DR ETHAN MAKREEL

Hi,
I have received this email and I have had only scammers before so right now I am very suspicious for everything!

"Hello

My name is Dr Ethan Makreel and my Wife's name is Florence, we will
like to inform you that we are British family working and living here
in United Kingdom.

My Friend Elbieta told me about you so we decided to contact you

I am a Medical Doctor and work as a Private consultant and my Clients
are usually Multinational companies and also Elite Citizens while my
Wife
Works as an Assistant manager of Unilever Company here in London UK. We have a
Lovely Son Val who is aged two and we have been taking care of him
alone until my Friend Introduced us to aupair programme and we decided to
give it a trial .
We areSimply in search of a honest and caring Au pair to help us take good
Care of our Lovely Son each time we are not at home.

We are looking for an Au pair who is willing to stay with us for a
minimum of 2 to 6 Months or more if you so wish. My Friend gave me a Link
to your profile and we have looked at it and i thought it wise to
contact you, to
discuss the possibilities of having you as our Au pair and as well as
our family member in the spirit of cultural exchange. We’re a
laid-back and happy family and my Wife is a caring Woman which
Makes us a lovely and fun loving family.

We live at 9 Grasmere Road Streatham London England SW16 2DA

This effectively means that we mainly hang out in the garden at home
Or sometimes go out on day trips to just about anywhere; beaches,
Country parks, adventure parks, activity farms, seaside towns, forest
Walks… you name it.we also like to celebrate our Summer in our beach
house so if you would stay for the summer then you can have good fun
with us
Val is a very easy going, always happy and as
such you can get along with him easily, he is my lovely Son and i love and
cherish him so much as a father that is why I'm trying my best to make
him feel comfortable in life.

This is our first time of hiring an Au pair so we would like to know
when you can be available . Please e mail us if you would like to
discuss the position with us.

Looking forward to hear from you soon.

Best regards.
Dr Ethan"

Thank you for your response.

Welcome to Scamwarners, LC94!
Yes, this is a scam. The English used leaves no doubt. Please post up the email address that the scammer "DR ETHAN MAKREEL" is using. If you can post the headers we can probably see where the message was actually sent from. Instructions on finding the headers are in my sig below.

Thank you!!! This is his email: [email protected]
and the headers: (I copy all of this because I don't know what do you want exactly ^^)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.220.153.84 as permitted sender) client-ip=10.220.153.84;
Authentication-Results: mr.google.com; spf=pass (google.com: domain of [email protected] designates 10.220.153.84 as permitted sender) [email protected]; dkim=pass [email protected]
Received: from mr.google.com ([10.220.153.84])
by 10.220.153.84 with SMTP id j20mr2129928vcw.3.1334382806239 (num_hops = 1);
Fri, 13 Apr 2012 22:53:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=ns+8UBEVSEZnEaM4IfvaMeu6dT4ApjHhf3Ia+CkGb1k=;
b=j2zZSBoOp4ZDymoik8N/Il8P2jMogAnpTgdvs283abXwgaom5ENzIE0i9Wnf/LwAv1
PEmq8y82sZHVQ4dAvtJ20Mv2pb78pubGsuFpKLrIkvLpxPfpEnd8pJ3wKyMgqREKjdsZ
9cUVYinh6XeM1FwtDjBLSpQOeaai156jVjCQHQz1lIlFRyq6Le4rtabtVCWLqR0tqnCN
mwYhSYwxMTOQRDvWo7LX6910cMe2qcTJUm1ZsPY86+4sDhbHKIsxy9X3Nh6hsoMMzgQp
27mR31dYpAoQYXpx+gWi+S7KI/Tt1aMO8d1+z+36Ub3VsbWHYuEMxIbzQvwqoDK4852p
D9vA==
MIME-Version: 1.0
Received: by 10.220.153.84 with SMTP id j20mr2129928vcw.3.1334382806222; Fri,
13 Apr 2012 22:53:26 -0700 (PDT)
Received: by 10.220.108.144 with HTTP; Fri, 13 Apr 2012 22:53:26 -0700 (PDT)
Date: Sat, 14 Apr 2012 06:53:26 +0100
Message-ID: <CACQmAdq250i00ciF=nUbGoquuvPxrqNxfaz6AZSSFTstak6chg@mail.gmail.com>
Subject: Pls Get back to us soon
From: Ethan Makreel <[email protected]>

With that, do you can find where he comes from?
Thanks

Unfortunately no some email providers strip the originating IP. I can tell you this same scam email was posted on our site a short while back here viewtopic.php?f=42&t=35835&p=91916

Glad you avoided the scam!

I hope I am posting this correctly - I have identified this as a scam, but wanted to draw attention to it so others that might receive this letter will know it is a scam. This is actually something new I haven't seen in previous scammer emails - I laughed so hard I cried, but seriously, I don't want anyone fooled by this nonsense. Thanks, Destiny


FBI headquarters in Washington, d.c.

Hide Details
FROM:
mikehope

Message flagged Thursday, April 12, 2012 8:53 AM
This is the (f.b.i)
FBI headquarters in Washington, d.c.
Federal bureau of investigation
J. Edgar Hoover building
935 Pennsylvania avenue,
NW Washington, d.c. 20535-0001
Federal bureau of investigation (FBI)

Attention to you, this is the final warning you are going to receive from me do you get me????

I hope your understand how many times this message has been sent to you?.

We have warned you so many times and you have decided to ignore our e-mails or because you believe we have not been instructed to get you arrested, and today if you fail to respond back to us with the payment then, we would first send a letter to the mayor of the city where you reside and direct them to close your bank account until you have been jailed and all your properties will be confiscated by the FBI. We would also send a letter to the company/agency that you are working for so that they could get you fired until we are through with our investigations because a suspect is not suppose to be working for the government or any private organization.

Your id which we have in our database been sent to all the crimes agencies in America for them to inset you in their website as an internet fraudsters and to warn people from having any deals with you. This would have been solved all this while if you had gotten the certificate signed, endorsed and stamped as you where instructed in the e-mail below. this is the federal bureau of investigation (FBI) am writing in response to the e-mail you sent to us and am using this medium to inform you that there is no more time left to waste because you have been given from the 3rd of January. As stated earlier to have the document endorsed, signed and stamped without failure and you must adhere to this directives to avoid you blaming yourself at last when we must have arrested and jailed you for life and all your properties confiscated.

You failed to comply with our directives and that was the reason why we didn't hear from you on the 3rd as our director has already been notified about you get the process completed yesterday and right now the warrant of arrest has been signed against you and it will be carried out in the next 48hours as strictly signed by the FBI director. We have investigated and found out that you didn't have any idea when the fraudulent deal was committed with your information's/identity and right now if you id is placed on our website as a wanted person, i believe you know that it will be a shame to you and your entire family because after then it will be announce in all the local channels that you are wanted by the FBI.

As a good Christian and a honest man, I decided to see how i could be of help to you because i would not be happy to see you end up in jail and all your properties confiscated all because your information's was used to carry out a fraudulent transactions, i called the efcc and they directed me to a private attorney who could help you get the process done and he stated that he will endorse, sign and stamp the document at the sum of $65.00 usd only and i believe this process is cheaper for you. You need to do everything possible within today and tomorrow to get this process done because our director has called to inform me that the warrant of arrest has been signed against you and once it has been approved, then the arrest will be carried out, and from our investigations we learn that you were the person that forwarded your identity to one impostor/fraudsters in Benin Republic last year when he had a deal with you about the transfer of some illegal funds into your bank account which is valued at the sum of large amount of money.

I pleaded on your behalf so that this agency could give you the 2012/12/03 being Monday so that you could get this process done because i learn that you were sent several e-mail without getting a response from you, please bear it in mind that this is the only way that i can be able to help you at this moment or you would have to face the law and its consequences once it has befall on you. You would make the payment through western union money transfer with the below details.

Receiver name ==== Igbanu Chikeluo
Country======= Benin Republic
City====== Cotonou
Text question==== WHEN
Text answer===== today
Amount=====$65 usd
Senders name======


Send the payment details to me which are senders name and address, mtcn number, text question and answer used and the amount sent. Make sure that you didn't hesitate making the payment down to the agency by today so that they could have the certificate endorsed, signed and stamped immediately without any further delay. After all this process has been carried out, then we would have to proceed to the bank for the transfer of your compensation funds which is valued at the sum of $1.500,000.00 usd which was suppose to have been transferred to you all this while.


Note/ all the crimes agencies have been contacted on this regards and we shall trace and arrest you if you disregard this instructions. You are given a grace today to make the payment for the document after which your failure to do that will attract a maximum arrest and finally you will be appearing in court for act of terrorism, money laundering and drug trafficking charges, so be warned not to try any thing funny because you are been watched.


Thanks as i wait for your response

Respectively
Agent Mike hope.
E-mail//[email protected]
Federal bureau of investigation (FBI)

Here are the headers from the FBI threat email:


From mikehope Thu Apr 12 06:53:26 2012
X-Apparently-To: [email protected] via 98.139.211.186; Thu, 12 Apr 2012 06:53:32 -0700
Return-Path: <[email protected]>
X-YahooFilteredBulk: 106.10.149.119
Received-SPF: none (domain of yahoo.com.ph does not designate permitted sender hosts)
X-YMailISG: 9Y4kN2YWLDu4.jRQXvIrY9DayLENiTm4KXrgmpIog1SSElXw
R.eYqS7GZPD4jS7fSym.B0fmO3f87iivPqhfpR2nKv4iTC8rVIO0E.8opsIm
D.T8bLDVoNbUDActi6yOvUaJDCKvCDGhy0QX_lL.8PUwWtuzKBlVcjiDzW56
ey8XmzuqhDSCr.DnA4NuT5VaZJoKpyT8dSy3uKotNEDOiRGr0bESkK5IxuqK
yPrMQ2Ut08IgmpLqLuzjImwL7lvEN.UMDnA_wd5ZzejI3hu2InBx7UgJrpMV
ba1Tyivju4f4vL6Fqmu2xM.9088dxu5H59I1wUHpskC82cU_Bt_mwR3mppVB
X02AfaQB6MDMZ0_wGJKtAW1P8q7N49oC49JKr35w4I.mOyiiT8fPBCRDnH4a
du3R5lO9vWSY9iBS1ztj3yq9Vsi6.8ZUVZfAiWkIinkpUQ7WvTgVIMrhlzEm
s4fu2eQM4uEcXXPWye2kCqmasZFF_Z5nrFUZaZs3sO5qDkUIkPAQp3PEQyrW
cmiveP2bcj5zaI7ZsMGY2aqi8jMsc8T4bjtQZGAXmMDub12nyswfscNbZIjW
XaG39jlkAvKPPYp7CHBStUJZ8mpziHp5EvTbIPLzzSbA__LTrMKPN2yhaZck
MQ_R3xSoGje02CAhTzMYlc0OZZEZyC2Ol0s8w0pFUFCfxsZO0X0Fd8WauENd
nl85ad.bLaS8Txdwi5NtNQlGA1s.Gkk5ImFHFPmK8n_T7wTiVG_.d0OYRzab
fBUD12Mxh5j4x_HSvi6Pbqf2Ls7rR7BpKkYVw_z3aQm5Gcff8xklYCnMXvpK
5ELldCccNQ_Bof8sQVVutk62fnvV5q4XdlpW5mFbK.Kq27WNfaoGQ22Upctl
APdFzvftJBYMr3T1KBfJhBcFhDliK4_GDwOB3hE.G6gd1CS8yY3BMZhMAJLH
I6BfK3Qeh6kIjVpTRJQGLano1h1eBw_eD.phd0QsHafS7cvM.UWlrv5HE.mD
bWuj2e3ixyM0vJ2qKMw3ihsqBHRaLYDvAfl00CvBh1dhpLsn20GTHaRURijg
bSxgEL0uD7GEu8KMWcmXNT0IvB0rnvnvpzjQbbFCXMs9E2iADYo2uFZLsng-
X-Originating-IP: [106.10.149.119]
Authentication-Results: mta1017.mail.gq1.yahoo.com from=yahoo.com.ph; domainkeys=pass (ok); from=yahoo.com.ph; dkim=pass (ok)
Received: from 127.0.0.1 (HELO nm19-vm8.bullet.mail.sg3.yahoo.com) (106.10.149.119)
by mta1017.mail.gq1.yahoo.com with SMTP; Thu, 12 Apr 2012 06:53:32 -0700
Received: from [106.10.166.114] by nm19.bullet.mail.sg3.yahoo.com with NNFMP; 12 Apr 2012 13:53:27 -0000
Received: from [106.10.151.186] by tm3.bullet.mail.sg3.yahoo.com with NNFMP; 12 Apr 2012 13:53:27 -0000
Received: from [127.0.0.1] by omp1012.mail.sg3.yahoo.com with NNFMP; 12 Apr 2012 13:53:27 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 76913 invoked by uid 60001); 12 Apr 2012 13:53:27 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1334238807; bh=mFLN/Gyhln5gd4JFRKKa4nM8HYGFJB3q1mlO96qFfUI=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=As8ujYx+tPWWDBgZcndneHJrvRazn/37Cio7KCfO84EKQuXyNMcLS1cGH504mV1JGvj/FZMpMjcqTvTmxJfP/uY9nbbz5VPFZG8Aww1uPy200jShsdWjglxrKLLAql9W/cU1BTHDvpRmJ7DShTzO5ESN03ShCeBosCJmMq2KIzA=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=zkUtLFsRc5YQ6qbYLUAYhJ+BHHdFrgpJYXFI+BriY80jWLaANpJhB/S7p/QnXu+DziiF1HBXg5yfDN24RYgd/Hc6KWt/REYlCgNmcCzKzBYsDrehtNselDbq9b3x03pnWdTw/YnKSy4T3kYCCOBYdEcH1Nl2AU65vQy6ecRIlOM=;
X-YMail-OSG: txQ2R2UVM1nGCsu6ZUpxiyXTnLLqfAWfWtd1xEr_M7JQIqU
VPeTYHVz8UUjg_egLydXByMJ3oe05UU5sH9r5LtvuX1Vv04QBy5fVcUkAhdX
UNRHYAqojznc5KCu5vOlakJqesKxAUM4rJx_KDnPRRPQm1ZDbhfVsid5vw62
65jYwh2KPwoPJL58FnbEaLJWo8oI_Lhn099vdArJGj4ecWAp86OU4KUs1Toh
WF76E5jFQAGJM_IDWt2hq_zrbIgNpvl1Las3AyzEXcTg5GumaAASfOg5NIsO
8eCcdX_h83Tt7zgDzlg81dQ4I1TgmU2o9vQjgkJEm6dS_BUPjux6YBoDVbvB
QCjousvhnqc24pHdeN39cTDptEas0O94GiHVou4dYmnsjQRkwGVb26UU-
Received: from [41.138.89.39] by web190002.mail.sg3.yahoo.com via HTTP; Thu, 12 Apr 2012 21:53:26 SGT
X-Mailer: YahooMailClassic/15.0.5 YahooMailWebService/0.8.117.340979
Message-ID: <[email protected]>
Date: Thu, 12 Apr 2012 21:53:26 +0800 (SGT)
From: mikehope <[email protected]>
Reply-To: [email protected]
Subject: FBI headquarters in Washington, d.c.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1175058318-760189430-1334238806=:55809"
Content-Length: 12031

Welcome to Scamwarners, MoonGoddess105!
Your threating email from the "FBI" was sent from Benin...

Header Analysis Quick Report<br>Originating IP: 41.138.89.39<br>Originating ISP: Etisalat Benin Sa<br> City: n/a<br>Country of Origin: Benin<br>* For a complete report on this email header goto ipTRACKERonline