RSS

Tag Archives: Nigeria

“St. Marie Funding Firm”

LOAN SCAM – NIGERIAN 419 SCAMMER – FRAUD

loan-scam

Good day ,

We offer the right solution to your financial needs.We stand apart from other
lenders because we believe in customer service, and we stay with you until you
get the results you want.In general we offer home loans,car loans,hotel loans,
commercial loans,  business loans e.t.c, at lower interest rate of 3%. Contact
us via E-MAIL: st.marieloanfirm@live.com

Regards,
Mr. Lawal Femi
Secretary (St Marie Funding Firm)
Garaki Abuja, Nigeria.

Return-Path: <info@gmail.com>
X-YahooFilteredBulk: 200.192.100.52
Received-SPF: neutral (200.192.100.52 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: V2rNJCYWLDtq2U6Cx6MAQOOR4uMb6r.w5j3PUkzHgQhr3NU. gDIgHnagYTNF9NwhXXBPj8oDdDR9jFeaNX6w9fTkS9uhE._2HZl_bhORMsJn nAkXVm3xV184MaTmvDLRIswVaBgKR9qBM9UCz3EpdS2GpOUpzpIjrp5_ycin RR2RsXdpDo5BPUUOnN00y0gQgl2IoyziJaRk136vZ_V0Anspob34gTyRuDHt j0w1Mbi51bStfqvUgjklz_vLdIZtmAmD.tehjQg2nWoGQckHig0riStVyYCK .GGw4xbaONJLS_3mW9hTis8QbOQzUJ0w9ym4qlglPzVCmrKrYjiuu7YMETD8 53197xtVgQse4Rb2QTkcejY5sI_M8ouiYvuRvBR0vAVqKgVz82r0bQKHueV8 OleoNjZI.MJOMRRLz1FDoh.bvQyuBOgkA24GpZO1IjuQD_j0f4Ins8DTfoOw A.oSzRI80W3vgiF1GH_Z7UWPs6os6C1zqmxpJIXIFro1UXmtDrame_SytARb nW6J79AD.V9cIl8nQbPKVUd1YaiGKG9..3LGOhJVEQwoTooe5ZnPwTjyo266 ZVgcBrx3pUnuNkoyjNrFwmidrMB0cJURQefbZ9F4pFYFaoJNPonqLG208MOU I6Gnud8ldfg3JAsfna8AOkSt1lnETwU0PAVgS2isUnvys4cZI.X8_Cl6LL1I ctTQV3_4ptOHYqOaTB8VlGtjYtc6MwtlVqmAMnXewXxVmUFzP2tfffY2CVr. FuLTUDcuJBV5Vcjf.KGs4QLawB8xcO9nNc68QvDHjZC6URcYcyNEzPRxKRqW BUdbemA0CEjFMh75yEsXnBC.jK9gUv9oTHQ_m.rumtsNSVW_xOvJlJ9w1NE0 Z86m3PcPbpDo0q.M0NigGFAjfeomEFHG.uEZniNxhFfL1VYpep7mx8pe67az w0KZBo69OB83aJPGrNlChXNdQWp90Z3Ku_B3wLgpWy5dA.kJJ9IN0FVWRya_ Vq1M8iUT2DceI8OEn19_L6RbLnwocmtFsT0ZjxeeWQovINxfr9BIu02ovrg8 MzyWzrkSXqABJVdDd7docF6iVX0TyauxUcc6AfZIcfsQm8_AwlWPCT1ybdK3 9hl72mFeE2NgLgpFbAaH2GNGCHKL_Nkf1U8bg2wNq.XsWm0aAIhtVoa5RfSw D0FcI9PSoiSx3hHSNMLXSK7bx.rpXs4DtPyhV.IjL6l2zd6zx0VUARrbxWq4 a99CsnpfgO4CUGIx931LtEp09nXIIFAvtVIrNe8hItOW8BCWCv7OGRbLdQTz NOTFQJzZiDsOI.YqEMUT8RTq4lWufb4b.A–
X-Originating-IP: [200.192.100.52]
Authentication-Results: mta1204.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO correio.interponta.com.br) (200.192.100.52) by mta1204.mail.bf1.yahoo.com with SMTP; Sat, 05 Jan 2013 07:38:50 -0800
Received: from correio.interponta.com.br (correio.interponta.com.br [127.0.0.1]) by correio.interponta.com.br (8.13.6/8.13.6) with ESMTP id r05EGwdg027600 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 5 Jan 2013 12:42:02 -0200
Received: (from apache@localhost) by correio.interponta.com.br (8.13.6/8.13.6/Submit) id r05EBg5n027170; Sat, 5 Jan 2013 12:11:42 -0200
X-Authentication-Warning: correio.interponta.com.br: apache set sender to info@gmail.com using -f
Received: from 79.141.173.99 ([79.141.173.99]) by correio.interponta.com.br (Horde MIME library) with HTTP; Sat, 05 Jan 2013 12:11:41 -0200
Message-ID: <20130105121141.scw848qeyowscc8g@correio.interponta.com.br>
Date: Sat, 05 Jan 2013 12:11:41 -0200
From: “St. Marie Funding Firm” <info@gmail.com>
Reply-to: st.marieloanfirm@live.com
User-Agent: Internet Messaging Program (IMP) H3 (4.1.2)
X-Interponta-MailScanner-Information: Please contact the ISP for more information
X-Interponta-MailScanner: Not scanned: please contact your Internet E-Mail Service Provider for details
X-Interponta-MailScanner-From: info@gmail.com

St Marie Funding Firm info@gmail.com REPLY-ADDRESS: st.marieloanfirm@live.com

RECEIVED IP: 79.141.173.99 ORIGINATING/FILTER-BULK: 200.192.100.52

Advertisements
 
Leave a comment

Posted by on 01/05/2013 in Other

 

Tags: , , , , , , , , , , , , , , ,

“REV BEN PETER”

LOTTERY SCAM – NIGERIAN SCAMMER – ADVANCE FEE FRAUD

NOTE: THIS SCAMMER HAS BEEN EMAILING ME FOR MANY MONTHS UNDER MULTIPLE NAMES, EMAIL-ADDRESSES AND IP ADDRESSES — THIS IS A NIGERIAN SCAM ALSO KNOWN AS A 419 SCAM

BELOW IS THE MOST RECENT EMAIL SENT BY THE FRAUDSTER. THIS SCAMMER IS VERY PERSISTENT BUT UNORGANIZED. HE IS ALWAYS CHANGING THE AMOUNT OF MONEY I’VE SUPPOSELY ‘WON’ AND THE FEE THAT I AM SUPPOSE TO PAY.

freemoney

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $ 7 M

HEADER:

Return-Path: <webxx7601xxxxx@att.net>
X-YahooFilteredBulk: 98.138.90.65
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: To35UWMWLDtpI31Kn.0SLqgNnW08Av0SCFAssCMR8A_Vo1GP GrWi2SRwEUK0_rS5ma.EeNhpXLBHGeRggiFG274YMQUgELYQceZCuxW3lQPN rUoT6knijOkKBdqZkH6wbwxbiX_cGEA41SNaj1GVee9_wEMb3td4XzfxKB2W QHrpIw5Zbu_LEuE.UohMdPBo5n_Z45sHFwPWKeKvax4FtRd9YMFoUrM1giBG C7CLdLh9vlCZzCePSppkA0cvOXt_.mjRjvpOP8QMqDhPOSUFydEEMwgIJns6 2p8QA6wY01j05hbhCrsTYjP7PMBklSFGar9DIbx_rQrES7XDMCtPwl3rskW9 mA0o9k.0wE8917_bR66zH6.r4hgk2Pq8J16QU1Lb0v752n9EcJJSbMbbFQCB wY0piVWQGMKir3JfkdVqWpd_w.T_TfFpxV4cemt1CKnbhoD0FsU7NfExkiJc A5joObOkIGO7Jd8HRyCdsMC_W94SyWlu8v8d0TzsLFjtxDlq1n1fiHfB1XRH vxTmJ6lgV_.c.iXkiuD9N3_pT1_aPP7W9IwCbbDIwtrF34MNw68hMJvJOUe2 pH.jPfBNQHLQFxWhxb6lyVSyv28tHpugjC308j7ixZ00K9T_7yuZ0IHQF6K_ Qd3WjZM3CHJaBIWb1rlNDSqMRfzuahAUzICBFaX8u4wMRTaHcpwTOp7nRUrm sazz9ZeJ7QdN8pKfGePiOZZHXxb1KoyvjL30TC9knrdnerK_gJQgdXaFI8Q5 3er.rbh.9662mA1tWwkL.uw.Ej8jeMmTC81X292stHfa_QQVzMpPvYAw5A9x eqmWm6ToSeMfSIvtRovTlmbB8SkoM4oN0TU4hSZuZ71YzhIaZGFXCNYoOJne 7vGYNkak_HoeCUFsGusF92TWky2Vc9PLHMAgihSZ5i2dv22EV6xQduzDwaC6 hR0YvxZO91Y5nEmgU4JgwTACDxEFzztQjg9nca9TEBemHGKAs_inoBvYmRgj 9NAenemYR2BttVDhS7s50y8s2lyYQLrcXQk7ozgN_n9MjmXaMO0PpbZ7Vpge 7kwg93PpaJb42PYuo_xuEisFLWcWM2dUBSchWFlLPJiuJh8X1JF31AOvxAaS y5zqbbq0gA5D6y8P6y7bvMT6GA.RJbBsQnHsqzQ9p62epYsuSBn.GO8e0Obr iTJkg19mglk6slzhX2ciB7jr2mRWI6xcf4zG3rU9Rruj0ndRzYpo_d30lRuc ri8BKqd2I3s9zVfL6sSwKtJADSftjvwW6RTUXPvc2TBzPoA_QfWHZLqs.vAD fbdtVFTINFo2tQp5xrw8ZD.fSJPwkEmhSP.jOfvKar5IpIk2JWk37aJ3w_S7 tgimEtxHc8pR
X-Originating-IP: [98.138.90.65]
Authentication-Results: mta1052.mail.ne1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm2.bullet.mail.ne1.yahoo.com) (98.138.90.65) by mta1052.mail.ne1.yahoo.com with SMTP; Fri, 21 Dec 2012 23:21:59 +0000
Received: from [98.138.90.57] by nm2.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
Received: from [66.94.237.125] by tm10.bullet.mail.ne1.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
Received: from [127.0.0.1] by omp1030.access.mail.mud.yahoo.com with NNFMP; 21 Dec 2012 23:21:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 33716.96789.bm@omp1030.access.mail.mud.yahoo.com
Received: (qmail 92006 invoked by uid 60001); 21 Dec 2012 23:21:58 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1356132118; bh=dspJXUMJQPVGARdDGpSJwFgAoFNKsOdNQ9FVUYxLdWs=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Woh2WLpCF/uHtRoXtPW872YkOBFAAbqyMP8UUqzUgpelHH7rNoiWqa7ag0CmwrvT9rDXbc9/MwzRF4reRQJSiuyghbS6I2JNqrMwOvylD/dqh4XGMyzU7PbK4Pbexc0L8FA9JQhAW/6ELOL4sFG8D94kdkpAOh6L371vv4tS3iw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Wxssckm+WPOWZNoeqVo3J5A9eRTjFPzbZwjkMMleA6TNm0Z3g6oL7alYEXqc56/BtA40DPg9RuPmICUTXeH2deUrULLcyKl+UwLAW5iFZVcgFK96kZvnPQlno8bd2sihdj9TtprkLOV0FMx26eQMMkzUuHBXS3DHp6EcQHcqnms=;
X-YMail-OSG: FhAlJ8UVM1mfQErccxHLz3tuxCp1r4vGnWLUR8YRpQosJn0 41jiU0HfOZDG0kQmHMqh9ICSmXaeUKNHjf_woqZQa86_WB0hFCoBJ9tSIbnP Mwm_Tzot5n5.j.qSIOy00TIP8lP5luggtVz7caaD2_xg6Zh7HkAGgtTfgwB1 1WAhS2sqIs_p3RNlxJA6hbYu8KkdyLOzktPW1JRmwWHrxLfUm4eFUj6oPEXn 8oNzfmB9NOMY7zKPEBmCaQ1yjo7wnJFJHBS8kVzq16fTa98dCGZNheuL.CqO 5_c9tEoKAzDURA7_1BRR87wZUiUY14icB5MobkNiVuzKczqB1i.pYPVpGisr AExzvcXZ9pNJ9zI.QcYSMlgLTOo5CuQhY4uel.ztH5.tWJpHnx_jHfZd2IC4 aKjnnLxo9jTRnXuKc2sIDTrimc6Q_2BpalwQFLRKgXuEJiXQ.6fp1jpbAe3o 0zkK_380VGyPITTcie_SrkWj75HrFmt1WgNvCjcGXVNEKpmpolObG
Received: from [173.13.200.181] by web181205.mail.ne1.yahoo.com via HTTP; Fri, 21 Dec 2012 15:21:58 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.129.483
Message-ID: <1356132118.91240.YahooMailClassic@web181205.mail.ne1.yahoo.com>
Date: Fri, 21 Dec 2012 15:21:58 -0800 (PST)
From: REV BEN PETER <webxx7601xxxxx@att.net>
Reply-To: asabamaka@yahoo.com.ph
Subject: Reconfirm your Address,mobile for delivery of your ATM card $ 7 M

FROM: REV BEN PETER webxx7601xxxxx@att.net REPLY-ADDRESS: asabamaka@yahoo.com.ph

173.13.200.181 <> 98.138.90.65

___________________________________

BELOW IS ADDITIONAL EMAIL ADDRESSES AND IP ADDRESSES SENT TO ME BY THE SAME SCAMMER(S)

2) LOTTERY SCAM – ”ATM payment” <webxl19917xx@att.net> REPLY-ADDRESS: atmpaymentcenttt@e-mail.ua

SUBJECT: your(atm) card worth of $5.5M is ready, send your Address and cell Phone

SOME IP’S USED BY THIS NIGERIAN SCAMMER: 98.139.44.156 <> 75.125.40.18 by web181105.mail.ne1.yahoo.com <> unitednationprogram101@gmail.com <> unitednations77@yahoo.cn <> apex.expressbj@hotmail.fr <> +22998660756 <> 85.95.227.44 <>

THIS SAMMER ALSO PRETEND’S TO BE United Nations Organisation AND WESTERN UNION OFFICE — I’VE POSTED ALL THE EMAIL’S AND HEADERS I’VE RECEIVED BY THIS SCAMMER BUT THERE ARE WAY TO MANY AND IT’S IMPOSSIBLE TO KEEP UP WITH. BUT THEY’RE ALL ON SCAMMER419.WORDPRESS.COM — AND I’M SURE THERE ARE MANY MORE EMAIL-ADDRESSES AND IPS, ETC BEING USED BY THESE CROOKS SO IF YOU RECEIVED ANY SPAM EMAILS BY ‘BEN PETER’,  PLEASE POST THE INFORMATION IN THE COMMENT SECTION. THANK YOU.
 
Leave a comment

Posted by on 12/24/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , ,

“MRS ZINOVIA VONDA” (AKA) Christopher Warren Smith

SCAM – BUSINESS PROPOSAL / PARTNER – FRAUD

UPDATE: I’ve received recent emails from Vonda Zinovia and have posted them below, along with the header information. Also note that this scammer used different IP’s for every email sent so look under each header to see all the IPs and email addresses.

An attached link was also sent along with the emails below. I didn’t click on any of the links, which was titled ‘ MyInternationalPassport.kpg ‘

FIRST EMAIL: Dear Friend,

I have a profiling amount in an excess of US$25.5M, which I seek your
partnership to accommodate and invest for me. You will be rewarded with
30% of the total
sum for your partnership. Can you be my partner on this?

INTRODUCTION OF MY SELF:
I am Mrs ZINOVIA VONDA, a personal secretary to Mikhail Khodorkovsky
the richest man in Russia and owner of the following companies: Chairman CEO:
YUKOS OIL (Russian Most Largest Oil Company) Chairman CEO: Menatep SBP Bank
(A well reputable financial institution with its branches all over the
world).My boss has being in dention for eight years,for political reasons
being a top leader of an opposition party to the ruling party(Government)
here in Russia,on December 7 2010,a moscow court(Judiciary) that was
influence by the Russia Government found my boss guilty and was jailed for
six years.

The present Russia Government continue to view Khodorkovsky(my boss)
release as a threat and seek to prevent his scheduled release in 2011, a
few months before Russia’s 2012 presidential elections,they believe that
if my boss is release it will work against their re-election into office
in 2012.

The U.S(America),Germany Government,the United Nations and almost all the
media in the whole world has condemned the Russia corrupt Government
officials for influencing the judiciary(Court) to give judgement in their
favour,to prevent my boss(Khodorkovsky) release before the Russia general
election in 2012.Bellow is some website regarding to the court rulings on
my boss(Khodorkovsky) case that was held in December 7 2010.

http://www.khodorkovskycenter.com/

http://www.khodorkovskycenter.com/news-resources/stories/guilty-condemnation-russian-injustice

,I am presently on a house-arrest being the confidential secretary to my
boss(Mikhail Khodorkovsky),this is the reason I am seeking your
partnership to help me secure and invest this funds in your country until
I gain my freedom from this house-arrest.

SOURCE OF FUNDS:
The funds in question is my share as compensation in some oil deals that I
and my boss had with some American oil merchant.Already the funds have
been deposited with
a finance institute in western Europe,where the final crediting is
expected to be carried out. While I was on the process, My Boss got
arrested for his involvement on politics in financing the leading and
opposing political parties (the Union of Right Forces, led by Boris
Nemtsov, and Yabloko, a liberal/social democratic party led by Gregor
Yavlinsky) which poses treat to President Dmitry Medvedev second tenure as
Russian president.

YOUR ROLE:
All I need from you is to stand as the beneficiary of the above quoted sum
and I will arrange for the documentation which will enable finance institute
transfer the sum to you. I have decided to use this sum
to relocate to your continent and never to be connected to Russia again.
The transaction has to be concluded in 2 weeks.

With this ugly situation i will not buy idea of phone discussion between
both of us but at time goes on i will introduce you to my only trustee
legal adviser who will be able to speak with you.

As soon as I get your willingness to comply through my bellow private email
address(mrszinoviavonda557@yahoo.com.hk) I will give you more details.

Thank you very much

Regards,
MRS ZINOVIA VONDA

HEADER:

Return-Path: <fanstoyo@fan.fanstoyou.com>
X-YahooFilteredBulk: 198.154.201.90
Received-SPF: none (domain of fan.fanstoyou.com does not designate permitted sender hosts)
X-YMailISG: _7P8Je0WLDv44aUHL9gT2V1yFIgwZiBazaoMuyzCpihMmIuY OO3jvEOFYzS1RBHFFhrKDpWgNUVG7liVFKCr.wv1klIK26ru.CEr7vTlO8kU Mxt66EFJR.QkWh3sN5X_FAhmR51PCPvLxkQc3lLVFf3FPJosapqvn3wSFsVd Kk0SP_iFINTItBWLdvD39pkpv0Ca4alILW09gLbG8HZCoOT7fyRW2ZxOIej8 hvcgUx0_OwMzU8xjXmiPnG9P5guiGfcw36LMEsjwaF19S1fWCeqj0C39hmnz QKZT5GYWsRg9WbrqXGJpczQKnaGUHgyjrtsFkA_2snmnMvUwpPH4Ahz3dJCR ABpVBcXFhGGPxFYqhcaX6NCgS.XIOb4NUvae540SPGOlA2DSEFqHhQ9M9BWD enhD05plK9gZJu_mZlHAcKsUBSx6lDkqWgl97EI0m80m6.qeczxjKFP.2Bkr R_aHNmTLQL.gcod9O.wpLY1Bo7PHSeWlrs6JfSznAqxlv4dNXXUMwGvyzpat v1X1LLudq0XNYYjQo66IUfMxGQz259cTxMET0yWuWEplByD5lk92vjtYEfLi gbdWOoI.zABI2aft_MgC2PRc_xvI4JB6HX8mUEo8LlaSD5eYHiMtH3M8iD8F v_d2KOUdc4G8KAaCBQPWN_DiUP3cFu4VvpJJfzYwTAXYc8jJDb7dtmv7cKa2 D4avyJI5fpqmGBbQhJY3fSJKTmdHjAtOKQYe5lZV5NivhfrJf2_tAk5YolKK 4CxW6I6qiMx8Pra3dfM3WeKnuJUnVaQSrooZvi0_OMAI2leyNKFGZpYSL4WR o9dwW_XDD9AdhnqbnegLQ_ZvYRTwaw0imvVrgiCVfhVJ5nScKlgIfruQHh0z jhWvqVQ3FD9vjj9n0mz3OgHaTcaW3yJzQ1KKlA..PdVNSSJnVXOpSO10VUX. mPcGdyCCuCep0eDIaInQ1jCMvOUdKROyGX6gBVrhhp0AuASAS9KLB8qKIgZQ ikEBaVJyvyxh.KwrzPIyDkVgl2t_Y2VAwTnnhEGrwpy2fJyPdGbT_PmmcOD3 PfDvwtRHT5zgSOuFdwPO0ZrKh2xqoq7WRKOO2kUwmIEnzCBiviAamA8eazWQ S4jDiypOoMSgGbF08lTMrWXL5YqMoaB4FhsbxcTFjCo0trbYbM0j9001ybdT hjaE78GSVt7s1DTXnrvX8XxNAd_LAO1SqbJhMJI5y_kYOWrfuJAAAzCn7nrC NaxOZvZxBJgfrkPn.gX7_Q65GDul2_jnnIga7je6P.WLmqCzd19f9c2FBLly miuWKJaGAvRPa3bOUykJtUfUfOZlwTAsXWToPD0bOMI-
X-Originating-IP: [198.154.201.90]
Authentication-Results: mta1057.mail.ne1.yahoo.com from=yahoo.com.hk; domainkeys=neutral (no sig); from=yahoo.com.hk; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO fan.fanstoyou.com) (198.154.201.90) by mta1057.mail.ne1.yahoo.com with SMTP; Thu, 20 Dec 2012 10:22:26 +0000
Received: from fanstoyo by fan.fanstoyou.com with local (Exim 4.80) (envelope-from <fanstoyo@fan.fanstoyou.com>) id 1TldGi-00012p-5O for <> Thu, 20 Dec 2012 03:22:24 -0700
Subject: BE MY BUSINESS PARTNER,,,
X-PHP-Script: fanstoyou.com/massivetraffic/massmailer/mailer.php for 41.58.0.15
From: MRS ZINOVIA VONDA <mrszino557@yahoo.com.hk>
Reply-To: mrszinoviavonda557@yahoo.com.hk
Message-Id: <E1TldGi-00012p-5O@fan.fanstoyou.com>
Date: Thu, 20 Dec 2012 03:22:24 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – fan.fanstoyou.com
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [502 500] / [47 12]
X-AntiAbuse: Sender Address Domain – fan.fanstoyou.com
X-Get-Message-Sender-Via: fan.fanstoyou.com: authenticated_id: fanstoyo/only user confirmed/virtual account not confirmed

FROM: MRS ZINOVIA VONDA mrszino557@yahoo.com.hk REPLY-ADDRESS: mrszinoviavonda557@yahoo.com.hk RETURN-ADDRESS: fanstoyo@fan.fanstoyou.com

IP: 41.58.0.15 LOCATION: Lagos, Nigeria 

X-YAHOO-FILTER-BULK: 198.154.201.90

____________________________________________

SECOND EMAIL: Dear ,

Good day and thanks for your swift response to my business proposal. All I need from you is your trust and sincerity throughout this transaction and together we are going to build up a business empire that will be inherited by our children.I am presently on a house-arrest,that is why I am seeking your partnership to help me secure and invest this funds on my behalf.I came accross your address when I was searching for someone who can help me secure my funds until I am out of this my present political predicament.

The reason why I am on a house-arrest is because I was the personal secretary to Mikhail Khodorkovsky
the richest man in Russia and owner of the following companies: Chairman CEO:
YUKOS OIL (Russian Most Largest Oil Company) Chairman CEO: Menatep SBP Bank
(A well reputable financial institution with its branches all over the
world).My boss has being in dention for eight years,for political reasons
being a top leader of an opposition party to the ruling party(Government)
here in Russia,on December 7 2010,a moscow court(Judiciary) that was
influence by the Russia Government found my boss guilty and was jailed for
six years.

The present Russia Government continue to view Khodorkovsky(my boss)
release as a threat and seek to prevent his scheduled release in 2011, a
few months before Russia’s 2012 presidential elections,they believe that
if my boss is release it will work against their re-election into office
in 2012.

The U.S(America),Germany Government,the United Nations and almost all the
media in the whole world has condemned the Russia corrupt Government
officials for influencing the judiciary(Court) to give judgement in their
favour,to prevent my boss(Khodorkovsky) release before the Russia general
election in 2012.Bellow is some website regarding to the court rulings on
my boss(Khodorkovsky) case that was held in December 7 2010.

http://www.khodorkovskycenter.com/

http://www.khodorkovskycenter.com/news-resources/stories/guilty-condemnation-russian-injustice

I have attached to this mail my international passport for your own perusal.Please keep this transaction very confidential because of my present political predicament here in Russia.

For my lawyer to proceed with the documentation of my funds in your name as the beneficiary,you are to provide me with the following information’s as stated bellow.As it will take my lawyer three working days to finish with the documentation processes.

1)Your full name and address

2)Your age and marital status

3)Your direct telephone and fax number

4)Your company name and address.

As soon as I get the above informations from you,my lawyer will be contacting you,his name is Mr Christopher Warren Smith,a senior advocate of the British Bar Association,he is my legal trustee.Please note that you will note be required to pay for any fees,but you may be required to travel to the office of the Universal E-Cash Consultant Limited where are deposited my funds to endorse your signature on the original copies of your funds authorisation documents as the beneficiary to my funds before they can transfer funds to your bank account.

I will also appreciate if you tell me a little more about your humble self.

I urgently wait for your swift response.

God bless you and your family

Regards,
Mrs Zinovia Vonda

HEADER:

Return-Path: <mrszinoviavonda557@yahoo.com.hk>
Received-SPF: none (domain of yahoo.com.hk does not designate permitted sender hosts) b3VyIHN3aWZ0IHJlc3BvbnNlIHRvIG15IGJ1c2luZXNzIHByb3Bvc2FsLiBB bGwgSSBuZWVkIGZyb20geW91IGlzIHlvdXIgdHJ1c3QgYW5kIHNpbmNlcml0 eSB0aHJvdWdob3V0IHRoaXMgdHJhbnNhY3Rpb24gYW5kIHRvZ2V0aGVyIHdl IGFyZSBnb2luZyB0byBidWlsZCB1cCBhIGJ1c2luZXNzIGVtcGlyZSB0aGF0 IHdpbGwgYmUgaW5oZXJpdGVkIGJ5IG91ciBjaGlsZHJlbi5JIAEwAQEBAQNt dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzE4AgN0ZXh0L3BsYWluAwMwAgN0ZXh0 L2h0bWwDAzEwAk1ZIElOVEVSTkFUSU9OQUwgUEFTU1BPUlQuanBnA2ltYWdl L3BqcGVnAwMxODM-
X-YMailISG: .gwS_rUWLDvH57WCGihHOxRthjj6Uhvu4.1a1pfy91flJjs4 TeMlMJyBxQ_9WSmcfyBXNhKhC9Oih4U3kVsX1JW7SLfqRvqiY0dXxwWoeHh_ _8b57HH6naqZAcPnz_D4JgWbJmc.UHWCh2pcMf7KvL1Q.GOK.lUECrsaYoYh 4F.osrEAFjALFZAejsDdW4cpHowr35qIND02_vaPOO5tz1dc56IcasaIto0l 9VD1wtezX.CGATiRl3vsVZi8WdKFF_75FAQnOhwt4KPg5yejpYXSc15csSca 8iEwfjRiSLaaHWmULzJl9oFGTvabp6LMVBkCw.QDtQr7lshfNsZTlFaZoqTn 8VLwB1tWHF.Tc_D7ppnJ4rC3ot15O6cBHN62USGp7z848cZBWn0PwllzSl8u UKR_IW9JME1tFTvotmVXsPg4Ay1Rrymr5oZOIc.oNqZ8Mdn5YwOHL5mXoiS9 D5hFzKFHGhM7zRMY_FGZf1mr9s2Ra4bGW4cKRe0wFiGenMkPF0Vbe0QSYy3T PphJko9lqrTLrxnveHNq6A0..Erk9ZONGxbLhmNUQe_nt0ENJIouUu9w.D8e T48jkNAQgipwsxJNimwpEJM9p1wHl1ECp.fvd8bLlkyvow.cnBDoYXj_qAgv GlPkylcYcPFpmonQwFPngaTwbuD7gjNj2mwFuqODDY3uIVUyo.ENOF0Soq82 IyOhGHTn65xKhW_Pm2lrz4aWFAIe6Kvlyy8htzsifQhUC7Jx5C1KiNU3NjiI 9S.7UlQhyvLRUz5GmBDMTnUJ.7BQomOD15EyhSdme1hNbN5MXg6g23kvOCnY cnaZDm7gOvrLuW_X8ONePDt208eu0JGAk4PGezaunVUILAmHjwPeCTBFaGvf upPUw9z26WS.RAVwNXH4nXi0x5.CKJLBcRADjOqewPuL7Facj4ETW03zgzDg uJ3bsmSTxSuOR9mX8q1TIzAjrbgSlhZhaw6.ZgDRBI6w1WYDKIu79av1aGJx 1cA19PRTkaO7KUalj4hcIQkprw.W2NKVlm7vt2zPx7QvesL2ZeYP0f0MEhWO sAPo8e2VtAzJL9.cCTkkpbXlpdaGAaiug_E._wguBMEIbqQCgvePfAEVLOby SR_DApto3NpaJ16L34EJPDstVFGi4P608FlZ2lMrENZ5yAHS9bbe_mIaa_Qv MJ.Ewq1dN2FjOsyW6MXnvkw947MxZfNkL4Su7nM_zDyRGftXyaMxfRWuE85Z g76ALXIMXwhIMqTQsl.PtbUapgve41qr6ZZLhJOJH5fiqQnQn7tGUubGA.U0 EpPBzwis0kAPbNlOKic8nUIjJkKlqoulpXmSllh_LdQ2Ay39vKcwtakoZYuO lxdiNr2y4ng6sJRqtiVBqw0ej_kc0IqPsXDLP9Kd2I.Mx4kcAue9F7N5ZHvP FyNDLGderBK.O7wOb9uZ._iFHLpvgEnoX7B0z3NnT7lCyfmS61hzF2CB4WOl eduHaGQaDfHa_y1hXrQbtgTHvF3I6uq5BA–
X-Originating-IP: [106.10.151.102]
Authentication-Results: mta1363.mail.bf1.yahoo.com from=yahoo.com.hk; domainkeys=pass (ok); from=yahoo.com.hk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm25-vm7.bullet.mail.sg3.yahoo.com) (106.10.151.102) by mta1363.mail.bf1.yahoo.com with SMTP; Mon, 24 Dec 2012 02:26:36 -0800
Received: from [106.10.166.121] by nm25.bullet.mail.sg3.yahoo.com with NNFMP; 24 Dec 2012 10:26:32 -0000
Received: from [106.10.150.27] by tm10.bullet.mail.sg3.yahoo.com with NNFMP; 24 Dec 2012 10:26:32 -0000
Received: from [127.0.0.1] by omp1028.mail.sg3.yahoo.com with NNFMP; 24 Dec 2012 10:26:32 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 602599.77879.bm@omp1028.mail.sg3.yahoo.com
Received: (qmail 97483 invoked by uid 60001); 24 Dec 2012 10:26:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.hk; s=s1024; t=1356344792; bh=rmeCZ+pKyq8LCvdGytDaTB9Eyp8cRYogfwCGTn+M/Ag=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=e0mBHBq34ba0f2H/C1aNdAJ1Gdp+1XJtt71RG26ZInSUQ0lmneA0OrYCNhNmZ/Bg/kAZ1QF+kmBvTILrFrB3AXt0VWKKrLuIJLYlM/nloEwgztB7+jLojJIxTqZukzlfBEHwdUAmIY13o5TZn3L125vo/Bv1Y3eX88F4dmzZkQM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.hk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=APOkFjWZKxMTwNz2FHfvbonkj+UOc6vgsooPpbgry0dQju409C6fUtJn+hV3n+fBGRLbIue5BTTEkNE9BzwuEqy+zgzOSjDWM/FdyEQi8pqXZvh5Rg77HZXRv+NILVmEG3m9hrET5r4sk3PO8yvZmSqmYFc5MTL0L2osdLT6QJU=;
X-YMail-OSG: iWMQKgcVM1mpHo_hUz8cjf9_Fo9gTOGF6uMats7r7q5sy8N yXrpFn3voxZrFE1fNwXnfbO5z6WW_d332cI.mjhSA1YfrSYCIv6_OhXDzgW7 QJATOqPYciFTtUyzfMNGroH7qdCi3u7qMkgEUkrP6lJpG6pr4iT.DHbGN2Rw L0DT9vQimkI0elU9Zh2zcy7410IChlNqw3g0vCQqk_ztl0O3zsYICEo59cTz iC7E8A.1E1MyZFaLCcm60bKDSQgoQR0IC9C3TMgkezhuPMdS9RYsx5VE8jxe 1WDANY5l0gqi0jwNuPxQlcE_KldsaITRxPPhV2eZOdbkPyNkJgiWl7qeFnZ_ rN9B5igYq32cETTWFTLQ_jaf3d4Yq2zA5GcfnBnjIXEWt9TNSyizqCqHOzV2 UFwBQGMq1yGWWOCTAbtGDWgDrGK.ayAzZTxmwHP0b0gB2u.zIg1uGfKAIy5b thLzxwcsnIv1h40PhfVXbH9KP0ELPvtAVyNuOP.V2uOcpkAzxRw54j6UhhMy iBqzPU.1lW2WvmuQZ9iCHQje3EhQgE.c5V0gmEeZ30ea5LC5gEYyDOlzHFLV tCFkdZjpGmbhLmYJ0sTF0HDueDR3idoRpTnwAPouTWeT8OkA3mRJzPCEziSy wwzvRB7hlCAI1hA2RhIBw_ipVILW4khmbQEuBTN3ROFTtJB6ZmxZs27Mtr9u mduiAJMIWUXsd_PYlZZAIdg6VM5jpidsuT_uInNA9_57VjbLA7mQdWAISNsf B45fHDbPWUkT72xw-
Received: from [82.128.45.201] by web194605.mail.sg3.yahoo.com via HTTP; Mon, 24 Dec 2012 18:26:31 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356344791.97461.YahooMailClassic@web194605.mail.sg3.yahoo.com>
Date: Mon, 24 Dec 2012 18:26:31 +0800 (SGT)
From: VONDA MRS ZINOVIA <mrszinoviavonda557@yahoo.com.hk>
Subject: BUSINESS PARTNER(ATTN: )

FROM: VONDA MRS ZINOVIA mrszinoviavonda557@yahoo.com.hk RECEIVED-IP: 82.128.45.201 – X-ORIGINATING-IP: 106.10.151.102

Fraudster sent a duplicate email and although the email was idenical, the originating IP was different. The other IP received was 106.10.151.242 by web194605.mail.sg3.yahoo.com via HTTP; Mon, 24 Dec 2012 18:26:31 SGT

___________________________

THIRD EMAIL: Dear ,

Good day.You said I should give you some time to finish your work before we start with my business proposal and I think I have given you alot of time,so please get back to me to enable us proceed,and if you are no longer interested in doing business with me,please kindly let me know so I can look for someone else.

I wait to hear from you.
God bless

Regards,
Mrs Zinovia Vonda.

NOTE: I NEVER SAID ANYTHING ABOUT FINISHING WORK. I ASKED THE SCAMMER A COUPLE QUESTIONS, QUESTIONS THAT WERE IGNORED BUT I’LL CONTINUE TO PLAY WITH THIS SCAMMERS TIME.

HEADER:

Return-Path: <mrszinoviavonda557@yahoo.com.hk>
X-YahooFilteredBulk: 106.10.151.124
Received-SPF: none (domain of yahoo.com.hk does not designate permitted sender hosts)
X-YMailISG: XJVZO7oWLDtQzrAD1LN.LWWXS1LYd5vi3q0l94zMMVVAOGUX B6ma1X6b0HLJ.jxvoqJ0SQyAxzvpMZ2KZ4rIeQvn.5vFRbVd_l1K7wHmShYr 8FksAARCbHcwnmXEevzG8E.uhAoqGQ9XRhcVSZtPqvM125ccwTmxgYsKTi8w m4Kk9Z1nbZISZW.jzH2HuJ1NaY0dkSG3PpSy.EHomuRlupRhoejM7leOYl9m uAoT9Z4t0R.MQA.4c9aMNGxauB2Vr8G7VZL6VgSl95YhkxtPO7mFkSv_WOw3 0GF_S.VxPqwVW0.37BkxGZTc91z16Kcz4EpnU9GDyUO1wK1bJn4l38dFALev 5QXX6QThyfzMa9Ve1kEpeMEUPNTp9noybZ.q6T4CPQQdb8kr5OSpu49gS6LU XhIiWllFK_8_LnWwA.4SFhCBlBe6NgEXyAAPfgOyLkFmdoNqdH9GD1k.3yL_ XzbKDZskZiSLUFb7RTnHOI0BpzX884bgVXnSNVw5Syi7QvHBLGtSGIA2eXf5 0ZuYNvBep5n_KZyZu1JySO2Ahr9a.1Sk5Vi_gtHzI0IWkq0YuRqJZmrC6.rn qGcpLDzVVR_ajlXq7YgHe3xvopE1Pp5smOqNH4MlYPoQGzTJaeQfUyBY5lpt DAAW937D1wYLOzcPx1YuZ9KLfK6azkXnoIAvmlrrrNuv1EbhMNQfIQUe1nvL 2Rqdep0NmB2CLKsezJJt770eY2cI2bCxaRdi.noEi13djOphxNSAirMH_TlA xLWGm7jq4NL_JFDECF1aNkM9Fg_3IXJelXXxOVmO.bWLpsyNHn2EJ.PjTzb3 Tt_Kc5VF1p3msY1yUvyygzL9obzZHYjfn0WO8Q3vtvrhslJopreTZQuEmM62 mSN0HwUP68MYwaN_x4KAi9TcU3PEHKvP2XOPh6nllgCbGQaHRRFCzlMLk8p5 KLGrL_GqFk0guroWnvyaCEv3hMr4b4sCHbtypNkurQcB5JlYTGlUGl7RGVZI Po25uWE7nuk1fAwm9su4vCdCtbdRZmvyvUnSxvhJS8nXQFTSGkIEA7WfZFLp HW0bfL9zrPfx2t2CaDE8X.QHY1hYMnurfRDPCaedt4fn9s29iGgRhtLSp5st kWD1v_8jy4pZhhrrqcaiInqQhrKfZ3_AKcCdjP0iemu9CtLPXMfylV78vHBM cXv55jFBVl26viR.BOfOp4.p2sm9j65g.jzyCiZzyOQtz2RKM2jLIXKf4xwx d0S_ORK0zmTZu_m6mts6bFhGNuJFvY7aqLTI0XsJRuMuFuff56nFRz7rsKHD SDfpwGTZdgrbF9Ce1MlO5atOPPBm6.lLCSoL449h0nVb7sdW7lHUcmBf1m7i fd4R2E7XQ8TGYifzyn2stWUUwHsx2vlflKlIA38sWqLIXq5TtS9GVd5rt0ii rd65FjhNXFpKWXqOyY3YQ0FxLdkM8dL9GIx8Njdky7rO873Y5TCw0FYnHaup XJdWPKKa4H4Q0vz0uud4XrU-
X-Originating-IP: [106.10.151.124]
Authentication-Results: mta1204.mail.bf1.yahoo.com from=yahoo.com.hk; domainkeys=pass (ok); from=yahoo.com.hk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm37-vm5.bullet.mail.sg3.yahoo.com) (106.10.151.124) by mta1204.mail.bf1.yahoo.com with SMTP; Thu, 27 Dec 2012 05:52:39 -0800
Received: from [106.10.166.124] by nm37.bullet.mail.sg3.yahoo.com with NNFMP; 27 Dec 2012 13:52:37 -0000
Received: from [106.10.150.26] by tm13.bullet.mail.sg3.yahoo.com with NNFMP; 27 Dec 2012 13:52:37 -0000
Received: from [127.0.0.1] by omp1027.mail.sg3.yahoo.com with NNFMP; 27 Dec 2012 13:52:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 554686.33461.bm@omp1027.mail.sg3.yahoo.com
Received: (qmail 99347 invoked by uid 60001); 27 Dec 2012 13:52:37 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.hk; s=s1024; t=1356616357; bh=zOUb0hkaq0Z0/SGiyDicUpSc023b41HOddophFiNVzk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=TWqn492xHdaC4pJ+1PxcBGvkZStj2d7bbXcsDkWTTu6BTpREzZcME/fgUKNbCyCGKCVZfhPPrpIBzhT5WnwYSvSg+n1doYlpq/WMMXMydDuP113YszSJ1lL5RCvotD+kmkWO8dQ4thDEXR+W4gnF0KAUw3I2a35WzVggYXHih2s=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.hk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=4ST7/+dMsw7ZZF3+3bY5I1ep2f81gyHm8NZnEtsiPZiH4nGrcauRT6kHQ4GujJEIw4GutJiLkq1HH+KR/JK+g6snGFveE0BbFHNJMclpd0LUVQV9oNjDCs5OwdcMwdBmK3CRBBfOTtcxJNjUVVnhA4QKhWmIZ1/lb8EQtKX3fkE=;
X-YMail-OSG: .9ADldIVM1nLoKHmfRAcfWw90536vRtM6nxUjqYl7iy7wm4 .KEfBy.IWAOHUl6lAL4UhDvBXeKYgKamgAHASTWi0kYU1vKHq5BfXbAWtaAp FWfmg3NHnM11ngSVadVOjX2SxSh2YU0uKMLvDzx7Z8caaUUuPghq5MTR8EJG H8i8h7z8MyRHejCp8ki4wMNj.ZAWmu9CGwWcCCB.ZgilZPBbcmrU64HL5wR1 7NJBRWHlEBX_p8PvC213fgqasg_WJoOPEdqBXhUrEIwtgW5NS0608LvJp8O5 qaZedfSrHpzEpI4HCjKpNidEvdLPTTO3KScXWHawNG7Vbq7WpLxUAKkfwgPT GYQveeC8uhHKGeC8sE_Aps9WjjUI5nQ.h.rSXcv8NqDfeRDOM3.oxkR7ekNO CniM267rfGQevSnuTw7bjpRvTxA_vMGbYmui9ot0gUIu2HL0waGmrvfsBiGn bgBIYj1T9ERc0OQ.E6c89Wqn_pF2DGNpyzFxaBn070Fkj9Z66mSfmc3gepSR FTvBRL.Yg_TlFQN.7dbSvPfTSJzzQ8veTV7gXjLmyvHraBx8w
Received: from [82.128.44.48] by web194606.mail.sg3.yahoo.com via HTTP; Thu, 27 Dec 2012 21:52:37 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356616357.96130.YahooMailClassic@web194606.mail.sg3.yahoo.com>
Date: Thu, 27 Dec 2012 21:52:37 +0800 (SGT)
From: VONDA MRS ZINOVIA <mrszinoviavonda557@yahoo.com.hk>
Subject: MY BUSINESS PARTNER

RECEIVED IP: 82.128.44.48 <> ORIGINATING IP: 106.10.151.124

Return-Path: mrszinoviavonda557@yahoo.com.hk
Received-SPF: none (domain of yahoo.com.hk does not designate permitted sender hosts) ZCBnaXZlIHlvdSBzb21lIHRpbWUgdG8gZmluaXNoIHlvdXIgd29yayBiZWZv cmUgd2Ugc3RhcnQgd2l0aCBteSBidXNpbmVzcyBwcm9wb3NhbCBhbmQgSSB0 aGluayBJIGhhdmUgZ2l2ZW4geW91IGFsb3Qgb2YgdGltZSxzbyBwbGVhc2Ug Z2V0IGJhY2sgdG8gbWUgdG8gZW5hYmxlIHVzIHByb2NlZWQsYW5kIGlmIHlv dSBhcmUgbm8gbG9uZ2VyIGludGVyZXN0ZWQgaW4gZG9pbmcgYgEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzY-
X-YMailISG: H.1LfsEWLDvxQRM5Yf8Dd4P2Rptv9dsH78wGqqAhwXj4y91S .mc64n6jqBTvfTUFx3swUU2bRXxDHqJh1SM62MnmgHB0i9Gsv3VkGxOXb9vB 0DQJqiv9kvP3Add0oY1gFGVnkp3gYymptiFKgLS9_pMxgi_H7q9XEqh_HqG3 yN_.kmIHr32TWpYRkBGJtJAMMBtzhAXHxUR1mwveKOPBMPY.dwflF0LoE7I0 hpa8vivM.1gujjMHJVCnLn8uUOX_1dFmjeV5urAD8EN.2c21OSBRMbmd7ZpP CVt.RRZiQCJM7K5.VBEKUt5Qkk9pOZQ8z5s.fNuP9C.Xc_wYiARbL37Nuz22 8pBIqeuJcVNpZ9_mf0HjV5AwQUWw_q9IF9HGaFqzydUOyt51JjP3JxklLvoc K5EtBpWD5Uptm4FkxtG.2ebFgo4Ktmc5IwzTtdwDvBzXk0DvO.zcowMlTHs_ RoMlVwN1zTBo5Xy73Y3biOdJwUCDmprPdB7paHbx8xvsBM5Xt1QJlCrMFkX9 8W2uGL_BEOF4XVQkJePK6AK8_V5lAhk5F8d6vMrEGMxoOiEUU0SB0N_RYvTV huGdkl6u.8OVS77wLGlUrNc6XdQxNdqBR6INFbOWve7OjrYWOGULwhvJEPzo 1jmp7Vu2qXt3sjhzva0iN8GpUTSUGhXpf1y4b2lKZqFPvOkEH.eoJUiEezj5 QKDEOBx17mE.17RfTPBAKWRX8t0XTI0sff0l8Xn1Uji4VPSEppelVhwBVTd. CTv7dLMskc10PDaWT6cN9Hg4XdaNfjPTKgifSrrF.LelG.Hfkq1h6bvuBIdy 99FT6Dojpee7Ty5GiN0za1XzC9qkMfwJHcT9OrlNrjBiWnm2q4WZL0whG1PD 94ifQY4EkJJb_if3zfPFVP4f6WRzQbT2_bhC0f1m6bLbUZ4fLoEQvGW88_jA gZT91g.bO_c51i1fnfbN8UWjqY7YCpkZzG35clY31wfTlr06_w38TdXXy3cY FxWzmqBU8mZxeRMFeIBx73aS3jBhrPi2ermGhn6n7VKkWjU2CuybP7BICXQ6 ej3MTKPeC8UMGMj0APdard7FbattiAXh4FUsojO2ztryCV5y6f8QVERXEy8X QU0L4tP8M3HOPNOoXA0qk83PpQ7KD95ZH27p0oFQbsA.ip1cJ8cfYkd5ueGR SCHf1IBgO_SBznYyV_bW6_MzTqRBmezM8QpwpM9TQLK67P56MSXU7yNBC7WK Rkz.guQCcEwf0MU0an5tqxFVdrhO9nHmuavSbhVEfx5PYSqPvNN5jdxVzz1_ rZpLF.tm4OUUkvl47W7a1Z9wqFttlZBl7F5g.Zc3FnopVj_3dDiAGyod.ag9 Id0SopXlPFEmNWozc4RE4S7iGKSwpGQ0z4Gyf.DXFYXWYlrt_bIcvNkxCRW1 2O2TbjGnhhZl.Z0uRcCqocfckHMBytQ3JKuOddC0AMTo0ifBJyuCYyNMg_uY 4ToM7U8mlUrvSTDXYbu8
X-Originating-IP: [106.10.151.241]
Authentication-Results: mta1292.mail.sk1.yahoo.com from=yahoo.com.hk; domainkeys=pass (ok); from=yahoo.com.hk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm34-vm2.bullet.mail.sg3.yahoo.com) (106.10.151.241) by mta1292.mail.sk1.yahoo.com with SMTP; Mon, 31 Dec 2012 02:48:15 -0800
Received: from [106.10.166.125] by nm34.bullet.mail.sg3.yahoo.com with NNFMP; 31 Dec 2012 10:48:13 -0000
Received: from [106.10.151.171] by tm14.bullet.mail.sg3.yahoo.com with NNFMP; 31 Dec 2012 10:48:13 -0000
Received: from [127.0.0.1] by omp1011.mail.sg3.yahoo.com with NNFMP; 31 Dec 2012 10:48:13 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 292709.67546.bm@omp1011.mail.sg3.yahoo.com
Received: (qmail 44541 invoked by uid 60001); 31 Dec 2012 10:48:13 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.hk; s=s1024; t=1356950893; bh=6Ptl4tSEGn9Vh42PwvB6YCoTDecoE7jFQrh/4hIhUYk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=FXypFTKINylQvJREB4yY8du3haVodcMFyvF/wxNrOBI5xyzqZ9Q2dW8yBwDGsR0YITs373UPHqh5l3C7WdhTiF5qMXJ2za06hpVFnR6vzb0tuEwsgdX4T21X+CMDDvR8aAdC0K77WfO0QxzD7YNMjsEYNqgoB9ikYnd6WDZmD0M=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.hk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=vYxRWJLnicRqoMdId5MiQ/tTHvLOujKM6DA5WwD8Dnc0iDZbXkg8ydTOBeuxbRLTWRZsH9iYXkFUZcCdplXXWM5/X9eWrDUGtpx7EYnWMw3QKuRcAv+8NTOzUa7lWgspx+SkbeRD6OHmGDQSFrNYcJFEhf0x1SQEBKlwZtCQ8ZY=;
X-YMail-OSG: AgPNPjUVM1mQf2lFmWj6j2L5n3dzznh9scRoxw5sr3cPUN1 ygECoPd.csPYFONCeTe4q8xj9wT24h4381Xb3JdNxHui17P4pahwsHG5eqkm HztuW.jr2hBd.gn_vdB3W5dt75rhMrhyIxf98LbLOZDwzxO4ZTrsKottzM0n 3yaJdiBwus3rNkFnBdKx5l0wVmzQ9JmdrZ1VXwOTc0Hyw3OPHAwAR18WJYEN pLvx_x1D4nDHe0vhuAS4Ed9eVzctNFoAxRU_YbwRQe9VimcbU7o_TYKn4lWk ZcRMxExghLUf2WOOGWatF0nXKzzwfEcv7QkAI3V1cNNR5xNsCR.mJ8.TFqJy 7rRKrzVzgnsQqXL06rHBnSTLunFC4SNWtTXgmC419O1LINPBa1LgN662D7v. 19EOLh3n9KCNVipPmg9SrR34L8ndltUIdO0xREbjKUine25eHqmQuz3_wXXp jfeIWriRzwxVX2RFA7zbx790lkpAZFO1TVQ7BGcLOYqWQoc_iX05tx9PeRWZ GPwtQuyVTsoj6IOwLWA.LxMQlllZPpbrFwzbVhSco7LscHiq0cxlNjAz5x9a dZEOZVMpxGSe3IUqqeCGuqpQdjJ0Rt9ZTihGGeJ9TBTTrr34QOaX9RounSEZ qH7IBrgK7QRzoEAjjLi4qCs.ipo97dECfCLhB1vyatF.6NA–
Received: from [41.139.126.108] by web194604.mail.sg3.yahoo.com via HTTP; Mon, 31 Dec 2012 18:48:12 SGT
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356950892.43573.YahooMailClassic@web194604.mail.sg3.yahoo.com>
Date: Mon, 31 Dec 2012 18:48:12 +0800 (SGT)
From: VONDA MRS ZINOVIA <mrszinoviavonda557@yahoo.com.hk>
Subject: BE MY BUSINESS PARTNER

RECEIVED-IP: 41.139.126.108 ORIGINATING-IP: 106.10.151.241

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“grace.richard”

 

LOTTERY SCAM – NIGERIAN 419 SCAMMER – FRAUD

NOTE: This scammer (or group of scammers) have been spamming me with fake lottery emails for months. I must have well over 2 dozen email-addresses and IP-addresses from the same scammer but it is hard to keep up so I post many of their emails in a new post. They have continued to change the amount ‘owed’ and now they’re trying a different scam tactic.

NEVER ship money to anybody you don’t know personally. Also, never cash any checks sent to you from unidentified online users.)

freemoney

OFFICE OF THE PRESIDENCY ACCOUNTANT GENERAL OF THE FEDERATION

Attn Friend
DATE: 17 -12-2012
Be informed that all the fees you are surposed to pay before receiving your contract fund have been waived off. You are to contact DR YARADU IWU ASST GOVERNOR (CBN) email grace.richard@voila.fr only for your processing fee and he will transfer your contract fund to you immediately. No other charges except the processing fee. Your PASSCODE is: 999-035-2655 ( Fund Transfer confirmation same day).You have no other payment to make except the processing fee. Your Payment will be through Electronic Telegraphic Transfer.
This is newly introduced system of payment by the Central Bank of Nigeria to avoid experiences of incessant fraud, illegal extortion of money from Contractors and to enhance transparency. WHEN YOUR FUND IS TRANSMITTED, DR YARADU IWU ASST GOVERNOR (CBN) WILL INFORM YOU AND YOU APPLY THE PASSCODE AS DIRECTED AND INSTANTLY, YOUR ACCOUNT WILL BE CREDITED AND YOU MOVE TO YOUR BANK. You will only apply the passcode when you have paid your processing fee because for now, it is still invalid until your fund is transmitted. You can try the guideline as instance: * With your digital phone dial our bank access code: 23413423100 followed by, then enter your Account number followed by #, at a voice prompt enter your passcode and # and you will be credited.
(This will be when your fund has been transmitted) BUT TRY IT NOW.Contact me if there is any delay from the so called gentleman incharge. Any other contact or payment you make apart from the processing fee is at your own risk.Be informed that so many unauthorized individuals do parade themselves as our officials and impose bogus bills on our contractors with their syndicates home and abroad. Take precautionary measure henceforth. You have been notified.

PLEASE KINLY RECONFFRIM YOUR INFOMATION

(1) Full names……………………. …………
(2) Private phone number………………..
(3) Bank infromation …………………..
(4) Current residential address…………
(5) Occupation……………….. ……………..
(6) Age and Sex……………………… ……..
Yours faithfully,

Barrister grace.richard
ACCOUNTANT GENERAL

HEADER:

Return-Path: <grace@phuockien.com.vn>
X-YahooFilteredBulk: 178.63.44.131
Received-SPF: none (domain of phuockien.com.vn does not designate permitted sender hosts)
X-YMailISG: .amxTlgWLDsskJLwL22SbC.qlamHy7RIlkiDTe03HqwYipYD ID3I5iS0jtT3A_awcpmwrXOP2BZ8nf7UA9Zho_gFkuragClY6s2EO1oW0Q1_ qMAO1LIfmfJ4_mnV_zMmUjfzto.mz3HrLQ7is4Oy4J4KDBT7pp7JVfB6kp2D 68V7KeM14H3Osx_MZOGs_9D.vrWnwXHBZwkAevgaq3YQReEhIpED3dWKdiN4 GFWjNX_vnheMNyIixnnDHpV19o0NfL.POhol7XDYh2zj.7Sm8Bk7LJrZm463 6EMuFdllTIY9rXyGmd9aP_pH6fMPokSqF3YwiaJ5Id1CrQDfG1ZVmTyn0GWi KVJkhRLJkxwe4VwK62eCl2hnjff7tp48tJd94WzG7nP8ZK4KlZGHpQx5zz4H ndtBGZUQWNjznMh47h1RhwZYYRVCTLi8tG5jQDGigL8_TZKQFKpQmxjmJmhS 1zEwe5iNUBtydxLWUTaEgvmAGqa1h4048q_QqxghgfrKccoE2inZfxWfOpcr wTC.pxWbaM3RlhUN2lM4VqhnjdU7LCBdbJeY8pXgG1jUqS9UyiuM0XYGE5S6 l7ql5LeLCR97gKT2DUtoIS7wBICFgxbGLFiUtAz5J3jl5GfqIk2UDnNghgSE V3xUHTcfREz9awPmPXRE2KuxtWSs4JowgjA3BR6F.xrjn_rNGCySObW0ICsd 9jZnuENYtENC2_jHYYv.o4vccUNZRIFR8vMbQjeX0Wbv9d0DVb6Nz.KvCDQ1 4XyFcPCt0loJ9EhUp04Z5jXPCfae8cOIdK8kXHYkod3FQLT6x78Rv_wScYnb c5Gr1MLN4zyDLsVWUFkAtDYdSLazNRbGNSONFdt67VSPHbROINFHUd7RkFA8 rJj8gsAkM1ttTDYiNdmnljucpdhshisFKDfXSr32txpWKYmCVeqUPFlznMTQ p0aB5.5Fwnmt2.Vn43eBCW.2CWoTNx49YR.N9zi4ZHIznVvR.89nigUUWZIo ULR6kcOcqzE92sH9KrcI9hMHNvLv5bMAJlmRTwRcxU6nhFmShVDWfprk9HqE pafQE_0vfI2Uy1npKrcCDhhA.XQ8uKs3LNFEItmJRuLWXMBd20F38AuHnD9s ujCGJtk0FUFuk0rr_Gx9.Q5tqLbR84xB0jkmYbgC4TwI9NoxyE4YDPMuINRB wVwA_g4it3jkAr49M8p1GjqnT.DuPVSU9jxSgjtmqxj3mnWcG93EbCOHsMBf b00m3_wuGozIX3uhBy_Ma6Hq2zGaLspA8zS7YIztoYdPwU44Nkn0bOEEnTAq Wzu5Xdbqpqna2O7a18WhYllXYCoY43lX2K5LmUGlqbXaZig7TMBNQI5qz3yS uX__j_pB14r_TWUoShsxbhKXGD43SszgBcrje8NgZeiKu5NwMW_z.sJp9cjE E1I0bxr2ywMOdWK51j.KmOJJX7UX0Jlmi1cY2Fmfg4uPz35hdhQHPmu9R3Wt xLkD9j9Bg_byhi6TYldfcFbXKsGrteEqFi_Hq2bHJbd4aoamFVa0FvoiKriq njN12uBoBqw-
X-Originating-IP: [178.63.44.131]
Authentication-Results: mta1266.mail.sk1.yahoo.com from=phuockien.com.vn; domainkeys=neutral (no sig); from=phuockien.com.vn; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO server.a7la3lm.com) (178.63.44.131) by mta1266.mail.sk1.yahoo.com with SMTP; Fri, 21 Dec 2012 19:24:26 -0800
Received: from 23-25-221-145-static.hfc.comcastbusiness.net ([23.25.221.145]:4173 helo=User) by server.a7la3lm.com with esmtpa (Exim 4.80) (envelope-from <grace@phuockien.com.vn>) id 1Tm2Vq-0005bN-9G; Fri, 21 Dec 2012 16:19:42 +0300
Reply-To: <grace.richard@voila.fr>
From: “grace.richard”<grace@phuockien.com.vn>
Subject: hello
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – server.a7la3lm.com
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain – phuockien.com.vn
X-Get-Message-Sender-Via: server.a7la3lm.com: authenticated_id: emelie@d2ja.com

FROM: “grace.richard” <grace@phuockien.com.vn> RETURN-ADDRESS: grace@phuockien.com.vn REPLY-ADDRESS: grace.richard@voila.fr – 178.63.44.131 – 23.25.221.145

 
Leave a comment

Posted by on 12/22/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , ,

“Mrs. Suzan Chapman”

RECOVERY (LOTTERY) SCAM – NIGERIAN 419 SCAMMER

NOTE: I’ve never been scammed by anyone but get alot of ‘recovery’ scam emails and because scammers are very unorganized, it’s possible I slipped on the ”suckers list” lol.. Oh well, the more emails the better because then that means I can post them on here and possibly save a (potential) victim.

Below are two emails sent by the same scammer under a different name, email-address and IP location. ( Suzan Chapman sends out scam mail under Williams Johnson & Ruben Maxwell )

Hello My Dear
I am Mrs. Suzan Chapman; I am a US citizen, 48 years Old. My residential address is as follows P.O. Box 1920 Hazelton Drive Germantown, Tennessee 38138, United States, am thinking of moving since I am now wealthy. I am one of those that took part in the Compensation in Benin Republic many years ago and they refused to pay me, I had paid over $99,000, while in the United State, trying to get my payment all to no avail.

So I decided to travel down to West Africa precisely Benin Republic with all my compensation documents, and I was directed to meet Barr. Ruben Maxwell, who is the member of OUTSTANDING PAYMENT AWARD COMMITTEE and a Human Rights Activist (Lawyer), and I contacted him and he explained everything to me. He said whoever is contacting us through emails are Bogus (Fake).

He took me to the paying bank for the claim of my Compensation payment. Right now I am the happiest woman on earth because I have received my compensation funds amount of $1,5,000,000.00. Moreover, Mr. Williams Johnson, showed me the full information of those that won lottery, and those whose inheritance had not been paid and the list of all outstanding contractor that were owed that are yet to receive their payments and I saw your information’s as one of the scam victims, that is why I decided to email you to stop dealing with those people, they are not with your fund, they are only making money out of you. I will advise you to contact Mr. Ruben Maxwell directly on this information below.

Name: Mr. Ruben Maxwell (Barrister)
Email’s: (ruben.maxwell@ymail.com) (rubenmaxwell@globomail.com)
Phone: +229 94 99 53 77

You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing.
The only money I paid after I met Dr. Thomas Boni Yayi was just $280 for the paper works, take note of that.

Thank You and Be Blessed.
Mrs. Suzan Chapman.
P.O. Box 1920 Hazelton Drive Germantown, Tennessee 38138 USA. Add me on your YM mrssuzanjohnson@kimo.com

HEADER:

Return-Path: <officefilee@yandex.kz>
X-YahooFilteredBulk: 1.235.121.101
Received-SPF: softfail (transitioning domain of yandex.kz does not designate 1.235.121.101 as permitted sender)
X-YMailISG: dDycFlwWLDuyVY7iGmbjhHLp63OyDyVfDBlkWhu.O8tDMNe8 .KZdKCQyBsBR3UVDRBm3mEBWxOY_W.pr1wP_2PpoKNSTQc6JYyYaxT9R.wo. pKhHHHTKbg8VL7n89IabyGdU14jxsyXQm_WCEdkiGXxhoi723kfHIhqGErmu C1wEl_0NFP5G117BvHIT1hjWC8nAUDC.Ss49pIWmuGy5Lt2wyd2VTw_riam6 qx0Cu_Ip.kxhtpTztlr3V6SUoy8pcLnXb1YqadcFCZ4DjoovqQAc2py2yv0C PqmaNnj_it4cm8o6zDrC2oZUHqMRCGH1QzTsS2YpK7g2tIJCJ5XGwZrQPjis 9bndf9IOky9SDCCjEhTeIwFHAhFH9ZZNPbI5q7YRnewPj_wNghTYvrhZK8Rq simwKqvZpy7DG65Zrm_m08LyQHk_eaTEjM_0YbPb5QfHDWWSzJEhTkI1nhuH 8tUDZ4K10zrgl.haug02JN3yQrRN08twJySYdR5b88Uc.MhFPnDiijveZWYO 30C2ldqANVmu.PHHqcF_1nsCQDkEtGm90jeuawzh43jWt_2iqmFZ_eDZeV4O mo0cKxhRB8BZO6d9ehNvkv5zZ35mFDOHNjYPRWWBPjZbTLBuhKYN421F4KJV DKZ2GriawmFqfiBj7v.ao4ZBHiDJNv.9s38pItexc24reUEdozNn3_xz0gmf 0Ks_WhC1qDL4AK4atiNFrbUVzr.FAR0texoUgEl4SxIoPvf7OqciGLhxfpcT ZMHyiD8BE6WD8gRzl9hy1gPGDnBU6V9bzIKmMnU7RZr7o.9pQpzPUKdfhU2S ET2vZYAGHgwh6137UvE.8ZrhFnzxviczTqRxxm7gnGedWa8_d4FtfNwV_B4Q bYmN0yXkeTEVRpTaYccqMWvKTjhYnlDhLaCDGqUIHoEujwkCScLPvVYJ65xs Pfn4NY3lA1sX3ibAkOA6HTJM091ZHWFmrFTjdVT7kOD4rOLM55xWGOkJh2vu NwW3mHj5147dKNNgGGOPCDKsK7udJ6A6fmSdzTTuTvH3eo4HaI30jwzr3SpS pm7380yEfjnaablGbS.6_y9_3pzS0G0gB._FWfCkALDPXyDfOJJJkTTG3sbR 45KKjw6vHRk4sXYWQjrpXwr_Y99c7Sc6x488YUE30psfWBYx4V3ArdJVgwLG bTTZE55Z2vS9g67xRo7AiXCxnjnhyAidwlyrMO5llsg8INgBHAMBzOiCYe26 uUsScAguvqr2epPVCH1dSAuLymdxChsKMqeKo0.n6BxNgzy6WXRlVqWo8z1I GBUsPRJOQEtaBR9LZpfAnAuf_8mH4GDqMySGKRAfltcAd4ZlFxx.hvmrOpUp IlJojtl2UhEm8kbQ_LtbXXOBo1fkuLw-
X-Originating-IP: [1.235.121.101]
Authentication-Results: mta1215.mail.bf1.yahoo.com from=yandex.kz; domainkeys=neutral (no sig); from=yandex.kz; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO localhost.localdomain) (1.235.121.101) by mta1215.mail.bf1.yahoo.com with SMTP; Fri, 12 Oct 2012 22:32:41 -0700
Received: from User (69-2-73-170.static.networktel.net [69.2.73.170]) (authenticated bits=0) by localhost.localdomain (8.13.8/8.13.8) with ESMTP id q9D5Lnlc022212; Sat, 13 Oct 2012 14:21:51 +0900
Message-Id: <201210130521.q9D5Lnlc022212@localhost.localdomain>
Reply-To: <ruben.maxwell@ymail.com>
From: “Mrs. Suzan Chapman”<officefilee@yandex.kz>
Subject: I am Mrs. Suzan Chapman

“Mrs. Suzan Chapman” <officefilee@yandex.kz>  mrssuzanjohnson@kimo.com   ruben.maxwell@ymail.com  rubenmaxwell@globomail.com
Mrs. Suzan Chapman officefilee@yandex.kz +22994995377
+229-94995377 – 1.235.121.101 – 69.2.73.170 –
Ruben Maxwell ruben.maxwell@ymail.com RECEIVED-IP: 41.138.90.38 ORIGINATING-IP: 98.139.212.188

______________________________________

BELOW IS AN UPDATED EMAIL SENT YESTERDAY (CHRISTMAS EVE, 2012) — SUZAN IS NOW PRETENDING TO BE RUBEN MAXWELL — 

SUBJECT: forward us your full information okay

EMAIL: Hello, forward us your full information okay

HEADER:

Return-Path: <ruben.maxwell@ymail.com>
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts) IG9rYXkgSGVsbCBNcnMuIENoYXBtYW4gaXMgdGhpcyBlbWFpbCBhY2NvdW50 IHN0aWxsIGluIG9yZGVyPyBQbGVhc2UgZ2V0IGJhY2sgdG8gbWUuIFRoYW5r IHlvdS4gLS0tIE9uIFNhdCwgMTAvMTMvMTIsIE1ycy4gU3V6YW4gQ2hhcG1h biA8b2ZmaWNlZmlsZWVAeWFuZGV4Lmt6PiB3cm90ZTogRnJvbTogTXJzLiBT dXphbiBDaGFwbWFuIDxvZmZpY2VmaWxlZUB5YW5kZXgua3o.IAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: 22Z_9qwWLDsY6dOxAcdBWiirU.HBD0chVME2CmG76KkKnVmX DTsbTWTWMU.wSMcs02UEJ26Ng27cLJWJFdyEH7WFV6ST0ZZc6uPXnnre2Jq_ Z45CVIHIEp1a5sUP92F7GeCVqnJFJpFg2tu3se4EY61shx2dl4I0LI8s_W97 CvPMsbClpd3SqC2NJXabPjCerJN5lIbbSsbZVmNl3cOR8ginxqb18O8M8Nny aqWmiO1hHohFC9TqQAR0LE_s0TvDyLSQFK9S09T7l._iKRPJNsMFGdFFr_cG f0y4wIZoiGLXFCsd3_uFqHnTJ.xcVrC5KHqJmTZz2maAzWv3E26eM97eVJhD 3ZKU5sB2iPzv989D5rBw0JQMZicbAXsr6WZH_HsyN8N_GB6D92iajLh7YsIz p_uQBuZHmtCV7M4zoUWJg.bUdz_c5Cvps_Qfz_tTgfxdonCltVPa_aYCI6po 4U71OPJT45TI_mYmdvJ55EmVYMZAtEzEAOW3AUo4MhSQKrrppoUN4PPx7v45 A_SW_V7edo4ktDgKZ.LQpRsrtYlp2GJGMaeLtSLJnh8KeZNfoZd5YQRNItz. wFm_E3hdjJyPAPD29zwNbyM7txX_gkncMbcPe4x2MYRYJ5V.4dB_dh8z_9kT m0tV.ROg.v0LR8tMPDreBuJs0SrVfHyGWcap7bccqH.BMvAC4iu5QkIwoEVs V42zjW7rZdqwnV8TZB2wjkP4grYULIjys1Pn8SFWCXnds1fwbbOxIHDxNuCA lEqL0d4aWu2maqCE5.yAoiuyz5l7McmLVmHnYyRavDp9XXmWKefzRdlKyzzg CNvkchxgwmdRXkQUFYeuV4yJsmTUUG6j_iOuZx.Wiy2eh0N9.Xo9ACXiAa4P FibrDI6GfuDiH1nyUMSk3px3sdr0GWZEhm_qqq..c1jOEYGeTMQ71URwh0i1 FgZB6HLhJM5bBWRNHcFiZ.wpvnQukj1nYtdxhgLPeDLLBZ9WcnVzz44HQ5rs Byq43NR9_j.m19pa5eiTVvULqiHqXszT4H1Vp7vOG2pt9V.u7YkI1xhcY8YM 0BOLmQapn0GHg8DrvzkCIQ9VBpKtwu4GvklsoElZqcu.PeAJxGObA5HeZwul z89GNE.CuxN1Y1Gg5J_yQ4X1InWqvMZcfv5YTg0c2Qi4E40Fkwm6pbuffqps Pru89Q_j6rIi9ePVlNJmSFdUqHdAI71RuAjC.hcBryDfYyN60DISieJFtcdx o7MDfQuzM338IXGUYzq5Gp5jaZaNQouOuAkqKhOOGVz4u0lhbwhFIKUatRsn 7g_UAvrzOsnTW7xNuGSb0ihq5N_Q4OOZPhyePRhwZthrg7qGxMISOLHnKd63 LEtLmyU1o_Qe3EqrAqYyRK2toRTT_w2N.MPzeZUK4JAqVrKhGlGPPwqmJsSe wuHl5HIkDe7wYsh4OZo9xHAasS.3_fipRr2n_1eX
X-Originating-IP: [98.139.212.188]
Authentication-Results: mta1020.mail.ne1.yahoo.com from=ymail.com; domainkeys=pass (ok); from=ymail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm29.bullet.mail.bf1.yahoo.com) (98.139.212.188) by mta1020.mail.ne1.yahoo.com with SMTP; Mon, 24 Dec 2012 09:40:59 +0000
Received: from [98.139.215.141] by nm29.bullet.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
Received: from [98.139.212.237] by tm12.bullet.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
Received: from [127.0.0.1] by omp1046.mail.bf1.yahoo.com with NNFMP; 24 Dec 2012 09:40:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 216004.90175.bm@omp1046.mail.bf1.yahoo.com
Received: (qmail 46683 invoked by uid 60001); 24 Dec 2012 09:40:59 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ymail.com; s=s1024; t=1356342059; bh=lUv5r9kJp9yZzRpM4GROp5bn+gKsvtE9FduO0AEBgyk=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=m3GdCZCLmhxjaA6YFaKQJU4PQoEGQ6FC+JnukCXQqvx4eBOMHfwgLrA7BvAkHqu2oBrbvTUcsFMrOmxTxEMed3VBSdtnlTSoqyLmgBztakNEH6kLqsWfASfCCGB7JQ3z5n3vrUr0SvqnSa5qUL2vRYraGWQa0WuLa0k2Z/7tG04=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=ymail.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=IntzzZSK+/bm4sc+SMkbYGpAutn2Gk82SPjwF3pNjFpdzjvvyIWLiro73WdvajESwH8vZdtjIrW6iJbGuN8RLbi/GyArM9lQnGMVS4pcCpO8pRx7YLqWWEHdm18Aq0On6ojBqb4t2L83VjtV2UscTa3iWBExbfdtCf+z7kiTd/4=;
X-YMail-OSG: lNvx.3AVM1n2Fq76qv_FwECW8MNzlRB_LiglR.6ta9dnFty Z0zJ_K2SxMrm9vGID55ARBd4aNIEwFDXueDVWjESCOG_g3f6YVTtpyL0n5CN WU2W6dZppKirH4yJyOYPnAk5cHwkuGdzGpy_FYExHQh1nGyikbUWvFribOxm 6ls7wGoYb.1JEPohoQ_Slmz9drjFCVciWuq25x_oWa843XANsNGyF6tCAGed h7QgYlgOi7DV35BKoGP5DnrL1UhL6w3AJS7ZqG2NuXoH2flTKH8uCgi3gYET PZzp_cXB7nSH3vGoQxHhscj9jWfvZM8Ca8AGpa9PmKmtcJ3GV.l3EELLvlIO kDuUqZn2XcWpkImKqFSk_em00J5oounzJR9Mm1feeZx0SK9HGJYy1G16MKvN wHo5Umb9.xLy1Z9y3twv1RQwdDj_ha.vPND0DatGu_o4HN9ABudbpWWQGPc5 L_Wz2HOU5YrD8e1zVWZZep7GbOBB5oFIuxQ7I0um0tOvwhvs6vBr50XI-
Received: from [41.138.90.38] by web161203.mail.bf1.yahoo.com via HTTP; Mon, 24 Dec 2012 01:40:58 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1356342058.37287.YahooMailClassic@web161203.mail.bf1.yahoo.com>
Date: Mon, 24 Dec 2012 01:40:58 -0800 (PST)
From: Ruben Maxwell <ruben.maxwell@ymail.com>
Subject: forward us your full information okay
Content-Type: multipart/alternative; boundary=”-852950040-498957605-1356342058=:37287″

 
Leave a comment

Posted by on 12/21/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“Kenet”

EMPLOYMENT (JOB) SCAM – FRAUD

EMAIL: We’ll like to offer you a Job with our Company after thorough review of your resume.

PRUDENT POLLS LLC is a well established Evaluating Firm, Our Primary Business is to provide exceptional Customer Service Evaluation. Our company is solely responsible for hiring survey agents and recommending them to our Clients. The clients are companies that have a wide network of businesses across America, most of our clients have retail outlet in major cities across America. What your job (Survey Agent’s Position) entails is to conduct surveys at any of our client’s retail outlet assigned to you. you will be patronizing their business and conducting a survey at the same time which mostly is in regards to the customer relationship their staffs offer.

We will therefore like to offer you the job position as a survey Agent to conduct customer service surveys in your area.

Your Job will involve you providing feedback to us about the customer experience at any client’s locations. Companies use this survey for many reasons. During a typical survey session, you will make observations at a specific store/office, restaurant, or other type of location, while acting like an average customer.

A typical survey report will include

1) How long it took you to get services.
2) Smartness of the attendant
3) Customer service professionalism

Most companies employ our expertise when people give complaints about their services, or when they feel there are needs for them to improve their customer service. Your Identity would be kept confidential as a safety measure. You will receive $400 on each survey you conduct at any time for any of our clients, and with the number of clients we currently work with, you could be conducting as much as 5-10 surveys weekly, which will earn you between $1200-$2400 weekly. That means you can earn about $78,000/year doing part time.

Our clients include:

McDonalds
Starbucks
Dunkin’ Donuts
Washington Mutual
ACME Check Cashing
Chase Financial
Walmart
MoneyGram America
Victoria’s Secret
Dell America
Western Union America
FTD Florists

No commitment is involved, no start up fees, no paper works, and you would have flexible working hours.

If you are interested, email me your full name, address and phone number, so that we can add your mailing address to our Regional
database.

First name.
Last name.
Address ….(No P.O Box)
City, State, Zip Code
Cell phone Only.

Once we receive this information and confirm your interest, we will introduce you to our clients immediately.

A swift acknowledgment of this email will be appreciated.

Warm Regards,

Return-Path: <kenjam090@yahoo.com>
X-YahooFilteredBulk: 209.216.206.176
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: frWlEaAWLDuG23Rjf4y0MIZzX7MAVh8WzJXN7DiZrBbeBiyj sVrw.nq8ohd52OPgN6Kus0TerVmw1ElbCPkGLc3zq1m52KCpK8_MXZDrGCDN JJs373NV.3ydAmB.fYc_Xqr8rvAXClsk2IqR2kZXaZ7XVRMT0Q63bLW5Y_b1 5spCogHDmU0FHVJURCXW8NkD8szBMM0ExX_e2VWV4DiiKbdSsU_2Z2avomHG _DSyIkayy1ktJQXBRAl_l8Q9msq7L.ksnRW7QDB6Ig1g.5R2FpnPBZgIgbDf rhJK402QGysnwVzI6rbMEAymsP5Eyp_ueXbpbHk.1udg1pIJpOwGPDElIo7b tB1lRgETjeBQRJaeiNchq4dt0NF1m8xOixfLgqD.n5J6e0UwRUysYWO4N1cf JyqTCU8tB6Y9S5qS9QjzmBwSh5BjvoRNKdUje3Nh0Y1czE6J0UeYqICeJ7YJ GY.OY4UekAZcL5RW_a9m.PYO2Ny7rL23TeCHYpCUrzpjcWd.VKoXFhQE3f3B 7EmJwd6uE4GiirmlZZlWsL8OzKOPwfGgZPPNk_JAE5ppcUeHfrMkCK7gcQbw OQkjKtVj56hevxMBHxVw782L7E.wKMK2.8eKHZTaZkjIv18315QhG2EL31pU Y5ZcH6RDFjv_6dRX70mNdA1VN4rrceJQsPSehPDztt._.H6OIgk1gT9bH78H LoDvUacrsG9UzZ.cQxvbajW9lfKn5zo_Jl8jvY9YFpUYTXaS501MFi9DNAMW EpkbWHRVIL5uhvW6oEVJNjZFTRIsuKaEHseFGl68eMaQO4HOZc2cL1GvgNC9 FcPBU0iX5nA2joIm8YgINi77cPE_7aqCkO0xTbd1e_pX.a4AE0QWs_9p03Ch PIE.kUPDgDfmrH.dxiv9MVw8JYsKLuskZt8Ya6v3gmK5Csa.cx2JNTJdVfie S8SvBtc4qIJKTLt.akBIW9PC.Iz_L33dMQ2TDYmxusHmb8eC28jaRTTtioK5 kIGNM5RUVoH3hCrRYoP9cb9CXL6YA6M8cl3znPyewC.D5_gm0MmOphcC38Nd LdN07elmMGr0DCW6lgsdaxCOf3RZ8zHYL8tgVvL539XHi.V1Df6MXgMWnLHC DjF9994mpjZ0f9Oujhr0EQMVl6.sWumyC.tZBFeX3MmtJ_ezl.ifF7BFcslt Sy2Bhl99YmYKie9zVEWUqNhEZTJhfm8DhRbFczLBvZxOuUC9QqSQcWaEcqFK hk0jfRZHusa7RsNmF8diOUjMLxtHi1unl3Id0dvG7fW5rnkr08Lp.I3qdQ–
X-Originating-IP: [209.216.206.176]
Authentication-Results: mta1372.mail.gq1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO witt.m5hosting.com) (209.216.206.176) by mta1372.mail.gq1.yahoo.com with SMTP; Tue, 09 Oct 2012 12:36:18 -0700
Received: (qmail 25659 invoked from network); 9 Oct 2012 12:36:18 -0700
Received: from 173.221.123.190.nw.nuvox.net (HELO User) (173.221.123.190) by michaelmccafferty-com.m5computersecurity.com with SMTP; 9 Oct 2012 12:36:18 -0700
Reply-To: <kenjam090@yahoo.com>
From: “Kenet” <kenjam090@yahoo.com>

Kenet kenjam090@yahoo.com 173.221.123.190 – 209.216.206.176

 
 

Tags: , , , , , , , , , , , , , , , , , , , ,

“Mr. Stephen Fred”

ATM CARD MONEY TRANSFER & COUNTERFEIT CHECK SCAM – NIGERIAN 419 SCAMMER

There are two email’s and two headers below. The first email and header was published on scammer419 Yesterday 12/17/12 – the second was published today (12/18/12) — Same scammer using different addresses and IP addresses.

EMAIL #1 –

TO: 4thekids1234@gmail.com, jlpurtee1218@yahoo.com, lschum6@aol.com, vikhadd068@aol.com, childcare4yours@gmail.com, jessicaspitler@hotmail.com, monkeyforthezoo@yahoo.com, angelinahudak@gmail.com, bruces_lil_sis@yahoo.com, pmiller140@woh.rr.com, chelli4dottogo@yahoo.com, shannonschapiro@yahoo.com mschutt5@woh.rr.com, phillips.april@ymail.com, ticktockclocking@gmail.com, aprilsplayhouse@att.net, lrichards7@cfl.rr.com, rosa8485@gmail.com, mommyme0107@yahoo.com, armstrongcare1@yahoo.com, albart@bellsouth.net, new.horizons322@att.net, thebestsweep@yahoo.com, missalisha08@ymail.com, dezy2224@yahoo.com, morgragedanielle@yahoo.com, joanna.sweet@hotmail.com, adenelly@aol.com, pratherjck3@aol.com, camillephlps@yahoo.com, cs09jedq@yahoo.com, baby_pmpn@yahoo.com, kmiller182@cfl.rr.com, kayladaniels90@yahoo.com, lisaconradi@gmail.com, confidence07011996@live.com, poncallinfo@gmail.com, myfamof3@gmail.com, kjg36@comcast.net, missrosesdaycare@yahoo.com, cooljet6@yahoo.com, anged98@yahoo.com, cowboydad75@gmail.com, crawbox08@gmail.com, sacpr210@yahoo.com, khusfelt1991@yahoo.com, dskupien@delawaresafetycouncil.org, primaryyears@aol.com, kidz1st@gmail.com, bonclaude1@aol.com, millerv25@gmail.com, krosieone@aol.com, poohcc07@aol.com, ironhilldaycare1@yahoo.com, bangelique95@gmail.com, truruler@yahoo.com, denisedr54@comcast.net, sromasko@verizon.net, portiabusaitis@gmail.com, portiabusaitis@comcast.net, dawnschafferman@comcast.net, elevatedplaceslearningcenter@gmail.com, gerlacht00@comcast.net, melissalee1209@hotmail.com, valdave@comcast.net, rgoo135623@aol.com, baybeesteps@msn.com, rhino_07@comcast.net, mseekids@yahoo.com, faithshouse@live.com, jeanneflynn59@gmail.com, rachel_vigil@yahoo.com, gspederson55@q.com, ptrcgzmn@yahoo.com, thomasjohn1088@gmail.com, earlybirddaycare@gmail.com, sabrinareiman@yahoo.com, letmcg@ymail.com, brandon.carson25@yahoo.com, christinamauro23@msn.com, katielewnard123@hotmail.com, porkyexposed@yahoo.com, mgfbower07@gmail.com, lonniejbeard@hotmail.com, aklittle0102@aol.com, jennywarn@live.com, leyadewey122@gmail.com, neen062964@hotmail.com, info@need-a-nanny.com, dork_britt@yahoo.com, tinytots80123@yahoo.com, caycestaubin@yahoo.com, ivana331@gmail.com, tstots@hotmail.com, bballvarsitygirl@gmail.com, alwaysforhim2@gmail.com, degutii@msn.com, tiffjowilliams@gmail.com, patriciacallan@msn.com

FROM: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>

SUBJECT: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!

EMAIL: Federal Bureau of Investigation Anti-Terrorist And Monitory Crime Division. Federal Bureau Of Investigation. J.Edgar.Hoover Building Washington Dc Customers Service Hours / Monday To Saturday Office Hours Monday to Saturday: Dear Beneficiary, Series of meetings have been held over the past 7 months with the secretary general of the United Nations Organization. This ended 3days ago. It is obvious that you have not received your fund which is to the tune of $3.5Million due to past corrupt Governmental Officials who almost held the fund to themselves for their selfish reason and some individuals who have taken advantage of your fund all in an attempt to swindle your fund which has led to so many losses from your end and unnecessary delay in the receipt of your fund. The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of Nigeria his Excellency President Good luck Jonathan to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes. Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card?

ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $5,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years time which is 2015. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account.

Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via UPS. Because we have signed a contract with UPS which should expire in next three weeks you will only need to pay $180 instead of $420 saving you $285 So if you pay before the three weeks Dec 2012 you save $285

Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $180.00 nothing more! Nothing less! And we guarantee the receipt of your fund to be successfully delivered to you within the next 24hrs after the receipt of payment has been confirmed.

Note: Everything has been taken care of by the Federal Government of Nigeria, The United Nation and also the FBI and including taxes, custom paper and clearance duty so all you will ever need to pay is $180.

DO NOT SEND MONEY TO ANYONE UNTIL YOU READ THIS: The actual fees for shipping your ATM card is $420 but because UPS have temporarily discontinued the C.O.D which gives you the chance to pay when package is delivered for international shipping We had to sign contract with them for bulk shipping which makes the fees reduce from the actual fee of $420 to $180 nothing more and no hidden fees of any sort!

To effect the release of your fund valued at $3.5Million us dollars you are advised to contact our correspondent in Africa the delivery officer Mr Stephen Fred with the information below, Name:Mr Stephen Fred Email:mr.stephenfred@yahoo.dk You are advised to contact him with the information’s as stated below:

Your full Name.. Your Address:….. Home/Cell Phone:…….. Preferred Payment Method (ATM / Cashier Check)

Upon receipt of payment the delivery officer will ensure that your package is sent within 24 working hours. Because we are so sure of everything we are giving you a 100% money back guarantee if you do not receive payment/package within the next 24hrs after you have made the payment for shipping. And make sure that you keep the receipt of the $180payment that you made because that is the prove you will show to the delivery team when they arrive at your door step with your package of delivery

Yours sincerely, Miss Donna Gwen FEDERAL BUREAU OF INVESTIGATION UNITED STATES DEPARTMENT OF JUSTICE WASHINGTON, D.C. 20535

Note: Do disregard any email you get from any impostors or offices claiming to be in possession of your ATM CARD, you are hereby advice only to be in contact with Mr Stephen Fred of the ATM CARD CENTER who is the rightful person to deal with in regards to your ATM CARD PAYMENT and forward any emails you get from impostors to this office so we could act upon and commence investigation.

HEADER:

Return-Path: <albanesi@dmghost.dmg-hosting.com.ar>
X-YahooFilteredBulk: 200.58.125.17
Received-SPF: none (domain of dmghost.dmg-hosting.com.ar does not designate permitted sender hosts)
X-YMailISG: G4vRLFYWLDtBXE2mxgWetbgPe68s2c_J4Sy1u3QrHo_wMTq2 7ltguaR_7OqUckxfw_6vp2Lr1Jg7Eu.nS2bLDg6fo4oYGP7MTDSxe12a7pKp vDuNtWg442ZrtozAbb4qwjv9yjVKzjc3q6SUJC3ROeRuYcRhx4ZTHNEwa9dJ RRunFvOz3W.7zc.2.2cpeXIR1pV74p_qpVqC3m7H8mdBoPRVTOHo4yAvFEyq HBGagGWmoRoWFUM6WeZcFGLRRd9yG4M2adkg0pGcbx9auO2ojmtRX.d4awpI tNrecy67Vucu5czgWkng.ADegJxE6eNLDqWhXtM8r1A7O_E267YruDaoRxO6 _sIUXJPaS8LB26kJPkafbJgK7Q9bXgF9ll5Efh6DIfA71GiZ_BFxWhGrotmy _KZxe6vxBpdwxzK0Rxlr8WrNY0QZMLOp0hD28W3sC.84e3mVvDE1o89.CZ5h 9jg8M2nfaP2qu3nHGA54gPG1P9JZx9oasJlLQdjhkEP6ND1NMGwvMf48kGMY 3mnmKiJxTzCRP42tdS7Y8Ho32JKgSZ3qE_UtRHNqJnXY6nt4cEAR35W0rrKt Rxajt4Z12QQVP6ynOi0a9qX6gOBgqHI0ImNxtkZaeznZBDB94jKQgd6rsgsf F.xd9S3BVrxw5c_tcsF2ZfpH5vlPphmuFtr.6wHtqPTbo1WcAAW3TzAVQgd5 P1qNkbouaz9T_2LDTBLWIumE0eZYfRwlzjApSWZq5xN7T443jat0wR.gnq8Y dJGDz8sxqmnuHdASS5COEyfmLADo5GME9Hr1nFYnYoUc9gMY6EgDUlovdax2 JWSXg640Sl6p_WEGbvRpunnYfKhxouArjEiZxy2c4lMKAGhYcq0JrGub358H ai9FMNMHAkRnf4b18ttxSIYK5obMdAtyW.Vw4jaqgXYO540R_KQljdv7peAg k9p124LIGZdkN7S_XKaNsg3O.ey154tsrBwhl14kTdz57ZxzNc7niAYFQF1V VUTONPpN4iNZT_t8.LcVzBcHhSjrqoWJ2SMpE28MH6cyiV8IsUDbddT1YIcM iZAV58stob2h.JyLctYJZ.g5G.VYjJubKffjKBTkHbCYZ1wNzGE8sWDDIJwo eRX04Jtt4F13ZI2AARhKdrG8DAr2NSIhIUoWXKs.qbgWrQgZleThlG8O6OOT G1avOrcRyDcNaaQxG32I
X-Originating-IP: [200.58.125.17]
Authentication-Results: mta1317.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=yahoo.dk; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO dmghost.dmg-hosting.com.ar) (200.58.125.17) by mta1317.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 05:44:35 -0800
Received: from albanesi by dmghost.dmg-hosting.com.ar with local (Exim 4.71) (envelope-from <albanesi@dmghost.dmg-hosting.com.ar>) id 1Tkafo-0004nX-Uf; Mon, 17 Dec 2012 10:24:00 -0300
Date: Mon, 17 Dec 2012 10:24:00 -0300
Message-Id: <E1Tkafo-0004nX-Uf@dmghost.dmg-hosting.com.ar>
To: 4thekids1234@gmail.com,jlpurtee1218@yahoo.com,lschum6@aol.com,vikhadd068@aol.com,childcare4yours@gmail.com,jessicaspitler@hotmail.com,monkeyforthezoo@yahoo.com,angelinahudak@gmail.com,bruces_lil_sis@yahoo.com,pmiller140@woh.rr.com,chelli4dottogo@yahoo.com,shannonschapiro@yahoo.com,mschutt5@woh.rr.com,phillips.april@ymail.com,ticktockclocking@gmail.com,aprilsplayhouse@att.net,lrichards7@cfl.rr.com,rosa8485@gmail.com,mommyme0107@yahoo.com,armstrongcare1@yahoo.com,albart@bellsouth.net,new.horizons322@att.net,thebestsweep@yahoo.com,missalisha08@ymail.com,dezy2224@yahoo.com,morgragedanielle@yahoo.com,joanna.sweet@hotmail.com,adenelly@aol.com,pratherjck3@aol.com,camillephlps@yahoo.com,cs09jedq@yahoo.com,baby_pmpn@yahoo.com,kmiller182@cfl.rr.com,kayladaniels90@yahoo.com,lisaconradi@gmail.com,confidence07011996@live.com,poncallinfo@gmail.com,myfamof3@gmail.com,kjg36@comcast.net,missrosesdaycare@yahoo.com,cooljet6@yahoo.com,anged98@yahoo.com,cowboydad75@gmail.com,crawbox08@gmail.com,sacpr210@yahoo.com,khusfelt1991@yahoo.com,dskupien@delawaresafetycouncil.org,primaryyears@aol.com,kidz1st@gmail.com,bonclaude1@aol.com,millerv25@gmail.com,krosieone@aol.com,poohcc07@aol.com,ironhilldaycare1@yahoo.com,bangelique95@gmail.com,truruler@yahoo.com,denisedr54@comcast.net,sromasko@verizon.net,portiabusaitis@gmail.com,portiabusaitis@comcast.net,dawnschafferman@comcast.net,elevatedplaceslearningcenter@gmail.com,gerlacht00@comcast.net,melissalee1209@hotmail.com,valdave@comcast.net,rgoo135623@aol.com,baybeesteps@msn.com,rhino_07@comcast.net,mseekids@yahoo.com,faithshouse@live.com,jeanneflynn59@gmail.com,rachel_vigil@yahoo.com,gspederson55@q.com,ptrcgzmn@yahoo.com,thomasjohn1088@gmail.com,earlybirddaycare@gmail.com,sabrinareiman@yahoo.com,letmcg@ymail.com,brandon.carson25@yahoo.com,christinamauro23@msn.com,katielewnard123@hotmail.com,porkyexposed@yahoo.com,mgfbower07@gmail.com,lonniejbeard@hotmail.com,aklittle0102@aol.com,jennywarn@live.com,leyadewey122@gmail.com,neen062964@hotmail.com,info@need-a-nanny.com,dork_britt@yahoo.com,tinytots80123@yahoo.com,caycestaubin@yahoo.com,ivana331@gmail.com,tstots@hotmail.com,bballvarsitygirl@gmail.com,alwaysforhim2@gmail.com,degutii@msn.com,tiffjowilliams@gmail.com,patriciacallan@msn.com
Subject: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
From: Mr. Stephen Fred <mr.stephenfred@yahoo.dk>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – dmghost.dmg-hosting.com.ar
X-AntiAbuse: Original Domain – yahoo.com
X-AntiAbuse: Originator/Caller UID/GID – [826 825] / [502 502]
X-AntiAbuse: Sender Address Domain – dmghost.dmg-hosting.com.ar albanesi@dmghost.dmg-hosting.com.ar

Mr. Stephen Fred <mr.stephenfred@yahoo.dk> <albanesi@dmghost.dmg-hosting.com.ar> mr.stephenfred@yahoo.dk

__________________________________________

EMAIL #2 –

TO: deleted@yahoo.com

FROM: “vikhadd068@aol.com” <vikhadd068@aol.com>

SUBJECT: Re: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!

EMAIL: http://oabfranca.org.br/entrance.php NOTE: I DID NOT CLICK THE LINK AS I DONT CLICK ANY LINKS/FILES RECEIVED FROM SCAM EMAILS.

HEADER:

Return-Path: <>
Received-SPF: none (domain of imb-m01.mx.aol.com does not designate permitted sender hosts) AQEBAQ–
X-YMailISG: fG83VQIWLDuwe8ej5n0IaROXvxrlzu18BJ2irW7rRnkNUMiR 0Ctsgto2LNAskyV2Q6ixNssLOsmnFDVOBVCrL.Ma4HX.zvoh5.y.Me6a47y1 Y.s4vBi98z.8nCoiFrNhF8AthsY6JNRIP0mO3NwL6he8knCzy63JqA9qhhqY FQRl4qMLiHM902WJNFvAOn.XvAyS6gBl90P7phn5AwFtzDAnWp7SjQKS8yd9 2cqKCaMlnKRjdDDXjb2Q70KZ_PcWA5mIrPPIPxX4lk8JBJe._gcgSX6kzAYp 4YvvqU7x6K6snhfvbJKtaMeaXIjmTDn.pLJ6GEKwthBTc3K6CzQF1pPdkRRD yra8kG4Jxtlb_RaSjcjAXw5qpiHxnBAx3Oek1rLM84NqcWLvSV3nRFriYeYV nhI5BWjm8wwT3AcOsJUwm97do1.YsTka4wRMCVD6cqiCuU2jAKvwx1uDI2.b RoFUQReDBAjwqAAHPZLlkdarxo05P1Uwq5jHR99zLNJlOjaSRiMEUe0PS9zs QDsD3ljuWathFexCSe6PKWbyt3x4XQhQYjJ8mtq3elH0LdNeIuahbPv6S4G8 hueVJ.bJ9cI2b2jYCsk1qnouy2MQDdlL5VbiPxDCWp7AsBes8Nb4BepjQsVR w2UcWs9.Sy1V065valQ1_avr4y87pRQOmtt5dWEaxIAO8bWhK4iCTfcE1cJY 20x8ZehazHdzyZAVwjK95yH6Y0LghsrH75EbuSGscuYeXfnXpPOU0lHJOYpM Smn8XIi4jgWio99h4HL5hAKWRirLVLu_X5PDmHnYDie5ONFtGejBROGsblcC rl9jhZH6AJlOWZyqVTRM5Ppp3S6YCnbXEAxRydb6MzVMCUdDrES1gAdSYuc_ i5b5UqWEyedgNzG5O1cUaG9VQQWVQd26QYIhUn1LH8p5cF1d4w9e3Y7VQQ8N MYYqmESf9lsGNdZFCRFIMXXUdD5OQpzT7199rPh0OAQ6e5FssdlgeHW5u8Oe Qm9rwYEstTmh6VWIAnHdJLj59EuoMNynb0YBxAks2F6YXhwIzblZ4az3IDAf 3UW5o76BBwQ424rwxaewfRAxh33BT18DwtTa_1U0vcIPi7ooZSfLIzHxatMM tdMmB1yNMhgNeqj41iMGVgytMBZI7HV5OTRdtnMQsAoEFr2MQitM8bjxFQ4k VUhdeQ30xHi1UVWyJwl9l8xmrHA-
X-Originating-IP: [64.12.227.42]
Authentication-Results: mta1395.mail.mud.yahoo.com from=aol.com; domainkeys=neutral (no sig); from=aol.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO imb-m01.mx.aol.com) (64.12.227.42) by mta1395.mail.mud.yahoo.com with SMTP; Mon, 17 Dec 2012 23:38:11 -0800
Received: from mtain-mf12.r1000.mx.aol.com (mtain-mf12.r1000.mx.aol.com [172.29.96.160]) by imb-m01.mx.aol.com (AOL Mail Bouncer) with ESMTP id B186A382B708 for _______ Tue, 18 Dec 2012 02:35:08 -0500 (EST)
Received: from core-mic004a.r1000.mail.aol.com (core-mic004.r1000.mail.aol.com [172.29.104.4]) by mtain-mf12.r1000.mx.aol.com (Partner Internet Inbound) with ESMTP id 9ADBB3800008A for _______ Tue, 18 Dec 2012 02:35:08 -0500 (EST)
Date: Tue, 18 Dec 2012 02:35:08 -0500 (EST)
From: vikhadd068@aol.com
Message-ID: <52151792.8536.1355816108626.JavaMail.zimbra@core-mic004.r1000.mail.aol.com>
In-Reply-To: <1355816106.93122.YahooMailClassic@web161004.mail.bf1.yahoo.com>
Subject: Re: DEAR BENEFICIARY———— YOUR FUNDS HAS BEEN RELEASED BY THE FBI TODAY CONTACT US NOW!
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Auto-Submitted: auto-replied (aol; away)
Precedence: bulk
x-aol-global-disposition: G
X-AOL-SCOLL-SCORE: 0:2:335928000:93952408
X-AOL-SCOLL-URL_COUNT: 0
x-aol-sid: 3039ac1d60a050d01cac1b64
X-AOL-IP: 172.29.104.4

64.12.227.42 — 172.29.96.160 — 172.29.104.4

 
1 Comment

Posted by on 12/18/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: