If you have been scammed, please post here and share your experience; it may help others avoid the same situation!
by JamesIvory Tue Jan 06, 2015 5:16 pm
Beware of a "Lady" called Laura C. Brandt ( [email protected] ), claming to be from Calgary, Canada
She is VERY convincing, speaks very sophisticated english

the first email from her:

It is really good and nice to read and view your profile which sound good and interesting to me. I joined the site to meet with a man that will bring out the best in me, a man that we can both explore our fantasies. A man that we can both have a great erotic adventure together.
I am not looking for a one night stand, but a connection that will spark up a great chemistry reaction between us, so by the time we are ready we will not feel like a stranger.
I will like to learn more about you? What are you really looking for on the site? When did you join the site? What is your experience so far and have you meet with anyone? Too many questions I guess. Well, this is the only way that we can be able to learn more about our self.
I want you to also feel free and ask me questions, and I will answer them
Hope to read from you soon.
Laura


what she does:
Hi ...... , Actually I was born in Canada, but my Mum is from Switzerland, I grew up in Calgary, Canada. But four months ago, I move over to Zurich. I am a trader and I deal with Precious Stones. (Diamonds).
I will like to learn more about you, and do feel free to ask me any question.


and then:
My ex partner was something else.. For the 2 years we start he was so great, making me feel like I am the only girl in the World, but things started changing as the third year towards the end, I thought probably is stress during all of this time, I till I discover that he had a family back in Mexico even with 2 kids. Probably he was making money out of me. I was blind... this make swear never to start any relationship again and remain single, I was deeply hurt. And this also came at the time that my mother died.. it was a trying period for me. I lost my mum to breast cancer, she is my source of inspiration brought me up singly. My father lives in Bahamas with another woman and already have 2 children with the woman, i was the only child of my mother, my father is never part of my growing up, he never feels responsible for me, so with this we do not have the best relationship. With all of this occurrence, you can imagine my condition then.
But is all good now, I am stronger now and ready to take the World.


faked email from Canadian Antifraud Centre:
Hello Removed (BW),
This is to inform you of the latest development, Ms. Laura Brandt contacted the bureau and with further thorough discussion with her, I can certify her clean and my former assertion about her is wrong.
According to her story, she fell into the wrong hand in the country, Nigeria. And she keep silent about the situation and whereby this raise your doubt about her. I have also checked her information against her words and addresses here in Canada and everything corresponds.
Ms. Brandt also requested her name be cleared, I have forward all of the correspondece to the Headquarters for further clarification.
At this time, you do not need to contact us, if there is any change in situation, I will personally contact you.
I wish you good luck in your future endeavours.

Regards,


the mail header:
Received: from emkei.cz ([46.167.245.71]) by mail...... (Kerio Connect 8.2.2)
for .........; Sat, 3 Jan 2015 16:45:23 +0100
Received: by emkei.cz (Postfix, from userid 33) id 56190D558F; Sat, 3 Jan
2015 16:51:12 +0100 (CET)
To: <........>
Subject: 2014-45530
From: Daniel Williams <[email protected]>
X-Priority: 3 (Normal)
Importance: Normal
Errors-To: [email protected]
Reply-To: <[email protected]>
Content-Type: text/html; charset="utf-8"
Message-ID: <[email protected]>
Date: Sat, 3 Jan 2015 16:51:12 +0100
Return-Path: [email protected]
MIME-Version: 1.0

look at the senders mail server ! it's a freemail from Czechia, not from Anitfraud Centre.
CAFC (Canadian Antifraud Centre) confirmed it to be a fake !!


ImageImageImageImage

her "partners"
Sgt Olawale Iyiola ( [email protected] )
Acc Name: Olawale Famoofo.
Address: 9042 Contee road,
City: Laurel,
State: MD,
Zipcode: 20708
Bank Name: Capital One
Acc Number: 1353136719
Routing Number: 255071981.
IBAN: HIBKUS44
Bank Address: Greenbelt Plaza Mall, 6226 Green Belt Road.
City: GreenBelt Zip code: 20770, State: MD
***Noted (BW)

Stephen Kimmel ( [email protected] )
Last edited by Bryon Williams on Wed Jan 07, 2015 1:40 am, edited 3 times in total. Reason: Removed personal information and added quotations.
Advertisement

by Dotti Tue Jan 06, 2015 6:01 pm
Welcome to scamwarners!

Please post some of the emails received, with headers. We do need those both as evidence of scamming and to share the scripts that will likely be used again.

Need to post photos? http://scamwarners.com/forum/viewtopic.php?f=28&t=3219
Are you a victim of a romance scam? Read here for advice and FAQ's.
by JamesIvory Tue Jan 06, 2015 6:15 pm
Dotti wrote:Welcome to scamwarners!

Please post some of the emails received, with headers. We do need those both as evidence of scamming and to share the scripts that will likely be used again.


here's a header
Received: from COL004-OMC3S7.hotmail.com ([65.55.34.145]) by mail......
(Kerio Connect 8.2.2) (using TLSv1.2 with cipher AES256-SHA256 (256 bits))
for .......; Thu, 1 Jan 2015 21:18:38 +0100
Received: from COL130-W40 ([65.55.34.137]) by COL004-OMC3S7.hotmail.com over
TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751); Thu, 1 Jan 2015
12:18:35 -0800
X-TMN: [R+aCGBKE1RFWQlhZjT0OD0WTNIQ9y+p9]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_d899bbee-c4a5-482b-a166-f29985bf5b20_"
From: Laura Brandt <[email protected]>
To: ........
Subject: RE: AW: AW: AW: New Year
Date: Thu, 1 Jan 2015 15:18:35 -0500
Importance: Normal
by JamesIvory Tue Jan 06, 2015 6:27 pm
another banmk acount from "Partner" Sgt Olawale Iyiola:
4307808331
Olawale I Famoofo
9043 Contee road, Apt 301
20708 Laurel, MD

NRTHUS33XXX
Td Bank, N.A.
6000 Atrium Way
08054 Mount Laurel,Nj


and an email:

Hi ......,
How are you doing? I got your email instantly, but believe me, work has been stressful. I just finished the paper process of my transferred to the NSA.

Actually, it's true, I am owning Laura the amount she told you. I have also been working endlessly to refund all of the money back to her and not just half of it. The problem I encountered was my Ex wife taking me to court about our son.

I lost over $14,000 in the case, because I have to pay her alimony and all that. I am still struggling to pay the money. I am aware of Laura condition and intact, I blame myself for her present condition, because if I have the money she needed now, she will not be in that country.

I am using this medium to apologize to you and also Laura, if it will be so kind of you to give me till the 27th of September and I promise to refund all of the money to you or Laura.

......, I have been a good friend of Laura and it hurts me to realize she is passing through difficulties at this time. I also applied for a loan through the Homeland improvement program, I hope I was approved, then I will be able to refund the money in a jiffy.

I hope you do understand my present condition.

I will wait to read from you.


and Header:
Received: from SNT004-OMC3S38.hotmail.com ([65.55.90.177]) by mail.......
(Kerio Connect 8.2.2) (using TLSv1.2 with cipher AES128-SHA256 (128 bits))
for .......; Tue, 26 Aug 2014 13:24:24 +0200
Received: from SNT151-W63 ([65.55.90.136]) by SNT004-OMC3S38.hotmail.com with
Microsoft SMTPSVC(7.5.7601.22701); Tue, 26 Aug 2014 04:24:24 -0700
X-TMN: [pUOgakbvCavXdEOObT0rp7iFvt0y4pS6]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_9442e150-bec8-4e76-aa55-bc348e1972b0_"
From: "Sgt. Olawale Iyiola" <[email protected]>
To: ........
Subject: RE: Laura Brandt
Date: Tue, 26 Aug 2014 11:24:23 +0000
Importance: High


and an emai from "partner" Stephen Kimmel:

Hi ......,
How are you doing? My name is Stephen and I am pretty sure you have heard about me.
Actually, I am going to say a few words about the ongoing process. First of all, everything is going on fine and the only reason we have not yet heard from the Bank Mains is because of the current holiday. I was able to speak with the Deputy director today and he candidly told me everything is stuck in the office till first week in January.
With this development, I can say everything is going on well.
What, I really want to discuss with you is about Laura. Laura need urgent attention. I am willing to help her out, but unfortunately for me, I am not able to do that, because my pay is being domiciled in the USA, I live on the prepaid allowance plan here in Nigeria.

I am not advocating for her, but I can tell you, her situation is worsening and she needs urgent attention.

I have already emailed Sergeant Wale, but I look at the schedule log he's already in the field. You are the next person I can contact at this moment.

Please, do feel free to make any enquiries or ask me any questions.

I will look forward to your email.

STEPHEN KIMMEL.

This electronic mail transmission has been sent out within a secure network. It may contain information that is confidential, Privileged, proprietary, or otherwise legally exempt from disclosure. If you are not the intended recipient, you are hereby notified that you are not authorized to read, print, retain, copy or disseminate this message, any part of it, or any attachments. If you have received this message in error, please delete this message and any attachments from your system without reading the content and also please notify the sender immediately of the inadvertent transmission. There is no intent on the part of the sender to waive any privilege, including the US Consulate NG, that may attach to this communication. Thank you for your cooperation.


Header:
Received: from omr-m10.mx.aol.com ([64.12.143.86]) by mail...... (Kerio
Connect 8.2.2) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256 bits)) for
..........; Wed, 31 Dec 2014 16:45:38 +0100
Received: from mtaomg-aae02.mx.aol.com (mtaomg-aae02.mx.aol.com
[172.27.1.100]) by omr-m10.mx.aol.com (Outbound Mail Relay) with ESMTP id
E9988700000AC for <...............>; Wed, 31 Dec 2014 10:45:36 -0500 (EST)
Received: from core-mnc005a.r1000.mail.aol.com (core-mnc005.r1000.mail.aol.com
[172.29.106.209]) by mtaomg-aae02.mx.aol.com (OMAG/Core Interface) with ESMTP
id ADA4438000082 for <.................>; Wed, 31 Dec 2014 10:45:36 -0500 (EST)
To: <............>
Subject: STEPHEN
X-MB-Message-Source: WebUI
X-MB-Message-Type: User
MIME-Version: 1.0
From: Stephen Kimmel <[email protected]>
Content-Type: multipart/alternative; boundary=
"--------MB_8D1F327F4752E27_101C_20C557_webmail-va090.sysops.aol.com"
X-Mailer: AOL Webmail STANDARD
Received: from 192.96.200.43 by webmail-va090.sysops.aol.com (149.174.109.119)
with HTTP (WebMailUI); Wed, 31 Dec 2014 10:45:36 -0500
Message-ID: <[email protected]>
X-Originating-IP: [192.96.200.43]
Date: Wed, 31 Dec 2014 10:45:36 -0500
x-aol-global-disposition: G
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20140625; t=1420040736;
bh=JxEekVzhhvKJv+CKF3fBTgJhtJ0qmyawLWNUZiKJQQY=;
h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type;
b=gvSYTs6r6FQgvuLKmNF6KvDjUfU2kePH9ylw7TOlqo8OUiARJul0tFhSr9ZtofFUN
w6aEt8+5B97UpSzr0x72kRmIZY7Q9xt9Cx7u1oVgOEpHJ9hBVzI3RwGZwZh8jMCiF1
FXFTQmrgAa+tLWhyrjNMveir90k1qcdA56p7IqIk=
x-aol-sid: 3039ac1b016454a41a205731
Return-Path: [email protected]
by JamesIvory Tue Jan 06, 2015 6:34 pm
She is really lovely and !!! dangerous !!!

I lost about 80k USD
by JamesIvory Tue Jan 06, 2015 6:58 pm
i forgot to mention the phone number "she" tried to contact me: +1 240-278-1125
by Bryon Williams Tue Jan 06, 2015 7:03 pm
Acc Name: Olawale I Famoofo.
Address: 9043 Contee road, Apt 301
City: Laurel, state: MD, Zipcode: 20708
Bank Name: TD BANK
Acc Number: 4307808331
Routing Number: 054001725.
IBAN: NRTHUS33XXX
Bank Address: 14401 Baltimore avenue,
City: Laurel Zip code: 20723, State:MD

Please contacta moferatorstor if you have a question or information about this post.



Please do not tell the scammer he is posted here.


Please remember the fallen. https://www.odmp.org/
by vonpaso xlura Tue Jan 06, 2015 10:30 pm
The phone number is in Laurel, Maryland.

The English is better than that of a lot of scammers, but it shows some telltale errors, and the lad is making up some phrases that don't make sense. Whether he is in Nigeria and has an accomplice in Maryland, or is a Nigerian in Maryland, the writing contains some errors consistent with being West African.

One of the IP addresses belongs to Leaseweb, based in Manassas, which is not far from Maryland. The other headers don't tell us much, as Microsoft hides the original IP address.

... ni los estafadores heredarĂ¡n el reino de Dios. 1 Cor. 6:10
by JamesIvory Wed Jan 07, 2015 7:32 am
Here the IP's the scammer used when connected to my chat server:

46.19.137.116
68.48.132.44
184.75.214.163
184.75.221.3
199.21.149.74
199.21.149.49
198.144.158.13
199.19.95.188 (most used)
76.111.28.180
by HillBilly Wed Jan 07, 2015 9:17 am
IP: 46.19.137.116
Decimal: 773032308
Hostname: s02-zh-ch.regika.com
ISP: Private Layer Inc
Organization: Private Layer Inc
Services: Confirmed proxy server

IP: 68.48.132.44
Decimal: 1144030252
Hostname: c-68-48-132-44.hsd1.md.comcast.net
ISP: Comcast Cable
Organization: Comcast Cable
Services: None detected
Type: Broadband
Assignment: Dynamic IP
Blacklist:
Geolocation Information
Country: United States us flag
State/Region: Maryland
City: Hyattsville


IP: 184.75.214.163
Decimal: 3091977891
Hostname: 184-75-214-163.amanah.com
ISP: Amanah Tech
Organization: Amanah Tech
Services: None detected
Type: Corporate
Assignment: Static IP
Blacklist:
Geolocation Information
Country: Canada ca flag
State/Region: Ontario
City: Toronto

IP: 184.75.221.3
Decimal: 3091979523
Hostname: 184-75-221-3.amanah.com
ISP: Amanah Tech
Organization: Amanah Tech
Services: Confirmed proxy server

IP: 199.21.149.74 and 199.21.149.49
Decimal: 3340080458
Hostname: 199.21.149.74
ISP: Yesup Ecommerce Solutions
Organization: Yesup Ecommerce Solutions
Services: None detected
Type: Corporate
Assignment: Static IP
Blacklist:
Geolocation Information
Country: Canada ca flag
State/Region: Ontario
City: North York


IP: 198.144.158.13
Decimal: 3331366413
Hostname: 198.144.158.13
ISP: Yesup Ecommerce Solutions
Organization: Yesup Ecommerce Solutions
Services: None detected
Type: Corporate
Assignment: Static IP
Blacklist:
Geolocation Information
Country: Canada ca flag
State/Region: Ontario
City: North York


IP: 199.19.95.188
Decimal: 3339935676
Hostname: 199.19.95.188
ISP: Yesup Ecommerce Solutions
Organization: Yesup Ecommerce Solutions
Services: Recently reported forum spam source. (1)
Type: Corporate
Assignment: Static IP
Blacklist:
Geolocation Information
Country: Canada ca flag
State/Region: Ontario
City: Toronto


IP: 76.111.28.180
Decimal: 1282350260
Hostname: c-76-111-28-180.hsd1.dc.comcast.net
ISP: Comcast Cable
Organization: Comcast Cable
Services: None detected
Type: Broadband
Assignment: Dynamic IP
Blacklist:
Geolocation Information
Country: United States us flag
State/Region: Maryland
City: Odenton

by JamesIvory Thu Jan 08, 2015 6:31 pm
vonpaso xlura wrote:The phone number is in Laurel, Maryland.

The English is better than that of a lot of scammers, but it shows some telltale errors, and the lad is making up some phrases that don't make sense. Whether he is in Nigeria and has an accomplice in Maryland, or is a Nigerian in Maryland, the writing contains some errors consistent with being West African.

One of the IP addresses belongs to Leaseweb, based in Manassas, which is not far from Maryland. The other headers don't tell us much, as Microsoft hides the original IP address.


Unfortunately my native language is not english, that's why i didn't notice the errors mentioned.

Who is online

Users browsing this forum: ClaudeBot and 3 guests