by mdgposter
Mon Oct 08, 2012 5:39 am
Hello folks,
I have received this 419 scam from BENSON GOMMA - from [email protected] , reply to [email protected] . I did a header analysis for the email at IPTrackeronline of the email and here is the information it gave me: IP Address - 80.87.92.59 - Provider - One Touch Gprs Network - City - Accra - Country - Ghana - Latitude 5.55 - Longitude -0.2167
---
end of information
---
---
header
---
Delivered-To: ---@---
Received: by 10.52.36.78 with SMTP id o14csp13233vdj;
Wed, 21 Mar 2012 11:41:28 -0700 (PDT)
Received: by 10.216.131.98 with SMTP id l76mr2885909wei.62.1332355287577;
Wed, 21 Mar 2012 11:41:27 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm7-vm0.bullet.mail.ird.yahoo.com
(nm7-vm0.bullet.mail.ird.yahoo.com. [77.238.189.222])
by mx.google.com with SMTP id y19si2719051weq.65.2012.03.21.11.41.26;
Wed, 21 Mar 2012 11:41:27 -0700 (PDT)
Received-SPF: neutral (google.com: 77.238.189.222 is neither permitted
nor denied by best guess record for domain of [email protected])
client-ip=77.238.189.222;
Authentication-Results: mx.google.com; spf=neutral (google.com:
77.238.189.222 is neither permitted nor denied by best guess record
for domain of [email protected]) [email protected];
dkim=pass (test mode) [email protected]
Received: from [77.238.189.48] by nm7.bullet.mail.ird.yahoo.com with
NNFMP; 21 Mar 2012 18:41:26 -0000
Received: from [212.82.108.250] by tm1.bullet.mail.ird.yahoo.com with
NNFMP; 21 Mar 2012 18:41:26 -0000
Received: from [127.0.0.1] by omp1015.mail.ird.yahoo.com with NNFMP;
21 Mar 2012 18:41:26 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 39197 invoked by uid 60001); 21 Mar 2012 18:41:26 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk;
s=s1024; t=1332355286;
bh=da5Uh9VYlLmL1XbEHmraq3lsVwaffo7ExHN0O7Yw9t0=;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=mzzkykVb0FzJcfZ/wUoOhHyXj7DzBlozemfCaneU891yOW/v/UPGj5KY3W7AJCCYSDowg7x6DYQy5yUBV2kNWyldWapHJLlqqiWb5lK8Q37I1PDZK9fdrIdBc85aiGUwmqWXzcLIGco0pirLVEowp2tvrgdpFZYgHf4Zvuhb5Qc=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.dk;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=mKeRnFMWoMi2F39FPuHFFqs5YRnA6CPoJ8jUMKixevnI37pheyDgjP4+Tbcb5znICxJRrfQemelQP6LtwyHcNP5//vytDcXeD4HhjDsjsqbhenuNaSuahvM884h69ghPJp3jnwP2iLX7bFQSB9PPYO05wfA1WhzmjFtdUrXabJQ=;
X-YMail-OSG: 5WeJ044VM1kNYmGhzXYGQqs0LvW9PWK4WlxPU_F_ufHVdtk
wxNWhYIcxo3bTtS7AwgujeNqX1wg2awmZP0wBHMxk8IpbbnNMDCSdRD0g9MJ
z.a.ZlHeafjMQGVbMbf2eE44bVPvnXLDVGq2x2G0AkPmBMae1pxP085FAAjG
NSRMV5iWAdKIMYrrDSa4W0Bkrhryf_FPWwtwOHUqGyvPcBuKaqkgEhEBw2ry
ya7T6o9.h2Z5aXLsYo9WGa9p23Gn0uVX9nISQsToYXvYTRyj3dHDg3XSJQR8
zx7KtBafHTrQVITonb2aejgqw0gxhaYqFq.AUkof1791sbP_Bmxb5JpG2GVO
Rvb.dFW12kfi5c8bGq5jZ_1m_g5YIiS1O.88zmmLyRKyOu.aW2sImpPp0bab
XwkOaG2jr.j31nBs7_D7ttkfR53rlN_yamBrD88z2wS82KOEMZdNtAwi3CzF
rGZDA
Received: from [80.87.92.59] by web171405.mail.ir2.yahoo.com via HTTP;
Wed, 21 Mar 2012 18:41:26 GMT
X-Mailer: YahooMailClassic/15.0.5 YahooMailWebService/0.8.117.340979
Message-ID: <[email protected]>
Date: Wed, 21 Mar 2012 18:41:26 +0000 (GMT)
From: WESTERN UNION MONEY TRANSFER <[email protected]>
Reply-To: [email protected]
Subject: WESTERN UNION MONEY TRANSFER LOME TOGO AFRICA
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="-1236089829-1988720646-1332355286=:34790"
---1236089829-1988720646-1332355286=:34790
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
---
body
---
Dear : Friend
How are you and your family hope fine?, l am Benson Gomma from Congo republic now in TOGO LOME i have 820 thousand DOLLARS in my position that i want to send to you in your country so that you can
use the money to invest for me in any profitable business in your country under your care, because I have lost some of my money through all those diplomat, so now i am sending you this money from Togo Lome western union with a powerful barrister that is helping all beneficiary to transfer their funds now from Togo Lome i want you now to send to me a receivers name so that we can start sending you the
funds gradually.
You can send five or EIGHT names to my email now, my number is 00233205701579
Best Regards,
YOUR FRIEND FROM CONGO
BENSON GOMMA
---
end of email
---
note no picture was attached to the email
additionally I did a search at Facebook for [email protected] and reply to [email protected] . It lead to a profile using a stolen picture of Will Smith, the person's name is Clinton Martins - male
---
end of information
---
see you
mdgposter
I have received this 419 scam from BENSON GOMMA - from [email protected] , reply to [email protected] . I did a header analysis for the email at IPTrackeronline of the email and here is the information it gave me: IP Address - 80.87.92.59 - Provider - One Touch Gprs Network - City - Accra - Country - Ghana - Latitude 5.55 - Longitude -0.2167
---
end of information
---
---
header
---
Delivered-To: ---@---
Received: by 10.52.36.78 with SMTP id o14csp13233vdj;
Wed, 21 Mar 2012 11:41:28 -0700 (PDT)
Received: by 10.216.131.98 with SMTP id l76mr2885909wei.62.1332355287577;
Wed, 21 Mar 2012 11:41:27 -0700 (PDT)
Return-Path: <[email protected]>
Received: from nm7-vm0.bullet.mail.ird.yahoo.com
(nm7-vm0.bullet.mail.ird.yahoo.com. [77.238.189.222])
by mx.google.com with SMTP id y19si2719051weq.65.2012.03.21.11.41.26;
Wed, 21 Mar 2012 11:41:27 -0700 (PDT)
Received-SPF: neutral (google.com: 77.238.189.222 is neither permitted
nor denied by best guess record for domain of [email protected])
client-ip=77.238.189.222;
Authentication-Results: mx.google.com; spf=neutral (google.com:
77.238.189.222 is neither permitted nor denied by best guess record
for domain of [email protected]) [email protected];
dkim=pass (test mode) [email protected]
Received: from [77.238.189.48] by nm7.bullet.mail.ird.yahoo.com with
NNFMP; 21 Mar 2012 18:41:26 -0000
Received: from [212.82.108.250] by tm1.bullet.mail.ird.yahoo.com with
NNFMP; 21 Mar 2012 18:41:26 -0000
Received: from [127.0.0.1] by omp1015.mail.ird.yahoo.com with NNFMP;
21 Mar 2012 18:41:26 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 39197 invoked by uid 60001); 21 Mar 2012 18:41:26 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk;
s=s1024; t=1332355286;
bh=da5Uh9VYlLmL1XbEHmraq3lsVwaffo7ExHN0O7Yw9t0=;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=mzzkykVb0FzJcfZ/wUoOhHyXj7DzBlozemfCaneU891yOW/v/UPGj5KY3W7AJCCYSDowg7x6DYQy5yUBV2kNWyldWapHJLlqqiWb5lK8Q37I1PDZK9fdrIdBc85aiGUwmqWXzcLIGco0pirLVEowp2tvrgdpFZYgHf4Zvuhb5Qc=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.dk;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=mKeRnFMWoMi2F39FPuHFFqs5YRnA6CPoJ8jUMKixevnI37pheyDgjP4+Tbcb5znICxJRrfQemelQP6LtwyHcNP5//vytDcXeD4HhjDsjsqbhenuNaSuahvM884h69ghPJp3jnwP2iLX7bFQSB9PPYO05wfA1WhzmjFtdUrXabJQ=;
X-YMail-OSG: 5WeJ044VM1kNYmGhzXYGQqs0LvW9PWK4WlxPU_F_ufHVdtk
wxNWhYIcxo3bTtS7AwgujeNqX1wg2awmZP0wBHMxk8IpbbnNMDCSdRD0g9MJ
z.a.ZlHeafjMQGVbMbf2eE44bVPvnXLDVGq2x2G0AkPmBMae1pxP085FAAjG
NSRMV5iWAdKIMYrrDSa4W0Bkrhryf_FPWwtwOHUqGyvPcBuKaqkgEhEBw2ry
ya7T6o9.h2Z5aXLsYo9WGa9p23Gn0uVX9nISQsToYXvYTRyj3dHDg3XSJQR8
zx7KtBafHTrQVITonb2aejgqw0gxhaYqFq.AUkof1791sbP_Bmxb5JpG2GVO
Rvb.dFW12kfi5c8bGq5jZ_1m_g5YIiS1O.88zmmLyRKyOu.aW2sImpPp0bab
XwkOaG2jr.j31nBs7_D7ttkfR53rlN_yamBrD88z2wS82KOEMZdNtAwi3CzF
rGZDA
Received: from [80.87.92.59] by web171405.mail.ir2.yahoo.com via HTTP;
Wed, 21 Mar 2012 18:41:26 GMT
X-Mailer: YahooMailClassic/15.0.5 YahooMailWebService/0.8.117.340979
Message-ID: <[email protected]>
Date: Wed, 21 Mar 2012 18:41:26 +0000 (GMT)
From: WESTERN UNION MONEY TRANSFER <[email protected]>
Reply-To: [email protected]
Subject: WESTERN UNION MONEY TRANSFER LOME TOGO AFRICA
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="-1236089829-1988720646-1332355286=:34790"
---1236089829-1988720646-1332355286=:34790
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
---
body
---
Dear : Friend
How are you and your family hope fine?, l am Benson Gomma from Congo republic now in TOGO LOME i have 820 thousand DOLLARS in my position that i want to send to you in your country so that you can
use the money to invest for me in any profitable business in your country under your care, because I have lost some of my money through all those diplomat, so now i am sending you this money from Togo Lome western union with a powerful barrister that is helping all beneficiary to transfer their funds now from Togo Lome i want you now to send to me a receivers name so that we can start sending you the
funds gradually.
You can send five or EIGHT names to my email now, my number is 00233205701579
Best Regards,
YOUR FRIEND FROM CONGO
BENSON GOMMA
---
end of email
---
note no picture was attached to the email
additionally I did a search at Facebook for [email protected] and reply to [email protected] . It lead to a profile using a stolen picture of Will Smith, the person's name is Clinton Martins - male
---
end of information
---
see you
mdgposter
