RSS

Tag Archives: United Kingdom

“UNITED NATION CLAIMS DEPARTMENT”

RECOVERY SCAM – COUNTERFEIT CHECK FRAUD – 419 SCAMMER

NOTE: YOU WILL NOTICE TWO HEADERS UNDER THE EMAIL. THAT IS BECAUSE I’VE RECEIVED MORE THAN ONE EMAIL BY THIS SCAMMER AND EACH EMAIL HEADER IS DIFFERENT BECAUSE THE FRAUDSTER IS USING FAKE IPS TO AVOID DETECTION. IF YOU RECEIVE ANY EMAIL’S FROM AN UNKNOWN INDIVIGUAL AND THE IP’S MATCH ANY OF THE IPS BELOW, YOU’RE MOST LIKELY DEALING WITH A SCAMMER.

freemoney

EMAIL: United Nations Habitat Office

3 Whitehall Court
London
SW1A 2EL
Tel: +447017419229
Email: un_msn@msn.com

Good Day,

This is to inform you that we have received your email contact as one of the successful claimants for the UN-HABITAT compensation payments.

For your information, this compensation payment is being made to all of you who have lost your money through any on-line banking transactions or as a result of internet fraudulent activities. It has come to the notice of the Governing Council of the United Nations Human Settlement Programme that many of you have lost your money by falling victim to some internet fraudsters.

The United Nations Human Settlements Programme, UN-HABITAT, is the United Nations agency for human settlements. It was created in 1991 as a subsidiary organ of the UN Security Council and it’s mandated by the UN General Assembly to promote humanly, socially and to process claims and pay compensation for the losses and damages suffered by beneficiaries.

We were officially contracted by the Governing Council of the UN-HABITAT to convey the delivery of Check payment to your resident address. We guarantee your safety in this transaction as we have concluded every arrangement to dispatch your Check parcel for delivery to you through our FEDEX Delivery. With this delivery option, your check parcel will get to your door-step within 2 working days of shipment from our office.

In accordance with the procedures established by the Governing Council of the United Nations Human Settlements Programme you are expected to provide the below information.

Full Name:
Address:
City:
State:
Zip Code:
Country:
Mobile Number:

A shipping/handling fee of $500 USD to enable us deliver your cashier check parcel to your provided address.

We recommend that you send the required shipping/handling charges ($500 USD) via Western Union Money Transfer® using the below information.

NAME: Ben Smith
COUNTRY: london, United Kingdom
Text Question: Color
Text Answer: White
MTCN #:___________

Money Transfer Control Numbers (MTCN) are to be provided by you after payment with the western union.

Also, you are required to send us a scan copy of your passport or Identity card. This is to confirm your identity by our delivery officers during delivery in your country.

Upon our receipt/confirmation of the above requirements, your check parcel will be insured and dispatched for delivery to your address within 48 hours.

Your satisfaction is our priority and we look forward to provide you with the best of our quality services. Do have a wonderful day in anticipation of hearing from you soon.

Regards,

Marcus Wright
Dispatch Officer)

HEADER:

Return-Path: <unclaims@msn.com>
X-YahooFilteredBulk: 65.55.90.110
Received-SPF: pass (domain of msn.com designates 65.55.90.110 as permitted sender)
X-YMailISG: Q4P8yzQWLDsIYkC2RV9ZvS_EDjC245d9dFAmW2vnK4a6Jm0Y DIqOn7BURltdMROsZSDYHKLiW3Ge4URNT9rVB5bC9egwdn27lwj096smGSaH S6XoI420qujbv8PXR26Q.e1pRyO1zEcJXn1m51WwnG_FW9V7gM1_dsQCZKuw hYt7biegQCY3CoZECESZ6u4H0HUqz.7IrIAlyQOZtMhiF8nIj6Lml82qqZs0 Ze2_E09oOSsMYRP0nkJDUjs9.g0UWMwi527505334PvuqSu9EUJSU3yRDTFw 8gNEUnw1qYZsxZrJe0GfoPpn7NR1Zl8mij58BhSaTEqjzjXJR3u3J1wDOeWe CjzAm4OyFt4SZh.B.6tNsLmXkb8vMhS4Ubqyv2zZC5kDDKnfNDFxs53g.Ykb N0OsTfsk2GwqwJEGMg2xs1WPt4BnZeN0y21C2C0_oWt50sUSSpC7BDHwhghD _xlVIp.gPfgZvpG99j9mKZNCmNMU3gN2kARj4a_H6qgI1ZbHBpb1NDBTFu8K XHtU9lre5CA4ejNXxXqgjmAMZbtq5buf8bM80ZGkcuCMFpD.htXTL8jAj55p wU8c91G1eVGexCnTTvmGbVKi6UtRaIJFUZX7XphQjb.5.7MNitICPqBSZsdp wRcoJ7fDJrdFG4kJV9NMluCn9JgjTdCm_zMIOFgWbTr58VSJ9EjtMUEJBwTN sWsHkCoy90KG.PKF6so73QsQA7Ob0Fx3YK_nJZA3VZ5dbzlNhiMyu4xt3F33 MChOB1OqMJ2z.STCaGCXfWj1g0jUiLWoWRUZZPQt8WQY6STWZUg6PBOAqvJl MgYbB7hhkAzm.GAwusD0_NOYA84gd3j6VNkDNhFnLQS0uh3i3aDEQSg5bwdT ffh6DnxtkQXOCX3UhlfMhacIpMC9NOv5lH7WsU5xX8KoGtKGTXWQGWIbTq8r XO8COK5DqvVSfSfPn_vwfR0D1QJnb1gb1ZgKLg4jwNY_.FgUGOXjUBGuruaF aRpmJtibDZlGtLyXhJKZxyp48GpQ2brrjWiXCK_yH1udci3Y9N_1qRDEDqKt eJayK1Phc9RAWhCRPyTGXIUpbcLJhyh7X8.J72EN6E0ZP.q2YF4t23r1l62i ivcgCEL3CUcAFMqAYQuWlAqOHGmX7J1d3JcQMNL3XcOM5IGQ1rtH0i4cbCvE M1xypCSrQ4vycwVCrK3L9DzlvXxY2Vslvr.CScSV79f1HsV6q_K12VN7M7jz RaQXDif9C_tFxLVy7tImzSHNIEtAY4dwfH5rrr55PmTUtEUz.6KEQJbAs8lz N3eK.l9Gp9cBVG0-
X-Originating-IP: [65.55.90.110]
Authentication-Results: mta1019.mail.bf1.yahoo.com from=msn.com; domainkeys=neutral (no sig); from=msn.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO snt0-omc2-s35.snt0.hotmail.com) (65.55.90.110) by mta1019.mail.bf1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:51:23 -0800
Received: from SNT143-W32 ([65.55.90.71]) by snt0-omc2-s35.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 Dec 2012 11:51:22 -0800
X-EIP: [/TV7qSeM3qmM9iU1AqKrwfvgxpWqD2/e]
X-Originating-Email: [unclaims@msn.com]
Message-ID: <SNT143-W32684D9215E2ED28219FD9C7310@phx.gbl>
Return-Path: unclaims@msn.com
Content-Type: multipart/alternative; boundary=”_3dea15d0-14b7-43d8-8b0a-3b827210a014_”
From: UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com>
Subject: RE: Contact Name: Marcus Wright Tel: +447017419229
Date: Tue, 18 Dec 2012 19:51:22 +0000
In-Reply-To: <1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
References: <B353BE0D877992409CB2153398733B81635C6E54@winxbeus26.exchange.xchg>,<1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 18 Dec 2012 19:51:22.0097 (UTC) FILETIME=[0E09E610:01CDDD59]

UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com> 65.55.90.71 – 65.55.90.110

HEADER NUMBER TWO:

Return-Path: <unclaims@msn.com>
X-YahooFilteredBulk: 65.54.61.94
Received-SPF: pass (domain of msn.com designates 65.54.61.94 as permitted sender)
X-YMailISG: FbVe49gWLDvy_H0HGyCvr5GlHi1Ad0EQxycJEWfEdPYeo2hb TF_L7_0plwdxv1FO_5ZBxOLniR5jVE1h.Fy8kvu._4ctcsh.b._rZqUnvBaZ X3jaWCnb1qKO18FS_hNsKnY7Zd_VhBurPjPk72clM6bgMjU.tIIfnG4H8Y4M J661nkVpIy6scF5iyZ_GtYTr4aKug9cqZtjYPGPyFDjks_s2MbDdye5pGdWG DNiifYQQC.X.8Lfr3c7DCNRxhtb6wQBckrCai9vFX9DWGhIWU4gvrrWtMML5 aMLnx.ocyyiIjfwYCHTVeCsCpSCRBsEoCxIwjdzPnYUg069I9LA0b.Gh9jiA Pe.d6H2UjS60goCV8fBpX69A1doeRqa2Y9LScgym.dUPsUJy4ATjT7QTuAHc 4LVPQqoI0V2kyvVfsnWyCY4QWmfxjXW8IFP_ZQ.Pdr.3MF39DG.ximBCtFDB v0UlcQVxTx5jRRWFZvtISd95osVXPSgqvQoOsC4YRH1845P1Rs_ByeUJDRfE _tQ_jczjUU7nR8fn20CTAo5.dyCcQfmAwOR9AVVs7MzLiW0traI.LpUA89fy bHEZCaTkLehGymHINA9NUGDAccQ_VQpl0joPk8Tpw5FN3DyQNv6pop4mPkmL PJ69l.U0rjFWVzF3YwW78bz2XkOLXEfFs6qfitxwgm4I3fyzY_YHUWyRVXFR DDIVZ0HqVr_5ZE5OFIciU6l4V9dDQXfqWDCpRncHUSQDWKeEMdERxCKSNl9C _6e35DXg33zuEZlZYa50TRBmAVKpsQGNUmSW3GYBCBN0ihRATbuElph8v9pU QVRmuY6oveo0raJa2rkRGJrEGz3wQ9XLORIvcscVZySSknoQ9Ve2aYvrduAe QBAyZ4uirjeHwVMzjYys4h7eq6JBETWlTtpRc.3lAYcKY3jJ.EgCYFyWNPCN eVZD85NyDiPOyrhqWPpt2bClbZBoD1SfQIqIRxgXdO._RwfGgzc6OFa4lGim o0bUfhMeNF07.hDW3nmiVifthixlaquaTOnI..wktt4FcthmXKKNNSICQuJu 2fMdzGtBVBBQBdhMgHbLlLWPlDqrAKG7OZ0c6iY69UmZ3vGrM.4XBiheikmW D0J47Vter1FQ5G5Cu0nRX0pkGOfciptQ3zzWDCmhirn4Xqz1ME2QLJKcPWMx Dhoxhp8LQbKf7MIrGXe1py2l4w6oEPVx9g5TDeMnmB18XieUygWNBP6cY8Kf yapRNq6T7bsUDhMHYL4be1aMw5GhnU7UmSnTECLhRYU7BY4au7Gm5Uw6PrJy J5ZFFqn7hmjJjguP_A–
X-Originating-IP: [65.54.61.94]
Authentication-Results: mta1246.mail.sk1.yahoo.com from=msn.com; domainkeys=neutral (no sig); from=msn.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO snt0-omc2-s43.snt0.hotmail.com) (65.54.61.94) by mta1246.mail.sk1.yahoo.com with SMTP; Tue, 18 Dec 2012 11:52:58 -0800
Received: from SNT143-W65 ([65.55.90.73]) by snt0-omc2-s43.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 Dec 2012 11:52:03 -0800
X-EIP: [8WRfF9W/4HCKBPDNLPwgkZDO+b8LtgkB]
X-Originating-Email: [unclaims@msn.com]
Message-ID: <SNT143-W65AD9B7BD38231E89E80F7C7310@phx.gbl>
Return-Path: unclaims@msn.com
Content-Type: multipart/alternative; boundary=”_d77f1b5b-2b70-4219-8474-4777ba3e7f12_”
From: UNITED NATION CLAIMS DEPARTMENT <unclaims@msn.com>
Subject: UN-HABITAT PAYMENT RELEASE DETAILS
Date: Tue, 18 Dec 2012 19:52:03 +0000
In-Reply-To: <1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
References: <B353BE0D877992409CB2153398733B81635C6E54@winxbeus26.exchange.xchg>,<1355800390.76569.YahooMailClassic@web161005.mail.bf1.yahoo.com>
X-OriginalArrivalTime: 18 Dec 2012 19:52:03.0050 (UTC) FILETIME=[2672D4A0:01CDDD59]

65.55.90.73 – 65.54.61.94 –

 
Leave a comment

Posted by on 12/19/2012 in Other

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

“yahoo Inc”

WARNING: YAHOO LOTTERY SCAM – ADVANCE FEE FRAUD

UPDATE: Digging up information on this header and posting it in the search engine, for some reason, always brings me to another scammer I posted up weeks ago. ” Juliana Roman Medina ” with the email addresses julianar@pijaos.udea.edu.co <> fedexdeliverydesk@yahoo.cn IP’s used: 200.24.31.84 <> 41.138.172.174 (location Nigeria) — For more information on this scammer, who also sent a lottery scam and is believed to be the same scammer(s) as this post – Click here

NAME/EMAIL-ADDRESS:  Yahoo Inc <> ruthy_financial@yahoo.co.uk <> marystokesuk@gmail.com <>
EMAIL:
WINNING ALERT!!!
Yahoo  Awards Center
124 Stock port Road, Long sight,
Manchester M60 2DB – United Kingdom.
THIS IS FOR YOU!!!
This is to inform you that your email identity has emerged as one of the lucky winner of YAHOO ONLINE free promotion  of  GBP150,000.00  (ONE HUNDRED AND FIFTY THOUSAND GREAT BRITISH POUNDS STERLING ONLY ) for the just concluded online sweepstakes drawn in London recently.
In appreciation to yahoo,hotmail and gmail users! we gathered all the e-mail addresses of the people that are active online during during the draw and among the millions that subscribed to different email addresses and others through Electronic Balloting System (E.B.S) without the candidates applying for it .
PAYMENT OF PRIZE AND CLAIM
You are required to contact our Legal attorney in United Kingdom for representative.Barr Mrs. Mary Stokes
E-MAIL: marystokesuk@gmail.com
TEL: +447024038948
Your winners numbersYAH NO: 498876
DRAW TCK NO: 11098322
E-MAIL POSS: 234876
CATEGORY B: INDEX
SECRET WIN CODE: B32000Congratulations once again.

No virus found in this incoming message.
Checked by AVG – www.avg.com
HEADER: 
Return-Path: <ruthy_financial@yahoo.co.uk>
X-YahooFilteredBulk: 77.238.189.58
Received-SPF: none (domain of yahoo.co.uk does not designate permitted sender hosts)
X-YMailISG: NdS_pu4WLDsNaT3akZ7yPUDozjg1SwutxbxaG4luget.NmUV JAxEPSkjTsUOKhJCaMal.mbjPfmNWLyFXD7.TLbs2YZ5eIyLo.zeprF0yFcG x5vMaZZn05FfxxSba.amT2oGeuZ8SJbWx__ctHkvFOXJKz1fYjsW5RLt0XPH mkvc84ERic.I.V7q8sjMcRkk5BTrt_HFJTngvD0Jz78LiGAKqQU.CwHFLjF_ fCmmO5h.1LLfd.yDlMExYPz6GkeoiqTvJWvvP.SBgDUAm6PfjZak4gnQVUCf sLYWZf0tExv3bp42VphqsqjxZoAEmW4V0fhMYlHEYAJYjPyI3PWjGAbGkSVO vuRTxYFc3.NdAg1DdwtUzh0.xtA64dMzkn_1AfRWNsVECC1Hj4zX3lX8mpq1 aeltHMn5kL3ltEf66.pPp2fs0dyBpVZPzXaWSWH9LxX5JjiH3kS0nN6i2IS0 JTHXmRKtxkXpr8svfJpXQJLB.Fw1l1WYg8MR0y16187p3RSxcR8g.8iPjITg DqO9cm542tUZqnB8eselzVISzwJ7NQKHHpZ1ofSgowc8tehzjb8JszLH2QpE YidhUsXq_JS3lcH0r5X0dx52yLsUv0_Fjy7XvoSXtkv7phso2SOgHwV00iBq qKdi1Vj6OJQdnyUZyAmw.OPqB5poJp_s9p1TQm5tJuRCRksZW2QplD9O35bJ cb6QVwPsKnpTW59y.Y8pi8l2Y5Kw2UWCniZSb1I.Qom7dhoPZ4j_igAAUdIS R_j4.cDW.AR6upgTImY8zaWXAHXhPQZ2AR1ySBg9ha5WZIn6MnmDULjwndxt m0_oFyouUpz5tB4gFXNdp6p8sERAFKMXUfTW72M4oFXAqvWLnbb_S4td2jFq IHAHiGLurlu8OKNG3cddt4A6DBKOrvQZD3lRsXBSftJ8Qw0UNCYmHucneREn WDLmW3vthoLoes7_1LesMlHF2tBw6Vn7Bp7DXl1iiUBbs_kia5EugPumZ6pH rslpq7qR2LfYUoy2BHr7giAFXBoOgzhIJtDJ.Z.rClmM0jMahpESa.FpKzWx yA3tdHNkmVkxBAv6sSjEwAI26Lin92B8IrF2FJoIYAdsGdOz5yiO7yt03sqg ULk57hm94aSyYxqXrOQRsTp2meZgCDOyXI8WCnkdjz2pgdC9Et5M0TObolE7 KW8KmgGNz3oOpwkWbhwekiTRDeNrl4q9BDsnE0nUMcStPwTbb3khwcPlXHIM OTFXwn1ri0HpplotgDk6Ikkf_7PFRSmYzbtGIbp9RtXKaKnloZbI0mEXaYu6 v_5kwAdsNizWUoKrjkUWzGU7DJABRHjpN5UdrXfD3AKS00aoYFBi23Qh3LtP 9eoYgSWyi0.ALKIlExRcq76mMqA-
X-Originating-IP: [77.238.189.58]
Authentication-Results: mta1076.mail.gq1.yahoo.com from=yahoo.co.uk; domainkeys=pass (ok); from=yahoo.co.uk; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm1.bullet.mail.ird.yahoo.com) (77.238.189.58) by mta1076.mail.gq1.yahoo.com with SMTP; Mon, 19 Nov 2012 04:13:05 -0800
Received: from [212.82.105.244] by nm1.bullet.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 12:13:02 -0000
Received: from [212.82.108.123] by tm16.bullet.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 12:13:01 -0000
Received: from [127.0.0.1] by omp1032.mail.ird.yahoo.com with NNFMP; 19 Nov 2012 12:13:01 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 927814.13983.bm@omp1032.mail.ird.yahoo.com
Received: (qmail 51996 invoked by uid 60001); 19 Nov 2012 12:13:01 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1353327181; bh=iA41e3cptztcs4OfqEqg3P1UU05elM2wHBJidEewk4I=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=BA0V/lvNb3g8ICmqCmJPbBUDMASq3g7dO9gYsGBxwvNiQfiJmdMmYdtfretP62Y3YdscvpQaL39vLARuPlXvN99RIZLN0s0gVefV8goLjAhV7ELbNIaUrPuAjvE4BvIbcgvuf9zMo1LnYv95FX9O5zgHofwxOTYtFOfiVy5uCaw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.uk; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=epvk28xWMC/n2L61OGw1a7wjmcirfFCQnXq9wxXrH+mT3HsPQ5dT6BjQdZywvoxVeHdU6StErnnbkFa5TuOf6e0WM+03jfkrprNKUIu3S3UIzeHVWQWWpt2GVyqgGtLdOVSdOpIeVPvXhmwpZMw+17LzolAjKfNQhLjniuulqbc=;
X-YMail-OSG: 6ok6V18VM1miJbWwZPtPmm8sgOI_RgxNr1NGtFmHZw90Mvv 6D7Q-
Received: from [193.164.133.72] by web29802.mail.ird.yahoo.com via HTTP; Mon, 19 Nov 2012 12:13:00 GMT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353327180.51095.YahooMailClassic@web29802.mail.ird.yahoo.com>
Date: Mon, 19 Nov 2012 12:13:00 +0000 (GMT)
From: yahoo Inc <ruthy_financial@yahoo.co.uk>
Subject: “”””” Winning Alert ,from Yahoo Inc! ( Check your mail you have a massage)”””””””””””
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=”478945831-1873120208-1353327180=:51095″
Content-Length: 23720

UPDATE: My email server detected viruses from this incoming email received from ‘ Mary Stokes ‘ .. A link was also detected (us.i1(dot)yimg(dot)com/us/yimg(slash)com/i/us/nt/ma/ma-mail-cl_1(dot)g=)

______________________________

The below header is also Mary Stokes scammer pretending to be FBI office in an inheritance scam. Email addresses used: barristernecter@yahoo.fr – REPLY-TO-ADDRESS: offilcefile1905@superposta.com – – – This Nigerian scammer is blacklisted on multiple websites and has been reported under multiple fake addresses.  Click here for more information on this inheritance scam

X-Originating-IP: [203.188.201.151]
Authentication-Results: mta1091.mail.ac4.yahoo.com from=superposta.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm13-vm5.bullet.mail.tp2.yahoo.com) (203.188.201.151) by mta1091.mail.ac4.yahoo.com with SMTP; Sat, 17 Nov 2012 02:43:59 -0800
Received: from [203.188.200.142] by nm13.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [202.165.102.48] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 17 Nov 2012 10:43:55 -0000
Received: from [127.0.0.1] by omp102.mail.cnb.yahoo.com with NNFMP; 17 Nov 2012 10:43:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 977911.45325.bm@omp102.mail.cnb.yahoo.com
Received: (qmail 39060 invoked by uid 60001); 17 Nov 2012 10:43:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1353149034; bh=4NHRjGox1llxlGTpuwwzaXz2wAEyMSFQlVe/RepWfVQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=P0DhZFg9Mjj05/vqaDc0igv+GPAlNxBBckhxEzU4PJ/OEqkdNXv8cHYOGIrX06GRSxiYBDEXksxF+7O6itMLQryiu63e3X/TBdnGMXPpsJmwW89Nu0b5IpbVDCyBNfuzLVNzU62iHNFjxppWoL8m/2ohhLEweTQDE86CwjMFUjc=
X-YMail-OSG: UNddAlUVM1kvGGStE1FY34uiMeKn2clDYRgV8R.tDHiC3Gd LJa0arT0C
Received: from [41.223.248.96] by web92408.mail.cnh.yahoo.com via HTTP; Sat, 17 Nov 2012 18:43:53 CST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <1353149033.34956.YahooMailClassic@web92408.mail.cnh.yahoo.com>
Date: Sat, 17 Nov 2012 18:43:53 +0800 (CST)
From:
FBI OFFICE <offilcefile1905@superposta.com>
Reply-To: barristernecter@yahoo.fr
Subject: YOUR ATM MASTER CARD OF 1.5MILLION

The names, email addresses, IPs/host names below are sent out by Nigerian scammers using the same host/DNS/ETC as ‘ Mary Stokes ‘ pretending to be the Yahoo inc lottery personal above. If you’ve googled any of the information you see here, it’s a SCAM!

Received: from nm19-vm0.bullet.mail.ird.yahoo.com ([77.238.189.92])
  Tue, 18 Sep 2012 15:25:17 -0700
Received: from [212.82.105.245] by nm19.bullet.mail.ird.yahoo.com with NNFMP;
farid_abdul01
41.203.225.136 by web29802.mail.ird.yahoo.com
82.10.220.112 by web29802.mail.ird.yahoo.com
41.138.109.92 (same host as the ones above.)
82.227.153.207 by web29802.mail.ird.yahoo.com
80.87.92.58 by web29802.mail.ird.yahoo.com
laura_deng@yahoo.com
184.171.165.50 by web29803.mail.ird.yahoo.com
d.kabori@live.fr
Dericah Riceh  dericah_rice5@yahoo.fr
jose_riceh@hotmail.com 
41.138.89.38 by web29802.mail.ird.yahoo.com
41.190.88.206 by web29802.mail.ird.yahoo.com

 18 Sep 2012 22:25:16 -0000
Received: from [212.82.108.252] by tm17.bullet.mail.ird.yahoo.com with NNFMP;

847439.61289.bm@omp1017.mail.ird.yahoo.com
 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

“HOUSE OF LORD’S ORGANIZATION UK LONDON”

NIGERIAN 419 SCAM – COUNTERFEIT CHECK – FRAUD

UPDATE: This Nigerian scammer has emailed once again with a similar email but different IP and header information. He is still going under the email address of info@lordsdept.org but with the reply to address: consultationdept@yahoo.com – [213.154.64.102] –  41.203.79.249 – For more information on the updated email please click: HOUSE OF LORD’S ORGANIZATION UK LONDON 12/01/12

EMAIL: ATTN PLEASE

The HOUSE OF LORD’S ORGANIZATION UK LONDON Have just concluded the meeting with the board of Trustees of United Nations Organization and
Representative of all the financial institutions, The meeting that has
been for the past eight months on financial matters, It has been agreed to
release all long terms debt, These are the classes we are looking into:
those whom has been one way or the other denied their Inheritance or
Contract payment/award payment due to corrupt official services,

After our mutual investigation in the recent schedule for payment of
outstanding debts incurred since 1999 to 2012 according to your file
record where we got your email address; your payment is categorized under
section {B}: Contract type: Lottery, inheritance, unpaid contract funds
Undelivered Lottery fund, Attn: Beneficiary, We have decided to bring to
your attention, that you were listed as one of the beneficiary, The
executive council Have decided to pay as many they have their file record
on their desk on a direct wired transfer, The total sum of $5.5usd has
been approved under your file according to elect,

Contact the processing/paying manager for your direct payment of US$5.5M
(five Million Five Hundred Thousand United States Dollars), you are
directed to contact the International Remittance Department of Benin
Republic who is In-charge of the payment
via E-mail:
E-mail: managementfile1@gmail.com
E-mail: olusegunoniwon@ymail.com
Phone: +229-67406742
CONTACT PERSON: MRS. ANDRIANA U OLUSEG
INTERNATIONAL FUND REMITTING DIRECTOR
HOUSE OF LORDS BENIN REPUBLIC
Also provide the following detail to her for immediate release of your fund,
================================================================
Also it is very necessary and important that you send us an e-mail
containing your vital information?? As requested below so that you will be
given an immediate response and directives on what to do next:

Full Names:
Address:
City:
Zip/Postal Code:
State:
Country:
Present Occupation:
Company Owner:
Company Name:
Gender:
Age:
Reachable Tel#/Mob:…………..*No Voice Mail Service*
Fax:

THIS REQUIREMENT MUST BE PROVIDED TO HER COMPLETELY,
================================================================
As soon as the International Remittance Department in your file location
receives your information, your US$5.5M will be Transfer to your nominated
Bank account. this payment terms is to keep a clean slate of all debts
owned by the government and company to individuals either by contract or
award fund, we hereby plead for any inconvenient that you might have
received by any of this corrupt officials, The United Nations Organization
will not be interested in your story of not receiving your payment if you
fail to abide to this Instruction.

Yours Faithful,
Mr. Anderson Paul
Public Relation Officer
Strand Bridge House 138-142 Strand,
City of London,
E-mail: com.unit@net.hr
Hot line +440-2087599090
OUR REF: H/L/UNN/APXB/TF/08
IMMEDIATE PAYMENT
#:WB/PC/FMF/MIN/UN/APXB/08
HOUSE OF LORDS LIAISON HEADQUARTERS UK LONDON OFFICE

SORRY IF YOU RECEIVED THIS MESSAGE IN JUNK BOX IS DUE TO OUR SLOW NETWORK.

HEADER:
Return-Path: <info@lordsdept.org>
X-YahooFilteredBulk: 213.154.64.102
Received-SPF: none (domain of lordsdept.org does not designate permitted sender hosts)
X-YMailISG: 5SdGaNQWLDvvYHp8wyYLuM2f3bwOEdaSUKV6XBBVe6hWpcz0 mFuo8Y2oaNrqDj22Ohzu0oL9_xUAUGpVAT9WTkrNfXpfhRZhAzaCMjFQLZSZ l9VFNPyEtPWan6MvVjrQ3ovhzmJHN_1SHU9AVi3jpqKvS2wEdVTlvyfMK8KR jksTXAKUE6Sf_5IfpN0xy9ui5SAV6IU5HKJsLFDw3Z.dBMout_YpKyucZmaB AO2wv.9CZjpQRw.VjOZWwN35uNWrk3TMozf51DdpKZ1OB4eKabo2WddedkBH TzgtRYd0FWnyKtcvDybxiULHFetbGZdL74D0tCktUsIVKWdpPwfkpXrItOIp zqhg_wl3_nNK2oKL7.24CKdBAuNMBd1bZAvYKGykECCpUPFKVWPWYInEY8sp hjGiu7iZL2ezBTU34qSjLbwrvzINuGB0HXwR7sXDMku0XaFl8AxSvgtqK5jz iyroR6IZtROq8oQo_G0S0WtcxQJqBq_tqYfuU1yL5Q1y9Vv8gBYfO2ZKQIsn 4tp78g9ek5p_ldZjrH0H3pb8VSFzwgb1YlPWdfwjz3V4eUdQ8Wc6LvdV1Bk3 Ebo9LOewB28iJlr3vRdbuEP7jJYkRurMtiENPZ4OpAWrsgtTHRjh4.K9ZGW. YbbOacCIzO5V3F7GGXiZ3ScdhF3XWt9pIfdx7b_Wf72rsHQbLIGERr2OtDWc HC.sJVS7KnS13B5ZG9Kw9r3fAwduJ756DJIokZ6T02UQ4BV94Boh4HVm2nE1 rLLM202..KURsn2Y56xHwWZkl2OJ5KeL_KOdbw0T2xg59OQbkPJ4U7p2px0P wrE_MqHYmHnNPEeeGkdQMoHrpfTvX_VA5sN9gyuiEvFEQH3SeHLl1bujoh2q JPDhnCU8MyU1VNw0mglmQU8ukdVaXyvmw6iCU.ExiST2nU7sAVrTpyZD3T74 mHMQIzhhccOtUfYNdc5ieCMjdeiFYrtiWSn1M7C.1.5FZl3UHh557It28nRc kyO9hTQahnXehBhBIBLgX0SeUbuX1c2xyPeHZ0hS1KWadku2Btw_i7MM7d8u lRdz9hQK9tvzJ0e3THNbwaRLGKGDi0dDufeH0dm.f8aUYH6DOHAMk4d_Q62o E0TcNsdP3qstS7isosqDtZ6nzZ5d.0O.RyEx.YQGNuz6ij7ZXKtqAMzjU6il qqd3oatNO8mZOrrt345Mymz1hOG36kPJm4xF1uV9VYG8TCUv_bpceIPN_PZa L1npBNUz14RSXUwVtzWamCoGiX7lkXvz9mcWS5fmuXatiSF3kJrFJrjScfz9 xVNjcF3S4JFC6hBkQvZng1YkHWIo5Q52g0ZaHBNKayYrFvDGZ_umEobzZyMU wdXaZlsiAHL3Squ1Mzqo3pWml0BcKp5SpZVuIvRTSVTPSJ0nSfrQkKTUNn1L 7QIg9MknXIB5xWPBPFih6H6mqsgWZXdyEEHeMVvDDqQqrOymGLlnkSeQyTjT ku6cuXmXNnnj41LaKoxjWbx0mNJ4PijZaELLzJfDnAoEuiDFi6PNesR4vUe3 rg–
X-Originating-IP: [213.154.64.102]
Authentication-Results: mta1132.mail.bf1.yahoo.com from=lordsdept.org; domainkeys=neutral (no sig); from=lordsdept.org; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtpgp.orange.sn) (213.154.64.102) by mta1132.mail.bf1.yahoo.com with SMTP; Tue, 13 Nov 2012 08:46:37 -0800
Received: from sunumail.sn (HELO srv1-smtfree-msg.orange.sn) ([213.154.64.61]) by smtpgp.orange.sn with ESMTP; 13 Nov 2012 00:17:42 +0000
Received: from [213.154.64.43] (helo=www.sunumail.sn) by srv-smtfree.orange.sn with smtp (Exim 4.43) id 1TY4iV-0006iG-FO; Tue, 13 Nov 2012 00:51:03 +0000
Received: from 41.216.50.32 (SquirrelMail authenticated user david_fletcher) by http://www.sunumail.sn with HTTP; Tue, 13 Nov 2012 00:51:03 -0000 (GMT)
Message-ID: <55106.41.216.50.32.1352767863.sunumail@www.sunumail.sn>
Date: Tue, 13 Nov 2012 00:51:03 -0000 (GMT)
Subject: NOW CONTACT THE GLOBAL FUND REMITTING OFFICE FOR YOUR APPROVED CHEQUE.
From:
HOUSE OF =?iso-8859-1?Q?LORD=92S_ORGANIZATION_UK_LONDON?= <info@lordsdept.org>
Reply-To: managementfile1@gmail.com
User-Agent: SUNUMAIL/1.4.2
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: info@lordsdept.org
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to false
Content-Length: 3748
702034464
9291969056
Below is a list of other email headers which were sent by this same scammer.

Return-path: freshtools@wanadoo.fr
Received: from smtpgp.orange.sn ([unknown] [213.154.64.102])
by vms172061.mailsrvcs.net
(Sun Java(tm) System Messaging Server 7u2-7.02 32bit (built Apr 16 2009))
with ESMTP id 0M4M00FBGCMOLW80@vms172061.mailsrvcs.net for x;
Sat, 26 May 2012 02:25:37 -0500 (CDT)
Received: from sunumail.sn (HELO srv-smtfree.orange.sn) ([213.154.64.61])
by smtpgp.orange.sn with ESMTP; Fri, 25 May 2012 07:52:17 +0000
Received: from [213.154.64.43] (helo=sunumail.sn) by srv-smtfree.orange.sn with
smtp (Exim 4.43) id 1SXpo6-0007u1-1u; Fri, 25 May 2012 08:23:34 +0000
Received: from 197.251.184.232 (SquirrelMail authenticated user hackk)
by sunumail.sn with HTTP; Fri, 25 May 2012 08:23:34 +0000 (GMT)
Date: Fri, 25 May 2012 08:23:34 +0000 (GMT)
From: “HACK TOOLS FOR SALE” freshtools@wanadoo.fr
Subject: SELLING WORLD WIDE EMAILS, MAILER, SMTP, WEB MAIL, BANK LO GIN,
ATM TRACK 1&2, CC V, RD P, SHELL, CC,
ALIBABA HACKING SOFTWARE OF ID AND PASSWORD.
X-Originating-IP: [213.154.64.102]
Reply-to: hackk@smtp.com
Message-id: 28154.197.251.184.232.1337934214.sunumail@sunumail.sn
MIME-version: 1.0
Content-type: text/plain; CHARSET=US-ASCII
Content-transfer-encoding: 7BIT
Importance: Normal
X-Priority: 3
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: freshtools@wanadoo.fr
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to
false
User-Agent: SUNUMAIL/1.4.2
Original-recipient: rfc822;x

Return-path: freshtools@wanadoo.fr
Received: from smtpgp.orange.sn ([unknown] [213.154.64.102])
by vms172075.mailsrvcs.net
(Sun Java(tm) System Messaging Server 7u2-7.02 32bit (built Apr 16 2009))
with ESMTP id 0M4M000XKBUHW020@vms172075.mailsrvcs.net for x;
Sat, 26 May 2012 02:08:43 -0500 (CDT)
Received: from sunumail.sn (HELO srv-smtfree.orange.sn) ([213.154.64.61])
by smtpgp.orange.sn with ESMTP; Fri, 25 May 2012 07:52:17 +0000
Received: from [213.154.64.43] (helo=sunumail.sn) by srv-smtfree.orange.sn with
smtp (Exim 4.43) id 1SXpo6-0007u1-1u; Fri, 25 May 2012 08:23:34 +0000
Received: from 197.251.184.232 (SquirrelMail authenticated user hackk)
by sunumail.sn with HTTP; Fri, 25 May 2012 08:23:34 +0000 (GMT)
Date: Fri, 25 May 2012 08:23:34 +0000 (GMT)
From: “HACK TOOLS FOR SALE” freshtools@wanadoo.fr
Subject: SELLING WORLD WIDE EMAILS, MAILER, SMTP, WEB MAIL, BANK LO GIN,
ATM TRACK 1&2, CC V, RD P, SHELL, CC,
ALIBABA HACKING SOFTWARE OF ID AND PASSWORD.
X-Originating-IP: [213.154.64.102]
Reply-to: hackk@smtp.com
Message-id: 28154.197.251.184.232.1337934214.sunumail@sunumail.sn
MIME-version: 1.0
Content-type: text/plain; CHARSET=US-ASCII
Content-transfer-encoding: 7BIT
Importance: Normal
X-Priority: 3
X-SA-Exim-Connect-IP: 213.154.64.43
X-SA-Exim-Mail-From: freshtools@wanadoo.fr
X-SA-Exim-Scanned: No (on srv-smtfree.orange.sn); SAEximRunCond expanded to
false
User-Agent: SUNUMAIL/1.4.2
Original-recipient: rfc822;x

This Scammer has sent more then one email and according to ProjectHoneyPot this IP address is malicious and is considered a ”Dictionary Attacker”

Location: BENIN – NIGERIA (BJ)

Example User Names Used By 41.216.50.32 – AS28683
User-namebuh
User-namebuhg
User-namebuhgalter
User-namebuhgalteria
User-namenastya
User-namenatalya
User-namenatasha
User-namenataly
User-namenatah
User-namenaumov
User-nameburov
User-namenatash
User-namenazarov
User-namenataha
User-namenasty
User-namenaumovsvetlana
User-namenationalpf223
User-nameneddi
User-namendrey.lashenov
User-namendrew
User-namenationwidedk1
User-namenataly1
User-namenekol

NAME & EMAIL-ADDRESS: HOUSE OF LORD’S ORGANIZATION UK LONDON <> info@lordsdept.org <> com.unit@net.hr <> managementfile1@gmail.com <>  olusegunoniwon@ymail.com <>  freshtools@wanadoo.fr <> hackk@smtp.com <>

from 41.203.79.249 (SquirrelMail authenticated user fletcherdavid) by http://www.sunumail.sn with HTTP; Sat, 1 Dec 2012 09:51:11 -0000 (GMT)

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , ,

Gilbert Gabriel gilbert_gab101@yahoo.com – gilbert_gab@hotmail.com – gilert.gab101@gmail.com

SCAM ALERT: Nigerian (419) Scammer – ”Business Transaction” – It’s suppose to be top secret, OOPS! Sorry ”Gilbert” I’m horrible at keeping secrets.

This Nigerian Scammer has been using some of the emails provided for at-least one year and this isn’t the first warning given. He want’s our ”business deal” to be a secret between ”us.” I don’t keep secrets away from my family and friend’s and I definitely won’t for some terd hiding behind an anonymous user-name in a smelly cafe in Nigeria.

Scammer’s Information:

Name: Gilbert GabeG.Gabriel Email Address(s): gilbert_gab101@yahoo.com gilert.gab101@gmail.com – gilbert_gab@hotmail.com X-Originating-IP: 58.210.59.114 Recieved-IP: 83.3.154.110

Subject line: SEEKING YOUR ATTENTION IN THIS BENEFICIAL TRANSACTION.

Email: Hello,
First, It is pertinent that I implore you to keep the details which I’m about to furnish you with as discreetly as possible. This project is very sensitive. However, If you follow my instructions very religiously, we are 100% sure to succeed.
I’m British citizen working with a Citibank United Kingdom, where I am currently the Finance Director attached to investment/records department. I have a proposal worth Ј69.600 Million GBP. Contact me via my private email: gilbert_gab@hotmail.com
Sincerely,
Gilbert Gabriel (Mr.)

Read the rest of this entry »

 
1 Comment

Posted by on 10/08/2012 in Employment (Job) Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: