NOTE: SOOOO important it has to be done via email, en masse. Copy and Paste is tough work.
From: "Harjeev S Kandhari" <harjeev@eim.ae> To: 16:39:07 CDT, Wednesday 31 July 2019
Message ID: <7350e1a84d9ae.5d41d222@emirates.net.ae>
Return Path: <harjeev@eim.ae>
Reply To: ianonward@yahoo.com
MIME Version: 1.0
Content Type: multipart/alternative; boundary="--cf166e0b5e65050237ec2"
Received:
from mx1-us1.ppe-hosted.com (unknown [10.110.48.236]) by pure.maildistiller.com with ESMTPS id 05E4F4006B for <s.com>; Wed, 31 Jul 2019 21:39:07 +0000 (UTC)
from dcmomail3.d.emirates.net.ae (dcmomail3.d.emirates.net.ae [86.96.227.138]) by mx1-us1.ppe-hosted.com with ESMTP id 76AA8400087 for <s.com>; Wed, 31 Jul 2019 21:39:06 +0000 (UTC)
from emirates.net.ae ([217.165.209.26]) by dcmomail3.emirates.net.ae with Server id jZei2000Q0aj5JH01ZeiZm; Thu, 01 Aug 2019 01:39:02 +0400
from [127.0.0.1] (Forwarded-For: 197.234.221.5) by acmail1v.emirates.net.ae (mshttpd); Wed, 31 Jul 2019 17:38:42 -0400
Prompt Alert About Your Funds!!!!
I felt expedient to write you this wicked conspiracy hatched by the duo of Justice Benjamin Mark and a Ministry of Finance Staff, with some numerous bad people to divert your funds to Europe into their account. This is why I decided to alert you
concerning what is going on. The Global Security Company is holding the money for clarification reasons.
These dubious individuals might have started frustrating you by asking for endless fees to be paid before you receive your funds. All these are just to buy time for their selfish plans to materialize, as they do not have any plans of transferring your funds to you from the beginning.
Note that, I have your transaction reference number that you will quote to the concerned security company where your funds are currently deposited. This will not only frustrate the efforts of those thieves but will put you into rightful position to receive what is legitimately yours.
Revert back to me as a matter of urgency to enable me direct you on how to receive your funds from the Security Keeping Company.
Finally, please do not disclose my identity to anyone because my life will be in danger once those involved in this conspiracy know about what I have just done. They are powerful and well connected with Government officials here and may eliminate me in a matter of minutes.
Best Regards,
( )
Envelope Sender: <harjeev@eim.ae>
'From' Header: "Harjeev S Kandhari" <harjeev@eim.ae>
Subject: Prompt Alert About Your Funds!!!
Timestamp: 16:39:07 CDT, Wednesday 31 July 2019
Message-ID: <7350e1a84d9ae.5d41d222@emirates.net.ae>
Client IP Address: 86.96.227.138
Client GeoIP Lookup: United Arab Emirates
Email Size: 5.2 kB
Encrypted? No
Wednesday, July 31, 2019
Dear Friend,
NOTE: Dear Friend, your false words of endearment mean nothing as you attempt to steal money from unsuspecting people who don't deserve to be tricked and stolen from. But alas, you are no one's friend.
From: Aisha Gaddafi <gaddafia504@gmail.com> To: 21:09:51 CDT, Tuesday 30 July 2019
Message ID: <1894667411.45866.1564538985356@mail.yahoo.com>
Return Path: <gaddafia504@gmail.com>
Reply To: gaisha983@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.37]) by pure.maildistiller.com with ESMTPS id 75E3B1A0054 for <s.com>; Wed, 31 Jul 2019 02:09:51 +0000 (UTC)
from sonic313-15.consmr.mail.bf2.yahoo.com (sonic313-15.consmr.mail.bf2.yahoo.com [74.6.133.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id 41FA5B40057 for <s.com>; Wed, 31 Jul 2019 02:09:51 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic313.consmr.mail.bf2.yahoo.com with HTTP; Wed, 31 Jul 2019 02:09:50 +0000
Dear Friend, I came across your e-mail contact prior a private search while in need of your assistance. My name is Aisha Gaddafi a single Mother and a Widow with three Children. I am the only biological Daughter of late Libyan President (Late Colonel Muammar Gaddafi). I have investment funds worth Twenty Seven Million Five Hundred Thousand United State Dollar ($27.500.000.00 ) and i need a trusted investment Manager/Partner because of my current refugee status, however, I am interested in you for investment project assistance in your country, may be from there, we can build business relationship in the nearest future. I am willing to negotiate investment/business profit sharing ratio with you base on the future investment earning profits. If you are willing to handle this project on my behalf kindly reply urgent to enable me provide you more information about the investment funds. Your Urgent Reply Will Be Appreciated. Best Regards Mrs Aisha Gaddafi (gaisha983@gmail.com)
Envelope Sender: <gaddafia504@gmail.com>
'From' Header: Aisha Gaddafi <gaddafia504@gmail.com>
Subject: Dear Friend,
Timestamp: 21:09:51 CDT, Tuesday 30 July 2019
Message-ID: <1894667411.45866.1564538985356@mail.yahoo.com>
Client IP Address: 74.6.133.125
Client GeoIP Lookup: United States
Email Size: 3.9 kB
Encrypted? No
From: Aisha Gaddafi <gaddafia504@gmail.com> To: 21:09:51 CDT, Tuesday 30 July 2019
Message ID: <1894667411.45866.1564538985356@mail.yahoo.com>
Return Path: <gaddafia504@gmail.com>
Reply To: gaisha983@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.37]) by pure.maildistiller.com with ESMTPS id 75E3B1A0054 for <s.com>; Wed, 31 Jul 2019 02:09:51 +0000 (UTC)
from sonic313-15.consmr.mail.bf2.yahoo.com (sonic313-15.consmr.mail.bf2.yahoo.com [74.6.133.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id 41FA5B40057 for <s.com>; Wed, 31 Jul 2019 02:09:51 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic313.consmr.mail.bf2.yahoo.com with HTTP; Wed, 31 Jul 2019 02:09:50 +0000
Dear Friend, I came across your e-mail contact prior a private search while in need of your assistance. My name is Aisha Gaddafi a single Mother and a Widow with three Children. I am the only biological Daughter of late Libyan President (Late Colonel Muammar Gaddafi). I have investment funds worth Twenty Seven Million Five Hundred Thousand United State Dollar ($27.500.000.00 ) and i need a trusted investment Manager/Partner because of my current refugee status, however, I am interested in you for investment project assistance in your country, may be from there, we can build business relationship in the nearest future. I am willing to negotiate investment/business profit sharing ratio with you base on the future investment earning profits. If you are willing to handle this project on my behalf kindly reply urgent to enable me provide you more information about the investment funds. Your Urgent Reply Will Be Appreciated. Best Regards Mrs Aisha Gaddafi (gaisha983@gmail.com)
Envelope Sender: <gaddafia504@gmail.com>
'From' Header: Aisha Gaddafi <gaddafia504@gmail.com>
Subject: Dear Friend,
Timestamp: 21:09:51 CDT, Tuesday 30 July 2019
Message-ID: <1894667411.45866.1564538985356@mail.yahoo.com>
Client IP Address: 74.6.133.125
Client GeoIP Lookup: United States
Email Size: 3.9 kB
Encrypted? No
Good day,
NOTE: Sometimes commas sometimes not ... always a scam.
From: MRS BLESSING ADAMS <lovethudoka20@yahoo.com> To: 02:44:59 CDT, Wednesday 31 July 2019
Message ID: <1044996865.138584.1564559096326@mail.yahoo.com>
Return Path: <lovethudoka20@yahoo.com>
Reply To: unionwestern616@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.34]) by pure.maildistiller.com with ESMTPS id 1FF4E1A004D for <s.com>; Wed, 31 Jul 2019 07:44:59 +0000 (UTC)
from sonic306-20.consmr.mail.ne1.yahoo.com (sonic306-20.consmr.mail.ne1.yahoo.com [66.163.189.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id F3FB460005B for <s.com>; Wed, 31 Jul 2019 07:44:58 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic306.consmr.mail.ne1.yahoo.com with HTTP; Wed, 31 Jul 2019 07:44:58 +0000
Good day, There is an issue involving $4.800.000.00 USD which was called to Our Bank (CAPITAL CITY BANK) from THE FEDERAL MINISTRY OF FINANCE OF BENIN REPUBLIC concerning your compensation of $4.8000.00 USD has been forwarded to WESTERN UNION Agent Office and An instruction has come directly from Mr. Andrew Jack of Ministry Of Finance. He asked us to start sending your fund install mentally $5,000.00 USD per a day through International WESTERN UNION transfer. This type of transfer means, you will be receiving $5,000.00 USD every day through the International WESTERN UNION transfer until the total of $4.8000.00 USD is completely transferred to you. As a matter of urgency,to effect your first payment of $5,000.00 USD through WESTERN UNION, Now you have to Contact Mr. Lucky Odeh, the director WESTERN UNION on his contact below as he is the person in charge of your payment. The International WESTERN UNION Agent Office: Name: Mr. Lucky Odeh CONTACT HIME WITH THIS E-mail: (unionwestern616@gmail.com) Tel: +229 60300718 Here is the details you needed to forward to them, in order to help you pick the first payment of your $5,000.00 USD. Reconfirm your address: Full name: Personal Telephone number: Age: Occpation: - MRS BLESSING ADAMS
Envelope Sender: <lovethudoka20@yahoo.com>
'From' Header: MRS BLESSING ADAMS <lovethudoka20@yahoo.com>
Subject: Good day,
Timestamp: 02:44:59 CDT, Wednesday 31 July 2019
Message-ID: <1044996865.138584.1564559096326@mail.yahoo.com>
Client IP Address: 66.163.189.82
Client GeoIP Lookup: United States
Email Size: 4.2 kB
Encrypted? No
From: MRS BLESSING ADAMS <lovethudoka20@yahoo.com> To: 02:44:59 CDT, Wednesday 31 July 2019
Message ID: <1044996865.138584.1564559096326@mail.yahoo.com>
Return Path: <lovethudoka20@yahoo.com>
Reply To: unionwestern616@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.34]) by pure.maildistiller.com with ESMTPS id 1FF4E1A004D for <s.com>; Wed, 31 Jul 2019 07:44:59 +0000 (UTC)
from sonic306-20.consmr.mail.ne1.yahoo.com (sonic306-20.consmr.mail.ne1.yahoo.com [66.163.189.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id F3FB460005B for <s.com>; Wed, 31 Jul 2019 07:44:58 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic306.consmr.mail.ne1.yahoo.com with HTTP; Wed, 31 Jul 2019 07:44:58 +0000
Good day, There is an issue involving $4.800.000.00 USD which was called to Our Bank (CAPITAL CITY BANK) from THE FEDERAL MINISTRY OF FINANCE OF BENIN REPUBLIC concerning your compensation of $4.8000.00 USD has been forwarded to WESTERN UNION Agent Office and An instruction has come directly from Mr. Andrew Jack of Ministry Of Finance. He asked us to start sending your fund install mentally $5,000.00 USD per a day through International WESTERN UNION transfer. This type of transfer means, you will be receiving $5,000.00 USD every day through the International WESTERN UNION transfer until the total of $4.8000.00 USD is completely transferred to you. As a matter of urgency,to effect your first payment of $5,000.00 USD through WESTERN UNION, Now you have to Contact Mr. Lucky Odeh, the director WESTERN UNION on his contact below as he is the person in charge of your payment. The International WESTERN UNION Agent Office: Name: Mr. Lucky Odeh CONTACT HIME WITH THIS E-mail: (unionwestern616@gmail.com) Tel: +229 60300718 Here is the details you needed to forward to them, in order to help you pick the first payment of your $5,000.00 USD. Reconfirm your address: Full name: Personal Telephone number: Age: Occpation: - MRS BLESSING ADAMS
Envelope Sender: <lovethudoka20@yahoo.com>
'From' Header: MRS BLESSING ADAMS <lovethudoka20@yahoo.com>
Subject: Good day,
Timestamp: 02:44:59 CDT, Wednesday 31 July 2019
Message-ID: <1044996865.138584.1564559096326@mail.yahoo.com>
Client IP Address: 66.163.189.82
Client GeoIP Lookup: United States
Email Size: 4.2 kB
Encrypted? No
Re: Hello Dear, Urgent Respond Needed
NOTE: This must have been an incredibly difficult and time consuming copy and paste job for the scammer. Sadly, if he does a good enough job he will and has been rewarded by (an) unsuspecting victim(s) who didn't deserve to be wiped out of financial resources. Don't fall for this crap ... just look at this blog alone .... should say everything you need to know about these low lifes.
From: "MichaelCho, Avocats Associate" <mr.michaelchojones3@yahoo.com> To: 05:18:16 CDT, Wednesday 31 July 2019
Message ID: <904978956.195770.1564568288608@mail.yahoo.com>
Return Path: <mr.michaelchojones3@yahoo.com>
Reply To: "MichaelCho, Avocats Associate" <michaelchojones@gmail.com>
MIME Version: 1.0
Content Type: multipart/alternative; boundary="----=_Part_195769_176527246.1564568288606"
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.34]) by pure.maildistiller.com with ESMTPS id DA7C12C0058 for <s.com>; Wed, 31 Jul 2019 10:18:15 +0000 (UTC)
from sonic311-23.consmr.mail.ne1.yahoo.com (sonic311-23.consmr.mail.ne1.yahoo.com [66.163.188.204]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id ACDCB60005B for <s.com>; Wed, 31 Jul 2019 10:18:15 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic311.consmr.mail.ne1.yahoo.com with HTTP; Wed, 31 Jul 2019 10:18:09 +0000
Attention :
Well, I am Michael Cho Jones, a Solicitor and the Personal Attorney to Late Mr. Alberto , a national of your country, who was a Petro Chemical Engineer and Consultants contracted with Ireland Petroleum SA.
On the 23rd November 2016, my client, His wife and their two Children were involved in the Car-crash years ago.
Unfortunately, they all lost their lives in the event of the crash. Since then I have made several inquiries to your Embassy to locate any of my client's extended relatives, this has also proved unsuccessful.
After these several unsuccessful attempts, I decided to trace his relatives over the Internet to locate any member of his family but to no avail, hence, I contacted you to assist in repatriating the money left behind by my client before they get confiscated or declared unserviceable by the Bank .
The Bank has issued me a notice to provide the next of kin or have the account confiscated.
Since I have been unsuccessful in Locating the relatives for years, I seek your consent To present you as the next of kin/beneficiary of the deceased so that the proceeds of this account valued at (£ 11,700,000.00) can be paid to you.
I will procure all Necessary legal documents that can be used to back up any claim we may make. All I require is your honest cooperation to enable us seeing this Deal through.
I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law; therefore I want you to send your details to my private E-mail {michaelchojones@gmail.com} such as:
Full Names.........................
Mailing address..................
Tel/Mobile Number..............
Fax Number........................
Occupation and position....
Age....................................
Private Email......................
I await your email response.
Best Regards
MichaelCho, Solicitor Advocate.
43 Chorley road, Swinton square
Manchester M27 4AE United Kingdom
Attention :
Well, I am Michael Cho Jones, a Solicitor and the Personal Attorney to Late Mr. Alberto , a national of your country, who was a Petro Chemical Engineer and Consultants contracted with Ireland Petroleum SA.
On the 23rd November 2016, my client, His wife and their two Children were involved in the Car-crash years ago.
Unfortunately, they all lost their lives in the event of the crash. Since then I have made several inquiries to your Embassy to locate any of my client's extended relatives, this has also proved unsuccessful.
After these several unsuccessful attempts, I decided to trace his relatives over the Internet to locate any member of his family but to no avail, hence, I contacted you to assist in repatriating the money left behind by my client before they get confiscated or declared unserviceable by the Bank .
The Bank has issued me a notice to provide the next of kin or have the account confiscated.
Since I have been unsuccessful in Locating the relatives for years, I seek your consent To present you as the next of kin/beneficiary of the deceased so that the proceeds of this account valued at (£ 11,700,000.00) can be paid to you.
I will procure all Necessary legal documents that can be used to back up any claim we may make. All I require is your honest cooperation to enable us seeing this Deal through.
I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law; therefore I want you to send your details to my private E-mail {michaelchojones@gmail.com} such as:
Full Names.........................
Mailing address..................
Tel/Mobile Number..............
Fax Number........................
Occupation and position....
Age....................................
Private Email......................
I await your email response.
Best Regards
MichaelCho, Solicitor Advocate.
43 Chorley road, Swinton square
Manchester M27 4AE United Kingdom
Envelope Sender: <mr.michaelchojones3@yahoo.com>
'From' Header: "MichaelCho, Avocats Associate" <mr.michaelchojones3@yahoo.com>
Subject: Re: Hello Dear, Urgent Respond Needed
Timestamp: 05:18:16 CDT, Wednesday 31 July 2019
Message-ID: <904978956.195770.1564568288608@mail.yahoo.com>
Client IP Address: 66.163.188.204
Client GeoIP Lookup: United States
Email Size: 14.2 kB
Encrypted? No
From: "MichaelCho, Avocats Associate" <mr.michaelchojones3@yahoo.com> To: 05:18:16 CDT, Wednesday 31 July 2019
Message ID: <904978956.195770.1564568288608@mail.yahoo.com>
Return Path: <mr.michaelchojones3@yahoo.com>
Reply To: "MichaelCho, Avocats Associate" <michaelchojones@gmail.com>
MIME Version: 1.0
Content Type: multipart/alternative; boundary="----=_Part_195769_176527246.1564568288606"
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.34]) by pure.maildistiller.com with ESMTPS id DA7C12C0058 for <s.com>; Wed, 31 Jul 2019 10:18:15 +0000 (UTC)
from sonic311-23.consmr.mail.ne1.yahoo.com (sonic311-23.consmr.mail.ne1.yahoo.com [66.163.188.204]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id ACDCB60005B for <s.com>; Wed, 31 Jul 2019 10:18:15 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic311.consmr.mail.ne1.yahoo.com with HTTP; Wed, 31 Jul 2019 10:18:09 +0000
Attention :
Well, I am Michael Cho Jones, a Solicitor and the Personal Attorney to Late Mr. Alberto , a national of your country, who was a Petro Chemical Engineer and Consultants contracted with Ireland Petroleum SA.
On the 23rd November 2016, my client, His wife and their two Children were involved in the Car-crash years ago.
Unfortunately, they all lost their lives in the event of the crash. Since then I have made several inquiries to your Embassy to locate any of my client's extended relatives, this has also proved unsuccessful.
After these several unsuccessful attempts, I decided to trace his relatives over the Internet to locate any member of his family but to no avail, hence, I contacted you to assist in repatriating the money left behind by my client before they get confiscated or declared unserviceable by the Bank .
The Bank has issued me a notice to provide the next of kin or have the account confiscated.
Since I have been unsuccessful in Locating the relatives for years, I seek your consent To present you as the next of kin/beneficiary of the deceased so that the proceeds of this account valued at (£ 11,700,000.00) can be paid to you.
I will procure all Necessary legal documents that can be used to back up any claim we may make. All I require is your honest cooperation to enable us seeing this Deal through.
I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law; therefore I want you to send your details to my private E-mail {michaelchojones@gmail.com} such as:
Full Names.........................
Mailing address..................
Tel/Mobile Number..............
Fax Number........................
Occupation and position....
Age....................................
Private Email......................
I await your email response.
Best Regards
MichaelCho, Solicitor Advocate.
43 Chorley road, Swinton square
Manchester M27 4AE United Kingdom
Attention :
Well, I am Michael Cho Jones, a Solicitor and the Personal Attorney to Late Mr. Alberto , a national of your country, who was a Petro Chemical Engineer and Consultants contracted with Ireland Petroleum SA.
On the 23rd November 2016, my client, His wife and their two Children were involved in the Car-crash years ago.
Unfortunately, they all lost their lives in the event of the crash. Since then I have made several inquiries to your Embassy to locate any of my client's extended relatives, this has also proved unsuccessful.
After these several unsuccessful attempts, I decided to trace his relatives over the Internet to locate any member of his family but to no avail, hence, I contacted you to assist in repatriating the money left behind by my client before they get confiscated or declared unserviceable by the Bank .
The Bank has issued me a notice to provide the next of kin or have the account confiscated.
Since I have been unsuccessful in Locating the relatives for years, I seek your consent To present you as the next of kin/beneficiary of the deceased so that the proceeds of this account valued at (£ 11,700,000.00) can be paid to you.
I will procure all Necessary legal documents that can be used to back up any claim we may make. All I require is your honest cooperation to enable us seeing this Deal through.
I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law; therefore I want you to send your details to my private E-mail {michaelchojones@gmail.com} such as:
Full Names.........................
Mailing address..................
Tel/Mobile Number..............
Fax Number........................
Occupation and position....
Age....................................
Private Email......................
I await your email response.
Best Regards
MichaelCho, Solicitor Advocate.
43 Chorley road, Swinton square
Manchester M27 4AE United Kingdom
Envelope Sender: <mr.michaelchojones3@yahoo.com>
'From' Header: "MichaelCho, Avocats Associate" <mr.michaelchojones3@yahoo.com>
Subject: Re: Hello Dear, Urgent Respond Needed
Timestamp: 05:18:16 CDT, Wednesday 31 July 2019
Message-ID: <904978956.195770.1564568288608@mail.yahoo.com>
Client IP Address: 66.163.188.204
Client GeoIP Lookup: United States
Email Size: 14.2 kB
Encrypted? No
Good bye to financial problems ----- Best Loan offer
NOTE: Best loan for who? Any victim that falls for this scam will soon find their bank account sucked dry, or arrested, or both. Certainly a hassle no upright law-abiding, hard-working citizen would wish to be part of.
From: ellie catinis <surefinancialservice@gmail.com> To: undisclosed-recipients:; 06:29:24 CDT, Wednesday 31 July 2019
Message ID: <CAA5XHkXYeh3uBu-MNvTWpJaZ6zoohtx_Ro4FB1QhuCPW61ps=g@mail.gmail.com>
Return Path: <ellie.catinis@gmail.com>
Reply To: surefinancialhomes@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Received:
from mx1-us4.ppe-hosted.com (unknown [10.110.49.108]) by pure.maildistiller.com with ESMTPS id E82CC4005C for < s.com>; Wed, 31 Jul 2019 11:29:23 +0000 (UTC)
from mail-qt1-f195.google.com (mail-qt1-f195.google.com [209.85.160.195]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id D9580140063 for < s.com>; Wed, 31 Jul 2019 11:29:23 +0000 (UTC)
by mail-qt1-f195.google.com with SMTP id h18so66144276qtm.9 for < s.com>; Wed, 31 Jul 2019 04:29:23 -0700 (PDT)
by 2002:ad4:4b0a:0:0:0:0:0 with HTTP; Wed, 31 Jul 2019 04:29:23 -0700 (PDT)
Good bye to financial problems We bring you good news from Merciful Financial Homes!!!!! Merciful Financial Homes is offering all kinds of Loan at a fast, easy and affordable 3 percent interest rate ranging from 50000 dollars to 500000000 dollars to meet any of your financial requirement. Have you been having difficulty in getting your desired loans due to difficult lending processes by bank and other financial institutions? Do you need a loan/ Capital to start up business or investment ? or to meet any of your financial requirement? Then this is your golden opportunity to make those dreams and plans of yours a reality, because merciful financial homes will give you the best customer services and offer you desire. Contact us now. via email and you will be glad you did. our client satisfaction is our priority. mercifulfinancialhomes@gmail.com Awaiting your response. Thank you
Envelope Sender: <ellie.catinis@gmail.com>
'From' Header: ellie catinis <surefinancialservice@gmail.com>
Subject: Good bye to financial problems ----- Best Loan offer
Timestamp: 06:29:24 CDT, Wednesday 31 July 2019
Message-ID: <CAA5XHkXYeh3uBu-MNvTWpJaZ6zoohtx_Ro4FB1QhuCPW61ps=g@mail.gmail.com>
Client IP Address: 209.85.160.195
Client GeoIP Lookup: United States
Email Size: 3.8 kB
Encrypted? No
From: ellie catinis <surefinancialservice@gmail.com> To: undisclosed-recipients:; 06:29:24 CDT, Wednesday 31 July 2019
Message ID: <CAA5XHkXYeh3uBu-MNvTWpJaZ6zoohtx_Ro4FB1QhuCPW61ps=g@mail.gmail.com>
Return Path: <ellie.catinis@gmail.com>
Reply To: surefinancialhomes@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Received:
from mx1-us4.ppe-hosted.com (unknown [10.110.49.108]) by pure.maildistiller.com with ESMTPS id E82CC4005C for < s.com>; Wed, 31 Jul 2019 11:29:23 +0000 (UTC)
from mail-qt1-f195.google.com (mail-qt1-f195.google.com [209.85.160.195]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id D9580140063 for < s.com>; Wed, 31 Jul 2019 11:29:23 +0000 (UTC)
by mail-qt1-f195.google.com with SMTP id h18so66144276qtm.9 for < s.com>; Wed, 31 Jul 2019 04:29:23 -0700 (PDT)
by 2002:ad4:4b0a:0:0:0:0:0 with HTTP; Wed, 31 Jul 2019 04:29:23 -0700 (PDT)
Good bye to financial problems We bring you good news from Merciful Financial Homes!!!!! Merciful Financial Homes is offering all kinds of Loan at a fast, easy and affordable 3 percent interest rate ranging from 50000 dollars to 500000000 dollars to meet any of your financial requirement. Have you been having difficulty in getting your desired loans due to difficult lending processes by bank and other financial institutions? Do you need a loan/ Capital to start up business or investment ? or to meet any of your financial requirement? Then this is your golden opportunity to make those dreams and plans of yours a reality, because merciful financial homes will give you the best customer services and offer you desire. Contact us now. via email and you will be glad you did. our client satisfaction is our priority. mercifulfinancialhomes@gmail.com Awaiting your response. Thank you
Envelope Sender: <ellie.catinis@gmail.com>
'From' Header: ellie catinis <surefinancialservice@gmail.com>
Subject: Good bye to financial problems ----- Best Loan offer
Timestamp: 06:29:24 CDT, Wednesday 31 July 2019
Message-ID: <CAA5XHkXYeh3uBu-MNvTWpJaZ6zoohtx_Ro4FB1QhuCPW61ps=g@mail.gmail.com>
Client IP Address: 209.85.160.195
Client GeoIP Lookup: United States
Email Size: 3.8 kB
Encrypted? No
: hotday
NOTE: Like Old Faithful, this one just keeps spewing forth and re-appearing.
From: Dyann Nardi <khherbielpo@outlook.com> To: "s@s.com" <s@s.com> 09:51:22 CDT, Wednesday 31 July 2019
Message ID: <SG2PR06MB3095089483633F8F0FDD5539BDDF0@SG2PR06MB3095.apcprd06.prod.outlook.com>
Return Path: <khherbielpo@outlook.com>
Reply To:
MIME Version: 1.0
Content Type: multipart/alternative; boundary="_000_SG2PR06MB3095089483633F8F0FDD5539BDDF0SG2PR06MB3095apcp_"
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.66.42]) by pure.maildistiller.com with ESMTPS id B55CC1A0067 for <s@s.com>; Wed, 31 Jul 2019 14:51:21 +0000 (UTC)
from APC01-HK2-obe.outbound.protection.outlook.com (mail-oln040092255056.outbound.protection.outlook.com [40.92.255.56]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id D69F6A40087 for <s@s.com>; Wed, 31 Jul 2019 14:51:20 +0000 (UTC)
from SG2APC01FT050.eop-APC01.prod.protection.outlook.com (10.152.250.58) by SG2APC01HT040.eop-APC01.prod.protection.outlook.com (10.152.251.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2115.10; Wed, 31 Jul 2019 14:51:17 +0000
from SG2PR06MB3095.apcprd06.prod.outlook.com (10.152.250.54) by SG2APC01FT050.mail.protection.outlook.com (10.152.251.238) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2115.10 via Frontend Transport; Wed, 31 Jul 2019 14:51:17 +0000
from SG2PR06MB3095.apcprd06.prod.outlook.com ([fe80::88d9:20a8:72c5:418a]) by SG2PR06MB3095.apcprd06.prod.outlook.com ([fe80::88d9:20a8:72c5:418a%6]) with mapi id 15.20.2136.010; Wed, 31 Jul 2019 14:51:17 +0000
ĭ ăm wėll awarė hotday onė of your pass. Lets get dĭrectly to the point. No-ŏnė has compensăted me to ĭnvestĭgate about yŏŭ. Yoŭ don't knŏw mė and you are most lĭkely thinking why yŏu're gėtting this e maĭl?
i installed ă softwăre on the xxx video clĭps (pornography) wėb-sĭtė ănd guess what, yŏu visitėd this website to experĭence fun (you know whăt i mėan). When yŏu were watching videos, yŏŭr internet browser ĭnitiated functioning ăs a RDP having ă key logger which provided me accessibility to your display and cam. Just after thăt, my softwarė prŏgram collectėd every one of yŏŭr cŏntăcts from your Mėssengėr, FB, ănd e-mailaccŏunt. and thėn i creatėd a dŏublė videŏ. First part shŏws thė vĭdėo yŏu werė watching (you have ă fine taste haha), and secŏnd part displays the recŏrding of yŏur webcam, yeah it is ŭ.
You get jŭst two alternătivės. We shoŭld reăd ŭp on the options in particŭlars:
1st chŏice is tŏ dismiss this e mail. ăs a resŭlt, ĭ will send yoŭr very own video to just abŏut ăll of your personal contacts and think about about the shame you will dėfĭnitely gėt. and conseqŭently should you bė ĭn an affăir, how it can affėct?
ŏther solŭtĭon should be tŏ compensăte me $1319. Lėts refėr to it as a donatĭon. ăs a rėsult, i wĭll instantly delėtė yŏur vidėo fŏŏtage. You wĭll keep going on yŏŭr daily lĭfe likė this never happėned and you would never hėăr back agăin from me.
You'll make thė paymėnt by Bĭtcŏin (ĭf yoŭ do not know this, search 'how to buy bitcoin' in Goŏglė).
BTC ăddrėss:
1MsrU2GQRVdV8qRPUHaLvKNx8Q7T19Qav
[CaSe-SėNSĭTiVe, copy and păste it]
ĭf you may be cŭrious abŏut gŏing tŏ thė cop, lŏŏk, thĭs ė-măil căn not be traced back tŏ me. i hăve dealt with my movės. i am not attėmpting to demănd ă hugė amŏunt, i would lĭke to be rewarded. i hăve a specific pĭxel within this ėmail messăge, and at thĭs moment ĭ knŏw that yoŭ havė read thrŏugh thĭs message. Yoŭ have one dăy in order to makė thė payment. ĭf i don't gėt the BĭtCoins, i will, no doubt sėnd out yŏur video recording tŏ ăll of yoŭr contacts ĭncluding family members, coworkers, and so forth. Nonethelėss, ĭf i do get păid, i'll destroy the recording immediătely. if yoŭ rėally want proof, reply Yup & i will sėnd out your video recŏrding to your 11 friends. This is ă nonnegotĭăblė offer thŭs dŏ not wăste my personal time & yŏŭrs by replying to thĭs ė măil.
Envelope Sender: <khherbielpo@outlook.com>
'From' Header: Dyann Nardi <khherbielpo@outlook.com>
Subject: s : hotday
Timestamp: 09:51:22 CDT, Wednesday 31 July 2019
Message-ID: <SG2PR06MB3095089483633F8F0FDD5539BDDF0@SG2PR06MB3095.apcprd06.prod.outlook.com>
Client IP Address: 40.92.255.56
Client GeoIP Lookup: United States
Email Size: 13.2 kB
Encrypted? No
From: Dyann Nardi <khherbielpo@outlook.com> To: "s@s.com" <s@s.com> 09:51:22 CDT, Wednesday 31 July 2019
Message ID: <SG2PR06MB3095089483633F8F0FDD5539BDDF0@SG2PR06MB3095.apcprd06.prod.outlook.com>
Return Path: <khherbielpo@outlook.com>
Reply To:
MIME Version: 1.0
Content Type: multipart/alternative; boundary="_000_SG2PR06MB3095089483633F8F0FDD5539BDDF0SG2PR06MB3095apcp_"
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.66.42]) by pure.maildistiller.com with ESMTPS id B55CC1A0067 for <s@s.com>; Wed, 31 Jul 2019 14:51:21 +0000 (UTC)
from APC01-HK2-obe.outbound.protection.outlook.com (mail-oln040092255056.outbound.protection.outlook.com [40.92.255.56]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id D69F6A40087 for <s@s.com>; Wed, 31 Jul 2019 14:51:20 +0000 (UTC)
from SG2APC01FT050.eop-APC01.prod.protection.outlook.com (10.152.250.58) by SG2APC01HT040.eop-APC01.prod.protection.outlook.com (10.152.251.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2115.10; Wed, 31 Jul 2019 14:51:17 +0000
from SG2PR06MB3095.apcprd06.prod.outlook.com (10.152.250.54) by SG2APC01FT050.mail.protection.outlook.com (10.152.251.238) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2115.10 via Frontend Transport; Wed, 31 Jul 2019 14:51:17 +0000
from SG2PR06MB3095.apcprd06.prod.outlook.com ([fe80::88d9:20a8:72c5:418a]) by SG2PR06MB3095.apcprd06.prod.outlook.com ([fe80::88d9:20a8:72c5:418a%6]) with mapi id 15.20.2136.010; Wed, 31 Jul 2019 14:51:17 +0000
ĭ ăm wėll awarė hotday onė of your pass. Lets get dĭrectly to the point. No-ŏnė has compensăted me to ĭnvestĭgate about yŏŭ. Yoŭ don't knŏw mė and you are most lĭkely thinking why yŏu're gėtting this e maĭl?
i installed ă softwăre on the xxx video clĭps (pornography) wėb-sĭtė ănd guess what, yŏu visitėd this website to experĭence fun (you know whăt i mėan). When yŏu were watching videos, yŏŭr internet browser ĭnitiated functioning ăs a RDP having ă key logger which provided me accessibility to your display and cam. Just after thăt, my softwarė prŏgram collectėd every one of yŏŭr cŏntăcts from your Mėssengėr, FB, ănd e-mailaccŏunt. and thėn i creatėd a dŏublė videŏ. First part shŏws thė vĭdėo yŏu werė watching (you have ă fine taste haha), and secŏnd part displays the recŏrding of yŏur webcam, yeah it is ŭ.
You get jŭst two alternătivės. We shoŭld reăd ŭp on the options in particŭlars:
1st chŏice is tŏ dismiss this e mail. ăs a resŭlt, ĭ will send yoŭr very own video to just abŏut ăll of your personal contacts and think about about the shame you will dėfĭnitely gėt. and conseqŭently should you bė ĭn an affăir, how it can affėct?
ŏther solŭtĭon should be tŏ compensăte me $1319. Lėts refėr to it as a donatĭon. ăs a rėsult, i wĭll instantly delėtė yŏur vidėo fŏŏtage. You wĭll keep going on yŏŭr daily lĭfe likė this never happėned and you would never hėăr back agăin from me.
You'll make thė paymėnt by Bĭtcŏin (ĭf yoŭ do not know this, search 'how to buy bitcoin' in Goŏglė).
BTC ăddrėss:
1MsrU2GQRVdV8qRPUHaLvKNx8Q7T19Qav
[CaSe-SėNSĭTiVe, copy and păste it]
ĭf you may be cŭrious abŏut gŏing tŏ thė cop, lŏŏk, thĭs ė-măil căn not be traced back tŏ me. i hăve dealt with my movės. i am not attėmpting to demănd ă hugė amŏunt, i would lĭke to be rewarded. i hăve a specific pĭxel within this ėmail messăge, and at thĭs moment ĭ knŏw that yoŭ havė read thrŏugh thĭs message. Yoŭ have one dăy in order to makė thė payment. ĭf i don't gėt the BĭtCoins, i will, no doubt sėnd out yŏur video recording tŏ ăll of yoŭr contacts ĭncluding family members, coworkers, and so forth. Nonethelėss, ĭf i do get păid, i'll destroy the recording immediătely. if yoŭ rėally want proof, reply Yup & i will sėnd out your video recŏrding to your 11 friends. This is ă nonnegotĭăblė offer thŭs dŏ not wăste my personal time & yŏŭrs by replying to thĭs ė măil.
Envelope Sender: <khherbielpo@outlook.com>
'From' Header: Dyann Nardi <khherbielpo@outlook.com>
Subject: s : hotday
Timestamp: 09:51:22 CDT, Wednesday 31 July 2019
Message-ID: <SG2PR06MB3095089483633F8F0FDD5539BDDF0@SG2PR06MB3095.apcprd06.prod.outlook.com>
Client IP Address: 40.92.255.56
Client GeoIP Lookup: United States
Email Size: 13.2 kB
Encrypted? No
Tuesday, July 30, 2019
DEAR FRIEND
NOTE: Aside from the email and location identity crisis going on here, this "FRIEND" has probably already collected $13.3M from emotionally fragile, unsuspecting victims. I find it interesting that all these countries with millions to supposedly rid themselves of have civilizations suffering from malnutrition, lack of food and medical, basic humanitarian needs and peace. Tsk tsk.
From: "Mr. Payton Rupali" <ibr_ahim@aol.fr> To: 20:34:37 CDT, Monday 29 July 2019
Message ID: <1770423705.1354909.1564450469930@mail.yahoo.com>
Return Path: <ibr_ahim@aol.fr>
Reply To:
MIME Version: 1.0
Content Type: multipart/alternative; boundary="----=_Part_1354908_1132556448.1564450469929"
Received:
from mx1-us4.ppe-hosted.com (unknown [10.110.49.108]) by pure.maildistiller.com with ESMTPS id 863A1E0059 for <s.com>; Tue, 30 Jul 2019 01:34:36 +0000 (UTC)
from sonic311-15.consmr.mail.bf2.yahoo.com (sonic311-15.consmr.mail.bf2.yahoo.com [74.6.131.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id 4F808140069 for <s.com>; Tue, 30 Jul 2019 01:34:35 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic311.consmr.mail.bf2.yahoo.com with HTTP; Tue, 30 Jul 2019 01:34:34 +0000
Dear Friend,
My name is Mr. Payton Rupali. I am working with one of the prime banks in Burkina Faso. Here in this bank existed a dormant account for many years, which belong to one of our late foreign customer. The amount in this account stands at $13,300,000.00 (Thirteen Million Three Hundred Thousand US Dollars).
I want a foreign account where the bank will transfer this fund. I know you would be surprised to read this message, especially from someone relatively unknown to you. But, do not worry yourself so much. This is a genuine, risk free and legal business transaction. All details shall be sent to you once I hear from you.
I was very fortunate to come across the deceased customer's security file during documentation of old and abandoned customer’s files for an official redocumentation and audit of the year 2019.
If you are really sure of your sincerity, trustworthiness, accountability and confidentiality over this transaction, reply back to me urgently.
Best regards,
Mr. Payton Rupali
Email: mrpaytonrupail2017@gmail.com
Envelope Sender: <ibr_ahim@aol.fr>
'From' Header: "Mr. Payton Rupali" <ibr_ahim@aol.fr>
Subject: DEAR FRIEND
Timestamp: 20:34:37 CDT, Monday 29 July 2019
Message-ID: <1770423705.1354909.1564450469930@mail.yahoo.com>
Client IP Address: 74.6.131.125
Client GeoIP Lookup: United States
Email Size: 5.7 kB
Encrypted? No
From: "Mr. Payton Rupali" <ibr_ahim@aol.fr> To: 20:34:37 CDT, Monday 29 July 2019
Message ID: <1770423705.1354909.1564450469930@mail.yahoo.com>
Return Path: <ibr_ahim@aol.fr>
Reply To:
MIME Version: 1.0
Content Type: multipart/alternative; boundary="----=_Part_1354908_1132556448.1564450469929"
Received:
from mx1-us4.ppe-hosted.com (unknown [10.110.49.108]) by pure.maildistiller.com with ESMTPS id 863A1E0059 for <s.com>; Tue, 30 Jul 2019 01:34:36 +0000 (UTC)
from sonic311-15.consmr.mail.bf2.yahoo.com (sonic311-15.consmr.mail.bf2.yahoo.com [74.6.131.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id 4F808140069 for <s.com>; Tue, 30 Jul 2019 01:34:35 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic311.consmr.mail.bf2.yahoo.com with HTTP; Tue, 30 Jul 2019 01:34:34 +0000
Dear Friend,
My name is Mr. Payton Rupali. I am working with one of the prime banks in Burkina Faso. Here in this bank existed a dormant account for many years, which belong to one of our late foreign customer. The amount in this account stands at $13,300,000.00 (Thirteen Million Three Hundred Thousand US Dollars).
I want a foreign account where the bank will transfer this fund. I know you would be surprised to read this message, especially from someone relatively unknown to you. But, do not worry yourself so much. This is a genuine, risk free and legal business transaction. All details shall be sent to you once I hear from you.
I was very fortunate to come across the deceased customer's security file during documentation of old and abandoned customer’s files for an official redocumentation and audit of the year 2019.
If you are really sure of your sincerity, trustworthiness, accountability and confidentiality over this transaction, reply back to me urgently.
Best regards,
Mr. Payton Rupali
Email: mrpaytonrupail2017@gmail.com
Envelope Sender: <ibr_ahim@aol.fr>
'From' Header: "Mr. Payton Rupali" <ibr_ahim@aol.fr>
Subject: DEAR FRIEND
Timestamp: 20:34:37 CDT, Monday 29 July 2019
Message-ID: <1770423705.1354909.1564450469930@mail.yahoo.com>
Client IP Address: 74.6.131.125
Client GeoIP Lookup: United States
Email Size: 5.7 kB
Encrypted? No
Order Confirmation
NOTE: Of course, this is spam, so the attachment is/was infected and has been destroyed. Don't ever ever ever open attachments in an email you aren't expecting.
From: C Oswin Devotta <oswind@expofreight.com> To: s.com 19:12:05 CDT, Monday 29 July 2019
Message ID: <20190730021200.9F990CACE26ED915@expofreight.com>
Return Path: <oswind@expofreight.com>
Reply To: procurementmd@vivaldi.net
MIME Version: 1.0
Content Type: multipart/mixed; boundary="----=_NextPart_000_0012_3B5201B3.63C5E222"
Received:
from mx1-us3.ppe-hosted.com (unknown [10.110.49.103]) by pure.maildistiller.com with ESMTPS id D36AC8005B for <s.com>; Tue, 30 Jul 2019 00:12:04 +0000 (UTC)
from expofreight.com (unknown [185.141.207.85]) by mx1-us3.ppe-hosted.com with ESMTP id A8E94980062 for <s.com>; Tue, 30 Jul 2019 00:12:03 +0000 (UTC)
Dear Sir/Madam,
Please find attached Order Confirmation along with Invoice/Packing list for the subject shipment. Kindly share cartingorder via return email.
Please kindly confirm back immediately to enable quick Followup.
Envelope Sender: <oswind@expofreight.com>
'From' Header: C Oswin Devotta <oswind@expofreight.com>
Subject: Order Confirmation
Timestamp: 19:12:05 CDT, Monday 29 July 2019
Message-ID: <20190730021200.9F990CACE26ED915@expofreight.com>
Client IP Address: 185.141.207.85
Client GeoIP Lookup: United Kingdom
Email Size: 562.3 kB
Encrypted? No
From: C Oswin Devotta <oswind@expofreight.com> To: s.com 19:12:05 CDT, Monday 29 July 2019
Message ID: <20190730021200.9F990CACE26ED915@expofreight.com>
Return Path: <oswind@expofreight.com>
Reply To: procurementmd@vivaldi.net
MIME Version: 1.0
Content Type: multipart/mixed; boundary="----=_NextPart_000_0012_3B5201B3.63C5E222"
Received:
from mx1-us3.ppe-hosted.com (unknown [10.110.49.103]) by pure.maildistiller.com with ESMTPS id D36AC8005B for <s.com>; Tue, 30 Jul 2019 00:12:04 +0000 (UTC)
from expofreight.com (unknown [185.141.207.85]) by mx1-us3.ppe-hosted.com with ESMTP id A8E94980062 for <s.com>; Tue, 30 Jul 2019 00:12:03 +0000 (UTC)
Dear Sir/Madam,
Please find attached Order Confirmation along with Invoice/Packing list for the subject shipment. Kindly share cartingorder via return email.
Please kindly confirm back immediately to enable quick Followup.
Envelope Sender: <oswind@expofreight.com>
'From' Header: C Oswin Devotta <oswind@expofreight.com>
Subject: Order Confirmation
Timestamp: 19:12:05 CDT, Monday 29 July 2019
Message-ID: <20190730021200.9F990CACE26ED915@expofreight.com>
Client IP Address: 185.141.207.85
Client GeoIP Lookup: United Kingdom
Email Size: 562.3 kB
Encrypted? No
Monday, July 29, 2019
INVESTMENT OPPORTUNITY.....
NOTE: This genius sent the same email one after another. I'll only post one, but, really? Was that just in case I didn't understand the one sent one minute before?
From: design@nicolewild.com.au To: undisclosed-recipients:; 07:58:10 CDT, Saturday 27 July 2019
Message ID: <b39d168fa57ec7edb023bc54d9af3c49@nicolewild.com.au>
Return Path: <design@nicolewild.com.au>
Reply To: harrisondesmond89@outlook.com
MIME Version: 1.0
Content Type: text/plain; charset=US-ASCII; format=flowed
Received:
from mx1-us3.ppe-hosted.com (unknown [10.110.49.102]) by pure.maildistiller.com with ESMTPS id B65A14005C for <s.com>; Sat, 27 Jul 2019 12:58:09 +0000 (UTC)
from scooter.magnetichosting.com.au (scooter.magnetichosting.com.au [221.121.142.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id 7549A6C0065 for <s.com>; Sat, 27 Jul 2019 12:58:08 +0000 (UTC)
from [::1] (port=35800 helo=scooter.magnetichosting.com.au) by scooter.magnetichosting.com.au with esmtpa (Exim 4.92) (envelope-from <design@nicolewild.com.au>) id 1hrMGS-00AE1A-De; Sat, 27 Jul 2019 22:57:32 +1000
Attention: Sir, My Name is Harrison Desmond,I am currently searching for a reputable partner, who can assist/partnership with me in acquiring land for my Hotel branch which i am intending to open in your country or elsewhere. We would enter into investment memorandum of understanding and there would be equity participation on the investment for both of us. I want to go into partnership with someone who is trustworthy and reputable person and must be able to handle projects involving huge volume of funds.The fund to invest is already in the custody of a finance security company in Europe.I would introduce you as my partner and confidant for the receipt of the investment fund into your company's account as soon as we sign the investment memorandum of understanding agreement with you. If you are interested, please contact me with your personal introduction on this private email: (harrisondesmond89@outlook.com). Yours faithfully, Harrison Desmond.
Envelope Sender: <design@nicolewild.com.au>
'From' Header: design@nicolewild.com.au
Subject: INVESTMENT OPPORTUNITY.....
Timestamp: 07:58:10 CDT, Saturday 27 July 2019
Message-ID: <b39d168fa57ec7edb023bc54d9af3c49@nicolewild.com.au>
Client IP Address: 221.121.142.65
Client GeoIP Lookup: Australia
Email Size: 2.9 kB
Encrypted? No
From: design@nicolewild.com.au To: undisclosed-recipients:; 07:58:10 CDT, Saturday 27 July 2019
Message ID: <b39d168fa57ec7edb023bc54d9af3c49@nicolewild.com.au>
Return Path: <design@nicolewild.com.au>
Reply To: harrisondesmond89@outlook.com
MIME Version: 1.0
Content Type: text/plain; charset=US-ASCII; format=flowed
Received:
from mx1-us3.ppe-hosted.com (unknown [10.110.49.102]) by pure.maildistiller.com with ESMTPS id B65A14005C for <s.com>; Sat, 27 Jul 2019 12:58:09 +0000 (UTC)
from scooter.magnetichosting.com.au (scooter.magnetichosting.com.au [221.121.142.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id 7549A6C0065 for <s.com>; Sat, 27 Jul 2019 12:58:08 +0000 (UTC)
from [::1] (port=35800 helo=scooter.magnetichosting.com.au) by scooter.magnetichosting.com.au with esmtpa (Exim 4.92) (envelope-from <design@nicolewild.com.au>) id 1hrMGS-00AE1A-De; Sat, 27 Jul 2019 22:57:32 +1000
Attention: Sir, My Name is Harrison Desmond,I am currently searching for a reputable partner, who can assist/partnership with me in acquiring land for my Hotel branch which i am intending to open in your country or elsewhere. We would enter into investment memorandum of understanding and there would be equity participation on the investment for both of us. I want to go into partnership with someone who is trustworthy and reputable person and must be able to handle projects involving huge volume of funds.The fund to invest is already in the custody of a finance security company in Europe.I would introduce you as my partner and confidant for the receipt of the investment fund into your company's account as soon as we sign the investment memorandum of understanding agreement with you. If you are interested, please contact me with your personal introduction on this private email: (harrisondesmond89@outlook.com). Yours faithfully, Harrison Desmond.
Envelope Sender: <design@nicolewild.com.au>
'From' Header: design@nicolewild.com.au
Subject: INVESTMENT OPPORTUNITY.....
Timestamp: 07:58:10 CDT, Saturday 27 July 2019
Message-ID: <b39d168fa57ec7edb023bc54d9af3c49@nicolewild.com.au>
Client IP Address: 221.121.142.65
Client GeoIP Lookup: Australia
Email Size: 2.9 kB
Encrypted? No
: hotday
NOTE: They just don't seem to give up. These scammers are the very definition of insane. Can we say EXTORTION? However misguided their message is.
From: Vlad Mcneil <tjorianasnm@outlook.com> To: "s.com" <s.com> 15:59:25 CDT, Saturday 27 July 2019
Message ID: <PU1PR01MB2041EB0DD274A5A8162C1CC4A8C30@PU1PR01MB2041.apcprd01.prod.exchangelabs.com>
Return Path: <tjorianasnm@outlook.com>
Reply To:
MIME Version: 1.0
Content Type: multipart/alternative; boundary="_000_PU1PR01MB2041EB0DD274A5A8162C1CC4A8C30PU1PR01MB2041apcp_"
Received:
from mx1-us4.ppe-hosted.com (unknown [10.7.66.41]) by pure.maildistiller.com with ESMTPS id 643BA14004D for <s.com>; Sat, 27 Jul 2019 20:59:25 +0000 (UTC)
from APC01-PU1-obe.outbound.protection.outlook.com (mail-oln040092254100.outbound.protection.outlook.com [40.92.254.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id 834504C0059 for <s.com>; Sat, 27 Jul 2019 20:59:24 +0000 (UTC)
from HK2APC01FT008.eop-APC01.prod.protection.outlook.com (10.152.248.56) by HK2APC01HT156.eop-APC01.prod.protection.outlook.com (10.152.248.255) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2115.10; Sat, 27 Jul 2019 20:59:20 +0000
from PU1PR01MB2041.apcprd01.prod.exchangelabs.com (10.152.248.53) by HK2APC01FT008.mail.protection.outlook.com (10.152.248.117) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2115.10 via Frontend Transport; Sat, 27 Jul 2019 20:59:20 +0000
from PU1PR01MB2041.apcprd01.prod.exchangelabs.com ([fe80::38ae:9d1e:db4:b161]) by PU1PR01MB2041.apcprd01.prod.exchangelabs.com ([fe80::38ae:9d1e:db4:b161%7]) with mapi id 15.20.2094.017; Sat, 27 Jul 2019 20:59:20 +0000
hotday is your pass words. Lęts get right to the purpose. Thęrę is no one who has cōmpęnsātęd me to investĺgātę aboūt yōu. You do not know me and yōū're prōbably thinking why you're getting this ę mail?
i setup ā malware on the xxx vids (pōrnographĺc material) websitę and you know what, yoū visitęd this sĺte to have fun (yōu know what i mean). Whilę yōu were viewing vĺdeos, your ĺnternet browser started oūt fūnctĺoning as ā Remōte contrōl Desktop thāt has a kęylogger whĺch provĺdęd me accessibility tō yoūr dĺsplay as węll as web cām. after that, my softwāre program gatheręd every one of yōūr contacts frōm yōur Messenger, socĺāl netwōrks, ās well as emāil . and then i creāted a video. 1st pārt displays the vĺdeo yoū were viewing (you'vę got a nicę taste ; )), and 2nd part displays the recōrdĺng ōf your cām, & ĺts ū.
You do have a paĺr ōf options. We are going to revięw each of thesę optiōns in partĺculars:
1st ōption is tō neglect this emāĺl. in that case, i mōst cęrtainly will send yōur actual vidęōtape to all yōur yōur personal contācts and then think ābout regardĺng the disgrāce that yōu ręceivę. ĺn āddition if yōu happęn to be ĺn a romānce, precisęly how it wĺll certaĺnly affect?
Next ālternative woūld bę to give me $1859. We are going to think of ĺt ās a donation. Subsequently, i most cęrtaĺnly will ĺnstantaneōūsly remove your videotape. You wĺll kęep gōing ōn yoūr way of lĺfe like this never tōok place and you āre never going tō heār back āgain from me.
You will māke the pāyment vĺa Bitcoin (if you dōn't know thĺs, sęarch 'how to buy bĺtcoin' in Gōogle search enginę).
BTC address:
1ApUK7AFj9xpHHjVgV8dhXwdKt1tRAhiP8
[casę-sęnsitivę so copy & paste it]
in case you are planning on going tō the polĺce, okay, this e-mail cannot be traced back to mę. i have covered my moves. ĺ ām just nōt āttęmptĺng to demand a huge amount, i would likę to be compensāted. You have two days tō make thę payment. i've a special pĺxel in this ęmail, and rĺght now i knōw that you have reād throūgh this mail. if i don't receive the BĺtCōins, i will sęnd your videō recōrding to āll of your contacts ĺncluding close ręlātĺves, coworkers, etc. Nonetheless, if ĺ receive the payment, ĺ wĺll destroy the recōrdĺng immędĺately. if you really want proof, ręply wĺth Yea! & ĺ will send your vĺdęo to yoūr 15 frĺends. This is the non-negōtiāble offęr sō dōn't wāste mine time ānd yours by replying to this męssāgę.
Envelope Sender: <tjorianasnm@outlook.com>
'From' Header: Vlad Mcneil <tjorianasnm@outlook.com>
Subject: : hotday
Timestamp: 15:59:25 CDT, Saturday 27 July 2019
Message-ID: <PU1PR01MB2041EB0DD274A5A8162C1CC4A8C30@PU1PR01MB2041.apcprd01.prod.exchangelabs.com>
Client IP Address: 40.92.254.100
Client GeoIP Lookup: United States
Email Size: 13.4 kB
Encrypted? No
From: Vlad Mcneil <tjorianasnm@outlook.com> To: "s.com" <s.com> 15:59:25 CDT, Saturday 27 July 2019
Message ID: <PU1PR01MB2041EB0DD274A5A8162C1CC4A8C30@PU1PR01MB2041.apcprd01.prod.exchangelabs.com>
Return Path: <tjorianasnm@outlook.com>
Reply To:
MIME Version: 1.0
Content Type: multipart/alternative; boundary="_000_PU1PR01MB2041EB0DD274A5A8162C1CC4A8C30PU1PR01MB2041apcp_"
Received:
from mx1-us4.ppe-hosted.com (unknown [10.7.66.41]) by pure.maildistiller.com with ESMTPS id 643BA14004D for <s.com>; Sat, 27 Jul 2019 20:59:25 +0000 (UTC)
from APC01-PU1-obe.outbound.protection.outlook.com (mail-oln040092254100.outbound.protection.outlook.com [40.92.254.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us4.ppe-hosted.com with ESMTPS id 834504C0059 for <s.com>; Sat, 27 Jul 2019 20:59:24 +0000 (UTC)
from HK2APC01FT008.eop-APC01.prod.protection.outlook.com (10.152.248.56) by HK2APC01HT156.eop-APC01.prod.protection.outlook.com (10.152.248.255) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2115.10; Sat, 27 Jul 2019 20:59:20 +0000
from PU1PR01MB2041.apcprd01.prod.exchangelabs.com (10.152.248.53) by HK2APC01FT008.mail.protection.outlook.com (10.152.248.117) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2115.10 via Frontend Transport; Sat, 27 Jul 2019 20:59:20 +0000
from PU1PR01MB2041.apcprd01.prod.exchangelabs.com ([fe80::38ae:9d1e:db4:b161]) by PU1PR01MB2041.apcprd01.prod.exchangelabs.com ([fe80::38ae:9d1e:db4:b161%7]) with mapi id 15.20.2094.017; Sat, 27 Jul 2019 20:59:20 +0000
hotday is your pass words. Lęts get right to the purpose. Thęrę is no one who has cōmpęnsātęd me to investĺgātę aboūt yōu. You do not know me and yōū're prōbably thinking why you're getting this ę mail?
i setup ā malware on the xxx vids (pōrnographĺc material) websitę and you know what, yoū visitęd this sĺte to have fun (yōu know what i mean). Whilę yōu were viewing vĺdeos, your ĺnternet browser started oūt fūnctĺoning as ā Remōte contrōl Desktop thāt has a kęylogger whĺch provĺdęd me accessibility tō yoūr dĺsplay as węll as web cām. after that, my softwāre program gatheręd every one of yōūr contacts frōm yōur Messenger, socĺāl netwōrks, ās well as emāil . and then i creāted a video. 1st pārt displays the vĺdeo yoū were viewing (you'vę got a nicę taste ; )), and 2nd part displays the recōrdĺng ōf your cām, & ĺts ū.
You do have a paĺr ōf options. We are going to revięw each of thesę optiōns in partĺculars:
1st ōption is tō neglect this emāĺl. in that case, i mōst cęrtainly will send yōur actual vidęōtape to all yōur yōur personal contācts and then think ābout regardĺng the disgrāce that yōu ręceivę. ĺn āddition if yōu happęn to be ĺn a romānce, precisęly how it wĺll certaĺnly affect?
Next ālternative woūld bę to give me $1859. We are going to think of ĺt ās a donation. Subsequently, i most cęrtaĺnly will ĺnstantaneōūsly remove your videotape. You wĺll kęep gōing ōn yoūr way of lĺfe like this never tōok place and you āre never going tō heār back āgain from me.
You will māke the pāyment vĺa Bitcoin (if you dōn't know thĺs, sęarch 'how to buy bĺtcoin' in Gōogle search enginę).
BTC address:
1ApUK7AFj9xpHHjVgV8dhXwdKt1tRAhiP8
[casę-sęnsitivę so copy & paste it]
in case you are planning on going tō the polĺce, okay, this e-mail cannot be traced back to mę. i have covered my moves. ĺ ām just nōt āttęmptĺng to demand a huge amount, i would likę to be compensāted. You have two days tō make thę payment. i've a special pĺxel in this ęmail, and rĺght now i knōw that you have reād throūgh this mail. if i don't receive the BĺtCōins, i will sęnd your videō recōrding to āll of your contacts ĺncluding close ręlātĺves, coworkers, etc. Nonetheless, if ĺ receive the payment, ĺ wĺll destroy the recōrdĺng immędĺately. if you really want proof, ręply wĺth Yea! & ĺ will send your vĺdęo to yoūr 15 frĺends. This is the non-negōtiāble offęr sō dōn't wāste mine time ānd yours by replying to this męssāgę.
Envelope Sender: <tjorianasnm@outlook.com>
'From' Header: Vlad Mcneil <tjorianasnm@outlook.com>
Subject: : hotday
Timestamp: 15:59:25 CDT, Saturday 27 July 2019
Message-ID: <PU1PR01MB2041EB0DD274A5A8162C1CC4A8C30@PU1PR01MB2041.apcprd01.prod.exchangelabs.com>
Client IP Address: 40.92.254.100
Client GeoIP Lookup: United States
Email Size: 13.4 kB
Encrypted? No
Re: Reply..
NOTE: And how, exactly, do you "look" at someone via email? I'm sure with all the scam phone calls these days someone will be happy to just co-operate and fork over their cell number.
From: "JOHN COOPER"<not.reply@att.net> To: 17:10:36 CDT, Saturday 27 July 2019
Message ID: <A8E0CEF703DC415B91213DFDE68FB438.MAI@mail.fusioncomply.net>
Return Path: <not.reply@att.net>
Reply To: <jc454@naver.com>
MIME Version: 1.0
Content Type: text/html; charset="Windows-1251"
Received:
from mx1-us5.ppe-hosted.com (unknown [10.7.65.199]) by pure.maildistiller.com with ESMTPS id A3D33140056 for <s.com>; Sat, 27 Jul 2019 22:10:35 +0000 (UTC)
from FUSIONCOMPLY.mail.fusioncomply.net (fusioncomply.default.fusioncomply.uk0.bigv.io [46.43.9.77]) by mx1-us5.ppe-hosted.com with ESMTP id 414E7180050 for <s.com>; Sat, 27 Jul 2019 22:10:35 +0000 (UTC)
from User ([104.192.68.20]) by mail.fusioncomply.net with MailEnable ESMTPA; Sat, 27 Jul 2019 22:10:31 +0000
Good Day, How are you doing today? I am very sorry to contact you in this manner because we have not met or seen each other before but please don't look at me like a stranger. I honestly seeking your full trust and Co-operation on Mutual investment project in your care/country. I find your email address in a Directory on Internet, My name is John Cooper an Account Officer.I need your urgent assistance and trust to stand as Next of Kin to my late client who left behind funds/inheritance of (Ten Million, Five Hundred Thousand United States Dollars) and I want this to be transfer to you for Investment purpose. This transaction is 100% Legitimate and Genuine, No risk involved. Kindly get back to me if you are interested in this proposal. Also send me your direct cell phone number for more details regarding this project.
Best regards
John Cooper
Envelope Sender: <not.reply@att.net>
'From' Header: "JOHN COOPER"<not.reply@att.net>
Subject: Re: Reply..
Timestamp: 17:10:36 CDT, Saturday 27 July 2019
Message-ID: <A8E0CEF703DC415B91213DFDE68FB438.MAI@mail.fusioncomply.net>
Client IP Address: 46.43.9.77
Client GeoIP Lookup: United Kingdom
Email Size: 2.2 kB
Encrypted? No
From: "JOHN COOPER"<not.reply@att.net> To: 17:10:36 CDT, Saturday 27 July 2019
Message ID: <A8E0CEF703DC415B91213DFDE68FB438.MAI@mail.fusioncomply.net>
Return Path: <not.reply@att.net>
Reply To: <jc454@naver.com>
MIME Version: 1.0
Content Type: text/html; charset="Windows-1251"
Received:
from mx1-us5.ppe-hosted.com (unknown [10.7.65.199]) by pure.maildistiller.com with ESMTPS id A3D33140056 for <s.com>; Sat, 27 Jul 2019 22:10:35 +0000 (UTC)
from FUSIONCOMPLY.mail.fusioncomply.net (fusioncomply.default.fusioncomply.uk0.bigv.io [46.43.9.77]) by mx1-us5.ppe-hosted.com with ESMTP id 414E7180050 for <s.com>; Sat, 27 Jul 2019 22:10:35 +0000 (UTC)
from User ([104.192.68.20]) by mail.fusioncomply.net with MailEnable ESMTPA; Sat, 27 Jul 2019 22:10:31 +0000
Good Day, How are you doing today? I am very sorry to contact you in this manner because we have not met or seen each other before but please don't look at me like a stranger. I honestly seeking your full trust and Co-operation on Mutual investment project in your care/country. I find your email address in a Directory on Internet, My name is John Cooper an Account Officer.I need your urgent assistance and trust to stand as Next of Kin to my late client who left behind funds/inheritance of (Ten Million, Five Hundred Thousand United States Dollars) and I want this to be transfer to you for Investment purpose. This transaction is 100% Legitimate and Genuine, No risk involved. Kindly get back to me if you are interested in this proposal. Also send me your direct cell phone number for more details regarding this project.
Best regards
John Cooper
Envelope Sender: <not.reply@att.net>
'From' Header: "JOHN COOPER"<not.reply@att.net>
Subject: Re: Reply..
Timestamp: 17:10:36 CDT, Saturday 27 July 2019
Message-ID: <A8E0CEF703DC415B91213DFDE68FB438.MAI@mail.fusioncomply.net>
Client IP Address: 46.43.9.77
Client GeoIP Lookup: United Kingdom
Email Size: 2.2 kB
Encrypted? No
RELEASE OF YOUR PAYMENT(US$50.5M)
NOTE: Absolutely, positively, beyond a shadow of a doubt if the World Bank had $50.5M to hand out to any stranger they wouldn't be contacted via a free, anonymous email account with an identity crisis.
From: "World Bank" <info@worldbankgroup.org> To: Recipients <info@worldbankgroup.org> 08:59:31 CDT, Sunday 28 July 2019
Message ID:
Return Path: <info@worldbankgroup.org>
Reply To: payment.office.wb@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset="utf-8"
Received:
from mx1-us2.ppe-hosted.com (unknown [10.110.49.33]) by pure.maildistiller.com with ESMTPS id 5174F80060 for <s.com>; Sun, 28 Jul 2019 13:59:31 +0000 (UTC)
from mail.ligataxi.com (mail.ligataxi.com [138.68.111.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id 2F082340069 for <s.com>; Sun, 28 Jul 2019 13:59:31 +0000 (UTC)
from [59.120.23.18] (59-120-23-18.HINET-IP.hinet.net [59.120.23.18]) by mail.ligataxi.com (Postfix) with ESMTPSA id 55590C6205; Sun, 28 Jul 2019 13:59:24 +0000 (UTC)
Attention: Beneficiary, IRREVOCABLE RELEASE OF YOUR PAYMENT.(US$50.5M) We are of the United Nations Debt Reconciliation Unit newly set up by the United Nations in conjunction with the World Bank and the International Monetary Fund (IMF). Based on series of petitions we received from various organizations such as Cooperate Bodies and Non-Governmental Organization (NGO) on the Inability of some Government of different countries, Commercial banks and World Lottery Organization to settle their clients Contract debt, Inheritance Fund and Winning prizes. After an extensive close door meeting between the Board of Directors of the UNITED NATIONS, THE WORLD BANK-GROUP AND INTERNATIONAL MONETARY FUND), it was resolved and agreed upon that this body "world international debt reconciliation committee" will work extensively to ensure that your Contract Payment, Your Inheritance and Lottery Winning prizes will be paid without hitches and delay through the World Bank –Group and IMF Insurance body. You are therefore advice to send the below information. 1. YOUR FULL NAME: 2. YOUR ADDRESS : 3. YOUR MOBILE PHONE NUMBER: 4. YOUR AGE: 5. CURRENT OCCUPATION: 6. YOUR BANK DETAILS: Note that on receipt of your complain and list of debt due for payment, Your Fund will be called back from its various point where it has been tied up by World Bank and IMF and your payment will be arranged on the follow option below; A). Via ATM card payment that you can use to withdraw money in any ATM machine in any part of the world, but the maximum is Ten Thousand dollars per a day. B) Your fund can still release to you through bank to bank wire transfer if you can provide your bank details Thanks for your co-operation. Yours Faithfully, Mrs, Anke D’Angelo Vice President and Auditor General Internal Audit Department /Special Duties World Bank Auditors E-mail: payment.office.wb@gmail.com Office Hot Line +234-12952920
Envelope Sender: <info@worldbankgroup.org>
'From' Header: "World Bank" <info@worldbankgroup.org>
Subject: RELEASE OF YOUR PAYMENT(US$50.5M)
Timestamp: 08:59:31 CDT, Sunday 28 July 2019
Message-ID:
Client IP Address: 138.68.111.44
Client GeoIP Lookup: United States
Email Size: 3.2 kB
Encrypted? No
From: "World Bank" <info@worldbankgroup.org> To: Recipients <info@worldbankgroup.org> 08:59:31 CDT, Sunday 28 July 2019
Message ID:
Return Path: <info@worldbankgroup.org>
Reply To: payment.office.wb@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset="utf-8"
Received:
from mx1-us2.ppe-hosted.com (unknown [10.110.49.33]) by pure.maildistiller.com with ESMTPS id 5174F80060 for <s.com>; Sun, 28 Jul 2019 13:59:31 +0000 (UTC)
from mail.ligataxi.com (mail.ligataxi.com [138.68.111.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id 2F082340069 for <s.com>; Sun, 28 Jul 2019 13:59:31 +0000 (UTC)
from [59.120.23.18] (59-120-23-18.HINET-IP.hinet.net [59.120.23.18]) by mail.ligataxi.com (Postfix) with ESMTPSA id 55590C6205; Sun, 28 Jul 2019 13:59:24 +0000 (UTC)
Attention: Beneficiary, IRREVOCABLE RELEASE OF YOUR PAYMENT.(US$50.5M) We are of the United Nations Debt Reconciliation Unit newly set up by the United Nations in conjunction with the World Bank and the International Monetary Fund (IMF). Based on series of petitions we received from various organizations such as Cooperate Bodies and Non-Governmental Organization (NGO) on the Inability of some Government of different countries, Commercial banks and World Lottery Organization to settle their clients Contract debt, Inheritance Fund and Winning prizes. After an extensive close door meeting between the Board of Directors of the UNITED NATIONS, THE WORLD BANK-GROUP AND INTERNATIONAL MONETARY FUND), it was resolved and agreed upon that this body "world international debt reconciliation committee" will work extensively to ensure that your Contract Payment, Your Inheritance and Lottery Winning prizes will be paid without hitches and delay through the World Bank –Group and IMF Insurance body. You are therefore advice to send the below information. 1. YOUR FULL NAME: 2. YOUR ADDRESS : 3. YOUR MOBILE PHONE NUMBER: 4. YOUR AGE: 5. CURRENT OCCUPATION: 6. YOUR BANK DETAILS: Note that on receipt of your complain and list of debt due for payment, Your Fund will be called back from its various point where it has been tied up by World Bank and IMF and your payment will be arranged on the follow option below; A). Via ATM card payment that you can use to withdraw money in any ATM machine in any part of the world, but the maximum is Ten Thousand dollars per a day. B) Your fund can still release to you through bank to bank wire transfer if you can provide your bank details Thanks for your co-operation. Yours Faithfully, Mrs, Anke D’Angelo Vice President and Auditor General Internal Audit Department /Special Duties World Bank Auditors E-mail: payment.office.wb@gmail.com Office Hot Line +234-12952920
Envelope Sender: <info@worldbankgroup.org>
'From' Header: "World Bank" <info@worldbankgroup.org>
Subject: RELEASE OF YOUR PAYMENT(US$50.5M)
Timestamp: 08:59:31 CDT, Sunday 28 July 2019
Message-ID:
Client IP Address: 138.68.111.44
Client GeoIP Lookup: United States
Email Size: 3.2 kB
Encrypted? No
CALVARY GREETINGS,
NOTE: Calvary definition is - an open-air representation of the crucifixion of Jesus. Soooo .... exactly WHAT message is the author trying to send????
From: SARAH ADAM <jehinamalik80@gmail.com> To: undisclosed-recipients:; 13:09:02 CDT, Sunday 28 July 2019
Message ID: <CAJkOudtBohAAH9N+Ni1zqoXWep6gW5W8=XXf-pv0JZg+uccpVg@mail.gmail.com>
Return Path: <jehinamalik80@gmail.com>
Reply To: dg999017@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.8]) by pure.maildistiller.com with ESMTPS id 099071E004F for <s.com>; Sun, 28 Jul 2019 18:09:02 +0000 (UTC)
from mail-pf1-f193.google.com (mail-pf1-f193.google.com [209.85.210.193]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id D65BF4C0058 for <s.com>; Sun, 28 Jul 2019 18:09:01 +0000 (UTC)
by mail-pf1-f193.google.com with SMTP id f17so22825388pfn.6 for <s.com>; Sun, 28 Jul 2019 11:09:01 -0700 (PDT)
by 2002:a17:90a:3606:0:0:0:0 with HTTP; Sun, 28 Jul 2019 11:09:00 -0700 (PDT)
I am Mrs Sarah Adam a born again christian and a widow and i want to make a donation of $5.5 Million US Dollars to help Building Ministries and Evangelism and Islamic Religions and orphans and widows and charitable home in your country, and i assumed that you will be able to receive this fund and use it to my wished to the needs in your country and i am seriously ill, please always putting me in your daily prayers because i don't know where it will end with me. God bless you.Please do respond if you will accomplish this desire of me.Mrs Sarah Adam.
Envelope Sender: <jehinamalik80@gmail.com>
'From' Header: SARAH ADAM <jehinamalik80@gmail.com>
Subject: CALVARY GREETINGS,
Timestamp: 13:09:02 CDT, Sunday 28 July 2019
Message-ID: <CAJkOudtBohAAH9N+Ni1zqoXWep6gW5W8=XXf-pv0JZg+uccpVg@mail.gmail.com>
Client IP Address: 209.85.210.193
Client GeoIP Lookup: United States
Email Size: 3.3 kB
Encrypted? No
From: SARAH ADAM <jehinamalik80@gmail.com> To: undisclosed-recipients:; 13:09:02 CDT, Sunday 28 July 2019
Message ID: <CAJkOudtBohAAH9N+Ni1zqoXWep6gW5W8=XXf-pv0JZg+uccpVg@mail.gmail.com>
Return Path: <jehinamalik80@gmail.com>
Reply To: dg999017@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.8]) by pure.maildistiller.com with ESMTPS id 099071E004F for <s.com>; Sun, 28 Jul 2019 18:09:02 +0000 (UTC)
from mail-pf1-f193.google.com (mail-pf1-f193.google.com [209.85.210.193]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id D65BF4C0058 for <s.com>; Sun, 28 Jul 2019 18:09:01 +0000 (UTC)
by mail-pf1-f193.google.com with SMTP id f17so22825388pfn.6 for <s.com>; Sun, 28 Jul 2019 11:09:01 -0700 (PDT)
by 2002:a17:90a:3606:0:0:0:0 with HTTP; Sun, 28 Jul 2019 11:09:00 -0700 (PDT)
I am Mrs Sarah Adam a born again christian and a widow and i want to make a donation of $5.5 Million US Dollars to help Building Ministries and Evangelism and Islamic Religions and orphans and widows and charitable home in your country, and i assumed that you will be able to receive this fund and use it to my wished to the needs in your country and i am seriously ill, please always putting me in your daily prayers because i don't know where it will end with me. God bless you.Please do respond if you will accomplish this desire of me.Mrs Sarah Adam.
Envelope Sender: <jehinamalik80@gmail.com>
'From' Header: SARAH ADAM <jehinamalik80@gmail.com>
Subject: CALVARY GREETINGS,
Timestamp: 13:09:02 CDT, Sunday 28 July 2019
Message-ID: <CAJkOudtBohAAH9N+Ni1zqoXWep6gW5W8=XXf-pv0JZg+uccpVg@mail.gmail.com>
Client IP Address: 209.85.210.193
Client GeoIP Lookup: United States
Email Size: 3.3 kB
Encrypted? No
FROM ME 2 U
NOTE: This one has so much time on his/her hands they're just sending empty emails. What fun!
From: S A <13015704@student.uts.edu.au> To: Wenjing He <Wenjing.He@student.uts.edu.au> 08:58:01 CDT, Monday 29 July 2019
Message ID: <SYCPR01MB40934B5D632B311DE96D0011AADD0@SYCPR01MB4093.ausprd01.prod.outlook.com>
Return Path: <Wenjing.He@student.uts.edu.au>
Reply To: "spc.skylar4@gmail.com" <spc.skylar4@gmail.com>
MIME Version: 1.0
Content Type: multipart/mixed; boundary="_004_SYCPR01MB40934B5D632B311DE96D0011AADD0SYCPR01MB4093ausp_"
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.34]) by pure.maildistiller.com with ESMTPS id 79CD91A005E for <s.com>; Mon, 29 Jul 2019 13:58:00 +0000 (UTC)
from AUS01-ME1-obe.outbound.protection.outlook.com (mail-me1aus01hn2097.outbound.protection.outlook.com [52.103.198.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id 5448860005C for <s.com>; Mon, 29 Jul 2019 13:57:59 +0000 (UTC)
from SYCPR01MB4093.ausprd01.prod.outlook.com (20.177.143.145) by SYCPR01MB4735.ausprd01.prod.outlook.com (20.178.186.81) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2115.10; Mon, 29 Jul 2019 13:57:55 +0000
from SYCPR01MB4093.ausprd01.prod.outlook.com ([fe80::f172:e063:cdc0:8046]) by SYCPR01MB4093.ausprd01.prod.outlook.com ([fe80::f172:e063:cdc0:8046%7]) with mapi id 15.20.2115.005; Mon, 29 Jul 2019 13:57:55 +0000
Envelope Sender: <wenjing.he@student.uts.edu.au>
'From' Header: S A <13015704@student.uts.edu.au>
Subject: FROM ME 2 U
Timestamp: 08:58:01 CDT, Monday 29 July 2019
Message-ID: <SYCPR01MB40934B5D632B311DE96D0011AADD0@SYCPR01MB4093.ausprd01.prod.outlook.com>
Client IP Address: 52.103.198.97
Client GeoIP Lookup: United States
Email Size: 100.7 kB
Encrypted? No
From: S A <13015704@student.uts.edu.au> To: Wenjing He <Wenjing.He@student.uts.edu.au> 08:58:01 CDT, Monday 29 July 2019
Message ID: <SYCPR01MB40934B5D632B311DE96D0011AADD0@SYCPR01MB4093.ausprd01.prod.outlook.com>
Return Path: <Wenjing.He@student.uts.edu.au>
Reply To: "spc.skylar4@gmail.com" <spc.skylar4@gmail.com>
MIME Version: 1.0
Content Type: multipart/mixed; boundary="_004_SYCPR01MB40934B5D632B311DE96D0011AADD0SYCPR01MB4093ausp_"
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.34]) by pure.maildistiller.com with ESMTPS id 79CD91A005E for <s.com>; Mon, 29 Jul 2019 13:58:00 +0000 (UTC)
from AUS01-ME1-obe.outbound.protection.outlook.com (mail-me1aus01hn2097.outbound.protection.outlook.com [52.103.198.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id 5448860005C for <s.com>; Mon, 29 Jul 2019 13:57:59 +0000 (UTC)
from SYCPR01MB4093.ausprd01.prod.outlook.com (20.177.143.145) by SYCPR01MB4735.ausprd01.prod.outlook.com (20.178.186.81) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2115.10; Mon, 29 Jul 2019 13:57:55 +0000
from SYCPR01MB4093.ausprd01.prod.outlook.com ([fe80::f172:e063:cdc0:8046]) by SYCPR01MB4093.ausprd01.prod.outlook.com ([fe80::f172:e063:cdc0:8046%7]) with mapi id 15.20.2115.005; Mon, 29 Jul 2019 13:57:55 +0000
Envelope Sender: <wenjing.he@student.uts.edu.au>
'From' Header: S A <13015704@student.uts.edu.au>
Subject: FROM ME 2 U
Timestamp: 08:58:01 CDT, Monday 29 July 2019
Message-ID: <SYCPR01MB40934B5D632B311DE96D0011AADD0@SYCPR01MB4093.ausprd01.prod.outlook.com>
Client IP Address: 52.103.198.97
Client GeoIP Lookup: United States
Email Size: 100.7 kB
Encrypted? No
Friday, July 26, 2019
Dear friend
NOTE: I have millions for you, but I have to use a free email address and hide my real identity. Because I really need your bank account info to relieve you of any funds you may have in it. See, this scammer really has gotten away with $17.5 million from people that probably shouldn't be on the internet for their own safety.
From: umar <mariamlamins1@gmail.com> To: undisclosed-recipients:; 09:33:48 CDT, Friday 26 July 2019
Message ID: <CAFf3r8nJ9cJkXkdDZmTfv7rvn2JaFB6styYO3Mk8MPFbnusXHA@mail.gmail.com>
Return Path: <mariamlamins1@gmail.com>
Reply To: umarbelloumar92@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.7]) by pure.maildistiller.com with ESMTPS id 6CD1C8005B for <s.com>; Fri, 26 Jul 2019 14:33:48 +0000 (UTC)
from mail-wm1-f66.google.com (mail-wm1-f66.google.com [209.85.128.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id 368C14C005B for <s.com>; Fri, 26 Jul 2019 14:33:48 +0000 (UTC)
by mail-wm1-f66.google.com with SMTP id h19so38155475wme.0 for <s.com>; Fri, 26 Jul 2019 07:33:48 -0700 (PDT)
by 2002:a5d:540b:0:0:0:0:0 with HTTP; Fri, 26 Jul 2019 07:33:46 -0700 (PDT)
-- Dear friend I am contacting you on a business deal of $17.5 Million US Dollars, ready for transfer into your account if we make this claim, we will share it 60%/40%. 100% risk free and it will be legally backed up with government approved If you are interested reply for more details. Reply to my alternative email address:umarbelloumar92@gmail.com Best regards, Umar Bello +226 68874958
Envelope Sender: <mariamlamins1@gmail.com>
'From' Header: umar <mariamlamins1@gmail.com>
Subject: Dear friend
Timestamp: 09:33:48 CDT, Friday 26 July 2019
Message-ID: <CAFf3r8nJ9cJkXkdDZmTfv7rvn2JaFB6styYO3Mk8MPFbnusXHA@mail.gmail.com>
Client IP Address: 209.85.128.66
Client GeoIP Lookup: United States
Email Size: 3.2 kB
Encrypted? No
From: umar <mariamlamins1@gmail.com> To: undisclosed-recipients:; 09:33:48 CDT, Friday 26 July 2019
Message ID: <CAFf3r8nJ9cJkXkdDZmTfv7rvn2JaFB6styYO3Mk8MPFbnusXHA@mail.gmail.com>
Return Path: <mariamlamins1@gmail.com>
Reply To: umarbelloumar92@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Received:
from mx1-us5.ppe-hosted.com (unknown [10.110.50.7]) by pure.maildistiller.com with ESMTPS id 6CD1C8005B for <s.com>; Fri, 26 Jul 2019 14:33:48 +0000 (UTC)
from mail-wm1-f66.google.com (mail-wm1-f66.google.com [209.85.128.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id 368C14C005B for <s.com>; Fri, 26 Jul 2019 14:33:48 +0000 (UTC)
by mail-wm1-f66.google.com with SMTP id h19so38155475wme.0 for <s.com>; Fri, 26 Jul 2019 07:33:48 -0700 (PDT)
by 2002:a5d:540b:0:0:0:0:0 with HTTP; Fri, 26 Jul 2019 07:33:46 -0700 (PDT)
-- Dear friend I am contacting you on a business deal of $17.5 Million US Dollars, ready for transfer into your account if we make this claim, we will share it 60%/40%. 100% risk free and it will be legally backed up with government approved If you are interested reply for more details. Reply to my alternative email address:umarbelloumar92@gmail.com Best regards, Umar Bello +226 68874958
Envelope Sender: <mariamlamins1@gmail.com>
'From' Header: umar <mariamlamins1@gmail.com>
Subject: Dear friend
Timestamp: 09:33:48 CDT, Friday 26 July 2019
Message-ID: <CAFf3r8nJ9cJkXkdDZmTfv7rvn2JaFB6styYO3Mk8MPFbnusXHA@mail.gmail.com>
Client IP Address: 209.85.128.66
Client GeoIP Lookup: United States
Email Size: 3.2 kB
Encrypted? No
(insert recipient name here)
NOTE: Claiming he's a lawyer from Benin but using a US IP address. It's amazing the millins these scammers promise when the countries they are claiming to be from are suffering so badly in the economic sense. Sadly they also seem to suffering from stupidity and free email access.
From: Barrister Samuel Jonathan <mrs.ritaudoh@outlook.com> To: "s.com" <s.com> 19:18:37 CDT, Thursday 25 July 2019
Message ID: <CY4PR1701MB18955BB4B47B76ECB0F3CCE886C00@CY4PR1701MB1895.namprd17.prod.outlook.com>
Return Path: <mrs.ritaudoh@outlook.com>
Reply To:
MIME Version: 1.0
Content Type: multipart/alternative; boundary="_000_CY4PR1701MB18955BB4B47B76ECB0F3CCE886C00CY4PR1701MB1895_"
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.65.174]) by pure.maildistiller.com with ESMTPS id 556492C004D for <s.com>; Fri, 26 Jul 2019 00:18:37 +0000 (UTC)
from NAM05-CO1-obe.outbound.protection.outlook.com (mail-oln040092013058.outbound.protection.outlook.com [40.92.13.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id 306F01C006C for <s.com>; Fri, 26 Jul 2019 00:18:37 +0000 (UTC)
from CO1NAM05FT045.eop-nam05.prod.protection.outlook.com (10.152.96.52) by CO1NAM05HT163.eop-nam05.prod.protection.outlook.com (10.152.97.109) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2136.7; Fri, 26 Jul 2019 00:18:36 +0000
from CY4PR1701MB1895.namprd17.prod.outlook.com (10.152.96.55) by CO1NAM05FT045.mail.protection.outlook.com (10.152.96.159) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2136.7 via Frontend Transport; Fri, 26 Jul 2019 00:18:36 +0000
from CY4PR1701MB1895.namprd17.prod.outlook.com ([fe80::fc29:6d6f:b7a1:9a43]) by CY4PR1701MB1895.namprd17.prod.outlook.com ([fe80::fc29:6d6f:b7a1:9a43%12]) with mapi id 15.20.2094.017; Fri, 26 Jul 2019 00:18:36 +0000
Dear S
My greeting's to you and your family. Before I Proceed with my request,I will like to introduce my self. I,am Barrister. Samuel Jonathan, A Legal Practitioner by profession with over 18 years of experience.By the grace of God, I was a legal adviser to late Mr. Aleksander *****, A citizen of your country and a former Engineering Contractor, who works with the (TOTAL) an Oil & Gas servicing and distribution company base in Benin Republic West Africa,on 27th of May 2012 my client and his family were involved in a car accident unfortunately lost their lives. He had an account valued at about $14.5M (Fourteen Million Five Hundred Thousand United State Dollars) deposited in Bank here in Benin Republic.
The Bank issued me a notice to provide the next of kin or had the account confiscated by the bank. Please i seek your consent to present you as the next of kin of the deceased; then we can share the money 50% to me and 50% to you. I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law.Upon receiving your information ( Full name, address and phone number), I will give you more information about the transaction thereafter. Pleases kindly send it to my private email address: (info.lawoffice@aol.com) for security reason and for me to give you more details. Awaiting your urgent reply,
Best Regards
Barrister. Samuel Jonathan
info.lawoffice@aol.com
Envelope Sender: <mrs.ritaudoh@outlook.com>
'From' Header: Barrister Samuel Jonathan <mrs.ritaudoh@outlook.com>
Subject: Steven McIntyre
Timestamp: 19:18:37 CDT, Thursday 25 July 2019
Message-ID: <CY4PR1701MB18955BB4B47B76ECB0F3CCE886C00@CY4PR1701MB1895.namprd17.prod.outlook.com>
Client IP Address: 40.92.13.58
Client GeoIP Lookup: United States
Email Size: 9.6 kB
Encrypted? No
From: Barrister Samuel Jonathan <mrs.ritaudoh@outlook.com> To: "s.com" <s.com> 19:18:37 CDT, Thursday 25 July 2019
Message ID: <CY4PR1701MB18955BB4B47B76ECB0F3CCE886C00@CY4PR1701MB1895.namprd17.prod.outlook.com>
Return Path: <mrs.ritaudoh@outlook.com>
Reply To:
MIME Version: 1.0
Content Type: multipart/alternative; boundary="_000_CY4PR1701MB18955BB4B47B76ECB0F3CCE886C00CY4PR1701MB1895_"
Received:
from mx1-us2.ppe-hosted.com (unknown [10.7.65.174]) by pure.maildistiller.com with ESMTPS id 556492C004D for <s.com>; Fri, 26 Jul 2019 00:18:37 +0000 (UTC)
from NAM05-CO1-obe.outbound.protection.outlook.com (mail-oln040092013058.outbound.protection.outlook.com [40.92.13.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by mx1-us2.ppe-hosted.com with ESMTPS id 306F01C006C for <s.com>; Fri, 26 Jul 2019 00:18:37 +0000 (UTC)
from CO1NAM05FT045.eop-nam05.prod.protection.outlook.com (10.152.96.52) by CO1NAM05HT163.eop-nam05.prod.protection.outlook.com (10.152.97.109) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2136.7; Fri, 26 Jul 2019 00:18:36 +0000
from CY4PR1701MB1895.namprd17.prod.outlook.com (10.152.96.55) by CO1NAM05FT045.mail.protection.outlook.com (10.152.96.159) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2136.7 via Frontend Transport; Fri, 26 Jul 2019 00:18:36 +0000
from CY4PR1701MB1895.namprd17.prod.outlook.com ([fe80::fc29:6d6f:b7a1:9a43]) by CY4PR1701MB1895.namprd17.prod.outlook.com ([fe80::fc29:6d6f:b7a1:9a43%12]) with mapi id 15.20.2094.017; Fri, 26 Jul 2019 00:18:36 +0000
Dear S
My greeting's to you and your family. Before I Proceed with my request,I will like to introduce my self. I,am Barrister. Samuel Jonathan, A Legal Practitioner by profession with over 18 years of experience.By the grace of God, I was a legal adviser to late Mr. Aleksander *****, A citizen of your country and a former Engineering Contractor, who works with the (TOTAL) an Oil & Gas servicing and distribution company base in Benin Republic West Africa,on 27th of May 2012 my client and his family were involved in a car accident unfortunately lost their lives. He had an account valued at about $14.5M (Fourteen Million Five Hundred Thousand United State Dollars) deposited in Bank here in Benin Republic.
The Bank issued me a notice to provide the next of kin or had the account confiscated by the bank. Please i seek your consent to present you as the next of kin of the deceased; then we can share the money 50% to me and 50% to you. I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law.Upon receiving your information ( Full name, address and phone number), I will give you more information about the transaction thereafter. Pleases kindly send it to my private email address: (info.lawoffice@aol.com) for security reason and for me to give you more details. Awaiting your urgent reply,
Best Regards
Barrister. Samuel Jonathan
info.lawoffice@aol.com
Envelope Sender: <mrs.ritaudoh@outlook.com>
'From' Header: Barrister Samuel Jonathan <mrs.ritaudoh@outlook.com>
Subject: Steven McIntyre
Timestamp: 19:18:37 CDT, Thursday 25 July 2019
Message-ID: <CY4PR1701MB18955BB4B47B76ECB0F3CCE886C00@CY4PR1701MB1895.namprd17.prod.outlook.com>
Client IP Address: 40.92.13.58
Client GeoIP Lookup: United States
Email Size: 9.6 kB
Encrypted? No
Dear Sir, From The Wanaga's Family....!
NOTE: This scammer claims he's "taking refugee in GHANA west Africa" yet somehow sending this from a US IP address. Got much to hide? Oh yeah, the scam to steal whatever money people give you access to. Liars all.
From: Collins Mbano Wanaga <cwanaga4@yahoo.com> To: 07:31:04 CDT, Friday 26 July 2019
Message ID: <447032761.874189.1564144260923@mail.yahoo.com>
Return Path: <cwanaga4@yahoo.com>
Reply To:
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.34]) by pure.maildistiller.com with ESMTPS id 6507A2C006E for <s.com>; Fri, 26 Jul 2019 12:31:04 +0000 (UTC)
from sonic310-13.consmr.mail.bf2.yahoo.com (sonic310-13.consmr.mail.bf2.yahoo.com [74.6.135.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id 3150960005B for <s.com>; Fri, 26 Jul 2019 12:31:04 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic310.consmr.mail.bf2.yahoo.com with HTTP; Fri, 26 Jul 2019 12:31:02 +0000
Dear Sir, Permit me to introduce myself if this massage came to you as a surprise, I am Collins Mbano Wanaga a Zimbabwean citizen presently taking refugee in GHANA west Africa. Due to crises in my country coupled with the assassination of my late father Mr. Desmond Wanaga. Who was killed by PRESIDENT ROBERT MUGABE war veteran association who are calling for the white collection of farm land from all white settlers in Zimbabwe which is wrong. My father due to his stand over these issues fell out with the ruling party of PRESIDENT ROBERT MUGABE. Now I, my mother and my kid sister had to flee from our country to find refuge here in GHANA. Before the death of my father he was a major dealer of Diamond and Merchandise. He secretly moved these funds acquired from various sales in two trunk-boxes and deposited it in a security company in Ghana. But at the time of deposit he told the security company that it is family valuables that are contained in the boxes. The total amount contained in the two boxes is $20 MILLION USD. Unknowingly to the security company. Please I want you to know that when my father heard of the plot by PRESIDENT ROBERT MUGABE to kill him, he instructed the security company in Ghana to move the boxes containing the money to LONDON by DIPLOMATIC COURIER SERVICE. But unfortunately my father could not escape out of ZIMBABWE; he was eventually killed, though he could not claim the boxes before his untimely death. The boxes is presently in LONDON under the care of the DIPLOMATIC agent that moved it to LONDON but the DIPLOMAT or the CUSTOMS don’t know that it's money that is in the boxes. We have all the vital documents with us, We therefore contacted you as a trust worthy, God fearing and experience person of your caliber to help us travel to LONDON to receive and invest this money in your country and take us as one family and will also buy a house for us over there where we can live safely. IF you are interested please send me your, 1, Full names. 2, your Private Telephone and fax Number. 3, Current residential address, 4, Occupation as well as ID (intn'l passport or driver's license) I have attach my refugee ID, my kid sister and my mother also the documents of the boxes for evidence of the deposit. the only thing that is required to do is to obtain an AFFIDAVIT OF CHANGE OF OWNERSHIP in your name from the law court, then, the security company will order the diplomatic agent in LONDON to hand the boxes over to you as the receiver, regarding to this transaction, we are prepared to give you 25% of the money for your assistance.Please do reply through my private email address: (cwanaga@yahoo.com). We are expecting to hear from you soonest. Stay blessed. yours sincerely, Collins Mbano Wanaga. For the family.
Envelope Sender: <cwanaga4@yahoo.com>
'From' Header: Collins Mbano Wanaga <cwanaga4@yahoo.com>
Subject: Dear Sir, From The Wanaga's Family....!
Timestamp: 07:31:04 CDT, Friday 26 July 2019
Message-ID: <447032761.874189.1564144260923@mail.yahoo.com>
Client IP Address: 74.6.135.123
Client GeoIP Lookup: United States
Email Size: 5.8 kB
Encrypted? No
From: Collins Mbano Wanaga <cwanaga4@yahoo.com> To: 07:31:04 CDT, Friday 26 July 2019
Message ID: <447032761.874189.1564144260923@mail.yahoo.com>
Return Path: <cwanaga4@yahoo.com>
Reply To:
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.34]) by pure.maildistiller.com with ESMTPS id 6507A2C006E for <s.com>; Fri, 26 Jul 2019 12:31:04 +0000 (UTC)
from sonic310-13.consmr.mail.bf2.yahoo.com (sonic310-13.consmr.mail.bf2.yahoo.com [74.6.135.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id 3150960005B for <s.com>; Fri, 26 Jul 2019 12:31:04 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic310.consmr.mail.bf2.yahoo.com with HTTP; Fri, 26 Jul 2019 12:31:02 +0000
Dear Sir, Permit me to introduce myself if this massage came to you as a surprise, I am Collins Mbano Wanaga a Zimbabwean citizen presently taking refugee in GHANA west Africa. Due to crises in my country coupled with the assassination of my late father Mr. Desmond Wanaga. Who was killed by PRESIDENT ROBERT MUGABE war veteran association who are calling for the white collection of farm land from all white settlers in Zimbabwe which is wrong. My father due to his stand over these issues fell out with the ruling party of PRESIDENT ROBERT MUGABE. Now I, my mother and my kid sister had to flee from our country to find refuge here in GHANA. Before the death of my father he was a major dealer of Diamond and Merchandise. He secretly moved these funds acquired from various sales in two trunk-boxes and deposited it in a security company in Ghana. But at the time of deposit he told the security company that it is family valuables that are contained in the boxes. The total amount contained in the two boxes is $20 MILLION USD. Unknowingly to the security company. Please I want you to know that when my father heard of the plot by PRESIDENT ROBERT MUGABE to kill him, he instructed the security company in Ghana to move the boxes containing the money to LONDON by DIPLOMATIC COURIER SERVICE. But unfortunately my father could not escape out of ZIMBABWE; he was eventually killed, though he could not claim the boxes before his untimely death. The boxes is presently in LONDON under the care of the DIPLOMATIC agent that moved it to LONDON but the DIPLOMAT or the CUSTOMS don’t know that it's money that is in the boxes. We have all the vital documents with us, We therefore contacted you as a trust worthy, God fearing and experience person of your caliber to help us travel to LONDON to receive and invest this money in your country and take us as one family and will also buy a house for us over there where we can live safely. IF you are interested please send me your, 1, Full names. 2, your Private Telephone and fax Number. 3, Current residential address, 4, Occupation as well as ID (intn'l passport or driver's license) I have attach my refugee ID, my kid sister and my mother also the documents of the boxes for evidence of the deposit. the only thing that is required to do is to obtain an AFFIDAVIT OF CHANGE OF OWNERSHIP in your name from the law court, then, the security company will order the diplomatic agent in LONDON to hand the boxes over to you as the receiver, regarding to this transaction, we are prepared to give you 25% of the money for your assistance.Please do reply through my private email address: (cwanaga@yahoo.com). We are expecting to hear from you soonest. Stay blessed. yours sincerely, Collins Mbano Wanaga. For the family.
Envelope Sender: <cwanaga4@yahoo.com>
'From' Header: Collins Mbano Wanaga <cwanaga4@yahoo.com>
Subject: Dear Sir, From The Wanaga's Family....!
Timestamp: 07:31:04 CDT, Friday 26 July 2019
Message-ID: <447032761.874189.1564144260923@mail.yahoo.com>
Client IP Address: 74.6.135.123
Client GeoIP Lookup: United States
Email Size: 5.8 kB
Encrypted? No
Thursday, July 25, 2019
Greetings My Dear,
NOTE: Pray pray pray but know that GOD has nothing to do with your thievery and dishonesty.
From: Mrs Franisca carlsen <franciscacarlsen20@gmail.com> To: undisclosed-recipients:; 06:20:26 CDT, Thursday 25 July 2019
Message ID: <CAEYnOn7HySVBQQnfz1MN0DZwHtTQ-Y4L5yxQaDpN26RGiRKuBw@mail.gmail.com>
Return Path: <barristeragbokenkrumah1971@gmail.com>
Reply To:
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Received:
from mx1-us5.ppe-hosted.com (unknown [10.7.65.199]) by pure.maildistiller.com with ESMTPS id EB7FF40080 for <s.com>; Thu, 25 Jul 2019 11:20:15 +0000 (UTC)
from mail-wm1-f66.google.com (mail-wm1-f66.google.com [209.85.128.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id A76C118006D for <s.com>; Thu, 25 Jul 2019 11:20:15 +0000 (UTC)
by mail-wm1-f66.google.com with SMTP id g67so40275881wme.1 for <s.com>; Thu, 25 Jul 2019 04:20:15 -0700 (PDT)
by 2002:a1c:dc05:0:0:0:0:0 with HTTP; Thu, 25 Jul 2019 04:20:14 -0700 (PDT)
Greetings My Dear, I sent this mail praying it will found you in a good condition of health, since I myself are in a very critical health condition in which I sleep every night without knowing if I may be alive to see the next day. I am Mrs. Francisca Carlsen from Denmark wife of late Mr John Carlsen, a widow suffering from long time illness. I have some funds I inherited from my late husband, the sum of (eleven million dollars) my Doctor told me recently that I have serious sickness which is cancer problem. What disturbs me most is my stroke sickness. Having known my condition, I decided to donate this fund to a good person that will utilize it the way i am going to instruct herein. I need a very honest and God fearing person who can claim this money and use it for Charity works, for orphanages, widows and also build schools for less privileges that will be named after my late husband if possible and to promote the word of God and the effort that the house of God is maintained. I do not want a situation where this money will be used in an ungodly manner. That's why I'm taking this decision. I'm not afraid of death, so I know where I'm going. I accept this decision because I do not have any child who will inherit this money after I die. Please I want your sincerely and urgent answer to know if you will be able to execute this project, and I will give you more information on how the fund will be transferred to your bank account. I am waiting for your reply. May God Bless you, Mrs. Francisca Carlsen
Envelope Sender: <barristeragbokenkrumah1971@gmail.com>
'From' Header: Mrs Franisca carlsen <franciscacarlsen20@gmail.com>
Subject: Greetings My Dear,
Timestamp: 06:20:26 CDT, Thursday 25 July 2019
Message-ID: <CAEYnOn7HySVBQQnfz1MN0DZwHtTQ-Y4L5yxQaDpN26RGiRKuBw@mail.gmail.com>
Client IP Address: 209.85.128.66
Client GeoIP Lookup: United States
Email Size: 4.4 kB
Encrypted? No
From: Mrs Franisca carlsen <franciscacarlsen20@gmail.com> To: undisclosed-recipients:; 06:20:26 CDT, Thursday 25 July 2019
Message ID: <CAEYnOn7HySVBQQnfz1MN0DZwHtTQ-Y4L5yxQaDpN26RGiRKuBw@mail.gmail.com>
Return Path: <barristeragbokenkrumah1971@gmail.com>
Reply To:
MIME Version: 1.0
Content Type: text/plain; charset="UTF-8"
Received:
from mx1-us5.ppe-hosted.com (unknown [10.7.65.199]) by pure.maildistiller.com with ESMTPS id EB7FF40080 for <s.com>; Thu, 25 Jul 2019 11:20:15 +0000 (UTC)
from mail-wm1-f66.google.com (mail-wm1-f66.google.com [209.85.128.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us5.ppe-hosted.com with ESMTPS id A76C118006D for <s.com>; Thu, 25 Jul 2019 11:20:15 +0000 (UTC)
by mail-wm1-f66.google.com with SMTP id g67so40275881wme.1 for <s.com>; Thu, 25 Jul 2019 04:20:15 -0700 (PDT)
by 2002:a1c:dc05:0:0:0:0:0 with HTTP; Thu, 25 Jul 2019 04:20:14 -0700 (PDT)
Greetings My Dear, I sent this mail praying it will found you in a good condition of health, since I myself are in a very critical health condition in which I sleep every night without knowing if I may be alive to see the next day. I am Mrs. Francisca Carlsen from Denmark wife of late Mr John Carlsen, a widow suffering from long time illness. I have some funds I inherited from my late husband, the sum of (eleven million dollars) my Doctor told me recently that I have serious sickness which is cancer problem. What disturbs me most is my stroke sickness. Having known my condition, I decided to donate this fund to a good person that will utilize it the way i am going to instruct herein. I need a very honest and God fearing person who can claim this money and use it for Charity works, for orphanages, widows and also build schools for less privileges that will be named after my late husband if possible and to promote the word of God and the effort that the house of God is maintained. I do not want a situation where this money will be used in an ungodly manner. That's why I'm taking this decision. I'm not afraid of death, so I know where I'm going. I accept this decision because I do not have any child who will inherit this money after I die. Please I want your sincerely and urgent answer to know if you will be able to execute this project, and I will give you more information on how the fund will be transferred to your bank account. I am waiting for your reply. May God Bless you, Mrs. Francisca Carlsen
Envelope Sender: <barristeragbokenkrumah1971@gmail.com>
'From' Header: Mrs Franisca carlsen <franciscacarlsen20@gmail.com>
Subject: Greetings My Dear,
Timestamp: 06:20:26 CDT, Thursday 25 July 2019
Message-ID: <CAEYnOn7HySVBQQnfz1MN0DZwHtTQ-Y4L5yxQaDpN26RGiRKuBw@mail.gmail.com>
Client IP Address: 209.85.128.66
Client GeoIP Lookup: United States
Email Size: 4.4 kB
Encrypted? No
URGENT MASSAGE FROM JOYCE SAMUEL
NOTE: Urgent massage? Speak Engrish much? ROFL
From: MRS JOYCE SAMUEL <joycesamuel190@gmail.com> To: "joycesamuel190@gmail.com" <joycesamuel190@gmail.com> 09:48:20 CDT, Thursday 25 July 2019
Message ID: <858772.48831.qm@web32106.mail.ssk.yahoo.co.jp>
Return Path: <joycesamuel190@gmail.com>
Reply To: MRS JOYCE SAMUEL <joycesamuel1@yahoo.co.jp>
MIME Version: 1.0
Content Type: multipart/alternative; boundary="-243711011-134082093-1564066088=:48831"
Received:
from mx1-us1.ppe-hosted.com (unknown [10.110.48.236]) by pure.maildistiller.com with ESMTPS id AF4A380069 for <s.com>; Thu, 25 Jul 2019 14:48:19 +0000 (UTC)
from ns503-vm2.bullet.mail.kks.yahoo.co.jp (ns503-vm2.bullet.mail.kks.yahoo.co.jp [183.79.57.72]) by mx1-us1.ppe-hosted.com with SMTP id 07CED400056 for <s.com>; Thu, 25 Jul 2019 14:48:18 +0000 (UTC)
from [183.79.100.141] by ns503.bullet.mail.kks.yahoo.co.jp with NNFMP; 25 Jul 2019 14:48:10 -0000
from [183.79.101.121] by t504.bullet.mail.kks.yahoo.co.jp with NNFMP; 25 Jul 2019 14:48:10 -0000
from [127.0.0.1] by omp508.mail.kks.yahoo.co.jp with NNFMP; 25 Jul 2019 14:48:10 -0000
(qmail 86121 invoked by uid 60001); 25 Jul 2019 14:48:09 -0000
from [41.189.42.111] by web32106.mail.ssk.yahoo.co.jp via HTTP; Thu, 25 Jul 2019 23:48:08 JST
Good Day Dear,
How are you doing today? I am Mrs.Joyce Samuel from United Kingdom ,I married to Mr.Samuel Denis from Toronto Ontario who worked with Canadian Embassy here in Cote d’Ivoire for nine years before he died in the year 2015. We were married for twenty five years without a child. He died after a brief illness that lasted for only four days.
Before his death we were both born again Christian. Since his death I decided not to remarry or get a child outside my matrimonial home which the Bible is against.
When my late husband was alive he deposited the sum of $4.5 Million in a bank here in Cote d’Ivoire ,so Recently my DOCTOR told me that I would not last for more time due to cancer problem. Having known my condition I decided to donate this fund to a Orphanage or good Christian that will utilize the fund in the good way person that will use this fund for orphanages, widows, propagating the word of God and to endeavor that the house of God is maintained.
l took this decision because I don't have any child that will inherit this money and my husband relatives are not Christians not even good at all because they are the one that killed my husband in other to have all my late husband properties and I don't want my husband's efforts to be used by unbelievers. I don't want a situation where this money will be used in an ungodly way.
This is why I am taking this decision. I am not afraid of death hence I know where I am going. I know that I am going to be in the bosom of the Lord. Exodus 14 VS 14 says that the lord will fight my case and I shall hold my peace".
With God all things are possible.
As soon as I receive your reply I shall instruct my lawyer to contact you. I will also issue you an authority letter that will prove you the present beneficiary of this fund. I want you to always pray for me because the lord is my shepherd.
My happiness is that I lived a life of a worthy Christian. Whoever that Wants to serve the Lord must serve him in spirit and Truth. Please always be prayerful all through your life.
Please assure me that you will act accordingly as I Stated here in
Hope to receive your response immediately.
Thanks and Remain blessed in the Lord.
Mrs. Joyce Samuel
Envelope Sender: <joycesamuel190@gmail.com>
'From' Header: MRS JOYCE SAMUEL <joycesamuel190@gmail.com>
Subject: URGENT MASSAGE FROM JOYCE SAMUEL
Timestamp: 09:48:20 CDT, Thursday 25 July 2019
Message-ID: <858772.48831.qm@web32106.mail.ssk.yahoo.co.jp>
Client IP Address: 183.79.57.72
Client GeoIP Lookup: Japan
Email Size: 9.7 kB
Encrypted? No
From: MRS JOYCE SAMUEL <joycesamuel190@gmail.com> To: "joycesamuel190@gmail.com" <joycesamuel190@gmail.com> 09:48:20 CDT, Thursday 25 July 2019
Message ID: <858772.48831.qm@web32106.mail.ssk.yahoo.co.jp>
Return Path: <joycesamuel190@gmail.com>
Reply To: MRS JOYCE SAMUEL <joycesamuel1@yahoo.co.jp>
MIME Version: 1.0
Content Type: multipart/alternative; boundary="-243711011-134082093-1564066088=:48831"
Received:
from mx1-us1.ppe-hosted.com (unknown [10.110.48.236]) by pure.maildistiller.com with ESMTPS id AF4A380069 for <s.com>; Thu, 25 Jul 2019 14:48:19 +0000 (UTC)
from ns503-vm2.bullet.mail.kks.yahoo.co.jp (ns503-vm2.bullet.mail.kks.yahoo.co.jp [183.79.57.72]) by mx1-us1.ppe-hosted.com with SMTP id 07CED400056 for <s.com>; Thu, 25 Jul 2019 14:48:18 +0000 (UTC)
from [183.79.100.141] by ns503.bullet.mail.kks.yahoo.co.jp with NNFMP; 25 Jul 2019 14:48:10 -0000
from [183.79.101.121] by t504.bullet.mail.kks.yahoo.co.jp with NNFMP; 25 Jul 2019 14:48:10 -0000
from [127.0.0.1] by omp508.mail.kks.yahoo.co.jp with NNFMP; 25 Jul 2019 14:48:10 -0000
(qmail 86121 invoked by uid 60001); 25 Jul 2019 14:48:09 -0000
from [41.189.42.111] by web32106.mail.ssk.yahoo.co.jp via HTTP; Thu, 25 Jul 2019 23:48:08 JST
Good Day Dear,
How are you doing today? I am Mrs.Joyce Samuel from United Kingdom ,I married to Mr.Samuel Denis from Toronto Ontario who worked with Canadian Embassy here in Cote d’Ivoire for nine years before he died in the year 2015. We were married for twenty five years without a child. He died after a brief illness that lasted for only four days.
Before his death we were both born again Christian. Since his death I decided not to remarry or get a child outside my matrimonial home which the Bible is against.
When my late husband was alive he deposited the sum of $4.5 Million in a bank here in Cote d’Ivoire ,so Recently my DOCTOR told me that I would not last for more time due to cancer problem. Having known my condition I decided to donate this fund to a Orphanage or good Christian that will utilize the fund in the good way person that will use this fund for orphanages, widows, propagating the word of God and to endeavor that the house of God is maintained.
l took this decision because I don't have any child that will inherit this money and my husband relatives are not Christians not even good at all because they are the one that killed my husband in other to have all my late husband properties and I don't want my husband's efforts to be used by unbelievers. I don't want a situation where this money will be used in an ungodly way.
This is why I am taking this decision. I am not afraid of death hence I know where I am going. I know that I am going to be in the bosom of the Lord. Exodus 14 VS 14 says that the lord will fight my case and I shall hold my peace".
With God all things are possible.
As soon as I receive your reply I shall instruct my lawyer to contact you. I will also issue you an authority letter that will prove you the present beneficiary of this fund. I want you to always pray for me because the lord is my shepherd.
My happiness is that I lived a life of a worthy Christian. Whoever that Wants to serve the Lord must serve him in spirit and Truth. Please always be prayerful all through your life.
Please assure me that you will act accordingly as I Stated here in
Hope to receive your response immediately.
Thanks and Remain blessed in the Lord.
Mrs. Joyce Samuel
Envelope Sender: <joycesamuel190@gmail.com>
'From' Header: MRS JOYCE SAMUEL <joycesamuel190@gmail.com>
Subject: URGENT MASSAGE FROM JOYCE SAMUEL
Timestamp: 09:48:20 CDT, Thursday 25 July 2019
Message-ID: <858772.48831.qm@web32106.mail.ssk.yahoo.co.jp>
Client IP Address: 183.79.57.72
Client GeoIP Lookup: Japan
Email Size: 9.7 kB
Encrypted? No
Donation
NOTE: Sigh ... someone was looking at a thesaurus. Still sounds horrible.
From: Mrs Bertha Kra <mrsberthakra@yahoo.com> To: 10:03:01 CDT, Thursday 25 July 2019
Message ID: <1308403589.875374.1564066974541@mail.yahoo.com>
Return Path: <mrsberthakra@yahoo.com>
Reply To: mrsberthak11@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.37]) by pure.maildistiller.com with ESMTPS id 9F18B2C006E for <s.com>; Thu, 25 Jul 2019 15:03:00 +0000 (UTC)
from sonic309-20.consmr.mail.ne1.yahoo.com (sonic309-20.consmr.mail.ne1.yahoo.com [66.163.184.146]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id 73025B40084 for <s.com>; Thu, 25 Jul 2019 15:03:00 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic309.consmr.mail.ne1.yahoo.com with HTTP; Thu, 25 Jul 2019 15:02:59 +0000
Donation It is with profound respect for your time, that I plead to state the following few lines for your kind consideration, and I hope you will spare some of your valuable minutes to read the following appeal with sympathetic mind and understanding. I am Mrs Bertha Kra I am 59 years old, I am dropping this short message from my sick bed after been diagnosed from a long time cancer of the blood. From all indication my condition is really deteriorating, and my doctor has courageously advised that I may not live beyond the next two months, this is because the Seriousness of the cancer has reached a critical stage. I am looking for a trust and Good someone to confide on. I have a fortune/Project ($4.5M) I want to entrust into your care you will use this money to help the needy, motherless, orphans and widows because I am one . Please respond to me if you will promise to see that my last wish is been accomplish to the Glory of God and humanity. As soon as I hear from you, I will give you more information on this. May God bless you real good Amen. Mrs Bertha Kra
Envelope Sender: <mrsberthakra@yahoo.com>
'From' Header: Mrs Bertha Kra <mrsberthakra@yahoo.com>
Subject: Donation
Timestamp: 10:03:01 CDT, Thursday 25 July 2019
Message-ID: <1308403589.875374.1564066974541@mail.yahoo.com>
Client IP Address: 66.163.184.146
Client GeoIP Lookup: United States
Email Size: 4.0 kB
Encrypted? No
From: Mrs Bertha Kra <mrsberthakra@yahoo.com> To: 10:03:01 CDT, Thursday 25 July 2019
Message ID: <1308403589.875374.1564066974541@mail.yahoo.com>
Return Path: <mrsberthakra@yahoo.com>
Reply To: mrsberthak11@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Received:
from mx1-us3.ppe-hosted.com (unknown [10.7.66.37]) by pure.maildistiller.com with ESMTPS id 9F18B2C006E for <s.com>; Thu, 25 Jul 2019 15:03:00 +0000 (UTC)
from sonic309-20.consmr.mail.ne1.yahoo.com (sonic309-20.consmr.mail.ne1.yahoo.com [66.163.184.146]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us3.ppe-hosted.com with ESMTPS id 73025B40084 for <s.com>; Thu, 25 Jul 2019 15:03:00 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic309.consmr.mail.ne1.yahoo.com with HTTP; Thu, 25 Jul 2019 15:02:59 +0000
Donation It is with profound respect for your time, that I plead to state the following few lines for your kind consideration, and I hope you will spare some of your valuable minutes to read the following appeal with sympathetic mind and understanding. I am Mrs Bertha Kra I am 59 years old, I am dropping this short message from my sick bed after been diagnosed from a long time cancer of the blood. From all indication my condition is really deteriorating, and my doctor has courageously advised that I may not live beyond the next two months, this is because the Seriousness of the cancer has reached a critical stage. I am looking for a trust and Good someone to confide on. I have a fortune/Project ($4.5M) I want to entrust into your care you will use this money to help the needy, motherless, orphans and widows because I am one . Please respond to me if you will promise to see that my last wish is been accomplish to the Glory of God and humanity. As soon as I hear from you, I will give you more information on this. May God bless you real good Amen. Mrs Bertha Kra
Envelope Sender: <mrsberthakra@yahoo.com>
'From' Header: Mrs Bertha Kra <mrsberthakra@yahoo.com>
Subject: Donation
Timestamp: 10:03:01 CDT, Thursday 25 July 2019
Message-ID: <1308403589.875374.1564066974541@mail.yahoo.com>
Client IP Address: 66.163.184.146
Client GeoIP Lookup: United States
Email Size: 4.0 kB
Encrypted? No
Wednesday, July 24, 2019
YOUR PAYMENT SUM OF US$7.5 MILLION FROM UNITED NATIONS COMPENSATION COMMISSION (UNCC). HAS BEEN CONVERTED INTO AN ATM CARD.
NOTE: Ambitious author, cramming all that verbiage into the subject line. A warning to the reader without even opening the email that this one isn't vewy bwite.
From: "Mrs.Amina J. Mohammed" <ubabank52834@yahoo.com> To: 21:17:23 CDT, Wednesday 24 July 2019
Message ID: <529391162.1183251.1564021040653@mail.yahoo.com>
Return Path: <ubabank52834@yahoo.com>
Reply To: ubabank7899@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Received:
from mx1-us1.ppe-hosted.com (unknown [10.110.48.236]) by pure.maildistiller.com with ESMTPS id 2391080061 for <s.com>; Thu, 25 Jul 2019 02:17:23 +0000 (UTC)
from sonic306-22.consmr.mail.ne1.yahoo.com (sonic306-22.consmr.mail.ne1.yahoo.com [66.163.189.84]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us1.ppe-hosted.com with ESMTPS id 021DD400059 for <s.com>; Thu, 25 Jul 2019 02:17:22 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic306.consmr.mail.ne1.yahoo.com with HTTP; Thu, 25 Jul 2019 02:17:22 +0000
ATTN: YOUR OVERDUE PAYMENT SUM OF US$7.5 MILLION FROM UNITED NATIONS COMPENSATION COMMISSION (UNCC). HAS BEEN CONVERTED INTO AN ATM CARD. CONTACT REV JERRY DOUGLAS: VIA EMAIL ( ubabank7899@gmail.com ) WITH YOUR ADDRESS FOR DELIVERY AND FURTHER INSTRUCTIONS YOU CAN CALL HIM AT 678) 593-0590THANK YOU FOR COOPERATION. Thanks Deputy Secretary-General of the United Nations Mrs.Amina J. Mohammed
Envelope Sender: <ubabank52834@yahoo.com>
'From' Header: "Mrs.Amina J. Mohammed" <ubabank52834@yahoo.com>
Subject: YOUR PAYMENT SUM OF US$7.5 MILLION FROM UNITED NATIONS COMPENSATION COMMISSION (UNCC). HAS BEEN CONVERTED INTO AN ATM CARD.
Timestamp: 21:17:23 CDT, Wednesday 24 July 2019
Message-ID: <529391162.1183251.1564021040653@mail.yahoo.com>
Client IP Address: 66.163.189.84
Client GeoIP Lookup: United States
Email Size: 3.4 kB
Encrypted? No
From: "Mrs.Amina J. Mohammed" <ubabank52834@yahoo.com> To: 21:17:23 CDT, Wednesday 24 July 2019
Message ID: <529391162.1183251.1564021040653@mail.yahoo.com>
Return Path: <ubabank52834@yahoo.com>
Reply To: ubabank7899@gmail.com
MIME Version: 1.0
Content Type: text/plain; charset=UTF-8
Received:
from mx1-us1.ppe-hosted.com (unknown [10.110.48.236]) by pure.maildistiller.com with ESMTPS id 2391080061 for <s.com>; Thu, 25 Jul 2019 02:17:23 +0000 (UTC)
from sonic306-22.consmr.mail.ne1.yahoo.com (sonic306-22.consmr.mail.ne1.yahoo.com [66.163.189.84]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1-us1.ppe-hosted.com with ESMTPS id 021DD400059 for <s.com>; Thu, 25 Jul 2019 02:17:22 +0000 (UTC)
from sonic.gate.mail.ne1.yahoo.com by sonic306.consmr.mail.ne1.yahoo.com with HTTP; Thu, 25 Jul 2019 02:17:22 +0000
ATTN: YOUR OVERDUE PAYMENT SUM OF US$7.5 MILLION FROM UNITED NATIONS COMPENSATION COMMISSION (UNCC). HAS BEEN CONVERTED INTO AN ATM CARD. CONTACT REV JERRY DOUGLAS: VIA EMAIL ( ubabank7899@gmail.com ) WITH YOUR ADDRESS FOR DELIVERY AND FURTHER INSTRUCTIONS YOU CAN CALL HIM AT 678) 593-0590THANK YOU FOR COOPERATION. Thanks Deputy Secretary-General of the United Nations Mrs.Amina J. Mohammed
Envelope Sender: <ubabank52834@yahoo.com>
'From' Header: "Mrs.Amina J. Mohammed" <ubabank52834@yahoo.com>
Subject: YOUR PAYMENT SUM OF US$7.5 MILLION FROM UNITED NATIONS COMPENSATION COMMISSION (UNCC). HAS BEEN CONVERTED INTO AN ATM CARD.
Timestamp: 21:17:23 CDT, Wednesday 24 July 2019
Message-ID: <529391162.1183251.1564021040653@mail.yahoo.com>
Client IP Address: 66.163.189.84
Client GeoIP Lookup: United States
Email Size: 3.4 kB
Encrypted? No
Subscribe to:
Posts (Atom)