RSS

Tag Archives: London

MR. ANDERSON SMITH

NIGERIAN SCAM – BUSINESS PROPOSAL – FRAUD

There’s an update. This scammer responded to my email fairly fast. The response will be under the first email and header. This Nigerian scammer is using the same email-address in both email’s but the IP’s are different. Also the first email has a seperate reply-address. (The headers are under the emails.) If you receive a email from an unknown online-user who is using the same IPs, it is a SCAM!

Some of the newest names and email-addresses used by Anderson Smith are Lara Frinch – Lara.Frinch@gmail.com and mikesbikes445@yahoo.com

Online-Fraud-Scammer419

EMAIL: Dear friend,

My name is Mr. Anderson smith, branch bank manager here in London. After several official investigations of the foreign trade office of our Chambers of Commerce and Industry, I decided to contact you directly for assistance me.

I am interested in transferring money to your country through your assistance. I am currently in London and I have the sum of (6,850,000 U.S pounds) I would like to transfer to your account and invest in your country if possible till i finally arrive to your country.

I made this money (6,850,000.00 pounds) of my earnings in excess of the branch for the fiscal year 2009. I choose you, because i have nobody to trust, I am working directly with the bank,

Hope you can understand my situation and help me receive the money and invest this money properly, as it is my only hope. You will receive 30% of the total fund as commission for cooperation sympathy while 70% will be for me.
Please kindly get back to me ASAP.

Best regards,
Anderson smith.

HEADER:

Return-Path: <apache@vip.anoweb.cz>
X-YahooFilteredBulk: 46.234.104.5
Received-SPF: none (domain of vip.anoweb.cz does not designate permitted sender hosts)
X-YMailISG: quoIs5oWLDtqEI2w5diwi1FJo_dDU.jRfti4siTkZH255XPc 1fNvfBMfUAOuxp1rXDnPP3uC_aQG.359raYZL8atr3YKpFYg5NGwMFQ9.MhS nkjv.6hjGm4S0.Lrq8x6MvudMH7hYeE1GxM6EnTdlqsmO_7VKcyIyam7GurM c9wg75ObsLunIKw37MD4WZ9S.Cdlh5AYJTYDcDsqB5I9CB6fKsKK6Kibkkiz QlkZiq7BUy_bgJB7QhxFoW146ByFcymPRgixiKeEPH1KEPc9v8PJbzce0Qk0 BO37Jeuf7jXj6ZVwhRa87PVWen0r3z5diFOWHAQ7ZxThzTm_RwMJ70fNTgHP kIIdReN8JIQvZ.hbdOf_xqwN5O8w9.KND9aMgUzWoMQawrXn..upuYMdulVA BLJjhJZgkFmw5xCjGEdq48.jFnDFG_0fDNQfb32v2zPk5HgJ9C_r2pJ2p5UL hEru5SSQPUQrDRLEHr4Vs4jEBmETjMe8liGFaOyvP8lt8AgeClcZkmC_y8Jb O4n.Z4UjPR0kL4Baz5TRDWhCKxlCOufSU5GzbJt1Ligv3A5htNxzJNaxfSbq rTGYpTp7GGNcU3ccKefags.SlVOadcx_Ts3h_aAtIsm8SAMJ0N4clVPxFlWS cUarnKH_sktj8OPr_o1YK9RXJRGmNUq0aZSkRzsFVXPaHxw_0wkE2LzoxXkf aBHhs.cW2fccOAdkYd3SszeUK_44o30IgzqGSeGNVpKNVD3fXE5ybc.eAeHv 8jKpvP_EapZwF_NlTakeHN1Vpbm1Ov8cMfAuAx92CPhMccJRfR7kVTMcJNmK RD3_4undKjWCE3MHEImKXL7P6WC3_NhnsPos8cSW0KzSUSk7ujhwhHr_Uvf3 gXDtSR5QR_QeCfnq3JbUoBc9lyjqFSzUNQY3CwjyqTN9BqYlnxu7AZGUkN21 1jFDoZsYLtyR8ufxFC.5Do_mrjGuD7jDW8xAin1U2X8tQTyrILEgtYCNLiM7 1s36Ubo2WN9_xRpvsMmzfKE9FXGW65QHcB_PkLkIJ73cS.uvdlPaZ7OGZaAr g65EZUWMJXGp9yoUJvukkxwuQnHlk0iORKCtJr3LumIgMcY35uvjVw7mfhl7 A4xbvltEy3zMVsOBpm13ROd3sr7T9PlOFU8oYQBKB9qH3f41U2ER1FeroBUl K2FB9xByUmUaGxeMByQr0riVSA9ygacQrSwY5LAXDEQ23Xf4PjzFRBZFUVRv s.bmrx6TJzLhLNHs5pA9OQfsleDAIJTlsQvVvRQHWm9z6fFInXE4QNg17Rgt esIQptLH8Yzg8GX1CgRxDa5aQPSPXaFiAzX0uDgRGQejQc_ujFJLKkWU6Dl7 zSyTMFqOiTylTUXNZLvrOLmJgkoMN.sEYILx6_54NY93xUJk0r4pi0kC4u4u Oofvjmy75InYFlv_jW.LFiwDjSYJYc0_pFzsYF9dU875VBOiZo9M9RP4Dzf5 054qQho4SSbKN_5RhDQjJq_HqA3aDk7l3Q5l4CYbXmf55JeMm8zv_vR6EP9R iTK0QbPOrt3NpR3JV0EEi2Jwciic9yYs43.3.oDfnsQM2G3w0vucBPdSY0Ry .b4rpAtXTfaRH4u7j_uTByZHCNYT98IEB8dkv32r
X-Originating-IP: [46.234.104.5]
Authentication-Results: mta1004.mail.gq1.yahoo.com from=; domainkeys=neutral (no sig); from=rocketmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp.anoweb.cz) (46.234.104.5) by mta1004.mail.gq1.yahoo.com with SMTP; Wed, 19 Dec 2012 10:18:14 -0800
Received: by smtp.anoweb.cz (Postfix, from userid 48) id 5B68E6B0D5; Wed, 19 Dec 2012 19:18:13 +0100 (CET)
To: new.horizons322@att.net, thebestsweep@yahoo.com, missalisha08@ymail.com, dezy2224@yahoo.com, morgragedanielle@yahoo.com, joanna.sweet@hotmail.com, adenelly@aol.com, pratherjck3@aol.com, camillephlps@yahoo.com, cs09jedq@yahoo.com, baby_pmpn@yahoo.com, kmiller182@cfl.rr.com, kayladaniels90@yahoo.com, lisaconradi@gmail.com, confidence07011996@live.com, poncallinfo@gmail.com, myfamof3@gmail.com, kjg36@comcast.net, missrosesdaycare@yahoo.com, cooljet6@yahoo.com, anged98@yahoo.com, cowboydad75@gmail.com, crawbox08@gmail.com, sacpr210@yahoo.com, khusfelt1991@yahoo.com, dskupien@delawaresafetycouncil.org, primaryyears@aol.com, kidz1st@gmail.com, bonclaude1@aol.com, millerv25@gmail.com, krosieone@aol.com, poohcc07@aol.com, ironhilldaycare1@yahoo.com, bangelique95@gmail.com, truruler@yahoo.com, denisedr54@comcast.net, sromasko@verizon.net, portiabusaitis@gmail.com, portiabusaitis@comcast.net, dawnschafferman@comcast.net, elevatedplaceslearningcenter@gmail.com, gerlacht00@comcast.net, melissalee1209@hotmail.com, valdave@comcast.net, rgoo135623@aol.com, baybeesteps@msn.com, rhino_07@comcast.net, mseekids@yahoo.com, faithshouse@live.com, jeanneflynn59@gmail.com, rachel_vigil@yahoo.com, gspederson55@q.com, ptrcgzmn@yahoo.com, thomasjohn1088@gmail.com, earlybirddaycare@gmail.com, sabrinareiman@yahoo.com, letmcg@ymail.com, brandon.carson25@yahoo.com, christinamauro23@msn.com, katielewnard123@hotmail.com, porkyexposed@yahoo.com, mgfbower07@gmail.com, lonniejbeard@hotmail.com, aklittle0102@aol.com, jennywarn@live.com, leyadewey122@gmail.com, neen062964@hotmail.com, info@need-a-nanny.com, dork_britt@yahoo.com, tinytots80123@yahoo.com, caycestaubin@yahoo.com, ivana331@gmail.com, tstots@hotmail.com, bballvarsitygirl@gmail.com, alwaysforhim2@gmail.com, degutii@msn.com, tiffjowilliams@gmail.com, patriciacallan@msn.com, albanesi@dmghost.dmg-hosting.com.ar, mr.stephenfred@yahoo.dk, deleted@yahoo.com, vikhadd068@aol.com, 52151792.8536.1355816108626.JavaMail.zimbra@core-mic004.r1000.mail.aol.com, 1355816106.93122.YahooMailClassic@web161004.mail.bf1.yahoo.comx, stevesplace47@gmail.com, Stevesplace47@gmail.com, Stevesplace47@gmail.com, Lara.Frinch@gmail.com, mikesbikes445@yahoo.comx, ikenna.francisco@yahoo.com
Subject: CAN I TRUST YOU?
From: MR. ANDERSON SMITH <andersons70@rocketmail.com>
Message-Id: <20121219181813.5B68E6B0D5@smtp.anoweb.cz>

“MR. ANDERSON SMITH”  andersons70@rocketmail.com RETURN-PATH: apache@vip.anoweb.cz

RECEIVED IP: 46.234.104.5 ORIGINATING-IP: 46.234.104.5

_________________________________________________________

SECOND EMAIL: My dear, i work out this money ever since 2009, and kepted in my costudy on foreign trade office of our chambers of commerce which is the sum of 6,850,000.00 pounds , now is due for me to invest with it in aother countery for security reasons . thanks best regards ANDERSON SMITH.

HEADER:

Return-Path: <andersons70@rocketmail.com>
Received-SPF: none (domain of rocketmail.com does not designate permitted sender hosts) ZXkgZXZlciBzaW5jZSAyMDA5LCBhbmQga2VwdGVkIGluIG15IGNvc3R1ZHkg b24gZm9yZWlnbiB0cmFkZSBvZmZpY2Ugb2Ygb3VyIGNoYW1iZXJzIG9mIGNv bW1lcmNlIHdoaWNoIGlzIHRoZSBzdW0gb2YgNiw4NTAsMDAwLjAwIHBvdW5k cyAsIG5vdyBpcyBkdWUgZm9yIG1lIHRvIGludmVzdCB3aXRoIGl0IGluIGFv dGhlciBjb3VudGVyeSBmb3Igc2VjdXJpdHkgcmVhc29ucyAuIAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzM-
X-YMailISG: LRyUedUWLDuEKGcSk3zYpT_1cyHyR0yjpj.FtTQpTfIdWQoz 6hOLtSt4MWB379LFHqbP4kI61zSFdl0gmSw_mtOm6tp4vz.O.2AoAlkTV0cl yyOQ1YBaOaTg_QUs6UVnmOgRyL10zn0yUR2oth4MXbTCSc1zvjAOW4.VbrIs UBqtxzNWt.2GxrvfaZtUIuAh8jry3ymWMDnpbH_xtdiVmhxxwy9dBeKCCtbU OpnLPrUei6mZxji2gPPSAx9yxFHpetHf5LEJCzwQ0sbtLJqgLm7hE6GioUHM T3sYiGxoFLhKNlJW_STGNiRdKlzb5K3ju7cb5peSBlVbhpoCWUVgR7fQU10M tyAAfl9xZKDzrB1OAdVIjYv71RkVEoxWwWIWmzR42GBPnlHZ8Vw3QLCMhQTD BJtOOpnvojjUCI54uAaWVqct3z_hwDHnIwdt9CUXsTZ2OAjP.ekyeJjHgeIu 4MsJGNkaAT3MjG4TQJQkyiI6CKLbrtagaSwdrVDEMjT_ZifzPUXOzgQz7KjE Fd0bppdWRA2wZF9ZgmAMkGOFAo9EP2nrSddwiO8whYu7TyhJy1Q9Yuqne9_x 8Qg6qxBtcwHsD3Ytr5rvxYMAyx9IibIq5H_46qS19YFmZt01PZjsWem0VN02 U2TbcHIFhxAbpC7tgcTl7rQ65yEDfn4T5jYpDg1nwCAv.6qrhwQ1.AlSXgHg b9byqDGRnN_jV9WKT1bIgrWU9dTVCsz.SopKN6L2edRNnAc56NLzY2qCDQlK kMwIqa_ad207EuGaMdXv3gI7UpxcHkYL1CGBMZkI3B9tVm7MFFKeBrXWYECS _QG6r9bXgpmD4zl37dxBUN4ZcKMEWEhfAEOqj5Af12U6_JrxZmhdeMfji2g9 R1zE4diby79FAjiX2jBHeVVkKI5HsoPdbGKRHS4e3PX9PTWlgBEIyJmO.elg TyqJm4m355ifjoy5N23YuGFQ3QBCeB6yR9dqUQlvhyXtbqx6MUbRyCugWrBT gGIlRtj8QCuZLh9gyFqmLrd6wWW6Gk5smIh.AretSkY9AmzMM1rSU.Evdaca BZip7UHAnCRfquBZCNVz3CZLBPm1c.E5.9N0AKPJOqyCna8HGJ7wk_ug2bup .APCC870.xUN4nJng2fseSa0aFrPrx4eYzfn3W50xoQgDLzOBzXIloulCVGo TUwIizE6eTLpfdMVM8Mm0dyJUsRl1tQ8Qi4ACHsAaawR7SDA.40GEFYQOhwd 8NwXTzsnlymcv_g0TkEGz.8ywvIDQB7y2I55Vb9ySPr7jU42UAax8SsZgoNc n5IldS6lbFMxSQyqIRnpfqP_hkqcdgalU2HmRaKfnFQxd1MPwKB1x7weHiA-
X-Originating-IP: [72.30.238.133]
Authentication-Results: mta1220.mail.ac4.yahoo.com from=rocketmail.com; domainkeys=pass (ok); from=rocketmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm33.bullet.mail.bf1.yahoo.com) (72.30.238.133) by mta1220.mail.ac4.yahoo.com with SMTP; Wed, 19 Dec 2012 22:37:46 -0800
Received: from [98.139.212.150] by nm33.bullet.mail.bf1.yahoo.com with NNFMP; 20 Dec 2012 06:37:46 -0000
Received: from [98.139.212.250] by tm7.bullet.mail.bf1.yahoo.com with NNFMP; 20 Dec 2012 06:37:46 -0000
Received: from [127.0.0.1] by omp1059.mail.bf1.yahoo.com with NNFMP; 20 Dec 2012 06:37:45 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 983394.93577.bm@omp1059.mail.bf1.yahoo.com
Received: (qmail 41088 invoked by uid 60001); 20 Dec 2012 06:37:45 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rocketmail.com; s=s1024; t=1355985465; bh=hIuX9EQpddJQOZ9EDaBuOwIAcHGpy7QMrv5tWPdsbpw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=zIbvRivz3QuWN7YhPwDdZaOWV4gyIhEUB+7u/Kq8zoF7SJhyvFAG8AI+2+ZEHb4G7DiORcVbqxRsYMyuQlzBaFuGaPWWYnNagm2k2N+M/F84AA2zGoWN0qENmAFw8hjWGVWG+oxWe1fVSJs27AVpIj2o9vURXrvLEbg21Nwvrd4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=rocketmail.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=LUKJmnbo1jr1Sbw5+MZMQabwjO4OGxarNkbhF3O2Hb+AsBEmk8gAI63Tr+hOhZIa9Am9TBKmjyJXIM5OZyFv/LYGAm7Gp+qB3MT5w+Ml422tDOVVF+Q6IotBjgRhMp/H4Y3BrYmOF9iLH8/CH88zybApHQZSc6V8bI+bYZdQSaI=;
X-YMail-OSG: Evsuq8IVM1nbjMJ6AvLHwpkpa5bgwj0kN3XATctZqbpFn2D yd8j0zI5mvEmW.0qNafK.5FmeVPATijaW6ZMlxz8KoDvVPAzjhOhcWj5nef1 nksRvH9h6kUYqNxAdNUp0lKQ_WTIMvLD85Q6c5aIHB6hI3gzOzaXXnu_7K2_ RmzM88CSHD2keV2LIYuWYNMAjWg7fIHeTTowM8vkgbHT9Xmp4rHs1ARbkcAO dEyZIrA1_OkdM6zN7dvWMYGmq6g7r0pA9Suo.yxEqnPuB4mUe.1e8bnIyO0u Fa4CJDhC7KtSQLGMmRSIey7Hp.lghCHLzHDvMBM_LU380F03v35PHaTBI8uV DYnJYc0QFKT1D.xHjF8QQBAUfitlUrrt2pHbBhbm_EEfDJQDsgeUrZw3gz04 Xmr9U9EcJumVATtROzN8EnuXFyB.GTueaBztCKQVvSx9FhhBKYiGP3rFkQXI Mz9cUXN8rdQGEz96fiAdM74L_i3sLuhWm3rEpMolXNhQ8sjGItz4rzURYqr3 0tCjZFac-
Received: from [59.33.84.180] by web162705.mail.bf1.yahoo.com via HTTP; Wed, 19 Dec 2012 22:37:45 PST
X-Mailer: YahooMailWebService/0.8.129.483
References: <20121219181813.5B68E6B0D5@smtp.anoweb.cz> <1355977874.4870.YahooMailClassic@web161005.mail.bf1.yahoo.com>
Message-ID: <1355985465.30935.YahooMailNeo@web162705.mail.bf1.yahoo.com>
Date: Wed, 19 Dec 2012 22:37:45 -0800 (PST)
From: Anderson Smith <andersons70@rocketmail.com>
Reply-To: Anderson Smith <andersons70@rocketmail.com>
Subject: thanks for your email .

“Anderson Smith” <andersons70@rocketmail.com>

RECEIVED-IP: 59.33.84.180 ORIGINATING-IP: 72.30.238.133

 
2 Comments

Posted by on 12/19/2012 in Business Proposal

 

Tags: , , , , , , , , , , , , , , , ,

“HOUSE OF LORD’S ORGANIZATION UK LONDON”

INHERITANCE / LOTTERY SCAM – COUNTERFEIT CHECK

ATTENTION: This scammer had previously sent me a similar email on November 13, 2012 under the same email-address of info@lordsdept.org but the reply-address was managementfile1@gmail.com IP 41.216.50.32 (location: Nigeria) and 213.154.64.102 – For more information click: HOUSE OF LORD’S ORGANIZATION UK LONDON 11/13/12

EMAIL: ATTN PLEASE
The HOUSE OF LORD’S ORGANIZATION UK LONDON Have just concluded the meeting
with the board of Trustees of United Nations Organization and
Representative of all the financial institutions, The meeting that has
been for the past eight months on financial matters, It has been agreed to
release all long terms debt, These are the classes we are looking into:
those whom has been one way or the other denied their Inheritance or
Contract payment/award payment due to corrupt official services,

After our mutual investigation in the recent schedule for payment of
outstanding debts incurred since 1999 to 2012 according to your file
record where we got your email address; your payment is categorized under
section {B}: Contract type: Lottery/inheritance/ unpaid contract funds/
Undelivered Lottery fund, Attn: Beneficiary, We have decided to bring to
your attention, that you were listed as one of the beneficiary, The
executive council Have decided to pay as many they have their file record
on their desk on a direct wired transfer, The total sum of $5.5usd has
been approved under your file according to elect,

Contact the processing/paying manager for your direct payment of US$5.5M
(five Million Five Hundred Thousand United States Dollars), you are
directed to contact the International Remittance Department of Benin
Republic who is In-charge of the payment
via E-mail:
E-mail: olusegunoniwon@ymail.com
E-mail: consultationdept@yahoo.com
Phone: +229 674 067 42.
CONTACT PERSON: MRS. ANDRIANA U. OLUSEG
INTERNATIONAL FUND REMITTING DIRECTOR.
HOUSE OF LORDS BENIN REPUBLIC.
Also provide the following detail to her for immediate release of your fund,
Also it is very necessary and important that you send us an e-mail
containing your vital information?? As requested below so that you will be
given an immediate response and directives on what to do next:

Full Names:
Address:
City:
Zip/Postal Code:
State:
Country:
Present Occupation:
Company Owner:
Company Name:
Gender:
Age:
Reachable Tel#/Mob:…………..*No Voice Mail Service*
Fax:

THIS REQUIREMENT MUST BE PROVIDED TO HER COMPLETELY,
As soon as the International Remittance Department in your file location
receives your information, your US$5.5M will be Transfer to your nominated
Bank account. this payment terms is to keep a clean slate of all debts
owned by the government and company to individuals either by contract or
award fund, we hereby plead for any inconvenient that you might have
received by any of this corrupt officials, The United Nations Organization
will not be interested in your story of not receiving your payment if you
fail to abide to this Instruction.
Yours Faithful,
Mr. Anderson Paul
Public Relation Officer
Strand Bridge House 138-142 Strand,
City of London,
E-mail: com.unit@net.hr
Hot line +44 020 8759 9090
OUR REF: H/L/UNN/APXB/TF/08
IMMEDIATE PAYMENT
#:WB/PC/FMF/MIN/UN/APXB/08.
HOUSE OF LORDS LIAISON HEADQUARTERS UK LONDON OFFICE.

SORRY IF YOU RECEIVED THIS MESSAGE IN JUNK BOX IS DUE TO OUR SLOW NETWORK

HEADER:

Return-Path: <info@lordsdept.org>
X-YahooFilteredBulk: 213.154.64.102
Received-SPF: none (domain of lordsdept.org does not designate permitted sender hosts)
X-YMailISG: n17TtrcWLDsdDEuSkY_HSkT51L21bPdZBMwxi6AQhYevQE6n 5AHJGUMCXxFcQWA_8b.NyHFBqZMcO.UjZ8FCertxLymBdRPX5yB160N2TGnm qwaPHWExX39Nk3fcXAu.PafkPhJjSLuBXZu9PORr5C.y390tBzQRaxX_Ajeo 7Hur_RtoMBNsEKEcS1NY_jJ7MVItgwhEdNv6BMjqx_b1MlG92f5bS_CtuAVd .oh_JKiqCucKnJdR_vA8__9UE.1fwuLwZ2jBdATHKGRXWA9jdgOwV3Ib69fT EOd7eaFTWdb_5Z16_.TYe.j7ArE3IJKpEKIk4E3slNCtWmGIRFmTka.H7YVU kHIFWlOe90o2tvuCYr8RvUv71WE0TgPgVl6Khq6RD5q1jIaXuAGNiZL303nP R7TIfXxur5a8ZC_2oHyszcv9WRLQjWFSCzGvGQYUJrk_g_Fa1qrpUjRjeM2i l0G7FO2XeR9HCwaTT2znjIqPkdy2KwzEIIjCz.N4kogQKc2kG9n6xWFpcpLo 74MXi2XlqMqfjw4Cj80wiP3jwE0ktGXxBGMSU_2n3YAQ21o2uVONL1mXGIl5 4bMmhVshiHKswZJfj1BN.SBP2D3c53qVkVjkIDCET06u1nIveivDP4Y_oe4g Gp0bTWt5y_R1RqFMmD.AIwh_MS5N2hQgXY2q7xk1_gsgMw2uKxCqk5wcw1df NMnauhxNQjJs0_tgmkT.nJ.KTOhA_qgdK986CusmuMctpQOH_ihBK.jvNTSK btYCtI0byx3BytVo7snXt8QYK6E5Jx9k3ZzauOFpR59.AeWK_EuKrJxb5kp_ 3EZ1tBGHB.ss6mypa8vfMvhb8TINeip6CZPnWI2wlXwUR.ZEKIJrohmFVHFm KFYVmymAMCOdWOLWh2A.dyJSUrjLje2_aZ.DSuRVGpoAtJLHe0QsBF20RzyD 7dC25DeBhkcO8UHLsvng7wFO2coQ2XMhsp.ayEqCe4X2lpjsh2lah9Xo7V7L pPiABw_yasLUGHztyfOUYJ9OSusCqxN.k2MPixuf1vKCB7pq65Iyc4p2uGVC K6bnKMICrei.rxdj1vvTYbKEmvHVsmn.tfhS5B0nTlah3FmibbEpZKHX7Upe wqrzGbwYMdD9LSIDpmkIqF3bRJMX91BdA08UsLs4_E931bhwDffu1ERuYjIw WyEwbhIfjONgETEO8gEzvb42sZbk90Wsxo5b2y1F4ypAzD7R2VyYuQIFQHpb _kcoyrCgQZolEt10hXFRxy0X5MWOAFCOxnDTvDjoJuR2m5Q4DJk8Ic5xuXp8 QCyFyE5lHJPSNnKZ9A15ErmDah0X_ZcVtz5Ri2C_TQNylkHidCSUd8sG0SJb Mg567n3VzIfX6JYHtqlSY9NbCE.G8GC_kNiS.WMe0oeKI7OGev6vbuV8Hzjf yRICVnPIJjSU56vQ91Rk6elLYGnonbkMLw–
X-Originating-IP: [213.154.64.102]
Authentication-Results: mta1349.mail.mud.yahoo.com from=lordsdept.org; domainkeys=neutral (no sig); from=lordsdept.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtpgp.orange.sn) (213.154.64.102) by mta1349.mail.mud.yahoo.com with SMTP; Sat, 01 Dec 2012 01:51:12 -0800
Received: from sunumail.sn (HELO srv1-smtfree-msg.orange.sn) ([213.154.64.61]) by smtpgp.orange.sn with ESMTP; 01 Dec 2012 09:17:34 +0000
Received: from [213.154.64.43] (helo=www.sunumail.sn) by srv-smtfree.orange.sn with smtp (Exim 4.43) id 1Tejj5-000827-EM; Sat, 01 Dec 2012 09:51:11 +0000
Received: from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)
Message-ID: <55073.41.203.79.249.1354355471.sunumail@www.sunumail.sn>
Date: Sat, 1 Dec 2012 09:51:11 -0000 (GMT)
Subject: NOW CONTACT THE GLOBAL FUND REMITTING OFFICE FOR YOUR APPROVED CHEQUE.
From: HOUSE OF =?iso-8859-1?Q?LORD=92S_ORGANIZATION_UK_LONDON?= <info@lordsdept.org>
Reply-To: consultationdept@yahoo.com
User-Agent: SUNUMAIL/1.4.2
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: info@lordsdept.org
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to false
Content-Length: 3749

HOUSE OF LORD’S ORGANIZATION UK LONDON

Some other email addresses and IP’s used by HOUSE OF LORD’S ORGANIZATION UK LONDON SCAM – info@lordsdept.org <> com.unit@net.hr <> managementfile1@gmail.com <>  olusegunoniwon@ymail.com <>  freshtools@wanadoo.fr <> hackk@smtp.com <> 213.154.64.102 <> 213.154.64.43 <> from 41.216.50.32 (SquirrelMail authenticated user david_fletcher) by http://www.sunumail.sn <>

RECEIVED: from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)

MESSAGE-ID: <55073.41.203.79.249.1354355471.sunumail@www.sunumail.sn>

More scammers who’ve sent out email spam under 41.203.79.249 are:

From: <sales1@home.fanwrestling.com>
Subject: Fwd: Re: Wire Transfer Confirmation
From: Tagged<Tagged@taggedmail.com>
Subject: Re: Fwd: Wire Transfer Confirmation (FED REFERENCE
From: <hien_u_spine@hhp.sugarmotor.net>
Subject: hien_u_spine@hhp.sugarmotor.net � ROLEX Inc � Disc
From: <kathytessendorf@mailfront.cbulock.com>
Subject: kathytessendorf@mailfront.cbulock.com � ROLEX Inc
From: LinkedIn Password <password@linkedin.com>
Subject: Reset Your LinkedIn Password
From: <Harrietjeancy@gmail.com>
Subject: Fwd: Re: Your Flight US 66-56833
From: “Purchase Vigara” <EAF01C7@tennlandforsale.com>
Subject: Weekend sale

western_uniontransfer121@hotmail.com — Received: from col0-omc4-s16.col0.hotmail.com ([unknown] [65.55.34.218]) by vms172065.mailsrvcs.net

From: Western Union Payment Center western_uniontransfer121@hotmail.com
Subject: FROM WESTERN UNION AGENT MR.PAUL EZE
X-Originating-IP: [65.55.34.218]
X-Originating-IP: [41.203.79.249]

From: Office Ups Courier
Subject: Urgent Delivery of your ATM Card Payment Through UPS Company Delivery.
X-Originating-IP: [77.238.189.61]
To: undisclosed recipients: ;
Reply-to: upsofficecourier@yahoo.com.hk

Received: from [41.203.79.249] by web29301.mail.ird.yahoo.com

From: Money Gram
Subject: Dear Customer.
X-Originating-IP: [77.238.189.216]

Received: from [41.203.79.249] by web132219.mail.ird.yahoo.com

Received: from nm25-vm8.bullet.mail.ukl.yahoo.com ([unknown] [217.146.177.154])
by vms169119.mailsrvcs.net
(Sun Java(tm) System Messaging Server
Received: from [127.0.0.1] by omp1016.mail.ukl.yahoo.com with NNFMP; Tue,
29 Nov 2011 19:54:16 +0000
Received: (qmail 69819 invoked by uid 60001); Tue, 29 Nov 2011 19:54:16 +0000
Received: from [41.203.79.249] by web26303.mail.ukl.yahoo.com
Date: Tue, 29 Nov 2011 19:54:15 +0000 (GMT)
From: “Mr.Edwin Aja”
Subject: CONTACT DIPLOMATIC AGENT IMMEDIATELY
X-Originating-IP: [217.146.177.154]
Reply-to: adamsvictor14@yahoo.fr

IP 209.239.47.191 as relay: IP: 41.203.79.249

YOUR BANK DRAFT DELIVERY NOTIFICATION!!!
Contact Person: REV.TEDDY HARRIS
UPS Courier Company.
E-mail: upscompainy1133@hotmail.com

419 from above IP, using 3 Yahoo IP addresses, including 98.138.91.34, as relays:

YOUR WESTERN UNION PAYMENT CALL TO CONFIRM @ +229-98679197
Vital Finance Bank Western Union Department.
Location Address; Plot 1261, Adeola Hopewell Street CO/B/REP,
Contact Person: Mr Chris Mike.
Tele phone Number: +229-98679197
Email Address: ( westernuniontransfe6@globomail.com )

“Western Union” Spam from above IP (Lagos, Nigeria), using IP 196.1.218.76 as relay:

Call Mr Kevin Anthony For Your Mtcn.
webmail address:( western_union001@qatar.io)
tele phone.+229-984-168-39
Contact person Mr Kevin Anthony.
November 17 2010 03:11 PM
H.User7043 commented…
“Western Union” SpamScam from above IP (Lagos, Nigeria), using IP 211.55.29.156 as relay:

MESSAGE FROM WESTERN UNION
Director; Tuker Hans
E-Mail :(cbbj@ymail.co)
Direct line: +229-66-614-055
October 09 2010 09:39 AM
H.User7043 commented…
From “Tony Chris,” purporting to be a poatmaster in Ghana, as a follow-up to an email from a “Barrister Paule Eze,” offering me an ATM card worth 2.4 million Euros.

“Attention Beneficiary,
From: TONY CHRIS ”

 

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“yahoo Inc”

WARNING: YAHOO LOTTERY SCAM – ADVANCE FEE FRAUD

UPDATE: Digging up information on this header and posting it in the search engine, for some reason, always brings me to another scammer I posted up weeks ago. ” Juliana Roman Medina ” with the email addresses julianar@pijaos.udea.edu.co <> fedexdeliverydesk@yahoo.cn IP’s used: 200.24.31.84 <> 41.138.172.174 (location Nigeria) — For more information on this scammer, who also sent a lottery scam and is believed to be the same scammer(s) as this post – Click here

NAME/EMAIL-ADDRESS:  Yahoo Inc <> ruthy_financial@yahoo.co.uk <> marystokesuk@gmail.com <>
EMAIL:
WINNING ALERT!!!
Yahoo  Awards Center
124 Stock port Road, Long sight,
Manchester M60 2DB – United Kingdom.
THIS IS FOR YOU!!!
This is to inform you that your email identity has emerged as one of the lucky winner of YAHOO ONLINE free promotion  of  GBP150,000.00  (ONE HUNDRED AND FIFTY THOUSAND GREAT BRITISH POUNDS STERLING ONLY ) for the just concluded online sweepstakes drawn in London recently.
In appreciation to yahoo,hotmail and gmail users! we gathered all the e-mail addresses of the people that are active online during during the draw and among the millions that subscribed to different email addresses and others through Electronic Balloting System (E.B.S) without the candidates applying for it .
PAYMENT OF PRIZE AND CLAIM
You are required to contact our Legal attorney in United Kingdom for representative.Barr Mrs. Mary Stokes
E-MAIL: marystokesuk@gmail.com
TEL: +447024038948
Your winners numbersYAH NO: 498876
DRAW TCK NO: 11098322
E-MAIL POSS: 234876
CATEGORY B: INDEX
SECRET WIN CODE: B32000Congratulations once again.

No virus found in this incoming message.
Checked by AVG – www.avg.com
HEADER: 
Return-Path: <ruthy_financial@yahoo.co.uk>
X-YahooFilteredBulk: 77.238.189.58
Received-SPF: none (domain of yahoo.co.uk does not designate permitted sender hosts)
X-YMailISG: NdS_pu4WLDsNaT3akZ7yPUDozjg1SwutxbxaG4luget.NmUV JAxEPSkjTsUOKhJCaMal.mbjPfmNWLyFXD7.TLbs2YZ5eIyLo.zeprF0yFcG x5vMaZZn05FfxxSba.amT2oGeuZ8SJbWx__ctHkvFOXJKz1fYjsW5RLt0XPH mkvc84ERic.I.V7q8sjMcRkk5BTrt_HFJTngvD0Jz78LiGAKqQU.CwHFLjF_ fCmmO5h.1LLfd.yDlMExYPz6GkeoiqTvJWvvP.SBgDUAm6PfjZak4gnQVUCf sLYWZf0tExv3bp42VphqsqjxZoAEmW4V0fhMYlHEYAJYjPyI3PWjGAbGkSVO vuRTxYFc3.NdAg1DdwtUzh0.xtA64dMzkn_1AfRWNsVECC1Hj4zX3lX8mpq1 aeltHMn5kL3ltEf66.pPp2fs0dyBpVZPzXaWSWH9LxX5JjiH3kS0nN6i2IS0 JTHXmRKtxkXpr8svfJpXQJLB.Fw1l1WYg8MR0y16187p3RSxcR8g.8iPjITg DqO9cm542tUZqnB8eselzVISzwJ7NQKHHpZ1ofSgowc8tehzjb8JszLH2QpE YidhUsXq_JS3lcH0r5X0dx52yLsUv0_Fjy7XvoSXtkv7phso2SOgHwV00iBq qKdi1Vj6OJQdnyUZyAmw.OPqB5poJp_s9p1TQm5tJuRCRksZW2QplD9O35bJ cb6QVwPsKnpTW59y.Y8pi8l2Y5Kw2UWCniZSb1I.Qom7dhoPZ4j_igAAUdIS R_j4.cDW.AR6upgTImY8zaWXAHXhPQZ2AR1ySBg9ha5WZIn6MnmDULjwndxt m0_oFyouUpz5tB4gFXNdp6p8sERAFKMXUfTW72M4oFXAqvWLnbb_S4td2jFq IHAHiGLurlu8OKNG3cddt4A6DBKOrvQZD3lRsXBSftJ8Qw0UNCYmHucneREn WDLmW3vthoLoes7_1LesMlHF2tBw6Vn7Bp7DXl1iiUBbs_kia5EugPumZ6pH rslpq7qR2LfYUoy2BHr7giAFXBoOgzhIJtDJ.Z.rClmM0jMahpESa.FpKzWx yA3tdHNkmVkxBAv6sSjEwAI26Lin92B8IrF2FJoIYAdsGdOz5yiO7yt03sqg ULk57hm94aSyYxqXrOQRsTp2meZgCDOyXI8WCnkdjz2pgdC9Et5M0TObolE7 KW8KmgGNz3oOpwkWbhwekiTRDeNrl4q9BDsnE0nUMcStPwTbb3khwcPlXHIM OTFXwn1ri0HpplotgDk6Ikkf_7PFRSmYzbtGIbp9RtXKaKnloZbI0mEXaYu6 v_5kwAdsNizWUoKrjkUWzGU7DJABRHjpN5UdrXfD3AKS00aoYFBi23Qh3LtP 9eoYgSWyi0.ALKIlExRcq76mMqA-
X-Originating-IP: [77.238.189.58]
Authentication-Results: mta1076.mail.gq1.yahoo.com from=yahoo.co.uk; domainkeys=pass (ok); from=yahoo.co.uk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm1.bullet.mail.ird.yahoo.com) (77.238.189.58) by mta1076.mail.gq1.yahoo.com with SMTP; Mon, 19 Nov 2012 04:13:05 -0800
Received: from [212.82.105.244] by nm1.bullet.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 12:13:02 -0000
Received: from [212.82.108.123] by tm16.bullet.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 12:13:01 -0000
Received: from [127.0.0.1] by omp1032.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 12:13:01 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 927814.13983.bm@omp1032.mail.ird.yahoo.com
Received: (qmail 51996 invoked by uid 60001); 19 Nov 2012 12:13:01 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1353327181; bh=iA41e3cptztcs4OfqEqg3P1UU05elM2wHBJidEewk4I=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=BA0V/lvNb3g8ICmqCmJPbBUDMASq3g7dO9gYsGBxwvNiQfiJmdMmYdtfretP62Y3YdscvpQaL39vLARuPlXvN99RIZLN0s0gVefV8goLjAhV7ELbNIaUrPuAjvE4BvIbcgvuf9zMo1LnYv95FX9O5zgHofwxOTYtFOfiVy5uCaw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=epvk28xWMC/n2L61OGw1a7wjmcirfFCQnXq9wxXrH+mT3HsPQ5dT6BjQdZywvoxVeHdU6StErnnbkFa5TuOf6e0WM+03jfkrprNKUIu3S3UIzeHVWQWWpt2GVyqgGtLdOVSdOpIeVPvXhmwpZMw+17LzolAjKfNQhLjniuulqbc=;
X-YMail-OSG: 6ok6V18VM1miJbWwZPtPmm8sgOI_RgxNr1NGtFmHZw90Mvv 6D7Q-
Received: from [193.164.133.72] by web29802.mail.ird.yahoo.com via HTTP; Mon, 19 Nov 2012 12:13:00 GMT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353327180.51095.YahooMailClassic@web29802.mail.ird.yahoo.com>
Date: Mon, 19 Nov 2012 12:13:00 +0000 (GMT)
From: yahoo Inc <ruthy_financial@yahoo.co.uk>
Subject: “”””” Winning Alert ,from Yahoo Inc! ( Check your mail you have a massage)”””””””””””
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”478945831-1873120208-1353327180=:51095″
Content-Length: 23720

UPDATE: My email server detected viruses from this incoming email received from ‘ Mary Stokes ‘ .. A link was also detected (us.i1(dot)yimg(dot)com/us/yimg(slash)com/i/us/nt/ma/ma-mail-cl_1(dot)g=)

______________________________

The below header is also Mary Stokes scammer pretending to be FBI office in an inheritance scam. Email addresses used: barristernecter@yahoo.fr – REPLY-TO-ADDRESS: offilcefile1905@superposta.com – – – This Nigerian scammer is blacklisted on multiple websites and has been reported under multiple fake addresses.  Click here for more information on this inheritance scam

X-Originating-IP: [203.188.201.151]
Authentication-Results: mta1091.mail.ac4.yahoo.com from=superposta.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm13-vm5.bullet.mail.tp2.yahoo.com) (203.188.201.151) by mta1091.mail.ac4.yahoo.com with SMTP; Sat, 17 Nov 2012 02:43:59 -0800
Received: from [203.188.200.142] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 17 Nov 2012 10:43:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 977911.45325.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 39060 invoked by uid 60001); 17 Nov 2012 10:43:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353149034; bh=4NHRjGox1llxlGTpuwwzaXz2wAEyMSFQlVe/RepWfVQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=P0DhZFg9Mjj05/vqaDc0igv+GPAlNxBBckhxEzU4PJ/OEqkdNXv8cHYOGIrX06GRSxiYBDEXksxF+7O6itMLQryiu63e3X/TBdnGMXPpsJmwW89Nu0b5IpbVDCyBNfuzLVNzU62iHNFjxppWoL8m/2ohhLEweTQDE86CwjMFUjc=
X-YMail-OSG: UNddAlUVM1kvGGStE1FY34uiMeKn2clDYRgV8R.tDHiC3Gd LJa0arT0C
Received: from [41.223.248.96] by web92408.mail.cnh.yahoo.com via HTTP; Sat, 17 Nov 2012 18:43:53 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353149033.34956.YahooMailClassic@web92408.mail.cnh.yahoo.com>
Date: Sat, 17 Nov 2012 18:43:53 +0800 (CST)
From:
FBI OFFICE <offilcefile1905@superposta.com>
Reply-To: barristernecter@yahoo.fr
Subject: YOUR ATM MASTER CARD OF 1.5MILLION

The names, email addresses, IPs/host names below are sent out by Nigerian scammers using the same host/DNS/ETC as ‘ Mary Stokes ‘ pretending to be the Yahoo inc lottery personal above. If you’ve googled any of the information you see here, it’s a SCAM!

Received: from nm19-vm0.bullet.mail.ird.yahoo.com ([77.238.189.92])
  Tue, 18 Sep 2012 15:25:17 -0700
Received: from [212.82.105.245] by nm19.bullet.mail.ird.yahoo.com with NNFMP;
farid_abdul01
41.203.225.136 by web29802.mail.ird.yahoo.com
82.10.220.112 by web29802.mail.ird.yahoo.com
41.138.109.92 (same host as the ones above.)
82.227.153.207 by web29802.mail.ird.yahoo.com
80.87.92.58 by web29802.mail.ird.yahoo.com
laura_deng@yahoo.com
184.171.165.50 by web29803.mail.ird.yahoo.com
d.kabori@live.fr
Dericah Riceh  dericah_rice5@yahoo.fr
jose_riceh@hotmail.com 
41.138.89.38 by web29802.mail.ird.yahoo.com
41.190.88.206 by web29802.mail.ird.yahoo.com

 18 Sep 2012 22:25:16 -0000
Received: from [212.82.108.252] by tm17.bullet.mail.ird.yahoo.com with NNFMP;

847439.61289.bm@omp1017.mail.ird.yahoo.com
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

“HOUSE OF LORD’S ORGANIZATION UK LONDON”

NIGERIAN 419 SCAM – COUNTERFEIT CHECK – FRAUD

UPDATE: This Nigerian scammer has emailed once again with a similar email but different IP and header information. He is still going under the email address of info@lordsdept.org but with the reply to address: consultationdept@yahoo.com – [213.154.64.102] –  41.203.79.249 – For more information on the updated email please click: HOUSE OF LORD’S ORGANIZATION UK LONDON 12/01/12

EMAIL: ATTN PLEASE

The HOUSE OF LORD’S ORGANIZATION UK LONDON Have just concluded the meeting with the board of Trustees of United Nations Organization and
Representative of all the financial institutions, The meeting that has
been for the past eight months on financial matters, It has been agreed to
release all long terms debt, These are the classes we are looking into:
those whom has been one way or the other denied their Inheritance or
Contract payment/award payment due to corrupt official services,

After our mutual investigation in the recent schedule for payment of
outstanding debts incurred since 1999 to 2012 according to your file
record where we got your email address; your payment is categorized under
section {B}: Contract type: Lottery, inheritance, unpaid contract funds
Undelivered Lottery fund, Attn: Beneficiary, We have decided to bring to
your attention, that you were listed as one of the beneficiary, The
executive council Have decided to pay as many they have their file record
on their desk on a direct wired transfer, The total sum of $5.5usd has
been approved under your file according to elect,

Contact the processing/paying manager for your direct payment of US$5.5M
(five Million Five Hundred Thousand United States Dollars), you are
directed to contact the International Remittance Department of Benin
Republic who is In-charge of the payment
via E-mail:
E-mail: managementfile1@gmail.com
E-mail: olusegunoniwon@ymail.com
Phone: +229-67406742
CONTACT PERSON: MRS. ANDRIANA U OLUSEG
INTERNATIONAL FUND REMITTING DIRECTOR
HOUSE OF LORDS BENIN REPUBLIC
Also provide the following detail to her for immediate release of your fund,
================================================================
Also it is very necessary and important that you send us an e-mail
containing your vital information?? As requested below so that you will be
given an immediate response and directives on what to do next:

Full Names:
Address:
City:
Zip/Postal Code:
State:
Country:
Present Occupation:
Company Owner:
Company Name:
Gender:
Age:
Reachable Tel#/Mob:…………..*No Voice Mail Service*
Fax:

THIS REQUIREMENT MUST BE PROVIDED TO HER COMPLETELY,
================================================================
As soon as the International Remittance Department in your file location
receives your information, your US$5.5M will be Transfer to your nominated
Bank account. this payment terms is to keep a clean slate of all debts
owned by the government and company to individuals either by contract or
award fund, we hereby plead for any inconvenient that you might have
received by any of this corrupt officials, The United Nations Organization
will not be interested in your story of not receiving your payment if you
fail to abide to this Instruction.

Yours Faithful,
Mr. Anderson Paul
Public Relation Officer
Strand Bridge House 138-142 Strand,
City of London,
E-mail: com.unit@net.hr
Hot line +440-2087599090
OUR REF: H/L/UNN/APXB/TF/08
IMMEDIATE PAYMENT
#:WB/PC/FMF/MIN/UN/APXB/08
HOUSE OF LORDS LIAISON HEADQUARTERS UK LONDON OFFICE

SORRY IF YOU RECEIVED THIS MESSAGE IN JUNK BOX IS DUE TO OUR SLOW NETWORK.

HEADER:
Return-Path: <info@lordsdept.org>
X-YahooFilteredBulk: 213.154.64.102
Received-SPF: none (domain of lordsdept.org does not designate permitted sender hosts)
X-YMailISG: 5SdGaNQWLDvvYHp8wyYLuM2f3bwOEdaSUKV6XBBVe6hWpcz0 mFuo8Y2oaNrqDj22Ohzu0oL9_xUAUGpVAT9WTkrNfXpfhRZhAzaCMjFQLZSZ l9VFNPyEtPWan6MvVjrQ3ovhzmJHN_1SHU9AVi3jpqKvS2wEdVTlvyfMK8KR jksTXAKUE6Sf_5IfpN0xy9ui5SAV6IU5HKJsLFDw3Z.dBMout_YpKyucZmaB AO2wv.9CZjpQRw.VjOZWwN35uNWrk3TMozf51DdpKZ1OB4eKabo2WddedkBH TzgtRYd0FWnyKtcvDybxiULHFetbGZdL74D0tCktUsIVKWdpPwfkpXrItOIp zqhg_wl3_nNK2oKL7.24CKdBAuNMBd1bZAvYKGykECCpUPFKVWPWYInEY8sp hjGiu7iZL2ezBTU34qSjLbwrvzINuGB0HXwR7sXDMku0XaFl8AxSvgtqK5jz iyroR6IZtROq8oQo_G0S0WtcxQJqBq_tqYfuU1yL5Q1y9Vv8gBYfO2ZKQIsn 4tp78g9ek5p_ldZjrH0H3pb8VSFzwgb1YlPWdfwjz3V4eUdQ8Wc6LvdV1Bk3 Ebo9LOewB28iJlr3vRdbuEP7jJYkRurMtiENPZ4OpAWrsgtTHRjh4.K9ZGW. YbbOacCIzO5V3F7GGXiZ3ScdhF3XWt9pIfdx7b_Wf72rsHQbLIGERr2OtDWc HC.sJVS7KnS13B5ZG9Kw9r3fAwduJ756DJIokZ6T02UQ4BV94Boh4HVm2nE1 rLLM202..KURsn2Y56xHwWZkl2OJ5KeL_KOdbw0T2xg59OQbkPJ4U7p2px0P wrE_MqHYmHnNPEeeGkdQMoHrpfTvX_VA5sN9gyuiEvFEQH3SeHLl1bujoh2q JPDhnCU8MyU1VNw0mglmQU8ukdVaXyvmw6iCU.ExiST2nU7sAVrTpyZD3T74 mHMQIzhhccOtUfYNdc5ieCMjdeiFYrtiWSn1M7C.1.5FZl3UHh557It28nRc kyO9hTQahnXehBhBIBLgX0SeUbuX1c2xyPeHZ0hS1KWadku2Btw_i7MM7d8u lRdz9hQK9tvzJ0e3THNbwaRLGKGDi0dDufeH0dm.f8aUYH6DOHAMk4d_Q62o E0TcNsdP3qstS7isosqDtZ6nzZ5d.0O.RyEx.YQGNuz6ij7ZXKtqAMzjU6il qqd3oatNO8mZOrrt345Mymz1hOG36kPJm4xF1uV9VYG8TCUv_bpceIPN_PZa L1npBNUz14RSXUwVtzWamCoGiX7lkXvz9mcWS5fmuXatiSF3kJrFJrjScfz9 xVNjcF3S4JFC6hBkQvZng1YkHWIo5Q52g0ZaHBNKayYrFvDGZ_umEobzZyMU wdXaZlsiAHL3Squ1Mzqo3pWml0BcKp5SpZVuIvRTSVTPSJ0nSfrQkKTUNn1L 7QIg9MknXIB5xWPBPFih6H6mqsgWZXdyEEHeMVvDDqQqrOymGLlnkSeQyTjT ku6cuXmXNnnj41LaKoxjWbx0mNJ4PijZaELLzJfDnAoEuiDFi6PNesR4vUe3 rg–
X-Originating-IP: [213.154.64.102]
Authentication-Results: mta1132.mail.bf1.yahoo.com from=lordsdept.org; domainkeys=neutral (no sig); from=lordsdept.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtpgp.orange.sn) (213.154.64.102) by mta1132.mail.bf1.yahoo.com with SMTP; Tue, 13 Nov 2012 08:46:37 -0800
Received: from sunumail.sn (HELO srv1-smtfree-msg.orange.sn) ([213.154.64.61]) by smtpgp.orange.sn with ESMTP; 13 Nov 2012 00:17:42 +0000
Received: from [213.154.64.43] (helo=www.sunumail.sn) by srv-smtfree.orange.sn with smtp (Exim 4.43) id 1TY4iV-0006iG-FO; Tue, 13 Nov 2012 00:51:03 +0000
Received: from 41.216.50.32 (SquirrelMail authenticated user david_fletcher) by http://www.sunumail.sn with HTTP; Tue, 13 Nov 2012 00:51:03 -0000 (GMT)
Message-ID: <55106.41.216.50.32.1352767863.sunumail@www.sunumail.sn>
Date: Tue, 13 Nov 2012 00:51:03 -0000 (GMT)
Subject: NOW CONTACT THE GLOBAL FUND REMITTING OFFICE FOR YOUR APPROVED CHEQUE.
From:
HOUSE OF =?iso-8859-1?Q?LORD=92S_ORGANIZATION_UK_LONDON?= <info@lordsdept.org>
Reply-To: managementfile1@gmail.com
User-Agent: SUNUMAIL/1.4.2
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: info@lordsdept.org
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to false
Content-Length: 3748
702034464
9291969056
Below is a list of other email headers which were sent by this same scammer.

Return-path: freshtools@wanadoo.fr
Received: from smtpgp.orange.sn ([unknown] [213.154.64.102])
by vms172061.mailsrvcs.net
(Sun Java(tm) System Messaging Server 7u2-7.02 32bit (built Apr 16 2009))
with ESMTP id 0M4M00FBGCMOLW80@vms172061.mailsrvcs.net for x;
Sat, 26 May 2012 02:25:37 -0500 (CDT)
Received: from sunumail.sn (HELO srv-smtfree.orange.sn) ([213.154.64.61])
by smtpgp.orange.sn with ESMTP; Fri, 25 May 2012 07:52:17 +0000
Received: from [213.154.64.43] (helo=sunumail.sn) by srv-smtfree.orange.sn with
smtp (Exim 4.43) id 1SXpo6-0007u1-1u; Fri, 25 May 2012 08:23:34 +0000
Received: from 197.251.184.232 (SquirrelMail authenticated user hackk)
by sunumail.sn with HTTP; Fri, 25 May 2012 08:23:34 +0000 (GMT)
Date: Fri, 25 May 2012 08:23:34 +0000 (GMT)
From: “HACK TOOLS FOR SALE” freshtools@wanadoo.fr
Subject: SELLING WORLD WIDE EMAILS, MAILER, SMTP, WEB MAIL, BANK LO GIN,
ATM TRACK 1&2, CC V, RD P, SHELL, CC,
ALIBABA HACKING SOFTWARE OF ID AND PASSWORD.
X-Originating-IP: [213.154.64.102]
Reply-to: hackk@smtp.com
Message-id: 28154.197.251.184.232.1337934214.sunumail@sunumail.sn
MIME-version: 1.0
Content-type: text/plain; CHARSET=US-ASCII
Content-transfer-encoding: 7BIT
Importance: Normal
X-Priority: 3
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: freshtools@wanadoo.fr
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to
false
User-Agent: SUNUMAIL/1.4.2
Original-recipient: rfc822;x

Return-path: freshtools@wanadoo.fr
Received: from smtpgp.orange.sn ([unknown] [213.154.64.102])
by vms172075.mailsrvcs.net
(Sun Java(tm) System Messaging Server 7u2-7.02 32bit (built Apr 16 2009))
with ESMTP id 0M4M000XKBUHW020@vms172075.mailsrvcs.net for x;
Sat, 26 May 2012 02:08:43 -0500 (CDT)
Received: from sunumail.sn (HELO srv-smtfree.orange.sn) ([213.154.64.61])
by smtpgp.orange.sn with ESMTP; Fri, 25 May 2012 07:52:17 +0000
Received: from [213.154.64.43] (helo=sunumail.sn) by srv-smtfree.orange.sn with
smtp (Exim 4.43) id 1SXpo6-0007u1-1u; Fri, 25 May 2012 08:23:34 +0000
Received: from 197.251.184.232 (SquirrelMail authenticated user hackk)
by sunumail.sn with HTTP; Fri, 25 May 2012 08:23:34 +0000 (GMT)
Date: Fri, 25 May 2012 08:23:34 +0000 (GMT)
From: “HACK TOOLS FOR SALE” freshtools@wanadoo.fr
Subject: SELLING WORLD WIDE EMAILS, MAILER, SMTP, WEB MAIL, BANK LO GIN,
ATM TRACK 1&2, CC V, RD P, SHELL, CC,
ALIBABA HACKING SOFTWARE OF ID AND PASSWORD.
X-Originating-IP: [213.154.64.102]
Reply-to: hackk@smtp.com
Message-id: 28154.197.251.184.232.1337934214.sunumail@sunumail.sn
MIME-version: 1.0
Content-type: text/plain; CHARSET=US-ASCII
Content-transfer-encoding: 7BIT
Importance: Normal
X-Priority: 3
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: freshtools@wanadoo.fr
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to
false
User-Agent: SUNUMAIL/1.4.2
Original-recipient: rfc822;x

This Scammer has sent more then one email and according to ProjectHoneyPot this IP address is malicious and is considered a ”Dictionary Attacker”

Location: BENIN – NIGERIA (BJ)

Example User Names Used By 41.216.50.32 – AS28683
User-namebuh
User-namebuhg
User-namebuhgalter
User-namebuhgalteria
User-namenastya
User-namenatalya
User-namenatasha
User-namenataly
User-namenatah
User-namenaumov
User-nameburov
User-namenatash
User-namenazarov
User-namenataha
User-namenasty
User-namenaumovsvetlana
User-namenationalpf223
User-nameneddi
User-namendrey.lashenov
User-namendrew
User-namenationwidedk1
User-namenataly1
User-namenekol

NAME & EMAIL-ADDRESS: HOUSE OF LORD’S ORGANIZATION UK LONDON <> info@lordsdept.org <> com.unit@net.hr <> managementfile1@gmail.com <>  olusegunoniwon@ymail.com <>  freshtools@wanadoo.fr <> hackk@smtp.com <>

from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

Dey Andrew – info@aucanlink.com

Nigerian (419) – Business Proposal SCAM – Scammer sent file but I didn’t open it. The warning below was actually sent to me by yahoo who detected a scam/spam.

X-Originating-IP: 88.185.225.246

 

Spam detection software, running on the system “Serveur”, has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn’t spam) or label similar future email.  If you have any questions, see admin for details. Content preview:  Andrew Dey Lloyds Bank TSB Red Lion Court 46-48 Red Lion Court    SE1 9EQ 01/10/2012 URGENT BUSINESS PROPOSAL Dear Sir, […] Content analysis details:   (18.0 points, 5.0 required) pts rule name              description —- ———————- ————————————————– -1.4 ALL_TRUSTED            Passed through trusted hosts only via SMTP 0.0 MISSING_MID            Missing Message-Id: header 1.6 MISSING_HEADERS        Missing To: header 2.2 DEAR_SOMETHING         BODY: Contains ‘Dear (something)’ 0.7 URG_BIZ                BODY: Contains urgent matter 1.8 MILLION_USD            BODY: Talks about millions of dollars 1.2 US_DOLLARS_3           BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 2.8 XMAILER_MIMEOLE_OL_1ECD5 XMAILER_MIMEOLE_OL_1ECD5 2.0 ADVANCE_FEE_2          Appears to be advance fee fraud (Nigerian 419) 1.4 ADVANCE_FEE_3          Appears to be advance fee fraud (Nigerian 419) 1.5 ADVANCE_FEE_4          Appears to be advance fee fraud (Nigerian 419) 4.2 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
Forwarded Message: Re Andrew
 

Re Andrew

Friday, October 5, 2012 3:38 AM
 
From:
“Dey Andrew” <info@aucanlink.com>
 
 
To:
undisclosed-recipients
 
Andrew Dey Lloyds Bank TSB Red Lion Court 46-48 Red Lion Court SE1 9EQ                                                                                                                                                                                                                                                               01/10/2012                                URGENT BUSINESS PROPOSAL Dear Sir, I hope this proposal meets you in a good state of health. I need your help to transfer and invest US$10,000,000.00 (Ten Million United States Dollars Only) that accumulated as undeclared profit made by this branch of Lloyds Bank TSB , London under my management. All that is required to get the funds transferred out of here is to put your name on the Non- investment account holding the funds. This practically makes you a Non-Resident customer of  Lloyds Bank TSB, London. I will then guide you on how to apply for Closure of the Account and credit transfer of the funds to your designated bank account. You will get 40% of the funds for your role. If you get back to me with your physical contact address and direct telephone number, we will consummate the funds transfer within one week. I am only to be contacted via Private Telephone Number: +44 702  4032995 Private Fax Number:            +44 700 3900426 Private Email address: andrew2dey@yahoo.com.ph Sincerely, Andrew Dey
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: