlZZAIdg6VM5jpidsuT_uInNA9_57VjbLA7mQdWAISNsf B45fHDbPWUkT72xw-
Received: from [82.128.45.201] by web194605.mail.sg3.yahoo.com via HTTP; Mon, 24 Dec 2012 18:26:31 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356344791.97461.YahooMailClassic@web194605.mail.sg3.yahoo.com>
Date: Mon, 24 Dec 2012 18:26:31 +0800 (SGT)
From: VONDA MRS ZINOVIA <mrszinoviavonda557@yahoo.com.hk>
Subject: BUSINESS PARTNER(ATTN: )

FROM: VONDA MRS ZINOVIA mrszinoviavonda557@yahoo.com.hk RECEIVED-IP: 82.128.45.201 – X-ORIGINATING-IP: 106.10.151.102

Fraudster sent a duplicate email and although the email was idenical, the originating IP was different. The other IP received was 106.10.151.242 by web194605.mail.sg3.yahoo.com via HTTP; Mon, 24 Dec 2012 18:26:31 SGT

___________________________

THIRD EMAIL: Dear ,

Good day.You said I should give you some time to finish your work before we start with my business proposal and I think I have given you alot of time,so please get back to me to enable us proceed,and if you are no longer interested in doing business with me,please kindly let me know so I can look for someone else.

I wait to hear from you.
God bless

Regards,
Mrs Zinovia Vonda.

NOTE: I NEVER SAID ANYTHING ABOUT FINISHING WORK. I ASKED THE SCAMMER A COUPLE QUESTIONS, QUESTIONS THAT WERE IGNORED BUT I’LL CONTINUE TO PLAY WITH THIS SCAMMERS TIME.

HEADER:

Return-Path: <mrszinoviavonda557@yahoo.com.hk>
X-YahooFilteredBulk: 106.10.151.124
Received-SPF: none (domain of yahoo.com.hk does not designate permitted sender hosts)
X-YMailISG: XJVZO7oWLDtQzrAD1LN.LWWXS1LYd5vi3q0l94zMMVVAOGUX B6ma1X6b0HLJ.jxvoqJ0SQyAxzvpMZ2KZ4rIeQvn.5vFRbVd_l1K7wHmShYr 8FksAARCbHcwnmXEevzG8E.uhAoqGQ9XRhcVSZtPqvM125ccwTmxgYsKTi8w m4Kk9Z1nbZISZW.jzH2HuJ1NaY0dkSG3PpSy.EHomuRlupRhoejM7leOYl9m uAoT9Z4t0R.MQA.4c9aMNGxauB2Vr8G7VZL6VgSl95YhkxtPO7mFkSv_WOw3 0GF_S.VxPqwVW0.37BkxGZTc91z16Kcz4EpnU9GDyUO1wK1bJn4l38dFALev 5QXX6QThyfzMa9Ve1kEpeMEUPNTp9noybZ.q6T4CPQQdb8kr5OSpu49gS6LU XhIiWllFK_8_LnWwA.4SFhCBlBe6NgEXyAAPfgOyLkFmdoNqdH9GD1k.3yL_ XzbKDZskZiSLUFb7RTnHOI0BpzX884bgVXnSNVw5Syi7QvHBLGtSGIA2eXf5 0ZuYNvBep5n_KZyZu1JySO2Ahr9a.1Sk5Vi_gtHzI0IWkq0YuRqJZmrC6.rn qGcpLDzVVR_ajlXq7YgHe3xvopE1Pp5smOqNH4MlYPoQGzTJaeQfUyBY5lpt DAAW937D1wYLOzcPx1YuZ9KLfK6azkXnoIAvmlrrrNuv1EbhMNQfIQUe1nvL 2Rqdep0NmB2CLKsezJJt770eY2cI2bCxaRdi.noEi13djOphxNSAirMH_TlA xLWGm7jq4NL_JFDECF1aNkM9Fg_3IXJelXXxOVmO.bWLpsyNHn2EJ.PjTzb3 Tt_Kc5VF1p3msY1yUvyygzL9obzZHYjfn0WO8Q3vtvrhslJopreTZQuEmM62 mSN0HwUP68MYwaN_x4KAi9TcU3PEHKvP2XOPh6nllgCbGQaHRRFCzlMLk8p5 KLGrL_GqFk0guroWnvyaCEv3hMr4b4sCHbtypNkurQcB5JlYTGlUGl7RGVZI Po25uWE7nuk1fAwm9su4vCdCtbdRZmvyvUnSxvhJS8nXQFTSGkIEA7WfZFLp HW0bfL9zrPfx2t2CaDE8X.QHY1hYMnurfRDPCaedt4fn9s29iGgRhtLSp5st kWD1v_8jy4pZhhrrqcaiInqQhrKfZ3_AKcCdjP0iemu9CtLPXMfylV78vHBM cXv55jFBVl26viR.BOfOp4.p2sm9j65g.jzyCiZzyOQtz2RKM2jLIXKf4xwx d0S_ORK0zmTZu_m6mts6bFhGNuJFvY7aqLTI0XsJRuMuFuff56nFRz7rsKHD SDfpwGTZdgrbF9Ce1MlO5atOPPBm6.lLCSoL449h0nVb7sdW7lHUcmBf1m7i fd4R2E7XQ8TGYifzyn2stWUUwHsx2vlflKlIA38sWqLIXq5TtS9GVd5rt0ii rd65FjhNXFpKWXqOyY3YQ0FxLdkM8dL9GIx8Njdky7rO873Y5TCw0FYnHaup XJdWPKKa4H4Q0vz0uud4XrU-
X-Originating-IP: [106.10.151.124]
Authentication-Results: mta1204.mail.bf1.yahoo.com from=yahoo.com.hk; domainkeys=pass (ok); from=yahoo.com.hk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm37-vm5.bullet.mail.sg3.yahoo.com) (106.10.151.124) by mta1204.mail.bf1.yahoo.com with SMTP; Thu, 27 Dec 2012 05:52:39 -0800
Received: from [106.10.166.124] by nm37.bullet.mail.sg3.yahoo.com with NNFMP; 27 Dec 2012 13:52:37 -0000
Received: from [106.10.150.26] by tm13.bullet.mail.sg3.yahoo.com with NNFMP; 27 Dec 2012 13:52:37 -0000
Received: from [127.0.0.1] by omp1027.mail.sg3.yahoo.com with NNFMP; 27 Dec 2012 13:52:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 554686.33461.bm@omp1027.mail.sg3.yahoo.com
Received: (qmail 99347 invoked by uid 60001); 27 Dec 2012 13:52:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.hk; s=s1024; t=1356616357; bh=zOUb0hkaq0Z0/SGiyDicUpSc023b41HOddophFiNVzk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=TWqn492xHdaC4pJ+1PxcBGvkZStj2d7bbXcsDkWTTu6BTpREzZcME/fgUKNbCyCGKCVZfhPPrpIBzhT5WnwYSvSg+n1doYlpq/WMMXMydDuP113YszSJ1lL5RCvotD+kmkWO8dQ4thDEXR+W4gnF0KAUw3I2a35WzVggYXHih2s=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.hk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=4ST7/+dMsw7ZZF3+3bY5I1ep2f81gyHm8NZnEtsiPZiH4nGrcauRT6kHQ4GujJEIw4GutJiLkq1HH+KR/JK+g6snGFveE0BbFHNJMclpd0LUVQV9oNjDCs5OwdcMwdBmK3CRBBfOTtcxJNjUVVnhA4QKhWmIZ1/lb8EQtKX3fkE=;
X-YMail-OSG: .9ADldIVM1nLoKHmfRAcfWw90536vRtM6nxUjqYl7iy7wm4 .KEfBy.IWAOHUl6lAL4UhDvBXeKYgKamgAHASTWi0kYU1vKHq5BfXbAWtaAp FWfmg3NHnM11ngSVadVOjX2SxSh2YU0uKMLvDzx7Z8caaUUuPghq5MTR8EJG H8i8h7z8MyRHejCp8ki4wMNj.ZAWmu9CGwWcCCB.ZgilZPBbcmrU64HL5wR1 7NJBRWHlEBX_p8PvC213fgqasg_WJoOPEdqBXhUrEIwtgW5NS0608LvJp8O5 qaZedfSrHpzEpI4HCjKpNidEvdLPTTO3KScXWHawNG7Vbq7WpLxUAKkfwgPT GYQveeC8uhHKGeC8sE_Aps9WjjUI5nQ.h.rSXcv8NqDfeRDOM3.oxkR7ekNO CniM267rfGQevSnuTw7bjpRvTxA_vMGbYmui9ot0gUIu2HL0waGmrvfsBiGn bgBIYj1T9ERc0OQ.E6c89Wqn_pF2DGNpyzFxaBn070Fkj9Z66mSfmc3gepSR FTvBRL.Yg_TlFQN.7dbSvPfTSJzzQ8veTV7gXjLmyvHraBx8w
Received: from [82.128.44.48] by web194606.mail.sg3.yahoo.com via HTTP; Thu, 27 Dec 2012 21:52:37 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356616357.96130.YahooMailClassic@web194606.mail.sg3.yahoo.com>
Date: Thu, 27 Dec 2012 21:52:37 +0800 (SGT)
From: VONDA MRS ZINOVIA <mrszinoviavonda557@yahoo.com.hk>
Subject: MY BUSINESS PARTNER

RECEIVED IP: 82.128.44.48 <> ORIGINATING IP: 106.10.151.124

Return-Path: mrszinoviavonda557@yahoo.com.hk
Received-SPF: none (domain of yahoo.com.hk does not designate permitted sender hosts) ZCBnaXZlIHlvdSBzb21lIHRpbWUgdG8gZmluaXNoIHlvdXIgd29yayBiZWZv cmUgd2Ugc3RhcnQgd2l0aCBteSBidXNpbmVzcyBwcm9wb3NhbCBhbmQgSSB0 aGluayBJIGhhdmUgZ2l2ZW4geW91IGFsb3Qgb2YgdGltZSxzbyBwbGVhc2Ug Z2V0IGJhY2sgdG8gbWUgdG8gZW5hYmxlIHVzIHByb2NlZWQsYW5kIGlmIHlv dSBhcmUgbm8gbG9uZ2VyIGludGVyZXN0ZWQgaW4gZG9pbmcgYgEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzY-
X-YMailISG: H.1LfsEWLDvxQRM5Yf8Dd4P2Rptv9dsH78wGqqAhwXj4y91S .mc64n6jqBTvfTUFx3swUU2bRXxDHqJh1SM62MnmgHB0i9Gsv3VkGxOXb9vB 0DQJqiv9kvP3Add0oY1gFGVnkp3gYymptiFKgLS9_pMxgi_H7q9XEqh_HqG3 yN_.kmIHr32TWpYRkBGJtJAMMBtzhAXHxUR1mwveKOPBMPY.dwflF0LoE7I0 hpa8vivM.1gujjMHJVCnLn8uUOX_1dFmjeV5urAD8EN.2c21OSBRMbmd7ZpP CVt.RRZiQCJM7K5.VBEKUt5Qkk9pOZQ8z5s.fNuP9C.Xc_wYiARbL37Nuz22 8pBIqeuJcVNpZ9_mf0HjV5AwQUWw_q9IF9HGaFqzydUOyt51JjP3JxklLvoc K5EtBpWD5Uptm4FkxtG.2ebFgo4Ktmc5IwzTtdwDvBzXk0DvO.zcowMlTHs_ RoMlVwN1zTBo5Xy73Y3biOdJwUCDmprPdB7paHbx8xvsBM5Xt1QJlCrMFkX9 8W2uGL_BEOF4XVQkJePK6AK8_V5lAhk5F8d6vMrEGMxoOiEUU0SB0N_RYvTV huGdkl6u.8OVS77wLGlUrNc6XdQxNdqBR6INFbOWve7OjrYWOGULwhvJEPzo 1jmp7Vu2qXt3sjhzva0iN8GpUTSUGhXpf1y4b2lKZqFPvOkEH.eoJUiEezj5 QKDEOBx17mE.17RfTPBAKWRX8t0XTI0sff0l8Xn1Uji4VPSEppelVhwBVTd. CTv7dLMskc10PDaWT6cN9Hg4XdaNfjPTKgifSrrF.LelG.Hfkq1h6bvuBIdy 99FT6Dojpee7Ty5GiN0za1XzC9qkMfwJHcT9OrlNrjBiWnm2q4WZL0whG1PD 94ifQY4EkJJb_if3zfPFVP4f6WRzQbT2_bhC0f1m6bLbUZ4fLoEQvGW88_jA gZT91g.bO_c51i1fnfbN8UWjqY7YCpkZzG35clY31wfTlr06_w38TdXXy3cY FxWzmqBU8mZxeRMFeIBx73aS3jBhrPi2ermGhn6n7VKkWjU2CuybP7BICXQ6 ej3MTKPeC8UMGMj0APdard7FbattiAXh4FUsojO2ztryCV5y6f8QVERXEy8X QU0L4tP8M3HOPNOoXA0qk83PpQ7KD95ZH27p0oFQbsA.ip1cJ8cfYkd5ueGR SCHf1IBgO_SBznYyV_bW6_MzTqRBmezM8QpwpM9TQLK67P56MSXU7yNBC7WK Rkz.guQCcEwf0MU0an5tqxFVdrhO9nHmuavSbhVEfx5PYSqPvNN5jdxVzz1_ rZpLF.tm4OUUkvl47W7a1Z9wqFttlZBl7F5g.Zc3FnopVj_3dDiAGyod.ag9 Id0SopXlPFEmNWozc4RE4S7iGKSwpGQ0z4Gyf.DXFYXWYlrt_bIcvNkxCRW1 2O2TbjGnhhZl.Z0uRcCqocfckHMBytQ3JKuOddC0AMTo0ifBJyuCYyNMg_uY 4ToM7U8mlUrvSTDXYbu8
X-Originating-IP: [106.10.151.241]
Authentication-Results: mta1292.mail.sk1.yahoo.com from=yahoo.com.hk; domainkeys=pass (ok); from=yahoo.com.hk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm34-vm2.bullet.mail.sg3.yahoo.com) (106.10.151.241) by mta1292.mail.sk1.yahoo.com with SMTP; Mon, 31 Dec 2012 02:48:15 -0800
Received: from [106.10.166.125] by nm34.bullet.mail.sg3.yahoo.com with NNFMP; 31 Dec 2012 10:48:13 -0000
Received: from [106.10.151.171] by tm14.bullet.mail.sg3.yahoo.com with NNFMP; 31 Dec 2012 10:48:13 -0000
Received: from [127.0.0.1] by omp1011.mail.sg3.yahoo.com with NNFMP; 31 Dec 2012 10:48:13 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 292709.67546.bm@omp1011.mail.sg3.yahoo.com
Received: (qmail 44541 invoked by uid 60001); 31 Dec 2012 10:48:13 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.hk; s=s1024; t=1356950893; bh=6Ptl4tSEGn9Vh42PwvB6YCoTDecoE7jFQrh/4hIhUYk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=FXypFTKINylQvJREB4yY8du3haVodcMFyvF/wxNrOBI5xyzqZ9Q2dW8yBwDGsR0YITs373UPHqh5l3C7WdhTiF5qMXJ2za06hpVFnR6vzb0tuEwsgdX4T21X+CMDDvR8aAdC0K77WfO0QxzD7YNMjsEYNqgoB9ikYnd6WDZmD0M=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.hk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=vYxRWJLnicRqoMdId5MiQ/tTHvLOujKM6DA5WwD8Dnc0iDZbXkg8ydTOBeuxbRLTWRZsH9iYXkFUZcCdplXXWM5/X9eWrDUGtpx7EYnWMw3QKuRcAv+8NTOzUa7lWgspx+SkbeRD6OHmGDQSFrNYcJFEhf0x1SQEBKlwZtCQ8ZY=;
X-YMail-OSG: AgPNPjUVM1mQf2lFmWj6j2L5n3dzznh9scRoxw5sr3cPUN1 ygECoPd.csPYFONCeTe4q8xj9wT24h4381Xb3JdNxHui17P4pahwsHG5eqkm HztuW.jr2hBd.gn_vdB3W5dt75rhMrhyIxf98LbLOZDwzxO4ZTrsKottzM0n 3yaJdiBwus3rNkFnBdKx5l0wVmzQ9JmdrZ1VXwOTc0Hyw3OPHAwAR18WJYEN pLvx_x1D4nDHe0vhuAS4Ed9eVzctNFoAxRU_YbwRQe9VimcbU7o_TYKn4lWk ZcRMxExghLUf2WOOGWatF0nXKzzwfEcv7QkAI3V1cNNR5xNsCR.mJ8.TFqJy 7rRKrzVzgnsQqXL06rHBnSTLunFC4SNWtTXgmC419O1LINPBa1LgN662D7v. 19EOLh3n9KCNVipPmg9SrR34L8ndltUIdO0xREbjKUine25eHqmQuz3_wXXp jfeIWriRzwxVX2RFA7zbx790lkpAZFO1TVQ7BGcLOYqWQoc_iX05tx9PeRWZ GPwtQuyVTsoj6IOwLWA.LxMQlllZPpbrFwzbVhSco7LscHiq0cxlNjAz5x9a dZEOZVMpxGSe3IUqqeCGuqpQdjJ0Rt9ZTihGGeJ9TBTTrr34QOaX9RounSEZ qH7IBrgK7QRzoEAjjLi4qCs.ipo97dECfCLhB1vyatF.6NA–
Received: from [41.139.126.108] by web194604.mail.sg3.yahoo.com via HTTP; Mon, 31 Dec 2012 18:48:12 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356950892.43573.YahooMailClassic@web194604.mail.sg3.yahoo.com>
Date: Mon, 31 Dec 2012 18:48:12 +0800 (SGT)
From: VONDA MRS ZINOVIA <mrszinoviavonda557@yahoo.com.hk>
Subject: BE MY BUSINESS PARTNER

RECEIVED-IP: 41.139.126.108 ORIGINATING-IP: 106.10.151.241

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Rev, Mark Hill” “DR. PETER CHEQUE”

CHARITY SCAM – COUNTERFEIT CHECK – FRAUD

THIS IS A NIGERIAN 419 SCAMMER

UPDATED I’VE POSTED SEVERAL EMAILS THAT I’VE RECEIVED BY PETER CHEQUE (ALSO KNOWN AS) MARK HILL

check-fraud

EMAIL: Hello: My Dear:

I wish to inform you that I concluded this transaction successful last year
with a lady in London and I am currently in St Thomas Hospital in London
waiting for the right time of God.

I dropped the (cheque in bank draft) for Your compensation, by trying to
assist me but it did not work out between
Us. The amount is US $ 5,500,000.00.
now contact my secretary Dr,Peter Cheque he will help you process.

I did this out of sympathy and good desire, I want you to make very good use
of this fund to assist the less privilege as I have few months to stay alive,
I have a kidney cancer and I know that am going to die soon.

God will bless you for your efforts and I hope you will be Satisfied with this little compensation, I will advise you to contact him

Immediately through his e-mail address 😦 secretarydrpetercheque@live.com ) for the Delivery of the bank draft to you, I hope you will have a nice life with My token of compensation for your efforts and God bless you.

Sincerely yours

Rev, Mark Hill

HEADER:

Return-Path: <revmark.hill@yahoo.com>
X-YahooFilteredBulk: 93.180.20.164
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: pwvmn3QWLDtkn6kYY_YMNtA2mo2KVOO1jpnUxR_xqcd3L6Za tTjpQHR2NMrvDpI9Ie8mJSa8nJCF_JaK1curhsIxxrCXDh963xR72_M5ZEXq 2USwVCxvOlVYGFDtvt4yCgh380X8rrXpmCzfp_YdjH.urQ7xEvzHoHWBEecK JKgFiXHwnNha7dOH3JIsYOstf5QTjAcP1MS.c0zev280tHGT_qQfiEeytuAl JQKyqrcQ5UMJipgnONdkhb0vCOBaVjon0rdOcJ7Eq2UTnR.gQz61YopdQgcD EBpxtDG.Hh6QyT40tRmgNytNt5Y3icvs2ahBMJd3eerdtTFpH9A3_845D28R f5OBFW_INRSPXlBsdjP1QR4EJ3cuqMsXRxsAGXiLr7As.YBVUG9leL6Vb0SL jK2tz_8sN4.8dysipI.PpCLxtzG2sasSzzPwT9yGe7ybfprmyCJh213lHNq0 P3VGFFv6pHN0_gd8o4uYcoVWhrsHa2Dpd7407MCOFdo4TkpZPFi.XiIJudH. PNhZcMfIY6p2miXudToKgKASedTZZfNUHD8TnDg6F0Oz7J9dkgje1DuH_LcU tzAF1g_gMYGBRXndY5gRracjt83LlDmsCj4Nq..cly_fI3HhCTbEPCsfDCWS VmODBLTxT595IxuVppGWhEHkSnPpOmq_qJz.AaDiNHKOCuB77SKbfb4pn4u4 1C7EOU9cmiaDTdwlrLY9qaZty6vHSgEOgmrRfc8JGzHCi9rSjeRKJyPVRKeA 1uP1T0j2GM1eOJYyX8n0gIvVj6oQ8wMzRWF7LR4fLjm49D7.JLch46acVP4y geKejT5nm05MkyoD2iLYS0iXTeWXPFkLTxmDuul8YhjuX2bvr9Q19MV21hZF edU0xZg1KTTvMGFBvKgz5juU.ikCl1tIuXkcY2MXmK6thLxA4D3R2liFEuV3 OAd.v4BkOu6Og_5wGOfDSK2vcxXE2hGhL5G88M.OFzn0FkuVky0_Kti_GGwU FyRKA0ZudYx6MPIP5by7EfyRu.KmOe_EClbMoNtqt7dIokp87gwQxwUjzJIg h4fQG_kDSEhZlEs1GtdwHmxo1J.qZlZeZqKoi1GQfSvYRlk0IOFYd7SiPtP. G56xaMfm2O50wWasX7vFDzR2NwqlZZjlq_81XnD2JRl0Y3GykV6HaBm.9olz lPQBTIA6yCi.n7yFLkQnejEjq.4seWdDdsm4A4M8fL.arU5m9IG9hfgRwR2M jVvhkuHykVtOyeeW7qL.G3NHK43MhpquRtuQD07HqWptUaTsU6qIv..D02yS hOjvpgYqd9NtER1ki4ibyeUinmLbv03czD7Ovk2gJhC8ue.rrV6UMznuTPBs dfqeR5_xLD378tEXNTto4Uj5vj9ZkmZ4QcpT1ULIJmVEu_1FDHlTVpsfy2RW V8FbAzp9NKN4tjbpRsLjI_9PgxD3dXSXyYFS8.jvokd9ySTPJZnE9EW2repn q_kZSqDOwKz7Mi47jxaJeA4XEPm.n7TvP4zskyT9TKxDgnbx5XamL4jekcbn 00WRYhYNCqbzs7VUjBy_tF_akjdlXSuLlK7L9U4awS3WnM2LW4KLQybRgH6a zNcZJVPFzg–
X-Originating-IP: [93.180.20.164]
Authentication-Results: mta1492.mail.mud.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mainframe.localhost) (93.180.20.164) by mta1492.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 19:07:42 -0800
Received: from User (unknown [41.211.201.178]) by mainframe.localhost (Postfix) with ESMTPA id 3A91433EEDB9; Sun, 16 Dec 2012 20:21:06 +0400 (MSK)
Reply-To: <secretarydrpetercheque@live.com>
From: “Rev, Mark Hill”<revmark.hill@yahoo.com>
Date: Sun, 16 Dec 2012 18:30:11 +0100

Rev Mark Hill <revmark.hill@yahoo.com> RETURN-PATH: revmark.hill@yahoo.com REPLY-ADDRESS: secretarydrpetercheque@live.com

X-YahooFilteredBulk: 93.180.20.164 RECEIVED-IP: 41.211.201.178 LOCATION OF IP: LAGOS NIGERIA Dr Peter Cheque secretarydrpetercheque@live.com

________________________________________________-

RESPONSE EMAIL:

EMAIL: Mr __________,

i have receive your message, yes i am Dr.Peter .O. Cheque the secretary to Rev,Mark Hill and am so happy to hear from you because your cheek has been long with me and am waiting to receive your mail since my boss kept this cheek with me.now i want to know how do you want to receive your cheek is bank to bank or do you want it through courier service.

i want you to make everything fast because we are about to enter Christmas before the date we will celebrate Christmas.

do not fail to call me immediately you receive this mail.

Dr. Peter
+2348035762383

NOTE: AN ATTACHED FILE WAS ALSO SENT WITH THIS RESPONSE EMAIL. I DIDN’T CLICK THE FILE BUT THE TITLE WAS ID_CARD1.JPG

HEADER:

Return-Path: <secretarydrpetercheque@live.com>
Received-SPF: pass (domain of live.com designates 65.54.190.101 as permitted sender) IG1lc3NhZ2UsIHllcyBpIGFtIERyLlBldGVyIC5PLiBDaGVxdWUgdGhlIHNl Y3JldGFyeSB0byBSZXYsTWFyayBIaWxsIGFuZCBhbSBzbyBoYXBweSB0byBo ZWFyIGZyb20geW91IGJlY2F1c2UgeW91ciBjaGVlayBoYXMgYmVlbiBsb25n IHdpdGggbWUgYW5kIGFtIHdhaXRpbmcgdG8gcmVjZWl2ZSB5b3VyIG1haWwg c2luY2UgbXkgYm9zcyBrZXB0IHRoaXMgY2hlZWsgd2l0aCBtZQEwAQEBAQNt dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzMCA3RleHQvcGxhaW4DAzACA3RleHQv aHRtbAMDMgJJRF9DQVJEMS5KUEcDaW1hZ2UvanBlZwMDMTM1
X-YMailISG: RUSkN6gWLDtVRR2I.osOnZooN6mof1tzTkJBSELxSzvipL2U wlBMz4XHvtip6BJimPiY3ANJpiunpS_P4t7.2UBBu67Afnlkq.PVu8k2.mbW maprp2gMR8v.iOe5sx8uj746OaF4yWi7XIT6j6MY.9iHB85lozYudtyn3MTR d4hfTWMNA1or45531SO7UrO7YC7AXu8BSAxlQfuZikUF_sjf0m4wAqJyzHeX iUWCLP.7RNA5YrCp8GGULn_5m4vXN.Qe1NR25UPRXtrMHhqsldFv5SHdpYI9 3bMw53Ry6Koa__vfO6GmqPpQkU2qiPNSJoX6.mBXDZHj_PjQohyZZ.NGeFny _2FMUJq1Eebewrq6yjHUVCAGitlH70HPTWsH5axyEaStXjlMJufOcOF2VBoY A6qEu3WI5ud2bp2jAWm3JFLniLjQWl1_scqj_lZGK.ojL.372ajYAq2ibxZK 9fD_iulppvkxLfziYl84ZCHYcHhnzD7aLh2C5veXJhAU1r.zEzkgI3qLTYD8 Dnsk9u547G4XMLgcpzOd6IuZXV9Yk4SiC9mlzHR2E4aq.PnQ3y24eVy9WMNk 9cHnUC4GIuq7hBqcK1agWzWj4WvEz4rHQ2k_FGCgdtq9nJTKkopxr1fly.Tq ktyAucn3XVU3R_8HHbaya_3BZdTQ7CloOAImnHAEKgcNKvVyXmr0lWZJmcek GXeQIfUzGSJ_LCQXoE2SyhY8MuiXW.y_bG1zZzp1Gfnh8GRDPWTjc4WQ_1bi uIBSdhjH5e9hXfFNPdASN8YeLYj7SCqzM14hLe.u277C6p..x3Fc5HDO8RPi OOxKex2UCvKl8x2QmMvcRIOBJOoLn3.ddvbQ7FjEcTY3MJWhsKZ4WZ1wIiMZ 1gIo0DzXU4Jmqv_JwKvhfh_E5AVfGFYbg50XotCg_lFJwyCq.wpolxuuVH3u nlc1AbVE99vR7UuBBbpIRsGBivT2K2Fiid.fwUZ8lyf9RF.asdeS62y7ntUn BFThAsAWLAKpDNy6YMw4RBou_kPTk1aBdldafhI2W12s9iHKsbnxW87LPKaj lGMjlHvA9_UT1nqVSLdzL8EmTXX2RoaBBmAU.PI1vLpDrbQP4C0iWaBe_xF. XP1MnJ382xCgWS37RdTUZifGQ3ZAKssK8Ip6FKH8SRqtU7HlUvhO1E02y0Tb CYixL7UcirFuTOabQf.GX5xZCtHbWr_swjJ2FeTVGkYKyOs.N_fr_rR4P0BV RqGPee3YabHAYEsmk6Q6BWCqbfnzno_hFre0itCMOdkyzCGqvlnPiNUbNpbP kh0h1EcKAvhS1k5xCmO1yh3O88Y3oXW0Jw8-
X-Originating-IP: [65.54.190.101]
Authentication-Results: mta1151.mail.mud.yahoo.com from=live.com; domainkeys=neutral (no sig); from=live.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s26.bay0.hotmail.com) (65.54.190.101) by mta1151.mail.mud.yahoo.com with SMTP; Tue, 18 Dec 2012 13:14:57 -0800
Received: from BAY155-W28 ([65.54.190.123]) by bay0-omc2-s26.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 Dec 2012 13:14:29 -0800
X-EIP: [NvgX5uvdCFPPz2bU+U8E9Qs+5Fla2BpP]
X-Originating-Email: [secretarydrpetercheque@live.com]
Message-ID: <BAY155-W28E7CCA29165639E797CC5B0310@phx.gbl>
Return-Path: secretarydrpetercheque@live.com
Content-Type: multipart/mixed; boundary=”_6622ba1a-8445-4dd5-8cb6-c35ba5e65254_”
Reply-To: <secretarydrpeterchequ@hotmail.com>
From: “DR. PETER CHEQUE” <secretarydrpetercheque@live.com>
To: deleted@yahoo.com
Subject: RE: Hello Mr (fake name)
Date: Tue, 18 Dec 2012 22:14:28 +0100
In-Reply-To: <1355814088.88125.YahooMailClassic@web161002.mail.bf1.yahoo.com>
References: <1355814088.88125.YahooMailClassic@web161002.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 18 Dec 2012 21:14:29.0111 (UTC) FILETIME=[AA87D870:01CDDD64]

FROM: DR. PETER CHEQUE secretarydrpetercheque@live.com REPLY-ADDRESS: secretarydrpeterchequ@hotmail.com RETURN-PATH: secretarydrpetercheque@live.com X-ORIGINATING-EMAIL: secretarydrpetercheque@live.com

X-ORIGINATING-IP/X-YAHOO-FILTER-BULK: 65.54.190.101 RECEIVED-IP: 65.54.190.123 — +234-8035762383

__________________________________________

DO NOT TRUST ANYONE WITH CHECKS IF THEY CANNOT EVEN SPELL IT CORRECTLY!

MOST RECENT EMAIL RECEIVED ON DECEMBER 24, 2012 —

FROM: DR PETER CHEQUE secretarydrpetercheque@live.com REPLY-ADDRESS: secretarydrpeterchequ@hotmail.com (NOTE: BOTH EMAIL’S LOOK THE SAME BUT THE LAST LETTER OF ‘CHEQUE’ ISN’T ON THE RETURN-ADDRESS AND DIFFERENT EMAIL SERVERS (LIVE AND HOTMAIL). SCAMMERS TRY TO BE SNEAKY, HOPING THE DIFFERENCE WONT BE NOTICED.)

EMAIL: Mr (fake name used) ,

i have receive your message, yes i am Dr.Peter .O. Cheque the secretary to Rev,Mark Hill, i sent you an E-mail and since then i did not hear from you and am so happy to hear from you because your cheek has been long with me and am waiting to receive your mail since my boss kept this cheek with me.now i want to know how do you wish to receive your cheek is bank to bank or do you want it through courier delivering service.

i waiting to hear from you as soon as possible.

do not fail to call me immediately you receive this mail. here is my official ID Card.

Dr. Peter
+2348035762383

A LINKED FILE TITLED ID_CARD1.JPG WAS ALSO ATTACHED TO THIS SPAM EMAIL

HEADER:

Return-Path: <secretarydrpetercheque@live.com>
Received-SPF: pass (domain of live.com designates 65.54.190.101 as permitted sender) IG1lc3NhZ2UsIHllcyBpIGFtIERyLlBldGVyIC5PLiBDaGVxdWUgdGhlIHNl Y3JldGFyeSB0byBSZXYsTWFyayBIaWxsLCBpIHNlbnQgeW91IGFuIEUtbWFp bCBhbmQgc2luY2UgdGhlbiBpIGRpZCBub3QgaGVhciBmcm9tIHlvdSBhbmQg YW0gc28gaGFwcHkgdG8gaGVhciBmcm9tIHlvdSBiZWNhdXNlIHlvdXIgY2hl ZWsgaGFzIGJlZW4gbG9uZyB3aXRoIG1lIGFuZCBhbSB3YWl0aQEwAQEBAQNt dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzMCA3RleHQvcGxhaW4DAzACA3RleHQv aHRtbAMDMgJJRF9DQVJEMS5KUEcDaW1hZ2UvanBlZwMDMTM1
X-YMailISG: u7Xw5CgWLDskNbn_vf28.6TFtwB8ZjMwD3Tr9g7mPToJbbmb qMLKMUH9Q3aUWOMruqQtUyeZT3qb70PQLUefoD5lm1jWzAawy5lgU4LJYTy3 1118IDtbWA8MAiAa6IYDI_JTW9rJqZPYcOjqWvfyAnM2aDs4_a15FWyzMsql .LvKJ6IV_HYq9uddIgSvKDZAolhSD7PIj.4b4G2f5R5r3OlrDTcFke0iLDBN AT8AI5_gh_XDBOdW9VGLf7S6ROvcCuxRwL9vy9V0LSWuptXfX6NIrNwlKnNG kC5kU7zMB63.t0bd4ZlB9Bh1fISYZzwXaxwDKMYp8NigkCruFZC0e_wsjruX X4ubJmnvqY4NN2e7UleQdF3TS0ntxX9lobcH7NkzqPOGIE1di9X5MnG2yMc9 I_AqDqmuY_neshsenroHWAUiunfWWaj6.xrv0PRcsfRnSt6Yi0O_cGYFZAQ7 4chcyWUgHi8_I4G1jGAmbYbRph5bLpOTxKRKbXs6nWkl7ZLZvbNmRfY1N14c CM3uKpPGErwMJrP4z3JDavBlz8K1P5fGcJjwvxS9ZRsqgB8j8YBLHSH3wRFd yuM8P7aIKKlEJZ8Gqw3fwett8rquubrlDvd.xF5kCGS1cWNbDHmlwKnSKZkk E_w8lcHe3BEEutUwqyY4aAC1Uqi4kU56wQgHeBHf1zO1VNKPlKaIhm7ubDul HZYXxmntR93qMGrclxIueQWvk_FnJpnozLrgjMV9BdD7X8agF9nS5ZI4IeCz rfueY5q5auoteKHQx9RUyTJ6Qsi7NVIdCqsAQJc7677ftOAb1Z_NNKQgSua. DUoLqO_.tVqz3vWPEJJSbOlFIihLHpazSLUbfT5FXfA7a1RZf548tB.4t9zY ZfbZUqVhfkZQfMus2Aj8HUljvBcfnAaBH_1vyQMewExzsULYNZZ2zK.jJxem 1Nmw_.tGS_YrCAK5A1Jp3TxedgUYThYTTBFWXiuV.gUEfBLjmzIopdrsh82l rLJh5acYoaliKMHuRn6XF3XFSOFgI03R7NdKEXVElP_CyzRlpJkUP_BjJgux BNwsgOqAAo3ocEHzmMMwEMjNCPcI50uMwsOxhr9WS6StZIp2xBkhVFObLsx9 uwRviUfvGVx1NU3fIqB0lCtqj3j5HR7d9Gvzjj_11dM5pRoAoIZ2e25n2n8W xYdRRlV28Jbawfj4mXyolDt9I8QfH9aZuFQ6hHZzA6uF.SZfIzyAdZUc8aaL GCee_WkMwEZiO4JvdIgqndkS5poxhvxbQ0m7LJXrthUUjPWHSP0ERxKLDqHE NI1UU65OnE1DSwyK97w24w3uhAzf.IOl0Q0B7w–
X-Originating-IP: [65.54.190.101]
Authentication-Results: mta1263.mail.ac4.yahoo.com from=live.com; domainkeys=neutral (no sig); from=live.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bay0-omc2-s26.bay0.hotmail.com) (65.54.190.101) by mta1263.mail.ac4.yahoo.com with SMTP; Mon, 24 Dec 2012 02:02:38 -0800
Received: from BAY155-W49 ([65.54.190.124]) by bay0-omc2-s26.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 24 Dec 2012 02:02:37 -0800
X-EIP: [BeN0YL2exaSamhdrCnicMrY51kryhvHh]
X-Originating-Email: [secretarydrpetercheque@live.com]
Message-ID: <BAY155-W4968A3A75E3CF4E33A318AB03B0@phx.gbl>
Return-Path: secretarydrpetercheque@live.com
Content-Type: multipart/mixed; boundary=”_053f2ce7-b584-4572-aae5-f7de5b457928_”
Reply-To: <secretarydrpeterchequ@hotmail.com>
From: “DR. PETER CHEQUE” <secretarydrpetercheque@live.com>

ORIGINATING IP: 65.54.190.101 RECEIVED-IP: 65.54.190.124

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Barrister Mendy Samba”

NIGERIAN SCAMMER – 419 SCAM – TRANSFERRING FUNDS

Mendy Samba pretends to be Aminata Bangali as well as Western Union Money Transfer and Fred Williams – for more information click here or look at the end of this post, below the header info!

Updated email brelow (received 01/11/13) from Mendy Samba under the name/address of “Barrister Mendy Samba” mendychambers@mendychambers.com AND mendychambers@gmail.com AND mendychambers@gmail.com

scams_exposed_scammer419

SUBJECT: Money Transfer From Spain

EMAIL: ATTENTION:

My name is Barrister Mendy Samba and I am contacting you as requested by Miss Aminata Bangali, a refugee in Ghana. I work as an immigration lawyer/welfare officer attached to the refugee camp where Aminata Bangali is currently registered as a refugee.

Following Aminata’s decision to transfer her late father’s fund deposited in a Security Company in Spain to you, she consulted me this afternoon to give her the necessary legal advice and support that will be guide her to securely and legally have the fund transferred to you.

Please, do confirm your knowledge about Aminata’s proposal and I will give you more details.

Sincerely, Advocate Mendy Samba( Attorney At Law )

HEADER:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) YW1iYSBhbmQgSSBhbSBjb250YWN0aW5nIHlvdSBhcyByZXF1ZXN0ZWQgYnkg TWlzcyBBbWluYXRhIEJhbmdhbGksIGEgcmVmdWdlZSBpbiBHaGFuYS4gSSB3 b3JrIGFzIGFuIGltbWlncmF0aW9uIGxhd3llci93ZWxmYXJlIG9mZmljZXIg YXR0YWNoZWQgdG8gdGhlIHJlZnVnZWUgY2FtcCB3aGVyZSBBbWluYXRhIEJh bmdhbGkgaXMgY3VycmVudGx5IHJlZ2lzdGVyZWQgYXMgYSByZQEwAQEBAQ–
X-YMailISG: 4_AQ7A0WLDsrdoRW0mzNu2SSLdatwMX5iS_EhDNFGO0Dbu.0 ZJPjmRCDFk3Bxoppk6w6x2d3WKjDXMzwfe8IqxvbBPPDr31JGNwkUlYzEFse LzFtvCX9WEYMIIglV7ug0FGVvWB6G1RnZe3JWarmQsNFn7FR3J1hYpoCkNtb NzxahunKglbrQA3.4DYQpbILeEzBia9jxUrwloVD0KdvoUzHDJNQ273p3yBB _aowcphJVZ6yZs2V1HPyhaInRIizut7qjyDjGsAysFY4KmWa8FvU7IatcSbC GD4j5eZn58R61aaUCwGNj9n2ZONKmUYY6nl7.pX_A874SK3EjAlGlTfsixkl O15RmczEOcXCkSEUdES8U5hTB3hBfPmkNOj7zeOhpqwM2p5EDGlPiPZ6MLqW VeJ7xQZTSAbSgHpX1X5YeFsYJklh_365cld7bEc3wmL7FHUnHjVI.FUdnZFi K9wMkAUG6_7nqaFrNz6SqXZOM8zjpuuLwM7gFOjZMmRzxoWGjF.exUNZLAic xQgalRKaIEO2PavYo2VTPKuFRj7RflCSMafMWoieRpRsaq0X7bQj3tX9lgXO w0HbHxuJuJDwHAwpwFNSiWmASeL3OMy4DvgYXWXw63dTEed3NNzvL3mw_bCN eMjWhF_HwStHsSSi0KD30u7qESl9rYica9FkndjwBsLDcDRh6YK4HYjQ4wFh uoq193JFJaz.jlV9YIrFAFktvrrNjaGRsiqQHm3viuhMC2mnU2t2pa6DWSba _DooJ9PHo4DXDg0DNBEd1tI8AVye5KHy2NynYrLYYTD92ukjEo3Rgom00RTc DHMPDHXoZwIAcJqiGrJWLnkwzwi0X5H98W2b2gJbRqSgAbGPsDmPgnMWI4lr rTUKVca36wz36odeYqKLyu2vpsQqQL5C3R6SbWgiXGyrBTt.MgJ8_aJ58xym ReiyU_qMQZiqangoX8UG5oPBVQh69Mz3f1DSjw2.jSUlSNHulEgeNfuUcSao VuNfoticrJYdUiDAkRl0uHpQdMfWv04r7JUIgpmxzaGGheGVcdyADzDyVW6M ITYey9NNXoEYnwBo.3pLN7nDLqidopn7hF2g9IJSAVxR1w18dPVXZPDidPTi 7B1i7__9ia8xs7gnNe9n.kkRhVyZmPZ.kdibaaljI.H7cH5Tn0I9sgUJkMr7 MiB4KqFzIVwkPRWlWf3BCWx8.tdSmaTQFbixeWlAVi1iKnzg7AIsmhZ_b7FT q_IL6Es9OgDxsTbYYs9fkwzQW9SaaHuDlAq.slFkJcvl4MFDlZnZaWQVNMD0 9vOEDSoe_HdRnU92B601FrF6Ag5QBWLO7zVrZeC2upRcZMm3F6BwQZ7obSuS 9qR4CU76exgBDw–
X-Originating-IP: [64.98.42.133]
Authentication-Results: mta1257.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.133) by mta1257.mail.ac4.yahoo.com with SMTP; Wed, 12 Dec 2012 13:49:09 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay04.b.hostedemail.com (Postfix) with SMTP id 3CC8867074; Wed, 12 Dec 2012 21:48:53 +0000 (UTC)
X-Panda: scanned!
X-Spam-Summary: 64,4,0,,d41d8cd98f00b204,mendychambers@mendychambers.com,:::::::::::::::::::::::::::::::::::::::::::mrsomf14|1714587392|FC6C4FA
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 1446
Received: from webmail16 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf14.b.hostedemail.com (Postfix) with ESMTPA; Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
Received: from 41.138.171.68 ([41.138.171.68]) by webmail16 (Webmail) with HTTP; Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
Date: Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <837876103.14863.1355348929528.JavaMail.mail@webmail16>
Subject: Money Transfer From Spain

To view the post i’ve submitted on November 12, 2012 on this scammer click: Aminata Bangali

FROM: Barrister Mendy Samba <mendychambers@mendychambers.com> Reply Address: mendychambers@gmail.com

When ‘Aminata’ emailed me back in November her return-path was mendy12@sambachambers.com so i’m guessing Samba Chambers was a fake name she was using? Or maybe Mendy Samba Chambers? .. Not sure where ‘Barrister’ came into to play lol.

RECEIVED IP: 41.138.171.68 Location: NIGERIA (SOUTH AFRICA) X-ORIGINATING-IP: 64.98.42.133

_______________________________________

ANOTHER EMAIL SENT BY MENDY SAMBA –

ATTENTION:

Since I am yet to hear from you since your last mail, I assume you are no longer interested in assisting my client. I would appreciate if you can define your position clearly to enable us know the next line of action. Should you still be interested in assisting her, I implore you to show your commitment to enable us conclude the transfer.

Please, do kindly respond within the hour is possible.

Yours Sincerely,

Advocate Mendy Samba( Attorney At Law )

HEADER INFORMATION:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) eW91IHNpbmNlIHlvdXIgbGFzdCBtYWlsLCBJIGFzc3VtZSB5b3UgYXJlIG5v IGxvbmdlciBpbnRlcmVzdGVkIGluIGFzc2lzdGluZyBteSBjbGllbnQuIEkg d291bGQgYXBwcmVjaWF0ZSBpZiB5b3UgY2FuIGRlZmluZSB5b3VyIHBvc2l0 aW9uIGNsZWFybHkgdG8gZW5hYmxlIHVzIGtub3cgdGhlIG5leHQgbGluZSBv ZiBhY3Rpb24uIFNob3VsZCB5b3Ugc3RpbGwgYmUgaW50ZXJlcwEwAQEBAQ–
X-YMailISG: Qish.AwWLDsD_aE16xh5LXkfyfliJdFG8Az7iuvnxeZ56_1J crt96JOXDja4po5uUUFfB6a4l3fDBX66fLkDWvDXGHzQtXeP.ir3WKDMvO18 yQtmjWnM7KDHOTIR_mm7F0x_yYrV2f1FJspVNUZNNrNhqx4gHNI7egOdzDmz op7TNxfD8KDM8WtGccyWKkXqThvjw7VzTcfCAHPEArsNtdKJ5wHzJaxY7Xo0 ICaaAf_pXqlY_3vkqJUpjtFYyCpgw7N5V_AkNyRzANa9D3HB88RSghJYRpkC dRkpGISFkkS0G2jSVjVJobdQa7i6p3HB67iuit9p3b5fHUatd0TmDG2c1wO4 n_3CL7IBbkzawlon7QqKyZdF1B9epc6jGlmzFj_sG9yMs7c6gAszTz.Wh37L aLADSBUUKoNLZGvXD_VPS3NuJy5qN2N_IeAPWj74Jm_I_1gYiRBbKzE1nXzf De8CKEyFZTjnJ2Tyo7u0BEYncdKM7soOIYF0C3OzEqL9Q5rDbecHRlusYWLm 1UT65pH7TqrnRdGMC4pn7hQqNuf0kQ6igWHg0ebawNy2jkZQRRqDsJIuL_hj kTe6JkM9EY1NO0Z6oaZutHK4uzUR1bhnELOdzzqFqUkmTTTt.tlm3VCPswKa Mbi2uW6G.qSyXvN4ML_cUnNUWgQyxjNm8tImcSUwfUtv.vzW43gBPS4r8tdz gRZ6WaVj2q93bL8MbZpotKrj7hCFUn4flxO_1y20Fd_XwmXYJ8Ihmq6C9R1R TihTyJWhJxlQoMqFbPy3RojiISg6gc1gsS7BMM0I0gx70NopBwRn5EJOqQhK U2oAcZ21BR9idyOFHPF7VzPu8Ncd7J4NFnoS1sXtdkeKT3378lJFaPnST6iv k9u7WhHwmBhbAhvjOkWjJxevZljRbtfvebag8m5Sahi9QaYaUeC_3pEB5.Eo zYzcudPoota0GO7Z6mfG5PYVkGRiyKKdU0sG387ZApM5TRPp_AsGwSyGxg2p DXPpSQzV7o9Zzkr9QZUJxx3oYRxh3luEq12j.ayVQlHvrngNXNp9dT0gNxzX ftpGIhATeavycQ4_jhcJ8dXpiRB2LhNdF4x_29jUzABvNKNsK19nztr4IGJU UgD6Vt2_SagllCSrCH4Y34ff6GEYlUIUccgdWYMBlWhJkmWQYstMRl71uO5J ewdacuSE7nQBw5Kx1ACRhtpjBFO.r.cVWkacnzfte.3hl0hSVzxBlLMxA3lu aeX8RJZP04GfqhHp4Ex6GYBeVXQV14Um5Dcjwg7t2dxxLJ0rcLbwTNLCLOi3 Ch4moZMd6oFy6Pil3_AuOXc28gxcxk06jpmahAvr8BgwxaAO2KkhT7.wpsn1 i4qaQ4r8Bk01ndo3Cl6.ENqsq6hCv2F_LYMsJoUhZqeERFJDDA–
X-Originating-IP: [64.98.42.225]
Authentication-Results: mta1092.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.225) by mta1092.mail.ac4.yahoo.com with SMTP; Thu, 10 Jan 2013 13:27:03 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay04.b.hostedemail.com (Postfix) with SMTP id 8718C1CB33B; Thu, 10 Jan 2013 21:26:50 +0000 (UTC)
X-Panda: scanned!
X-Spam-Summary: 2,0,0,,d41d8cd98f00b204,mendychambers@mendychambers.com,::::::::::::::::::::::::::::::::::::::::::jacquesr2@omf08|3603412736|CAE7C8B
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 1235
Received: from webmail16 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf08.b.hostedemail.com (Postfix) with ESMTPA; Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
Received: from 41.71.189.89 ([41.71.189.89]) by webmail16 (Webmail) with HTTP; Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
Date: Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <1176793950.247565.1357853206650.JavaMail.mail@webmail16>
Subject: Re: GREETINGS FROM AFRICA!!
X-Originating-IP: [41.71.189.89]

IPS: RECEIVED: 41.71.189.89 – – 64.98.36.5 – – ORIGINATING: 64.98.42.133

Barrister Mendy Samba IS Aminata Bangali pretending to be her lawyer. Below are more email addresses and IP information used by this scammer.

Aminata Bangali has many email addresses. A few handful include <> aminata2@mendyschambers.com <> aminatabangali@africamail.com <> aminatabangali@mendychambers.com <> aminatabangali@yahoo.com <> aminatabangali@msn.com <> aminatabangali@gmail.com <> info@guarantytrustsec.com <> info@guarantytrustsec.com <> aminatabangali7@gmail.co <> <aminatabangali7@gmail.com> jacquesr2@omf08

>< Aminata Bangali >< mendy12@sambachambers.com >< aminatabangali2@gmail.com >< aminata22@infonets.info >< aminatabangali6@gmail.com >< info@guarantytrustsec.com >< SeferiaB@trumbullps.org >< go@win.com >< SeferiaB@trumbullps.org ><

Previous IP’s used:

Originating IP:  41.71.177.75 Location: Lagos, Nigeria

Originating IP: 64.98.42.177 Location: Toronto, Canada – smtprelay.b.hostedemail.com – mta1196.mail.mud.yahoo.com

10.5.19.254 >< by smtprelay06.b.hostedemail.com

Mendy Samba also known as Aminata Bangali also pretends to be Western Union Money Transfer – And Fred Williams

Fred Williams >< fredwilliams3@rediffmail.com ><  www_western_uniontransfer276@superposta.com

Some more IP’s used by the above scammer:

Some IPs to avoid –  41.216.50.79 ( web92415.mail.cnh.yahoo.com ) >< 41.218.238.107 >< 41.216.50.209 >< 41.138.172.76 >< 74.125.83.67 ( mail-ee0-f67.google.com ) >< 10.14.193.136 >< 10.14.175.68 >< 64.98.42.56 >< 10.5.19.254 >< 64.98.36.5 >< 64.251.52.6 >< 203.188.201.85 >< 203.188.200.143 >< 119.42.242.156 >< 74.125.83.67 >< 41.138.172.76 ><
 
1 Comment

Posted by on 12/13/2012 in Inheritance Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Mr Collins Edward”

WARNING: BUSINESS PARTNER – PROPOSAL – SCAM – FRAUD

NIGERIAN SCAMMER CLAIM’S  TO BE IN BUSINESS AT The NNPC TOWERS IN NIGERIA. YOU’D THINK THEY’D USE THEIR REAL IP INSTEAD OF ONE THAT SAYS WASHINGTON D.C. – THEY’RE TO LAZY TO SWITCH THEIR FAKE IP’S AFTER SENDING DIFFERENT SCAMS TO PEOPLE. THE RECEIVED IP HOWEVER, IS LAGOS, NIGERIA (obviously, that’s where all the cowards who scam live at)

 

EMAIL: FROM: Dr Collins Edward

NNPC Towers, Central
Business District,
Herbert Macaulay Way,
P.M.B. 190, Garki, Abuja.
TEL: (withheld)

Dear Friend,

RE: PARTNERSHIP BUSINESS PROPOSAL

I am the senior accountant with the Nigeria National Petroleum Cooperation
(NNPC ) I am not contacting you on my official capacity.I am emailing you
on my personal capacity for a
business facilitation.

There is a certain amount to be claimed as over-invoiced amount from an
original contract done by a foreign firm.The over-invoiced amount is to the tune of
US$65,500,000,00 million.(sixty five million Five hundred Thousand united states dollars)The claim should be filed in three tranches by a foreign firm.I will guide the foreign firm that will be interested in this claim on how best to file it for easy actualization.This is a personal arrangement between me and some of my colleagues.Some of us are interested in politics and will resign to go into politics full time.Therefore, we need money seriously for this aim.

I want you to be our confidant and partner. If you are interested in working with us to claim
this over-invoiced amount, feel free to contact me immediately so that I will itemize the
procedures.You have a stake in this transaction if concluded and it will be agreed upon before starting the whole transaction. All the terms and conditions will
be discussed and agreed before commencement, possibly, we may arrange to meet face to face for a roundtable talk before proceeding. It is risk-free and foolproof.

Your immediate reply is needed via this email .

Regards

Dr Collins Edward
Senior Accountant

HEADER:

Return-Path: <www.nnpc.ng.org@ws.blancspot.com>
X-YahooFilteredBulk: 75.101.130.49
Received-SPF: none (domain of ws.blancspot.com does not designate permitted sender hosts)
X-YMailISG: MY6nI5sWLDsgKXzuiml5nM2gUrCCajWO7yQdSvWZywbgxDo. Qr4Nh6x8LAC4ShkJW_e1W7xcXsNM5._czJ.RYSlVB1v1J8Vwt8Rp.FHEK6QC dyLa8A_5hlm2B3jxsBlV_9VDSruZkENSEI0p2Uq9zcUUjzJgIQ1M6uxOJLDp 4wys.wFec8k3UrBVt..2ehAnh4wcs7VsCO0_ugDAzNH_5kAsk9slUGXF5fvM tImc7FGqI1STxEI1Eo.pW_5mtZfJajcfu10EDVmvlBb4yKptyx_fP3a72pXG 4OBOLX7UywP4OPkFXaL6F2s42.5pB3jx4cp1qYN5RyMOdFZcGCXtKMQFtHik eqp_HAMjBmLjksn.QAgfeCYIhh57JkAov2M70PaVRNYejCxFJFv.pdzDAhLq BeovMruu4KX1j_w.Ry7Pcs.zkOdvYk.EByTaJ0d.5JHbHySQVy.rx6yo.Ytg I7Y2JCvd68nWlllttkimSU1dYilERQE.hDMHnAIAt5waCeQAOznm8sF.m9kA sGDsYc_Odl0S0D9VYocIhrhCuGckdwjUD3VEPycqjyuihbNthaBdIqGGw81n thkOeHaaV7Hko4qvi1A8JoNKG94E2BOBa1.htkrHwAaQVW5Jyxqgq7TBV0KX OIs6iQjGrUiGpCUh0HTRCEBah4nhwZtbJMmQV0Mhtw8cgxRvC1R_MfHn_45n 8yrpn8AaMx5haAaKisGAHbFLfIp0dq_UJYC4EaWwit50XxrEGQIQ4XrV1IcN GB0MN110Gmm.2Yafc.znhGhJNoqzsqRTYvvx679TWCM.4g8nh0FhdfmhUspJ foa0hPhpsiMNqSFMhV1Y9RjX7iy0FJhylyyRXxJd5fhtoOBYUJF8xnsd8iP3 fCnEh2yKn05sCxlAXMbKTcTAVNjQQ3Cbe2e2BSAZi5iiFYxvwizKOnkIuGeJ 0F14woAWNABf_tIjTnvLYFtqP5ZJirQu50OIC1mliUGz9JGN5pzC2Er7mJ8A TsHxhqY_X_Dw47M1jSXXsb4zUBznHjUKrU1h0_I11Eg22zdzN.PsB8h5Hzuu IeCyLIR3TZ6KHSSX9coD.dax.YaC7U3Ij..ruJOcM3e6Gkc0Tqn.ffXZf19J 0RFeVH7sSN7fSNXYBJr3prmYZyvxYZ6yOIUN3P6oo1_n5ah7GjcLvO_ag8Xc .M8gkaHMQN5ycpAV6hnNTcmhHjWf78ocVT4VsZQllgLmsmjxRuM7hShIWxoO zu5aCzM6YxcLDVKkqQyrLsHGtGjlTvV2N0eN5XRUBAo00NW4qe12oL5sT_5I BtuDwZAA7_ov7TbNNONiHUq5unUDlRpUmC0ywOrXpIUjKwOnkLepHSaiQEtS TICJg5bAKMywB2LXxjTn2HUEnMbeXbrUHIn_XO_CtLPP5q0ror3wLabRbn6r YdFd8incsZpS_zd2rANS.BArmcvGBny7LPjXzxKve66yqRb2aVsy.WGOKUuH DuJ_0AF12hSNLnS3jwBd0JMBccay79_6svmIKqB5lxZjDNjF1KkzHboibhFI sTFOauQtH99_2i6u_NLkHVT44vOkpMMnyUCeGRyOqVZK9Qb7Oe_GeKJ4gAMH Mi8mZsb_UjUE.KbfaNgpifAw2BoexV1TFepdOBSsYwgD10FfHq7MKIS3feHS 5UB4k6VpkXHGowUkTEJ2GWS._Fsh1LMffITs4LZjj3ByNlVkLJYZ_gpIWA.d J.TQ8Jgx0I0p7XLe16OEz34NvUaprgA-
X-Originating-IP: [75.101.130.49]
Authentication-Results: mta1381.mail.mud.yahoo.com from=ws.blancspot.com; domainkeys=neutral (no sig); from=ws.blancspot.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO domU-12-31-39-09-B0-21.compute-1.internal) (75.101.130.49) by mta1381.mail.mud.yahoo.com with SMTP; Tue, 04 Dec 2012 21:02:54 -0800
Received: from domU-12-31-39-09-B0-21.compute-1.internal (localhost [127.0.0.1] (may be forged)) by domU-12-31-39-09-B0-21.compute-1.internal (8.13.8/8.13.8) with ESMTP id qB4E83iI005582; Tue, 4 Dec 2012 09:08:03 -0500
Received: (from apache@localhost) by domU-12-31-39-09-B0-21.compute-1.internal (8.13.8/8.13.8/Submit) id qB4E820j005577; Tue, 4 Dec 2012 09:08:02 -0500
X-Authentication-Warning: domU-12-31-39-09-B0-21.compute-1.internal: apache set sender to http://www.nnpc.ng.org@ws.blancspot.com using -f
Received: from 41.71.176.146 (SquirrelMail authenticated user test) by 75.101.130.49 with HTTP; Tue, 4 Dec 2012 09:08:02 -0500 (EST)
Message-ID: <1290.41.71.176.146.1354630082.squirrel@75.101.130.49>
Date: Tue, 4 Dec 2012 09:08:02 -0500 (EST)
Subject: PARTNERSHIP BUSINESS PROPOSAL
From: “Mr Collins Edward” <www.nnpc.ng.org@ws.blancspot.com>
Reply-To: collins@rocketmail.com

“Mr Collins Edward” <www.nnpc.ng.org@ws.blancspot.com> RETURN-PATH: collins@rocketmail.com

RECEIVED-IP: 41.71.176.146 LOCATION: NIGERIA (SOUTH AFRICA) — X-ORIGINATING-IP: 75.101.130.49 REVERSED DNS: ec2-75-101-130-49.compute-1.amazonaws.com. LOCATION: WASHINGTON D.C. (USA) (Not the fraudsters real address. IP used to mask their real location.)

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

Four Email SCAMS

A list of three scammers who emailed me back in October, 2012.  I would’ve posted them sooner, however, my spam box gets FLOODED with spam and alot of email’s (including these three) continue to get pushed down each day. So i’m posted a few of these less recent scams, in one post.

1) LOTTERY SCAM – “EUROPEAN EURO MILLIONS LOTTERY COMMISSION” — When I didn’t respond, this is the email I received:

FROM: Mr abdul saram mr.abdulsaram16@ymail.com

EMAIL: Attention:

TRANSFER OF US$11,800,000.00 TO YOUR BANK ACCOUNT.
We are writhing to know if it’s true that you are DEAD? Because we received a notification from one MR. GERSHON SHAPIRO of USA stating that you are DEAD and that you have giving him the right to claim your funds.He stated you died on a CAR accident. He has been calling us regarding this issue, but we cannot proceed with him until we confirm this by not hearing from you after 7days.Be advised that we have made all arrangements for you to receive and confirm your funds without anymore stress, and without any further delays. All we need to confirm now is your been DEAD Or still Alive.Because this MAN’S message brought shock to our minds. And we just can’t proceed with him until we confirm if this is a reality OR not.But if it happened we did not hear from you after 7days, then we say: MAY YOUR SOUL REST IN PERFECT

PEACE YOUR JOY AND SUCCESS REMAINS OUR GOAL.
May the peace of the Lord be with you wherever you may be now.

Your Faithfully,
Mr. Abdul Saram
Foreign Payment Department.
Kuala Lumpur Malaysia.
E-mail; mr.abdulsaram168@ymail.com

HEADER:

Return-Path: <mr.abdulsaram16@ymail.com>
X-YahooFilteredBulk: 202.54.119.135
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts)
X-YMailISG: zoMIZlsWLDvydzg0Dk9J5tOysBHE56cHQyyiC1YznBFFUtuX 2QmjWmBtKrEIAIZhZZvMLBsf2_VfVRuk3IH9j8m1hLMrwqczlxOjNcYd56t1 DaED9ORsgM_tamt6rYqekTqo1ZZeVBVk.n3YVF3tmTgLQTno7RUE_mPfmgyO S8g3lGMj8NpQGYdtfuXTZYiqBNy7OCiTyfihCtBixC84NBTgsDMsAj4P2vvf uvEouSXqXW_lpokkF6fkNC1eMtEPGI98ZdT_3zRWN9Ru.lwobx.vCEagLelr T6qkX56Y3yw3oYYgjSG_O1eZeznkjXOyNOjg82ND2CrRcduLWdRuJOesZKmV 3xrCwSbNU.1OEPGt99LQuUBZpHmnhEsLZ908pgJy706cOkWpiPoZ1rCWGuGK kMgJUwp_ukdV2jXRGVSbgDunXrysUGJ4JGJ7sIcy08xXkI01aKXjvxH5zSVt MLNYizgSIwbXCsVoh4kgvfVFn8tv.rcdkUiap3AJ7fxaz2BjrTg_iLcFzP7j CKXG6ul9U1zBHqq5F54fpGKFMpuGvzwMOAQT_kou94fFWb78j9yzKSJHFpzs N.MLMXSB9whHO08p5lO4G9516SCu.qO8uzo96HXGeNPbj9DIfYQcg1iWz8uo 3lMulBOyPI1h4faLSk2GSYFktoY9y7i9gU.f.9MxMaXc67eJ_PrIVIhtMswN J_wZMBwunjrY3hq2OicEy4TomsF.650j_axPHFQHMF0VIt1ySTNQfVmkwYD_ M4SQKaSrB6uU5OJM3EfBW_Humq93k7t34Dv0UpWSsFFW8shyPX21lPZJvTcZ OXXZcu._kxiXXOWX99I0m3DkvbdL_quy5FBkRomNTW_pSwiZBIdfHBGu50MS 9nIw.OfsGw1O0ATr25xhnJHFLd4PlcHTUBXfiGUamYauHYl_HmtmDcs2so5t jo1X2QbMvFUqicTPxGsJSPWzhxtucwSaWhqCBTqnKW12kmR.n19.GVeHCPoG 5fbPZ6S2rNO.LNDQzjl_7vpVXk.3WfaqAGUZaNZSKgTUx_m6dzipHtSDVyXl ZWvdU1M57p_stGRaLd7P2DLNwZA8gjZwrpTI3_hXdzz4E0HLWDqTsu70dLn3 NvwffnAgEQhrxZfe5eS8PmhRPM3oEBxVA6viz2i6xw–
X-Originating-IP: [202.54.119.135]
Authentication-Results: mta1021.mail.ac4.yahoo.com from=ymail.com; domainkeys=neutral (no sig); from=ymail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bulkhostingpanel.com) (202.54.119.135) by mta1021.mail.ac4.yahoo.com with SMTP; Sun, 07 Oct 2012 07:12:02 -0700
Received: (qmail 18600 invoked from network); 7 Oct 2012 18:40:51 +0530
Received: from unknown (HELO User) (120.140.1.40) by bulkhostingpanel.com with SMTP; 7 Oct 2012 18:40:51 +0530
Reply-To: <mr.abdulsaram168@ymail.com>
From: “Mr abdul saram”<mr.abdulsaram16@ymail.com>
Subject: Attention:
Date: Sun, 7 Oct 2012 05:24:25 +0800

Abdul Saram also sent out scam mail under the following names and email-addresses:

“Mr abdul saram” – <mr.abdulsaram16@ymail.com> – “EUROPEAN EURO MILLIONS LOTTERY COMMISSION” <europe”EUROPEAN EURO MILLIONS LOTTERY COMMISSION europe – FREE LOTTO AFFILIATED OFFICE U.K info_freelotto@ –  “Mr. Abdul”<info@yahoo.com> – “Gareth Bull” – <garethbull65@qq.com> – “Dr. Cherri Holden” – infficess@yahoo.com – “Mrs.carolynx Harold” – <info@winners.co.uk> – Mrs carolynx Harold <info@winners.co.org>

RECEIVED IP: 202.54.119.135 – LOCATION: India

ASSOCIATED IP: 41.221.17.37 – NIGERIA – 41.249.22.246

_____________________________________

2) INHERITANCE SCAM – TRANSFERING FUNDS – FRAUD

 

EMAIL: Greeting’s my dear,

I hope that you are in good health and God is always watching you and to take care of you and your Family.My name is Joy Donald and im a beautiful girl in this country of Cote d’ Ivoire. i am an ordinary girl and simple bread winner of my self. finish college degree not working .I am brought up motherless but i am thankful that I have my father with me all along till the death of my father on 20th Febuary 2010 in a private hospital here in Abidjan. he secretly called me on his bedside and told me that he has a sum of $ 12.500.000 (Tweleve Million, five hundred thousand dollars) left in a suspence account in one of the local bank here in Abidjan, that he used my name as his first daugther for the next of kin in deposit of the fund. now I can say that God is good in everywhere and in everytime. he also explained to me that it was because of this wealth and some huge amount of money his business associates supposed to balance him from the deal they had that he was poisoned by his business associates, that I should seek for a God fearing foreign partner in a country of my choice where I will transfer this money and use it for investment purpose such as real (estate management) can you be my friend,my guardian,my partner, for the time been.

dearest, i am honourably seeking your assistance in the following ways ) 1 to provide a Bank account where this money would be transferred to ) 2 to serve as the guardian of this since I am a girl of 22 years. moreover dear, i am willing to offer you some % of the sum as compensation for effort input after the successful transfer of this fund to your designate account overseas.I’m very honest person and always like to help others.

Thank you very much, i will wait for your reply. God always be with you.

Yours sincerly,
Ms Joy Donald

HEADER:

Return-Path: <ms_joydonald@hotmail.fr>
X-YahooFilteredBulk: 77.238.189.206
Received-SPF: softfail (transitioning domain of hotmail.fr does not designate 77.238.189.206 as permitted sender)
X-YMailISG: JZaHMLwWLDugrnxWgMa0KL19eLCCrSn4Vjkr9J4aFtdpeB0n RfO.FCSatFLs1uKMnFmNvRs95YCfGGD9V9ixQ2.ZUI18rrVrpd9c6YAKD_ep mGZvxWakYrLqBuZIajyrXKCMsGLNT.Aah2DmKlB56P5PAHpA0J5YhGOGuosH dDTRY0OuX_R3Cigqpyh.kfeN4GzHCORAXV1b8p5TP3x0QUK3U2ADv7qkiZba JbixTzA3LxKAdrJF3EKB6GWB0n_0_ppM3TTYmjDzqJbuNsoU6zGDYX93txZq qxUxiJMeHiVBwpAihr.pJBlWF_EyHO6sAOzxEtrSXQBDYI6r9vT28QfG2bkQ l4MbVzyT1n7Twa_dMibPyUW9rxhqG8pASUyelD5fotFzmrK0X_3wMOZbsrRO R.szB0QOzMHw2joCbG0c74FMFgackwgdLdLwfSuZjYsbQHlvUa0LVhp9U__x fzldM6GUoOtXkGubJ5MRQ6DpKzPL6C85e1jn0T0r9u1LJEuTPejfOuV0qDEV saYEVNnk4mi52SyZlcmFMeWs5t.2HixWTyQ2h4RTFfgmJLawAaYmAJGOYebQ uWegqh5C3LL_pgbxf4a9._LXUl.QPV7XNdY7wzOlJ3TlnmLnSJ3bf0U3zcHY q4MvlCc3owpjYOtD.53dx0hxoYSL2cI2KOFVPcZYz.T.ZQ1CyXAzAn6151hh nmtqAD9ouJeDgJt2SIInkOg5NHv1QWRdh_sNEiTVGdH4mHUSgvnEzn0FPZ_U l78PUoPR4fT8wEDua3xMfYaBj5Kb6a8G2qA6fBrhm86jmAjWXtcVEz0_M3g7 i3nL6AnRLdHhcPL.3Xm0akNe7iDDPlufAlUidGal8xP1Oigi8OpgcIq4Sthv QsHMTO0EfOYCaGrzoSaddqtTlZUfnctjltSptmoQ_DwMlYAY7QnXE00HvRFx EGiH.mwv7zj8Jnh6nxW3YbAtEZ9O95EeTTDlZKxOjGyEWsUl4qKh2IojbP1k pAb7WXT5XgRLMG1win4HfMlGuH15.XzvR.ArRmBQH50Qtckr5QGztIfMQLKq 1l1jsOK9RXb1A7C_DsILoPxg7yKSzmnDgVw.QA8oLyAVPHfxFAdcq3Vobrwq 2z_YIMiI7enn.1Vd0Jxek_GkywSnAcepswcn4eU.neYNWprRs9LCHxorbxkB RXlOtzwgZ7_TrVuVJPNOggjT9fqrEZYnUhUHbmi8SToV3zaP7toPD.Ux5b2z veuMgxkh_RhisgKxWbX7ku9z2CB.x2ZF4MwCiTwED3WCAQrTbu3fopeh1ICN XFDoHmtkcfuos7_eCmTGq8_SCdX5lE3TBlWZU04svWZWMIk-
X-Originating-IP: [77.238.189.206]
Authentication-Results: mta1300.mail.bf1.yahoo.com from=hotmail.fr; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm17-vm1.bullet.mail.ird.yahoo.com) (77.238.189.206) by mta1300.mail.bf1.yahoo.com with SMTP; Wed, 10 Oct 2012 09:25:01 -0700
Received: from [77.238.189.54] by nm17.bullet.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
Received: from [212.82.108.253] by tm7.bullet.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
Received: from [127.0.0.1] by omp1018.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 759852.5070.bm@omp1018.mail.ird.yahoo.com
Received: (qmail 95614 invoked by uid 60001); 10 Oct 2012 16:25:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1349886300; bh=jaEN//dfogj2VveAeEoe/VXQQN2SwrOCdupZLniFXYg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=gFNDxSA+fQ/8A8jgKkFMAaKNlbRG81Fr2Blh/islfQc7fwumPFknPMR73jC3ebIw4/Jj4IaBtCCTajqdTlzpH3FQxVOWIRcnul4FVBa1NZN2f+DtPR6t1YHzzZXcfrd1UpORj1wmOG/WHquNyYwesDFYod+iLcHYwQJEIPJrWfc=
X-YMail-OSG: bNrzragVM1mTLrq9DxIX40L1J60JiJhrQ0wuRl7w6Sd1Y7u c6kjz5pTHtaDVpdpayxVP37.bOAv5uVox3wH3edxmNiadIQU_MhECL99_P6g rvJJGcLBsCljDdhiWqr0Lia7jKJHIdfX_w4avRcs0Tu8DTDkWNA31_7_FarE 5nYlfMedww6RvY5K6h7IcIEvs2U1G.CbX9WXYhiKjfdLM1s.v6W5SIPf85RN NspEsJXiafUi1QAXAzPKLhU5.bmFjCz3JER3WhYejBKIdkPQLJ2VE8ct95FS WDB6xtDiU3tRzQcEySrIXJwoMv15ScwC9pYuVs85JwH6ypUAAjAftFarPXEd 6hujb7zfiswYXLQg55XfnQReV36PZHVy6ffLu0QeipIkfC4HHTbakq7ag8Jr XU9qFc.5IR_JpnGYiINd_iBBp1.LjenFSIHT8o9Sw1RHSZMG_iIkMM0eJSVp sZdhbJKJSLaszEdLqD3iUcFwpzHD8iot8Ip6DIO17SMm.mgMxGJeksfmf1lC SlCGFXSmSGO7XZeO4emPmb749eAOGk0CgYHYwdL2RtbFD3fSHqR4LP0KtBJw tmUvaL1yqR_mUcAzvCjSAjAAP0lgfDUNpDZVmYlwbwl6NlJmowcO23eAppF6 rBOFUIVZHkG70Ht502_wTFM_e420-
Received: from [196.201.65.21] by web171605.mail.ir2.yahoo.com via HTTP; Wed, 10 Oct 2012 17:25:00 BST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1349886300.86977.YahooMailClassic@web171605.mail.ir2.yahoo.com>
Date: Wed, 10 Oct 2012 17:25:00 +0100 (BST)
From: Joy Donald <ms_joydonald@hotmail.fr>
Reply-To: donaldjoys1@yahoo.co.th
Subject: CAN I TRUST YOU

FROM:  “Joy Donald” ms_joydonald@hotmail.fr Reply-address: donaldjoys1@yahoo.co.th

____________________________________________________

This scammer spells Federal incorrect  – ‘ Federal Republic of Benin ‘ not ‘ FREDeral – LOL they aren’t smaRT AT ALL.

3) LOTTERY SCAM – 419 SCAMMER

EMAIL: FROM DESK OF MINISTER OF FREDERAL REPUBLIC OF BENIN.

FOREIGN CONTRACTOR PAYMENT OFFICE.

ATTENTION BENEFICIARY ,

The Board of Federal Ministry of Finance Benin Republic. are here to notify you of your payment inherited funds of ($2.500.00M)U.S.D dollars . after the meeting held on 6th of NOVEMBER 2011. His Exelence the PRESIDENT OF FEDERAL REPUBLIC OF BENIN DR YAYEE BONI. has Instructed this Department to send your funds through western union money transfer for easier receive of your inherinted funds without any further delay. to avoid paying money to the fraud stars that is going on through the global.

You are required to send your name and address were you want your fund to be send through western union the maximium amount you will be receiving each day starting from tomorrow is the sum of $5000.00. also your are required to send us the sum of $105.00 dollar for Re-newing and recofirming file that was deposited in this office with your name and address bellow .

Beneficiarey name———————
Address———————– ——–
Tel phone————————- —-
Your ID copy————————–
Your city————————-
Contact MR DOUGLAS JOHN with your informations below:
CONTACT PERSON: DOUGLAS JOHN
EMAIL: ( western.union45@live.fr )
TELEPHONE : +22968449676 OR +22999203703

As soon the required fee of $105.00 is send today for the renewing reconfirming the payment file of your funds you will start receiving your funds as from tomorrow.

Send the $105 dollar through western union with the name and I am waiting for you to give information to enable you start to receive your paymeny as from tomorrow

Send the money with this below information;

RECEIVERS NAME, PETER MARK
COUNTRY: REPUBLIC DU BENIN.
CITY: COTONOU
QUESTION HOW LONG?
ANSWER IMMEDIATELY
TOTAL AMOUNT $105.00

We await to receive the western union payment informations today. Please if you a are not the real beneficiary dont repond or delite
As soon as you send the only $105.00 usd you pick this first payment immediately ok you can track it now to your private system to be sure.

Yours in service
Financial Minister
Federal republic of Benin
WAITING TO HEAR FROM YOU AS SOON AS POSSIBLE

HEADER:

Return-Path: <officefile389@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.94
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: rVs1dXIWLDsMv_.n5QvLQrk7czd0m_vZykzvsDv2bO1NcJ6B mEmKmBbytjJ2Q2q7hoVPQRFf.X6dUoEqTwfUInQ1y31cNswweQ_WvtxI.i4x G_5EcbtSTAVFV_Tb4UXEP5nfbLLR3OcUBVBsg5a5QXdq93GUClR8IM3EZ5Oq Ax7QU446TQrW4z5fvkmJx3BMyug0lDIr.UKXxO4wFuMypYMVzckAr19SaEIM 9HuVKawHWF29nJmCMUx1.u.4D0ux2wFAlii5MeUQ942cVWxRJNRPKcmbs.HI xfvch.PCVUxqRomtl.EHpyv..T7KNAcWhNhb.OyXv.2QECxKRPe1A7JQ3esP SwDsYR_GQhXSI6NrwhwyUw_L5OuoS6BVHHBBLlwcEVolhJCEGaAjbppebA8J evmsqJ5PFkMZld3WHHJKdpHcYATjH92mH_OttCP.t_gHne6LdIMpg0icfVbo JUw8u4QIpzjvDbBLcLOo7FKhjR_..Dw3CR5HiVy3MjdTZZSVWnsizrHoNYE5 ravSWhY7xBCAUFpwo3u_TWaz0OusXIdi4QFDzivf0VIeiX7U2loHfgshFWfv XZnqeScp1sfpl5.qC8A.jyo8muRr0mX9Tl9byXrF3WYKvEdt3W8eOw0pl6tr nVjmCpVK3My0FU0bhunib_bq4I.amgNLqsYq2RCFlXCeCHFfOKNnfxNjbynC hxvT_tPcgA7lKv2YKqXSpx0aPsEAli7rWut4ZUI.mbV9ciR48JO1mZKsFMun Esrk8D.4ejFipPpmySq5vieercIDg0U79Pww_IHpoccnLrUXM_pkm_n5CE5W J5j0vgLwbYEKKiNM4J.qM.pziSivmA3LHJx4AT_NN_Ifx60YZTyinP8JewNB nEbJEKBjRYYIcrvzTgHy_Hp5rIhJK65y8uhTrNI1le7l6deAErzP.vQvp7RZ UQ061OvKu0ROvUPBj6ooxDZJiQPzlk5YUlYRoNhyiOarHEJYYvHrc2MAfnbs SXemLmas9CFQe.FOnAWLXg6IJXXnlJWn0Suo3DTioi7qFA.PEES_wVpW8Dq. pHM5id.fOlTcNRbobhwM5ELiEbv8UqiWO_xk43r8CF53mgnSxRGX_ofgT.vM K7TyCiTkiLJqrRPsj2XGv6qaEwrHZQVK_zZAm8bQlHgHMW.EPX1efMclxHr7 Hv87ie3KJVlYsbpt41qN.jHZ72TTGfgMUBIpd11uFx7wBWTNJnzM8wuflbWz 7ScRo1Rd9xaY2kgiJd00y.yGR9q0Te8G7.2gs64XgAj.rJHJEesoyLAnHor7 oBWj5K.idQo2jtWtMldstigscuNvbIdpB8ho6rmCzuBDmN33y0aFRpxE8w–
X-Originating-IP: [203.188.200.94]
Authentication-Results: mta1342.mail.gq1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm12-vm8.bullet.mail.tp2.yahoo.com) (203.188.200.94) by mta1342.mail.gq1.yahoo.com with SMTP; Wed, 10 Oct 2012 07:09:33 -0700
Received: from [203.188.200.220] by nm12.bullet.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
Received: from [203.188.200.63] by tm7.bullet.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
Received: from [127.0.0.1] by omp1004.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 119691.33270.bm@omp1004.mail.tp2.yahoo.com
Received: (qmail 38888 invoked by uid 60001); 10 Oct 2012 12:59:01 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1349873941; bh=MP+++lIJyYrpj/aXzm3tMnmhmfCfqMXOi5e1kzYn3Tw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=LVkAtUGaJbi5dfKJkjQghJrT8gUU0PgdSqmZsd9E/ZHQ6/CG6mgNm+rvJDts6pp3AiUWIw0omchZ9EGQ4FunoccmA2lDVIGS7pb99sdl5hsF0AkgCspFU5fgyb8PuayE1Yj98s03K9J4GMwWfqlVMdLewAIrzkJxc6PdD07aZ9I=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=c38Gpj05IhDmqBiYzJHOdEYJeIkGQAvzHcxXPhNy+G8fqdVpH1DSEJEtXQ2/1BsyYYvWZ8vCfJOX3lA93bclbzxnjXmUqQmhkeuQy2JqNskNXltl1tRwk609ukguAOvwLPnMhfqMio8PHMWIVwSnCRb2k3C14uRVjsQ6OpWNeTA=;
X-YMail-OSG: _GARL1wVM1lqQRqVGyFk1sZRYyWzAuNVhJd1sZHEBwkfLNd PMIg9HENG
Received: from [41.138.89.38] by web92411.mail.cnh.yahoo.com via HTTP; Wed, 10 Oct 2012 20:59:00 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1349873940.38815.YahooMailClassic@web92411.mail.cnh.yahoo.com>
Date: Wed, 10 Oct 2012 20:59:00 +0800 (CST)
From: MR DOUGLAS JOHN <officefile389@yahoo.cn>
Reply-To: western.union45@live.fr
Subject: ATTENTION BENEFICIARY

41.138.89.38 – BENIN / NIGERIA

“MR DOUGLAS JOHN” <officefile389@yahoo.cn>  westernunion45@live.fr

_________________________________________

4) SCAM – MONEY ORDERS – MONEY TRANSACTION – FRAUD

EMAIL: Attention please,
My name is Kim Wong, The Owner of Kim Wong Trading LLC,Kuala Lumpur Malaysia. I have been into Manufacturing of Fabrics,Textiles and Furniture Wares since I was a little child that gives me about 23 years of experience, I majored in art in high school and took a few college art courses, Most of my work is done in hand neatings mixed with Machine Embroidery.

I have recently added designing and creating artwork on the computer, I have been selling my Works for the last 3 years and have had my work featured on trading cards, prints and in magazines. I have sold in galleries and to private collectors from all around the world, I am always facing serious difficulties when it comes to selling my works to Americans, they are always offering to pay with MONEY ORDERS OR CASHIER CHECKS which is difficult for me to cash here in Malaysia.

I am looking for a representative in the United States, Canada and Europe who will be working for me as a part time worker and I will be willing to pay 15% for every transaction, this will not affect your present state of work. Someone who would help me receive payments from my customers in the united states, I mean someone that is responsible and reliable, because the cost of coming to the state and getting this payments is very expensive and time consuming, I am working on setting up a branch in the states for now I need a representative in United States who will be handling the payment aspect for my company.

These payments are in money orders and cashier checks and they will come to you in your name, If you are willing to WORK as our representative, All you need to do is cash the money orders and Cashier Checks, deduct your 15% and wire the rest to my company cashier here in Malaysia.

If you are interested in this PART TIME JOB OFFER, Please get back to me as soon as possible and send to me the listed information below:

1.Your Full Name:
2.Your Full Home Address
3.Your Direct Cell, Home and Office Number
4.Your Age, Gender and Present Occupation
4.Your Marital Status

The only problem which I have is trust, It will not cost you any amount, you are to receive payments from customers for my company which will be sent to you by FedEx or Ups from my debtors, which would come in Money Order and cashier Cheques depending on the of the payment my customers wants to use, then you are to cash it, deduct your 15% and wire the balance back to us.

NB: All charges to wire the Balance to us will be deducted from our money, so you are rest assured that you wouldn’t spend a dime out of your 15% or your personal money.
Thanks for your assistant and God bless,
Mr Kim Wong
Kim Wong Trading LLC
Lot 925 Jalan Kepong
Kuala Lumpur 52100 Malaysia

HEADER:

Return-Path: <mr_kimwong@etorq.net>
X-YahooFilteredBulk: 211.154.152.136
Received-SPF: none (domain of etorq.net does not designate permitted sender hosts)
X-YMailISG: yoXgebkWLDvhvSfGpf994bmowTFZpMDPw.1lseHkGA6T1SnA p1t3YxvxJS8N8EA6awflpA_S2QDZLDNMysomaZ_MhaETYuaVnjK1VCJfTVKg GS9W.3ZA3E0Nh3jVpAmuwHhVIFDW4md6Ih9TNntrWk8ZC7..jVHc9sonfVfW kOEygm8wmiN5oXRKB.x2mDSGgaNgpBu41IjFp3gBszrQIbsrDvNrrbX9uTH_ p7Rmx_l0Zrnd9FnqK.6C.zDTZyUuBsTQzCnWsM8tN1i_VRV0x_8_U6RqsTFm msR1VVPtNvDefm9IQjfYvdwJi5u2l5cNzeXjhEbiJmh2X_yK3vkalx4gjUjh AA_sYJdx7rgzLQ4_6TUXm96XQ0h4Dj_q9q4rAkf4ng0GzIJuMbhIWz9SSyc9 ky06NEAdJ.cBOsYY9pgrcAknG7Y1E2ecsvgQVSvIFQkstnNfG6BfSLt4dUe5 P1m.zXjK0.Lt9okfVcAJD33H_m0P1BCnItM4qwEFQmK91MxCGzCumuWqjPgY mJB_mcLtk3GZYcEf5z6pgS4q0NcL5BxMZ9pRg2jSIh6L8.EofXjDJ0QLTH2F oIvu9VLDtSm9CGm4dH3bF.fLuKCzPWcIR0W.cTJ1lx5E6.3cSpC6tu3xvrKT 3wtlgnidfUeFjY_B40NbWu7gSyUVmUYqSZcI53AkvjJhGr8UVgQZeZQz3_dF G3IKjw1ZbJO_m6WGSUENcg71vx7nFW7LeSncqg_yPEKXpNHTZoqUy4vNPlJB .edCKetnFzhsNi.fpSYxgKwiY4zAB7lAAnGVv_LTSiuNHY8Gq4_BjbG7TUVh 1jEbBhPSdv6h2Xn2d_a7_wluSypmlmmijiwoAyjJIzXIQRxOGyAQUpLNt3ic kidbPtvVlp9C5BxHHlSC4l_TaH2audAFdA61K6KkLpVzKbs7aDlwAG_4JY.P eHDCSLcxciwXAbIVMDhDjZzvgAxY9jnt1sY71l7n7d1dl6ufMrE_o0_qDe1j gk.030j9Eoh1E1ERfEHIOI85Czc2grhxp1jZP1GPEcz_HcFqrSn_eKAq.2ab BfXWVSKD5C53t6ibYYh55uQciKnQjLdW1DfMxvcOadU56IUCpJhN_X3tzBgB Vq7jtWkEC6p8UoTEaiFTL_bWrElyr4fvGLTgBOPVxMvn1t.ZmSAZquSUnn4E qSyewFfWh_6vi30xuvWs7yvkhvzMwEH_vHf6qrBNx2h8JRqQ
X-Originating-IP: [211.154.152.136]
Authentication-Results: mta1468.mail.mud.yahoo.com from=etorq.net; domainkeys=neutral (no sig); from=etorq.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO mail.giantsea.com) (211.154.152.136) by mta1468.mail.mud.yahoo.com with SMTP; Mon, 08 Oct 2012 13:09:44 -0700
Received: from User ([82.128.3.119]) (envelope-sender <mr_kimwong@etorq.net>) by 211.154.152.136 with ESMTP for <pondillobelle@aol.com>; Tue, 09 Oct 2012 01:25:27 +0800
Reply-To: <mr_kimwong@yahoo.co.jp>
From: “Mr Kim Wong”<mr_kimwong@etorq.net>
Subject: Your assistant please
Date: Mon, 8 Oct 2012 18:24:46 +0100

FROM: Mr Kim Wong mr_kimwong@etorq.net Reply-address: mr_kimwong@yahoo.co.jp SCAMMERS THIRD EMAIL-ADDRESS: pondillobelle@aol.com

Why would anyone need three fake addresses and fake IP’s just to send an email? Only scammers go this far to confuse and hide their identities because they’re cowards who lie, cheat and steal 🙂

 
Leave a comment

Posted by on 12/07/2012 in Lottery Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

A list of three scam emails

I’ve compiled a list of THREE scams that were sent to me back in September 2012 and they kept getting pushed down in my spam box. i’ve looked up each of these scams and they ip’s and/or email-addresses have been either blacklisted, reported, or both. they are 100% scams!

______________________________________________

1) Mystery / Secret Shopper – JOB SCAM

EMAIL: Work as Evaluation shopper and earn $500 weekly reply if interested.

HEADER: 

Return-Path: <rbud743@yahoo.com>
X-YahooFilteredBulk: 74.208.4.194
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: AKqJ9t4WLDuLDZ8EZZ2u3Vhgs2RNEh4aXjZ7kSSWXBbVAv27 JuBiH_aCg6MvjBaLtMO.0JhXLKpM8ii1YEm8h.bFObLns4nMQlhEuIaOypzf YAFLEAhgf2YH3_pDJA6RPA1iH4GD82FsJ1hxzx8FwLfw9flBPA_QVArVHg_h m.nDYlX6pFBPN1kN5BXyTwsrpS8DrWxf5h9pc5u0ORutRWVmmWxtyTqongzC AZxsQhOSTAeUSgJlrWrj13kGVmyz5egnbmw71fMxby9dLjhQZ_I.65L5aVED uaj9eUARz5uXxA9Nr98SIEpyTsr7qpzboLTSAxZHGXwTxG6WaoqigWyqxPNB 8tkNBi2aZZc82kCiAZ6y4bIJIsGVQv2KbAzEQihTxZ0q8zpkpD1LLH1PGih5 a82YTC.4HsC2HXhwZeUKptTF2_JEKlnhXNn9tegHb3_vx9h2hx5nH9JlZDF9 GYjXQ4BHx8UFQ8IpAAB3lKXN1Rl1l82cHtG2x9XSWas3T71G1EnTjIW.UnJL 8Wy.OICrembxbDZik.cv_yj_7APLx4POhhoSXnmOkgg1zWZfdqVRhjOw.Pk3 qruW_GaAce8POox4vtMRUHwd5ec1p922vVYgZmceTMr2KgfAT.ALodh_crPy wYcjUG_wpNMK3q5_QGyhnzcLNz.w7boX6vI9rqYnVC93nBK6jicjPHfE_p09 EQN9gYTlrmX_OkOhZtosYI9CjI4d7awR.RjWmpFiU7w7gZSVuSbNvej7_dPA QR3_BaQXgMfbD9f9Bcd4BBm6Ncwo3hQI8pYMJMaJxjZTwQGiLQSHOAWgk1bE 3PmyPCxH2BUw6B4yjRwPf32ee.qd3yU3c9T60ZaYsOKq8H2oC34IphIKeX9c Zp_CGasShwklc4Bc6J1V4dNHSpE91ybvbKiK_QCETua1O.Jnn_BmFO.X0tBW qvW8MSKLQI3dxIVuxVD6wQqjdrlbRjBOsZTXa0ZNYeWBxEkbDTAoHvqm1GkO qOC1bLUtx2b71g3GZpPxGQb_WUnhoQRtBAtFRiB7VJj.vQ6jFEI6uxk9DeQm iEjd7zK4s4139xO7eIBpSSEy2oaUzqsEtTavLSA6KHgB87t5IQtPA6aCdsE1 3iuDjHCuQ_Tx2tw0UAgnKWm13UKA6QV84.cN
X-Originating-IP: [74.208.4.194]
Authentication-Results: mta1236.mail.bf1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mout.perfora.net) (74.208.4.194) by mta1236.mail.bf1.yahoo.com with SMTP; Thu, 27 Sep 2012 05:37:30 -0700
Received: from icpu2633.perfora.net (infong656.lxa.perfora.net [74.208.16.162]) by mrelay.perfora.net (node=mrus1) with ESMTP (Nemesis) id 0MNJ6P-1TO6Ag00Cn-006tJO; Thu, 27 Sep 2012 08:37:29 -0400
Received: from 64.62.210.227 (IP may be forged by CGI script) by icpu2633.perfora.net with HTTP id 3pIPGX-1TlNhr3xrB-00o06f; Thu, 27 Sep 2012 08:37:26 -0400
X-Sender-Info: <154550926@icpu2633.perfora.net>
Date: Thu, 27 Sep 2012 08:37:26 -0400
Message-Id: <3pIPGX-1TlNhr3xrB-00o06f@icpu2633.perfora.net>
Subject: Earn $500 as an Evaluation shopper in your area.
From: Secret shopper <rbud743@yahoo.com>
Reply-To: bunniebug@gmail.com
Content-Transfer-Encoding: 8bit
X-Provags-ID: V02:K0:q7XGMi78NyFU2vB+AV5/lUFl9H98ItYD9tLebyHhAA9 D0m97d8zgZKfxlxuq9UDrMJegI60FkR/i9yiR6s+ClfFhTdW82 rAyxkW0MOpaOrk4OGp145YpcbEzlvc2VFiYRQ/rs6aB2qcOPN3 NWsuAhg3PAiNdEwA6dwxoRHieSsNCys0MCLKU+1KwF9t3ityOb +0h6hFjTSFQcDRe/zyg06xnSxE3maK6IsAX2Nd1M4qbEFSyI9i 5Fun6VBXSQ6J+ZAUIsFI5SJ89/OaBqUYBkxv20+wKWBINPrD9L DG+HtYDgwRcz0KeXzqNl6gn4xUUQtJvPCBgosLOpKvKwgM7+xm b8vfu2v3JIk8MzEz+GiIGqRcrSOI0MNEZ0pg3V0jcmYI6z5qOg uRKeU9ng+gFFtzlnhdhW3SfwBG8kAe5MbgLNhihFFOcitw1pvf 2JJM8

Secret shopper rbud743@yahoo.com – Reply-address: bunniebug@gmail.com

______________________________________________

2) INHERITANCE SCAM – NIGERIAN SCAMMER

FROM: “BARRISTER IAIN WRIGHT” <barriainwrightchambers@yahoo.es>

EMAIL: A “Next of kin” file was attached to the email I received in my spam-filter.

HEADER:

Return-Path: <barriainwrightchambers@yahoo.es>
X-YahooFilteredBulk: 98.138.91.65
Received-SPF: none (domain of yahoo.es does not designate permitted sender hosts)
X-YMailISG: M2_fjBkWLDtzFm2rFbGuKofV838RG80_qXL6ZuDED.RFpUhN QzoD5j712gVhOoEJsZ_uRf.2zvCTUEDGuBwy7ek.Z_cs1.Ow_uuIMz1W0KW5 jz3j8cAvY4pVwyF92hL8sb0bk5etdgQljeePH7D7H0t4.QwwJ0D3rZLAmRtX EA.nsroRjdhC77B3fJekjgoYlRDbjEQ04x121ZVEfEWe.3fW5SyxaTfR4KgF kzRSvkuZWiHMl.95_MNF52w6FlXZe0s57mnJ39QygzPNuwxz8r9ltiLrDxzW CEcFpO9AFuqw8nCW_R1XtK6G1b6huW8ePJC.leD0fnho.XtvHjoDVo_y2ZfO WqNr4Oio3P19odWSC_sGQEZrl0EM.EkuUagsnXV7xRvQu0jtqShpW31_Z.tT Js6CVCXWfKboozjD9cQ3Gw5bIsAuPseovHYlMJDKjcPbBvIYONMkwcJm7g2s 0kCNA.NZ8XAplJwzsrfD6kozvvEtlBUiYF3WgpuwanpG5wdit6Ji_PU9PfOC K1Yz9q3yP.kaa5agusvK9DslBIL2BI1sE8wAmfxOndoXnT_OBg1A89tKyHvi 1NU.rgxEXocZHUvCmOi6finC8JS_HOXotztzI3k1UAF3p7LtuGi1rlULN_t9 ZlqKoyi9DKSLjJr7mmT2JNYk3Dg.8I.Ufm1UafFyn.vMw8Leij6Hz2bF2v4Z iDKSJttG_KsvKA8BBFrV4D29WitXnXW952k5J4ki0t2MJGF_52sryyhf4Xbc V5VMk8lFNV3RnVxbzFZ4F.Giex.EZykeqvgYWpD19NU_Aa9Bl_Gj6jfDvnBA VxjF4ZQdNb8ILQC2s7WQ5xxYqTIRJSny3nDVLHk0CsksYsoQa1ZsyQcnzmlD .BbVo322yE5eFDLysimD_pbd9GGtPqvHK0oFnA87dDQ8m6EwoczOZyq5MLZh 6ak6I15eZdeXgBCGjDot4PbER8YPaczjKa1gS35fSifWN6mdVTfrENbi1KI3 trybU9EqYKxs.Fpi7cVpEvg3_7dDpGnTc4sHhBRgEdf1RHq4SAIt4iYl59iZ dPLvX48BTVkdm_jRpF_bSsX18FONqMeNma.2vF7zQyPEos7t9v.zV4BCFg5K D8KR4VuGmgZUv0rs9LTQMcmeGz5EdaudBaAQNTIdiFhnYQt4ueJdCwRRX.iJ 4itjVlPHvxCwCSOCk2pTW.fWLQ6tzFDa0wLErfkvjqPzSZQlvl5P_dKFrKkU Qw2FXmcwWByns0lIRh4e
X-Originating-IP: [98.138.91.65]
Authentication-Results: mta1268.mail.ac4.yahoo.com from=yahoo.es; domainkeys=neutral (no sig); from=yahoo.es; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm8-vm1.bullet.mail.ne1.yahoo.com) (98.138.91.65) by mta1268.mail.ac4.yahoo.com with SMTP; Thu, 27 Sep 2012 04:58:00 -0700
Received: from [98.138.90.50] by nm8.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 11:57:57 -0000
Received: from [98.138.226.126] by tm3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 11:57:57 -0000
Received: from [127.0.0.1] by smtp205.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 11:57:57 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.es; s=s1024; t=1348747077; bh=hGsZAt5nOQ2q54GDVUA2RwhZC83Cp9+/EC4wFdxVyYY=; h=X-Yahoo-Newman-Id:Message-ID:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:Received:Reply-To:From:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=MoAzd3e63PqKFngqb3VCbC/Uo5orULDk1RIM6/2B2RYLBM6h8uptxC+sRFQJ5iLRKi39kay5dKraN2XrKP9u9wtXAlDdkFnIeciEVnV6i7gEZEbsYRdtEOasJq/ybFCUCe0XpeR66OnUwYqE/p86ZL91DAWHBLrkFvdalJQMAxk=
X-Yahoo-Newman-Id: 947141.79026.bm@smtp205.mail.ne1.yahoo.com
Message-ID: <947141.79026.bm@smtp205.mail.ne1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: rcoOjawVM1mWxeqldCK7BSKWgrYcBs1inBlj1z5n9ltVGqo lXNdgbkjin6Ym0hriCxY8RhKC9z3UHynFaVcypefuZJk2AfXmrAilKSE4vb5 KeOc2ioP7iy1rfjaZZVzV.cycy5VbHL7AbItmNPTqrNiyjcb6iaEiRVHxvik NfO9dnBB94DVyHbVr29ZagMutfYnQg5KSy5ewpvMP4MtcfN2sKjatIfTNS4D L4jPTAEBbDvd5mh_QaFWkJE3.eudqrsdxkVy.YLapxZkLJyfub4CI6iGV9HD D4elT72CmoNh.KfYjif0wZS8DIXtc0oDVVaNR_ovjQW27WIB3VWtwpk00VZ1 0wK_SM7gHK.xJVFiu3aG.hYTYe8.gByUW0F44tzkpBVsFkSYXI9zlI5KUuy_ pkATHZ1qonT9DuCxgQgGPlMDlUztCamZhoye_.Bt74oBCHBS2vEhHI0yvsVg X93Q9Qaw5R_gx8iEan8y1B6IR9ErqB9iC43JStRYaXZmWkR0-
X-Yahoo-SMTP: bFYQ04.swBA5PmeNAjXtnC8HS1fNQYaHrFuwM8HILFjy
Received: from User (barriainwrightchambers@41.58.49.104 with login) by smtp205.mail.ne1.yahoo.com with SMTP; 27 Sep 2012 04:57:57 -0700 PDT
Reply-To: <iainwrightchambers@yahoo.es>
From: “BARRISTER IAIN WRIGHT”<barriainwrightchambers@yahoo.es>
Subject: WITHOUT PREJUDICE..PLEASE READ MY ATTACHED LETTER AND REPLY

REPLY ADDRESS: iainwrightchambers@yahoo.es IP ADDRESS: 41.58.49.104 LOCATION: NIGERIA

______________________________________________

3) BENEFICIARY – 419 SCAM

EMAIL: Hello, 
I am Mr. David “Dave” Darrah the Assistant Director Inspection Unit/United Nations Inspection Agent in Hartsfield Atlanta International Airport Georgia USA. During my recent withheld package routine check at the Airport Storage Vault, I discovered an abandoned shipment from a Diplomat from London and when scanned it revealed an undisclosed sum of money in a metal trunk box. The consignment was abandoned because the Contents of the consignment was not properly declared by the consignee as “MONEY” rather it was declared as personal effect to avoid interrogation and also the inability of the diplomat to pay for the United States Non Inspection Charges which is $3,700USD. On my assumption, the box will contain about $2.5 Million to $3 Million and the consignment is still left in our Storage House here at the Hartsfield Atlanta International Airport Georgia till date. The details of the consignment including your name, your email address and the official document from the United Nations office in Geneva are tagged on the Metal Trunk box. 

However, to enable me confirm if you are the actual recipient of this consignment as the Assistant director of the Inspection Unit, I will advise you provide your current Phone Number and Full Address, to enable me cross check if it corresponds with the address on the official documents including the name of nearest Airport around your city. Please note that this consignment is supposed to have been returned to the United States Treasury Department as unclaimed delivery due to the delays in concluding the clearance processes so as a result of this, I will not be able to receive your details on my official email account. So in order words to enable me cross check your details, I will advise you send the required details to my private email address which is ( davidddarrah@zing.vn ) for quick processing and response. Once I confirm you as the actual recipient of the trunk box, I can get everything concluded within 3-6 hours upon your acceptance and proceed to your address for delivery. 
Lastly, be informed that the reason I have taken it upon myself to contact you personally about this abandoned consignment is because I want us to transact this business and share the money 70% for you and 30% for me since the consignment has not yet been returned to the United States Treasury Department after being abandoned by the diplomat so immediately the confirmation is made, I will go ahead and pay for the United States Non Inspection Fee of $3,700 dollars and arrange for the box to be delivered to your doorstep Or I can bring it by myself to avoid any more trouble but you have to assure me of my 30% share. 

Mr. David “Dave” Darrah 
Assistance Inspection Director 
Hartsfield Atlanta International Airport 
574 Airport South Pkwy 
Atlanta, GA 30349-8642

HEADER:

Return-Path: <pop@allencountyohio.com>
X-YahooFilteredBulk: 76.2.207.6
Received-SPF: none (domain of allencountyohio.com does not designate permitted sender hosts)
X-YMailISG: EUAkKlQWLDtsLHISUQeKpcEKYRzqJ7wJNr_C7p9ML278m16_ Za6J9Pq_buEhDSzzga9w7u3z1iiVkG7gWd3.2GgTG8oqtDYIY8JzWTuAyM.W WLRMqYmljQmJWsOxzbD8S_fg8qHSwLKsMrgjFNK__hHCWl_OkV2lCszsEvIo k27rgsD051sETLW6NnPpM5Y0gQvMg0ZtrVWFgeC.9GTGxpsgbdMFgmTRfqmM pheXss97gqtPwEg8Visf4uC1SekpoOiJm3EwqEomx9xhSJT79hjaDWhgzH6_ COw4PblMM0YnLd9ye88K602PP4Itc87alAKLw9aAh2N61EqrpnDdzqGvP0PZ HfeXg75.3G2CXJAiHD0FHo9JgFp7aG9KyBmrFWRU5648VTW3mDKWe2C25sU4 98uMND3e3IyyDdn1_MHnUp537ptCYyHU6paAoF.omX_bckCR1_VtbfFifDzv _3ILiunWcszXX50ipE1PPMoucSObhqP4Gc2UPSwgz1IBcjQ.YxxbHwcsCz6h vUw3MG57kjqDaJWcy7ip0UHvAnkL64hsG8UKNWHQFtXI3hKpZmc7pOZN42Ai SiJass6CfuEA_t0BXQjGsOrKMoSy.baT7g5EOOpiLtalKToSBZ2KQUBykov1 ODt408PwIyv_UTtB9Vn44XSBJRdE1pVeBwI70kTBC7XD7iU5RfQEau1BG5.8 .QV9vamuNCWep66Ro4xk67qxP6uFL5Q7AbQkujfaZt48c9Dlqae4ZQYuBY58 q4tchcGcICVFhqNUkkDxvwp0xBFxpRplgsJNrg4cKiYTWNQjtcDifMnu.4tE ZMaxugmgEuDm_fMvwqdzJ4sSf29PXJGtI5UserjFwSqYNUhP.PdnaRPwmsvj MeNyxMnzF79dlwPy5dvtSHHyshVxes0Kav8q7gwt8IvbjDFCPrQs2yYehH0W 63ywC7.8X7qlHDgqBcijwuALY9.aI79s77ktX.3z2ITl4YjnXnLRnar5.uhg FL68BNGEBL889saAu6hE0kDLmVkjZ8.COuqfoJc2bkgkT_..DnxIummB1vyv _xT9agrwPBPnUSAlr4CuMCm0hNl30RlWKczWH5sSV1o72hzr5Y6aQY.ZV2Gi .miiKTWsDm1oPmRIR1XtGbCqdrWipNC0MDw4U_NDKhgsqe_vSZC.4xB0.FXJ AmJK6BheyqKbdPqbEmwIQJyDDTBZQlC1QR_m0qgumrsxGuM86obaeiFMLugP M0KnER8ZIyhxrn0ZYCLRCkBF7JcP4l1ZQ.x9pI58fA8YQXHL2.e.Uaqv45PB nW1q.c60yFPROZVrD0jAphIl74s0LojMk0tLhgnvWODWpMVigRHIQXPjwC3N CkpHlCjBQGVFLSppGYFJdqcLxysTIF0ZfcTNB6jwLcwa7EoynkQahjiudRpm _rJngrLoamoCJcV53j5adQ.GLSpkcTsSNjZ6fBDmjeEnr5sklf7302qx3lGz m6UkBOA_.jgAksqlCvX3yDdeNH0_gwNaP.eqIvVP3pOyD7d6glmnjQVHKsr_ ARaX9Yl5LxZKu9MMZFP7uGcbf7L9Ei_RlRJ6UU2F5Q–
X-Originating-IP: [76.2.207.6]
Authentication-Results: mta1089.mail.ac4.yahoo.com from=allencountyohio.com; domainkeys=neutral (no sig); from=allencountyohio.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.allencountyohio.com) (76.2.207.6) by mta1089.mail.ac4.yahoo.com with SMTP; Thu, 27 Sep 2012 01:35:25 -0700
Received: from localhost (localhost [127.0.0.1]) by mail.allencountyohio.com (Postfix) with ESMTP id 2D621122C8C; Mon, 24 Sep 2012 13:25:46 -0400 (EDT)
X-Virus-Scanned: amavisd-new at allencountyohio.com
Received: from mail.allencountyohio.com ([127.0.0.1]) by localhost (mail.allencountyohio.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J5DNgyAg-5Go; Mon, 24 Sep 2012 13:25:45 -0400 (EDT)
Received: from mail.allencountyohio.com (mail.allencountyohio.com [76.2.207.6]) by mail.allencountyohio.com (Postfix) with ESMTP id 8E249122A27; Mon, 24 Sep 2012 13:25:35 -0400 (EDT)
From: “Mr. David Dave Darrah” <pop@allencountyohio.com>
Reply-To: “Mr. David Dave Darrah” <davidddarrah@zing.vn>
Message-ID: <683849525.104969.1348507535471.JavaMail.root@allencountyohio.com>
Subject: Await your Urgent Responds !!!!
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: [64.250.124.220]
X-Mailer: Zimbra 7.2.0_GA_2669 (ZimbraWebClient – FF3.0 (Win)/7.2.0_GA_2669)

Mr. David Dave Darrah – davidddarrah@zing.vn – pop@allencountyohio.com – 64.250.124.220 – 76.2.207.6 – 

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

Video

419 The Nigerian Scam Part 1

Documentry on The Nigerian Scam (part 1) — to view the second half of the video, click: 419 The Nigerian Scam 2/2

Every year more then 50,000 people from all over the world fall victim to the Nigerian Scam also known as the 419 scam. Usually contacted by email with a employment, business proposal, lottery, etc or on an online dating site by a romance scammer.

The 419 scam is the third most effective industry in Nigeria and has earned an estimated 5 billion dollars over the past twenty years. Many officials, including the Nigerian Goverment, are believed to be in on the scam.

The victims lose their life savings after they’re served unbelievable (fake) stories.

Learn the signs and educate others.

 
Leave a comment

Posted by on 11/26/2012 in Uncategorized

 

Tags: , , , , , , , , , , , , , , , ,

 
%d bloggers like this: