RSS

Tag Archives: South Africa

“PGFA | irene elvis”

INHERITANCE SCAM / CHARITY SCAM – NIGERIAN 419 SCAMMER

fake-charity-scams

NOTE: The first part of the email is probably a automatic email sent by a website and the scammer used it to send the below part of the email.

Hello,
I am sending you this invitation to join “The Pakistan Game Fish Association | PGFA”, PGFA is a non-profit organization committed to the conservation of Game Fish in Pakistan and the promotion of responsible, ethical and safe angling (Sport Fishing) practices through dissemination of rules, information and fishing records, its a group of like-minded anglers who have come together to build awareness on ethical standards of angling. Their charter includes a special focus on a catch and release culture which shall ultimately help in the protection of marine ecosystems, and Pakistan’s natural heritage.
Each of us is capable of making choices, having an opinion, creating a positive outcome and being a proactive member of the Angling Community of Pakistan.
Lead by example “Join PGFA” its FREE and encourage others to participate and together we can ensure that the Arabian Sea we have been entrusted with continues to teem with life.
Click Here to Join the Big Catch Race
Custom message from “Sender” to you:
————————————————————————
Sister irene

surprise since I don’t know or met with you before. First I must introduce myself
I am Mrs. Mercy.D.Jordan,a citizen of South Africa, I am 45 years old, I am suffering from a long time cancer of the breast.from all indication my condition is really deteriorating, and my doctors have courageously advised me that I may not live beyond the next Six months; this is because the cancer stage has reached a critical stage.

I am married to Late Eng.D.Jordan, a Diamond merchant here in Abidjan before his death on the 19th November 2008. We were married for years without a child. Before the death of my late husband,he deposited the sum of (6.300.000) Six million three hundred United State dollars in one of the Finance Security House here in Abidjan.

I want a church, organization or good person that will use this funds to help the
orphans, widows and the less privileges ones that need financial assistance. Using part of this money to provide facilities for God’s work, l took this decision because I don’t have any child that will inherit this money and my husband relatives are not worthy to inherit this money, it had been their wish to see my husband dead in order that they might inherit his wealth since we have no child. This is why I am taking this decision, to donate this fund to a church.

I don’t need any telephone communication in this regard because of my health hence the presence of my husband’s relatives are around me always.

I don’t want them to know about this development and l know that With God all things are possible.As soon as I receive your reply I shall give you the contact of the Finance Security House,I will also issue a letter of authorization to the Security House that will prove you the present beneficiary of this money. I also want you to always remember me in prayer. Any delay in your reply will give me room in sourcing for another good person, church, organization for this same purpose. Please assure me that you will act accordingly as I Stated herein Hoping to receive your response immediately,

Your Beloved one.
Sister irene elvis
————————————————————————
Thank you for your time,
Team PGFA

Return-Path: <ireneelvis805@yahoo.com>
X-YahooFilteredBulk: 76.12.210.180
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: WuOtpS8WLDuGhOONoV91LCzRasn22tcFONvHO8gT4O6CD4h8 Iiu3nug8Ssjsw91MxmAiXC5k8IxN0SRuEOhiCETJsIX14_K._BK.xuJdzOgj x.ekw14u.6L5qxrk7S66lXhpluVCJNeujOgANgwQNKWB6y4FuNzKCofVMe2R eb4jlwtFpxRDbgiwQacI2Ff9x2xP8QGZFfKUjUAz2K4wldThAjQj4D8GZMl. _StWnbKQhAeexVrAKsbfgYsGsVt2WFJWOYU3voageApt4WWsfJrEhQUlm3YS 0Z4FelR74hIIMvg0aYIqn1ngmQCHj8uSK3.Skb8mku3kCJ7S03YXyJu4bU6E nURibPoh7pzUdYgLv9OjTx360s1.sIqp4BHaIqU0iGVVmtBOpLRv4XeKfmhc egv20jeps4rF0wVmT4xvvf82kKpeMkmqHrePK7_wdM0BINTqC3tZHBMRoZ_B KnIIlfv.z5PHmXJqr9XeYwHFtVPEXhLOaiVg0H.nIxGOYdK1Zl3_ViOD5YOH z7crqHhuXPC.583ABupIODm3Mg.u2r13bBwlxmtE3G6Mz1azDEV1dGdQCWS9 TBWaL6QkMincQcLB1Xxtgc0ySfApGgvX_m3nOWyI.NG_p4.r58G3OZWv1olp SQHfwcph_8gT7_3t7S0XxsXBAKmQN8_wmmcs5xD.kSj.Lg0ryZwHWnKfu5Z1 gupy0.VBu5lR8HVlTKy3sT4sBPX4fnerlLIsH38n4UKLLgPTbo2HKXUcTbaA LYoKS8KySOWboX1Wiw8jhhmGwX1XQ.dQFiSBYJztod_mJFv4excQ_e.k0v8i j68glcqpMaL1Mu40eNOyXySpYqj3Rlu.lKlDeVjUSgAhPuHa0vO3AO886uG5 8lfcWzLmIRq3VOpvlu_KVAtsRrn3EZLmolAhhB9Wlk.JHkguVjgae1BOHJVd k5T9v4dXzXk2eZj4K3WhEoW0JYhsx.wHJK5pbNxLvzx9tfFQtdVFITs4NAin kn8g5dgMUbuLu9oTRbEGjsKZ6oMZRJdeWCFGnanfAK4FhcjlC.oBslb4M130 8hq9.3g4jzEsajwmWxMmxtWQduJWvJ54DKpzPLa10c8ayih1puCq7LxA8Rh4 MGSfNVJD83M__sfApw_KqEE6p9X1OiXObJdrI2qVVfBVYOiZbWU.UfHCsQ3U oWGvqZkgUQ2i9.6DKDGPu6jaj1qqeDcDy0C0GC26F9bSyc7QeZ8BeWYfOoZM pqh5TVr9n2C5P5kkIRBSg60jF4ye9mA8xYSTTpfc8qNIUX4cPNrLeFDykKay Be.a8R_XFpoP8MXhWByBdZOG7_dBfD0purUDkR3v6MXKrYPqUTUpw2E_ovDG Em_4F9krRziyFRrHdO5AG2OXsnnWrgXjxasu8JZA_XxboXGUVnc.MpWGEd5i xNt5LDMMza2HxT3ENlfM6OMemJMC
X-Originating-IP: [76.12.210.180]
Authentication-Results: mta1108.mail.gq1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO www346.safesecureweb.com) (76.12.210.180) by mta1108.mail.gq1.yahoo.com with SMTP; Thu, 10 Jan 2013 11:16:16 -0800
Received: from mail pickup service by www346.safesecureweb.com with Microsoft SMTPSVC; Wed, 9 Jan 2013 11:00:13 -0500
From: “PGFA | irene elvis” <ireneelvis805@yahoo.com>
To: “Team PGFA” <info@pgfa.org>
Subject: The Pakistan Game Fish Association | PGFA
Date: Wed, 9 Jan 2013 11:00:12 -0500
Content-Type: multipart/alternative; boundary=”—-=_NextPart_000_04C4_01CDEE58.7F61A1D0″
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913
Message-ID: <NORTHCAROLINATGpaoG00000162@www346.safesecureweb.com>

PGFA irene elvis ireneelvis805@yahoo.com RETURN-PATH: ireneelvis805@yahoo.com REPLY-ADDRESS: info@pgfa.org

RECEIVED IP: 76.12.210.180 ORIGINATING IP: 76.12.210.180

 

Tags: , , , , , , , , ,

“You have won E-mail Lottery Award”

LOTTERY SCAM – ADVANCE FEE FRAUD

SUBJECT: Yahoo Sponsored Clicks Prize Award of (USD$3.000, 000.00)

EMAIL: TWO ATTACHED FILES WERE SENT TO MY SPAM FILTER TITLED “YOU EMAIL ID EMERGES AMONG LOTTO WINNER.PDF”

HEADER:

Return-Path: <webluck108@att.net>
X-YahooFilteredBulk: 98.138.91.240
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: BYYWwSEWLDvVDPlx7_O.t00G8fZEf2AgosY1.04IadWfVEN3 FY8XyZqanV_rJjfssKebo7YSs6IiWjYBYmlDRAAV.ZbHcotAIo92YR0pqKcn z_6JWTa.z6Bt5db5R962HU6Tsc2BwCtWmlNZsqEfEfHPzQCX6n6wgi8DHCKR VikXcZ2MH58wnaZI7v6P0xSYEF5kyshZ2KGdGrNhDHKMhMoodmACb8ZOmbcd b1j1jQuOTFqH5pXsCA69ZuYHsBOOBd9dh7tgAc8BrgIQx9HdFlqOc11gu7KI aBSdy2WnNdTVFR1lHE2.IQoZ3enZwLqSpUye5VM4SWVJ3aURuYrjnVsDgqLo 4HVItce_RnxlXXbCZ.cY8yggM0OpoM5f9G.g1C_qvJhr0GSjOJdtVhiMyN_I tPsbtznOUkAJ.psAC5j_iEk85n7Q9Xm6ZZWe5s4rMsq0ufy7mUxXdF0dLpg2 ZFByHRj8mPt3Vec4b_UUOYbKJY2FpRDds_SrLtvHTl7H0sWOpz4quy8rEXKq y.cj23VFEksCIjHSlVX9b56tyNIpA_EM6HAAagEUNhLH1E644Pf68OkCFPHu Pec91ML7RhpZtqbFXbmrLJionVZG_QcjgT0Y9u1Tb8iCO7fMrAKvFoxWtnss B7UWOnmXepMZPY8HFm5.la1uXWha90JVeMtsTxfjm.KQG8qbcAGPBEuBT2JZ 5L6WybthZqsZ6f9n3P0aPzuiHJjsN4hEfmyGVRuLWSmZWsf_3EqXtwh9QS5L 8koJbJnBr_zdkuGjzXfjgoQh7km2Hqoz3YvG.qsKm7tk20TUIGMFFoRmhIb8 i5Riqb5D9LCYOcPBiXIOUugCa5Ly1msL0d.Zsv3keaLwVvxuj9Nn44l.Jdag rVx9vmbuviXXdPTUdQATx51BzSNt3JEz0hizn70.7EzIj2M6XR88w89dmWD. nsf4GRgbC23sHqbwWQsrbfzhRUuREwwKAibibEsaCfTiukXMHBNAcjevCnxq RC7pm4xnBRFDKyMrY.d1t7W_4xCXMZ2WgeihT3EoARvZALCGkPRkSWIYGR1v awpRnHP8.XpnrMsNJBDH8ja9WPFSeUBjT3HBEhBCl68EcQ7mhskm_.uDmFnA eNJ7uQjUCB5NppRwpxtaHKo01f5_RZQfnoEKUvjZiFOMe0VIwPskNfiAMIv1 8WtWgn_LptsBLlifNf8wuHdahIj1EPMbI.1x8ZjqibKXLmQvayAhKHMnYPgs J_p6loDiW_wYO4WG.YOdsJJ3UTXRFVHxQiSvBEkyd9OhnNMsDsplQV15sQXF tgETklToNNs_MdCoGckm8caL5SQgz7MCzbaL3e_vFrlMeLDb_r007TS.ZoJG 4YQeF1slIrk-
X-Originating-IP: [98.138.91.240]
Authentication-Results: mta1097.mail.bf1.yahoo.com from=gmail.com; domainkeys=fail (bad syntax); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm18-vm5.bullet.mail.ne1.yahoo.com) (98.138.91.240) by mta1097.mail.bf1.yahoo.com with SMTP; Tue, 18 Dec 2012 08:15:12 -0800
Received: from [98.138.226.177] by nm18.bullet.mail.ne1.yahoo.com with NNFMP; 18 Dec 2012 16:15:10 -0000
Received: from [98.139.44.82] by tm12.bullet.mail.ne1.yahoo.com with NNFMP; 18 Dec 2012 16:15:09 -0000
Received: from [127.0.0.1] by omp1019.access.mail.sp2.yahoo.com with NNFMP; 18 Dec 2012 16:15:08 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 959623.86812.bm@omp1019.access.mail.sp2.yahoo.com
Received: (qmail 4657 invoked by uid 60001); 18 Dec 2012 16:15:07 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1355847307; bh=wQ9ZWqac9qtd81HdoYg2hT8joQYOFocej3+Sa46yEq4=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=yGv2mE+UB/fHl6fhGI3qDjlyo04Ew7Gj+36fxK5gbV957biDx+XQRTRG4nDCkEw6JIJ9SbnKzDvYpgjuzfiMV31mf3Rn/DgrdanxSlGhEDAs99K3ZvSzHzoBBG3sMgtvDMLgYkc1gCP/w1IcN+BwTIS0pjU3Pgg0J+wuNzgHl4o=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=pBv9B8kafcRU0TzjfKhizQGboVaqw3Cj+uFNvTZUhjzNGa4aEZcqVHZv7LZxXupEnNKqZr2ve9tia8rx3gRzBLkXQqVcKK/ldPxEND3JoyHETfmhiiW5s5FSa2SZY2xOIs5iEDisFtAHGZ/qxXLRbs55gu+M1zxiqKmVKXt8xiM=;
X-YMail-OSG: w49tbeoVM1lLl3b39j4ClrURy3s3BXLxvn3bGn.s0Dgq_tB VMcYO07QN0rZQ3QmyAHhh.K_VRK8oXSMVIjAan3TtY9vpPyN.s60.0ITPtw5 6b8yJJ2jIkydi.dYzdVRvt6DhjdxebIr7dVRfx5p7VQLLlIzLExegwG6MFR_ gzIFgQCxiqyP4ClrOUOgmjfDXE.6xhFjaa55RhJzjBkQ_dfEowsOlHt9E0hw O_BWXie7qgcmizmuGVmvvU5pjJhY5._bSV4wm_FdkYsnQ4lG6_vNJRuiIwoo tSB.T0xnL0FpoTop6sDbHCi2WQZmlFHMAWCtJaM4iFAcNOSQtqF620kSh7Bi jmxUXwxATmQQylgEM7syH2TLto1wMLuITbpRZnYmJ0OwzEBwu6BA9v64lI1p _r63CvfLDZIn7AaMm1z.WP6r222H4JuQG4H2ofmOKro7.pwmix2ihhPvKdR. w_falIzKGSJ2Iz175gsOfDHwXg584fSd7ngw9R.FJGsTHQGUl0KQ_f1olaud mQiStCGjm
Received: from [206.190.57.144] by web184306.mail.ne1.yahoo.com via HTTP; Tue, 18 Dec 2012 08:15:07 PST
X-Mailer: YahooMailRC/718 YahooMailWebService/0.8.129.483
Message-ID: <1355847307.98926.YahooMailRC@web184306.mail.ne1.yahoo.com>
Date: Tue, 18 Dec 2012 08:15:07 -0800 (PST)
From: You have won E-mail Lottery Award <saclaimsagent26@gmail.com>
Reply-To: You have won E-mail Lottery Award <lottwebwinn@hotmail.co.za>
Subject: Yahoo Sponsored Clicks Prize Award of (USD$3.000, 000.00)

FROM: You have won E-mail Lottery Award saclaimsagent26@gmail.com REPLY-ADDRESS: lottwebwinn@hotmail.co.za RETURN-PATH: webluck108@att.net

RECEIVED-IP: 206.190.57.144 X-ORIGINATING-IP: 98.138.91.240

 
Leave a comment

Posted by on 12/19/2012 in Lottery Scam

 

Tags: , , , , , , ,

“mrs.catherinemarythomas”

CHARITY SCAM – NIGERIAN 419 SCAMMER

UPDATE: Below the first email and header is another email and header from the same scammer.

image_animated_email

SUBJECT: Dearest in christ

EMAIL: Dearest in christ

God will grant you the willingness and interest to digest this humble narrations though it might be so surprise and strange to believe my story but I knew by the reason of the almighty you will humbly understood and accept to proceed with my proposal though we have not met or seen each other before. I am Mrs. Mary a widow to Mr. Thomas who was a competent business man here in Ouagadougou Burkina-Faso, we were married for many years without any child till his death in October 2005 after a brief illness. Due to the promise which I revered to him on the alter at the day of our church wedding I decided not to remarry or get a child outside my matrimonial home which is against the holy bible.
My happiness is that my late husband lived a life of a true & worthy Christian and he has this plan before his death which he pleaded with me to appropriate it to accomplishment. He took this decision with me to use this fund in building an orphanage in his name that will accommodate thousands of children, and also to use part of this fund in helping the less fortunate and to spread the gospel of the lord to the remote places of the world. He made this deposit of the sum of 5.9 Million dollars in a Finance Security Company here in Ouagadougou Burkina-Faso. Recently, my Doctor told me that I would not last for the next 3 weeks due to cancer & stroke illness.
Having known my condition I decided to seek for a competent and reliable individual, organization, company, NGOs or churches to entrust this fund to utilize this fund the way I narrated above as my late husband desired. The Bible made us to understand that «Blessed is the hand that gives”. I took this decision because I don’t have any child that will inherit this money and my late husband’s relatives are not Christians and I don’t want my late husband’s efforts to be used by unbelievers. I don’t want a situation where this money will be used in an ungodly way. This is why I am taking this decision. I am not afraid of death hence I know where i am going. I don’t need any telephone communication in this regard because of my health hence the presences of my husband’s relatives are around me always. I don’t want them to know about this development.
As soon as I receive your reply I shall give you the relevant Information’s that will legalize you to have access over this fund. I will also issue an Authorization to the Finance Security Company that will prove you the present beneficiary of this fund. I want you to always pray for me because the lord is my shepherd. My happiness is that I and my late husband lived a life of a worthy Christian. Whoever that wants to serve the Lord must serve him in spirit and Truth. Please always be prayerful all through your life and pray to God to forgive me my sins. Contact me Immediately, any delay in your reply will give me room in sourcing for another cooperate individual that is honest, trustworthy and very conscious of needs of less fortunate. Who would be much honored to work for humanity for this same purpose?
Please assure me that you will act accordingly as I stated herein. Hoping to receive your reply.
Yours Sister in Christ,
Mrs.mary Thomas

HEADER:

Return-Path: <mrs.catherinemarythomas@laposte.net>
Received-SPF: pass (domain of laposte.net designates 193.253.66.147 as permitted sender) ZSB3aWxsaW5nbmVzcyBhbmQgaW50ZXJlc3QgdG8gZGlnZXN0IHRoaXMgaHVt YmxlIG5hcnJhdGlvbnMgdGhvdWdoIGl0IG1pZ2h0IGJlIHNvIHN1cnByaXNl IGFuZCBzdHJhbmdlIHRvIGJlbGlldmUgbXkgc3RvcnkgYnV0IEkga25ldyBi eSB0aGUgcmVhc29uIG9mIHRoZSBhbG1pZ2h0eSB5b3Ugd2lsbCBodW1ibHkg dW5kZXJzdG9vZCBhbmQgYWNjZXB0IHRvIHByb2NlZWQgd2l0aAEwAQEBAQN0 ZXh0L3BsYWluAwMwAgN0ZXh0L2h0bWwDAzQ-
X-YMailISG: aaqZ7XcWLDuRD0EjImOTXLhyRygyyT.oGMLEvS0QW24rPDiI HCbwBn82gVgKml94HAeinBsQkzRKD1Nouz2tWaqKKxhKdoFDIviPnxG4Mu.c wJzWvmN51zrYnBV3dbxFNUuy8vKXPGALnSXUqjfm0FoJil8NpsgE2Y5dmHu5 ngCgPKqh0lvu2tFJi9O8rPkNJ.CDJt_E_YwLdIWSAX5cKvPqPUfdXJhNCkSz c5vLLLV_9TfujHlxrSoBmGNngVhdqFsGkJxTyTUjlDE1GSA7bXWXEdBXHye8 nzXNUBs77YkiNzJbcmBRWaFvnBxS7a8myNiZ_Ux4i29OLy1DTeUT.JBjb93G DrDERVbUA8_Gm60daiMFXr8Xo6mBYDVMTC.OQ6sWsr6KalwMEZQm0bgEtxEi knsRuVaB60m4S7gel_NQHXQ2YDYn_SzYwxX.CqOxLR6UozzfvV1Ml6sgDAPg YSGYBLoNO8w2Q0WSwibW9dGvo64.MaASd9W0fFjq7kMZU9Jp9t72NDTwjpbe jVGfCt20d9y9TUt3bZRosQqQ1v7ZPlYtKW5MV_WgTVSAzIOmDqO.FkgGyeRe UwyPEUuMq3XyI_L1uQj4ZM2YXF8dtItdA7ZWhVtWrEQiqlsupxICQmIFvPPd tkIBtN3._pRRCG7eCTOWIC5cdYeRHhO6jWpLPFm1yEc1wG0QwQLNos.J8.uC 2HLycx2DXKF0vs3IewiggqSsKxqEaK5BjiiqZbQJvhlHka8vfHM8CK1KUWVu k3lNsDhm4JJnoBgP192m0diN12yy5czzSRj.rUFXri4YbH6BQgTuK4AqdyPn Cm_05O7EVLy.OOAu7cHaWMU1cBxH4YNWxvFl9A09.0BmskxM2iPe9sNc2yEO tJLrsbnXr1zj2s29VaSL.gTjMAq_wqx3hVbw8JBBxcmN3S8_9bYRWvDX8ZP5 5OLdLZrLUZcFV5RoculdAb54ukz2l1xCECCaSRA.FVjDKdhcC8RXCeewM1Zu lMQc1xwgCyFuB.hp6XCv5fe3Zr4QjFmJ.uTSehbLeh5XBD5DyjW_ncYmfELM 0LocG1rMwPk1tO341EYt6uwyuncdYt6rqui42cY7i32_BcRBYC3LPD5YbprE Ze0TEAJCsSx4zRbhilQ8jT.b_ePTfpyehmlnGf132h01ElVvxB4s7cNi1gZT 4pOEewbNCXU6Vlja82KsXesEFLh4kS6Wuu2ijHEnrKGwkzeiSJi3pp9Gyj_n RmveEFHnx70fOomJrbjEVpw7IsWaOknqfnbNJ22WcubYOQIH__wGbN_9xs_S MPijAA8q2auGTvsHPeE8Gy4UfCUBKv_3xH32tIz_RtFfr1PX8MDzW8isMbE-
X-Originating-IP: [193.253.66.147]
Authentication-Results: mta1039.mail.ac4.yahoo.com from=laposte.net; domainkeys=neutral (no sig); from=laposte.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO sout.laposte.net) (193.253.66.147) by mta1039.mail.ac4.yahoo.com with SMTP; Tue, 18 Dec 2012 03:53:27 -0800
Received: from wwinf8314 ([10.99.54.221]) by mwinf8515-out with ME id cztS1k0094mN4ju03ztSe5; Tue, 18 Dec 2012 12:53:26 +0100
Date: Tue, 18 Dec 2012 12:53:26 +0100
From: “mrs.catherinemarythomas” <mrs.catherinemarythomas@laposte.net>
Reply-To: “mrs.catherinemarythomas” <mrs.catherinemarythomas@laposte.net>
Message-ID: <2080812912.100053.1355831606633.JavaMail.www@wwinf8314>
Subject: Dearest in christ
Content-Type: multipart/alternative; boundary=”—-=_Part_100052_1264439311.1355831606631″
X-Originating-IP: [196.28.247.101]
X-Wum-Nature: EMAIL-NATURE
X-WUM-FROM: |~|
X-WUM-TO: |~|
X-WUM-REPLYTO: |~|

196.28.247.101 — 193.253.66.147 — 10.99.54.221 –

Catherine Mary Thomas  mrs.catherinemarythomas@laposte.net RETURN-PATH: mrs.catherinemarythomas@laposte.net

______________________________________________________________

RESPONSE EMAIL:

Dearest in christ
Thanks for your email that you sent to me and secondly I must not fail to comment and commend on your statement of caution this for me was like a realization of your good intent. I have seen your position and most importantly adhering to my instructions on this transaction and I am willing to proceed with you as you have show me that you can be trusted…Your mail has equally made me to believe and understand that you are really interested to finalize this transaction with me.
my confidence in you has grown and increased with desire that I am in the safe hand. like you said I believe you love God and believe He wants us to love him Your words in your response have given me great Joy, I believe you know this is a good work of charity project I have placed in your hands. My dear I will only say to you with reason of my throat cancer I am unable to speak but all I want is that the money is safe in your account before I meet the Lord so that it can be used for the intended purpose.
I have told you in confidence that I want the project to be kept very secret and details of my contact with you should not be disclosed to anybody and this is because my husband’s family might want to do everything to gain possession of this money for their own selfish interest. The security company in possession of the money is in Burkina-Faso, the money can be transferred to your account electronically once you activate the DORMANT ACCOUNT and I need the following details below to send LETTER OF AUTHORIZATION and the relevant documents to the Bank that you are now the sole beneficiary to the Funds

Full Name:———————-
Current residential address:————
Country State:——————
Age:———————-
Sex:———————–
Occupation:—————–
Private phone number:——————-

My dear, I want you to have faith and pray always knowing the task ahead and the bold step I have taken to give you this money, I need you to always stay focused and note there is need for prayers as obstacles will arise but that entire stand against the success of this transaction and the project will fall. Let me rest and leave you to pray and build your mind towards the task ahead and know your share of the funds is 30% and the balance must be used for the project which is 70%,do not forget I am communicating with only you at this moment with regards to this transaction. And I would not have any cause to do otherwise, except you state your intention to withdraw your assistance. I have told you in confidence that I want the project to be kept very secret and details of my contact with you should not be disclosed to anybody and this is because my husband’s family might want to do everything to gain possession of this money for their own selfish interest.
Remain bless.
Mrs. mary Thomas

HEADER:

Return-Path: <mrs.catherinemarythomas@laposte.net>
X-YahooFilteredBulk: 193.253.66.144
Received-SPF: pass (domain of laposte.net designates 193.253.66.144 as permitted sender)
X-YMailISG: IXcJCncWLDsknTLwWhNVTHG30BF563Ldgn5KvEvQFkWvuVeq z_QwIlVo3wxYjDta7Y6pLr2hZ2G4uurNLrq1IJkg91YIA7OX.i87QkljdWkb pNSCTyVOnm5lkUFGfDkw4Sa0dUak7Z5Rz.hyIfcHPPpdn_PezcHtKdSQ5D.0 Hd2gYi2601eJqKHQNkgoaYxqdbIcjvI81xwnuYE3WJWV.yaoGKDsVk6AjfUq yp_JpmK8YOGwhp9u5ERr_XNmmAniDibErCCyR.m2E9iZr_Z111CAyeRS4I9I swq.rFwO2q4InDspwmeNobmYMG6iGOw3JrlV9Zc4xjhMqqXoleIEVUuGpK4B NaekvwNTnZK3H6L5ykGjKnsd47f.RD0oCztSaz0qOWVWWnKY.SXwxhcI_jtB hcNdsOdqnXtjVzdEfTcJrtREWU.kunukYyFCwiEGRLnP6olS.1jBOgeZa934 UQ2ftdB2bpQJDE1r2qQQABmwnlNrXiVF_ePTd4ckZkHSHaze5EW.H_saR3Ct 4ewvz7o8huzqk0mpQAGuWCwkFWIKsfAtCGMJxhtpgpLQYlb3FJDSMBlyHsge 0drbYnM28nx1r3eRx_ROpTqYIV_k_JZIK0LREK3w2SOW0RQ6iGs3P8vMA5Sn J.XBq19KwAtdDUpuQ6IGHSSKtC2ITl7f2dwSUUfOGmm94gzFJWdA5wtMJfFv EKnuERTR4N6BQN6UPDsufauwqytBrQTlbByC7K8HfV0bvjXxOA0C0dMgMbO1 OSNpnmeK94fVm63iL1vyqMY4U2M9jdCK9pUgqTxcnlcFuswKiFzqdtKV1ZFF lXkuUSMUGWA_jA97YpG3Mfj73CJcRFdqTbnwKCLMhzYd_PlKAIRocTkmp00g gtja_MRe_iahKW3BrRwC8f2g1.yJMwST60N9D_wKxwNxNNqLjlq6GfaLRVFe FzMXQtyDrXMuN3yowSpBHawCWSZewXapcGrbQ5L4y4PmHzyoN.UMMZPb8Rz8 Xuob3szabBkgg3IYX3wQOCg2k8.381dTHoe2o1FfGK7pNm40MgbqZDjQxxrR uiVSDduG1NDUmSoz8F.66vucfgZvpdKGA1Ti4v4Y_RwjaY2H3A9RVr7D0pIG 9okJvVwq2LQAwZJmqjkw_qxQOdG0DW02uZbpU_X5GiVleSoRqul7qkGz2F90 nBUbIjHDCK5Zgy9O9Zb0Q.cCi26TsX_AtcK8VUXSkjjVspwlfNykC_gYvd5M Ok7IjphOM8jEJT_S4uBT4d6OAs6BAz2ljmffJLS3UwHwJogfAhufvWoCM236 LWBZciCLAfHSyimZwv29kgBSgcPrborTOXLAwkfEMtj8oJeQ0B1evZMXgK2F jM_rqU3tmltgtAN7SrF4GIug7WTG1Jl2j24zE5zb4q9FdmkHjq3zvPXhFiew msPzkBFZ4VAj4hPBi.uQNh0-
X-Originating-IP: [193.253.66.144]
Authentication-Results: mta1055.mail.ac4.yahoo.com from=laposte.net; domainkeys=neutral (no sig); from=laposte.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO sout.laposte.net) (193.253.66.144) by mta1055.mail.ac4.yahoo.com with SMTP; Wed, 19 Dec 2012 03:16:07 -0800
Received: from wwinf8306 ([10.99.54.221]) by mwinf8504-out with ME id dPG51k0014mN4ju03PG5C0; Wed, 19 Dec 2012 12:16:05 +0100
From: “mrs.catherinemarythomas” <mrs.catherinemarythomas@laposte.net>
Reply-To: “mrs.catherinemarythomas” <mrs.catherinemarythomas@laposte.net>
Message-ID: <182589706.149240.1355915765066.JavaMail.www@wwinf8306>
In-Reply-To: <1355894658.30768.YahooMailClassic@web161001.mail.bf1.yahoo.com>
References: <2080812912.100053.1355831606633.JavaMail.www@wwinf8314> <1355894658.30768.YahooMailClassic@web161001.mail.bf1.yahoo.com>
Subject: SEND ME THIS INFORMATIONS
Content-Type: multipart/alternative; boundary=”—-=_Part_149239_468043981.1355915765063″
X-Originating-IP: [41.138.107.23]
X-Wum-Nature: EMAIL-NATURE
X-WUM-FROM: |~|
X-WUM-TO: |~|
X-WUM-REPLYTO: |~|

Same email-address as first email – mrs.catherinemarythomas@laposte.net however, different IP’s being used in second email:

RECEIVED IP: 41.138.107.23 ORIGINATING-IP: 193.253.66.144

___________________________________________________

ATTENTION: MRS. CATHERINE MARY THOMAS IS ALSO BELIEVED TO BE SCAMMING UNDER THE BELOW INFORMATION AS WELL. BOTH THE ORIGINATING AND THE RECEIVED IP’S IN ONE OF THE ABOVE HEADERS ARE EXACTLY THE SAME AND THE EMAIL-ADDRESS IS SIMILAR.

missadut.thonarok@laposte.net
X-Originating-IP: [193.253.66.144]
Authentication-Results: mta1311.mail.gq1.yahoo.com from=laposte.net; domainkeys=neutral (no sig); from=laposte.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO sout.laposte.net) (193.253.66.144)
by mta1311.mail.gq1.yahoo.com with SMTP; Sat, 01 Dec 2012 05:43:50 -0800
Received: from wwinf8219 ([10.99.54.221])
by mwinf8501-out with ME
id WDjo1k0094mN4ju03DjoEb; Sat, 01 Dec 2012 14:43:48 +0100
Date: Sat, 01 Dec 2012 14:43:48 +0100

Hello My Dear,
Warm greetings from me,
I apologize for intruding into your privacy, since we don’t know each other, but pay attention and understand my reason of contacting you Please don’t be angry with me my Dear if you see this message in Spam of your mailbox, it will be because I sent it with low internet connection.don’t you just love this excuse?

i am happy to get in contact with you
after my prayer to God for a direction to find a nice trusted and sincere reliable friend I was motivated to write to you after seen your contact at ( site ) think s/he should have inserted a specific site here! , I know that this email will meet you in a good health and also surprised but God have his own way of bringing people together my dear. i am here to seek your advice of which i know that it will helps me to overcome my situation,

i am presently single above all God fearing girl,My dearest,In your usual time, may it please you to write me back in my email address. So that i will explain more about myself,my details,my pictures and purpose of writing to you.Please do not neglect a humble and lonely heart that seeks your love. A good friendship is the foundation build on other relative things to come. May God bless you as i wait impatiently to hear from you.Thanks and remain blessed.
Yours new proposing friend, Adut.

 
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , ,

“Barrister Mendy Samba”

NIGERIAN SCAMMER – 419 SCAM – TRANSFERRING FUNDS

Mendy Samba pretends to be Aminata Bangali as well as Western Union Money Transfer and Fred Williams – for more information click here or look at the end of this post, below the header info!

Updated email brelow (received 01/11/13) from Mendy Samba under the name/address of “Barrister Mendy Samba” mendychambers@mendychambers.com AND mendychambers@gmail.com AND mendychambers@gmail.com

scams_exposed_scammer419

SUBJECT: Money Transfer From Spain

EMAIL: ATTENTION:

My name is Barrister Mendy Samba and I am contacting you as requested by Miss Aminata Bangali, a refugee in Ghana. I work as an immigration lawyer/welfare officer attached to the refugee camp where Aminata Bangali is currently registered as a refugee.

Following Aminata’s decision to transfer her late father’s fund deposited in a Security Company in Spain to you, she consulted me this afternoon to give her the necessary legal advice and support that will be guide her to securely and legally have the fund transferred to you.

Please, do confirm your knowledge about Aminata’s proposal and I will give you more details.

Sincerely, Advocate Mendy Samba( Attorney At Law )

HEADER:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) YW1iYSBhbmQgSSBhbSBjb250YWN0aW5nIHlvdSBhcyByZXF1ZXN0ZWQgYnkg TWlzcyBBbWluYXRhIEJhbmdhbGksIGEgcmVmdWdlZSBpbiBHaGFuYS4gSSB3 b3JrIGFzIGFuIGltbWlncmF0aW9uIGxhd3llci93ZWxmYXJlIG9mZmljZXIg YXR0YWNoZWQgdG8gdGhlIHJlZnVnZWUgY2FtcCB3aGVyZSBBbWluYXRhIEJh bmdhbGkgaXMgY3VycmVudGx5IHJlZ2lzdGVyZWQgYXMgYSByZQEwAQEBAQ–
X-YMailISG: 4_AQ7A0WLDsrdoRW0mzNu2SSLdatwMX5iS_EhDNFGO0Dbu.0 ZJPjmRCDFk3Bxoppk6w6x2d3WKjDXMzwfe8IqxvbBPPDr31JGNwkUlYzEFse LzFtvCX9WEYMIIglV7ug0FGVvWB6G1RnZe3JWarmQsNFn7FR3J1hYpoCkNtb NzxahunKglbrQA3.4DYQpbILeEzBia9jxUrwloVD0KdvoUzHDJNQ273p3yBB _aowcphJVZ6yZs2V1HPyhaInRIizut7qjyDjGsAysFY4KmWa8FvU7IatcSbC GD4j5eZn58R61aaUCwGNj9n2ZONKmUYY6nl7.pX_A874SK3EjAlGlTfsixkl O15RmczEOcXCkSEUdES8U5hTB3hBfPmkNOj7zeOhpqwM2p5EDGlPiPZ6MLqW VeJ7xQZTSAbSgHpX1X5YeFsYJklh_365cld7bEc3wmL7FHUnHjVI.FUdnZFi K9wMkAUG6_7nqaFrNz6SqXZOM8zjpuuLwM7gFOjZMmRzxoWGjF.exUNZLAic xQgalRKaIEO2PavYo2VTPKuFRj7RflCSMafMWoieRpRsaq0X7bQj3tX9lgXO w0HbHxuJuJDwHAwpwFNSiWmASeL3OMy4DvgYXWXw63dTEed3NNzvL3mw_bCN eMjWhF_HwStHsSSi0KD30u7qESl9rYica9FkndjwBsLDcDRh6YK4HYjQ4wFh uoq193JFJaz.jlV9YIrFAFktvrrNjaGRsiqQHm3viuhMC2mnU2t2pa6DWSba _DooJ9PHo4DXDg0DNBEd1tI8AVye5KHy2NynYrLYYTD92ukjEo3Rgom00RTc DHMPDHXoZwIAcJqiGrJWLnkwzwi0X5H98W2b2gJbRqSgAbGPsDmPgnMWI4lr rTUKVca36wz36odeYqKLyu2vpsQqQL5C3R6SbWgiXGyrBTt.MgJ8_aJ58xym ReiyU_qMQZiqangoX8UG5oPBVQh69Mz3f1DSjw2.jSUlSNHulEgeNfuUcSao VuNfoticrJYdUiDAkRl0uHpQdMfWv04r7JUIgpmxzaGGheGVcdyADzDyVW6M ITYey9NNXoEYnwBo.3pLN7nDLqidopn7hF2g9IJSAVxR1w18dPVXZPDidPTi 7B1i7__9ia8xs7gnNe9n.kkRhVyZmPZ.kdibaaljI.H7cH5Tn0I9sgUJkMr7 MiB4KqFzIVwkPRWlWf3BCWx8.tdSmaTQFbixeWlAVi1iKnzg7AIsmhZ_b7FT q_IL6Es9OgDxsTbYYs9fkwzQW9SaaHuDlAq.slFkJcvl4MFDlZnZaWQVNMD0 9vOEDSoe_HdRnU92B601FrF6Ag5QBWLO7zVrZeC2upRcZMm3F6BwQZ7obSuS 9qR4CU76exgBDw–
X-Originating-IP: [64.98.42.133]
Authentication-Results: mta1257.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.133) by mta1257.mail.ac4.yahoo.com with SMTP; Wed, 12 Dec 2012 13:49:09 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay04.b.hostedemail.com (Postfix) with SMTP id 3CC8867074; Wed, 12 Dec 2012 21:48:53 +0000 (UTC)
X-Panda: scanned!
X-Spam-Summary: 64,4,0,,d41d8cd98f00b204,mendychambers@mendychambers.com,:::::::::::::::::::::::::::::::::::::::::::mrsomf14|1714587392|FC6C4FA
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 1446
Received: from webmail16 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf14.b.hostedemail.com (Postfix) with ESMTPA; Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
Received: from 41.138.171.68 ([41.138.171.68]) by webmail16 (Webmail) with HTTP; Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
Date: Wed, 12 Dec 2012 21:48:49 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <837876103.14863.1355348929528.JavaMail.mail@webmail16>
Subject: Money Transfer From Spain

To view the post i’ve submitted on November 12, 2012 on this scammer click: Aminata Bangali

FROM: Barrister Mendy Samba <mendychambers@mendychambers.com> Reply Address: mendychambers@gmail.com

When ‘Aminata’ emailed me back in November her return-path was mendy12@sambachambers.com so i’m guessing Samba Chambers was a fake name she was using? Or maybe Mendy Samba Chambers? .. Not sure where ‘Barrister’ came into to play lol.

RECEIVED IP: 41.138.171.68 Location: NIGERIA (SOUTH AFRICA) X-ORIGINATING-IP: 64.98.42.133

_______________________________________

ANOTHER EMAIL SENT BY MENDY SAMBA –

ATTENTION:

Since I am yet to hear from you since your last mail, I assume you are no longer interested in assisting my client. I would appreciate if you can define your position clearly to enable us know the next line of action. Should you still be interested in assisting her, I implore you to show your commitment to enable us conclude the transfer.

Please, do kindly respond within the hour is possible.

Yours Sincerely,

Advocate Mendy Samba( Attorney At Law )

HEADER INFORMATION:

Return-Path: <mendychambers@mendychambers.com>
Received-SPF: temperror (encountered temporary error during SPF processing of domain of mendychambers.com) eW91IHNpbmNlIHlvdXIgbGFzdCBtYWlsLCBJIGFzc3VtZSB5b3UgYXJlIG5v IGxvbmdlciBpbnRlcmVzdGVkIGluIGFzc2lzdGluZyBteSBjbGllbnQuIEkg d291bGQgYXBwcmVjaWF0ZSBpZiB5b3UgY2FuIGRlZmluZSB5b3VyIHBvc2l0 aW9uIGNsZWFybHkgdG8gZW5hYmxlIHVzIGtub3cgdGhlIG5leHQgbGluZSBv ZiBhY3Rpb24uIFNob3VsZCB5b3Ugc3RpbGwgYmUgaW50ZXJlcwEwAQEBAQ–
X-YMailISG: Qish.AwWLDsD_aE16xh5LXkfyfliJdFG8Az7iuvnxeZ56_1J crt96JOXDja4po5uUUFfB6a4l3fDBX66fLkDWvDXGHzQtXeP.ir3WKDMvO18 yQtmjWnM7KDHOTIR_mm7F0x_yYrV2f1FJspVNUZNNrNhqx4gHNI7egOdzDmz op7TNxfD8KDM8WtGccyWKkXqThvjw7VzTcfCAHPEArsNtdKJ5wHzJaxY7Xo0 ICaaAf_pXqlY_3vkqJUpjtFYyCpgw7N5V_AkNyRzANa9D3HB88RSghJYRpkC dRkpGISFkkS0G2jSVjVJobdQa7i6p3HB67iuit9p3b5fHUatd0TmDG2c1wO4 n_3CL7IBbkzawlon7QqKyZdF1B9epc6jGlmzFj_sG9yMs7c6gAszTz.Wh37L aLADSBUUKoNLZGvXD_VPS3NuJy5qN2N_IeAPWj74Jm_I_1gYiRBbKzE1nXzf De8CKEyFZTjnJ2Tyo7u0BEYncdKM7soOIYF0C3OzEqL9Q5rDbecHRlusYWLm 1UT65pH7TqrnRdGMC4pn7hQqNuf0kQ6igWHg0ebawNy2jkZQRRqDsJIuL_hj kTe6JkM9EY1NO0Z6oaZutHK4uzUR1bhnELOdzzqFqUkmTTTt.tlm3VCPswKa Mbi2uW6G.qSyXvN4ML_cUnNUWgQyxjNm8tImcSUwfUtv.vzW43gBPS4r8tdz gRZ6WaVj2q93bL8MbZpotKrj7hCFUn4flxO_1y20Fd_XwmXYJ8Ihmq6C9R1R TihTyJWhJxlQoMqFbPy3RojiISg6gc1gsS7BMM0I0gx70NopBwRn5EJOqQhK U2oAcZ21BR9idyOFHPF7VzPu8Ncd7J4NFnoS1sXtdkeKT3378lJFaPnST6iv k9u7WhHwmBhbAhvjOkWjJxevZljRbtfvebag8m5Sahi9QaYaUeC_3pEB5.Eo zYzcudPoota0GO7Z6mfG5PYVkGRiyKKdU0sG387ZApM5TRPp_AsGwSyGxg2p DXPpSQzV7o9Zzkr9QZUJxx3oYRxh3luEq12j.ayVQlHvrngNXNp9dT0gNxzX ftpGIhATeavycQ4_jhcJ8dXpiRB2LhNdF4x_29jUzABvNKNsK19nztr4IGJU UgD6Vt2_SagllCSrCH4Y34ff6GEYlUIUccgdWYMBlWhJkmWQYstMRl71uO5J ewdacuSE7nQBw5Kx1ACRhtpjBFO.r.cVWkacnzfte.3hl0hSVzxBlLMxA3lu aeX8RJZP04GfqhHp4Ex6GYBeVXQV14Um5Dcjwg7t2dxxLJ0rcLbwTNLCLOi3 Ch4moZMd6oFy6Pil3_AuOXc28gxcxk06jpmahAvr8BgwxaAO2KkhT7.wpsn1 i4qaQ4r8Bk01ndo3Cl6.ENqsq6hCv2F_LYMsJoUhZqeERFJDDA–
X-Originating-IP: [64.98.42.225]
Authentication-Results: mta1092.mail.ac4.yahoo.com from=mendychambers.com; domainkeys=neutral (no sig); from=mendychambers.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtprelay.b.hostedemail.com) (64.98.42.225) by mta1092.mail.ac4.yahoo.com with SMTP; Thu, 10 Jan 2013 13:27:03 -0800
Received: from filter.hostedemail.com (b-bigip1 [10.5.19.254]) by smtprelay04.b.hostedemail.com (Postfix) with SMTP id 8718C1CB33B; Thu, 10 Jan 2013 21:26:50 +0000 (UTC)
X-Panda: scanned!
X-Spam-Summary: 2,0,0,,d41d8cd98f00b204,mendychambers@mendychambers.com,::::::::::::::::::::::::::::::::::::::::::jacquesr2@omf08|3603412736|CAE7C8B
X-Session-Marker: 6D656E64796368616D62657273406D656E64796368616D626572732E636F6D
X-Filterd-Recvd-Size: 1235
Received: from webmail16 (imap-ext [64.98.36.5]) (Authenticated sender: mendychambers@mendychambers.com) by omf08.b.hostedemail.com (Postfix) with ESMTPA; Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
Received: from 41.71.189.89 ([41.71.189.89]) by webmail16 (Webmail) with HTTP; Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
Date: Thu, 10 Jan 2013 21:26:46 +0000 (UTC)
From: Barrister Mendy Samba <mendychambers@mendychambers.com>
Reply-To: mendychambers@gmail.com
Message-ID: <1176793950.247565.1357853206650.JavaMail.mail@webmail16>
Subject: Re: GREETINGS FROM AFRICA!!
X-Originating-IP: [41.71.189.89]

IPS: RECEIVED: 41.71.189.89 – – 64.98.36.5 – – ORIGINATING: 64.98.42.133

Barrister Mendy Samba IS Aminata Bangali pretending to be her lawyer. Below are more email addresses and IP information used by this scammer.

Aminata Bangali has many email addresses. A few handful include <> aminata2@mendyschambers.com <> aminatabangali@africamail.com <> aminatabangali@mendychambers.com <> aminatabangali@yahoo.com <> aminatabangali@msn.com <> aminatabangali@gmail.com <> info@guarantytrustsec.com <> info@guarantytrustsec.com <> aminatabangali7@gmail.co <> <aminatabangali7@gmail.com> jacquesr2@omf08

>< Aminata Bangali >< mendy12@sambachambers.com >< aminatabangali2@gmail.com >< aminata22@infonets.info >< aminatabangali6@gmail.com >< info@guarantytrustsec.com >< SeferiaB@trumbullps.org >< go@win.com >< SeferiaB@trumbullps.org ><

Previous IP’s used:

Originating IP:  41.71.177.75 Location: Lagos, Nigeria

Originating IP: 64.98.42.177 Location: Toronto, Canada – smtprelay.b.hostedemail.com – mta1196.mail.mud.yahoo.com

10.5.19.254 >< by smtprelay06.b.hostedemail.com

Mendy Samba also known as Aminata Bangali also pretends to be Western Union Money Transfer – And Fred Williams

Fred Williams >< fredwilliams3@rediffmail.com ><  www_western_uniontransfer276@superposta.com

Some more IP’s used by the above scammer:

Some IPs to avoid –  41.216.50.79 ( web92415.mail.cnh.yahoo.com ) >< 41.218.238.107 >< 41.216.50.209 >< 41.138.172.76 >< 74.125.83.67 ( mail-ee0-f67.google.com ) >< 10.14.193.136 >< 10.14.175.68 >< 64.98.42.56 >< 10.5.19.254 >< 64.98.36.5 >< 64.251.52.6 >< 203.188.201.85 >< 203.188.200.143 >< 119.42.242.156 >< 74.125.83.67 >< 41.138.172.76 ><
 
1 Comment

Posted by on 12/13/2012 in Inheritance Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“Garry Thomas”

WARNING: EMPLOYMENT SCAM – JOB OFFER – PERSONAL ASSISTANT

EMAIL: Hello.
I seek individuals to work as personal assistant for me.
Duties include Coordinating schedules,Booking travel,Running errands, working with vendors, etc.

This position also performs office work including ordering and maintaining Office supplies,Document scanning,Filing,Backup for receptionist,Receive packages and Mails,Writing letters and other Office-related tasks from home.

If you are interested kindly send me the details below for assessment and registration to (garrythomas127@gmail.com) then we can can discuss in details on your salary and depending on the kind of assignment.

Full Legal Name :
Address:
City :
State :
Zip code :
Cell # :
Present Email:

I await your prompt reply
Regards,
Garry Thomas.

HEADER:

Return-Path: <garrythomas906@yahoo.com>
X-YahooFilteredBulk: 210.87.247.10
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: iJk69SwWLDt3n_1DzAuf_nSu3RIsUlQmbw6Cch9W6Q0yCiQ1 lQ0bRUUKbBMChqohSwd1huhSUrBm_ywwlODBbc56nSvTW3MXL_w9ix8Aqs2m iYRFmUghzxh28mm5_x73Rpk5FgDCgF_NCWr8Ujr70vU4sFspHbY8Y9LjtU1c MR9o9yxGKp9nxkThGxpwOj5hn6N5f12lRmKEURgMhUOPzYn39yZCKwrcQBLq I29ILPoaLCLL8OaEKxCklzwrgtsRDi_RrwTjW2sotDOgMqBxELHfhO9Snozb fKl5TGoaWEvnz7PO.0vwWWkZfld3aezoIG_tHhuQDIfVTqRYJR_B3AYcAgOw 2O_5_IcbVeC9aI11IEyJ0MApye4Q8o5tvPNjP6euy49d1v0ExETLFXJ0VVPr 2p1N2yBamfhJEo06uZAlL5TBgDcZGMs4aLHpPN6IN0QrkjCz4p4bX9tCH8pb N7lE0i1.VfHiWXp0qAmHipLPUsyP3XkV06kqkg_FrhEq1Y2vQXYq9haH3AKu SkDr8vTsLMT0dGck1aoe9O9OzloqFellusdjIetnohwoNiDzlfYgpa5X69mk Wn.9dPt98CoHqREIsAkr1BG4yazM8sQEyf6HjUNYU4Ztw2FtKHTWH127aIED iDuTivMENpWBNLKxJBH_HnJKkD.dts.tVN_xfboFdQJd9aryJfOVEeVvlzyb vAIC8piQFameRx6QyyNHQ9ZzgHUaclWcxYlrH0SSgK3sSf2OkuOTlPfcbOYz nFV3npSFQBPgcTsWsfM5gpF8H1CayavtoIktCpwFcEUrbVpxYx_NPv8.47oe iMf0gF2nFHaL6aiTJYrGByfSPnBGsR7PvDf6kEudePuum4b1TMBicffKxSRy GwiUHg9hnyFYv8P4mN3XUDV1kVL6gP7a9nEw4Qa8e14pL6rBzRSb1658NvRX .G1oVs0iQ8YTA4lt3gcfqARzm9egWq4Hu6XS0wt9RPtSITdPUhTl3UmtY2v2 vxAdwm_5Ys8arT3.8.HjlsX_1ysVJ9KR0SP7ZQhNddj89W8.1PIPddyDo3sl QAsvYMjz1gSRlhgYegcwyw2UYA8_KRGootpH2l0lGZEDV8zrKTP.9zVgRsp1 glZLPsLe41F7lGikVdXcP7OvaZIZluqhkQ01ubuhlo2ehvgaK1V.uTdI7GJ2 WNhhkTWvLZB_R8HD2WkxcfPQoV1lkbHP51wdodkpwf9aaRKoVadrbR49nIM9 zDcdvqRXPl80M6R1or1yGtQsy15wkkCISKOPtilwUEw4OsrNPo5zCjani2fa a4ytFYCBjfCD2XP7_Dek7l7e.bMeOsdfhnZn6F59EPodNwYZ9bRSZgw5sEfe UDij2AMLz8yXiReMU_8hOBO8RDheYFbnu2gNVHGffgIB7tzpper.MHwEhh3i tnor.4sS.rBxBHKPQ_FY5DSuZIXt5h0s2faCVwFrKD99AeCUrhjTUc5IN8P9 iHFHXn.2Fw–
X-Originating-IP: [210.87.247.10]
Authentication-Results: mta1078.mail.ac4.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO imsantv22.netvigator.com) (210.87.247.10) by mta1078.mail.ac4.yahoo.com with SMTP; Thu, 06 Dec 2012 08:05:52 -0800
Received: from imsantv97.netvigator.com (imsantv97.netvigator.com [210.87.250.209]) by imsantv22.netvigator.com (8.14.4/8.14.4) with ESMTP id qB6G45uX015098; Fri, 7 Dec 2012 00:04:57 +0800
Received: from evergood.hk ([125.215.228.219]) by imsantv97.netvigator.com with bizsmtp id YG4n1k0024kffud01G4v9F; Fri, 07 Dec 2012 00:04:57 +0800
Received: from User ([41.150.207.96]) by evergood.hk with Microsoft SMTPSVC(6.0.3790.4675); Thu, 6 Dec 2012 20:41:45 +0800
Reply-To: <garrythomas127@gmail.com>
From: “Garry Thomas” <garrythomas906@yahoo.com>
Subject: Job Offer
Date: Thu, 6 Dec 2012 14:40:38 +0200
Message-ID: <EVERGOOD-SBS2K36SCU0000948c@evergood.hk>
X-OriginalArrivalTime: 06 Dec 2012 12:41:46.0140 (UTC) FILETIME=[0D69FDC0:01CDD3AF]

Garry Thomas garrythomas906@yahoo.com garrythomas127@gmail.com 41.150.207.96

 
 

Tags: , , , , , , , , , , ,

Four Email SCAMS

A list of three scammers who emailed me back in October, 2012.  I would’ve posted them sooner, however, my spam box gets FLOODED with spam and alot of email’s (including these three) continue to get pushed down each day. So i’m posted a few of these less recent scams, in one post.

1) LOTTERY SCAM – “EUROPEAN EURO MILLIONS LOTTERY COMMISSION” — When I didn’t respond, this is the email I received:

FROM: Mr abdul saram mr.abdulsaram16@ymail.com

EMAIL: Attention:

TRANSFER OF US$11,800,000.00 TO YOUR BANK ACCOUNT.
We are writhing to know if it’s true that you are DEAD? Because we received a notification from one MR. GERSHON SHAPIRO of USA stating that you are DEAD and that you have giving him the right to claim your funds.He stated you died on a CAR accident. He has been calling us regarding this issue, but we cannot proceed with him until we confirm this by not hearing from you after 7days.Be advised that we have made all arrangements for you to receive and confirm your funds without anymore stress, and without any further delays. All we need to confirm now is your been DEAD Or still Alive.Because this MAN’S message brought shock to our minds. And we just can’t proceed with him until we confirm if this is a reality OR not.But if it happened we did not hear from you after 7days, then we say: MAY YOUR SOUL REST IN PERFECT

PEACE YOUR JOY AND SUCCESS REMAINS OUR GOAL.
May the peace of the Lord be with you wherever you may be now.

Your Faithfully,
Mr. Abdul Saram
Foreign Payment Department.
Kuala Lumpur Malaysia.
E-mail; mr.abdulsaram168@ymail.com

HEADER:

Return-Path: <mr.abdulsaram16@ymail.com>
X-YahooFilteredBulk: 202.54.119.135
Received-SPF: none (domain of ymail.com does not designate permitted sender hosts)
X-YMailISG: zoMIZlsWLDvydzg0Dk9J5tOysBHE56cHQyyiC1YznBFFUtuX 2QmjWmBtKrEIAIZhZZvMLBsf2_VfVRuk3IH9j8m1hLMrwqczlxOjNcYd56t1 DaED9ORsgM_tamt6rYqekTqo1ZZeVBVk.n3YVF3tmTgLQTno7RUE_mPfmgyO S8g3lGMj8NpQGYdtfuXTZYiqBNy7OCiTyfihCtBixC84NBTgsDMsAj4P2vvf uvEouSXqXW_lpokkF6fkNC1eMtEPGI98ZdT_3zRWN9Ru.lwobx.vCEagLelr T6qkX56Y3yw3oYYgjSG_O1eZeznkjXOyNOjg82ND2CrRcduLWdRuJOesZKmV 3xrCwSbNU.1OEPGt99LQuUBZpHmnhEsLZ908pgJy706cOkWpiPoZ1rCWGuGK kMgJUwp_ukdV2jXRGVSbgDunXrysUGJ4JGJ7sIcy08xXkI01aKXjvxH5zSVt MLNYizgSIwbXCsVoh4kgvfVFn8tv.rcdkUiap3AJ7fxaz2BjrTg_iLcFzP7j CKXG6ul9U1zBHqq5F54fpGKFMpuGvzwMOAQT_kou94fFWb78j9yzKSJHFpzs N.MLMXSB9whHO08p5lO4G9516SCu.qO8uzo96HXGeNPbj9DIfYQcg1iWz8uo 3lMulBOyPI1h4faLSk2GSYFktoY9y7i9gU.f.9MxMaXc67eJ_PrIVIhtMswN J_wZMBwunjrY3hq2OicEy4TomsF.650j_axPHFQHMF0VIt1ySTNQfVmkwYD_ M4SQKaSrB6uU5OJM3EfBW_Humq93k7t34Dv0UpWSsFFW8shyPX21lPZJvTcZ OXXZcu._kxiXXOWX99I0m3DkvbdL_quy5FBkRomNTW_pSwiZBIdfHBGu50MS 9nIw.OfsGw1O0ATr25xhnJHFLd4PlcHTUBXfiGUamYauHYl_HmtmDcs2so5t jo1X2QbMvFUqicTPxGsJSPWzhxtucwSaWhqCBTqnKW12kmR.n19.GVeHCPoG 5fbPZ6S2rNO.LNDQzjl_7vpVXk.3WfaqAGUZaNZSKgTUx_m6dzipHtSDVyXl ZWvdU1M57p_stGRaLd7P2DLNwZA8gjZwrpTI3_hXdzz4E0HLWDqTsu70dLn3 NvwffnAgEQhrxZfe5eS8PmhRPM3oEBxVA6viz2i6xw–
X-Originating-IP: [202.54.119.135]
Authentication-Results: mta1021.mail.ac4.yahoo.com from=ymail.com; domainkeys=neutral (no sig); from=ymail.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bulkhostingpanel.com) (202.54.119.135) by mta1021.mail.ac4.yahoo.com with SMTP; Sun, 07 Oct 2012 07:12:02 -0700
Received: (qmail 18600 invoked from network); 7 Oct 2012 18:40:51 +0530
Received: from unknown (HELO User) (120.140.1.40) by bulkhostingpanel.com with SMTP; 7 Oct 2012 18:40:51 +0530
Reply-To: <mr.abdulsaram168@ymail.com>
From: “Mr abdul saram”<mr.abdulsaram16@ymail.com>
Subject: Attention:
Date: Sun, 7 Oct 2012 05:24:25 +0800

Abdul Saram also sent out scam mail under the following names and email-addresses:

“Mr abdul saram” – <mr.abdulsaram16@ymail.com> – “EUROPEAN EURO MILLIONS LOTTERY COMMISSION” <europe”EUROPEAN EURO MILLIONS LOTTERY COMMISSION europe – FREE LOTTO AFFILIATED OFFICE U.K info_freelotto@ –  “Mr. Abdul”<info@yahoo.com> – “Gareth Bull” – <garethbull65@qq.com> – “Dr. Cherri Holden” – infficess@yahoo.com – “Mrs.carolynx Harold” – <info@winners.co.uk> – Mrs carolynx Harold <info@winners.co.org>

RECEIVED IP: 202.54.119.135 – LOCATION: India

ASSOCIATED IP: 41.221.17.37 – NIGERIA – 41.249.22.246

_____________________________________

2) INHERITANCE SCAM – TRANSFERING FUNDS – FRAUD

 

EMAIL: Greeting’s my dear,

I hope that you are in good health and God is always watching you and to take care of you and your Family.My name is Joy Donald and im a beautiful girl in this country of Cote d’ Ivoire. i am an ordinary girl and simple bread winner of my self. finish college degree not working .I am brought up motherless but i am thankful that I have my father with me all along till the death of my father on 20th Febuary 2010 in a private hospital here in Abidjan. he secretly called me on his bedside and told me that he has a sum of $ 12.500.000 (Tweleve Million, five hundred thousand dollars) left in a suspence account in one of the local bank here in Abidjan, that he used my name as his first daugther for the next of kin in deposit of the fund. now I can say that God is good in everywhere and in everytime. he also explained to me that it was because of this wealth and some huge amount of money his business associates supposed to balance him from the deal they had that he was poisoned by his business associates, that I should seek for a God fearing foreign partner in a country of my choice where I will transfer this money and use it for investment purpose such as real (estate management) can you be my friend,my guardian,my partner, for the time been.

dearest, i am honourably seeking your assistance in the following ways ) 1 to provide a Bank account where this money would be transferred to ) 2 to serve as the guardian of this since I am a girl of 22 years. moreover dear, i am willing to offer you some % of the sum as compensation for effort input after the successful transfer of this fund to your designate account overseas.I’m very honest person and always like to help others.

Thank you very much, i will wait for your reply. God always be with you.

Yours sincerly,
Ms Joy Donald

HEADER:

Return-Path: <ms_joydonald@hotmail.fr>
X-YahooFilteredBulk: 77.238.189.206
Received-SPF: softfail (transitioning domain of hotmail.fr does not designate 77.238.189.206 as permitted sender)
X-YMailISG: JZaHMLwWLDugrnxWgMa0KL19eLCCrSn4Vjkr9J4aFtdpeB0n RfO.FCSatFLs1uKMnFmNvRs95YCfGGD9V9ixQ2.ZUI18rrVrpd9c6YAKD_ep mGZvxWakYrLqBuZIajyrXKCMsGLNT.Aah2DmKlB56P5PAHpA0J5YhGOGuosH dDTRY0OuX_R3Cigqpyh.kfeN4GzHCORAXV1b8p5TP3x0QUK3U2ADv7qkiZba JbixTzA3LxKAdrJF3EKB6GWB0n_0_ppM3TTYmjDzqJbuNsoU6zGDYX93txZq qxUxiJMeHiVBwpAihr.pJBlWF_EyHO6sAOzxEtrSXQBDYI6r9vT28QfG2bkQ l4MbVzyT1n7Twa_dMibPyUW9rxhqG8pASUyelD5fotFzmrK0X_3wMOZbsrRO R.szB0QOzMHw2joCbG0c74FMFgackwgdLdLwfSuZjYsbQHlvUa0LVhp9U__x fzldM6GUoOtXkGubJ5MRQ6DpKzPL6C85e1jn0T0r9u1LJEuTPejfOuV0qDEV saYEVNnk4mi52SyZlcmFMeWs5t.2HixWTyQ2h4RTFfgmJLawAaYmAJGOYebQ uWegqh5C3LL_pgbxf4a9._LXUl.QPV7XNdY7wzOlJ3TlnmLnSJ3bf0U3zcHY q4MvlCc3owpjYOtD.53dx0hxoYSL2cI2KOFVPcZYz.T.ZQ1CyXAzAn6151hh nmtqAD9ouJeDgJt2SIInkOg5NHv1QWRdh_sNEiTVGdH4mHUSgvnEzn0FPZ_U l78PUoPR4fT8wEDua3xMfYaBj5Kb6a8G2qA6fBrhm86jmAjWXtcVEz0_M3g7 i3nL6AnRLdHhcPL.3Xm0akNe7iDDPlufAlUidGal8xP1Oigi8OpgcIq4Sthv QsHMTO0EfOYCaGrzoSaddqtTlZUfnctjltSptmoQ_DwMlYAY7QnXE00HvRFx EGiH.mwv7zj8Jnh6nxW3YbAtEZ9O95EeTTDlZKxOjGyEWsUl4qKh2IojbP1k pAb7WXT5XgRLMG1win4HfMlGuH15.XzvR.ArRmBQH50Qtckr5QGztIfMQLKq 1l1jsOK9RXb1A7C_DsILoPxg7yKSzmnDgVw.QA8oLyAVPHfxFAdcq3Vobrwq 2z_YIMiI7enn.1Vd0Jxek_GkywSnAcepswcn4eU.neYNWprRs9LCHxorbxkB RXlOtzwgZ7_TrVuVJPNOggjT9fqrEZYnUhUHbmi8SToV3zaP7toPD.Ux5b2z veuMgxkh_RhisgKxWbX7ku9z2CB.x2ZF4MwCiTwED3WCAQrTbu3fopeh1ICN XFDoHmtkcfuos7_eCmTGq8_SCdX5lE3TBlWZU04svWZWMIk-
X-Originating-IP: [77.238.189.206]
Authentication-Results: mta1300.mail.bf1.yahoo.com from=hotmail.fr; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm17-vm1.bullet.mail.ird.yahoo.com) (77.238.189.206) by mta1300.mail.bf1.yahoo.com with SMTP; Wed, 10 Oct 2012 09:25:01 -0700
Received: from [77.238.189.54] by nm17.bullet.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
Received: from [212.82.108.253] by tm7.bullet.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
Received: from [127.0.0.1] by omp1018.mail.ird.yahoo.com with NNFMP; 10 Oct 2012 16:25:00 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 759852.5070.bm@omp1018.mail.ird.yahoo.com
Received: (qmail 95614 invoked by uid 60001); 10 Oct 2012 16:25:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1349886300; bh=jaEN//dfogj2VveAeEoe/VXQQN2SwrOCdupZLniFXYg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=gFNDxSA+fQ/8A8jgKkFMAaKNlbRG81Fr2Blh/islfQc7fwumPFknPMR73jC3ebIw4/Jj4IaBtCCTajqdTlzpH3FQxVOWIRcnul4FVBa1NZN2f+DtPR6t1YHzzZXcfrd1UpORj1wmOG/WHquNyYwesDFYod+iLcHYwQJEIPJrWfc=
X-YMail-OSG: bNrzragVM1mTLrq9DxIX40L1J60JiJhrQ0wuRl7w6Sd1Y7u c6kjz5pTHtaDVpdpayxVP37.bOAv5uVox3wH3edxmNiadIQU_MhECL99_P6g rvJJGcLBsCljDdhiWqr0Lia7jKJHIdfX_w4avRcs0Tu8DTDkWNA31_7_FarE 5nYlfMedww6RvY5K6h7IcIEvs2U1G.CbX9WXYhiKjfdLM1s.v6W5SIPf85RN NspEsJXiafUi1QAXAzPKLhU5.bmFjCz3JER3WhYejBKIdkPQLJ2VE8ct95FS WDB6xtDiU3tRzQcEySrIXJwoMv15ScwC9pYuVs85JwH6ypUAAjAftFarPXEd 6hujb7zfiswYXLQg55XfnQReV36PZHVy6ffLu0QeipIkfC4HHTbakq7ag8Jr XU9qFc.5IR_JpnGYiINd_iBBp1.LjenFSIHT8o9Sw1RHSZMG_iIkMM0eJSVp sZdhbJKJSLaszEdLqD3iUcFwpzHD8iot8Ip6DIO17SMm.mgMxGJeksfmf1lC SlCGFXSmSGO7XZeO4emPmb749eAOGk0CgYHYwdL2RtbFD3fSHqR4LP0KtBJw tmUvaL1yqR_mUcAzvCjSAjAAP0lgfDUNpDZVmYlwbwl6NlJmowcO23eAppF6 rBOFUIVZHkG70Ht502_wTFM_e420-
Received: from [196.201.65.21] by web171605.mail.ir2.yahoo.com via HTTP; Wed, 10 Oct 2012 17:25:00 BST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1349886300.86977.YahooMailClassic@web171605.mail.ir2.yahoo.com>
Date: Wed, 10 Oct 2012 17:25:00 +0100 (BST)
From: Joy Donald <ms_joydonald@hotmail.fr>
Reply-To: donaldjoys1@yahoo.co.th
Subject: CAN I TRUST YOU

FROM:  “Joy Donald” ms_joydonald@hotmail.fr Reply-address: donaldjoys1@yahoo.co.th

____________________________________________________

This scammer spells Federal incorrect  – ‘ Federal Republic of Benin ‘ not ‘ FREDeral – LOL they aren’t smaRT AT ALL.

3) LOTTERY SCAM – 419 SCAMMER

EMAIL: FROM DESK OF MINISTER OF FREDERAL REPUBLIC OF BENIN.

FOREIGN CONTRACTOR PAYMENT OFFICE.

ATTENTION BENEFICIARY ,

The Board of Federal Ministry of Finance Benin Republic. are here to notify you of your payment inherited funds of ($2.500.00M)U.S.D dollars . after the meeting held on 6th of NOVEMBER 2011. His Exelence the PRESIDENT OF FEDERAL REPUBLIC OF BENIN DR YAYEE BONI. has Instructed this Department to send your funds through western union money transfer for easier receive of your inherinted funds without any further delay. to avoid paying money to the fraud stars that is going on through the global.

You are required to send your name and address were you want your fund to be send through western union the maximium amount you will be receiving each day starting from tomorrow is the sum of $5000.00. also your are required to send us the sum of $105.00 dollar for Re-newing and recofirming file that was deposited in this office with your name and address bellow .

Beneficiarey name———————
Address———————– ——–
Tel phone————————- —-
Your ID copy————————–
Your city————————-
Contact MR DOUGLAS JOHN with your informations below:
CONTACT PERSON: DOUGLAS JOHN
EMAIL: ( western.union45@live.fr )
TELEPHONE : +22968449676 OR +22999203703

As soon the required fee of $105.00 is send today for the renewing reconfirming the payment file of your funds you will start receiving your funds as from tomorrow.

Send the $105 dollar through western union with the name and I am waiting for you to give information to enable you start to receive your paymeny as from tomorrow

Send the money with this below information;

RECEIVERS NAME, PETER MARK
COUNTRY: REPUBLIC DU BENIN.
CITY: COTONOU
QUESTION HOW LONG?
ANSWER IMMEDIATELY
TOTAL AMOUNT $105.00

We await to receive the western union payment informations today. Please if you a are not the real beneficiary dont repond or delite
As soon as you send the only $105.00 usd you pick this first payment immediately ok you can track it now to your private system to be sure.

Yours in service
Financial Minister
Federal republic of Benin
WAITING TO HEAR FROM YOU AS SOON AS POSSIBLE

HEADER:

Return-Path: <officefile389@yahoo.cn>
X-YahooFilteredBulk: 203.188.200.94
Received-SPF: none (domain of yahoo.cn does not designate permitted sender hosts)
X-YMailISG: rVs1dXIWLDsMv_.n5QvLQrk7czd0m_vZykzvsDv2bO1NcJ6B mEmKmBbytjJ2Q2q7hoVPQRFf.X6dUoEqTwfUInQ1y31cNswweQ_WvtxI.i4x G_5EcbtSTAVFV_Tb4UXEP5nfbLLR3OcUBVBsg5a5QXdq93GUClR8IM3EZ5Oq Ax7QU446TQrW4z5fvkmJx3BMyug0lDIr.UKXxO4wFuMypYMVzckAr19SaEIM 9HuVKawHWF29nJmCMUx1.u.4D0ux2wFAlii5MeUQ942cVWxRJNRPKcmbs.HI xfvch.PCVUxqRomtl.EHpyv..T7KNAcWhNhb.OyXv.2QECxKRPe1A7JQ3esP SwDsYR_GQhXSI6NrwhwyUw_L5OuoS6BVHHBBLlwcEVolhJCEGaAjbppebA8J evmsqJ5PFkMZld3WHHJKdpHcYATjH92mH_OttCP.t_gHne6LdIMpg0icfVbo JUw8u4QIpzjvDbBLcLOo7FKhjR_..Dw3CR5HiVy3MjdTZZSVWnsizrHoNYE5 ravSWhY7xBCAUFpwo3u_TWaz0OusXIdi4QFDzivf0VIeiX7U2loHfgshFWfv XZnqeScp1sfpl5.qC8A.jyo8muRr0mX9Tl9byXrF3WYKvEdt3W8eOw0pl6tr nVjmCpVK3My0FU0bhunib_bq4I.amgNLqsYq2RCFlXCeCHFfOKNnfxNjbynC hxvT_tPcgA7lKv2YKqXSpx0aPsEAli7rWut4ZUI.mbV9ciR48JO1mZKsFMun Esrk8D.4ejFipPpmySq5vieercIDg0U79Pww_IHpoccnLrUXM_pkm_n5CE5W J5j0vgLwbYEKKiNM4J.qM.pziSivmA3LHJx4AT_NN_Ifx60YZTyinP8JewNB nEbJEKBjRYYIcrvzTgHy_Hp5rIhJK65y8uhTrNI1le7l6deAErzP.vQvp7RZ UQ061OvKu0ROvUPBj6ooxDZJiQPzlk5YUlYRoNhyiOarHEJYYvHrc2MAfnbs SXemLmas9CFQe.FOnAWLXg6IJXXnlJWn0Suo3DTioi7qFA.PEES_wVpW8Dq. pHM5id.fOlTcNRbobhwM5ELiEbv8UqiWO_xk43r8CF53mgnSxRGX_ofgT.vM K7TyCiTkiLJqrRPsj2XGv6qaEwrHZQVK_zZAm8bQlHgHMW.EPX1efMclxHr7 Hv87ie3KJVlYsbpt41qN.jHZ72TTGfgMUBIpd11uFx7wBWTNJnzM8wuflbWz 7ScRo1Rd9xaY2kgiJd00y.yGR9q0Te8G7.2gs64XgAj.rJHJEesoyLAnHor7 oBWj5K.idQo2jtWtMldstigscuNvbIdpB8ho6rmCzuBDmN33y0aFRpxE8w–
X-Originating-IP: [203.188.200.94]
Authentication-Results: mta1342.mail.gq1.yahoo.com from=yahoo.cn; domainkeys=pass (ok); from=yahoo.cn; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm12-vm8.bullet.mail.tp2.yahoo.com) (203.188.200.94) by mta1342.mail.gq1.yahoo.com with SMTP; Wed, 10 Oct 2012 07:09:33 -0700
Received: from [203.188.200.220] by nm12.bullet.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
Received: from [203.188.200.63] by tm7.bullet.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
Received: from [127.0.0.1] by omp1004.mail.tp2.yahoo.com with NNFMP; 10 Oct 2012 14:09:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 119691.33270.bm@omp1004.mail.tp2.yahoo.com
Received: (qmail 38888 invoked by uid 60001); 10 Oct 2012 12:59:01 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1349873941; bh=MP+++lIJyYrpj/aXzm3tMnmhmfCfqMXOi5e1kzYn3Tw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=LVkAtUGaJbi5dfKJkjQghJrT8gUU0PgdSqmZsd9E/ZHQ6/CG6mgNm+rvJDts6pp3AiUWIw0omchZ9EGQ4FunoccmA2lDVIGS7pb99sdl5hsF0AkgCspFU5fgyb8PuayE1Yj98s03K9J4GMwWfqlVMdLewAIrzkJxc6PdD07aZ9I=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.cn; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=c38Gpj05IhDmqBiYzJHOdEYJeIkGQAvzHcxXPhNy+G8fqdVpH1DSEJEtXQ2/1BsyYYvWZ8vCfJOX3lA93bclbzxnjXmUqQmhkeuQy2JqNskNXltl1tRwk609ukguAOvwLPnMhfqMio8PHMWIVwSnCRb2k3C14uRVjsQ6OpWNeTA=;
X-YMail-OSG: _GARL1wVM1lqQRqVGyFk1sZRYyWzAuNVhJd1sZHEBwkfLNd PMIg9HENG
Received: from [41.138.89.38] by web92411.mail.cnh.yahoo.com via HTTP; Wed, 10 Oct 2012 20:59:00 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.450
Message-ID: <1349873940.38815.YahooMailClassic@web92411.mail.cnh.yahoo.com>
Date: Wed, 10 Oct 2012 20:59:00 +0800 (CST)
From: MR DOUGLAS JOHN <officefile389@yahoo.cn>
Reply-To: western.union45@live.fr
Subject: ATTENTION BENEFICIARY

41.138.89.38 – BENIN / NIGERIA

“MR DOUGLAS JOHN” <officefile389@yahoo.cn>  westernunion45@live.fr

_________________________________________

4) SCAM – MONEY ORDERS – MONEY TRANSACTION – FRAUD

EMAIL: Attention please,
My name is Kim Wong, The Owner of Kim Wong Trading LLC,Kuala Lumpur Malaysia. I have been into Manufacturing of Fabrics,Textiles and Furniture Wares since I was a little child that gives me about 23 years of experience, I majored in art in high school and took a few college art courses, Most of my work is done in hand neatings mixed with Machine Embroidery.

I have recently added designing and creating artwork on the computer, I have been selling my Works for the last 3 years and have had my work featured on trading cards, prints and in magazines. I have sold in galleries and to private collectors from all around the world, I am always facing serious difficulties when it comes to selling my works to Americans, they are always offering to pay with MONEY ORDERS OR CASHIER CHECKS which is difficult for me to cash here in Malaysia.

I am looking for a representative in the United States, Canada and Europe who will be working for me as a part time worker and I will be willing to pay 15% for every transaction, this will not affect your present state of work. Someone who would help me receive payments from my customers in the united states, I mean someone that is responsible and reliable, because the cost of coming to the state and getting this payments is very expensive and time consuming, I am working on setting up a branch in the states for now I need a representative in United States who will be handling the payment aspect for my company.

These payments are in money orders and cashier checks and they will come to you in your name, If you are willing to WORK as our representative, All you need to do is cash the money orders and Cashier Checks, deduct your 15% and wire the rest to my company cashier here in Malaysia.

If you are interested in this PART TIME JOB OFFER, Please get back to me as soon as possible and send to me the listed information below:

1.Your Full Name:
2.Your Full Home Address
3.Your Direct Cell, Home and Office Number
4.Your Age, Gender and Present Occupation
4.Your Marital Status

The only problem which I have is trust, It will not cost you any amount, you are to receive payments from customers for my company which will be sent to you by FedEx or Ups from my debtors, which would come in Money Order and cashier Cheques depending on the of the payment my customers wants to use, then you are to cash it, deduct your 15% and wire the balance back to us.

NB: All charges to wire the Balance to us will be deducted from our money, so you are rest assured that you wouldn’t spend a dime out of your 15% or your personal money.
Thanks for your assistant and God bless,
Mr Kim Wong
Kim Wong Trading LLC
Lot 925 Jalan Kepong
Kuala Lumpur 52100 Malaysia

HEADER:

Return-Path: <mr_kimwong@etorq.net>
X-YahooFilteredBulk: 211.154.152.136
Received-SPF: none (domain of etorq.net does not designate permitted sender hosts)
X-YMailISG: yoXgebkWLDvhvSfGpf994bmowTFZpMDPw.1lseHkGA6T1SnA p1t3YxvxJS8N8EA6awflpA_S2QDZLDNMysomaZ_MhaETYuaVnjK1VCJfTVKg GS9W.3ZA3E0Nh3jVpAmuwHhVIFDW4md6Ih9TNntrWk8ZC7..jVHc9sonfVfW kOEygm8wmiN5oXRKB.x2mDSGgaNgpBu41IjFp3gBszrQIbsrDvNrrbX9uTH_ p7Rmx_l0Zrnd9FnqK.6C.zDTZyUuBsTQzCnWsM8tN1i_VRV0x_8_U6RqsTFm msR1VVPtNvDefm9IQjfYvdwJi5u2l5cNzeXjhEbiJmh2X_yK3vkalx4gjUjh AA_sYJdx7rgzLQ4_6TUXm96XQ0h4Dj_q9q4rAkf4ng0GzIJuMbhIWz9SSyc9 ky06NEAdJ.cBOsYY9pgrcAknG7Y1E2ecsvgQVSvIFQkstnNfG6BfSLt4dUe5 P1m.zXjK0.Lt9okfVcAJD33H_m0P1BCnItM4qwEFQmK91MxCGzCumuWqjPgY mJB_mcLtk3GZYcEf5z6pgS4q0NcL5BxMZ9pRg2jSIh6L8.EofXjDJ0QLTH2F oIvu9VLDtSm9CGm4dH3bF.fLuKCzPWcIR0W.cTJ1lx5E6.3cSpC6tu3xvrKT 3wtlgnidfUeFjY_B40NbWu7gSyUVmUYqSZcI53AkvjJhGr8UVgQZeZQz3_dF G3IKjw1ZbJO_m6WGSUENcg71vx7nFW7LeSncqg_yPEKXpNHTZoqUy4vNPlJB .edCKetnFzhsNi.fpSYxgKwiY4zAB7lAAnGVv_LTSiuNHY8Gq4_BjbG7TUVh 1jEbBhPSdv6h2Xn2d_a7_wluSypmlmmijiwoAyjJIzXIQRxOGyAQUpLNt3ic kidbPtvVlp9C5BxHHlSC4l_TaH2audAFdA61K6KkLpVzKbs7aDlwAG_4JY.P eHDCSLcxciwXAbIVMDhDjZzvgAxY9jnt1sY71l7n7d1dl6ufMrE_o0_qDe1j gk.030j9Eoh1E1ERfEHIOI85Czc2grhxp1jZP1GPEcz_HcFqrSn_eKAq.2ab BfXWVSKD5C53t6ibYYh55uQciKnQjLdW1DfMxvcOadU56IUCpJhN_X3tzBgB Vq7jtWkEC6p8UoTEaiFTL_bWrElyr4fvGLTgBOPVxMvn1t.ZmSAZquSUnn4E qSyewFfWh_6vi30xuvWs7yvkhvzMwEH_vHf6qrBNx2h8JRqQ
X-Originating-IP: [211.154.152.136]
Authentication-Results: mta1468.mail.mud.yahoo.com from=etorq.net; domainkeys=neutral (no sig); from=etorq.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO mail.giantsea.com) (211.154.152.136) by mta1468.mail.mud.yahoo.com with SMTP; Mon, 08 Oct 2012 13:09:44 -0700
Received: from User ([82.128.3.119]) (envelope-sender <mr_kimwong@etorq.net>) by 211.154.152.136 with ESMTP for <pondillobelle@aol.com>; Tue, 09 Oct 2012 01:25:27 +0800
Reply-To: <mr_kimwong@yahoo.co.jp>
From: “Mr Kim Wong”<mr_kimwong@etorq.net>
Subject: Your assistant please
Date: Mon, 8 Oct 2012 18:24:46 +0100

FROM: Mr Kim Wong mr_kimwong@etorq.net Reply-address: mr_kimwong@yahoo.co.jp SCAMMERS THIRD EMAIL-ADDRESS: pondillobelle@aol.com

Why would anyone need three fake addresses and fake IP’s just to send an email? Only scammers go this far to confuse and hide their identities because they’re cowards who lie, cheat and steal 🙂

 
Leave a comment

Posted by on 12/07/2012 in Lottery Scam, Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

A list of three scam emails

I’ve compiled a list of THREE scams that were sent to me back in September 2012 and they kept getting pushed down in my spam box. i’ve looked up each of these scams and they ip’s and/or email-addresses have been either blacklisted, reported, or both. they are 100% scams!

______________________________________________

1) Mystery / Secret Shopper – JOB SCAM

EMAIL: Work as Evaluation shopper and earn $500 weekly reply if interested.

HEADER: 

Return-Path: <rbud743@yahoo.com>
X-YahooFilteredBulk: 74.208.4.194
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-YMailISG: AKqJ9t4WLDuLDZ8EZZ2u3Vhgs2RNEh4aXjZ7kSSWXBbVAv27 JuBiH_aCg6MvjBaLtMO.0JhXLKpM8ii1YEm8h.bFObLns4nMQlhEuIaOypzf YAFLEAhgf2YH3_pDJA6RPA1iH4GD82FsJ1hxzx8FwLfw9flBPA_QVArVHg_h m.nDYlX6pFBPN1kN5BXyTwsrpS8DrWxf5h9pc5u0ORutRWVmmWxtyTqongzC AZxsQhOSTAeUSgJlrWrj13kGVmyz5egnbmw71fMxby9dLjhQZ_I.65L5aVED uaj9eUARz5uXxA9Nr98SIEpyTsr7qpzboLTSAxZHGXwTxG6WaoqigWyqxPNB 8tkNBi2aZZc82kCiAZ6y4bIJIsGVQv2KbAzEQihTxZ0q8zpkpD1LLH1PGih5 a82YTC.4HsC2HXhwZeUKptTF2_JEKlnhXNn9tegHb3_vx9h2hx5nH9JlZDF9 GYjXQ4BHx8UFQ8IpAAB3lKXN1Rl1l82cHtG2x9XSWas3T71G1EnTjIW.UnJL 8Wy.OICrembxbDZik.cv_yj_7APLx4POhhoSXnmOkgg1zWZfdqVRhjOw.Pk3 qruW_GaAce8POox4vtMRUHwd5ec1p922vVYgZmceTMr2KgfAT.ALodh_crPy wYcjUG_wpNMK3q5_QGyhnzcLNz.w7boX6vI9rqYnVC93nBK6jicjPHfE_p09 EQN9gYTlrmX_OkOhZtosYI9CjI4d7awR.RjWmpFiU7w7gZSVuSbNvej7_dPA QR3_BaQXgMfbD9f9Bcd4BBm6Ncwo3hQI8pYMJMaJxjZTwQGiLQSHOAWgk1bE 3PmyPCxH2BUw6B4yjRwPf32ee.qd3yU3c9T60ZaYsOKq8H2oC34IphIKeX9c Zp_CGasShwklc4Bc6J1V4dNHSpE91ybvbKiK_QCETua1O.Jnn_BmFO.X0tBW qvW8MSKLQI3dxIVuxVD6wQqjdrlbRjBOsZTXa0ZNYeWBxEkbDTAoHvqm1GkO qOC1bLUtx2b71g3GZpPxGQb_WUnhoQRtBAtFRiB7VJj.vQ6jFEI6uxk9DeQm iEjd7zK4s4139xO7eIBpSSEy2oaUzqsEtTavLSA6KHgB87t5IQtPA6aCdsE1 3iuDjHCuQ_Tx2tw0UAgnKWm13UKA6QV84.cN
X-Originating-IP: [74.208.4.194]
Authentication-Results: mta1236.mail.bf1.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mout.perfora.net) (74.208.4.194) by mta1236.mail.bf1.yahoo.com with SMTP; Thu, 27 Sep 2012 05:37:30 -0700
Received: from icpu2633.perfora.net (infong656.lxa.perfora.net [74.208.16.162]) by mrelay.perfora.net (node=mrus1) with ESMTP (Nemesis) id 0MNJ6P-1TO6Ag00Cn-006tJO; Thu, 27 Sep 2012 08:37:29 -0400
Received: from 64.62.210.227 (IP may be forged by CGI script) by icpu2633.perfora.net with HTTP id 3pIPGX-1TlNhr3xrB-00o06f; Thu, 27 Sep 2012 08:37:26 -0400
X-Sender-Info: <154550926@icpu2633.perfora.net>
Date: Thu, 27 Sep 2012 08:37:26 -0400
Message-Id: <3pIPGX-1TlNhr3xrB-00o06f@icpu2633.perfora.net>
Subject: Earn $500 as an Evaluation shopper in your area.
From: Secret shopper <rbud743@yahoo.com>
Reply-To: bunniebug@gmail.com
Content-Transfer-Encoding: 8bit
X-Provags-ID: V02:K0:q7XGMi78NyFU2vB+AV5/lUFl9H98ItYD9tLebyHhAA9 D0m97d8zgZKfxlxuq9UDrMJegI60FkR/i9yiR6s+ClfFhTdW82 rAyxkW0MOpaOrk4OGp145YpcbEzlvc2VFiYRQ/rs6aB2qcOPN3 NWsuAhg3PAiNdEwA6dwxoRHieSsNCys0MCLKU+1KwF9t3ityOb +0h6hFjTSFQcDRe/zyg06xnSxE3maK6IsAX2Nd1M4qbEFSyI9i 5Fun6VBXSQ6J+ZAUIsFI5SJ89/OaBqUYBkxv20+wKWBINPrD9L DG+HtYDgwRcz0KeXzqNl6gn4xUUQtJvPCBgosLOpKvKwgM7+xm b8vfu2v3JIk8MzEz+GiIGqRcrSOI0MNEZ0pg3V0jcmYI6z5qOg uRKeU9ng+gFFtzlnhdhW3SfwBG8kAe5MbgLNhihFFOcitw1pvf 2JJM8

Secret shopper rbud743@yahoo.com – Reply-address: bunniebug@gmail.com

______________________________________________

2) INHERITANCE SCAM – NIGERIAN SCAMMER

FROM: “BARRISTER IAIN WRIGHT” <barriainwrightchambers@yahoo.es>

EMAIL: A “Next of kin” file was attached to the email I received in my spam-filter.

HEADER:

Return-Path: <barriainwrightchambers@yahoo.es>
X-YahooFilteredBulk: 98.138.91.65
Received-SPF: none (domain of yahoo.es does not designate permitted sender hosts)
X-YMailISG: M2_fjBkWLDtzFm2rFbGuKofV838RG80_qXL6ZuDED.RFpUhN QzoD5j712gVhOoEJsZ_uRf.2zvCTUEDGuBwy7ek.Z_cs1.Ow_uuIMz1W0KW5 jz3j8cAvY4pVwyF92hL8sb0bk5etdgQljeePH7D7H0t4.QwwJ0D3rZLAmRtX EA.nsroRjdhC77B3fJekjgoYlRDbjEQ04x121ZVEfEWe.3fW5SyxaTfR4KgF kzRSvkuZWiHMl.95_MNF52w6FlXZe0s57mnJ39QygzPNuwxz8r9ltiLrDxzW CEcFpO9AFuqw8nCW_R1XtK6G1b6huW8ePJC.leD0fnho.XtvHjoDVo_y2ZfO WqNr4Oio3P19odWSC_sGQEZrl0EM.EkuUagsnXV7xRvQu0jtqShpW31_Z.tT Js6CVCXWfKboozjD9cQ3Gw5bIsAuPseovHYlMJDKjcPbBvIYONMkwcJm7g2s 0kCNA.NZ8XAplJwzsrfD6kozvvEtlBUiYF3WgpuwanpG5wdit6Ji_PU9PfOC K1Yz9q3yP.kaa5agusvK9DslBIL2BI1sE8wAmfxOndoXnT_OBg1A89tKyHvi 1NU.rgxEXocZHUvCmOi6finC8JS_HOXotztzI3k1UAF3p7LtuGi1rlULN_t9 ZlqKoyi9DKSLjJr7mmT2JNYk3Dg.8I.Ufm1UafFyn.vMw8Leij6Hz2bF2v4Z iDKSJttG_KsvKA8BBFrV4D29WitXnXW952k5J4ki0t2MJGF_52sryyhf4Xbc V5VMk8lFNV3RnVxbzFZ4F.Giex.EZykeqvgYWpD19NU_Aa9Bl_Gj6jfDvnBA VxjF4ZQdNb8ILQC2s7WQ5xxYqTIRJSny3nDVLHk0CsksYsoQa1ZsyQcnzmlD .BbVo322yE5eFDLysimD_pbd9GGtPqvHK0oFnA87dDQ8m6EwoczOZyq5MLZh 6ak6I15eZdeXgBCGjDot4PbER8YPaczjKa1gS35fSifWN6mdVTfrENbi1KI3 trybU9EqYKxs.Fpi7cVpEvg3_7dDpGnTc4sHhBRgEdf1RHq4SAIt4iYl59iZ dPLvX48BTVkdm_jRpF_bSsX18FONqMeNma.2vF7zQyPEos7t9v.zV4BCFg5K D8KR4VuGmgZUv0rs9LTQMcmeGz5EdaudBaAQNTIdiFhnYQt4ueJdCwRRX.iJ 4itjVlPHvxCwCSOCk2pTW.fWLQ6tzFDa0wLErfkvjqPzSZQlvl5P_dKFrKkU Qw2FXmcwWByns0lIRh4e
X-Originating-IP: [98.138.91.65]
Authentication-Results: mta1268.mail.ac4.yahoo.com from=yahoo.es; domainkeys=neutral (no sig); from=yahoo.es; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm8-vm1.bullet.mail.ne1.yahoo.com) (98.138.91.65) by mta1268.mail.ac4.yahoo.com with SMTP; Thu, 27 Sep 2012 04:58:00 -0700
Received: from [98.138.90.50] by nm8.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 11:57:57 -0000
Received: from [98.138.226.126] by tm3.bullet.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 11:57:57 -0000
Received: from [127.0.0.1] by smtp205.mail.ne1.yahoo.com with NNFMP; 27 Sep 2012 11:57:57 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.es; s=s1024; t=1348747077; bh=hGsZAt5nOQ2q54GDVUA2RwhZC83Cp9+/EC4wFdxVyYY=; h=X-Yahoo-Newman-Id:Message-ID:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:Received:Reply-To:From:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=MoAzd3e63PqKFngqb3VCbC/Uo5orULDk1RIM6/2B2RYLBM6h8uptxC+sRFQJ5iLRKi39kay5dKraN2XrKP9u9wtXAlDdkFnIeciEVnV6i7gEZEbsYRdtEOasJq/ybFCUCe0XpeR66OnUwYqE/p86ZL91DAWHBLrkFvdalJQMAxk=
X-Yahoo-Newman-Id: 947141.79026.bm@smtp205.mail.ne1.yahoo.com
Message-ID: <947141.79026.bm@smtp205.mail.ne1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: rcoOjawVM1mWxeqldCK7BSKWgrYcBs1inBlj1z5n9ltVGqo lXNdgbkjin6Ym0hriCxY8RhKC9z3UHynFaVcypefuZJk2AfXmrAilKSE4vb5 KeOc2ioP7iy1rfjaZZVzV.cycy5VbHL7AbItmNPTqrNiyjcb6iaEiRVHxvik NfO9dnBB94DVyHbVr29ZagMutfYnQg5KSy5ewpvMP4MtcfN2sKjatIfTNS4D L4jPTAEBbDvd5mh_QaFWkJE3.eudqrsdxkVy.YLapxZkLJyfub4CI6iGV9HD D4elT72CmoNh.KfYjif0wZS8DIXtc0oDVVaNR_ovjQW27WIB3VWtwpk00VZ1 0wK_SM7gHK.xJVFiu3aG.hYTYe8.gByUW0F44tzkpBVsFkSYXI9zlI5KUuy_ pkATHZ1qonT9DuCxgQgGPlMDlUztCamZhoye_.Bt74oBCHBS2vEhHI0yvsVg X93Q9Qaw5R_gx8iEan8y1B6IR9ErqB9iC43JStRYaXZmWkR0-
X-Yahoo-SMTP: bFYQ04.swBA5PmeNAjXtnC8HS1fNQYaHrFuwM8HILFjy
Received: from User (barriainwrightchambers@41.58.49.104 with login) by smtp205.mail.ne1.yahoo.com with SMTP; 27 Sep 2012 04:57:57 -0700 PDT
Reply-To: <iainwrightchambers@yahoo.es>
From: “BARRISTER IAIN WRIGHT”<barriainwrightchambers@yahoo.es>
Subject: WITHOUT PREJUDICE..PLEASE READ MY ATTACHED LETTER AND REPLY

REPLY ADDRESS: iainwrightchambers@yahoo.es IP ADDRESS: 41.58.49.104 LOCATION: NIGERIA

______________________________________________

3) BENEFICIARY – 419 SCAM

EMAIL: Hello, 
I am Mr. David “Dave” Darrah the Assistant Director Inspection Unit/United Nations Inspection Agent in Hartsfield Atlanta International Airport Georgia USA. During my recent withheld package routine check at the Airport Storage Vault, I discovered an abandoned shipment from a Diplomat from London and when scanned it revealed an undisclosed sum of money in a metal trunk box. The consignment was abandoned because the Contents of the consignment was not properly declared by the consignee as “MONEY” rather it was declared as personal effect to avoid interrogation and also the inability of the diplomat to pay for the United States Non Inspection Charges which is $3,700USD. On my assumption, the box will contain about $2.5 Million to $3 Million and the consignment is still left in our Storage House here at the Hartsfield Atlanta International Airport Georgia till date. The details of the consignment including your name, your email address and the official document from the United Nations office in Geneva are tagged on the Metal Trunk box. 

However, to enable me confirm if you are the actual recipient of this consignment as the Assistant director of the Inspection Unit, I will advise you provide your current Phone Number and Full Address, to enable me cross check if it corresponds with the address on the official documents including the name of nearest Airport around your city. Please note that this consignment is supposed to have been returned to the United States Treasury Department as unclaimed delivery due to the delays in concluding the clearance processes so as a result of this, I will not be able to receive your details on my official email account. So in order words to enable me cross check your details, I will advise you send the required details to my private email address which is ( davidddarrah@zing.vn ) for quick processing and response. Once I confirm you as the actual recipient of the trunk box, I can get everything concluded within 3-6 hours upon your acceptance and proceed to your address for delivery. 
Lastly, be informed that the reason I have taken it upon myself to contact you personally about this abandoned consignment is because I want us to transact this business and share the money 70% for you and 30% for me since the consignment has not yet been returned to the United States Treasury Department after being abandoned by the diplomat so immediately the confirmation is made, I will go ahead and pay for the United States Non Inspection Fee of $3,700 dollars and arrange for the box to be delivered to your doorstep Or I can bring it by myself to avoid any more trouble but you have to assure me of my 30% share. 

Mr. David “Dave” Darrah 
Assistance Inspection Director 
Hartsfield Atlanta International Airport 
574 Airport South Pkwy 
Atlanta, GA 30349-8642

HEADER:

Return-Path: <pop@allencountyohio.com>
X-YahooFilteredBulk: 76.2.207.6
Received-SPF: none (domain of allencountyohio.com does not designate permitted sender hosts)
X-YMailISG: EUAkKlQWLDtsLHISUQeKpcEKYRzqJ7wJNr_C7p9ML278m16_ Za6J9Pq_buEhDSzzga9w7u3z1iiVkG7gWd3.2GgTG8oqtDYIY8JzWTuAyM.W WLRMqYmljQmJWsOxzbD8S_fg8qHSwLKsMrgjFNK__hHCWl_OkV2lCszsEvIo k27rgsD051sETLW6NnPpM5Y0gQvMg0ZtrVWFgeC.9GTGxpsgbdMFgmTRfqmM pheXss97gqtPwEg8Visf4uC1SekpoOiJm3EwqEomx9xhSJT79hjaDWhgzH6_ COw4PblMM0YnLd9ye88K602PP4Itc87alAKLw9aAh2N61EqrpnDdzqGvP0PZ HfeXg75.3G2CXJAiHD0FHo9JgFp7aG9KyBmrFWRU5648VTW3mDKWe2C25sU4 98uMND3e3IyyDdn1_MHnUp537ptCYyHU6paAoF.omX_bckCR1_VtbfFifDzv _3ILiunWcszXX50ipE1PPMoucSObhqP4Gc2UPSwgz1IBcjQ.YxxbHwcsCz6h vUw3MG57kjqDaJWcy7ip0UHvAnkL64hsG8UKNWHQFtXI3hKpZmc7pOZN42Ai SiJass6CfuEA_t0BXQjGsOrKMoSy.baT7g5EOOpiLtalKToSBZ2KQUBykov1 ODt408PwIyv_UTtB9Vn44XSBJRdE1pVeBwI70kTBC7XD7iU5RfQEau1BG5.8 .QV9vamuNCWep66Ro4xk67qxP6uFL5Q7AbQkujfaZt48c9Dlqae4ZQYuBY58 q4tchcGcICVFhqNUkkDxvwp0xBFxpRplgsJNrg4cKiYTWNQjtcDifMnu.4tE ZMaxugmgEuDm_fMvwqdzJ4sSf29PXJGtI5UserjFwSqYNUhP.PdnaRPwmsvj MeNyxMnzF79dlwPy5dvtSHHyshVxes0Kav8q7gwt8IvbjDFCPrQs2yYehH0W 63ywC7.8X7qlHDgqBcijwuALY9.aI79s77ktX.3z2ITl4YjnXnLRnar5.uhg FL68BNGEBL889saAu6hE0kDLmVkjZ8.COuqfoJc2bkgkT_..DnxIummB1vyv _xT9agrwPBPnUSAlr4CuMCm0hNl30RlWKczWH5sSV1o72hzr5Y6aQY.ZV2Gi .miiKTWsDm1oPmRIR1XtGbCqdrWipNC0MDw4U_NDKhgsqe_vSZC.4xB0.FXJ AmJK6BheyqKbdPqbEmwIQJyDDTBZQlC1QR_m0qgumrsxGuM86obaeiFMLugP M0KnER8ZIyhxrn0ZYCLRCkBF7JcP4l1ZQ.x9pI58fA8YQXHL2.e.Uaqv45PB nW1q.c60yFPROZVrD0jAphIl74s0LojMk0tLhgnvWODWpMVigRHIQXPjwC3N CkpHlCjBQGVFLSppGYFJdqcLxysTIF0ZfcTNB6jwLcwa7EoynkQahjiudRpm _rJngrLoamoCJcV53j5adQ.GLSpkcTsSNjZ6fBDmjeEnr5sklf7302qx3lGz m6UkBOA_.jgAksqlCvX3yDdeNH0_gwNaP.eqIvVP3pOyD7d6glmnjQVHKsr_ ARaX9Yl5LxZKu9MMZFP7uGcbf7L9Ei_RlRJ6UU2F5Q–
X-Originating-IP: [76.2.207.6]
Authentication-Results: mta1089.mail.ac4.yahoo.com from=allencountyohio.com; domainkeys=neutral (no sig); from=allencountyohio.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.allencountyohio.com) (76.2.207.6) by mta1089.mail.ac4.yahoo.com with SMTP; Thu, 27 Sep 2012 01:35:25 -0700
Received: from localhost (localhost [127.0.0.1]) by mail.allencountyohio.com (Postfix) with ESMTP id 2D621122C8C; Mon, 24 Sep 2012 13:25:46 -0400 (EDT)
X-Virus-Scanned: amavisd-new at allencountyohio.com
Received: from mail.allencountyohio.com ([127.0.0.1]) by localhost (mail.allencountyohio.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J5DNgyAg-5Go; Mon, 24 Sep 2012 13:25:45 -0400 (EDT)
Received: from mail.allencountyohio.com (mail.allencountyohio.com [76.2.207.6]) by mail.allencountyohio.com (Postfix) with ESMTP id 8E249122A27; Mon, 24 Sep 2012 13:25:35 -0400 (EDT)
From: “Mr. David Dave Darrah” <pop@allencountyohio.com>
Reply-To: “Mr. David Dave Darrah” <davidddarrah@zing.vn>
Message-ID: <683849525.104969.1348507535471.JavaMail.root@allencountyohio.com>
Subject: Await your Urgent Responds !!!!
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: [64.250.124.220]
X-Mailer: Zimbra 7.2.0_GA_2669 (ZimbraWebClient – FF3.0 (Win)/7.2.0_GA_2669)

Mr. David Dave Darrah – davidddarrah@zing.vn – pop@allencountyohio.com – 64.250.124.220 – 76.2.207.6 – 

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: