Mohamed Abdullah a Libyan nationale

[ScamInformation]

Scam targeting realtors

From Abdullah Mohammed Tue Nov 1 09:42:51 2011
X-Apparently-To: via 98.138.85.200; Tue, 01 Nov 2011 09:42:53 -0700
Return-Path: <[email protected]>
Received-SPF: pass (domain of gmail.com designates 209.85.161.67 as permitted sender)
eWFuIG5hdGlvbmFsZSwgYW4gZW5naW5lZXIgYW5kIHF1YWxpZmllZCBnZW9s
b2dpc3QuIEkgb3duIFJvY2tldCBPaWwgU2VydmljZXMsIGEgc3VwcG9ydCBj
b21wYW55IHRvIFNoZWxsIFBldHJvbGV1bSBEZXYgQ29tcGFueS4gTXkgY29t
cGFueSBkb2VzIG9pbCBwcm9zcGVjdGluZywgb2lsIHNpdGUgcmVhZGluZyBh
bmQgc2hhbGxvdyBleHBsb3JhdGlvbiBmb3Igc2hlbGwuaSABMAEBAQE-
X-YMailISG: JcI3t80WLDszHhxPcIiXQICrgsJllj6fup10UqEin15Prp8i
MRD63r5YWhnFUqCPNCgaBaC4g_nqhKet0QvZjBosQ5iwt70Y8SNVe2U.YFQF
5VEyPaIhm8kzWelMK5MuUXBXkQiGCyeTzHbVYJNZtdPcSg1T9I5vFhupFXIk
FAqh2q3tv9B6tOu3tGi0_KwqhEuIa2yofgl.mblusvR3DM6MgD8a_RBT8_o0
pUdgecpJ61RFZQZZKuCAETCfXemH14osdfOECZgJwQmMkfKUBlNTWjkoTxJ1
5JW4h8ky6ZkVyLbUqzdNaTuYpLFo0vac77foJgpEm7voipIdXWY9ET4TrUKI
jpjTJuxWNtj1K4dFfuW5sIWSZryPXAhCP6DK3VYlnQEt3DnQG4zLiwRhZm96
wFRuwMr59fzfotsMbAZ3YutSMKnxxY9uhGtIxFK2A6MK1ULF69y2hiQa1RPT
i_HEFT3zA_n2cAbHYf6hovudxs7SvmEbtN11GYWHFTY159e3GeKUGjo7WmvW
4XBg_XgyV7OJwzM0sxfxoPWRJklxvvCzF95KcnEBSzbs5duhaOjeE2YxRRYm
BOmNZkZFosl0hvPY3gOQEDLVc6ZAwzlxOCWagtxHlcNXldrFLIRPOGgSMZRW
013dgr3DlIjz6ZVDszMxz0UmDD__5QetosZCyPyB8mxTj8gc.rjR7Lf8BJXr
GV6ZuYdDja78VEXIbXHS8wvJ7YxTmvKSvaWQo_soNsx34G2I10v4mF8x8qjk
VOXO7IMTyJlBIb7x5qFn4gQin1a.yFf9aNz3s78tugg1IcE6kwnLpJEf71cb
YhhawCTxKCnslWyFJwbcFiKZ_wfIiteY8AEQ8SWzmVx1Bc07xXoD2mRGjYQt
7oJm3v89xsZMnex_lAgtgvROgB2I7cxJV63KJrKBifd9XsQgMogypf20BH5T
7Nf8CyGXOFbMKhkHp1mgCzbTr5I3APuMal99lG.8LBJoRh5ZEdeXaWLXZlbl
N3eCO6mQ0mkZwCfbeFJVcJ5kJ65eg3rdK9Qkg7wzkeodYzIgzVu9WIbWh5IM
_yEnLUmCDDCmsSS7jBbRrehqJ_Lxc9CfiJzD4RCZfbG_QkTkser25GdPMu5I
qMPgakNYPyxiTow85lA8CmMB1mUTEeJrjwu5iTfaRnzR6dtqDufJv2pHceUd
kisfw8c2WfoTdznchCk-
X-Originating-IP: [209.85.161.67]
Authentication-Results: mta183.mail.ac4.yahoo.com from=gmail.com; domainkeys=neutral (no sig); from=gmail.com; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO mail-fx0-f67.google.com) (209.85.161.67)
by mta183.mail.ac4.yahoo.com with SMTP; Tue, 01 Nov 2011 09:42:52 -0700
Received: by faap15 with SMTP id p15so2059294faa.6
for; Tue, 01 Nov 2011 09:42:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=0QO1mqsXincBEmjJ7ZLb9fs7TGA1z9u2fzArbmwyFwg=;
b=fBOjtqopNCHoeZTc2KMtpzB1YtkL88FkdkbxRzEObOg88dD8JCy4yO6sPu9MQtv+w+
bziZnJfpxj+B2/kAPu760NIGk9KN/dbuiNpiUDg4mNmr+ambWv3CoLUeXxjzufnHIS+2
AgGS3WXy52aI3pUJx6JTQyN4R4V7ZiRm8E7rE=
Bcc:
MIME-Version: 1.0
Received: by 10.223.63.206 with SMTP id c14mr1851464fai.3.1320165771965; Tue,
01 Nov 2011 09:42:51 -0700 (PDT)
Received: by 10.223.98.201 with HTTP; Tue, 1 Nov 2011 09:42:51 -0700 (PDT)
Date: Tue, 1 Nov 2011 17:42:51 +0100
Message-ID: <CABdcbdEb1PBM3XQEZYYce=q8B32UTGqU32w9dgrJrdm=hYQPCQ@mail.gmail.com>

Subject: THIS IS URGENT DEAR REALTOR
From: Abdullah Mohammed <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alte

Abdullah Mohammed <[email protected]>;

Hello
My name is Mohamed Abdullah a Libyan nationale, an engineer and qualified geologist. I own Rocket Oil Services, a support company to Shell Petroleum Dev Company. My company does oil prospecting, oil site reading and shallow exploration for shell.i have had the opportunity to do oil deals with a few sister company explorers, and a few indigenous oil rig engineers. Together, we engage in oil deals which involve bunkerring and quick syphoning of crude oil through specially rented barges . Proceeds from the oil sales are paid for in Dollars and eventually wired through the Libyan banks to banks in England. Payments are done this way due to the hard-line government .

By way of rigorous transfer of funds, i lose so much of my share of the proceeds from sales.Already, proceeds made from sales amount to $80million.
Owing to the political problem in Libya,I am currently in England And due to restrictions in England, i cannot invest these monies here because of my imigration status As such, i need a patner whom i can work with for the movement and investment of these monies. i do not intend to do money launderring with you. All i want is someone i can trust as a patner, whose company we can use in moving every proceed from oil sales, and whose company name we are going to use in investing the money into more lucrative businesses eg. Real estate and beverage ranges, and possibly the building of a mini refinery which would help the crude oil business and also be a jackpot by way of refining all the crude from smaller oil companies from the americas and parts of europe.For your participation, You shall get 20% of the $80million before the investment proper. And if you wish to be part of the lucrative investments mentioned above, we shall talk better terms. Please do let me know your position on this proposal so that we can
proceed. Please treat this with mutual understanding.
Kind regards,

Mohamed Abdullah
Tel:447045709713
E-MAIL:[email protected]

Thanks ScamInformation for the post. It will certainly alert others.
Isn't the phone number interesting? In Sept 2010 it was linked to ATLANTIC Oil & Gas UK LTD, which apparently was a newly established Oil & Gas company in the UK.
How can two companies have the same phone number I wonder?
Thankyou for posting the header because it's most interesting. The third received line looks suspect and could be forged in my opinion. So the lower part of the header should be viewed with suspicion.

Hi Jolly Roger,

The email was sent through an Gmail account, so tracing the IP will not show anything usable.

The phone number is a 44 70 number which is a redirect number used primarily by scammers.

[ScamInformation]

What the scammer responded with.


From Mohammed Abdullah Thu Nov 3 17:19:28 2011
X-Apparently-To: via 98.138.226.64; Thu, 03 Nov 2011 10:19:32 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of consultant.com does not designate permitted sender hosts)
Zm9yIHlvdXIgbWFpbCBhbmQgdGhlIGludHJlc3Qgc2hvd24gaW4gdGhpcyB0
cmFuc2FjdGlvbi4KIAoKIAoJSSB3YW50IHRvIGluZm9ybSB5b3UgdGhhdCB0
aGVyZSBpcyBhYnNvbHV0ZWx5IG5vdGhpbmcgaWxsZWdhbCBhYm91dCB0aGlz
IGh0dHA6Ly90cmFuc2FjdGlvbi5pZiB5b3UgIG11c3QgaGF2aW5nIGJlZW4g
Zm9sbG93aW5nIHRoZSBldmVudHMgaW4gTGlieWEsaXQgaXMgATABAQEB
X-YMailISG: esvAWLsWLDtKYoCcPufEXitDyxQAmUEREWUUNHqDhcHnb6wx
uyOQB7ErdVMNq5o7UvHLmQOmNXuuesvub_dHN_bO0XU0YTrsTnCixQpnWhUm
yq5o4zmX.ZnTbDuF6PmUzV2PhtdKDsdJyRBFinC6V5FrSMzUpUTKf4nSVo1p
RQ_QnYKSWq.IRs._Wu_u20mxVpEjCXF4GKdkcBooHScbONn9vwkjakFKI3g0
JIqVMW7djfGqwTLVL66qUTsdZd1QRWkcRzSYrfZddzOovVTmlCsVW1rWDOaU
vq_bebdkZzMazEXl5LV.0kNOhAkFV4BxhtdbLSUcM7lMctVU5sw0sKVzVIq5
of81vfFDP3CAmW.0NgQZb1e6vk.Q.kkHzHlJXgfoBTqGfY5g9nt_u32LcJ.b
TCDs_m25gIN8lBXUN7zezT6oJLIl4FREjtzwqxsb93uq1.Cs5NLFiNBiRWk0
7nYRxVmC3rYzfpfl0yLfbQNueX_Ocz6aS8qEmlIaeUpb9iuYR5mAQlqIYDlu
Slem65mmHAF57g774fFS6Ncgi38Dy_kNOZUpn3VWnr7zUXWc3a4bzximXOc3
EZAR_TjGNmxpuhYP.5WkD99vKt0sS.CFQv78NGqyMqmjBhK0TW1zGOvRukyY
rKYByIwWN92cSyqXADFAOr9EfVquLjksmlfUNLrkvYWVt.5ddQZF.qNbLihL
xqW9TK8_7OdB8oMTYWr5EqgdLfeJ10e1vOKfYEwKTitVRQoTBzVnR_BJcNjd
ZgTDkmeW6vK7O9A1tjE9DeqTg9QnngYbDKT_0lZfsaYpSuBJ58lWUAQUPr6A
fQWcT7gyKYsKW4UpRXzBaDxPlTO7XRfQKnHJAJQDw_ArzQQLvT5F.iue7cTC
AC9VYyaGts44FWlnd1dUuzzcHWP2VVObo7TB53zBl.C5tT5hVyu125PUgjCR
d.ieIl2sVSTykze2cjwV31JoM4qlWfzhyOtj2yXjs3CsMlh3tW8pek.3rLam
D5nHOaK6V5kUv7U2FMeY063CY78JFi0.QB00AQ3osZgu1V0SWb094A4ur5w4
hylQRAuWm01BNltdYyRUYHtQdKza.WzXKfkOzGNMjWOcprfAhX8c22rki2Iz
9b5UX.Mguz6ik84iE_YufvuzNFLsy4l6EwOABVSQEcJxXhKlAZlspiS8ZYmF
ooo6H4n_WQf7uT4rMmE2qXFgM1bFMGAykk1GfwRFmhS8872qsjs44SqjyYh2
3y_H
X-Originating-IP: [74.208.5.67]
Authentication-Results: mta1027.mail.mud.yahoo.com from=consultant.com; domainkeys=neutral (no sig); from=consultant.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO mailout-us.mail.com) (74.208.5.67)
by mta1027.mail.mud.yahoo.com with SMTP; Thu, 03 Nov 2011 10:19:32 -0700
Received: (qmail 10620 invoked by uid 0); 3 Nov 2011 17:19:30 -0000
Received: from 41.71.174.133 by rms-us003.v300.gmx.net with HTTP
Content-Type: multipart/alternative;
boundary="========GMXBoundary277401320340769708009"
Date: Thu, 03 Nov 2011 13:19:28 -0400
From: "Mohammed Abdullah" <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Subject: Dear potential victim (URGENT)
To:
X-Authenticated: #80165399
X-Flags: 0001
X-Mailer: GMX.com Web Mailer
x-registered: 0
X-GMX-UID: EvqAf2hEhTXpgjJfs2NrZ51Sa2FkZlV3
Content-Length: 17002

Header Analysis Quick Report
Originating IP: 41.71.174.133
Originating ISP: Visafone Communications Limited
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline

He is obviously NOT in Libya.

Dear xxxxxx,

Thanks for your mail and the intrest shown in this transaction.

I want to inform you that there is absolutely nothing illegal about this transaction.if you must having been following the events in Libya,it is has been lately involve in political problems and some of us who are from Sirte,the home town of Mummmar Gaddafi are being persecuted because of the favor we enjoyed during his rule.

As of now,i and my fellow oil workers has $80millon Dollars in Barclays Bank London and we need a reputable realtor to help us invest in real estate in us,hence we contacted you.

And due to restrictions in England, i cannot invest these monies here because of my imigration status

Send me the followings:

1) Your Direct telephone

2)contact address in Us

3)Your personal identity(scanned drivers license or passport)

These are to enable my attorney to start securing all necessary documents in your favor so as to start effecting the transfer of the said amount to your nominated account.

You shall get 20% of the $80million before the investment proper.

Attached are my international passport and company's identity card.

Finally, this transaction is sensitive, I will like you to keep it confidential.

Thanks

Mohammed Abdullah

And contained within the header is that pesky @consultant.com address. Which has been used in many previous scam attempts.