RSS

Tag Archives: Robert Williamson

“Dr. Robert Williams” a.k.a “Mr. John Williams” a.k.a “Peter John” a.k.a “Mr. John Mark”

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: This fraudster has been very persistent, spamming my inbox for months under various names, addresses and IPs including Barrister Nector FBI OFFICE Scam as well as (MR) Paul Johnson Lottery Scam — Below is a list of several emails sent by this scammer.

Subject: HELLO ,
From: Mr. John F. Williams peterjohn848@yahoo.cn

HELLO ,

I have contacted you because I’ve sent you the first payment of $5,000 today from your winning funds total amount of $1.5Million USD,Therefore you need to contact western union agent Mr. John Mark for him to give you the transfer payment information and MTCN.

Agent: Mr. John Mark
Email: ( nunionwester165@yahoo.fr )
Phone: +229 68433916 nunionwester165@yahoo.fr

Please try to contact him today for him to forward the payment information to you, Remember to Indicate the registration code of EB-2520 to him when e-mailing or calling him, Also he will be sending you $5,000.00 daily as per my discussion with him, this is what he needed from you to send you the first payment.

You’re full Name…………
Your Country………………..
You’re Telephone Number……..
Your Age……………………..
You’re Copy of Your ID………..
Your Sex …………………….

Do get in touch with me once you have got the transfer.
Sincerely,
Mr. John F. Williams.

Return-Path: <peterjohn848@yahoo.cn>
X-YahooFilteredBulk: 106.10.151.65
X-Originating-IP: [106.10.151.65]
Authentication-Results: mta1575.mail.ne1.yahoo.com
Received: from 127.0.0.1 (EHLO nm23-vm2.bullet.mail.sg3.yahoo.com) (106.10.151.65) by mta1575.mail.ne1.yahoo.com with SMTP; Tue, 09 Apr 2013 13:53:54 +0000
Received: from [106.10.166.120] by nm23.bullet.mail.sg3.yahoo.com with NNFMP; 09 Apr 2013 13:53:51 -0000
Received: from [106.10.151.138] by tm9.bullet.mail.sg3.yahoo.com with NNFMP; 09 Apr 2013 13:53:51 -0000
Received: from [127.0.0.1] by omp1006.mail.sg3.yahoo.com with NNFMP; 09 Apr 2013 13:53:51 -0000
Received: from [41.79.217.121] by web15303.mail.cnb.yahoo.com via HTTP; Tue, 09 Apr 2013 21:53:46 CST
From: “Mr. John F. Williams” <peterjohn848@yahoo.cn>
Reply-To: nunionwester165@yahoo.fr
Subject: HELLO ,

 +22968433916 nunionwester165@yahoo.fr Mr. John F. Williams
FBI OFFICE INHERITANCE LOTTERY SCAM

Subject: TRANSFER MTCN

Hello,

I am contacting you because I have sent you the first payment of Euro 5, 000 today from your winning funds total amount of Euro1.5Million , Therefore you need to contact the western union agent Rev. Jerry Young for him to give you the transfer payment information and MTCN to pick up the money at WU Branch over there.

W.U Agent: Rev. Jerry Young
Email: wu_payment0@yahoo.com.my
Phone: +229 98644349

Please try to contact him today and ask him to forward the payment information to you, remember to indicate the funds registration code of EB-2520 to him when e-mailing or calling him, Also he will be sending you Euro5,000.00 daily as per our board discussion with him.

Do get in touch with me once you have received the transfer.

Sincerely,
Dr. Robert Williams
IMF Managing Director Benin.
E-mail: bobwilliamson@superposta.com

HEADER:

Return-Path: <yiyu2016@yahoo.cn>
X-YahooFilteredBulk: 203.188.201.71
X-Originating-IP: [203.188.201.71]
Authentication-Results: mta1285.mail.ac4.yahoo.com from=superposta.com; domainkeys=fail (bad syntax); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm15-vm3.bullet.mail.tp2.yahoo.com) (203.188.201.71) by mta1285.mail.ac4.yahoo.com with SMTP; Wed, 12 Dec 2012 02:55:25 -0800
Received: from [203.188.200.82] by nm15.bullet.mail.tp2.yahoo.com with NNFMP; 12 Dec 2012 10:55:20 -0000
Received: from [202.165.102.49] by tm3.bullet.mail.tp2.yahoo.com with NNFMP; 12 Dec 2012 10:55:20 -0000
Received: from [127.0.0.1] by omp103.mail.cnb.yahoo.com with NNFMP; 12 Dec 2012 10:55:20 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 348533.56547.bm@omp103.mail.cnb.yahoo.com
Received: (qmail 16962 invoked by uid 60001); 12 Dec 2012 10:55:19 -0000
Message-ID: <1355309719.81269.YahooMailClassic@web92104.mail.cnh.yahoo.com>
Date: Wed, 12 Dec 2012 18:55:19 +0800 (CST)
From: “Dr. Robert Williams” <officefilepayment@superposta.com>
Reply-To: westernunionmoneytransfer403@yahoo.fr Western Union Money Transfer
Subject: TRANSFER MTCN

FROM: Dr. Robert Williams <officefilepayment@superposta.com> REPLY-TO: westernunionmoneytransfer403@yahoo.fr RETURN-PATH: yiyu2016@yahoo.cn
ANOTHER ADDRESS GIVEN BY SCAMMER – bobwilliamson@superposta.com
RECEIVED IP: 41.223.248.96 LOCATION: Benin, Nigeria

Below is a phishing scam email / header sent by the same received IP as the scammer above. The originating (fake) IP are different but if you receive a unknown email with any IP’s shown on this post, you’re more than likely dealing with a scammer.

Return-Path: <carecustomer625@yahoo.com>
X-YahooFilteredBulk: 98.139.91.80
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-Originating-IP: [98.139.91.80]
Authentication-Results: mta1031.sbc.mail.sp1.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok)
Received: from 8.224.216.104 (EHLO fgateway15.isp.att.net) (207.115.11.45)
by mta1031.sbc.mail.sp1.yahoo.com with SMTP; Sun, 23 Sep 2012 07:26:25 -0700
Received: from nm10.bullet.mail.sp2.yahoo.com ([98.139.91.80])
by att.net (frfwmxc15) with SMTP
id <20120923141959f01008dmffe>; Sun, 23 Sep 2012 14:19:59 +0000
X-Originating-IP: [98.139.91.80]
Received: from [72.30.22.77] by nm10.bullet.mail.sp2.yahoo.com with NNFMP; 23 Sep 2012 14:19:59 -0000
Received: from [66.94.237.111] by tm11.bullet.mail.sp2.yahoo.com with NNFMP; 23 Sep 2012 14:19:59 -0000
Received: from [127.0.0.1] by omp1016.access.mail.mud.yahoo.com with NNFMP; 23 Sep 2012 14:19:59 -0000
Message-ID: <1348409998.34442.YahooMailClassic@web182201.mail.bf1.yahoo.com>
Date: Sun, 23 Sep 2012 07:19:58 -0700 (PDT)
From: Yahoo Member Services <carecustomer625@yahoo.com>
Reply-To: carecustomer625@yahoo.com
Subject: Yahoo Warning

EMAIL: Dear Subscriber,
Your E-mail account has exceeded its limit and needs to be verified, if not verified within 24 hours, 
we shall suspend your account.Click to verify your email account.
Please note: You serve the risk of losing your account permanently if it is not verified.
Thank you for your usual co-operation.
We apologize for the inconvenience

Sincerely,
Yahoo! Mail Product Management.
Copyright © 2012 Mail! Inc. (Co. Reg. No. 2344507D)All Rights
Reserved. Intellectual Property Rights Policy

Advertisements
 
Leave a comment

Posted by on 12/14/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

“Rev. Robert Williamson, ESQ.”

Inheritance (Beneficiary) SCAM – Nigerian 419 SCAMMER

Name & Email-Address: Rev Robert Williamson ESQ <> offilcefile1905@superposta.com <>
EMAIL:

Attention Beneficiary,

I am contacting you because I’ve sent you the first payment of $5,000 this morning from your winning funds total amount of $1.5Million USD, Therefore you need to contact a Western Union agent Mr. David Young, and ask him to give you the transfer payment information and MTCN.

Agent: Mr. David Young

Email:  western_union868@yahoo.com.my

Phone: +229-98644349

Please try to contact him today request him to forward the payment information to you, Remember to Indicate the registration code of EB-2520 to him when E-mailing or calling him, Also he will be sending you $5,000.00 daily as per our office discussion with him.

Do get in touch with me once you have received the transfer. Please copy this email: western_union868@yahoo.com.my, and paste before replying to him or simply call him at his number: +229 98644349

Sincerely

Rev. Robert Williamson, ESQ.

IMF MANAGING DIRECTOR

BENIN REPUBLIC

E-mail: bobwilliamson@superposta.com

HEADER:
X-Apparently-To: *deleted@yahoo.com Fri, 09 Nov 2012 07:49:55
Return-Path: <offilcefile1905@superposta.com>
X-YahooFilteredBulk: 203.188.201.13
Received-SPF: fail (domain of superposta.com does not designate 203.188.201.13 as permitted sender)
X-YMailISG: rcnBwSwWLDtCnowNnkrNAKULw..QHzxT2ZhpixLzyrc_Y1f4 GuSgYwx4Om.MEYtBZyCgd.dMQFUvGR1euerodjkOYqY3NNHHwPgB8PK1_yh6 .gzTH675jmMcVB3xvPvaNfNeo631pLBwcNxNiWmNyFcZdP2t5B.jsnZ1I2SE NY74ewVQo.7PfkdPtnosx4k46wb0PgYy5kszVhqeLPXpRxdh_wDF._iEHllg raWZbukp7K704Q2Gt2O.xVeNvFMfLvYr6sPcNkCfibWQNjj3QTzcN2CgO1QX IJY114rqp84lSd7zSssSOKLMg4gF0IURjgTkgxhGaal7lw67PR.sgCFBFEM8 z3J1k5dTDkYnTEug_4D87F.Lk63r1z5_Qlx1PSDrlysGrEdpCPd4IMW0fv9F YQ98ux7k4R5Pfc9_731ZqQc0BPZCrYCUVYHKX8CdDIfDdOzPoNxRphn3HA.B EyOUDyCm9rRQ.BDMfjvVD2q2uVAFh8_oe278nV9eY_PbfLmYhzmhnosKjp4z EAePevsok7gURt8R9mIrqc0.KCcpXVceXwsb_qKmLqSAbTABNEs.moXSG5If sTpjIM3Qc_OfgpcPJ4RIgI3zl.urhhmeR4oIgjPDR64w9CiR3Yd5QY3Y093Q vQ4ZYnr_Ib3ksPXf_n4wIkhZKcL5Fx2S0FS6tapMZZuEWHLLX2HBl6RZL1K_ Tee04H44JlKcz.0D95wazudjirQRs3AvBCs1Y8ABcCM.yLr5uPz0067M7DQ8 V4gfL..wdmAdmiYbYaMSa2G_Z3Tn3VNHz0Jv4z2Y96mnt7i1TNYYL9HoG1bW u32MAxeBit37SawU_iXcVUzltemGMH3GOMv5JkxeYsShAfgTi4ogmQYIQmLJ jURIGJOmzieD4PTwgzFod_sExj5AIQ0mP1lvhtj1M7Y93_L4UMImLVWcVqkv 6PZ2JN8GKI7n0Vy96R3KHspm3NairN12uIzav1QCxp3JZEGCTJv3_l9qYUaK Vajh82cyRNifUMvGr5DLPYihzOEIWvNOIHrDBq_NWqwNeNRM_RsRS.ep.vdo ipYBWv8_NLJdA27OL9P8gwyvYJ0TgsHqx28qZ7UL86JDkqKfO7bqxOvxpFSp ga6WIusbigDXwSpIu16jaysAZWaQVWvPqPuI7Sl8sM12mdKJrk37avp0xLz. BAU2nnNAyiCf4GB7WR5OY91UUVv0
X-Originating-IP: [203.188.201.13]
Authentication-Results: mta1148.mail.mud.yahoo.com from=superposta.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm14.bullet.mail.tp2.yahoo.com) (203.188.201.13) by mta1148.mail.mud.yahoo.com with SMTP; Fri, 09 Nov 2012 07:49:55 -0800
Received: from [203.188.200.142] by nm14.bullet.mail.tp2.yahoo.com with NNFMP; 09 Nov 2012 15:49:54 -0000
Received: from [202.165.102.47] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 09 Nov 2012 15:49:53 -0000
Received: from [127.0.0.1] by omp101.mail.cnb.yahoo.com with NNFMP; 09 Nov 2012 15:49:53 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 308684.31667.bm@omp101.mail.cnb.yahoo.com
Received: (qmail 62040 invoked by uid 60001); 9 Nov 2012 15:49:52 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1352476192; bh=ZsE+VETnWVxyc7jLuAGInq+s3y5t4fB++t5j4KcHvC8=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=jt7p6bDcRPAyWwlwcoKs5Eop7xIHOrCZEa0rUegDq/Z9tiAI28O6CvZv/oaQAElPVBL0/52lzi3qS/6pgwa+fPiI+DmIIrYNUKc4jIjvv9BJVnsz80DrONB7xtF67UX4bra4TybGlA9fSSRzuxObpVH5tk87RFmqXa/2GVpQPFk=
X-YMail-OSG: 09NNyEoVM1m5SIMx7k1BDsqwpAHj6_6lL3ZfYFy5iMMTBgO KNAe4jKDG
Received: from [41.223.248.96] by web92413.mail.cnh.yahoo.com via HTTP; Fri, 09 Nov 2012 23:49:51 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1352476191.61944.YahooMailClassic@web92413.mail.cnh.yahoo.com>
Date: Fri, 9 Nov 2012 23:49:51 +0800 (CST)
From:
“Rev. Robert Williamson, ESQ.” <offilcefile1905@superposta.com>
Reply-To: western_union868@yahoo.com.my
Subject: YOUR TRANSFER MTCN
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”-1912502694-106484456-1352476191=:61944″
Content-Length: 24483
 
Leave a comment

Posted by on 11/17/2012 in Inheritance Scam

 

Tags: , , , , , , , , , , , , , , , , ,

Lottery Scam (scammer uses multiple names and email addresses)

NIGERIAN 419 SCAMMER – ADVANCE FEE FRAUD

This particular Nigerian Scammer has multiple email accounts and names and it’s getting hard to keep up. They’re always emailing with a new email. Don’t forget to check the comment section for additional emails.

List of email-addresses used by this scammer include, but are not limited to: Ms.Carman_Lapointe71@superposta.com <> Ms.Carman_Lapoi5@guitar.ocn.ne.jp <> www_western_union.office2006@yahoo.com.ph <> www_western_unionoffice2004@yahoo.com.ph <> www_western_uniontransfer2003@yahoo.com.ph <> westernunion270@kimo.com <> westernunion10@kimo.com <> johnedward911@live.com <> JohnEdward011@gaea.ocn.ne.jp <>  western_unionoffice2004@yahoo.com.ph <>

Re: (OFFICIAL WESTERN UNION MONEY TRANSFER PAYMENT)
From: “Ms.Carman Lapointe” <ms.carman_lapointe71@superposta.com>
Message contains attachments1 File (76KB)
image.png

Dated, Monday, October 08, 2012

Once again your e-mail was received and acknowledged

You don’t need to be confused because everything has been put in good condition to ensure a safe transfer of your fund to your bank account. But we are only waiting for the payment of notarization fee of your inheritance funds, which amounts to the sum of $200 USD only. It is your responsibility as the fund owner to make the payment immediately, to enable us proceed immediately to release your first payment immediately without further delay

I look forward to your rapid respond.

Sincerely yours,
Ms.Carman Lapointe
E-mail: Ms.Carman_Lapointe71@superposta.com
Office Phone Line: +234-706-662-9280

Return-Path: ms.carman_lapointe71@superposta.com
X-YahooFilteredBulk: 209.85.216.196
Received-SPF: pass (domain of superposta.com designates 209.85.216.196 as permitted sender)
X-Originating-IP: [209.85.216.196]
Authentication-Results: mta1034.mail.gq1.yahoo.com from=superposta.com; domainkeys=neutral (no sig); from=superposta.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail-qc0-f196.google.com) (209.85.216.196) by mta1034.mail.gq1.yahoo.com
Received: by mail-qc0-f196.google.com with SMTP id c1so611079qca.11
Received: by 10.49.4.65 with SMTP id i1mr42233137qei.51.1349702339609
Received: by 10.49.58.135 with HTTP; Mon, 8 Oct 2012 06:18:59 -0700 (PDT)
X-Originating-IP: [41.71.151.43]
In-Reply-To: <1349682117.41308.YahooMailClassic@web161004.mail.bf1.yahoo.com>
References: <20121006142801.40698160476@mv-osn-hcb006.ocn.ad.jp> <1349682117.41308.YahooMailClassic@web161004.mail.bf1.yahoo.com>
Message-ID: <CAA_QsBCje36mKW7zaOCvtGnja-ZdbiHNFtHePfNBFX0-=rt3Ow@mail.gmail.com>
Subject: Re: (OFFICIAL WESTERN UNION MONEY TRANSFER PAYMENT)
From: “Ms.Carman Lapointe” <ms.carman_lapointe71@superposta.com>
Content-Type: multipart/related; boundary=047d7bdc09ee81429804cb8c1022
X-Gm-Message-State: ALoCoQmFwao37d4zFC+2fvDec7491T1vW0vcgt7ZTt2QjO9qOV0fJhB05c25P4H2B4ydU/W+54h1

(OFFICIAL WESTERN UNION MONEY TRANSFER PAYMENT)

URGENT ATTENTION: COMPENSATION PAYMENT.
To The Owner Of This E-mail, How are you today, I write to inform you that we have already sent you $5.000.00 US dollars through Western union as we have been given the mandate to transfer your full compensation payment total sum of $4.5 Million USD, via Western Union   by our President of the federal republic of Nigeria It is a distinct pleasure to write you. As you are well aware many foreigners have invested thousands of United States Dollars into Nigeria transactions in Hopeless Dreams to have none of them become a reality. Your file is one of the approved legitimate beneficiaries to receive they payment of US$4.5Million immediately
I was calling your telephone number to give you the information through phone but network is not okay throughout   that yesterday even this morning. Now, I decided to email you the MTCN and sender name so that you will pick up this $5.000.00 to enable us   send another $5.000.00 today as you know we will be sending you only $5.000.00 per day.
*Note*:Here is the information of the money we sent today to you but it will remain on hold until you make the payment of your file re-new notarization fee before we can release the $5,000 to you. To you be sure that the money is available in your name so you can track it and confirm the availability of your first payment. Click on our web-site via this trackinglinkhttps://www.westernunion.co.uk/WUCOMWEB/transferStatusAction.do?method=load
FIRST PAYMENT INFORMATION MTCN#: 8412696715 Sender’s First Name: ANTHONY Sender’s Last Name: IKWUNNE Amount:…….. $5,000.00USD
I hereby advise that you proceed immediately in making the required notarization fee payment with the below receiver’s name. To enable us release your first payment to you immediately. if you have any question, do not hesitate to contact me
Have a wonderful day. In God We Trust
Receiver’s name: Sunny Kannedy Location: Lagos Nigeria Text Question: From whom? Amount: $200: Dollars Text Answer: now
Sincerely yours, Ms.Carman Lapointe E-mail: Ms.Carman_Lapointe71@superposta.com Office Phone Line: +234-706-662-9280
Header:
Return-Path: <Ms.Carman_Lapoi5@guitar.ocn.ne.jp>
X-YahooFilteredBulk: 60.37.51.254
Received-SPF: pass (domain of guitar.ocn.ne.jp designates 60.37.51.254 as permitted sender)
X-YMailISG: egSGJnMWLDsvkvneT_mBAbZkR75QGCZzHsD.vbI8zxST44HE ioYJCfL3m.NHSRywJCXHm038FMp83IrwmCWDZLbv4vN.D_1F4CUpHCgH6FOF t1rBvEYnQFPGI7N1OWn1356TJ6mrGVtN1xeI5sEEDV.dj7lKPT6ojO7R44hE 5dyzHMPJp7vI8XFqGuXyXcJR34mFbbfse_Lb4VjPbBchXNYs2DuLbTrB0LOQ rhWz2_ZSxGEFZ5v9wfbdPVaojbEEIeJj5KvBv9a5g4VdgvkzcsJu7KPFSwS8 dvhQ3LDmRd2dtTPfUQK1RykE67hus1Ljd4BkO89gsbxbLSvgWKS9MMgmk9kV fhr3M5DcgtuWuSDtMPZY_BzDfh64CmQlPCotZQ_OS4aTaE6EUg8UYWhSZ1w9 P3lOkhhUgqw2JQoi5YfUDrf_r6ISgkgZZ7MPU3.xFQ9Uz14v8mh52gwLqG6N sMZOr3aqYudMQOGGBERkLZvaBTTE.09Bjvt4cUyvrFRdY1p2SEFtn8u0tiRO zkyRCzqstYAVb6uwg9NJzZB482_jns6z60B1GhiK5j2zx3wSM03I1kIfx2yR bSoZaL4no9LXOiDZl1G_GwM6A0GZiU6STo3r9nmV4yGxCNED.vCRn0lYwgeg 676SRJwiKcRa9ot1eULy1sq7b_amCk2ixYLuBm1l0prpVGmef2jKveRWqpLC 3_AuE3CaFxs3HalUU9ttJPLcn2I8BnuSvADNab.XY2KtWrAZFvHjtkINN_zE 3M0UtF1ygF6my3oQhiJ5lBHXNI0.7Up9vO1K2bQPMX3pCcwUph7NOKTLAywC lpcuSTNhPY7eUcyG.yIYXZKr_OfOLPBtzeDZS8bPkW3_5WdxBN15sjSkL4Ot Iug9a7D4aHT3ydxpVH4j9xZO_6g_puiVpvbXvcxg5cxu6KXmHhPc41MsocPP 8SA8u1RmgDeVnPBIjrdvHDhO_y4yGqjV5LLbi3Ced5xgmwDN2gl02Mgc_Tx6 r.DRdbeTFx6.vQ6T7QPSJihMvnAk7ddBfE0IHtTtgKSz1F.oaHSV_nvNQf4C IfToIE6Ipx0QeuRIh2fh2VQVK5BOqhhg9h7ImNcZhkS.ThAv0XL66Qm7Iwad 4ukJiBwwij6ZrwomsktIjNx7_4f7BRAYMnO_W47PgLtDEpksw25MVZraJPmw sDGMrB5jR3N60.O71eM2FuSNYPLaKEb7_Grbhf.yj02WUTMtlfMpgLjm6pFX ksnR5WMuKVK2njJoCCefkqvXkPY02QCUNsthkLpdrL223ot9y8K0W0jb55RE O9_TAQMOzIN8If_7Wi.IyLs6wm8i86YuHnY_lMbZtsmJQ9umxqouEDwk9QZ8 kYSzBiHieu.M09hNP11Zk1G1JJt8Fqbgml6gupg8T_vtyjm4vEKKTTPcYvQo Qf1nO7x87w–
X-Originating-IP: [60.37.51.254]
Authentication-Results: mta1376.mail.gq1.yahoo.com from=guitar.ocn.ne.jp; domainkeys=neutral (no sig); from=guitar.ocn.ne.jp; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mv-osn-hcb006.ocn.ad.jp) (60.37.51.254) by mta1376.mail.gq1.yahoo.com with SMTP; Sat, 06 Oct 2012 07:29:05 -0700
Received: from vcjoy.ocn.ne.jp (mv-osn-hcb006 [60.37.51.254]) by mv-osn-hcb006.ocn.ad.jp (Postfix) with ESMTP id 40698160476; Sat, 6 Oct 2012 23:28:01 +0900 (JST)
Received: from User (ip-95-223-215-33.unitymediagroup.de [95.223.215.33]) by vcjoy.ocn.ne.jp (Postfix) with ESMTP; Sat, 6 Oct 2012 23:28:00 +0900 (JST)
Reply-To: <Ms.Carman_Lapointe71@superposta.com>
From:
“Ms.Carman Lapointe”<Ms.Carman_Lapoi5@guitar.ocn.ne.jp>
Subject: (OFFICIAL WESTERN UNION MONEY TRANSFER PAYMENT)
Date: Sat, 6 Oct 2012 15:28:55 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset=”Windows-1251″
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20121006142801.40698160476@mv-osn-hcb006.ocn.ad.jp>
To: undisclosed-recipients:;
Content-Length: 2132

BELOW ARE MORE RESPONSES AND HEADERS FROM CARMAN LAPOINTE

Dated, Monday, October 15, 2012

Dear: Porky Pig, Good day to you and how are you doing today.

What is going on Mr.Porky Pig, I have not heard from you since my last email which I do resend to you but haven’t got reply from you yet. What is happening why haven’t I heard from you is every thing alright? Because the board of director is disturbing on your behalf, so my dear kindly reply to us for immediate action. To enable us proceed immediately to release your first payment immediately without further delay

I look forward to your rapid response

Sincerely yours,
Ms.Carman Lapointe
E-mail: Ms.Carman_Lapointe71@superposta.com
Office Phone Line: +234-706-662-9280

___________________________________________________

What is happening?

Once again my dear brother, this is to reminding you that the protocol officer is waiting for your notarization fee to enable them proceed immediately to release your first payment immediately without further delay

Please get back to me with the payment information so that we can conclude this matter finally because I am very much concern about your predicament and I really want you to receive your first payment before UN cancel your fund transfer

Your urgent response is highly imperative.

Sincerely yours,
Ms.Carman Lapointe
E-mail: Ms.Carman_Lapointe71@superposta.com
Office Phone Line: +234-706-662-9280

HEADER:

Return-Path: <ms.carman_lapointe71@superposta.com>
X-YahooFilteredBulk: 209.85.216.179
Received-SPF: pass (domain of superposta.com designates 209.85.216.179 as permitted sender)
X-YMailISG: qRhI_HQWLDsW1ow4Y37fh6QgpgxO.ST3PAVdtZvE20VP.cn6 m4ZTROH4bZQgdWuYh7d3FwUZI21Pwu1XjJMPH462MN8E2Cs8VXplSyj0dJrv Pl.gt2y59vV4cFQ4vm3Rqu6DcJvsDgI239r3j9lbEA0o71zbcUPZOD2yuKMZ 2wjinJWAxby85vdydZvIx6z82OkT5QL_jp6g9S1Rch.sc5YAZ5VuGMsWcT9v VC7ISzx0DVzLfNy7o9b6N73ws5Y1d529ChJscw_kdgcr_9VVNaLNcRIPdv8n j650xOUhCCb23n549Ix_.FUWLHttMMWJMMGFc24FThRr6ZhulYs8tRTRVNDC BFjCPC.AV2E20NntPc171p9FyPUZ.Njm2wwZoLQiFdYpB0F0CJFecs9QZBlh lpd5Qo1T.ZQb.SwMpfvcGwIBP4usQ_fm3MJlgFN9TH8Hpnnf4JCo7Iukkg7h QNOlGa4cCig9IwOK03U6b.c_FeJp1nGjxa9xJe3d_9MSRxOH_HVnuroQ222f 7NBZSpjZo2AwdNNvo4XniojF4CQ2ALYAmdkS.E4PWFXoaz3cT4c0biIR_kC4 9kAkGdg167mMfo8VmadaN3eyI.1ryAkVpZNqTCLtjtoOfED_Vp6g.X99Ak.g 01reOrqThoVwsylQgZHaCgG9SW2jQRfSP5lyWe8lqx9QylkIzNxZdcnxgNAc xEZBY6IgK9BS65oeYfCt.VF2IQh2lKD4EZ7Ce40MRWNSK8KAvssnuM6xqMEF ecCaW1iLjVOvtvad4KW2vXoWdYasSCt0JEgrPzEBvi5hSO3KNtGqf0DeQhNQ Dq1dvyg0sd2Hfo7_9ZspUwQg4wTC5hL.QLR3LKDFFxdWJ.d8izDJQZVD8rcW 5L83ord5CHdd111kylioeMWbcR9HtSFTmJMuaZ1_SlOO75a6gys3wBOVjTxF s3LldpfXubF8Pcje3tEHNAWrKKjwWVh_0.a_Td9qa_H85J8l3osV91km1I7j sVv03MAIwyCjag9sp.F2sLnQDnNYGrgngoq0AIJoCqSfrUzcz7SuqXw5dkLY kv8IBDZ1ohTSAal.hCMDmsqXfCsaDFF.LAyR7qUKaeUbC8wsUBBEaqQobiYY 2yZhBwZ8tOpDN0oemwY4O6AKDDW9KOc5.uqgCFOJ.RcstfPWAAzsXJTWWUUi sAufb6IfQa2zh2XTx9aClfUbzwTW6obXCE2ItXeo.R5wjt4cU8SdnIENjwgi f84WTtsaUZ2NB0OecF888FqWPp7B.utUDE1g4I83_2H0epnP9VWimpttMiPL PxI591gcrUClL90wmj51EggpOqO9C6Xvy0sIY0icNQfYHFTpytBO6hbJIdKa te6jHIddOYOtqipaoPSuDeTVXzYkRNt3WR4htBXiFqr0n1ZZdud51d34O9.Q xufIFbhamDtSRzK4nucwqGb55oYWFsk6Rk8-
X-Originating-IP: [209.85.216.179]
Authentication-Results: mta1018.mail.gq1.yahoo.com from=superposta.com; domainkeys=neutral (no sig); from=superposta.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail-qc0-f179.google.com) (209.85.216.179) by mta1018.mail.gq1.yahoo.com with SMTP; Mon, 15 Oct 2012 01:30:29 -0700
Received: by mail-qc0-f179.google.com with SMTP id b14so4298850qcs.24 for ; Mon, 15 Oct 2012 01:30:28 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:x-originating-ip:in-reply-to:references:date :message-id:subject:from:to:content-type:x-gm-message-state; bh=gixTwmfumZO+K1eiuFFYqo26ng71ozlVHb67tns+Pso=; b=dVNpx97gOdq8D7V5m1uvmuINhJM6fq7s6GrgYbPRNP5DYgrTNv+BXHFTdwQGxMgzvX 91yy2Bultewbi0laeutJrzMHFicAzpa8oaEzX6QVVvwvhu+JJZoOzu1myzlb/X9jEsVr qJ7ezSvcKGVyv8GlR12tQYU2PB8Xygy5NDbZLclrOtgTdUC2OzQfk7NXOJuzxruuQzgM urcK4PjNLzj4sPKE8Kn4vAfNKL8c9zpvB9MsaeByUwpeWcEobxsD8IsKxJttxbT/wsjc C03Eererxo/7RvNl60srPjvkHm6EUDjHIghm88RTJCL27y4EBfkLDH9Thl9ZaZzOuwxi leZw==
MIME-Version: 1.0
Received: by 10.49.104.65 with SMTP id gc1mr26008389qeb.22.1350289828524; Mon, 15 Oct 2012 01:30:28 -0700 (PDT)
Received: by 10.49.58.135 with HTTP; Mon, 15 Oct 2012 01:30:28 -0700 (PDT)
X-Originating-IP: [41.138.172.112]
In-Reply-To: <CAA_QsBCJWniqAa7_M2sO4nzoZzaAxvnmMaSNhveL3g5OiZUmwg@mail.gmail.com>
References: <20121006142801.40698160476@mv-osn-hcb006.ocn.ad.jp> <1349775410.74689.YahooMailClassic@web161006.mail.bf1.yahoo.com> <CAA_QsBDd47O7fmhOGbZZzws3fc5ABqW7qdNaUMCSA_dGZ2LCfQ@mail.gmail.com> <CAA_QsBCJWniqAa7_M2sO4nzoZzaAxvnmMaSNhveL3g5OiZUmwg@mail.gmail.com>
Date: Mon, 15 Oct 2012 09:30:28 +0100
Message-ID: <CAA_QsBCT43SB63CQiokHY-OwKR=LbkixK81FO07E9foLo4vTCQ@mail.gmail.com>
Subject: Re: (OFFICIAL WESTERN UNION MONEY TRANSFER PAYMENT)
From: “Ms.Carman Lapointe” <ms.carman_lapointe71@superposta.com>

+2347066629280

41.138.172.112 – 10.49.58.135 – 209.85.216.179

ms.carman_lapointe71@superposta.com – Note: One of the email’s looks almost idenical except for the capital ‘i’ and lower-case ‘L’ to try and fool potential victims.

Scammer’s NAME: Ms Carman Lapointe – James Williams – Sunny Kennedy – Anthony IKWUNNE – Chukwudi Ebogha – Emmanuel chukwuemeka – John Edward – Jerry Obimka – Rev. Dr. Robert Williamson (ESQ) – Ebogha U. Collins –

IP: 41.85.161.126 – Location: Benin (South Africa a.k.a Nigeria)

41.138.172.112 – 10.49.58.135 – 209.85.216.179

Received form: 106.10.151.146 – The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server. Below we’ve reported some other data associated with this IP. This interrelated data helps map spammers’ networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment at ‘Project Honey Pot’ by clicking the link provided: 106.10.151.146  ↔ Clicking this link with also show you email’s and IP’s associated with this IP. Any association is that of a scammer, spammer, hacker, phishing, etc.

 
2 Comments

Posted by on 10/09/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: