RSS

Tag Archives: Scams

“Western Union Money Transfer”

warning_gif

LOTTERY SCAM <> LOTERIA ESTAFA – FRAUDE <> FRAUD

This scammer emailed me multiple times in both Spanish and English. I’ve added header details under each of the emails because the scammer is using different email and IP addresses.

1ST EMAIL:

You have been awarded with the sum of $1,500,000.00 USD by our office, This
award has been selected through the Internet, where your e-mail address was
indicated and notified. Please provide Mr Luke Moore via email
(wuclaimsdpt1@yahoo.com.hk) with your name,address,occupation and telephone
number so that your fund will be remitted to you through Western Union
Transfer.

You have been awarded with the sum of $1,500,000.00 USD by our office, This award has been selected through the Internet, where your e-mail address was indicated and notified. Please provide Mr Luke Moore via email (wuclaimsdpt1@yahoo.com.hk) with your name,address,occupation and telephone number so that your fund will be remitted to you through Western Union Transfer.

HEADER DETAILS:

X-Originating-IP: [167.157.1.11]
Authentication-Results: mta1442.mail.mud.yahoo.com from=umss.edu.bo; domainkeys=neutral (no sig); from=umss.edu.bo; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO apollo.umss.edu.bo) (167.157.1.11) by mta1442.mail.mud.yahoo.com with SMTP; Fri, 25 Jan 2013 06:39:48 -0800
Received: from apollo.umss.edu.bo (apollo.umss.edu.bo [167.157.1.11]) by apollo.umss.edu.bo (8.14.4/8.14.4) with SMTP id r0PESKKW017348; Fri, 25 Jan 2013 10:28:20 -0400 (BOT)
X-WebMail-UserID: proyectos-dric
Date: Fri, 25 Jan 2013 10:25:49 -0400
Sender: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
From: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
To: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
Subject: wuclaimsdpt1@yahoo.com.hk
Message-ID: <510072FF@mail.umss.edu.bo>

Western Union Money Transfer <> proyectos-dric@umss.edu.bo <> wuclaimsdpt1@yahoo.com.hk

SECOND EMAIL:

He was awarded the sum of $ 1,500,000.00 USD by our office, this award has
been selected through the internet, where your e-mail indicated and
notified. Please provide Mr. Luke Moore by email (wuclaimsdpt@live.com)
with your name, address, occupation and telephone for your fund will be
remitted to you through Western Union transfer.

HEADER DETAILS:

Return-Path: <info@winner.net>
X-YahooFilteredBulk: 195.46.105.253
Received-SPF: none (domain of winner.net does not designate permitted sender hosts)
X-YMailISG: R_t51eQWLDuJVWZkkjhC1IolQUy.xH2MwsjoGKXJxid0mKZ. Hdo2o8cSuvZ5OCagl9cp_CwY45CxZFWv_uyKmObpkM06qq2DQSt.fFtbFfPQ _.Qd.gjx4BIhOh97OguWDg5QndWYdz_G0Ao9Ndbs9sEFvc4ur4KWsh4F4QG8 NnnV6B1GRZSW.OAwLCkHpItLfSY1mBZgsnkX1Yxgy78TFRIJOIVS3FZ28c_7 l8UXFxHvzhTI7VbrQyUpG.TiAYVEQWRAwa4AT0oKI1lyEPFBwgUQnpTRN4gT szVqvqZQqbDTelTYYhVK3g9sS2W2od357uE_4QqTs9kC0Frfz6QbZG1fWT7w tPYOU6fotQvcDLegAbMNWxWgN6BZVcyum8pj6CWIr1ibVp9o1WILfCLwldLu WuQWd_QKqnj9xIZ6SsAH0SsBz_JE6XmHeGup._esamv2Ojf3HyA2Vjxg1VhR 5MSaBaK9CAtDdbN2wc0C63nqzU1FfU.jHL6N9llymzwDZH_YzTCuruYvOL4I n4igN3i5P66B7Zafsca2ad9jqmxPyNoh518tb51o0v9k2zA8UCm8VwW1n7C3 o3K0OyEWNb2iyKjzj7nSizw2YfTl0fVfH.XDX8iNcFrb7YoGzxsfF5Im77Ik 2UEbLD9WKY3.w6men2p1no3mPyKWOuFvDEILc8piTKmnq42sRu4PxFDkC7dO gnzDwY3o96Vueb5hyDLbDCTlSqS1VHCjJIJJR4hUj5q2HilL8_L.BTJXFRBO Ykby1F_U2AFz6t1kSnn3uE_UxhfomEkfB35MWex5pldPXAbqhs5WQg_Vwxl5 I3DOAmWBAGkoLnxRgw6oheJmY12ydZbi5t.XK8xyA0f4h.spyg.MS6nl20IN y6lha2uqdO_f9ZuRB6JsRLScUeCeY30Np4R96aKoiRN1JyT4OtNQgL3sZFi7 HKDYx.0FA1PEjLpd.McostxXoAnmKUrCk6NXndWPHwMIB0v2ssubKzYpR5yI eWjHUjyuTPuwauW3rmWgh0BU523lMX4wduhrc184BjfUNRtQ3fRmg5gprN7X g7CfV4cjOH3AqsENgOV5fsNg4YQVJFMeAhcs2rYQ7FUdRzVeWJ.e74dGJns7 kGPRvnauEHIGNTpa_JubimuCK5dishZW1XGqoBTr6FFBsSZgtQyigu1acL73 m4vLNBUyLGw10UHQzTKMb5Fam4JGin7c3skoaveo7PePYZ0gQvImli4sjYRv QElEocGB2cL9Iwb7FUKLZ3wG4gaWnVc9yXwcT_bhAGjHXtJpMzDulcc4hEof LYvxC4aRSGzPkN0e1JqCTSQiP53NC3_Uk7QEFTDnoIcdfhmOnQ8QLDZSo0JP dczuIWB.X0T93IGasTVGfSk4EdTSNCe6ZB6GQOE498tFXRq2DdNls4LOJNYh ._aNa5FiwS6sg_hazb74E0TYOCya7GjG44VA5ec5hGHxonEe
X-Originating-IP: [195.46.105.253]
Authentication-Results: mta1328.mail.gq1.yahoo.com from=winner.net; domainkeys=neutral (no sig); from=winner.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.irtel.ru) (195.46.105.253) by mta1328.mail.gq1.yahoo.com with SMTP; Fri, 25 Jan 2013 20:13:34 -0800
Received: by mail.irtel.ru (ESMTP IRTEL MAIL SERVICE, from userid 8) id D9F8721A671D; Thu, 24 Jan 2013 19:27:23 +0900 (IRKT)
Received: from mail.irmail.ru (localhost [127.0.0.1]) by mail.irtel.ru (ESMTP IRTEL MAIL SERVICE) with ESMTP id B67BF21A6621; Thu, 24 Jan 2013 19:24:01 +0900 (IRKT)
Received: from 41.203.67.53 (SquirrelMail authenticated user dezirs) by mail.irmail.ru with HTTP; Thu, 24 Jan 2013 19:24:02 +0900
Message-ID: <2be28957860b2ac960195001522a3e82.squirrel@mail.irmail.ru>
Date: Thu, 24 Jan 2013 19:24:02 +0900
Subject: INFO
From: “Western Union transfer” <info@winner.net>
Reply-To: wuclaimsdpt@live.com

Western Union transfer info@winner.net <> wuclaimsdpt@live.com RECEIVED_IP: 41.203.67.53 IP_USED: 195.46.105.253

THIRD EMAIL: Ha sido galardonado con la suma de $ 1,500,000.00 USD por nuestra oficina,este
premio ha sido seleccionado a través de Internet, donde su dirección de
e-mail se indica y notificados. Sírvanse proporcionar Sr. Luke Moore por
correo electrónico (wuclaimsdpt@yahoo.com.hk) con su nombre,
dirección,ocupación y teléfono para que su fondo será remitido a usted a
través de Western Union de transferencia.

Ha sido galardonado con la suma de $ 1,500,000.00 USD por nuestra oficina,este premio ha sido seleccionado a través de Internet, donde su dirección de e-mail se indica y notificados. Sírvanse proporcionar Sr. Luke Moore por correo electrónico (wuclaimsdpt@yahoo.com.hk) con su nombre, dirección,ocupación y teléfono para que su fondo será remitido a usted a través de Western Union de transferencia.

ENCABEZAMIETO DETALLES (HEADER DETAILS)

Return-Path: <proyectos-dric@umss.edu.bo>
X-YahooFilteredBulk: 167.157.1.11
Received-SPF: none (domain of umss.edu.bo does not designate permitted sender hosts)
X-YMailISG: qwadyWkWLDvNrzIVclhcoXgjIkJEVAjyRHKqcu27IJURLzI2 mxgPKyMc7KIfyxJ35W31YXKek6VBrI5nu0TwjqmEvYzIysQuIDYL6b463idi NwvFLL6j0ObrUHmxeci5n6Uq5V0jWQ_pFbRE_KXjnmWmAXaOe7NyhX9by0c2 GTsru8SMQYq6PfkSkqFTPTQH9zqvQi_RvTldUqvoSIJMiP_.wjRsemqClM6d dMvc3toN8M4AV2k3jpmO3PWC0KWE_SwvUljmPZI09Ecd9fdxwSp0lYjYxfYR wufOXhD1SCXbLSUQqnQK1UCEhHY_B2hfCInppKwV_e90B.xlwMeS3_qZ_CYl h9hJYCXDKCKoB4LqBXKH6aHhZsjpsGUEYg_yYmYoc2W58li9w.oYwcT44a2O kJ7YpgNcgBKho1HaLLxYtboD5lxLfaxyvg7ttBBIkLEeLpAuyGYZtxgdzP8N ch1AjMME0bbwEEzFo0OjEQmLt_U1IbXDZL1qre3ix4XDUlbnvr7k8575vqtl Hz9WAjcu25dxSWj8osf1b.XXobGHpDA.jyQeYTLc20h6rQlrVrGkHbttrJWB 1IZeGxb66ToG.SdAcaZu4DPGNq2rKSQyPP5wKsxl8A67zC8JsVZk3LmQ48RI 1rXvSn8OK7C_D0tSK8EtxbKbYpciUUlrFnPoSWg.ZaB6W.ul_fDrlQ340PoM 3MCJYH0IzDdhTmmGmeO_bfgPYsJWxDzvzqFj9iqTtzHUmgifQn.eCLodGj5C cLWf_dkvjD50PIcpI2yd.LtPuOvOr_Abow4m6pB3P4GZRCWtPRGSR__RSRiI flmJh2HzHzPJP0ag.iwKF_Y1UobKZcI6qZsVJEjN8Bkwd68npiIhbZHqnsW8 ZppMbe40LLDYn29vm9wxGOpysmbIVJQgDXXD6_VMRPIj8e_hv_RDnipBo5oU 4g.jF98os8khKzdGhBWpCmXs4zEYlYfgIHPyS6Lj4vomhQDzzwobRcJF2yNx w97sjPF.7xlXMviNDJkPgb0lH4lroP.arYd1H9NJCy4nNDax19WAkSVelrv4 HPOuR5bchIvXqxsEr5Ea3ZrUiGaV77q48YJEgyOZEfKEqKZqpfIgGp_5Yshb YN8miV6Edg8iTiaFNaYGynMp_8zn5c5VZC3P2.iyvttLU_7qBLVO5mpcxInh qgB1JEc4v567DaumS2wXCxQDLMj399YX5luCMhsTRe_KESkhv6ZCnEol5ilX g_buhOQVqCUrc4U1xhEuQPrWqT8OigBXagNQiLph7hd0vj85jx5sRaCVZRcx UgGXwSaabKwvnWtI_RK6qhkiLs74mysp3K_B5ysMhT_nISeoFlBNassgFQPv _PTjG0U2TXJB9nPgbrl5RqTt9wpuHfXKdHyOZUFx4ubNK88GV4AyDylzufIy cIXD3snETgJmqHrrZO454o_baXnnLhmPxxKMiDsCfEJihkvHWi96hoXzRuaY vKNu5.fdFsO9SzYBaMnxD9vIKKEBzeqLgXghMPKn05eIKji69v0EHF9MJC.P atUbTKxFuAuOOxlbihKXiXewD27ub9QsNA–
X-Originating-IP: [167.157.1.11]
Authentication-Results: mta1097.mail.ne1.yahoo.com from=umss.edu.bo; domainkeys=neutral (no sig); from=umss.edu.bo; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO apollo.umss.edu.bo) (167.157.1.11) by mta1097.mail.ne1.yahoo.com with SMTP; Fri, 25 Jan 2013 12:00:50 +0000
Received: from apollo.umss.edu.bo (apollo.umss.edu.bo [167.157.1.11]) by apollo.umss.edu.bo (8.14.4/8.14.4) with SMTP id r0PBjOUY004273; Fri, 25 Jan 2013 07:45:24 -0400 (BOT)
X-WebMail-UserID: proyectos-dric
Date: Fri, 25 Jan 2013 07:42:53 -0400
Sender: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
From: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
Subject: wuclaimsdpt@yahoo.com.hk
Message-ID: <51004AAD@mail.umss.edu.bo>

Western Union Money Transfer proyectos-dric@umss.edu.bo <> wuclaimsdpt@yahoo.com.hk RETURN-ADDRESS: proyectos-dric@umss.edu.bo RECEIVED_IP: 167.157.1.11

X-Originating-IP: [167.157.1.11]
Received: from 127.0.0.1 (EHLO apollo.umss.edu.bo) (167.157.1.11) by mta1199.mail.bf1.yahoo.com with SMTP; Fri, 25 Jan 2013 04:05:35 -0800
Received: from apollo.umss.edu.bo (apollo.umss.edu.bo [167.157.1.11]) by apollo.umss.edu.bo (8.14.4/8.14.4) with SMTP id r0PBfNDa003753; Fri, 25 Jan 2013 07:41:23 -0400 (BOT)
X-WebMail-UserID: proyectos-dric
Sender: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
From: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
Subject: wuclaimsdpt@yahoo.com.hk
Message-ID: <510049A7@mail.umss.edu.bo>

ANOTHER EMAIL:

Ha sido galardonado con la suma de $ 1,500,000.00 USD por nuestra oficina,
este premio ha sido seleccionado a través de Internet, donde su dirección de
e-mail se indica y notificados. Sírvanse proporcionar Sr. Luke Moore por
correo electrónico (wuclaimsdpt@yahoo.com.hk) con su nombre, dirección,
ocupación y teléfono para que su fondo será remitido a usted a través de
Western Union de transferencia.

Ha sido galardonado con la suma de $ 1,500,000.00 USD por nuestra oficina, este premio ha sido seleccionado a través de Internet, donde su dirección de e-mail se indica y notificados. Sírvanse proporcionar Sr. Luke Moore por correo electrónico (wuclaimsdpt@yahoo.com.hk) con su nombre, dirección, ocupación y teléfono para que su fondo será remitido a usted a través de Western Union de transferencia.

HEADER DETAILS:

Return-Path: <proyectos-dric@umss.edu.bo>
X-Originating-IP: [167.157.1.11]
Authentication-Results: mta1221.mail.ac4.yahoo.com from=umss.edu.bo; domainkeys=neutral (no sig); from=umss.edu.bo; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO apollo.umss.edu.bo) (167.157.1.11) by mta1221.mail.ac4.yahoo.com with SMTP; Tue, 29 Jan 2013 02:19:20 -0800
Received: from apollo.umss.edu.bo (apollo.umss.edu.bo [167.157.1.11]) by apollo.umss.edu.bo (8.14.4/8.14.4) with SMTP id r0TA5Hpo010600; Tue, 29 Jan 2013 06:05:17 -0400 (BOT)
X-WebMail-UserID: proyectos-dric
Sender: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
From: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
Western Union Money Transfer proyectos-dric@umss.edu.bo
Subject: wuclaimsdpt@yahoo.com.hk
Message-ID: <510630B4@mail.umss.edu.bo>
X-Mailer: InterChange (Hydra) SMTP v3.61.01

wuclaimsdpt@yahoo.com.hk <> wuclaimsdpt1@yahoo.com.hk <> webwebwebxx01@att.net <> 51004AAD@mail.umss.edu.bo <>

Click here for a list of other emails sent to me personally by this same scammer

Advertisements
 
Leave a comment

Posted by on 01/29/2013 in Lottery Scam

 

Tags: , , , , , , , , , , ,

“Dr.Pere Hart”

WARNING: NIGERIAN SCAMMER – LOTTERY SCAM – ADVANCE FEE FRAUD

This Nigerian scammer has sent multiple emails which have all ended in my spam filter. I’ve posted many on Scammer419 if you would like to view please click: Pere Hart Lottery Scam

SUBJECT: Open The Attached File From Dr.Pere Hart Deputy Governor CBN .

EMAIL: An attached file that said Central Bank of Nigeria txt 
NOTE: Pere Hart has sent me numerous spam with alot of the same scams but also alot of different scams. Each email is ALWAYS under different email addresses and IP addressess.

HEADER:

Return-Path: <dr.perehartoffice@gmail.com>
X-YahooFilteredBulk: 77.238.189.207
Received-SPF: neutral (77.238.189.207 is neither permitted nor denied by domain of gmail.com)
X-YMailISG: aFvgY08WLDsdt5GEWB08iqN25WjppamFxrHT0t6_0N2fkOBF FzidCIQIlbcPvcyAoh0AWBdtiRPiNMrcplz6CR1xvf0tawY7M_z3kfTPpt_8 Rnz7K3MFuq2x1513KdvJCE7VrrVu4jzXzkJEnSBPbEcRVQrjsskSQzuk4xpa 3Tqr4rGJDM9H03XoyCBuOPFUHEhTc8aaRckhUnlUQjtFCLZ2qkuU34Whp0_w tDbnpSmCf8ildUEOOoqomaJSQMyaewKE2dQIHrxtOQDSj7OOlbyZ3f2jWzyj z3EqhmRPl6uNgLfQ41waAc_9SNR0cRUiul06bobLUz2z4.ikD7GF0wR4vk3M aIY96_Ff0MOJPTdBQiyWQe.j8aVPW1kIABfUw9lqrr7B4qLG66QuDM8tOk0c WBWFD.TGelcRBQaKhvrZW5Xlo_0sGSJBWID7WsM3GKjSviKtuuuC7.FJEp4y TH1qObGdqeBqMki8m48h4Ab_Q_kzvnR4NaMK_QEQktrZCu0Z9nOz3qdxu8rr HTHza7FmLmbawWaOUpHGSb18aGC71mXZLHzhmVjl3nYUMCK99mi4P.NgPYkB rgNek.fUdQdBdNiLkc62oRfadQdtmaoi2tZG9ERIZnpTCQIYai71_JQSztz5 KkOUBfhYnjxrdKg.Pw.m8i652qSF2lAjAueIlsqboml2Mi4APzEeosB_Y5eZ oZNZppZ7njL5Y2CtfnNj7bC3WlEq9wOXZaC1PBAtqpTMdfkGpHieE.X_MC5y 0g9ObiHaxveGvb1WMGs6zkv3PburNhdxxg7fGXHu5DMWhVwv1ymrreIFU_qz HOkqvtQGNAX5vE1F49lARyzJoc8NXgk7i1CQzjfabioalciPRsLBF3fzFGUE DsaNqXkuw7RgahBRUqMHducqbGKl2WLdvr9nJGe8ZaxetJaBLtAgK0pGZwMS 3Bhb14Uo8a_q3YYdz_cIonE5F.zTbYV6hoE5kC4IYa6h0umQJ_SrkUg.YTxw ss94Tb6hXsFQB05hSugL6uelLhMsaalKka0rN5syvNMxuv_fwsZ1W0ebqz0Q kZcCZ.nHt4O4A0_coPlS0RAB3TMB_dTwETt4qDuXvbxGwa6JnUpw1Ujm3FtX mQk5M68mDH4ol4L_zxTM0PCe2o_4mrGb6yvZd4.meO4EscwQDbQR.ddCOan7 cSrYWOW36HFfEEyzKKmOSlZYHs5FKx0DpQ–
X-Originating-IP: [77.238.189.207]
Authentication-Results: mta1308.mail.bf1.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nm5-vm0.bullet.mail.ird.yahoo.com) (77.238.189.207) by mta1308.mail.bf1.yahoo.com with SMTP; Wed, 17 Oct 2012 09:51:58 -0700
Received: from [77.238.189.230] by nm5.bullet.mail.ird.yahoo.com with NNFMP; 17 Oct 2012 16:51:55 -0000
Received: from [217.146.188.160] by tm11.bullet.mail.ird.yahoo.com with NNFMP; 17 Oct 2012 16:51:55 -0000
Received: from [127.0.0.1] by smtp128.mail.ird.yahoo.com with NNFMP; 17 Oct 2012 16:51:55 -0000
X-Yahoo-Newman-Id: 51876.17474.bm@smtp128.mail.ird.yahoo.com
Message-ID: <51876.17474.bm@smtp128.mail.ird.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: qwmBW6kVM1nms64QgbWA5bp2sqd6.mO.E2LD93nho6QZV5b 7PkJoQhPYQ9IzelN_ePvcEmyy2ky0yYMt4XNOXvDOv6kfTmDyp7xzMxgk63u 15wu8pSGklKRYSQfsoFfSII_hGfIW2lxSkdXqOXoNT9LRd8p.ZorUY4b4rlO gPnLLwlUP5DsHwaSJbgHk8EnOy9QtzLibG0iwdnB7.wbq0i2FRouCYeG18F6 QIG.NVESEK5UImRV7LeUJEuFPR0wrLK061AA0WiUI_8FcH4fpawrYlbROxPy .10YEtwJdEP_47_eeFa7sgYhCTZP3iMVandZisYDOWPev5H8lSzUO1uyCAj3 gBZnS_LyNy8cJMPuMqXtPQ3A_OoW13nHW9NW5_rNY99sC4.qyVnr.tkc4KXd zKlpU3yY42WL8Go9pbOvvhifnx5zJP9IVbdZ6lsh2QlSWZgHRrI7M1BqczRF CyHbYtvlaZiIuUuab2kcB9_odigpUPutpAT1UNgE-
X-Yahoo-SMTP: 3PKY2KeswBCOaex1k5NL_UpUxzw.w_JM.rvihsImDOhymg–
Received: from User (dr.perehartoffice@125.88.125.201 with login) by smtp128.mail.ird.yahoo.com with SMTP; 17 Oct 2012 09:51:54 -0700 PDT
Reply-To: <dr.perehart@yahoo.com.ph>
From: “Dr.Pere Hart”<dr.perehartoffice@gmail.com> Add sender to Contacts
Subject: Open The Attached File From Dr.Pere Hart Deputy Governor CBN.
Date: Wed, 17 Oct 2012 17:51:40 +0100

FROM: Dr Pere Hart dr.perehartoffice@gmail.com REPLY-TO: <dr.perehart@yahoo.com.ph> RETURN-PATH: <drperehartoffice@gmail.com>

RECEIVED-IP: 125.88.125.201 ORIGINATING-IP: 77.238.189.207

 

Tags: , , , , , , , , , , , , , , , , , , , , , , ,

“Barrister Mendy Samba”

NIGERIAN SCAMMER – 419 SCAM – TRANSFERRING FUNDS

Mendy Samba pretends to be Aminata Bangali as well as Western Union Money Transfer and Fred Williams – for more information click here or look at the end of this post, below the header info!

Updated email brelow (received 01/11/13) from Mendy Samba under the name/address of “Barrister Mendy Samba” mendychambers@mendychambers.com AND mendychambers@gmail.com AND mendychambers@gmail.com

scams_exposed_scammer419

SUBJECT: Money Transfer From Spain

EMAIL: ATTENTION:

My name is Barrister Mendy Samba and I am contacting you as requested by Miss Aminata Bangali, a refugee in Ghana. I work as an immigration lawyer/welfare officer attached to the refugee camp where Aminata Bangali is currently registered as a refugee.

Following Aminata’s decision to transfer her late father’s fund deposited in a Security Company in Spain to you, she consulted me this afternoon to give her the necessary legal advice and support that will be guide her to securely and legally have the fund transferred to you.

Please, do confirm your knowledge about Aminata’s proposal and I will give you more details.

Sincerely, Advocate Mendy Samba( Attorney At Law )

HEADER:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) YW1iYSBhbmQgSSBhbSBjb250YWN0aW5nIHlvdSBhcyByZXF1ZXN0ZWQgYnkg TWlzcyBBbWluYXRhIEJhbmdhbGksIGEgcmVmdWdlZSBpbiBHaGFuYS4gSSB3 b3JrIGFzIGFuIGltbWlncmF0aW9uIGxhd3llci93ZWxmYXJlIG9mZmljZXIg YXR0YWNoZWQgdG8gdGhlIHJlZnVnZWUgY2FtcCB3aGVyZSBBbWluYXRhIEJh bmdhbGkgaXMgY3VycmVudGx5IHJlZ2lzdGVyZWQgYXMgYSByZQEwAQEBAQ–
X-YMailISG: 4_AQ7A0WLDsrdoRW0mzNu2SSLdatwMX5iS_EhDNFGO0Dbu.0 ZJPjmRCDFk3Bxoppk6w6x2d3WKjDXMzwfe8IqxvbBPPDr31JGNwkUlYzEFse LzFtvCX9WEYMIIglV7ug0FGVvWB6G1RnZe3JWarmQsNFn7FR3J1hYpoCkNtb NzxahunKglbrQA3.4DYQpbILeEzBia9jxUrwloVD0KdvoUzHDJNQ273p3yBB _aowcphJVZ6yZs2V1HPyhaInRIizut7qjyDjGsAysFY4KmWa8FvU7IatcSbC GD4j5eZn58R61aaUCwGNj9n2ZONKmUYY6nl7.pX_A874SK3EjAlGlTfsixkl O15RmczEOcXCkSEUdES8U5hTB3hBfPmkNOj7zeOhpqwM2p5EDGlPiPZ6MLqW VeJ7xQZTSAbSgHpX1X5YeFsYJklh_365cld7bEc3wmL7FHUnHjVI.FUdnZFi K9wMkAUG6_7nqaFrNz6SqXZOM8zjpuuLwM7gFOjZMmRzxoWGjF.exUNZLAic xQgalRKaIEO2PavYo2VTPKuFRj7RflCSMafMWoieRpRsaq0X7bQj3tX9lgXO w0HbHxuJuJDwHAwpwFNSiWmASeL3OMy4DvgYXWXw63dTEed3NNzvL3mw_bCN eMjWhF_HwStHsSSi0KD30u7qESl9rYica9FkndjwBsLDcDRh6YK4HYjQ4wFh uoq193JFJaz.jlV9YIrFAFktvrrNjaGRsiqQHm3viuhMC2mnU2t2pa6DWSba _DooJ9PHo4DXDg0DNBEd1tI8AVye5KHy2NynYrLYYTD92ukjEo3Rgom00RTc DHMPDHXoZwIAcJqiGrJWLnkwzwi0X5H98W2b2gJbRqSgAbGPsDmPgnMWI4lr rTUKVca36wz36odeYqKLyu2vpsQqQL5C3R6SbWgiXGyrBTt.MgJ8_aJ58xym ReiyU_qMQZiqangoX8UG5oPBVQh69Mz3f1DSjw2.jSUlSNHulEgeNfuUcSao VuNfoticrJYdUiDAkRl0uHpQdMfWv04r7JUIgpmxzaGGheGVcdyADzDyVW6M ITYey9NNXoEYnwBo.3pLN7nDLqidopn7hF2g9IJSAVxR1w18dPVXZPDidPTi 7B1i7__9ia8xs7gnNe9n.kkRhVyZmPZ.kdibaaljI.H7cH5Tn0I9sgUJkMr7 MiB4KqFzIVwkPRWlWf3BCWx8.tdSmaTQFbixeWlAVi1iKnzg7AIsmhZ_b7FT q_IL6Es9OgDxsTbYYs9fkwzQW9SaaHuDlAq.slFkJcvl4MFDlZnZaWQVNMD0 9vOEDSoe_HdRnU92B601FrF6Ag5QBWLO7zVrZeC2upRcZMm3F6BwQZ7obSuS 9qR4CU76exgBDw–
X-Originating-IP: [64.98.42.133]
Authentication-Results: mta1257.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.133) by mta1257.mail.ac4.yahoo.com with SMTP; Wed, 12 Dec 2012 13:49:09 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay04.b.hostedemail.com (Postfix) with SMTP id 3CC8867074; Wed, 12 Dec 2012 21:48:53 +0000 (UTC)
X-Panda: scanned!
X-Spam-Summary: 64,4,0,,d41d8cd98f00b204,mendychambers@mendychambers.com,:::::::::::::::::::::::::::::::::::::::::::mrsomf14|1714587392|FC6C4FA
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 1446
Received: from webmail16 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf14.b.hostedemail.com (Postfix) with ESMTPA; Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
Received: from 41.138.171.68 ([41.138.171.68]) by webmail16 (Webmail) with HTTP; Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
Date: Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <837876103.14863.1355348929528.JavaMail.mail@webmail16>
Subject: Money Transfer From Spain

To view the post i’ve submitted on November 12, 2012 on this scammer click: Aminata Bangali

FROM: Barrister Mendy Samba <mendychambers@mendychambers.com> Reply Address: mendychambers@gmail.com

When ‘Aminata’ emailed me back in November her return-path was mendy12@sambachambers.com so i’m guessing Samba Chambers was a fake name she was using? Or maybe Mendy Samba Chambers? .. Not sure where ‘Barrister’ came into to play lol.

RECEIVED IP: 41.138.171.68 Location: NIGERIA (SOUTH AFRICA) X-ORIGINATING-IP: 64.98.42.133

_______________________________________

ANOTHER EMAIL SENT BY MENDY SAMBA –

ATTENTION:

Since I am yet to hear from you since your last mail, I assume you are no longer interested in assisting my client. I would appreciate if you can define your position clearly to enable us know the next line of action. Should you still be interested in assisting her, I implore you to show your commitment to enable us conclude the transfer.

Please, do kindly respond within the hour is possible.

Yours Sincerely,

Advocate Mendy Samba( Attorney At Law )

HEADER INFORMATION:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) eW91IHNpbmNlIHlvdXIgbGFzdCBtYWlsLCBJIGFzc3VtZSB5b3UgYXJlIG5v IGxvbmdlciBpbnRlcmVzdGVkIGluIGFzc2lzdGluZyBteSBjbGllbnQuIEkg d291bGQgYXBwcmVjaWF0ZSBpZiB5b3UgY2FuIGRlZmluZSB5b3VyIHBvc2l0 aW9uIGNsZWFybHkgdG8gZW5hYmxlIHVzIGtub3cgdGhlIG5leHQgbGluZSBv ZiBhY3Rpb24uIFNob3VsZCB5b3Ugc3RpbGwgYmUgaW50ZXJlcwEwAQEBAQ–
X-YMailISG: Qish.AwWLDsD_aE16xh5LXkfyfliJdFG8Az7iuvnxeZ56_1J crt96JOXDja4po5uUUFfB6a4l3fDBX66fLkDWvDXGHzQtXeP.ir3WKDMvO18 yQtmjWnM7KDHOTIR_mm7F0x_yYrV2f1FJspVNUZNNrNhqx4gHNI7egOdzDmz op7TNxfD8KDM8WtGccyWKkXqThvjw7VzTcfCAHPEArsNtdKJ5wHzJaxY7Xo0 ICaaAf_pXqlY_3vkqJUpjtFYyCpgw7N5V_AkNyRzANa9D3HB88RSghJYRpkC dRkpGISFkkS0G2jSVjVJobdQa7i6p3HB67iuit9p3b5fHUatd0TmDG2c1wO4 n_3CL7IBbkzawlon7QqKyZdF1B9epc6jGlmzFj_sG9yMs7c6gAszTz.Wh37L aLADSBUUKoNLZGvXD_VPS3NuJy5qN2N_IeAPWj74Jm_I_1gYiRBbKzE1nXzf De8CKEyFZTjnJ2Tyo7u0BEYncdKM7soOIYF0C3OzEqL9Q5rDbecHRlusYWLm 1UT65pH7TqrnRdGMC4pn7hQqNuf0kQ6igWHg0ebawNy2jkZQRRqDsJIuL_hj kTe6JkM9EY1NO0Z6oaZutHK4uzUR1bhnELOdzzqFqUkmTTTt.tlm3VCPswKa Mbi2uW6G.qSyXvN4ML_cUnNUWgQyxjNm8tImcSUwfUtv.vzW43gBPS4r8tdz gRZ6WaVj2q93bL8MbZpotKrj7hCFUn4flxO_1y20Fd_XwmXYJ8Ihmq6C9R1R TihTyJWhJxlQoMqFbPy3RojiISg6gc1gsS7BMM0I0gx70NopBwRn5EJOqQhK U2oAcZ21BR9idyOFHPF7VzPu8Ncd7J4NFnoS1sXtdkeKT3378lJFaPnST6iv k9u7WhHwmBhbAhvjOkWjJxevZljRbtfvebag8m5Sahi9QaYaUeC_3pEB5.Eo zYzcudPoota0GO7Z6mfG5PYVkGRiyKKdU0sG387ZApM5TRPp_AsGwSyGxg2p DXPpSQzV7o9Zzkr9QZUJxx3oYRxh3luEq12j.ayVQlHvrngNXNp9dT0gNxzX ftpGIhATeavycQ4_jhcJ8dXpiRB2LhNdF4x_29jUzABvNKNsK19nztr4IGJU UgD6Vt2_SagllCSrCH4Y34ff6GEYlUIUccgdWYMBlWhJkmWQYstMRl71uO5J ewdacuSE7nQBw5Kx1ACRhtpjBFO.r.cVWkacnzfte.3hl0hSVzxBlLMxA3lu aeX8RJZP04GfqhHp4Ex6GYBeVXQV14Um5Dcjwg7t2dxxLJ0rcLbwTNLCLOi3 Ch4moZMd6oFy6Pil3_AuOXc28gxcxk06jpmahAvr8BgwxaAO2KkhT7.wpsn1 i4qaQ4r8Bk01ndo3Cl6.ENqsq6hCv2F_LYMsJoUhZqeERFJDDA–
X-Originating-IP: [64.98.42.225]
Authentication-Results: mta1092.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.225) by mta1092.mail.ac4.yahoo.com with SMTP; Thu, 10 Jan 2013 13:27:03 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay04.b.hostedemail.com (Postfix) with SMTP id 8718C1CB33B; Thu, 10 Jan 2013 21:26:50 +0000 (UTC)
X-Panda: scanned!
X-Spam-Summary: 2,0,0,,d41d8cd98f00b204,mendychambers@mendychambers.com,::::::::::::::::::::::::::::::::::::::::::jacquesr2@omf08|3603412736|CAE7C8B
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 1235
Received: from webmail16 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf08.b.hostedemail.com (Postfix) with ESMTPA; Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
Received: from 41.71.189.89 ([41.71.189.89]) by webmail16 (Webmail) with HTTP; Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
Date: Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <1176793950.247565.1357853206650.JavaMail.mail@webmail16>
Subject: Re: GREETINGS FROM AFRICA!!
X-Originating-IP: [41.71.189.89]

IPS: RECEIVED: 41.71.189.89 – – 64.98.36.5 – – ORIGINATING: 64.98.42.133

Barrister Mendy Samba IS Aminata Bangali pretending to be her lawyer. Below are more email addresses and IP information used by this scammer.

Aminata Bangali has many email addresses. A few handful include <> aminata2@mendyschambers.com <> aminatabangali@africamail.com <> aminatabangali@mendychambers.com <> aminatabangali@yahoo.com <> aminatabangali@msn.com <> aminatabangali@gmail.com <> info@guarantytrustsec.com <> info@guarantytrustsec.com <> aminatabangali7@gmail.co <> <aminatabangali7@gmail.com> jacquesr2@omf08

>< Aminata Bangali >< mendy12@sambachambers.com >< aminatabangali2@gmail.com >< aminata22@infonets.info >< aminatabangali6@gmail.com >< info@guarantytrustsec.com >< SeferiaB@trumbullps.org >< go@win.com >< SeferiaB@trumbullps.org ><

Previous IP’s used:

Originating IP:  41.71.177.75 Location: Lagos, Nigeria

Originating IP: 64.98.42.177 Location: Toronto, Canada – smtprelay.b.hostedemail.com – mta1196.mail.mud.yahoo.com

10.5.19.254 >< by smtprelay06.b.hostedemail.com

Mendy Samba also known as Aminata Bangali also pretends to be Western Union Money Transfer – And Fred Williams

Fred Williams >< fredwilliams3@rediffmail.com ><  www_western_uniontransfer276@superposta.com

Some more IP’s used by the above scammer:

Some IPs to avoid –  41.216.50.79 ( web92415.mail.cnh.yahoo.com ) >< 41.218.238.107 >< 41.216.50.209 >< 41.138.172.76 >< 74.125.83.67 ( mail-ee0-f67.google.com ) >< 10.14.193.136 >< 10.14.175.68 >< 64.98.42.56 >< 10.5.19.254 >< 64.98.36.5 >< 64.251.52.6 >< 203.188.201.85 >< 203.188.200.143 >< 119.42.242.156 >< 74.125.83.67 >< 41.138.172.76 ><
 
1 Comment

Posted by on 12/13/2012 in Inheritance Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“DR FRANK COLLINS” – DR COLLINS PETER

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: Below will show two email headers sent to two different people (including myself) – It’s the same scammer, same scam as well. The header information is different however so check both for the different IP’s and addresses the scammer is currently using.

UPDATE: Dr Frank Collins is also going by “Dr Collins Peter” and “Collins Peter E” under the email addresses / IP’s – “Collins, Peter E” <collinsp@newtrier.k12.il.us> <info@notice.com>  YAHOO-FILTERBULK: 157.55.116.165 RECEIVED: by 192.168.194.152 — X-ORIGINATING-IP: 41.71.173.93 Also,  Dr Collins Peter web52644778980000x@att.net REPLY-ADDRESS: collinpeterclaim1@yahoo.com RECEIVED IP: 172.163.86.61 – X-ORIGINATING-IP: 98.136.218.126 onlineme20@gmail.com – Scammers number: +2347030115459 X-YAHOOFILTERBULK: 98.136.218.126 — For more information click: Dr Collins Peter

UPDATE EMAIL FROM DR FRANK COLLINS A.K.A DR COLLINS PETER (I dont even think he realizes who he has emailed because he emails me with different, similar names on a daily basis.)

EMAIL: Attn: ,
This is to officially inform you that (ATM Card number:4083-0521-0032-0293) has been accredited in your favor. Your Personal Identification Number is 822. The ATM Card Value is US$1,500,000.00. You are advice to contact me with the following information: Name, Address,Phone, Age, Sex, and Occupation. You can also call out hot line +234-703-011-5459- to confirm.

Thank you,
Dr Collins Peter
ATM Logistics Unit,
Tel: +234-703-011-5459

_______________________________________

SUBJECT: PAYMENT VIA ATM CARD.

EMAIL: Reconfirm your Address,mobile for delivery of your ATM card $10.M

HEADER:

Return-Path: <webxx120999xxxxxxx@att.net>
X-YahooFilteredBulk: 98.138.91.88
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: FaLTslcWLDv_37lDMJwvUepYgmnqCzD2WWiLYIVYEvzWiVdj yeMdZg1sVqQZNMLZIrI8jrEhVaMXPsJIY6kRf0cbjnqQCPsaLbBdN2aERrfI RwOChZVFmKW9DzDxir.njJLHD.QY8j_y83jLRI4.AuI7k8QKdHjPvXXJYEFV 3YQAPmqS_78yqhLNbejZcKD5irk7feyqBo.GgWWRjUtr0XeJzJNqaql0h8sA e8RvUpWShCVHN2SyD1tuM0Deb4D1Ji8Vbh6LO0l1rw9cI0_sIz.vHpe_EiGP kHJSq4cVZ_zI24xSaJVH2nairx_S7dPagQ15pHcUhTSBMqGEgXXNeB1Y2oeP 3JU6qx6vSLkN2q.zt9EL5Vwas.VQ3VnnTXDqHLBdVcKU94hP0GlXAupk.DHM obtlUYCC1aCFRuuf3fyqc0LusjLnspK7JnjoOa4trRGPkJ_SlfDp0ggLrEaT v9a7lqaWeBT9EICtLA0FkLq3C2n40JFv19b2vJ8kTWkPK9_CQXXHvPmE9PZ3 kFs1luoQlTk_lzaBG6mXtSkUeA_7vvUTiNlT90e4_xcWHLkMi_qHUB6.MOXY KpjgBBptr6h8HH8BTrub.bb.IWuBN9wzFL2saNzKwsyxCm4lKMw9.xwDm5uJ Gq5wsKY8oAk.ZAm83V.RXXdQZhrYHzq2HI4TEsDuXnxCeBPNS3yCscgHGdua .5bviyYzefeg3tnvzHHkzRlzxSKw4QvlmuuqcChqscR9kCPiJLD.cgAs4kGP VstUFHd.bksAH552CD3i0lwkON5VfmeiESgRCGTPFvptnIKly2v3rZiX6esg GPPtVuH2VF9JGdJc2Ymbkp7azmUteBWNDdU3UBhVs441.EpCaWrI_sm_fe57 OiQyUOywnO1yRAtKJ_SFta4rGiPKLZ0KmWOm2iWxo40gyrpOgSF7vvvDlD.8 TTvxrpElU4SLFTn.GO1zFIFIOghPlKF4MTDaE1.cfSBA7OvaqPPhZB7CbD_P PbifHGwGIUcvjwXFo2GX_MJ9efyRaqwJ8RNv5bv_PmOjBSyxnqzPybf5N4_3 8R6NtlZnqM1b4Enrf9rnVdKOJneQ2FJhZVcYPrtDlcrfum9mFoOorxfoQHmz TE17GM57C0B.ILT43WlnmpnQdle96RtuSiqxmvsRzRStRdaGzDZuic8L7wei rjZENREYOwxD5PakTFL_xFmWBDMWOtezwqcs9j2HaBsIHEPGCa_w1BQb4H7T Rhg.rsLZhUpnUmz3kwbcPdV9Pc8UNCPtAWRE0QCMgwjeBn0ZXdINEcVudxSA YTcOMC4k95wVfJ8oF7eiOod5Qae2n5Ov7WwjD_lXqOtSBIc3J87zhs.HmSjX 7WlsWTwwXn.I_l4fa3NQ.mKYBKo-
X-Originating-IP: [98.138.91.88]
Authentication-Results: mta1228.mail.sk1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm12-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.88) by mta1228.mail.sk1.yahoo.com with SMTP; Wed, 05 Dec 2012 09:33:37 -0800
Received: from [98.138.226.178] by nm12.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [98.139.44.92] by tm13.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 05 Dec 2012 17:33:36 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 198054.18868.bm@omp1029.access.mail.sp2.yahoo.com
Received: (qmail 22514 invoked by uid 60001); 5 Dec 2012 17:33:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1354728815; bh=2E+CXVEN1MfcfJaq2e/eZV5TviX4n2QY/x1KeAa5kws=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=f9JOS/YO8YXlmc9hJrpoWT06BSgD+eIddQyPZn984pugXI47aiHJ+HigDAW5KKMMOSqrOWONnAJiCoEyKoSjzteAYzjouKnJuSd9FFAPV7YDDY5OHZP5iSipgSUv3aNEhW/Rsnl4Ln0GS2YFkeMhoGRqYTKiUP5YtCqljvaDNow=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TW9B75gLmG8YEH2Fs0wWUR6quUgNgKf4vKcOC0lU58OuZZxvfbAEilc6hFgOyOvoldI//PR2xiJZNGeYJsT5o76o0CJS8W8mbj8ANAI1PafbE8IT034u3iHRas9fZymmyVV0ARoaM4Pmz0UzVZK0Jim/YrB1484O5fKsUOiyGTM=;
X-YMail-OSG: WdGt0KwVM1lOyB0NVRZY5rrxYN4NyBpT08THjv3T0blrAYl g.fSaOnJGDgT6qOWJLehIImpPX16weUxpsraTUfiislliLwCl2K7v8Pp.iJQ a9TSaK3Cg8mAMGQLpgboaXsnY0P.gbcdPD9a2TYU3MLMz9.msdkdNVne7srD CGKrYap1ePNIkrvsumj.6_CYvw30FkImKkDHHf5IXtzUrxF4x8.QVPZL.F5P 1sCi9c6SjI1P.GeZm2DnWTw.VoPokMuHr44zOJyF208V.uJqcKGplN1blft8 NRD73m_UrMPrQXsfdMEk9IKg0jGHRledxyRP7NbPnmUmTJk5sWb6g7mibQcN lZBmrszbkEqY7Gci4Eh5lmEYhM0EH9ITd3rAkZfbRlBlo5s8MbxSVEa73EvH muyMHoTdJMpwvibAS8LsfWhBVw4Fzpyj.JdfnQdukkFQX5QRnWlt3FtcARkq hyy26DJRYTbzGN4Eyk0EL9EDXp1SGqp9Lk4FU_Cz6Hw4qjqgVzWqnIza_ijq nvI9omJY1Dw0WycuWs.OkVnfl
Received: from [108.174.51.231] by web184901.mail.gq1.yahoo.com via HTTP; Wed, 05 Dec 2012 09:33:35 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1354728815.12889.YahooMailClassic@web184901.mail.gq1.yahoo.com>
Date: Wed, 5 Dec 2012 09:33:35 -0800 (PST)
From: DR FRANK COLLINS <webxx120999xxxxxxx@att.net>
Reply-To: drfranklcollin@kimo.com
Subject: PAYMENT VIA ATM CARD

FIRST EMAIL – “DR FRANK COLLINS” <webxx120999xxxxxxx@att.net> REPLY-TO: drfranklcollin@kimo.com RETURN-PATH: webxx120999xxxxxxx@att.net

SECOND EMAIL – Dr Collins Peter <webxixxxxx266xxxxx@att.net> REPLY-TO: collinpeterclaim1@yahoo.com RETURN-PATH: webxixxxxx266xxxxx@att.net

BELOW HEADER FROM COLLIN PETER EMAIL:

Return-Path: <webxixxxxx266xxxxx@att.net>
X-YahooFilteredBulk: 98.136.217.214
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: 2lU7wkQWLDvBCg5Cg1wZtIwDNUzuGrZVVXK9H6ZxiRnCF9q8 3T_Z2xZXeKmdhjE03ZY1nNRa1P6Zz09tc3Suud6PVBq3vexxPmov8AXjPV9n h21FBi8fEfSTSwVFhhvzk7V6R63Puryrkha1Mb3jaVwNputKdVPkDPhjUMeo RVMMb4_9ds7LkdO1tAhp2nowUz6sKBD4buJmSanxkzHUpRwUVtPLKq8B09eN Rl25hxMaIQHn74TwJlEJoWwVxtvh8Jkr9b8xgoPVsHTD4d3rIEAmrBO8jRyd GelLKjDpe6gEZSWQukIvbii_.zMj02LUFMIXNqSXg2JTLp15U5_jUlo0usw3 1Q9ij8R.SuZ80..F80EMLcQO1SXMjqWDf6xkVHWwRChYckM8P0zLXQwmLzCh cXZIqLnw6xfz6lcwu0_mQkN.aX.hIIycQN9E431bkyzpAK8Sh0ATdnfKruuc hDUY3uEtvred._LLnnYkhYpxqfc_nSy4oYmmhRytYX5eJDo3.jrNS61KZPV6 YQ56CR6JtF_A6Hafi5rSLv5qgM4p8VJZi7448tERIhykcwaijsPjcAOenatn YK3BKAuoLWZ0KHPHNvGKAWVEbv9QWSQF39Q.EEP1LmrPyvSdcGkLUJurop.B aYWv4YFGCdGxSazNRDxvtgoiaK6SIwQ.bpgk7uq2vF3rcb50kF6JNxWrLg.n 7Tth7XBQ.W0dZ6SeRl5BddGt0PedKs6csdJXP3rAEuRx9HhVbiFWVgdNijR3 _dNog5Qebj0UNBN3_ZYEN_KnDptPkNdpsJ8OGplwzrinpWeXcnwHVgAbUTdo 18VmNYVRbtilZoPybybViqmTdRB30nDou7y.RzfJPpp93GHAGPmJapCeotd7 c17h.xTgmXwnesQYx8oH1A8HMZj9YMgj2Hn78UbjDz5iO3dLZZQwGJc37EEe Irpsy5SaXtVD8MbmmPkhMrhk8K30Dviwqq4hDE5WgxBlGVonuDQoGK3aEt2T nvWx.JhFmNOhCyTBWuANJwIBh0YVHlt7UHVip3l.jut4onQ9R4CDyP6sbX2c lfshiCRIJ9lEvHbvGo40N55AdITysTVwpsKYdhO1zKO2KEhE2HbINU3NSVAp mVO8xztcsAawulFbZ5PKA.HviU.utyPlT0yMvzwTHn_QINVPcYodx0NOT_5q eROgjgZ35jOw55jeTpgP2qOvmDNkeadY.RrCfkVM_h_Ewvbns5N8m8wKWn4F 71xz.y4o8QBLLz0jb4jMAFmUekk5PrMNZ0E-
X-Originating-IP: [98.136.217.214]
Authentication-Results: mta1191.mail.bf1.yahoo.com from=att.net; domainkeys=pass (ok); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm19-vm9.bullet.mail.gq1.yahoo.com) (98.136.217.214) by mta1191.mail.bf1.yahoo.com with SMTP; Fri, 14 Dec 2012 03:36:45 -0800
Received: from [98.137.12.58] by nm19.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [98.139.44.70] by tm3.bullet.mail.gq1.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
Received: from [127.0.0.1] by omp1007.access.mail.sp2.yahoo.com with NNFMP; 14 Dec 2012 11:36:43 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 191480.20265.bm@omp1007.access.mail.sp2.yahoo.com
Received: (qmail 75889 invoked by uid 60001); 14 Dec 2012 11:36:42 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355485002; bh=2TQXuFSDKzJQh2ItoNfMPDU7xRHv3E+CGrBMw/1Ns0g=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=MdiZ1jC0egJ3jeK8x+wAmlqoZyMp98AiD2wzzG+et6zE3r4jYBfuYUoMttuA+gtIjRNvWXQLaTtg0u215rggtB9Wpx8OQWJMI3iQKHU+C0WdAONnnis/01rbGL8rLVp8QUEopIB3M6ep93e/l0o2GTcA+2tm8NmXdnIzOrTvHgs=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tLrXvMlZ1AfWS1oRs/q6h6HUMYi/LUcbnjbU0+wRSPWQr/1rUxJ+mPFD5IS+2J+xhqTW8fnpv0P89+O46Kg0ZaIi52L7OqBpBWUtxGIOrGGuRKY65NxHoyuM/9fcPmg6OxN2t9IVr/IQmo5FIYMQAlTgtLYGxzIx8tus9kjh4UE=;
X-YMail-OSG: 3ICaliMVM1ngoXiqNpguRRh2iYwL78sXplySeVxex0hGQX. 9amYG0XA4OBV26LpGFUMshO4W2d_k7Z_a2Ijy9UC4MhQCts27.mEJf9MSo4o gLC1yrqEZW2qVfkENJcHqLvP6x22811UE_jYQp539eFIcLW5RWUDAU4t9CGn OdkUZ.I3db4Y0_pc3qHbfrO34x9zDWKUFRwLqnQ.wNCnHD8dS3WSTofCFWm8 DRISKdISfGE2ytoF4IzvXsFuyje2c_qd6tqdnmTw5Z9mBhssXb94A4biy5CF qnxB_1TEOjTWqKHDrBY4BU1EdgOFfYQNqvwQ4XtGhinDlu0jMGic.YAmQBDt z00_WMAOIdc6llHVKxJwh0yh_xgWL5D6rgLOTnmN2Mo2vI.t3Ls.zQwRBRhe SaGInzRlMMto6OJd7AVEbCSpnmZYicQHhMCbjMxGPX2KPd4Tv0fL_cU_plDm egb7i9XYQocNBXLDzdzIfmk9Um9FTZk5b6spv87aUQEG.1MjrCbB7UdYQ0uO JpvS8DhYL5XyxrsNNIFxmRpV2b8I07Jm9LTn8wKS_hqGegIf5feMr.9cGJzH 7hgKyGs0sihPG_k5JCSaI1yCjgZYK79b_xhXuvMQeLOYyQDygzxrr8813RrH cC8L9RfM7BsB3QMN75qyv.pCG1ZbybDazG.TyLuGLgdSNZ6KwYSh_mQ–
Received: from [172.162.63.104] by web185004.mail.gq1.yahoo.com via HTTP; Fri, 14 Dec 2012 03:36:42 PST
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355485002.70723.YahooMailClassic@web185004.mail.gq1.yahoo.com>
Date: Fri, 14 Dec 2012 03:36:42 -0800 (PST)
From: Dr Collins Peter <webxixxxxx266xxxxx@att.net>
Reply-To: collinpeterclaim1@yahoo.com
Subject: ATTN:BENEFICIARY

108.174.51.231 << 98.138.91.88 <<

________________________________________

Click SCAMWARNERS for email to below header which was sent by the same scammer as above.

Return-Path: <web1xxxxx12000bvvv@att.net>
Received: from nm12-vm4.bullet.mail.gq1.yahoo.com (nm12-vm4.bullet.mail.gq1.yahoo.com [98.136.218.191])
(8.14.4/8.14.4) with ESMTP id qBAFqXcC024177
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from web1xxxxx12000bvvv@att.net)
Received: from [98.137.12.190] by nm12.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [98.139.44.75] by tm11.bullet.mail.gq1.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
Received: from [127.0.0.1] by omp1012.access.mail.sp2.yahoo.com with NNFMP; 10 Dec 2012 15:52:33 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 169461.26588.bm@omp1012.access.mail.sp2.yahoo.com
Received: (qmail 11627 invoked by uid 60001); 10 Dec 2012 15:52:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355154752; bh=6IEXAnuDHUzPM2GG6BZxFSMMGXUzzTJH/x0iCKn3gNM=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ZNpQDXqA6YKLygx/Mgp0kaQY3hShe48iYfThTEb8Iru1MOJkFmAxYG7WRpbG0vEzb8sVOXBWUD70FlpkHY32sc3lcnQRUH9EWyjF33/6bxeK6Wl/Hf7syjgMKen3IrPrVrQM7QP70aIkEYevI/L1VoeaKi0X05zrl/mkFKlZJB8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=C3u05KWRUG4yec6yjYc58jVUZqKqPra/xpCRYFkhi2pi73G7p5xYJt3avwhjC1pd5gHT2g6XMST7DkGiaRchRZYYa/jODcoZt4R+AhzCt86vNfdJ8r54ZScNvyU4Y+I8mpF49mKbuYWh9Qw+6o/yW3f8qclaMsyNAu3ATH2SDAs=;
X-YMail-OSG: p5tUyUsVM1nSNbno0XpFEzLZade1sG0k1LIN6NkNDDbP4ts
LfsdXeXxUn6OgEkvAzJFUKDvuIBVeFzZtgkksCNzN7YM7NYxZZELCIFArcbu
_mj1sx3mmaRRFlhLnDPO0Ud9acKn6RdXUuy0Z2D2THjsSnJnY9sU7qqlRMsY
RFxlusC6GZdc5g0kSlEJ9Q6m1NFt621vubnU3dlWx9BHYYswZA3GlYEoIQOZ
znu.EmXiL_e6NkgO6Xi3U8TlgxDHH.J2V.gjmQeJjgeleOz.cmjSiQf65.01
pFSPJQ.uJV2ZQQDmhoA_f4DIGHOLzIEM54oMAKodxlcGehFjRCB.Otx7qJ99
LLzSejt_DN_c3T7KOCmzn30gBLvM4NW04V6Q7K4N69QA7XOIUNPQflttOcPQ
QUh_J5vkppPwzXQ7X5ZwbRUsdfsHhuaz1XhXMvrY6vOWGj_WLL3kyxKoNNTD
o2PEbuViIVuMH9ocliCObq_Z7Olxp0coTXqA6vhkTd_030aE_Rclf5k8sFU.
neOYXj1nWJo0ZcsSoOLW7
Received: from [64.72.78.27] by web181404.mail.ne1.yahoo.com via HTTP; Mon, 10 Dec 2012 07:52:32 PST
X-Rocket-MIMEInfo: 001.001,DQoNClJlY29uZmlybSB5b3VyIEFkZHJlc3MsbW9iaWxlIGZvciBkZWxpdmVyeSBvZiB5b3VyIEFUTSBjYXJkICQxMC5NATABAQEB
X-Mailer: YahooMailClassic/15.1.1 YahooMailWebService/0.8.128.478
Message-ID: <1355154752.62957.YahooMailClassic@web181404.mail.ne1.yahoo.com>
Date: Mon, 10 Dec 2012 07:52:32 -0800 (PST)
From: DR FRANK COLLINS <web1xxxxx12000bvvv@att.net>
Reply-To: dcollins@kimo.com
Subject: PAYMENT VIA ATM CARD.

 
1 Comment

Posted by on 12/11/2012 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

Four Email SCAMS

A list of three scammers who emailed me back in October, 2012.  I would’ve posted them sooner, however, my spam box gets FLOODED with spam and alot of email’s (including these three) continue to get pushed down each day. So i’m posted a few of these less recent scams, in one post.

1) LOTTERY SCAM – “EUROPEAN EURO MILLIONS LOTTERY COMMISSION” — When I didn’t respond, this is the email I received:

FROM: Mr abdul saram mr.abdulsaram16@ymail.com

EMAIL: Attention:

TRANSFER OF US$11,800,000.00 TO YOUR BANK ACCOUNT.
We are writhing to know if it’s true that you are DEAD? Because we received a notification from one MR. GERSHON SHAPIRO of USA stating that you are DEAD and that you have giving him the right to claim your funds.He stated you died on a CAR accident. He has been calling us regarding this issue, but we cannot proceed with him until we confirm this by not hearing from you after 7days.Be advised that we have made all arrangements for you to receive and confirm your funds without anymore stress, and without any further delays. All we need to confirm now is your been DEAD Or still Alive.Because this MAN’S message brought shock to our minds. And we just can’t proceed with him until we confirm if this is a reality OR not.But if it happened we did not hear from you after 7days, then we say: MAY YOUR SOUL REST IN PERFECT

PEACE YOUR JOY AND SUCCESS REMAINS OUR GOAL.
May the peace of the Lord be with you wherever you may be now.

Your Faithfully,
Mr. Abdul Saram
Foreign Payment Department.
Kuala Lumpur Malaysia.
E-mail; mr.abdulsaram168@ymail.com

HEADER:

Return-Path: <mr.abdulsaram16@ymail.com>
X-YahooFilteredBulk: 202.54.119.135
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts)
X-YMailISG: zoMIZlsWLDvydzg0Dk9J5tOysBHE56cHQyyiC1YznBFFUtuX 2QmjWmBtKrEIAIZhZZvMLBsf2_VfVRuk3IH9j8m1hLMrwqczlxOjNcYd56t1 DaED9ORsgM_tamt6rYqekTqo1ZZeVBVk.n3YVF3tmTgLQTno7RUE_mPfmgyO S8g3lGMj8NpQGYdtfuXTZYiqBNy7OCiTyfihCtBixC84NBTgsDMsAj4P2vvf uvEouSXqXW_lpokkF6fkNC1eMtEPGI98ZdT_3zRWN9Ru.lwobx.vCEagLelr T6qkX56Y3yw3oYYgjSG_O1eZeznkjXOyNOjg82ND2CrRcduLWdRuJOesZKmV 3xrCwSbNU.1OEPGt99LQuUBZpHmnhEsLZ908pgJy706cOkWpiPoZ1rCWGuGK kMgJUwp_ukdV2jXRGVSbgDunXrysUGJ4JGJ7sIcy08xXkI01aKXjvxH5zSVt MLNYizgSIwbXCsVoh4kgvfVFn8tv.rcdkUiap3AJ7fxaz2BjrTg_iLcFzP7j CKXG6ul9U1zBHqq5F54fpGKFMpuGvzwMOAQT_kou94fFWb78j9yzKSJHFpzs N.MLMXSB9whHO08p5lO4G9516SCu.qO8uzo96HXGeNPbj9DIfYQcg1iWz8uo 3lMulBOyPI1h4faLSk2GSYFktoY9y7i9gU.f.9MxMaXc67eJ_PrIVIhtMswN J_wZMBwunjrY3hq2OicEy4TomsF.650j_axPHFQHMF0VIt1ySTNQfVmkwYD_ M4SQKaSrB6uU5OJM3EfBW_Humq93k7t34Dv0UpWSsFFW8shyPX21lPZJvTcZ OXXZcu._kxiXXOWX99I0m3DkvbdL_quy5FBkRomNTW_pSwiZBIdfHBGu50MS 9nIw.OfsGw1O0ATr25xhnJHFLd4PlcHTUBXfiGUamYauHYl_HmtmDcs2so5t jo1X2QbMvFUqicTPxGsJSPWzhxtucwSaWhqCBTqnKW12kmR.n19.GVeHCPoG 5fbPZ6S2rNO.LNDQzjl_7vpVXk.3WfaqAGUZaNZSKgTUx_m6dzipHtSDVyXl ZWvdU1M57p_stGRaLd7P2DLNwZA8gjZwrpTI3_hXdzz4E0HLWDqTsu70dLn3 NvwffnAgEQhrxZfe5eS8PmhRPM3oEBxVA6viz2i6xw–
X-Originating-IP: [202.54.119.135]
Authentication-Results: mta1021.mail.ac4.yahoo.com from=ymail.com; domainkeys=neutral (no sig); from=ymail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bulkhostingpanel.com) (202.54.119.135) by mta1021.mail.ac4.yahoo.com with SMTP; Sun, 07 Oct 2012 07:12:02 -0700
Received: (qmail 18600 invoked from network); 7 Oct 2012 18:40:51 +0530
Received: from unknown (HELO User) (120.140.1.40) by bulkhostingpanel.com with SMTP; 7 Oct 2012 18:40:51 +0530
Reply-To: <mr.abdulsaram168@ymail.com>
From: “Mr abdul saram”<mr.abdulsaram16@ymail.com>
Subject: Attention:
Date: Sun, 7 Oct 2012 05:24:25 +0800

Abdul Saram also sent out scam mail under the following names and email-addresses:

“Mr abdul saram” – <mr.abdulsaram16@ymail.com> – “EUROPEAN EURO MILLIONS LOTTERY COMMISSION” <europe”EUROPEAN EURO MILLIONS LOTTERY COMMISSION europe – FREE LOTTO AFFILIATED OFFICE U.K info_freelotto@ –  “Mr. Abdul”<info@yahoo.com> – “Gareth Bull” – <garethbull65@qq.com> – “Dr. Cherri Holden” – infficess@yahoo.com – “Mrs.carolynx Harold” – <info@winners.co.uk> – Mrs carolynx Harold <info@winners.co.org>

RECEIVED IP: 202.54.119.135 – LOCATION: India

ASSOCIATED IP: 41.221.17.37 – NIGERIA – 41.249.22.246

_____________________________________

2) INHERITANCE SCAM – TRANSFERING FUNDS – FRAUD

 

EMAIL: Greeting’s my dear,

I hope that you are in good health and God is always watching you and to take care of you and your Family.My name is Joy Donald and im a beautiful girl in this country of Cote d’ Ivoire. i am an ordinary girl and simple bread winner of my self. finish college degree not working .I am brought up motherless but i am thankful that I have my father with me all along till the death of my father on 20th Febuary 2010 in a private hospital here in Abidjan. he secretly called me on his bedside and told me that he has a sum of $ 12.500.000 (Tweleve Million, five hundred thousand dollars) left in a suspence account in one of the local bank here in Abidjan, that he used my name as his first daugther for the next of kin in deposit of the fund. now I can say that God is good in everywhere and in everytime. he also explained to me that it was because of this wealth and some huge amount of money his business associates supposed to balance him from the deal they had that he was poisoned by his business associates, that I should seek for a God fearing foreign partner in a country of my choice where I will transfer this money and use it for investment purpose such as real (estate management) can you be my friend,my guardian,my partner, for the time been.

dearest, i am honourably seeking your assistance in the following ways ) 1 to provide a Bank account where this money would be transferred to ) 2 to serve as the guardian of this since I am a girl of 22 years. moreover dear, i am willing to offer you some % of the sum as compensation for effort input after the successful transfer of this fund to your designate account overseas.I’m very honest person and always like to help others.

Thank you very much, i will wait for your reply. God always be with you.

Yours sincerly,
Ms Joy Donald

HEADER:

Return-Path: <ms_joydonald@hotmail.fr>
X-YahooFilteredBulk: 77.238.189.206
Received-SPF: softfail (transitioning domain of hotmail.fr does not designate 77.238.189.206 as permitted sender)
X-YMailISG: JZaHMLwWLDugrnxWgMa0KL19eLCCrSn4Vjkr9J4aFtdpeB0n RfO.FCSatFLs1uKMnFmNvRs95YCfGGD9V9ixQ2.ZUI18rrVrpd9c6YAKD_ep mGZvxWakYrLqBuZIajyrXKCMsGLNT.Aah2DmKlB56P5PAHpA0J5YhGOGuosH dDTRY0OuX_R3Cigqpyh.kfeN4GzHCORAXV1b8p5TP3x0QUK3U2ADv7qkiZba JbixTzA3LxKAdrJF3EKB6GWB0n_0_ppM3TTYmjDzqJbuNsoU6zGDYX93txZq qxUxiJMeHiVBwpAihr.pJBlWF_EyHO6sAOzxEtrSXQBDYI6r9vT28QfG2bkQ l4MbVzyT1n7Twa_dMibPyUW9rxhqG8pASUyelD5fotFzmrK0X_3wMOZbsrRO R.szB0QOzMHw2joCbG0c74FMFgackwgdLdLwfSuZjYsbQHlvUa0LVhp9U__x fzldM6GUoOtXkGubJ5MRQ6DpKzPL6C85e1jn0T0r9u1LJEuTPejfOuV0qDEV saYEVNnk4mi52SyZlcmFMeWs5t.2HixWTyQ2h4RTFfgmJLawAaYmAJGOYebQ uWegqh5C3LL_pgbxf4a9._LXUl.QPV7XNdY7wzOlJ3TlnmLnSJ3bf0U3zcHY q4MvlCc3owpjYOtD.53dx0hxoYSL2cI2KOFVPcZYz.T.ZQ1CyXAzAn6151hh nmtqAD9ouJeDgJt2SIInkOg5NHv1QWRdh_sNEiTVGdH4mHUSgvnEzn0FPZ_U l78PUoPR4fT8wEDua3xMfYaBj5Kb6a8G2qA6fBrhm86jmAjWXtcVEz0_M3g7 i3nL6AnRLdHhcPL.3Xm0akNe7iDDPlufAlUidGal8xP1Oigi8OpgcIq4Sthv QsHMTO0EfOYCaGrzoSaddqtTlZUfnctjltSptmoQ_DwMlYAY7QnXE00HvRFx EGiH.mwv7zj8Jnh6nxW3YbAtEZ9O95EeTTDlZKxOjGyEWsUl4qKh2IojbP1k pAb7WXT5XgRLMG1win4HfMlGuH15.XzvR.ArRmBQH50Qtckr5QGztIfMQLKq 1l1jsOK9RXb1A7C_DsILoPxg7yKSzmnDgVw.QA8oLyAVPHfxFAdcq3Vobrwq 2z_YIMiI7enn.1Vd0Jxek_GkywSnAcepswcn4eU.neYNWprRs9LCHxorbxkB RXlOtzwgZ7_TrVuVJPNOggjT9fqrEZYnUhUHbmi8SToV3zaP7toPD.Ux5b2z veuMgxkh_RhisgKxWbX7ku9z2CB.x2ZF4MwCiTwED3WCAQrTbu3fopeh1ICN XFDoHmtkcfuos7_eCmTGq8_SCdX5lE3TBlWZU04svWZWMIk-
X-Originating-IP: [77.238.189.206]
Authentication-Results: mta1300.mail.bf1.yahoo.com from=hotmail.fr; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm17-vm1.bullet.mail.ird.yahoo.com) (77.238.189.206) by mta1300.mail.bf1.yahoo.com with SMTP; Wed, 10 Oct 2012 09:25:01 -0700
Received: from [77.238.189.54] by nm17.bullet.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
Received: from [212.82.108.253] by tm7.bullet.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
Received: from [127.0.0.1] by omp1018.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 759852.5070.bm@omp1018.mail.ird.yahoo.com
Received: (qmail 95614 invoked by uid 60001); 10 Oct 2012 16:25:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1349886300; bh=jaEN//dfogj2VveAeEoe/VXQQN2SwrOCdupZLniFXYg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=gFNDxSA+fQ/8A8jgKkFMAaKNlbRG81Fr2Blh/islfQc7fwumPFknPMR73jC3ebIw4/Jj4IaBtCCTajqdTlzpH3FQxVOWIRcnul4FVBa1NZN2f+DtPR6t1YHzzZXcfrd1UpORj1wmOG/WHquNyYwesDFYod+iLcHYwQJEIPJrWfc=
X-YMail-OSG: bNrzragVM1mTLrq9DxIX40L1J60JiJhrQ0wuRl7w6Sd1Y7u c6kjz5pTHtaDVpdpayxVP37.bOAv5uVox3wH3edxmNiadIQU_MhECL99_P6g rvJJGcLBsCljDdhiWqr0Lia7jKJHIdfX_w4avRcs0Tu8DTDkWNA31_7_FarE 5nYlfMedww6RvY5K6h7IcIEvs2U1G.CbX9WXYhiKjfdLM1s.v6W5SIPf85RN NspEsJXiafUi1QAXAzPKLhU5.bmFjCz3JER3WhYejBKIdkPQLJ2VE8ct95FS WDB6xtDiU3tRzQcEySrIXJwoMv15ScwC9pYuVs85JwH6ypUAAjAftFarPXEd 6hujb7zfiswYXLQg55XfnQReV36PZHVy6ffLu0QeipIkfC4HHTbakq7ag8Jr XU9qFc.5IR_JpnGYiINd_iBBp1.LjenFSIHT8o9Sw1RHSZMG_iIkMM0eJSVp sZdhbJKJSLaszEdLqD3iUcFwpzHD8iot8Ip6DIO17SMm.mgMxGJeksfmf1lC SlCGFXSmSGO7XZeO4emPmb749eAOGk0CgYHYwdL2RtbFD3fSHqR4LP0KtBJw tmUvaL1yqR_mUcAzvCjSAjAAP0lgfDUNpDZVmYlwbwl6NlJmowcO23eAppF6 rBOFUIVZHkG70Ht502_wTFM_e420-
Received: from [196.201.65.21] by web171605.mail.ir2.yahoo.com via HTTP; Wed, 10 Oct 2012 17:25:00 BST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1349886300.86977.YahooMailClassic@web171605.mail.ir2.yahoo.com>
Date: Wed, 10 Oct 2012 17:25:00 +0100 (BST)
From: Joy Donald <ms_joydonald@hotmail.fr>
Reply-To: donaldjoys1@yahoo.co.th
Subject: CAN I TRUST YOU

FROM:  “Joy Donald” ms_joydonald@hotmail.fr Reply-address: donaldjoys1@yahoo.co.th

____________________________________________________

This scammer spells Federal incorrect  – ‘ Federal Republic of Benin ‘ not ‘ FREDeral – LOL they aren’t smaRT AT ALL.

3) LOTTERY SCAM – 419 SCAMMER

EMAIL: FROM DESK OF MINISTER OF FREDERAL REPUBLIC OF BENIN.

FOREIGN CONTRACTOR PAYMENT OFFICE.

ATTENTION BENEFICIARY ,

The Board of Federal Ministry of Finance Benin Republic. are here to notify you of your payment inherited funds of ($2.500.00M)U.S.D dollars . after the meeting held on 6th of NOVEMBER 2011. His Exelence the PRESIDENT OF FEDERAL REPUBLIC OF BENIN DR YAYEE BONI. has Instructed this Department to send your funds through western union money transfer for easier receive of your inherinted funds without any further delay. to avoid paying money to the fraud stars that is going on through the global.

You are required to send your name and address were you want your fund to be send through western union the maximium amount you will be receiving each day starting from tomorrow is the sum of $5000.00. also your are required to send us the sum of $105.00 dollar for Re-newing and recofirming file that was deposited in this office with your name and address bellow .

Beneficiarey name———————
Address———————– ——–
Tel phone————————- —-
Your ID copy————————–
Your city————————-
Contact MR DOUGLAS JOHN with your informations below:
CONTACT PERSON: DOUGLAS JOHN
EMAIL: ( western.union45@live.fr )
TELEPHONE : +22968449676 OR +22999203703

As soon the required fee of $105.00 is send today for the renewing reconfirming the payment file of your funds you will start receiving your funds as from tomorrow.

Send the $105 dollar through western union with the name and I am waiting for you to give information to enable you start to receive your paymeny as from tomorrow

Send the money with this below information;

RECEIVERS NAME, PETER MARK
COUNTRY: REPUBLIC DU BENIN.
CITY: COTONOU
QUESTION HOW LONG?
ANSWER IMMEDIATELY
TOTAL AMOUNT $105.00

We await to receive the western union payment informations today. Please if you a are not the real beneficiary dont repond or delite
As soon as you send the only $105.00 usd you pick this first payment immediately ok you can track it now to your private system to be sure.

Yours in service
Financial Minister
Federal republic of Benin
WAITING TO HEAR FROM YOU AS SOON AS POSSIBLE

HEADER:

Return-Path: <officefile389@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.94
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: rVs1dXIWLDsMv_.n5QvLQrk7czd0m_vZykzvsDv2bO1NcJ6B mEmKmBbytjJ2Q2q7hoVPQRFf.X6dUoEqTwfUInQ1y31cNswweQ_WvtxI.i4x G_5EcbtSTAVFV_Tb4UXEP5nfbLLR3OcUBVBsg5a5QXdq93GUClR8IM3EZ5Oq Ax7QU446TQrW4z5fvkmJx3BMyug0lDIr.UKXxO4wFuMypYMVzckAr19SaEIM 9HuVKawHWF29nJmCMUx1.u.4D0ux2wFAlii5MeUQ942cVWxRJNRPKcmbs.HI xfvch.PCVUxqRomtl.EHpyv..T7KNAcWhNhb.OyXv.2QECxKRPe1A7JQ3esP SwDsYR_GQhXSI6NrwhwyUw_L5OuoS6BVHHBBLlwcEVolhJCEGaAjbppebA8J evmsqJ5PFkMZld3WHHJKdpHcYATjH92mH_OttCP.t_gHne6LdIMpg0icfVbo JUw8u4QIpzjvDbBLcLOo7FKhjR_..Dw3CR5HiVy3MjdTZZSVWnsizrHoNYE5 ravSWhY7xBCAUFpwo3u_TWaz0OusXIdi4QFDzivf0VIeiX7U2loHfgshFWfv XZnqeScp1sfpl5.qC8A.jyo8muRr0mX9Tl9byXrF3WYKvEdt3W8eOw0pl6tr nVjmCpVK3My0FU0bhunib_bq4I.amgNLqsYq2RCFlXCeCHFfOKNnfxNjbynC hxvT_tPcgA7lKv2YKqXSpx0aPsEAli7rWut4ZUI.mbV9ciR48JO1mZKsFMun Esrk8D.4ejFipPpmySq5vieercIDg0U79Pww_IHpoccnLrUXM_pkm_n5CE5W J5j0vgLwbYEKKiNM4J.qM.pziSivmA3LHJx4AT_NN_Ifx60YZTyinP8JewNB nEbJEKBjRYYIcrvzTgHy_Hp5rIhJK65y8uhTrNI1le7l6deAErzP.vQvp7RZ UQ061OvKu0ROvUPBj6ooxDZJiQPzlk5YUlYRoNhyiOarHEJYYvHrc2MAfnbs SXemLmas9CFQe.FOnAWLXg6IJXXnlJWn0Suo3DTioi7qFA.PEES_wVpW8Dq. pHM5id.fOlTcNRbobhwM5ELiEbv8UqiWO_xk43r8CF53mgnSxRGX_ofgT.vM K7TyCiTkiLJqrRPsj2XGv6qaEwrHZQVK_zZAm8bQlHgHMW.EPX1efMclxHr7 Hv87ie3KJVlYsbpt41qN.jHZ72TTGfgMUBIpd11uFx7wBWTNJnzM8wuflbWz 7ScRo1Rd9xaY2kgiJd00y.yGR9q0Te8G7.2gs64XgAj.rJHJEesoyLAnHor7 oBWj5K.idQo2jtWtMldstigscuNvbIdpB8ho6rmCzuBDmN33y0aFRpxE8w–
X-Originating-IP: [203.188.200.94]
Authentication-Results: mta1342.mail.gq1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm12-vm8.bullet.mail.tp2.yahoo.com) (203.188.200.94) by mta1342.mail.gq1.yahoo.com with SMTP; Wed, 10 Oct 2012 07:09:33 -0700
Received: from [203.188.200.220] by nm12.bullet.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
Received: from [203.188.200.63] by tm7.bullet.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
Received: from [127.0.0.1] by omp1004.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 119691.33270.bm@omp1004.mail.tp2.yahoo.com
Received: (qmail 38888 invoked by uid 60001); 10 Oct 2012 12:59:01 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1349873941; bh=MP+++lIJyYrpj/aXzm3tMnmhmfCfqMXOi5e1kzYn3Tw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=LVkAtUGaJbi5dfKJkjQghJrT8gUU0PgdSqmZsd9E/ZHQ6/CG6mgNm+rvJDts6pp3AiUWIw0omchZ9EGQ4FunoccmA2lDVIGS7pb99sdl5hsF0AkgCspFU5fgyb8PuayE1Yj98s03K9J4GMwWfqlVMdLewAIrzkJxc6PdD07aZ9I=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=c38Gpj05IhDmqBiYzJHOdEYJeIkGQAvzHcxXPhNy+G8fqdVpH1DSEJEtXQ2/1BsyYYvWZ8vCfJOX3lA93bclbzxnjXmUqQmhkeuQy2JqNskNXltl1tRwk609ukguAOvwLPnMhfqMio8PHMWIVwSnCRb2k3C14uRVjsQ6OpWNeTA=;
X-YMail-OSG: _GARL1wVM1lqQRqVGyFk1sZRYyWzAuNVhJd1sZHEBwkfLNd PMIg9HENG
Received: from [41.138.89.38] by web92411.mail.cnh.yahoo.com via HTTP; Wed, 10 Oct 2012 20:59:00 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1349873940.38815.YahooMailClassic@web92411.mail.cnh.yahoo.com>
Date: Wed, 10 Oct 2012 20:59:00 +0800 (CST)
From: MR DOUGLAS JOHN <officefile389@yahoo.cn>
Reply-To: western.union45@live.fr
Subject: ATTENTION BENEFICIARY

41.138.89.38 – BENIN / NIGERIA

“MR DOUGLAS JOHN” <officefile389@yahoo.cn>  westernunion45@live.fr

_________________________________________

4) SCAM – MONEY ORDERS – MONEY TRANSACTION – FRAUD

EMAIL: Attention please,
My name is Kim Wong, The Owner of Kim Wong Trading LLC,Kuala Lumpur Malaysia. I have been into Manufacturing of Fabrics,Textiles and Furniture Wares since I was a little child that gives me about 23 years of experience, I majored in art in high school and took a few college art courses, Most of my work is done in hand neatings mixed with Machine Embroidery.

I have recently added designing and creating artwork on the computer, I have been selling my Works for the last 3 years and have had my work featured on trading cards, prints and in magazines. I have sold in galleries and to private collectors from all around the world, I am always facing serious difficulties when it comes to selling my works to Americans, they are always offering to pay with MONEY ORDERS OR CASHIER CHECKS which is difficult for me to cash here in Malaysia.

I am looking for a representative in the United States, Canada and Europe who will be working for me as a part time worker and I will be willing to pay 15% for every transaction, this will not affect your present state of work. Someone who would help me receive payments from my customers in the united states, I mean someone that is responsible and reliable, because the cost of coming to the state and getting this payments is very expensive and time consuming, I am working on setting up a branch in the states for now I need a representative in United States who will be handling the payment aspect for my company.

These payments are in money orders and cashier checks and they will come to you in your name, If you are willing to WORK as our representative, All you need to do is cash the money orders and Cashier Checks, deduct your 15% and wire the rest to my company cashier here in Malaysia.

If you are interested in this PART TIME JOB OFFER, Please get back to me as soon as possible and send to me the listed information below:

1.Your Full Name:
2.Your Full Home Address
3.Your Direct Cell, Home and Office Number
4.Your Age, Gender and Present Occupation
4.Your Marital Status

The only problem which I have is trust, It will not cost you any amount, you are to receive payments from customers for my company which will be sent to you by FedEx or Ups from my debtors, which would come in Money Order and cashier Cheques depending on the of the payment my customers wants to use, then you are to cash it, deduct your 15% and wire the balance back to us.

NB: All charges to wire the Balance to us will be deducted from our money, so you are rest assured that you wouldn’t spend a dime out of your 15% or your personal money.
Thanks for your assistant and God bless,
Mr Kim Wong
Kim Wong Trading LLC
Lot 925 Jalan Kepong
Kuala Lumpur 52100 Malaysia

HEADER:

Return-Path: <mr_kimwong@etorq.net>
X-YahooFilteredBulk: 211.154.152.136
Received-SPF: none (domain of etorq.net does not designate permitted sender hosts)
X-YMailISG: yoXgebkWLDvhvSfGpf994bmowTFZpMDPw.1lseHkGA6T1SnA p1t3YxvxJS8N8EA6awflpA_S2QDZLDNMysomaZ_MhaETYuaVnjK1VCJfTVKg GS9W.3ZA3E0Nh3jVpAmuwHhVIFDW4md6Ih9TNntrWk8ZC7..jVHc9sonfVfW kOEygm8wmiN5oXRKB.x2mDSGgaNgpBu41IjFp3gBszrQIbsrDvNrrbX9uTH_ p7Rmx_l0Zrnd9FnqK.6C.zDTZyUuBsTQzCnWsM8tN1i_VRV0x_8_U6RqsTFm msR1VVPtNvDefm9IQjfYvdwJi5u2l5cNzeXjhEbiJmh2X_yK3vkalx4gjUjh AA_sYJdx7rgzLQ4_6TUXm96XQ0h4Dj_q9q4rAkf4ng0GzIJuMbhIWz9SSyc9 ky06NEAdJ.cBOsYY9pgrcAknG7Y1E2ecsvgQVSvIFQkstnNfG6BfSLt4dUe5 P1m.zXjK0.Lt9okfVcAJD33H_m0P1BCnItM4qwEFQmK91MxCGzCumuWqjPgY mJB_mcLtk3GZYcEf5z6pgS4q0NcL5BxMZ9pRg2jSIh6L8.EofXjDJ0QLTH2F oIvu9VLDtSm9CGm4dH3bF.fLuKCzPWcIR0W.cTJ1lx5E6.3cSpC6tu3xvrKT 3wtlgnidfUeFjY_B40NbWu7gSyUVmUYqSZcI53AkvjJhGr8UVgQZeZQz3_dF G3IKjw1ZbJO_m6WGSUENcg71vx7nFW7LeSncqg_yPEKXpNHTZoqUy4vNPlJB .edCKetnFzhsNi.fpSYxgKwiY4zAB7lAAnGVv_LTSiuNHY8Gq4_BjbG7TUVh 1jEbBhPSdv6h2Xn2d_a7_wluSypmlmmijiwoAyjJIzXIQRxOGyAQUpLNt3ic kidbPtvVlp9C5BxHHlSC4l_TaH2audAFdA61K6KkLpVzKbs7aDlwAG_4JY.P eHDCSLcxciwXAbIVMDhDjZzvgAxY9jnt1sY71l7n7d1dl6ufMrE_o0_qDe1j gk.030j9Eoh1E1ERfEHIOI85Czc2grhxp1jZP1GPEcz_HcFqrSn_eKAq.2ab BfXWVSKD5C53t6ibYYh55uQciKnQjLdW1DfMxvcOadU56IUCpJhN_X3tzBgB Vq7jtWkEC6p8UoTEaiFTL_bWrElyr4fvGLTgBOPVxMvn1t.ZmSAZquSUnn4E qSyewFfWh_6vi30xuvWs7yvkhvzMwEH_vHf6qrBNx2h8JRqQ
X-Originating-IP: [211.154.152.136]
Authentication-Results: mta1468.mail.mud.yahoo.com from=etorq.net; domainkeys=neutral (no sig); from=etorq.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO mail.giantsea.com) (211.154.152.136) by mta1468.mail.mud.yahoo.com with SMTP; Mon, 08 Oct 2012 13:09:44 -0700
Received: from User ([82.128.3.119]) (envelope-sender <mr_kimwong@etorq.net>) by 211.154.152.136 with ESMTP for <pondillobelle@aol.com>; Tue, 09 Oct 2012 01:25:27 +0800
Reply-To: <mr_kimwong@yahoo.co.jp>
From: “Mr Kim Wong”<mr_kimwong@etorq.net>
Subject: Your assistant please
Date: Mon, 8 Oct 2012 18:24:46 +0100

FROM: Mr Kim Wong mr_kimwong@etorq.net Reply-address: mr_kimwong@yahoo.co.jp SCAMMERS THIRD EMAIL-ADDRESS: pondillobelle@aol.com

Why would anyone need three fake addresses and fake IP’s just to send an email? Only scammers go this far to confuse and hide their identities because they’re cowards who lie, cheat and steal 🙂

 
Leave a comment

Posted by on 12/07/2012 in Lottery Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

A list of three scam emails

I’ve compiled a list of THREE scams that were sent to me back in September 2012 and they kept getting pushed down in my spam box. i’ve looked up each of these scams and they ip’s and/or email-addresses have been either blacklisted, reported, or both. they are 100% scams!

______________________________________________

1) Mystery / Secret Shopper – JOB SCAM

EMAIL: Work as Evaluation shopper and earn $500 weekly reply if interested.

HEADER: 

Return-Path: <rbud743@yahoo.com>
X-YahooFilteredBulk: 74.208.4.194
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: AKqJ9t4WLDuLDZ8EZZ2u3Vhgs2RNEh4aXjZ7kSSWXBbVAv27 JuBiH_aCg6MvjBaLtMO.0JhXLKpM8ii1YEm8h.bFObLns4nMQlhEuIaOypzf YAFLEAhgf2YH3_pDJA6RPA1iH4GD82FsJ1hxzx8FwLfw9flBPA_QVArVHg_h m.nDYlX6pFBPN1kN5BXyTwsrpS8DrWxf5h9pc5u0ORutRWVmmWxtyTqongzC AZxsQhOSTAeUSgJlrWrj13kGVmyz5egnbmw71fMxby9dLjhQZ_I.65L5aVED uaj9eUARz5uXxA9Nr98SIEpyTsr7qpzboLTSAxZHGXwTxG6WaoqigWyqxPNB 8tkNBi2aZZc82kCiAZ6y4bIJIsGVQv2KbAzEQihTxZ0q8zpkpD1LLH1PGih5 a82YTC.4HsC2HXhwZeUKptTF2_JEKlnhXNn9tegHb3_vx9h2hx5nH9JlZDF9 GYjXQ4BHx8UFQ8IpAAB3lKXN1Rl1l82cHtG2x9XSWas3T71G1EnTjIW.UnJL 8Wy.OICrembxbDZik.cv_yj_7APLx4POhhoSXnmOkgg1zWZfdqVRhjOw.Pk3 qruW_GaAce8POox4vtMRUHwd5ec1p922vVYgZmceTMr2KgfAT.ALodh_crPy wYcjUG_wpNMK3q5_QGyhnzcLNz.w7boX6vI9rqYnVC93nBK6jicjPHfE_p09 EQN9gYTlrmX_OkOhZtosYI9CjI4d7awR.RjWmpFiU7w7gZSVuSbNvej7_dPA QR3_BaQXgMfbD9f9Bcd4BBm6Ncwo3hQI8pYMJMaJxjZTwQGiLQSHOAWgk1bE 3PmyPCxH2BUw6B4yjRwPf32ee.qd3yU3c9T60ZaYsOKq8H2oC34IphIKeX9c Zp_CGasShwklc4Bc6J1V4dNHSpE91ybvbKiK_QCETua1O.Jnn_BmFO.X0tBW qvW8MSKLQI3dxIVuxVD6wQqjdrlbRjBOsZTXa0ZNYeWBxEkbDTAoHvqm1GkO qOC1bLUtx2b71g3GZpPxGQb_WUnhoQRtBAtFRiB7VJj.vQ6jFEI6uxk9DeQm iEjd7zK4s4139xO7eIBpSSEy2oaUzqsEtTavLSA6KHgB87t5IQtPA6aCdsE1 3iuDjHCuQ_Tx2tw0UAgnKWm13UKA6QV84.cN
X-Originating-IP: [74.208.4.194]
Authentication-Results: mta1236.mail.bf1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mout.perfora.net) (74.208.4.194) by mta1236.mail.bf1.yahoo.com with SMTP; Thu, 27 Sep 2012 05:37:30 -0700
Received: from icpu2633.perfora.net (infong656.lxa.perfora.net [74.208.16.162]) by mrelay.perfora.net (node=mrus1) with ESMTP (Nemesis) id 0MNJ6P-1TO6Ag00Cn-006tJO; Thu, 27 Sep 2012 08:37:29 -0400
Received: from 64.62.210.227 (IP may be forged by CGI script) by icpu2633.perfora.net with HTTP id 3pIPGX-1TlNhr3xrB-00o06f; Thu, 27 Sep 2012 08:37:26 -0400
X-Sender-Info: <154550926@icpu2633.perfora.net>
Date: Thu, 27 Sep 2012 08:37:26 -0400
Message-Id: <3pIPGX-1TlNhr3xrB-00o06f@icpu2633.perfora.net>
Subject: Earn $500 as an Evaluation shopper in your area.
From: Secret shopper <rbud743@yahoo.com>
Reply-To: bunniebug@gmail.com
Content-Transfer-Encoding: 8bit
X-Provags-ID: V02:K0:q7XGMi78NyFU2vB+AV5/lUFl9H98ItYD9tLebyHhAA9 D0m97d8zgZKfxlxuq9UDrMJegI60FkR/i9yiR6s+ClfFhTdW82 rAyxkW0MOpaOrk4OGp145YpcbEzlvc2VFiYRQ/rs6aB2qcOPN3 NWsuAhg3PAiNdEwA6dwxoRHieSsNCys0MCLKU+1KwF9t3ityOb +0h6hFjTSFQcDRe/zyg06xnSxE3maK6IsAX2Nd1M4qbEFSyI9i 5Fun6VBXSQ6J+ZAUIsFI5SJ89/OaBqUYBkxv20+wKWBINPrD9L DG+HtYDgwRcz0KeXzqNl6gn4xUUQtJvPCBgosLOpKvKwgM7+xm b8vfu2v3JIk8MzEz+GiIGqRcrSOI0MNEZ0pg3V0jcmYI6z5qOg uRKeU9ng+gFFtzlnhdhW3SfwBG8kAe5MbgLNhihFFOcitw1pvf 2JJM8

Secret shopper rbud743@yahoo.com – Reply-address: bunniebug@gmail.com

______________________________________________

2) INHERITANCE SCAM – NIGERIAN SCAMMER

FROM: “BARRISTER IAIN WRIGHT” <barriainwrightchambers@yahoo.es>

EMAIL: A “Next of kin” file was attached to the email I received in my spam-filter.

HEADER:

Return-Path: <barriainwrightchambers@yahoo.es>
X-YahooFilteredBulk: 98.138.91.65
Received-SPF: none (domain of yahoo.es does not designate permitted sender hosts)
X-YMailISG: M2_fjBkWLDtzFm2rFbGuKofV838RG80_qXL6ZuDED.RFpUhN QzoD5j712gVhOoEJsZ_uRf.2zvCTUEDGuBwy7ek.Z_cs1.Ow_uuIMz1W0KW5 jz3j8cAvY4pVwyF92hL8sb0bk5etdgQljeePH7D7H0t4.QwwJ0D3rZLAmRtX EA.nsroRjdhC77B3fJekjgoYlRDbjEQ04x121ZVEfEWe.3fW5SyxaTfR4KgF kzRSvkuZWiHMl.95_MNF52w6FlXZe0s57mnJ39QygzPNuwxz8r9ltiLrDxzW CEcFpO9AFuqw8nCW_R1XtK6G1b6huW8ePJC.leD0fnho.XtvHjoDVo_y2ZfO WqNr4Oio3P19odWSC_sGQEZrl0EM.EkuUagsnXV7xRvQu0jtqShpW31_Z.tT Js6CVCXWfKboozjD9cQ3Gw5bIsAuPseovHYlMJDKjcPbBvIYONMkwcJm7g2s 0kCNA.NZ8XAplJwzsrfD6kozvvEtlBUiYF3WgpuwanpG5wdit6Ji_PU9PfOC K1Yz9q3yP.kaa5agusvK9DslBIL2BI1sE8wAmfxOndoXnT_OBg1A89tKyHvi 1NU.rgxEXocZHUvCmOi6finC8JS_HOXotztzI3k1UAF3p7LtuGi1rlULN_t9 ZlqKoyi9DKSLjJr7mmT2JNYk3Dg.8I.Ufm1UafFyn.vMw8Leij6Hz2bF2v4Z iDKSJttG_KsvKA8BBFrV4D29WitXnXW952k5J4ki0t2MJGF_52sryyhf4Xbc V5VMk8lFNV3RnVxbzFZ4F.Giex.EZykeqvgYWpD19NU_Aa9Bl_Gj6jfDvnBA VxjF4ZQdNb8ILQC2s7WQ5xxYqTIRJSny3nDVLHk0CsksYsoQa1ZsyQcnzmlD .BbVo322yE5eFDLysimD_pbd9GGtPqvHK0oFnA87dDQ8m6EwoczOZyq5MLZh 6ak6I15eZdeXgBCGjDot4PbER8YPaczjKa1gS35fSifWN6mdVTfrENbi1KI3 trybU9EqYKxs.Fpi7cVpEvg3_7dDpGnTc4sHhBRgEdf1RHq4SAIt4iYl59iZ dPLvX48BTVkdm_jRpF_bSsX18FONqMeNma.2vF7zQyPEos7t9v.zV4BCFg5K D8KR4VuGmgZUv0rs9LTQMcmeGz5EdaudBaAQNTIdiFhnYQt4ueJdCwRRX.iJ 4itjVlPHvxCwCSOCk2pTW.fWLQ6tzFDa0wLErfkvjqPzSZQlvl5P_dKFrKkU Qw2FXmcwWByns0lIRh4e
X-Originating-IP: [98.138.91.65]
Authentication-Results: mta1268.mail.ac4.yahoo.com from=yahoo.es; domainkeys=neutral (no sig); from=yahoo.es; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm8-vm1.bullet.mail.ne1.yahoo.com) (98.138.91.65) by mta1268.mail.ac4.yahoo.com with SMTP; Thu, 27 Sep 2012 04:58:00 -0700
Received: from [98.138.90.50] by nm8.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 11:57:57 -0000
Received: from [98.138.226.126] by tm3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 11:57:57 -0000
Received: from [127.0.0.1] by smtp205.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 11:57:57 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.es; s=s1024; t=1348747077; bh=hGsZAt5nOQ2q54GDVUA2RwhZC83Cp9+/EC4wFdxVyYY=; h=X-Yahoo-Newman-Id:Message-ID:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:Received:Reply-To:From:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=MoAzd3e63PqKFngqb3VCbC/Uo5orULDk1RIM6/2B2RYLBM6h8uptxC+sRFQJ5iLRKi39kay5dKraN2XrKP9u9wtXAlDdkFnIeciEVnV6i7gEZEbsYRdtEOasJq/ybFCUCe0XpeR66OnUwYqE/p86ZL91DAWHBLrkFvdalJQMAxk=
X-Yahoo-Newman-Id: 947141.79026.bm@smtp205.mail.ne1.yahoo.com
Message-ID: <947141.79026.bm@smtp205.mail.ne1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: rcoOjawVM1mWxeqldCK7BSKWgrYcBs1inBlj1z5n9ltVGqo lXNdgbkjin6Ym0hriCxY8RhKC9z3UHynFaVcypefuZJk2AfXmrAilKSE4vb5 KeOc2ioP7iy1rfjaZZVzV.cycy5VbHL7AbItmNPTqrNiyjcb6iaEiRVHxvik NfO9dnBB94DVyHbVr29ZagMutfYnQg5KSy5ewpvMP4MtcfN2sKjatIfTNS4D L4jPTAEBbDvd5mh_QaFWkJE3.eudqrsdxkVy.YLapxZkLJyfub4CI6iGV9HD D4elT72CmoNh.KfYjif0wZS8DIXtc0oDVVaNR_ovjQW27WIB3VWtwpk00VZ1 0wK_SM7gHK.xJVFiu3aG.hYTYe8.gByUW0F44tzkpBVsFkSYXI9zlI5KUuy_ pkATHZ1qonT9DuCxgQgGPlMDlUztCamZhoye_.Bt74oBCHBS2vEhHI0yvsVg X93Q9Qaw5R_gx8iEan8y1B6IR9ErqB9iC43JStRYaXZmWkR0-
X-Yahoo-SMTP: bFYQ04.swBA5PmeNAjXtnC8HS1fNQYaHrFuwM8HILFjy
Received: from User (barriainwrightchambers@41.58.49.104 with login) by smtp205.mail.ne1.yahoo.com with SMTP; 27 Sep 2012 04:57:57 -0700 PDT
Reply-To: <iainwrightchambers@yahoo.es>
From: “BARRISTER IAIN WRIGHT”<barriainwrightchambers@yahoo.es>
Subject: WITHOUT PREJUDICE..PLEASE READ MY ATTACHED LETTER AND REPLY

REPLY ADDRESS: iainwrightchambers@yahoo.es IP ADDRESS: 41.58.49.104 LOCATION: NIGERIA

______________________________________________

3) BENEFICIARY – 419 SCAM

EMAIL: Hello, 
I am Mr. David “Dave” Darrah the Assistant Director Inspection Unit/United Nations Inspection Agent in Hartsfield Atlanta International Airport Georgia USA. During my recent withheld package routine check at the Airport Storage Vault, I discovered an abandoned shipment from a Diplomat from London and when scanned it revealed an undisclosed sum of money in a metal trunk box. The consignment was abandoned because the Contents of the consignment was not properly declared by the consignee as “MONEY” rather it was declared as personal effect to avoid interrogation and also the inability of the diplomat to pay for the United States Non Inspection Charges which is $3,700USD. On my assumption, the box will contain about $2.5 Million to $3 Million and the consignment is still left in our Storage House here at the Hartsfield Atlanta International Airport Georgia till date. The details of the consignment including your name, your email address and the official document from the United Nations office in Geneva are tagged on the Metal Trunk box. 

However, to enable me confirm if you are the actual recipient of this consignment as the Assistant director of the Inspection Unit, I will advise you provide your current Phone Number and Full Address, to enable me cross check if it corresponds with the address on the official documents including the name of nearest Airport around your city. Please note that this consignment is supposed to have been returned to the United States Treasury Department as unclaimed delivery due to the delays in concluding the clearance processes so as a result of this, I will not be able to receive your details on my official email account. So in order words to enable me cross check your details, I will advise you send the required details to my private email address which is ( davidddarrah@zing.vn ) for quick processing and response. Once I confirm you as the actual recipient of the trunk box, I can get everything concluded within 3-6 hours upon your acceptance and proceed to your address for delivery. 
Lastly, be informed that the reason I have taken it upon myself to contact you personally about this abandoned consignment is because I want us to transact this business and share the money 70% for you and 30% for me since the consignment has not yet been returned to the United States Treasury Department after being abandoned by the diplomat so immediately the confirmation is made, I will go ahead and pay for the United States Non Inspection Fee of $3,700 dollars and arrange for the box to be delivered to your doorstep Or I can bring it by myself to avoid any more trouble but you have to assure me of my 30% share. 

Mr. David “Dave” Darrah 
Assistance Inspection Director 
Hartsfield Atlanta International Airport 
574 Airport South Pkwy 
Atlanta, GA 30349-8642

HEADER:

Return-Path: <pop@allencountyohio.com>
X-YahooFilteredBulk: 76.2.207.6
Received-SPF: none (domain of allencountyohio.com does not designate permitted sender hosts)
X-YMailISG: EUAkKlQWLDtsLHISUQeKpcEKYRzqJ7wJNr_C7p9ML278m16_ Za6J9Pq_buEhDSzzga9w7u3z1iiVkG7gWd3.2GgTG8oqtDYIY8JzWTuAyM.W WLRMqYmljQmJWsOxzbD8S_fg8qHSwLKsMrgjFNK__hHCWl_OkV2lCszsEvIo k27rgsD051sETLW6NnPpM5Y0gQvMg0ZtrVWFgeC.9GTGxpsgbdMFgmTRfqmM pheXss97gqtPwEg8Visf4uC1SekpoOiJm3EwqEomx9xhSJT79hjaDWhgzH6_ COw4PblMM0YnLd9ye88K602PP4Itc87alAKLw9aAh2N61EqrpnDdzqGvP0PZ HfeXg75.3G2CXJAiHD0FHo9JgFp7aG9KyBmrFWRU5648VTW3mDKWe2C25sU4 98uMND3e3IyyDdn1_MHnUp537ptCYyHU6paAoF.omX_bckCR1_VtbfFifDzv _3ILiunWcszXX50ipE1PPMoucSObhqP4Gc2UPSwgz1IBcjQ.YxxbHwcsCz6h vUw3MG57kjqDaJWcy7ip0UHvAnkL64hsG8UKNWHQFtXI3hKpZmc7pOZN42Ai SiJass6CfuEA_t0BXQjGsOrKMoSy.baT7g5EOOpiLtalKToSBZ2KQUBykov1 ODt408PwIyv_UTtB9Vn44XSBJRdE1pVeBwI70kTBC7XD7iU5RfQEau1BG5.8 .QV9vamuNCWep66Ro4xk67qxP6uFL5Q7AbQkujfaZt48c9Dlqae4ZQYuBY58 q4tchcGcICVFhqNUkkDxvwp0xBFxpRplgsJNrg4cKiYTWNQjtcDifMnu.4tE ZMaxugmgEuDm_fMvwqdzJ4sSf29PXJGtI5UserjFwSqYNUhP.PdnaRPwmsvj MeNyxMnzF79dlwPy5dvtSHHyshVxes0Kav8q7gwt8IvbjDFCPrQs2yYehH0W 63ywC7.8X7qlHDgqBcijwuALY9.aI79s77ktX.3z2ITl4YjnXnLRnar5.uhg FL68BNGEBL889saAu6hE0kDLmVkjZ8.COuqfoJc2bkgkT_..DnxIummB1vyv _xT9agrwPBPnUSAlr4CuMCm0hNl30RlWKczWH5sSV1o72hzr5Y6aQY.ZV2Gi .miiKTWsDm1oPmRIR1XtGbCqdrWipNC0MDw4U_NDKhgsqe_vSZC.4xB0.FXJ AmJK6BheyqKbdPqbEmwIQJyDDTBZQlC1QR_m0qgumrsxGuM86obaeiFMLugP M0KnER8ZIyhxrn0ZYCLRCkBF7JcP4l1ZQ.x9pI58fA8YQXHL2.e.Uaqv45PB nW1q.c60yFPROZVrD0jAphIl74s0LojMk0tLhgnvWODWpMVigRHIQXPjwC3N CkpHlCjBQGVFLSppGYFJdqcLxysTIF0ZfcTNB6jwLcwa7EoynkQahjiudRpm _rJngrLoamoCJcV53j5adQ.GLSpkcTsSNjZ6fBDmjeEnr5sklf7302qx3lGz m6UkBOA_.jgAksqlCvX3yDdeNH0_gwNaP.eqIvVP3pOyD7d6glmnjQVHKsr_ ARaX9Yl5LxZKu9MMZFP7uGcbf7L9Ei_RlRJ6UU2F5Q–
X-Originating-IP: [76.2.207.6]
Authentication-Results: mta1089.mail.ac4.yahoo.com from=allencountyohio.com; domainkeys=neutral (no sig); from=allencountyohio.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.allencountyohio.com) (76.2.207.6) by mta1089.mail.ac4.yahoo.com with SMTP; Thu, 27 Sep 2012 01:35:25 -0700
Received: from localhost (localhost [127.0.0.1]) by mail.allencountyohio.com (Postfix) with ESMTP id 2D621122C8C; Mon, 24 Sep 2012 13:25:46 -0400 (EDT)
X-Virus-Scanned: amavisd-new at allencountyohio.com
Received: from mail.allencountyohio.com ([127.0.0.1]) by localhost (mail.allencountyohio.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J5DNgyAg-5Go; Mon, 24 Sep 2012 13:25:45 -0400 (EDT)
Received: from mail.allencountyohio.com (mail.allencountyohio.com [76.2.207.6]) by mail.allencountyohio.com (Postfix) with ESMTP id 8E249122A27; Mon, 24 Sep 2012 13:25:35 -0400 (EDT)
From: “Mr. David Dave Darrah” <pop@allencountyohio.com>
Reply-To: “Mr. David Dave Darrah” <davidddarrah@zing.vn>
Message-ID: <683849525.104969.1348507535471.JavaMail.root@allencountyohio.com>
Subject: Await your Urgent Responds !!!!
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: [64.250.124.220]
X-Mailer: Zimbra 7.2.0_GA_2669 (ZimbraWebClient – FF3.0 (Win)/7.2.0_GA_2669)

Mr. David Dave Darrah – davidddarrah@zing.vn – pop@allencountyohio.com – 64.250.124.220 – 76.2.207.6 – 

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: