RSS

Tag Archives: Nigerian 419

“Mr. Stephen Fred”

NIGERIAN SCAMMER – FBI IMPOSTER – ADVANCE FEE FRAUD

Okay, this is funny. This Nigerian scammer has been spamming me with phony lottery (atm) scams. I have posted dozens of email-addresses, IPs, names, etc that this fraudster has been using. In the email below he claims that ‘Anderson Smith’ was arrested one month ago but this scammer IS Anderson Smith and Anderson Smith’ emailed me a few days ago. (obviously not arrested.)

Anyway, this scammer sent me a email yesterday and I noticed he fowarded the email to atleast 75 other email-accounts so I decided to forward a message warning all the other accounts just incase one believed him. Well, today I get the below email.. I’m thinking one of the people I people I forwarded the message to could of possibly forwarded it back to the scammer? Oh maybe the scammer had an email up there? I don’t no. Hmm.

Dear: (my fake name)

Thanks for your email, i pray this email gets to you in good state of mind.

This Mr. Anderson Smith was the former correspondent delivery officer in the atm and check department here in the FBI branch office Nigeria. Who was sentenced to jail last month because he has been the one who has been scamming people round the world by the FBI after much investigations had been done in his office

Now he is about to scam out your money from your pocket, you are strictly advice to stop all transactions you have been holding with anybody and forward the write up to me, so i can send to the FBI head office right the way for proper investigations.

I will also like to inform you that your funds is still with the security keeping company who are in control of making sure your funds is been delivered to you right in your door front within the next 24 working hours.

You are advised to contact me with the information’s as stated below:

Your full Name.
Your Address:…..
Home/Cell Phone:……..
Preferred Payment Method (ATM / Cashier Check)

We await your swift response to this email in know distant time.

Best Regards:
Mr Stephen Fred
FEDERAL BUREAU OF INVESTIGATION
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 20535

HEADER:

Return-Path: <mr.stephenfred@yahoo.dk>
Received-SPF: none (domain of yahoo.dk does not designate permitted sender hosts) aSBwcmF5IHRoaXMgZW1haWwgZ2V0cyB0byB5b3UgaW4gZ29vZCBzdGF0ZSBv ZiBtaW5kLiBUaGlzIE1yLiBBbmRlcnNvbiBTbWl0aCB3YXMgdGhlIGZvcm1l ciBjb3JyZXNwb25kZW50IGRlbGl2ZXJ5IG9mZmljZXIgaW4gdGhlIGF0bSBh bmQgY2hlY2sgZGVwYXJ0bWVudCBoZXJlIGluIHRoZSBGQkkgYnJhbmNoIG9m ZmljZSBOaWdlcmlhLiBXaG8gd2FzIHNlbnRlbmNlZCB0byBqYQEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzEw
X-YMailISG: YRAg_6UWLDsNPJ41NgYqJwAf5OJLkgUP_WnGcMzl8tpjvtMl _rR7NL5SqQ5ckG58fvfr6m0wcweGFaHpNtYbxDMuVDaIIh1l3K5mNhJuuUo_ 1gL0f1X33EdIEWkU5mPAyilJBlXEpEzk7F_IyU989l1G9TzWOre1Rm4NVrtv wL._Vi2pXJgOQWfreL61PfLIlsJaWcVz4qtNDDj2gyD40PxwRgmAN75tZ4nn aRWQg0kEw6lZsV6CpK5tBR93lSxR5BijjoPWypit6rRfFHu2RPGypmHaaT5i NyOQ3dFSpUGR0qaoBtZbkYY6RfdMQeiKvQSJUW3FpI9_7lT9PcuRP8ulxAyH IdKsAozRLeGkYH_HEicxkXssyyV0P5VqNhSjcN.FVIQIMg49oMMuyXhq6Ams KYFWO16wfZulmhe3zhfu8iLnXUOx1asM1CoRtivrLypsvcMHW2z3jV3Sf4xn gIGmDsHpgafAgkUO3QWxCyUJLenj8Dj_BwC0KlH1rTcmzgg1cDn.8n1xfx4I TffWkboW6Eu0ftF39kDBSKHoC1iLW1RlaaenH.P0luai9hY6QXflsWADaNMp vyw3FUaI9ZssiJp679eh4kt0pGwVUec2kSxHDhpu7SLrLfsGFNoF0pPZYXUt uGRiYlJUlUr5v8msaTOvPCQ35gQ51eUcQaRxD4v2KkyvHegnUen7ToXi2Kh_ OKg9ouVRwnkubOu7lDdfjAzSeczwtAcm5f2ubi7_l3rFwW9zApCW4_AjeWmd 7vvS5V1nYymEkC31.V8sS56xjK3kQCE2iE9j0pUAjktDOX6wn8J_4Ayq1PGI JXgjS5w9nTji3nRHdgxyZOWsXn0db6EffdhNgia3_uSx8P4LjSMZZ7l7PS2t R0PhNr9NWBA._lPQRp.ZCkvQ.8fqwvIlrCFFnsl0SMfnnvOGhZygyoSDyQDm CBfSA7cKbH3v.lGz0WBYswdnCdFJQrwjekmXVAKaUQt440eGAHPbesQ0ln9U PSqwPsVIJt7QkPvTDHPfdX1TOmMQogOlC1_Pt08aiFWDsz.hfNhiKZl1XK82 uJT_t0sFbY8LfjS.p25d_9wZv04b8nl7s5nCniDYVnKK9LESNJdIkvjYCVgb WGkqKQSwqmZou53wA60pT5kbAMhI2QtgZo59Jrt_qvNwcY82MaPQKLLMaFGN a_I2Gwi0ptjskEuktAOgHo9vf3tIbLhf.cNFXjFPrGYa4yPAkAR_C1RMGzCi eEu2c3Go8MzGJFVU0PFqESSugO1nYIzz7W4yaGauPPLzBhykdx2OBa._GR.x 6IyB0YF2._YiCvukGztRVMt0SLWP2kQarf68uCf11I2A4mPMlitmKL._tD.x kkfi6Zc9B.JKZieJlcetzb7nwXocEQaWXoZUH1twHVOZ8dyzq3AnFQxdxoD9 G4mkqGOembFIUmoPAkuk2.N1hJoPV672fTBJY_dMNjDU_OM1tua2bQhWEaV9 RB9WTSbJRX_xtzqg0OrPgSmaXawGuXf0u4RaLPOD8kQiMN9f3w0LTGpfzNF9 8Rvgg796.RX_9Zj_ho8NkHiqorsQgxJeAkzeCQnhuNyKZTd8ZiwYbk_jS8OY .8E_qA6ixSW3NL.CC4hF64r.DdClBZQLn0xSC1PeTm3AGG38oY6zt26wqSnu hrLzp2rqW6lj8PfrLPMzw.Gqo8wMvm6Om0JtuF0gPL_NJ3YY50rFVWWnWA–
X-Originating-IP: [77.238.189.211]
Authentication-Results: mta1213.mail.ac4.yahoo.com from=yahoo.dk; domainkeys=pass (ok); from=yahoo.dk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm4-vm0.bullet.mail.ird.yahoo.com) (77.238.189.211) by mta1213.mail.ac4.yahoo.com with SMTP; Thu, 20 Dec 2012 02:24:58 -0800
Received: from [77.238.189.234] by nm4.bullet.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
Received: from [212.82.108.243] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
Received: from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 20 Dec 2012 10:24:57 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 56404.21902.bm@omp1008.mail.ird.yahoo.com
Received: (qmail 69722 invoked by uid 60001); 20 Dec 2012 10:24:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s1024; t=1355999096; bh=pyOeaUKKOWWZW3lLdVTTiYRo9J3z45S6mIgOy2HgFlE=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=6sEt/VfUuEDUeUudSXs2M1ShOX0eWuYo7bOFh/XdhIPki+ZIyWn9FslcZYIOK+sL8m2MaPtDxi6PNqGk3ODuJVgRnYkMO9IvTfVw4QnvNAaE0M7IfkAvckE4iO1WwKrgM4BNroefkyNDvwH2m/l87dYrH6Im4aiMBs/53/5CRh0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.dk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=4oyJFxMb7QIfFN0qOOV5EQRhasHrL0MG/qXmF0XzHB3Z75TEzL5ABDN+fjzt3FxSN4mb8R65+JBQMcZgeYn8hdlOLtIV7RGsbY7RDzkjKCf/9HGA0mDNi4dbn7Oof6iDUGP+kjNmcqlB3BqyHnRKxJyfsGxbxGwxQB5nyfnYApU=;
X-YMail-OSG: gJ29ik4VM1lXPyNG1YswL1rjwFhoTxeyDPqgBh6qE0W3Pqd SBPMiD2ZzSxd7xBXJUeIU9HeH8gYoc_o0hqMUZ.qWnc3PHsey18hkIJmRVZQ yDDgnrXDyofzHPQaZVicPUr9PhVOPPvLSyF37PopUuxDIHztw_T1fAI6YJN3 .IY9klRHXSdhx1XzjXDiWH_LvYN69G9aOSo0rZgdyeHU0M8MLOq7kfarzh9P bTtG.jAKXiYSxzvh4HXO1BJJ4nyYbdwX1bmpjdGVdXFLJ63kWgxitArYUuQ8 Aebx62dNlVOnuz3S5Wit3dSljkkO6nzX6N23R7uQUBOYLas3hJt9ayP4NSI0 9bWoBPZmOLXWneE8s8tCtkcKyynk9esWOszaD5qVI4GnBogGS9PyOOt_UJwD sMJf2NMf4K55JsKHz4XsW2WTb0G5d0vkdPg–
Received: from [41.71.177.225] by web171903.mail.ir2.yahoo.com via HTTP; Thu, 20 Dec 2012 10:24:56 GMT
X-Mailer: YahooMailWebService/0.8.129.483
References: <1355977301.69904.YahooMailClassic@web161001.mail.bf1.yahoo.com>
Message-ID: <1355999096.69523.YahooMailNeo@web171903.mail.ir2.yahoo.com>
Date: Thu, 20 Dec 2012 10:24:56 +0000 (GMT)
From: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Reply-To: “Mr. Stephen Fred” <mr.stephenfred@yahoo.dk>
Subject: YOUR FUNDS IS OUT FOR DELIVERY TO YOUR DOOR FRONT! GET BACK TO US NOW.

“Mr. Stephen Fred” <mr.stephenfred@yahoo.dk> 41.71.177.225 – 77.238.189.211

 
Leave a comment

Posted by on 12/22/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , ,

“DR FRANK COLLINS” – DR COLLINS PETER

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: Below will show two email headers sent to two different people (including myself) – It’s the same scammer, same scam as well. The header information is different however so check both for the different IP’s and addresses the scammer is currently using.

UPDATE: Dr Frank Collins is also going by “Dr Collins Peter” and “Collins Peter E” under the email addresses / IP’s – “Collins, Peter E” <collinsp@newtrier.k12.il.us> <info@notice.com>  YAHOO-FILTERBULK: 157.55.116.165 RECEIVED: by 192.168.194.152 — X-ORIGINATING-IP: 41.71.173.93 Also,  Dr Collins Peter web52644778980000x@att.net REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com – Scammers number: +2347030115459 X-YAHOOFILTERBULK: 98.136.218.126 — For more information click: Dr Collins Peter

UPDATE EMAIL FROM DR FRANK COLLINS A.K.A DR COLLINS PETER (I dont even think he realizes who he has emailed because he emails me with different, similar names on a daily basis.)

EMAIL: Attn: ,
This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-703-011-5459

_______________________________________

SUBJECT: PAYMENT VIA ATM CARD.

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $10.M

HEADER:

Return-Path: <webxx120999xxxxxxx@att.net>
X-YahooFilteredBulk: 98.138.91.88
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: FaLTslcWLDv_37lDMJwvUepYgmnqCzD2WWiLYIVYEvzWiVdj yeMdZg1sVqQZNMLZIrI8jrEhVaMXPsJIY6kRf0cbjnqQCPsaLbBdN2aERrfI RwOChZVFmKW9DzDxir.njJLHD.QY8j_y83jLRI4.AuI7k8QKdHjPvXXJYEFV 3YQAPmqS_78yqhLNbejZcKD5irk7feyqBo.GgWWRjUtr0XeJzJNqaql0h8sA e8RvUpWShCVHN2SyD1tuM0Deb4D1Ji8Vbh6LO0l1rw9cI0_sIz.vHpe_EiGP kHJSq4cVZ_zI24xSaJVH2nairx_S7dPagQ15pHcUhTSBMqGEgXXNeB1Y2oeP 3JU6qx6vSLkN2q.zt9EL5Vwas.VQ3VnnTXDqHLBdVcKU94hP0GlXAupk.DHM obtlUYCC1aCFRuuf3fyqc0LusjLnspK7JnjoOa4trRGPkJ_SlfDp0ggLrEaT v9a7lqaWeBT9EICtLA0FkLq3C2n40JFv19b2vJ8kTWkPK9_CQXXHvPmE9PZ3 kFs1luoQlTk_lzaBG6mXtSkUeA_7vvUTiNlT90e4_xcWHLkMi_qHUB6.MOXY KpjgBBptr6h8HH8BTrub.bb.IWuBN9wzFL2saNzKwsyxCm4lKMw9.xwDm5uJ Gq5wsKY8oAk.ZAm83V.RXXdQZhrYHzq2HI4TEsDuXnxCeBPNS3yCscgHGdua .5bviyYzefeg3tnvzHHkzRlzxSKw4QvlmuuqcChqscR9kCPiJLD.cgAs4kGP VstUFHd.bksAH552CD3i0lwkON5VfmeiESgRCGTPFvptnIKly2v3rZiX6esg GPPtVuH2VF9JGdJc2Ymbkp7azmUteBWNDdU3UBhVs441.EpCaWrI_sm_fe57 OiQyUOywnO1yRAtKJ_SFta4rGiPKLZ0KmWOm2iWxo40gyrpOgSF7vvvDlD.8 TTvxrpElU4SLFTn.GO1zFIFIOghPlKF4MTDaE1.cfSBA7OvaqPPhZB7CbD_P PbifHGwGIUcvjwXFo2GX_MJ9efyRaqwJ8RNv5bv_PmOjBSyxnqzPybf5N4_3 8R6NtlZnqM1b4Enrf9rnVdKOJneQ2FJhZVcYPrtDlcrfum9mFoOorxfoQHmz TE17GM57C0B.ILT43WlnmpnQdle96RtuSiqxmvsRzRStRdaGzDZuic8L7wei rjZENREYOwxD5PakTFL_xFmWBDMWOtezwqcs9j2HaBsIHEPGCa_w1BQb4H7T Rhg.rsLZhUpnUmz3kwbcPdV9Pc8UNCPtAWRE0QCMgwjeBn0ZXdINEcVudxSA YTcOMC4k95wVfJ8oF7eiOod5Qae2n5Ov7WwjD_lXqOtSBIc3J87zhs.HmSjX 7WlsWTwwXn.I_l4fa3NQ.mKYBKo-
X-Originating-IP: [98.138.91.88]
Authentication-Results: mta1228.mail.sk1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.88) by mta1228.mail.sk1.yahoo.com with SMTP; Wed, 05 Dec 2012 09:33:37 -0800
Received: from [98.138.226.178] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [98.139.44.92] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 198054.18868.bm@omp1029.access.mail.sp2.yahoo.com
Received: (qmail 22514 invoked by uid 60001); 5 Dec 2012 17:33:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1354728815; bh=2E+CXVEN1MfcfJaq2e/eZV5TviX4n2QY/x1KeAa5kws=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=f9JOS/YO8YXlmc9hJrpoWT06BSgD+eIddQyPZn984pugXI47aiHJ+HigDAW5KKMMOSqrOWONnAJiCoEyKoSjzteAYzjouKnJuSd9FFAPV7YDDY5OHZP5iSipgSUv3aNEhW/Rsnl4Ln0GS2YFkeMhoGRqYTKiUP5YtCqljvaDNow=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TW9B75gLmG8YEH2Fs0wWUR6quUgNgKf4vKcOC0lU58OuZZxvfbAEilc6hFgOyOvoldI//PR2xiJZNGeYJsT5o76o0CJS8W8mbj8ANAI1PafbE8IT034u3iHRas9fZymmyVV0ARoaM4Pmz0UzVZK0Jim/YrB1484O5fKsUOiyGTM=;
X-YMail-OSG: WdGt0KwVM1lOyB0NVRZY5rrxYN4NyBpT08THjv3T0blrAYl g.fSaOnJGDgT6qOWJLehIImpPX16weUxpsraTUfiislliLwCl2K7v8Pp.iJQ a9TSaK3Cg8mAMGQLpgboaXsnY0P.gbcdPD9a2TYU3MLMz9.msdkdNVne7srD CGKrYap1ePNIkrvsumj.6_CYvw30FkImKkDHHf5IXtzUrxF4x8.QVPZL.F5P 1sCi9c6SjI1P.GeZm2DnWTw.VoPokMuHr44zOJyF208V.uJqcKGplN1blft8 NRD73m_UrMPrQXsfdMEk9IKg0jGHRledxyRP7NbPnmUmTJk5sWb6g7mibQcN lZBmrszbkEqY7Gci4Eh5lmEYhM0EH9ITd3rAkZfbRlBlo5s8MbxSVEa73EvH muyMHoTdJMpwvibAS8LsfWhBVw4Fzpyj.JdfnQdukkFQX5QRnWlt3FtcARkq hyy26DJRYTbzGN4Eyk0EL9EDXp1SGqp9Lk4FU_Cz6Hw4qjqgVzWqnIza_ijq nvI9omJY1Dw0WycuWs.OkVnfl
Received: from [108.174.51.231] by web184901.mail.gq1.yahoo.com via HTTP; Wed, 05 Dec 2012 09:33:35 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354728815.12889.YahooMailClassic@web184901.mail.gq1.yahoo.com>
Date: Wed, 5 Dec 2012 09:33:35 -0800 (PST)
From: DR FRANK COLLINS <webxx120999xxxxxxx@att.net>
Reply-To: drfranklcollin@kimo.com
Subject: PAYMENT VIA ATM CARD

FIRST EMAIL – “DR FRANK COLLINS” <webxx120999xxxxxxx@att.net> REPLY-TO: drfranklcollin@kimo.com RETURN-PATH: webxx120999xxxxxxx@att.net

SECOND EMAIL – Dr Collins Peter <webxixxxxx266xxxxx@att.net> REPLY-TO: collinpeterclaim1@yahoo.com RETURN-PATH: webxixxxxx266xxxxx@att.net

BELOW HEADER FROM COLLIN PETER EMAIL:

Return-Path: <webxixxxxx266xxxxx@att.net>
X-YahooFilteredBulk: 98.136.217.214
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 2lU7wkQWLDvBCg5Cg1wZtIwDNUzuGrZVVXK9H6ZxiRnCF9q8 3T_Z2xZXeKmdhjE03ZY1nNRa1P6Zz09tc3Suud6PVBq3vexxPmov8AXjPV9n h21FBi8fEfSTSwVFhhvzk7V6R63Puryrkha1Mb3jaVwNputKdVPkDPhjUMeo RVMMb4_9ds7LkdO1tAhp2nowUz6sKBD4buJmSanxkzHUpRwUVtPLKq8B09eN Rl25hxMaIQHn74TwJlEJoWwVxtvh8Jkr9b8xgoPVsHTD4d3rIEAmrBO8jRyd GelLKjDpe6gEZSWQukIvbii_.zMj02LUFMIXNqSXg2JTLp15U5_jUlo0usw3 1Q9ij8R.SuZ80..F80EMLcQO1SXMjqWDf6xkVHWwRChYckM8P0zLXQwmLzCh cXZIqLnw6xfz6lcwu0_mQkN.aX.hIIycQN9E431bkyzpAK8Sh0ATdnfKruuc hDUY3uEtvred._LLnnYkhYpxqfc_nSy4oYmmhRytYX5eJDo3.jrNS61KZPV6 YQ56CR6JtF_A6Hafi5rSLv5qgM4p8VJZi7448tERIhykcwaijsPjcAOenatn YK3BKAuoLWZ0KHPHNvGKAWVEbv9QWSQF39Q.EEP1LmrPyvSdcGkLUJurop.B aYWv4YFGCdGxSazNRDxvtgoiaK6SIwQ.bpgk7uq2vF3rcb50kF6JNxWrLg.n 7Tth7XBQ.W0dZ6SeRl5BddGt0PedKs6csdJXP3rAEuRx9HhVbiFWVgdNijR3 _dNog5Qebj0UNBN3_ZYEN_KnDptPkNdpsJ8OGplwzrinpWeXcnwHVgAbUTdo 18VmNYVRbtilZoPybybViqmTdRB30nDou7y.RzfJPpp93GHAGPmJapCeotd7 c17h.xTgmXwnesQYx8oH1A8HMZj9YMgj2Hn78UbjDz5iO3dLZZQwGJc37EEe Irpsy5SaXtVD8MbmmPkhMrhk8K30Dviwqq4hDE5WgxBlGVonuDQoGK3aEt2T nvWx.JhFmNOhCyTBWuANJwIBh0YVHlt7UHVip3l.jut4onQ9R4CDyP6sbX2c lfshiCRIJ9lEvHbvGo40N55AdITysTVwpsKYdhO1zKO2KEhE2HbINU3NSVAp mVO8xztcsAawulFbZ5PKA.HviU.utyPlT0yMvzwTHn_QINVPcYodx0NOT_5q eROgjgZ35jOw55jeTpgP2qOvmDNkeadY.RrCfkVM_h_Ewvbns5N8m8wKWn4F 71xz.y4o8QBLLz0jb4jMAFmUekk5PrMNZ0E-
X-Originating-IP: [98.136.217.214]
Authentication-Results: mta1191.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm9.bullet.mail.gq1.yahoo.com) (98.136.217.214) by mta1191.mail.bf1.yahoo.com with SMTP; Fri, 14 Dec 2012 03:36:45 -0800
Received: from [98.137.12.58] by nm19.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [98.139.44.70] by tm3.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [127.0.0.1] by omp1007.access.mail.sp2.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 191480.20265.bm@omp1007.access.mail.sp2.yahoo.com
Received: (qmail 75889 invoked by uid 60001); 14 Dec 2012 11:36:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355485002; bh=2TQXuFSDKzJQh2ItoNfMPDU7xRHv3E+CGrBMw/1Ns0g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=MdiZ1jC0egJ3jeK8x+wAmlqoZyMp98AiD2wzzG+et6zE3r4jYBfuYUoMttuA+gtIjRNvWXQLaTtg0u215rggtB9Wpx8OQWJMI3iQKHU+C0WdAONnnis/01rbGL8rLVp8QUEopIB3M6ep93e/l0o2GTcA+2tm8NmXdnIzOrTvHgs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tLrXvMlZ1AfWS1oRs/q6h6HUMYi/LUcbnjbU0+wRSPWQr/1rUxJ+mPFD5IS+2J+xhqTW8fnpv0P89+O46Kg0ZaIi52L7OqBpBWUtxGIOrGGuRKY65NxHoyuM/9fcPmg6OxN2t9IVr/IQmo5FIYMQAlTgtLYGxzIx8tus9kjh4UE=;
X-YMail-OSG: 3ICaliMVM1ngoXiqNpguRRh2iYwL78sXplySeVxex0hGQX. 9amYG0XA4OBV26LpGFUMshO4W2d_k7Z_a2Ijy9UC4MhQCts27.mEJf9MSo4o gLC1yrqEZW2qVfkENJcHqLvP6x22811UE_jYQp539eFIcLW5RWUDAU4t9CGn OdkUZ.I3db4Y0_pc3qHbfrO34x9zDWKUFRwLqnQ.wNCnHD8dS3WSTofCFWm8 DRISKdISfGE2ytoF4IzvXsFuyje2c_qd6tqdnmTw5Z9mBhssXb94A4biy5CF qnxB_1TEOjTWqKHDrBY4BU1EdgOFfYQNqvwQ4XtGhinDlu0jMGic.YAmQBDt z00_WMAOIdc6llHVKxJwh0yh_xgWL5D6rgLOTnmN2Mo2vI.t3Ls.zQwRBRhe SaGInzRlMMto6OJd7AVEbCSpnmZYicQHhMCbjMxGPX2KPd4Tv0fL_cU_plDm egb7i9XYQocNBXLDzdzIfmk9Um9FTZk5b6spv87aUQEG.1MjrCbB7UdYQ0uO JpvS8DhYL5XyxrsNNIFxmRpV2b8I07Jm9LTn8wKS_hqGegIf5feMr.9cGJzH 7hgKyGs0sihPG_k5JCSaI1yCjgZYK79b_xhXuvMQeLOYyQDygzxrr8813RrH cC8L9RfM7BsB3QMN75qyv.pCG1ZbybDazG.TyLuGLgdSNZ6KwYSh_mQ–
Received: from [172.162.63.104] by web185004.mail.gq1.yahoo.com via HTTP; Fri, 14 Dec 2012 03:36:42 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355485002.70723.YahooMailClassic@web185004.mail.gq1.yahoo.com>
Date: Fri, 14 Dec 2012 03:36:42 -0800 (PST)
From: Dr Collins Peter <webxixxxxx266xxxxx@att.net>
Reply-To: collinpeterclaim1@yahoo.com
Subject: ATTN:BENEFICIARY

108.174.51.231 << 98.138.91.88 <<

________________________________________

Click SCAMWARNERS for email to below header which was sent by the same scammer as above.

Return-Path: <web1xxxxx12000bvvv@att.net>
Received: from nm12-vm4.bullet.mail.gq1.yahoo.com (nm12-vm4.bullet.mail.gq1.yahoo.com [98.136.218.191])
(8.14.4/8.14.4) with ESMTP id qBAFqXcC024177
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from web1xxxxx12000bvvv@att.net)
Received: from [98.137.12.190] by nm12.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [98.139.44.75] by tm11.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [127.0.0.1] by omp1012.access.mail.sp2.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 169461.26588.bm@omp1012.access.mail.sp2.yahoo.com
Received: (qmail 11627 invoked by uid 60001); 10 Dec 2012 15:52:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355154752; bh=6IEXAnuDHUzPM2GG6BZxFSMMGXUzzTJH/x0iCKn3gNM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ZNpQDXqA6YKLygx/Mgp0kaQY3hShe48iYfThTEb8Iru1MOJkFmAxYG7WRpbG0vEzb8sVOXBWUD70FlpkHY32sc3lcnQRUH9EWyjF33/6bxeK6Wl/Hf7syjgMKen3IrPrVrQM7QP70aIkEYevI/L1VoeaKi0X05zrl/mkFKlZJB8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=C3u05KWRUG4yec6yjYc58jVUZqKqPra/xpCRYFkhi2pi73G7p5xYJt3avwhjC1pd5gHT2g6XMST7DkGiaRchRZYYa/jODcoZt4R+AhzCt86vNfdJ8r54ZScNvyU4Y+I8mpF49mKbuYWh9Qw+6o/yW3f8qclaMsyNAu3ATH2SDAs=;
X-YMail-OSG: p5tUyUsVM1nSNbno0XpFEzLZade1sG0k1LIN6NkNDDbP4ts
LfsdXeXxUn6OgEkvAzJFUKDvuIBVeFzZtgkksCNzN7YM7NYxZZELCIFArcbu
_mj1sx3mmaRRFlhLnDPO0Ud9acKn6RdXUuy0Z2D2THjsSnJnY9sU7qqlRMsY
RFxlusC6GZdc5g0kSlEJ9Q6m1NFt621vubnU3dlWx9BHYYswZA3GlYEoIQOZ
znu.EmXiL_e6NkgO6Xi3U8TlgxDHH.J2V.gjmQeJjgeleOz.cmjSiQf65.01
pFSPJQ.uJV2ZQQDmhoA_f4DIGHOLzIEM54oMAKodxlcGehFjRCB.Otx7qJ99
LLzSejt_DN_c3T7KOCmzn30gBLvM4NW04V6Q7K4N69QA7XOIUNPQflttOcPQ
QUh_J5vkppPwzXQ7X5ZwbRUsdfsHhuaz1XhXMvrY6vOWGj_WLL3kyxKoNNTD
o2PEbuViIVuMH9ocliCObq_Z7Olxp0coTXqA6vhkTd_030aE_Rclf5k8sFU.
neOYXj1nWJo0ZcsSoOLW7
Received: from [64.72.78.27] by web181404.mail.ne1.yahoo.com via HTTP; Mon, 10 Dec 2012 07:52:32 PST
X-Rocket-MIMEInfo: 001.001,DQoNClJlY29uZmlybSB5b3VyIEFkZHJlc3MsbW9iaWxlIGZvciBkZWxpdmVyeSBvZiB5b3VyIEFUTSBjYXJkICQxMC5NATABAQEB
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355154752.62957.YahooMailClassic@web181404.mail.ne1.yahoo.com>
Date: Mon, 10 Dec 2012 07:52:32 -0800 (PST)
From: DR FRANK COLLINS <web1xxxxx12000bvvv@att.net>
Reply-To: dcollins@kimo.com
Subject: PAYMENT VIA ATM CARD.

 
1 Comment

Posted by on 12/11/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“HOUSE OF LORD’S ORGANIZATION UK LONDON”

INHERITANCE / LOTTERY SCAM – COUNTERFEIT CHECK

ATTENTION: This scammer had previously sent me a similar email on November 13, 2012 under the same email-address of info@lordsdept.org but the reply-address was managementfile1@gmail.com IP 41.216.50.32 (location: Nigeria) and 213.154.64.102 – For more information click: HOUSE OF LORD’S ORGANIZATION UK LONDON 11/13/12

EMAIL: ATTN PLEASE
The HOUSE OF LORD’S ORGANIZATION UK LONDON Have just concluded the meeting
with the board of Trustees of United Nations Organization and
Representative of all the financial institutions, The meeting that has
been for the past eight months on financial matters, It has been agreed to
release all long terms debt, These are the classes we are looking into:
those whom has been one way or the other denied their Inheritance or
Contract payment/award payment due to corrupt official services,

After our mutual investigation in the recent schedule for payment of
outstanding debts incurred since 1999 to 2012 according to your file
record where we got your email address; your payment is categorized under
section {B}: Contract type: Lottery/inheritance/ unpaid contract funds/
Undelivered Lottery fund, Attn: Beneficiary, We have decided to bring to
your attention, that you were listed as one of the beneficiary, The
executive council Have decided to pay as many they have their file record
on their desk on a direct wired transfer, The total sum of $5.5usd has
been approved under your file according to elect,

Contact the processing/paying manager for your direct payment of US$5.5M
(five Million Five Hundred Thousand United States Dollars), you are
directed to contact the International Remittance Department of Benin
Republic who is In-charge of the payment
via E-mail:
E-mail: olusegunoniwon@ymail.com
E-mail: consultationdept@yahoo.com
Phone: +229 674 067 42.
CONTACT PERSON: MRS. ANDRIANA U. OLUSEG
INTERNATIONAL FUND REMITTING DIRECTOR.
HOUSE OF LORDS BENIN REPUBLIC.
Also provide the following detail to her for immediate release of your fund,
Also it is very necessary and important that you send us an e-mail
containing your vital information?? As requested below so that you will be
given an immediate response and directives on what to do next:

Full Names:
Address:
City:
Zip/Postal Code:
State:
Country:
Present Occupation:
Company Owner:
Company Name:
Gender:
Age:
Reachable Tel#/Mob:…………..*No Voice Mail Service*
Fax:

THIS REQUIREMENT MUST BE PROVIDED TO HER COMPLETELY,
As soon as the International Remittance Department in your file location
receives your information, your US$5.5M will be Transfer to your nominated
Bank account. this payment terms is to keep a clean slate of all debts
owned by the government and company to individuals either by contract or
award fund, we hereby plead for any inconvenient that you might have
received by any of this corrupt officials, The United Nations Organization
will not be interested in your story of not receiving your payment if you
fail to abide to this Instruction.
Yours Faithful,
Mr. Anderson Paul
Public Relation Officer
Strand Bridge House 138-142 Strand,
City of London,
E-mail: com.unit@net.hr
Hot line +44 020 8759 9090
OUR REF: H/L/UNN/APXB/TF/08
IMMEDIATE PAYMENT
#:WB/PC/FMF/MIN/UN/APXB/08.
HOUSE OF LORDS LIAISON HEADQUARTERS UK LONDON OFFICE.

SORRY IF YOU RECEIVED THIS MESSAGE IN JUNK BOX IS DUE TO OUR SLOW NETWORK

HEADER:

Return-Path: <info@lordsdept.org>
X-YahooFilteredBulk: 213.154.64.102
Received-SPF: none (domain of lordsdept.org does not designate permitted sender hosts)
X-YMailISG: n17TtrcWLDsdDEuSkY_HSkT51L21bPdZBMwxi6AQhYevQE6n 5AHJGUMCXxFcQWA_8b.NyHFBqZMcO.UjZ8FCertxLymBdRPX5yB160N2TGnm qwaPHWExX39Nk3fcXAu.PafkPhJjSLuBXZu9PORr5C.y390tBzQRaxX_Ajeo 7Hur_RtoMBNsEKEcS1NY_jJ7MVItgwhEdNv6BMjqx_b1MlG92f5bS_CtuAVd .oh_JKiqCucKnJdR_vA8__9UE.1fwuLwZ2jBdATHKGRXWA9jdgOwV3Ib69fT EOd7eaFTWdb_5Z16_.TYe.j7ArE3IJKpEKIk4E3slNCtWmGIRFmTka.H7YVU kHIFWlOe90o2tvuCYr8RvUv71WE0TgPgVl6Khq6RD5q1jIaXuAGNiZL303nP R7TIfXxur5a8ZC_2oHyszcv9WRLQjWFSCzGvGQYUJrk_g_Fa1qrpUjRjeM2i l0G7FO2XeR9HCwaTT2znjIqPkdy2KwzEIIjCz.N4kogQKc2kG9n6xWFpcpLo 74MXi2XlqMqfjw4Cj80wiP3jwE0ktGXxBGMSU_2n3YAQ21o2uVONL1mXGIl5 4bMmhVshiHKswZJfj1BN.SBP2D3c53qVkVjkIDCET06u1nIveivDP4Y_oe4g Gp0bTWt5y_R1RqFMmD.AIwh_MS5N2hQgXY2q7xk1_gsgMw2uKxCqk5wcw1df NMnauhxNQjJs0_tgmkT.nJ.KTOhA_qgdK986CusmuMctpQOH_ihBK.jvNTSK btYCtI0byx3BytVo7snXt8QYK6E5Jx9k3ZzauOFpR59.AeWK_EuKrJxb5kp_ 3EZ1tBGHB.ss6mypa8vfMvhb8TINeip6CZPnWI2wlXwUR.ZEKIJrohmFVHFm KFYVmymAMCOdWOLWh2A.dyJSUrjLje2_aZ.DSuRVGpoAtJLHe0QsBF20RzyD 7dC25DeBhkcO8UHLsvng7wFO2coQ2XMhsp.ayEqCe4X2lpjsh2lah9Xo7V7L pPiABw_yasLUGHztyfOUYJ9OSusCqxN.k2MPixuf1vKCB7pq65Iyc4p2uGVC K6bnKMICrei.rxdj1vvTYbKEmvHVsmn.tfhS5B0nTlah3FmibbEpZKHX7Upe wqrzGbwYMdD9LSIDpmkIqF3bRJMX91BdA08UsLs4_E931bhwDffu1ERuYjIw WyEwbhIfjONgETEO8gEzvb42sZbk90Wsxo5b2y1F4ypAzD7R2VyYuQIFQHpb _kcoyrCgQZolEt10hXFRxy0X5MWOAFCOxnDTvDjoJuR2m5Q4DJk8Ic5xuXp8 QCyFyE5lHJPSNnKZ9A15ErmDah0X_ZcVtz5Ri2C_TQNylkHidCSUd8sG0SJb Mg567n3VzIfX6JYHtqlSY9NbCE.G8GC_kNiS.WMe0oeKI7OGev6vbuV8Hzjf yRICVnPIJjSU56vQ91Rk6elLYGnonbkMLw–
X-Originating-IP: [213.154.64.102]
Authentication-Results: mta1349.mail.mud.yahoo.com from=lordsdept.org; domainkeys=neutral (no sig); from=lordsdept.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtpgp.orange.sn) (213.154.64.102) by mta1349.mail.mud.yahoo.com with SMTP; Sat, 01 Dec 2012 01:51:12 -0800
Received: from sunumail.sn (HELO srv1-smtfree-msg.orange.sn) ([213.154.64.61]) by smtpgp.orange.sn with ESMTP; 01 Dec 2012 09:17:34 +0000
Received: from [213.154.64.43] (helo=www.sunumail.sn) by srv-smtfree.orange.sn with smtp (Exim 4.43) id 1Tejj5-000827-EM; Sat, 01 Dec 2012 09:51:11 +0000
Received: from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)
Message-ID: <55073.41.203.79.249.1354355471.sunumail@www.sunumail.sn>
Date: Sat, 1 Dec 2012 09:51:11 -0000 (GMT)
Subject: NOW CONTACT THE GLOBAL FUND REMITTING OFFICE FOR YOUR APPROVED CHEQUE.
From: HOUSE OF =?iso-8859-1?Q?LORD=92S_ORGANIZATION_UK_LONDON?= <info@lordsdept.org>
Reply-To: consultationdept@yahoo.com
User-Agent: SUNUMAIL/1.4.2
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: info@lordsdept.org
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to false
Content-Length: 3749

HOUSE OF LORD’S ORGANIZATION UK LONDON

Some other email addresses and IP’s used by HOUSE OF LORD’S ORGANIZATION UK LONDON SCAM – info@lordsdept.org <> com.unit@net.hr <> managementfile1@gmail.com <>  olusegunoniwon@ymail.com <>  freshtools@wanadoo.fr <> hackk@smtp.com <> 213.154.64.102 <> 213.154.64.43 <> from 41.216.50.32 (SquirrelMail authenticated user david_fletcher) by http://www.sunumail.sn <>

RECEIVED: from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)

MESSAGE-ID: <55073.41.203.79.249.1354355471.sunumail@www.sunumail.sn>

More scammers who’ve sent out email spam under 41.203.79.249 are:

From: <sales1@home.fanwrestling.com>
Subject: Fwd: Re: Wire Transfer Confirmation
From: Tagged<Tagged@taggedmail.com>
Subject: Re: Fwd: Wire Transfer Confirmation (FED REFERENCE
From: <hien_u_spine@hhp.sugarmotor.net>
Subject: hien_u_spine@hhp.sugarmotor.net � ROLEX Inc � Disc
From: <kathytessendorf@mailfront.cbulock.com>
Subject: kathytessendorf@mailfront.cbulock.com � ROLEX Inc
From: LinkedIn Password <password@linkedin.com>
Subject: Reset Your LinkedIn Password
From: <Harrietjeancy@gmail.com>
Subject: Fwd: Re: Your Flight US 66-56833
From: “Purchase Vigara” <EAF01C7@tennlandforsale.com>
Subject: Weekend sale

western_uniontransfer121@hotmail.com — Received: from col0-omc4-s16.col0.hotmail.com ([unknown] [65.55.34.218]) by vms172065.mailsrvcs.net

From: Western Union Payment Center western_uniontransfer121@hotmail.com
Subject: FROM WESTERN UNION AGENT MR.PAUL EZE
X-Originating-IP: [65.55.34.218]
X-Originating-IP: [41.203.79.249]

From: Office Ups Courier
Subject: Urgent Delivery of your ATM Card Payment Through UPS Company Delivery.
X-Originating-IP: [77.238.189.61]
To: undisclosed recipients: ;
Reply-to: upsofficecourier@yahoo.com.hk

Received: from [41.203.79.249] by web29301.mail.ird.yahoo.com

From: Money Gram
Subject: Dear Customer.
X-Originating-IP: [77.238.189.216]

Received: from [41.203.79.249] by web132219.mail.ird.yahoo.com

Received: from nm25-vm8.bullet.mail.ukl.yahoo.com ([unknown] [217.146.177.154])
by vms169119.mailsrvcs.net
(Sun Java(tm) System Messaging Server
Received: from [127.0.0.1] by omp1016.mail.ukl.yahoo.com with NNFMP; Tue,
29 Nov 2011 19:54:16 +0000
Received: (qmail 69819 invoked by uid 60001); Tue, 29 Nov 2011 19:54:16 +0000
Received: from [41.203.79.249] by web26303.mail.ukl.yahoo.com
Date: Tue, 29 Nov 2011 19:54:15 +0000 (GMT)
From: “Mr.Edwin Aja”
Subject: CONTACT DIPLOMATIC AGENT IMMEDIATELY
X-Originating-IP: [217.146.177.154]
Reply-to: adamsvictor14@yahoo.fr

IP 209.239.47.191 as relay: IP: 41.203.79.249

YOUR BANK DRAFT DELIVERY NOTIFICATION!!!
Contact Person: REV.TEDDY HARRIS
UPS Courier Company.
E-mail: upscompainy1133@hotmail.com

419 from above IP, using 3 Yahoo IP addresses, including 98.138.91.34, as relays:

YOUR WESTERN UNION PAYMENT CALL TO CONFIRM @ +229-98679197
Vital Finance Bank Western Union Department.
Location Address; Plot 1261, Adeola Hopewell Street CO/B/REP,
Contact Person: Mr Chris Mike.
Tele phone Number: +229-98679197
Email Address: ( westernuniontransfe6@globomail.com )

“Western Union” Spam from above IP (Lagos, Nigeria), using IP 196.1.218.76 as relay:

Call Mr Kevin Anthony For Your Mtcn.
webmail address:( western_union001@qatar.io)
tele phone.+229-984-168-39
Contact person Mr Kevin Anthony.
November 17 2010 03:11 PM
H.User7043 commented…
“Western Union” SpamScam from above IP (Lagos, Nigeria), using IP 211.55.29.156 as relay:

MESSAGE FROM WESTERN UNION
Director; Tuker Hans
E-Mail :(cbbj@ymail.co)
Direct line: +229-66-614-055
October 09 2010 09:39 AM
H.User7043 commented…
From “Tony Chris,” purporting to be a poatmaster in Ghana, as a follow-up to an email from a “Barrister Paule Eze,” offering me an ATM card worth 2.4 million Euros.

“Attention Beneficiary,
From: TONY CHRIS ”

 

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

Mr. Mark Brown <> Western Union Office

Inheritance “Beneficiary” Scam – 419 Nigerian Scammer

This IP is being used by more than one scammer and if you received an idenical IP from an unknown online user then it’s a scammer. For some other emails, email-addresses, names, etc under the same Nigerian IP, please click: Bonjour 41.79.217.122

From: mr.dango.dangi1@gmail.com
IP: 41.79.217.122
Subject: WESTERN UNION BENIN REPUBLIC hr1-8nw24
Tel: Not found

Western Union Administrative Office®
Porto Novo , Benin Republic

Attention Beneficiary:
This is to officially inform you that, We are still waiting for the details of the western union payment information as soon as you send the charge of US$200 only.

You are hereby ask to remit the fees US$200 to the following information below:

Receiver Name::: Victoria Nnamdi
Receiving Country::: Benin Republic
City:::::  Porto Novo
Question::::: Payment?
Answer::::: Completed
Amount:::: $200.USD (Only)

On the receipt of the US$200 ,your payment shall be release to you within 24 hours. I wait to hear from you as soon as possible, send me the payment
information via E-mail.

Best Regards.
Mr. Mark Brown
Chief Managing Director
Western Union Head Office,
Benin Republic

 
2 Comments

Posted by on 11/28/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , ,

“MR. D.P.O JOHNSON” dhl_compay@yahoo.com

419 NIGERIAN SCAM – EMAIL SCAM – FRAUD

The below Nigerian Scammer is VERY Persistent and doesn’t easily give up. I’ve been ignoring him for at-least a month and still receive at-least one email daily. I’ve posted his emails and info but he is always changing email addresses and giving me ‘agent’ names, and it’s always under different Originating-IPs. below the email and header is a list of other scams posted under the same nigerian ip address.

 

EMAIL: DHL COURIER SERVICE COMPANY BENIN DU REPUBLIC 

Avenue Mgr Isidore de Souza 41 Blvd Du Mongo Cotonou Benin.
E-mail: 
dhl_compay@yahoo.com
Tel: +229-68377742
Attn: Customer:

how are you today i hope that all is well, my dear be advice that you should  go head and send the $149usd immediately to enable us. Delivery you package within 24 hours ok. So we look to hear from you immediately with the payment information before End of today ok.
USE THIS INFORMATION AND SEND THE FEE VIA WESTERN UNION 
Receivers Name………… Anthony O Ikwunne
Country………………….. BENIN REPUBLIC City …………………….. … COTONOUText Question…………….BEST COLOURAnswer…………………… YELLOW   
 
And as soon as you send the US$149.00 then send us the Western union Details/ MTCN Number / Sender’s Name. Because  as soon as the fee  is received we will dispatch your package and  provide you the tracking details for you to monitor the movement of your package while on the transit to know that its coming to you.
The US$149.00 requested is for our security keeping fee and All necessary documents has been tendered by depositor.
Below is picture of your registered box.

Type: Diplomatic Package Size: L W H / 04:10:13 CM Weight: 0.29kg Color: Brown

Yours Sincerely, Mr. D.P.O Johnson DHL International Express Courier Company Director Benin Republic Tel; +22968377742

CAUTION: THIS INFORMATION MAY BE CONFIDENTIAL OR PRIVILEGED INFORMATION. IF YOU ARE NOT ADDRESSED OR AUTHORISED TO RECEIVE THIS MESSAGE, YOU MUST NOT USE, COPY, DISCLOSE OR TAKE
 

The last part is the funniest. The scammer doesn’t want this information out in the public.. Well it is

HEADER:

Return-Path:   <westernu749@gmail.com>
X-YahooFilteredBulk:   212.82.109.193
Received-SPF:   neutral (212.82.109.193 is neither permitted nor denied by domain of gmail.com)
X-YMailISG:   ri8PeTQWLDufFhNVhMTKz7_9F04BnNPKMD8_fY0rGbtLSXJW 2Pbq0l7atG1.hyuzi790ASC5QcdKtobIYk1Emzm23zOEmZWyB_QYAoMJrlQE JCigHjfZ.uVRqOfitmh7hqbF6ku0hRzE36wXA0iGcobufDqI_2XjI1WLjY5A CuOT7lQUcYGPQdbxO2dBuslK6JEDuIP9YIWBxK0ijt3bLo9sR2AQDJkxU4Fq cPNN_P1vA_YFF5UhKmkIaHFQIdRXeDCOzSuM2NJStZ6b5GVnsA0t9e.J51F1 zigvYjLvpgIx_I5kcJOHSGitXn.4y0wcD_N0nZpF7Avx7jf1nY_Im1TSUxOY S8MWIZ7NUSJJMViMcj9Ay9NDEjAWeOJjCDPSBBzMqS3Vpk5b3lec.zeG5pKq pU5v1HSxR5T5E5bwURikWETXII4ld3dKwdzVP7Upe3QseNP4GT1QHx9kL6CK Xk.X.e7Aa6cNQ3L9TxgIsjUilXKYa8o7E8qKKcNU6D_98AGffgl1eZkgDzCy lMpbCCTYDVw4QTM.8IUdx1ULjC1w40akJCsX2sHujICyUszeB86UlrIQZnDq KhYDG2AfcFfiW0l9Rw5ARGXmWkEdscDKh6A6459_x2Yu9JgrpW6zppgPSOAh hSlXsUjusqP1zzhxSqKfLLZyA137OjiF97QcF5Tduy6wPi.yzRcVQBjbJJ4B 3bXU6xLpHo4WwdtBdG54zXaw2G70ZlBAvEBp9yU6DafCZmFHVQeRDixpQqv4 bKjA2uNQQspdfQCCXHhhrPvYmHvnJ4VZ87yPghyMDwEPpY4s762sujxnFKIj l5XEuJ.KaUsYFTT77LJnvhIOUbhgyuv9NqFypvKmZmLBWLnK9GxVDkvn_LT6 DYR7MtExqgQVje677.OXoYHXT0on4nycmOyRQpP9pe4CUuqYJ0yW30aeJlR4 n0FxIGbVWywqEqDczxtn5wNAvZiRFhyepfac_SQVNH64s2FK7KmJaWatwRWW DaL.8YrTOVb_rTkdlJNObrl9l2ck3JwF01eG3Rso_Lif_IXLZVN.iynqCRJG rRL4yig6Zabl0DUQmQ6e3yg2QNcUKAk9NIEwRdgNHq39w6v4Z4qe.kFBW2GT yjCJjOkQXB9STMOxGHHfA5LAfbAA53qApakMIsYlmPcepbOVE_yATLnzGL_t ig4l_1ukkpigli19hliexvsOA3HrPynT8RtJjUqqDJbDitCF.cn43eGgDJP2 6IAgP6BQ4Oky_IufQVuc8suattlG98TSmuEMOo5BhmCtBerVtFda60lMRM3y YFMmzUyjZn5OacwqMQ–
X-Originating-IP:   [212.82.109.193]
Authentication-Results:   mta1086.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received:   from 127.0.0.1 (EHLO nm24-vm2.bullet.mail.ird.yahoo.com) (212.82.109.193) by mta1086.mail.bf1.yahoo.com with SMTP; Wed, 14 Nov 2012 08:53:45 -0800
Received:   from [77.238.189.233] by nm24.bullet.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
Received:   from [212.82.108.243] by tm14.bullet.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
Received:   from [127.0.0.1] by omp1008.mail.ird.yahoo.com with NNFMP; 14 Nov 2012 16:53:43 -0000
X-Yahoo-Newman-Property:   ymail-3
X-Yahoo-Newman-Id:   795423.69197.bm@omp1008.mail.ird.yahoo.com
Received:   (qmail 71248 invoked by uid 60001); 14 Nov 2012 16:53:42 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1352912022; bh=YJdP0B3ArGUfIDfK+tFdY4usbtMSeMfxOIR+VL1Y3Iw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=KSOalfFpTYzmrFm8ucVEArfJ6A09mSCj6QSfJ/bmBjx3ntM85nIw49yOHwPEo8d8aKg0OiX/hx+yBZNf2WVOyNe2DRMb1gWujp4KLWpJxujHaH21UU7+pRrqUh5c4mpJQSKVWVQ7IXseBsU5x5L/tQRTj4sYnZA5r5GZOePZ+Co=
X-YMail-OSG:   OZ7LhD0VM1klb3DjyvlFkhMZSOF9Kk5yIkuHnN.ReaQhz8A 2eEq4WVU4
Received:   from [41.216.50.26] by web171306.mail.ir2.yahoo.com via HTTP; Wed, 14 Nov 2012 16:53:41 GMT
X-Mailer:   YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID:   <1352912021.69977.YahooMailClassic@web171306.mail.ir2.yahoo.com>
Date:   Wed, 14 Nov 2012 16:53:41 +0000 (GMT)
From:  
“MR. D.P.O JOHNSON” <westernu749@gmail.com>
Reply-To:   dhl_compay@yahoo.com
Subject:   MR. D.P.O JOHNSON
To:   undisclosed recipients: ;
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”-1132928367-462696281-1352912021=:69977″
Content-Length:   19629

Below is other email addresses, NAMES, scams, etc being used by the same IP as Mr. DPO Johnson

FROM INTERNPOL POLICE FORCE UNIT. 
desk of Dr,Daniel Alexander, 
International Interpol Police Force 
Investigating Unit Benin Rep 
Email: officeunion2012@yahoo.fr 
Phone +22999867566 
International Remittance Department funds Transfer Section 
United Bank For Africa International plc. Republique du Benin 
in West African State /Address:rue 7741 unesvia avenue kotoungbe cotonou. 
Email: atmcarddepartment132@yahoo.fr 
Email: atmcarddepartment132@yahoo.fr 
Website http://www.ubagroup.com 
DIRECTOR NAME: MR frank johnson s-MAIL:(www.westernunionrichard@yahoo.ca) 
OFFICE LINE:((+229)-99231994, OFFICE FAX: (+229)-98414204, Visit:westernunion.com 
BEST REGARDS.

Head Office RUE 84, ABAPKA MISERBO <<

western_ubb@yahoo.fr << activationcard@rocketmail.com << 

X-Originating-IP: [106.10.151.181] X-Originating-IP: [217.146.176.150]  X-Originating-IP: [217.146.183.95]beninhigh.court@rocketmail.com

Received: from [41.216.50.26] by web190606.mail.sg3.yahoo.com via HTTP; Thu, 
05 Apr 2012 05:25:48 +0800 (SGT)

Received: from [41.216.50.26] by web171002.mail.ukl.yahoo.com via HTTP; Wed, 
04 Apr 2012 20:54:00 +0100 (BST)

Received: from [41.216.50.26] by web171005.mail.ukl.yahoo.com via HTTP; Fri, 
30 Mar 2012 09:49:18 +0100 (BST)

 [98.138.91.212] 
To: undisclosed recipients: ; FROM: Mr. Mark Dennis
Reply-to: westerotransfer@skymail.mn

Received: from [41.216.50.26] by web112311.mail.gq1.yahoo.com via HTTP; Thu, 
29 Mar 2012 13:31:47 -0700 (PDT)

From: “FEDERAL BUREAU OF INVESTIGATION \(FBI\)” 
Subject: FBI SIGNED AGAINST YOU 
X-Originating-IP: [106.10.151.20] 
To: undisclosed recipients: ; 
Reply-to: msanusigoverno@yahoo.com

Received: from [41.216.50.26] by web190605.mail.sg3.yahoo.com via HTTP;

From: BENJAMIN NWEKE 
Subject: Welcome to Western Union 
X-Originating-IP: [106.10.149.38] 
To: undisclosed recipients: ; 
Reply-to: western_ub@yahoo.com.hk

From: WESTERN UNION 
Subject: CALL MR BENJAMIN FOR YOUR MTCN NUMBER +22998892244 
X-Originating-IP: [115.178.12.225] 
To: undisclosed recipients: ; 
Reply-to: western_ubb@yahoo.fr

From: chigoeze2007@yahoo.co.uk 
Subject: PAYMENT NOTIFICATION OF YOUR FUNDS. 
X-Originating-IP: [77.238.189.207] 
To: undisclosed recipients: ; 
Reply-to: sahelsaharabank@rocketmail.com

From: Mr Andrew thomaas 
Subject: Welcome to the Albany Division of the Federal Bureau of Investigation 
X-Originating-IP: [77.238.189.70] 
To: undisclosed recipients: ; 
Reply-to: investigationbeninfederalbureau@yahoo.com

From: ECO BANK PLC 
Subject: Hello Dear Beneficiary,Good News 
X-Originating-IP: [115.178.12.201] 
To: undisclosed recipients: ; 
Reply-to: plcecobank118@yahoo.com.hk 
Message-id: 
MIME-version: 1.0 
X-Mailer: YahooMailClassic/15.0.4 YahooMailWebService/0.8.116.331537 
Content-type: multipart/alternative; 
boundary=”Boundary_(ID_vIbW/TiNhur4KDUcmvroXA)” 
X-Yahoo-Newman-Property: ymail-3 
X-Yahoo-Newman-Id: 723015.62700.bm@omp1005.mail.sg1.yahoo.com

From: MAIL POST OFFICE 
Subject: Regarding Your ATM CARD Deposited Here on the 11th 
X-Originating-IP: [77.238.189.59] 
To: undisclosed recipients: ; 
Reply-to: mailpostoffice1369@yahoo.fr

From: Dr Thomas Yayi Boni 
Subject: His Excellency Dr Thomas Yayi Boni 
X-Originating-IP: [77.238.189.64] 
To: undisclosed recipients: ; 
Reply-to: hisexcellency.drthomasyayiboni@yahoo.fr

From: “Mr.terry smith,” 
Subject: MTCN.764-057-6456 PICK UP YOUR FIRST PAYMENT OF $5,000.00 IMMEDIATLY 
X-Originating-IP: [115.178.12.223] 
To: undisclosed recipients: ; 
Reply-to: transferfund@yahoo.cn

From: “Dr. Destiny Mike” 
Subject: FUND APPROVAL / PICKUP @BANK OF AMERICA. 
X-Originating-IP: [115.178.12.240] 
To: undisclosed recipients: ; 
Reply-to: atmbank@globomail.com

MR D.P.O JOHNSON IS USING THE IP 41.216.50.26 – WHICH IS A KNOWN SCAMMER IP ADDRESS –  interpol_police_force_unit187@qatar.io  IS A SCAMMER — NAME: NWALIEJI MARCEL — USED NAME: JEFF ROBERT CARL — IP 41.216.50.26 BENIN – KNOWN SCAMMER

FOR MORE INFORMATION REGARDING THE ABOVE IP CLICK HERE.

 

212.82.109.193 – This IP which shows up as ‘originating-ip’ in the header, is a Ireland IP address and not the actual location of the scammer although they try to confuse (potential) victims into thinking they’re not African (because 95% of scammers are from Africa) This IP address has been reported and blacklisted numerous times due to scam activity. For additional information on this IP address, please click here.

41.216.50.26 – This IP which is one of the IP’s being used by the scammer, has been blacklisted on numerous sites due to alot of malicious activity including fraud, phishing scams, etc. Location of the IP is Benin Nigeria

Associated Email-addresses – dbankbenin97@yahoo.com – vytransfer@ymail.com

MR D P O JOHNSON << westernu749@gmail.com << 

41.216.50.26 has been blocked/blacklisted on Spamhaus as well as the following IPs: 41.85.169.5 << 41.85.176.19 << 41.216.50.33 << 81.91.229.189 << 41.85.161.126 << 41.216.48.17 << 41.216.40.128 << 41.216.44.198 << 41.222.192.64 << 81.91.228.131 << 81.91.228.78 <<

If you have received any scam email’s under different email addresses, names, etc under the IP address used in the email above, please let me know by copy and pasting them into the comment section. Thank you!

 
Leave a comment

Posted by on 11/27/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

Video

419 The Nigerian Scam Part 1

Documentry on The Nigerian Scam (part 1) — to view the second half of the video, click: 419 The Nigerian Scam 2/2

Every year more then 50,000 people from all over the world fall victim to the Nigerian Scam also known as the 419 scam. Usually contacted by email with a employment, business proposal, lottery, etc or on an online dating site by a romance scammer.

The 419 scam is the third most effective industry in Nigeria and has earned an estimated 5 billion dollars over the past twenty years. Many officials, including the Nigerian Goverment, are believed to be in on the scam.

The victims lose their life savings after they’re served unbelievable (fake) stories.

Learn the signs and educate others.

 
Leave a comment

Posted by on 11/26/2012 in Uncategorized

 

Tags: , , , , , , , , , , , , , , , ,

“COREY, HELENE”

WARNING: Secret Shopper a.k.a Mystery Shopper SCAM

 

Name/Email-Address: COREY HELENE <> COREYH@mailbox.sc.edu <> sshoppers601@gmail.com <> info@mm.com

Subject: Secret shopper seek shoppers for well paying survey jobs (US ONLY)

Email: Ref: US/2012, Secret shopper seek shoppers for well paying survey jobs (US ONLY) You can earn money while shopping If interested in Secret Shopping contact:

John Smith
Email: sshoppers601@gmail.com
Secret Shopper (Recruiting Officer)
John Smith
Phone: 206-350-2835
Fax: 206-350-2835
Fax: 509-694-0129
Secret Shopper Inc

Read the rest of this entry »

 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: