Friday, September 14, 2012

Subject: Re: Can I Trust You

This scammer is truly unhappy with my communication, is it not?
As you'll see, I did address it condescendingly, rudely in fact.
It did not read fully, my previous reply (which is not included herein),
or is its comprehension of "the English" truly as poor as its writing thereof.

I wonder how folks could "fall" for this scam, for any "Google-ings" of
the email address, or a phrase or two from the "script", would reveal
postings as old as July 2012.

The headers reveal illegitimate origins of the initial message.
The spammin' lyin' scammer addressed the message to itself,
then to the intended "marks".

Just a few "Red Flags" for a critical thinker!


Received: by 10.220.33.206 with SMTP id i14csp282656vcd;
        Fri, 14 Sep 2012 02:30:42 -0700 (PDT)
Received: by 10.60.170.104 with SMTP id al8mr2064262oec.78.1347615041170;
        Fri, 14 Sep 2012 02:30:41 -0700 (PDT)
Return-Path: 
Received: from nm10-vm6.bullet.mail.sg3.Ybbcc.dde (nm10-vm6.bullet.mail.sg3.Ybbcc. [106.10.148.229])
        by mx.gghhii.jjk with SMTP id jv10si990608obb.115.2012.09.14.02.30.39;
        Fri, 14 Sep 2012 02:30:41 -0700 (PDT)
Received-SPF: neutral (gghhii.jjk: 106.10.148.229 is neither permitted nor denied by best guess record for domain of dr_oahmed@Ybbcc.dde.ph) client-ip=106.10.148.229;
Authentication-Results: mx.gghhii.jjk.com; spf=neutral (gghhii.jjk: 106.10.148.229 is neither permitted nor denied by best guess record for domain of dr_oahmed@yahoo.com.ph) smtp.mail=dr_oahmed@yahoo.com.ph; dkim=pass (test mode) header.i=@Ybbcc.dde.ph
Received: from [106.10.166.116] by nm10.bullet.mail.sg3.Ybbcc.dde with NNFMP; 14 Sep 2012 09:30:36 -0000
Received: from [106.10.151.253] by tm5.bullet.mail.sg3.Ybbcc.dde with NNFMP; 14 Sep 2012 09:30:36 -0000
Received: from [127.0.0.1] by omp1002.mail.sg3.Ybbcc.dde with NNFMP; 14 Sep 2012 09:30:36 -0000
X-Ybbcc-Newman-Property: ymail-3
X-Ybbcc-Newman-Id: 605204.84363.bm@omp1002.mail.sg3.Ybbcc.dde
Received: (qmail 6984 invoked by uid 60001); 14 Sep 2012 09:30:36 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Ybbcc.dde.ph; s=s1024; t=1347615036; bh=233cFLBOYhN6kTG2G6E7i+AeD+sM7hthuDT+TGLMf/M=; h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=BNh25PTvOV+BpHkLGilinkcVh4B4cThwBFafpUdLr12ikDE+TFMFnq5tG9ov4fE7Hm/Jl6KaySxdT+ijbdWBIAi/7rUXiWj4U9LB+AQFHsK8jMiv9akvTwHGhbsjAY1TPXTcESlQeifqn2Kzm9GLR3vLX2gtjZQfNkBdPE6gAJs=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=Ybbcc.dde.ph;
  h=X-YMail-OSG:Received:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
  b=6YHwKDazTL9edk+LnawbhQNOP2e8Z4tjj/DSBzC5jrHKeGap/deZUejQXa1fG4JtEzOQJi94uY3kpl/KAblDNDdNPoq4tdIevsTm85wgoR8ARLAJky3W+q07xHtyXT1l6QjxZl+z0GWcuT9WeBEcO7uHmdOv6J7cUSLyeq8SfjQ=;
X-YMail-OSG: Jnhm9SsVM1myUQqliszZpVxcoiTmST3Z4JMBdNV1MPaNl9q
 SP__clV4GIWlgHe3FXszpY7RCYeHOnY3aj_ocsBNuuUlXlsI5qZCrxj2fo2o
 EtM5TpYBMm.itiBvU3D1RUgrpdpd_hUdY8nqzpjoZ5bL9OmnJj9Rmos21qsu
 oaArxcUoyr5Gq8bhVn75JekR7ezuG22ks4oFvv6vBtco23opWdrW.e.YAmO9
 LfCkxoSz9kqDySgyJ_8mHNCm2fE8DiRquNVl89lGmd5XwwwZxzpcgjFMrrLL
 wfSXLGsTnx_9DRnL4QVALUu01UighhNS1gr_4ivx20Cmyue_cwcH1qiCrxEW
 V.RTY61JvdmbpNBnbTBP..7nheQb84wMO0xvbXvcOza1eu4jPBKinFNfl_3U
 KXky54.ZmatgTQZE4bcNeOpwR.Qc84YM3ifHXTUE2Kl4.IITaqYBqDVbm26w
 uZVtxnCCGNnXbsvZXMKsRk93ubiYH3yxT1lUHGSF5v2eZ5XkOMa4f8nJApNw
 Dvpl_AV5ZS2FGsDH6yhVK3LCxPdPbF7bFPGuwPKsE8MzB5RiUS5i7Wz6Rv28
 im8QtnO.Gees_iBCn0p3JjOVVyIjHv0L3KhrMH8Hxz21CTWriyOBGvSJ3LR0
 5BQ5v2kbq0A.frTpaZG0wFSEzBMmnJy4LI5lghHU3pTbXoOJmbfIWyhl0TPt
 nmxB2sgA-
Received: from [41.71.178.21] by web190106.mail.sg3.Ybbcc.dde via HTTP; Fri, 14 Sep 2012 17:30:36 SGT
X-Mailer: YbbccMailWebService/0.8.121.416
References:   <1347459435 .51002.ybbccmailneo=".51002.ybbccmailneo" web190101.mail.sg3.ybbcc.dde="web190101.mail.sg3.ybbcc.dde"> 
Message-ID: <1347615036 .93461.=".93461." span="span">
YbbccMailNeo@web190106.mail.sg3.Ybbcc.dde>
Date: Fri, 14 Sep 2012 17:30:36 +0800 (SGT) From: Ali Otman Ahmed@Yahoo.com.ph Reply-To: Ali Otman Ahmed Subject: Re: (REMINDER) Re: Can I Trust You To: "justjosephhere@gxxyy.zz0" In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="-1443486847-242011003-1347615036=:93461" ---1443486847-242011003-1347615036=:93461 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable



Dear Giuseppe Cerratp
I will not condole insult from you though I realize you misconstrue, I believe the best way to clear your doubts is to come and see for yourself’ I am not afraid because what I told you is fact and no liars okay.  
The fact remains that lots of liars everywhere even in government and security agencies, but the truth is, that few nation are very good to scare others away from the real thing and if it is nonsense they let you fall victim.
Please be wise.
You’re sincerely,
Dr. Ali 0tman Ahmed

In Response To My Previous Message To The spammin' Lyin' Scammer:
From: Joseph <justjosephhere@gxxyy.zz0>  To: Ali Otman Ahmed <dr_oahmed@yahoo.com.ph>  Sent: Thursday, September 13, 2012 10:42 PM Subject: Re: (REMINDER) Re: Can I Trust You
Yes, you can trust me when I declare, "I have accomplished the "right thing" in your case!" As you will see by studying the attached information, I have completed the actions to assist all who are legitimately involved with your cases. I feel it be a tragedy that we cannot meet "in the flesh". For then I could most clearly demonstrate my heartfelt desires to roast the Liar's tongue... ... ...
--- -- - [Message Truncated, For Attention To Etiquette] - -- ---


The initial scam-mail I received is below:  

Received: by 10.220.25.196 with SMTP id a4csp71931vcc;
        Sat, 1 Sep 2012 15:21:54 -0700 (PDT)
Received: by 10.236.200.132 with SMTP id z4mr11938117yhn.93.1346538113904;
        Sat, 01 Sep 2012 15:21:53 -0700 (PDT)
Return-Path: 
Received: from mail.oakbrookinterviewing.com ([74.7.167.33])
        by mx.google.com with SMTP id r5si3520576ani.14.2012.09.01.15.19.52;
        Sat, 01 Sep 2012 15:21:53 -0700 (PDT)
Received-SPF: neutral (google.com: 74.7.167.33 is neither permitted nor denied by best guess record for domain of dr_oahmed47@Ybbcc.dde.ph) client-ip=74.7.167.33;
Authentication-Results: mx.google.com; spf=neutral (google.com: 74.7.167.33 is neither permitted nor denied by best guess record for domain of dr_oahmed47@yahoo.com.ph) smtp.mail=dr_oahmed47@yahoo.com.ph
Received: from User ([82.148.40.110]) by mail.oakbrookinterviewing.com with Microsoft SMTPSVC(6.0.3790.1830);
	 Tue, 28 Aug 2012 06:09:33 -0500
Reply-To: 
From: " Ali Otman Ahmed,"
To: dr_oahmed47@yahoo.com.ph
Subject: Re: Can I Trust You
Date: Tue, 28 Aug 2012 11:40:12 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Return-Path: dr_oahmed47@yahoo.com.ph
Message-ID: 
X-OriginalArrivalTime: 28 Aug 2012 11:09:33.0484 (UTC) FILETIME=[9A62AEC0:01CD850D]

Dear Friend,

I am indeed sorry for contacting you through this means. However, I assure you that it is confidential and genuine. I am Ali Otman Ahmed from Ghana  to President Barack Obama. We know about the current war in Libya and they are doing everything possible to make sure that peace return to Libya even the current Government where are putting effort's to conduct an election for the sack of Libyan people who's desired change in Libya.

We know also that many families have lost a lot and are losing more on a daily basis and I need your help to secure some of these funds because these are hard-earned money.  There funds are proceeds of contracts executed by the family. Examples are BP's US$900M Libyan oil exploration contract in 2007, shares in Juventus Football Club, Eni: the Italian oil giant, and Pearson: the parent company of Penguin and Financial Times. Also some money was made from investments in numerous financial institutions, including Goldman Sachs, JP Morgan Chase and the Carlyle Group.

In order to ensure that all their assets are not frozen illegally by the western government, the original depositor who died as the result of war in Libya moved some money out through diplomatic security means as a consignment and deposited it in a Security Company in Burkina Faso, where they were registered as personal effects. Consignments with the sum of (US $19.5, Million Dollars) I want you to help me and put a claim over it. Please note that further details will be made available upon proper understanding and agreement. The fund have been deposited in Ghana since 1998 please we can us this opportunity and claim it I have all the useful information and the deposit certificate with me here. All I need is a foreign partner so that I will release all the vital information to execute the deal, if you follow up my directive advise the fund will be release to you within 10 to 14 working days,

I shall offer you 35% of the total sum and you will also help me invest the other 65% of in any lucrative business in your country. Serious negations are currently going on for peace to return to Libya. I should be able to travel afterwards and probably meet you. I guarantee you that this venture is risk free giving that the funds are certified clean and the services of a qualified Solicitor from your country will be retained. If you are interested, kindly get back to me for further details through my private Email address: (dr_oahmed@yahoo.com.ph) Otherwise, please delete this email and I say thanks for your time. I needs your urgent response if you are interested,

Yours sincerely
 Ali Otman Ahmed,

	



Friday, March 20, 2009

Email: drmartinszuma@jmail.co.za Tel: +27 73 506 4881


The Original Scam=mail, with "full headers":

From DR MARTINS ZUMA Thu Mar 19 21:59:36 2009
Return-Path: martinszuma424@msn.com
Authentication-Results: mta334.mail.re4.yahoo.com from=msn.com; domainkeys=neutral (no sig); from=msn.com; dkim=neutral (no sig)
Received: from 65.54.246.216 (EHLO bay0-omc3-s16.bay0.hotmail.com) (65.54.246.216) by mta334.mail.re4.yahoo.com with SMTP; Thu, 19 Mar 2009 22:01:33 -0700
Received: from BAY117-W14 ([207.46.8.49]) by bay0-omc3-s16.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 19 Mar 2009 21:59:37 -0700
Message-ID: BAY117-W14E6E61D33CC31D1C798528A970@phx.gbl
Return-Path: martinszuma424@msn.com
Content-Type: multipart/mixed; boundary="_2882e976-fc38-4155-9f04-1eddbc009e22_"
Reply-To: drmartinszuma@jmail.co.za
From: DR MARTINS ZUMA  
Subject: Confidential Business Assistance[URGENT]
Date: Fri, 20 Mar 2009 04:59:36 +0000
Importance: Normal
MIME-Version: 1.0
Bcc:
Content-Length: 8528

PLEASE FIND ATTACHED MY CONFIDENTIAL BUSINESS ASSISTANCE OF US$15,000,000.00

PLEASE IT VERY URGENT.

THANKS.
 
Dr. Martins Zuma.


IP & DNS WhoIs Searches:

http://www.robtex.com/ip/207.46.8.49.html
contact information for 207.46.8.49
msnhst@microsoft.com (responsible for 46.207.in-addr.arpa,8.46.207.in-addr.arpa,msft.net)

ip tab
base                         bay117-w14.bay117.hotmail.com
record a                   name  ...                                  ip 207.46.8.49 reverse ? UNITED STATES 
route 207.46.0.0/19   Proxy-registered route object     as AS8075 MICROSOFT 

whois tab
NetRange: 207.46.0.0 - 207.46.255.255 
CIDR: 207.46.0.0/16    NetName: MICROSOFT-GLOBAL-NET

Look up an address in the abuse.net contact database 
abuse@msn.com (for msn.com)
abuse@saix.net (for jmail.co.za)
postmaster@jmail.co.za (for jmail.co.za)

The Attachment Opened:
NEXT OF KIN

FROM THE DESK OF: DR MARTINS ZUMA
ABSA BANK OF SOUTH
AFRICA.SANDTON
BRANCH.
Tel: +27 73 506 4881
Dear Sir/Madam,

I am Dr Martins Zuma, Bank Manager Amalgamated Bank of South Africa{ABSA}. I have urgent and very confidential business proposal for you. An American Gold consultant/contractor with the South African Solid Gold Corporation, MR.WILLIAM BRYANT made a numbered time (Fixed) Deposit for twelve calendar months, valued atUS$15,000,000.00 (fifteen Million Dollars) in my branch.

Upon maturity, I sent a routine notification to his forwarding address but got no reply. After a month, we sent a reminder and finally we discovered from his contract employers, the South African Solid Gold Corporation that MR.WILLIAM BRYANT died in a plane crash in Alaska Airlines Flight 261(for more information about this crash and person you can contact this since we got this information about his death. On further investigation, I found out that he died without making a WILL and all attempts to trace his next of kin were fruitless.

I therefore made further investigation and discovered that MR.WILLIAM BRYANT did not declare any kin or relations in all his official documents, including his Bank Deposit paperwork in my Bank. This sum of US$15,000,000.00 is still sitting in my Bank and the interest is being rolled over with the principal sum at the end of each year. No one will ever come forward to claim it.

According to Laws of Republic OF SOUTH AFRICA, at the expiration of 6 (SIX) years, the money will revert to the ownership of the South African Government if nobody applies to claim the fund. Consequently, my proposal is that I will like you as a foreigner to stand in as the next of kin to MR.WILLIAM BRYANT so that the fruits of this old man's labor will not get into the hands of some corrupt government officials. This is simple, I will like you to provide immediately your full names and address so that the attorney will prepare the necessary documents and affidavits that will put you in place as the next of kin.

We shall employ the services of an attorney for drafting and notarization of the WILL and to obtain the necessary documents and letter of probate/administration in your favor for the transfer. A bank account in any part of the world that you will provide will then facilitate the transfer of this money to you as the beneficiary/next of kin.

The money will be paid into your account for us to share in the ratio of 65% for me and 30% for you. Then 5%will be map out for any expenses that may occur during transactions. There is no risk at all as all the paper work for this transaction will be done by the attorney and my position as the Branch Manager guarantees the successful execution of this transaction. If you are interested, please reply immediately via the private email address above. Upon your response, I shall then provide you with more details and relevant documents that will help you understand the transaction. Please send me your confidential telephone and fax numbers for easy communication.

Please observe utmost confidentiality, and rest assured that this transaction would be most profitable for both of us because I shall require your assistance
to invest my share in your country.

Awaiting your urgent call or email me through my private email id: 
drmartinszuma@jmail.co.za.


Regards,
Dr. Martins Zuma.
Email: 
drmartinszuma@jmail.co.za