Tag Archives: October 2012

Judy Peterson (and other fake names/email-addresses)

Online Dating Scam – Nigerian Romance Scammer

This is the second email from ”Judy Peterson” – Nigerian Romance Scammer –

SCAM PHONE NUMBER – +221772093435

Email: Hello (name of potential victim),

It warms my heart to hear from you, my heart accepts you from the very first time i don’t know what you have done to me to make me feel like this, i am aware of our age difference, i will be 26 years old by next month, to me age is not a problem at all, age are nothing but just numbers, what matters to me most is the heart, love, happiness, maturity, i need a real and sincere friend that i can trust and talk to, i have kept this secrete for too long i need to open up my heart  to you because my heart chooses you as my helper, Sometimes the world seems to be upside down, things seems to be so unusual, sometimes i feel like am living in this world all alone,
My heart has been so lonely  ever since my parents was assassinated and i was left in this world all by myself,i am the only surviving child of chief John Peterson, my late father was the owner of Guarantee project company but his was assassinated by his business partner and i was left alone in this world all by myself, i did,nt have any  friend or family to turn to  and i was so scared that the people that killed my parents will come after my life,  that was why i left my country to this country i am now, I’m presently in Dakar, Senegal.

Getting  here i don’t know anybody or have any where to stay so i was taken to the Church hostel where i live presently, though here in this hostel i don’t have freedom and the living here is very bad but what choice do i have, i have to keep myself alive, when i came to this country the first thing i did was to try and claim my inheritance that my late parents left for me  but i couldn’t because of my status here in this country but i believe with time i will be able to claim my inheritance hopefully when i get somebody to help me claim it, my inheritance is enough for us to invest on any kind of business we choose, i like to sing, cook and walk on the beach, please tell me more about yourself and your country,
I would really love to hear your voice sweetie  but is so unfortunate that i don’t have a phone of my own, but you can call me  with the Rev father’ s phone here in the camp,
the number is ( +221 772 093 435 )  when you call just tell the Rev  Father that you want to talk to Judy he will send for me, i really cant wait to hear from you again  my heart really looks up to you, i hope my present situation will not scare you away or make you abandon me here, because hard times don’t last long,  please don’t let my color, distance or our age difference stop you from helping me, this is the truth of my heart and my real feelings to you, i don’t care about wealth, i just want to live free and happy again, i hope you understand me, everything will be alright soon, hope you like my pics,
until i hear from you again,

Take care,


NOTE: When this scammer sent the second email she sent it with a different reply-to email address which was similar to her first email address ( her other email is 

The IP’s associated with her second her have all been blacklisted – These headers are: ↔ This IP has also been reported on anti-scam websites and a scammer pretending to be Juliet Samuel <>  ( username: julietsamuel ) ↔ This IP has been blacklisted and reported multiple times. – Anyone getting a suspicious email from an unidentified person named ‘ Joy Olu ‘ should stay away. Some of the email addresses used in this scam are – also known as 



Additional information below

__________ __________ __________ ___________ __________

Name: Judy Peterson

Email-Address: <>

Subject: Hello sweetie

Email: Hello sweetie,

My name is Judy, i am 25yrs old, i’m a free minded,open hearted girl, i like to take life as easy as i could, i’m one of the few that still believes in friendship, love, trust and signs, am very much single and ready to mingle. was browsing through the internet and came across your contact,it will be my sincere pleasure to be your friend if you don’t mind, i hope you will not take my request for granted, i look forward to hear from you soon.

Take care.


+221 772093435

Example Messages Sent From (look in header for additional IP’s associated with this email. Theres a few.
From: KEN SAMBO <>
Subject: Investment Proposition 
From: Judy Ann raon <>
Subject: Invitation:Network Vulnerability Assessment and Pe 
From: lela ferti <>
From: Research Workshops <>


Return-Path: <>
Received-SPF: pass (domain of designates as permitted sender)
X-YMailISG: q2qYtNAWLDuVSliclPG5tcO7nEoGKi5QYFCg69rYHH2VIdBy VTGT68loHQov0AS5V32290CnFtJHWscSkPkzj45YquUWmUdGHSh1GQ8AL6Db KvFO0DGTAGcAhutR33.CEfdLDYNZdHDS6GipjSkzr1mCJmcMUu.O42WA4k5b E.3rhSrZ1c_.hX5ian4u3UGSOWj7bLbej9r9vViHPAiSNBEUvxfODrP8j7f2 1VgICRlqg9bCWAjSMi_BLTUeAKKR.gyOll3CQC7T.IyxfGK1YLk24xLnVQpx odaPqgRr8koQ4tg3Ql8.ZEeW3Kjcvb_sv5.Q5Pu41AYPwgruiRN6MTLI8m69 0G7R0IWD2egAbioIjdLyTxp5ZbkC9N8RBqa55A9MU.6mDjB5F6zd4PjbSWGE 7buqFXxgMdsFwikhUnnpKAaIphI_44ciWDopJ_iY6lrI_u9jAtrMaqvUj5NQ EaEz4MhCkqi.NUGSBeuSzxRhydUYorxZ72vzWjABszn7TZ4W9T3zu_YqG0zC O2n6EO_EyJO2bx5DPopdLwaywq5kZcgDDw.qn_7ArgGGZE6d8A6BtlYXd35W 64M4gg3WBGkrPD3AFdZf7GDkob5Xk22oZJdW5u5C6FzsK9C5JH.HChDaJP_n aZTPx8MFLbUAw9.LZGopJDYKNYmyTlKZUD.tCMLJLsliU4pkuPieT9r8OrXT 0m5BgRyxf2F7BfGtcAPy2wauERAikAi7HBdkyRnVPYR_4igS_woofNSqFjbS .u_O6VXClMtqvU5tC4SfO1Mgcu83lcYaA1d_sBt_VehKqOHnePbWIOtMW5Df TICBoGWPJHz7.mlWQEPUG0ccuPShpeZib7wdbvTbi8IxL8POah3nSCWruyzd ewGLtz4nMoKXMRoNqObt6ZAMKZSztJ8ixeJjThmw6OqfWeyPNiFygw4QeDEP e7dlaqJjda86niyQAyOrkJy61_fuYt526LH8TiMzNqCYk1AzbFol3fe3g7XW TZKgZQa2E6JbGY22QLVssZNHERNimeKOZCwDpb2ktQj59zJOPt4yuRzDyiCX 1Nk3qE6vhoFq8hK4cv4RzdV2._09MMVc9vHifj7Fvx3ub6h9ZrpcMr5ioFu. 2LKmBGgtsQN2ID2hjxQ8fm4v_YJgOTNznQoZ1MLh3H5SgRhIrQXqWPjhHBzt zOjm8f1EZu4QVRmOD9e_M1dPeKzKj7zh2CwGQZNr..v5kPzxiqAn9EAxjUT5 gk9ketJDYajX2Z9HWuig8ZlQTg–
X-Originating-IP: []
Authentication-Results:; domainkeys=neutral (no sig);; dkim=pass (ok)
Received: from (EHLO ( by with SMTP; Tue, 30 Oct 2012 06:05:33 -0700
Received: by with SMTP id k14so38347oag.1 for; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20120113; h=mime-version:sender:date:x-google-sender-auth:message-id:subject :from:to:content-type; bh=rtKRnDa9SZkm1mtqi2HyK1eEedIzlkc4Z7bZKWbp2DA=; b=CgTZtR7uUda95WOzVKC0+Gaf9dcyZBpbd/N50LBy+LndRDyJv4JcqGBCKE3hb+plDc FlbO4GRPE/2adPH5xg7D6Nacryb10aI1lLB64GU0qDddD2TbFH5Ll0WIkfvhURnFDukC JIQTZ6eq8Jw7YhWK4xfAZihPEOIWobubj80omLFXjH37aFPXi/lGdTozzQ7IG+GZo35P U/CLn0drJRyWiYDWvqPLivEWOEV2BmEzWCZlA+Qfua/k84OXebexc72Yu7tXme+hdD+8 Ktc4A9XnmsnDVDFWuJmqV8BmqLIAU1/82tfRTDXGPlxRBdirPzw7d4r6UHsnMk7s25qD tttQ==
MIME-Version: 1.0
Received: by with SMTP id v7mr28031346obe.101.1351602332600; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
Received: by with HTTP; Tue, 30 Oct 2012 06:05:32 -0700 (PDT)
Date: Tue, 30 Oct 2012 13:05:32 +0000
X-Google-Sender-Auth: ajA2UwthwZYsSy_kttSY7nR4zHM
Message-ID: <>
Subject: Hello sweetie
judy peterson <>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=14dae93b6374e98c1104cd467089
Bcc: (deleted for privacy reasons)
Content-Length: 1280
1 Comment

Posted by on 10/31/2012 in Romance Scam


Tags: , , , , , , , , , , , , ,

“Mary John”

Charity Scam (Inheritance) – Nigerian (419) Scam

Name/Email-Address: Mary John <> <>

Subject: [No Subject]

Email: Dearest In the Lord Jesus Christ

Greetings,I am Mrs,Mary John. an aging widow suffering from long time illness. i am currently admitted in a private hospital here in Abidjan cote d’ Ivory, I have some funds I inherited from my late loving husband Mr.Frank John morgan. The amount of US$7.500, 000.00 which he deposited in one of the Bank Here and I need a honest and God fearing person who have the feelings of human that can use this funds for God’s work and 15% out of the total funds will be for your compasation for doing this work of God. Please if you would be able to use these funds for the Lord’s work kindly reply to me.

May the Grace of our Lord Jesus Christ the love of God and the sweet fellowship of the 
Lord be with you and your family’s Amen.

Your Sister In The Lord.
Mrs.Mary John


Return-Path:   <>
Received-SPF:   softfail (transitioning domain of does not designate as permitted sender)
X-YMailISG:   VwHPk1AWLDtvNW663eNLY5dsoQldKMI5N5_m3yFIIV_DpZHl RYmd85fyG.iGhZYA0z6Wg4mVHxBpCQbB7irFq7WS00FnRYpGDN9Y85NUuC6S Vph58xDr97n9_1RNWYS7aXHmIPmhb6ICg6zQ5l7OvcmJDWdppv19RuUJwWA. fTUNBJnOyKqk.1TCd_yNPWjb1wDXLvbZy9J3QVWQfNBvxvQ.JJbwkzRFVADD mY8m5jJH4Tx3Yvxxix77sVT3nvaxBRyBPTMJNNS4k4uYE_tim.6kUomSSpXm OsG5.srdU3CPZzyErCvfggJUgcUEuoGekJ2eCe2VnQDXgsk3ZpGlwgQRAoNE 39gXjqm_Hxatcgw5EalMDyJWdLX6yFkuy.3FWfPo4ZJ5rWhCS9HKmJ4VYA_6 5x3MDuniCTGs4AIldh7W.YTEKa.WcGOikd75DF3JyVd2DH91D6L1zCqPqGw3 XUbAT.Jc9Yh58q7F5GuajmgjS8xnXjxz5C_1_kvAaIkC2xxs7x_G6TaZukM5 vt8vKU8I3i25HkiaT1hak0Tg5JrBJ5XgE1sjFEjoLoXWgRzmfsRj0ZZVGSpX V3mGrNhIlz9l4T5el8TGsSQ6rxexFz0S3BcdEuvP.oELaq0_srEz3b3NSY3P HQWhVl9LOHjdAAHwmgIHDtvws6yEknFMPzpnkCXKso1KEg246xIq9LRpUaiI SHgFfBrImKcP000AdLl99mp8LzD6vV5nGqxbPPvspKRcpw7YaukO4GITh7Oj B.OTN.behzmCZ739h5zRi7scQnd06Mlw9FrEaMnd.AcK78m6HRUna8Wp6ms0 XC96IE7Lkm1cVutuqpP.GGiZl493CLnofviwWjTDT2hSXhSbvRlXA604exPj pHuHiDh5uJbDxnaYaa47b9.PIrfH2XSJdByUC9.4WGT1.eTmx7rA.2ybK.BY HVxw850Htss.fW3fEAN0KeZAZIaJXgTjWtpYjMriPlnS_czjW3bD53gsnqi9 aSOWYNsiruzLyIbVLMdodR5Vs.CNDMFmvXZj6a8qv8Q_AEALR7rWfnhcaRLB oEFjguGiL6UYmm6xDMzCvVJl.cYseAxClS1EIunPvQ_HIodwvb5BeS6whcw_ 17Gm
X-Originating-IP:   []
Authentication-Results:; domainkeys=neutral (no sig);; dkim=pass (ok)
Received:   from (EHLO ( by with SMTP; Mon, 29 Oct 2012 02:38:17 -0700
Received:   from [] by with NNFMP; 29 Oct 2012 09:38:15 -0000
Received:   from [] by with NNFMP; 29 Oct 2012 09:38:15 -0000
Received:   from [] by with NNFMP; 29 Oct 2012 09:38:15 -0000
X-Yahoo-Newman-Property:   ymail-5
Received:   (qmail 52334 invoked by uid 60001); 29 Oct 2012 09:38:15 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed;; s=s1024; t=1351503495; bh=oEkXtj1A+FIFgbgVChcPPuy5C2Uey7tr+qtZqjlJiEg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=jQwlpBxns6WFwSoW5fBXnvoN9tGKFTr0g5/CDYOla5ZIHRCKjMOkY4nxz6BpdJ7nA90aM6PalfJPBrfQR84e0AdOhe4TRsffKYUH9+CagaZUg90pfuvxrr5SPmG6obgrMwbzIH6wlkeqWt1rDSlwL4Ai2MV9bjMo4hqHb4qc0tY=
X-YMail-OSG:   qXqqHOsVM1mEhS0D970rnAKdUMPJ8XNMa3aoX2zab9XgtBK xcmO.CH8R
Received:   from [] by via HTTP; Mon, 29 Oct 2012 09:38:14 GMT
X-Mailer:   YahooMailClassic/15.0.8 YahooMailWebService/
Message-ID:   <>
Date:   Mon, 29 Oct 2012 09:38:14 +0000 (GMT)
Mary John <>  
To:   undisclosed recipients: ;
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”1670751155-71809592-1351503494=:52002″
Content-Length:   1976

Tags: , , , , , , , , , ,

Man Commits Suicide After Falling For An Online Romance Scam (2009 Article)


Pictured; Hessle station in East Yorkshire near where Philip Hunt took his own life on August 13, 2009..

GRIMSBY, UK — A Grimsby man took his own life after he fell victim to an online dating scam that promised him the love of a “beautiful woman” – but instead left him with debts of over £80,000.

An inquest in Hull heard that at around 9.30pm on Thursday, August 13, 2009, 58-year-old Philip Hunt, of St Catherine’s Court, was struck by a train in Hessle. A post mortem examination revealed he had suffered multiple injuries and that his death was “instantaneous”.

The jury took just 15 minutes to return a unanimous verdict of suicide to the coroner Geoffrey Saul.

A spokesman for British Transport Police said Mr Hunt had “insurmountable debts” and was the victim of a common scam known as the Nigeria Letter or 419 Fraud.

The inquest heard he had been targeted by someone posing on an online dating agency as a Nigerian woman called Rose, in December 2008. She convinced him she was young, fabulously rich and if he could help transfer $2.9million from Nigeria to the UK then they could start a new life together, an inquest heard today.

Mr Hunt told his ex-girlfriend Lesley Smith – who gave evidence at the inquest – that “Rose” had promised him a share of her father’s estate if he could help her get 2.9-million US dollars into the country.

Ms Smith tried to warn Mr Hunt against it, telling him it was a ‘scam,’ but he was head over heels and blinded by the love of this impostor and believed the scammer over his former girl-friend of three years. 

The 58-year-old was so hooked on the fantasy of a future with the stunning ‘Rose’ and he willingly paid out tens of thousands of pounds to help her beat malaria and get her funds through customs and into the UK.

The cargo officer remortgaged his house, took out loans, ran up overdrafts and begged for cash from his employers after repeatedly transferring money across to the fraudsters’ account.

Ms Smith said Mr Hunt – who had worked as a cargo officer for DFDS Tor Line, Immingham, for the last 14 years – had sent her a text in January last year, saying: “There are amazing things happening in my life”.

She told the inquest: “He told me that this lady needed to come to England with this case of money to be able to convert it into usable money. “He retrieved a suitcase from City Airport in London and under instruction went to a hotel room and waited there.”

The inquest was told by British Transport Police that he was met by two men, who revealed the case was full of blank paper. They showed Mr Hunt how they could “turn one of them into a 100 dollar bill” with the use of a liquid solution.

Eventually he became so hopelessly mired in debt that he committed suicide by lying down in front of a train.

Mr Hunt appeared to believe in Rose until the very end. His mobile phone was found in a rucksack near his body and a text message to Rose – which was never sent – read: ‘I’m cold, lonely and depressed, I’m so lonely without you tonight. Going to meet my maker..’

1 Comment

Posted by on 10/24/2012 in Romance Scam, Uncategorized


Tags: , , , , , , , ,

Monica Gazairi


This is a ‘ Romance Scam ‘ and I am baiting this Nigerian loser pretending to be some damsel in distress (lol) – This is the 3rd email and she’s already trying to scam me with a fake check. To read email’s one and two, check the comment section.

Name(s): Monica Gazairi <> Monica Zirri <> Moni Ziri <> Monica Ziri <> Monica Gaziri (this scammer has spelt this name multiple ways in both emails and email-addresses. Most likely to throw off search engine results so I posted all of them.)

Email Address(s) – <>  <> <> <>

Subject line: Dear one


Dearest One

I am more than happy in your reply to my mail.

how is your day over there Mine is a little bit cool over here in United Kingdom UK.

my condition here is terrible Its just like one staying in the prison and i hope by Gods grace i will come out here soon.

I don’t have any relatives now whom i can go to all our relatives ran away in the middle of the war the only person i have now is Rev David Thomas who is the pastor of the (ST. PETER CATHOLIC CHURCH) here in the camp he has been very nice to me since i came here but i am not living with him rather i am leaving in the women’s hostel because here the have two hostels one for men the other for women.

The Pastors Tel number is (00447010053691) if you call and tell him that you want to speak with me he will send for me in the hostel.

My condition here i don’t have any right or privileged to any thing be it money or whatever because it is against the law of this country.

I want to go back to my studies because i only attended my first year before the tragedy incident that lead to my being in this situation now took place.   Please listen to this,i have my late father’s statement of account and death certificate and deposit certificate of funds here with me which i will send to you latter,because when he was alive he deposited some amount of money in a leading bank in which he used my name and future husband as the next of kin,the amount in question is ?5.5M(Five Million five Hundred Thousand Pounds) So i will like you to help me transfer this money to your account and from it you can send some money for me to get my traveling documents and air ticket to come over to meet with you.I kept this secret to people here the only person that knows about it is the Reverend because he is like a father to me.   So in the light of above i will like you to keep it to yourself and don’t tell it to anyone for i am afraid of loosing my life and the money if people gets to know about it.

Remember i am giving you all this information due to the trust i deposed on you.I like honest and understanding people,truthful and hardworking man. Myfavorite language is English.

Meanwhile i will like you to call me like i said i have a lot to tell you Have a nice day and think about me.

Awaiting to hear from you soonest Yours loving, Monica


Return-Path:   <>
Received-SPF:   none (domain of does not designate permitted sender hosts)
X-YMailISG:   iZEPBlwWLDtVcFuE8ISt3fl1SXUhcAx1bWSlPpODTBDawn6E oOna9LD5n.RVZk.KplynwPz3iELpzzj9ByuW82IRxTw0DNUqoSm5nKIPiOQv qtButIGlzhC0Jwg3Euv1hlft.iYil_Ga2pwOTB1LMcACGqt8mO802GeprpT4 hv_HNKaYPRoEWPV4rc5bySFb53Aq0RdNswNpx0EHtQBPkDy9AarzY9h4HG7M ByACVJrVm1H29IDXOGHe2C9gKyjnKdlx_jJS7hFj8eL9SCPOIUlLAQw4pExL rmOnmtkAntK6RO84jFEzsZevsBJUu8IEPyoFVcdcijozWwp8A37EbBzFXpAV vjzuRleqxnQ0G15g5FuUaIF.MUH50a8QLNDjO1B5UUO1E9KjRViVM3rrUInS XrTRcARPCGVxzudjvUEZnxWVPiDOh_P_cYStLjfS4AlTCTbQL8fFcnQz590H cSC3BZ6KTGJQsOK1oyX2nOpa_IattOdaxvbT_LdwkSpSe8y3F8O2DD28zBhp ceKSeUSgEew8fExFGdHH7jWo2gCQlZYdwfxEEdfAaoAoiTGA3Ydtz9oMe7uS PcE4DopuU09xejfAvsm6AOLJvoswnL9PH7fjZWvjt_OWp3ggUtl9EkDF_t09 F6h86pGKxi4kRbD_5PgDtvc5MDWUdPjlNz_Nc32o3jj7fNVgYcvzxk0KCb9V QGZy_w4qYBMocPwKKgcv0uiyChMfntODzFMcHSVzw67ZMnt4MCCsNnfxVuU6 DhI38MPTQFYlIlFhd3vfCt3IebpuS9Buz4UaeTMGAuwO7w083NlKxXZgdlxX U32._lOGlRzJP1udXehxPlpOq.qnCalQ5vqDPRTjUd6ihftSq6G9zEdEzapz kVgRIMfEez8YM6Jt2DiEH4wg4Usa8FGv3CgYjolg5ouXClXNW01kM04rBwVD hfeFSGr1tkPKC9rvG3flEk4H4oy0h9Hbuu7_FFg0SMVd7oT1h.zlwkYd0tSm aKzUmsKed_1LKE_DLRqgDqpd_sE6HlCdJvmM9cLOgNJZm_kbeZOhPkrj_Yda 7R9BEblRhmqTEM73JSHHBPe2keGlrGG14nP8XHNNi_uhqv5WaiJkSTYnIeit kzchQPG0l.UR3dc14lp05PohYqu2v90tbRxAVGrud_vHkaY_zYrLB8gngwPL WcHfBtV0Vb6st23.Bn.VkDSsXYmbNGs_C9RQ.RIrFWCrRPYtWPgBFkSyW4zW TvoLUFaoxGVmS3yM.OZjlB2RAQ1jDT1nhYZKrTIX5x7vnpByKBiYml6FOUdp YKJCm59.b7.ZgLh4Eh8uEVQolalUY6RKbSA1Mw7HrR4-
X-Originating-IP:   []
Authentication-Results:; domainkeys=pass (ok);; dkim=pass (ok)
Received:   from (EHLO ( by with SMTP; Tue, 16 Oct 2012 07:27:44 -0700
Received:   from [] by with NNFMP; 16 Oct 2012 14:27:41 -0000
Received:   from [] by with NNFMP; 16 Oct 2012 14:27:41 -0000
Received:   from [] by with NNFMP; 16 Oct 2012 14:27:41 -0000
X-Yahoo-Newman-Property:   ymail-3
Received:   (qmail 50063 invoked by uid 60001); 16 Oct 2012 14:27:41 -0000
DKIM-Signature:   v=1; a=rsa-sha256; c=relaxed/relaxed;; s=s1024; t=1350397661; bh=j64SDOVbLwjei6N8PXlqwxX4dLEXdCg9PNaU2lyFFXg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=SZHoz23C2HySSpns7hNAJqZr+CwDti6y2ed4Obbys9NVOP1WkQMHN9T6LOLs1t+lwWQ+sBFGxKULaNdSmKHgEU9VqgjIoN2UDUEXehsTsx+9FziZtHbnggQ+Q0os0Qnkt9S7Zn/TMhp39k4LUJoOJi6b5pE4lpuAXGuzIAZy0Y4=
DomainKey-Signature:   a=rsa-sha1; q=dns; c=nofws; s=s1024;; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=2SUnnwtw2dILo0qD4jUjmDT0xoiHzdLhTQCjBLFYxXzgbue3IiDZ1icYxTExzgUJjO0yqWVOCqaTQxiNQ9SZHsiS7AOYRKZarHlQ6UdhrY9AvOQk6qZm0HwhWs08NBaeyAou7FsSeYGmhW5dQvKFUdo0ls8RpHVwHLhA77VqKu8=;
X-YMail-OSG:   7HdYVoUVM1lYX88NXjIPNKAm8dhf4S92zO27rg_L_vMmwuA wRmH75Ocld_mw8F9lZx.iXNp0S3Vfg.uFshaVG7YgHop.H1pN6E.UBQXsY6u IV1uVXsAFEAMML4BMCVFFku.sWQr7rrfQy9SMVpOAUhMBGiS260ELXRX8WdV A_RFYUJe6GWFwzF6hb23E0cpIBgipbuP5wL9Eprn7ua1X7f6yS1Ibiw8IhMh 09OH8bOPhqpOuXEhwNoSqhwPZgshYlhpyRH8vfh.StNHjueR9BvmifTPu5iY CWn2WJWV60rYTiJ8md0E58L4hbtpVyxpqxx8xnAvCrMr8TCPk5iZ_QdhYGcT gma4gBSosMypZkmInN394IBbNEsIIkrBOSJ4KrwzHA_kXPk4SoTQufOt3WED doAMvmvrNzoingmQaiVQtYEppBiBlWQ6x53q0bSo-
Received:   from [] by via HTTP; Tue, 16 Oct 2012 22:27:41 SGT
X-Mailer:   YahooMailWebService/
References:   <> <>
Message-ID:   <>
Date:   Tue, 16 Oct 2012 22:27:41 +0800 (SGT)
From:   This sender is DomainKeys verified Monica Gazairi <>
Reply-To:   Monica Gazairi <>
Subject:   Dearest One
To:   [deleted for privacy reasons]
In-Reply-To:   <>
MIME-Version:   1.0
Content-Type:   multipart/alternative; boundary=”757014309-1522094667-1350397661=:47395″
Content-Length:   25159


Posted by on 10/18/2012 in Romance Scam


Tags: , , , , , , , , , , , , , , , , ,

Phishing Attack/Hacker: “”

FΟLLΟW ΤΗΕ WΕВ АDDRΕЅЅ ВΕLΟW ΤΟ СΟΝFIRΜ ΥΟUR АССΟUΝΤ: [hacker had phishing link posted here, trying to hack my email and password information.)
ΡLΕΑЅΕ ΚΕΕΡ ТНIЅ ΕΜΑIL – уоu mау nееd іt tо νегіfу уоuг ассоunt!

Sеllегѕ гесеіνе герlіеѕ fгοm ѕсаmmегѕ hοріng tο dеfгаud thеm thгοugh ѕсhеmеѕ іnνοlνіng сοuntегfеіt саѕhіег’ѕ сhесkѕ аnd/οг wіге tгаnѕfегѕ. Тhеѕе сhесkѕ wіll сlеаг thе bаnk, but thе регѕοn саѕhіng thе сhесk wіll bе hеld геѕрοnѕіblе whеn thе fгаud іѕ dіѕсονегеd.
Τhаnκѕ fог uѕіng сгаіgѕlіѕt!


Return-Path:   <>
Received-SPF:   none (domain of does not designate permitted sender hosts)
X-YMailISG:   .j_g59wWLDs7Z1FVq1bTB9Ay0Nm85O6Xo6Q7.ab6DM1y6lE2 V5Ew6cSn_EjBmqZPqn4BNIgr_T5JUCyIAcHhl4NvEWbwVEgYCuKphSE.Pfkp RTqoryWMFbhwE2QsvWLhEl8JAuitzc4JaFQay_DyXpBxMJCKscvryVGBcsA3 4tymn3GXfLcVO2OQD0V_bk5d8xvU96hcfnhU_ZPC_zKaFMoFLJwyWnH7QTar Ho2TMURqwzVZxiSnXX_YhyZR8.E.NXMyTBMt40q76mXfjn6rjVFYCFwXBt7I MCiSGZPfQ4lJTeKvcvgahHMgGhug07XxHqVve8kQvdaWBkIBHozW_xIzT64V js6UYSi_KbSOjZfqqNYx9fLSJL2_er3.nEuxIiGIee9kLWehA2IDaQ..l9D. kbxb9LZ9RAgKotriycpOCjl8NX5uhgWxLi3Lwflqh4j3grVIyj8YOm9n4aII sdo.zVoCqtQEF8nJiCYtBIhlfv_1dGssTwk.vO5cVNOpucBUbkVJ8onFi5nk w_tA9htCLYRX_4sj9e3GquY72Ne9X0qUhG4CxWDkPNFpSvFpGn2q8_9gVM74 ShAIEuphvjHFy01E53VAeUSQTGVghCkrBgMwxyjBwuIXyfPYhgCNejfC1NRy T4xNecwX5YvHXSRgqJfEl.IdVZdqt2ecK0H11J__OAn9f9PzLs4G9yFqThjI IB_DTXXyV18ZZECBIilcwYoUFUhElP1TTEmV2ERFt_pIQC5c75Q6edW5PO3u E5r2HD2QxiQv7.0xv8VT4E.F_RPUs3BaTVOp8O4ovgvnPj1zIScfTkpIH.Px G.mTYAjE_aBXIyMpc3SVjL.l4slLs9_XM3ZqD.nQ6iEZ6jHT2WXcpIT6Zml4 KXWfcBuhP6_8bHBhH6AIKT1APe8AyJOF6KVAhtNa0s0eu95WDrfEpK7MwiCE KUQ5NM65mi3x02G3m7DuoFmBg_PxwJ.wEW8lKGlAvi3l9ttrkeonmMfTr5dE jHA9ejzV.p99iSURPuc67rjo5idvpTe7i0SW1OUJmeWRnY66nsnRhm9Kz6v. C66ceRzog_4rE2wN6cr2Ew.khPexJMduBs5PuzF.y9kybiC8O2PbcwgVzP2V 0U6FcFansGQm27j75qRSTGU3xYKsGrU2IfuDZfS2bLWSGulkjnAx0zjIwynt 8ubjHM4YbFBt79qhQ1pM1JCXW3TZJ3sna4bW7jTC9S5b
X-Originating-IP:   []
Authentication-Results:; domainkeys=neutral (no sig);; dkim=neutral (no sig)
Received:   from (EHLO miniserver.local) ( by with SMTP; Tue, 09 Oct 2012 11:59:38 -0700
Received:   from localhost (localhost []) by miniserver.local (Postfix) with ESMTP id 554DD2EA4DA2 for Tue, 9 Oct 2012 20:59:37 +0200 (CEST)
X-Virus-Scanned:   amavisd-new at local
Received:   from miniserver.local ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id XKrzN4WhiVhd Tue, 9 Oct 2012 20:59:36 +0200 (CEST)
Received:   from localhost.localdomain (unknown []) by miniserver.local (Postfix) with ESMTPA id 3ADD32EA4D92 for Tue, 9 Oct 2012
Date:   Tue, 9 Oct 2012 12:29:57 -0500
To:   (deleted)
“” <> 
Subject:   Verify your account!
Message-ID:   <5db34b545e448c4c4cbebfe2ad48735d@localhost.localdomain>
X-Priority:   3
X-Mailer:   PHPMailer ( [version 2.3]
MIME-Version:   1.0
Content-Transfer-Encoding:   8bit
Content-Type:   text/html; charset=”iso-8859-1″
Content-Length:   2304

Tags: , , , , , , ,


WARNING: Phishing Email/Attacker/Hacker – This hacker has reports under Yahoo, Aol and other popular email websites. The real Yahoo Service would NEVER send email’s like this and doesn’t ask for personal information or to click on links. They also don’t do lotteries of any kind.

UPDATE: On 11/23/12, I posted an Employment Scam (personal assistant) and after looking up information on that scammer, it not only pin-pointed Lagos, Nigeria as the location, but this phishing attacker scam continued to pop up in the search engines which makes me believe there is some kind of relations. To view the Employment Scam click here.

Hacker’s information posted below:

Name: N/A (posting as Yahoo 2012)

Email: hanscgroot(at) (now why would yahoo be using a ‘aim’ to promote yahoo service?)

IP: – X-Originating-IP: – Recieved from:


Email: Dear Yahoo! User,
Your E-mail account has exceeded its limit and needs to be verified, if not verified within 24 hours, we shall suspend your account. [Phishing site was here] to verify your email account now. Thank you for being a loyal Yahoo! Mail user Regards Yahoo! Account Service


Return-Path: <>
Received-SPF: pass (domain of designates as permitted sender)
X-YMailISG: Frdoh0QWLDtQ3Xf789IXch_KzyBAtBxmsAOLFQEbyChNRsW0 rRxr_CbMvO2GgN2xixo4nLRKkdBHa2yzBXIimpEAfMPwil.V9_pwXDkReAGa DntpktH4pZ1g7BKF3HRHqZl7orDUf16aJrfkF0kFJw2kyoKEzh12uJIy8vN. AACBtFIWI6BQ2l.EJrrZDIa_c0AGbFNFUVmU1rAAbv51kis6ALrQgzL4SB4m QvSTsjY21zw6DDroyGXvQ.Q5te5zQbK4Ke1MMMooSC4FVsMaZYjFYjzMUFnT JQSKRPlPuZM0xA6KQek4xcmGfytI92Iafi86aWQc.hKNlFC8u8wytHnCj1cd v6rOg8ss4orZ9SU0MsAXtHc4VnUYdsoJeGqzqESWbRVS83h.VhFli0ogKNJl JIuLqqV08fif6W_eQEkBAUb277olnL5C6yX2roW31M11iu3R2z8qtQPe3Fko 1BBTg1ocIv5UVm3oJ0hq4WzgFEuciEntp.gHPJ0zJN8hSuAFe1hUnCQSNmi1 StUDnfIa6mNZSWWa2zLF_JWF8_P1CkY9ggsnuHxrXT3PoIP386Yio.rjP8rP pLryfxdduqTus9Gn9_MgiQ85_qOdgtcD2.0vmHnhTLjUOxj48hkwrB57.Yhn bpjzB7wX0yoEr8nhIYytEOcwnqpvNalnydCnseY3Y0MkF3vBZBUKTsIgsILW Nn6C3GqwVWHXs04oWgGRB9ZhSekDL7sKg9fhefIgAu.orN.wfmU.WlbIIWwH n6mz2s9cL6tq_9SqZXwhghLckpMFWvzL2ufPEOpBUZ56MTNRJfa4zXdNqOER hDI7o6Fv6OoCudzYfVi_YoZ_LU72kaVMW4Trdfe2MSD3LreGZX80TB4QO4iK AsfVxZpJso5sHtjdTSx9N82lpzDuelr24kbwx77iribCv0g84rq9.jIxRVXP x8RY5tWsn9TSV_GmTFMlUzjN35I26pLjAMEpdjUnieU2Xg4EfBhtakRTX0h9 HvaMRLzNkA0vEswGAZ4b5MIqtEidpIfBHYJkm8vKkmcd4.z4TSgFqoclzNRO fkPdTrrNpdVBwE_QQb.uHy8jeHTf95yWBKJs8cTjnsYK8vBV2_4eNTkxHJkV NrU6AjcCv1FYHd.N2gVU1D7rkNDUjZjfaRcuEZFKBkyT971788d2kcaTZaXB AqHebYSFfzzbW0kjAX.4PXJNTIxjj1GUEAXWpi5I1k0M9gUpf7Rbi9visCuA vJWunaHZW4ZHasyU0bwVjooB.f6TgAV_UM9tI3TVQOU10Fp5yrC5JLwd.Q.e aOXAdAdiBWb8w9fedi6FvhZut4mqDPF9rsgbO8DS_HwutwDVKnjyIm48JhQo eH9qqyx9l9TrnQecBvq0szcs47W3rhbY9ivXiH6MO6W6rUyNQamB2Brr1QZV 9QyJCGRIXzWegJ9nw94Uu.3DcQrZpuSt2ginJderG1QRFBPmJqdeAGnVnuzd FJ_khwHXQ7IsVixUIFCcJyLql.kq1qmUII_qlu3YUBeishoL64Y7kj8vMWHO PM8TMy7MLUiCBdgmQL8PqMa9XC1AEWt7UHnzQIJawXmfy6ySgiy.IRdXRfQ5 coPZ2Gr5lrEopiYzn5qFtw7TSKcFzw–
X-Originating-IP: []
Authentication-Results:; domainkeys=neutral (no sig);; dkim=pass (ok)
Received: from (EHLO ( by with SMTP; Tue, 09 Oct 2012 15:53:57 -0700
Received: from ( []) by (AOL Outbound OMS Interface) with ESMTP id 3BAEE1C00007A; Tue, 9 Oct 2012 18:53:49 -0400 (EDT)
Received: from ( []) by (OMAG/Core Interface) with ESMTP id E6686E00008F; Tue, 9 Oct 2012 18:53:47 -0400 (EDT)
X-MB-Message-Source: WebUI
X-MB-Message-Type: User
MIME-Version: 1.0
Yahoo! Safety 2012
Content-Type: multipart/alternative; boundary=”——–”
X-Mailer: AOL Webmail 37058-STANDARD
Received: from by ( with HTTP (WebMailUI); Tue, 09 Oct 2012 18:53:47 -0400
Message-Id: <>
X-Originating-IP: []
Date: Tue, 9 Oct 2012 18:53:47 -0400 (EDT)
x-aol-global-disposition: S
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20110426; t=1349823229; bh=zbZaNpxqM0rj4PGZbgVtMxM13Koe9LGyPUdKpRX+JKk=; h=From:Subject:Message-Id:Date:MIME-Version:Content-Type; b=lhYaeRDTuNvLYqvt5zSM9G8ZXo+TEdfAIjVkiblP9V6oPE6oze0CZ0aFIrGcni7Vo browcGX3cFXePQJpFDFylz5nbBvUyOYVvplAi9uLw5IHRYtnS8+oW8hv9+2/RK+oDd vmtSPx3lsot8Vi8T+s8v8yoZLC1m3oi6oNifDFeQ=
X-AOL-SCOLL-SCORE: 1:2:105769096:93952408
x-aol-sid: 3039ac1d338a5074aafb4348
Content-Length: 2303

Below are additional headers from emails sent by the same attacker. (to view the actual emails, scroll to the comments.)

Received: from ( [])
by (Internet Inbound) with ESMTP id 9F93638000088;
Tue, 24 Jan 2012 07:25:51 -0500 (EST)
Received: from [] (helo=athena.shepherdeurope.local)
by with esmtp (Exim 4.69)
id 1RpfRe-0007WY-p7; Tue, 24 Jan 2012 12:25:50 +0000
Received: from User ([]) by athena.shepherdeurope.local with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 24 Jan 2012 12:25:47 +0000
From: “John Taylor”
Date: Tue, 24 Jan 2012 07:25:52 -0500
MIME-Version: 1.0
Content-Type: text/plain;
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-OriginalArrivalTime: 24 Jan 2012 12:25:47.0260 (UTC) FILETIME=[4CEDC3C0:01CCDA93]
x-aol-global-disposition: S
X-AOL-SCOLL-SCORE: 0:2:130702056:93952408
x-aol-sid: 3039ac1d408d4f1ea34f3c59



Delivered-To: *removed*
Received: by with SMTP id t11cs90543wfk;
Fri, 27 Jan 2012 08:25:26 -0800 (PST)
Received: by with SMTP id f10mr14678072qan.8.1327681516849;
Fri, 27 Jan 2012 08:25:16 -0800 (PST)
Received: from ( [])
by (AOL Outbound OMS Interface) with ESMTP id 602123803F37D
for ; Fri, 27 Jan 2012 05:42:34 -0500 (EST)
Received: from ( [])
by (OMAG/Core Interface) with ESMTP id 12685E000091
for ; Fri, 27 Jan 2012 05:42:34 -0500 (EST)
Full-name: jtaylorcode
Date: Fri, 27 Jan 2012 05:42:34 -0500 (EST)
To: *removed*
MIME-Version: 1.0
Content-Type: multipart/ALTERNATIVE;
X-Mailer: AOL 9.0 VR sub 134
X-Originating-IP: []
x-aol-global-disposition: S
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;;
s=20110426; t=1327660954;
X-AOL-SCOLL-SCORE: 1:2:388657600:93952408
X-AOL-REROUTE: YES x-aol-sid: 3039ac1d338a4f227f9a1aa8


”Mr Mark Fisher”

Microsoft Sweepstakes Promotion Winner!!!
Wednesday, October 27, 2010 4:27 PM
“Microsoft Sweepstakes Promotion”

We are pleased to inform you of the release of the long awaited results of Sweepstakes promotion organized by Microsoft Corporations, in conjunction with the FOUNDATION FOR THE PROMOTION OF SOFTWARE (F.P.S.) held this October 2010, in London that attracted the sum of (550,000.00 GBP) and a Toshiba Laptop From the Microsoft Sweepstakes Promotion last draw held this October.Contact For Claims.

1. Full name…………..2. Contact
Age……..Sex…………4. Telephone Number…..5.

Mr. Mark Foster.
Email :



Tags: , , , , , , , , , , , , , , , , , , , , , ,

”Secret Shoppers SCAM – ”Mr. John Peters”

Scammer’s Details:

Name: Mr John Peters Email Address: IP Address: – Recieved from: [] and []

Subject: ATTN: Read and act fast

From: Shoppers Results

EMAIL: (This is the second or third email from the scammer. I’m just baiting him. I didn’t really send information and made up a address. His other email’s are somewhere in my filtered (made-up) folder. I’ll add once I find them.)

This is MR. John Peters from the secret shoppers , would like you to please confirm the receipt of the package on 1st survey assignment .. The package got delivered by FEDEX to the name and address you provided us ..  Would also like to know when you will be able to get the survey completed via WESTERN UNION as the instruction in the package indicates ..                                           You can call or leave a Message on  310-742-6596 .TEXT MESSAGE: (213) 537-3204 PLEASE MAKE SURE YOU EMAIL DETAILS ON : Regards, JOHN PETERS Secret Shopper®

  Read the rest of this entry »


Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

%d bloggers like this: