RSS

Tag Archives: Money Transaction

“Wujiang Wanlinda Textiles Company ©”

EMPLOYMENT SCAM – FAKE JOB OFFER – MONEY TRANSACTION – FRAUD

scam_photo

SUBJECT LINE: Job Offer…..Great Pay Earn 10% Per Transaction.

WUJIANG WANLIDA TEXTILES
COMPANY CHINA.
Cenqi Industrial Area,
Tingtian Town , Ruian City,
Zhejiang Province . China.
Dear Prospective Representative,

We are involved in the manufacture and exportation of textile materials
and export into Canada and the United States of America. We are
searching for representatives who can help us establish a medium of
getting to our customers in Canada and the United States of America. as
well as making payments through you to us.

Presently, we are faced with some problems most especially with our
Payment methods as most clients we have in into Canada and the United
States of America. prefer to pay us with cheque rather than cash. We find
it very cumbersome in accepting such payments due to the new monetary
policy in our banking systems here in China and this is crippling our business.
We have numerous customers in Canada and the United States of America
and we cannot afford to loose them due to this problem. We hereby request for
your hand in partnership to act as our payment/Remittance Representatives,
to act as our agents who shall receive payment on our behalf from our
customers in your region. You shall be entitled to 10% of each payment
you receive on our behalf and this shall be a continuous process.

Please to indicate your interests please send to us the following information
via email to : online.wwtcltd@topservice.com
1.Full names
2.Age
3.Sex
4.Marital Status:
5.Present occupation (Company And position)
6.Phone number/fax
7.Full contact address (not P. O. Box).

Upon receipt of this requested information I shall provide you with the
necessary details of how to become our representative.

Thanks In advance

Yours sincerely,
Mr. Lui Kiang
REP-SUPERVISOR.
e-mail: online.wwtcltd@topservice.com
Wujiang Wanlinda Textiles Company china.

HEADER DETAILS:

Return-Path: <yliu73@crimson.ua.edu>
X-YahooFilteredBulk: 74.125.82.68
Received-SPF: pass (domain of crimson.ua.edu designates 74.125.82.68 as permitted sender)
X-YMailISG: thJVYLwWLDsr5vzyWbVroKMGpJ_cCcGAnJLTRVTkoyAIb7Xd 4zmIwYYRjqmYdyJS43Z9JYWkFYy4CoWWCLxJsRTIx1U8jWYBqGhcrFcFMqtJ LB6XoTd10yw4xQnGnAWIiquU8HYjAu2wCz8ocOoGQ.oR9R89p8JaL1cfkAV7 x93SEHxhqf5SRUqc77QGMmv_cRfkZTWAx8QWbq_RMlHodRt9kYdpzVjM1DGU lKS4XgJ_zJ2Ilj8OAfilDIF20ZDDAAtSmcnBl6fMhjhL61gx9_9PokSNK6hG NbECokf2zF.xXVC4qE33kd0zDgvLVFRguuZAjZbl9Vg_5Ry7ll3LVhKqEItq Bo4gQgA_yQNj.acyCnm320HR1cbKD1S3_4QbCTR_2fz5rkwj9UVCKxsKF._E ibBDOe4NGFOjhihQspH5Xl.vGs98obVEe2ek8lDbCqmerzz71GZ.29FAYRUR DwT_sJF2iKQ9DboocKEVy7PQj6yAEZ5jChgxUxAqIFcEOuip7qTgxnRvleee tsOa0S97qM7W8h.CjyqLLaBnh35v5r2yks0_xr5zRi1JMgnta2PIcBMR_Xpl KvZyxMDXmjIDuBkTA1SxfKZ6PgWgSsBlEEVlq1h0EEASkF37Ak70kg7olWAL vl7bh25tO7pnP.e_DwXyz0WM9kbgJXFzozlRmzdDvlM.sA0X3azFzZhjv5BP i3tpht4bUJPef6Cfcxp1XcBjMA8HWcX53Mu7lQ_8weGCzcqDPYHUCS_AU78t m4ZEUADg8rRdWQ8dDugwuLLanoD9W49GGrpkitpv9FJp3ngwiQ.z3RtGEQAR 8mmOmJHtdMWGvSBe0.JdHkFv8hHOEPoj5ef7wRXRF5tXiEA0_Z7jRHeLvA6z 8uH3cq6nvupEgNAVZUuFksAAx9OcViex6S4gZ6bWAtCksIOrS1MBQl6uIde9 Jbm8x4EBGDhk9X7V5YbSJE_6LUgBHHPj53eGtUyfz1zLZDlRP7QPtMpX3qYP FGMInLxcX_1gkpjMklK363U5dOF73edgLt5dGK_xOIXNexzqHbxkaEI7nPDw vlTg_3gsvaro9CO.3EaB.E0eDxzAEa9pPJFRTqmdIzPeGmqf1TsFpvWNVXw7 UUu5spdyiuiQcmeGZsMTk5cPANX9hFW3be4UWDHb3vJ_JePoFRDJ6J5U0h5M 2JBwBb.o1_wEAjQbdH8qKboWFNGM67A0mdVEJD92R2HF5TeZuP.Jq79_nJ04 WUJs2qciXS7Wvn1S_4rESSA632T_6Pk8uJPKkBY9WlLDVy49RoNV6F7Wo1Ht J3qR9GfgoFpzSbXobezHvOA6xJjjwVWoiPAZj2HFPW6KghXn1J8C67ub27bK NzeR.KmWfw–
X-Originating-IP: [74.125.82.68]
Authentication-Results: mta1262.mail.sk1.yahoo.com from=crimson.ua.edu; domainkeys=neutral (no sig); from=crimson.ua.edu; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail-wg0-f68.google.com) (74.125.82.68) by mta1262.mail.sk1.yahoo.com with SMTP; Sat, 26 Jan 2013 00:51:36 -0800
Received: by mail-wg0-f68.google.com with SMTP id es5so211292wgb.3 for <deleted@yahoo.com>; Sat, 26 Jan 2013 00:51:35 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-received:reply-to:date:message-id:subject:from:to :content-type:x-gm-message-state; bh=NzDAJbWYbHHRwhsZDnwLefdGtc3rLtYDO5+y+KGCirA=; b=o35ltfPzptjrx/TrSJdLn3Wo+VuTzGNLAEnVGLYWjTyCCUjphp9bAkQqBSgHc/6/WG CV2ZwizU6uMFYGEOQjJphVonNohPHXpRNdT+QVWdQwxDVI3fyYBPeW/AA4/UMl3e6G2E TO/yVyuafly4Dxt7z/OfGOAMqXvUfqmfN1bXa03xdSxQPCwIiH51prRmop98oL/eyqNu 7fWjfuOVpSEgDi624/68ppxfFw0Ck5IIHHO8QvzFe3H1N2vZ2JltJgdoq7te+gbJvUpJ 3jBDfOANs41BDsmmToKkJrhnei7CNUfEFUlbTS16CDtZwabum0OLp1QAd/3UdwkJlJuu kmhQ==
X-Received: by 10.180.78.226 with SMTP id e2mr1542719wix.1.1359190295360; Sat, 26 Jan 2013 00:51:35 -0800 (PST)
Received: by 10.180.20.212 with HTTP; Sat, 26 Jan 2013 00:51:35 -0800 (PST)
Reply-To: online.wwtcltd@topservice.com
Message-ID: <CABw43i4M=o2Zw5KH6d-7QORMjuCYw6ccbUd6m3=8y59Vc=gdrg@mail.gmail.com>
Subject: Job Offer …..Great Pay Earn 10% Per Transaction.
From: =?ISO-8859-1?Q?Wujiang_Wanlinda_Textiles_Company_=A9?= <yliu73@crimson.ua.edu>

Mr Lui Kiang Wujiang Wanlinda Textiles Company © yliu73@crimson.ua.edu <> online.wwtcltd@topservice.com REPLY_ADDRESS: online.wwtcltd@topservice.com RETURN_ADDRESS: yliu73@crimson.ua.edu RECEIVED_IP: 10.180.20.212 IP_USED: 74.125.82.68

Advertisements
 
 

Tags: , , , , , , , , ,

“Sandra Omini”

ROMANCE SCAMMER – SENEGAL SWEETHEART SCAM

ATTENTION: Below I’ve posted two emails sent from Sandra Omini which were sent on Jan 7, 2013. I’ve posted both header details which will show you that this scammer sent both emails using different IP addresses. 

Also, click FIRST & SECOND EMAIL if you would like to read the prior emails sent to me by Love Sandra Omini

anti_scam

NOTE: This scammer also sent two (fake) photos but I because I don’t click attached links/files sent by scammers, I couldn’t post. The titles of both photos were “love.jpg” and “MYLOVE2222222222222” (mind you, I’ve only responded twice and it was NOT flirtatious yet I’m already being called ”my dearest” and ”my love” — one of the biggests signs of a romance scam is when the unknown online-user, pushes for a relationship too quickly!)

My Dearest,

Thanks, l consider it a privilege for you to give a prompt response to my mail, also l am responding with a little explanation of the things about me and what we need to do making the way for us to proceed, you will agree with me that since we do not know ourselves in person as we have not met before, therefore, we need to know each other first by exchange of photo identifications to help us know who we are dealing with.

l have here attached copies of my pictures for you and l hope you will also do the same in return. Also as you will know, this is the only money that l have left for my future living upon which l can better my life now and l do not want to make mistakes with it, please l will like you to send me your contact information’s such as…………

Your full name…………………………………………………….
Your home address………………………………………………
Occupation…………………………………………………………
Age……………………………………………………………………
Direct phone………………………………………………………. and Fax number) where l can reach you for further verbal instruction. upon receiving all these information’s, l will now send a letter of Authority to the bank instructing them to treat you as my foreign representative in whose account the money should be transferred there in your country on my behalf.

So that when l hear from you again with your information’s as l requested here and after making use of your information to send a letter of Authority to the bankers officials introducing you to them that you are my foreign representative to whose account they will have to transfer the money there in your country on my behalf, then after doing so, in my next email l will give you the bank contact and the contact officials in the bank so that you can contact them by email or through phone with your banking information, Your bank account number and where you want them to transfer the money on my behalf as my foreign representative. you have to know that l want this transfer to be completed soon so that l can get out of this place to come and meet you there in your country for my education and future living under your care for a better future of mine as I desires.

Secondly, ever since l came to this refugee camp, l have not been steady in school and right now, l will want you to help me locate a good university there in your country, where l can seek admission for the next academic year.

Am living in the refugee camp here in Dakar Senegal. Please write me soon. l really need your help and l am waiting to hear from you soon.

Thanks,
With Lots Love,

Return-Path: <lovesandrao@yahoo.com>
X-YahooFilteredBulk: 98.138.90.78
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: 1IjoQqoWLDsZWAjRySGjeqLNAAFyrdyevggSCp.7mzBLX5QO YvdxigPFD7YYIKV4TUJQrt1Zy6a1t5gbcVd56cBikBBcfn39wb6t4_nW3fel cPsehAp0KW43T3eaqw2y0puca5XaJKf9i9uulknAsjbCOLpg3SB1jxrVnMfH 3GhspK4e9m0As3b_plyA1y6kInYTAl9_DEPamK7.JjghGooInZLfzdv_huXM s0fKmjD3rJV0Y93nbR_JRsHffgZNMAZ2Z.gwLMZBYLjtZSsCGwHDwSabL92D BfYgmrOYG9fKe1j4sRohKoHt4snfumInvERDfdTqKXB2iAydL09rDmDh0Pxr AQKQMoENyu2veu1TWWdSA_vGC9u1K9QI3hdeWcXUMvjHf4LpAKsWD5nXbB8k .VGiREOry11FhFBBXAwu7OtMZbzEPjGrBjIcQWfP8eoYQ5Hm66Mu1CHKvBwl B8z8v4AHAkWKW9WmaccIhVEsmm7VO6ytzUYO.CPC2VCeZVmb1YvROcUoVi7V gEsekc3ZOSkqWKC1gkYaNVgb7aUe0j.OpwgIFfAxlT4KLZ3NmN_vMjqHHSMw acytLF1wcLDOwpU5W.YKuqVL_SbThGxb4jv7yFjGAK1NKCsuig1YLB0_HdqA yYrmlCX60dpKlCwKl81YrVI2pyV4r1b6r9Qi7lT3ezqVQRqRzqIAqbfOTPyt kS2j.NEFq8g7mUece52gTG31I47mVdSyUJA1_qpQ0SQIboumz3kAqiHqNYfx KCD_EYI6j3IZzEpHD2Wy9jtuwaApz.KqSCWqGqkv4qiMd2YdJ1mmgcDRLNQo cGu_6F8n64pTEVhQ2Chq83poIvUo3yMsynJSnElNBHVEHCrm1AVwvkNK937q 5woRtIo2HY5XipdhS3OOQXQ9i3lDa6oItPrg2Z8fgPeZeUgl4HndpjaGkcs5 jECsm0ZtBlY2sBzcTwjBJjSf4nexxusbPs5itfPElFIV.jvPTPBweW8sD45n _lmhm2_RX0Rujxj4gWG61UNMoIlnp7JxYR6fWD6B8IQRWQTo_m_JIm9b744c 6jJNi1eQx48wUSvhxsMUzcmHNIL1JTv9JOVF5cy0W.KPr55PXFe8PyfDyESq uoD2AGnWnUiaKZjAS1P6PBtMtgrpQG_6FD5xbyJDl2jNWh2zejdXK8UJmxYO VfWGaTYWsrLy785kHheMbQ4r2yYQd9.bTXMwlkpWVr8ifbS5XKTrVRI-
X-Originating-IP: [98.138.90.78]
Authentication-Results: mta1161.mail.bf1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15.bullet.mail.ne1.yahoo.com) (98.138.90.78) by mta1161.mail.bf1.yahoo.com with SMTP; Mon, 07 Jan 2013 03:01:33 -0800
Received: from [98.138.226.180] by nm15.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:31 -0000
Received: from [98.138.89.246] by tm15.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:30 -0000
Received: from [127.0.0.1] by omp1060.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:01:30 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 261138.8003.bm@omp1060.mail.ne1.yahoo.com
Received: (qmail 44249 invoked by uid 60001); 7 Jan 2013 11:01:29 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357556489; bh=sF39V2YXIXyohJJ4DIMYvoz+D4RbkXVTwI5HmpPU1cs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=BE5wb2s2Zn6sVN2koaDY7vQPaPU+cGNZtRoBYcdGcxd2ntt4fr8RdVctniXPGcuYLEYRiZZLEGGwhr4CAXIf/hdH4UdsHgE7D9Lay3Ka7XG2hlyml8wqNPUawvPhnUSwvPjaO3SjgjXkO8NmGpj6Cz4dJTu6QBp5gBb9ZwkNwPY=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=hsTK/l7O/YSlNhftvE+SSOlqrt0LVLpN5zAsdRfnLiMAQ48fPrJLpW7WJTStezmAnOsdr2HoJLoK0PZvM5rFTSnT0H6fh/+0eKgDW3QPhER6RQpHN61uAHHfXzeIGUD7hD/N3kS3DySGqwdNdjsXwMSCAMNySHpY7o4bo8NUNC0=;
X-YMail-OSG: VC8V8esVM1nIItl3zaBA6uZ_oE9xCFH9dYQCrDjRczq9s1Z IQLjn4D_gA6rF3196eBlK2sBorj81zxBMFAl9YzUQzmNsy92BZdx2U_svg63 9L9yw3WOf8etb9j91mnQ0c_zZFZeK5ar3ep_T.ASJ1irXF.UL.MVz.vckzUX bDSb6fj8czWpWb_9CvrBHLwTLORIYETSce3fvFOluoKGVTj8eGmxvc06qMaa 7upAvgj7EpqnGWg6RC42V5zrgqQvCoPlV3BnR3tWDUuNjK_8E5_t2UUw7TwY gJXec3YUDPQnqY6pMeGSBh5Bt7g7YSAY5Bsz3ZxtRBtZjUcuuKfUuGukY9WW UubW.qnODx492OgVPL7Td9SSIPKMKu9c.6Mvd7vbw4Gw.7RWglXPPxuxw5fl lxvKVKl8r6Fjg7W0zhBqnZoQV9R00NA161CHJzRPZRzJ3_eu8hX_eg.BzVZo ogZDhXS4KpVpTByx0Z5b6.hnk6Ace5evPOPvhMHsSmVYtMYmwlDZKUgZHMFQ qGldiUJ1bGHNhiye1I5e9kRPSlkSYn0rSjWUzyDRD5Ar_IWRv.1yCdwxYNWG GbiagnNkzl8P0mQwdSYgXlpnifTQFV8OEcITcag–
Received: from [41.82.130.87] by web125004.mail.ne1.yahoo.com via HTTP; Mon, 07 Jan 2013 03:01:29 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357556489.42339.YahooMailClassic@web125004.mail.ne1.yahoo.com>
Date: Mon, 7 Jan 2013 03:01:29 -0800 (PST)
From: Love Sandra Omini <lovesandrao@yahoo.com>
Subject: Thanks for your response

FROM: Love Sandra Omini lovesandrao@yahoo.com RETURN-ADDRESS: lovesandrao@yahoo.com

RECEIVED-IP: 41.82.130.87 ORIGINATING/FILTER-BULK: 98.138.90.78

________________________________________________________

ANOTHER EMAIL WHICH WAS SENT RIGHT AFTER THE EMAIL ABOVE WAS SENT.

My Dearest,

For us to proceed for the transaction as you have agreed to help me transfer the fund, you should send me your contact information’s such as…..
1: Your full name……………………………………………….
2: Your home address……………………………………………
2: Occupation…………………………………………………..
3: Age……………………………………………………………..
4: Direct phone………………………………………………… and Fax number) where l can reach you for further verbal instruction. upon receiving all these information’s, l will now send a letter of Authority to the bank instructing them to treat you as my foreign representative in whose account the money should be transferred there in your country on my behalf.

My Dearest,i contacted you to help me transfer the fund,so that i can come over to your country to further my education and to secure a resident permit in your country because,since the death of my parents i have been residing in the refugee camp here in Dakar Senegal,and it is Rev.Father. Simon Dickson the priest in charge of this home who helps me out with his computer to communicate you on this issue here is also his number, +221765359970, please,when you call him just tell him your name and ask him to call me out from the hostel to speak with you.

Another important thing i want you to know is this, please try to keep this issue as a secret because, i have not told this to any other body if not you and that is because of the love and trust i have deposed on you. Please don’t be offended if what am going to say now will offend you but that is because of my present condition here, so i will appreciate it the most if you can at least send me some money to be eating here till we finalize this transfer issue and be together because,the refugee camp authorities provide food for us only once in a day. I shall wait for your lovely reply, remember to keep this issue of my inheritance transfer as a top secret between the two of us because, i have never told any body about this if not you.

With Love Always,
Sandra.

NOTE: THIS EMAIL ALSO HAD A SKYPE LINK (NO URL) BUT THE WORDS ” Cliquer pour passer un appel A prix avantageux avec skype ” CAME UP WHEN I PUT MY HOUSE OVER THE LINK.

HEADER INFORMATION:

Return-Path: <lovesandrao@yahoo.com>
X-YahooFilteredBulk: 98.138.91.63
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: ZL4aQh8WLDvzm.nEQhp7EAokzebktzXovrG_M0rJtqQ_MHXx ZZ6_Eytmcy_9YsMPgsg.esDg4dmEz2fgGCdjhYe6LkDQFGumUzTLsZZP18V5 mQtKHwtQ9g8w7Q0MLYu82lhxRym21foSmKeGGRwzdSc5Mz8duZ1kML4oI8S_ y_YHT3KIW4DCOeApM4Gf.cBMD08lSQaBtkT0SGt.5F2_CzxW3RjtO0_xCOmV azRU.pB7PS1xKi9ER5Czb_XwCliwFh99yJAwAaiBddLS_.Yw6b67EpzoH7pv 2IXEyKwRhcZLh1bxEFx3qBs0zn90H3A76n.ESKkHCL9Kgzd3lzMKoOnhsTVg xyFX5VuLiCZTNGJUDzlatFoBUacip1PrzwUGSUapmtg5flNC4xxf4F1KT6QB HdKm8kdOeFr026UnQppsD_2EJk_nxDHDEeAvh_zX4a3fYbWUWeLQXfInv_8b SpKag37UitZFwOC3JV5XRB.ijJq93QXivf167FDxYsMHmBQ4t2B4yXcmA.FS THtSMluTFoLuZ9UEkucu7iD4p_hu0AijhjGtEr7WYybhnm57wRTca1O4nk3Y 6IPY2WEHtKL0.UVZaZpPtVs38Bnwl_jxPySE5Br_fFmO05D8Vxp8ANdq1n.G TnB_XrdwqEq23V4zLs2gh0lEeuLZC8tyh1EZ6jcoDqUFWyv8aZJcc0jv_ev9 LCZ.Xf3En_jCXkf7QdM8v591WTpjBbHmKgiUHq3kQB6IWEuyZPEJf9q6e1fh 3kT_vKtrS6moeRfhBhXdkHs4EBUOpYPaxKFKjrDWJTfB8XKplnn30LHTIdEe qEiaFd4jMYIQK0hMYcpwWuh667NJl6.DM_lrJFZoonWjmvs0TjncRZiiS4Ca y_NTB07_.m4W6DMTplYvI0_SOSlNwAnvNubEB1AhCTWBDGoQt1Cf_GZIhUdo A2xTgW6sSEw1QV1PEHOgcQjLKFqTbIeyrGg1.hazhbl.nPaUSfH1x5NJY1YQ XeqHk0m1hNZKvNBQQc1rRoMqGc_FziHuvc2kS04PpVs9evInRQV2TVG7A4Lz m.bVqmPiZi1YUSpHdOpHD3xaan8iMLrhib1JW5YswSqj1vOa8PfCEnQCFv_A bBolpnXG4TQQPmOnqncEbxeWOzD_R.MVW6rGKIgI35bDCyxDQSa.8RGL7wIt ts6t3mQRp1bMys_I20hWL8n.RPcHfuaYPtxV77F9vj0EknRqix6K3JEk.c5n m8JxCDxOWq6uRs422OUAHvL5zarV772WRxxGm5jnH1DaCvG_hCOJ8IEex6It PLDRIG_6uq1NkQ3gcp4A1gqznxVx6nKZ_ap.967kghkXvWDp_V1Ci..hUia4 DnavYvqHhyPQk.VJ7ow.YOLoLAlCjg8GnvL2PS6kTQot_4j1tIZNA6n0P5hx ZW2O_2zgNQrwZBn3_R.5Z8x2Yg7etfz2WDvAUQ3QhlXUnoZL9OYN
X-Originating-IP: [98.138.91.63]
Authentication-Results: mta1333.mail.gq1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm27-vm0.bullet.mail.ne1.yahoo.com) (98.138.91.63) by mta1333.mail.gq1.yahoo.com with SMTP; Mon, 07 Jan 2013 03:02:22 -0800
Received: from [98.138.90.48] by nm27.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
Received: from [98.138.89.234] by tm1.bullet.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
Received: from [127.0.0.1] by omp1049.mail.ne1.yahoo.com with NNFMP; 07 Jan 2013 11:02:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 98866.57766.bm@omp1049.mail.ne1.yahoo.com
Received: (qmail 44614 invoked by uid 60001); 7 Jan 2013 11:02:21 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357556541; bh=QeXsO4FaKKKdpb0dARzj48oGSADrn8ZArz+vzImbRDM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=fFL0mRPgGFeN52Qakcp0Wiji1nT84TV6YSZKuZd80VTxoUEFO4uX6Rn8I2XaH5fAT/cR1KAfmrMMF/jGwjj0w14I1pbemTePHvul60hkD9LwwXQt0vVfVCtTwl+cwQrze7s5mRdUFbLbuFZ2CLVoZHflkQSirzGBKL/lBmxGaH8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=g7Rv4EXWIUcxHv4INWOdU/mi/dl8kalG4XpdyNqNjU2kH1p3oiqUZT3IhR+taly7sPs1wYrH2OM58q8sKsfAV8YxfwYfcUJUNgWrLI2tHXTZ7eOYADitfQ9c1J8g6S5zCiQRuiY3OY0G7P3w4no5Uh2ZQS9ko47GoxguI3H18+M=;
X-YMail-OSG: QqRpdA0VM1k39KFdomfmoYqlQQbkQz0Q4ODCQvXnrcT9L97 vNoygxjOwX8e7XH5f5y3kqlUxoeqzBEuboabbWbM7RlYYDjxx1zZ9xnKPFhi MRV5j7z9mUz19_cx73qYjZo.f3NyY2aovnPu.Wtp8ZENP3N_xz7uHyq6Z.5a XQ1LXF5tApybPpu4nauCG1z0vjiEhjq3Ji0zfzD8mqxOQT3QGxm2Dd0i4Nxg cYmyLtW60CafnXTbumqEaMhvM6ngL4Ypx9Wp_epAuO5Fkoft7j79dQp2RC79 JKU5XgUMfbr1yBpSQt0fNJzZIDAzFWSod2lDVm7Sh5Ee9HXF1IR1DyoFVcrC 5gmB2hWOGU4SHwNlwRtUTznR_k.8W6_Fe4QrV4OHspBpd77q776NDVGaeMQE AZ3P4j7AhZpouQWKUobU0ZAEAv9uxKqD0D31Pyeqy1srAcj.ydTrSpQVviWW 3Apn8DojsA5qQn.1gTap3TLmwo2R.brLkEJ3iBjLu3xzDAh_tMpFQFmRHm0M N.rfuEedd2jUx3DFOZuRfZVFsmWiA1R7VkYJJSzliyh5daimEJMnOnokTaJb 9O6X5CVFwUdlC1EirMp7X6DkqRmwrjeJOIyu1uXp.sceMZ03vGgE-
Received: from [41.82.130.87] by web125004.mail.ne1.yahoo.com via HTTP; Mon, 07 Jan 2013 03:02:20 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.130.494
Message-ID: <1357556540.41156.YahooMailClassic@web125004.mail.ne1.yahoo.com>
Date: Mon, 7 Jan 2013 03:02:20 -0800 (PST)
From: Love Sandra Omini <lovesandrao@yahoo.com>
Subject: GET BACK TO ME WITH YOUR DETAILS AS I REQUIRED HERE

RECEIVED-IP: 41.82.130.87 ORIGINATING: 98.138.91.63

 
1 Comment

Posted by on 01/08/2013 in Romance Scam

 

Tags: , , , , , , , , , , , , , , , , ,

“Math James”

BUSINESS PARTNER SCAM – NIGERIAN 419 SCAMMER

scammer

Greetings to you my good friend,

I received your forwarded assurance mail,

how are you and your family?
With due respect, trust and humanity, I apologize for sending you this sensitive information via e-mail instead of a certified mail / post-mail, this is due to the urgency and importance of the information, please I Appeal to you to exercise a little patience and read through my letter I feel quite safe and comfortable dealing with you in this important business.

But you should know that if you must do it with me secret must be maintained, therefore seal everything until the fund is transferred in your account.
Honestly I will really like to have a good relationship with you I have special reason why I have decided to contact you though this medium internet has been greatly abused, I still choose to reach you through it because it still remains the fastest means and most secured medium of communication, however this correspondence is private and it should be treated as such, before I continue I wish to inform you that this letter is not a hoax mail and I urge you to treat it with the Seriousness it deserves.

I also guarantee you that this business is hitch free from all what you may think of, reference to your mail I want you to keep this transaction as top secret and confidential until this fund get into your account then I will come down to your country for the sharing.

So for urgent proceedings I just want to know if you are interested in this business, for me to stop looking for another person, and it will only take five to seven bank working days process to get this fund transfer out from this bank to your bank account.

This money belong to our foreign customer , he is a civil engineer in construction contract who died with his entire family wife and three children’s during the 2001 American attack, Since then the Bank have made several enquiries and waiting for the family or any extended relatives but all efforts was just in vain. After these several unsuccessful attempts fails, I have contacted you to assist in repatriating the money left behind by our client before they get confiscated or declared unserviceable account by the Bank.

These huge deposits were lodged, with the BIB Burkina Faso, where the Deceased had an account valued at about 12.5 million Dollars,

The Bank has issued a notice to provide the next of kin or have the account confiscated, but as I am about to retire from active Bank service in five mounts time to start my own private business that is why I am skeptical to reveal this particular secret to a stranger.

Please you must assure me that everything will be handled confidentially because we are not going to suffer again if all things work well as I planed, and for the benefit of our families,

Now I seek your consent to be present as a partner since you are a foreigner, you can provide account where this 12.5 million Dollars, can be paid to,All I require is your honest co-operation to enable us sail through this transaction.
I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law, you also need to assure me that you will never betray me when the fund finally arrive your bank account and that before the fund reach your bank account you will never inform any other person about it, because I don’t want my bank to know that I am given you information to get this fund out from this bank.

It must be secret till we get the fund out as I am still working in the bank ok,
My friend I did not choose you by accident by the way you have answered to prove to me that you are the right person I am searching for, and again I want to assured you that testimony is on our way and you will never regret this great opportunity.
Please I have some questions to ask you

(a) this business do you have the capacity of receiving this money when transferred?
(b) Will you maintain the sincerity and the trust I have on you?
And the way we are going to achieve this, I will need the following information from you,

so that I will not have much fear
Your International passport, I.D or Driving licence.
(1) Full names:……………………………………………
(2) Private phone number:……………………………….
(3) Current residential address:……………………………….
(4) Occupation:………………………………………..
(5) Age and Sex:…………………………………
I feel quite safe and comfortable dealing with you in this important business, mind you this transaction is 100%.risk free,
I await your reply before I sent to you the Official letter of claim which you will fill your data and

send to my Bank for processing and approval,
Thank you.

James

HEADER:

Return-Path: <mathjames87@yahoo.com>
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts) aXZlZCB5b3VyIGZvcndhcmRlZCBhc3N1cmFuY2UgbWFpbCwgaG93IGFyZSB5 b3UgYW5kIHlvdXIgZmFtaWx5PyBXaXRoIGR1ZSByZXNwZWN0LCB0cnVzdCBh bmQgaHVtYW5pdHksIEkgYXBvbG9naXplIGZvciBzZW5kaW5nIHlvdSB0aGlz IHNlbnNpdGl2ZSBpbmZvcm1hdGlvbiB2aWEgZS1tYWlsIGluc3RlYWQgb2Yg YSBjZXJ0aWZpZWQgbWFpbCAvIHBvc3QtbWFpbCwgdGhpcyBpcwEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzc-
X-YMailISG: uqS19_YWLDvPD7Fz8RqbcSlZ80vvCFMM.xbt.dIcfLSKv.w0 2OPWpHRcwuBBE4F96xiKVXucMKTUGsxo7BjTEumJ35Il2gkf_V7ymsRux.72 dkDdAh6Ogg29ATdG11W82NJ1NzAXV9Qn.1W6e9gEsg7rbcyxE6s7bhq73PbH sKkXV2Yu2qps8pdG8QnzdyGrbxeEAnbJR779gR.iGcz3mXi1f5zlQvJybXX9 w.aTpEgKZRKV.2E.RKNHQ2GQ7tClR9C5t_2h8ZmrhcPDhIKs2zG3CgNOV8Tc bdi711peoRJIRbl9FFdLhiPQ4T7IsCn5e4tQeSk4H6Nr4i7eJS4tegQwlCLW H0zDjlY46FcQoa3q3r7a0AqMJKF0goWBBkSPlkuvLHMDMZDZA9Van2sccKk. fGyqJxz0AMMfNMeEqvdzdZUZe8QVaHFD2I09qcTox.UNbxy5pqzbs07nnmoZ AxjzAG0qAu8V9yM.uouTTYmiRncDD4RP4WaOSvtau3w9BlLSVgke_c8yJgiN 4WERvVen5MDOs258Yv2VxsApFXZhUZIgdTudkNyzkSbT3x4OUiM1DNstlpjF 20hYlLKnhMK2Bb74EYQdjOHAkOZglwPy8sKK5dzTD3KTtLvfZoVky8yNmX.P CclUwFrJN4OtZSPOvg5aDU1swGsa7hzJwvhw0SPn8rcJdFp9IDwSx2PfSVGw OZPs9ryMEmQifES24w3xoOEKN3EjHNJELEUKtWP.g9zxJRAsFXt34RWlmsXD FfXrzmWYZ6QWkEEqHd.PnCac6ruoMTkvcOfGuAQzM6lGiFHwpDGiJE_mNnMj T3Hyo_3kyhkJ.tR2RtCapPTvLg_eo2z0R.fLL9zwuww1D6B5BGiLAr7y5CgE 96cgYDmTr4b.SKApVVO.8xhE1Tpk8VvVOn8hfT787Q5k8ydP.vcH_5Z4rHDx PZKuCvsat9ZcYocrRTApURJYtY7L6R7mYr_tiKQS._p5n_PAsFxYCrNb7_O2 S4ofnz7bdHvmWKTfhdMU3zooMIUW50nHz9Pi9S_fXUYMERDDbZb9
X-Originating-IP: [98.136.217.217]
Authentication-Results: mta1254.mail.mud.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm18-vm2.bullet.mail.gq1.yahoo.com) (98.136.217.217) by mta1254.mail.mud.yahoo.com with SMTP; Fri, 04 Jan 2013 06:04:05 -0800
Received: from [98.137.12.174] by nm18.bullet.mail.gq1.yahoo.com with NNFMP; 04 Jan 2013 14:04:04 -0000
Received: from [98.137.12.228] by tm13.bullet.mail.gq1.yahoo.com with NNFMP; 04 Jan 2013 14:04:04 -0000
Received: from [127.0.0.1] by omp1036.mail.gq1.yahoo.com with NNFMP; 04 Jan 2013 14:04:04 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 543489.11989.bm@omp1036.mail.gq1.yahoo.com
Received: (qmail 62761 invoked by uid 60001); 4 Jan 2013 14:04:04 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1357308244; bh=/lhWtUmZXeK/lblMVMWZrCSu/dmVI75nTwBGmlRyEo0=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=nTZXBsOFCmCR7e0i2aJiJXhmtgemaRmPWzqSXMdXFiNs7yLzXSMcJCPi8ZlmcIYc4BdXVyt+BlgJtfhj2Ha3r40zUB6bhM6lKzhuv7X5z2Wl9BKALVSd+ONXNkmFEMOKyztUGU+EUObe8HTB8awueuBjyN24jZZfyE2cy1tOnT8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=xqhMJWr2scmGYy8KYwjst36KqYhWZ4Gl3Xmr7mWk33n/xi2XzFQI1jgCBQEKtqYH9p7HscdFFIEEwnYa1nczHeGl8Z51Hb+5AzCDWw35rFXuzZZ8kJd0zBUVR6yooB7THj1woshqW/OflkA3GH+u5qW6vb6nYCSQQ/hj/0tctH0=;
X-YMail-OSG: e2S60kYVM1lTiaeF9sLlRDZOwuw9RWyZMGJLMdGkbkUUKOv cDvWu2S_cTXVOTeciia72LybgO3iwOAube6q7v_yadxXFAs50B27CTg01Tff PjARdqgUh3y3yUKPvSEALzmx_f5EXWTnaIS6ZSSI.40VOGa75HW.au0.TvML Xh9T.PYg8JPa9bicTcRMKkeXjFI9zgec8i6cDgzIL9ULaRox1V28r2XAuLa. KrxBGtBVWuVSMWCpe7MIxWHPmD.1DS5y2om8EEdTNbhN2YNQuWZtFGq8dW6_ kfVQspm9O5BrNs.SrlcEd_yjpyQP4gOq4VgmZ2sunbufMh4b8U.FQ8qU54n0 cEtli3kJgI_o2NkGGIrox27H1FX.ULttypP.ErSWzNDU12qtdza35JNCb3l4 lDLlnCRiB_uBUXckZHHWoCgBvwAfAkPSvPLcO2KcMi_VP38Rgk.MHjBLoOgG o7pmYSnKxHVY152_tipAugUc-
Received: from [41.138.97.125] by web163503.mail.gq1.yahoo.com via HTTP; Fri, 04 Jan 2013 06:04:04 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1357308244.62389.YahooMailClassic@web163503.mail.gq1.yahoo.com>
Date: Fri, 4 Jan 2013 06:04:04 -0800 (PST)
From: Math James <mathjames87@yahoo.com>
Subject: Greetings to you my good friend,

Math James mathjames87@yahoo.com RETURN-ADDRESS: mathjames87@yahoo.com

RECEIVED-IP: 41.138.97.125 LOCATION: Burkina Faso (Africa) ORIGINATING-IP: 98.136.217.217

 
 

Tags: , , , , , , , , , , , , , , , ,

“DHL COSTUMER CARE”

WARNING – NIGERIAN 419 SCAM – ONLINE FRAUD

THIS SCAMMER IS AT IT AGAIN!! UNDER YET ANOTHER NAME AND USERNAME.. OVER THE PAST COUPLE MONTHS, I HAVE POSTED OVER A DOZEN EMAILS ON SCAMMER419 SENT BY THIS NIGERIAN SCAMMER — EACH EMAIL I RECEIVED HAD A DIFFERENT IP ADDRESS AND EMAIL-ADDRESS.   

SPOOFED LINKS WERE ALSO ATTACHED TO THIS EMAIL, PRETENDING TO BE ‘WESTERN UNION CUSTOMER CARE’ — THE ACTUAL URL OF THE LINKS WERE GOOGLE.BJ/IMGRES/YADIG.COM/UPLOADS/BIZLOGO/DHL_EXPRESS_ALGARHOUD-ETCETCETC

EMAIL: DEAR CUSTOMER,

THIS EMAIL IS COMING TO YOU AS A REMINDER CONCERNING YOUR PENDING, PACKAGE THAT HAS BEEN WITH US FOR A LONG TIME. AS YOU ALREADY KNOW THAT THIS PACKAGE IS CONTAINING AN ATM CARD IN THE AMOUNT OF $1.5 MILLION USD.

THIS EMAIL IS TO LET YOU KNOW THAT OUR DELIVERY TEAM HAS FINALLY CARRIED OUT DELIVERY OF YOUR PACKAGE. THE PACKAGE LEFT COTONU BENIN ON WEDNESDAY, NOVEMBER 21, 2012 AND SINCE THEN ATM CARD HAS BEEN IN CINCINNATI HUB, OH – USA , UNITED STATES AWAITING CUSTOM CLEARANCE.

TO TRACK YOUR PACKAGE, GO TO HTTP://WWW.DHL.COM AND INSERT THE TRACKING NUMBER BELOW TO VIEW DELIVERY STATUS.

HTTP://WWW.DHL.COM
TRACKING NUMBER: 1736996225

ON THE TRACKING PAGE YOU WILL SEE THAT THIS PACKAGE IS GOING TO A WRONG ADDRESS. THIS IS BECAUSE YOU HAVE REFUSED TO GIVE US YOUR COOPERATION. YOU ARE HEREBY ADVISED TO PROVIDE US WITH THE BELOW DETAILS SO WE CAN IMMEDIATELY HAVE IT SEND OUT TO OUR DELIVERYMEN IN CINCINNATI HUB, OH – USA .

YOU’RE NAME (IN FULL):
YOU’RE DELIVERY ADDRESS:
YOUR DIRECT TELEPHONE NUMBER:

PLEASE NOTE THAT YOU ARE REQUIRED TO PROVIDE A REDIRECTION FEE OF $65 WHEN REPLYING THIS EMAIL WITH THE MTCN NUMBER WHICH YOU ARE TO MAKE AVAILABLE TO THIS OFFICE VIA WESTERN UNION MONEY TRANSFER OR MONEY GRAM IN THE NAME OF OUR RECEIVING ACCOUNTING OFFICER STATED BELOW.

RECEIVERS NAME: MR. Mike Osita
COUNTRY: BENIN REPUBLIC
CITY: COTONOU
AMOUNT: $65 .00
TEXT QUESTION: URGENT
TEXT ANSWER: TODAY
MTCN…….
SENDER’S NAME…….

UPON RECEIVING YOUR CORRECT DETAILS AND THE PAYMENT MTCN FROM YOU, WE WILL IMMEDIATELY NOTIFY THE AIRPORT AUTHORITIES IN USA AND THE PACKAGE WILL BE REDIRECTED TO YOUR CORRECT ADDRESS IMMEDIATELY. EMAIL ME ONLY ON THIS EMAIL ADDRESS: (dhl2@superposta.com) THIS IS IMPORTANT AND AS SUCH YOUR IMMEDIATE RESPONSE WILL DO YOU GOOD.

MANAGEMENT,
MR. WILLIAMS FORSTER
THE DHL MANAGER BENIN REPUBLIC
ADDRESS: 455 AGBOKOU ANKPA ROAD COTONOU

HEADER:

Return-Path: <webtzzzz.office@att.net>
X-YahooFilteredBulk: 98.136.217.70
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: p8lVcL4WLDvewhzIrylP8xI3a9LPPhDBhDME1lzPGGvQontc ktbWdxpu_gs6JvDnQScDSWwl56kzWHusRAx2Ds_pdgSzG9Qe04L2o21e8_33 wUq2MqkyNEx3NWbeKyr3FpnTLQfAwBWI71cd7utjFjL.A3xFMZ9DtZdd3UEU ekjqbavtNkSGPy17ayqcXYXFzXhtJ6z9igt8f98FmG4Iou1.caQ8bTP64g24 3VffbJI0URmoUkaMy45c_9hdEee.Abk1kXU.QJdCFbmvEuy1JRNl6ZrRPxOA AutA0VeLSsTanI5L4EcjxGG05bvrIUMNLGi.mrjRkZctW1DW7DSkfvbYZqZ6 tG9wvfA2YLxIdIUcpNu2IF_LnReU_5g7ltkMJt43H5.rMm5V5dsb_nL.D_Jq _MRVXp5JNGwNDvxmeSpK9_XTGiq45o5UiRG5dCWpQGCkeTFz5q0sbbPw_mR2 97MAsA0lSc30BuGg_nmZ02Zu.kogPIf9.i26DQ.Q4ghuvRXbQ4sc8TdNTsq6 5FJEydJCkX.3ERwsGZBCHEv94bxh77acpC3.Pb0iCCYgEPcDGzGJHNwFZvA4 caVPp81ffhDY0vIoV03.eQ_rOSwXToPiu_U_IjpLDp2iVn6Nz.bCHHw6zjVz KnzWiD5Bk6oQI3BQZNAR_ZJAAmyWpRMCc.js4hRh8lbFpW.jCESgm6iGyaQD w6BuEQrnBd70DRv2iEnTyTWBKuuUnZIHFoq2JwHGktXkIUFvB3DbgNUIAqnQ gu_oJnjFdEp3F7diZo.5HZgi_UannfhTI1EJLtRWoaPAZxMizPkKl8_5cp_h .YCe.LH1Ygvl3S2FMktaLvvciuhuarxlw_fYfjVX8Ve1LjDzL9WVBf9evyt5 880sRXKXNBUG5PgxcRID6GynXX0mVwdkd09X1ypVCDK28e7pjnzoqwuMHpn. jV3a7Njk9OcYeeHu9GnmTbSIKrhvUV73WYth8geL0xmT45cVlwQl6L4HzLrh kXhpWUuQJXhUO44K9dZIPqg2Ca7RNsqpQV9eVW3L.XxLmj99CvbaAX.oJeub kxkq.VYo33MlLbo1q.JQGFIIGAYfkO7pRfZEFjbIJ4D38NYL55jgyIeRCUDw Cr_zDxDX1LBlGy9cmQHMQWf4Jg9.f_xh95HWujLyQce6hVJ4z8PoY1ChEYRp aKlgoRxtBn7DkH256xF3QI55u1JZfy9Hg.atUmcIsq91wp2ky_pdpD0wtsVQ RAVN2CCt7_CgdV.TG8cbizBTOX.JawUCRcj_nWQeQ5c7KG81hMoQtPydgoYs PLnEOFNgyGQaHeKYmrQUr9b00tdgdGGyBuNfP5r5jFujaTMIl9F8dj6ZCJGi hB_YsBJ0_4dphtAG7w.rvToXz93tmmanQsk9ACdm_N.1OEETOtYUtZKZI1if lMj.aCK8RaPrX3zyBnqxHFBkT4lTZBv3.7tsJcMX0UwjqfmkMEkcnCfqZIWc Fzb6F1kKphS6VCk5D3x.55eRTt_1e5GnkpMWuA–
X-Originating-IP: [98.136.217.70]
Authentication-Results: mta1019.mail.gq1.yahoo.com from=superposta.com; domainkeys=fail (bad syntax); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm22-vm7.bullet.mail.gq1.yahoo.com) (98.136.217.70) by mta1019.mail.gq1.yahoo.com with SMTP; Thu, 03 Jan 2013 02:27:26 -0800
Received: from [98.137.12.63] by nm22.bullet.mail.gq1.yahoo.com with NNFMP; 03 Jan 2013 10:27:26 -0000
Received: from [98.139.44.82] by tm8.bullet.mail.gq1.yahoo.com with NNFMP; 03 Jan 2013 10:27:26 -0000
Received: from [127.0.0.1] by omp1019.access.mail.sp2.yahoo.com with NNFMP; 03 Jan 2013 10:27:26 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 72063.61201.bm@omp1019.access.mail.sp2.yahoo.com
Received: (qmail 22369 invoked by uid 60001); 3 Jan 2013 10:27:25 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1357208845; bh=lmIBzo8pehjJsD539T9RFIDhRXWzlDcc3BSQ0Igdr2w=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=l/M9cJxrlpIXZpNBdM1sj/yVjEflcd/UJzeIGcUPojiLE7DY0UnFDztt1kD0gVw7Q1EhV+xvpnonQnPGIOIR7ix4Of4kBityUsjL65NuLb0bAIK7ARGY9FVuBDui+wJA+PcgpytkrxLXPPlcb/I58hCmlZhvumPUUKYJEPRwprM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=WpuFi53revO4dlTGjmLXeGSXpTg5q7twxkK4tWto5mJzy2lW+XcZLfrd22TMs/evyh/HS0iT9suPjqthzByLcn3eaH/Svo9KOt03y8KibBn9ComYtN54hkjgjClRIPlnB6ujaucXL8O/ilqfRh0w5ZfqM8Hw+S5K8oPLxaDu99U=;
X-YMail-OSG: X94oLdAVM1m3RFepMGMdx7qyT2Jc7tIr3A9LR8KPGHJW1GV phobi8N5t3h84tC6e.f1qyRXMUJtrPu5VPhp7pb7gMMGA21NwAdKb66PmBas 4UCb1R3JFaI48Id46IPLscQH_i_q88UY9_Z7o._SoDBnfMKqBawzo6a6c_IY 3pWsPFCvcjyopXUwjZhQN4DxhWMXVmEHJbKCv5F26akn7VGzfeyx9bgeHVsT w7ooyrJiFWIVcXOWCTI8pk1BVlTP4j.r_WCUsWbIeRWsbt4C95hThw4Ol7S3 JqQVe1iXz8cmWn3ftbA6Z52Xb7UlQI_QGO5dYeU8bFsOT3tfikU2AxI7ex5C Cpy1K4MSV_9Z.rKmBf5wiXdJQWfvs_LWugO54wwph9CFvLuKnniUd5f0..A4 Fr_23dyFIJ6QokMJ8Mve5dM9ovEAG9YY1z9LgXkreXJS88oIAQtE_KkVKVU0 gWFoKAbYkt35HaPUYUmlN4zGwfKweMqQUxEmy4ptw67JlVv67qvnZvUwWsKA RwJfyCwx9h.SVITFhM7DRx.O8zzjMzLixz2DDNKk_8mL_VWx0j3q1TsA7FE2 ytLMjsiuly1.Di2.3YqFGRNAHUwhktYRY3IOyl0eTeGsUEEiD07RW1Kcdcxo 3VFkSCLQ9y7DX84iRiiAhV54qkyiVqg2CfSSe5uoZYmvzzig5Udn_pPo16dX 428XiGVli01fNur44l.DejLkila7cCZhQB150XLi7Vl3SuTgQ5gXR5WG4P9s yJCBRRF7NmxiBzr5uaNr9tadVYQWUdv9QKM6pOZqbY3.SIdMCxcHSzvPbyMN NXvDTQZDY0DcD3wNyVBYPwwsuZMlNs6EPEpPB.GGCPyeESv1PBlNXSRfhY6u kuAaz0FrOt588U_D1DnKbeMKqtST5p6qNbzMxIYEuncmXn10pEXKs2xEWV9x pKo3l71HmCFiNuI3Ld3wnSFPKeu2oBJEEi7vtqGPQWVAUbrWI1vl0V.O6B8N akSZIyzpkQPmibzAAFNXDyn7r1mmOeZHeDRw1Me3ivMm6jlx3T5qZ6E4EIhj y1yPHgLwcgMWExjz3rUAHUXE20NVpipk6mrKdiQnVAbamcYnTwXr30vti372 w_tlPlNlEsEzGhuiSRXHA2de7xApjoyrRouwpkkBGdGxN5jcOh2Bcm1L50Po gTPn6njfBxnHuzLfXxkLChhv4zRej8FyTIxwOTmUmUDQPZMun8Zk4njcVeY7 aPEnUTyk19.Viob5P.M4.wC1JRvqPI9a47Gux6m3Be28C1xTjk0PR9sP5eNX b1jZstUa5LUyKtkRPkOaQ.RMyDYhbZpHye7RnyI65T5UZ9yvh2GGAj6wb02I IeuaekkQcOipGGmykNcXcyC45tRaMp6FHUj6uCcTwMhixIEhC8w9iH1qBM96 GsD5rVlXiLvwI6F8D6durYVBgsh9KuWAGlMhVwED_P8Jet.U9cbWyubFwehp xnyOJE3jp4cztVwV5UWA43qTPTTwQQb5BTXf8Yc3Wk68MG_sYLAvrDrHnYjq c3NV1ESe49OSQrV7goXKLwa.rHHX61y8EaI0gOP9kVrJnkKLfuXa7S5GOA8Y cztYklpTNxq9fZmA0XtMQuzfQGnLKZeCoCJlNjmg4zrV2SBW0d8D14x1LAyT ccfz4E3ew4mPJXPK1IzZRAxwjtvL_.NeTiK2.vgL2oDJgl25.YkqB5cilOLt Oy_qy.6uwFEf00zP4TVLfV9vLSoQSDKNk0VY.zAn29lE6ERR_pPa1uYU64yU eXuqZEwB0.BLV2kAeWWw1FDtacrwAq9x5GoCBHtYaGCd65Q8KxmTVib6BNnt og6uqfVwLY7OIYdSXZ6OtPuCNXtBHLZ2WVK8uGguXuoeBDlnySbiUMey9CBI vZjMvlKF8Z.KLCM.AJQLOljzfUf1xXmjVbbRiA6cUiYS6c37wirwGDy8gM3Q gwdUdOlP0wRwXEKQbePmN9IM7Uqr9ThtUnd7oFWDQs2jkLA_XXco_EdWPUyx x8Nx6QFKBtp_LKzQCxKrT2bgAr4am.c3WrmkhXBNecGDFhuA3npM0P4jAj93 RZ9wM_FKrhb1jZ0g_utpMzjo1wfmvHOuZ4a9Ky9vBw6_gjhptbH5lxXChwj1 9Ik.apCbmh6FheKDuFyxL30K3ocRkfkX7_gTNyY_NhDPa1bEhTLmyZi7OYbl LHLanewYFIU8QnJ0ai8TKLU5SDS66ba0_K8EbfwFnaYPGCzs9hBaVuz7rfz_ ITxJyTORuOmUu_3iMg6rpO8Ld1ljXko7_baLHZYxsm41aISCNe9i5bZMEK9a 1bbnQKptpjurAYbNct4LXnNR.4U8HwI7cmxbKRkyzJObqKHmDEh63c7a28Tj 6rCqpJkf017cEFjeZ9JVerHgfnnaNeDypbqoyrpZXknyMYMfPv6sKdn2dQCT FogwMPiW1HT2lEveJVs0ZRkKsb.KmCGelImLgCnVUmsnvH7E.N_clj.Du2i8 58xoGAlimQLf6XyorSU22o2AzVaO2TyVRrxE5yOGZuZCkTJ8Jp0Znj_eXfrp oVmdqgptN9BZ92.p.6T0Keprim5vvTAuebyqrSHxmTFLVnt72cGaEADfQ1yX eUt89x1QjLONr6VnUEsH_pabnd_Iby2AfY9PKyG7mm4jBOUWkoe0u2KS.6Mc e.g58lXFrRrPH_zaJNMr3BMrEszqPAa9VE1tHGCKqtWkrQvxuqrQOhpECkXH c1.wybhocLijGr9LkOJYbM58_dL_awf.VtORuO5qT_Dvag93V2.ngMf145EN jfRnuTSMLWQ4VbAilC1r5WCxzGlyKM5GnUz8HsEkO6JOSRFNZF1v5dRLDwVv q9hH7QxSGTqNQHG5lNWyEM_.h8t3gWBrJuY6j8BLV038OdDDfUPTSpO.TPRW 95RVlFFHcHrxvIoT6jm7SaQ–
Received: from [173.13.200.181] by web185005.mail.gq1.yahoo.com via HTTP; Thu, 03 Jan 2013 02:27:25 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1357208845.7111.YahooMailClassic@web185005.mail.gq1.yahoo.com>
Date: Thu, 3 Jan 2013 02:27:25 -0800 (PST)
From: DHL COSTUMER CARE <goodwservices@superposta.com>
Reply-To: dhl2@superposta.com
Subject: Your Atm Package Tracking Number Is 1736996225

DHL COSTUMER CARE goodwservices@superposta.com REPLY-ADDRESS: dhl2@superposta.com RETURN-ADDRESS: webtzzzz.office@att.net

ORIGINATING-IP: 98.136.217.70 RECEIVED-IP: 173.13.200.181

 
Leave a comment

Posted by on 01/05/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , ,

“REV BEN PETER”

LOTTERY SCAM – NIGERIAN SCAMMER – ADVANCE FEE FRAUD

NOTE: THIS SCAMMER HAS BEEN EMAILING ME FOR MANY MONTHS UNDER MULTIPLE NAMES, EMAIL-ADDRESSES AND IP ADDRESSES — THIS IS A NIGERIAN SCAM ALSO KNOWN AS A 419 SCAM

BELOW IS THE MOST RECENT EMAIL SENT BY THE FRAUDSTER. THIS SCAMMER IS VERY PERSISTENT BUT UNORGANIZED. HE IS ALWAYS CHANGING THE AMOUNT OF MONEY I’VE SUPPOSELY ‘WON’ AND THE FEE THAT I AM SUPPOSE TO PAY.

freemoney

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $ 7 M

HEADER:

Return-Path: <webxx7601xxxxx@att.net>
X-YahooFilteredBulk: 98.138.90.65
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: To35UWMWLDtpI31Kn.0SLqgNnW08Av0SCFAssCMR8A_Vo1GP GrWi2SRwEUK0_rS5ma.EeNhpXLBHGeRggiFG274YMQUgELYQceZCuxW3lQPN rUoT6knijOkKBdqZkH6wbwxbiX_cGEA41SNaj1GVee9_wEMb3td4XzfxKB2W QHrpIw5Zbu_LEuE.UohMdPBo5n_Z45sHFwPWKeKvax4FtRd9YMFoUrM1giBG C7CLdLh9vlCZzCePSppkA0cvOXt_.mjRjvpOP8QMqDhPOSUFydEEMwgIJns6 2p8QA6wY01j05hbhCrsTYjP7PMBklSFGar9DIbx_rQrES7XDMCtPwl3rskW9 mA0o9k.0wE8917_bR66zH6.r4hgk2Pq8J16QU1Lb0v752n9EcJJSbMbbFQCB wY0piVWQGMKir3JfkdVqWpd_w.T_TfFpxV4cemt1CKnbhoD0FsU7NfExkiJc A5joObOkIGO7Jd8HRyCdsMC_W94SyWlu8v8d0TzsLFjtxDlq1n1fiHfB1XRH vxTmJ6lgV_.c.iXkiuD9N3_pT1_aPP7W9IwCbbDIwtrF34MNw68hMJvJOUe2 pH.jPfBNQHLQFxWhxb6lyVSyv28tHpugjC308j7ixZ00K9T_7yuZ0IHQF6K_ Qd3WjZM3CHJaBIWb1rlNDSqMRfzuahAUzICBFaX8u4wMRTaHcpwTOp7nRUrm sazz9ZeJ7QdN8pKfGePiOZZHXxb1KoyvjL30TC9knrdnerK_gJQgdXaFI8Q5 3er.rbh.9662mA1tWwkL.uw.Ej8jeMmTC81X292stHfa_QQVzMpPvYAw5A9x eqmWm6ToSeMfSIvtRovTlmbB8SkoM4oN0TU4hSZuZ71YzhIaZGFXCNYoOJne 7vGYNkak_HoeCUFsGusF92TWky2Vc9PLHMAgihSZ5i2dv22EV6xQduzDwaC6 hR0YvxZO91Y5nEmgU4JgwTACDxEFzztQjg9nca9TEBemHGKAs_inoBvYmRgj 9NAenemYR2BttVDhS7s50y8s2lyYQLrcXQk7ozgN_n9MjmXaMO0PpbZ7Vpge 7kwg93PpaJb42PYuo_xuEisFLWcWM2dUBSchWFlLPJiuJh8X1JF31AOvxAaS y5zqbbq0gA5D6y8P6y7bvMT6GA.RJbBsQnHsqzQ9p62epYsuSBn.GO8e0Obr iTJkg19mglk6slzhX2ciB7jr2mRWI6xcf4zG3rU9Rruj0ndRzYpo_d30lRuc ri8BKqd2I3s9zVfL6sSwKtJADSftjvwW6RTUXPvc2TBzPoA_QfWHZLqs.vAD fbdtVFTINFo2tQp5xrw8ZD.fSJPwkEmhSP.jOfvKar5IpIk2JWk37aJ3w_S7 tgimEtxHc8pR
X-Originating-IP: [98.138.90.65]
Authentication-Results: mta1052.mail.ne1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2.bullet.mail.ne1.yahoo.com) (98.138.90.65) by mta1052.mail.ne1.yahoo.com with SMTP; Fri, 21 Dec 2012 23:21:59 +0000
Received: from [98.138.90.57] by nm2.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
Received: from [66.94.237.125] by tm10.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
Received: from [127.0.0.1] by omp1030.access.mail.mud.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 33716.96789.bm@omp1030.access.mail.mud.yahoo.com
Received: (qmail 92006 invoked by uid 60001); 21 Dec 2012 23:21:58 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1356132118; bh=dspJXUMJQPVGARdDGpSJwFgAoFNKsOdNQ9FVUYxLdWs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Woh2WLpCF/uHtRoXtPW872YkOBFAAbqyMP8UUqzUgpelHH7rNoiWqa7ag0CmwrvT9rDXbc9/MwzRF4reRQJSiuyghbS6I2JNqrMwOvylD/dqh4XGMyzU7PbK4Pbexc0L8FA9JQhAW/6ELOL4sFG8D94kdkpAOh6L371vv4tS3iw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Wxssckm+WPOWZNoeqVo3J5A9eRTjFPzbZwjkMMleA6TNm0Z3g6oL7alYEXqc56/BtA40DPg9RuPmICUTXeH2deUrULLcyKl+UwLAW5iFZVcgFK96kZvnPQlno8bd2sihdj9TtprkLOV0FMx26eQMMkzUuHBXS3DHp6EcQHcqnms=;
X-YMail-OSG: FhAlJ8UVM1mfQErccxHLz3tuxCp1r4vGnWLUR8YRpQosJn0 41jiU0HfOZDG0kQmHMqh9ICSmXaeUKNHjf_woqZQa86_WB0hFCoBJ9tSIbnP Mwm_Tzot5n5.j.qSIOy00TIP8lP5luggtVz7caaD2_xg6Zh7HkAGgtTfgwB1 1WAhS2sqIs_p3RNlxJA6hbYu8KkdyLOzktPW1JRmwWHrxLfUm4eFUj6oPEXn 8oNzfmB9NOMY7zKPEBmCaQ1yjo7wnJFJHBS8kVzq16fTa98dCGZNheuL.CqO 5_c9tEoKAzDURA7_1BRR87wZUiUY14icB5MobkNiVuzKczqB1i.pYPVpGisr AExzvcXZ9pNJ9zI.QcYSMlgLTOo5CuQhY4uel.ztH5.tWJpHnx_jHfZd2IC4 aKjnnLxo9jTRnXuKc2sIDTrimc6Q_2BpalwQFLRKgXuEJiXQ.6fp1jpbAe3o 0zkK_380VGyPITTcie_SrkWj75HrFmt1WgNvCjcGXVNEKpmpolObG
Received: from [173.13.200.181] by web181205.mail.ne1.yahoo.com via HTTP; Fri, 21 Dec 2012 15:21:58 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.129.483
Message-ID: <1356132118.91240.YahooMailClassic@web181205.mail.ne1.yahoo.com>
Date: Fri, 21 Dec 2012 15:21:58 -0800 (PST)
From: REV BEN PETER <webxx7601xxxxx@att.net>
Reply-To: asabamaka@yahoo.com.ph
Subject: Reconfirm your Address,mobile for delivery of your ATM card $ 7 M

FROM: REV BEN PETER webxx7601xxxxx@att.net REPLY-ADDRESS: asabamaka@yahoo.com.ph

173.13.200.181 <> 98.138.90.65

___________________________________

BELOW IS ADDITIONAL EMAIL ADDRESSES AND IP ADDRESSES SENT TO ME BY THE SAME SCAMMER(S)

2) LOTTERY SCAM – ”ATM payment” <webxl19917xx@att.net> REPLY-ADDRESS: atmpaymentcenttt@e-mail.ua

SUBJECT: your(atm) card worth of $5.5M is ready, send your Address and cell Phone

SOME IP’S USED BY THIS NIGERIAN SCAMMER: 98.139.44.156 <> 75.125.40.18 by web181105.mail.ne1.yahoo.com <> unitednationprogram101@gmail.com <> unitednations77@yahoo.cn <> apex.expressbj@hotmail.fr <> +22998660756 <> 85.95.227.44 <>

THIS SAMMER ALSO PRETEND’S TO BE United Nations Organisation AND WESTERN UNION OFFICE — I’VE POSTED ALL THE EMAIL’S AND HEADERS I’VE RECEIVED BY THIS SCAMMER BUT THERE ARE WAY TO MANY AND IT’S IMPOSSIBLE TO KEEP UP WITH. BUT THEY’RE ALL ON SCAMMER419.WORDPRESS.COM — AND I’M SURE THERE ARE MANY MORE EMAIL-ADDRESSES AND IPS, ETC BEING USED BY THESE CROOKS SO IF YOU RECEIVED ANY SPAM EMAILS BY ‘BEN PETER’,  PLEASE POST THE INFORMATION IN THE COMMENT SECTION. THANK YOU.
 
Leave a comment

Posted by on 12/24/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , ,

“grace.richard”

 

LOTTERY SCAM – NIGERIAN 419 SCAMMER – FRAUD

NOTE: This scammer (or group of scammers) have been spamming me with fake lottery emails for months. I must have well over 2 dozen email-addresses and IP-addresses from the same scammer but it is hard to keep up so I post many of their emails in a new post. They have continued to change the amount ‘owed’ and now they’re trying a different scam tactic.

NEVER ship money to anybody you don’t know personally. Also, never cash any checks sent to you from unidentified online users.)

freemoney

OFFICE OF THE PRESIDENCY ACCOUNTANT GENERAL OF THE FEDERATION

Attn Friend
DATE: 17 -12-2012
Be informed that all the fees you are surposed to pay before receiving your contract fund have been waived off. You are to contact DR YARADU IWU ASST GOVERNOR (CBN) email grace.richard@voila.fr only for your processing fee and he will transfer your contract fund to you immediately. No other charges except the processing fee. Your PASSCODE is: 999-035-2655 ( Fund Transfer confirmation same day).You have no other payment to make except the processing fee. Your Payment will be through Electronic Telegraphic Transfer.
This is newly introduced system of payment by the Central Bank of Nigeria to avoid experiences of incessant fraud, illegal extortion of money from Contractors and to enhance transparency. WHEN YOUR FUND IS TRANSMITTED, DR YARADU IWU ASST GOVERNOR (CBN) WILL INFORM YOU AND YOU APPLY THE PASSCODE AS DIRECTED AND INSTANTLY, YOUR ACCOUNT WILL BE CREDITED AND YOU MOVE TO YOUR BANK. You will only apply the passcode when you have paid your processing fee because for now, it is still invalid until your fund is transmitted. You can try the guideline as instance: * With your digital phone dial our bank access code: 23413423100 followed by, then enter your Account number followed by #, at a voice prompt enter your passcode and # and you will be credited.
(This will be when your fund has been transmitted) BUT TRY IT NOW.Contact me if there is any delay from the so called gentleman incharge. Any other contact or payment you make apart from the processing fee is at your own risk.Be informed that so many unauthorized individuals do parade themselves as our officials and impose bogus bills on our contractors with their syndicates home and abroad. Take precautionary measure henceforth. You have been notified.

PLEASE KINLY RECONFFRIM YOUR INFOMATION

(1) Full names……………………. …………
(2) Private phone number………………..
(3) Bank infromation …………………..
(4) Current residential address…………
(5) Occupation……………….. ……………..
(6) Age and Sex……………………… ……..
Yours faithfully,

Barrister grace.richard
ACCOUNTANT GENERAL

HEADER:

Return-Path: <grace@phuockien.com.vn>
X-YahooFilteredBulk: 178.63.44.131
Received-SPF: none (domain of phuockien.com.vn does not designate permitted sender hosts)
X-YMailISG: .amxTlgWLDsskJLwL22SbC.qlamHy7RIlkiDTe03HqwYipYD ID3I5iS0jtT3A_awcpmwrXOP2BZ8nf7UA9Zho_gFkuragClY6s2EO1oW0Q1_ qMAO1LIfmfJ4_mnV_zMmUjfzto.mz3HrLQ7is4Oy4J4KDBT7pp7JVfB6kp2D 68V7KeM14H3Osx_MZOGs_9D.vrWnwXHBZwkAevgaq3YQReEhIpED3dWKdiN4 GFWjNX_vnheMNyIixnnDHpV19o0NfL.POhol7XDYh2zj.7Sm8Bk7LJrZm463 6EMuFdllTIY9rXyGmd9aP_pH6fMPokSqF3YwiaJ5Id1CrQDfG1ZVmTyn0GWi KVJkhRLJkxwe4VwK62eCl2hnjff7tp48tJd94WzG7nP8ZK4KlZGHpQx5zz4H ndtBGZUQWNjznMh47h1RhwZYYRVCTLi8tG5jQDGigL8_TZKQFKpQmxjmJmhS 1zEwe5iNUBtydxLWUTaEgvmAGqa1h4048q_QqxghgfrKccoE2inZfxWfOpcr wTC.pxWbaM3RlhUN2lM4VqhnjdU7LCBdbJeY8pXgG1jUqS9UyiuM0XYGE5S6 l7ql5LeLCR97gKT2DUtoIS7wBICFgxbGLFiUtAz5J3jl5GfqIk2UDnNghgSE V3xUHTcfREz9awPmPXRE2KuxtWSs4JowgjA3BR6F.xrjn_rNGCySObW0ICsd 9jZnuENYtENC2_jHYYv.o4vccUNZRIFR8vMbQjeX0Wbv9d0DVb6Nz.KvCDQ1 4XyFcPCt0loJ9EhUp04Z5jXPCfae8cOIdK8kXHYkod3FQLT6x78Rv_wScYnb c5Gr1MLN4zyDLsVWUFkAtDYdSLazNRbGNSONFdt67VSPHbROINFHUd7RkFA8 rJj8gsAkM1ttTDYiNdmnljucpdhshisFKDfXSr32txpWKYmCVeqUPFlznMTQ p0aB5.5Fwnmt2.Vn43eBCW.2CWoTNx49YR.N9zi4ZHIznVvR.89nigUUWZIo ULR6kcOcqzE92sH9KrcI9hMHNvLv5bMAJlmRTwRcxU6nhFmShVDWfprk9HqE pafQE_0vfI2Uy1npKrcCDhhA.XQ8uKs3LNFEItmJRuLWXMBd20F38AuHnD9s ujCGJtk0FUFuk0rr_Gx9.Q5tqLbR84xB0jkmYbgC4TwI9NoxyE4YDPMuINRB wVwA_g4it3jkAr49M8p1GjqnT.DuPVSU9jxSgjtmqxj3mnWcG93EbCOHsMBf b00m3_wuGozIX3uhBy_Ma6Hq2zGaLspA8zS7YIztoYdPwU44Nkn0bOEEnTAq Wzu5Xdbqpqna2O7a18WhYllXYCoY43lX2K5LmUGlqbXaZig7TMBNQI5qz3yS uX__j_pB14r_TWUoShsxbhKXGD43SszgBcrje8NgZeiKu5NwMW_z.sJp9cjE E1I0bxr2ywMOdWK51j.KmOJJX7UX0Jlmi1cY2Fmfg4uPz35hdhQHPmu9R3Wt xLkD9j9Bg_byhi6TYldfcFbXKsGrteEqFi_Hq2bHJbd4aoamFVa0FvoiKriq njN12uBoBqw-
X-Originating-IP: [178.63.44.131]
Authentication-Results: mta1266.mail.sk1.yahoo.com from=phuockien.com.vn; domainkeys=neutral (no sig); from=phuockien.com.vn; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO server.a7la3lm.com) (178.63.44.131) by mta1266.mail.sk1.yahoo.com with SMTP; Fri, 21 Dec 2012 19:24:26 -0800
Received: from 23-25-221-145-static.hfc.comcastbusiness.net ([23.25.221.145]:4173 helo=User) by server.a7la3lm.com with esmtpa (Exim 4.80) (envelope-from <grace@phuockien.com.vn>) id 1Tm2Vq-0005bN-9G; Fri, 21 Dec 2012 16:19:42 +0300
Reply-To: <grace.richard@voila.fr>
From: “grace.richard”<grace@phuockien.com.vn>
Subject: hello
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – server.a7la3lm.com
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain – phuockien.com.vn
X-Get-Message-Sender-Via: server.a7la3lm.com: authenticated_id: emelie@d2ja.com

FROM: “grace.richard” <grace@phuockien.com.vn> RETURN-ADDRESS: grace@phuockien.com.vn REPLY-ADDRESS: grace.richard@voila.fr – 178.63.44.131 – 23.25.221.145

 
Leave a comment

Posted by on 12/22/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: