RSS

Tag Archives: Marcus Wright

“UNITED NATION CLAIMS DEPARTMENT”

RECOVERY SCAM – COUNTERFEIT CHECK FRAUD – 419 SCAMMER

NOTE: YOU WILL NOTICE TWO HEADERS UNDER THE EMAIL. THAT IS BECAUSE I’VE RECEIVED MORE THAN ONE EMAIL BY THIS SCAMMER AND EACH EMAIL HEADER IS DIFFERENT BECAUSE THE FRAUDSTER IS USING FAKE IPS TO AVOID DETECTION. IF YOU RECEIVE ANY EMAIL’S FROM AN UNKNOWN INDIVIGUAL AND THE IP’S MATCH ANY OF THE IPS BELOW, YOU’RE MOST LIKELY DEALING WITH A SCAMMER.

freemoney

EMAIL: United Nations Habitat Office

3 Whitehall Court
London
SW1A 2EL
Tel: +447017419229
Email: un_msn@msn.com

Good Day,

This is to inform you that we have received your email contact as one of the successful claimants for the UN-HABITAT compensation payments.

For your information, this compensation payment is being made to all of you who have lost your money through any on-line banking transactions or as a result of internet fraudulent activities. It has come to the notice of the Governing Council of the United Nations Human Settlement Programme that many of you have lost your money by falling victim to some internet fraudsters.

The United Nations Human Settlements Programme, UN-HABITAT, is the United Nations agency for human settlements. It was created in 1991 as a subsidiary organ of the UN Security Council and it’s mandated by the UN General Assembly to promote humanly, socially and to process claims and pay compensation for the losses and damages suffered by beneficiaries.

We were officially contracted by the Governing Council of the UN-HABITAT to convey the delivery of Check payment to your resident address. We guarantee your safety in this transaction as we have concluded every arrangement to dispatch your Check parcel for delivery to you through our FEDEX Delivery. With this delivery option, your check parcel will get to your door-step within 2 working days of shipment from our office.

In accordance with the procedures established by the Governing Council of the United Nations Human Settlements Programme you are expected to provide the below information.

Full Name:
Address:
City:
State:
Zip Code:
Country:
Mobile Number:

A shipping/handling fee of $500 USD to enable us deliver your cashier check parcel to your provided address.

We recommend that you send the required shipping/handling charges ($500 USD) via Western Union Money Transfer® using the below information.

NAME: Ben Smith
COUNTRY: london, United Kingdom
Text Question: Color
Text Answer: White
MTCN #:___________

Money Transfer Control Numbers (MTCN) are to be provided by you after payment with the western union.

Also, you are required to send us a scan copy of your passport or Identity card. This is to confirm your identity by our delivery officers during delivery in your country.

Upon our receipt/confirmation of the above requirements, your check parcel will be insured and dispatched for delivery to your address within 48 hours.

Your satisfaction is our priority and we look forward to provide you with the best of our quality services. Do have a wonderful day in anticipation of hearing from you soon.

Regards,

Marcus Wright
Dispatch Officer)

HEADER:

Return-Path: <unclaims@msn.com>
X-YahooFilteredBulk: 65.55.90.110
Received-SPF: pass (domain of msn.com designates 65.55.90.110 as permitted sender)
X-YMailISG: Q4P8yzQWLDsIYkC2RV9ZvS_EDjC245d9dFAmW2vnK4a6Jm0Y DIqOn7BURltdMROsZSDYHKLiW3Ge4URNT9rVB5bC9egwdn27lwj096smGSaH S6XoI420qujbv8PXR26Q.e1pRyO1zEcJXn1m51WwnG_FW9V7gM1_dsQCZKuw hYt7biegQCY3CoZECESZ6u4H0HUqz.7IrIAlyQOZtMhiF8nIj6Lml82qqZs0 Ze2_E09oOSsMYRP0nkJDUjs9.g0UWMwi527505334PvuqSu9EUJSU3yRDTFw 8gNEUnw1qYZsxZrJe0GfoPpn7NR1Zl8mij58BhSaTEqjzjXJR3u3J1wDOeWe CjzAm4OyFt4SZh.B.6tNsLmXkb8vMhS4Ubqyv2zZC5kDDKnfNDFxs53g.Ykb N0OsTfsk2GwqwJEGMg2xs1WPt4BnZeN0y21C2C0_oWt50sUSSpC7BDHwhghD _xlVIp.gPfgZvpG99j9mKZNCmNMU3gN2kARj4a_H6qgI1ZbHBpb1NDBTFu8K XHtU9lre5CA4ejNXxXqgjmAMZbtq5buf8bM80ZGkcuCMFpD.htXTL8jAj55p wU8c91G1eVGexCnTTvmGbVKi6UtRaIJFUZX7XphQjb.5.7MNitICPqBSZsdp wRcoJ7fDJrdFG4kJV9NMluCn9JgjTdCm_zMIOFgWbTr58VSJ9EjtMUEJBwTN sWsHkCoy90KG.PKF6so73QsQA7Ob0Fx3YK_nJZA3VZ5dbzlNhiMyu4xt3F33 MChOB1OqMJ2z.STCaGCXfWj1g0jUiLWoWRUZZPQt8WQY6STWZUg6PBOAqvJl MgYbB7hhkAzm.GAwusD0_NOYA84gd3j6VNkDNhFnLQS0uh3i3aDEQSg5bwdT ffh6DnxtkQXOCX3UhlfMhacIpMC9NOv5lH7WsU5xX8KoGtKGTXWQGWIbTq8r XO8COK5DqvVSfSfPn_vwfR0D1QJnb1gb1ZgKLg4jwNY_.FgUGOXjUBGuruaF aRpmJtibDZlGtLyXhJKZxyp48GpQ2brrjWiXCK_yH1udci3Y9N_1qRDEDqKt eJayK1Phc9RAWhCRPyTGXIUpbcLJhyh7X8.J72EN6E0ZP.q2YF4t23r1l62i ivcgCEL3CUcAFMqAYQuWlAqOHGmX7J1d3JcQMNL3XcOM5IGQ1rtH0i4cbCvE M1xypCSrQ4vycwVCrK3L9DzlvXxY2Vslvr.CScSV79f1HsV6q_K12VN7M7jz RaQXDif9C_tFxLVy7tImzSHNIEtAY4dwfH5rrr55PmTUtEUz.6KEQJbAs8lz N3eK.l9Gp9cBVG0-
X-Originating-IP: [65.55.90.110]
Authentication-Results: mta1019.mail.bf1.yahoo.com from=msn.com; domainkeys=neutral (no sig); from=msn.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO snt0-omc2-s35.snt0.hotmail.com) (65.55.90.110) by mta1019.mail.bf1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:51:23 -0800
Received: from SNT143-W32 ([65.55.90.71]) by snt0-omc2-s35.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 Dec 2012 11:51:22 -0800
X-EIP: [/TV7qSeM3qmM9iU1AqKrwfvgxpWqD2/e]
X-Originating-Email: [unclaims@msn.com]
Message-ID: <SNT143-W32684D9215E2ED28219FD9C7310@phx.gbl>
Return-Path: unclaims@msn.com
Content-Type: multipart/alternative; boundary=”_3dea15d0-14b7-43d8-8b0a-3b827210a014_”
From: UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com>
Subject: RE: Contact Name: Marcus Wright Tel: +447017419229
Date: Tue, 18 Dec 2012 19:51:22 +0000
In-Reply-To: <1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
References: <B353BE0D877992409CB2153398733B81635C6E54@winxbeus26.exchange.xchg>,<1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 18 Dec 2012 19:51:22.0097 (UTC) FILETIME=[0E09E610:01CDDD59]

UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com> 65.55.90.71 – 65.55.90.110

HEADER NUMBER TWO:

Return-Path: <unclaims@msn.com>
X-YahooFilteredBulk: 65.54.61.94
Received-SPF: pass (domain of msn.com designates 65.54.61.94 as permitted sender)
X-YMailISG: FbVe49gWLDvy_H0HGyCvr5GlHi1Ad0EQxycJEWfEdPYeo2hb TF_L7_0plwdxv1FO_5ZBxOLniR5jVE1h.Fy8kvu._4ctcsh.b._rZqUnvBaZ X3jaWCnb1qKO18FS_hNsKnY7Zd_VhBurPjPk72clM6bgMjU.tIIfnG4H8Y4M J661nkVpIy6scF5iyZ_GtYTr4aKug9cqZtjYPGPyFDjks_s2MbDdye5pGdWG DNiifYQQC.X.8Lfr3c7DCNRxhtb6wQBckrCai9vFX9DWGhIWU4gvrrWtMML5 aMLnx.ocyyiIjfwYCHTVeCsCpSCRBsEoCxIwjdzPnYUg069I9LA0b.Gh9jiA Pe.d6H2UjS60goCV8fBpX69A1doeRqa2Y9LScgym.dUPsUJy4ATjT7QTuAHc 4LVPQqoI0V2kyvVfsnWyCY4QWmfxjXW8IFP_ZQ.Pdr.3MF39DG.ximBCtFDB v0UlcQVxTx5jRRWFZvtISd95osVXPSgqvQoOsC4YRH1845P1Rs_ByeUJDRfE _tQ_jczjUU7nR8fn20CTAo5.dyCcQfmAwOR9AVVs7MzLiW0traI.LpUA89fy bHEZCaTkLehGymHINA9NUGDAccQ_VQpl0joPk8Tpw5FN3DyQNv6pop4mPkmL PJ69l.U0rjFWVzF3YwW78bz2XkOLXEfFs6qfitxwgm4I3fyzY_YHUWyRVXFR DDIVZ0HqVr_5ZE5OFIciU6l4V9dDQXfqWDCpRncHUSQDWKeEMdERxCKSNl9C _6e35DXg33zuEZlZYa50TRBmAVKpsQGNUmSW3GYBCBN0ihRATbuElph8v9pU QVRmuY6oveo0raJa2rkRGJrEGz3wQ9XLORIvcscVZySSknoQ9Ve2aYvrduAe QBAyZ4uirjeHwVMzjYys4h7eq6JBETWlTtpRc.3lAYcKY3jJ.EgCYFyWNPCN eVZD85NyDiPOyrhqWPpt2bClbZBoD1SfQIqIRxgXdO._RwfGgzc6OFa4lGim o0bUfhMeNF07.hDW3nmiVifthixlaquaTOnI..wktt4FcthmXKKNNSICQuJu 2fMdzGtBVBBQBdhMgHbLlLWPlDqrAKG7OZ0c6iY69UmZ3vGrM.4XBiheikmW D0J47Vter1FQ5G5Cu0nRX0pkGOfciptQ3zzWDCmhirn4Xqz1ME2QLJKcPWMx Dhoxhp8LQbKf7MIrGXe1py2l4w6oEPVx9g5TDeMnmB18XieUygWNBP6cY8Kf yapRNq6T7bsUDhMHYL4be1aMw5GhnU7UmSnTECLhRYU7BY4au7Gm5Uw6PrJy J5ZFFqn7hmjJjguP_A–
X-Originating-IP: [65.54.61.94]
Authentication-Results: mta1246.mail.sk1.yahoo.com from=msn.com; domainkeys=neutral (no sig); from=msn.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO snt0-omc2-s43.snt0.hotmail.com) (65.54.61.94) by mta1246.mail.sk1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:52:58 -0800
Received: from SNT143-W65 ([65.55.90.73]) by snt0-omc2-s43.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 Dec 2012 11:52:03 -0800
X-EIP: [8WRfF9W/4HCKBPDNLPwgkZDO+b8LtgkB]
X-Originating-Email: [unclaims@msn.com]
Message-ID: <SNT143-W65AD9B7BD38231E89E80F7C7310@phx.gbl>
Return-Path: unclaims@msn.com
Content-Type: multipart/alternative; boundary=”_d77f1b5b-2b70-4219-8474-4777ba3e7f12_”
From: UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com>
Subject: UN-HABITAT PAYMENT RELEASE DETAILS
Date: Tue, 18 Dec 2012 19:52:03 +0000
In-Reply-To: <1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
References: <B353BE0D877992409CB2153398733B81635C6E54@winxbeus26.exchange.xchg>,<1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 18 Dec 2012 19:52:03.0050 (UTC) FILETIME=[2672D4A0:01CDDD59]

65.55.90.73 – 65.54.61.94 –

Advertisements
 
Leave a comment

Posted by on 12/19/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Mickey Penick”

RECOVERY SCAM – ADVANCE FEE FRAUD – COUNTERFEIT CHECK SCAM

These scammers aren’t as organized as some might think. They think I am a scam victim and suddenly i’m getting recovery scam emails (note: i’ve never personally been scammed.)

scammer

SUBJECT: Contact Name: Marcus Wright Tel: +447017419229

EMAIL: You are eligible to receive a compensation payment of $2,811,041.00 USD. This compensation is being made to all of you by the United Nation for all that have suffered losses as a result of fraud, accident or illness. For more information, contact the below agent for the delivery of your cashier check $2,811,041.00 USD). Send Names/Age/Addess/Phone/Country to

Contact Name: Marcus Wright
Tel: +447017419229
E-mail: unclaims@msn.com

Please take note that you will pay a shipping/handling fee of $500.00 USD

Thanks for your patience.
Allan Wilson
Event Manager

HEADER:

Return-Path: <e446457625@exchange.1and1.com>
X-YahooFilteredBulk: 74.208.4.195
Received-SPF: none (domain of exchange.1and1.com does not designate permitted sender hosts)
X-YMailISG: iaCrEfYWLDvUk3y5l_LNyAThSP4V4xqF9eporgKJ.m3Nd03w XWrY2ydticsXeio8wTgHBJ2aFAeLqYlsViYDL2HrIhVTeUx65Cij2DslY42J 1JcGuBntGNpKwqbi8d6__JYOcu2YGgeimltqpogYdwuH6O0gdgmte_jVnTXp DBrqDY2fjlgXlQweOpF2pJ7HWFHaKpCQ2mD3O69awfl1TuWSvxmGBs8IyycW KDd_QjkI0XurTEYpvrs.juFfFY.m5LSYWPpJ7KXYTX.Olpl7C7EGASVq97fn Ih.IfX2B7m520UEhgjWa0pcChsz1tDM8HhHDmnR9BSSUdCQrUAJtq61p0.4d sTW1Ycv2ZulyOvO2VPs6Cewhrl0mWSs6lu.VylJ8TGFQkLO4_NGczucleS7U QcN7oBNMMRrqVd7wuSHqy3x6ij0Nh7YRKe7bzAmkUKDCZ6yYtehskcO0Cb6N a4NGAY2APc8FNa0Okhyr7474z8xoCK22d6iM4LrXGMnQoN7rzpyAwI.Vh4an zUSltnl9DoyHw6zpkHzTDg83U1U8H170ej1D.OIRoTzIgePf4EwQtHxPhYWp LolfCsP4uojYOJiti8JEPiaM1Iv7.wfouwvStb8RIPu.wXwzz8JKlif1WO_u jxhgh1VoiHXxW7X8SXH7hjyeQ6UATkYxU5QhFwMXDEeImNrMZmEZ_lchm0R1 1mege0p9..eO6eOso70V9lZbc5EYS6bfo5os9Fr5PcIGzoO5wIz_x.Lgj8DC mkqzAhGIJ2W23dQswOdlqiNqc15opbm17FlWeqtDQLI.9O.Kc1g55qeqx6ch W.hfLVSeSuET84Wx9HNsevw_i368gZdf6npqFXsFe6DA5AvSVCmN43utGl2S a9WJN_W4M7HqrMzhZr8GaWfQ91lsBWMjzBIHY3mbFGbrGndCIs92NgEtSZRH dL9t1FoI3uEI.ItCcN81622pEGxUf6dmMfo1GZHWXLsWAjZrxAXTra3nj5sk p7ee2IDr8MzV4Habi4.G280NGs.N08actFPy9qA9btaSbXepORrPlepnwou_ byz.WL..TkAperFe8bEy9TWl.vEMFvv5vUE9P7FVBLMYhm7GyD3PMFJ015Vx fbzb7mhHra5FJ6TzXilK_slwVG6Z1GLjhpJSASY5FnI2RGARl_s00D9Y6JAn _AprGehiYWveWJdJSa6Tw00paCosmt5_p1S_kI18yFZc.l05OXgdlPk_DO5B hwLpZ7rB8dKtgihjHxXvlGAgye4RyjUbsYJGn474XwG36A0.wuKYHBejLFhm CPR1cEK4y7v_LTZvdUmKT2LPHnd82HigOEUmkOB4Yf.OrQUChOW9x0Rpo3nn FgMqTXirC60Ho5n2RIO0HCHBhP4Uw3LoXUZabhsEGQUabVk5kbZBbP1Pjffj e1iuYoVJbVVRBP1v0cBlPBzmHiU1Soa2YIFz_HPXOgGQp.awygrJbTiJGovl jMlxGPBGrOTtGv6l6gj.DsMZoyj1Q2gT4cGTxvbKLlQVN1CM_Oh_WZgZIB8A B8fJ1qVC15o4xTnoELkVWve2LgUTZBQ-
X-Originating-IP: [74.208.4.195]
Authentication-Results: mta1349.mail.mud.yahoo.com from=exchange.1and1.com; domainkeys=neutral (no sig); from=exchange.1and1.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mout.perfora.net) (74.208.4.195) by mta1349.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 05:30:43 -0800
Received: from winxedgeus02.exchange.xchg (winxedgeus02.lxa.perfora.net [172.23.130.34]) by mrelay.perfora.net (node=mrus2) with ESMTP (Nemesis) id 0LsTxI-1T0cjc0oTQ-012CUx; Mon, 17 Dec 2012 08:18:52 -0500
Received: from winxhubus04.exchange.xchg (172.23.130.36) by winxedgeus02.exchange.xchg (172.23.130.34) with Microsoft SMTP Server (TLS) id 8.3.279.5; Mon, 17 Dec 2012 08:18:55 -0500
Received: from WINXBEUS26.exchange.xchg ([172.23.130.69]) by winxhubus04.exchange.xchg ([172.23.130.36]) with mapi; Mon, 17 Dec 2012 08:18:51 -0500
From: Mickey Penick <e446457625@exchange.1and1.com>
Date: Mon, 17 Dec 2012 08:18:50 -0500
Subject: Contact Name: Marcus Wright Tel: +447017419229
Thread-Topic: Contact Name: Marcus Wright Tel: +447017419229
Thread-Index: AQHN3FkNRoTFW9qeBEmCokF2SqOu6g==
Message-ID: <B353BE0D877992409CB2153398733B81635C6E54@winxbeus26.exchange.xchg>
X-Provags-ID: V02:K0:qa6J6jAK/tEmY1U5oAm/zSZEN6hkkm7rJiviufF0pv1 OsGjlV2iTAWrxa+UG8t3ZvDeSPO4sJF8zru9389fyCpogoi/BM ixURjJTxTWNPkRq/MHnwa26LpEVLDtNfQDcbXeg9xGiGkbgCVT A2QOsNmrL7XzUs78aEfZ64uzbxZnIRkdidfZiGrnrlTpU5spNJ ZF84KTYP+OuNc4OgXtlZ4x4qjlguiRrTtVeNFp8wIwRcMfwHFm oPRGeZcZdDudKa4Z+OaxemgG9qSiIz5LvVn97pPoJNVfUfzKNA pGyWQk46l9ap1cwOftoG7oWDg+tJUfI4fKD0YFVay173Cp1Ggp FvL7jQnFFYZsfstNVIvDRZAbRNwVBOSpXgO2UwHLDtEkgPw2Jr Ngm4U2L8Rv6XEZAXguJVFbJkGSKOn0NKps=
Content-Type: text/html; charset=”iso-8859-1″
Content-Transfer-Encoding: quoted-printable
Return-Path: e446457625@exchange.1and1.com

Mickey Penick <e446457625@exchange.1and1.com> unclaims@msn.com +44-7017419229

RECEIVED IP: 172.23.130.36 ORIGINATING IP: 74.208.4.195

 
Leave a comment

Posted by on 12/17/2012 in Other

 

Tags: , , , , , , , , , , , , , , , ,

 
%d bloggers like this: