RSS

Tag Archives: Western Union

From: “Laine Pedaja”

LOTTERY SCAM – ADVANCE FEE FRAUD

ATTENTION: These scammers have been spamming me for months under various email and IP addresses. Watch out, they’re very persistent once you answer back. — I don’t mind that they continue to emailing me because as a scam baiter, I make sure I fool them into thinking I believe them so they keep emailing me, and in return, I keep exposing their many email addresses, etc.

"Sherry Croft"

SUBJECT LINE: RESPOND FOR TRANSFSER DETAILS

You have $250,000 lodged in Western Union to be transferred to you

HEADER DETAILS:

Return-Path: <lains@hot.ee>
X-YahooFilteredBulk: 194.126.101.104
Received-SPF: pass (domain of hot.ee designates 194.126.101.104 as permitted sender)
X-YMailISG: jVkNLyEWLDtbwakSiM2AdY4sjeAfTAxvXkJsHH9hrfns30Ba I_yIYnb5XF0oIIgt4kUZAu7BFhNAkpcliAU.wmcXJPkt7r8RTTU6swIcps82 KHR4I7Z4PthXylEEnp9JsDEO1xBBlOe72H9NQ9LPuibi78C7J8at.K4LtHuH Xly4EM2COHXABr09YiIQ5r_FVAx2BWb7r8Nz_GYHmKsyrAO9gO2a.wJtojNM 1Jx9N1l.rGLlyOn1517Tf2xCfOwY_HBvoUdgifCgU.cu22GIDP6efRS2uipv MtXA52di6ppzgxdzS4ZfhT_3aPQjZW0Y..FhEMXvvYhIPdxCasJlOErRXrqg ZFz4LSKuf_TUJw2eLzBKikY6Yuy6htjuR3de.9CkMwjMeJfsl4BA8gfbXtKZ A8RKu9dE_ainpzrT3uu_CgEVbSendvy0V80viCJZyoYnwmNkEc_z8CJZWDKD sODNOhhTuehSPtV2RJvy5U2lzuB663PXy3UaCvWW5Cebgh82Qsyw6ppl50hm wUYSRPYLGUn_hlT1h1.gCGtUe64CthDA9p6EJJHJxbG3WIDUU5.kUIJobXbf 3E54KDoT9bgyt1jI93qwEc7Vn00EUanQ7a9ACpjQGUy2am746rsfhHueM4O_ l4b8hoAJg7UlHPxgsqCfVxs_VFCw2sBDswWZ8jk.5P6e4zxbSTlNLVqwACfY 3GeSsTC7X.0BLQ5aY70hJ9atUIZY.5t08mbSAgJv_Y.4ARlHdbUHOFZ2KTtP sUlVIj106lEGllFUAVF9l_08kUjzn6rSXRriRWayMjV8FnQMAiKVxWlNHf6z RDSRWGPwYSSSsbrDUkKmPFvD7hRckg2BZrng_ffzCY1SIHhhOZAtvpmt80cD VMjrCSk.1jMc31ka.7mGTcPnOvxH5VJJXDN2gglNJXsgzrvnxDPyWWr6yfVL R4JKC_Z5I.NSPTwZZzli21A5ZMsSCJ7KD8832PEAOvWkogHyUJIOkXzTpyX6 KQyCtERiPoex22CS1_569d3XotQoqBs3Y85SUjOs7GslKcMy60bNGSQR8EYN HgE1yTYk3KolyLEq6Na9Z66eSMDpsERorcA8iooTv9WBMgvgEbWY1gwomvUp 0wCMkoHJATg2PgB84CszsrMPegRlNTMfoURQAqbCS_YHRfvlMhAWO7IEI43U .Dg15bdNxvLholVUiP9z2RDunc9fEQVowZ8U4xB4.cutzkXxi89DbR9OwOix wptXEVOuhqeVu_NsxkEmt9LgefngUnxpj5hn8_NG4IbMrdUvgWBVZZVQkUQp 67jZjT7mUBOQfWcLtYcyDW1h8_fxqlNDhORgH0k1GASsM1cOLC97qYLiW_gh puCUbMvsx2FFwsYta489iroe5qp40omYsqzLaCw6QyVlplP1VjoXBN2ITucb kWoQJ2SCOoMzrxTTkcVnLN3Wi45dpHuwv0AUZg2zeUl4dgs.PVhTEuU6Yhx5 rlHejXOENIYU1nsADs7alYTkva2.9GDlowZ8fUTV0.0LkkiuR_.lEQzmv9u3 .2nJkmn_UpWtAtZcpLJyYI11_Xpl9SefVE01WltGY5UcltrM6rj_iMpOMG79 kW5M1zAyrLw9x2vuOpiHGNHLFeDp0rXkKn1N9aKkKEZqxgWmRVlFTRXd9vAr 84WuOk1HFWNB1K_9J4BZLezzPYjYC_GozXYrJfpBTLo7cUbJhSeE6kD7B.TF kYwY2vRXZBSTc9vz7fFJyvBOCpSQiIMOLjOsmM3mJA–
X-Originating-IP: [194.126.101.104]
Authentication-Results: mta1227.mail.sk1.yahoo.com from=hot.ee; domainkeys=neutral (no sig); from=hot.ee; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO bounce-out.neti.ee) (194.126.101.104) by mta1227.mail.sk1.yahoo.com with SMTP; Sat, 19 Jan 2013 11:47:03 -0800
Received: from portal-smtp-out.hot.ee (mx1.hot.ee [194.126.101.119]) by Bounce1.estpak.ee (Postfix) with ESMTP id 8C0DE1B2E; Sat, 19 Jan 2013 20:29:49 +0200 (EET)
Received: from localhost (localhost [127.0.0.1]) by vm-hot-relay10.estpak.ee (Postfix) with ESMTP id AC3917DD; Sat, 19 Jan 2013 20:29:45 +0200 (EET)
X-Virus-Scanned: Debian amavisd-new at vm-hot-relay10.estpak.ee
Received: from portal-smtp-out.hot.ee ([127.0.0.1]) by localhost (vm-hot-relay10.estpak.ee [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uANZaP2MJl8J; Sat, 19 Jan 2013 20:29:43 +0200 (EET)
Received: from mh1.hot.ee (unknown [10.3.0.117]) by vm-hot-relay10.estpak.ee (Postfix) with ESMTP id 0A0CE792; Sat, 19 Jan 2013 20:29:42 +0200 (EET)
X-Mailer: Elion hot.ee Webmail (http://www.hot.ee)
From: Laine Pedaja <lains@hot.ee>
From: info@yahoo.com
Subject: RESPOND FOR TRANSFSER DETAILS
Reply-To: mr.adamswoodland03@hotmail.com

Laine Pedaja lains@hot.ee
info@yahoo.com

Advertisements
 
Leave a comment

Posted by on 02/02/2013 in Lottery Scam

 

Tags: , , , , , , ,

“juliette Chapin”

warning_gif

ATM LOTTERY SCAM – ADVANCE FEE FRAUD

CLICK HERE FOR A LIST OF OTHER EMAILS SENT BY THIS SCAMMER – NOTE THAT THIS SCAMMER, LIKE MOST, USE DIFFERENT IP & REPLY ADDRESSES IN AN ATTEMPT TO HIDE THEIR IDENTITY.

No-Scams

Mtcn #: 773-443-3038
Your agent can pick up at any agent location. Sender name is juliette Chapin
Sent was $1000
After all the issues we had this was the solution to sending the money.And reference #s 23290772, i sent the last $1500. I am thank you for you help by stand by me and General Daniel for this we are appreciate so much. I hope that me and General Daniel will meet with you soon. i have attached the receipt for the money sent as instructed.
I will wait for an email from you with the phone number.

johnbaird.josephiceberg johnbaird.josephiceberg@ymail.com
Western_Union_Transfer_Slip_JG…exe (1.9 MB)Money_Gram_Payment_Slip_JGPE_0…exe (1.9 MB)

Jen

_____________

Message contains attachments1 File (565KB)
WU slip.scr

Dear Sir,

Copy of your trasfer payment slip details sent to you as instructed. View the attachment the mtcn # 773-443-3038..with d same information you provided.

Regards,

juliette Chapin
Accounting Services Division
#103, 21 Rover Way
Spartan Wood,LA ,90250
Telephone: (780) 410-5703
Fax: (780) 416-5614

HEADER DETAILS:

Return-Path: <mickbone97@yahoo.com>
X-YahooFilteredBulk: 98.139.212.164
X-Originating-IP: [98.139.212.164]
Received: from 127.0.0.1 (HELO nm5.bullet.mail.bf1.yahoo.com) (98.139.212.164) by mta1067.mail.ne1.yahoo.com with SMTP; Tue, 15 Jan 2013 22:14:22 +0000
Received: from [98.139.212.153] by nm5.bullet.mail.bf1.yahoo.com with NNFMP; 15 Jan 2013 22:14:20 -0000
Received: from [98.139.212.227] by tm10.bullet.mail.bf1.yahoo.com with NNFMP; 15 Jan 2013 22:14:18 -0000
Received: from [127.0.0.1] by omp1036.mail.bf1.yahoo.com with NNFMP; 15 Jan 2013 22:14:18 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 913034.31949.bm@omp1036.mail.bf1.yahoo.com
Received: (qmail 55569 invoked by uid 60001); 15 Jan 2013 22:14:18 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1358288058; bh=Pw9QukRh++jJavYxeuzXL3ty3osgj78RqiLC0VB59Cw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=DjLxsVlM+WTnrVf6HtpOnJcggBsj1P4TWpljCwNMl1RHDnCmJRncUJBEiIoDrit+uhA5TapwKvNivqm8d5aN8ANZAiNuv3t1u4oJxj5n6fJo+GXVSlpfDjDWV1chfGeEFDsM325rt1g2FsvBBo9SmX7PE/ZJa39gVPRz2hjrXAw=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=pRvNHGH74NYyO6zuEOD9hoIeKILeNCo59SiXhIF4IYXXV1M7PbkvTXDKGufOqAuKFbOjJ3fgzn567+ee0mZH8o/0tbgFlImP4cQIKun2Q+IO32z3lqK0R8Q01VxetN9q9cSdwXm4EhPY/MVrDryOZJzUBCKa0eJp272q8gr4snQ=;
X-YMail-OSG: EN7NKToVM1lcCmL2caBuHQSWMsdmGdBbJwZO0XpzzCoDiqg 75mq_JKpR.la82Pb4bgvAwD7p8RIz98IrgjQMUlTjFhsHc0uzMVVS2hnOwks Sx1gd8_d.dIfUtKYte.siU6hB6wkSSlfNa5Nazlt9bKmJYUqWv9gDWrSueoh HNYaEl9NZJG.q7KUPd14Tk4_IeHHN9iy.nT9YE3R3roDZDfF3QCjvsM_gM7d hyVXuLHwHu7LTcexf.tzaOSLke99ZuUb5ht0B8Znxf9JE4IkzXCgSG0JaTxz 5j2XWlDPn8Sf5NEQQIMBAHJpQvTTMVGSp5n9VRt0kb5yivX3aOU6SYS3ruVF lqW0gJtn8cWDU5FBOIYZugqxm1kx_4qUxa5Lx2yoptKcAT1lylupKbmE9Zo3 1Y2XQd1efGqSbPfzK5TunPz4yKucGNEq4t56TzcgjHEehEZROwnazapyTTB3 n3q2iL8ymv6sIw.bXUhWaYF5a7O4HNuorhTkp_q9NRpkmnqXwXc7xQ18W8d4 WDmvnPogYYxuESR2hreu9GE2yzpRUI3zJnMywyBzb8TPuyzuuf19hvcT5cgW Y3DvlaEDNiUo-
Received: from [41.138.189.62] by web140701.mail.bf1.yahoo.com via HTTP; Tue, 15 Jan 2013 14:14:17 PST
X-Mailer: YahooMailWebService/0.8.130.494
References: <1358287914.52674.YahooMailNeo@web140701.mail.bf1.yahoo.com> <1358287992.40627.YahooMailNeo@web140706.mail.bf1.yahoo.com>
Message-ID: <1358288057.49423.YahooMailNeo@web140701.mail.bf1.yahoo.com>
Date: Tue, 15 Jan 2013 14:14:17 -0800 (PST)
From: juliette Chapin <mickbone97@yahoo.com>
Reply-To: juliette Chapin <mickbone97@yahoo.com>
Subject: The copy of the western union receipt
To: “atmpaymentcenttt@e-mail.ua” <atmpaymentcenttt@e-mail.ua>

“juliette Chapin” <mickbone97@yahoo.com>
atmpaymentcenttt@e-mail.ua <atmpaymentcenttt@e-mail.ua>

From: juliette Chapin mickbone97@yahoo.com
webtzzzz.office@att.net <webtzzzz.office@att.net>

IP_Used: 98.139.212.164 Received_IP: 41.138.189.62

 
Leave a comment

Posted by on 01/29/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , , , , , ,

“Western Union Money Transfer”

warning_gif

LOTTERY SCAM <> LOTERIA ESTAFA – FRAUDE <> FRAUD

This scammer emailed me multiple times in both Spanish and English. I’ve added header details under each of the emails because the scammer is using different email and IP addresses.

1ST EMAIL:

You have been awarded with the sum of $1,500,000.00 USD by our office, This
award has been selected through the Internet, where your e-mail address was
indicated and notified. Please provide Mr Luke Moore via email
(wuclaimsdpt1@yahoo.com.hk) with your name,address,occupation and telephone
number so that your fund will be remitted to you through Western Union
Transfer.

You have been awarded with the sum of $1,500,000.00 USD by our office, This award has been selected through the Internet, where your e-mail address was indicated and notified. Please provide Mr Luke Moore via email (wuclaimsdpt1@yahoo.com.hk) with your name,address,occupation and telephone number so that your fund will be remitted to you through Western Union Transfer.

HEADER DETAILS:

X-Originating-IP: [167.157.1.11]
Authentication-Results: mta1442.mail.mud.yahoo.com from=umss.edu.bo; domainkeys=neutral (no sig); from=umss.edu.bo; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO apollo.umss.edu.bo) (167.157.1.11) by mta1442.mail.mud.yahoo.com with SMTP; Fri, 25 Jan 2013 06:39:48 -0800
Received: from apollo.umss.edu.bo (apollo.umss.edu.bo [167.157.1.11]) by apollo.umss.edu.bo (8.14.4/8.14.4) with SMTP id r0PESKKW017348; Fri, 25 Jan 2013 10:28:20 -0400 (BOT)
X-WebMail-UserID: proyectos-dric
Date: Fri, 25 Jan 2013 10:25:49 -0400
Sender: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
From: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
To: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
Subject: wuclaimsdpt1@yahoo.com.hk
Message-ID: <510072FF@mail.umss.edu.bo>

Western Union Money Transfer <> proyectos-dric@umss.edu.bo <> wuclaimsdpt1@yahoo.com.hk

SECOND EMAIL:

He was awarded the sum of $ 1,500,000.00 USD by our office, this award has
been selected through the internet, where your e-mail indicated and
notified. Please provide Mr. Luke Moore by email (wuclaimsdpt@live.com)
with your name, address, occupation and telephone for your fund will be
remitted to you through Western Union transfer.

HEADER DETAILS:

Return-Path: <info@winner.net>
X-YahooFilteredBulk: 195.46.105.253
Received-SPF: none (domain of winner.net does not designate permitted sender hosts)
X-YMailISG: R_t51eQWLDuJVWZkkjhC1IolQUy.xH2MwsjoGKXJxid0mKZ. Hdo2o8cSuvZ5OCagl9cp_CwY45CxZFWv_uyKmObpkM06qq2DQSt.fFtbFfPQ _.Qd.gjx4BIhOh97OguWDg5QndWYdz_G0Ao9Ndbs9sEFvc4ur4KWsh4F4QG8 NnnV6B1GRZSW.OAwLCkHpItLfSY1mBZgsnkX1Yxgy78TFRIJOIVS3FZ28c_7 l8UXFxHvzhTI7VbrQyUpG.TiAYVEQWRAwa4AT0oKI1lyEPFBwgUQnpTRN4gT szVqvqZQqbDTelTYYhVK3g9sS2W2od357uE_4QqTs9kC0Frfz6QbZG1fWT7w tPYOU6fotQvcDLegAbMNWxWgN6BZVcyum8pj6CWIr1ibVp9o1WILfCLwldLu WuQWd_QKqnj9xIZ6SsAH0SsBz_JE6XmHeGup._esamv2Ojf3HyA2Vjxg1VhR 5MSaBaK9CAtDdbN2wc0C63nqzU1FfU.jHL6N9llymzwDZH_YzTCuruYvOL4I n4igN3i5P66B7Zafsca2ad9jqmxPyNoh518tb51o0v9k2zA8UCm8VwW1n7C3 o3K0OyEWNb2iyKjzj7nSizw2YfTl0fVfH.XDX8iNcFrb7YoGzxsfF5Im77Ik 2UEbLD9WKY3.w6men2p1no3mPyKWOuFvDEILc8piTKmnq42sRu4PxFDkC7dO gnzDwY3o96Vueb5hyDLbDCTlSqS1VHCjJIJJR4hUj5q2HilL8_L.BTJXFRBO Ykby1F_U2AFz6t1kSnn3uE_UxhfomEkfB35MWex5pldPXAbqhs5WQg_Vwxl5 I3DOAmWBAGkoLnxRgw6oheJmY12ydZbi5t.XK8xyA0f4h.spyg.MS6nl20IN y6lha2uqdO_f9ZuRB6JsRLScUeCeY30Np4R96aKoiRN1JyT4OtNQgL3sZFi7 HKDYx.0FA1PEjLpd.McostxXoAnmKUrCk6NXndWPHwMIB0v2ssubKzYpR5yI eWjHUjyuTPuwauW3rmWgh0BU523lMX4wduhrc184BjfUNRtQ3fRmg5gprN7X g7CfV4cjOH3AqsENgOV5fsNg4YQVJFMeAhcs2rYQ7FUdRzVeWJ.e74dGJns7 kGPRvnauEHIGNTpa_JubimuCK5dishZW1XGqoBTr6FFBsSZgtQyigu1acL73 m4vLNBUyLGw10UHQzTKMb5Fam4JGin7c3skoaveo7PePYZ0gQvImli4sjYRv QElEocGB2cL9Iwb7FUKLZ3wG4gaWnVc9yXwcT_bhAGjHXtJpMzDulcc4hEof LYvxC4aRSGzPkN0e1JqCTSQiP53NC3_Uk7QEFTDnoIcdfhmOnQ8QLDZSo0JP dczuIWB.X0T93IGasTVGfSk4EdTSNCe6ZB6GQOE498tFXRq2DdNls4LOJNYh ._aNa5FiwS6sg_hazb74E0TYOCya7GjG44VA5ec5hGHxonEe
X-Originating-IP: [195.46.105.253]
Authentication-Results: mta1328.mail.gq1.yahoo.com from=winner.net; domainkeys=neutral (no sig); from=winner.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.irtel.ru) (195.46.105.253) by mta1328.mail.gq1.yahoo.com with SMTP; Fri, 25 Jan 2013 20:13:34 -0800
Received: by mail.irtel.ru (ESMTP IRTEL MAIL SERVICE, from userid 8) id D9F8721A671D; Thu, 24 Jan 2013 19:27:23 +0900 (IRKT)
Received: from mail.irmail.ru (localhost [127.0.0.1]) by mail.irtel.ru (ESMTP IRTEL MAIL SERVICE) with ESMTP id B67BF21A6621; Thu, 24 Jan 2013 19:24:01 +0900 (IRKT)
Received: from 41.203.67.53 (SquirrelMail authenticated user dezirs) by mail.irmail.ru with HTTP; Thu, 24 Jan 2013 19:24:02 +0900
Message-ID: <2be28957860b2ac960195001522a3e82.squirrel@mail.irmail.ru>
Date: Thu, 24 Jan 2013 19:24:02 +0900
Subject: INFO
From: “Western Union transfer” <info@winner.net>
Reply-To: wuclaimsdpt@live.com

Western Union transfer info@winner.net <> wuclaimsdpt@live.com RECEIVED_IP: 41.203.67.53 IP_USED: 195.46.105.253

THIRD EMAIL: Ha sido galardonado con la suma de $ 1,500,000.00 USD por nuestra oficina,este
premio ha sido seleccionado a través de Internet, donde su dirección de
e-mail se indica y notificados. Sírvanse proporcionar Sr. Luke Moore por
correo electrónico (wuclaimsdpt@yahoo.com.hk) con su nombre,
dirección,ocupación y teléfono para que su fondo será remitido a usted a
través de Western Union de transferencia.

Ha sido galardonado con la suma de $ 1,500,000.00 USD por nuestra oficina,este premio ha sido seleccionado a través de Internet, donde su dirección de e-mail se indica y notificados. Sírvanse proporcionar Sr. Luke Moore por correo electrónico (wuclaimsdpt@yahoo.com.hk) con su nombre, dirección,ocupación y teléfono para que su fondo será remitido a usted a través de Western Union de transferencia.

ENCABEZAMIETO DETALLES (HEADER DETAILS)

Return-Path: <proyectos-dric@umss.edu.bo>
X-YahooFilteredBulk: 167.157.1.11
Received-SPF: none (domain of umss.edu.bo does not designate permitted sender hosts)
X-YMailISG: qwadyWkWLDvNrzIVclhcoXgjIkJEVAjyRHKqcu27IJURLzI2 mxgPKyMc7KIfyxJ35W31YXKek6VBrI5nu0TwjqmEvYzIysQuIDYL6b463idi NwvFLL6j0ObrUHmxeci5n6Uq5V0jWQ_pFbRE_KXjnmWmAXaOe7NyhX9by0c2 GTsru8SMQYq6PfkSkqFTPTQH9zqvQi_RvTldUqvoSIJMiP_.wjRsemqClM6d dMvc3toN8M4AV2k3jpmO3PWC0KWE_SwvUljmPZI09Ecd9fdxwSp0lYjYxfYR wufOXhD1SCXbLSUQqnQK1UCEhHY_B2hfCInppKwV_e90B.xlwMeS3_qZ_CYl h9hJYCXDKCKoB4LqBXKH6aHhZsjpsGUEYg_yYmYoc2W58li9w.oYwcT44a2O kJ7YpgNcgBKho1HaLLxYtboD5lxLfaxyvg7ttBBIkLEeLpAuyGYZtxgdzP8N ch1AjMME0bbwEEzFo0OjEQmLt_U1IbXDZL1qre3ix4XDUlbnvr7k8575vqtl Hz9WAjcu25dxSWj8osf1b.XXobGHpDA.jyQeYTLc20h6rQlrVrGkHbttrJWB 1IZeGxb66ToG.SdAcaZu4DPGNq2rKSQyPP5wKsxl8A67zC8JsVZk3LmQ48RI 1rXvSn8OK7C_D0tSK8EtxbKbYpciUUlrFnPoSWg.ZaB6W.ul_fDrlQ340PoM 3MCJYH0IzDdhTmmGmeO_bfgPYsJWxDzvzqFj9iqTtzHUmgifQn.eCLodGj5C cLWf_dkvjD50PIcpI2yd.LtPuOvOr_Abow4m6pB3P4GZRCWtPRGSR__RSRiI flmJh2HzHzPJP0ag.iwKF_Y1UobKZcI6qZsVJEjN8Bkwd68npiIhbZHqnsW8 ZppMbe40LLDYn29vm9wxGOpysmbIVJQgDXXD6_VMRPIj8e_hv_RDnipBo5oU 4g.jF98os8khKzdGhBWpCmXs4zEYlYfgIHPyS6Lj4vomhQDzzwobRcJF2yNx w97sjPF.7xlXMviNDJkPgb0lH4lroP.arYd1H9NJCy4nNDax19WAkSVelrv4 HPOuR5bchIvXqxsEr5Ea3ZrUiGaV77q48YJEgyOZEfKEqKZqpfIgGp_5Yshb YN8miV6Edg8iTiaFNaYGynMp_8zn5c5VZC3P2.iyvttLU_7qBLVO5mpcxInh qgB1JEc4v567DaumS2wXCxQDLMj399YX5luCMhsTRe_KESkhv6ZCnEol5ilX g_buhOQVqCUrc4U1xhEuQPrWqT8OigBXagNQiLph7hd0vj85jx5sRaCVZRcx UgGXwSaabKwvnWtI_RK6qhkiLs74mysp3K_B5ysMhT_nISeoFlBNassgFQPv _PTjG0U2TXJB9nPgbrl5RqTt9wpuHfXKdHyOZUFx4ubNK88GV4AyDylzufIy cIXD3snETgJmqHrrZO454o_baXnnLhmPxxKMiDsCfEJihkvHWi96hoXzRuaY vKNu5.fdFsO9SzYBaMnxD9vIKKEBzeqLgXghMPKn05eIKji69v0EHF9MJC.P atUbTKxFuAuOOxlbihKXiXewD27ub9QsNA–
X-Originating-IP: [167.157.1.11]
Authentication-Results: mta1097.mail.ne1.yahoo.com from=umss.edu.bo; domainkeys=neutral (no sig); from=umss.edu.bo; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO apollo.umss.edu.bo) (167.157.1.11) by mta1097.mail.ne1.yahoo.com with SMTP; Fri, 25 Jan 2013 12:00:50 +0000
Received: from apollo.umss.edu.bo (apollo.umss.edu.bo [167.157.1.11]) by apollo.umss.edu.bo (8.14.4/8.14.4) with SMTP id r0PBjOUY004273; Fri, 25 Jan 2013 07:45:24 -0400 (BOT)
X-WebMail-UserID: proyectos-dric
Date: Fri, 25 Jan 2013 07:42:53 -0400
Sender: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
From: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
Subject: wuclaimsdpt@yahoo.com.hk
Message-ID: <51004AAD@mail.umss.edu.bo>

Western Union Money Transfer proyectos-dric@umss.edu.bo <> wuclaimsdpt@yahoo.com.hk RETURN-ADDRESS: proyectos-dric@umss.edu.bo RECEIVED_IP: 167.157.1.11

X-Originating-IP: [167.157.1.11]
Received: from 127.0.0.1 (EHLO apollo.umss.edu.bo) (167.157.1.11) by mta1199.mail.bf1.yahoo.com with SMTP; Fri, 25 Jan 2013 04:05:35 -0800
Received: from apollo.umss.edu.bo (apollo.umss.edu.bo [167.157.1.11]) by apollo.umss.edu.bo (8.14.4/8.14.4) with SMTP id r0PBfNDa003753; Fri, 25 Jan 2013 07:41:23 -0400 (BOT)
X-WebMail-UserID: proyectos-dric
Sender: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
From: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
Subject: wuclaimsdpt@yahoo.com.hk
Message-ID: <510049A7@mail.umss.edu.bo>

ANOTHER EMAIL:

Ha sido galardonado con la suma de $ 1,500,000.00 USD por nuestra oficina,
este premio ha sido seleccionado a través de Internet, donde su dirección de
e-mail se indica y notificados. Sírvanse proporcionar Sr. Luke Moore por
correo electrónico (wuclaimsdpt@yahoo.com.hk) con su nombre, dirección,
ocupación y teléfono para que su fondo será remitido a usted a través de
Western Union de transferencia.

Ha sido galardonado con la suma de $ 1,500,000.00 USD por nuestra oficina, este premio ha sido seleccionado a través de Internet, donde su dirección de e-mail se indica y notificados. Sírvanse proporcionar Sr. Luke Moore por correo electrónico (wuclaimsdpt@yahoo.com.hk) con su nombre, dirección, ocupación y teléfono para que su fondo será remitido a usted a través de Western Union de transferencia.

HEADER DETAILS:

Return-Path: <proyectos-dric@umss.edu.bo>
X-Originating-IP: [167.157.1.11]
Authentication-Results: mta1221.mail.ac4.yahoo.com from=umss.edu.bo; domainkeys=neutral (no sig); from=umss.edu.bo; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO apollo.umss.edu.bo) (167.157.1.11) by mta1221.mail.ac4.yahoo.com with SMTP; Tue, 29 Jan 2013 02:19:20 -0800
Received: from apollo.umss.edu.bo (apollo.umss.edu.bo [167.157.1.11]) by apollo.umss.edu.bo (8.14.4/8.14.4) with SMTP id r0TA5Hpo010600; Tue, 29 Jan 2013 06:05:17 -0400 (BOT)
X-WebMail-UserID: proyectos-dric
Sender: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
From: Western Union Money Transfer <proyectos-dric@umss.edu.bo>
Western Union Money Transfer proyectos-dric@umss.edu.bo
Subject: wuclaimsdpt@yahoo.com.hk
Message-ID: <510630B4@mail.umss.edu.bo>
X-Mailer: InterChange (Hydra) SMTP v3.61.01

wuclaimsdpt@yahoo.com.hk <> wuclaimsdpt1@yahoo.com.hk <> webwebwebxx01@att.net <> 51004AAD@mail.umss.edu.bo <>

Click here for a list of other emails sent to me personally by this same scammer

 
Leave a comment

Posted by on 01/29/2013 in Lottery Scam

 

Tags: , , , , , , , , , , ,

“Western Union Transfer.”

LOTERíA ESTAFA ( LOTTERY SCAM )

scam-thumbs-down

Ha sido galardonado con la suma de $ 1,500,000.00 USD por nuestra oficina, este premio ha sido seleccionado a través de Internet, donde su dirección de e-mail se indica y notificados. Sírvanse proporcionar Sr. Luke Moore por correo electrónico (wuclaimsdpt@live.com) con su nombre, dirección, ocupación y teléfono para que su fondo será remitido a usted a través de Western Union de transferencia.

ENCABEZAMIENTO ( HEADER DETAILS BELOW )

Return-Path: <ysanchez@mcti.gob.ve>
X-YahooFilteredBulk: 150.187.40.5
Received-SPF: pass (domain of mcti.gob.ve designates 150.187.40.5 as permitted sender)
X-YMailISG: iJ86QoAWLDvh4uiheAamq.qN3gQPiDafeiBPJ3IithadHC7L OvQSzyb8hYog0.MSr0UoGKOC93dbT9.dKFCCUUQPtK1b371jbXhr7K9_pcg. T.YX2uajDMR5N_TZXZejqqEkMR2JSw2BJwAXFpS9ktgS01wiw9PJPvN6lW.1 9mLR9cMLZNIs4g4B3XR6OKF_ioATzTdoVGvQ4o5xps35hKiUnu6M_8mlxCmr rt3.UxtjbQ36GG4dUCU.cYr6SatUDAqOVbc19ZfQIv3CDTncWhPz5BhPIVq6 9WXAAT32.RGH9IukrQ6ZIFjDA086Pnfs3PZDBcW0x_V4ROZvFcdDmHfnbDpe CfWboKYgpiDC3SSS7CLqK9TZC.WKj8vst7tzRjnQnicisSULpbINV_WqS.5M F4WJ_lEgqZc5SW_dD_xUEk7ZCA9vD14XwmemPI_JTxoHHZkcwVfPt3MXDo.1 m.TXVwjMpqYugs3WMUvIxq_0A1gd2nSnCEysLVlivaLcKPuFzImFtFjokZrO b6dKdDadUVztjsknQYlKRI0StMc9tJwzRiH.hCT6mx4Z_KcxdJivR.eW87Aa 3tR.koWOYx3_G_1b_VLz.OKg0MfYJ2rhI_oyD1AIxHzB6zAv3h1q3AR29u4S hjJKUFfFK98eXAHFiTIyYmz9G34aOr7QHtnTDHZ0FE.6WTr9PvO_pIqR9l0A DA82gbtCZLT1r8UO_4yGwIEneOkbpEErBuVUkL4cn8iVHFbr9QIO9qWKOM0k yBBkM_GLBSZSzVXKBP8VWV.vvajgiZSrUOl9Fw_inayTn8bnDQwxdn78OK4f ykQCTuOutZa_DP5EtSxH5I2fu8aad512PsXr8RoJfgyTGlW1GPXoa.ObTBTn 8UkCASP2QuzDo2L3Ba5nUe0BSNy128.JgmD.ngpofn.TuirIX_c3unx_CEJW drrMAa0nMZVIhodZMHCyxRhlM55XIm_4xGZyE17Z21Jx9Ez4gqUxw5m2_TIf WCmiLeSPGLDmzqGqQCfxWRUrkzf6UeqGbsr2_rO3Rw.d.d_FJnDzsEp7j1GM 7DkQK74.eTBQn.J1TTVdKsZfnCaKSdjzZzsa3hlR9v0Sosd1dH9qkAGO4DHF ty5pMKpkyc3G3SetRF8bc9RPTV.QJKxynVB80IlPN7NZVfrPG9bnh9yjgY7D 6rCi5aVm2mLNZZEcblpzXtLIVA.uQjYnpSv28lLywqipA4uAnIjKKFMI..U3 MoEkuS9CLwRE6_TNh87opk8YmeNKHLkM8LdJmjZPoroa1pG0zBmMe6cjC2LS i64yJubnSeW98WazKXRijW1BwukVr6YR_ErT4QcEkOQJd5dDb5HHEx1mMrS1 6WxVxtXc86jGtEKEseA3Wz9wnBzuYMvAz4FNd7vc2cD8X_RyQKZDkGg1hbRO JaPAuhOMPOLnx73S8uw0gqbHHLTOF2U6m1fik3zyOI2YH01syn7hl9mPKaUD Haxu3Pk_.gWYSyoyrgaxKFvd2Nr1sFvPXgUhQ9eKcyOsHLYDyaFf8jjCzopM b_kcKtwfN30c76.tx1oJmdskZZTNC7GgjuFCU1K6eNw2rTqGuS5YnwijsU_F ijIfuP7IR4ConcPlOoZCkTB3OJ9uLZQ-
X-Originating-IP: [150.187.40.5]
Authentication-Results: mta1203.mail.sk1.yahoo.com from=mcti.gob.ve; domainkeys=neutral (no sig); from=mcti.gob.ve; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mailserversv02.mcti.gob.ve) (150.187.40.5) by mta1203.mail.sk1.yahoo.com with SMTP; Wed, 23 Jan 2013 09:15:35 -0800
Received: from localhost (localhost [127.0.0.1]) by mailserversv02.mcti.gob.ve (Postfix) with ESMTP id 396B61630E; Wed, 23 Jan 2013 12:29:23 -0430 (VET)
X-Virus-Scanned: Debian amavisd-new at mailserversv02
Received: from mailserversv02.mcti.gob.ve ([127.0.0.1]) by localhost (mailserversv02.mcti.gob.ve [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yCNC4ll79tAl; Wed, 23 Jan 2013 12:29:23 -0430 (VET)
Received: by mailserversv02.mcti.gob.ve (Postfix, from userid 2001) id 152831631E; Wed, 23 Jan 2013 12:29:23 -0430 (VET)
Received: from mailserversv01.mcti.gob.ve (mailserversv01.mcti.gob.ve [172.17.10.98]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by mailserversv02.mcti.gob.ve (Postfix) with ESMTPS id 30DE31630E; Wed, 23 Jan 2013 12:29:19 -0430 (VET)
Received: from localhost (localhost [127.0.0.1]) by mailserversv01.mcti.gob.ve (Postfix) with ESMTP id 0D81277CB5; Wed, 23 Jan 2013 12:29:16 -0430 (VET)
X-Virus-Scanned: Debian amavisd-new at mailserversv01
Received: from mailserversv01.mcti.gob.ve ([127.0.0.1]) by localhost (mailserversv01.mcti.gob.ve [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rQBDDDYYOT74; Wed, 23 Jan 2013 12:29:15 -0430 (VET)
Received: by mailserversv01.mcti.gob.ve (Postfix, from userid 2001) id C95CB77CC6; Wed, 23 Jan 2013 12:29:15 -0430 (VET)
Received: from helo (mctiwebmail.mcti.gob.ve [172.17.10.42]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: ysanchez) by mailserversv01.mcti.gob.ve (Postfix) with ESMTPSA id DCF3077CA0; Wed, 23 Jan 2013 12:29:14 -0430 (VET)
From: “Western Union Transfer.” <ysanchez@mcti.gob.ve>
Subject: info
Reply-To: wuclaimsdpt@live.com
Received: from 41.203.67.52 [41.203.67.52] with HTTP/1.1 (POST); Wed, 23 Jan 2013 12:28:01 -0430
Message-ID: <4d4331e1d8b6b6873553135d45e0db96@mcti.gob.ve>
X-Sender: ysanchez@mcti.gob.ve
User-Agent: RoundCube Webmail/0.2.1
Content-Type: multipart/alternative; boundary=”=_fb37f82a06245239e44070b381389ea0″

 

Western Union Transfer ysanchez@mcti.gob.ve RETURN-ADDRESS: ysanchez@mcti.gob.ve REPLY-ADDRESS: wuclaimsdpt@live.com IP_USED: 150.187.40.5 RECEIVED_IP: 41.203.67.52

 
Leave a comment

Posted by on 01/27/2013 in Lottery Scam

 

Tags: , , , , , , , , , ,

“Western Union Head Office”

LOTTERY SCAM – NIGERIAN SCAMMER – ADVANCE FEE FRAUD

How are you today?

I write to inform you that we have already sent you $5000.00USD through Western union as we have been given the mandate to transfer your full compensation payment of $1.800,000.00USD via western union by this government. I called to give you the information through phone as internet hackers were many but i cannot reach you yesterday even this morning. So,I decided to email you the MTCN and sender name so that can pick up this $5,000.00USD to enable us send another $5,000.00USD by tomorrow as you knows we will be sending you only $5,000.00USD per day.

Please pick up this information and run to any western union in your country to pick up the $5,000.00USD and send us email back to send you another payment tomorrow.

Manager Mr Hamed Azeez
Email: westernunionheadoffice47@yahoo.com.hk
Mobile: +234803746209

call or email us once you picked up this $5,000.00USD today. Here is the western union information to pick up the $5,000.00USD,

MTCN :1536432709
Sender’s Name: Fatimat Hasan
Question: Who is great
Answer: God
Amount: $5,000.00USD
City:Abuja
Country:Nigeria

I am waiting for your call once you pick up $5,000.00USD,

Thanks
Mrs Fatimat Hasan.

Return-Path: <westernunion@office.com>
X-YahooFilteredBulk: 202.181.165.203
Received-SPF: none (domain of office.com does not designate permitted sender hosts)
X-YMailISG: Ol0v1z4WLDuW0kIEjRdK7aNZLqP2nM9.HJMIiwGM9qLq9exh QjFU1_Vj6tpO9Gai19O_EBVz8_61urU7W8yBLIHEeG4EWNDDlk8x32_kQ3Dx gQB_nEBrMoe04laL7zbGJCsdT.p0ZVHXy7aXqVrQEs8X809B8D4yvioR8tJx eQG1OjaqQQoJwWoX4YFH4fNbeg1RQKRjrwgA13ycQRUe1.j0ur3JHmXtHo9p RmGVB40jPieYhd0hT_NCQXcX1bvFjZgdFEKBJWrbs8F10CpOPAUEa0UzXMsH Szzy7hk8x0W83NhEsxl3.zX34nE3l1d0PVVZNaGDj3SSxzWwHEGb1LHE4qOp 2Yx7OGooHd9GSIyhaRPImRajzvS.eWzuCi5A0nkbb4X7yYqsRD1jcXn7lexc B.E2LFnRakhxOGuqBBApUQ8UHl0pFEdRh8UnzkRHU4AjnBCyXGzKDJZuth2r OjNqs7vC8up9JvBdkAhhH1o8a7PuQN6ARiLNNe6EPa_eoYtXiaeCYSpKZ079 Zpntek5dkZn4JBrzTkV2b8mouDr0Z3eoayuHMUleez9_juV_GLsIGiV8VUep lGHwK9b_m3chiJLviUkAUenmIKMGeRehfsTmHsgzcQ.Wg4fVdhdOAYIXz9Uh fkx4TMkQYqvYNKxg6IAkLM34RpoaaRUURS7WxrwNt3atP5N3ig6PhxRghSg1 Q4XxxT8gIsPP1FI9r.mLT3yOb5EOQf_vnbKpDazG29H160eOEHCrpQDeUYiP Qnoc4eyjXtWwtR4ZqVElWKiTH33FZL1XpPySk124PDOwUoyXReu9psYr7eYM gkWnaDQEF.jSUYeovQgumAfUwyDaGfS0yAiFc7SS2GFBgNUuJ1dK8_jLwkZL xV.vYvizFtUKIjKZYvP3pJDTfy5ubLcvECM4c4XLozUIKEEq2smvvxJpjqjV Q36TDEZzTv0nnZTaothanNJj82UMifY_jbFMtyweMDZWU4QilEDyu2MTz2GR 0jExD08zCbHxB4o9I0SeFvN5RCHQj5yS1v_QEUg8.iTcVheMSKIF_BCtOtgy rPxcT8hb_7uI8V1Ndi9uUHBbW3W06YNrsDSHGDeqVnQaxMaUp1coM_rogbZt .oZ1lvNBLpfCBCXiw8ErBD5UDi511pQdoexP88J.4_vkVz1G15ftAxVprUVS KE90gPJDpCqgSZza27QeElFwNTnW9TNdAzjhrHoQJSHd.YvlP1Wyigv__1FO s1JhX2QHvXEAFUgDaBRJvUspbWg7vMkHd2REjFo3.CGeQOgfQmGGE.LidNRp ASlg8WSJBimsQ0oh2z2vvcC7mK0L8SPoIyqw2ATko.Wuv0VgLpU.PA33uFuG LSzyJr7ZGBIwjrufdddngMJbfwNNVLvSuFAMw2pPY7GQhtPKQk6W.lvLUIwy QrotNY.4QrazE5Y.sTt6qJntvR17TVqNDaN3YVQzL3YU460N.vI0cKn53RTy dNxkCLZNFMeApluCvXswnqNq8h0ypro7RVZTBkT.RrunL09yRTxH_mI6zA1e O_muBf2c4mD9qeJu9aBq_Ws2iqQqq8dMWcp1hCCCmMaGgcAJgQlEqVg..iQv GWZT5t4cAy5erAN9O6S1z86_jPIsS5w6EWSUgXuNNJH4CMsv.mIBoDxPzNU6 GbFmt8hSNHnHEJSkRKqXWLaxf3PDnek.l3dsYTipxnUC8T_8K1_.46V0CyK5 nZls5Wg8pP6HNK70XZtUczN80ZtpElOBKDrGEqyMVPWL57_OTg–
X-Originating-IP: [202.181.165.203]
Authentication-Results: mta1045.mail.bf1.yahoo.com from=office.com; domainkeys=neutral (no sig); from=office.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO pga01.vinpacgroup.com) (202.181.165.203) by mta1045.mail.bf1.yahoo.com with SMTP; Wed, 16 Jan 2013 09:02:12 -0800
Received: from pga01.vinpacgroup.com (localhost.localdomain [127.0.0.1]) by pga01.vinpacgroup.com (Postfix) with ESMTP id DCC373D6B25; Wed, 16 Jan 2013 05:43:33 +0800 (HKT)
Received: (from apache@localhost) by pga01.vinpacgroup.com (8.13.5/8.13.5/Submit) id r0FLh6gE006115; Wed, 16 Jan 2013 05:43:06 +0800
X-Authentication-Warning: pga01.vinpacgroup.com: apache set sender to westernunion@office.com using -f
Received: from 41.203.67.50 (SquirrelMail authenticated user test) by 202.181.165.203 with HTTP; Wed, 16 Jan 2013 05:43:06 +0800 (HKT)
Message-ID: <30869.41.203.67.50.1358286186.squirrel@202.181.165.203>
Date: Wed, 16 Jan 2013 05:43:06 +0800 (HKT)
Subject: Pick Up Your First Payment..
From: “Western Union Head Office” <westernunion@office.com>
Reply-To: westernunionheadoffice47@yahoo.com.hk

Western Union Head Office westernunion@office.com REPLY-ADDRESS: westernunionheadoffice47@yahoo.com.hk

41.203.67.50 > 202.181.165.203 >

 
Leave a comment

Posted by on 01/27/2013 in Lottery Scam

 

Tags: , , , , , , , , , ,

“western union”

LOTTERY SCAM – NIGERIAN 419 SCAMMER

Western Union Scammer (still at it)

 

You have been granted $750,000.00 From WESTERN UNION MONEY TRANSFER for claim Send Full Name,Mobile Number,Age,Sex,Country,Occupation to enable us proceed payment.

Operation manager:
Davis Wellington.
E-mail:runiontransfer01@live.com

HEADER:

Return-Path: <roelofaltena@online.nl>
Received-SPF: none (domain of online.nl does not designate permitted sender hosts) V0VTVEVSTiBVTklPTiBNT05FWSBUUkFOU0ZFUiBmb3IgY2xhaW0gU2VuZCBG dWxsIE5hbWUsTW9iaWxlIE51bWJlcixBZ2UsU2V4LENvdW50cnksT2NjdXBh dGlvbiB0byBlbmFibGUgdXMgcHJvY2VlZCBwYXltZW50LiBPcGVyYXRpb24g bWFuYWdlcjogRGF2aXMgV2VsbGluZ3Rvbi4gRS1tYWlsOnJ1bmlvbnRyYW5z ZmVyMDFAbGl2ZS5jb20gATABAQEB
X-YMailISG: NZKX4.QWLDs_6MwFucc.X4aiJCfqHA3HTeolMrtRREp3i.47 _8k.HQEj19eE085.bc9u17xWUtjCrcMjVP1zW61o5cgR95hKUAxvpnYgt03W TdqGnHutJNFFrwhVy7MEgn_YNkRJeYI37efHlMvTSsdXEw5c42s0Ml.tbHPj 6DzOSW5o7Rcy_tOGZUYhF2uGmOdQMpDuEhIGYs1R59wmqzRiWqg2XHxExrY7 V1wWHg_8Y2PN3zz7by7w9YRmPCRcqJkT.Fe9_bMaMpRriCpO0zMX1G79VTsn 1OI9hwexfQpHjIe4vJzPEi2XphCFD1GTSEMMFBrsB.77002AEPUvkUlFP0vU hpMKPRox5CUzlxPTu2JwKOh6cp7uopa9K8z27PB9SbCzaX2uO9DLqlT6yQxU vndwAx2H127IsMuK8wUc71r3MEaWb.lU.T5vtM0y9iLVB6gi692YsS0WhDn6 vE45wzyFaLwF375aJIMSMkqI4C4tBbClEDwuhEilM546ZP_6vVYc1X_b0bML 8l5wCwDNV5m9IH6fsppPzFgIdb1rdG5.VeViiyK8dxj4e_pQZdMaMLYmDVOI pM2J.0QJtoG6CJJOEOUB1GpKa490vgftAWuh8TYbF_Q2Jus1bTOBBwJTk88o _xStzymTA4SYag68vlgwl_BrzFggDjsIN3phcucyl04H75vs7KYRZ5LpNpYh Ye0WSHrNrVRo.VaHAXxF1CrPL21Uh9HH3RiUO47qfXsoJZMdTqjcGHTo.wyG pbeAiUBogOcQ4bLWRbhS97w_8AhagoFjVN3sPiXAxvO1bcG7W8i3v5ssOJ6H JXYSMgao5UfDiY9K9OocWYfa6MSr2S3PWmc6YrS0dudzF7emQz4F6X0n.jgj bPVhdulvBjlJbp57Wlw.RZ0wrmB3l6rdpPSHWIUhdFveUXredBxBNDZSNC95 bGKO4G1tyom9INh6bWqK1m_UxFzrWilUmqtERRorwukjNLe_hd5GcNRfWDZp 5qjrZG24wSSwBhQAPNd5.kTX46sBHTVDaFvRrD5sHR_m6Dxj.4I83._D__KE X0MlNBIP5wGrvBdlmC4K_zw8lsfCaQLclsUB_DxtIbp7q211XnWJScAcXtek MMvG0mBk3bGK6scSuQGB3kuMePrNabeMHz2qYw5DX5RUJI0trceCx3_gw5a2 7XEaLU2ke5_WLVAuLz.bGPaW33.Ldz83ndWy6j4yEueBgAxDotp62eeRot6R ohdwnUCgTA–
X-Originating-IP: [194.134.41.34]
Authentication-Results: mta1256.mail.sk1.yahoo.com from=online.nl; domainkeys=neutral (no sig); from=online.nl; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO smtp04.online.nl) (194.134.41.34) by mta1256.mail.sk1.yahoo.com with SMTP; Mon, 07 Jan 2013 16:27:08 -0800
Received: from smtp04.online.nl (localhost [127.0.0.1]) by smtp04.online.nl (Postfix) with ESMTP id C78FCE144; Mon, 7 Jan 2013 13:41:15 +0100 (CET)
Received: from mailstore16.back.prod.mail.online.nl (mailstore16.back.prod.mail.online.nl [10.160.210.116]) by smtp04.online.nl (Postfix) with ESMTP; Mon, 7 Jan 2013 13:41:15 +0100 (CET)
Date: Mon, 7 Jan 2013 13:41:15 +0100 (CET)
From: western union <roelofaltena@online.nl>
Message-ID: <1064296736.1250643.1357562475775.JavaMail.root@mailstore16>
Subject: congratulation… call +447024096013
X-Originating-IP: [41.138.185.176]

SCAMMER INFO: David Wellington A.K.A western union EMAIL-ADDRESSES: roelofaltena@online.nl — runiontransfer01@live.com
ORIGINATING IP: 41.138.185.176 RECEIVED-IP: 10.160.210.116 X-ORIGINATING-IP: 194.134.41.34
+447024096013 — Phone number currently being used by the above (Nigerian) scammer to send out 419 spam. The scammer is always using the phone number +447024051243 and the email-address multipurpose_limited@yahoo.com

Here is job scam being sent by the same scammer under the name “Thomas” -:

We offer sales of: Auto and truck battery, Drained(As per ISRI Code\”RAINS\”)Not black batteries with ebonite material, Lead/acid Battery Scrap aluminum scrap,copper scrap,phone and electronic scrap,iron scrap, metals scra,waste plastic,Vessel Scrap, Pig Iron, and o,ther\’s.

We currently have 250,000 MT of various scrap\’s at our yard,and buyer\’s are needed globally.

For more informaion contact…
Contact: +447024051243 OR +447024096013
Email:multipurpose_limited@yahoo.com

Regards
Thomas

 
1 Comment

Posted by on 01/08/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , ,

“DHL COSTUMER CARE”

WARNING – NIGERIAN 419 SCAM – ONLINE FRAUD

THIS SCAMMER IS AT IT AGAIN!! UNDER YET ANOTHER NAME AND USERNAME.. OVER THE PAST COUPLE MONTHS, I HAVE POSTED OVER A DOZEN EMAILS ON SCAMMER419 SENT BY THIS NIGERIAN SCAMMER — EACH EMAIL I RECEIVED HAD A DIFFERENT IP ADDRESS AND EMAIL-ADDRESS.   

SPOOFED LINKS WERE ALSO ATTACHED TO THIS EMAIL, PRETENDING TO BE ‘WESTERN UNION CUSTOMER CARE’ — THE ACTUAL URL OF THE LINKS WERE GOOGLE.BJ/IMGRES/YADIG.COM/UPLOADS/BIZLOGO/DHL_EXPRESS_ALGARHOUD-ETCETCETC

EMAIL: DEAR CUSTOMER,

THIS EMAIL IS COMING TO YOU AS A REMINDER CONCERNING YOUR PENDING, PACKAGE THAT HAS BEEN WITH US FOR A LONG TIME. AS YOU ALREADY KNOW THAT THIS PACKAGE IS CONTAINING AN ATM CARD IN THE AMOUNT OF $1.5 MILLION USD.

THIS EMAIL IS TO LET YOU KNOW THAT OUR DELIVERY TEAM HAS FINALLY CARRIED OUT DELIVERY OF YOUR PACKAGE. THE PACKAGE LEFT COTONU BENIN ON WEDNESDAY, NOVEMBER 21, 2012 AND SINCE THEN ATM CARD HAS BEEN IN CINCINNATI HUB, OH – USA , UNITED STATES AWAITING CUSTOM CLEARANCE.

TO TRACK YOUR PACKAGE, GO TO HTTP://WWW.DHL.COM AND INSERT THE TRACKING NUMBER BELOW TO VIEW DELIVERY STATUS.

HTTP://WWW.DHL.COM
TRACKING NUMBER: 1736996225

ON THE TRACKING PAGE YOU WILL SEE THAT THIS PACKAGE IS GOING TO A WRONG ADDRESS. THIS IS BECAUSE YOU HAVE REFUSED TO GIVE US YOUR COOPERATION. YOU ARE HEREBY ADVISED TO PROVIDE US WITH THE BELOW DETAILS SO WE CAN IMMEDIATELY HAVE IT SEND OUT TO OUR DELIVERYMEN IN CINCINNATI HUB, OH – USA .

YOU’RE NAME (IN FULL):
YOU’RE DELIVERY ADDRESS:
YOUR DIRECT TELEPHONE NUMBER:

PLEASE NOTE THAT YOU ARE REQUIRED TO PROVIDE A REDIRECTION FEE OF $65 WHEN REPLYING THIS EMAIL WITH THE MTCN NUMBER WHICH YOU ARE TO MAKE AVAILABLE TO THIS OFFICE VIA WESTERN UNION MONEY TRANSFER OR MONEY GRAM IN THE NAME OF OUR RECEIVING ACCOUNTING OFFICER STATED BELOW.

RECEIVERS NAME: MR. Mike Osita
COUNTRY: BENIN REPUBLIC
CITY: COTONOU
AMOUNT: $65 .00
TEXT QUESTION: URGENT
TEXT ANSWER: TODAY
MTCN…….
SENDER’S NAME…….

UPON RECEIVING YOUR CORRECT DETAILS AND THE PAYMENT MTCN FROM YOU, WE WILL IMMEDIATELY NOTIFY THE AIRPORT AUTHORITIES IN USA AND THE PACKAGE WILL BE REDIRECTED TO YOUR CORRECT ADDRESS IMMEDIATELY. EMAIL ME ONLY ON THIS EMAIL ADDRESS: (dhl2@superposta.com) THIS IS IMPORTANT AND AS SUCH YOUR IMMEDIATE RESPONSE WILL DO YOU GOOD.

MANAGEMENT,
MR. WILLIAMS FORSTER
THE DHL MANAGER BENIN REPUBLIC
ADDRESS: 455 AGBOKOU ANKPA ROAD COTONOU

HEADER:

Return-Path: <webtzzzz.office@att.net>
X-YahooFilteredBulk: 98.136.217.70
Received-SPF: none (domain of att.net does not designate permitted sender hosts)
X-YMailISG: p8lVcL4WLDvewhzIrylP8xI3a9LPPhDBhDME1lzPGGvQontc ktbWdxpu_gs6JvDnQScDSWwl56kzWHusRAx2Ds_pdgSzG9Qe04L2o21e8_33 wUq2MqkyNEx3NWbeKyr3FpnTLQfAwBWI71cd7utjFjL.A3xFMZ9DtZdd3UEU ekjqbavtNkSGPy17ayqcXYXFzXhtJ6z9igt8f98FmG4Iou1.caQ8bTP64g24 3VffbJI0URmoUkaMy45c_9hdEee.Abk1kXU.QJdCFbmvEuy1JRNl6ZrRPxOA AutA0VeLSsTanI5L4EcjxGG05bvrIUMNLGi.mrjRkZctW1DW7DSkfvbYZqZ6 tG9wvfA2YLxIdIUcpNu2IF_LnReU_5g7ltkMJt43H5.rMm5V5dsb_nL.D_Jq _MRVXp5JNGwNDvxmeSpK9_XTGiq45o5UiRG5dCWpQGCkeTFz5q0sbbPw_mR2 97MAsA0lSc30BuGg_nmZ02Zu.kogPIf9.i26DQ.Q4ghuvRXbQ4sc8TdNTsq6 5FJEydJCkX.3ERwsGZBCHEv94bxh77acpC3.Pb0iCCYgEPcDGzGJHNwFZvA4 caVPp81ffhDY0vIoV03.eQ_rOSwXToPiu_U_IjpLDp2iVn6Nz.bCHHw6zjVz KnzWiD5Bk6oQI3BQZNAR_ZJAAmyWpRMCc.js4hRh8lbFpW.jCESgm6iGyaQD w6BuEQrnBd70DRv2iEnTyTWBKuuUnZIHFoq2JwHGktXkIUFvB3DbgNUIAqnQ gu_oJnjFdEp3F7diZo.5HZgi_UannfhTI1EJLtRWoaPAZxMizPkKl8_5cp_h .YCe.LH1Ygvl3S2FMktaLvvciuhuarxlw_fYfjVX8Ve1LjDzL9WVBf9evyt5 880sRXKXNBUG5PgxcRID6GynXX0mVwdkd09X1ypVCDK28e7pjnzoqwuMHpn. jV3a7Njk9OcYeeHu9GnmTbSIKrhvUV73WYth8geL0xmT45cVlwQl6L4HzLrh kXhpWUuQJXhUO44K9dZIPqg2Ca7RNsqpQV9eVW3L.XxLmj99CvbaAX.oJeub kxkq.VYo33MlLbo1q.JQGFIIGAYfkO7pRfZEFjbIJ4D38NYL55jgyIeRCUDw Cr_zDxDX1LBlGy9cmQHMQWf4Jg9.f_xh95HWujLyQce6hVJ4z8PoY1ChEYRp aKlgoRxtBn7DkH256xF3QI55u1JZfy9Hg.atUmcIsq91wp2ky_pdpD0wtsVQ RAVN2CCt7_CgdV.TG8cbizBTOX.JawUCRcj_nWQeQ5c7KG81hMoQtPydgoYs PLnEOFNgyGQaHeKYmrQUr9b00tdgdGGyBuNfP5r5jFujaTMIl9F8dj6ZCJGi hB_YsBJ0_4dphtAG7w.rvToXz93tmmanQsk9ACdm_N.1OEETOtYUtZKZI1if lMj.aCK8RaPrX3zyBnqxHFBkT4lTZBv3.7tsJcMX0UwjqfmkMEkcnCfqZIWc Fzb6F1kKphS6VCk5D3x.55eRTt_1e5GnkpMWuA–
X-Originating-IP: [98.136.217.70]
Authentication-Results: mta1019.mail.gq1.yahoo.com from=superposta.com; domainkeys=fail (bad syntax); from=att.net; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm22-vm7.bullet.mail.gq1.yahoo.com) (98.136.217.70) by mta1019.mail.gq1.yahoo.com with SMTP; Thu, 03 Jan 2013 02:27:26 -0800
Received: from [98.137.12.63] by nm22.bullet.mail.gq1.yahoo.com with NNFMP; 03 Jan 2013 10:27:26 -0000
Received: from [98.139.44.82] by tm8.bullet.mail.gq1.yahoo.com with NNFMP; 03 Jan 2013 10:27:26 -0000
Received: from [127.0.0.1] by omp1019.access.mail.sp2.yahoo.com with NNFMP; 03 Jan 2013 10:27:26 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 72063.61201.bm@omp1019.access.mail.sp2.yahoo.com
Received: (qmail 22369 invoked by uid 60001); 3 Jan 2013 10:27:25 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1357208845; bh=lmIBzo8pehjJsD539T9RFIDhRXWzlDcc3BSQ0Igdr2w=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=l/M9cJxrlpIXZpNBdM1sj/yVjEflcd/UJzeIGcUPojiLE7DY0UnFDztt1kD0gVw7Q1EhV+xvpnonQnPGIOIR7ix4Of4kBityUsjL65NuLb0bAIK7ARGY9FVuBDui+wJA+PcgpytkrxLXPPlcb/I58hCmlZhvumPUUKYJEPRwprM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=WpuFi53revO4dlTGjmLXeGSXpTg5q7twxkK4tWto5mJzy2lW+XcZLfrd22TMs/evyh/HS0iT9suPjqthzByLcn3eaH/Svo9KOt03y8KibBn9ComYtN54hkjgjClRIPlnB6ujaucXL8O/ilqfRh0w5ZfqM8Hw+S5K8oPLxaDu99U=;
X-YMail-OSG: X94oLdAVM1m3RFepMGMdx7qyT2Jc7tIr3A9LR8KPGHJW1GV phobi8N5t3h84tC6e.f1qyRXMUJtrPu5VPhp7pb7gMMGA21NwAdKb66PmBas 4UCb1R3JFaI48Id46IPLscQH_i_q88UY9_Z7o._SoDBnfMKqBawzo6a6c_IY 3pWsPFCvcjyopXUwjZhQN4DxhWMXVmEHJbKCv5F26akn7VGzfeyx9bgeHVsT w7ooyrJiFWIVcXOWCTI8pk1BVlTP4j.r_WCUsWbIeRWsbt4C95hThw4Ol7S3 JqQVe1iXz8cmWn3ftbA6Z52Xb7UlQI_QGO5dYeU8bFsOT3tfikU2AxI7ex5C Cpy1K4MSV_9Z.rKmBf5wiXdJQWfvs_LWugO54wwph9CFvLuKnniUd5f0..A4 Fr_23dyFIJ6QokMJ8Mve5dM9ovEAG9YY1z9LgXkreXJS88oIAQtE_KkVKVU0 gWFoKAbYkt35HaPUYUmlN4zGwfKweMqQUxEmy4ptw67JlVv67qvnZvUwWsKA RwJfyCwx9h.SVITFhM7DRx.O8zzjMzLixz2DDNKk_8mL_VWx0j3q1TsA7FE2 ytLMjsiuly1.Di2.3YqFGRNAHUwhktYRY3IOyl0eTeGsUEEiD07RW1Kcdcxo 3VFkSCLQ9y7DX84iRiiAhV54qkyiVqg2CfSSe5uoZYmvzzig5Udn_pPo16dX 428XiGVli01fNur44l.DejLkila7cCZhQB150XLi7Vl3SuTgQ5gXR5WG4P9s yJCBRRF7NmxiBzr5uaNr9tadVYQWUdv9QKM6pOZqbY3.SIdMCxcHSzvPbyMN NXvDTQZDY0DcD3wNyVBYPwwsuZMlNs6EPEpPB.GGCPyeESv1PBlNXSRfhY6u kuAaz0FrOt588U_D1DnKbeMKqtST5p6qNbzMxIYEuncmXn10pEXKs2xEWV9x pKo3l71HmCFiNuI3Ld3wnSFPKeu2oBJEEi7vtqGPQWVAUbrWI1vl0V.O6B8N akSZIyzpkQPmibzAAFNXDyn7r1mmOeZHeDRw1Me3ivMm6jlx3T5qZ6E4EIhj y1yPHgLwcgMWExjz3rUAHUXE20NVpipk6mrKdiQnVAbamcYnTwXr30vti372 w_tlPlNlEsEzGhuiSRXHA2de7xApjoyrRouwpkkBGdGxN5jcOh2Bcm1L50Po gTPn6njfBxnHuzLfXxkLChhv4zRej8FyTIxwOTmUmUDQPZMun8Zk4njcVeY7 aPEnUTyk19.Viob5P.M4.wC1JRvqPI9a47Gux6m3Be28C1xTjk0PR9sP5eNX b1jZstUa5LUyKtkRPkOaQ.RMyDYhbZpHye7RnyI65T5UZ9yvh2GGAj6wb02I IeuaekkQcOipGGmykNcXcyC45tRaMp6FHUj6uCcTwMhixIEhC8w9iH1qBM96 GsD5rVlXiLvwI6F8D6durYVBgsh9KuWAGlMhVwED_P8Jet.U9cbWyubFwehp xnyOJE3jp4cztVwV5UWA43qTPTTwQQb5BTXf8Yc3Wk68MG_sYLAvrDrHnYjq c3NV1ESe49OSQrV7goXKLwa.rHHX61y8EaI0gOP9kVrJnkKLfuXa7S5GOA8Y cztYklpTNxq9fZmA0XtMQuzfQGnLKZeCoCJlNjmg4zrV2SBW0d8D14x1LAyT ccfz4E3ew4mPJXPK1IzZRAxwjtvL_.NeTiK2.vgL2oDJgl25.YkqB5cilOLt Oy_qy.6uwFEf00zP4TVLfV9vLSoQSDKNk0VY.zAn29lE6ERR_pPa1uYU64yU eXuqZEwB0.BLV2kAeWWw1FDtacrwAq9x5GoCBHtYaGCd65Q8KxmTVib6BNnt og6uqfVwLY7OIYdSXZ6OtPuCNXtBHLZ2WVK8uGguXuoeBDlnySbiUMey9CBI vZjMvlKF8Z.KLCM.AJQLOljzfUf1xXmjVbbRiA6cUiYS6c37wirwGDy8gM3Q gwdUdOlP0wRwXEKQbePmN9IM7Uqr9ThtUnd7oFWDQs2jkLA_XXco_EdWPUyx x8Nx6QFKBtp_LKzQCxKrT2bgAr4am.c3WrmkhXBNecGDFhuA3npM0P4jAj93 RZ9wM_FKrhb1jZ0g_utpMzjo1wfmvHOuZ4a9Ky9vBw6_gjhptbH5lxXChwj1 9Ik.apCbmh6FheKDuFyxL30K3ocRkfkX7_gTNyY_NhDPa1bEhTLmyZi7OYbl LHLanewYFIU8QnJ0ai8TKLU5SDS66ba0_K8EbfwFnaYPGCzs9hBaVuz7rfz_ ITxJyTORuOmUu_3iMg6rpO8Ld1ljXko7_baLHZYxsm41aISCNe9i5bZMEK9a 1bbnQKptpjurAYbNct4LXnNR.4U8HwI7cmxbKRkyzJObqKHmDEh63c7a28Tj 6rCqpJkf017cEFjeZ9JVerHgfnnaNeDypbqoyrpZXknyMYMfPv6sKdn2dQCT FogwMPiW1HT2lEveJVs0ZRkKsb.KmCGelImLgCnVUmsnvH7E.N_clj.Du2i8 58xoGAlimQLf6XyorSU22o2AzVaO2TyVRrxE5yOGZuZCkTJ8Jp0Znj_eXfrp oVmdqgptN9BZ92.p.6T0Keprim5vvTAuebyqrSHxmTFLVnt72cGaEADfQ1yX eUt89x1QjLONr6VnUEsH_pabnd_Iby2AfY9PKyG7mm4jBOUWkoe0u2KS.6Mc e.g58lXFrRrPH_zaJNMr3BMrEszqPAa9VE1tHGCKqtWkrQvxuqrQOhpECkXH c1.wybhocLijGr9LkOJYbM58_dL_awf.VtORuO5qT_Dvag93V2.ngMf145EN jfRnuTSMLWQ4VbAilC1r5WCxzGlyKM5GnUz8HsEkO6JOSRFNZF1v5dRLDwVv q9hH7QxSGTqNQHG5lNWyEM_.h8t3gWBrJuY6j8BLV038OdDDfUPTSpO.TPRW 95RVlFFHcHrxvIoT6jm7SaQ–
Received: from [173.13.200.181] by web185005.mail.gq1.yahoo.com via HTTP; Thu, 03 Jan 2013 02:27:25 PST
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.129.483
Message-ID: <1357208845.7111.YahooMailClassic@web185005.mail.gq1.yahoo.com>
Date: Thu, 3 Jan 2013 02:27:25 -0800 (PST)
From: DHL COSTUMER CARE <goodwservices@superposta.com>
Reply-To: dhl2@superposta.com
Subject: Your Atm Package Tracking Number Is 1736996225

DHL COSTUMER CARE goodwservices@superposta.com REPLY-ADDRESS: dhl2@superposta.com RETURN-ADDRESS: webtzzzz.office@att.net

ORIGINATING-IP: 98.136.217.70 RECEIVED-IP: 173.13.200.181

 
Leave a comment

Posted by on 01/05/2013 in Lottery Scam

 

Tags: , , , , , , , , , , , , , , , , , ,

 
%d bloggers like this: